@oxygen-agent/cli 1.1011.326 → 1.1011.440

package/node_modules/@oxygen/shared/dist/capability-discovery.js

@@ -22,16 +22,24 @@ export const OXYGEN_CAPABILITY_ROUTES = [
         id: "workspace-access",
         layer: "Control",
         primitive: null,
-        owns: "Authentication, CLI identities, API keys, sessions, organizations, active-workspace selection, and connected apps (ChatGPT, Claude, Codex…) with the default workspace each one works in.",
-        notFor: "Workspace GTM data, provider credentials, or execution inside a primitive.",
-        execution: "Resolve identity and select the hosted workspace before operating its primitives. Each app connected with OAuth keeps its own default workspace: `connectors list` shows them and `connectors set` changes one app only; orgs select changes only the app or CLI that calls it.",
+        owns: "Authentication, CLI identities, API keys, sessions, organizations, active-workspace selection, connected apps (ChatGPT, Claude, Codex…) with the default workspace each one works in and the OXYGEN events each one is subscribed to, and which web-app sidebar pages the workspace hides for every member (Settings → Customise).",
+        notFor: "Workspace GTM data, provider credentials, execution inside a primitive, or access control: a hidden sidebar page stays reachable by URL.",
+        execution: "Resolve identity and select the hosted workspace before operating its primitives. Each app connected with OAuth keeps its own default workspace: `connectors list` shows them and `connectors set` changes one app only; orgs select changes only the app or CLI that calls it. What OXYGEN sends an app (its event subscriptions, such as ChatGPT watching for classified replies, and every delivery with its outcome, never content): `connectors events get <app>`; `connectors events revoke <app> --subscription <id|all>` stops them for good. While an app holds event subscriptions, its paid calls are capped by its rolling 24-hour credit ceiling: the plan default, or `connectors set <app> --credit-ceiling <credits>` (above the default also needs --approve-above-default); `connectors get <app>` shows the ceiling and what it spent. Sidebar pages (Settings → Customise): `settings pages list` (oxygen_settings_pages_get) shows each page and whether it is hidden; an admin or owner hides or shows pages for everyone with `settings pages set --hide <pages>`, `--show <pages>` or `--show-all` (oxygen_settings_pages_update). Nothing is deleted.",
         posture: "mixed",
-        gatewayTools: ["oxygen_whoami", "oxygen_orgs_list", "oxygen_orgs_select", "oxygen_connector_list", "oxygen_connector_update"],
-        gatewayCommands: ["whoami", "orgs list", "orgs select", "connectors list", "connectors set"],
+        gatewayTools: [
+            "oxygen_whoami",
+            "oxygen_orgs_list",
+            "oxygen_orgs_select",
+            "oxygen_connector_list",
+            "oxygen_connector_update",
+            "oxygen_connector_events_get",
+            "oxygen_connector_events_revoke",
+        ],
+        gatewayCommands: ["whoami", "orgs list", "orgs select", "connectors list", "connectors set", "connectors events get", "connectors events revoke"],
         skills: ["oxygen-quickstart"],
         // `mcp`: the host-driven MCP Events routes an OAuth connection's subscriptions go through (ADR 0030 §2).
         endpointSections: ["api-keys", "auth", "connectors", "login-requests", "mcp", "orgs", "sessions", "settings", "whoami"],
-        intentTerms: ["login", "authenticate", "identity", "who am i", "workspace", "organization", "org", "api key", "session", "switch workspace", "connected app", "connected apps", "default workspace"],
+        intentTerms: ["login", "authenticate", "identity", "who am i", "workspace", "organization", "org", "api key", "session", "switch workspace", "connected app", "connected apps", "default workspace", "sidebar", "navigation", "hidden pages", "page visibility", "workspace settings", "organisation settings", "organization settings"],
     },
     {
         id: "discovery-and-skills",
@@ -41,7 +49,7 @@ export const OXYGEN_CAPABILITY_ROUTES = [
         notFor: "Executing GTM work or loading full manifests and schemas before a capability is selected.",
         execution: "Search by outcome, choose the owner, then hydrate one exact command, MCP schema, provider descriptor, or skill. For instance discovery, read the map and then the primitive that owns the row.",
         posture: "read_only",
-        gatewayTools: ["oxygen_capabilities_search", "oxygen_tools_search", "oxygen_recipes_list", "oxygen_workspace_map"],
+        gatewayTools: ["oxygen_capabilities_search", "oxygen_skills_get", "oxygen_tools_search", "oxygen_recipes_list", "oxygen_workspace_map"],
         gatewayCommands: ["capabilities search", "commands search", "skills search", "tools search", "recipes list", "workspace map"],
         skills: ["oxygen-quickstart", "oxygen-gtm"],
         // `workspace` (the map) belongs here rather than beside `home`: capability
@@ -65,7 +73,7 @@ export const OXYGEN_CAPABILITY_ROUTES = [
         skills: ["oxygen-onboarding", "oxygen-quickstart", "oxygen-gtm"],
         // `activation` remains an exact legacy API family for saved clients, but it
         // has no recommended gateway and is not an intent term or first-touch path.
-        endpointSections: ["activation", "copilot", "home"],
+        endpointSections: ["activation", "copilot", "home", "onboarding"],
         // "next step" alone is deliberately absent: it is a phrase every primitive's
         // users say ("next step of this workflow run"), and a 6-point multi-word hit
         // would drag those queries here. The terms kept are the ones only a founder
@@ -76,15 +84,15 @@ export const OXYGEN_CAPABILITY_ROUTES = [
         id: "billing-and-budgets",
         layer: "Control",
         primitive: null,
-        owns: "Credits, plan state, usage receipts, subscriptions, and standing budget policies.",
+        owns: "Credits, customer credit prices, plan state, usage receipts, subscriptions, and standing budget policies.",
         notFor: "Authorizing a specific provider call or external write; that action still needs its own preview and approval.",
         execution: "Read billing state or set a hosted budget policy; exact action ceilings remain primitive-owned.",
         posture: "mixed",
-        gatewayTools: ["oxygen_billing_balance", "oxygen_billing_usage", "oxygen_billing_estimate", "oxygen_budget_list"],
-        gatewayCommands: ["billing balance", "billing usage", "billing estimate", "budget list", "billing invoices"],
+        gatewayTools: ["oxygen_billing_balance", "oxygen_billing_usage", "oxygen_billing_estimate", "oxygen_budget_list", "oxygen_customer_credit_prices"],
+        gatewayCommands: ["billing balance", "billing usage", "billing estimate", "budget list", "billing invoices", "pricing customer-credit-prices"],
         skills: ["oxygen-gtm", "oxygen-diagnostics"],
-        endpointSections: ["billing", "budget", "limits"],
-        intentTerms: ["billing", "credits", "credit balance", "usage", "spend", "cost", "cost estimate", "monthly cost", "budget", "subscription", "invoice", "vat", "vat number", "tax id", "cancel plan", "change plan", "upgrade", "downgrade"],
+        endpointSections: ["billing", "budget", "limits", "pricing"],
+        intentTerms: ["billing", "credits", "credit balance", "customer credit prices", "credit price catalog", "usage", "spend", "cost", "cost estimate", "monthly cost", "budget", "subscription", "invoice", "vat", "vat number", "tax id", "cancel plan", "change plan", "upgrade", "downgrade"],
     },
     {
         id: "support-and-feedback",
@@ -104,15 +112,15 @@ export const OXYGEN_CAPABILITY_ROUTES = [
         id: "platform-operations",
         layer: "Control",
         primitive: null,
-        owns: "Staff/admin diagnostics, worker queue health, tenant repair, and database operating surfaces.",
-        notFor: "Ordinary customer GTM work or product Observability over customer-visible runs.",
-        execution: "Use the authenticated hosted operational endpoints; production mutations and migrations keep their human gates.",
+        owns: "Workspace queue health, failed jobs, queue recovery, and workspace database status, attach, migrations, read-only SQL and retired cost-policy controls.",
+        notFor: "Customer run timelines or approvals (Observability), Table grid queries (Tables), and external Supabase imports (Integrations).",
+        execution: "Inspect the active workspace's queue and database status; repair stale queue state or provision its database through the native scoped controls.",
         posture: "mixed",
-        gatewayTools: ["oxygen_worker_queue_stats", "oxygen_worker_failures", "oxygen_observability_runs"],
-        gatewayCommands: ["worker queue-stats", "worker failures", "db status"],
+        gatewayTools: ["oxygen_worker_queue_stats", "oxygen_worker_failures", "oxygen_workspace_queue_repair", "oxygen_workspace_database_status", "oxygen_workspace_database_provision"],
+        gatewayCommands: ["worker queue-stats", "worker failures", "worker repair", "db status", "db provision"],
         skills: ["oxygen-diagnostics"],
-        endpointSections: ["admin", "db", "worker"],
-        intentTerms: ["admin", "worker", "queue", "tenant repair", "database", "db status", "stuck jobs", "operations"],
+        endpointSections: ["db", "worker"],
+        intentTerms: ["worker", "queue", "queue repair", "database", "database hosting", "db status", "stuck jobs", "operations"],
     },
     {
         // Control-layer interaction state, deliberately NOT a sixteenth primitive
@@ -214,7 +222,7 @@ export const OXYGEN_CAPABILITY_ROUTES = [
         layer: "Data",
         primitive: "tables",
         owns: "Typed working datasets, rows, formulas, AI/tool/waterfall columns, reusable Functions with isolated drafts and published versions, cell state, projects, and run provenance.",
-        notFor: "Canonical CRM truth, message cadence, or an off-platform spreadsheet runtime.",
+        notFor: "Canonical CRM truth: use Records via oxygen_crm_objects_list, oxygen_crm_record_get or oxygen_crm_record_search. Not message cadence or an off-platform spreadsheet runtime.",
         execution: "Create and run work in hosted OXYGEN Tables; validate a small sample before bounded paid runs. To see what a table's own columns can be enriched with and what each costs per row before adding anything, run `tools search --for-table <table>` (MCP oxygen_tools_search with for_table): free, it returns priced suggestions with the exact add command. For standard person or company enrichment, `columns add <table> --preset person_enrich|company_enrich` (MCP oxygen_columns_add with preset) adds the maintained bundle in one call before any hand-built tool column. Person questions over that bundle's profile payload (skill set, grad school, location, job fit, current company) and person appearance research (events, keynotes, podcasts, GitHub profile) are `columns catalog --category people` templates, added with `columns add <table> --prompt-key <key> --input <name>=<column>`. For a company fact OXYGEN already knows how to research (founders, parent company, funding, cloud provider, offers demos, industry, NAICS, HQ, LinkedIn/Crunchbase page lookups) or a page extraction, `columns catalog` lists the ready-made template and `columns add <table> --prompt-key <key> --input <name>=<column>` (MCP oxygen_columns_add with prompt_key) adds it with no prompt to write. For ICP tiers, read the saved profile with `knowledge page get icp`, then add native Classify Score: `columns add <table> --label 'ICP fit' --score 'low,medium,high' --prompt '<ICP criteria using {{evidence_column}} tokens>' --grounding workspace`. It costs 0.075 credits/row; preview with `columns run --dry-run`. `columns catalog --family classification --json` puts Classify in `data.native`; `data.entries` holds separate prompt templates that can cost more.",
         posture: "mixed",
         gatewayTools: ["oxygen_tables_create", "oxygen_tools_search", "oxygen_columns_add", "oxygen_columns_catalog", "oxygen_enrich_column_preview", "oxygen_tables_link_bulk", "oxygen_callables_manage"],
@@ -248,11 +256,11 @@ export const OXYGEN_CAPABILITY_ROUTES = [
         notFor: "Net-new LinkedIn initiation, cadence, enrollment, sender rotation, or reply-stop programs; those belong to Sequences.",
         execution: "Preview and approve a direct email or existing-thread reply; every sent fact stays in the hosted Messages ledger.",
         posture: "external_write",
-        gatewayTools: ["oxygen_inbox_send", "oxygen_email_send", "oxygen_messages_query"],
-        gatewayCommands: ["inbox send", "email send", "messages query"],
+        gatewayTools: ["oxygen_inbox_send", "oxygen_email_send", "oxygen_messages_query", "oxygen_unibox_metadata"],
+        gatewayCommands: ["inbox send", "email send", "messages query", "unibox metadata"],
         skills: ["oxygen-unibox"],
-        endpointSections: ["email", "inbox", "message-reviews", "messages"],
-        intentTerms: ["message", "messages", "reply", "email", "inbox", "conversation", "thread", "direct email", "draft reply", "one off"],
+        endpointSections: ["email", "inbox", "message-reviews", "messages", "unibox"],
+        intentTerms: ["message", "messages", "reply", "email", "inbox", "unibox", "inbox metadata", "conversation", "thread", "direct email", "draft reply", "one off"],
     },
     {
         id: "posts",
@@ -260,7 +268,7 @@ export const OXYGEN_CAPABILITY_ROUTES = [
         primitive: "posts",
         owns: "Broadcast post artifacts, author/channel identity, provider IDs, comments, reactions, and performance history.",
         notFor: "One-to-one conversations, delivery scheduling, or generic public LinkedIn provider search.",
-        execution: "Read or create the hosted Post artifact; Publishing owns scheduled delivery.",
+        execution: "Read hosted posts and their comments or performance. For queued scheduling and review use Publishing. oxygen_posts_create is a direct LinkedIn publish: preview first, then approved=true publishes immediately outside the Publishing approval queue.",
         posture: "workspace_write",
         gatewayTools: ["oxygen_publishing_comments", "oxygen_publishing_analytics", "oxygen_posts_get", "oxygen_posts_create"],
         gatewayCommands: ["publishing comments list", "publishing analytics summary", "posts get", "posts create"],
@@ -368,7 +376,7 @@ export const OXYGEN_CAPABILITY_ROUTES = [
         primitive: "publishing",
         owns: "Approval-gated scheduling, dispatch, retries, review, and attempt provenance for broadcast Posts.",
         notFor: "One-to-one messaging, outreach campaigns, or general automation.",
-        execution: "Create and schedule on OXYGEN; explicit approval releases the hosted publisher.",
+        execution: "Create a scheduled Publishing post, review it, then explicitly approve to release the hosted publisher. oxygen_posts_create instead publishes directly to LinkedIn after its own preview and approved=true; it does not enter this queue.",
         posture: "external_write",
         gatewayTools: ["oxygen_publishing_posts_create", "oxygen_publishing_posts_list", "oxygen_publishing_posts_approve", "oxygen_ugc_get"],
         gatewayCommands: ["publishing posts create", "publishing posts list", "publishing posts approve", "ugc programs list", "ugc programs duplicate", "ugc programs archive"],
@@ -429,8 +437,8 @@ export const OXYGEN_CAPABILITY_ROUTES = [
         notFor: "Enriching rows that already exist; use native table columns and waterfalls. Not for raw provider selection when a native gateway exists.",
         execution: "Plan or preview the hosted search, then run with an explicit scope and credit ceiling; hydrate one provider descriptor only when needed.",
         posture: "paid_read",
-        gatewayTools: ["oxygen_search_plan", "oxygen_sourcing_plan", "oxygen_find_company", "oxygen_tools_search"],
-        gatewayCommands: ["search plan", "sourcing plan", "find company", "tools search"],
+        gatewayTools: ["oxygen_companies_search_plan", "oxygen_people_search_plan", "oxygen_tools_search", "oxygen_find_company"],
+        gatewayCommands: ["companies search plan", "people search plan", "tools search", "find company"],
         skills: ["oxygen-gtm"],
         endpointSections: ["companies", "find", "lead-sourcing", "people", "search", "sourcing", "tools", "verify"],
         intentTerms: ["find companies", "find people", "source leads", "build a list", "tam", "prospect", "provider", "tool catalog", "find email", "find phone", "local businesses", "local business", "google maps", "storefronts"],
@@ -456,13 +464,13 @@ export const OXYGEN_CAPABILITY_ROUTES = [
         primitive: null,
         owns: "Connected SaaS accounts, OAuth/BYOK readiness, custom integration manifests, and provider actions that lack a native primitive gateway.",
         notFor: "Recreating native Tables, Messages, Sequences, Publishing, or Workflows through a generic provider action.",
-        execution: "Inspect readiness, then connect or call the hosted integration under its exact write/spend gate.",
+        execution: "For provider API keys, inspect the connect schema and omit credentials for setup requirements with no provider call or storage. Submitting credentials creates or replaces the connection immediately. Cloudflare account selection uses top-level account_id; BounceBan validates before storage. Provider actions keep their exact write/spend gate.",
         posture: "mixed",
         gatewayTools: ["oxygen_integrations_list", "oxygen_integrations_connect", "oxygen_integrations_list_actions"],
         gatewayCommands: ["integrations list", "integrations connect", "custom-integrations list"],
         skills: ["oxygen-gtm"],
         endpointSections: ["custom-integrations", "integrations"],
-        intentTerms: ["integration", "integrations", "connect provider", "oauth", "byok", "custom http", "custom integration", "connection readiness"],
+        intentTerms: ["integration", "integrations", "connect provider", "oauth", "byok", "bring your own key", "provider key", "provider connection", "custom http", "custom integration", "connection readiness"],
     },
     {
         id: "sending-infrastructure",
@@ -567,7 +575,9 @@ export function inferCapabilityRoute(query) {
     // The card's own recommendations are a pinned contract (tool order, no
     // exact command on plain enrichment asks); the catalogue path travels
     // beside them in `catalogIntent`, never inside them.
-    const catalogue = catalogRow && CATALOGUE_CARD_IDS.has(card.id) ? catalogueRecommendations(catalogRow, card) : null;
+    // Sourcing filters belong to the planner, not per-company enrichment.
+    const catalogue = catalogRow && CATALOGUE_CARD_IDS.has(card.id) && !isCompanySourcingIntent(normalized)
+        ? catalogueRecommendations(catalogRow, card) : null;
     return {
         card: routeCardFor(card, normalized),
         recommendedTools: recommendations.tools,
@@ -636,7 +646,81 @@ export function inferPrimitiveRoute(query) {
         return null;
     return route;
 }
-export function serializeCapabilityRoute(route, surface = "cli") {
+/** Current hosted instruction audiences, shared by discovery and Agent snapshots. */
+export const OXYGEN_PRODUCT_SKILL_AUDIENCES = Object.freeze({
+    "oxygen-onboarding": "workspace",
+    "oxygen-gtm": "workspace",
+    "oxygen-recipes": "workspace",
+    "oxygen-playbooks": "workspace",
+    "oxygen-linkedin-marketing": "workspace",
+    "oxygen-agency-directory": "agency_partner",
+    "oxygen-collaboration": "workspace",
+    "oxygen-quickstart": "workspace",
+    "oxygen-workflow-authoring": "workspace",
+    "oxygen-knowledge": "workspace",
+    "oxygen-visual-design": "workspace",
+    "oxygen-unibox": "workspace",
+    "oxygen-email-infra": "workspace",
+    "oxygen-deliverability": "workspace",
+    "oxygen-sequencer": "workspace",
+    "oxygen-table-tidy": "workspace",
+    "oxygen-diagnostics": "workspace",
+    "oxygen-feedback": "workspace",
+    "oxygen-clay-migration": "workspace",
+    "oxygen-ugc": "workspace",
+});
+export function canReadProductSkillInstructions(name, entitlements) {
+    if (entitlements.authenticated !== true)
+        return false;
+    const audience = Object.hasOwn(OXYGEN_PRODUCT_SKILL_AUDIENCES, name)
+        ? OXYGEN_PRODUCT_SKILL_AUDIENCES[name]
+        : undefined;
+    return audience === "workspace" || (audience === "agency_partner" && entitlements.agencyPartner);
+}
+/** Identify hosted instruction bodies by native tool lineage, never by user prose. */
+export function readProductSkillInstructionResult(capabilityName, result) {
+    if (capabilityName !== "oxygen_skills_get")
+        return null;
+    const pending = [result];
+    for (let i = 0; i < pending.length && i < 24; i += 1) {
+        let value = pending[i];
+        if (typeof value === "string") {
+            try {
+                value = JSON.parse(value);
+            }
+            catch {
+                continue;
+            }
+        }
+        if (value === null || typeof value !== "object" || Array.isArray(value))
+            continue;
+        const envelope = value;
+        if (envelope.ok === false || envelope.isError === true || envelope.status === "error")
+            continue;
+        if (typeof envelope.content === "string") {
+            const name = typeof envelope.name === "string" ? envelope.name : "";
+            return { slug: Object.hasOwn(OXYGEN_PRODUCT_SKILL_AUDIENCES, name) ? name : null };
+        }
+        for (const key of ["result", "data", "structuredContent", "structured"]) {
+            if (envelope[key] !== undefined)
+                pending.push(envelope[key]);
+        }
+        if (Array.isArray(envelope.content)) {
+            for (const block of envelope.content) {
+                if (block && typeof block === "object" && block.type === "text" && typeof block.text === "string")
+                    pending.push(block.text);
+            }
+        }
+    }
+    return null;
+}
+/** Public action cards never advertise invite-only or unknown skill instructions. */
+export function isPublicCapabilitySkill(name) {
+    return Object.hasOwn(OXYGEN_PRODUCT_SKILL_AUDIENCES, name) && OXYGEN_PRODUCT_SKILL_AUDIENCES[name] === "workspace";
+}
+export function serializeCapabilityRoute(route, surfaceOrOptions = "cli", options = {}) {
+    const surface = typeof surfaceOrOptions === "string" ? surfaceOrOptions : "cli";
+    const visibleSkills = typeof surfaceOrOptions === "string" ? options.visibleSkills : surfaceOrOptions.visibleSkills;
     if (!route)
         return null;
     return {
@@ -647,7 +731,7 @@ export function serializeCapabilityRoute(route, surface = "cli") {
         not_for: route.card.notFor,
         execution: route.card.execution,
         posture: route.card.posture,
-        skills: route.card.skills,
+        skills: route.card.skills.filter((name) => isPublicCapabilitySkill(name) || visibleSkills?.includes(name)),
         endpoint_sections: route.card.endpointSections,
         recommended_commands: route.recommendedCommands,
         recommended_tools: route.recommendedTools,
@@ -672,6 +756,8 @@ export function serializeCapabilityRoute(route, surface = "cli") {
         hydrate: {
             cli: "oxygen commands get <exact-command> --json",
             mcp: "oxygen_capabilities_schema",
+            skill_cli: "oxygen skills get <selected-skill> --json",
+            skill_mcp: { tool: "oxygen_skills_get", arguments: { name: "<selected-skill>" } },
         },
     };
 }
@@ -764,8 +850,78 @@ function routeCardFor(card, query) {
     if (card.primitive === "publishing" && isUgcIntent(query))
         return { ...card, ...UGC_ROUTE_VIEW };
     if (card.id === "knowledge-graph" && isWorkspaceVoiceIntent(query))
-        return { ...card, execution: WORKSPACE_VOICE_EXECUTION };
-    return card;
+        card = { ...card, execution: WORKSPACE_VOICE_EXECUTION };
+    if (card.primitive === "workflows" && isRecurringCompanyMonitoringIntent(query))
+        card = {
+            ...card,
+            execution: "Workflows own recurring execution. Inspect oxygen_blueprints_list, describe and preflight before authoring; a matching Blueprint is not guaranteed. Retain canonical company identities and facts in Records, and time-stamped observations in Signals. Use oxygen_crm_objects_list and oxygen_signals_list to inspect those destinations. Do not apply or enable automation before the required approval and credit scope.",
+        };
+    if (card.primitive === "tables" && isTableCapacityReadIntent(query))
+        card = {
+            ...card,
+            execution: "Read oxygen_limits_show for Tables capacity, largest_table and largest_table_rows. Use that returned table reference with oxygen_tables_query and a small limit to inspect sample rows; no enrichment run is needed.",
+        };
+    if (card.primitive === "tables" && isFunctionIntent(query))
+        card = {
+            ...card,
+            execution: "List, describe or inspect Function runs without executing. Draft edits are isolated; publish requires the inspected draft hash and changes future invocations. Bind adds a caller column for free; columns run previews cost before a bounded approved run. MCP uses the mixed-effect oxygen_callables_manage through oxygen_capabilities_call, including its read operations.",
+        };
+    if (card.primitive === "tables" && isPlainTableIntent(query))
+        card = {
+            ...card,
+            execution: "Create a workspace-private Table or inspect its schema and rows. Manual rows, column labels, visibility and member favorites cost 0 credits. Change only the display label with columns update (oxygen_columns_update); columns rename (oxygen_columns_rename) requires a new stable key. Favorite one table or folder with tables favorite (oxygen_tables_favorite), then read tables favorites (oxygen_tables_favorites). For tidy guidance, read oxygen-table-tidy with skills get (oxygen_skills_get); tables tidy-suggest (oxygen_tables_tidy_suggest) analyzes without changes. Read the owning schema, apply the requested scope, then describe or query the Table to verify it.",
+        };
+    const maintenance = card.primitive === "tables" ? tableMaintenanceRecommendation(query) : null;
+    if (maintenance)
+        card = { ...card, execution: maintenance.execution };
+    const read = card.primitive === "tables" ? tableReadRecommendation(query) : null;
+    if (read)
+        card = { ...card, execution: read.execution };
+    const database = card.id === "platform-operations" ? databaseRecommendation(query) : null;
+    if (database)
+        card = { ...card,
+            owns: "Active-workspace PostgreSQL hosting, attachment, migrations, read-only SQL and retired cost-policy status.",
+            notFor: "Provider credentials, enrichment, workspace billing, or staff-wide database operations.",
+            execution: database.execution,
+        };
+    const specializedSkill = preferredSkillForIntent(card, query);
+    return specializedSkill ? { ...card, skills: [specializedSkill, ...card.skills.filter((skill) => skill !== specializedSkill)] } : card;
+}
+/** Search surfaces share the selected skill owner; a general router is fallback. */
+function preferredSkillForIntent(card, query) {
+    if (card.id === "tables") {
+        if (/\bclay\b/.test(query) && /\b(import|export|migrat\w*|mov\w*)\b/.test(query))
+            return "oxygen-clay-migration";
+        if (isTableMaintenanceIntent(query))
+            return "oxygen-table-tidy";
+        if (/\b(stuck|failed|failure|trace|provenance|diagnos\w*)\b/.test(query))
+            return "oxygen-diagnostics";
+        if (isLinkedInProfileWatcherIntent(query))
+            return "oxygen-linkedin-marketing";
+    }
+    if (card.id === "billing-and-budgets" && /\b(explain|why|reduce|increas\w*|burn|spent)\b/.test(query))
+        return "oxygen-diagnostics";
+    if (card.id === "sending-infrastructure" && /\b(bounc\w*|health|placement|deliverability|spam)\b/.test(query))
+        return "oxygen-deliverability";
+    if (["signals", "linkedin-public-research"].includes(card.id) && /\blinkedin\b/.test(query))
+        return "oxygen-linkedin-marketing";
+    return null;
+}
+function isTableMaintenanceIntent(query) {
+    return /\b(tables?|columns?|folders?)\b/.test(query)
+        && !/\b(functions?|callables?|campaigns?|tags?|workflows?|agents?)\b/.test(query)
+        && (/\b(tidy|tidying|cleanup|clean up|reorder|formatting|duplicates?|favou?rites?|unfavou?rite|star|unstar)\b/.test(query)
+            || (/\bcolumns?\b/.test(query) && /\b(hide|hidden|rename|renaming|label|key)\b/.test(query)));
+}
+function isPlainTableIntent(query) {
+    if (isTableCapacityReadIntent(query))
+        return false;
+    return isTableMaintenanceIntent(query) || (/\btable\b/.test(query)
+        && /\b(create|manual|sample|private)\b/.test(query)
+        && !/\b(enrich\w*|classif\w*|research|prompt|sourc\w*|import|linkedin|function|callable)\b/.test(query));
+}
+function isFunctionIntent(query) {
+    return /\b(functions?|callables?)\b/.test(query) && !/\bformula functions?\b/.test(query);
 }
 function isLinkedInKeywordPostIntent(query) {
     return /\blinkedin\b/.test(query)
@@ -829,6 +985,11 @@ export const SEQUENCE_UNSUBSCRIBE_COMMAND = "oxygen sequences update <sequence>
  */
 export const CAPABILITY_ROUTE_MCP_CALLS = {
     connectedAppsList: () => ({ tool: "oxygen_connector_list", arguments: {} }),
+    connectedAppEvents: () => ({ tool: "oxygen_connector_events_get", arguments: { connection: "<app>" } }),
+    workspacePagesList: () => ({ tool: "oxygen_settings_pages_get", arguments: {} }),
+    functionsList: () => ({ tool: "oxygen_callables_manage", arguments: { operation: "list_functions" } }),
+    functionsDescribe: () => ({ tool: "oxygen_callables_manage", arguments: { operation: "describe", function: "<function>" } }),
+    functionsRuns: () => ({ tool: "oxygen_callables_manage", arguments: { operation: "runs", function: "<function>" } }),
     sequenceSendingSchedule: () => ({
         tool: "oxygen_sequences_update",
         arguments: { sequence: "<sequence>", sending_schedule: { timezone: "<IANA zone>", days: [1, 2, 3, 4, 5], start: "09:00", end: "17:00" } },
@@ -876,6 +1037,19 @@ function isSequenceScheduleIntent(query) {
     return /\bsend(?:ing)? (?:schedule|window)s?\b/.test(query)
         && !/\b(workflow|automation|automate|webhook|cron)\b/.test(query);
 }
+// How much campaign email one inbox may send: its daily campaign limit and the
+// ramp-up that climbs to it. The 2026-10-01 MCP baseline searched "mailbox
+// sending settings warmup ramp daily limit" and was routed to Workflows (bare
+// "daily" reads as a schedule); "ramp up a new inbox" went to Messages. LinkedIn,
+// WhatsApp and call limits keep their own owners, and provider warm-up without
+// campaign volume words keeps the card's warm-up path.
+function isMailboxVolumeIntent(query) {
+    if (/\b(linkedin|whatsapp|calls?|dial\w*|voice)\b/.test(query))
+        return false;
+    const inbox = /\b(mailbox\w*|inbox(?:es)?|email accounts?|sending accounts?|sender accounts?)\b/.test(query);
+    const volume = /\b(ramp\w*|daily (?:campaign )?(?:limit|cap)s?|sending limits?|send limits?|(?:emails?|sends?) (?:per|a) day|volume)\b/.test(query);
+    return inbox && volume;
+}
 // The unsubscribe option on a Sequence's emails, not the list of people who
 // opted out: a list, import or do-not-contact ask stays with suppressions.
 function isSequenceUnsubscribeIntent(query) {
@@ -939,6 +1113,12 @@ function isOpenLinkedInRequestsIntent(query) {
 function isConnectedAppsIntent(query) {
     if (/\bconnected apps?\b/.test(query))
         return true;
+    // The command group's own noun. Tables' "connect" term prefix-matches it, so
+    // `commands search connectors` returned no `connectors` command at all
+    // (CLI acceptance judge, 2026-09-30). Bare noun only: a provider's connector
+    // ("hubspot connector") is never claimed here.
+    if (/^(?:(?:list|show|see|my|our|all|the|mcp|app|apps|ai|oauth)\s+)*connectors?$/.test(query))
+        return true;
     const connection = /\b(oauth (?:apps?|clients?|connections?|grants?)|mcp (?:clients?|connections?|connectors?))\b/.test(query);
     const app = connection || /\b(chatgpt|claude|codex|ai (?:apps?|assistants?|clients?))\b/.test(query);
     if (!app)
@@ -949,9 +1129,230 @@ function isConnectedAppsIntent(query) {
         && /\b(default|always|without asking|which|per (?:app|connection|client))\b/.test(query);
     return workspaceChoice || (connection && /\b(list|show|see|which|my)\b/.test(query));
 }
+/**
+ * What OXYGEN sends a connected app (MCP Events, ADR 0030 §10): "what is
+ * ChatGPT subscribed to", "what did OXYGEN send it", "stop it". Both blind
+ * baselines of 2026-09-30 (OXP-11.5.22) searched exactly these words — connector
+ * event subscriptions, deliveries, webhook, notifications, push — and were
+ * handed the inbound provider-webhook tools instead. A billing subscription or a
+ * provider's events ("hubspot webhook") never matches.
+ */
+function isConnectedAppEventsIntent(query) {
+    if (/\b(plans?|billing|invoices?|credits?|upgrade|downgrade|stripe|pricing|price)\b/.test(query))
+        return false;
+    if (/\b(hubspot|slack|gmail|calendly|cal\.?com|salesforce|pipedrive|zapier|integrations?|providers?|workflows?|triggers?)\b/.test(query))
+        return false;
+    const app = /\b(chatgpt|claude|codex|connected apps?|connectors?|connections?|apps?|ai (?:assistants?|clients?)|mcp)\b/.test(query);
+    const events = /\b(subscri\w*|events?|webhooks?|notif\w*|push(?:es|ed)?|deliver(?:y|ies|ed)?|sen[dt]s?)\b/.test(query);
+    if (!app || !events)
+        return false;
+    // "send a LinkedIn message from my app" is outreach, not what OXYGEN sends the app.
+    return !/\b(linkedin|email|emails|whatsapp|message|messages|sequence|sequences|campaign|outreach|post|posts)\b/.test(query);
+}
+/**
+ * What a connected app may spend (ADR 0030 §11): "how much can ChatGPT spend on
+ * its own in a day", "cap it at 300 credits". Both blind baselines of
+ * 2026-09-30 (OXP-11.5.23) searched for a per-connection daily credit limit and
+ * found only workspace budgets. A sender's or channel's daily limit is not this.
+ */
+function isConnectedAppSpendIntent(query) {
+    const app = /\b(chatgpt|claude|codex|connected apps?|connectors?|connections?|per[- ]connection|mcp)\b/.test(query);
+    const spend = /\b(spend\w*|credits?|budgets?|ceilings?|caps?|capped|limits?)\b/.test(query);
+    if (!app || !spend)
+        return false;
+    return !/\b(linkedin|senders?|mailbox(?:es)?|sequences?|email|emails|whatsapp|warm\s?up|invites?|rate)\b/.test(query);
+}
+/**
+ * The web app's sidebar pages a workspace hides for every member (Settings →
+ * Customise, `settings pages`). Both blind baselines of 2026-09-30 searched
+ * "hide navigation pages sidebar", "customise pages", "pages visibility", "nav
+ * items" and "workspace navigation hidden pages unibox publishing workflows",
+ * and were routed to workspace access, Publishing or nowhere. A sidebar or
+ * navigation noun is enough on its own; "pages" plus a hide/show word is not
+ * when the pages are wiki, LinkedIn, web, PDF or result pages.
+ */
+function isWorkspacePagesIntent(query) {
+    // A row, column or cell is content inside a page, and Sales Nav is LinkedIn.
+    if (/\bsales ?nav/.test(query) || /\b(rows?|columns?|cells?|filters?|duplicates?)\b/.test(query))
+        return false;
+    const navigation = /\b(side ?bars?|side ?nav\w*|side ?menus?|nav ?bars?|nav|navigation|left (?:menu|nav\w*|rail|panel)|main menu)\b/.test(query);
+    const visibility = /\b(hid(?:e|es|den|ing)|unhide|visib\w*|invisible)\b/.test(query);
+    const showInNavigation = /\bshow(?:s|n|ing)?\b/.test(query)
+        && /\b(?:in|on|from|to)\s+(?:the |our |my |this )?(?:side ?bar|side ?nav\w*|navigation|nav|left (?:menu|nav\w*|rail|panel))\b/.test(query);
+    // Explicit sidebar visibility may name the page's primitive: hide Knowledge
+    // from the sidebar or show Tables in navigation still means Customise.
+    if (navigation && (visibility || showInNavigation))
+        return true;
+    if (/\bmenu items?\b/.test(query) && /\b(hid(?:e|es|den|ing)|unhide|show(?:s|n|ing)?|visib\w*)\b/.test(query))
+        return true;
+    // Content and navigation within a primitive keep that primitive's owner.
+    // Check this before generic "customize pages" or a navigation noun.
+    if (/\b(wiki|knowledge|linkedin|compan(?:y|ies)|tables?|landing|web ?pages?|websites?|carousels?|pdfs?|paginat\w*|next page|per page|page size|results?|dashboards?)\b/.test(query))
+        return false;
+    if (navigation)
+        return true;
+    if (/\bcustomi[sz](?:e|es|ed|ing|ation)\b/.test(query) && /\b(pages?|menus?)\b/.test(query))
+        return true;
+    if (/^customi[sz]e$|\bsettings?\W{1,5}customi[sz]e\b/.test(query))
+        return true;
+    return /\bpages?\b/.test(query) && /\b(hid(?:e|es|den|ing)|unhide|show(?:s|n|ing)?|visib\w*|invisible)\b/.test(query);
+}
+/**
+ * "Organisation settings" (the web's own name for /settings), "workspace
+ * settings", "org settings": the CLI and MCP half of those settings is the
+ * sidebar pages pair. A settings ask that names its own owner (billing, API
+ * keys, members, a connected app, a provider) keeps that owner.
+ */
+function isWorkspaceSettingsIntent(query) {
+    if (/\b(billing|plans?|credits?|invoices?|api keys?|members?|invit\w*|seats?|roles?|connected apps?|connectors?|chatgpt|claude|codex|integrations?|providers?|mailbox(?:es)?|senders?|sequences?|linkedin)\b/.test(query))
+        return false;
+    return /\b(workspace|organi[sz]ations?|orgs?|team)\s+settings?\b/.test(query)
+        || /\bsettings?\s+(?:for|of)\s+(?:the |my |our |this )?(workspace|organi[sz]ation|org|team)\b/.test(query);
+}
+function isTableCapacityReadIntent(query) {
+    if (/\b(monitor|watch|workflow|automate|automation|increase|resize|upgrade)\b/.test(query))
+        return false;
+    return /\b(largest|biggest) tables?\b/.test(query)
+        || /\btables?\b.{0,30}\b(sizes?|row counts?)\b/.test(query)
+        || /\b(sizes?|row counts?)\b.{0,30}\btables?\b/.test(query);
+}
+function isCompanySourcingIntent(query) {
+    if (/\b(enrich\w*|existing|these|those|rows?|columns?|verify|verification|emails?|phones?|contacts?|people|persons?)\b/.test(query))
+        return false;
+    return /\b(companies|businesses|firms|company search|company sourcing)\b/.test(query)
+        && /\b(search|plan|find|source|sourcing|discover|build|tam|prospect)\b/.test(query);
+}
+/** Reads of grid values/state are separate from executing or resolving actions. */
+function tableReadRecommendation(query) {
+    if (!/\btables?\b/.test(query) || isFunctionIntent(query) || isSecondPartyDecisionIntent(query)
+        || /\b(workflows?|agents?|actions?|items?|retry|resolve|effects?|imports?|webhooks?|feeds?|enrich\w*|create|add|insert|upsert|update|delete|remove|rename|hide|archive|columns? run)\b/.test(query)
+        || /\b(run|execute|start|cancel)\s+(?:(?:the|my|these)\s+)?(?:columns?|table|enrichment)\b/.test(query))
+        return null;
+    if (/\bcells?\b/.test(query) && /\b(history|changes?|provenance)\b/.test(query))
+        return {
+            tools: ["oxygen_tables_cell_history", "oxygen_tables_cell_inspect"], commands: ["cells history", "cells inspect"],
+            execution: "Read one cell's recorded value changes with cells history; cells inspect adds its provider attempt timeline. These reads do not run columns or resolve an uncertain external effect.",
+        };
+    if (/\bcells?\b/.test(query) && /\b(provider|attempts?|timeline)\b/.test(query))
+        return {
+            tools: ["oxygen_tables_cell_inspect", "oxygen_tables_cell_history"], commands: ["cells inspect", "cells history"],
+            execution: "Inspect one cell's final value and provider attempt timeline with cells inspect. Cell history reads recorded changes; neither executes a column or records a verified external outcome.",
+        };
+    if (isTableCapacityReadIntent(query) && !/\bgrid\b/.test(query))
+        return null;
+    if (!/\b(grid|preview|raw rows|fill rates?|next page|pagination|cursor)\b/.test(query)
+        && !(/\b(read|show|inspect|query)\b/.test(query) && /\brows?\b/.test(query)))
+        return null;
+    if (/\b(filtered?|filters?|sorts?|search|crm)\b/.test(query) && /\b(grid|counts?|registry)\b/.test(query))
+        return {
+            tools: ["oxygen_table_rows_page", "oxygen_tables_query", "oxygen_tables_preview"], commands: ["tables rows page", "tables query", "tables preview"],
+            execution: "Read the native rows page for grid filters/sorts/search and count modes. exact counts the matching rows; estimate uses reconciled registry metadata only for an unfiltered scope, otherwise counts exactly. registry never counts and returns no total for a narrowed or unavailable registry scope; skip returns no total. Follow nextCursor with the same table, filters, search, sort and CRM scope; do not substitute an offset. Canonical tables query reads raw values; format=grid refuses those filters/projections.",
+        };
+    if (/\b(preview|fill rates?|without row|summary only|summary_only)\b/.test(query))
+        return {
+            tools: ["oxygen_tables_preview", "oxygen_tables_query", "oxygen_table_fill_progress"], commands: ["tables preview", "tables query", "tables fill-progress"],
+            execution: "Use tables preview for compact rows, optional include_cell_states and whole-table fill stats; summary_only omits row JSON. rowCount is exact, rates may be sampled and summary.statsSampled labels that scope. Follow its nextCursor with the same options. tables query reads raw values or format=grid previews/state. tables fill-progress separately reports ingestion progress/failure; none of these runs columns.",
+        };
+    return {
+        tools: ["oxygen_tables_query", "oxygen_tables_preview", "oxygen_table_rows_page", "oxygen_table_fill_progress"], commands: ["tables query", "tables preview", "tables rows page", "tables fill-progress"],
+        execution: 'Read tables query raw values, or format="grid" for summarized cell previews and per-cell state. Grid defaults to 50 rows and caps at 200; pass grid.nextCursor as cursor with the same table/limit. Grid refuses row_id, fields, filters/filterTree, search, sorts, formula_values and nonzero offset; it is not a snapshot. Its first page uses the reconciled registry count when available, otherwise exact; continuation skips counting (null total), labeled rowCountMode. include_stats adds optional whole-table column stats/count; unavailable stats are omitted. include_fill only adds optional fill state when the first page is empty; later/nonempty pages omit it. tables preview supplies fill-rate summaries; tables fill-progress reads ingestion status. These reads do not execute columns.',
+    };
+}
+/** Native database work outranks generic workspace access and credit billing. */
+function databaseRecommendation(query) {
+    if (!/\b(databases?|postgres(?:ql)?|db|sql)\b/.test(query)
+        || /\b(tables?|grid|external|import|workflows?|agents?|enrich\w*|providers?|integrations?|oauth|byok|mailbox\w*|crm|hubspot|salesforce|supabase)\b/.test(query))
+        return null;
+    const actions = [
+        ["oxygen_workspace_database_status", "db status"], ["oxygen_database_cost_policy", "db cost-policy"],
+        ["oxygen_database_query", "db query"], ["oxygen_database_attach", "db attach"],
+        ["oxygen_database_migrate", "db migrate"], ["oxygen_workspace_database_provision", "db provision"],
+        ["oxygen_database_cost_policy_reconcile", "db reconcile-cost-policy"],
+    ];
+    const first = /\b(migrat\w*|rotate credentials)\b/.test(query) ? 4
+        : /\b(attach|connect|connection)\b/.test(query) ? 3
+            : /\b(query|sql|select|explain)\b/.test(query) ? 2
+                : /\b(provision\w*)\b/.test(query) ? 5
+                    : /\breconcile\b/.test(query) ? 6
+                        : /\b(cost policy|cost controls?|sleep|suspend|reconcile)\b/.test(query) && !/\bstatus\b/.test(query) ? 1 : 0;
+    const ordered = [actions[first], ...actions.filter((_, index) => index !== first)];
+    return {
+        tools: ordered.map(([tool]) => tool), commands: ordered.map(([, command]) => command),
+        execution: "Inspect db status and db cost-policy for the active workspace. Hosting is included; Neon cost controls are retired, and reconcile-cost-policy is a compatibility no-op, not PostgreSQL sleep control. db query accepts one read-only SELECT/WITH/EXPLAIN statement: request a small max_rows (hard cap 1000). Writes are refused; truncated labels the returned row window, and it has no continuation cursor. Attach (database_url), migrate (optional rotate_credentials) and provision are immediate native writes with no preview or approved field. They preserve workspace identity/access; restricted clients can read status/cost/query but cannot configure. Built-in approval policy is separate from these HTTP fields.",
+    };
+}
+/** Direct Table operations keep their native gateway ahead of general authoring.
+ * Explicit Workflow triggers, mailbox imports and CRM attachments retain their owners. */
+function tableMaintenanceRecommendation(query) {
+    if (isFunctionIntent(query) || isSecondPartyDecisionIntent(query)
+        || /\b(workflows?|agents?|campaigns?|tags?|mailbox\w*|crm|attachments?|chatgpt|connected apps?)\b/.test(query)
+        || (isTableMaintenanceIntent(query) && /\b(skills?|instructions?|guidance)\b/.test(query)))
+        return null;
+    const table = /\btables?\b/.test(query);
+    const result = (tools, commands, execution) => ({ tools, commands, execution });
+    if (/\b(favou?rites?|starred|star|unstar)\b/.test(query) && /\b(tables?|folders?)\b/.test(query)) {
+        const mutate = !/\bstar unstar\b/.test(query) && (/\b(unstar|unfavou?rite)\b/.test(query) || (/\b(favou?rite|star)\b/.test(query) && !/\b(show|list|read|see|favorites|favourites|star unstar)\b/.test(query)));
+        return result(mutate ? ["oxygen_tables_favorite", "oxygen_tables_favorites"] : ["oxygen_tables_favorites", "oxygen_tables_favorite"], mutate ? ["tables favorite", "tables favorites"] : ["tables favorites", "tables favorite"], "Read your member-specific Table/folder stars, then change exactly one table or folder with favorite=true or false. This costs 0 credits. Tool-catalog favorites are separate.");
+    }
+    if (table && /\b(webhooks?|inbound.*endpoint|push.*endpoint|endpoint.*(?:inbound|push))\b/.test(query)) {
+        if (/\bdeliver\w*\b/.test(query))
+            return result(["oxygen_table_webhook_deliveries", "oxygen_table_webhook_get"], ["tables webhook deliveries", "tables webhook get"], "Inspect this Table endpoint and its delivery ledger. A direct Table webhook lands rows; a Workflow webhook starts a published graph.");
+        if (/\b(change|edit|update|rotat\w*|pause|disable|clear)\b/.test(query) && !/\bcreate\b/.test(query))
+            return result(["oxygen_table_webhook_update", "oxygen_table_webhook_get"], ["tables webhook update", "tables webhook get"], "Inspect the endpoint, then update it by endpoint_id. auth_mode=secret rotates the secret and returns it once. auto_run is standing permission; delivery ceilings are explicit or plan-default. Preserve required authorization.");
+        if (/\b(create|add|new|inbound)\b/.test(query) && !/\b(inspect|show|list|read)\b/.test(query))
+            return result(["oxygen_table_webhook_create", "oxygen_table_webhooks_list"], ["tables webhook create", "tables webhook list"], "Create a direct inbound Table endpoint to insert or upsert rows. Inspect configured columns before setting auto_run: it is standing permission, with explicit or plan-default delivery ceilings. Workflows own graph triggers.");
+        return result(["oxygen_table_webhooks_list", "oxygen_table_webhook_get", "oxygen_table_webhook_deliveries"], ["tables webhook list", "tables webhook get", "tables webhook deliveries"], "Inspect direct Table endpoints and their deliveries. Use oxygen_table_webhook_create/update for changes; auth_mode=secret rotates protection. Workflows own graph triggers.");
+    }
+    if (table && /\bfeeds?\b/.test(query)) {
+        return /\b(bind|attach|create|new)\b/.test(query)
+            ? result(["oxygen_feeds_bind", "oxygen_feeds_list"], ["feeds bind", "feeds list"], "Bind the native Table feed: a declared-schema push source or scheduled provider pull. Inspect source, cadence and standing credit scope first; a pull feed is not an inbound webhook endpoint.")
+            : result(["oxygen_feeds_list", "oxygen_feeds_get"], ["feeds list", "feeds get"], "Inspect the native Table feed's source, cadence, caps and state. Pull feeds refill Tables on their own schedule. The current MCP catalog has no general cadence-update tool; do not substitute a Workflow or generic HTTP call.");
+    }
+    const file = /\b(csv|jsonl?|xlsx|excel|spreadsheet|staged|uploaded|file)\b/.test(query)
+        || /\b(?:pending|stuck|abandoned) imports?\b|\bimports?\b.{0,30}\b(pending|stuck|recover\w*)\b/.test(query);
+    if (file && /\b(import\w*|ingestion|upload\w*|preview|columns|sample|chunks)\b/.test(query)) {
+        if (/\b(pending|leased|failed|recover|chunks)\b/.test(query))
+            return result(/\b(chunks|items)\b/.test(query) ? ["oxygen_table_ingestions_items", "oxygen_table_ingestions_get"] : ["oxygen_table_ingestions_get", "oxygen_table_ingestions_items"], ["table-ingestions get", "table-ingestions items"], "Inspect the durable file ingestion and its chunks. Fix the cause before retry-failed; pending or leased chunks are not verified external outcomes. recover_pending polls existing BetterContact requests, not file imports.");
+        if (/\b(url|https?)\b/.test(query))
+            return result(["oxygen_tables_import_url"], ["tables import"], "Use the native public-file URL preview/import tool through the call gateway even for preview. Importing into an existing Table can fire its standing import auto-run; preview and new unarmed targets do not authorize later paid or external actions.");
+        if (/\b(preview|inspect|columns|sample|sheet)\b/.test(query))
+            return result(["oxygen_tables_import_preview", "oxygen_tables_import_staged"], ["tables import-preview", "tables import-staged"], "Inspect the owned staged file's worksheet, complete columns and sample before importing. Keep the selected sheet/mapping intact. Import into an existing Table can fire its standing import auto-run; preview grants no spend authority.");
+        if (/\b(prepare|upload)\b/.test(query))
+            return result(["oxygen_tables_import_upload", "oxygen_tables_import_preview", "oxygen_tables_import_staged"], ["tables import-upload", "tables import-preview", "tables import-staged"], "Prepare an organization-owned upload, transfer bytes to the returned presigned URL, then inspect and import that storage key. Preparing the upload creates no Table/run. Public URL imports use oxygen_tables_import_url.");
+        return result(["oxygen_tables_import_staged", "oxygen_tables_import_preview"], ["tables import-staged", "tables import-preview"], "Import the inspected owned staged file with its selected worksheet/mapping. Existing targets can fire standing import auto-run; a new target has no pre-existing armed columns. Preserve exact authorization and downstream credit/effect guards.");
+    }
+    if (table && /\b(actions?|cells?|items?|runs?)\b/.test(query)) {
+        if (/\b(verified|confirmed)\b/.test(query) && /\b(record|resolve)\b/.test(query) && !/\b(inspect|list|show|read)\b/.test(query))
+            return /\bcells?\b/.test(query)
+                ? result(["oxygen_table_cells_resolve", "oxygen_table_runs_effect_unknown"], ["cells resolve", "table-runs effect-unknown"], "After verifying the external destination, record applied or not_applied by Table cell coordinates. This records an outcome without repeating the effect; retry remains a separate guarded action.")
+                : result(["oxygen_table_action_item_resolve", "oxygen_table_runs_effect_unknown"], ["table-actions resolve", "table-runs effect-unknown"], "After verifying the external destination, record applied or not_applied by action item_id. This records an outcome without repeating the effect; retry remains a separate guarded action.");
+        if (/\b(effect.*unknown|uncertain|verified outcome|blocked.*resolve)\b/.test(query))
+            return result(["oxygen_table_runs_effect_unknown", "oxygen_table_runs_get", "oxygen_table_runs_items"], ["table-runs effect-unknown", "table-runs get", "table-runs items"], "Inspect exact effect-unknown items and verify the external destination. Only then record a verdict with oxygen_table_action_item_resolve by item_id or oxygen_table_cells_resolve by coordinates. Pending/failed items are not proof; retry is separate.");
+        return result(["oxygen_table_action_runs_list", "oxygen_table_runs_get", "oxygen_table_runs_items"], ["table-runs list", "table-runs get", "table-runs items"], "Find the Table's durable action run, then inspect its status and items. Pending, leased and failed are distinct from effect-unknown; do not record a verified verdict or retry an external effect without evidence.");
+    }
+    return null;
+}
 function explicitCapabilityIntent(query) {
-    if (isConnectedAppsIntent(query))
+    if (databaseRecommendation(query))
+        return ROUTE_BY_ID.get("platform-operations") ?? null;
+    if (isConnectedAppsIntent(query) || isConnectedAppEventsIntent(query) || isConnectedAppSpendIntent(query)) {
         return ROUTE_BY_ID.get("workspace-access") ?? null;
+    }
+    // Ahead of every primitive rule: the pages a workspace hides are NAMED after
+    // primitives ("hide Publishing and Workflows"), which those rules would claim.
+    if (isWorkspacePagesIntent(query) || isWorkspaceSettingsIntent(query)) {
+        return ROUTE_BY_ID.get("workspace-access") ?? null;
+    }
+    if (/\btables?\b/.test(query) && isSecondPartyDecisionIntent(query))
+        return ROUTE_BY_ID.get("collaboration") ?? null;
+    if (tableReadRecommendation(query) || tableMaintenanceRecommendation(query))
+        return ROUTE_BY_PRIMITIVE.get("tables") ?? null;
+    if (/\btables?\b/.test(query) && /\b(navigation|nav|paging|pagination)\b/.test(query)) {
+        return ROUTE_BY_PRIMITIVE.get("tables") ?? null;
+    }
+    if (/\b(unibox|inbox)\b/.test(query) && /\b(metadata|taxonomy|filters)\b/.test(query)) {
+        return ROUTE_BY_ID.get("messages") ?? null;
+    }
     if (/\b(infographic|graphic designer|render html|carousel pages|visual design|gtm flow image)\b/.test(query))
         return ROUTE_BY_ID.get("visual-rendering") ?? null;
     if (isUgcIntent(query))
@@ -962,6 +1363,8 @@ function explicitCapabilityIntent(query) {
         return ROUTE_BY_ID.get("connected-linkedin") ?? null;
     if (isCompanyPageFollowersIntent(query))
         return ROUTE_BY_PRIMITIVE.get("tables") ?? null;
+    if (isTableCapacityReadIntent(query))
+        return ROUTE_BY_PRIMITIVE.get("tables") ?? null;
     // A whole-motion ask ("set up inbound-led outbound for my posts") is a
     // Recipe kit + playbook, not the connected-LinkedIn signals card that the
     // "my LinkedIn … engagers" rule below would otherwise claim. Resolve it first.
@@ -998,6 +1401,10 @@ function explicitCapabilityIntent(query) {
     // claimed "a first comment on my LinkedIn post" and "... automatically".
     if (isFirstCommentIntent(query))
         return ROUTE_BY_PRIMITIVE.get("publishing") ?? null;
+    // Publish/approve are writes even when the noun is a public LinkedIn post.
+    // The 2026-09-30 connector baseline offered the cookieless read owner first.
+    if (isPublishingPostIntent(query))
+        return ROUTE_BY_PRIMITIVE.get("publishing") ?? null;
     if (isLinkedInKeywordPostIntent(query))
         return ROUTE_BY_ID.get("signals") ?? null;
     // Ahead of the workflow rule, whose "retry" would claim it. Why a post failed and how to get it out is Publishing's attempt ledger and
@@ -1012,8 +1419,13 @@ function explicitCapabilityIntent(query) {
     // hid every Sequences command.
     if (isSequenceScheduleIntent(query) || isSequenceUnsubscribeIntent(query))
         return ROUTE_BY_PRIMITIVE.get("sequences") ?? null;
+    if (isMailboxVolumeIntent(query) && !/\b(workflow|automation|automate|webhook|cron)\b/.test(query)) {
+        return ROUTE_BY_ID.get("sending-infrastructure") ?? null;
+    }
     if (isHostedWorkflowIntent(query))
         return ROUTE_BY_PRIMITIVE.get("workflows") ?? null;
+    if (isCompanySourcingIntent(query))
+        return ROUTE_BY_ID.get("sourcing-and-provider-tools") ?? null;
     if (isOwnedPostCommentIntent(query))
         return ROUTE_BY_PRIMITIVE.get("posts") ?? null;
     // Asking a second party to decide is Collaboration even when the thing being
@@ -1091,6 +1503,8 @@ function explicitCapabilityIntent(query) {
     // and the "label" wording fell to the Tags card below.
     if (isRowClassificationIntent(query))
         return ROUTE_BY_PRIMITIVE.get("tables") ?? null;
+    if (isTableMaintenanceIntent(query))
+        return ROUTE_BY_PRIMITIVE.get("tables") ?? null;
     if (/\b(tag|tags|label|labels)\b/.test(query))
         return ROUTE_BY_PRIMITIVE.get("tags") ?? null;
     if (/\b(disposable|working)\b.{0,30}\b(list|dataset|table)\b|\b(prospect|sourcing) table\b/.test(query)) {
@@ -1202,7 +1616,22 @@ export const LOCAL_BUSINESS_SCRAPE_COMMAND = `oxygen companies search preview --
 function isLocalBusinessIntent(query) {
     return /\b(local business(?:es)?|google maps|maps listings?|storefronts?|near me|(?:dental|medical|law|veterinary) (?:practices?|offices?|clinics?)|dentists?|restaurants?|cafes?|coffee shops?|gyms?|salons?|plumbers?|electricians?|contractors?|hvac|auto repair|real estate agents?|businesses (?:in|near|around) [a-z])\b/.test(query);
 }
+function isPublishingPostIntent(query) {
+    return /\b(posts?|publishing|content calendar)\b/.test(query)
+        && /\b(publish|publishing|schedule|scheduled|approve|approval)\b/.test(query)
+        && !/\b(workflow|automation|automate|webhook|cron)\b/.test(query)
+        && !(/\b(find|search|scrape|research)\b/.test(query) && /\b(about|mention|containing)\b/.test(query));
+}
 function recommendationsFor(card, query) {
+    const database = card.id === "platform-operations" ? databaseRecommendation(query) : null;
+    if (database)
+        return database;
+    if (card.id === "billing-and-budgets" && /\b(credit prices|credit price catalog|customer credit)\b/.test(query)) {
+        return { tools: ["oxygen_customer_credit_prices"], commands: ["pricing customer-credit-prices"] };
+    }
+    if (card.id === "messages" && /\b(unibox|inbox)\b/.test(query) && /\b(metadata|taxonomy|filters|accounts|tags)\b/.test(query)) {
+        return { tools: ["oxygen_unibox_metadata"], commands: ["unibox metadata"] };
+    }
     // A program's lifecycle and a creator's voice are UGC work the Publishing card
     // also claims ("archive program", "creator voice"); before these they got the
     // post tools (UGC E2E pass, 2026-09-29).
@@ -1261,6 +1690,22 @@ function recommendationsFor(card, query) {
             exactMcpCall: CAPABILITY_ROUTE_MCP_CALLS.localBusinessScrape(),
         };
     }
+    if (card.id === "workspace-access" && isConnectedAppSpendIntent(query)) {
+        return {
+            tools: ["oxygen_connector_list", "oxygen_connector_update", "oxygen_limits_show"],
+            commands: ["connectors get", "connectors set", "limits show"],
+            exactCommand: "oxygen connectors get <app> --json",
+            exactMcpCall: CAPABILITY_ROUTE_MCP_CALLS.connectedAppsList(),
+        };
+    }
+    if (card.id === "workspace-access" && isConnectedAppEventsIntent(query)) {
+        return {
+            tools: ["oxygen_connector_events_get", "oxygen_connector_events_revoke", "oxygen_connector_list"],
+            commands: ["connectors events get", "connectors events revoke", "connectors list"],
+            exactCommand: "oxygen connectors events get <app> --json",
+            exactMcpCall: CAPABILITY_ROUTE_MCP_CALLS.connectedAppEvents(),
+        };
+    }
     if (card.id === "workspace-access" && isConnectedAppsIntent(query)) {
         return {
             tools: ["oxygen_connector_list", "oxygen_connector_update"],
@@ -1269,6 +1714,43 @@ function recommendationsFor(card, query) {
             exactMcpCall: CAPABILITY_ROUTE_MCP_CALLS.connectedAppsList(),
         };
     }
+    if (card.id === "workspace-access" && isWorkspacePagesIntent(query)) {
+        return {
+            tools: ["oxygen_settings_pages_get", "oxygen_settings_pages_update"],
+            commands: ["settings pages list", "settings pages set"],
+            exactCommand: "oxygen settings pages list --json",
+            exactMcpCall: CAPABILITY_ROUTE_MCP_CALLS.workspacePagesList(),
+        };
+    }
+    // A general settings ask: the pages pair is the settings CLI and MCP can change.
+    if (card.id === "workspace-access" && isWorkspaceSettingsIntent(query)) {
+        return {
+            tools: ["oxygen_settings_pages_get", "oxygen_settings_pages_update", ...card.gatewayTools],
+            commands: ["settings pages list", "settings pages set", ...card.gatewayCommands],
+        };
+    }
+    // Contact enrichment keeps its own gateway even when the input mentions
+    // company names or domains; those words do not make it account sourcing.
+    if (card.id === "sourcing-and-provider-tools" && /\bfind (?:work )?emails?\b/.test(query))
+        return {
+            tools: ["oxygen_find_email", "oxygen_tools_search"], commands: ["find email", "tools search"],
+        };
+    if (card.id === "sourcing-and-provider-tools" && /\bfind (?:mobile )?phones?\b/.test(query))
+        return {
+            tools: ["oxygen_find_phone", "oxygen_tools_search"], commands: ["find phone", "tools search"],
+        };
+    if (card.id === "sourcing-and-provider-tools" && (isCompanySourcingIntent(query) || /\b(companies|company search|company sourcing)\b/.test(query))) {
+        return {
+            tools: ["oxygen_companies_search_plan", "oxygen_companies_search_preview", "oxygen_companies_search_run", ...(/\b(people|contacts)\b/.test(query) ? ["oxygen_people_search_plan"] : [])],
+            commands: ["companies search plan", "companies search preview", "companies search run", ...(/\b(people|contacts)\b/.test(query) ? ["people search plan"] : [])],
+        };
+    }
+    if (card.id === "sourcing-and-provider-tools" && /\b(people|contacts|personas?)\b/.test(query)) {
+        return {
+            tools: ["oxygen_people_search_plan", "oxygen_people_search_preview", "oxygen_people_search_run"],
+            commands: ["people search plan", "people search preview", "people search run"],
+        };
+    }
     if (card.id === "connected-linkedin" && isLinkedInAccountConnectIntent(query)) {
         return {
             tools: ["oxygen_senders_connect", "oxygen_senders_list", "oxygen_billing_commitments"],
@@ -1311,6 +1793,12 @@ function recommendationsFor(card, query) {
             ],
         };
     }
+    if (card.id === "sending-infrastructure" && isMailboxVolumeIntent(query)) {
+        return {
+            tools: ["oxygen_mailboxes_set_ramp", "oxygen_mailboxes_set_cap", "oxygen_mailboxes_get"],
+            commands: ["mailboxes ramp set", "mailboxes cap set", "mailboxes get"],
+        };
+    }
     if (card.id === "sending-infrastructure" && isMailboxOnboardingIntent(query)) {
         return {
             tools: [
@@ -1371,6 +1859,89 @@ function recommendationsFor(card, query) {
         };
     }
     if (card.primitive === "tables") {
+        const read = tableReadRecommendation(query);
+        if (read)
+            return read;
+        const maintenance = tableMaintenanceRecommendation(query);
+        if (maintenance)
+            return maintenance;
+        if (isTableCapacityReadIntent(query))
+            return {
+                tools: ["oxygen_limits_show", "oxygen_tables_query", "oxygen_tables_describe"],
+                commands: ["limits show", "tables query", "tables describe"],
+                exactMcpCall: { tool: "oxygen_limits_show", arguments: {} },
+            };
+        if (isFunctionIntent(query)) {
+            if (/\b(?:list|show|read|see|my)\b.{0,30}\bfavou?rites?\b/.test(query))
+                return {
+                    tools: ["oxygen_callables_manage"], commands: ["functions list", "functions describe"],
+                    exactMcpCall: { tool: "oxygen_callables_manage", arguments: { operation: "list_functions", filter: "favorites" } },
+                };
+            if (/\b(runs|invocations?|history)\b/.test(query))
+                return {
+                    tools: ["oxygen_callables_manage"], commands: ["functions runs", "functions describe"],
+                    exactMcpCall: CAPABILITY_ROUTE_MCP_CALLS.functionsRuns(),
+                };
+            const functionMutation = [
+                [/\b(publish)\b/, "functions publish"],
+                [/\b(bind|attach)\b/, "functions bind"],
+                [/\b(rename)\b/, "functions rename"],
+                [/\b(delete|remove)\b/, "functions delete"],
+                [/\b(duplicate|copy)\b/, "functions duplicate"],
+                [/\b(unfavorite|unfavourite)\b/, "functions unfavorite"],
+                [/\b(favorite|favourite)\b/, "functions favorite"],
+                [/\b(enable|disable)\b/, /\bdisable\b/.test(query) ? "functions disable" : "functions enable"],
+                [/\b(create|save|edit)\b/, "functions draft"],
+            ];
+            const mutation = functionMutation.find(([pattern]) => pattern.test(query));
+            if (mutation)
+                return {
+                    tools: ["oxygen_callables_manage"],
+                    commands: [/\bcreate\b/.test(query) ? "functions list" : "functions describe", mutation[1]],
+                    exactMcpCall: /\bcreate\b/.test(query) ? CAPABILITY_ROUTE_MCP_CALLS.functionsList() : CAPABILITY_ROUTE_MCP_CALLS.functionsDescribe(),
+                };
+            if (/\b(run|execute|invoke)\b/.test(query))
+                return {
+                    tools: ["oxygen_callables_manage", "oxygen_columns_run"], commands: ["functions describe", "columns run"],
+                    exactMcpCall: CAPABILITY_ROUTE_MCP_CALLS.functionsDescribe(),
+                };
+            if (/\b(describe|inspect|inputs?|outputs?|steps?|caps?|version|details?)\b/.test(query))
+                return {
+                    tools: ["oxygen_callables_manage"], commands: ["functions describe", "functions runs"],
+                    exactMcpCall: CAPABILITY_ROUTE_MCP_CALLS.functionsDescribe(),
+                };
+            return {
+                tools: ["oxygen_callables_manage"], commands: ["functions list", "functions describe"],
+                exactMcpCall: { ...CAPABILITY_ROUTE_MCP_CALLS.functionsList(), ...(/\b(favorites|favourites)\b/.test(query) ? { arguments: { operation: "list_functions", filter: "favorites" } } : {}) },
+            };
+        }
+        if (isTableMaintenanceIntent(query)) {
+            if (/\b(skills?|instructions?|guidance)\b/.test(query))
+                return {
+                    tools: ["oxygen_skills_get", "oxygen_tables_tidy_suggest", "oxygen_tables_describe"],
+                    commands: ["skills get", "tables tidy-suggest", "tables describe"],
+                    exactCommand: "oxygen skills get oxygen-table-tidy --json",
+                    exactMcpCall: { tool: "oxygen_skills_get", arguments: { name: "oxygen-table-tidy" } },
+                };
+            if (/\b(favou?rites?|unfavou?rite|star|unstar)\b/.test(query)) {
+                const read = /\b(list|read|show|see)\b/.test(query);
+                return {
+                    tools: read ? ["oxygen_tables_favorites", "oxygen_tables_favorite"] : ["oxygen_tables_favorite", "oxygen_tables_favorites"],
+                    commands: read ? ["tables favorites", "tables favorite"] : ["tables favorite", "tables favorites"],
+                };
+            }
+            if (/\bcolumns?\b/.test(query) && /\b(rename|renaming|label|key)\b/.test(query)) {
+                const key = /\b(stable key|column key|snake case|rename key)\b/.test(query);
+                return {
+                    tools: [key ? "oxygen_columns_rename" : "oxygen_columns_update", "oxygen_tables_describe"],
+                    commands: [key ? "columns rename" : "columns update", "tables describe"],
+                };
+            }
+            return {
+                tools: ["oxygen_tables_tidy_suggest", "oxygen_columns_update", "oxygen_tables_describe", "oxygen_skills_get"],
+                commands: ["tables tidy-suggest", "columns update", "tables describe", "skills get"],
+            };
+        }
         if (isLinkedInProfileWatcherIntent(query)) {
             return {
                 tools: ["oxygen_tables_watcher"],
@@ -1527,6 +2098,14 @@ function recommendationsFor(card, query) {
                 ],
             };
         }
+        // Inspect reusable bundles before authoring a new recurring monitor. This
+        // does not assume a matching seed exists; list/describe/preflight establish
+        // that. Existing run inspection still belongs to tail/list below.
+        if (/\b(monitor|monitoring|watch|watching)\b/.test(query) && !/\b(existing|status|failed|failure|logs?|tail|cancel|pause|resume|disable|enable)\b/.test(query))
+            return {
+                tools: ["oxygen_blueprints_list", "oxygen_blueprints_describe", "oxygen_blueprints_preflight", "oxygen_workflows_schema", "oxygen_workflows_lint"],
+                commands: ["blueprints list", "blueprints describe", "blueprints preflight", "workflows schema", "workflows lint"],
+            };
         if (/\b(workflow )?templates?\b/.test(query)) {
             return {
                 tools: ["oxygen_workflow_templates_search", "oxygen_workflow_templates_describe", "oxygen_workflow_templates_preflight", "oxygen_workflow_templates_apply"],
@@ -1749,10 +2328,11 @@ function isSecondPartyDecisionIntent(query) {
     const decisionLanguage = /\b(sign ?off|signoff|approval request|request approval|approval gate|go no go)\b/.test(query);
     const clientDecision = /\bclient\b.{0,20}\b(approv\w*|sign ?off|review|decide|decision|login|role)\b/.test(query)
         || /\b(approv\w*|sign ?off|decision)\b.{0,20}\bfrom the client\b/.test(query);
+    const teammateDecision = /\b(teammate|colleague|workspace member)\b.{0,25}\b(approv\w*|sign ?off|review|decid\w*)\b/.test(query);
     const internalThread = /\b(comment|comments|thread)\b/.test(query)
         && /\b(internal|client|teammate|workspace member|discuss)\b/.test(query)
         && !/\b(linkedin|public|published|post|posts|publishing)\b/.test(query);
-    return decisionLanguage || clientDecision || internalThread;
+    return decisionLanguage || clientDecision || teammateDecision || internalThread;
 }
 /** An X (Twitter) post format: thread, poll, alt text, who-can-reply, quote, photo tags. */
 function isXPostFormatIntent(query) {
@@ -1781,7 +2361,8 @@ function isOwnedPostCommentIntent(query) {
     return owned || operatorWork;
 }
 function isHostedWorkflowIntent(query) {
-    const strongWorkflowLanguage = /\b(workflow|automation|automate|automatically|webhook|cron|event trigger|branching?|retr(?:y|ies)|orchestrat(?:e|ion)|scheduled job|deterministic graph)\b/.test(query);
+    const strongWorkflowLanguage = /\b(workflow|automation|automate|automatically|webhook|cron|event trigger|branching?|retr(?:y|ies)|orchestrat(?:e|ion)|scheduled job|deterministic graph)\b/.test(query)
+        || isRecurringCompanyMonitoringIntent(query);
     const cadenceLanguage = /\b(sequence|campaign|cadence|day\s*\d+|multi[ -]step|rotate senders?|sender rotation|stop on reply|until (?:they )?reply)\b/.test(query);
     const workflowMechanics = /\b(webhook|cron|event trigger|triggered by|branching?|retr(?:y|ies)|orchestrat(?:e|ion)|scheduled job|deterministic graph|automatically)\b/.test(query)
         || /\bwhen\b.{0,50}\b(signs? up|created|updated|changes?|happens?|received)\b/.test(query);
@@ -1794,6 +2375,11 @@ function isHostedWorkflowIntent(query) {
     return /\b(nightly|hourly|daily|weekly|every (?:monday|tuesday|wednesday|thursday|friday|saturday|sunday|day|night|week|month))\b/.test(query)
         || (/\bschedule(?:d)?\b/.test(query) && !/\bpost|content\b/.test(query));
 }
+function isRecurringCompanyMonitoringIntent(query) {
+    return /\b(companies|company|competitors?)\b/.test(query)
+        && /\b(monitor(?:ing)?|watch(?:ing|list)?|track(?:ing)?)\b/.test(query)
+        && /\b(recurring|periodic|repeat(?:ed|able)?|over time|new observations?)\b/.test(query);
+}
 function isPublicLinkedInRead(query) {
     if (!query.includes("linkedin"))
         return false;