@oxygen-agent/cli 1.1011.326 → 1.1011.405

package/node_modules/@oxygen/shared/dist/bounded-read-result.d.ts

@@ -0,0 +1,4 @@
+/** Complete native receipt sizing for optional bounded JSON reads. Binary
+ * windows have their own outer-envelope budget and must not use this helper.
+ * The surface is a formatting hint, never authorization or spend authority. */
+export declare function boundedReadResultFits(command: string, data: Record<string, unknown>, maxChars: number | undefined, surface: string | null | undefined): boolean;

package/node_modules/@oxygen/shared/dist/bounded-read-result.js

@@ -0,0 +1,25 @@
+import { success } from "./cli-result.js";
+import { OXYGEN_VERSION } from "./version.js";
+/** Complete native receipt sizing for optional bounded JSON reads. Binary
+ * windows have their own outer-envelope budget and must not use this helper.
+ * The surface is a formatting hint, never authorization or spend authority. */
+export function boundedReadResultFits(command, data, maxChars, surface) {
+    // Preserve legacy unbounded native/CLI reads when no window was requested.
+    if (maxChars === undefined)
+        return true;
+    if (JSON.stringify(success(command, data)).length > maxChars)
+        return false;
+    // MCP jsonResult writes compact data to text and adds the version to its
+    // structured result. The unattended worker returns both; Strands serializes
+    // that complete host object before its 6k cap. Escapes in text count twice.
+    if (surface === "agent") {
+        const host = {
+            ok: true,
+            text: JSON.stringify(data),
+            structured: { ...data, oxygen_version: OXYGEN_VERSION },
+        };
+        if (JSON.stringify(host).length > 6_000)
+            return false;
+    }
+    return true;
+}

package/node_modules/@oxygen/shared/dist/capability-discovery.d.ts

@@ -97,6 +97,36 @@ export declare const CAPABILITY_ROUTE_MCP_CALLS: {
         tool: string;
         arguments: {};
     };
+    connectedAppEvents: () => {
+        tool: string;
+        arguments: {
+            connection: string;
+        };
+    };
+    workspacePagesList: () => {
+        tool: string;
+        arguments: {};
+    };
+    functionsList: () => {
+        tool: string;
+        arguments: {
+            operation: string;
+        };
+    };
+    functionsDescribe: () => {
+        tool: string;
+        arguments: {
+            operation: string;
+            function: string;
+        };
+    };
+    functionsRuns: () => {
+        tool: string;
+        arguments: {
+            operation: string;
+            function: string;
+        };
+    };
     sequenceSendingSchedule: () => {
         tool: string;
         arguments: {

package/node_modules/@oxygen/shared/dist/capability-discovery.js

@@ -22,16 +22,24 @@ export const OXYGEN_CAPABILITY_ROUTES = [
         id: "workspace-access",
         layer: "Control",
         primitive: null,
-        owns: "Authentication, CLI identities, API keys, sessions, organizations, active-workspace selection, and connected apps (ChatGPT, Claude, Codex…) with the default workspace each one works in.",
-        notFor: "Workspace GTM data, provider credentials, or execution inside a primitive.",
-        execution: "Resolve identity and select the hosted workspace before operating its primitives. Each app connected with OAuth keeps its own default workspace: `connectors list` shows them and `connectors set` changes one app only; orgs select changes only the app or CLI that calls it.",
+        owns: "Authentication, CLI identities, API keys, sessions, organizations, active-workspace selection, connected apps (ChatGPT, Claude, Codex…) with the default workspace each one works in and the OXYGEN events each one is subscribed to, and which web-app sidebar pages the workspace hides for every member (Settings → Customise).",
+        notFor: "Workspace GTM data, provider credentials, execution inside a primitive, or access control: a hidden sidebar page stays reachable by URL.",
+        execution: "Resolve identity and select the hosted workspace before operating its primitives. Each app connected with OAuth keeps its own default workspace: `connectors list` shows them and `connectors set` changes one app only; orgs select changes only the app or CLI that calls it. What OXYGEN sends an app (its event subscriptions, such as ChatGPT watching for classified replies, and every delivery with its outcome, never content): `connectors events get <app>`; `connectors events revoke <app> --subscription <id|all>` stops them for good. While an app holds event subscriptions, its paid calls are capped by its rolling 24-hour credit ceiling: the plan default, or `connectors set <app> --credit-ceiling <credits>` (above the default also needs --approve-above-default); `connectors get <app>` shows the ceiling and what it spent. Sidebar pages (Settings → Customise): `settings pages list` (oxygen_settings_pages_get) shows each page and whether it is hidden; an admin or owner hides or shows pages for everyone with `settings pages set --hide <pages>`, `--show <pages>` or `--show-all` (oxygen_settings_pages_update). Nothing is deleted.",
         posture: "mixed",
-        gatewayTools: ["oxygen_whoami", "oxygen_orgs_list", "oxygen_orgs_select", "oxygen_connector_list", "oxygen_connector_update"],
-        gatewayCommands: ["whoami", "orgs list", "orgs select", "connectors list", "connectors set"],
+        gatewayTools: [
+            "oxygen_whoami",
+            "oxygen_orgs_list",
+            "oxygen_orgs_select",
+            "oxygen_connector_list",
+            "oxygen_connector_update",
+            "oxygen_connector_events_get",
+            "oxygen_connector_events_revoke",
+        ],
+        gatewayCommands: ["whoami", "orgs list", "orgs select", "connectors list", "connectors set", "connectors events get", "connectors events revoke"],
         skills: ["oxygen-quickstart"],
         // `mcp`: the host-driven MCP Events routes an OAuth connection's subscriptions go through (ADR 0030 §2).
         endpointSections: ["api-keys", "auth", "connectors", "login-requests", "mcp", "orgs", "sessions", "settings", "whoami"],
-        intentTerms: ["login", "authenticate", "identity", "who am i", "workspace", "organization", "org", "api key", "session", "switch workspace", "connected app", "connected apps", "default workspace"],
+        intentTerms: ["login", "authenticate", "identity", "who am i", "workspace", "organization", "org", "api key", "session", "switch workspace", "connected app", "connected apps", "default workspace", "sidebar", "navigation", "hidden pages", "page visibility", "workspace settings", "organisation settings", "organization settings"],
     },
     {
         id: "discovery-and-skills",
@@ -214,7 +222,7 @@ export const OXYGEN_CAPABILITY_ROUTES = [
         layer: "Data",
         primitive: "tables",
         owns: "Typed working datasets, rows, formulas, AI/tool/waterfall columns, reusable Functions with isolated drafts and published versions, cell state, projects, and run provenance.",
-        notFor: "Canonical CRM truth, message cadence, or an off-platform spreadsheet runtime.",
+        notFor: "Canonical CRM truth: use Records via oxygen_crm_objects_list, oxygen_crm_record_get or oxygen_crm_record_search. Not message cadence or an off-platform spreadsheet runtime.",
         execution: "Create and run work in hosted OXYGEN Tables; validate a small sample before bounded paid runs. To see what a table's own columns can be enriched with and what each costs per row before adding anything, run `tools search --for-table <table>` (MCP oxygen_tools_search with for_table): free, it returns priced suggestions with the exact add command. For standard person or company enrichment, `columns add <table> --preset person_enrich|company_enrich` (MCP oxygen_columns_add with preset) adds the maintained bundle in one call before any hand-built tool column. Person questions over that bundle's profile payload (skill set, grad school, location, job fit, current company) and person appearance research (events, keynotes, podcasts, GitHub profile) are `columns catalog --category people` templates, added with `columns add <table> --prompt-key <key> --input <name>=<column>`. For a company fact OXYGEN already knows how to research (founders, parent company, funding, cloud provider, offers demos, industry, NAICS, HQ, LinkedIn/Crunchbase page lookups) or a page extraction, `columns catalog` lists the ready-made template and `columns add <table> --prompt-key <key> --input <name>=<column>` (MCP oxygen_columns_add with prompt_key) adds it with no prompt to write. For ICP tiers, read the saved profile with `knowledge page get icp`, then add native Classify Score: `columns add <table> --label 'ICP fit' --score 'low,medium,high' --prompt '<ICP criteria using {{evidence_column}} tokens>' --grounding workspace`. It costs 0.075 credits/row; preview with `columns run --dry-run`. `columns catalog --family classification --json` puts Classify in `data.native`; `data.entries` holds separate prompt templates that can cost more.",
         posture: "mixed",
         gatewayTools: ["oxygen_tables_create", "oxygen_tools_search", "oxygen_columns_add", "oxygen_columns_catalog", "oxygen_enrich_column_preview", "oxygen_tables_link_bulk", "oxygen_callables_manage"],
@@ -260,7 +268,7 @@ export const OXYGEN_CAPABILITY_ROUTES = [
         primitive: "posts",
         owns: "Broadcast post artifacts, author/channel identity, provider IDs, comments, reactions, and performance history.",
         notFor: "One-to-one conversations, delivery scheduling, or generic public LinkedIn provider search.",
-        execution: "Read or create the hosted Post artifact; Publishing owns scheduled delivery.",
+        execution: "Read hosted posts and their comments or performance. For queued scheduling and review use Publishing. oxygen_posts_create is a direct LinkedIn publish: preview first, then approved=true publishes immediately outside the Publishing approval queue.",
         posture: "workspace_write",
         gatewayTools: ["oxygen_publishing_comments", "oxygen_publishing_analytics", "oxygen_posts_get", "oxygen_posts_create"],
         gatewayCommands: ["publishing comments list", "publishing analytics summary", "posts get", "posts create"],
@@ -368,7 +376,7 @@ export const OXYGEN_CAPABILITY_ROUTES = [
         primitive: "publishing",
         owns: "Approval-gated scheduling, dispatch, retries, review, and attempt provenance for broadcast Posts.",
         notFor: "One-to-one messaging, outreach campaigns, or general automation.",
-        execution: "Create and schedule on OXYGEN; explicit approval releases the hosted publisher.",
+        execution: "Create a scheduled Publishing post, review it, then explicitly approve to release the hosted publisher. oxygen_posts_create instead publishes directly to LinkedIn after its own preview and approved=true; it does not enter this queue.",
         posture: "external_write",
         gatewayTools: ["oxygen_publishing_posts_create", "oxygen_publishing_posts_list", "oxygen_publishing_posts_approve", "oxygen_ugc_get"],
         gatewayCommands: ["publishing posts create", "publishing posts list", "publishing posts approve", "ugc programs list", "ugc programs duplicate", "ugc programs archive"],
@@ -429,8 +437,8 @@ export const OXYGEN_CAPABILITY_ROUTES = [
         notFor: "Enriching rows that already exist; use native table columns and waterfalls. Not for raw provider selection when a native gateway exists.",
         execution: "Plan or preview the hosted search, then run with an explicit scope and credit ceiling; hydrate one provider descriptor only when needed.",
         posture: "paid_read",
-        gatewayTools: ["oxygen_search_plan", "oxygen_sourcing_plan", "oxygen_find_company", "oxygen_tools_search"],
-        gatewayCommands: ["search plan", "sourcing plan", "find company", "tools search"],
+        gatewayTools: ["oxygen_companies_search_plan", "oxygen_people_search_plan", "oxygen_tools_search", "oxygen_find_company"],
+        gatewayCommands: ["companies search plan", "people search plan", "tools search", "find company"],
         skills: ["oxygen-gtm"],
         endpointSections: ["companies", "find", "lead-sourcing", "people", "search", "sourcing", "tools", "verify"],
         intentTerms: ["find companies", "find people", "source leads", "build a list", "tam", "prospect", "provider", "tool catalog", "find email", "find phone", "local businesses", "local business", "google maps", "storefronts"],
@@ -456,13 +464,13 @@ export const OXYGEN_CAPABILITY_ROUTES = [
         primitive: null,
         owns: "Connected SaaS accounts, OAuth/BYOK readiness, custom integration manifests, and provider actions that lack a native primitive gateway.",
         notFor: "Recreating native Tables, Messages, Sequences, Publishing, or Workflows through a generic provider action.",
-        execution: "Inspect readiness, then connect or call the hosted integration under its exact write/spend gate.",
+        execution: "For provider API keys, inspect the connect schema and omit credentials for setup requirements with no provider call or storage. Submitting credentials creates or replaces the connection immediately. Cloudflare account selection uses top-level account_id; BounceBan validates before storage. Provider actions keep their exact write/spend gate.",
         posture: "mixed",
         gatewayTools: ["oxygen_integrations_list", "oxygen_integrations_connect", "oxygen_integrations_list_actions"],
         gatewayCommands: ["integrations list", "integrations connect", "custom-integrations list"],
         skills: ["oxygen-gtm"],
         endpointSections: ["custom-integrations", "integrations"],
-        intentTerms: ["integration", "integrations", "connect provider", "oauth", "byok", "custom http", "custom integration", "connection readiness"],
+        intentTerms: ["integration", "integrations", "connect provider", "oauth", "byok", "bring your own key", "provider key", "provider connection", "custom http", "custom integration", "connection readiness"],
     },
     {
         id: "sending-infrastructure",
@@ -567,7 +575,9 @@ export function inferCapabilityRoute(query) {
     // The card's own recommendations are a pinned contract (tool order, no
     // exact command on plain enrichment asks); the catalogue path travels
     // beside them in `catalogIntent`, never inside them.
-    const catalogue = catalogRow && CATALOGUE_CARD_IDS.has(card.id) ? catalogueRecommendations(catalogRow, card) : null;
+    // Sourcing filters belong to the planner, not per-company enrichment.
+    const catalogue = catalogRow && CATALOGUE_CARD_IDS.has(card.id) && !isCompanySourcingIntent(normalized)
+        ? catalogueRecommendations(catalogRow, card) : null;
     return {
         card: routeCardFor(card, normalized),
         recommendedTools: recommendations.tools,
@@ -765,8 +775,26 @@ function routeCardFor(card, query) {
         return { ...card, ...UGC_ROUTE_VIEW };
     if (card.id === "knowledge-graph" && isWorkspaceVoiceIntent(query))
         return { ...card, execution: WORKSPACE_VOICE_EXECUTION };
+    if (card.primitive === "workflows" && isRecurringCompanyMonitoringIntent(query))
+        return {
+            ...card,
+            execution: "Workflows own recurring execution. Inspect oxygen_blueprints_list, describe and preflight before authoring; a matching Blueprint is not guaranteed. Retain canonical company identities and facts in Records, and time-stamped observations in Signals. Use oxygen_crm_objects_list and oxygen_signals_list to inspect those destinations. Do not apply or enable automation before the required approval and credit scope.",
+        };
+    if (card.primitive === "tables" && isTableCapacityReadIntent(query))
+        return {
+            ...card,
+            execution: "Read oxygen_limits_show for Tables capacity, largest_table and largest_table_rows. Use that returned table reference with oxygen_tables_query and a small limit to inspect sample rows; no enrichment run is needed.",
+        };
+    if (card.primitive === "tables" && isFunctionIntent(query))
+        return {
+            ...card,
+            execution: "List, describe or inspect Function runs without executing. Draft edits are isolated; publish requires the inspected draft hash and changes future invocations. Bind adds a caller column for free; columns run previews cost before a bounded approved run. MCP uses the mixed-effect oxygen_callables_manage through oxygen_capabilities_call, including its read operations.",
+        };
     return card;
 }
+function isFunctionIntent(query) {
+    return /\b(functions?|callables?)\b/.test(query) && !/\bformula functions?\b/.test(query);
+}
 function isLinkedInKeywordPostIntent(query) {
     return /\blinkedin\b/.test(query)
         && /\b(posts?|posting)\b/.test(query)
@@ -829,6 +857,11 @@ export const SEQUENCE_UNSUBSCRIBE_COMMAND = "oxygen sequences update <sequence>
  */
 export const CAPABILITY_ROUTE_MCP_CALLS = {
     connectedAppsList: () => ({ tool: "oxygen_connector_list", arguments: {} }),
+    connectedAppEvents: () => ({ tool: "oxygen_connector_events_get", arguments: { connection: "<app>" } }),
+    workspacePagesList: () => ({ tool: "oxygen_settings_pages_get", arguments: {} }),
+    functionsList: () => ({ tool: "oxygen_callables_manage", arguments: { operation: "list_functions" } }),
+    functionsDescribe: () => ({ tool: "oxygen_callables_manage", arguments: { operation: "describe", function: "<function>" } }),
+    functionsRuns: () => ({ tool: "oxygen_callables_manage", arguments: { operation: "runs", function: "<function>" } }),
     sequenceSendingSchedule: () => ({
         tool: "oxygen_sequences_update",
         arguments: { sequence: "<sequence>", sending_schedule: { timezone: "<IANA zone>", days: [1, 2, 3, 4, 5], start: "09:00", end: "17:00" } },
@@ -939,6 +972,12 @@ function isOpenLinkedInRequestsIntent(query) {
 function isConnectedAppsIntent(query) {
     if (/\bconnected apps?\b/.test(query))
         return true;
+    // The command group's own noun. Tables' "connect" term prefix-matches it, so
+    // `commands search connectors` returned no `connectors` command at all
+    // (CLI acceptance judge, 2026-09-30). Bare noun only: a provider's connector
+    // ("hubspot connector") is never claimed here.
+    if (/^(?:(?:list|show|see|my|our|all|the|mcp|app|apps|ai|oauth)\s+)*connectors?$/.test(query))
+        return true;
     const connection = /\b(oauth (?:apps?|clients?|connections?|grants?)|mcp (?:clients?|connections?|connectors?))\b/.test(query);
     const app = connection || /\b(chatgpt|claude|codex|ai (?:apps?|assistants?|clients?))\b/.test(query);
     if (!app)
@@ -949,9 +988,100 @@ function isConnectedAppsIntent(query) {
         && /\b(default|always|without asking|which|per (?:app|connection|client))\b/.test(query);
     return workspaceChoice || (connection && /\b(list|show|see|which|my)\b/.test(query));
 }
+/**
+ * What OXYGEN sends a connected app (MCP Events, ADR 0030 §10): "what is
+ * ChatGPT subscribed to", "what did OXYGEN send it", "stop it". Both blind
+ * baselines of 2026-09-30 (OXP-11.5.22) searched exactly these words — connector
+ * event subscriptions, deliveries, webhook, notifications, push — and were
+ * handed the inbound provider-webhook tools instead. A billing subscription or a
+ * provider's events ("hubspot webhook") never matches.
+ */
+function isConnectedAppEventsIntent(query) {
+    if (/\b(plans?|billing|invoices?|credits?|upgrade|downgrade|stripe|pricing|price)\b/.test(query))
+        return false;
+    if (/\b(hubspot|slack|gmail|calendly|cal\.?com|salesforce|pipedrive|zapier|integrations?|providers?|workflows?|triggers?)\b/.test(query))
+        return false;
+    const app = /\b(chatgpt|claude|codex|connected apps?|connectors?|connections?|apps?|ai (?:assistants?|clients?)|mcp)\b/.test(query);
+    const events = /\b(subscri\w*|events?|webhooks?|notif\w*|push(?:es|ed)?|deliver(?:y|ies|ed)?|sen[dt]s?)\b/.test(query);
+    if (!app || !events)
+        return false;
+    // "send a LinkedIn message from my app" is outreach, not what OXYGEN sends the app.
+    return !/\b(linkedin|email|emails|whatsapp|message|messages|sequence|sequences|campaign|outreach|post|posts)\b/.test(query);
+}
+/**
+ * What a connected app may spend (ADR 0030 §11): "how much can ChatGPT spend on
+ * its own in a day", "cap it at 300 credits". Both blind baselines of
+ * 2026-09-30 (OXP-11.5.23) searched for a per-connection daily credit limit and
+ * found only workspace budgets. A sender's or channel's daily limit is not this.
+ */
+function isConnectedAppSpendIntent(query) {
+    const app = /\b(chatgpt|claude|codex|connected apps?|connectors?|connections?|per[- ]connection|mcp)\b/.test(query);
+    const spend = /\b(spend\w*|credits?|budgets?|ceilings?|caps?|capped|limits?)\b/.test(query);
+    if (!app || !spend)
+        return false;
+    return !/\b(linkedin|senders?|mailbox(?:es)?|sequences?|email|emails|whatsapp|warm\s?up|invites?|rate)\b/.test(query);
+}
+/**
+ * The web app's sidebar pages a workspace hides for every member (Settings →
+ * Customise, `settings pages`). Both blind baselines of 2026-09-30 searched
+ * "hide navigation pages sidebar", "customise pages", "pages visibility", "nav
+ * items" and "workspace navigation hidden pages unibox publishing workflows",
+ * and were routed to workspace access, Publishing or nowhere. A sidebar or
+ * navigation noun is enough on its own; "pages" plus a hide/show word is not
+ * when the pages are wiki, LinkedIn, web, PDF or result pages.
+ */
+function isWorkspacePagesIntent(query) {
+    // "Sales Nav" is LinkedIn Sales Navigator.
+    if (/\bsales ?nav/.test(query))
+        return false;
+    if (/\b(side ?bars?|side ?nav\w*|side ?menus?|nav ?bars?|nav|navigation|left (?:menu|nav\w*|rail|panel)|main menu)\b/.test(query))
+        return true;
+    // "Menu items" alone is as likely a restaurant's menu as the app's.
+    if (/\bmenu items?\b/.test(query) && /\b(hid(?:e|es|den|ing)|unhide|show(?:s|n|ing)?|visib\w*|customi[sz]\w*)\b/.test(query))
+        return true;
+    if (/\bcustomi[sz](?:e|es|ed|ing|ation)\b/.test(query) && /\b(pages?|menus?)\b/.test(query))
+        return true;
+    // The web page's own name: Settings → Customise.
+    if (/^customi[sz]e$|\bsettings?\W{1,5}customi[sz]e\b/.test(query))
+        return true;
+    if (/\b(wiki|linkedin|compan(?:y|ies)|landing|web ?pages?|websites?|carousels?|pdfs?|paginat\w*|next page|per page|page size|results?|dashboards?|rows?|columns?)\b/.test(query))
+        return false;
+    return /\bpages?\b/.test(query) && /\b(hid(?:e|es|den|ing)|unhide|show(?:s|n|ing)?|visib\w*|invisible)\b/.test(query);
+}
+/**
+ * "Organisation settings" (the web's own name for /settings), "workspace
+ * settings", "org settings": the CLI and MCP half of those settings is the
+ * sidebar pages pair. A settings ask that names its own owner (billing, API
+ * keys, members, a connected app, a provider) keeps that owner.
+ */
+function isWorkspaceSettingsIntent(query) {
+    if (/\b(billing|plans?|credits?|invoices?|api keys?|members?|invit\w*|seats?|roles?|connected apps?|connectors?|chatgpt|claude|codex|integrations?|providers?|mailbox(?:es)?|senders?|sequences?|linkedin)\b/.test(query))
+        return false;
+    return /\b(workspace|organi[sz]ations?|orgs?|team)\s+settings?\b/.test(query)
+        || /\bsettings?\s+(?:for|of)\s+(?:the |my |our |this )?(workspace|organi[sz]ation|org|team)\b/.test(query);
+}
+function isTableCapacityReadIntent(query) {
+    if (/\b(monitor|watch|workflow|automate|automation|increase|resize|upgrade)\b/.test(query))
+        return false;
+    return /\b(largest|biggest) tables?\b/.test(query)
+        || /\btables?\b.{0,30}\b(sizes?|row counts?)\b/.test(query)
+        || /\b(sizes?|row counts?)\b.{0,30}\btables?\b/.test(query);
+}
+function isCompanySourcingIntent(query) {
+    if (/\b(enrich\w*|existing|these|those|rows?|columns?|verify|verification|emails?|phones?|contacts?|people|persons?)\b/.test(query))
+        return false;
+    return /\b(companies|businesses|firms|company search|company sourcing)\b/.test(query)
+        && /\b(search|plan|find|source|sourcing|discover|build|tam|prospect)\b/.test(query);
+}
 function explicitCapabilityIntent(query) {
-    if (isConnectedAppsIntent(query))
+    if (isConnectedAppsIntent(query) || isConnectedAppEventsIntent(query) || isConnectedAppSpendIntent(query)) {
+        return ROUTE_BY_ID.get("workspace-access") ?? null;
+    }
+    // Ahead of every primitive rule: the pages a workspace hides are NAMED after
+    // primitives ("hide Publishing and Workflows"), which those rules would claim.
+    if (isWorkspacePagesIntent(query) || isWorkspaceSettingsIntent(query)) {
         return ROUTE_BY_ID.get("workspace-access") ?? null;
+    }
     if (/\b(infographic|graphic designer|render html|carousel pages|visual design|gtm flow image)\b/.test(query))
         return ROUTE_BY_ID.get("visual-rendering") ?? null;
     if (isUgcIntent(query))
@@ -962,6 +1092,8 @@ function explicitCapabilityIntent(query) {
         return ROUTE_BY_ID.get("connected-linkedin") ?? null;
     if (isCompanyPageFollowersIntent(query))
         return ROUTE_BY_PRIMITIVE.get("tables") ?? null;
+    if (isTableCapacityReadIntent(query))
+        return ROUTE_BY_PRIMITIVE.get("tables") ?? null;
     // A whole-motion ask ("set up inbound-led outbound for my posts") is a
     // Recipe kit + playbook, not the connected-LinkedIn signals card that the
     // "my LinkedIn … engagers" rule below would otherwise claim. Resolve it first.
@@ -998,6 +1130,10 @@ function explicitCapabilityIntent(query) {
     // claimed "a first comment on my LinkedIn post" and "... automatically".
     if (isFirstCommentIntent(query))
         return ROUTE_BY_PRIMITIVE.get("publishing") ?? null;
+    // Publish/approve are writes even when the noun is a public LinkedIn post.
+    // The 2026-09-30 connector baseline offered the cookieless read owner first.
+    if (isPublishingPostIntent(query))
+        return ROUTE_BY_PRIMITIVE.get("publishing") ?? null;
     if (isLinkedInKeywordPostIntent(query))
         return ROUTE_BY_ID.get("signals") ?? null;
     // Ahead of the workflow rule, whose "retry" would claim it. Why a post failed and how to get it out is Publishing's attempt ledger and
@@ -1014,6 +1150,8 @@ function explicitCapabilityIntent(query) {
         return ROUTE_BY_PRIMITIVE.get("sequences") ?? null;
     if (isHostedWorkflowIntent(query))
         return ROUTE_BY_PRIMITIVE.get("workflows") ?? null;
+    if (isCompanySourcingIntent(query))
+        return ROUTE_BY_ID.get("sourcing-and-provider-tools") ?? null;
     if (isOwnedPostCommentIntent(query))
         return ROUTE_BY_PRIMITIVE.get("posts") ?? null;
     // Asking a second party to decide is Collaboration even when the thing being
@@ -1202,6 +1340,12 @@ export const LOCAL_BUSINESS_SCRAPE_COMMAND = `oxygen companies search preview --
 function isLocalBusinessIntent(query) {
     return /\b(local business(?:es)?|google maps|maps listings?|storefronts?|near me|(?:dental|medical|law|veterinary) (?:practices?|offices?|clinics?)|dentists?|restaurants?|cafes?|coffee shops?|gyms?|salons?|plumbers?|electricians?|contractors?|hvac|auto repair|real estate agents?|businesses (?:in|near|around) [a-z])\b/.test(query);
 }
+function isPublishingPostIntent(query) {
+    return /\b(posts?|publishing|content calendar)\b/.test(query)
+        && /\b(publish|publishing|schedule|scheduled|approve|approval)\b/.test(query)
+        && !/\b(workflow|automation|automate|webhook|cron)\b/.test(query)
+        && !(/\b(find|search|scrape|research)\b/.test(query) && /\b(about|mention|containing)\b/.test(query));
+}
 function recommendationsFor(card, query) {
     // A program's lifecycle and a creator's voice are UGC work the Publishing card
     // also claims ("archive program", "creator voice"); before these they got the
@@ -1261,6 +1405,22 @@ function recommendationsFor(card, query) {
             exactMcpCall: CAPABILITY_ROUTE_MCP_CALLS.localBusinessScrape(),
         };
     }
+    if (card.id === "workspace-access" && isConnectedAppSpendIntent(query)) {
+        return {
+            tools: ["oxygen_connector_list", "oxygen_connector_update", "oxygen_limits_show"],
+            commands: ["connectors get", "connectors set", "limits show"],
+            exactCommand: "oxygen connectors get <app> --json",
+            exactMcpCall: CAPABILITY_ROUTE_MCP_CALLS.connectedAppsList(),
+        };
+    }
+    if (card.id === "workspace-access" && isConnectedAppEventsIntent(query)) {
+        return {
+            tools: ["oxygen_connector_events_get", "oxygen_connector_events_revoke", "oxygen_connector_list"],
+            commands: ["connectors events get", "connectors events revoke", "connectors list"],
+            exactCommand: "oxygen connectors events get <app> --json",
+            exactMcpCall: CAPABILITY_ROUTE_MCP_CALLS.connectedAppEvents(),
+        };
+    }
     if (card.id === "workspace-access" && isConnectedAppsIntent(query)) {
         return {
             tools: ["oxygen_connector_list", "oxygen_connector_update"],
@@ -1269,6 +1429,43 @@ function recommendationsFor(card, query) {
             exactMcpCall: CAPABILITY_ROUTE_MCP_CALLS.connectedAppsList(),
         };
     }
+    if (card.id === "workspace-access" && isWorkspacePagesIntent(query)) {
+        return {
+            tools: ["oxygen_settings_pages_get", "oxygen_settings_pages_update"],
+            commands: ["settings pages list", "settings pages set"],
+            exactCommand: "oxygen settings pages list --json",
+            exactMcpCall: CAPABILITY_ROUTE_MCP_CALLS.workspacePagesList(),
+        };
+    }
+    // A general settings ask: the pages pair is the settings CLI and MCP can change.
+    if (card.id === "workspace-access" && isWorkspaceSettingsIntent(query)) {
+        return {
+            tools: ["oxygen_settings_pages_get", "oxygen_settings_pages_update", ...card.gatewayTools],
+            commands: ["settings pages list", "settings pages set", ...card.gatewayCommands],
+        };
+    }
+    // Contact enrichment keeps its own gateway even when the input mentions
+    // company names or domains; those words do not make it account sourcing.
+    if (card.id === "sourcing-and-provider-tools" && /\bfind (?:work )?emails?\b/.test(query))
+        return {
+            tools: ["oxygen_find_email", "oxygen_tools_search"], commands: ["find email", "tools search"],
+        };
+    if (card.id === "sourcing-and-provider-tools" && /\bfind (?:mobile )?phones?\b/.test(query))
+        return {
+            tools: ["oxygen_find_phone", "oxygen_tools_search"], commands: ["find phone", "tools search"],
+        };
+    if (card.id === "sourcing-and-provider-tools" && (isCompanySourcingIntent(query) || /\b(companies|company search|company sourcing)\b/.test(query))) {
+        return {
+            tools: ["oxygen_companies_search_plan", "oxygen_companies_search_preview", "oxygen_companies_search_run", ...(/\b(people|contacts)\b/.test(query) ? ["oxygen_people_search_plan"] : [])],
+            commands: ["companies search plan", "companies search preview", "companies search run", ...(/\b(people|contacts)\b/.test(query) ? ["people search plan"] : [])],
+        };
+    }
+    if (card.id === "sourcing-and-provider-tools" && /\b(people|contacts|personas?)\b/.test(query)) {
+        return {
+            tools: ["oxygen_people_search_plan", "oxygen_people_search_preview", "oxygen_people_search_run"],
+            commands: ["people search plan", "people search preview", "people search run"],
+        };
+    }
     if (card.id === "connected-linkedin" && isLinkedInAccountConnectIntent(query)) {
         return {
             tools: ["oxygen_senders_connect", "oxygen_senders_list", "oxygen_billing_commitments"],
@@ -1371,6 +1568,56 @@ function recommendationsFor(card, query) {
         };
     }
     if (card.primitive === "tables") {
+        if (isTableCapacityReadIntent(query))
+            return {
+                tools: ["oxygen_limits_show", "oxygen_tables_query", "oxygen_tables_describe"],
+                commands: ["limits show", "tables query", "tables describe"],
+                exactMcpCall: { tool: "oxygen_limits_show", arguments: {} },
+            };
+        if (isFunctionIntent(query)) {
+            if (/\b(?:list|show|read|see|my)\b.{0,30}\bfavou?rites?\b/.test(query))
+                return {
+                    tools: ["oxygen_callables_manage"], commands: ["functions list", "functions describe"],
+                    exactMcpCall: { tool: "oxygen_callables_manage", arguments: { operation: "list_functions", filter: "favorites" } },
+                };
+            if (/\b(runs|invocations?|history)\b/.test(query))
+                return {
+                    tools: ["oxygen_callables_manage"], commands: ["functions runs", "functions describe"],
+                    exactMcpCall: CAPABILITY_ROUTE_MCP_CALLS.functionsRuns(),
+                };
+            const functionMutation = [
+                [/\b(publish)\b/, "functions publish"],
+                [/\b(bind|attach)\b/, "functions bind"],
+                [/\b(rename)\b/, "functions rename"],
+                [/\b(delete|remove)\b/, "functions delete"],
+                [/\b(duplicate|copy)\b/, "functions duplicate"],
+                [/\b(unfavorite|unfavourite)\b/, "functions unfavorite"],
+                [/\b(favorite|favourite)\b/, "functions favorite"],
+                [/\b(enable|disable)\b/, /\bdisable\b/.test(query) ? "functions disable" : "functions enable"],
+                [/\b(create|save|edit)\b/, "functions draft"],
+            ];
+            const mutation = functionMutation.find(([pattern]) => pattern.test(query));
+            if (mutation)
+                return {
+                    tools: ["oxygen_callables_manage"],
+                    commands: [/\bcreate\b/.test(query) ? "functions list" : "functions describe", mutation[1]],
+                    exactMcpCall: /\bcreate\b/.test(query) ? CAPABILITY_ROUTE_MCP_CALLS.functionsList() : CAPABILITY_ROUTE_MCP_CALLS.functionsDescribe(),
+                };
+            if (/\b(run|execute|invoke)\b/.test(query))
+                return {
+                    tools: ["oxygen_callables_manage", "oxygen_columns_run"], commands: ["functions describe", "columns run"],
+                    exactMcpCall: CAPABILITY_ROUTE_MCP_CALLS.functionsDescribe(),
+                };
+            if (/\b(describe|inspect|inputs?|outputs?|steps?|caps?|version|details?)\b/.test(query))
+                return {
+                    tools: ["oxygen_callables_manage"], commands: ["functions describe", "functions runs"],
+                    exactMcpCall: CAPABILITY_ROUTE_MCP_CALLS.functionsDescribe(),
+                };
+            return {
+                tools: ["oxygen_callables_manage"], commands: ["functions list", "functions describe"],
+                exactMcpCall: { ...CAPABILITY_ROUTE_MCP_CALLS.functionsList(), ...(/\b(favorites|favourites)\b/.test(query) ? { arguments: { operation: "list_functions", filter: "favorites" } } : {}) },
+            };
+        }
         if (isLinkedInProfileWatcherIntent(query)) {
             return {
                 tools: ["oxygen_tables_watcher"],
@@ -1527,6 +1774,14 @@ function recommendationsFor(card, query) {
                 ],
             };
         }
+        // Inspect reusable bundles before authoring a new recurring monitor. This
+        // does not assume a matching seed exists; list/describe/preflight establish
+        // that. Existing run inspection still belongs to tail/list below.
+        if (/\b(monitor|monitoring|watch|watching)\b/.test(query) && !/\b(existing|status|failed|failure|logs?|tail|cancel|pause|resume|disable|enable)\b/.test(query))
+            return {
+                tools: ["oxygen_blueprints_list", "oxygen_blueprints_describe", "oxygen_blueprints_preflight", "oxygen_workflows_schema", "oxygen_workflows_lint"],
+                commands: ["blueprints list", "blueprints describe", "blueprints preflight", "workflows schema", "workflows lint"],
+            };
         if (/\b(workflow )?templates?\b/.test(query)) {
             return {
                 tools: ["oxygen_workflow_templates_search", "oxygen_workflow_templates_describe", "oxygen_workflow_templates_preflight", "oxygen_workflow_templates_apply"],
@@ -1781,7 +2036,8 @@ function isOwnedPostCommentIntent(query) {
     return owned || operatorWork;
 }
 function isHostedWorkflowIntent(query) {
-    const strongWorkflowLanguage = /\b(workflow|automation|automate|automatically|webhook|cron|event trigger|branching?|retr(?:y|ies)|orchestrat(?:e|ion)|scheduled job|deterministic graph)\b/.test(query);
+    const strongWorkflowLanguage = /\b(workflow|automation|automate|automatically|webhook|cron|event trigger|branching?|retr(?:y|ies)|orchestrat(?:e|ion)|scheduled job|deterministic graph)\b/.test(query)
+        || isRecurringCompanyMonitoringIntent(query);
     const cadenceLanguage = /\b(sequence|campaign|cadence|day\s*\d+|multi[ -]step|rotate senders?|sender rotation|stop on reply|until (?:they )?reply)\b/.test(query);
     const workflowMechanics = /\b(webhook|cron|event trigger|triggered by|branching?|retr(?:y|ies)|orchestrat(?:e|ion)|scheduled job|deterministic graph|automatically)\b/.test(query)
         || /\bwhen\b.{0,50}\b(signs? up|created|updated|changes?|happens?|received)\b/.test(query);
@@ -1794,6 +2050,11 @@ function isHostedWorkflowIntent(query) {
     return /\b(nightly|hourly|daily|weekly|every (?:monday|tuesday|wednesday|thursday|friday|saturday|sunday|day|night|week|month))\b/.test(query)
         || (/\bschedule(?:d)?\b/.test(query) && !/\bpost|content\b/.test(query));
 }
+function isRecurringCompanyMonitoringIntent(query) {
+    return /\b(companies|company|competitors?)\b/.test(query)
+        && /\b(monitor(?:ing)?|watch(?:ing|list)?|track(?:ing)?)\b/.test(query)
+        && /\b(recurring|periodic|repeat(?:ed|able)?|over time|new observations?)\b/.test(query);
+}
 function isPublicLinkedInRead(query) {
     if (!query.includes("linkedin"))
         return false;

package/node_modules/@oxygen/shared/dist/contracts/connectors.d.ts

@@ -2,12 +2,14 @@
  * `PATCH /api/cli/connectors/{connection}`: the settings one connected app
  * (an MCP OAuth client such as ChatGPT, Claude or Codex) keeps for itself.
  *
- * Today that is its default workspace: the workspace the app works in without
- * asking. It is the same per-connection choice `oxygen_orgs_select` makes from
- * inside the app, so either surface changes one setting and the latest choice
- * wins. The contract is the extension point for later per-connection settings
- * (a per-connection credit ceiling is planned, OXP-11.5.23): add the field here
- * and the route, the CLI flags and the MCP tool follow.
+ * Its default workspace: the workspace the app works in without asking. It is
+ * the same per-connection choice `oxygen_orgs_select` makes from inside the
+ * app, so either surface changes one setting and the latest choice wins.
+ *
+ * Its credit ceiling (ADR 0030 §11, OXP-11.5.23): the most credits the app may
+ * spend in any rolling 24 hours while it holds MCP event subscriptions. null
+ * restores the plan default; a value above that default needs
+ * approve_above_default, the posture Agent run and trigger ceilings use.
  */
 import type { OperationSpec } from "./operations.js";
 import { type Infer } from "./schema.js";
@@ -16,8 +18,32 @@ export declare const CONNECTOR_UPDATE_CONTRACT: import("./schema.js").ContractOb
         oneOf: [import("./schema.js").StringProperty, import("./schema.js").NullProperty];
         description?: string;
     };
+    readonly credit_ceiling: {
+        oneOf: [{
+            type: "integer";
+            description?: string;
+            minimum?: number;
+            maximum?: number;
+            "x-clamp"?: true;
+        }, import("./schema.js").NullProperty];
+        description?: string;
+    };
+    readonly approve_above_default: import("./schema.js").BooleanProperty;
 }, never>;
 export type ConnectorUpdate = Infer<typeof CONNECTOR_UPDATE_CONTRACT>;
 /** The route's path value for "the app making this request". */
 export declare const CURRENT_CONNECTOR_REF = "current";
 export declare const CONNECTOR_UPDATE_OPERATION: OperationSpec<typeof CONNECTOR_UPDATE_CONTRACT>;
+/**
+ * `POST /api/cli/connectors/{connection}/events/revoke`: stop one connected
+ * app's MCP event subscription, or every live one it holds (ADR 0030 §10;
+ * OXP-11.5.22). Destructive and lasting: the app cannot renew a subscription
+ * revoked here. The events/* protocol methods the app itself calls stay outside
+ * this contract; they are host-driven.
+ */
+export declare const CONNECTOR_EVENTS_REVOKE_CONTRACT: import("./schema.js").ContractObject<{
+    readonly subscription: import("./schema.js").StringProperty;
+    readonly workspace: import("./schema.js").StringProperty;
+}, "subscription">;
+export type ConnectorEventsRevoke = Infer<typeof CONNECTOR_EVENTS_REVOKE_CONTRACT>;
+export declare const CONNECTOR_EVENTS_REVOKE_OPERATION: OperationSpec<typeof CONNECTOR_EVENTS_REVOKE_CONTRACT>;