@oxygen-agent/cli 1.1011.326 → 1.1011.440

package/dist/index.js

@@ -1,3 +1,10 @@
+import { knowledgeIndexReadContract, knowledgePageReadContract } from "@oxygen/shared/contracts/knowledge-content-reads";
+import { DATABASE_ATTACH_CONTRACT, DATABASE_MIGRATE_CONTRACT, DATABASE_QUERY_CONTRACT } from "@oxygen/shared/contracts/database";
+import { DATABASE_QUERY_FLAG_OVERLAY } from "./database-query-flags.js";
+import { LINKEDIN_SENT_INVITES_QUERY_CONTRACT } from "@oxygen/shared/contracts/linkedin-invites-list";
+import { registerCrmSupportFlags, readCrmNoteEditFields, readCrmPhotoFields, readCrmFileLabel, buildCrmObjectsPath, buildCrmConnectionsPath } from "./crm-support-flags.js";
+import { addToolCatalogSearchWindowFlag, readToolCatalogSearchWindow } from "./tool-catalog-search-window.js";
+import { createToolCatalogDetailCommand } from "./tool-catalog-detail-command.js";
 import { execFileSync } from "node:child_process";
 import { createHash, randomUUID } from "node:crypto";
 import { closeSync, createReadStream, createWriteStream, existsSync, mkdirSync, mkdtempSync, openSync, readFileSync, readSync, renameSync, rmSync, statSync, unlinkSync, writeFileSync, } from "node:fs";
@@ -9,12 +16,14 @@ import { fileURLToPath, pathToFileURL } from "node:url";
 import { Command, CommanderError, Option } from "commander";
 import { registerUgcCommands } from "./ugc-commands.js";
 import { registerConnectorsCommands } from "./connectors-commands.js";
+import { registerSettingsCommands } from "./settings-commands.js";
+import { registerCustomerOperationCommands } from "./customer-operation-commands.js";
 import { registerKnowledgeRepositoryCommands } from "./knowledge-repository-commands.js";
 import { registerVisualCommands } from "./visual-commands.js";
 import { renderPrimaryProviderBoard } from "./admin-primary-providers-render.js";
 import { registerFunctionsCommands } from "./functions-commands.js";
 import { STREAMED_FILE_IMPORT_MIN_BYTES, putImportFileStream, rowsForStreamedImportTarget, scanStreamedImportFile, shouldStreamFileImport, } from "./streamed-file-import.js";
-import { applyOxygenHelp, argvRequestsJson, commanderUsageFailure, enableCommandSuggestions, unknownCommandHint, unknownOptionHint, withoutHelpForUnknownCommand, } from "./help.js";
+import { applyOxygenHelp, argvRequestsJson, commanderUsageFailure, enableCommandSuggestions, unknownCommandHint, unknownOptionHint, withoutHelpForUnknownCommand, validateRequiredOptionValues, } from "./help.js";
 import { buildCommandManifest, getCommandManifestEntry, searchCommandManifest, suggestCommandNames, } from "./command-manifest.js";
 import { AGENCY_DIRECTORY_REGIONS, AGENCY_DIRECTORY_SERVICES, COLLAB_GATE_KINDS, COLLAB_GATE_PROSE, COLLAB_SUBJECT_KINDS, COLLAB_SUBJECT_KINDS_PROSE, COLLAB_SUBJECT_LABELS, COLLAB_SUBJECT_PROSE, GATE_KIND_SUBJECTS, describeWorkflowStatusChange, formatCellForDisplay, formatCopilotPlanDuration, formatCopilotPlanSeconds, formatPublicBudgetScopes, SUBJECT_PATH_FORMS_PROSE, formatSubjectPath, exitCodeForOxygenError, parseSubjectPath, parseSubjectRef, parseWorkflowStatusChange, chunk, isVersionGreater, isVersionLess, KNOWLEDGE_BOOTSTRAP_MAX_CREDITS, MAX_CLI_JSON_BODY_BYTES, MAX_MCP_TOOL_NAME_LENGTH, normalizeCopilotPlanStepStatus, OXYGEN_CAPABILITY_ROUTES, OXYGEN_VERSION, OxygenError, getCapabilityRouteMatch, inferUserCapabilityRoute, parseKnowledgePageMarkdown, PLAN_LIMITS, serializeCapabilityRoute, sleep, success, TAG_KINDS_PROSE, toFailure, workflowMcpToolName, } from "@oxygen/shared";
 import { PURCHASABLE_PLAN_KEYS, planVolumeBonusPercent, resolveBasePricingPlan } from "@oxygen/shared/billing";
@@ -25,7 +34,10 @@ import { LINKEDIN_SENDER_LIMIT_DEFAULTS, LINKEDIN_SENDER_LIMIT_MAXIMUMS, } from
 import { SEQUENCE_LIFECYCLES, sequenceDisplayStatus } from "@oxygen/shared/sequence-lifecycle";
 import { operationPath } from "@oxygen/shared/contracts/operations";
 import { SENDER_LIMITS_SET_OPERATION } from "@oxygen/shared/contracts/sender-limits";
-import { addContractFlags } from "./contract-flags.js";
+import { addContractFlags, readContractFlags } from "./contract-flags.js";
+import { TABLE_QUERY_GRID_CONTRACT } from "@oxygen/shared/contracts/table-query-grid";
+import { INTEGRATION_CONNECT_ACCOUNT_CONTRACT } from "@oxygen/shared/contracts/integration-connect";
+import { CRM_ENRICHMENT_READ_CONTRACT } from "@oxygen/shared/contracts/crm-enrichment-read";
 import { buildSenderLimitsBody, parseWorkingDaysOption, SENDER_LIMITS_FLAG_OVERLAY } from "./sender-limits-flags.js";
 import { readColumnDecisionFlags } from "./column-decision-options.js";
 import { MANAGED_DATA_SUPPLIERS } from "@oxygen/shared/data-suppliers";
@@ -44,8 +56,9 @@ import { formatAiPromptPreviewNotice, formatColumnReferenceNotices, formatEnrich
 import { runLocalCustomHttpColumn } from "./local-custom-http-column.js";
 import { formatSearchAiFilterTotalsNotice } from "./search-ai-filter-notice.js";
 import { formatInboxNeedsReplyNotice } from "./inbox-needs-reply-notice.js";
+import { formatMailboxRampNotice } from "./mailbox-ramp-notice.js";
 import { formatWorkflowPlanLimitNotices } from "./workflow-plan-limit-notices.js";
-import { captureCurrentTranscript, collectFeedbackEnvironment, TranscriptCaptureError, } from "./transcript.js";
+import { captureCurrentTranscript, collectFeedbackEnvironment, redactTranscriptSecrets, TranscriptCaptureError, } from "./transcript.js";
 import { addSessionOutput, addSessionStatus, getSessionUsage, startSession, updateSessionStep, } from "./session.js";
 import { doctorAgentSkills, getAgentSkill, installAgentSkills, listAgentSkills, runAutomaticSkillsInstall, searchAgentSkills, } from "./skills.js";
 import { resolveCliBinaryName } from "./runtime.js";
@@ -279,6 +292,11 @@ function buildFindBody(capability, options) {
         body.verify = true;
     return body;
 }
+const LINKEDIN_SENT_INVITES_FLAG_OVERLAY = {
+    account: { valueName: "<ref>", help: "Scope to one sender account (sender id, connection id, or Unipile account id).", parse: readOption },
+    limit: { valueName: "<n>", help: "Maximum invitations to return.", parse: readPositiveInt },
+    cursor: { valueName: "<cursor>", parse: readOption },
+};
 /** The shared search/buy filters, in the snake_case the voice numbers route reads. */
 function voiceNumberFilters(options) {
     const areaCode = readOption(options.areaCode);
@@ -290,6 +308,13 @@ function voiceNumberFilters(options) {
         ...(country ? { iso_country: country.toUpperCase() } : {}),
     };
 }
+function readSuppressionBulkKeys(value, flag) {
+    const entries = splitCommaList(value);
+    if (entries.length === 0 || entries.length > 500) {
+        throw new OxygenError("invalid_request", `${flag} requires 1-500 nonblank entries.`, { exitCode: 2 });
+    }
+    return entries;
+}
 function suppressionListParams(options) {
     const params = new URLSearchParams();
     const reason = readOption(options.reason);
@@ -852,6 +877,7 @@ async function handleAsyncAction(command, options, action) {
         writeCreditsReceipt(data);
         writeSearchAiFilterTotalsNotice(data);
         writeInboxNeedsReplyNotice(data);
+        writeMailboxRampNotice(data);
     }
     catch (error) {
         emitCliFailure(command, error);
@@ -1162,6 +1188,11 @@ function writeInboxNeedsReplyNotice(data) {
     if (notice)
         process.stderr.write(`${notice}\n`);
 }
+function writeMailboxRampNotice(data) {
+    const notice = formatMailboxRampNotice(data);
+    if (notice)
+        process.stderr.write(`${notice}\n`);
+}
 function writeAiPromptPreviewNotice(data) {
     const notice = formatAiPromptPreviewNotice(data);
     if (notice)
@@ -2143,6 +2174,9 @@ function buildCrmSyncRunBody(options) {
         provider: options.provider,
         object: options.object,
         mode: resolveLiveDryRunMode(options),
+        ...(readOption(options.direction) ? { direction: readOption(options.direction) } : {}),
+        ...(readOption(options.since) ? { since: readOption(options.since) } : {}),
+        ...(readOption(options.configId) ? { config_id: readOption(options.configId) } : {}),
         ...(readPositiveInt(options.maxRows) !== undefined ? { max_rows_per_cycle: readPositiveInt(options.maxRows) } : {}),
         ...(readPositiveNumber(options.maxCredits) !== undefined ? { max_credits: readPositiveNumber(options.maxCredits) } : {}),
         ...(options.approved ? { approved: true } : {}),
@@ -2196,11 +2230,16 @@ function buildCrmSyncLinksPath(object, rowId) {
     params.set("row_id", rowId);
     return `/api/cli/crm/sync/links?${params.toString()}`;
 }
+const CRM_ENRICHMENT_READ_FLAGS = {
+    object: { valueName: "<object>", help: "CRM object slug: companies or people. Omit for every object this workspace has.", parse: readOption },
+};
 function buildCrmEnrichmentListPath(options) {
-    const object = readOption(options.object);
-    return object
-        ? `/api/cli/crm/enrichment?${new URLSearchParams({ object }).toString()}`
-        : "/api/cli/crm/enrichment";
+    const fields = readContractFlags(options, CRM_ENRICHMENT_READ_CONTRACT, CRM_ENRICHMENT_READ_FLAGS);
+    const params = new URLSearchParams();
+    for (const [key, value] of Object.entries(fields))
+        if (value !== undefined && value !== null)
+            params.set(key, String(value));
+    return params.size ? `/api/cli/crm/enrichment?${params.toString()}` : "/api/cli/crm/enrichment";
 }
 // The delta form: flip one named enrichment and leave every other decision
 // (the rest of the presets, the ceiling, force, the trigger set) exactly as it
@@ -2263,6 +2302,8 @@ function buildNotetakerSetupBody(options) {
         capture_mode: "invited_bot",
         auto_record_scope: "manual",
         ...(readOption(options.botName) ? { bot_name: readOption(options.botName) } : {}),
+        ...(options.botAvatarUrl !== undefined ? { bot_avatar_url: readOption(options.botAvatarUrl) ?? null } : {}),
+        ...(options.consentDisclosure !== undefined ? { consent_disclosure: readOption(options.consentDisclosure) ?? null } : {}),
         ...(readPositiveInt(options.defaultMaxMinutes) ? { default_max_minutes: readPositiveInt(options.defaultMaxMinutes) } : {}),
         ...(readPositiveNumber(options.defaultMaxCredits) ? { default_max_credits: readPositiveNumber(options.defaultMaxCredits) } : {}),
         ...(readPositiveInt(options.retentionDays) ? { retention_days: readPositiveInt(options.retentionDays) } : {}),
@@ -2349,6 +2390,7 @@ function buildPublishingPostCreateBody(options) {
     const title = readOption(options.title);
     const timezone = readOption(options.timezone);
     const ugcParticipationId = readOption(options.ugcParticipationId);
+    const idempotencyKey = readOption(options.idempotencyKey);
     const content = buildPublishingContent(options);
     if (provider)
         body.provider = provider;
@@ -2362,6 +2404,10 @@ function buildPublishingPostCreateBody(options) {
         body.title = title;
     if (timezone)
         body.timezone = timezone;
+    if (idempotencyKey)
+        body.idempotency_key = idempotencyKey;
+    if (options.tags !== undefined)
+        body.tags = splitCommaList(options.tags);
     if (ugcParticipationId) {
         if (options.approved) {
             throw new OxygenError("ugc_draft_required", "A program-bound personal post must be saved unapproved. Remove --approved, then review it in Publishing → UGC.", { exitCode: 1 });
@@ -2579,9 +2625,9 @@ async function uploadPublishingMediaFile(filePath, options) {
         },
     });
     const uploadUrl = readRecordString(ticket, "upload_url");
-    const completeUrl = readRecordString(ticket, "complete_url");
-    if (!uploadUrl || !completeUrl) {
-        throw new OxygenError("publishing_media_upload_failed", "The server did not return an upload URL for that file.", { exitCode: 1 });
+    const mediaId = isRecord(ticket.media) ? readRecordString(ticket.media, "id") : null;
+    if (!uploadUrl || !mediaId) {
+        throw new OxygenError("publishing_media_upload_failed", "The server did not return an upload URL and media ID for that file.", { exitCode: 1 });
     }
     const headers = ticket.upload_headers && typeof ticket.upload_headers === "object"
         ? Object.fromEntries(Object.entries(ticket.upload_headers).map(([key, value]) => [key, String(value)]))
@@ -2590,7 +2636,7 @@ async function uploadPublishingMediaFile(filePath, options) {
     if (!put.ok) {
         throw new OxygenError("publishing_media_upload_failed", `Object storage rejected the upload (${put.status}).`, { exitCode: 1 });
     }
-    return await requestOxygen(completeUrl, { method: "POST", body: {} });
+    return await requestOxygen(`/api/cli/publishing/media/${encodeURIComponent(mediaId)}/uploaded`, { method: "POST", body: {} });
 }
 function buildPublishingMediaUploadUrlBody(options) {
     const fileName = readOption(options.fileName);
@@ -3066,6 +3112,7 @@ function publishingAmplificationTunables(options) {
     const commentMin = readNonNegativeInt(options.commentDelayMin);
     const commentMax = readNonNegativeInt(options.commentDelayMax);
     return {
+        ...(options.metadataJson !== undefined ? { metadata: parseJsonObject(readFileIfPresent(options.metadataJson)) } : {}),
         ...(maxActions !== undefined ? { max_actions_per_post: maxActions } : {}),
         ...(commentPool ? { comment_source: "pool", comment_pool: commentPool } : {}),
         ...(reactionMin !== undefined ? { reaction_delay_min_seconds: reactionMin } : {}),
@@ -3126,6 +3173,7 @@ function buildPublishingBoostBody(postId, options) {
     const maxActions = readPositiveInt(options.maxActionsPerPost);
     const commentPool = readPublishingCommentPool(options);
     return {
+        ...(readOption(options.name) ? { name: readOption(options.name) } : {}),
         senders,
         actions,
         max_credits: maxCredits,
@@ -3570,7 +3618,8 @@ export function createProgram() {
         .version(OXYGEN_VERSION)
         .option("--profile <name>", "Use a stored CLI profile for this command.")
         .option("--org <organization>", "Use an organization id, Clerk org id, or slug for this command.");
-    program.hook("preAction", () => {
+    program.hook("preAction", (_root, selected) => {
+        validateRequiredOptionValues(program, selected);
         const options = program.opts();
         if (options.profile) {
             globalProfileFlag = options.profile;
@@ -4001,6 +4050,8 @@ export function createProgram() {
         .requiredOption("-m, --message <message>", "Your message to OXYGEN support.")
         .option("--severity <severity>", "New conversation only: low | normal | high. Defaults to normal.")
         .option("--category <category>", "New conversation only: question, bug, feature_request, billing, security_data, configuration, agency_directory, or other. Defaults to question.")
+        .option("--transcript-text <text>", "New conversation only: explicitly share a selected transcript excerpt of 1–200,000 bytes after credential redaction.")
+        .option("--no-transcript", "Omit any selected transcript excerpt.")
         .option("--json", "Print a JSON envelope.")
         .addHelpText("after", `
 Examples:
@@ -4010,29 +4061,42 @@ Examples:
         .action(async (threadId, options) => {
         const message = readOption(options.message);
         if (threadId) {
-            await handleAsyncAction("support chat", options, () => requestOxygen(`/api/cli/support/tickets/${encodeURIComponent(threadId)}/messages`, {
-                method: "POST",
-                body: { body: message },
-            }));
+            await handleAsyncAction("support chat", options, () => {
+                if (options.transcript !== false && options.transcriptText !== undefined) {
+                    throw new OxygenError("invalid_transcript", "Transcript excerpts can only be attached when starting a new conversation. Omit the Thread ID or use support file.", { exitCode: 1 });
+                }
+                return requestOxygen(`/api/cli/support/tickets/${encodeURIComponent(threadId)}/messages`, {
+                    method: "POST",
+                    body: { body: message },
+                });
+            });
             return;
         }
         const severity = readOption(options.severity);
-        await handleAsyncAction("support chat", options, () => requestOxygen("/api/cli/support/tickets", {
-            method: "POST",
-            body: {
+        await handleAsyncAction("support chat", options, () => {
+            const body = {
                 message,
                 category: readOption(options.category) ?? "question",
                 ...(severity ? { severity } : {}),
-            },
-        }));
+            };
+            if (options.transcript !== false && options.transcriptText !== undefined) {
+                body.transcript_text = readSelectedTranscriptExcerpt(options.transcriptText);
+            }
+            return requestOxygen("/api/cli/support/tickets", {
+                method: "POST",
+                body,
+            });
+        });
     }))
         .addCommand(new Command("file")
-        .description("Create a structured Plain support conversation with a subject and required message. Prefer `support chat` for an ordinary conversation; use this zero-credit filing path when operation, error, run, or table metadata helps triage. A selected local transcript can be attached with --transcript-file, --session-id, or --include-transcript. Check `support list --status open` first because a new filing can create a second Thread.")
+        .description("Create a structured Plain support conversation with a subject and required message. Prefer `support chat` for an ordinary conversation; use this zero-credit filing path when operation, error, run, or table metadata helps triage. Share a selected excerpt with --transcript-text, or a local transcript with --transcript-file, --session-id, or --include-transcript. Check `support list --status open` first because a new filing can create a second Thread.")
         .requiredOption("--subject <subject>", "One-line summary of the problem.")
         .requiredOption("--body <body>", "Required message: what you were doing, what happened, and what you tried.")
         .option("--include-transcript", "Attach the most recent local agent transcript after redaction.")
         .option("--session-id <id>", "Attach this local agent session transcript.")
         .option("--transcript-file <path>", "Attach the last 2 MB of a selected text/JSONL file after best-effort credential redaction; review it first.")
+        .option("--transcript-text <text>", "Explicitly share a selected transcript excerpt of 1–200,000 bytes after credential redaction, instead of a local transcript.")
+        .option("--no-transcript", "Omit any transcript, including explicitly selected content.")
         .option("--severity <severity>", "low | normal | high. Defaults to normal.")
         .option("--category <category>", "Request type: question, bug, feature_request, billing, security_data, configuration, agency_directory, or other.")
         .option("--source <source>", "Where the ticket originated. Only slack is supported today.")
@@ -4044,6 +4108,7 @@ Examples:
         .option("--slack-permalink <url>", "Slack message permalink (https://*.slack.com/...) to attach as context.")
         .option("--slack-channel-id <id>", "Slack channel id (e.g. C0123ABC456) the report came from.")
         .option("--customer-workspace <label>", "Customer workspace (org name/slug) a forwarded report concerns.")
+        .option("--cli-version <version>", "CLI version associated with the reported problem.")
         .option("--json", "Print a JSON envelope.")
         .action(async (options) => {
         await handleAsyncAction("support ticket create", options, () => requestOxygen("/api/cli/support/tickets", {
@@ -4390,6 +4455,15 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         .option("-m, --message <message>", "Your feedback or bug report.")
         .option("--severity <severity>", "low | normal | high. Defaults to normal.")
         .option("--category <category>", "Optional category label. Defaults to 'feedback'.")
+        .option("--deep-links <urls>", "Comma-separated workspace links to include in the report context.")
+        .option("--operation <operation>", "The operation that failed.")
+        .option("--error-code <code>", "Error envelope code from the failed operation.")
+        .option("--run-ids <ids>", "Comma-separated affected run ids.")
+        .option("--table-ids <ids>", "Comma-separated affected table ids.")
+        .option("--slack-permalink <url>", "Customer-selected Slack message permalink for a forwarded report.")
+        .option("--slack-channel-id <id>", "Slack channel associated with the forwarded report.")
+        .option("--customer-workspace <label>", "Workspace name or slug associated with a forwarded report.")
+        .option("--transcript-text <text>", "Explicitly attach a selected excerpt (1-200,000 bytes) after best-effort secret redaction; exclusive with local transcript options.")
         .option("--session-id <id>", "Explicitly attach a specific local session transcript by id.")
         .option("--file <path>", "Explicitly attach a specific local transcript file.")
         .option("--include-transcript", "Explicitly attach the most recently active local session after best-effort secret redaction. Review it for sensitive customer data first.")
@@ -4416,14 +4490,13 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         .action(async (options) => {
         await handleAsyncAction("db provision", options, () => requestOxygen("/api/cli/db/provision", { method: "POST", body: {} }));
     }))
-        .addCommand(new Command("migrate")
-        .description("Apply pending tenant database migrations for the current organization.")
-        .option("--rotate-credentials", "Rotate the tenant runtime/read DB passwords and rewrite stored credentials. Use only to repair a tenant whose stored credentials are out of sync; routine migrations do not need it.")
+        .addCommand(addContractFlags(new Command("migrate")
+        .description("Apply pending tenant database migrations for the current organization."), DATABASE_MIGRATE_CONTRACT, { rotate_credentials: { noNegate: true } })
         .option("--json", "Print a JSON envelope.")
         .action(async (options) => {
         await handleAsyncAction("db migrate", options, () => requestOxygen("/api/cli/db/migrate", {
             method: "POST",
-            body: options.rotateCredentials ? { rotate_credentials: true } : {},
+            body: readContractFlags(options, DATABASE_MIGRATE_CONTRACT, { rotate_credentials: { noNegate: true } }),
         }));
     }))
         .addCommand(new Command("migrate-all")
@@ -4557,29 +4630,27 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
             },
         }));
     }))
-        .addCommand(new Command("attach")
+        .addCommand(addContractFlags(new Command("attach")
         .description("Attach an existing Postgres database as the current organization's tenant database.")
-        .requiredOption("--database-url <url>", "Owner connection string for the tenant Postgres database.")
+        .requiredOption("--database-url <url>", "Owner connection string for the tenant Postgres database."), DATABASE_ATTACH_CONTRACT, { database_url: { omit: true } })
         .option("--json", "Print a JSON envelope.")
         .action(async (options) => {
         await handleAsyncAction("db attach", options, () => requestOxygen("/api/cli/db/attach", {
             method: "POST",
-            body: { database_url: options.databaseUrl },
+            body: readContractFlags(options, DATABASE_ATTACH_CONTRACT),
         }));
     }))
-        .addCommand(new Command("query")
+        .addCommand(addContractFlags(new Command("query")
         .description("Run one read-only SQL statement against the current tenant database.")
-        .requiredOption("--sql <sql>", "Single SELECT, WITH, or EXPLAIN statement.")
-        .option("--max-rows <n>", "Maximum rows to return. Defaults to 100; hard cap is 1000.")
+        .requiredOption("--sql <sql>", "Single SELECT, WITH, or EXPLAIN statement."), DATABASE_QUERY_CONTRACT, DATABASE_QUERY_FLAG_OVERLAY)
         .option("--json", "Print a JSON envelope.")
         .action(async (options) => {
         await handleAsyncAction("db query", options, () => {
-            const maxRows = readPositiveInt(options.maxRows);
             return requestOxygen("/api/cli/db/query", {
                 method: "POST",
                 body: {
                     sql: options.sql,
-                    ...(maxRows ? { max_rows: maxRows } : {}),
+                    ...readContractFlags(options, DATABASE_QUERY_CONTRACT, DATABASE_QUERY_FLAG_OVERLAY),
                 },
             });
         });
@@ -4676,6 +4747,8 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         .addCommand(new Command("setup")
         .description("Configure the Recall-backed Oxygen Notetaker. Defaults to dry-run.")
         .option("--bot-name <name>", "Meeting bot display name. Defaults to Oxygen Notetaker.")
+        .option("--bot-avatar-url <url>", "Meeting bot avatar URL; pass an empty string to clear it.")
+        .option("--consent-disclosure <text>", "Recording disclosure; pass an empty string to restore the default disclosure.")
         .option("--disabled", "Save the notetaker as disabled when used with --live.")
         .option("--default-max-minutes <n>", "Default maximum meeting minutes to reserve. Defaults to 60.")
         .option("--default-max-credits <n>", "Default spend cap for live schedules.")
@@ -4771,6 +4844,8 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         .option("--draft", "Create as a draft instead of scheduled.")
         .option("--ugc-participation-id <id>", "Also enroll this personal post in one active creator participation. It is always saved as an unapproved draft; omit --approved.")
         .option("--approved", "Mark an ordinary post approved for the scheduler. Invalid with --ugc-participation-id.")
+        .option("--idempotency-key <key>", "Reuse one key when retrying the same post creation to avoid a duplicate.")
+        .option("--tags <csv>", "Workspace tags to attach to the new post.")
         .option("--thread-post <text>", "X: text of the next post in a thread (posts 2, 3, ... in order). Repeatable.", collectRepeatable, [])
         .option("--thread-media <position=media_id>", "X: attach an uploaded media id to thread post N (2 or later), e.g. 2=<media_id>. Repeatable.", collectRepeatable, [])
         .option("--poll-option <text>", "X: a poll option on the first post (2-4 options, 25 characters each). Repeatable.", collectRepeatable, [])
@@ -4909,6 +4984,7 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         .addCommand(new Command("boost")
         .description("Boost ONE post: your teammates' connected accounts react to and comment on it, once. These are REAL public LinkedIn writes from their accounts and they SPEND CREDITS — refused (exit 7) without --approved, --max-credits and --acknowledge-risk. Creates a post-scoped policy that is already enabled and plans its actions immediately. For a standing rule across many posts, use `publishing amplification create`.")
         .argument("<post_id>", "Scheduled post id.")
+        .option("--name <name>", "Name the post-scoped amplification policy.")
         .requiredOption("--senders <ids>", "Comma-separated connected sender account ids that will engage.")
         .requiredOption("--actions <list>", "Comma-separated actions: reaction, comment.")
         .option("--max-actions-per-post <n>", "Hard cap on how many actions are planned (at most 12).")
@@ -4972,12 +5048,13 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         });
     }))
         .addCommand(new Command("resolve-note")
-        .description("Mark a review note handled.")
+        .description("Resolve a review note, or reopen it.")
         .argument("<post_id>", "Scheduled post id.")
         .requiredOption("--comment <comment_id>", "Note id from `publishing posts notes`.")
+        .option("--reopen", "Reopen the review note instead of resolving it.")
         .option("--json", "Print a JSON envelope.")
         .action(async (postId, options) => {
-        await handleAsyncAction("publishing posts resolve-note", options, () => requestOxygen(`/api/cli/publishing/posts/${encodeURIComponent(postId)}/comments/${encodeURIComponent(options.comment)}/resolve`, { method: "POST" }));
+        await handleAsyncAction("publishing posts resolve-note", options, () => requestOxygen(`/api/cli/publishing/posts/${encodeURIComponent(postId)}/comments/${encodeURIComponent(options.comment)}/resolve`, { method: "POST", body: { resolved: options.reopen !== true } }));
     })))
         .addCommand(new Command("drafts")
         .description("Review the AI post-draft queue before anything reaches the publish queue.")
@@ -5298,6 +5375,7 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         .option("--max-credits <n>", "Hard credit cap per cycle (required — this policy spends credits).")
         .option("--comment-pool <text>", "A comment to draw from. Repeatable. Required when --actions includes comment.", collectRepeatable, [])
         .option("--comment-pool-file <path>", "Read the comment pool from a file, one comment per line.")
+        .option("--metadata-json <json-or-file>", "Policy metadata; {} clears it on update.")
         .option("--reaction-delay-min <seconds>", "Lower bound of the randomized reaction delay.")
         .option("--reaction-delay-max <seconds>", "Upper bound of the randomized reaction delay.")
         .option("--comment-delay-min <seconds>", "Lower bound of the randomized comment delay.")
@@ -5328,6 +5406,7 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         .option("--max-credits <n>", "Hard credit cap per cycle.")
         .option("--comment-pool <text>", "A comment to draw from. Repeatable.", collectRepeatable, [])
         .option("--comment-pool-file <path>", "Read the comment pool from a file, one comment per line.")
+        .option("--metadata-json <json-or-file>", "Policy metadata; {} clears it on update.")
         .option("--reaction-delay-min <seconds>", "Lower bound of the randomized reaction delay.")
         .option("--reaction-delay-max <seconds>", "Upper bound of the randomized reaction delay.")
         .option("--comment-delay-min <seconds>", "Lower bound of the randomized comment delay.")
@@ -5641,7 +5720,7 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         .action(async (options) => {
         await handleAsyncAction("crm photos", options, () => requestOxygen("/api/cli/crm/photos", {
             method: "POST",
-            body: buildCrmPhotosBody(options),
+            body: readCrmPhotoFields(options),
         }));
     }))
         .addCommand(new Command("fields")
@@ -5679,7 +5758,7 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         .description("List configured CRM objects, or create/extend custom objects.")
         .option("--json", "Print a JSON envelope.")
         .action(async (options) => {
-        await handleReadActionWithLens("crm objects", options, () => requestOxygen("/api/cli/crm/objects"), formatCrmObjects);
+        await handleReadActionWithLens("crm objects", options, () => requestOxygen(buildCrmObjectsPath(options)), formatCrmObjects);
     })
         .addCommand(new Command("create")
         .description("Create or repair a custom CRM object. Defaults to dry-run.")
@@ -5807,14 +5886,7 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         .option("--json", "Print a JSON envelope.")
         .action(async (object, rowId, options) => {
         await handleAsyncAction("crm connections", options, () => {
-            const params = new URLSearchParams();
-            if (options.conversationLimit)
-                params.set("conversation_limit", options.conversationLimit);
-            if (options.sequenceLimit)
-                params.set("sequence_limit", options.sequenceLimit);
-            const query = params.toString();
-            const base = `/api/cli/crm/objects/${encodeURIComponent(object)}/records/${encodeURIComponent(rowId)}/connections`;
-            return requestOxygen(query ? `${base}?${query}` : base);
+            return requestOxygen(buildCrmConnectionsPath(object, rowId, options));
         });
     }))
         .addCommand(new Command("files")
@@ -5855,9 +5927,10 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
                 },
             });
             const uploadUrl = readRecordString(ticket, "upload_url");
-            const completeUrl = readRecordString(ticket, "complete_url");
-            if (!uploadUrl || !completeUrl) {
-                throw new OxygenError("attachment_upload_failed", "The server did not return an upload URL for that file.", { exitCode: 1 });
+            const fileId = isRecord(ticket.file) ? readRecordString(ticket.file, "id") : null;
+            const reservedRowId = isRecord(ticket.record) ? readRecordString(ticket.record, "row_id") : null;
+            if (!uploadUrl || !fileId || !reservedRowId) {
+                throw new OxygenError("attachment_upload_failed", "The server did not return an upload URL, file ID and resolved record ID for that file.", { exitCode: 1 });
             }
             const controller = new AbortController();
             const timer = setTimeout(() => controller.abort(), 300_000);
@@ -5876,9 +5949,9 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
             if (!put.ok) {
                 throw new OxygenError("attachment_upload_failed", `Object storage rejected the upload (${put.status}).`, { exitCode: 1 });
             }
-            return requestOxygen(completeUrl, {
+            return requestOxygen(`/api/cli/crm/objects/${encodeURIComponent(object)}/records/${encodeURIComponent(reservedRowId)}/files/${encodeURIComponent(fileId)}/uploaded`, {
                 method: "POST",
-                body: readOption(options.label) ? { label: readOption(options.label) } : {},
+                body: readCrmFileLabel(options),
             });
         });
     }))
@@ -6018,16 +6091,9 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         .option("--json", "Print a JSON envelope.")
         .action(async (noteId, options) => {
         await handleAsyncAction("crm notes update", options, () => {
-            // Absent --title leaves it; --title "" clears it.
-            const title = readClearableOption(options.title);
             return requestOxygen(`/api/cli/crm/notes/${encodeURIComponent(noteId)}`, {
                 method: "PATCH",
-                body: {
-                    ...(readOption(options.body) ? { body: readOption(options.body) } : {}),
-                    ...(title !== undefined ? { title } : {}),
-                    ...(options.pin ? { pinned: true } : {}),
-                    ...(options.unpin ? { pinned: false } : {}),
-                },
+                body: readCrmNoteEditFields(options),
             });
         });
     }))
@@ -6314,6 +6380,9 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         .description("Run one bidirectional reconciliation cycle for a configured CRM object pair as a durable workflow run. Defaults to dry-run.")
         .requiredOption("--provider <provider>", "Connected CRM: hubspot or attio.")
         .requiredOption("--object <object>", "Provider object: hubspot contacts|companies, or attio people|companies.")
+        .option("--direction <direction>", "Override this cycle's direction: inbound, outbound, or bidirectional.")
+        .option("--since <iso>", "Read provider changes since this watermark.")
+        .option("--config-id <id>", "Use this standing CRM sync configuration for the cycle.")
         .option("--max-rows <n>", "Per-cycle row cap. The real volume brake on provider writes (BYOK writes cost 0 Oxygen credits).")
         .option("--max-credits <n>", "Managed-credit + external-quota cap for this cycle.")
         .option("--approved", "Confirm a live cycle after inspecting a dry run.")
@@ -6380,12 +6449,14 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
     })))
         .addCommand(new Command("enrichment")
         .description("Choose which named enrichments run automatically on new CRM records. The saved set is a STANDING PERMISSION: every record written to the object (imports, inserts, upserts, and `crm assert`) enriches without per-record approval, bounded by the per-batch credit ceiling. Same storage as `oxygen tables auto-run`, in founder words.")
-        .addCommand(new Command("list")
+        .addCommand(addContractFlags(new Command("list")
         .description("Show the enrichments available per CRM object: which are armed, what each costs per record, the per-record total, the per-batch credit ceiling, how much of the column allowance is spent, and how many records already in the object have never been enriched. Read-only, free.")
-        .option("--object <object>", "CRM object slug: companies or people. Omit for every object this workspace has.")
-        .option("--json", "Print a JSON envelope.")
+        .option("--json", "Print a JSON envelope."), CRM_ENRICHMENT_READ_CONTRACT, CRM_ENRICHMENT_READ_FLAGS)
         .action(async (options) => {
-        await handleCrmEnrichmentAction("crm enrichment list", options, () => requestOxygen(buildCrmEnrichmentListPath(options)));
+        if (options.projection === "summary" || options.projection === "value")
+            await handleAsyncAction("crm enrichment list", options, () => requestOxygen(buildCrmEnrichmentListPath(options)));
+        else
+            await handleCrmEnrichmentAction("crm enrichment list", options, () => requestOxygen(buildCrmEnrichmentListPath(options)));
     }))
         .addCommand(new Command("backfill")
         .description("Enrich the records you ALREADY have. Arming an enrichment only covers records written from that moment on, so the companies and people already in your CRM stay blank until you run this. Previews for free by default: what is still missing, what one batch costs, and what finishing costs. Add --live --approved --max-credits to actually run a batch; repeat it and the next batch picks up where the last one stopped.")
@@ -6552,6 +6623,7 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         .argument("[prompt]", "Prompt text or @file (same as --prompt); requires --family. The --prompt flag wins if both are given.")
         .option("--prompt <text-or-file>", "Signal-sourcing prompt, or a path to a prompt file. Requires --family.")
         .option("--plan-json <json-or-file>", "Plan JSON returned by signals search plan, or a path to a JSON file.")
+        .option("--source <linkedin_posts>", "Run the native post-search lane using --filters-json or --keywords; no prompt needed.")
         .option("--family <family>", "Signal family when planning from --prompt: hiring, tech, funding, acquisition, news, job_change, or linkedin_posts.")
         .option("--scope <scope>", "market or watch_list when planning from --prompt.")
         .option("--route-id <id>", "Route id from the plan to execute.")
@@ -6822,7 +6894,7 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         });
     })))
         .addCommand(new Command("create")
-        .description("Create a real Postgres-backed workspace table. Free — 0 Oxygen credits. To create a table and import a file in one step, use `tables import --create <name>`.")
+        .description("Create a table private to the active workspace. Free — 0 Oxygen credits. To create a table and import a file in one step, use `tables import --create <name>`.")
         .argument("<name>", "Display name for the table.")
         .requiredOption("--columns-json <json>", 'Required nonempty JSON array of column definitions, e.g. [{"key":"name","label":"Name","dataType":"text"},{"key":"domain","label":"Domain","dataType":"text"}]. Inspect an existing shape with `oxygen tables describe <table>`.')
         .option("--project <project>", "Project id or slug. Defaults to General.")
@@ -6844,10 +6916,9 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         .option("--schema-only", "Duplicate columns and definitions without copying row values.")
         .option("--json", "Print a JSON envelope.")
         .action(async (table, options) => {
-        await handleAsyncAction("tables duplicate", options, () => requestOxygen("/api/cli/tables/duplicate", {
+        await handleAsyncAction("tables duplicate", options, () => requestOxygen(`/api/cli/tables/${encodeURIComponent(table)}/duplicate`, {
             method: "POST",
             body: {
-                table,
                 ...(readOption(options.name) ? { name: readOption(options.name) } : {}),
                 ...(options.schemaOnly ? { include_rows: false } : {}),
             },
@@ -6886,38 +6957,50 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         }));
     }))
         .addCommand(new Command("delete-row")
-        .description("Delete one workspace table row.")
+        .description("Delete one workspace table row. A lead enrolled in a campaign stays enrolled; the response names those campaigns.")
         .argument("<table>", "Table id or slug.")
         .argument("<row_id>", "Workspace row UUID.")
+        .option("--metadata-json <json-or-file>", "Durable row deletion provenance.")
         .option("--json", "Print a JSON envelope.")
         .action(async (table, rowId, options) => {
-        await handleAsyncAction("tables delete-row", options, () => requestOxygen("/api/cli/tables/rows/delete", {
-            method: "POST",
-            body: {
-                table,
-                row_id: rowId,
-            },
-        }));
+        await handleAsyncAction("tables delete-row", options, async () => {
+            const data = await requestOxygen("/api/cli/tables/rows/delete", {
+                method: "POST",
+                body: {
+                    table,
+                    row_id: rowId,
+                    ...(options.metadataJson !== undefined ? { metadata: parseJsonObject(readFileIfPresent(options.metadataJson)) } : {}),
+                },
+            });
+            if (!options.json)
+                writeRowDeleteWarnings(data);
+            return data;
+        });
     }))
         .addCommand(new Command("delete-rows")
-        .description("Delete multiple workspace table rows.")
+        .description("Delete multiple workspace table rows. Leads enrolled in a campaign stay enrolled; the response names those campaigns.")
         .argument("<table>", "Table id or slug.")
         .option("--row-ids-json <json>", "JSON array of workspace row UUIDs.")
         .option("--row-ids-file <path>", "File containing row UUIDs or rows with a _row_id column.")
         .option("--row-id-column <key>", "Column to read from --row-ids-file. Defaults to _row_id.")
         .option("--format <format>", "File format for --row-ids-file: json, jsonl, csv, or xlsx.")
         .option("--sheet <name>", "Worksheet name when reading row IDs from an XLSX file.")
+        .option("--metadata-json <json-or-file>", "Durable row deletion provenance.")
         .option("--json", "Print a JSON envelope.")
         .action(async (table, options) => {
         await handleAsyncAction("tables delete-rows", options, async () => {
             const rowIds = await readDeleteRowIdsOption(options);
-            return requestOxygen("/api/cli/tables/rows/delete", {
+            const data = await requestOxygen("/api/cli/tables/rows/delete", {
                 method: "POST",
                 body: {
                     table,
                     row_ids: rowIds,
+                    ...(options.metadataJson !== undefined ? { metadata: parseJsonObject(readFileIfPresent(options.metadataJson)) } : {}),
                 },
             });
+            if (!options.json)
+                writeRowDeleteWarnings(data);
+            return data;
         });
     }))
         .addCommand(new Command("upsert")
@@ -6967,6 +7050,19 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         .option("--limit <n>", "Maximum rows to export. Defaults to 100; hard cap is 1000.")
         .option("--json", "Print a JSON envelope.")
         .action(async (table, options) => {
+        if (!options.json && !options.output && options.format?.trim().toLowerCase() === "table") {
+            // The human-readable table itself, not a JSON object holding it as one
+            // escaped string (blind user evals, 2026-09-30). --json keeps the envelope.
+            try {
+                const { content } = await exportRows(table, options);
+                const text = typeof content === "string" ? content : "";
+                process.stdout.write(text.endsWith("\n") ? text : `${text}\n`);
+            }
+            catch (error) {
+                emitCliFailure("tables export", error);
+            }
+            return;
+        }
         await handleAsyncAction("tables export", options, () => exportRows(table, options));
     }))
         .addCommand(new Command("export-bundle")
@@ -7024,8 +7120,10 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
             return data;
         });
     }))
-        .addCommand(new Command("query")
-        .description("Query a workspace table by id or slug. Output is a JSON envelope; for a typed, human-readable rendering of the same rows use `tables export <table> --format table`.")
+        .addCommand(addContractFlags(new Command("query"), TABLE_QUERY_GRID_CONTRACT, {
+        format: { valueName: "<format>", help: "Read the web grid projection ('grid'): defaults to 50 rows, capped at 200, with table, limit, cursor and optional --include-stats/--include-fill. Omit for a filtered row query." },
+    })
+        .description("Query raw table rows or use --format grid for display previews, cell state and native cursors. Output is a JSON envelope; for a typed rendering of raw rows use `tables export <table> --format table`. Grid takes table/limit/cursor; rowCountMode labels registry/exact/skipped. Optional stats/fill may be unavailable.")
         .argument("<table>", "Table id or slug.")
         .option("--limit <n>", "Maximum rows to return. Defaults to 100; hard cap is 1000.")
         .option("--cursor <cursor>", "Pagination cursor returned by a previous query. Walks forward one page at a time; mutually exclusive with --offset.")
@@ -7040,6 +7138,10 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         .option("--json", "Print a JSON envelope.")
         .action(async (table, options) => {
         await handleAsyncAction("tables query", options, () => {
+            const gridArgs = readContractFlags(options, TABLE_QUERY_GRID_CONTRACT);
+            if (gridArgs.format !== "grid" && Object.keys(gridArgs).length > 0) {
+                throw new OxygenError("invalid_request", "Grid options require --format grid.", { exitCode: 1 });
+            }
             const limit = readPositiveInt(options.limit);
             const filters = readFilterJsonOption(options.filterJson);
             const filterTree = readJsonObjectOption(options.filterTreeJson);
@@ -7055,10 +7157,15 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
             if (readOption(options.cursor) && offset !== undefined) {
                 throw new OxygenError("invalid_request", "Pass either --cursor or --offset, not both.", { exitCode: 1 });
             }
+            if (options.format === "grid" && (readCsvOption(options.fields).length > 0 || filters?.length || filterTree ||
+                readOption(options.search) || formulaValues || sorts?.length || (offset !== undefined && offset > 0))) {
+                throw new OxygenError("invalid_request", '--format grid takes only table, --limit, --cursor and optional --include-stats/--include-fill; omit --format for filters, fields, search, sorts or offsets.', { exitCode: 1 });
+            }
             return requestOxygen("/api/cli/tables/query", {
                 method: "POST",
                 body: {
                     table,
+                    ...gridArgs,
                     ...(limit ? { limit } : {}),
                     ...(readOption(options.cursor) ? { cursor: readOption(options.cursor) } : {}),
                     ...(offset !== undefined ? { offset } : {}),
@@ -7165,9 +7272,8 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         .argument("<table>", "Table id or slug.")
         .option("--json", "Print a JSON envelope.")
         .action(async (table, options) => {
-        await handleAsyncAction("tables archive", options, () => requestOxygen("/api/cli/tables/archive", {
-            method: "POST",
-            body: { table },
+        await handleAsyncAction("tables archive", options, () => requestOxygen(`/api/cli/tables/${encodeURIComponent(table)}`, {
+            method: "DELETE",
         }));
     }))
         .addCommand(new Command("delete")
@@ -7201,13 +7307,19 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
     }))
         .addCommand(new Command("restore")
         .description("Restore an archived or delete-scheduled table: cancels the purge timer and reclaims its slug.")
-        .argument("<table>", "Table id or slug (the pre-delete slug works).")
+        .argument("[table]", "Table id or slug (the pre-delete slug works).")
+        .option("--tables <refs>", "Restore a comma-separated batch; alternative to the table argument.")
         .option("--json", "Print a JSON envelope.")
         .action(async (table, options) => {
-        await handleAsyncAction("tables restore", options, () => requestOxygen("/api/cli/tables/restore", {
-            method: "POST",
-            body: { table },
-        }));
+        await handleAsyncAction("tables restore", options, () => {
+            const refs = splitCommaList(options.tables);
+            if ((!table && refs.length === 0) || (table && refs.length > 0))
+                throw new OxygenError("invalid_selection", "Pass one table argument or --tables, not both.", { exitCode: 2 });
+            return requestOxygen("/api/cli/tables/restore", {
+                method: "POST",
+                body: { ...(options.tables !== undefined ? { tables: splitCommaList(options.tables) } : { table }) },
+            });
+        });
     }))
         .addCommand(new Command("move")
         .description("Move one or more workspace tables into a project (folder) in one call. Rows, columns, runs, and provenance are preserved. Free; reverse it by moving the table back.")
@@ -7749,7 +7861,7 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         .description("List a table's saved views.")
         .argument("<table>", "Table id or slug.")
         .option("--json", "Print a JSON envelope.")
-        .action((table, options) => handleAsyncAction("tables views list", options, () => requestOxygen(`/api/cli/tables/views?table=${encodeURIComponent(table)}`))))
+        .action((table, options) => handleAsyncAction("tables views list", options, () => requestOxygen(`/api/cli/tables/${encodeURIComponent(table)}/views`))))
         .addCommand(new Command("get")
         .description("Get one saved view by id.")
         .argument("<table>", "Table id or slug.")
@@ -7764,18 +7876,20 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         .option("--group-by <column>", "Kanban: the editable select/status column key the board splits on, e.g. --group-by lifecycle_stage. Unknown or non-groupable keys are refused with the groupable candidates. The response's effective_group_by is the column the board actually uses.")
         .option("--config <json>", TABLE_VIEW_CONFIG_HELP)
         .option("--default", "Make this the table's default view.")
+        .option("--no-default", "Clear this view's default status.")
+        .option("--position <n>", "Zero-based order among the table's saved views.")
         .option("--json", "Print a JSON envelope.")
-        .action((table, options) => handleAsyncAction("tables views create", options, () => requestOxygen("/api/cli/tables/views", {
+        .action((table, options) => handleAsyncAction("tables views create", options, () => requestOxygen(`/api/cli/tables/${encodeURIComponent(table)}/views`, {
         method: "POST",
         body: {
-            table,
             name: readOption(options.name),
             ...(readOption(options.viewType) ? { view_type: readOption(options.viewType) } : {}),
             ...(readOption(options.groupBy) ? { group_by: readOption(options.groupBy) } : {}),
             ...(readOption(options.config)
                 ? { config: parseJsonValue(readOption(options.config) ?? "", "--config") }
                 : {}),
-            ...(options.default ? { is_default: true } : {}),
+            ...(typeof options.default === "boolean" ? { is_default: options.default } : {}),
+            ...(readOption(options.position) !== null ? { position: readNonNegativeInt(options.position) } : {}),
         },
     }))))
         .addCommand(new Command("update")
@@ -7787,20 +7901,19 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         .option("--group-by <column>", "Kanban: change the select/status column the board splits on; folds into the stored config and keeps the rest of it. Refused for a grid view unless --view-type kanban is passed with it.")
         .option("--config <json>", `${TABLE_VIEW_CONFIG_HELP} Replaces the stored config.`)
         .option("--default", "Make this the table's default view.")
+        .option("--no-default", "Clear this view's default status.")
         .option("--position <n>", "0-based order among the table's views.")
         .option("--json", "Print a JSON envelope.")
-        .action((table, view, options) => handleAsyncAction("tables views update", options, () => requestOxygen("/api/cli/tables/views", {
+        .action((table, view, options) => handleAsyncAction("tables views update", options, () => requestOxygen(`/api/cli/tables/${encodeURIComponent(table)}/views/${encodeURIComponent(view)}`, {
         method: "PATCH",
         body: {
-            table,
-            view,
             ...(readOption(options.name) ? { name: readOption(options.name) } : {}),
             ...(readOption(options.viewType) ? { view_type: readOption(options.viewType) } : {}),
             ...(readOption(options.groupBy) ? { group_by: readOption(options.groupBy) } : {}),
             ...(readOption(options.config)
                 ? { config: parseJsonValue(readOption(options.config) ?? "", "--config") }
                 : {}),
-            ...(options.default ? { is_default: true } : {}),
+            ...(typeof options.default === "boolean" ? { is_default: options.default } : {}),
             ...(readOption(options.position) ? { position: Number(readOption(options.position)) } : {}),
         },
     }))))
@@ -7809,7 +7922,7 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         .argument("<table>", "Table id or slug.")
         .argument("<view>", "View id.")
         .option("--json", "Print a JSON envelope.")
-        .action((table, view, options) => handleAsyncAction("tables views delete", options, () => requestOxygen(`/api/cli/tables/views?table=${encodeURIComponent(table)}&view=${encodeURIComponent(view)}`, { method: "DELETE" })))));
+        .action((table, view, options) => handleAsyncAction("tables views delete", options, () => requestOxygen(`/api/cli/tables/${encodeURIComponent(table)}/views/${encodeURIComponent(view)}`, { method: "DELETE" })))));
     tablesCommand.addCommand(new Command("auto-run")
         .description("Inspect and manage a table's standing auto-run configuration (columns queued automatically when new rows are written).")
         .addCommand(new Command("get")
@@ -7958,6 +8071,7 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         .option("--schema-json <json-or-file>", "Bind a PUSH feed instead: the JSON Schema (an object with type, properties, required, additionalProperties) every delivered row must match, inline or a path to a JSON file.")
         .option("--source <source>", `Bind a WEB INTENT push feed instead: ${FEED_BIND_WEB_INTENT_SOURCES.join(", ")} (rb2b = the website-visit reveals OXYGEN already receives for this workspace, also kept as website_visit Signals). Fixed row shape, no schema, no cadence, 0 credits per reveal. Takes a table or --create <name>, plus --name and --upsert-key.`)
         .option("--create <name>", "Push or web-intent feed only. Create a new table with this name — its columns derived from --schema-json, or the fixed reveal columns for --source rb2b — instead of binding an existing table.")
+        .option("--project <project>", "Workspace project id or slug for the new --create table.")
         .option("--items-path <path>", "Push feed only. Dot path to an array of row objects in the delivered payload.")
         .option("--event-id-path <path>", "Push feed only. Dot path to the event id. Defaults to event_id, eventId, id, or a payload hash.")
         .option("--event-type-path <path>", "Push feed only. Dot path to the event type. Defaults to type or event.")
@@ -7978,6 +8092,7 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         .option("--intent-id <id>", "Routing-registry intent id from the plan.")
         .option("--input-shape <shape>", "Routing-registry input shape from the plan, e.g. market or watch_list.")
         .option("--route-id <id>", "Route id from the plan this feed was bound from.")
+        .option("--registry-version <version>", "Routing-registry revision from the plan, retained with the frozen feed provenance.")
         .option("--source-prompt <text-or-file>", "The prompt this feed was planned from, or a path to a prompt file.")
         .option("--approved", "Approve the recurring paid pull. Required with --every and --max-credits on a paid provider.")
         .option("--json", "Print a JSON envelope.")
@@ -8312,15 +8427,12 @@ Examples:
             return data;
         });
     }))
-        .addCommand(new Command("get")
+        .addCommand(addContractFlags(new Command("get")
         .description("Read one knowledge wiki page by slug or UUID. Read-only, 0 credits.")
         .argument("<slug_or_id>", "Page slug or UUID.")
-        .option("--json", "Print a JSON envelope.")
+        .option("--json", "Print a JSON envelope."), knowledgePageReadContract, { slug: { omit: true }, id: { omit: true } })
         .action(async (slugOrId, options) => {
-        await handleAsyncAction("knowledge page get", options, () => requestOxygen("/api/cli/knowledge/pages/get", {
-            method: "POST",
-            body: { slug: slugOrId },
-        }));
+        await handleAsyncAction("knowledge page get", options, () => requestOxygen(`/api/cli/knowledge/pages/get?${new URLSearchParams(Object.entries({ slug: slugOrId, ...readContractFlags(options, knowledgePageReadContract, { slug: { omit: true }, id: { omit: true } }) }).map(([key, value]) => [key, String(value)]))}`));
     }))
         .addCommand(new Command("list")
         .description("List knowledge wiki pages. Read-only, 0 credits.")
@@ -8423,11 +8535,11 @@ Examples:
             body: buildKnowledgeSearchBody(query, options),
         }));
     }))
-        .addCommand(new Command("index")
+        .addCommand(addContractFlags(new Command("index")
         .description("Compact wiki index: each page's slug, one-liner, tags, link degree, plus type/status counts over the whole wiki. Lists the 200 most recently updated pages by default. Read-only, 0 credits. semantic.budget is Oxygen's platform-funded embedding safety allowance; its dollar and query counters are Oxygen's spend, never charges against your credits.")
         .option("--limit <n>", "Maximum pages to list. Defaults to 200; hard cap is 1000. Counts always cover the whole wiki.")
         .option("--all", "List every page instead of the most recently updated window.")
-        .option("--json", "Print a JSON envelope.")
+        .option("--json", "Print a JSON envelope."), knowledgeIndexReadContract, { limit: { omit: true } })
         .action(async (options) => {
         await handleAsyncAction("knowledge index", options, async () => {
             const params = new URLSearchParams();
@@ -8436,6 +8548,8 @@ Examples:
                 params.set("limit", String(limit));
             if (options.all)
                 params.set("all", "true");
+            for (const [key, value] of Object.entries(readContractFlags(options, knowledgeIndexReadContract, { limit: { omit: true } })))
+                params.set(key, String(value));
             const qs = params.toString() ? `?${params.toString()}` : "";
             const data = await requestOxygen(`/api/cli/knowledge/index${qs}`);
             if (!options.json)
@@ -9377,11 +9491,12 @@ Examples:
         .alias("get")
         .description("Show one recipe: its kit, the install status of each stage here, prerequisites, credits, approval gates, and the playbook body. Alias: `get`.")
         .argument("<slug>", "Recipe slug, e.g. outbound-pilot-50.")
+        .option("--section <heading>", "Read one recipe heading instead of the whole playbook.")
         .option("--json", "Print a JSON envelope.")
         .action(async (slug, options) => {
         await handleAsyncAction("recipes show", options, () => requestOxygen("/api/cli/recipes/get", {
             method: "POST",
-            body: { slug },
+            body: { slug, ...(readOption(options.section) ? { section: readOption(options.section) } : {}) },
         }));
     }))
         .addCommand(new Command("install")
@@ -9808,6 +9923,7 @@ Examples:
         .description("Run an executable AI, tool, formula, enrichment, bind, lookup, or custom HTTP column for one row or a bounded batch. Paid server-side columns always run durably in the background. Bind create-mode (onNoMatch=create) needs --approved.")
         .argument("<table>", "Table id or slug.")
         .argument("<column>", "Column id or key.")
+        .option("--idempotency-key <key>", "Replay key for durable server-side run admission.")
         .option("--row-id <row_id>", "Workspace row id to run. Get one from `oxygen tables query <table> --limit 1 --json` — the field is `_row_id`, not `id`.")
         .option("--limit <n>", "Run the next N rows whose target cell is still empty (--force runs the first N regardless). Repeat until rowCount is 0 to page through a table. Defaults to 10; inline deterministic runs have a hard cap of 25.")
         .option("--all", "Run all rows. Requires --background, except with --dry-run, which previews the background run without queueing it.")
@@ -9883,6 +9999,7 @@ Examples:
                 });
             }
             const body = {
+                ...(readOption(options.idempotencyKey) ? { idempotency_key: readOption(options.idempotencyKey) } : {}),
                 table,
                 column,
                 ...(options.all ? { selection: { mode: "all" } } : {}),
@@ -9941,11 +10058,9 @@ Examples:
         .action(async (table, sourceColumn, options) => {
         const mappings = options.mappingsJson ? parseJsonArray(options.mappingsJson) : undefined;
         const preset = readOption(options.preset);
-        await handleAsyncAction("columns materialize", options, () => requestOxygen("/api/cli/tables/columns/materialize", {
+        await handleAsyncAction("columns materialize", options, () => requestOxygen(`/api/cli/tables/${encodeURIComponent(table)}/columns/${encodeURIComponent(sourceColumn)}/materialize`, {
             method: "POST",
             body: {
-                table,
-                source_column: sourceColumn,
                 ...(mappings ? { mappings } : {}),
                 ...(!mappings ? { preset: preset ?? "work_email" } : preset ? { preset } : {}),
                 create_if_missing: options.createIfMissing !== false,
@@ -9954,10 +10069,10 @@ Examples:
         }));
     }))
         .addCommand(new Command("rename")
-        .description("Rename a workspace column key and optionally label. Warns when another column reads the old key — a rename does not rewrite the references pointing at it.")
+        .description("Rename a workspace column's stable key (requires --key), optionally updating its display label. Free (0 credits). For a label-only change, use columns update <table> <column> --label <label>. Warns when another column reads the old key; a rename does not rewrite those references.")
         .argument("<table>", "Table id or slug.")
         .argument("<column>", "Column id or key.")
-        .requiredOption("--key <key>", "New stable column key.")
+        .requiredOption("--key <key>", "Required new stable column key.")
         .option("--label <label>", "Optional new display label.")
         .option("--json", "Print a JSON envelope.")
         .action(async (table, column, options) => {
@@ -9982,6 +10097,8 @@ Examples:
         .argument("<column>", "Column id or key.")
         .option("--label <label>", "New display label.")
         .option("--semantic-type <type>", "New semantic type.")
+        .option("--clear-semantic-type", "Clear the column's semantic type.")
+        .option("--position <n>", "Move the column to this zero-based position.")
         .option("--definition-json <json>", "Definition metadata to shallow-merge into the column; arrays are replaced wholesale and missing keys leave existing fields unchanged.")
         .option("--definition-unset <keys>", "Comma-separated definition keys to REMOVE after the merge (e.g. outputSchema,model) — a merge can only add or overwrite. Lifecycle and provenance keys are rejected.")
         .option("--data-type <type>", "New output data type for a lookup column (text, numeric, boolean, jsonb, timestamptz). Discards the cached cells; other column kinds use `oxygen columns retype`.")
@@ -10061,7 +10178,8 @@ Examples:
                     column,
                     ...(researchDepth ? { research_depth: researchDepth } : {}),
                     ...(readOption(options.label) ? { label: readOption(options.label) } : {}),
-                    ...(readOption(options.semanticType) ? { semantic_type: readOption(options.semanticType) } : {}),
+                    ...(options.clearSemanticType ? { semantic_type: null } : readOption(options.semanticType) ? { semantic_type: readOption(options.semanticType) } : {}),
+                    ...(readOption(options.position) !== null ? { position: readNonNegativeInt(options.position) } : {}),
                     ...(definition ? { definition } : {}),
                     ...(definitionUnset.length > 0 ? { definition_unset: definitionUnset } : {}),
                     ...(readOption(options.dataType) ? { data_type: readOption(options.dataType) } : {}),
@@ -10116,11 +10234,9 @@ Examples:
         .option("--dry-run", "Preview the conversion (row counts and samples) without writing.")
         .option("--json", "Print a JSON envelope.")
         .action(async (table, column, options) => {
-        await handleAsyncAction("columns retype", options, () => requestOxygen("/api/cli/tables/columns/retype", {
+        await handleAsyncAction("columns retype", options, () => requestOxygen(`/api/cli/tables/${encodeURIComponent(table)}/columns/${encodeURIComponent(column)}/retype`, {
             method: "POST",
             body: {
-                table,
-                column,
                 data_type: options.dataType,
                 ...(options.dryRun ? { dry_run: true } : {}),
             },
@@ -10132,9 +10248,9 @@ Examples:
         .argument("<column>", "Column id or key.")
         .option("--json", "Print a JSON envelope.")
         .action(async (table, column, options) => {
-        await handleAsyncAction("columns archive", options, () => requestOxygen("/api/cli/tables/columns/archive", {
+        await handleAsyncAction("columns archive", options, () => requestOxygen(`/api/cli/tables/${encodeURIComponent(table)}/columns/${encodeURIComponent(column)}/archive`, {
             method: "POST",
-            body: { table, column },
+            body: {},
         }));
     }))
         .addCommand(new Command("delete")
@@ -10340,6 +10456,7 @@ Examples:
         .option("--max-credits <n>", "Maximum managed/provider credits to reserve for this run.")
         .option("--max-concurrency <n>", "Maximum concurrent row items for this run (1-250). Defaults to 50 (160 for Firecrawl scrape columns).")
         .option("--metadata-json <json>", "Optional metadata object to attach to the run.")
+        .option("--idempotency-key <key>", "Reuse the same scoped run when retrying this exact request.")
         .option("--then-json <json>", "JSON array of sequential follow-up steps. Each step runs after the previous terminates with completed or completed_with_errors. Paid steps require selection and max_credits. Shape: [{actions:[{type:'tool_column',column}],selection,force,max_concurrency,max_credits,metadata,run_on_failure}].")
         .option("--json", "Print a JSON envelope.")
         .action(async (table, options) => {
@@ -10358,6 +10475,7 @@ Examples:
                 ...(maxCredits !== undefined ? { max_credits: maxCredits } : {}),
                 ...(maxConcurrency ? { max_concurrency: maxConcurrency } : {}),
                 ...(options.metadataJson ? { metadata: parseJsonObject(options.metadataJson) } : {}),
+                ...(readOption(options.idempotencyKey) ? { idempotency_key: readOption(options.idempotencyKey) } : {}),
                 ...(chainSteps.length > 0 ? { then: chainSteps } : {}),
             },
         }));
@@ -12720,7 +12838,7 @@ Examples:
     program
         .command("tools")
         .description("The priced catalog: every provider operation and every OXYGEN column (enrichment bundles, waterfalls, templates, Functions) with its credit cost per row. Start with `tools search --for-table <table>` to see what a table's own columns can be enriched with and what each costs, before adding anything.")
-        .addCommand(new Command("search")
+        .addCommand(addToolCatalogSearchWindowFlag(new Command("search")
         .description("Search the priced catalog (0 credits): provider operations in `tools`, and OXYGEN's own columns in `native_columns` (enrichment bundles, waterfalls, templates, Functions), each with `price_label`, `estimated_credits_per_row`, `pricing_kind` and the exact `cli_add` command. With --for-table <table> it reads that table's columns and returns `suggestions`: the enrichments those columns already support, priced per row. Hydrate one provider operation with tools get. A response listing partial_sources means an optional catalog source timed out and totals may be understated — rerun for the complete catalog.")
         .argument("[query]", "Search text, e.g. `web` for the Web Research Agent column and its modes (each priced in `modes`), or `email`.")
         .option("--verbosity <verbosity>", "minimal, summary, or full. Defaults to minimal; hydrate one result with tools get.")
@@ -12742,6 +12860,11 @@ Examples:
         await handleAsyncAction("tools search", options, async () => {
             const params = new URLSearchParams();
             params.set("query", query ?? "");
+            const window = readToolCatalogSearchWindow(options);
+            if (window.max_chars !== undefined)
+                params.set("max_chars", String(window.max_chars));
+            if (window.include_native !== undefined)
+                params.set("include_native", String(window.include_native));
             const forTable = readOption(options.forTable);
             if (forTable)
                 params.set("for_table", forTable);
@@ -12776,14 +12899,8 @@ Examples:
             writeAccessCheckFailuresWarning(data);
             return data;
         });
-    }))
-        .addCommand(new Command("get")
-        .description("Get a tool descriptor.")
-        .argument("<tool_id>", "Tool id.")
-        .option("--json", "Print a JSON envelope.")
-        .action(async (toolId, options) => {
-        await handleAsyncAction("tools get", options, () => requestOxygen(`/api/cli/tools/${encodeURIComponent(toolId)}`));
-    }))
+    })))
+        .addCommand(createToolCatalogDetailCommand(handleAsyncAction))
         .addCommand(new Command("favorite")
         .description("Favourite one column-catalog entry for this workspace: a native column (find_email, preset:person_enrich, prompt:icp_fit_score_v1) or a vendor tool (tool:<tool_id>). Favourites lead every table's + Add column panel and `tools search --favorites`.")
         .argument("<entry_id>", "Catalog entry id, e.g. find_email, preset:person_enrich, prompt:<key>, tool:<tool_id>.")
@@ -13336,21 +13453,25 @@ Examples:
         .action(async (options) => {
         await handleAsyncAction("integrations list", options, () => requestOxygen("/api/cli/integrations/composio/list"));
     }))
-        .addCommand(new Command("connect")
+        .addCommand(addContractFlags(new Command("connect")
         .description("Connect an integration. For OAuth toolkits, running this command immediately creates a pending provider authorization and returns a redirect URL; account access starts only if you approve on the provider's page. This is not a price preview. On a repriced workspace, a connected X account reserves 1,000 credits ($10) monthly; inspect the current pricing schedule with `oxygen limits show --json` before connecting. API-key integrations accept --api-key. Run without credentials only for an API-key integration to get a 0-credit preview of its exact fields (mode: needs_api_key): no credential is submitted, nothing is stored, and no provider call is made. Use repeatable --credential name=value when a provider also requires a host, subdomain, or other named value. To keep a secret out of shell history and process arguments, open the preview's web_url and submit it in Connections; --api-key is for controlled noninteractive use. Credential submission creates or replaces the connection immediately and needs no separate --approved flag. LinkedIn and WhatsApp return a Unipile hosted-auth URL instead (`oxygen senders connect` / `oxygen whatsapp connect` are the canonical paths).")
         .argument("<integration_id>", "Integration id, such as 'slack' or 'serpapi'.")
         .option("--api-key <value>", "API key for controlled noninteractive use. Literal values can appear in shell history and process arguments; prefer the preview web_url for manual entry.")
         .option("--credential <name=value>", "Named provider credential field. Repeat for multi-field integrations (for example, PostHog: --credential subdomain=us).", collectRepeatable, [])
-        .option("--account-id <id>", "Provider account id for integrations that span multiple accounts (e.g. Cloudflare when the token can access more than one account).")
         .option("--country <code>", "ISO 3166-1 alpha-2 country where the LinkedIn account owner normally signs in (required for `connect linkedin`; picks the egress proxy).")
         .option("--pairing-phone-number <e164>", "WhatsApp only: pair by code sent to this E.164 number instead of showing a QR.")
-        .option("--acknowledge-risk", "LinkedIn only, required for a new account: LinkedIn restricts automated activity; pacing reduces but does not remove the risk.")
-        .option("--json", "Print a JSON envelope.")
+        .addOption(new Option("--acknowledge-risk", "Deprecated: LinkedIn connect no longer needs it. Still accepted so older scripts keep running.").hideHelp())
+        .option("--return-to <path>", "In-product destination after OAuth approval.")
+        .option("--json", "Print a JSON envelope."), INTEGRATION_CONNECT_ACCOUNT_CONTRACT, {
+        account_id: {
+            valueName: "<id>",
+            help: "Provider account id for integrations that span multiple accounts (e.g. Cloudflare when the token can access more than one account).",
+        },
+    })
         .action(async (integrationId, options) => {
         await handleAsyncAction("integrations connect", options, () => {
             const apiKey = readOption(options.apiKey)?.trim();
             const credentials = readNamedCredentials(options.credential);
-            const accountId = readOption(options.accountId);
             const country = readOption(options.country)?.trim();
             const pairingPhoneNumber = readOption(options.pairingPhoneNumber)?.trim();
             return requestOxygen("/api/cli/integrations/connect", {
@@ -13359,7 +13480,8 @@ Examples:
                     integration_id: integrationId,
                     ...(apiKey ? { api_key: apiKey } : {}),
                     ...(credentials ? { credentials } : {}),
-                    ...(accountId ? { account_id: accountId } : {}),
+                    ...readContractFlags(options, INTEGRATION_CONNECT_ACCOUNT_CONTRACT),
+                    ...(readOption(options.returnTo) ? { return_to: readOption(options.returnTo) } : {}),
                     ...(country ? { country } : {}),
                     ...(pairingPhoneNumber ? { pairing_phone_number: pairingPhoneNumber } : {}),
                     ...(options.acknowledgeRisk ? { acknowledge_linkedin_risk: true } : {}),
@@ -13433,6 +13555,8 @@ Examples:
         .description("Run an action for a connected integration — Composio toolkits and native providers alike.")
         .argument("<integration_id>", "Integration id, such as 'slack'.")
         .argument("<action_slug>", "Composio action slug, such as 'SLACK_SEND_MESSAGE'.")
+        .option("--connection-id <id>", "Select this workspace connection.")
+        .option("--credential-mode <mode>", "managed, user_api_key, or user_oauth.")
         .option("--input <json>", "Arguments as JSON object. Default: empty object.")
         .option("--live", "Execute the action live. Default is dry-run.")
         .option("--dry-run", "Force dry-run (no provider call).")
@@ -13453,6 +13577,8 @@ Examples:
                     integration_id: integrationId,
                     action_slug: actionSlug,
                     arguments: args,
+                    ...(readOption(options.connectionId) ? { connection_id: readOption(options.connectionId) } : {}),
+                    ...(readOption(options.credentialMode) ? { credential_mode: readOption(options.credentialMode) } : {}),
                     mode,
                     ...(options.approved ? { approved: true } : {}),
                     ...(maxCredits !== undefined ? { max_credits: maxCredits } : {}),
@@ -13490,15 +13616,16 @@ Examples:
         await handleAsyncAction("senders checkpoints", options, () => requestOxygen("/api/cli/senders/checkpoints"));
     }))
         .addCommand(new Command("connect")
-        .description("Get a Unipile hosted-auth URL to connect a new LinkedIn account (or reconnect with --reconnect). This command creates a pending provider authorization; it does not preview a price. Each connected LinkedIn account has one monthly charge, never two: an existing dollar seat until it ends at renewal, or a monthly credit reservation after seats retire. On a repriced workspace that reservation is 3,400 credits ($34) monthly; a connect the balance cannot cover fails with insufficient_credits. Invites, messages and other LinkedIn actions cost 0 credits on top. Check `oxygen billing seats --json` before connecting for the current charge and seat status. A workspace linked to another organization's plan is billed at that organization. New accounts require --country (the owner's normal LinkedIn login country) and default to syncing only conversations OXYGEN starts; use --inbox-scope all to opt into the full LinkedIn inbox. Use --cookie-auth and --custom-proxy to expose those inputs inside Unipile's hosted wizard; their secrets never pass through OXYGEN. Use --count for bulk onboarding. LinkedIn restricts automated activity: every connection needs --acknowledge-risk (only a reconnect that already recorded one is exempt), and --count above 1 also needs --owner-consent (each owner connects their own account). Links are shareable and valid for 10 minutes.")
+        .description("Get a Unipile hosted-auth URL to connect a new LinkedIn account (or reconnect with --reconnect). This command creates a pending provider authorization; it does not preview a price. Each connected LinkedIn account has one monthly charge, never two: an existing dollar seat until it ends at renewal, or a monthly credit reservation after seats retire. On a repriced workspace that reservation is 3,400 credits ($34) monthly; a connect the balance cannot cover fails with insufficient_credits. Invites, messages and other LinkedIn actions cost 0 credits on top. Check `oxygen billing seats --json` before connecting for the current charge and seat status. A workspace linked to another organization's plan is billed at that organization. New accounts require --country (the owner's normal LinkedIn login country) and default to syncing only conversations OXYGEN starts; use --inbox-scope all to opt into the full LinkedIn inbox. Use --cookie-auth and --custom-proxy to expose those inputs inside Unipile's hosted wizard; their secrets never pass through OXYGEN. Use --count for bulk onboarding; --count above 1 needs --owner-consent (each owner connects their own account). Links are shareable and valid for 10 minutes.")
         .option("--reconnect <connection_id>", "Reconnect an existing connection instead of creating a new one. Accepts a connection id.")
         .option("--country <code>", "Required for new accounts: ISO 3166-1 alpha-2 code for the account owner's normal LinkedIn login country (for example DE or US).")
         .option("--sales-nav", "Request Classic + Sales Navigator access during Unipile hosted authentication.")
         .option("--cookie-auth", "Offer LinkedIn cookie authentication in Unipile's hosted wizard. The account owner enters li_at/li_a there; OXYGEN never receives them.")
         .option("--custom-proxy", "Let the account owner enter a custom proxy in Unipile's hosted wizard. OXYGEN never receives the proxy credentials.")
         .option("--count <n>", "Mint N hosted-auth links in one call for bulk onboarding (1-25, default 1). Every link uses the same --country; use separate calls for different login countries. Ignored when reconnecting.")
+        .option("--share-link", "Return a shareable connection link for one account; its owner completes authentication.")
         .option("--inbox-scope <scope>", "LinkedIn inbox privacy for new accounts: oxygen_initiated (default) or all. Reconnect preserves the existing account setting.")
-        .option("--acknowledge-risk", "Required for a new account: LinkedIn restricts automated activity; pacing reduces but does not remove the risk of a restriction.")
+        .addOption(new Option("--acknowledge-risk", "Deprecated: connecting no longer needs it. Still accepted so older scripts keep running.").hideHelp())
         .option("--owner-consent", "Required with --count above 1: each account owner connects their own account.")
         .option("--established", "The account is an established profile: skip the ~2-week warm-up a new account gets by default.")
         .option("--json", "Print a JSON envelope.")
@@ -13517,6 +13644,7 @@ Examples:
                     ...(options.cookieAuth ? { cookie_auth: true } : {}),
                     ...(options.customProxy ? { custom_proxy: true } : {}),
                     ...(count ? { count } : {}),
+                    ...(options.shareLink ? { share_link: true } : {}),
                     ...(inboxScope ? { inbox_sync_scope: inboxScope } : {}),
                     ...(options.acknowledgeRisk ? { acknowledge_linkedin_risk: true } : {}),
                     ...(options.ownerConsent ? { owner_consent: true } : {}),
@@ -13701,6 +13829,8 @@ Examples:
         .option("--first-name <name>", "The person's first name, as it should appear on mailboxes ordered for this sender. Defaults to splitting --name / the LinkedIn name on the first space.")
         .option("--last-name <name>", "The person's last name, as it should appear on mailboxes ordered for this sender. Ordering managed inboxes for this sender needs both names; a one-word name leaves it blank and the order is refused rather than guessed.")
         .option("--from-linkedin <senderId>", "Seed the profile from this LinkedIn/WhatsApp sender account id: derives the name and MIRRORS the LinkedIn photo into Oxygen storage (LinkedIn's own URL expires, so a mirrored copy is what an inbox vendor can still fetch hours later) and attaches the account.")
+        .option("--avatar-from-linkedin", "Use the attached LinkedIn account's mirrored photo for this new profile.")
+        .option("--avatar-upload-key <key>", "Use the storage_key returned by managed-inboxes upload-avatar; verified server-side.")
         .option("--avatar-url <url>", "Use this image URL as the profile photo instead of the LinkedIn one. Must be a public https URL. An expiring link (e.g. media.licdn.com with e=<epoch>) is stored but marked non-durable and is NOT sent to an inbox vendor — use `set-photo --file` to host a permanent copy.")
         .option("--status <status>", "Initial status: active (default), paused, or archived.")
         .option("--senders <ids>", "Comma-separated sender account ids (LinkedIn/WhatsApp) to attach. A LinkedIn sender also supplies the profile's photo when it has none of its own.")
@@ -13714,6 +13844,8 @@ Examples:
                 ...(readOption(options.firstName) ? { first_name: readOption(options.firstName) } : {}),
                 ...(readOption(options.lastName) ? { last_name: readOption(options.lastName) } : {}),
                 ...(readOption(options.fromLinkedin) ? { from_sender_account_id: readOption(options.fromLinkedin) } : {}),
+                ...(options.avatarFromLinkedin ? { avatar_from_linkedin: true } : {}),
+                ...(readOption(options.avatarUploadKey) ? { avatar_upload_key: readOption(options.avatarUploadKey) } : {}),
                 ...(readOption(options.avatarUrl) ? { avatar_url: readOption(options.avatarUrl) } : {}),
                 ...(readOption(options.status) ? { status: readOption(options.status) } : {}),
                 ...(options.senders ? { sender_account_ids: splitCommaList(options.senders) } : {}),
@@ -14004,6 +14136,9 @@ Examples:
         .option("--text-file <path>", "Read the post body from a file (alternative to --text).")
         .option("--account <ref>", "Sender account to post from. Omit for the org default.")
         .option("--as-organization <id>", "Publish as a company page the account administers (advanced; may require raw-route support).")
+        .option("--repost <id>", "Quote or share this LinkedIn post.")
+        .option("--include-job-posting <id>", "Embed a LinkedIn job preview.")
+        .option("--attachments-json <json-or-file>", "Up to 20 {content:<base64>,content_type:<MIME>,filename:<name>} objects; use a local JSON file for media.")
         .option("--external-link <url>", "Attach an external link to the post.")
         .option("--approved", "Publish for real. Without this flag, prints a preview only.")
         .option("--json", "Print a JSON envelope.")
@@ -14024,6 +14159,9 @@ Examples:
                     ...(account ? { account } : {}),
                     ...(asOrganization ? { as_organization: asOrganization } : {}),
                     ...(externalLink ? { external_link: externalLink } : {}),
+                    ...(readOption(options.repost) ? { repost: readOption(options.repost) } : {}),
+                    ...(readOption(options.includeJobPosting) ? { include_job_posting: readOption(options.includeJobPosting) } : {}),
+                    ...(options.attachmentsJson !== undefined ? { attachments: parseJsonArray(readFileIfPresent(options.attachmentsJson)) } : {}),
                     ...(options.approved ? { approved: true } : {}),
                 },
             });
@@ -14185,6 +14323,7 @@ Examples:
         .description("Comment on a LinkedIn post (or reply to a comment with --comment-id). A real external LinkedIn write that everyone can see and that counts against the sender account's daily action quota, gated behind approval: prints a preview by default and only posts when you pass --approved. --post is the composite post social_id from `oxygen posts get` (NOT the activity URN).")
         .requiredOption("--post <social_id>", "Composite post social_id from `oxygen posts get` (NOT the activity URN).")
         .requiredOption("--text <text>", "Comment text to post.")
+        .option("--mentions-json <json-or-file>", "Provider comment mention objects.")
         .option("--comment-id <id>", "Reply under this comment id instead of commenting on the post.")
         .option("--as-organization <org>", "LinkedIn organization id to comment as a company page.")
         .option("--external-link <url>", "URL to attach as a link preview on the comment.")
@@ -14203,6 +14342,7 @@ Examples:
                 method: "POST",
                 body: {
                     ...(post ? { post } : {}),
+                    ...(options.mentionsJson !== undefined ? { mentions: parseJsonArray(readFileIfPresent(options.mentionsJson)) } : {}),
                     ...(text ? { text } : {}),
                     ...(commentId ? { comment_id: commentId } : {}),
                     ...(asOrganization ? { as_organization: asOrganization } : {}),
@@ -14410,20 +14550,16 @@ Examples:
             });
         });
     }))
-        .addCommand(new Command("list")
-        .description("List the account's pending sent LinkedIn invitations with their invitation ids — the ids `linkedin invitations withdraw --ids` cancels. Read-only: no provider write, no credits. For received requests too, kept in a table that updates itself, use `linkedin invitations setup`.")
-        .option("--account <ref>", "Scope to one sender account (sender id, connection id, or Unipile account id).")
-        .option("--limit <n>", "Maximum invitations to return.")
+        .addCommand(addContractFlags(new Command("list")
+        .description("List the account's pending sent LinkedIn invitations with their invitation ids — the ids `linkedin invitations withdraw --ids` cancels. Read-only provider fetch: no provider write or credits. --cursor resumes the same sender's returned continuation. For received requests too, kept in a table that updates itself, use `linkedin invitations setup`."), LINKEDIN_SENT_INVITES_QUERY_CONTRACT, LINKEDIN_SENT_INVITES_FLAG_OVERLAY)
         .option("--json", "Print a JSON envelope.")
         .action(async (options) => {
         await handleAsyncAction("linkedin invitations list", options, () => {
-            const account = readOption(options.account);
-            const limit = readPositiveInt(options.limit);
+            const selectors = readContractFlags(options, LINKEDIN_SENT_INVITES_QUERY_CONTRACT, LINKEDIN_SENT_INVITES_FLAG_OVERLAY);
             const params = new URLSearchParams();
-            if (account)
-                params.set("account", account);
-            if (limit !== undefined)
-                params.set("limit", String(limit));
+            for (const [key, value] of Object.entries(selectors))
+                if (value !== undefined && value !== null)
+                    params.set(key, String(value));
             const suffix = params.toString();
             return requestOxygen(`/api/cli/linkedin/connections/invites-sent${suffix ? `?${suffix}` : ""}`);
         });
@@ -14453,13 +14589,18 @@ Examples:
         .addCommand(new Command("connect")
         .description("Get a Unipile hosted-auth URL to connect a new WhatsApp account by scanning a QR in WhatsApp → Linked Devices (or reconnect with --reconnect). Newly connected accounts start a mandatory warm-up ramp.")
         .option("--reconnect <connection_id>", "Reconnect an existing connection id instead of linking a new account.")
+        .option("--pairing-phone-number <phone>", "Offer phone-number pairing instead of QR where supported; use your international number.")
         .option("--json", "Print a JSON envelope.")
         .action(async (options) => {
         await handleAsyncAction("whatsapp connect", options, () => {
             const reconnect = readOption(options.reconnect);
+            const pairingPhoneNumber = readOption(options.pairingPhoneNumber);
             return requestOxygen("/api/cli/whatsapp/connect", {
                 method: "POST",
-                body: { ...(reconnect ? { reconnect_connection_id: reconnect } : {}) },
+                body: {
+                    ...(reconnect ? { reconnect_connection_id: reconnect } : {}),
+                    ...(pairingPhoneNumber ? { pairing_phone_number: pairingPhoneNumber } : {}),
+                },
             });
         });
     }))
@@ -14507,6 +14648,9 @@ Examples:
         .option("--messages-reads-per-day <n>", "Daily cap on chat and message-history reads.")
         .option("--min-spacing-seconds <n>", "Minimum seconds between actions.")
         .option("--spacing-jitter-seconds <n>", "Random jitter seconds added to action spacing.")
+        .option("--working-days <days>", "Allowed weekdays, e.g. mon-fri or 1,3,5.")
+        .option("--working-hours-start <HH:MM>", "Local start of the allowed sending window.")
+        .option("--working-hours-end <HH:MM>", "Local end of the allowed sending window.")
         .option("--timezone <tz>", "IANA timezone the daily action counters reset in, e.g. America/New_York.")
         .option("--json", "Print a JSON envelope.")
         .action(async (id, options) => {
@@ -15034,6 +15178,7 @@ Examples:
         .description("Set a conversation's status (the Instantly-style tier). A manual override that locks out AI re-classification. --channel linkedin/whatsapp sets a DM's status.")
         .argument("<conversation>", "Conversation id, Unipile chat id, or (email) Zapbox thread id.")
         .argument("<status>", "A status label key (e.g. interested, meeting_booked, won, not_interested).")
+        .option("--source <manual|ai>", "Classification provenance; manual locks out AI reclassification.")
         .option("--channel <channel>", "Inbox channel: email (default), linkedin, or whatsapp.")
         .option("--json", "Print a JSON envelope.")
         .action(async (conversation, status, options) => {
@@ -15041,7 +15186,7 @@ Examples:
             const channel = readOption(options.channel) ?? "email";
             return requestOxygen(`/api/cli/inbox/${encodeURIComponent(conversation)}/status`, {
                 method: "POST",
-                body: { status, channel },
+                body: { status, channel, ...(readOption(options.source) ? { source: readOption(options.source) } : {}) },
             });
         });
     }))
@@ -15126,6 +15271,9 @@ Examples:
         .addCommand(new Command("create")
         .description("Create a custom status label.")
         .argument("<name>", "Display name.")
+        .option("--key <key>", "Stable custom status key; defaults to the name slug.")
+        .option("--icon <name>", "Label icon; an empty string clears it.")
+        .option("--sort-order <n>", "Numeric position; 0 is valid.")
         .option("--color <hex>", "Hex color (e.g. #2a78d6). Workspace palette: #2a78d6 #eb6834 #1baf7a #eda100 #e87ba4 #008300 #4a3aa7 #e34948 #0e9dc4 #9a4fd0.")
         .option("--bucket <bucket>", "primary (default) or others.")
         .option("--ai-settable", "Let the AI reply classifier assign this label.")
@@ -15141,6 +15289,9 @@ Examples:
                 body: {
                     name,
                     ...(color ? { color } : {}),
+                    ...(options.icon !== undefined ? { icon: options.icon } : {}),
+                    ...(options.sortOrder !== undefined ? { sort_order: Number(options.sortOrder) } : {}),
+                    ...(readOption(options.key) ? { key: readOption(options.key) } : {}),
                     ...(bucket ? { bucket } : {}),
                     ...(options.aiSettable ? { ai_settable: true } : {}),
                     ...(description ? { description } : {}),
@@ -15152,6 +15303,8 @@ Examples:
         .description("Update a status label's name, color, bucket, description, or (custom labels only) ai-settable flag.")
         .argument("<key>", "The label key.")
         .option("--name <name>", "New display name.")
+        .option("--icon <name>", "Label icon; an empty string clears it.")
+        .option("--sort-order <n>", "Numeric position; 0 is valid.")
         .option("--color <hex>", "New hex color.")
         .option("--bucket <bucket>", "New bucket (primary or others).")
         .option("--ai-settable", "Let the AI classifier assign this label (custom labels only).")
@@ -15169,6 +15322,9 @@ Examples:
                 body: {
                     ...(name ? { name } : {}),
                     ...(color ? { color } : {}),
+                    ...(options.icon !== undefined ? { icon: options.icon } : {}),
+                    ...(options.sortOrder !== undefined ? { sort_order: Number(options.sortOrder) } : {}),
+                    ...(readOption(options.key) ? { key: readOption(options.key) } : {}),
                     ...(bucket ? { bucket } : {}),
                     ...(options.aiSettable !== undefined ? { ai_settable: options.aiSettable } : {}),
                     ...(description ? { description } : {}),
@@ -15601,6 +15757,7 @@ Examples:
         .option("--contact-linkedin-property <name>", "Optional contact LinkedIn profile property internal name.")
         .option("--contact-company-domain-property <name>", "Optional explicit company-domain property on contacts, copied to lead rows.")
         .option("--contact-company-linkedin-property <name>", "Optional explicit company LinkedIn URL property on contacts.")
+        .option("--contact-properties <list>", "Comma-separated extra HubSpot contact properties to hydrate (max 50).")
         .option("--company-domain-property <name>", "Company-list domain property (default domain).", "domain")
         .option("--company-linkedin-property <name>", "Optional company-list LinkedIn URL property.")
         .option("--cron <expression>", "Standing cron cadence. Defaults to every 15 minutes.")
@@ -15637,6 +15794,7 @@ Examples:
                     ...(readOption(options.contactLinkedinProperty) ? { contact_linkedin_property: readOption(options.contactLinkedinProperty) } : {}),
                     ...(readOption(options.contactCompanyDomainProperty) ? { contact_company_domain_property: readOption(options.contactCompanyDomainProperty) } : {}),
                     ...(readOption(options.contactCompanyLinkedinProperty) ? { contact_company_linkedin_property: readOption(options.contactCompanyLinkedinProperty) } : {}),
+                    ...(options.contactProperties !== undefined ? { contact_properties: readCsvOption(options.contactProperties) } : {}),
                     ...(readOption(options.companyDomainProperty) ? { company_domain_property: readOption(options.companyDomainProperty) } : {}),
                     ...(readOption(options.companyLinkedinProperty) ? { company_linkedin_property: readOption(options.companyLinkedinProperty) } : {}),
                     mode: options.live ? "live" : "dry_run",
@@ -15683,11 +15841,11 @@ Examples:
         }, formatSequenceAnalyticsHealth);
     }))
         .addCommand(new Command("create")
-        .description("Create a draft multichannel sequence from a steps JSON file. Supports LinkedIn, email, WhatsApp, human call_task, and connected-CRM crm_task journeys. Assign LinkedIn senders with --senders (optional at create — a draft can sit senderless, but enroll/start require at least one for LinkedIn journeys). Native email sends through connected Google/Microsoft mailboxes, including Microsoft SMTP transport; optional --email-* flags bind an Instantly campaign. Install/read the oxygen-sequencer skill for complete mapped CRM task examples.")
-        .addHelpText("after", "\nSenders: each new lead gets one of the --sender-profiles people, and its LinkedIn and email steps come from that person (email from one of their inboxes). Per step, in the steps file: email_send.sender_mailbox_id sends that email from one exact inbox; a LinkedIn step's sender_profile_id sends it from one selected person. Invite, message, inmail and withdraw_invite steps must share one sender_profile_id or none: that person then owns every lead's LinkedIn thread (LinkedIn allows one of your accounts per conversation). visit_profile, follow, like_post and comment_post may each name anyone selected. An email whose From changes, including the return to the lead's inbox, needs its own subject_template.\n")
+        .description("Create a draft multichannel sequence from a steps JSON file. Supports LinkedIn, email, WhatsApp, human call_task, and connected-CRM crm_task journeys. Assign LinkedIn senders with --senders (optional at create — a draft can sit senderless, but enroll/start require at least one for LinkedIn journeys). Native email sends through connected Google/Microsoft mailboxes, including Microsoft SMTP transport; optional --email-* flags bind an Instantly campaign. Install/read the oxygen-sequencer skill for per-step senders, the launch preview and complete mapped CRM task examples.")
+        .addHelpText("after", "\nSenders: each new lead gets one of the --sender-profiles people, the one with the fewest of this sequence's leads (a lead already talking to one of your LinkedIn accounts keeps that account's person), and its LinkedIn and email steps come from that person (email from one of their inboxes). Per step, in the steps file: email_send.sender_profile_id sends that email from any inbox of one selected person (the normal inbox rotation spreads leads across that person's inboxes and each lead keeps its one; a lead already assigned to that person keeps its own inbox; with none usable the lead waits, never using a colleague's inbox), and email_send.sender_mailbox_id from one exact inbox (set one or neither); a LinkedIn step's sender_profile_id sends it from one selected person. Invite, message, inmail and withdraw_invite steps must share one sender_profile_id or none: that person then owns every lead's LinkedIn thread (LinkedIn allows one of your accounts per conversation). visit_profile, follow, like_post and comment_post may each name anyone selected. An email whose From changes, including the return to the lead's inbox, needs its own subject_template. To check who sends each step, run `sequences start <sequence>` without --approved; nothing changes.\n")
         .requiredOption("--name <name>", "Human-readable sequence name.")
         .requiredOption("--slug <slug>", "Unique slug for the sequence.")
-        .requiredOption("--steps-file <path>", "Path to a JSON file: { \"steps\": [...] }. LinkedIn steps (visit_profile | invite | wait_for_connection | message | inmail | follow | like_post | comment_post | withdraw_invite), email steps (email_send | email_enroll | email_move | email_stop), WhatsApp (whatsapp_message), human call tasks (call_task), connected-CRM tasks (crm_task; channel crm; exact identity record_mappings + explicit create/update policy + record_links + dynamic task property_mappings/associations), and control steps (wait | wait_for_signal | branch | stop), each with an `id`. Copy templates support {{column}} interpolation from the lead's row, {{column|fallback}} inline fallbacks, deterministic spintax — {{RANDOM|a|b|c}} or industry-standard bare {Hi|Hey|Hello}, nestable like {Would {Tuesday|Thursday} work|next week?} — and {% if column %}…{% endif %} conditionals; a bare {…} region is spintax only when it contains a top-level |, so literal braces (CSS/JSON) pass through. Every step's copy can also use {{sender_first_name}}, {{sender_last_name}} and {{sender_full_name}} (alias {{sender_name}}): the name of the person who sends that step (their sender profile, else the account or inbox display name), with no table column needed; email steps add {{sender_email}} (the from address). A row column of the same name WINS on collision, and a missing name renders empty. comment_post takes text_template and/or ai_prompt — a KG-grounded comment generated at send time (a paid AI call) that falls back to text_template if generation fails. A `branch` routes on signals (then/else) or the legacy connection_accepted/already_connected/open_profile sugar (then_id/else_id). A signal condition can also branch on the LEAD'S DATA: a data leaf { has_column: \"email\" } is true when that row_values column has a non-empty value (add present:false for \"missing\") — e.g. route leads that have an email down an email arm and the rest down a LinkedIn arm. MINIMAL EMAIL STEP SHAPE: { \"id\": \"s1\", \"channel\": \"email\", \"kind\": \"email_send\", \"subject_template\": \"...\", \"body_template\": \"...\" } — body_template is REQUIRED on email_send; subject_template is OPTIONAL and is the one control that decides threading: give a step its own subject and it goes out as a NEW email, omit it and the step continues the lead's previous email in the same thread, going out as \"Re: <the previous email's subject>\" (what the retired email_reply kind used to be — still accepted on input, rewritten into this shape, and reported under `warnings` in the response). The FIRST email step of a sequence must carry a subject, since it has no earlier thread to continue. MINIMAL WHATSAPP STEP SHAPE: { \"id\": \"s1\", \"channel\": \"whatsapp\", \"kind\": \"whatsapp_message\", \"template\": \"Hi {{first_name|there}} …\" } — template is REQUIRED, and a live WhatsApp start also needs the sequence's --whatsapp-cold-initiate opt-in. A/B tests use an explicit `variants` array of copy partials on the step (up to 25 alternates, a–z; spintax varies wording INSIDE one variant and is not A/B-tracked). For the complete replay-safe crm_task upsert mapping shape, install/read the oxygen-sequencer skill.")
+        .requiredOption("--steps-file <path>", "Path to a JSON file: { \"steps\": [...] }. LinkedIn steps (visit_profile | invite | wait_for_connection | message | inmail | follow | like_post | comment_post | withdraw_invite), email steps (email_send | email_enroll | email_move | email_stop), WhatsApp (whatsapp_message), human call tasks (call_task), connected-CRM tasks (crm_task; channel crm; exact identity record_mappings + explicit create/update policy + record_links + dynamic task property_mappings/associations), and control steps (wait | wait_for_signal | branch | stop), each with an `id`. Copy templates support {{column}} interpolation from the lead's row, {{column|fallback}} inline fallbacks, deterministic spintax — {{RANDOM|a|b|c}} or industry-standard bare {Hi|Hey|Hello}, nestable like {Would {Tuesday|Thursday} work|next week?} — and {% if column %}…{% endif %} conditionals; a bare {…} region is spintax only when it contains a top-level |, so literal braces (CSS/JSON) pass through. Every step's copy can also use {{sender_first_name}}, {{sender_last_name}} and {{sender_full_name}} (alias {{sender_name}}): the name of the person who sends that step (their sender profile, else the account or inbox display name), with no table column needed; email steps add {{sender_email}} (the from address). A row column of the same name WINS on collision, and a missing name renders empty. comment_post takes text_template and/or ai_prompt — a KG-grounded comment generated at send time (a paid AI call) that falls back to text_template if generation fails. A `branch` routes on signals (then/else) or the legacy connection_accepted/already_connected/open_profile sugar (then_id/else_id). A signal condition can also branch on the LEAD'S DATA: a data leaf { has_column: \"email\" } is true when that row_values column has a non-empty value (add present:false for \"missing\") — e.g. route leads that have an email down an email arm and the rest down a LinkedIn arm. MINIMAL EMAIL STEP SHAPE: { \"id\": \"s1\", \"channel\": \"email\", \"kind\": \"email_send\", \"subject_template\": \"...\", \"body_template\": \"...\" } — body_template is REQUIRED on email_send; subject_template is OPTIONAL and is the one control that decides threading: give a step its own subject and it goes out as a NEW email, omit it and the step continues the lead's previous email in the same thread, going out as \"Re: <the previous email's subject>\" (what the retired email_reply kind used to be — still accepted on input, rewritten into this shape, and reported under `warnings` in the response). The FIRST email step of a sequence must carry a subject, since it has no earlier thread to continue. MINIMAL WHATSAPP STEP SHAPE: { \"id\": \"s1\", \"channel\": \"whatsapp\", \"kind\": \"whatsapp_message\", \"template\": \"Hi {{first_name|there}} …\" } — template is REQUIRED, and a live WhatsApp start also needs the sequence's --whatsapp-cold-initiate opt-in. MINIMAL WAIT STEP SHAPE: { \"id\": \"w1\", \"kind\": \"wait\", \"days\": 3 } — days and/or hours, at least 1 hour in total. A/B tests use an explicit `variants` array of copy partials on the step (up to 25 alternates, a–z; spintax varies wording INSIDE one variant and is not A/B-tracked). For the complete replay-safe crm_task upsert mapping shape, install/read the oxygen-sequencer skill.")
         .option("--channels <list>", "Comma-separated channels: linkedin,email,whatsapp,call,crm. Defaults to the channels the journey touches. crm_task currently supports HubSpot.")
         .option("--whatsapp-cold-initiate", "WhatsApp: allow cold-initiating new chats (no prior conversation). Required to start a WhatsApp sequence live — WhatsApp via Unipile is unofficial WhatsApp Web, so cold-initiating is an explicit ban-risk opt-in.")
         .option("--phone-column-key <key>", "WhatsApp: row_values key holding each lead's phone number (else falls back to phone/phone_number/mobile).")
@@ -15715,13 +15873,15 @@ Examples:
         .option("--email-min-gap-minutes <n>", "Minimum same-mailbox gap, default 12 minutes (integer 0-720; 0 disables the extra gap). Sends are spread across the window and may be farther apart. Daily caps and windows still apply.")
         .option("--opportunity-value <usd>", "Estimated USD value of one positive-reply opportunity (>= 0). Analytics-only: sequence stats multiply it by the positive-reply count to report pipeline $ (stats.opportunities). Never gates a send or spends a credit.")
         .option("--mailboxes <ids>", "Per-sequence sending-account allowlist for native email (Instantly's 'Accounts to use'): comma-separated mailbox ids. Native email sends rotate ONLY over these mailboxes instead of the whole pool. Omit for the whole pool. Note: a narrow allowlist plus --esp-matching strict can starve sends when no allowed same-provider mailbox exists (surfaced as blocked defer reasons in stats).")
-        .option("--sender-profiles <ids>", "Send from these sender profiles (unified LinkedIn/WhatsApp/inbox identities): comma-separated profile ids. The server resolves each into its senders + inboxes. Live start is blocked if a selected profile lacks an account for a channel the journey uses.")
+        .option("--sender-profiles <ids>", "Send from these sender profiles (unified LinkedIn/WhatsApp/inbox identities): comma-separated profile ids (`oxygen senders profiles list` lists them). The server resolves each into its senders + inboxes. Live start is blocked if a selected profile lacks an account for a channel the journey uses.")
         .option("--no-stop-on-bounce", "Keep a lead's enrollment running after a hard bounce (default: stop it). The bounce is still recorded as an email_bounced signal either way.")
         .option("--exclude-contacted", "Default every enroll into this sequence to cross-campaign exclusion — skip leads any OTHER active sequence is already contacting. A per-enroll `sequences enroll --exclude-contacted` / `--no-exclude-contacted` always overrides this default. Off by default.")
         .option("--no-exclude-contacted", "Turn the sequence-level exclude-contacted default back OFF (enrollments then exclude cross-campaign only when a call opts in).")
         .option("--company-reply-pause <off|default|statuses>", "Pause the replier's company in this campaign when a reply has one of these statuses. Oxygen detects the company from work-email domains or explicit company fields; with no company identity, only the replier stops. New sequences start with this setting off. 'default' = interested,neutral,not_now,not_interested; or comma-separated Inbox status keys (`inbox labels list`); 'off' disables it. Read the saved setting with `sequences get`.")
         .option("--stop-on-reply-scope <scope>", "(deprecated: use --company-reply-pause) 'company_domain' = --company-reply-pause interested,neutral,not_now,not_interested,wrong_person; 'lead' = off.")
         .option("--bounce-protection <json>", "Sequence bounce policy JSON (partial updates merge): enabled=true, warning_rate=.02, pause_rate=.03, min_sends=20, window_days=7. Hard bounces / accepted sends in the rolling window; pauses this sequence, not the fleet. Rates are fractions; mailbox protection is separate.")
+        .option("--auto-optimize", "Enable the sequence-wide A/B auto-winner (default on).")
+        .option("--no-auto-optimize", "Disable the sequence-wide A/B auto-winner; manual variant decisions stay available.")
         .option("--include-unsubscribe", "Add an unsubscribe option to emails, the same as Launch's switch: a visible recipient-bound link (plain text shows the URL, HTML a linked Unsubscribe label) plus one-click headers that mail apps show as an Unsubscribe button, both on first-touch cold emails; in-thread follow-ups carry neither. Zapbox sends (mailboxes imported from Zapmail, `transport: \"zapbox\"` in `mailboxes list --json`) carry the link only. Off by default. There is no separate opt-out text: write any reply-to-stop line into the email copy. `sequences update` can switch on the link or the headers alone.")
         .option("--no-include-unsubscribe", "Turn off both the visible unsubscribe link and the one-click headers.")
         .option("--tracking-opens", "Opt in to open tracking (default off). Requires a verified tracking domain and deployment tracking secret.")
@@ -15802,7 +15962,7 @@ Examples:
     }))
         .addCommand(new Command("update")
         .description("Update a sequence. Journey structure/channels/email binding are draft-only so revised scope receives a fresh launch approval; a started sequence may only re-time waits it already has (clear a delay by zeroing it, never by deleting the step — enrollments track position by index); sender pools can change while draft or paused; launch caps change through `sequences start` after first start. Name, throttles, the sending schedule, tags, the unsubscribe option (off by default), and open/click tracking toggles remain editable as allowed by the server. Pass only the fields you want to change.")
-        .addHelpText("after", "\nSenders: email_send.sender_mailbox_id sends one email from an exact inbox of a selected sender; a LinkedIn step's sender_profile_id sends it from a selected person (invite, message, inmail and withdraw_invite share one or none). Omit both to use the lead's assigned person. An email whose From changes needs its own subject_template.\n")
+        .addHelpText("after", "\nSenders: email_send.sender_profile_id sends one email from any inbox of a selected person (a lead already assigned to that person keeps its own inbox), and email_send.sender_mailbox_id from one exact inbox of a selected sender; a LinkedIn step's sender_profile_id sends it from a selected person (invite, message, inmail and withdraw_invite share one or none). Omit both to use the lead's assigned person. An email whose From changes needs its own subject_template. `sequences start <sequence>` without --approved shows who sends each step; nothing changes.\n")
         .argument("<sequence>", "Sequence id or slug.")
         .option("--name <name>", "New human-readable sequence name.")
         .option("--steps-file <path>", "Draft only: path to a JSON file: { \"steps\": [...] } replacing the journey. Copy supports {{column}} interpolation; every step also takes {{sender_first_name}} / {{sender_last_name}} / {{sender_full_name}} for the person who sends it, and email adds {{sender_email}} (a same-named row column wins). A `branch` can also route on the lead's data with a data leaf { has_column: \"email\" } (true when that row_values column is non-empty; present:false for \"missing\").")
@@ -15838,13 +15998,15 @@ Examples:
         .option("--email-min-gap-minutes <n>", "Minimum same-mailbox gap, default 12 minutes (integer 0-720; 0 disables the extra gap). Sends are spread across the window and may be farther apart. Daily caps and windows still apply.")
         .option("--opportunity-value <usd>", "Estimated USD value of one positive-reply opportunity (>= 0). Analytics-only: sequence stats multiply it by the positive-reply count to report pipeline $ (stats.opportunities). Never gates a send or spends a credit.")
         .option("--mailboxes <ids>", "Per-sequence sending-account allowlist for native email (Instantly's 'Accounts to use'): comma-separated mailbox ids. Native email sends rotate ONLY over these mailboxes instead of the whole pool. Note: a narrow allowlist plus --esp-matching strict can starve sends when no allowed same-provider mailbox exists (surfaced as blocked defer reasons in stats).")
-        .option("--sender-profiles <ids>", "Send from these sender profiles (unified LinkedIn/WhatsApp/inbox identities): comma-separated profile ids. The server resolves each into its senders + inboxes. Live start is blocked if a selected profile lacks an account for a channel the journey uses.")
+        .option("--sender-profiles <ids>", "Send from these sender profiles (unified LinkedIn/WhatsApp/inbox identities): comma-separated profile ids (`oxygen senders profiles list` lists them). The server resolves each into its senders + inboxes. Live start is blocked if a selected profile lacks an account for a channel the journey uses.")
         .option("--no-stop-on-bounce", "Keep a lead's enrollment running after a hard bounce (default: stop it). The bounce is still recorded as an email_bounced signal either way.")
         .option("--exclude-contacted", "Default every enroll into this sequence to cross-campaign exclusion — skip leads any OTHER active sequence is already contacting. A per-enroll `sequences enroll --exclude-contacted` / `--no-exclude-contacted` always overrides this default. Off by default.")
         .option("--no-exclude-contacted", "Turn the sequence-level exclude-contacted default back OFF (enrollments then exclude cross-campaign only when a call opts in).")
         .option("--company-reply-pause <off|default|statuses>", "Pause the replier's company in this campaign when a reply has one of these statuses. Oxygen detects the company from work-email domains or explicit company fields; with no company identity, only the replier stops. New sequences start with this setting off. 'default' = interested,neutral,not_now,not_interested; or comma-separated Inbox status keys (`inbox labels list`); 'off' disables it. Read the saved setting with `sequences get`.")
         .option("--stop-on-reply-scope <scope>", "(deprecated: use --company-reply-pause) 'company_domain' = --company-reply-pause interested,neutral,not_now,not_interested,wrong_person; 'lead' = off.")
         .option("--bounce-protection <json>", "Sequence bounce policy JSON (partial updates merge): enabled=true, warning_rate=.02, pause_rate=.03, min_sends=20, window_days=7. Hard bounces / accepted sends in the rolling window; pauses this sequence, not the fleet. Rates are fractions; mailbox protection is separate.")
+        .option("--auto-optimize", "Enable the sequence-wide A/B auto-winner (default on).")
+        .option("--no-auto-optimize", "Disable the sequence-wide A/B auto-winner; manual variant decisions stay available.")
         .option("--include-unsubscribe", "Add an unsubscribe option to emails, the same as Launch's switch: a visible recipient-bound link (plain text shows the URL, HTML a linked Unsubscribe label) plus one-click headers that mail apps show as an Unsubscribe button, both on first-touch cold emails; in-thread follow-ups carry neither. Zapbox sends (mailboxes imported from Zapmail, `transport: \"zapbox\"` in `mailboxes list --json`) carry the link only. Off by default. There is no separate opt-out text: write any reply-to-stop line into the email copy.")
         .option("--no-include-unsubscribe", "Turn off both the visible unsubscribe link and the one-click headers.")
         .option("--include-unsubscribe-headers", "Only the one-click unsubscribe headers (default off); --include-unsubscribe turns on the headers and the visible link together.")
@@ -15919,7 +16081,7 @@ Examples:
         });
     }))
         .addCommand(new Command("get")
-        .description("Get a sequence's definition, senders, status, and credit usage. --readiness adds the launch check — whether it CAN go live, why not, and which mailboxes it would send from — without touching it.")
+        .description("Get a sequence's definition, senders, status, and credit usage. --readiness adds the launch check — whether it CAN go live, why not, and the mailbox pool it would send from — without touching it; `sequences start <sequence>` without --approved shows who sends each step (sender_journey).")
         .argument("<sequence>", "Sequence id or slug.")
         .option("--readiness", "Add launch_readiness: blockers (e.g. a missing send cap), warnings, and the resolved sending mailboxes. Read-only — sends nothing, changes nothing, spends nothing. Skips the LinkedIn rendered-copy scan, which stays in `sequences start` without --approved.")
         .option("--json", "Print a JSON envelope.")
@@ -15975,6 +16137,7 @@ Examples:
         .requiredOption("--campaign <name-or-id>", "The campaign that already exists in that tool. A name is resolved against your connected account (exact id, then exact name, then a unique partial match).")
         .requiredOption("--from-table <table>", "Table id or slug whose rows are pushed.")
         .option("--rows <row_ids>", "Comma-separated row ids to push. Defaults to the whole table.")
+        .option("--excluded-rows <row_ids>", "Comma-separated row ids omitted from the whole-table/filter selection; cannot combine with --rows.")
         .option("--filter-json <json>", "Filter object or array selecting the rows, e.g. '{\"column\":\"email\",\"op\":\"is_not_null\"}'.")
         .option("--mode <mode>", "dry_run (default) or live.")
         .option("--approved", "Required for --mode live: confirms the external write after inspecting the dry run.")
@@ -15990,10 +16153,13 @@ Examples:
             if (rows.length > 0 && filterJson) {
                 throw new Error("Pass either --rows or --filter-json, not both.");
             }
+            const excludedRowIds = splitCommaList(options.excludedRows);
+            if (rows.length > 0 && excludedRowIds.length > 0)
+                throw new OxygenError("invalid_selection", "--excluded-rows cannot combine with --rows.", { exitCode: 2 });
             const selection = rows.length > 0
                 ? { mode: "row_ids", row_ids: rows }
-                : filterJson
-                    ? { mode: "all_matching", filters: JSON.parse(filterJson) }
+                : filterJson || excludedRowIds.length > 0
+                    ? { mode: "all_matching", filters: filterJson ? JSON.parse(filterJson) : [], ...(excludedRowIds.length > 0 ? { excluded_row_ids: excludedRowIds } : {}) }
                     : null;
             const fieldMappingJson = readOption(options.fieldMappingJson);
             return requestOxygen("/api/cli/sequences/push-external", {
@@ -16014,12 +16180,12 @@ Examples:
         }, formatSequencePushExternal);
     }))
         .addCommand(new Command("start")
-        .description("Preview or start a sequence. Without --approved this is the launch check: it returns launch_readiness (blockers such as a missing send cap or the WhatsApp cold-initiate opt-in, plus warnings), scans pending LinkedIn copy, and returns exact rendered recipient samples, character counts/limits, copy blockers, per-kind scope, sender/mailbox capacity, CRM readiness, and safety caps. Live start requires --approved; --max-credits is optional. Email/WhatsApp/CRM-task journeys additionally require --max-live-sends because their external actions cost 0 Oxygen credits. Use --dry-run to simulate without any send, provider campaign, CRM task, or credits. The first live start also switches on the standing reply → CRM automation for the workspace.")
+        .description("Preview or start a sequence. Without --approved this is the launch check and changes nothing: it returns launch_readiness (blockers such as a missing send cap or the WhatsApp cold-initiate opt-in, plus warnings), who sends each step (sender_journey: each step's From, its candidate inboxes and how a lead's inbox is picked; no leads needed), scans pending LinkedIn copy, and returns exact rendered recipient samples, character counts/limits, copy blockers, per-kind scope, sender/mailbox capacity, CRM readiness, and safety caps. Live start requires --approved; --max-credits is optional. Email/WhatsApp/CRM-task journeys additionally require --max-live-sends because their external actions cost 0 Oxygen credits. --dry-run is not this preview: it starts the sequence in simulated mode (it leaves draft), with no send, provider campaign, CRM task, or credits. The first live start also switches on the standing reply → CRM automation for the workspace.")
         .argument("<sequence>", "Sequence id or slug.")
         .option("--approved", "Approve and activate live. Without this flag, returns a preview only, including copy_preview rendered samples and blockers.")
         .option("--max-credits <n>", "Optional credit ceiling for the LinkedIn track (omit for an unbounded run).")
         .option("--max-live-sends <n>", "Live external-action ceiling (positive integer). Required for email, WhatsApp, or crm_task steps.")
-        .option("--dry-run", "Activate the sequence (status draft → active, startedAt set) in dry-run mode: every step advances with simulated actions — no sends, CRM writes, provider calls, or credits. This is NOT the preview: `sequences start` with no flags is the side-effect-free launch preview, and a dry-run sequence must be paused or deleted to leave that state.")
+        .option("--dry-run", "Activate the sequence (status draft → active, startedAt set) in dry-run mode: every step advances with simulated actions — no sends, CRM writes, provider calls, or credits. This is NOT the preview: `sequences start` with no flags is the side-effect-free launch preview. A later live start (--approved) restarts those leads from the first step so they are contacted for real, except deleted source rows, a person another live campaign contacts under exclude_contacted, and older duplicates of a person.")
         .option("--json", "Print a JSON envelope.")
         .action(async (sequence, options) => {
         await handleAsyncAction("sequences start", options, () => {
@@ -16083,7 +16249,7 @@ Examples:
         await handleAsyncAction("sequences delete", options, () => requestOxygen(`/api/cli/sequences/${encodeURIComponent(sequence)}${options.approved ? "?approved=true" : ""}`, { method: "DELETE" }));
     }))
         .addCommand(new Command("enrollments")
-        .description("List per-lead enrollment state plus the latest action status, error, attempts, and retry time.")
+        .description("List per-lead enrollment state plus the latest action status, error, attempts, and retry time. missing_source_row is true for a lead whose source-table row was deleted: still enrolled and contacted (remove with `contacts-remove --missing-source-rows`); null when the campaign has no live source table to check against, or the check failed.")
         .argument("<sequence>", "Sequence id or slug.")
         .option("--status <status>", "Filter by enrollment status (active, waiting_connection, replied, completed, stopped, failed).")
         .option("--limit <n>", "Maximum enrollments to return (1-500).")
@@ -16102,7 +16268,7 @@ Examples:
         });
     }))
         .addCommand(new Command("contacts")
-        .description("List a launched campaign's table-backed contacts with full source variables, contact tags, and factual or assigned sender. A contact carries every tag it reached: contacted means an invite, message or email was sent (a profile visit is not), and a positive reply is also replied and contacted. Contacts removed from this campaign are hidden; source rows remain intact.")
+        .description("List a launched campaign's table-backed contacts with full source variables, contact tags, and factual or assigned sender. A contact carries every tag it reached: contacted means an invite, message or email was sent (a profile visit is not), and a positive reply is also replied and contacted. Contacts removed from this campaign are hidden; source rows remain intact. missing_source_row_count (first page only) counts enrolled leads whose source-table row was deleted: still contacted, never listed (remove them with `contacts-remove --missing-source-rows`).")
         .argument("<sequence>", "Sequence id or slug.")
         .option("--contact-state <tags>", "Only contacts with any of these tags, comma-separated: not_contacted, contacted, connected, replied, positive_reply; or all.", "all")
         .option("--exclude-contact-state <tags>", "Hide contacts with any of these tags, comma-separated.")
@@ -16152,27 +16318,39 @@ Examples:
         });
     }))
         .addCommand(new Command("contacts-remove")
-        .description("Remove selected source-table rows from this campaign only. Preview by default; --approved stops pending enrollment work and queues delegated-provider cleanup while preserving source rows and historical analytics.")
+        .description("Remove leads from this campaign only: selected source-table rows (--table-row-ids), or every enrolled lead whose source-table row was deleted (--missing-source-rows; deleting a row never removes its lead). Preview by default and names those leads; --approved stops pending enrollment work and queues delegated-provider cleanup while preserving source rows and historical analytics. Permanent: a removed lead cannot be re-enrolled in this campaign. Finished leads stay as they are, except one a dry run finished while the sequence is still in dry run, which a live start would otherwise restart.")
         .argument("<sequence>", "Sequence id or slug.")
-        .requiredOption("--table-row-ids <ids>", "Comma-separated source table row UUIDs (maximum 500).")
+        .option("--table-row-ids <ids>", "Comma-separated source table row UUIDs (maximum 500).")
+        .option("--missing-source-rows", "Select enrolled leads whose source-table row was deleted (up to 500 per call, oldest first).")
         .option("--approved", "Apply the previewed campaign-only removal.")
         .option("--json", "Print a JSON envelope.")
         .action(async (sequence, options) => {
-        await handleAsyncAction("sequences contacts-remove", options, () => {
-            const tableRowIds = options.tableRowIds
-                .split(",")
-                .map((value) => value.trim())
-                .filter(Boolean);
-            if (tableRowIds.length === 0 || tableRowIds.length > 500) {
-                throw new Error("--table-row-ids must contain between 1 and 500 row UUIDs.");
+        await handleAsyncAction("sequences contacts-remove", options, async () => {
+            const rowIdsOption = readOption(options.tableRowIds);
+            if (Boolean(rowIdsOption) === (options.missingSourceRows === true)) {
+                throw new OxygenError("invalid_request", "Pass exactly one of --table-row-ids <ids> or --missing-source-rows.", { exitCode: 2 });
+            }
+            let selector = { missing_source_rows: true };
+            if (rowIdsOption) {
+                const tableRowIds = rowIdsOption
+                    .split(",")
+                    .map((value) => value.trim())
+                    .filter(Boolean);
+                if (tableRowIds.length === 0 || tableRowIds.length > 500) {
+                    throw new Error("--table-row-ids must contain between 1 and 500 row UUIDs.");
+                }
+                selector = { table_row_ids: tableRowIds };
             }
-            return requestOxygen(`/api/cli/sequences/${encodeURIComponent(sequence)}/contacts`, {
+            const data = await requestOxygen(`/api/cli/sequences/${encodeURIComponent(sequence)}/contacts`, {
                 method: "POST",
                 body: {
-                    table_row_ids: tableRowIds,
+                    ...selector,
                     approved: options.approved === true,
                 },
             });
+            if (!options.json)
+                writeContactsRemoveSummary(data);
+            return data;
         });
     }))
         .addCommand(new Command("pause-company")
@@ -16376,6 +16554,7 @@ Examples:
         .option("--timezone <tz>", "IANA timezone (e.g. America/New_York). Calls are allowed 09:00-20:00 in the lead's local time; WITHOUT a timezone that window cannot be checked, so the guardrail fails closed and the lead cannot be dialed.")
         .option("--override <guardrails>", "Comma-separated guardrails to waive for THIS lead: calling_window (the 09:00-20:00 local window), unknown_timezone, daily_cap. Do-not-call, credits, number health and destination coverage are never waivable.")
         .option("--note <text>", "Talking points for the rep. Shown on the dial screen, never sent to the lead.")
+        .option("--assigned-user-id <id>", "Assign the call task to this workspace user.")
         .option("--source <source>", "Origin: manual (default), crm, table, reply, sequence.")
         .option("--priority <n>", "Higher sorts first in the queue.")
         .option("--due <iso>", "ISO-8601 timestamp; the task stays out of the queue until then.")
@@ -16411,6 +16590,7 @@ Examples:
                 method: "POST",
                 body: {
                     action: "queue",
+                    ...(readOption(options.assignedUserId) ? { assigned_user_id: readOption(options.assignedUserId) } : {}),
                     lead_phone: phone,
                     ...(name ? { lead_name: name } : {}),
                     ...(timezone ? { lead_timezone: timezone } : {}),
@@ -16793,22 +16973,24 @@ Examples:
         });
     }))
         .addCommand(new Command("add")
-        .description("Add (or refresh) a lead provider id on the org do-not-contact list so the sequencer never enrolls them again. Idempotent. --reason defaults to manual.")
-        .requiredOption("--lead <provider_id>", "The lead provider id (e.g. a LinkedIn ACo... id) to suppress.")
+        .description("Add or refresh selected lead ids on the org do-not-contact list so the sequencer never enrolls them again. Use --lead or --leads (1-500). Idempotent; --reason defaults to manual.")
+        .option("--lead <provider_id>", "One lead provider id to suppress; exclusive with --leads.")
+        .option("--leads <ids>", "Comma-separated lead provider ids to suppress in one bounded batch (1-500).")
         .option("--reason <reason>", "Why: manual (default), replied, unsubscribed, bounced, do_not_contact, friends.")
         .option("--detail <text>", "Optional free-text note stored with the suppression.")
         .option("--json", "Print a JSON envelope.")
         .action(async (options) => {
         await handleAsyncAction("suppressions add", options, () => {
             const lead = readOption(options.lead);
-            if (!lead)
-                throw new Error("--lead is required.");
+            const leads = options.leads !== undefined ? readSuppressionBulkKeys(options.leads, "--leads") : undefined;
+            if (Boolean(lead) === Boolean(leads))
+                throw new OxygenError("invalid_request", "Pass exactly one of --lead or --leads.", { exitCode: 2 });
             const reason = readOption(options.reason);
             const detail = readOption(options.detail);
             return requestOxygen("/api/cli/suppressions", {
                 method: "POST",
                 body: {
-                    lead_provider_id: lead,
+                    ...(leads ? { lead_provider_ids: leads } : { lead_provider_id: lead }),
                     ...(reason ? { reason } : {}),
                     ...(detail ? { detail } : {}),
                 },
@@ -16816,11 +16998,27 @@ Examples:
         });
     }))
         .addCommand(new Command("remove")
-        .description("Remove one lead provider id (--lead), or every identity of one merged person (--subject-id), from the org do-not-contact list (re-enable contact). A subject id is stamped on each identifier of an imported contact: `hubspot:contacts:<id>` from `suppressions hubspot sync`, `manual:<uuid>` returned by `suppressions import-person`. Read it as metadata.dnc_subject_id in `suppressions list` (LinkedIn rows only) or in `suppressions addresses|phones|companies --json`, which is where an email- or phone-only contact appears.")
+        .description("Remove selected leads or every identity of selected merged people from the org do-not-contact list. Choose one of --lead, --leads, --subject-id or --subject-ids; batches hold 1-500 ids. Read a person's metadata.dnc_subject_id in suppressions list, addresses, phones or companies --json.")
         .option("--lead <provider_id>", "The lead provider id to un-suppress. Mutually exclusive with --subject-id.")
         .option("--subject-id <id>", "DNC subject id (metadata.dnc_subject_id). Clears that person's email, phone, LinkedIn, and company suppressions in one transaction.")
+        .option("--leads <ids>", "Comma-separated lead provider ids to remove in one bounded batch (1-500).")
+        .option("--subject-ids <ids>", "Comma-separated merged-person subject ids to remove across every ledger (1-500).")
         .option("--json", "Print a JSON envelope.")
         .action(async (options) => {
+        if (options.leads !== undefined || options.subjectIds !== undefined) {
+            await handleAsyncAction("suppressions remove", options, () => {
+                const selectors = [options.lead, options.subjectId, options.leads, options.subjectIds].filter((value) => value !== undefined);
+                if (selectors.length !== 1)
+                    throw new OxygenError("invalid_request", "Pass exactly one of --lead, --leads, --subject-id or --subject-ids.", { exitCode: 2 });
+                return requestOxygen("/api/cli/suppressions", {
+                    method: "DELETE",
+                    body: options.leads !== undefined
+                        ? { lead_provider_ids: readSuppressionBulkKeys(options.leads, "--leads") }
+                        : { subject_ids: readSuppressionBulkKeys(options.subjectIds, "--subject-ids") },
+                });
+            });
+            return;
+        }
         const subjectId = readOption(options.subjectId);
         if (!subjectId) {
             await handleAsyncAction("suppressions remove", options, () => {
@@ -16879,6 +17077,7 @@ Examples:
         .requiredOption("--file <path>", "Path to a file of emails, bare domains, LinkedIn profile URLs, and/or LinkedIn member ids, separated by newlines, commas, or whitespace.")
         .option("--reason <reason>", "Suppression reason. Emails: hard_bounce | complaint | unsubscribe | manual. Domains: manual | complaint | policy. LinkedIn contacts: manual | replied | unsubscribed | bounced | do_not_contact | friends. Required when the file contains any domains; must be valid for every entry type present (manual always is).")
         .option("--source <text>", "Optional provenance note stored on every imported row (e.g. instantly_export).")
+        .option("--metadata-json <json-or-file>", "Default metadata stored on imported identities.")
         .option("--detail <text>", "Optional free-text note stored on every imported row.")
         .option("--json", "Print a JSON envelope.")
         .action(async (options) => {
@@ -16902,6 +17101,7 @@ Examples:
                 method: "POST",
                 body: {
                     entries,
+                    ...(options.metadataJson !== undefined ? { metadata: parseJsonObject(readFileIfPresent(options.metadataJson)) } : {}),
                     ...(reason ? { reason } : {}),
                     ...(source ? { source } : {}),
                     ...(detail ? { detail } : {}),
@@ -17029,11 +17229,18 @@ Examples:
         });
     }))
         .addCommand(new Command("remove-phone")
-        .description("Deliberately remove one strict E.164 phone suppression.")
-        .argument("<phone>", "Strict E.164 number, e.g. +14155550123.")
+        .description("Remove one phone suppression or 1-500 exact E.164 numbers with --phones.")
+        .argument("[phone]", "One strict E.164 number, e.g. +14155550123; exclusive with --phones.")
+        .option("--phones <phones>", "Comma-separated strict E.164 numbers to remove (1-500).")
         .option("--json", "Print a JSON envelope.")
         .action(async (phone, options) => {
-        await handleAsyncAction("suppressions remove-phone", options, () => requestOxygen(`/api/cli/suppressions/phones?phone=${encodeURIComponent(phone)}`, { method: "DELETE" }));
+        await handleAsyncAction("suppressions remove-phone", options, () => {
+            if (Boolean(phone) === (options.phones !== undefined))
+                throw new OxygenError("invalid_request", "Pass one phone or --phones.", { exitCode: 2 });
+            return options.phones !== undefined
+                ? requestOxygen("/api/cli/suppressions/phones", { method: "DELETE", body: { phones: readSuppressionBulkKeys(options.phones, "--phones") } })
+                : requestOxygen(`/api/cli/suppressions/phones?phone=${encodeURIComponent(phone)}`, { method: "DELETE" });
+        });
     }))
         .addCommand(new Command("companies")
         .description("List explicit company-domain and LinkedIn-company suppressions. These stop every Sequence channel.")
@@ -17054,14 +17261,23 @@ Examples:
         });
     }))
         .addCommand(new Command("remove-company")
-        .description("Deliberately remove one explicit company suppression.")
-        .requiredOption("--kind <kind>", "domain or linkedin_company.")
-        .requiredOption("--value <identity>", "Domain or canonical LinkedIn company URL.")
+        .description("Remove one explicit company suppression or 1-500 exact identities with --identities-json.")
+        .option("--kind <kind>", "domain or linkedin_company; use with --value.")
+        .option("--value <identity>", "One domain or canonical LinkedIn company URL.")
+        .option("--identities-json <json>", "Exact batch of {kind,value} company identities to remove (1-500); exclusive with --kind/--value.")
         .option("--json", "Print a JSON envelope.")
         .action(async (options) => {
         await handleAsyncAction("suppressions remove-company", options, () => {
             const kind = readOption(options.kind);
             const value = readOption(options.value);
+            if (options.identitiesJson !== undefined) {
+                if (options.kind !== undefined || options.value !== undefined)
+                    throw new OxygenError("invalid_request", "Pass --identities-json or --kind and --value.", { exitCode: 2 });
+                const identities = parseJsonValue(options.identitiesJson, "--identities-json");
+                if (!Array.isArray(identities) || identities.length < 1 || identities.length > 500)
+                    throw new OxygenError("invalid_request", "--identities-json must contain 1-500 {kind,value} objects.", { exitCode: 2 });
+                return requestOxygen("/api/cli/suppressions/companies", { method: "DELETE", body: { identities } });
+            }
             if (!kind || !value)
                 throw new Error("--kind and --value are required.");
             const params = new URLSearchParams({ kind, value });
@@ -17188,12 +17404,18 @@ Examples:
         });
     }))
         .addCommand(new Command("remove-domain")
-        .description("Remove a whole-domain email block (re-enable sending to the domain).")
-        .argument("<domain>", "The bare domain to un-block (e.g. acme.com).")
+        .description("Remove whole-domain email blocks (re-enable sending). Use one domain or --domains for 1-500.")
+        .argument("[domain]", "One bare domain to unblock; exclusive with --domains.")
+        .option("--domains <domains>", "Comma-separated domains to remove (1-500).")
         .option("--json", "Print a JSON envelope.")
         .action(async (domain, options) => {
         await handleAsyncAction("suppressions remove-domain", options, () => {
             const value = domain?.trim();
+            if (options.domains !== undefined) {
+                if (value)
+                    throw new OxygenError("invalid_request", "Pass one domain or --domains.", { exitCode: 2 });
+                return requestOxygen("/api/cli/suppressions/domains", { method: "DELETE", body: { domains: readSuppressionBulkKeys(options.domains, "--domains") } });
+            }
             if (!value)
                 throw new Error("A domain is required.");
             return requestOxygen(`/api/cli/suppressions/domains?domain=${encodeURIComponent(value)}`, {
@@ -17202,11 +17424,23 @@ Examples:
         });
     }))
         .addCommand(new Command("remove-address")
-        .description("Remove one blocked email ADDRESS from the do-not-contact ledger (re-enables sending to it). Addresses land here via bounces, unsubscribes, and `suppressions import`; whole-domain blocks have their own `remove-domain`.")
-        .argument("<email>", "The blocked address, e.g. ada@acme.com.")
+        .description("Remove blocked email addresses from the do-not-contact ledger (re-enable sending). Use one address or --emails for 1-500; whole-domain blocks use remove-domain.")
+        .argument("[email]", "One blocked address, e.g. ada@acme.com; exclusive with --emails.")
+        .option("--emails <emails>", "Comma-separated exact email addresses to remove (1-500).")
         .option("--json", "Print a JSON envelope.")
         .action(async (email, options) => {
+        const emails = options.emails;
+        if (emails !== undefined) {
+            await handleAsyncAction("suppressions remove-address", options, () => {
+                if (email)
+                    throw new OxygenError("invalid_request", "Pass one email or --emails.", { exitCode: 2 });
+                return requestOxygen("/api/cli/suppressions/addresses", { method: "DELETE", body: { emails: readSuppressionBulkKeys(emails, "--emails") } });
+            });
+            return;
+        }
         try {
+            if (!email)
+                throw new OxygenError("invalid_request", "Pass one email or --emails.", { exitCode: 2 });
             const data = await requestOxygen(`/api/cli/suppressions/addresses?email=${encodeURIComponent(email)}`, { method: "DELETE" });
             if (options.json) {
                 writeJson(success("suppressions remove-address", data));
@@ -17275,7 +17509,7 @@ Examples:
         await handleAsyncAction("managed-inboxes registrant", options, () => requestOxygen("/api/cli/managed-inboxes/registrant"));
     }))
         .addCommand(new Command("subscribe")
-        .description("Subscribe a NEW domain + mailboxes as a managed monthly inbox subscription. WITHOUT --approved this prints a priced PREVIEW with a quote_id (nothing ordered, nothing charged); re-run with --approved --quote <id> to place the order. OXYGEN Warm-up defaults on for Google, Microsoft, and Azure when available: preview and approved responses carry `warmup_activation` with the exact `mailboxes` and `scope=warmup_only`; it is null when warmup is disabled or unavailable. For InboxKit, Google carries `transport=inboxkit_managed_google_handoff`; Microsoft/Azure carries `transport=inboxkit_sequencer_export`. Both carry `mailbox_credentials_required=false` and `native_send_oauth_separate=true`, so managed warm-up needs no customer-supplied OAuth or mailbox password. Google retrieves the existing managed credential only during activation and never persists or returns it; Microsoft/Azure uses native export. Native sending authorization is separate and may still be required before OXYGEN can send. Verify each exact address with `mailboxes oauth-health --json`; InboxKit's unattended Google domain approval usually lands within minutes and the worker keeps retrying, so a waiting row is not a reason to ask the customer to sign in. This order authorizes automatic OXYGEN Warm-up activation after provisioning, so no second `mailboxes warmup enable` approval is needed. The preview shows the price in force: from the 2026-09 repricing date a Google inbox is 500 credits a month all-in (a flat 400 mailbox line plus the 100-credit mailbox connection, warm-up included, which `connection_monthly_credits` shows and your balance reserves once the inbox connects); Microsoft and Azure mailboxes are priced from the vendor's LIVE rate card. Domains are priced from the vendor's LIVE domain price, and any price below vendor cost is refused. A domain you bought on its own through Oxygen (`domains buy`) takes its first inboxes here too: the preview says `domain_source: owned`, nothing is registered again and `one_off_credits` is 0 (Google or Microsoft; omit --years). To add mailboxes to a domain that already has inboxes use `managed-inboxes add-inboxes`.")
+        .description("Buy managed monthly inboxes on a new domain or your existing Cloudflare domain. Use --existing-domain for Cloudflare: the read-only preview shows ownership, occupancy, DNS scope and blockers, with zero registration charge. --max-per-domain saves a stricter limit with the approved order, including existing addresses; later additions honor it. Preview does not save the limit or change workspace data. WITHOUT --approved this prints a priced PREVIEW with a quote_id (nothing ordered, nothing charged); re-run with --approved --quote <id> to place the order. OXYGEN Warm-up defaults on for Google, Microsoft, and Azure when available: preview and approved responses carry `warmup_activation` with the exact `mailboxes` and `scope=warmup_only`; it is null when warmup is disabled or unavailable. For InboxKit, Google carries `transport=inboxkit_managed_google_handoff`; Microsoft/Azure carries `transport=inboxkit_sequencer_export`. Both carry `mailbox_credentials_required=false` and `native_send_oauth_separate=true`, so managed warm-up needs no customer-supplied OAuth or mailbox password. Google retrieves the existing managed credential only during activation and never persists or returns it; Microsoft/Azure uses native export. Native sending authorization is separate and may still be required before OXYGEN can send. Verify each exact address with `mailboxes oauth-health --json`; InboxKit's unattended Google domain approval usually lands within minutes and the worker keeps retrying, so a waiting row is not a reason to ask the customer to sign in. This order authorizes automatic OXYGEN Warm-up activation after provisioning, so no second `mailboxes warmup enable` approval is needed. The preview shows the price in force: from the 2026-09 repricing date a Google inbox is 500 credits a month all-in (a flat 400 mailbox line plus the 100-credit mailbox connection, warm-up included, which `connection_monthly_credits` shows and your balance reserves once the inbox connects); Microsoft and Azure mailboxes are priced from the vendor's LIVE rate card. Domains are priced from the vendor's LIVE domain price, and any price below vendor cost is refused. A domain you bought on its own through Oxygen (`domains buy`) takes its first inboxes here too: the preview says `domain_source: owned`, nothing is registered again and `one_off_credits` is 0 (Google or Microsoft; omit --years). To add mailboxes to a domain that already has inboxes use `managed-inboxes add-inboxes`.")
         .argument("[domain]", "Sending domain to register + host the mailboxes (e.g. send.acme.com), or one you already bought through Oxygen. May also be passed as --domain.")
         .option("--domain <domain>", "Sending domain (alternative to the positional argument).")
         .requiredOption("--provider <provider>", "Mailbox PLATFORM: google, microsoft, or azure. (google/microsoft cap at 5 mailboxes per domain; azure allows 100.)")
@@ -17284,7 +17518,10 @@ Examples:
         .option("--locals <list>", "Comma-separated local parts to create for --sender, e.g. `--locals talia,talia.rosen,t.rosen` on send.acme.com orders talia@, talia.rosen@, and t.rosen@ — all owned by that one person. Requires --sender, because a bare local part carries no name and the vendor's stamp is permanent.")
         .option("--mailboxes <json>", "JSON array of mailboxes: [{\"username\",\"first_name\",\"last_name\",\"profile_picture_url\"}], or [{\"username\",\"sender_profile_id\"}] to take the identity from a sender profile per item (mix freely). profile_picture_url is optional and must be a PUBLIC, PERMANENT https URL — the vendor fetches it server-side at provisioning, so an expiring CDN link (e.g. a media.licdn.com URL with e=<epoch>) ships the mailbox faceless. Use `oxygen managed-inboxes upload-avatar <path>` to host one, or --sender / sender_profile_id, whose photo Oxygen already mirrors.")
         .option("--file <path>", "Path to a JSON file { \"mailboxes\": [...] } (alternative to --mailboxes).")
-        .option("--years <n>", "Years to register the domain for (1-10). Defaults to 1.")
+        .addOption(new Option("--preview", "Explicit read-only quote: connects nothing, buys nothing and charges nothing. Cannot be combined with --approved.").conflicts("approved"))
+        .option("--existing-domain", "Use an existing Cloudflare domain from oxygen domains list; never register or transfer it.")
+        .option("--max-per-domain <n>", "Save a stricter mailbox limit with the approved order, including existing addresses (e.g. 2). Preview does not save it.")
+        .option("--years <n>", "Years to register a new domain for (1-10). Omit for existing domains.")
         .option("--redirect-url <url>", "Where the domain's web root redirects. Defaults to your workspace's company website; editable later with `oxygen domains forwarding set`.")
         .option("--billing <path>", "Path to a JSON file with the registrant/WHOIS contact (first_name, last_name, phone, country, city, state, address_line_one, postal_code). Required on your FIRST order; later orders reuse the registrant already on file.")
         .option("--no-warmup", "Order WITHOUT automatic OXYGEN Warm-up. Warm-up is included by default and starts after provisioning under this order approval for the exact quoted Google/Microsoft/Azure addresses; opting out means using BYO warm-up or a later standalone warmup approval.")
@@ -17321,6 +17558,8 @@ Examples:
                     mailboxes,
                     ...(vendor ? { vendor } : {}),
                     ...(years ? { years: Number(years) } : {}),
+                    ...(options.existingDomain ? { existing_domain: true } : {}),
+                    ...(options.maxPerDomain !== undefined ? { max_mailboxes_per_domain: Number(options.maxPerDomain) } : {}),
                     ...(redirectUrl ? { redirect_url: redirectUrl } : {}),
                     ...(billing ? { billing } : {}),
                     // Warm-up is on unless --no-warmup. Placement is opt-in: it is sent only
@@ -17536,7 +17775,7 @@ Examples:
         writeMailboxPoolOverview(result, { filtered: suffix.length > 0, filterFlags });
     }))
         .addCommand(new Command("get")
-        .description("Get one sending mailbox's configuration/readiness detail (provider, status, daily cap, warmup state, auth mode, and source — managed vs bring-your-own) plus a one-row pool summary. This is not sent/replied/bounced performance; use `oxygen sequences analytics` for native Sequence attribution by mailbox/domain. An ineligible native-send transport includes transport_reason + transport_hint; it does not by itself block OXYGEN Warm-up or EmailGuard monitoring. <mailbox> accepts a mailbox id or email address.")
+        .description("Get one sending mailbox's configuration/readiness detail (provider, status, daily cap, warmup state, auth mode, and source — managed vs bring-your-own) plus a one-row pool summary. effective_cap comes first: today's campaign limit (effective_daily_cap), the ramp-up mode and its ramp_schedule. This is not sent/replied/bounced performance; use `oxygen sequences analytics` for native Sequence attribution by mailbox/domain. An ineligible native-send transport includes transport_reason + transport_hint; it does not by itself block OXYGEN Warm-up or EmailGuard monitoring. <mailbox> accepts a mailbox id or email address.")
         .argument("<mailbox>", "Mailbox id or email address.")
         .option("--json", "Print a JSON envelope.")
         .action(async (mailbox, options) => {
@@ -17549,6 +17788,7 @@ Examples:
         .option("--plan-hash <hash>", "Fresh preview plan_hash.")
         .option("--confirmation <phrase>", "Exact confirmation_phrase returned by the fresh preview.")
         .option("--cascade", "Disconnect each mailbox's OWN warm-up and deliverability-monitoring add-ons as part of the delete, instead of failing closed until you tear them down by hand. Stops their recurring credits too. Pass it on the preview as well as the approval: the plan hash is bound to it, so an approval cannot turn it on. A live managed domain subscription still fails closed.")
+        .option("--domains <list>", "Exact domains to cancel/archive with this mailbox deletion; included in the preview and approval hash.")
         .option("--include-domains", "Also delete each domain whose inboxes are ALL selected: an OXYGEN-bought domain is cancelled, your own is archived (DNS and registrar untouched). Partly selected domains are kept and listed in preview.domains_kept. Pass it on the preview as well as the approval.")
         .option("--json", "Print a JSON envelope.")
         .action(async (options) => {
@@ -17566,6 +17806,7 @@ Examples:
                 method: "POST",
                 body: {
                     mailboxes,
+                    ...(options.domains !== undefined ? { domains: readCsvOption(options.domains) } : {}),
                     ...(options.approved === true ? { approved: true } : {}),
                     ...(options.cascade === true ? { cascade: true } : {}),
                     ...(options.includeDomains === true ? { include_domains: true } : {}),
@@ -17730,9 +17971,9 @@ Examples:
         });
     }))
         .addCommand(new Command("cap")
-        .description("View and adjust a single mailbox's daily send cap (throttle a problem inbox or ramp a newly warmed one without pausing it).")
+        .description("View and adjust a single mailbox's daily send cap (throttle a problem inbox without pausing it). The campaign ramp-up that climbs to it is `mailboxes ramp set`.")
         .addCommand(new Command("set")
-        .description("Set one sending mailbox's daily send cap (sends per day; new mailboxes get 25). --daily-cap must be a positive whole number; `oxygen limits show` reports the maximum in force. The separate campaign ramp starts at 5, 10, then 20/day, advancing on completed UTC days with accepted campaign sends. Optional provider warm-up is configured with `mailboxes warmup config`. Consumes no Oxygen credits. <mailbox> accepts a mailbox id or email address.")
+        .description("Set one sending mailbox's daily send cap (sends per day; new mailboxes get 25). --daily-cap must be a positive whole number; `oxygen limits show` reports the maximum in force. The campaign ramp-up (standard 5, 10, then 20/day over the first nine sending days) climbs to this cap; customize or turn it off with `mailboxes ramp set`. Optional provider warm-up is configured with `mailboxes warmup config`. Consumes no Oxygen credits. <mailbox> accepts a mailbox id or email address.")
         .argument("<mailbox>", "Mailbox id or email address.")
         .requiredOption("--daily-cap <n>", "New daily send cap (a positive whole number of sends per day).")
         .option("--json", "Print a JSON envelope.")
@@ -17748,44 +17989,58 @@ Examples:
         });
     })))
         .addCommand(new Command("ramp")
-        .description("Set or clear one mailbox's campaign sending-day ramp. Completed UTC days with accepted campaign sends advance it; optional provider warm-up has separate controls under `mailboxes warmup config`.")
+        .description("Campaign ramp-up for one mailbox: how much campaign email it may send on each of its first sending days before its daily cap. Standard is 5, 10, then 20 a day over the first nine sending days; set a custom start and increase, or turn it off for an inbox already sending elsewhere. A sending day is a completed UTC day with accepted campaign sends. Provider warm-up is separate (`mailboxes warmup config`).")
         .addCommand(new Command("set")
-        .description("Set one mailbox's campaign sending-day ramp: --start-per-day (initial ceiling), --increase-every-days (completed UTC days with accepted campaign sends), --step, --cap. Import age and provider warm-up do not advance it. --clear restores the default 5/10/20 tiers. Free configuration write; provider warm-up uses `mailboxes warmup config`.")
+        .description("Set one mailbox's campaign ramp-up: a custom --start-per-day plus --step every --increase-every-days sending days until its daily cap, --off for the full daily cap from the first sending day, or --clear for the standard 5/10/20 ramp. Sending days are completed UTC days with accepted campaign sends. The optional --cap holds a custom ramp lower for good. effective_cap in the response reads back today's limit, the ramp_schedule and full_cap_on_sending_day. Free configuration write.")
         .argument("<mailbox>", "Mailbox id or email address.")
-        .option("--start-per-day <n>", "Initial campaign send ceiling (non-negative whole number).")
-        .option("--increase-every-days <n>", "Completed UTC days with accepted campaign sends between increases (whole number >= 1).")
-        .option("--step <n>", "Sends added to the ceiling each period (non-negative whole number).")
-        .option("--cap <n>", "The ramp's ceiling; once reached the ramp stops climbing (non-negative whole number).")
-        .option("--clear", "Remove the override and restore the default campaign sending-day tiers.")
+        .option("--start-per-day <n>", "Campaign emails allowed on the first sending day (non-negative whole number).")
+        .option("--increase-every-days <n>", "Sending days between increases (whole number >= 1).")
+        .option("--step <n>", "Emails added at each increase (non-negative whole number).")
+        .option("--cap <n>", "Optional permanent ceiling for the ramp; omit it to climb until the daily cap.")
+        .option("--off", "Turn the ramp off: the full daily cap from the first sending day.")
+        .option("--clear", "Restore the standard 5/10/20 ramp.")
         .option("--json", "Print a JSON envelope.")
         .action(async (mailbox, options) => {
         await handleAsyncAction("mailboxes ramp set", options, () => {
+            const knobs = [
+                options.startPerDay,
+                options.increaseEveryDays,
+                options.step,
+                options.cap,
+            ].some((value) => value !== undefined);
+            if (options.off && options.clear) {
+                throw new Error("Use --off or --clear, not both.");
+            }
+            if ((options.off || options.clear) && knobs) {
+                throw new Error("--off and --clear take no ramp numbers; drop --start-per-day, --increase-every-days, --step and --cap.");
+            }
+            let rampConfig;
             if (options.clear) {
-                return requestOxygen(`/api/cli/mailboxes/${encodeURIComponent(mailbox)}/ramp`, {
-                    method: "PATCH",
-                    body: { ramp_config: null },
-                });
+                rampConfig = null;
+            }
+            else if (options.off) {
+                rampConfig = { enabled: false };
             }
-            const startPerDay = readPositiveInt(options.startPerDay);
-            const increaseEveryDays = readPositiveInt(options.increaseEveryDays);
-            const step = readPositiveInt(options.step);
-            const cap = readPositiveInt(options.cap);
-            if (startPerDay === undefined ||
-                increaseEveryDays === undefined ||
-                step === undefined ||
-                cap === undefined) {
-                throw new Error("Provide --start-per-day, --increase-every-days, --step, and --cap (or --clear to remove the override).");
+            else {
+                const startPerDay = readNonNegativeInt(options.startPerDay);
+                const increaseEveryDays = readPositiveInt(options.increaseEveryDays);
+                const step = readNonNegativeInt(options.step);
+                const cap = readNonNegativeInt(options.cap);
+                if (startPerDay === undefined ||
+                    increaseEveryDays === undefined ||
+                    step === undefined) {
+                    throw new Error("Provide --start-per-day, --increase-every-days and --step (--cap is optional), or --off to turn the ramp off, or --clear for the standard ramp.");
+                }
+                rampConfig = {
+                    start_per_day: startPerDay,
+                    increase_every_days: increaseEveryDays,
+                    step,
+                    ...(cap !== undefined ? { cap } : {}),
+                };
             }
             return requestOxygen(`/api/cli/mailboxes/${encodeURIComponent(mailbox)}/ramp`, {
                 method: "PATCH",
-                body: {
-                    ramp_config: {
-                        start_per_day: startPerDay,
-                        increase_every_days: increaseEveryDays,
-                        step,
-                        cap,
-                    },
-                },
+                body: { ramp_config: rampConfig },
             });
         });
     })))
@@ -18553,10 +18808,11 @@ Examples:
         .option("--dmarc-policy <policy>", "DMARC policy: none (default), quarantine, or reject.")
         .option("--dmarc-rua <mailbox>", "DMARC aggregate-report mailbox (rua=mailto:...).")
         .option("--tracking-host <host>", "Open/click tracking CNAME host (only planned when tracking is configured).")
+        .option("--dkim-json <json>", "DKIM records as [{type:TXT|CNAME,name,content}]. Use identical records when applying the preview.")
         .option("--no-auto-dkim", "Skip auto-deriving Microsoft DKIM selector1/selector2 CNAMEs (default: auto-derive them for microsoft when no DKIM is supplied).")
         .option("--json", "Print a JSON envelope.")
-        .action(async (domain, options) => {
-        await handleAsyncAction("domains dns plan", options, () => runDomainsDnsPlan(domain, options));
+        .action(async (domain, options, command) => {
+        await handleAsyncAction("domains dns plan", { ...options, json: command.optsWithGlobals().json === true }, () => runDomainsDnsPlan(domain, options));
     }))
         .addCommand(new Command("apply")
         .description("Write the planned cold-email DNS records into the domain's Cloudflare zone. Requires a fresh plan_hash from `dns plan`. No Oxygen credits (Cloudflare does not charge for DNS writes). Without --approved, re-previews the plan.")
@@ -18567,10 +18823,11 @@ Examples:
         .option("--dmarc-policy <policy>", "DMARC policy: none (default), quarantine, or reject.")
         .option("--dmarc-rua <mailbox>", "DMARC aggregate-report mailbox (rua=mailto:...).")
         .option("--tracking-host <host>", "Open/click tracking CNAME host (only applied when tracking is configured).")
+        .option("--dkim-json <json>", "DKIM records as [{type:TXT|CNAME,name,content}]. Use identical records when applying the preview.")
         .option("--no-auto-dkim", "Skip auto-deriving Microsoft DKIM (must match the value used in `dns plan` so the plan_hash matches).")
         .option("--json", "Print a JSON envelope.")
-        .action(async (domain, options) => {
-        await handleAsyncAction("domains dns apply", options, () => runDomainsDnsApply(domain, options));
+        .action(async (domain, options, command) => {
+        await handleAsyncAction("domains dns apply", { ...options, json: command.optsWithGlobals().json === true }, () => runDomainsDnsApply(domain, options));
     })))
         .addCommand(new Command("tracking")
         .description("Open/click tracking domain for native cold email: provision the tracking CNAME on the domain's Cloudflare zone and check its verification status. 0 Oxygen credits.")
@@ -19120,6 +19377,7 @@ Run completion:
         .option("--max-credits <n>", "Required credit ceiling for live calls.")
         .option("--approved", "Required for live calls after inspecting a dry run.")
         .option("--revision <n>", "Run a specific saved version instead of the live one. Dry-run and smoke-test only: publish a version to run it live.")
+        .addOption(new Option("--test-scope <workflow|node>", "Create a durable non-live whole-workflow or node test; node requires --node.").choices(["workflow", "node"]))
         .option("--node <node_id>", "Test one node: runs that node plus only the predecessors it needs, from the same saved graph. Dry-run and smoke-test only.")
         .option("--preview", "Show what a live run of this exact version would do — every step that leaves Oxygen, the accounts it would use, and the minimum number of billable steps and credits it would cost — without running anything. AI and enrichment steps bill per row and can cost more than that floor. Needs no --mode: it always describes a live run.")
         .option("--include-bundle", "Include durable recipe bundles in JSON output.")
@@ -19150,6 +19408,7 @@ Run completion:
                     ...(maxCredits !== undefined ? { max_credits: maxCredits } : {}),
                     ...(options.approved ? { approved: true } : {}),
                     ...(revisionVersion !== undefined ? { revision_version: revisionVersion } : {}),
+                    ...(readOption(options.testScope) ? { test_scope: readOption(options.testScope) } : {}),
                     ...(readOption(options.node) ? { test_node_id: readOption(options.node) } : {}),
                     ...(options.preview ? { preview: true } : {}),
                 },
@@ -19712,6 +19971,7 @@ Full trigger schema: oxygen workflows schema --subject trigger --json
         .addCommand(new Command("get")
         .description("Hydrate one exact Oxygen skill entrypoint and its document index.")
         .argument("<skill-name>", "Exact name returned by skills search.")
+        .option("--file <path>", "Read one manifest-listed supporting file relative to the selected skill.")
         .option("--api-url <url>", "Oxygen app URL. Defaults to OXYGEN_API_URL or https://oxygen-agent.com.")
         .option("--json", "Print a JSON envelope.")
         .action(async (skillName, options) => {
@@ -19735,14 +19995,20 @@ Full trigger schema: oxygen workflows schema --subject trigger --json
         .action(async (options) => {
         await handleAsyncAction("skills install", options, () => installAgentSkills(options));
     }));
-    applyOxygenHelp(program, binaryName);
     registerVisualCommands(program, handleAsyncAction);
     registerFunctionsCommands(program, handleAsyncAction);
     registerUgcCommands(program, handleAsyncAction);
     registerKnowledgeRepositoryCommands(program, handleAsyncAction);
     registerConnectorsCommands(program, handleAsyncAction);
-    // Last, so every command registered above is covered — including the ones the
-    // register* helpers add after applyOxygenHelp.
+    registerSettingsCommands(program, handleAsyncAction);
+    registerCrmSupportFlags(program);
+    registerCustomerOperationCommands(program, handleAsyncAction);
+    // After the register* helpers: help groups are assigned to the commands that
+    // exist when this runs, and a family registered later fell into commander's
+    // trailing default "Commands:" list (the 2026-09-30 blind agent read the first
+    // 80 lines of help and missed `connectors` there).
+    applyOxygenHelp(program, binaryName);
+    // Last, so every command registered above is covered.
     enableCommandSuggestions(program);
     return program;
 }
@@ -21917,6 +22183,7 @@ function readFeedBindBody(table, options) {
         ...(readOption(options.intentId) ? { intent_id: readOption(options.intentId) } : {}),
         ...(readOption(options.inputShape) ? { input_shape: readOption(options.inputShape) } : {}),
         ...(readOption(options.routeId) ? { route_id: readOption(options.routeId) } : {}),
+        ...(readOption(options.registryVersion) ? { registry_version: readOption(options.registryVersion) } : {}),
         ...(options.sourcePrompt ? { source_prompt: readFileIfPresent(options.sourcePrompt) } : {}),
         ...(options.approved ? { approved: true } : {}),
     };
@@ -21941,11 +22208,13 @@ const FEED_BIND_PULL_ONLY_FLAGS = [
     ["intentId", "--intent-id"],
     ["inputShape", "--input-shape"],
     ["routeId", "--route-id"],
+    ["registryVersion", "--registry-version"],
     ["sourcePrompt", "--source-prompt"],
     ["approved", "--approved"],
 ];
 const FEED_BIND_PUSH_ONLY_FLAGS = [
     ["create", "--create"],
+    ["project", "--project"],
     ["itemsPath", "--items-path"],
     ["eventIdPath", "--event-id-path"],
     ["eventTypePath", "--event-type-path"],
@@ -21962,7 +22231,7 @@ const FEED_BIND_WEB_INTENT_SOURCES = ["rb2b"];
 const FEED_BIND_WEB_INTENT_REFUSED_FLAGS = [
     ["schemaJson", "--schema-json"],
     ...FEED_BIND_PULL_ONLY_FLAGS,
-    ...FEED_BIND_PUSH_ONLY_FLAGS.filter(([key]) => key !== "create"),
+    ...FEED_BIND_PUSH_ONLY_FLAGS.filter(([key]) => key !== "create" && key !== "project"),
 ];
 // Pull mode keeps the contract commander enforced when --kind/--tool-id/
 // --request-json were requiredOptions and <table> was required: same messages, same
@@ -22005,6 +22274,8 @@ function readFeedPushBindBody(table, options) {
     const rowSchema = parseJsonObject(readFileIfPresent(schemaSource));
     const tableRef = readOption(table);
     const create = readOption(options.create);
+    if (readOption(options.project) && !create)
+        throw new OxygenError("invalid_request", "--project requires --create; the existing table keeps its project.", { exitCode: 2 });
     if (tableRef && create) {
         throw new OxygenError("invalid_request", "Pass a table or --create <name>, not both.", { exitCode: 1 });
     }
@@ -22018,7 +22289,7 @@ function readFeedPushBindBody(table, options) {
     return {
         transport: "push",
         row_schema: rowSchema,
-        ...(tableRef ? { table: tableRef } : { create_table: { name: create } }),
+        ...(tableRef ? { table: tableRef } : { create_table: { name: create, ...(readOption(options.project) ? { project: readOption(options.project) } : {}) } }),
         ...(readOption(options.name) ? { name: readOption(options.name) } : {}),
         ...(readOption(options.upsertKey) ? { upsert_key: readOption(options.upsertKey) } : {}),
         ...(readOption(options.itemsPath) ? { items_path: readOption(options.itemsPath) } : {}),
@@ -22044,6 +22315,8 @@ function readFeedWebIntentBindBody(table, options) {
     }
     const tableRef = readOption(table);
     const create = readOption(options.create);
+    if (readOption(options.project) && !create)
+        throw new OxygenError("invalid_request", "--project requires --create; the existing table keeps its project.", { exitCode: 2 });
     if (tableRef && create) {
         throw new OxygenError("invalid_request", "Pass a table or --create <name>, not both.", { exitCode: 1 });
     }
@@ -22053,7 +22326,7 @@ function readFeedWebIntentBindBody(table, options) {
     return {
         transport: "push",
         feed_kind: source,
-        ...(tableRef ? { table: tableRef } : { create_table: { name: create } }),
+        ...(tableRef ? { table: tableRef } : { create_table: { name: create, ...(readOption(options.project) ? { project: readOption(options.project) } : {}) } }),
         ...(readOption(options.name) ? { name: readOption(options.name) } : {}),
         ...(readOption(options.upsertKey) ? { upsert_key: readOption(options.upsertKey) } : {}),
     };
@@ -22163,7 +22436,7 @@ function readSignalsSearchRunBody(options, promptArg) {
     const plan = options.planJson ? readSearchPlanJson(options.planJson) : null;
     // A post search needs no prompt: its --keywords and filters are the plan,
     // as they are for the free preview (the server names the table after them).
-    const postSearchFilters = !prompt && !plan && readOption(options.family) === "linkedin_posts"
+    const postSearchFilters = !prompt && !plan && (readOption(options.source) ?? readOption(options.family)) === "linkedin_posts"
         ? readSignalSearchFilters(options)
         : null;
     const postSearch = Array.isArray(postSearchFilters?.keywords) && postSearchFilters.keywords.length > 0;
@@ -22189,6 +22462,7 @@ function readSignalsSearchRunBody(options, promptArg) {
     }
     const filters = prompt ? typedFilters : postSearchFilters;
     return {
+        ...(readOption(options.source) ? { source: readOption(options.source) } : {}),
         ...(prompt ? { prompt } : {}),
         ...(plan ? { plan } : {}),
         ...(readOption(options.family) ? { family: readOption(options.family) } : {}),
@@ -23582,6 +23856,19 @@ function domainsBuyRerunCommand(domains, quoteId, options, data) {
     ];
     return `${resolveCliBinaryName()} domains buy ${domains.join(" ")} ${flags.join(" ")}`;
 }
+function readDnsDkimOption(value) {
+    let records;
+    try {
+        records = JSON.parse(value);
+    }
+    catch {
+        throw new OxygenError("invalid_request", "--dkim-json must be a JSON array of DKIM records.", { exitCode: 2 });
+    }
+    if (!Array.isArray(records) || records.some((record) => !isRecord(record) || !["TXT", "CNAME"].includes(String(record.type).toUpperCase()) || !readRecordString(record, "name") || !readRecordString(record, "content"))) {
+        throw new OxygenError("invalid_request", "Each --dkim-json record requires type TXT or CNAME, name, and content.", { exitCode: 2 });
+    }
+    return records;
+}
 function dnsPlanBody(options) {
     const provider = readOption(options.provider);
     if (!provider) {
@@ -23593,6 +23880,7 @@ function dnsPlanBody(options) {
         ...(readOption(options.dmarcRua) ? { dmarc_rua: readOption(options.dmarcRua) } : {}),
         ...(readOption(options.trackingHost) ? { tracking_host: readOption(options.trackingHost) } : {}),
         ...(options.autoDkim === false ? { auto_dkim: false } : {}),
+        ...(options.dkimJson !== undefined ? { dkim: readDnsDkimOption(options.dkimJson) } : {}),
     };
 }
 // Preview the cold-email DNS plan for a domain (free — no writes). Appends a
@@ -23602,7 +23890,12 @@ async function runDomainsDnsPlan(domain, options) {
     const planHash = readRecordString(data, "plan_hash");
     const provider = readOption(options.provider);
     return planHash && provider
-        ? { ...data, rerun_command: `${resolveCliBinaryName()} domains dns apply ${domain} --provider ${provider} --approved --plan ${planHash}` }
+        ? { ...data, rerun_command: [resolveCliBinaryName(), "domains dns apply", shellQuote(domain), "--provider", shellQuote(provider), "--approved --plan", shellQuote(planHash),
+                ...(options.dkimJson !== undefined ? ["--dkim-json", shellQuote(options.dkimJson)] : []),
+                ...(readOption(options.dmarcPolicy) ? ["--dmarc-policy", shellQuote(options.dmarcPolicy)] : []),
+                ...(readOption(options.dmarcRua) ? ["--dmarc-rua", shellQuote(options.dmarcRua)] : []),
+                ...(readOption(options.trackingHost) ? ["--tracking-host", shellQuote(options.trackingHost)] : []),
+                ...(options.autoDkim === false ? ["--no-auto-dkim"] : []),].join(" ") }
         : data;
 }
 // Apply an approved DNS plan (writes records). Requires --plan <hash> with
@@ -26315,7 +26608,15 @@ function formatSequenceListHealth(data) {
         lines.push("No sequences match these filters.");
     }
     else {
-        lines.push(...renderTextTable(["SEQUENCE", "PERSISTED", "OPERATIONAL", "OPEN WORK", "SENT / FAILED", "REASONS"], sequences.map((sequence) => sequenceHealthRow(sequence))));
+        lines.push(...renderTextTable(["SEQUENCE", "PERSISTED", "OPERATIONAL", "OPEN WORK", "SENT / FAILED", "REASONS"], sequences.map((sequence) => {
+            // Warnings print below the table, so the row points at them: a reader
+            // skimming the rows missed the deleted-row warning (T-220 acceptance).
+            const row = sequenceHealthRow(sequence);
+            const warningCount = sequenceRowWarnings([sequence]).length;
+            if (warningCount > 0)
+                row[row.length - 1] = `${row[row.length - 1]}; ${warningCount} warning${warningCount === 1 ? "" : "s"} below`;
+            return row;
+        })));
         const warnings = sequenceRowWarnings(sequences);
         if (warnings.length > 0)
             lines.push("", ...warnings);
@@ -26466,7 +26767,10 @@ function formatSequenceStatsHealth(data) {
     if (failureMix !== "—")
         lines.push(`Failure mix: ${failureMix}`);
     lines.push(...formatActionKindBreakdown(operational.failureAnalytics));
-    lines.push("", `Enrolled: ${numberText(stats.enrolled)}`);
+    // Every lead ever enrolled, removed and finished included, so name the split
+    // beside it: "Enrolled: 6" next to 4 in progress read as a miscount (T-220 acceptance).
+    const byStatus = formatCountRecord(recordValue(stats.byStatus));
+    lines.push("", `Enrolled (all time): ${numberText(stats.enrolled)}${byStatus === "—" ? "" : ` — ${byStatus}`}`);
     const replyLine = formatSequenceReplyRollup(stats.replies);
     if (replyLine)
         lines.push(replyLine);
@@ -27881,12 +28185,26 @@ function buildFeedbackBody(options) {
         context: {
             cli_version: OXYGEN_VERSION,
             environment: collectFeedbackEnvironment(),
+            ...(readCsvOption(options.deepLinks).length ? { deep_links: readCsvOption(options.deepLinks) } : {}),
+            ...(readOption(options.operation) ? { operation: readOption(options.operation) } : {}),
+            ...(readOption(options.errorCode) ? { error_code: readOption(options.errorCode) } : {}),
+            ...(readCsvOption(options.runIds).length ? { run_ids: readCsvOption(options.runIds) } : {}),
+            ...(readCsvOption(options.tableIds).length ? { table_ids: readCsvOption(options.tableIds) } : {}),
+            ...(readOption(options.slackPermalink) ? { slack_permalink: readOption(options.slackPermalink) } : {}),
+            ...(readOption(options.slackChannelId) ? { slack_channel_id: readOption(options.slackChannelId) } : {}),
+            ...(readOption(options.customerWorkspace) ? { customer_workspace: readOption(options.customerWorkspace) } : {}),
         },
     };
     if (readOption(options.severity))
         body.severity = readOption(options.severity);
     const sessionId = readOption(options.sessionId);
     const file = readOption(options.file);
+    if (options.transcript !== false && options.transcriptText !== undefined) {
+        if (sessionId || file || options.includeTranscript) {
+            throw new OxygenError("invalid_input", "Choose --transcript-text or one local transcript option.", { exitCode: 1 });
+        }
+        body.transcript_text = readSelectedTranscriptExcerpt(options.transcriptText);
+    }
     const includeTranscript = options.transcript !== false &&
         (options.includeTranscript === true || Boolean(sessionId) || Boolean(file));
     if (includeTranscript) {
@@ -27920,7 +28238,13 @@ function buildSupportTicketBody(options) {
     const body = { subject: readOption(options.subject), body: message };
     const sessionId = readOption(options.sessionId);
     const file = readOption(options.transcriptFile);
-    if (options.includeTranscript || sessionId || file) {
+    if (options.transcript !== false && options.transcriptText !== undefined) {
+        if (options.includeTranscript || sessionId || file) {
+            throw new OxygenError("invalid_input", "Choose --transcript-text or one local transcript option.", { exitCode: 1 });
+        }
+        body.transcript_text = readSelectedTranscriptExcerpt(options.transcriptText);
+    }
+    if (options.transcript !== false && (options.includeTranscript || sessionId || file)) {
         try {
             const captured = captureCurrentTranscript({ sessionId, file });
             if (!captured) {
@@ -27943,6 +28267,8 @@ function buildSupportTicketBody(options) {
     if (readOption(options.source))
         body.source = readOption(options.source);
     const context = {};
+    if (readOption(options.cliVersion))
+        context.cli_version = readOption(options.cliVersion);
     if (readOption(options.operation))
         context.operation = readOption(options.operation);
     if (readOption(options.errorCode))
@@ -27966,6 +28292,13 @@ function buildSupportTicketBody(options) {
         body.context = context;
     return body;
 }
+function readSelectedTranscriptExcerpt(text) {
+    const excerpt = text.trim();
+    if (!excerpt || Buffer.byteLength(excerpt, "utf8") > 200_000) {
+        throw new OxygenError("invalid_transcript", "Transcript excerpt must be between 1 and 200,000 bytes.", { exitCode: 1 });
+    }
+    return redactTranscriptSecrets(excerpt);
+}
 function withSupportListQuery(path, options) {
     const params = new URLSearchParams();
     const status = readOption(options.status);
@@ -28402,7 +28735,10 @@ function buildContextAssetUpsertBody(options) {
 }
 function buildKnowledgePageUpsertBody(options) {
     const tags = readCsvOption(options.tags);
-    const expectedRevision = readPositiveInt(options.expectedRevision);
+    const expectedRevision = options.expectedRevision === undefined ? undefined : Number(options.expectedRevision);
+    if (expectedRevision !== undefined && (!options.expectedRevision?.trim() || !Number.isInteger(expectedRevision) || expectedRevision < 0)) {
+        throw new OxygenError("invalid_request", "--expected-revision must be a nonnegative integer.", { exitCode: 2 });
+    }
     const folder = readOption(options.folder);
     return {
         ...(folder ? { folderId: folder === "root" ? null : folder } : {}),
@@ -29215,6 +29551,66 @@ function readCompanyIdentityOptions(options, verb) {
 function readRepeatableIds(values) {
     return [...new Set((values ?? []).flatMap((value) => readCsvOption(value)))];
 }
+// `sequences contacts-remove` for a human reader: what the call selects, the
+// people it names (a --missing-source-rows preview exists so nobody approves a
+// removal by UUID), and the next step. stderr, like the other summaries.
+function writeContactsRemoveSummary(data) {
+    const payload = asPayloadRecord(data);
+    if (!payload)
+        return;
+    const count = (value) => (typeof value === "number" ? value : 0);
+    const lines = [];
+    const leads = asPayloadRecord(payload.leads);
+    const approved = payload.approved === true;
+    if (payload.mode === "missing_source_rows") {
+        const total = count(leads?.total);
+        // Counts recorded deletions only, so zero is never read as "none deleted".
+        lines.push(`${total} enrolled lead${total === 1 ? " has" : "s have"} a recorded deletion from this campaign's source table.`);
+    }
+    lines.push(approved
+        ? `Removed ${count(payload.removed)} from the campaign.`
+        : `Preview: ${count(payload.removable)} removable, ${count(payload.contacted)} already contacted, ${count(payload.skippedTerminal)} already finished.`);
+    // What approving costs and touches, stated where the reader decides; with
+    // nothing removable there is nothing to approve, so no line invites it.
+    if (!approved && count(payload.removable) > 0 && typeof payload.credits_used === "number") {
+        lines.push(`Cost: ${payload.credits_used} credits. Approving stops only these campaign enrollments: nothing is sent, and table rows are kept.`);
+    }
+    const items = Array.isArray(leads?.items) ? leads.items : [];
+    for (const entry of items) {
+        const lead = asPayloadRecord(entry);
+        if (!lead)
+            continue;
+        const name = typeof lead.name === "string" && lead.name.trim() ? lead.name.trim() : "(unnamed lead)";
+        // After approval the server reports each lead's new state; "stopped" is this removal.
+        const state = approved
+            ? lead.status === "stopped" ? "removed" : `not removed (${String(lead.status ?? "unknown")})`
+            : String(lead.status ?? "unknown");
+        lines.push(`  ${name} — ${state}${lead.contacted === true ? ", already contacted" : ""}`);
+    }
+    // One call covers at most per_call_limit leads (the oldest); the server's
+    // next_step says to repeat for the rest, so count the unnamed ones in this call.
+    const total = count(leads?.total);
+    const covered = typeof payload.per_call_limit === "number" ? Math.min(total, payload.per_call_limit) : total;
+    const unnamed = covered - items.length;
+    if (unnamed > 0)
+        lines.push(`  …and ${unnamed} more${covered < total ? " in this call" : ""}`);
+    if (typeof payload.next_step === "string")
+        lines.push(payload.next_step);
+    if (typeof payload.web_url === "string")
+        lines.push(`Open: ${payload.web_url}`);
+    process.stderr.write(`${lines.join("\n")}\n`);
+}
+// `tables delete-row|delete-rows` for a human reader: a deleted row's lead stays
+// enrolled in its campaigns, so name them where the delete was typed.
+function writeRowDeleteWarnings(data) {
+    const payload = asPayloadRecord(data);
+    const warnings = Array.isArray(payload?.warnings) ? payload.warnings : [];
+    for (const entry of warnings) {
+        const warning = asPayloadRecord(entry);
+        if (warning && typeof warning.message === "string")
+            process.stderr.write(`Warning: ${warning.message}\n`);
+    }
+}
 // Human-mode summary of a company pause/resume/list on stderr (stdout keeps the
 // machine-readable envelope): what was held or resumed, per campaign, and where
 // to see it.
@@ -29339,6 +29735,8 @@ function readSequenceSettings(options) {
     // A visible footer mutates outbound copy, so it is opt-in and tri-state:
     // absent leaves the stored value alone; either explicit flag persists the
     // chosen boolean. Missing/false is interpreted as OFF by the dispatcher.
+    if (options.autoOptimize !== undefined)
+        settings.auto_optimize = options.autoOptimize;
     if (options.bounceProtection !== undefined)
         settings.bounce_protection = JSON.parse(options.bounceProtection);
     if (options.includeUnsubscribeHeaders !== undefined)
@@ -29399,7 +29797,7 @@ function readSequenceSettings(options) {
     // Sender profiles (--sender-profiles id1,id2): the sequence sends from these
     // unified identities. The server resolves them into senderAccountIds + mailbox_ids.
     const senderProfileIds = readCsvOption(options.senderProfiles);
-    if (senderProfileIds.length > 0)
+    if (options.senderProfiles !== undefined)
         settings.sender_profile_ids = senderProfileIds;
     return Object.keys(settings).length > 0 ? settings : undefined;
 }
@@ -29486,6 +29884,14 @@ catch (error) {
         // envelope; agents parse stdout and branch on the exit code, and the exit
         // table classes a usage error as 2 in every mode.
         const usage = commanderUsageFailure(program, cliArgs, error, hints[0] ?? null);
+        if (usage?.envelope.meta.command === "columns rename" &&
+            usage.envelope.error.code === "missing_required_option" &&
+            isRecord(usage.envelope.error.details) &&
+            usage.envelope.error.details.option === "--key") {
+            const hint = `Hint: --key <new-key> is required for \`${program.name()} columns rename <table> <column> --key <new-key>\`. To change only the display label, run \`${program.name()} columns update <table> <column> --label <label>\`.`;
+            writeHint(hint);
+            usage.envelope.error.details.next_step = hint.replace(/^Hint:\s*/, "");
+        }
         if (usage && argvRequestsJson(cliArgs))
             writeJson(usage.envelope);
         process.exitCode = usage?.exitCode ?? error.exitCode;