@oxygen-agent/cli 1.1011.405 → 1.1011.446

package/node_modules/@oxygen/shared/dist/capability-discovery.js

@@ -49,7 +49,7 @@ export const OXYGEN_CAPABILITY_ROUTES = [
         notFor: "Executing GTM work or loading full manifests and schemas before a capability is selected.",
         execution: "Search by outcome, choose the owner, then hydrate one exact command, MCP schema, provider descriptor, or skill. For instance discovery, read the map and then the primitive that owns the row.",
         posture: "read_only",
-        gatewayTools: ["oxygen_capabilities_search", "oxygen_tools_search", "oxygen_recipes_list", "oxygen_workspace_map"],
+        gatewayTools: ["oxygen_capabilities_search", "oxygen_skills_get", "oxygen_tools_search", "oxygen_recipes_list", "oxygen_workspace_map"],
         gatewayCommands: ["capabilities search", "commands search", "skills search", "tools search", "recipes list", "workspace map"],
         skills: ["oxygen-quickstart", "oxygen-gtm"],
         // `workspace` (the map) belongs here rather than beside `home`: capability
@@ -73,7 +73,7 @@ export const OXYGEN_CAPABILITY_ROUTES = [
         skills: ["oxygen-onboarding", "oxygen-quickstart", "oxygen-gtm"],
         // `activation` remains an exact legacy API family for saved clients, but it
         // has no recommended gateway and is not an intent term or first-touch path.
-        endpointSections: ["activation", "copilot", "home"],
+        endpointSections: ["activation", "copilot", "home", "onboarding"],
         // "next step" alone is deliberately absent: it is a phrase every primitive's
         // users say ("next step of this workflow run"), and a 6-point multi-word hit
         // would drag those queries here. The terms kept are the ones only a founder
@@ -84,15 +84,15 @@ export const OXYGEN_CAPABILITY_ROUTES = [
         id: "billing-and-budgets",
         layer: "Control",
         primitive: null,
-        owns: "Credits, plan state, usage receipts, subscriptions, and standing budget policies.",
+        owns: "Credits, customer credit prices, plan state, usage receipts, subscriptions, and standing budget policies.",
         notFor: "Authorizing a specific provider call or external write; that action still needs its own preview and approval.",
         execution: "Read billing state or set a hosted budget policy; exact action ceilings remain primitive-owned.",
         posture: "mixed",
-        gatewayTools: ["oxygen_billing_balance", "oxygen_billing_usage", "oxygen_billing_estimate", "oxygen_budget_list"],
-        gatewayCommands: ["billing balance", "billing usage", "billing estimate", "budget list", "billing invoices"],
+        gatewayTools: ["oxygen_billing_balance", "oxygen_billing_usage", "oxygen_billing_estimate", "oxygen_budget_list", "oxygen_customer_credit_prices"],
+        gatewayCommands: ["billing balance", "billing usage", "billing estimate", "budget list", "billing invoices", "pricing customer-credit-prices"],
         skills: ["oxygen-gtm", "oxygen-diagnostics"],
-        endpointSections: ["billing", "budget", "limits"],
-        intentTerms: ["billing", "credits", "credit balance", "usage", "spend", "cost", "cost estimate", "monthly cost", "budget", "subscription", "invoice", "vat", "vat number", "tax id", "cancel plan", "change plan", "upgrade", "downgrade"],
+        endpointSections: ["billing", "budget", "limits", "pricing"],
+        intentTerms: ["billing", "credits", "credit balance", "customer credit prices", "credit price catalog", "usage", "spend", "cost", "cost estimate", "monthly cost", "budget", "subscription", "invoice", "vat", "vat number", "tax id", "cancel plan", "change plan", "upgrade", "downgrade"],
     },
     {
         id: "support-and-feedback",
@@ -112,15 +112,15 @@ export const OXYGEN_CAPABILITY_ROUTES = [
         id: "platform-operations",
         layer: "Control",
         primitive: null,
-        owns: "Staff/admin diagnostics, worker queue health, tenant repair, and database operating surfaces.",
-        notFor: "Ordinary customer GTM work or product Observability over customer-visible runs.",
-        execution: "Use the authenticated hosted operational endpoints; production mutations and migrations keep their human gates.",
+        owns: "Workspace queue health, failed jobs, queue recovery, and workspace database status, attach, migrations, read-only SQL and retired cost-policy controls.",
+        notFor: "Customer run timelines or approvals (Observability), Table grid queries (Tables), and external Supabase imports (Integrations).",
+        execution: "Inspect the active workspace's queue and database status; repair stale queue state or provision its database through the native scoped controls.",
         posture: "mixed",
-        gatewayTools: ["oxygen_worker_queue_stats", "oxygen_worker_failures", "oxygen_observability_runs"],
-        gatewayCommands: ["worker queue-stats", "worker failures", "db status"],
+        gatewayTools: ["oxygen_worker_queue_stats", "oxygen_worker_failures", "oxygen_workspace_queue_repair", "oxygen_workspace_database_status", "oxygen_workspace_database_provision"],
+        gatewayCommands: ["worker queue-stats", "worker failures", "worker repair", "db status", "db provision"],
         skills: ["oxygen-diagnostics"],
-        endpointSections: ["admin", "db", "worker"],
-        intentTerms: ["admin", "worker", "queue", "tenant repair", "database", "db status", "stuck jobs", "operations"],
+        endpointSections: ["db", "worker"],
+        intentTerms: ["worker", "queue", "queue repair", "database", "database hosting", "db status", "stuck jobs", "operations"],
     },
     {
         // Control-layer interaction state, deliberately NOT a sixteenth primitive
@@ -256,11 +256,11 @@ export const OXYGEN_CAPABILITY_ROUTES = [
         notFor: "Net-new LinkedIn initiation, cadence, enrollment, sender rotation, or reply-stop programs; those belong to Sequences.",
         execution: "Preview and approve a direct email or existing-thread reply; every sent fact stays in the hosted Messages ledger.",
         posture: "external_write",
-        gatewayTools: ["oxygen_inbox_send", "oxygen_email_send", "oxygen_messages_query"],
-        gatewayCommands: ["inbox send", "email send", "messages query"],
+        gatewayTools: ["oxygen_inbox_send", "oxygen_email_send", "oxygen_messages_query", "oxygen_unibox_metadata"],
+        gatewayCommands: ["inbox send", "email send", "messages query", "unibox metadata"],
         skills: ["oxygen-unibox"],
-        endpointSections: ["email", "inbox", "message-reviews", "messages"],
-        intentTerms: ["message", "messages", "reply", "email", "inbox", "conversation", "thread", "direct email", "draft reply", "one off"],
+        endpointSections: ["email", "inbox", "message-reviews", "messages", "unibox"],
+        intentTerms: ["message", "messages", "reply", "email", "inbox", "unibox", "inbox metadata", "conversation", "thread", "direct email", "draft reply", "one off"],
     },
     {
         id: "posts",
@@ -646,7 +646,81 @@ export function inferPrimitiveRoute(query) {
         return null;
     return route;
 }
-export function serializeCapabilityRoute(route, surface = "cli") {
+/** Current hosted instruction audiences, shared by discovery and Agent snapshots. */
+export const OXYGEN_PRODUCT_SKILL_AUDIENCES = Object.freeze({
+    "oxygen-onboarding": "workspace",
+    "oxygen-gtm": "workspace",
+    "oxygen-recipes": "workspace",
+    "oxygen-playbooks": "workspace",
+    "oxygen-linkedin-marketing": "workspace",
+    "oxygen-agency-directory": "agency_partner",
+    "oxygen-collaboration": "workspace",
+    "oxygen-quickstart": "workspace",
+    "oxygen-workflow-authoring": "workspace",
+    "oxygen-knowledge": "workspace",
+    "oxygen-visual-design": "workspace",
+    "oxygen-unibox": "workspace",
+    "oxygen-email-infra": "workspace",
+    "oxygen-deliverability": "workspace",
+    "oxygen-sequencer": "workspace",
+    "oxygen-table-tidy": "workspace",
+    "oxygen-diagnostics": "workspace",
+    "oxygen-feedback": "workspace",
+    "oxygen-clay-migration": "workspace",
+    "oxygen-ugc": "workspace",
+});
+export function canReadProductSkillInstructions(name, entitlements) {
+    if (entitlements.authenticated !== true)
+        return false;
+    const audience = Object.hasOwn(OXYGEN_PRODUCT_SKILL_AUDIENCES, name)
+        ? OXYGEN_PRODUCT_SKILL_AUDIENCES[name]
+        : undefined;
+    return audience === "workspace" || (audience === "agency_partner" && entitlements.agencyPartner);
+}
+/** Identify hosted instruction bodies by native tool lineage, never by user prose. */
+export function readProductSkillInstructionResult(capabilityName, result) {
+    if (capabilityName !== "oxygen_skills_get")
+        return null;
+    const pending = [result];
+    for (let i = 0; i < pending.length && i < 24; i += 1) {
+        let value = pending[i];
+        if (typeof value === "string") {
+            try {
+                value = JSON.parse(value);
+            }
+            catch {
+                continue;
+            }
+        }
+        if (value === null || typeof value !== "object" || Array.isArray(value))
+            continue;
+        const envelope = value;
+        if (envelope.ok === false || envelope.isError === true || envelope.status === "error")
+            continue;
+        if (typeof envelope.content === "string") {
+            const name = typeof envelope.name === "string" ? envelope.name : "";
+            return { slug: Object.hasOwn(OXYGEN_PRODUCT_SKILL_AUDIENCES, name) ? name : null };
+        }
+        for (const key of ["result", "data", "structuredContent", "structured"]) {
+            if (envelope[key] !== undefined)
+                pending.push(envelope[key]);
+        }
+        if (Array.isArray(envelope.content)) {
+            for (const block of envelope.content) {
+                if (block && typeof block === "object" && block.type === "text" && typeof block.text === "string")
+                    pending.push(block.text);
+            }
+        }
+    }
+    return null;
+}
+/** Public action cards never advertise invite-only or unknown skill instructions. */
+export function isPublicCapabilitySkill(name) {
+    return Object.hasOwn(OXYGEN_PRODUCT_SKILL_AUDIENCES, name) && OXYGEN_PRODUCT_SKILL_AUDIENCES[name] === "workspace";
+}
+export function serializeCapabilityRoute(route, surfaceOrOptions = "cli", options = {}) {
+    const surface = typeof surfaceOrOptions === "string" ? surfaceOrOptions : "cli";
+    const visibleSkills = typeof surfaceOrOptions === "string" ? options.visibleSkills : surfaceOrOptions.visibleSkills;
     if (!route)
         return null;
     return {
@@ -657,7 +731,7 @@ export function serializeCapabilityRoute(route, surface = "cli") {
         not_for: route.card.notFor,
         execution: route.card.execution,
         posture: route.card.posture,
-        skills: route.card.skills,
+        skills: route.card.skills.filter((name) => isPublicCapabilitySkill(name) || visibleSkills?.includes(name)),
         endpoint_sections: route.card.endpointSections,
         recommended_commands: route.recommendedCommands,
         recommended_tools: route.recommendedTools,
@@ -682,6 +756,8 @@ export function serializeCapabilityRoute(route, surface = "cli") {
         hydrate: {
             cli: "oxygen commands get <exact-command> --json",
             mcp: "oxygen_capabilities_schema",
+            skill_cli: "oxygen skills get <selected-skill> --json",
+            skill_mcp: { tool: "oxygen_skills_get", arguments: { name: "<selected-skill>" } },
         },
     };
 }
@@ -774,23 +850,75 @@ function routeCardFor(card, query) {
     if (card.primitive === "publishing" && isUgcIntent(query))
         return { ...card, ...UGC_ROUTE_VIEW };
     if (card.id === "knowledge-graph" && isWorkspaceVoiceIntent(query))
-        return { ...card, execution: WORKSPACE_VOICE_EXECUTION };
+        card = { ...card, execution: WORKSPACE_VOICE_EXECUTION };
     if (card.primitive === "workflows" && isRecurringCompanyMonitoringIntent(query))
-        return {
+        card = {
             ...card,
             execution: "Workflows own recurring execution. Inspect oxygen_blueprints_list, describe and preflight before authoring; a matching Blueprint is not guaranteed. Retain canonical company identities and facts in Records, and time-stamped observations in Signals. Use oxygen_crm_objects_list and oxygen_signals_list to inspect those destinations. Do not apply or enable automation before the required approval and credit scope.",
         };
     if (card.primitive === "tables" && isTableCapacityReadIntent(query))
-        return {
+        card = {
             ...card,
             execution: "Read oxygen_limits_show for Tables capacity, largest_table and largest_table_rows. Use that returned table reference with oxygen_tables_query and a small limit to inspect sample rows; no enrichment run is needed.",
         };
     if (card.primitive === "tables" && isFunctionIntent(query))
-        return {
+        card = {
             ...card,
             execution: "List, describe or inspect Function runs without executing. Draft edits are isolated; publish requires the inspected draft hash and changes future invocations. Bind adds a caller column for free; columns run previews cost before a bounded approved run. MCP uses the mixed-effect oxygen_callables_manage through oxygen_capabilities_call, including its read operations.",
         };
-    return card;
+    if (card.primitive === "tables" && isPlainTableIntent(query))
+        card = {
+            ...card,
+            execution: "Create a workspace-private Table or inspect its schema and rows. Manual rows, column labels, visibility and member favorites cost 0 credits. Change only the display label with columns update (oxygen_columns_update); columns rename (oxygen_columns_rename) requires a new stable key. Favorite one table or folder with tables favorite (oxygen_tables_favorite), then read tables favorites (oxygen_tables_favorites). For tidy guidance, read oxygen-table-tidy with skills get (oxygen_skills_get); tables tidy-suggest (oxygen_tables_tidy_suggest) analyzes without changes. Read the owning schema, apply the requested scope, then describe or query the Table to verify it.",
+        };
+    const maintenance = card.primitive === "tables" ? tableMaintenanceRecommendation(query) : null;
+    if (maintenance)
+        card = { ...card, execution: maintenance.execution };
+    const read = card.primitive === "tables" ? tableReadRecommendation(query) : null;
+    if (read)
+        card = { ...card, execution: read.execution };
+    const database = card.id === "platform-operations" ? databaseRecommendation(query) : null;
+    if (database)
+        card = { ...card,
+            owns: "Active-workspace PostgreSQL hosting, attachment, migrations, read-only SQL and retired cost-policy status.",
+            notFor: "Provider credentials, enrichment, workspace billing, or staff-wide database operations.",
+            execution: database.execution,
+        };
+    const specializedSkill = preferredSkillForIntent(card, query);
+    return specializedSkill ? { ...card, skills: [specializedSkill, ...card.skills.filter((skill) => skill !== specializedSkill)] } : card;
+}
+/** Search surfaces share the selected skill owner; a general router is fallback. */
+function preferredSkillForIntent(card, query) {
+    if (card.id === "tables") {
+        if (/\bclay\b/.test(query) && /\b(import|export|migrat\w*|mov\w*)\b/.test(query))
+            return "oxygen-clay-migration";
+        if (isTableMaintenanceIntent(query))
+            return "oxygen-table-tidy";
+        if (/\b(stuck|failed|failure|trace|provenance|diagnos\w*)\b/.test(query))
+            return "oxygen-diagnostics";
+        if (isLinkedInProfileWatcherIntent(query))
+            return "oxygen-linkedin-marketing";
+    }
+    if (card.id === "billing-and-budgets" && /\b(explain|why|reduce|increas\w*|burn|spent)\b/.test(query))
+        return "oxygen-diagnostics";
+    if (card.id === "sending-infrastructure" && /\b(bounc\w*|health|placement|deliverability|spam)\b/.test(query))
+        return "oxygen-deliverability";
+    if (["signals", "linkedin-public-research"].includes(card.id) && /\blinkedin\b/.test(query))
+        return "oxygen-linkedin-marketing";
+    return null;
+}
+function isTableMaintenanceIntent(query) {
+    return /\b(tables?|columns?|folders?)\b/.test(query)
+        && !/\b(functions?|callables?|campaigns?|tags?|workflows?|agents?)\b/.test(query)
+        && (/\b(tidy|tidying|cleanup|clean up|reorder|formatting|duplicates?|favou?rites?|unfavou?rite|star|unstar)\b/.test(query)
+            || (/\bcolumns?\b/.test(query) && /\b(hide|hidden|rename|renaming|label|key)\b/.test(query)));
+}
+function isPlainTableIntent(query) {
+    if (isTableCapacityReadIntent(query))
+        return false;
+    return isTableMaintenanceIntent(query) || (/\btable\b/.test(query)
+        && /\b(create|manual|sample|private)\b/.test(query)
+        && !/\b(enrich\w*|classif\w*|research|prompt|sourc\w*|import|linkedin|function|callable)\b/.test(query));
 }
 function isFunctionIntent(query) {
     return /\b(functions?|callables?)\b/.test(query) && !/\bformula functions?\b/.test(query);
@@ -909,6 +1037,19 @@ function isSequenceScheduleIntent(query) {
     return /\bsend(?:ing)? (?:schedule|window)s?\b/.test(query)
         && !/\b(workflow|automation|automate|webhook|cron)\b/.test(query);
 }
+// How much campaign email one inbox may send: its daily campaign limit and the
+// ramp-up that climbs to it. The 2026-10-01 MCP baseline searched "mailbox
+// sending settings warmup ramp daily limit" and was routed to Workflows (bare
+// "daily" reads as a schedule); "ramp up a new inbox" went to Messages. LinkedIn,
+// WhatsApp and call limits keep their own owners, and provider warm-up without
+// campaign volume words keeps the card's warm-up path.
+function isMailboxVolumeIntent(query) {
+    if (/\b(linkedin|whatsapp|calls?|dial\w*|voice)\b/.test(query))
+        return false;
+    const inbox = /\b(mailbox\w*|inbox(?:es)?|email accounts?|sending accounts?|sender accounts?)\b/.test(query);
+    const volume = /\b(ramp\w*|daily (?:campaign )?(?:limit|cap)s?|sending limits?|send limits?|(?:emails?|sends?) (?:per|a) day|volume)\b/.test(query);
+    return inbox && volume;
+}
 // The unsubscribe option on a Sequence's emails, not the list of people who
 // opted out: a list, import or do-not-contact ask stays with suppressions.
 function isSequenceUnsubscribeIntent(query) {
@@ -1031,21 +1172,29 @@ function isConnectedAppSpendIntent(query) {
  * when the pages are wiki, LinkedIn, web, PDF or result pages.
  */
 function isWorkspacePagesIntent(query) {
-    // "Sales Nav" is LinkedIn Sales Navigator.
-    if (/\bsales ?nav/.test(query))
+    // A row, column or cell is content inside a page, and Sales Nav is LinkedIn.
+    if (/\bsales ?nav/.test(query) || /\b(rows?|columns?|cells?|filters?|duplicates?)\b/.test(query))
         return false;
-    if (/\b(side ?bars?|side ?nav\w*|side ?menus?|nav ?bars?|nav|navigation|left (?:menu|nav\w*|rail|panel)|main menu)\b/.test(query))
+    const navigation = /\b(side ?bars?|side ?nav\w*|side ?menus?|nav ?bars?|nav|navigation|left (?:menu|nav\w*|rail|panel)|main menu)\b/.test(query);
+    const visibility = /\b(hid(?:e|es|den|ing)|unhide|visib\w*|invisible)\b/.test(query);
+    const showInNavigation = /\bshow(?:s|n|ing)?\b/.test(query)
+        && /\b(?:in|on|from|to)\s+(?:the |our |my |this )?(?:side ?bar|side ?nav\w*|navigation|nav|left (?:menu|nav\w*|rail|panel))\b/.test(query);
+    // Explicit sidebar visibility may name the page's primitive: hide Knowledge
+    // from the sidebar or show Tables in navigation still means Customise.
+    if (navigation && (visibility || showInNavigation))
         return true;
-    // "Menu items" alone is as likely a restaurant's menu as the app's.
-    if (/\bmenu items?\b/.test(query) && /\b(hid(?:e|es|den|ing)|unhide|show(?:s|n|ing)?|visib\w*|customi[sz]\w*)\b/.test(query))
+    if (/\bmenu items?\b/.test(query) && /\b(hid(?:e|es|den|ing)|unhide|show(?:s|n|ing)?|visib\w*)\b/.test(query))
+        return true;
+    // Content and navigation within a primitive keep that primitive's owner.
+    // Check this before generic "customize pages" or a navigation noun.
+    if (/\b(wiki|knowledge|linkedin|compan(?:y|ies)|tables?|landing|web ?pages?|websites?|carousels?|pdfs?|paginat\w*|next page|per page|page size|results?|dashboards?)\b/.test(query))
+        return false;
+    if (navigation)
         return true;
     if (/\bcustomi[sz](?:e|es|ed|ing|ation)\b/.test(query) && /\b(pages?|menus?)\b/.test(query))
         return true;
-    // The web page's own name: Settings → Customise.
     if (/^customi[sz]e$|\bsettings?\W{1,5}customi[sz]e\b/.test(query))
         return true;
-    if (/\b(wiki|linkedin|compan(?:y|ies)|landing|web ?pages?|websites?|carousels?|pdfs?|paginat\w*|next page|per page|page size|results?|dashboards?|rows?|columns?)\b/.test(query))
-        return false;
     return /\bpages?\b/.test(query) && /\b(hid(?:e|es|den|ing)|unhide|show(?:s|n|ing)?|visib\w*|invisible)\b/.test(query);
 }
 /**
@@ -1073,7 +1222,119 @@ function isCompanySourcingIntent(query) {
     return /\b(companies|businesses|firms|company search|company sourcing)\b/.test(query)
         && /\b(search|plan|find|source|sourcing|discover|build|tam|prospect)\b/.test(query);
 }
+/** Reads of grid values/state are separate from executing or resolving actions. */
+function tableReadRecommendation(query) {
+    if (!/\btables?\b/.test(query) || isFunctionIntent(query) || isSecondPartyDecisionIntent(query)
+        || /\b(workflows?|agents?|actions?|items?|retry|resolve|effects?|imports?|webhooks?|feeds?|enrich\w*|create|add|insert|upsert|update|delete|remove|rename|hide|archive|columns? run)\b/.test(query)
+        || /\b(run|execute|start|cancel)\s+(?:(?:the|my|these)\s+)?(?:columns?|table|enrichment)\b/.test(query))
+        return null;
+    if (/\bcells?\b/.test(query) && /\b(history|changes?|provenance)\b/.test(query))
+        return {
+            tools: ["oxygen_tables_cell_history", "oxygen_tables_cell_inspect"], commands: ["cells history", "cells inspect"],
+            execution: "Read one cell's recorded value changes with cells history; cells inspect adds its provider attempt timeline. These reads do not run columns or resolve an uncertain external effect.",
+        };
+    if (/\bcells?\b/.test(query) && /\b(provider|attempts?|timeline)\b/.test(query))
+        return {
+            tools: ["oxygen_tables_cell_inspect", "oxygen_tables_cell_history"], commands: ["cells inspect", "cells history"],
+            execution: "Inspect one cell's final value and provider attempt timeline with cells inspect. Cell history reads recorded changes; neither executes a column or records a verified external outcome.",
+        };
+    if (isTableCapacityReadIntent(query) && !/\bgrid\b/.test(query))
+        return null;
+    if (!/\b(grid|preview|raw rows|fill rates?|next page|pagination|cursor)\b/.test(query)
+        && !(/\b(read|show|inspect|query)\b/.test(query) && /\brows?\b/.test(query)))
+        return null;
+    if (/\b(filtered?|filters?|sorts?|search|crm)\b/.test(query) && /\b(grid|counts?|registry)\b/.test(query))
+        return {
+            tools: ["oxygen_table_rows_page", "oxygen_tables_query", "oxygen_tables_preview"], commands: ["tables rows page", "tables query", "tables preview"],
+            execution: "Read the native rows page for grid filters/sorts/search and count modes. exact counts the matching rows; estimate uses reconciled registry metadata only for an unfiltered scope, otherwise counts exactly. registry never counts and returns no total for a narrowed or unavailable registry scope; skip returns no total. Follow nextCursor with the same table, filters, search, sort and CRM scope; do not substitute an offset. Canonical tables query reads raw values; format=grid refuses those filters/projections.",
+        };
+    if (/\b(preview|fill rates?|without row|summary only|summary_only)\b/.test(query))
+        return {
+            tools: ["oxygen_tables_preview", "oxygen_tables_query", "oxygen_table_fill_progress"], commands: ["tables preview", "tables query", "tables fill-progress"],
+            execution: "Use tables preview for compact rows, optional include_cell_states and whole-table fill stats; summary_only omits row JSON. rowCount is exact, rates may be sampled and summary.statsSampled labels that scope. Follow its nextCursor with the same options. tables query reads raw values or format=grid previews/state. tables fill-progress separately reports ingestion progress/failure; none of these runs columns.",
+        };
+    return {
+        tools: ["oxygen_tables_query", "oxygen_tables_preview", "oxygen_table_rows_page", "oxygen_table_fill_progress"], commands: ["tables query", "tables preview", "tables rows page", "tables fill-progress"],
+        execution: 'Read tables query raw values, or format="grid" for summarized cell previews and per-cell state. Grid defaults to 50 rows and caps at 200; pass grid.nextCursor as cursor with the same table/limit. Grid refuses row_id, fields, filters/filterTree, search, sorts, formula_values and nonzero offset; it is not a snapshot. Its first page uses the reconciled registry count when available, otherwise exact; continuation skips counting (null total), labeled rowCountMode. include_stats adds optional whole-table column stats/count; unavailable stats are omitted. include_fill only adds optional fill state when the first page is empty; later/nonempty pages omit it. tables preview supplies fill-rate summaries; tables fill-progress reads ingestion status. These reads do not execute columns.',
+    };
+}
+/** Native database work outranks generic workspace access and credit billing. */
+function databaseRecommendation(query) {
+    if (!/\b(databases?|postgres(?:ql)?|db|sql)\b/.test(query)
+        || /\b(tables?|grid|external|import|workflows?|agents?|enrich\w*|providers?|integrations?|oauth|byok|mailbox\w*|crm|hubspot|salesforce|supabase)\b/.test(query))
+        return null;
+    const actions = [
+        ["oxygen_workspace_database_status", "db status"], ["oxygen_database_cost_policy", "db cost-policy"],
+        ["oxygen_database_query", "db query"], ["oxygen_database_attach", "db attach"],
+        ["oxygen_database_migrate", "db migrate"], ["oxygen_workspace_database_provision", "db provision"],
+        ["oxygen_database_cost_policy_reconcile", "db reconcile-cost-policy"],
+    ];
+    const first = /\b(migrat\w*|rotate credentials)\b/.test(query) ? 4
+        : /\b(attach|connect|connection)\b/.test(query) ? 3
+            : /\b(query|sql|select|explain)\b/.test(query) ? 2
+                : /\b(provision\w*)\b/.test(query) ? 5
+                    : /\breconcile\b/.test(query) ? 6
+                        : /\b(cost policy|cost controls?|sleep|suspend|reconcile)\b/.test(query) && !/\bstatus\b/.test(query) ? 1 : 0;
+    const ordered = [actions[first], ...actions.filter((_, index) => index !== first)];
+    return {
+        tools: ordered.map(([tool]) => tool), commands: ordered.map(([, command]) => command),
+        execution: "Inspect db status and db cost-policy for the active workspace. Hosting is included; Neon cost controls are retired, and reconcile-cost-policy is a compatibility no-op, not PostgreSQL sleep control. db query accepts one read-only SELECT/WITH/EXPLAIN statement: request a small max_rows (hard cap 1000). Writes are refused; truncated labels the returned row window, and it has no continuation cursor. Attach (database_url), migrate (optional rotate_credentials) and provision are immediate native writes with no preview or approved field. They preserve workspace identity/access; restricted clients can read status/cost/query but cannot configure. Built-in approval policy is separate from these HTTP fields.",
+    };
+}
+/** Direct Table operations keep their native gateway ahead of general authoring.
+ * Explicit Workflow triggers, mailbox imports and CRM attachments retain their owners. */
+function tableMaintenanceRecommendation(query) {
+    if (isFunctionIntent(query) || isSecondPartyDecisionIntent(query)
+        || /\b(workflows?|agents?|campaigns?|tags?|mailbox\w*|crm|attachments?|chatgpt|connected apps?)\b/.test(query)
+        || (isTableMaintenanceIntent(query) && /\b(skills?|instructions?|guidance)\b/.test(query)))
+        return null;
+    const table = /\btables?\b/.test(query);
+    const result = (tools, commands, execution) => ({ tools, commands, execution });
+    if (/\b(favou?rites?|starred|star|unstar)\b/.test(query) && /\b(tables?|folders?)\b/.test(query)) {
+        const mutate = !/\bstar unstar\b/.test(query) && (/\b(unstar|unfavou?rite)\b/.test(query) || (/\b(favou?rite|star)\b/.test(query) && !/\b(show|list|read|see|favorites|favourites|star unstar)\b/.test(query)));
+        return result(mutate ? ["oxygen_tables_favorite", "oxygen_tables_favorites"] : ["oxygen_tables_favorites", "oxygen_tables_favorite"], mutate ? ["tables favorite", "tables favorites"] : ["tables favorites", "tables favorite"], "Read your member-specific Table/folder stars, then change exactly one table or folder with favorite=true or false. This costs 0 credits. Tool-catalog favorites are separate.");
+    }
+    if (table && /\b(webhooks?|inbound.*endpoint|push.*endpoint|endpoint.*(?:inbound|push))\b/.test(query)) {
+        if (/\bdeliver\w*\b/.test(query))
+            return result(["oxygen_table_webhook_deliveries", "oxygen_table_webhook_get"], ["tables webhook deliveries", "tables webhook get"], "Inspect this Table endpoint and its delivery ledger. A direct Table webhook lands rows; a Workflow webhook starts a published graph.");
+        if (/\b(change|edit|update|rotat\w*|pause|disable|clear)\b/.test(query) && !/\bcreate\b/.test(query))
+            return result(["oxygen_table_webhook_update", "oxygen_table_webhook_get"], ["tables webhook update", "tables webhook get"], "Inspect the endpoint, then update it by endpoint_id. auth_mode=secret rotates the secret and returns it once. auto_run is standing permission; delivery ceilings are explicit or plan-default. Preserve required authorization.");
+        if (/\b(create|add|new|inbound)\b/.test(query) && !/\b(inspect|show|list|read)\b/.test(query))
+            return result(["oxygen_table_webhook_create", "oxygen_table_webhooks_list"], ["tables webhook create", "tables webhook list"], "Create a direct inbound Table endpoint to insert or upsert rows. Inspect configured columns before setting auto_run: it is standing permission, with explicit or plan-default delivery ceilings. Workflows own graph triggers.");
+        return result(["oxygen_table_webhooks_list", "oxygen_table_webhook_get", "oxygen_table_webhook_deliveries"], ["tables webhook list", "tables webhook get", "tables webhook deliveries"], "Inspect direct Table endpoints and their deliveries. Use oxygen_table_webhook_create/update for changes; auth_mode=secret rotates protection. Workflows own graph triggers.");
+    }
+    if (table && /\bfeeds?\b/.test(query)) {
+        return /\b(bind|attach|create|new)\b/.test(query)
+            ? result(["oxygen_feeds_bind", "oxygen_feeds_list"], ["feeds bind", "feeds list"], "Bind the native Table feed: a declared-schema push source or scheduled provider pull. Inspect source, cadence and standing credit scope first; a pull feed is not an inbound webhook endpoint.")
+            : result(["oxygen_feeds_list", "oxygen_feeds_get"], ["feeds list", "feeds get"], "Inspect the native Table feed's source, cadence, caps and state. Pull feeds refill Tables on their own schedule. The current MCP catalog has no general cadence-update tool; do not substitute a Workflow or generic HTTP call.");
+    }
+    const file = /\b(csv|jsonl?|xlsx|excel|spreadsheet|staged|uploaded|file)\b/.test(query)
+        || /\b(?:pending|stuck|abandoned) imports?\b|\bimports?\b.{0,30}\b(pending|stuck|recover\w*)\b/.test(query);
+    if (file && /\b(import\w*|ingestion|upload\w*|preview|columns|sample|chunks)\b/.test(query)) {
+        if (/\b(pending|leased|failed|recover|chunks)\b/.test(query))
+            return result(/\b(chunks|items)\b/.test(query) ? ["oxygen_table_ingestions_items", "oxygen_table_ingestions_get"] : ["oxygen_table_ingestions_get", "oxygen_table_ingestions_items"], ["table-ingestions get", "table-ingestions items"], "Inspect the durable file ingestion and its chunks. Fix the cause before retry-failed; pending or leased chunks are not verified external outcomes. recover_pending polls existing BetterContact requests, not file imports.");
+        if (/\b(url|https?)\b/.test(query))
+            return result(["oxygen_tables_import_url"], ["tables import"], "Use the native public-file URL preview/import tool through the call gateway even for preview. Importing into an existing Table can fire its standing import auto-run; preview and new unarmed targets do not authorize later paid or external actions.");
+        if (/\b(preview|inspect|columns|sample|sheet)\b/.test(query))
+            return result(["oxygen_tables_import_preview", "oxygen_tables_import_staged"], ["tables import-preview", "tables import-staged"], "Inspect the owned staged file's worksheet, complete columns and sample before importing. Keep the selected sheet/mapping intact. Import into an existing Table can fire its standing import auto-run; preview grants no spend authority.");
+        if (/\b(prepare|upload)\b/.test(query))
+            return result(["oxygen_tables_import_upload", "oxygen_tables_import_preview", "oxygen_tables_import_staged"], ["tables import-upload", "tables import-preview", "tables import-staged"], "Prepare an organization-owned upload, transfer bytes to the returned presigned URL, then inspect and import that storage key. Preparing the upload creates no Table/run. Public URL imports use oxygen_tables_import_url.");
+        return result(["oxygen_tables_import_staged", "oxygen_tables_import_preview"], ["tables import-staged", "tables import-preview"], "Import the inspected owned staged file with its selected worksheet/mapping. Existing targets can fire standing import auto-run; a new target has no pre-existing armed columns. Preserve exact authorization and downstream credit/effect guards.");
+    }
+    if (table && /\b(actions?|cells?|items?|runs?)\b/.test(query)) {
+        if (/\b(verified|confirmed)\b/.test(query) && /\b(record|resolve)\b/.test(query) && !/\b(inspect|list|show|read)\b/.test(query))
+            return /\bcells?\b/.test(query)
+                ? result(["oxygen_table_cells_resolve", "oxygen_table_runs_effect_unknown"], ["cells resolve", "table-runs effect-unknown"], "After verifying the external destination, record applied or not_applied by Table cell coordinates. This records an outcome without repeating the effect; retry remains a separate guarded action.")
+                : result(["oxygen_table_action_item_resolve", "oxygen_table_runs_effect_unknown"], ["table-actions resolve", "table-runs effect-unknown"], "After verifying the external destination, record applied or not_applied by action item_id. This records an outcome without repeating the effect; retry remains a separate guarded action.");
+        if (/\b(effect.*unknown|uncertain|verified outcome|blocked.*resolve)\b/.test(query))
+            return result(["oxygen_table_runs_effect_unknown", "oxygen_table_runs_get", "oxygen_table_runs_items"], ["table-runs effect-unknown", "table-runs get", "table-runs items"], "Inspect exact effect-unknown items and verify the external destination. Only then record a verdict with oxygen_table_action_item_resolve by item_id or oxygen_table_cells_resolve by coordinates. Pending/failed items are not proof; retry is separate.");
+        return result(["oxygen_table_action_runs_list", "oxygen_table_runs_get", "oxygen_table_runs_items"], ["table-runs list", "table-runs get", "table-runs items"], "Find the Table's durable action run, then inspect its status and items. Pending, leased and failed are distinct from effect-unknown; do not record a verified verdict or retry an external effect without evidence.");
+    }
+    return null;
+}
 function explicitCapabilityIntent(query) {
+    if (databaseRecommendation(query))
+        return ROUTE_BY_ID.get("platform-operations") ?? null;
     if (isConnectedAppsIntent(query) || isConnectedAppEventsIntent(query) || isConnectedAppSpendIntent(query)) {
         return ROUTE_BY_ID.get("workspace-access") ?? null;
     }
@@ -1082,6 +1343,16 @@ function explicitCapabilityIntent(query) {
     if (isWorkspacePagesIntent(query) || isWorkspaceSettingsIntent(query)) {
         return ROUTE_BY_ID.get("workspace-access") ?? null;
     }
+    if (/\btables?\b/.test(query) && isSecondPartyDecisionIntent(query))
+        return ROUTE_BY_ID.get("collaboration") ?? null;
+    if (tableReadRecommendation(query) || tableMaintenanceRecommendation(query))
+        return ROUTE_BY_PRIMITIVE.get("tables") ?? null;
+    if (/\btables?\b/.test(query) && /\b(navigation|nav|paging|pagination)\b/.test(query)) {
+        return ROUTE_BY_PRIMITIVE.get("tables") ?? null;
+    }
+    if (/\b(unibox|inbox)\b/.test(query) && /\b(metadata|taxonomy|filters)\b/.test(query)) {
+        return ROUTE_BY_ID.get("messages") ?? null;
+    }
     if (/\b(infographic|graphic designer|render html|carousel pages|visual design|gtm flow image)\b/.test(query))
         return ROUTE_BY_ID.get("visual-rendering") ?? null;
     if (isUgcIntent(query))
@@ -1148,6 +1419,9 @@ function explicitCapabilityIntent(query) {
     // hid every Sequences command.
     if (isSequenceScheduleIntent(query) || isSequenceUnsubscribeIntent(query))
         return ROUTE_BY_PRIMITIVE.get("sequences") ?? null;
+    if (isMailboxVolumeIntent(query) && !/\b(workflow|automation|automate|webhook|cron)\b/.test(query)) {
+        return ROUTE_BY_ID.get("sending-infrastructure") ?? null;
+    }
     if (isHostedWorkflowIntent(query))
         return ROUTE_BY_PRIMITIVE.get("workflows") ?? null;
     if (isCompanySourcingIntent(query))
@@ -1229,6 +1503,8 @@ function explicitCapabilityIntent(query) {
     // and the "label" wording fell to the Tags card below.
     if (isRowClassificationIntent(query))
         return ROUTE_BY_PRIMITIVE.get("tables") ?? null;
+    if (isTableMaintenanceIntent(query))
+        return ROUTE_BY_PRIMITIVE.get("tables") ?? null;
     if (/\b(tag|tags|label|labels)\b/.test(query))
         return ROUTE_BY_PRIMITIVE.get("tags") ?? null;
     if (/\b(disposable|working)\b.{0,30}\b(list|dataset|table)\b|\b(prospect|sourcing) table\b/.test(query)) {
@@ -1347,6 +1623,15 @@ function isPublishingPostIntent(query) {
         && !(/\b(find|search|scrape|research)\b/.test(query) && /\b(about|mention|containing)\b/.test(query));
 }
 function recommendationsFor(card, query) {
+    const database = card.id === "platform-operations" ? databaseRecommendation(query) : null;
+    if (database)
+        return database;
+    if (card.id === "billing-and-budgets" && /\b(credit prices|credit price catalog|customer credit)\b/.test(query)) {
+        return { tools: ["oxygen_customer_credit_prices"], commands: ["pricing customer-credit-prices"] };
+    }
+    if (card.id === "messages" && /\b(unibox|inbox)\b/.test(query) && /\b(metadata|taxonomy|filters|accounts|tags)\b/.test(query)) {
+        return { tools: ["oxygen_unibox_metadata"], commands: ["unibox metadata"] };
+    }
     // A program's lifecycle and a creator's voice are UGC work the Publishing card
     // also claims ("archive program", "creator voice"); before these they got the
     // post tools (UGC E2E pass, 2026-09-29).
@@ -1508,6 +1793,12 @@ function recommendationsFor(card, query) {
             ],
         };
     }
+    if (card.id === "sending-infrastructure" && isMailboxVolumeIntent(query)) {
+        return {
+            tools: ["oxygen_mailboxes_set_ramp", "oxygen_mailboxes_set_cap", "oxygen_mailboxes_get"],
+            commands: ["mailboxes ramp set", "mailboxes cap set", "mailboxes get"],
+        };
+    }
     if (card.id === "sending-infrastructure" && isMailboxOnboardingIntent(query)) {
         return {
             tools: [
@@ -1568,6 +1859,12 @@ function recommendationsFor(card, query) {
         };
     }
     if (card.primitive === "tables") {
+        const read = tableReadRecommendation(query);
+        if (read)
+            return read;
+        const maintenance = tableMaintenanceRecommendation(query);
+        if (maintenance)
+            return maintenance;
         if (isTableCapacityReadIntent(query))
             return {
                 tools: ["oxygen_limits_show", "oxygen_tables_query", "oxygen_tables_describe"],
@@ -1618,6 +1915,33 @@ function recommendationsFor(card, query) {
                 exactMcpCall: { ...CAPABILITY_ROUTE_MCP_CALLS.functionsList(), ...(/\b(favorites|favourites)\b/.test(query) ? { arguments: { operation: "list_functions", filter: "favorites" } } : {}) },
             };
         }
+        if (isTableMaintenanceIntent(query)) {
+            if (/\b(skills?|instructions?|guidance)\b/.test(query))
+                return {
+                    tools: ["oxygen_skills_get", "oxygen_tables_tidy_suggest", "oxygen_tables_describe"],
+                    commands: ["skills get", "tables tidy-suggest", "tables describe"],
+                    exactCommand: "oxygen skills get oxygen-table-tidy --json",
+                    exactMcpCall: { tool: "oxygen_skills_get", arguments: { name: "oxygen-table-tidy" } },
+                };
+            if (/\b(favou?rites?|unfavou?rite|star|unstar)\b/.test(query)) {
+                const read = /\b(list|read|show|see)\b/.test(query);
+                return {
+                    tools: read ? ["oxygen_tables_favorites", "oxygen_tables_favorite"] : ["oxygen_tables_favorite", "oxygen_tables_favorites"],
+                    commands: read ? ["tables favorites", "tables favorite"] : ["tables favorite", "tables favorites"],
+                };
+            }
+            if (/\bcolumns?\b/.test(query) && /\b(rename|renaming|label|key)\b/.test(query)) {
+                const key = /\b(stable key|column key|snake case|rename key)\b/.test(query);
+                return {
+                    tools: [key ? "oxygen_columns_rename" : "oxygen_columns_update", "oxygen_tables_describe"],
+                    commands: [key ? "columns rename" : "columns update", "tables describe"],
+                };
+            }
+            return {
+                tools: ["oxygen_tables_tidy_suggest", "oxygen_columns_update", "oxygen_tables_describe", "oxygen_skills_get"],
+                commands: ["tables tidy-suggest", "columns update", "tables describe", "skills get"],
+            };
+        }
         if (isLinkedInProfileWatcherIntent(query)) {
             return {
                 tools: ["oxygen_tables_watcher"],
@@ -2004,10 +2328,11 @@ function isSecondPartyDecisionIntent(query) {
     const decisionLanguage = /\b(sign ?off|signoff|approval request|request approval|approval gate|go no go)\b/.test(query);
     const clientDecision = /\bclient\b.{0,20}\b(approv\w*|sign ?off|review|decide|decision|login|role)\b/.test(query)
         || /\b(approv\w*|sign ?off|decision)\b.{0,20}\bfrom the client\b/.test(query);
+    const teammateDecision = /\b(teammate|colleague|workspace member)\b.{0,25}\b(approv\w*|sign ?off|review|decid\w*)\b/.test(query);
     const internalThread = /\b(comment|comments|thread)\b/.test(query)
         && /\b(internal|client|teammate|workspace member|discuss)\b/.test(query)
         && !/\b(linkedin|public|published|post|posts|publishing)\b/.test(query);
-    return decisionLanguage || clientDecision || internalThread;
+    return decisionLanguage || clientDecision || teammateDecision || internalThread;
 }
 /** An X (Twitter) post format: thread, poll, alt text, who-can-reply, quote, photo tags. */
 function isXPostFormatIntent(query) {

package/node_modules/@oxygen/shared/dist/connection-approval.d.ts

@@ -0,0 +1,2 @@
+/** Shared refusal discriminator; safe to import without the plan/pricing catalog. */
+export declare const CONNECTION_CEILING_ABOVE_DEFAULT_APPROVAL_KIND = "connection_ceiling_above_default";

package/node_modules/@oxygen/shared/dist/connection-approval.js

@@ -0,0 +1,2 @@
+/** Shared refusal discriminator; safe to import without the plan/pricing catalog. */
+export const CONNECTION_CEILING_ABOVE_DEFAULT_APPROVAL_KIND = "connection_ceiling_above_default";

package/node_modules/@oxygen/shared/dist/contracts/browser-operations.d.ts

@@ -0,0 +1,2 @@
+import type { OperationSpec } from "./operations.js";
+export declare const BROWSER_OPERATIONS: readonly OperationSpec[];