@oxygen-agent/cli 1.1011.405 → 1.1011.446

package/dist/index.js

@@ -1,4 +1,10 @@
+import { knowledgeIndexReadContract, knowledgePageReadContract } from "@oxygen/shared/contracts/knowledge-content-reads";
+import { DATABASE_ATTACH_CONTRACT, DATABASE_MIGRATE_CONTRACT, DATABASE_QUERY_CONTRACT } from "@oxygen/shared/contracts/database";
+import { DATABASE_QUERY_FLAG_OVERLAY } from "./database-query-flags.js";
+import { LINKEDIN_SENT_INVITES_QUERY_CONTRACT } from "@oxygen/shared/contracts/linkedin-invites-list";
 import { registerCrmSupportFlags, readCrmNoteEditFields, readCrmPhotoFields, readCrmFileLabel, buildCrmObjectsPath, buildCrmConnectionsPath } from "./crm-support-flags.js";
+import { addToolCatalogSearchWindowFlag, readToolCatalogSearchWindow } from "./tool-catalog-search-window.js";
+import { createToolCatalogDetailCommand } from "./tool-catalog-detail-command.js";
 import { execFileSync } from "node:child_process";
 import { createHash, randomUUID } from "node:crypto";
 import { closeSync, createReadStream, createWriteStream, existsSync, mkdirSync, mkdtempSync, openSync, readFileSync, readSync, renameSync, rmSync, statSync, unlinkSync, writeFileSync, } from "node:fs";
@@ -11,12 +17,13 @@ import { Command, CommanderError, Option } from "commander";
 import { registerUgcCommands } from "./ugc-commands.js";
 import { registerConnectorsCommands } from "./connectors-commands.js";
 import { registerSettingsCommands } from "./settings-commands.js";
+import { registerCustomerOperationCommands } from "./customer-operation-commands.js";
 import { registerKnowledgeRepositoryCommands } from "./knowledge-repository-commands.js";
 import { registerVisualCommands } from "./visual-commands.js";
 import { renderPrimaryProviderBoard } from "./admin-primary-providers-render.js";
 import { registerFunctionsCommands } from "./functions-commands.js";
 import { STREAMED_FILE_IMPORT_MIN_BYTES, putImportFileStream, rowsForStreamedImportTarget, scanStreamedImportFile, shouldStreamFileImport, } from "./streamed-file-import.js";
-import { applyOxygenHelp, argvRequestsJson, commanderUsageFailure, enableCommandSuggestions, unknownCommandHint, unknownOptionHint, withoutHelpForUnknownCommand, } from "./help.js";
+import { applyOxygenHelp, argvRequestsJson, commanderUsageFailure, enableCommandSuggestions, unknownCommandHint, unknownOptionHint, withoutHelpForUnknownCommand, validateRequiredOptionValues, } from "./help.js";
 import { buildCommandManifest, getCommandManifestEntry, searchCommandManifest, suggestCommandNames, } from "./command-manifest.js";
 import { AGENCY_DIRECTORY_REGIONS, AGENCY_DIRECTORY_SERVICES, COLLAB_GATE_KINDS, COLLAB_GATE_PROSE, COLLAB_SUBJECT_KINDS, COLLAB_SUBJECT_KINDS_PROSE, COLLAB_SUBJECT_LABELS, COLLAB_SUBJECT_PROSE, GATE_KIND_SUBJECTS, describeWorkflowStatusChange, formatCellForDisplay, formatCopilotPlanDuration, formatCopilotPlanSeconds, formatPublicBudgetScopes, SUBJECT_PATH_FORMS_PROSE, formatSubjectPath, exitCodeForOxygenError, parseSubjectPath, parseSubjectRef, parseWorkflowStatusChange, chunk, isVersionGreater, isVersionLess, KNOWLEDGE_BOOTSTRAP_MAX_CREDITS, MAX_CLI_JSON_BODY_BYTES, MAX_MCP_TOOL_NAME_LENGTH, normalizeCopilotPlanStepStatus, OXYGEN_CAPABILITY_ROUTES, OXYGEN_VERSION, OxygenError, getCapabilityRouteMatch, inferUserCapabilityRoute, parseKnowledgePageMarkdown, PLAN_LIMITS, serializeCapabilityRoute, sleep, success, TAG_KINDS_PROSE, toFailure, workflowMcpToolName, } from "@oxygen/shared";
 import { PURCHASABLE_PLAN_KEYS, planVolumeBonusPercent, resolveBasePricingPlan } from "@oxygen/shared/billing";
@@ -28,7 +35,9 @@ import { SEQUENCE_LIFECYCLES, sequenceDisplayStatus } from "@oxygen/shared/seque
 import { operationPath } from "@oxygen/shared/contracts/operations";
 import { SENDER_LIMITS_SET_OPERATION } from "@oxygen/shared/contracts/sender-limits";
 import { addContractFlags, readContractFlags } from "./contract-flags.js";
+import { TABLE_QUERY_GRID_CONTRACT } from "@oxygen/shared/contracts/table-query-grid";
 import { INTEGRATION_CONNECT_ACCOUNT_CONTRACT } from "@oxygen/shared/contracts/integration-connect";
+import { CRM_ENRICHMENT_READ_CONTRACT } from "@oxygen/shared/contracts/crm-enrichment-read";
 import { buildSenderLimitsBody, parseWorkingDaysOption, SENDER_LIMITS_FLAG_OVERLAY } from "./sender-limits-flags.js";
 import { readColumnDecisionFlags } from "./column-decision-options.js";
 import { MANAGED_DATA_SUPPLIERS } from "@oxygen/shared/data-suppliers";
@@ -47,8 +56,9 @@ import { formatAiPromptPreviewNotice, formatColumnReferenceNotices, formatEnrich
 import { runLocalCustomHttpColumn } from "./local-custom-http-column.js";
 import { formatSearchAiFilterTotalsNotice } from "./search-ai-filter-notice.js";
 import { formatInboxNeedsReplyNotice } from "./inbox-needs-reply-notice.js";
+import { formatMailboxRampNotice } from "./mailbox-ramp-notice.js";
 import { formatWorkflowPlanLimitNotices } from "./workflow-plan-limit-notices.js";
-import { captureCurrentTranscript, collectFeedbackEnvironment, TranscriptCaptureError, } from "./transcript.js";
+import { captureCurrentTranscript, collectFeedbackEnvironment, redactTranscriptSecrets, TranscriptCaptureError, } from "./transcript.js";
 import { addSessionOutput, addSessionStatus, getSessionUsage, startSession, updateSessionStep, } from "./session.js";
 import { doctorAgentSkills, getAgentSkill, installAgentSkills, listAgentSkills, runAutomaticSkillsInstall, searchAgentSkills, } from "./skills.js";
 import { resolveCliBinaryName } from "./runtime.js";
@@ -282,6 +292,11 @@ function buildFindBody(capability, options) {
         body.verify = true;
     return body;
 }
+const LINKEDIN_SENT_INVITES_FLAG_OVERLAY = {
+    account: { valueName: "<ref>", help: "Scope to one sender account (sender id, connection id, or Unipile account id).", parse: readOption },
+    limit: { valueName: "<n>", help: "Maximum invitations to return.", parse: readPositiveInt },
+    cursor: { valueName: "<cursor>", parse: readOption },
+};
 /** The shared search/buy filters, in the snake_case the voice numbers route reads. */
 function voiceNumberFilters(options) {
     const areaCode = readOption(options.areaCode);
@@ -293,6 +308,13 @@ function voiceNumberFilters(options) {
         ...(country ? { iso_country: country.toUpperCase() } : {}),
     };
 }
+function readSuppressionBulkKeys(value, flag) {
+    const entries = splitCommaList(value);
+    if (entries.length === 0 || entries.length > 500) {
+        throw new OxygenError("invalid_request", `${flag} requires 1-500 nonblank entries.`, { exitCode: 2 });
+    }
+    return entries;
+}
 function suppressionListParams(options) {
     const params = new URLSearchParams();
     const reason = readOption(options.reason);
@@ -855,6 +877,7 @@ async function handleAsyncAction(command, options, action) {
         writeCreditsReceipt(data);
         writeSearchAiFilterTotalsNotice(data);
         writeInboxNeedsReplyNotice(data);
+        writeMailboxRampNotice(data);
     }
     catch (error) {
         emitCliFailure(command, error);
@@ -1165,6 +1188,11 @@ function writeInboxNeedsReplyNotice(data) {
     if (notice)
         process.stderr.write(`${notice}\n`);
 }
+function writeMailboxRampNotice(data) {
+    const notice = formatMailboxRampNotice(data);
+    if (notice)
+        process.stderr.write(`${notice}\n`);
+}
 function writeAiPromptPreviewNotice(data) {
     const notice = formatAiPromptPreviewNotice(data);
     if (notice)
@@ -2146,6 +2174,9 @@ function buildCrmSyncRunBody(options) {
         provider: options.provider,
         object: options.object,
         mode: resolveLiveDryRunMode(options),
+        ...(readOption(options.direction) ? { direction: readOption(options.direction) } : {}),
+        ...(readOption(options.since) ? { since: readOption(options.since) } : {}),
+        ...(readOption(options.configId) ? { config_id: readOption(options.configId) } : {}),
         ...(readPositiveInt(options.maxRows) !== undefined ? { max_rows_per_cycle: readPositiveInt(options.maxRows) } : {}),
         ...(readPositiveNumber(options.maxCredits) !== undefined ? { max_credits: readPositiveNumber(options.maxCredits) } : {}),
         ...(options.approved ? { approved: true } : {}),
@@ -2199,11 +2230,16 @@ function buildCrmSyncLinksPath(object, rowId) {
     params.set("row_id", rowId);
     return `/api/cli/crm/sync/links?${params.toString()}`;
 }
+const CRM_ENRICHMENT_READ_FLAGS = {
+    object: { valueName: "<object>", help: "CRM object slug: companies or people. Omit for every object this workspace has.", parse: readOption },
+};
 function buildCrmEnrichmentListPath(options) {
-    const object = readOption(options.object);
-    return object
-        ? `/api/cli/crm/enrichment?${new URLSearchParams({ object }).toString()}`
-        : "/api/cli/crm/enrichment";
+    const fields = readContractFlags(options, CRM_ENRICHMENT_READ_CONTRACT, CRM_ENRICHMENT_READ_FLAGS);
+    const params = new URLSearchParams();
+    for (const [key, value] of Object.entries(fields))
+        if (value !== undefined && value !== null)
+            params.set(key, String(value));
+    return params.size ? `/api/cli/crm/enrichment?${params.toString()}` : "/api/cli/crm/enrichment";
 }
 // The delta form: flip one named enrichment and leave every other decision
 // (the rest of the presets, the ceiling, force, the trigger set) exactly as it
@@ -2266,6 +2302,8 @@ function buildNotetakerSetupBody(options) {
         capture_mode: "invited_bot",
         auto_record_scope: "manual",
         ...(readOption(options.botName) ? { bot_name: readOption(options.botName) } : {}),
+        ...(options.botAvatarUrl !== undefined ? { bot_avatar_url: readOption(options.botAvatarUrl) ?? null } : {}),
+        ...(options.consentDisclosure !== undefined ? { consent_disclosure: readOption(options.consentDisclosure) ?? null } : {}),
         ...(readPositiveInt(options.defaultMaxMinutes) ? { default_max_minutes: readPositiveInt(options.defaultMaxMinutes) } : {}),
         ...(readPositiveNumber(options.defaultMaxCredits) ? { default_max_credits: readPositiveNumber(options.defaultMaxCredits) } : {}),
         ...(readPositiveInt(options.retentionDays) ? { retention_days: readPositiveInt(options.retentionDays) } : {}),
@@ -2352,6 +2390,7 @@ function buildPublishingPostCreateBody(options) {
     const title = readOption(options.title);
     const timezone = readOption(options.timezone);
     const ugcParticipationId = readOption(options.ugcParticipationId);
+    const idempotencyKey = readOption(options.idempotencyKey);
     const content = buildPublishingContent(options);
     if (provider)
         body.provider = provider;
@@ -2365,6 +2404,10 @@ function buildPublishingPostCreateBody(options) {
         body.title = title;
     if (timezone)
         body.timezone = timezone;
+    if (idempotencyKey)
+        body.idempotency_key = idempotencyKey;
+    if (options.tags !== undefined)
+        body.tags = splitCommaList(options.tags);
     if (ugcParticipationId) {
         if (options.approved) {
             throw new OxygenError("ugc_draft_required", "A program-bound personal post must be saved unapproved. Remove --approved, then review it in Publishing → UGC.", { exitCode: 1 });
@@ -2582,9 +2625,9 @@ async function uploadPublishingMediaFile(filePath, options) {
         },
     });
     const uploadUrl = readRecordString(ticket, "upload_url");
-    const completeUrl = readRecordString(ticket, "complete_url");
-    if (!uploadUrl || !completeUrl) {
-        throw new OxygenError("publishing_media_upload_failed", "The server did not return an upload URL for that file.", { exitCode: 1 });
+    const mediaId = isRecord(ticket.media) ? readRecordString(ticket.media, "id") : null;
+    if (!uploadUrl || !mediaId) {
+        throw new OxygenError("publishing_media_upload_failed", "The server did not return an upload URL and media ID for that file.", { exitCode: 1 });
     }
     const headers = ticket.upload_headers && typeof ticket.upload_headers === "object"
         ? Object.fromEntries(Object.entries(ticket.upload_headers).map(([key, value]) => [key, String(value)]))
@@ -2593,7 +2636,7 @@ async function uploadPublishingMediaFile(filePath, options) {
     if (!put.ok) {
         throw new OxygenError("publishing_media_upload_failed", `Object storage rejected the upload (${put.status}).`, { exitCode: 1 });
     }
-    return await requestOxygen(completeUrl, { method: "POST", body: {} });
+    return await requestOxygen(`/api/cli/publishing/media/${encodeURIComponent(mediaId)}/uploaded`, { method: "POST", body: {} });
 }
 function buildPublishingMediaUploadUrlBody(options) {
     const fileName = readOption(options.fileName);
@@ -3069,6 +3112,7 @@ function publishingAmplificationTunables(options) {
     const commentMin = readNonNegativeInt(options.commentDelayMin);
     const commentMax = readNonNegativeInt(options.commentDelayMax);
     return {
+        ...(options.metadataJson !== undefined ? { metadata: parseJsonObject(readFileIfPresent(options.metadataJson)) } : {}),
         ...(maxActions !== undefined ? { max_actions_per_post: maxActions } : {}),
         ...(commentPool ? { comment_source: "pool", comment_pool: commentPool } : {}),
         ...(reactionMin !== undefined ? { reaction_delay_min_seconds: reactionMin } : {}),
@@ -3129,6 +3173,7 @@ function buildPublishingBoostBody(postId, options) {
     const maxActions = readPositiveInt(options.maxActionsPerPost);
     const commentPool = readPublishingCommentPool(options);
     return {
+        ...(readOption(options.name) ? { name: readOption(options.name) } : {}),
         senders,
         actions,
         max_credits: maxCredits,
@@ -3573,7 +3618,8 @@ export function createProgram() {
         .version(OXYGEN_VERSION)
         .option("--profile <name>", "Use a stored CLI profile for this command.")
         .option("--org <organization>", "Use an organization id, Clerk org id, or slug for this command.");
-    program.hook("preAction", () => {
+    program.hook("preAction", (_root, selected) => {
+        validateRequiredOptionValues(program, selected);
         const options = program.opts();
         if (options.profile) {
             globalProfileFlag = options.profile;
@@ -4004,6 +4050,8 @@ export function createProgram() {
         .requiredOption("-m, --message <message>", "Your message to OXYGEN support.")
         .option("--severity <severity>", "New conversation only: low | normal | high. Defaults to normal.")
         .option("--category <category>", "New conversation only: question, bug, feature_request, billing, security_data, configuration, agency_directory, or other. Defaults to question.")
+        .option("--transcript-text <text>", "New conversation only: explicitly share a selected transcript excerpt of 1–200,000 bytes after credential redaction.")
+        .option("--no-transcript", "Omit any selected transcript excerpt.")
         .option("--json", "Print a JSON envelope.")
         .addHelpText("after", `
 Examples:
@@ -4013,29 +4061,42 @@ Examples:
         .action(async (threadId, options) => {
         const message = readOption(options.message);
         if (threadId) {
-            await handleAsyncAction("support chat", options, () => requestOxygen(`/api/cli/support/tickets/${encodeURIComponent(threadId)}/messages`, {
-                method: "POST",
-                body: { body: message },
-            }));
+            await handleAsyncAction("support chat", options, () => {
+                if (options.transcript !== false && options.transcriptText !== undefined) {
+                    throw new OxygenError("invalid_transcript", "Transcript excerpts can only be attached when starting a new conversation. Omit the Thread ID or use support file.", { exitCode: 1 });
+                }
+                return requestOxygen(`/api/cli/support/tickets/${encodeURIComponent(threadId)}/messages`, {
+                    method: "POST",
+                    body: { body: message },
+                });
+            });
             return;
         }
         const severity = readOption(options.severity);
-        await handleAsyncAction("support chat", options, () => requestOxygen("/api/cli/support/tickets", {
-            method: "POST",
-            body: {
+        await handleAsyncAction("support chat", options, () => {
+            const body = {
                 message,
                 category: readOption(options.category) ?? "question",
                 ...(severity ? { severity } : {}),
-            },
-        }));
+            };
+            if (options.transcript !== false && options.transcriptText !== undefined) {
+                body.transcript_text = readSelectedTranscriptExcerpt(options.transcriptText);
+            }
+            return requestOxygen("/api/cli/support/tickets", {
+                method: "POST",
+                body,
+            });
+        });
     }))
         .addCommand(new Command("file")
-        .description("Create a structured Plain support conversation with a subject and required message. Prefer `support chat` for an ordinary conversation; use this zero-credit filing path when operation, error, run, or table metadata helps triage. A selected local transcript can be attached with --transcript-file, --session-id, or --include-transcript. Check `support list --status open` first because a new filing can create a second Thread.")
+        .description("Create a structured Plain support conversation with a subject and required message. Prefer `support chat` for an ordinary conversation; use this zero-credit filing path when operation, error, run, or table metadata helps triage. Share a selected excerpt with --transcript-text, or a local transcript with --transcript-file, --session-id, or --include-transcript. Check `support list --status open` first because a new filing can create a second Thread.")
         .requiredOption("--subject <subject>", "One-line summary of the problem.")
         .requiredOption("--body <body>", "Required message: what you were doing, what happened, and what you tried.")
         .option("--include-transcript", "Attach the most recent local agent transcript after redaction.")
         .option("--session-id <id>", "Attach this local agent session transcript.")
         .option("--transcript-file <path>", "Attach the last 2 MB of a selected text/JSONL file after best-effort credential redaction; review it first.")
+        .option("--transcript-text <text>", "Explicitly share a selected transcript excerpt of 1–200,000 bytes after credential redaction, instead of a local transcript.")
+        .option("--no-transcript", "Omit any transcript, including explicitly selected content.")
         .option("--severity <severity>", "low | normal | high. Defaults to normal.")
         .option("--category <category>", "Request type: question, bug, feature_request, billing, security_data, configuration, agency_directory, or other.")
         .option("--source <source>", "Where the ticket originated. Only slack is supported today.")
@@ -4047,6 +4108,7 @@ Examples:
         .option("--slack-permalink <url>", "Slack message permalink (https://*.slack.com/...) to attach as context.")
         .option("--slack-channel-id <id>", "Slack channel id (e.g. C0123ABC456) the report came from.")
         .option("--customer-workspace <label>", "Customer workspace (org name/slug) a forwarded report concerns.")
+        .option("--cli-version <version>", "CLI version associated with the reported problem.")
         .option("--json", "Print a JSON envelope.")
         .action(async (options) => {
         await handleAsyncAction("support ticket create", options, () => requestOxygen("/api/cli/support/tickets", {
@@ -4393,6 +4455,15 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         .option("-m, --message <message>", "Your feedback or bug report.")
         .option("--severity <severity>", "low | normal | high. Defaults to normal.")
         .option("--category <category>", "Optional category label. Defaults to 'feedback'.")
+        .option("--deep-links <urls>", "Comma-separated workspace links to include in the report context.")
+        .option("--operation <operation>", "The operation that failed.")
+        .option("--error-code <code>", "Error envelope code from the failed operation.")
+        .option("--run-ids <ids>", "Comma-separated affected run ids.")
+        .option("--table-ids <ids>", "Comma-separated affected table ids.")
+        .option("--slack-permalink <url>", "Customer-selected Slack message permalink for a forwarded report.")
+        .option("--slack-channel-id <id>", "Slack channel associated with the forwarded report.")
+        .option("--customer-workspace <label>", "Workspace name or slug associated with a forwarded report.")
+        .option("--transcript-text <text>", "Explicitly attach a selected excerpt (1-200,000 bytes) after best-effort secret redaction; exclusive with local transcript options.")
         .option("--session-id <id>", "Explicitly attach a specific local session transcript by id.")
         .option("--file <path>", "Explicitly attach a specific local transcript file.")
         .option("--include-transcript", "Explicitly attach the most recently active local session after best-effort secret redaction. Review it for sensitive customer data first.")
@@ -4419,14 +4490,13 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         .action(async (options) => {
         await handleAsyncAction("db provision", options, () => requestOxygen("/api/cli/db/provision", { method: "POST", body: {} }));
     }))
-        .addCommand(new Command("migrate")
-        .description("Apply pending tenant database migrations for the current organization.")
-        .option("--rotate-credentials", "Rotate the tenant runtime/read DB passwords and rewrite stored credentials. Use only to repair a tenant whose stored credentials are out of sync; routine migrations do not need it.")
+        .addCommand(addContractFlags(new Command("migrate")
+        .description("Apply pending tenant database migrations for the current organization."), DATABASE_MIGRATE_CONTRACT, { rotate_credentials: { noNegate: true } })
         .option("--json", "Print a JSON envelope.")
         .action(async (options) => {
         await handleAsyncAction("db migrate", options, () => requestOxygen("/api/cli/db/migrate", {
             method: "POST",
-            body: options.rotateCredentials ? { rotate_credentials: true } : {},
+            body: readContractFlags(options, DATABASE_MIGRATE_CONTRACT, { rotate_credentials: { noNegate: true } }),
         }));
     }))
         .addCommand(new Command("migrate-all")
@@ -4560,29 +4630,27 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
             },
         }));
     }))
-        .addCommand(new Command("attach")
+        .addCommand(addContractFlags(new Command("attach")
         .description("Attach an existing Postgres database as the current organization's tenant database.")
-        .requiredOption("--database-url <url>", "Owner connection string for the tenant Postgres database.")
+        .requiredOption("--database-url <url>", "Owner connection string for the tenant Postgres database."), DATABASE_ATTACH_CONTRACT, { database_url: { omit: true } })
         .option("--json", "Print a JSON envelope.")
         .action(async (options) => {
         await handleAsyncAction("db attach", options, () => requestOxygen("/api/cli/db/attach", {
             method: "POST",
-            body: { database_url: options.databaseUrl },
+            body: readContractFlags(options, DATABASE_ATTACH_CONTRACT),
         }));
     }))
-        .addCommand(new Command("query")
+        .addCommand(addContractFlags(new Command("query")
         .description("Run one read-only SQL statement against the current tenant database.")
-        .requiredOption("--sql <sql>", "Single SELECT, WITH, or EXPLAIN statement.")
-        .option("--max-rows <n>", "Maximum rows to return. Defaults to 100; hard cap is 1000.")
+        .requiredOption("--sql <sql>", "Single SELECT, WITH, or EXPLAIN statement."), DATABASE_QUERY_CONTRACT, DATABASE_QUERY_FLAG_OVERLAY)
         .option("--json", "Print a JSON envelope.")
         .action(async (options) => {
         await handleAsyncAction("db query", options, () => {
-            const maxRows = readPositiveInt(options.maxRows);
             return requestOxygen("/api/cli/db/query", {
                 method: "POST",
                 body: {
                     sql: options.sql,
-                    ...(maxRows ? { max_rows: maxRows } : {}),
+                    ...readContractFlags(options, DATABASE_QUERY_CONTRACT, DATABASE_QUERY_FLAG_OVERLAY),
                 },
             });
         });
@@ -4679,6 +4747,8 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         .addCommand(new Command("setup")
         .description("Configure the Recall-backed Oxygen Notetaker. Defaults to dry-run.")
         .option("--bot-name <name>", "Meeting bot display name. Defaults to Oxygen Notetaker.")
+        .option("--bot-avatar-url <url>", "Meeting bot avatar URL; pass an empty string to clear it.")
+        .option("--consent-disclosure <text>", "Recording disclosure; pass an empty string to restore the default disclosure.")
         .option("--disabled", "Save the notetaker as disabled when used with --live.")
         .option("--default-max-minutes <n>", "Default maximum meeting minutes to reserve. Defaults to 60.")
         .option("--default-max-credits <n>", "Default spend cap for live schedules.")
@@ -4774,6 +4844,8 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         .option("--draft", "Create as a draft instead of scheduled.")
         .option("--ugc-participation-id <id>", "Also enroll this personal post in one active creator participation. It is always saved as an unapproved draft; omit --approved.")
         .option("--approved", "Mark an ordinary post approved for the scheduler. Invalid with --ugc-participation-id.")
+        .option("--idempotency-key <key>", "Reuse one key when retrying the same post creation to avoid a duplicate.")
+        .option("--tags <csv>", "Workspace tags to attach to the new post.")
         .option("--thread-post <text>", "X: text of the next post in a thread (posts 2, 3, ... in order). Repeatable.", collectRepeatable, [])
         .option("--thread-media <position=media_id>", "X: attach an uploaded media id to thread post N (2 or later), e.g. 2=<media_id>. Repeatable.", collectRepeatable, [])
         .option("--poll-option <text>", "X: a poll option on the first post (2-4 options, 25 characters each). Repeatable.", collectRepeatable, [])
@@ -4912,6 +4984,7 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         .addCommand(new Command("boost")
         .description("Boost ONE post: your teammates' connected accounts react to and comment on it, once. These are REAL public LinkedIn writes from their accounts and they SPEND CREDITS — refused (exit 7) without --approved, --max-credits and --acknowledge-risk. Creates a post-scoped policy that is already enabled and plans its actions immediately. For a standing rule across many posts, use `publishing amplification create`.")
         .argument("<post_id>", "Scheduled post id.")
+        .option("--name <name>", "Name the post-scoped amplification policy.")
         .requiredOption("--senders <ids>", "Comma-separated connected sender account ids that will engage.")
         .requiredOption("--actions <list>", "Comma-separated actions: reaction, comment.")
         .option("--max-actions-per-post <n>", "Hard cap on how many actions are planned (at most 12).")
@@ -4975,12 +5048,13 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         });
     }))
         .addCommand(new Command("resolve-note")
-        .description("Mark a review note handled.")
+        .description("Resolve a review note, or reopen it.")
         .argument("<post_id>", "Scheduled post id.")
         .requiredOption("--comment <comment_id>", "Note id from `publishing posts notes`.")
+        .option("--reopen", "Reopen the review note instead of resolving it.")
         .option("--json", "Print a JSON envelope.")
         .action(async (postId, options) => {
-        await handleAsyncAction("publishing posts resolve-note", options, () => requestOxygen(`/api/cli/publishing/posts/${encodeURIComponent(postId)}/comments/${encodeURIComponent(options.comment)}/resolve`, { method: "POST" }));
+        await handleAsyncAction("publishing posts resolve-note", options, () => requestOxygen(`/api/cli/publishing/posts/${encodeURIComponent(postId)}/comments/${encodeURIComponent(options.comment)}/resolve`, { method: "POST", body: { resolved: options.reopen !== true } }));
     })))
         .addCommand(new Command("drafts")
         .description("Review the AI post-draft queue before anything reaches the publish queue.")
@@ -5301,6 +5375,7 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         .option("--max-credits <n>", "Hard credit cap per cycle (required — this policy spends credits).")
         .option("--comment-pool <text>", "A comment to draw from. Repeatable. Required when --actions includes comment.", collectRepeatable, [])
         .option("--comment-pool-file <path>", "Read the comment pool from a file, one comment per line.")
+        .option("--metadata-json <json-or-file>", "Policy metadata; {} clears it on update.")
         .option("--reaction-delay-min <seconds>", "Lower bound of the randomized reaction delay.")
         .option("--reaction-delay-max <seconds>", "Upper bound of the randomized reaction delay.")
         .option("--comment-delay-min <seconds>", "Lower bound of the randomized comment delay.")
@@ -5331,6 +5406,7 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         .option("--max-credits <n>", "Hard credit cap per cycle.")
         .option("--comment-pool <text>", "A comment to draw from. Repeatable.", collectRepeatable, [])
         .option("--comment-pool-file <path>", "Read the comment pool from a file, one comment per line.")
+        .option("--metadata-json <json-or-file>", "Policy metadata; {} clears it on update.")
         .option("--reaction-delay-min <seconds>", "Lower bound of the randomized reaction delay.")
         .option("--reaction-delay-max <seconds>", "Upper bound of the randomized reaction delay.")
         .option("--comment-delay-min <seconds>", "Lower bound of the randomized comment delay.")
@@ -5851,9 +5927,10 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
                 },
             });
             const uploadUrl = readRecordString(ticket, "upload_url");
-            const completeUrl = readRecordString(ticket, "complete_url");
-            if (!uploadUrl || !completeUrl) {
-                throw new OxygenError("attachment_upload_failed", "The server did not return an upload URL for that file.", { exitCode: 1 });
+            const fileId = isRecord(ticket.file) ? readRecordString(ticket.file, "id") : null;
+            const reservedRowId = isRecord(ticket.record) ? readRecordString(ticket.record, "row_id") : null;
+            if (!uploadUrl || !fileId || !reservedRowId) {
+                throw new OxygenError("attachment_upload_failed", "The server did not return an upload URL, file ID and resolved record ID for that file.", { exitCode: 1 });
             }
             const controller = new AbortController();
             const timer = setTimeout(() => controller.abort(), 300_000);
@@ -5872,11 +5949,7 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
             if (!put.ok) {
                 throw new OxygenError("attachment_upload_failed", `Object storage rejected the upload (${put.status}).`, { exitCode: 1 });
             }
-            const fileId = readRecordString(ticket.file, "id");
-            const recordRowId = readRecordString(ticket.record, "row_id");
-            if (!fileId || !recordRowId)
-                throw new OxygenError("attachment_upload_failed", "The upload reservation has no file or record id.", { exitCode: 1 });
-            return requestOxygen(`/api/cli/crm/objects/${encodeURIComponent(object)}/records/${encodeURIComponent(recordRowId)}/files/${encodeURIComponent(fileId)}/uploaded`, {
+            return requestOxygen(`/api/cli/crm/objects/${encodeURIComponent(object)}/records/${encodeURIComponent(reservedRowId)}/files/${encodeURIComponent(fileId)}/uploaded`, {
                 method: "POST",
                 body: readCrmFileLabel(options),
             });
@@ -6307,6 +6380,9 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         .description("Run one bidirectional reconciliation cycle for a configured CRM object pair as a durable workflow run. Defaults to dry-run.")
         .requiredOption("--provider <provider>", "Connected CRM: hubspot or attio.")
         .requiredOption("--object <object>", "Provider object: hubspot contacts|companies, or attio people|companies.")
+        .option("--direction <direction>", "Override this cycle's direction: inbound, outbound, or bidirectional.")
+        .option("--since <iso>", "Read provider changes since this watermark.")
+        .option("--config-id <id>", "Use this standing CRM sync configuration for the cycle.")
         .option("--max-rows <n>", "Per-cycle row cap. The real volume brake on provider writes (BYOK writes cost 0 Oxygen credits).")
         .option("--max-credits <n>", "Managed-credit + external-quota cap for this cycle.")
         .option("--approved", "Confirm a live cycle after inspecting a dry run.")
@@ -6373,12 +6449,14 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
     })))
         .addCommand(new Command("enrichment")
         .description("Choose which named enrichments run automatically on new CRM records. The saved set is a STANDING PERMISSION: every record written to the object (imports, inserts, upserts, and `crm assert`) enriches without per-record approval, bounded by the per-batch credit ceiling. Same storage as `oxygen tables auto-run`, in founder words.")
-        .addCommand(new Command("list")
+        .addCommand(addContractFlags(new Command("list")
         .description("Show the enrichments available per CRM object: which are armed, what each costs per record, the per-record total, the per-batch credit ceiling, how much of the column allowance is spent, and how many records already in the object have never been enriched. Read-only, free.")
-        .option("--object <object>", "CRM object slug: companies or people. Omit for every object this workspace has.")
-        .option("--json", "Print a JSON envelope.")
+        .option("--json", "Print a JSON envelope."), CRM_ENRICHMENT_READ_CONTRACT, CRM_ENRICHMENT_READ_FLAGS)
         .action(async (options) => {
-        await handleCrmEnrichmentAction("crm enrichment list", options, () => requestOxygen(buildCrmEnrichmentListPath(options)));
+        if (options.projection === "summary" || options.projection === "value")
+            await handleAsyncAction("crm enrichment list", options, () => requestOxygen(buildCrmEnrichmentListPath(options)));
+        else
+            await handleCrmEnrichmentAction("crm enrichment list", options, () => requestOxygen(buildCrmEnrichmentListPath(options)));
     }))
         .addCommand(new Command("backfill")
         .description("Enrich the records you ALREADY have. Arming an enrichment only covers records written from that moment on, so the companies and people already in your CRM stay blank until you run this. Previews for free by default: what is still missing, what one batch costs, and what finishing costs. Add --live --approved --max-credits to actually run a batch; repeat it and the next batch picks up where the last one stopped.")
@@ -6545,6 +6623,7 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         .argument("[prompt]", "Prompt text or @file (same as --prompt); requires --family. The --prompt flag wins if both are given.")
         .option("--prompt <text-or-file>", "Signal-sourcing prompt, or a path to a prompt file. Requires --family.")
         .option("--plan-json <json-or-file>", "Plan JSON returned by signals search plan, or a path to a JSON file.")
+        .option("--source <linkedin_posts>", "Run the native post-search lane using --filters-json or --keywords; no prompt needed.")
         .option("--family <family>", "Signal family when planning from --prompt: hiring, tech, funding, acquisition, news, job_change, or linkedin_posts.")
         .option("--scope <scope>", "market or watch_list when planning from --prompt.")
         .option("--route-id <id>", "Route id from the plan to execute.")
@@ -6815,7 +6894,7 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         });
     })))
         .addCommand(new Command("create")
-        .description("Create a real Postgres-backed workspace table. Free — 0 Oxygen credits. To create a table and import a file in one step, use `tables import --create <name>`.")
+        .description("Create a table private to the active workspace. Free — 0 Oxygen credits. To create a table and import a file in one step, use `tables import --create <name>`.")
         .argument("<name>", "Display name for the table.")
         .requiredOption("--columns-json <json>", 'Required nonempty JSON array of column definitions, e.g. [{"key":"name","label":"Name","dataType":"text"},{"key":"domain","label":"Domain","dataType":"text"}]. Inspect an existing shape with `oxygen tables describe <table>`.')
         .option("--project <project>", "Project id or slug. Defaults to General.")
@@ -6837,10 +6916,9 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         .option("--schema-only", "Duplicate columns and definitions without copying row values.")
         .option("--json", "Print a JSON envelope.")
         .action(async (table, options) => {
-        await handleAsyncAction("tables duplicate", options, () => requestOxygen("/api/cli/tables/duplicate", {
+        await handleAsyncAction("tables duplicate", options, () => requestOxygen(`/api/cli/tables/${encodeURIComponent(table)}/duplicate`, {
             method: "POST",
             body: {
-                table,
                 ...(readOption(options.name) ? { name: readOption(options.name) } : {}),
                 ...(options.schemaOnly ? { include_rows: false } : {}),
             },
@@ -6882,6 +6960,7 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         .description("Delete one workspace table row. A lead enrolled in a campaign stays enrolled; the response names those campaigns.")
         .argument("<table>", "Table id or slug.")
         .argument("<row_id>", "Workspace row UUID.")
+        .option("--metadata-json <json-or-file>", "Durable row deletion provenance.")
         .option("--json", "Print a JSON envelope.")
         .action(async (table, rowId, options) => {
         await handleAsyncAction("tables delete-row", options, async () => {
@@ -6890,6 +6969,7 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
                 body: {
                     table,
                     row_id: rowId,
+                    ...(options.metadataJson !== undefined ? { metadata: parseJsonObject(readFileIfPresent(options.metadataJson)) } : {}),
                 },
             });
             if (!options.json)
@@ -6905,6 +6985,7 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         .option("--row-id-column <key>", "Column to read from --row-ids-file. Defaults to _row_id.")
         .option("--format <format>", "File format for --row-ids-file: json, jsonl, csv, or xlsx.")
         .option("--sheet <name>", "Worksheet name when reading row IDs from an XLSX file.")
+        .option("--metadata-json <json-or-file>", "Durable row deletion provenance.")
         .option("--json", "Print a JSON envelope.")
         .action(async (table, options) => {
         await handleAsyncAction("tables delete-rows", options, async () => {
@@ -6914,6 +6995,7 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
                 body: {
                     table,
                     row_ids: rowIds,
+                    ...(options.metadataJson !== undefined ? { metadata: parseJsonObject(readFileIfPresent(options.metadataJson)) } : {}),
                 },
             });
             if (!options.json)
@@ -7038,8 +7120,10 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
             return data;
         });
     }))
-        .addCommand(new Command("query")
-        .description("Query a workspace table by id or slug. Output is a JSON envelope; for a typed, human-readable rendering of the same rows use `tables export <table> --format table`.")
+        .addCommand(addContractFlags(new Command("query"), TABLE_QUERY_GRID_CONTRACT, {
+        format: { valueName: "<format>", help: "Read the web grid projection ('grid'): defaults to 50 rows, capped at 200, with table, limit, cursor and optional --include-stats/--include-fill. Omit for a filtered row query." },
+    })
+        .description("Query raw table rows or use --format grid for display previews, cell state and native cursors. Output is a JSON envelope; for a typed rendering of raw rows use `tables export <table> --format table`. Grid takes table/limit/cursor; rowCountMode labels registry/exact/skipped. Optional stats/fill may be unavailable.")
         .argument("<table>", "Table id or slug.")
         .option("--limit <n>", "Maximum rows to return. Defaults to 100; hard cap is 1000.")
         .option("--cursor <cursor>", "Pagination cursor returned by a previous query. Walks forward one page at a time; mutually exclusive with --offset.")
@@ -7054,6 +7138,10 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         .option("--json", "Print a JSON envelope.")
         .action(async (table, options) => {
         await handleAsyncAction("tables query", options, () => {
+            const gridArgs = readContractFlags(options, TABLE_QUERY_GRID_CONTRACT);
+            if (gridArgs.format !== "grid" && Object.keys(gridArgs).length > 0) {
+                throw new OxygenError("invalid_request", "Grid options require --format grid.", { exitCode: 1 });
+            }
             const limit = readPositiveInt(options.limit);
             const filters = readFilterJsonOption(options.filterJson);
             const filterTree = readJsonObjectOption(options.filterTreeJson);
@@ -7069,10 +7157,15 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
             if (readOption(options.cursor) && offset !== undefined) {
                 throw new OxygenError("invalid_request", "Pass either --cursor or --offset, not both.", { exitCode: 1 });
             }
+            if (options.format === "grid" && (readCsvOption(options.fields).length > 0 || filters?.length || filterTree ||
+                readOption(options.search) || formulaValues || sorts?.length || (offset !== undefined && offset > 0))) {
+                throw new OxygenError("invalid_request", '--format grid takes only table, --limit, --cursor and optional --include-stats/--include-fill; omit --format for filters, fields, search, sorts or offsets.', { exitCode: 1 });
+            }
             return requestOxygen("/api/cli/tables/query", {
                 method: "POST",
                 body: {
                     table,
+                    ...gridArgs,
                     ...(limit ? { limit } : {}),
                     ...(readOption(options.cursor) ? { cursor: readOption(options.cursor) } : {}),
                     ...(offset !== undefined ? { offset } : {}),
@@ -7179,9 +7272,8 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         .argument("<table>", "Table id or slug.")
         .option("--json", "Print a JSON envelope.")
         .action(async (table, options) => {
-        await handleAsyncAction("tables archive", options, () => requestOxygen("/api/cli/tables/archive", {
-            method: "POST",
-            body: { table },
+        await handleAsyncAction("tables archive", options, () => requestOxygen(`/api/cli/tables/${encodeURIComponent(table)}`, {
+            method: "DELETE",
         }));
     }))
         .addCommand(new Command("delete")
@@ -7215,13 +7307,19 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
     }))
         .addCommand(new Command("restore")
         .description("Restore an archived or delete-scheduled table: cancels the purge timer and reclaims its slug.")
-        .argument("<table>", "Table id or slug (the pre-delete slug works).")
+        .argument("[table]", "Table id or slug (the pre-delete slug works).")
+        .option("--tables <refs>", "Restore a comma-separated batch; alternative to the table argument.")
         .option("--json", "Print a JSON envelope.")
         .action(async (table, options) => {
-        await handleAsyncAction("tables restore", options, () => requestOxygen("/api/cli/tables/restore", {
-            method: "POST",
-            body: { table },
-        }));
+        await handleAsyncAction("tables restore", options, () => {
+            const refs = splitCommaList(options.tables);
+            if ((!table && refs.length === 0) || (table && refs.length > 0))
+                throw new OxygenError("invalid_selection", "Pass one table argument or --tables, not both.", { exitCode: 2 });
+            return requestOxygen("/api/cli/tables/restore", {
+                method: "POST",
+                body: { ...(options.tables !== undefined ? { tables: splitCommaList(options.tables) } : { table }) },
+            });
+        });
     }))
         .addCommand(new Command("move")
         .description("Move one or more workspace tables into a project (folder) in one call. Rows, columns, runs, and provenance are preserved. Free; reverse it by moving the table back.")
@@ -7763,7 +7861,7 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         .description("List a table's saved views.")
         .argument("<table>", "Table id or slug.")
         .option("--json", "Print a JSON envelope.")
-        .action((table, options) => handleAsyncAction("tables views list", options, () => requestOxygen(`/api/cli/tables/views?table=${encodeURIComponent(table)}`))))
+        .action((table, options) => handleAsyncAction("tables views list", options, () => requestOxygen(`/api/cli/tables/${encodeURIComponent(table)}/views`))))
         .addCommand(new Command("get")
         .description("Get one saved view by id.")
         .argument("<table>", "Table id or slug.")
@@ -7778,18 +7876,20 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         .option("--group-by <column>", "Kanban: the editable select/status column key the board splits on, e.g. --group-by lifecycle_stage. Unknown or non-groupable keys are refused with the groupable candidates. The response's effective_group_by is the column the board actually uses.")
         .option("--config <json>", TABLE_VIEW_CONFIG_HELP)
         .option("--default", "Make this the table's default view.")
+        .option("--no-default", "Clear this view's default status.")
+        .option("--position <n>", "Zero-based order among the table's saved views.")
         .option("--json", "Print a JSON envelope.")
-        .action((table, options) => handleAsyncAction("tables views create", options, () => requestOxygen("/api/cli/tables/views", {
+        .action((table, options) => handleAsyncAction("tables views create", options, () => requestOxygen(`/api/cli/tables/${encodeURIComponent(table)}/views`, {
         method: "POST",
         body: {
-            table,
             name: readOption(options.name),
             ...(readOption(options.viewType) ? { view_type: readOption(options.viewType) } : {}),
             ...(readOption(options.groupBy) ? { group_by: readOption(options.groupBy) } : {}),
             ...(readOption(options.config)
                 ? { config: parseJsonValue(readOption(options.config) ?? "", "--config") }
                 : {}),
-            ...(options.default ? { is_default: true } : {}),
+            ...(typeof options.default === "boolean" ? { is_default: options.default } : {}),
+            ...(readOption(options.position) !== null ? { position: readNonNegativeInt(options.position) } : {}),
         },
     }))))
         .addCommand(new Command("update")
@@ -7801,20 +7901,19 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         .option("--group-by <column>", "Kanban: change the select/status column the board splits on; folds into the stored config and keeps the rest of it. Refused for a grid view unless --view-type kanban is passed with it.")
         .option("--config <json>", `${TABLE_VIEW_CONFIG_HELP} Replaces the stored config.`)
         .option("--default", "Make this the table's default view.")
+        .option("--no-default", "Clear this view's default status.")
         .option("--position <n>", "0-based order among the table's views.")
         .option("--json", "Print a JSON envelope.")
-        .action((table, view, options) => handleAsyncAction("tables views update", options, () => requestOxygen("/api/cli/tables/views", {
+        .action((table, view, options) => handleAsyncAction("tables views update", options, () => requestOxygen(`/api/cli/tables/${encodeURIComponent(table)}/views/${encodeURIComponent(view)}`, {
         method: "PATCH",
         body: {
-            table,
-            view,
             ...(readOption(options.name) ? { name: readOption(options.name) } : {}),
             ...(readOption(options.viewType) ? { view_type: readOption(options.viewType) } : {}),
             ...(readOption(options.groupBy) ? { group_by: readOption(options.groupBy) } : {}),
             ...(readOption(options.config)
                 ? { config: parseJsonValue(readOption(options.config) ?? "", "--config") }
                 : {}),
-            ...(options.default ? { is_default: true } : {}),
+            ...(typeof options.default === "boolean" ? { is_default: options.default } : {}),
             ...(readOption(options.position) ? { position: Number(readOption(options.position)) } : {}),
         },
     }))))
@@ -7823,7 +7922,7 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         .argument("<table>", "Table id or slug.")
         .argument("<view>", "View id.")
         .option("--json", "Print a JSON envelope.")
-        .action((table, view, options) => handleAsyncAction("tables views delete", options, () => requestOxygen(`/api/cli/tables/views?table=${encodeURIComponent(table)}&view=${encodeURIComponent(view)}`, { method: "DELETE" })))));
+        .action((table, view, options) => handleAsyncAction("tables views delete", options, () => requestOxygen(`/api/cli/tables/${encodeURIComponent(table)}/views/${encodeURIComponent(view)}`, { method: "DELETE" })))));
     tablesCommand.addCommand(new Command("auto-run")
         .description("Inspect and manage a table's standing auto-run configuration (columns queued automatically when new rows are written).")
         .addCommand(new Command("get")
@@ -7972,6 +8071,7 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         .option("--schema-json <json-or-file>", "Bind a PUSH feed instead: the JSON Schema (an object with type, properties, required, additionalProperties) every delivered row must match, inline or a path to a JSON file.")
         .option("--source <source>", `Bind a WEB INTENT push feed instead: ${FEED_BIND_WEB_INTENT_SOURCES.join(", ")} (rb2b = the website-visit reveals OXYGEN already receives for this workspace, also kept as website_visit Signals). Fixed row shape, no schema, no cadence, 0 credits per reveal. Takes a table or --create <name>, plus --name and --upsert-key.`)
         .option("--create <name>", "Push or web-intent feed only. Create a new table with this name — its columns derived from --schema-json, or the fixed reveal columns for --source rb2b — instead of binding an existing table.")
+        .option("--project <project>", "Workspace project id or slug for the new --create table.")
         .option("--items-path <path>", "Push feed only. Dot path to an array of row objects in the delivered payload.")
         .option("--event-id-path <path>", "Push feed only. Dot path to the event id. Defaults to event_id, eventId, id, or a payload hash.")
         .option("--event-type-path <path>", "Push feed only. Dot path to the event type. Defaults to type or event.")
@@ -7992,6 +8092,7 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         .option("--intent-id <id>", "Routing-registry intent id from the plan.")
         .option("--input-shape <shape>", "Routing-registry input shape from the plan, e.g. market or watch_list.")
         .option("--route-id <id>", "Route id from the plan this feed was bound from.")
+        .option("--registry-version <version>", "Routing-registry revision from the plan, retained with the frozen feed provenance.")
         .option("--source-prompt <text-or-file>", "The prompt this feed was planned from, or a path to a prompt file.")
         .option("--approved", "Approve the recurring paid pull. Required with --every and --max-credits on a paid provider.")
         .option("--json", "Print a JSON envelope.")
@@ -8326,15 +8427,12 @@ Examples:
             return data;
         });
     }))
-        .addCommand(new Command("get")
+        .addCommand(addContractFlags(new Command("get")
         .description("Read one knowledge wiki page by slug or UUID. Read-only, 0 credits.")
         .argument("<slug_or_id>", "Page slug or UUID.")
-        .option("--json", "Print a JSON envelope.")
+        .option("--json", "Print a JSON envelope."), knowledgePageReadContract, { slug: { omit: true }, id: { omit: true } })
         .action(async (slugOrId, options) => {
-        await handleAsyncAction("knowledge page get", options, () => requestOxygen("/api/cli/knowledge/pages/get", {
-            method: "POST",
-            body: { slug: slugOrId },
-        }));
+        await handleAsyncAction("knowledge page get", options, () => requestOxygen(`/api/cli/knowledge/pages/get?${new URLSearchParams(Object.entries({ slug: slugOrId, ...readContractFlags(options, knowledgePageReadContract, { slug: { omit: true }, id: { omit: true } }) }).map(([key, value]) => [key, String(value)]))}`));
     }))
         .addCommand(new Command("list")
         .description("List knowledge wiki pages. Read-only, 0 credits.")
@@ -8437,11 +8535,11 @@ Examples:
             body: buildKnowledgeSearchBody(query, options),
         }));
     }))
-        .addCommand(new Command("index")
+        .addCommand(addContractFlags(new Command("index")
         .description("Compact wiki index: each page's slug, one-liner, tags, link degree, plus type/status counts over the whole wiki. Lists the 200 most recently updated pages by default. Read-only, 0 credits. semantic.budget is Oxygen's platform-funded embedding safety allowance; its dollar and query counters are Oxygen's spend, never charges against your credits.")
         .option("--limit <n>", "Maximum pages to list. Defaults to 200; hard cap is 1000. Counts always cover the whole wiki.")
         .option("--all", "List every page instead of the most recently updated window.")
-        .option("--json", "Print a JSON envelope.")
+        .option("--json", "Print a JSON envelope."), knowledgeIndexReadContract, { limit: { omit: true } })
         .action(async (options) => {
         await handleAsyncAction("knowledge index", options, async () => {
             const params = new URLSearchParams();
@@ -8450,6 +8548,8 @@ Examples:
                 params.set("limit", String(limit));
             if (options.all)
                 params.set("all", "true");
+            for (const [key, value] of Object.entries(readContractFlags(options, knowledgeIndexReadContract, { limit: { omit: true } })))
+                params.set(key, String(value));
             const qs = params.toString() ? `?${params.toString()}` : "";
             const data = await requestOxygen(`/api/cli/knowledge/index${qs}`);
             if (!options.json)
@@ -9391,11 +9491,12 @@ Examples:
         .alias("get")
         .description("Show one recipe: its kit, the install status of each stage here, prerequisites, credits, approval gates, and the playbook body. Alias: `get`.")
         .argument("<slug>", "Recipe slug, e.g. outbound-pilot-50.")
+        .option("--section <heading>", "Read one recipe heading instead of the whole playbook.")
         .option("--json", "Print a JSON envelope.")
         .action(async (slug, options) => {
         await handleAsyncAction("recipes show", options, () => requestOxygen("/api/cli/recipes/get", {
             method: "POST",
-            body: { slug },
+            body: { slug, ...(readOption(options.section) ? { section: readOption(options.section) } : {}) },
         }));
     }))
         .addCommand(new Command("install")
@@ -9822,6 +9923,7 @@ Examples:
         .description("Run an executable AI, tool, formula, enrichment, bind, lookup, or custom HTTP column for one row or a bounded batch. Paid server-side columns always run durably in the background. Bind create-mode (onNoMatch=create) needs --approved.")
         .argument("<table>", "Table id or slug.")
         .argument("<column>", "Column id or key.")
+        .option("--idempotency-key <key>", "Replay key for durable server-side run admission.")
         .option("--row-id <row_id>", "Workspace row id to run. Get one from `oxygen tables query <table> --limit 1 --json` — the field is `_row_id`, not `id`.")
         .option("--limit <n>", "Run the next N rows whose target cell is still empty (--force runs the first N regardless). Repeat until rowCount is 0 to page through a table. Defaults to 10; inline deterministic runs have a hard cap of 25.")
         .option("--all", "Run all rows. Requires --background, except with --dry-run, which previews the background run without queueing it.")
@@ -9897,6 +9999,7 @@ Examples:
                 });
             }
             const body = {
+                ...(readOption(options.idempotencyKey) ? { idempotency_key: readOption(options.idempotencyKey) } : {}),
                 table,
                 column,
                 ...(options.all ? { selection: { mode: "all" } } : {}),
@@ -9955,11 +10058,9 @@ Examples:
         .action(async (table, sourceColumn, options) => {
         const mappings = options.mappingsJson ? parseJsonArray(options.mappingsJson) : undefined;
         const preset = readOption(options.preset);
-        await handleAsyncAction("columns materialize", options, () => requestOxygen("/api/cli/tables/columns/materialize", {
+        await handleAsyncAction("columns materialize", options, () => requestOxygen(`/api/cli/tables/${encodeURIComponent(table)}/columns/${encodeURIComponent(sourceColumn)}/materialize`, {
             method: "POST",
             body: {
-                table,
-                source_column: sourceColumn,
                 ...(mappings ? { mappings } : {}),
                 ...(!mappings ? { preset: preset ?? "work_email" } : preset ? { preset } : {}),
                 create_if_missing: options.createIfMissing !== false,
@@ -9968,10 +10069,10 @@ Examples:
         }));
     }))
         .addCommand(new Command("rename")
-        .description("Rename a workspace column key and optionally label. Warns when another column reads the old key — a rename does not rewrite the references pointing at it.")
+        .description("Rename a workspace column's stable key (requires --key), optionally updating its display label. Free (0 credits). For a label-only change, use columns update <table> <column> --label <label>. Warns when another column reads the old key; a rename does not rewrite those references.")
         .argument("<table>", "Table id or slug.")
         .argument("<column>", "Column id or key.")
-        .requiredOption("--key <key>", "New stable column key.")
+        .requiredOption("--key <key>", "Required new stable column key.")
         .option("--label <label>", "Optional new display label.")
         .option("--json", "Print a JSON envelope.")
         .action(async (table, column, options) => {
@@ -9996,6 +10097,8 @@ Examples:
         .argument("<column>", "Column id or key.")
         .option("--label <label>", "New display label.")
         .option("--semantic-type <type>", "New semantic type.")
+        .option("--clear-semantic-type", "Clear the column's semantic type.")
+        .option("--position <n>", "Move the column to this zero-based position.")
         .option("--definition-json <json>", "Definition metadata to shallow-merge into the column; arrays are replaced wholesale and missing keys leave existing fields unchanged.")
         .option("--definition-unset <keys>", "Comma-separated definition keys to REMOVE after the merge (e.g. outputSchema,model) — a merge can only add or overwrite. Lifecycle and provenance keys are rejected.")
         .option("--data-type <type>", "New output data type for a lookup column (text, numeric, boolean, jsonb, timestamptz). Discards the cached cells; other column kinds use `oxygen columns retype`.")
@@ -10075,7 +10178,8 @@ Examples:
                     column,
                     ...(researchDepth ? { research_depth: researchDepth } : {}),
                     ...(readOption(options.label) ? { label: readOption(options.label) } : {}),
-                    ...(readOption(options.semanticType) ? { semantic_type: readOption(options.semanticType) } : {}),
+                    ...(options.clearSemanticType ? { semantic_type: null } : readOption(options.semanticType) ? { semantic_type: readOption(options.semanticType) } : {}),
+                    ...(readOption(options.position) !== null ? { position: readNonNegativeInt(options.position) } : {}),
                     ...(definition ? { definition } : {}),
                     ...(definitionUnset.length > 0 ? { definition_unset: definitionUnset } : {}),
                     ...(readOption(options.dataType) ? { data_type: readOption(options.dataType) } : {}),
@@ -10130,11 +10234,9 @@ Examples:
         .option("--dry-run", "Preview the conversion (row counts and samples) without writing.")
         .option("--json", "Print a JSON envelope.")
         .action(async (table, column, options) => {
-        await handleAsyncAction("columns retype", options, () => requestOxygen("/api/cli/tables/columns/retype", {
+        await handleAsyncAction("columns retype", options, () => requestOxygen(`/api/cli/tables/${encodeURIComponent(table)}/columns/${encodeURIComponent(column)}/retype`, {
             method: "POST",
             body: {
-                table,
-                column,
                 data_type: options.dataType,
                 ...(options.dryRun ? { dry_run: true } : {}),
             },
@@ -10146,9 +10248,9 @@ Examples:
         .argument("<column>", "Column id or key.")
         .option("--json", "Print a JSON envelope.")
         .action(async (table, column, options) => {
-        await handleAsyncAction("columns archive", options, () => requestOxygen("/api/cli/tables/columns/archive", {
+        await handleAsyncAction("columns archive", options, () => requestOxygen(`/api/cli/tables/${encodeURIComponent(table)}/columns/${encodeURIComponent(column)}/archive`, {
             method: "POST",
-            body: { table, column },
+            body: {},
         }));
     }))
         .addCommand(new Command("delete")
@@ -10354,6 +10456,7 @@ Examples:
         .option("--max-credits <n>", "Maximum managed/provider credits to reserve for this run.")
         .option("--max-concurrency <n>", "Maximum concurrent row items for this run (1-250). Defaults to 50 (160 for Firecrawl scrape columns).")
         .option("--metadata-json <json>", "Optional metadata object to attach to the run.")
+        .option("--idempotency-key <key>", "Reuse the same scoped run when retrying this exact request.")
         .option("--then-json <json>", "JSON array of sequential follow-up steps. Each step runs after the previous terminates with completed or completed_with_errors. Paid steps require selection and max_credits. Shape: [{actions:[{type:'tool_column',column}],selection,force,max_concurrency,max_credits,metadata,run_on_failure}].")
         .option("--json", "Print a JSON envelope.")
         .action(async (table, options) => {
@@ -10372,6 +10475,7 @@ Examples:
                 ...(maxCredits !== undefined ? { max_credits: maxCredits } : {}),
                 ...(maxConcurrency ? { max_concurrency: maxConcurrency } : {}),
                 ...(options.metadataJson ? { metadata: parseJsonObject(options.metadataJson) } : {}),
+                ...(readOption(options.idempotencyKey) ? { idempotency_key: readOption(options.idempotencyKey) } : {}),
                 ...(chainSteps.length > 0 ? { then: chainSteps } : {}),
             },
         }));
@@ -12734,7 +12838,7 @@ Examples:
     program
         .command("tools")
         .description("The priced catalog: every provider operation and every OXYGEN column (enrichment bundles, waterfalls, templates, Functions) with its credit cost per row. Start with `tools search --for-table <table>` to see what a table's own columns can be enriched with and what each costs, before adding anything.")
-        .addCommand(new Command("search")
+        .addCommand(addToolCatalogSearchWindowFlag(new Command("search")
         .description("Search the priced catalog (0 credits): provider operations in `tools`, and OXYGEN's own columns in `native_columns` (enrichment bundles, waterfalls, templates, Functions), each with `price_label`, `estimated_credits_per_row`, `pricing_kind` and the exact `cli_add` command. With --for-table <table> it reads that table's columns and returns `suggestions`: the enrichments those columns already support, priced per row. Hydrate one provider operation with tools get. A response listing partial_sources means an optional catalog source timed out and totals may be understated — rerun for the complete catalog.")
         .argument("[query]", "Search text, e.g. `web` for the Web Research Agent column and its modes (each priced in `modes`), or `email`.")
         .option("--verbosity <verbosity>", "minimal, summary, or full. Defaults to minimal; hydrate one result with tools get.")
@@ -12756,6 +12860,11 @@ Examples:
         await handleAsyncAction("tools search", options, async () => {
             const params = new URLSearchParams();
             params.set("query", query ?? "");
+            const window = readToolCatalogSearchWindow(options);
+            if (window.max_chars !== undefined)
+                params.set("max_chars", String(window.max_chars));
+            if (window.include_native !== undefined)
+                params.set("include_native", String(window.include_native));
             const forTable = readOption(options.forTable);
             if (forTable)
                 params.set("for_table", forTable);
@@ -12790,14 +12899,8 @@ Examples:
             writeAccessCheckFailuresWarning(data);
             return data;
         });
-    }))
-        .addCommand(new Command("get")
-        .description("Get a tool descriptor.")
-        .argument("<tool_id>", "Tool id.")
-        .option("--json", "Print a JSON envelope.")
-        .action(async (toolId, options) => {
-        await handleAsyncAction("tools get", options, () => requestOxygen(`/api/cli/tools/${encodeURIComponent(toolId)}`));
-    }))
+    })))
+        .addCommand(createToolCatalogDetailCommand(handleAsyncAction))
         .addCommand(new Command("favorite")
         .description("Favourite one column-catalog entry for this workspace: a native column (find_email, preset:person_enrich, prompt:icp_fit_score_v1) or a vendor tool (tool:<tool_id>). Favourites lead every table's + Add column panel and `tools search --favorites`.")
         .argument("<entry_id>", "Catalog entry id, e.g. find_email, preset:person_enrich, prompt:<key>, tool:<tool_id>.")
@@ -13357,7 +13460,8 @@ Examples:
         .option("--credential <name=value>", "Named provider credential field. Repeat for multi-field integrations (for example, PostHog: --credential subdomain=us).", collectRepeatable, [])
         .option("--country <code>", "ISO 3166-1 alpha-2 country where the LinkedIn account owner normally signs in (required for `connect linkedin`; picks the egress proxy).")
         .option("--pairing-phone-number <e164>", "WhatsApp only: pair by code sent to this E.164 number instead of showing a QR.")
-        .option("--acknowledge-risk", "LinkedIn only, required for a new account: LinkedIn restricts automated activity; pacing reduces but does not remove the risk.")
+        .addOption(new Option("--acknowledge-risk", "Deprecated: LinkedIn connect no longer needs it. Still accepted so older scripts keep running.").hideHelp())
+        .option("--return-to <path>", "In-product destination after OAuth approval.")
         .option("--json", "Print a JSON envelope."), INTEGRATION_CONNECT_ACCOUNT_CONTRACT, {
         account_id: {
             valueName: "<id>",
@@ -13377,6 +13481,7 @@ Examples:
                     ...(apiKey ? { api_key: apiKey } : {}),
                     ...(credentials ? { credentials } : {}),
                     ...readContractFlags(options, INTEGRATION_CONNECT_ACCOUNT_CONTRACT),
+                    ...(readOption(options.returnTo) ? { return_to: readOption(options.returnTo) } : {}),
                     ...(country ? { country } : {}),
                     ...(pairingPhoneNumber ? { pairing_phone_number: pairingPhoneNumber } : {}),
                     ...(options.acknowledgeRisk ? { acknowledge_linkedin_risk: true } : {}),
@@ -13450,6 +13555,8 @@ Examples:
         .description("Run an action for a connected integration — Composio toolkits and native providers alike.")
         .argument("<integration_id>", "Integration id, such as 'slack'.")
         .argument("<action_slug>", "Composio action slug, such as 'SLACK_SEND_MESSAGE'.")
+        .option("--connection-id <id>", "Select this workspace connection.")
+        .option("--credential-mode <mode>", "managed, user_api_key, or user_oauth.")
         .option("--input <json>", "Arguments as JSON object. Default: empty object.")
         .option("--live", "Execute the action live. Default is dry-run.")
         .option("--dry-run", "Force dry-run (no provider call).")
@@ -13470,6 +13577,8 @@ Examples:
                     integration_id: integrationId,
                     action_slug: actionSlug,
                     arguments: args,
+                    ...(readOption(options.connectionId) ? { connection_id: readOption(options.connectionId) } : {}),
+                    ...(readOption(options.credentialMode) ? { credential_mode: readOption(options.credentialMode) } : {}),
                     mode,
                     ...(options.approved ? { approved: true } : {}),
                     ...(maxCredits !== undefined ? { max_credits: maxCredits } : {}),
@@ -13507,15 +13616,16 @@ Examples:
         await handleAsyncAction("senders checkpoints", options, () => requestOxygen("/api/cli/senders/checkpoints"));
     }))
         .addCommand(new Command("connect")
-        .description("Get a Unipile hosted-auth URL to connect a new LinkedIn account (or reconnect with --reconnect). This command creates a pending provider authorization; it does not preview a price. Each connected LinkedIn account has one monthly charge, never two: an existing dollar seat until it ends at renewal, or a monthly credit reservation after seats retire. On a repriced workspace that reservation is 3,400 credits ($34) monthly; a connect the balance cannot cover fails with insufficient_credits. Invites, messages and other LinkedIn actions cost 0 credits on top. Check `oxygen billing seats --json` before connecting for the current charge and seat status. A workspace linked to another organization's plan is billed at that organization. New accounts require --country (the owner's normal LinkedIn login country) and default to syncing only conversations OXYGEN starts; use --inbox-scope all to opt into the full LinkedIn inbox. Use --cookie-auth and --custom-proxy to expose those inputs inside Unipile's hosted wizard; their secrets never pass through OXYGEN. Use --count for bulk onboarding. LinkedIn restricts automated activity: every connection needs --acknowledge-risk (only a reconnect that already recorded one is exempt), and --count above 1 also needs --owner-consent (each owner connects their own account). Links are shareable and valid for 10 minutes.")
+        .description("Get a Unipile hosted-auth URL to connect a new LinkedIn account (or reconnect with --reconnect). This command creates a pending provider authorization; it does not preview a price. Each connected LinkedIn account has one monthly charge, never two: an existing dollar seat until it ends at renewal, or a monthly credit reservation after seats retire. On a repriced workspace that reservation is 3,400 credits ($34) monthly; a connect the balance cannot cover fails with insufficient_credits. Invites, messages and other LinkedIn actions cost 0 credits on top. Check `oxygen billing seats --json` before connecting for the current charge and seat status. A workspace linked to another organization's plan is billed at that organization. New accounts require --country (the owner's normal LinkedIn login country) and default to syncing only conversations OXYGEN starts; use --inbox-scope all to opt into the full LinkedIn inbox. Use --cookie-auth and --custom-proxy to expose those inputs inside Unipile's hosted wizard; their secrets never pass through OXYGEN. Use --count for bulk onboarding; --count above 1 needs --owner-consent (each owner connects their own account). Links are shareable and valid for 10 minutes.")
         .option("--reconnect <connection_id>", "Reconnect an existing connection instead of creating a new one. Accepts a connection id.")
         .option("--country <code>", "Required for new accounts: ISO 3166-1 alpha-2 code for the account owner's normal LinkedIn login country (for example DE or US).")
         .option("--sales-nav", "Request Classic + Sales Navigator access during Unipile hosted authentication.")
         .option("--cookie-auth", "Offer LinkedIn cookie authentication in Unipile's hosted wizard. The account owner enters li_at/li_a there; OXYGEN never receives them.")
         .option("--custom-proxy", "Let the account owner enter a custom proxy in Unipile's hosted wizard. OXYGEN never receives the proxy credentials.")
         .option("--count <n>", "Mint N hosted-auth links in one call for bulk onboarding (1-25, default 1). Every link uses the same --country; use separate calls for different login countries. Ignored when reconnecting.")
+        .option("--share-link", "Return a shareable connection link for one account; its owner completes authentication.")
         .option("--inbox-scope <scope>", "LinkedIn inbox privacy for new accounts: oxygen_initiated (default) or all. Reconnect preserves the existing account setting.")
-        .option("--acknowledge-risk", "Required for a new account: LinkedIn restricts automated activity; pacing reduces but does not remove the risk of a restriction.")
+        .addOption(new Option("--acknowledge-risk", "Deprecated: connecting no longer needs it. Still accepted so older scripts keep running.").hideHelp())
         .option("--owner-consent", "Required with --count above 1: each account owner connects their own account.")
         .option("--established", "The account is an established profile: skip the ~2-week warm-up a new account gets by default.")
         .option("--json", "Print a JSON envelope.")
@@ -13534,6 +13644,7 @@ Examples:
                     ...(options.cookieAuth ? { cookie_auth: true } : {}),
                     ...(options.customProxy ? { custom_proxy: true } : {}),
                     ...(count ? { count } : {}),
+                    ...(options.shareLink ? { share_link: true } : {}),
                     ...(inboxScope ? { inbox_sync_scope: inboxScope } : {}),
                     ...(options.acknowledgeRisk ? { acknowledge_linkedin_risk: true } : {}),
                     ...(options.ownerConsent ? { owner_consent: true } : {}),
@@ -13718,6 +13829,8 @@ Examples:
         .option("--first-name <name>", "The person's first name, as it should appear on mailboxes ordered for this sender. Defaults to splitting --name / the LinkedIn name on the first space.")
         .option("--last-name <name>", "The person's last name, as it should appear on mailboxes ordered for this sender. Ordering managed inboxes for this sender needs both names; a one-word name leaves it blank and the order is refused rather than guessed.")
         .option("--from-linkedin <senderId>", "Seed the profile from this LinkedIn/WhatsApp sender account id: derives the name and MIRRORS the LinkedIn photo into Oxygen storage (LinkedIn's own URL expires, so a mirrored copy is what an inbox vendor can still fetch hours later) and attaches the account.")
+        .option("--avatar-from-linkedin", "Use the attached LinkedIn account's mirrored photo for this new profile.")
+        .option("--avatar-upload-key <key>", "Use the storage_key returned by managed-inboxes upload-avatar; verified server-side.")
         .option("--avatar-url <url>", "Use this image URL as the profile photo instead of the LinkedIn one. Must be a public https URL. An expiring link (e.g. media.licdn.com with e=<epoch>) is stored but marked non-durable and is NOT sent to an inbox vendor — use `set-photo --file` to host a permanent copy.")
         .option("--status <status>", "Initial status: active (default), paused, or archived.")
         .option("--senders <ids>", "Comma-separated sender account ids (LinkedIn/WhatsApp) to attach. A LinkedIn sender also supplies the profile's photo when it has none of its own.")
@@ -13731,6 +13844,8 @@ Examples:
                 ...(readOption(options.firstName) ? { first_name: readOption(options.firstName) } : {}),
                 ...(readOption(options.lastName) ? { last_name: readOption(options.lastName) } : {}),
                 ...(readOption(options.fromLinkedin) ? { from_sender_account_id: readOption(options.fromLinkedin) } : {}),
+                ...(options.avatarFromLinkedin ? { avatar_from_linkedin: true } : {}),
+                ...(readOption(options.avatarUploadKey) ? { avatar_upload_key: readOption(options.avatarUploadKey) } : {}),
                 ...(readOption(options.avatarUrl) ? { avatar_url: readOption(options.avatarUrl) } : {}),
                 ...(readOption(options.status) ? { status: readOption(options.status) } : {}),
                 ...(options.senders ? { sender_account_ids: splitCommaList(options.senders) } : {}),
@@ -14021,6 +14136,9 @@ Examples:
         .option("--text-file <path>", "Read the post body from a file (alternative to --text).")
         .option("--account <ref>", "Sender account to post from. Omit for the org default.")
         .option("--as-organization <id>", "Publish as a company page the account administers (advanced; may require raw-route support).")
+        .option("--repost <id>", "Quote or share this LinkedIn post.")
+        .option("--include-job-posting <id>", "Embed a LinkedIn job preview.")
+        .option("--attachments-json <json-or-file>", "Up to 20 {content:<base64>,content_type:<MIME>,filename:<name>} objects; use a local JSON file for media.")
         .option("--external-link <url>", "Attach an external link to the post.")
         .option("--approved", "Publish for real. Without this flag, prints a preview only.")
         .option("--json", "Print a JSON envelope.")
@@ -14041,6 +14159,9 @@ Examples:
                     ...(account ? { account } : {}),
                     ...(asOrganization ? { as_organization: asOrganization } : {}),
                     ...(externalLink ? { external_link: externalLink } : {}),
+                    ...(readOption(options.repost) ? { repost: readOption(options.repost) } : {}),
+                    ...(readOption(options.includeJobPosting) ? { include_job_posting: readOption(options.includeJobPosting) } : {}),
+                    ...(options.attachmentsJson !== undefined ? { attachments: parseJsonArray(readFileIfPresent(options.attachmentsJson)) } : {}),
                     ...(options.approved ? { approved: true } : {}),
                 },
             });
@@ -14202,6 +14323,7 @@ Examples:
         .description("Comment on a LinkedIn post (or reply to a comment with --comment-id). A real external LinkedIn write that everyone can see and that counts against the sender account's daily action quota, gated behind approval: prints a preview by default and only posts when you pass --approved. --post is the composite post social_id from `oxygen posts get` (NOT the activity URN).")
         .requiredOption("--post <social_id>", "Composite post social_id from `oxygen posts get` (NOT the activity URN).")
         .requiredOption("--text <text>", "Comment text to post.")
+        .option("--mentions-json <json-or-file>", "Provider comment mention objects.")
         .option("--comment-id <id>", "Reply under this comment id instead of commenting on the post.")
         .option("--as-organization <org>", "LinkedIn organization id to comment as a company page.")
         .option("--external-link <url>", "URL to attach as a link preview on the comment.")
@@ -14220,6 +14342,7 @@ Examples:
                 method: "POST",
                 body: {
                     ...(post ? { post } : {}),
+                    ...(options.mentionsJson !== undefined ? { mentions: parseJsonArray(readFileIfPresent(options.mentionsJson)) } : {}),
                     ...(text ? { text } : {}),
                     ...(commentId ? { comment_id: commentId } : {}),
                     ...(asOrganization ? { as_organization: asOrganization } : {}),
@@ -14427,20 +14550,16 @@ Examples:
             });
         });
     }))
-        .addCommand(new Command("list")
-        .description("List the account's pending sent LinkedIn invitations with their invitation ids — the ids `linkedin invitations withdraw --ids` cancels. Read-only: no provider write, no credits. For received requests too, kept in a table that updates itself, use `linkedin invitations setup`.")
-        .option("--account <ref>", "Scope to one sender account (sender id, connection id, or Unipile account id).")
-        .option("--limit <n>", "Maximum invitations to return.")
+        .addCommand(addContractFlags(new Command("list")
+        .description("List the account's pending sent LinkedIn invitations with their invitation ids — the ids `linkedin invitations withdraw --ids` cancels. Read-only provider fetch: no provider write or credits. --cursor resumes the same sender's returned continuation. For received requests too, kept in a table that updates itself, use `linkedin invitations setup`."), LINKEDIN_SENT_INVITES_QUERY_CONTRACT, LINKEDIN_SENT_INVITES_FLAG_OVERLAY)
         .option("--json", "Print a JSON envelope.")
         .action(async (options) => {
         await handleAsyncAction("linkedin invitations list", options, () => {
-            const account = readOption(options.account);
-            const limit = readPositiveInt(options.limit);
+            const selectors = readContractFlags(options, LINKEDIN_SENT_INVITES_QUERY_CONTRACT, LINKEDIN_SENT_INVITES_FLAG_OVERLAY);
             const params = new URLSearchParams();
-            if (account)
-                params.set("account", account);
-            if (limit !== undefined)
-                params.set("limit", String(limit));
+            for (const [key, value] of Object.entries(selectors))
+                if (value !== undefined && value !== null)
+                    params.set(key, String(value));
             const suffix = params.toString();
             return requestOxygen(`/api/cli/linkedin/connections/invites-sent${suffix ? `?${suffix}` : ""}`);
         });
@@ -14470,13 +14589,18 @@ Examples:
         .addCommand(new Command("connect")
         .description("Get a Unipile hosted-auth URL to connect a new WhatsApp account by scanning a QR in WhatsApp → Linked Devices (or reconnect with --reconnect). Newly connected accounts start a mandatory warm-up ramp.")
         .option("--reconnect <connection_id>", "Reconnect an existing connection id instead of linking a new account.")
+        .option("--pairing-phone-number <phone>", "Offer phone-number pairing instead of QR where supported; use your international number.")
         .option("--json", "Print a JSON envelope.")
         .action(async (options) => {
         await handleAsyncAction("whatsapp connect", options, () => {
             const reconnect = readOption(options.reconnect);
+            const pairingPhoneNumber = readOption(options.pairingPhoneNumber);
             return requestOxygen("/api/cli/whatsapp/connect", {
                 method: "POST",
-                body: { ...(reconnect ? { reconnect_connection_id: reconnect } : {}) },
+                body: {
+                    ...(reconnect ? { reconnect_connection_id: reconnect } : {}),
+                    ...(pairingPhoneNumber ? { pairing_phone_number: pairingPhoneNumber } : {}),
+                },
             });
         });
     }))
@@ -14524,6 +14648,9 @@ Examples:
         .option("--messages-reads-per-day <n>", "Daily cap on chat and message-history reads.")
         .option("--min-spacing-seconds <n>", "Minimum seconds between actions.")
         .option("--spacing-jitter-seconds <n>", "Random jitter seconds added to action spacing.")
+        .option("--working-days <days>", "Allowed weekdays, e.g. mon-fri or 1,3,5.")
+        .option("--working-hours-start <HH:MM>", "Local start of the allowed sending window.")
+        .option("--working-hours-end <HH:MM>", "Local end of the allowed sending window.")
         .option("--timezone <tz>", "IANA timezone the daily action counters reset in, e.g. America/New_York.")
         .option("--json", "Print a JSON envelope.")
         .action(async (id, options) => {
@@ -15051,6 +15178,7 @@ Examples:
         .description("Set a conversation's status (the Instantly-style tier). A manual override that locks out AI re-classification. --channel linkedin/whatsapp sets a DM's status.")
         .argument("<conversation>", "Conversation id, Unipile chat id, or (email) Zapbox thread id.")
         .argument("<status>", "A status label key (e.g. interested, meeting_booked, won, not_interested).")
+        .option("--source <manual|ai>", "Classification provenance; manual locks out AI reclassification.")
         .option("--channel <channel>", "Inbox channel: email (default), linkedin, or whatsapp.")
         .option("--json", "Print a JSON envelope.")
         .action(async (conversation, status, options) => {
@@ -15058,7 +15186,7 @@ Examples:
             const channel = readOption(options.channel) ?? "email";
             return requestOxygen(`/api/cli/inbox/${encodeURIComponent(conversation)}/status`, {
                 method: "POST",
-                body: { status, channel },
+                body: { status, channel, ...(readOption(options.source) ? { source: readOption(options.source) } : {}) },
             });
         });
     }))
@@ -15143,6 +15271,9 @@ Examples:
         .addCommand(new Command("create")
         .description("Create a custom status label.")
         .argument("<name>", "Display name.")
+        .option("--key <key>", "Stable custom status key; defaults to the name slug.")
+        .option("--icon <name>", "Label icon; an empty string clears it.")
+        .option("--sort-order <n>", "Numeric position; 0 is valid.")
         .option("--color <hex>", "Hex color (e.g. #2a78d6). Workspace palette: #2a78d6 #eb6834 #1baf7a #eda100 #e87ba4 #008300 #4a3aa7 #e34948 #0e9dc4 #9a4fd0.")
         .option("--bucket <bucket>", "primary (default) or others.")
         .option("--ai-settable", "Let the AI reply classifier assign this label.")
@@ -15158,6 +15289,9 @@ Examples:
                 body: {
                     name,
                     ...(color ? { color } : {}),
+                    ...(options.icon !== undefined ? { icon: options.icon } : {}),
+                    ...(options.sortOrder !== undefined ? { sort_order: Number(options.sortOrder) } : {}),
+                    ...(readOption(options.key) ? { key: readOption(options.key) } : {}),
                     ...(bucket ? { bucket } : {}),
                     ...(options.aiSettable ? { ai_settable: true } : {}),
                     ...(description ? { description } : {}),
@@ -15169,6 +15303,8 @@ Examples:
         .description("Update a status label's name, color, bucket, description, or (custom labels only) ai-settable flag.")
         .argument("<key>", "The label key.")
         .option("--name <name>", "New display name.")
+        .option("--icon <name>", "Label icon; an empty string clears it.")
+        .option("--sort-order <n>", "Numeric position; 0 is valid.")
         .option("--color <hex>", "New hex color.")
         .option("--bucket <bucket>", "New bucket (primary or others).")
         .option("--ai-settable", "Let the AI classifier assign this label (custom labels only).")
@@ -15186,6 +15322,9 @@ Examples:
                 body: {
                     ...(name ? { name } : {}),
                     ...(color ? { color } : {}),
+                    ...(options.icon !== undefined ? { icon: options.icon } : {}),
+                    ...(options.sortOrder !== undefined ? { sort_order: Number(options.sortOrder) } : {}),
+                    ...(readOption(options.key) ? { key: readOption(options.key) } : {}),
                     ...(bucket ? { bucket } : {}),
                     ...(options.aiSettable !== undefined ? { ai_settable: options.aiSettable } : {}),
                     ...(description ? { description } : {}),
@@ -15618,6 +15757,7 @@ Examples:
         .option("--contact-linkedin-property <name>", "Optional contact LinkedIn profile property internal name.")
         .option("--contact-company-domain-property <name>", "Optional explicit company-domain property on contacts, copied to lead rows.")
         .option("--contact-company-linkedin-property <name>", "Optional explicit company LinkedIn URL property on contacts.")
+        .option("--contact-properties <list>", "Comma-separated extra HubSpot contact properties to hydrate (max 50).")
         .option("--company-domain-property <name>", "Company-list domain property (default domain).", "domain")
         .option("--company-linkedin-property <name>", "Optional company-list LinkedIn URL property.")
         .option("--cron <expression>", "Standing cron cadence. Defaults to every 15 minutes.")
@@ -15654,6 +15794,7 @@ Examples:
                     ...(readOption(options.contactLinkedinProperty) ? { contact_linkedin_property: readOption(options.contactLinkedinProperty) } : {}),
                     ...(readOption(options.contactCompanyDomainProperty) ? { contact_company_domain_property: readOption(options.contactCompanyDomainProperty) } : {}),
                     ...(readOption(options.contactCompanyLinkedinProperty) ? { contact_company_linkedin_property: readOption(options.contactCompanyLinkedinProperty) } : {}),
+                    ...(options.contactProperties !== undefined ? { contact_properties: readCsvOption(options.contactProperties) } : {}),
                     ...(readOption(options.companyDomainProperty) ? { company_domain_property: readOption(options.companyDomainProperty) } : {}),
                     ...(readOption(options.companyLinkedinProperty) ? { company_linkedin_property: readOption(options.companyLinkedinProperty) } : {}),
                     mode: options.live ? "live" : "dry_run",
@@ -15739,6 +15880,8 @@ Examples:
         .option("--company-reply-pause <off|default|statuses>", "Pause the replier's company in this campaign when a reply has one of these statuses. Oxygen detects the company from work-email domains or explicit company fields; with no company identity, only the replier stops. New sequences start with this setting off. 'default' = interested,neutral,not_now,not_interested; or comma-separated Inbox status keys (`inbox labels list`); 'off' disables it. Read the saved setting with `sequences get`.")
         .option("--stop-on-reply-scope <scope>", "(deprecated: use --company-reply-pause) 'company_domain' = --company-reply-pause interested,neutral,not_now,not_interested,wrong_person; 'lead' = off.")
         .option("--bounce-protection <json>", "Sequence bounce policy JSON (partial updates merge): enabled=true, warning_rate=.02, pause_rate=.03, min_sends=20, window_days=7. Hard bounces / accepted sends in the rolling window; pauses this sequence, not the fleet. Rates are fractions; mailbox protection is separate.")
+        .option("--auto-optimize", "Enable the sequence-wide A/B auto-winner (default on).")
+        .option("--no-auto-optimize", "Disable the sequence-wide A/B auto-winner; manual variant decisions stay available.")
         .option("--include-unsubscribe", "Add an unsubscribe option to emails, the same as Launch's switch: a visible recipient-bound link (plain text shows the URL, HTML a linked Unsubscribe label) plus one-click headers that mail apps show as an Unsubscribe button, both on first-touch cold emails; in-thread follow-ups carry neither. Zapbox sends (mailboxes imported from Zapmail, `transport: \"zapbox\"` in `mailboxes list --json`) carry the link only. Off by default. There is no separate opt-out text: write any reply-to-stop line into the email copy. `sequences update` can switch on the link or the headers alone.")
         .option("--no-include-unsubscribe", "Turn off both the visible unsubscribe link and the one-click headers.")
         .option("--tracking-opens", "Opt in to open tracking (default off). Requires a verified tracking domain and deployment tracking secret.")
@@ -15862,6 +16005,8 @@ Examples:
         .option("--company-reply-pause <off|default|statuses>", "Pause the replier's company in this campaign when a reply has one of these statuses. Oxygen detects the company from work-email domains or explicit company fields; with no company identity, only the replier stops. New sequences start with this setting off. 'default' = interested,neutral,not_now,not_interested; or comma-separated Inbox status keys (`inbox labels list`); 'off' disables it. Read the saved setting with `sequences get`.")
         .option("--stop-on-reply-scope <scope>", "(deprecated: use --company-reply-pause) 'company_domain' = --company-reply-pause interested,neutral,not_now,not_interested,wrong_person; 'lead' = off.")
         .option("--bounce-protection <json>", "Sequence bounce policy JSON (partial updates merge): enabled=true, warning_rate=.02, pause_rate=.03, min_sends=20, window_days=7. Hard bounces / accepted sends in the rolling window; pauses this sequence, not the fleet. Rates are fractions; mailbox protection is separate.")
+        .option("--auto-optimize", "Enable the sequence-wide A/B auto-winner (default on).")
+        .option("--no-auto-optimize", "Disable the sequence-wide A/B auto-winner; manual variant decisions stay available.")
         .option("--include-unsubscribe", "Add an unsubscribe option to emails, the same as Launch's switch: a visible recipient-bound link (plain text shows the URL, HTML a linked Unsubscribe label) plus one-click headers that mail apps show as an Unsubscribe button, both on first-touch cold emails; in-thread follow-ups carry neither. Zapbox sends (mailboxes imported from Zapmail, `transport: \"zapbox\"` in `mailboxes list --json`) carry the link only. Off by default. There is no separate opt-out text: write any reply-to-stop line into the email copy.")
         .option("--no-include-unsubscribe", "Turn off both the visible unsubscribe link and the one-click headers.")
         .option("--include-unsubscribe-headers", "Only the one-click unsubscribe headers (default off); --include-unsubscribe turns on the headers and the visible link together.")
@@ -15992,6 +16137,7 @@ Examples:
         .requiredOption("--campaign <name-or-id>", "The campaign that already exists in that tool. A name is resolved against your connected account (exact id, then exact name, then a unique partial match).")
         .requiredOption("--from-table <table>", "Table id or slug whose rows are pushed.")
         .option("--rows <row_ids>", "Comma-separated row ids to push. Defaults to the whole table.")
+        .option("--excluded-rows <row_ids>", "Comma-separated row ids omitted from the whole-table/filter selection; cannot combine with --rows.")
         .option("--filter-json <json>", "Filter object or array selecting the rows, e.g. '{\"column\":\"email\",\"op\":\"is_not_null\"}'.")
         .option("--mode <mode>", "dry_run (default) or live.")
         .option("--approved", "Required for --mode live: confirms the external write after inspecting the dry run.")
@@ -16007,10 +16153,13 @@ Examples:
             if (rows.length > 0 && filterJson) {
                 throw new Error("Pass either --rows or --filter-json, not both.");
             }
+            const excludedRowIds = splitCommaList(options.excludedRows);
+            if (rows.length > 0 && excludedRowIds.length > 0)
+                throw new OxygenError("invalid_selection", "--excluded-rows cannot combine with --rows.", { exitCode: 2 });
             const selection = rows.length > 0
                 ? { mode: "row_ids", row_ids: rows }
-                : filterJson
-                    ? { mode: "all_matching", filters: JSON.parse(filterJson) }
+                : filterJson || excludedRowIds.length > 0
+                    ? { mode: "all_matching", filters: filterJson ? JSON.parse(filterJson) : [], ...(excludedRowIds.length > 0 ? { excluded_row_ids: excludedRowIds } : {}) }
                     : null;
             const fieldMappingJson = readOption(options.fieldMappingJson);
             return requestOxygen("/api/cli/sequences/push-external", {
@@ -16405,6 +16554,7 @@ Examples:
         .option("--timezone <tz>", "IANA timezone (e.g. America/New_York). Calls are allowed 09:00-20:00 in the lead's local time; WITHOUT a timezone that window cannot be checked, so the guardrail fails closed and the lead cannot be dialed.")
         .option("--override <guardrails>", "Comma-separated guardrails to waive for THIS lead: calling_window (the 09:00-20:00 local window), unknown_timezone, daily_cap. Do-not-call, credits, number health and destination coverage are never waivable.")
         .option("--note <text>", "Talking points for the rep. Shown on the dial screen, never sent to the lead.")
+        .option("--assigned-user-id <id>", "Assign the call task to this workspace user.")
         .option("--source <source>", "Origin: manual (default), crm, table, reply, sequence.")
         .option("--priority <n>", "Higher sorts first in the queue.")
         .option("--due <iso>", "ISO-8601 timestamp; the task stays out of the queue until then.")
@@ -16440,6 +16590,7 @@ Examples:
                 method: "POST",
                 body: {
                     action: "queue",
+                    ...(readOption(options.assignedUserId) ? { assigned_user_id: readOption(options.assignedUserId) } : {}),
                     lead_phone: phone,
                     ...(name ? { lead_name: name } : {}),
                     ...(timezone ? { lead_timezone: timezone } : {}),
@@ -16822,22 +16973,24 @@ Examples:
         });
     }))
         .addCommand(new Command("add")
-        .description("Add (or refresh) a lead provider id on the org do-not-contact list so the sequencer never enrolls them again. Idempotent. --reason defaults to manual.")
-        .requiredOption("--lead <provider_id>", "The lead provider id (e.g. a LinkedIn ACo... id) to suppress.")
+        .description("Add or refresh selected lead ids on the org do-not-contact list so the sequencer never enrolls them again. Use --lead or --leads (1-500). Idempotent; --reason defaults to manual.")
+        .option("--lead <provider_id>", "One lead provider id to suppress; exclusive with --leads.")
+        .option("--leads <ids>", "Comma-separated lead provider ids to suppress in one bounded batch (1-500).")
         .option("--reason <reason>", "Why: manual (default), replied, unsubscribed, bounced, do_not_contact, friends.")
         .option("--detail <text>", "Optional free-text note stored with the suppression.")
         .option("--json", "Print a JSON envelope.")
         .action(async (options) => {
         await handleAsyncAction("suppressions add", options, () => {
             const lead = readOption(options.lead);
-            if (!lead)
-                throw new Error("--lead is required.");
+            const leads = options.leads !== undefined ? readSuppressionBulkKeys(options.leads, "--leads") : undefined;
+            if (Boolean(lead) === Boolean(leads))
+                throw new OxygenError("invalid_request", "Pass exactly one of --lead or --leads.", { exitCode: 2 });
             const reason = readOption(options.reason);
             const detail = readOption(options.detail);
             return requestOxygen("/api/cli/suppressions", {
                 method: "POST",
                 body: {
-                    lead_provider_id: lead,
+                    ...(leads ? { lead_provider_ids: leads } : { lead_provider_id: lead }),
                     ...(reason ? { reason } : {}),
                     ...(detail ? { detail } : {}),
                 },
@@ -16845,11 +16998,27 @@ Examples:
         });
     }))
         .addCommand(new Command("remove")
-        .description("Remove one lead provider id (--lead), or every identity of one merged person (--subject-id), from the org do-not-contact list (re-enable contact). A subject id is stamped on each identifier of an imported contact: `hubspot:contacts:<id>` from `suppressions hubspot sync`, `manual:<uuid>` returned by `suppressions import-person`. Read it as metadata.dnc_subject_id in `suppressions list` (LinkedIn rows only) or in `suppressions addresses|phones|companies --json`, which is where an email- or phone-only contact appears.")
+        .description("Remove selected leads or every identity of selected merged people from the org do-not-contact list. Choose one of --lead, --leads, --subject-id or --subject-ids; batches hold 1-500 ids. Read a person's metadata.dnc_subject_id in suppressions list, addresses, phones or companies --json.")
         .option("--lead <provider_id>", "The lead provider id to un-suppress. Mutually exclusive with --subject-id.")
         .option("--subject-id <id>", "DNC subject id (metadata.dnc_subject_id). Clears that person's email, phone, LinkedIn, and company suppressions in one transaction.")
+        .option("--leads <ids>", "Comma-separated lead provider ids to remove in one bounded batch (1-500).")
+        .option("--subject-ids <ids>", "Comma-separated merged-person subject ids to remove across every ledger (1-500).")
         .option("--json", "Print a JSON envelope.")
         .action(async (options) => {
+        if (options.leads !== undefined || options.subjectIds !== undefined) {
+            await handleAsyncAction("suppressions remove", options, () => {
+                const selectors = [options.lead, options.subjectId, options.leads, options.subjectIds].filter((value) => value !== undefined);
+                if (selectors.length !== 1)
+                    throw new OxygenError("invalid_request", "Pass exactly one of --lead, --leads, --subject-id or --subject-ids.", { exitCode: 2 });
+                return requestOxygen("/api/cli/suppressions", {
+                    method: "DELETE",
+                    body: options.leads !== undefined
+                        ? { lead_provider_ids: readSuppressionBulkKeys(options.leads, "--leads") }
+                        : { subject_ids: readSuppressionBulkKeys(options.subjectIds, "--subject-ids") },
+                });
+            });
+            return;
+        }
         const subjectId = readOption(options.subjectId);
         if (!subjectId) {
             await handleAsyncAction("suppressions remove", options, () => {
@@ -16908,6 +17077,7 @@ Examples:
         .requiredOption("--file <path>", "Path to a file of emails, bare domains, LinkedIn profile URLs, and/or LinkedIn member ids, separated by newlines, commas, or whitespace.")
         .option("--reason <reason>", "Suppression reason. Emails: hard_bounce | complaint | unsubscribe | manual. Domains: manual | complaint | policy. LinkedIn contacts: manual | replied | unsubscribed | bounced | do_not_contact | friends. Required when the file contains any domains; must be valid for every entry type present (manual always is).")
         .option("--source <text>", "Optional provenance note stored on every imported row (e.g. instantly_export).")
+        .option("--metadata-json <json-or-file>", "Default metadata stored on imported identities.")
         .option("--detail <text>", "Optional free-text note stored on every imported row.")
         .option("--json", "Print a JSON envelope.")
         .action(async (options) => {
@@ -16931,6 +17101,7 @@ Examples:
                 method: "POST",
                 body: {
                     entries,
+                    ...(options.metadataJson !== undefined ? { metadata: parseJsonObject(readFileIfPresent(options.metadataJson)) } : {}),
                     ...(reason ? { reason } : {}),
                     ...(source ? { source } : {}),
                     ...(detail ? { detail } : {}),
@@ -17058,11 +17229,18 @@ Examples:
         });
     }))
         .addCommand(new Command("remove-phone")
-        .description("Deliberately remove one strict E.164 phone suppression.")
-        .argument("<phone>", "Strict E.164 number, e.g. +14155550123.")
+        .description("Remove one phone suppression or 1-500 exact E.164 numbers with --phones.")
+        .argument("[phone]", "One strict E.164 number, e.g. +14155550123; exclusive with --phones.")
+        .option("--phones <phones>", "Comma-separated strict E.164 numbers to remove (1-500).")
         .option("--json", "Print a JSON envelope.")
         .action(async (phone, options) => {
-        await handleAsyncAction("suppressions remove-phone", options, () => requestOxygen(`/api/cli/suppressions/phones?phone=${encodeURIComponent(phone)}`, { method: "DELETE" }));
+        await handleAsyncAction("suppressions remove-phone", options, () => {
+            if (Boolean(phone) === (options.phones !== undefined))
+                throw new OxygenError("invalid_request", "Pass one phone or --phones.", { exitCode: 2 });
+            return options.phones !== undefined
+                ? requestOxygen("/api/cli/suppressions/phones", { method: "DELETE", body: { phones: readSuppressionBulkKeys(options.phones, "--phones") } })
+                : requestOxygen(`/api/cli/suppressions/phones?phone=${encodeURIComponent(phone)}`, { method: "DELETE" });
+        });
     }))
         .addCommand(new Command("companies")
         .description("List explicit company-domain and LinkedIn-company suppressions. These stop every Sequence channel.")
@@ -17083,14 +17261,23 @@ Examples:
         });
     }))
         .addCommand(new Command("remove-company")
-        .description("Deliberately remove one explicit company suppression.")
-        .requiredOption("--kind <kind>", "domain or linkedin_company.")
-        .requiredOption("--value <identity>", "Domain or canonical LinkedIn company URL.")
+        .description("Remove one explicit company suppression or 1-500 exact identities with --identities-json.")
+        .option("--kind <kind>", "domain or linkedin_company; use with --value.")
+        .option("--value <identity>", "One domain or canonical LinkedIn company URL.")
+        .option("--identities-json <json>", "Exact batch of {kind,value} company identities to remove (1-500); exclusive with --kind/--value.")
         .option("--json", "Print a JSON envelope.")
         .action(async (options) => {
         await handleAsyncAction("suppressions remove-company", options, () => {
             const kind = readOption(options.kind);
             const value = readOption(options.value);
+            if (options.identitiesJson !== undefined) {
+                if (options.kind !== undefined || options.value !== undefined)
+                    throw new OxygenError("invalid_request", "Pass --identities-json or --kind and --value.", { exitCode: 2 });
+                const identities = parseJsonValue(options.identitiesJson, "--identities-json");
+                if (!Array.isArray(identities) || identities.length < 1 || identities.length > 500)
+                    throw new OxygenError("invalid_request", "--identities-json must contain 1-500 {kind,value} objects.", { exitCode: 2 });
+                return requestOxygen("/api/cli/suppressions/companies", { method: "DELETE", body: { identities } });
+            }
             if (!kind || !value)
                 throw new Error("--kind and --value are required.");
             const params = new URLSearchParams({ kind, value });
@@ -17217,12 +17404,18 @@ Examples:
         });
     }))
         .addCommand(new Command("remove-domain")
-        .description("Remove a whole-domain email block (re-enable sending to the domain).")
-        .argument("<domain>", "The bare domain to un-block (e.g. acme.com).")
+        .description("Remove whole-domain email blocks (re-enable sending). Use one domain or --domains for 1-500.")
+        .argument("[domain]", "One bare domain to unblock; exclusive with --domains.")
+        .option("--domains <domains>", "Comma-separated domains to remove (1-500).")
         .option("--json", "Print a JSON envelope.")
         .action(async (domain, options) => {
         await handleAsyncAction("suppressions remove-domain", options, () => {
             const value = domain?.trim();
+            if (options.domains !== undefined) {
+                if (value)
+                    throw new OxygenError("invalid_request", "Pass one domain or --domains.", { exitCode: 2 });
+                return requestOxygen("/api/cli/suppressions/domains", { method: "DELETE", body: { domains: readSuppressionBulkKeys(options.domains, "--domains") } });
+            }
             if (!value)
                 throw new Error("A domain is required.");
             return requestOxygen(`/api/cli/suppressions/domains?domain=${encodeURIComponent(value)}`, {
@@ -17231,11 +17424,23 @@ Examples:
         });
     }))
         .addCommand(new Command("remove-address")
-        .description("Remove one blocked email ADDRESS from the do-not-contact ledger (re-enables sending to it). Addresses land here via bounces, unsubscribes, and `suppressions import`; whole-domain blocks have their own `remove-domain`.")
-        .argument("<email>", "The blocked address, e.g. ada@acme.com.")
+        .description("Remove blocked email addresses from the do-not-contact ledger (re-enable sending). Use one address or --emails for 1-500; whole-domain blocks use remove-domain.")
+        .argument("[email]", "One blocked address, e.g. ada@acme.com; exclusive with --emails.")
+        .option("--emails <emails>", "Comma-separated exact email addresses to remove (1-500).")
         .option("--json", "Print a JSON envelope.")
         .action(async (email, options) => {
+        const emails = options.emails;
+        if (emails !== undefined) {
+            await handleAsyncAction("suppressions remove-address", options, () => {
+                if (email)
+                    throw new OxygenError("invalid_request", "Pass one email or --emails.", { exitCode: 2 });
+                return requestOxygen("/api/cli/suppressions/addresses", { method: "DELETE", body: { emails: readSuppressionBulkKeys(emails, "--emails") } });
+            });
+            return;
+        }
         try {
+            if (!email)
+                throw new OxygenError("invalid_request", "Pass one email or --emails.", { exitCode: 2 });
             const data = await requestOxygen(`/api/cli/suppressions/addresses?email=${encodeURIComponent(email)}`, { method: "DELETE" });
             if (options.json) {
                 writeJson(success("suppressions remove-address", data));
@@ -17570,7 +17775,7 @@ Examples:
         writeMailboxPoolOverview(result, { filtered: suffix.length > 0, filterFlags });
     }))
         .addCommand(new Command("get")
-        .description("Get one sending mailbox's configuration/readiness detail (provider, status, daily cap, warmup state, auth mode, and source — managed vs bring-your-own) plus a one-row pool summary. This is not sent/replied/bounced performance; use `oxygen sequences analytics` for native Sequence attribution by mailbox/domain. An ineligible native-send transport includes transport_reason + transport_hint; it does not by itself block OXYGEN Warm-up or EmailGuard monitoring. <mailbox> accepts a mailbox id or email address.")
+        .description("Get one sending mailbox's configuration/readiness detail (provider, status, daily cap, warmup state, auth mode, and source — managed vs bring-your-own) plus a one-row pool summary. effective_cap comes first: today's campaign limit (effective_daily_cap), the ramp-up mode and its ramp_schedule. This is not sent/replied/bounced performance; use `oxygen sequences analytics` for native Sequence attribution by mailbox/domain. An ineligible native-send transport includes transport_reason + transport_hint; it does not by itself block OXYGEN Warm-up or EmailGuard monitoring. <mailbox> accepts a mailbox id or email address.")
         .argument("<mailbox>", "Mailbox id or email address.")
         .option("--json", "Print a JSON envelope.")
         .action(async (mailbox, options) => {
@@ -17583,6 +17788,7 @@ Examples:
         .option("--plan-hash <hash>", "Fresh preview plan_hash.")
         .option("--confirmation <phrase>", "Exact confirmation_phrase returned by the fresh preview.")
         .option("--cascade", "Disconnect each mailbox's OWN warm-up and deliverability-monitoring add-ons as part of the delete, instead of failing closed until you tear them down by hand. Stops their recurring credits too. Pass it on the preview as well as the approval: the plan hash is bound to it, so an approval cannot turn it on. A live managed domain subscription still fails closed.")
+        .option("--domains <list>", "Exact domains to cancel/archive with this mailbox deletion; included in the preview and approval hash.")
         .option("--include-domains", "Also delete each domain whose inboxes are ALL selected: an OXYGEN-bought domain is cancelled, your own is archived (DNS and registrar untouched). Partly selected domains are kept and listed in preview.domains_kept. Pass it on the preview as well as the approval.")
         .option("--json", "Print a JSON envelope.")
         .action(async (options) => {
@@ -17600,6 +17806,7 @@ Examples:
                 method: "POST",
                 body: {
                     mailboxes,
+                    ...(options.domains !== undefined ? { domains: readCsvOption(options.domains) } : {}),
                     ...(options.approved === true ? { approved: true } : {}),
                     ...(options.cascade === true ? { cascade: true } : {}),
                     ...(options.includeDomains === true ? { include_domains: true } : {}),
@@ -17764,9 +17971,9 @@ Examples:
         });
     }))
         .addCommand(new Command("cap")
-        .description("View and adjust a single mailbox's daily send cap (throttle a problem inbox or ramp a newly warmed one without pausing it).")
+        .description("View and adjust a single mailbox's daily send cap (throttle a problem inbox without pausing it). The campaign ramp-up that climbs to it is `mailboxes ramp set`.")
         .addCommand(new Command("set")
-        .description("Set one sending mailbox's daily send cap (sends per day; new mailboxes get 25). --daily-cap must be a positive whole number; `oxygen limits show` reports the maximum in force. The separate campaign ramp starts at 5, 10, then 20/day, advancing on completed UTC days with accepted campaign sends. Optional provider warm-up is configured with `mailboxes warmup config`. Consumes no Oxygen credits. <mailbox> accepts a mailbox id or email address.")
+        .description("Set one sending mailbox's daily send cap (sends per day; new mailboxes get 25). --daily-cap must be a positive whole number; `oxygen limits show` reports the maximum in force. The campaign ramp-up (standard 5, 10, then 20/day over the first nine sending days) climbs to this cap; customize or turn it off with `mailboxes ramp set`. Optional provider warm-up is configured with `mailboxes warmup config`. Consumes no Oxygen credits. <mailbox> accepts a mailbox id or email address.")
         .argument("<mailbox>", "Mailbox id or email address.")
         .requiredOption("--daily-cap <n>", "New daily send cap (a positive whole number of sends per day).")
         .option("--json", "Print a JSON envelope.")
@@ -17782,44 +17989,58 @@ Examples:
         });
     })))
         .addCommand(new Command("ramp")
-        .description("Set or clear one mailbox's campaign sending-day ramp. Completed UTC days with accepted campaign sends advance it; optional provider warm-up has separate controls under `mailboxes warmup config`.")
+        .description("Campaign ramp-up for one mailbox: how much campaign email it may send on each of its first sending days before its daily cap. Standard is 5, 10, then 20 a day over the first nine sending days; set a custom start and increase, or turn it off for an inbox already sending elsewhere. A sending day is a completed UTC day with accepted campaign sends. Provider warm-up is separate (`mailboxes warmup config`).")
         .addCommand(new Command("set")
-        .description("Set one mailbox's campaign sending-day ramp: --start-per-day (initial ceiling), --increase-every-days (completed UTC days with accepted campaign sends), --step, --cap. Import age and provider warm-up do not advance it. --clear restores the default 5/10/20 tiers. Free configuration write; provider warm-up uses `mailboxes warmup config`.")
+        .description("Set one mailbox's campaign ramp-up: a custom --start-per-day plus --step every --increase-every-days sending days until its daily cap, --off for the full daily cap from the first sending day, or --clear for the standard 5/10/20 ramp. Sending days are completed UTC days with accepted campaign sends. The optional --cap holds a custom ramp lower for good. effective_cap in the response reads back today's limit, the ramp_schedule and full_cap_on_sending_day. Free configuration write.")
         .argument("<mailbox>", "Mailbox id or email address.")
-        .option("--start-per-day <n>", "Initial campaign send ceiling (non-negative whole number).")
-        .option("--increase-every-days <n>", "Completed UTC days with accepted campaign sends between increases (whole number >= 1).")
-        .option("--step <n>", "Sends added to the ceiling each period (non-negative whole number).")
-        .option("--cap <n>", "The ramp's ceiling; once reached the ramp stops climbing (non-negative whole number).")
-        .option("--clear", "Remove the override and restore the default campaign sending-day tiers.")
+        .option("--start-per-day <n>", "Campaign emails allowed on the first sending day (non-negative whole number).")
+        .option("--increase-every-days <n>", "Sending days between increases (whole number >= 1).")
+        .option("--step <n>", "Emails added at each increase (non-negative whole number).")
+        .option("--cap <n>", "Optional permanent ceiling for the ramp; omit it to climb until the daily cap.")
+        .option("--off", "Turn the ramp off: the full daily cap from the first sending day.")
+        .option("--clear", "Restore the standard 5/10/20 ramp.")
         .option("--json", "Print a JSON envelope.")
         .action(async (mailbox, options) => {
         await handleAsyncAction("mailboxes ramp set", options, () => {
+            const knobs = [
+                options.startPerDay,
+                options.increaseEveryDays,
+                options.step,
+                options.cap,
+            ].some((value) => value !== undefined);
+            if (options.off && options.clear) {
+                throw new Error("Use --off or --clear, not both.");
+            }
+            if ((options.off || options.clear) && knobs) {
+                throw new Error("--off and --clear take no ramp numbers; drop --start-per-day, --increase-every-days, --step and --cap.");
+            }
+            let rampConfig;
             if (options.clear) {
-                return requestOxygen(`/api/cli/mailboxes/${encodeURIComponent(mailbox)}/ramp`, {
-                    method: "PATCH",
-                    body: { ramp_config: null },
-                });
+                rampConfig = null;
             }
-            const startPerDay = readPositiveInt(options.startPerDay);
-            const increaseEveryDays = readPositiveInt(options.increaseEveryDays);
-            const step = readPositiveInt(options.step);
-            const cap = readPositiveInt(options.cap);
-            if (startPerDay === undefined ||
-                increaseEveryDays === undefined ||
-                step === undefined ||
-                cap === undefined) {
-                throw new Error("Provide --start-per-day, --increase-every-days, --step, and --cap (or --clear to remove the override).");
+            else if (options.off) {
+                rampConfig = { enabled: false };
+            }
+            else {
+                const startPerDay = readNonNegativeInt(options.startPerDay);
+                const increaseEveryDays = readPositiveInt(options.increaseEveryDays);
+                const step = readNonNegativeInt(options.step);
+                const cap = readNonNegativeInt(options.cap);
+                if (startPerDay === undefined ||
+                    increaseEveryDays === undefined ||
+                    step === undefined) {
+                    throw new Error("Provide --start-per-day, --increase-every-days and --step (--cap is optional), or --off to turn the ramp off, or --clear for the standard ramp.");
+                }
+                rampConfig = {
+                    start_per_day: startPerDay,
+                    increase_every_days: increaseEveryDays,
+                    step,
+                    ...(cap !== undefined ? { cap } : {}),
+                };
             }
             return requestOxygen(`/api/cli/mailboxes/${encodeURIComponent(mailbox)}/ramp`, {
                 method: "PATCH",
-                body: {
-                    ramp_config: {
-                        start_per_day: startPerDay,
-                        increase_every_days: increaseEveryDays,
-                        step,
-                        cap,
-                    },
-                },
+                body: { ramp_config: rampConfig },
             });
         });
     })))
@@ -18587,10 +18808,11 @@ Examples:
         .option("--dmarc-policy <policy>", "DMARC policy: none (default), quarantine, or reject.")
         .option("--dmarc-rua <mailbox>", "DMARC aggregate-report mailbox (rua=mailto:...).")
         .option("--tracking-host <host>", "Open/click tracking CNAME host (only planned when tracking is configured).")
+        .option("--dkim-json <json>", "DKIM records as [{type:TXT|CNAME,name,content}]. Use identical records when applying the preview.")
         .option("--no-auto-dkim", "Skip auto-deriving Microsoft DKIM selector1/selector2 CNAMEs (default: auto-derive them for microsoft when no DKIM is supplied).")
         .option("--json", "Print a JSON envelope.")
-        .action(async (domain, options) => {
-        await handleAsyncAction("domains dns plan", options, () => runDomainsDnsPlan(domain, options));
+        .action(async (domain, options, command) => {
+        await handleAsyncAction("domains dns plan", { ...options, json: command.optsWithGlobals().json === true }, () => runDomainsDnsPlan(domain, options));
     }))
         .addCommand(new Command("apply")
         .description("Write the planned cold-email DNS records into the domain's Cloudflare zone. Requires a fresh plan_hash from `dns plan`. No Oxygen credits (Cloudflare does not charge for DNS writes). Without --approved, re-previews the plan.")
@@ -18601,10 +18823,11 @@ Examples:
         .option("--dmarc-policy <policy>", "DMARC policy: none (default), quarantine, or reject.")
         .option("--dmarc-rua <mailbox>", "DMARC aggregate-report mailbox (rua=mailto:...).")
         .option("--tracking-host <host>", "Open/click tracking CNAME host (only applied when tracking is configured).")
+        .option("--dkim-json <json>", "DKIM records as [{type:TXT|CNAME,name,content}]. Use identical records when applying the preview.")
         .option("--no-auto-dkim", "Skip auto-deriving Microsoft DKIM (must match the value used in `dns plan` so the plan_hash matches).")
         .option("--json", "Print a JSON envelope.")
-        .action(async (domain, options) => {
-        await handleAsyncAction("domains dns apply", options, () => runDomainsDnsApply(domain, options));
+        .action(async (domain, options, command) => {
+        await handleAsyncAction("domains dns apply", { ...options, json: command.optsWithGlobals().json === true }, () => runDomainsDnsApply(domain, options));
     })))
         .addCommand(new Command("tracking")
         .description("Open/click tracking domain for native cold email: provision the tracking CNAME on the domain's Cloudflare zone and check its verification status. 0 Oxygen credits.")
@@ -19154,6 +19377,7 @@ Run completion:
         .option("--max-credits <n>", "Required credit ceiling for live calls.")
         .option("--approved", "Required for live calls after inspecting a dry run.")
         .option("--revision <n>", "Run a specific saved version instead of the live one. Dry-run and smoke-test only: publish a version to run it live.")
+        .addOption(new Option("--test-scope <workflow|node>", "Create a durable non-live whole-workflow or node test; node requires --node.").choices(["workflow", "node"]))
         .option("--node <node_id>", "Test one node: runs that node plus only the predecessors it needs, from the same saved graph. Dry-run and smoke-test only.")
         .option("--preview", "Show what a live run of this exact version would do — every step that leaves Oxygen, the accounts it would use, and the minimum number of billable steps and credits it would cost — without running anything. AI and enrichment steps bill per row and can cost more than that floor. Needs no --mode: it always describes a live run.")
         .option("--include-bundle", "Include durable recipe bundles in JSON output.")
@@ -19184,6 +19408,7 @@ Run completion:
                     ...(maxCredits !== undefined ? { max_credits: maxCredits } : {}),
                     ...(options.approved ? { approved: true } : {}),
                     ...(revisionVersion !== undefined ? { revision_version: revisionVersion } : {}),
+                    ...(readOption(options.testScope) ? { test_scope: readOption(options.testScope) } : {}),
                     ...(readOption(options.node) ? { test_node_id: readOption(options.node) } : {}),
                     ...(options.preview ? { preview: true } : {}),
                 },
@@ -19746,6 +19971,7 @@ Full trigger schema: oxygen workflows schema --subject trigger --json
         .addCommand(new Command("get")
         .description("Hydrate one exact Oxygen skill entrypoint and its document index.")
         .argument("<skill-name>", "Exact name returned by skills search.")
+        .option("--file <path>", "Read one manifest-listed supporting file relative to the selected skill.")
         .option("--api-url <url>", "Oxygen app URL. Defaults to OXYGEN_API_URL or https://oxygen-agent.com.")
         .option("--json", "Print a JSON envelope.")
         .action(async (skillName, options) => {
@@ -19776,6 +20002,7 @@ Full trigger schema: oxygen workflows schema --subject trigger --json
     registerConnectorsCommands(program, handleAsyncAction);
     registerSettingsCommands(program, handleAsyncAction);
     registerCrmSupportFlags(program);
+    registerCustomerOperationCommands(program, handleAsyncAction);
     // After the register* helpers: help groups are assigned to the commands that
     // exist when this runs, and a family registered later fell into commander's
     // trailing default "Commands:" list (the 2026-09-30 blind agent read the first
@@ -21956,6 +22183,7 @@ function readFeedBindBody(table, options) {
         ...(readOption(options.intentId) ? { intent_id: readOption(options.intentId) } : {}),
         ...(readOption(options.inputShape) ? { input_shape: readOption(options.inputShape) } : {}),
         ...(readOption(options.routeId) ? { route_id: readOption(options.routeId) } : {}),
+        ...(readOption(options.registryVersion) ? { registry_version: readOption(options.registryVersion) } : {}),
         ...(options.sourcePrompt ? { source_prompt: readFileIfPresent(options.sourcePrompt) } : {}),
         ...(options.approved ? { approved: true } : {}),
     };
@@ -21980,11 +22208,13 @@ const FEED_BIND_PULL_ONLY_FLAGS = [
     ["intentId", "--intent-id"],
     ["inputShape", "--input-shape"],
     ["routeId", "--route-id"],
+    ["registryVersion", "--registry-version"],
     ["sourcePrompt", "--source-prompt"],
     ["approved", "--approved"],
 ];
 const FEED_BIND_PUSH_ONLY_FLAGS = [
     ["create", "--create"],
+    ["project", "--project"],
     ["itemsPath", "--items-path"],
     ["eventIdPath", "--event-id-path"],
     ["eventTypePath", "--event-type-path"],
@@ -22001,7 +22231,7 @@ const FEED_BIND_WEB_INTENT_SOURCES = ["rb2b"];
 const FEED_BIND_WEB_INTENT_REFUSED_FLAGS = [
     ["schemaJson", "--schema-json"],
     ...FEED_BIND_PULL_ONLY_FLAGS,
-    ...FEED_BIND_PUSH_ONLY_FLAGS.filter(([key]) => key !== "create"),
+    ...FEED_BIND_PUSH_ONLY_FLAGS.filter(([key]) => key !== "create" && key !== "project"),
 ];
 // Pull mode keeps the contract commander enforced when --kind/--tool-id/
 // --request-json were requiredOptions and <table> was required: same messages, same
@@ -22044,6 +22274,8 @@ function readFeedPushBindBody(table, options) {
     const rowSchema = parseJsonObject(readFileIfPresent(schemaSource));
     const tableRef = readOption(table);
     const create = readOption(options.create);
+    if (readOption(options.project) && !create)
+        throw new OxygenError("invalid_request", "--project requires --create; the existing table keeps its project.", { exitCode: 2 });
     if (tableRef && create) {
         throw new OxygenError("invalid_request", "Pass a table or --create <name>, not both.", { exitCode: 1 });
     }
@@ -22057,7 +22289,7 @@ function readFeedPushBindBody(table, options) {
     return {
         transport: "push",
         row_schema: rowSchema,
-        ...(tableRef ? { table: tableRef } : { create_table: { name: create } }),
+        ...(tableRef ? { table: tableRef } : { create_table: { name: create, ...(readOption(options.project) ? { project: readOption(options.project) } : {}) } }),
         ...(readOption(options.name) ? { name: readOption(options.name) } : {}),
         ...(readOption(options.upsertKey) ? { upsert_key: readOption(options.upsertKey) } : {}),
         ...(readOption(options.itemsPath) ? { items_path: readOption(options.itemsPath) } : {}),
@@ -22083,6 +22315,8 @@ function readFeedWebIntentBindBody(table, options) {
     }
     const tableRef = readOption(table);
     const create = readOption(options.create);
+    if (readOption(options.project) && !create)
+        throw new OxygenError("invalid_request", "--project requires --create; the existing table keeps its project.", { exitCode: 2 });
     if (tableRef && create) {
         throw new OxygenError("invalid_request", "Pass a table or --create <name>, not both.", { exitCode: 1 });
     }
@@ -22092,7 +22326,7 @@ function readFeedWebIntentBindBody(table, options) {
     return {
         transport: "push",
         feed_kind: source,
-        ...(tableRef ? { table: tableRef } : { create_table: { name: create } }),
+        ...(tableRef ? { table: tableRef } : { create_table: { name: create, ...(readOption(options.project) ? { project: readOption(options.project) } : {}) } }),
         ...(readOption(options.name) ? { name: readOption(options.name) } : {}),
         ...(readOption(options.upsertKey) ? { upsert_key: readOption(options.upsertKey) } : {}),
     };
@@ -22202,7 +22436,7 @@ function readSignalsSearchRunBody(options, promptArg) {
     const plan = options.planJson ? readSearchPlanJson(options.planJson) : null;
     // A post search needs no prompt: its --keywords and filters are the plan,
     // as they are for the free preview (the server names the table after them).
-    const postSearchFilters = !prompt && !plan && readOption(options.family) === "linkedin_posts"
+    const postSearchFilters = !prompt && !plan && (readOption(options.source) ?? readOption(options.family)) === "linkedin_posts"
         ? readSignalSearchFilters(options)
         : null;
     const postSearch = Array.isArray(postSearchFilters?.keywords) && postSearchFilters.keywords.length > 0;
@@ -22228,6 +22462,7 @@ function readSignalsSearchRunBody(options, promptArg) {
     }
     const filters = prompt ? typedFilters : postSearchFilters;
     return {
+        ...(readOption(options.source) ? { source: readOption(options.source) } : {}),
         ...(prompt ? { prompt } : {}),
         ...(plan ? { plan } : {}),
         ...(readOption(options.family) ? { family: readOption(options.family) } : {}),
@@ -23621,6 +23856,19 @@ function domainsBuyRerunCommand(domains, quoteId, options, data) {
     ];
     return `${resolveCliBinaryName()} domains buy ${domains.join(" ")} ${flags.join(" ")}`;
 }
+function readDnsDkimOption(value) {
+    let records;
+    try {
+        records = JSON.parse(value);
+    }
+    catch {
+        throw new OxygenError("invalid_request", "--dkim-json must be a JSON array of DKIM records.", { exitCode: 2 });
+    }
+    if (!Array.isArray(records) || records.some((record) => !isRecord(record) || !["TXT", "CNAME"].includes(String(record.type).toUpperCase()) || !readRecordString(record, "name") || !readRecordString(record, "content"))) {
+        throw new OxygenError("invalid_request", "Each --dkim-json record requires type TXT or CNAME, name, and content.", { exitCode: 2 });
+    }
+    return records;
+}
 function dnsPlanBody(options) {
     const provider = readOption(options.provider);
     if (!provider) {
@@ -23632,6 +23880,7 @@ function dnsPlanBody(options) {
         ...(readOption(options.dmarcRua) ? { dmarc_rua: readOption(options.dmarcRua) } : {}),
         ...(readOption(options.trackingHost) ? { tracking_host: readOption(options.trackingHost) } : {}),
         ...(options.autoDkim === false ? { auto_dkim: false } : {}),
+        ...(options.dkimJson !== undefined ? { dkim: readDnsDkimOption(options.dkimJson) } : {}),
     };
 }
 // Preview the cold-email DNS plan for a domain (free — no writes). Appends a
@@ -23641,7 +23890,12 @@ async function runDomainsDnsPlan(domain, options) {
     const planHash = readRecordString(data, "plan_hash");
     const provider = readOption(options.provider);
     return planHash && provider
-        ? { ...data, rerun_command: `${resolveCliBinaryName()} domains dns apply ${domain} --provider ${provider} --approved --plan ${planHash}` }
+        ? { ...data, rerun_command: [resolveCliBinaryName(), "domains dns apply", shellQuote(domain), "--provider", shellQuote(provider), "--approved --plan", shellQuote(planHash),
+                ...(options.dkimJson !== undefined ? ["--dkim-json", shellQuote(options.dkimJson)] : []),
+                ...(readOption(options.dmarcPolicy) ? ["--dmarc-policy", shellQuote(options.dmarcPolicy)] : []),
+                ...(readOption(options.dmarcRua) ? ["--dmarc-rua", shellQuote(options.dmarcRua)] : []),
+                ...(readOption(options.trackingHost) ? ["--tracking-host", shellQuote(options.trackingHost)] : []),
+                ...(options.autoDkim === false ? ["--no-auto-dkim"] : []),].join(" ") }
         : data;
 }
 // Apply an approved DNS plan (writes records). Requires --plan <hash> with
@@ -27931,12 +28185,26 @@ function buildFeedbackBody(options) {
         context: {
             cli_version: OXYGEN_VERSION,
             environment: collectFeedbackEnvironment(),
+            ...(readCsvOption(options.deepLinks).length ? { deep_links: readCsvOption(options.deepLinks) } : {}),
+            ...(readOption(options.operation) ? { operation: readOption(options.operation) } : {}),
+            ...(readOption(options.errorCode) ? { error_code: readOption(options.errorCode) } : {}),
+            ...(readCsvOption(options.runIds).length ? { run_ids: readCsvOption(options.runIds) } : {}),
+            ...(readCsvOption(options.tableIds).length ? { table_ids: readCsvOption(options.tableIds) } : {}),
+            ...(readOption(options.slackPermalink) ? { slack_permalink: readOption(options.slackPermalink) } : {}),
+            ...(readOption(options.slackChannelId) ? { slack_channel_id: readOption(options.slackChannelId) } : {}),
+            ...(readOption(options.customerWorkspace) ? { customer_workspace: readOption(options.customerWorkspace) } : {}),
         },
     };
     if (readOption(options.severity))
         body.severity = readOption(options.severity);
     const sessionId = readOption(options.sessionId);
     const file = readOption(options.file);
+    if (options.transcript !== false && options.transcriptText !== undefined) {
+        if (sessionId || file || options.includeTranscript) {
+            throw new OxygenError("invalid_input", "Choose --transcript-text or one local transcript option.", { exitCode: 1 });
+        }
+        body.transcript_text = readSelectedTranscriptExcerpt(options.transcriptText);
+    }
     const includeTranscript = options.transcript !== false &&
         (options.includeTranscript === true || Boolean(sessionId) || Boolean(file));
     if (includeTranscript) {
@@ -27970,7 +28238,13 @@ function buildSupportTicketBody(options) {
     const body = { subject: readOption(options.subject), body: message };
     const sessionId = readOption(options.sessionId);
     const file = readOption(options.transcriptFile);
-    if (options.includeTranscript || sessionId || file) {
+    if (options.transcript !== false && options.transcriptText !== undefined) {
+        if (options.includeTranscript || sessionId || file) {
+            throw new OxygenError("invalid_input", "Choose --transcript-text or one local transcript option.", { exitCode: 1 });
+        }
+        body.transcript_text = readSelectedTranscriptExcerpt(options.transcriptText);
+    }
+    if (options.transcript !== false && (options.includeTranscript || sessionId || file)) {
         try {
             const captured = captureCurrentTranscript({ sessionId, file });
             if (!captured) {
@@ -27993,6 +28267,8 @@ function buildSupportTicketBody(options) {
     if (readOption(options.source))
         body.source = readOption(options.source);
     const context = {};
+    if (readOption(options.cliVersion))
+        context.cli_version = readOption(options.cliVersion);
     if (readOption(options.operation))
         context.operation = readOption(options.operation);
     if (readOption(options.errorCode))
@@ -28016,6 +28292,13 @@ function buildSupportTicketBody(options) {
         body.context = context;
     return body;
 }
+function readSelectedTranscriptExcerpt(text) {
+    const excerpt = text.trim();
+    if (!excerpt || Buffer.byteLength(excerpt, "utf8") > 200_000) {
+        throw new OxygenError("invalid_transcript", "Transcript excerpt must be between 1 and 200,000 bytes.", { exitCode: 1 });
+    }
+    return redactTranscriptSecrets(excerpt);
+}
 function withSupportListQuery(path, options) {
     const params = new URLSearchParams();
     const status = readOption(options.status);
@@ -28452,7 +28735,10 @@ function buildContextAssetUpsertBody(options) {
 }
 function buildKnowledgePageUpsertBody(options) {
     const tags = readCsvOption(options.tags);
-    const expectedRevision = readPositiveInt(options.expectedRevision);
+    const expectedRevision = options.expectedRevision === undefined ? undefined : Number(options.expectedRevision);
+    if (expectedRevision !== undefined && (!options.expectedRevision?.trim() || !Number.isInteger(expectedRevision) || expectedRevision < 0)) {
+        throw new OxygenError("invalid_request", "--expected-revision must be a nonnegative integer.", { exitCode: 2 });
+    }
     const folder = readOption(options.folder);
     return {
         ...(folder ? { folderId: folder === "root" ? null : folder } : {}),
@@ -29449,6 +29735,8 @@ function readSequenceSettings(options) {
     // A visible footer mutates outbound copy, so it is opt-in and tri-state:
     // absent leaves the stored value alone; either explicit flag persists the
     // chosen boolean. Missing/false is interpreted as OFF by the dispatcher.
+    if (options.autoOptimize !== undefined)
+        settings.auto_optimize = options.autoOptimize;
     if (options.bounceProtection !== undefined)
         settings.bounce_protection = JSON.parse(options.bounceProtection);
     if (options.includeUnsubscribeHeaders !== undefined)
@@ -29509,7 +29797,7 @@ function readSequenceSettings(options) {
     // Sender profiles (--sender-profiles id1,id2): the sequence sends from these
     // unified identities. The server resolves them into senderAccountIds + mailbox_ids.
     const senderProfileIds = readCsvOption(options.senderProfiles);
-    if (senderProfileIds.length > 0)
+    if (options.senderProfiles !== undefined)
         settings.sender_profile_ids = senderProfileIds;
     return Object.keys(settings).length > 0 ? settings : undefined;
 }
@@ -29596,6 +29884,14 @@ catch (error) {
         // envelope; agents parse stdout and branch on the exit code, and the exit
         // table classes a usage error as 2 in every mode.
         const usage = commanderUsageFailure(program, cliArgs, error, hints[0] ?? null);
+        if (usage?.envelope.meta.command === "columns rename" &&
+            usage.envelope.error.code === "missing_required_option" &&
+            isRecord(usage.envelope.error.details) &&
+            usage.envelope.error.details.option === "--key") {
+            const hint = `Hint: --key <new-key> is required for \`${program.name()} columns rename <table> <column> --key <new-key>\`. To change only the display label, run \`${program.name()} columns update <table> <column> --label <label>\`.`;
+            writeHint(hint);
+            usage.envelope.error.details.next_step = hint.replace(/^Hint:\s*/, "");
+        }
         if (usage && argvRequestsJson(cliArgs))
             writeJson(usage.envelope);
         process.exitCode = usage?.exitCode ?? error.exitCode;