@oxygen-agent/cli 1.1011.493 → 1.1011.607

package/node_modules/@oxygen/shared/dist/capability-discovery.js

@@ -22,9 +22,9 @@ export const OXYGEN_CAPABILITY_ROUTES = [
         id: "workspace-access",
         layer: "Control",
         primitive: null,
-        owns: "Authentication, CLI identities, API keys, sessions, organizations, active-workspace selection, connected apps (ChatGPT, Claude, Codex…) with the default workspace each one works in and the OXYGEN events each one is subscribed to, and which web-app sidebar pages the workspace hides for every member (Settings → Customise).",
+        owns: "Authentication, CLI identities, API keys, sessions, organizations, active-workspace selection, connected apps (ChatGPT, Claude, Codex…) with the default workspace each one works in and the OXYGEN events each one is subscribed to, and which web-app sidebar pages each person hides from their own sidebar in a workspace (Settings → Customise).",
         notFor: "Workspace GTM data, provider credentials, execution inside a primitive, or access control: a hidden sidebar page stays reachable by URL.",
-        execution: "Resolve identity and select the hosted workspace before operating its primitives. Each app connected with OAuth keeps its own default workspace: `connectors list` shows them and `connectors set` changes one app only; orgs select changes only the app or CLI that calls it. What OXYGEN sends an app (its event subscriptions, such as ChatGPT watching for classified replies, and every delivery with its outcome, never content): `connectors events get <app>`; `connectors events revoke <app> --subscription <id|all>` stops them for good. While an app holds event subscriptions, its paid calls are capped by its rolling 24-hour credit ceiling: the plan default, or `connectors set <app> --credit-ceiling <credits>` (above the default also needs --approve-above-default); `connectors get <app>` shows the ceiling and what it spent. Sidebar pages (Settings → Customise): `settings pages list` (oxygen_settings_pages_get) shows each page and whether it is hidden; an admin or owner hides or shows pages for everyone with `settings pages set --hide <pages>`, `--show <pages>` or `--show-all` (oxygen_settings_pages_update). Nothing is deleted.",
+        execution: "Resolve identity and select the hosted workspace before operating its primitives. Each app connected with OAuth keeps its own default workspace: `connectors list` shows them and `connectors set` changes one app only; orgs select changes only the app or CLI that calls it. What OXYGEN sends an app (its event subscriptions, such as ChatGPT watching for classified replies, and every delivery with its outcome, never content): `connectors events get <app>`; `connectors events revoke <app> --subscription <id|all>` stops them for good. While an app holds event subscriptions, its paid calls are capped by its rolling 24-hour credit ceiling: the plan default, or `connectors set <app> --credit-ceiling <credits>` (above the default also needs --approve-above-default); `connectors get <app>` shows the ceiling and what it spent. Sidebar pages (Settings → Customise) are per person and per workspace: `settings pages list` (oxygen_settings_pages_get) shows each page and whether you hid it; `settings pages set --hide <pages>`, `--show <pages>` or `--show-all` (oxygen_settings_pages_update) changes only your own sidebar, never a teammate's. Nothing is deleted.",
         posture: "mixed",
         gatewayTools: [
             "oxygen_whoami",
@@ -92,7 +92,7 @@ export const OXYGEN_CAPABILITY_ROUTES = [
         gatewayCommands: ["billing balance", "billing usage", "billing estimate", "budget list", "billing invoices", "pricing customer-credit-prices"],
         skills: ["oxygen-gtm", "oxygen-diagnostics"],
         endpointSections: ["billing", "budget", "limits", "pricing"],
-        intentTerms: ["billing", "credits", "credit balance", "customer credit prices", "credit price catalog", "usage", "spend", "cost", "cost estimate", "monthly cost", "budget", "subscription", "invoice", "vat", "vat number", "tax id", "cancel plan", "change plan", "upgrade", "downgrade"],
+        intentTerms: ["billing", "credits", "credit balance", "customer credit prices", "credit price catalog", "usage", "spend", "cost", "cost estimate", "monthly cost", "budget", "subscription", "invoice", "vat", "vat number", "tax id", "cancel plan", "change plan", "upgrade", "downgrade", "subscription plans", "annual plan", "yearly commitment", "yearly saving", "annual discount"],
     },
     {
         id: "support-and-feedback",
@@ -246,21 +246,21 @@ export const OXYGEN_CAPABILITY_ROUTES = [
         // `capabilities search "founders of a company"` and got `route: null` with a
         // generic sourcing pointer, then hand-wrote four research prompts for
         // questions the template catalog now answers by key.
-        intentTerms: ["table", "spreadsheet", "rows", "column", "columns", "dataset", "csv", "import", "hubspot list", "hubspot segment", "pipedrive filter", "pipedrive", "saved list", "saved segment", "saved filter", "crm segment", "list import", "segment import", "filter import", "import a segment", "import a list", "import a filter", "enrich", "enrichment", "waterfall", "score", "formula", "ai column", "lookup", "link", "link tables", "join", "connect", "relate", "relationship", "function", "functions", "reusable function", "function draft", "function version", "callable", "column template", "skill set", "grad school", "podcast appearance", "keynote", "github profile", "job fit", "founders", "parent company", "subsidiaries", "cloud provider", "company research", "research question", "research column", "web research", "template catalog", "ready-made", "offers demos", "naics", "cost per row", "price per row", "what can i enrich", "enrichment cost", "credits per row"],
+        intentTerms: ["table", "spreadsheet", "rows", "column", "columns", "dataset", "csv", "import", "hubspot list", "hubspot segment", "pipedrive filter", "pipedrive", "saved list", "saved segment", "saved filter", "crm segment", "list import", "segment import", "filter import", "import a segment", "import a list", "import a filter", "enrich", "enrichment", "waterfall", "score", "formula", "ai column", "lookup", "link", "link tables", "join", "connect", "relate", "relationship", "function", "functions", "reusable function", "function draft", "function version", "callable", "column template", "skill set", "grad school", "podcast appearance", "keynote", "github profile", "job fit", "founders", "parent company", "subsidiaries", "cloud provider", "company research", "research question", "research column", "web research", "template catalog", "ready-made", "offers demos", "naics", "cost per row", "price per row", "what can i enrich", "enrichment cost", "credits per row", "flatten", "explode", "json array", "array cell"],
     },
     {
         id: "messages",
         layer: "Data",
         primitive: "messages",
-        owns: "One-to-one message facts, conversations, direct email, inbox drafts, and replies in existing channel threads.",
+        owns: "One-to-one message facts, imported mailbox history, conversations, direct email, inbox drafts, and replies in existing channel threads.",
         notFor: "Net-new LinkedIn initiation, cadence, enrollment, sender rotation, or reply-stop programs; those belong to Sequences.",
-        execution: "Preview and approve a direct email or existing-thread reply; every sent fact stays in the hosted Messages ledger.",
+        execution: "Read conversations and imported email summaries in Unibox. Inspect mailboxes sync for Gmail/Microsoft 365 history and included CRM analysis progress. Preview and approve direct email or existing-thread replies; every sent fact stays in Messages.",
         posture: "external_write",
         gatewayTools: ["oxygen_inbox_send", "oxygen_email_send", "oxygen_messages_query", "oxygen_unibox_metadata"],
         gatewayCommands: ["inbox send", "email send", "messages query", "unibox metadata"],
         skills: ["oxygen-unibox"],
         endpointSections: ["email", "inbox", "message-reviews", "messages", "unibox"],
-        intentTerms: ["message", "messages", "reply", "email", "inbox", "unibox", "inbox metadata", "conversation", "thread", "direct email", "draft reply", "one off"],
+        intentTerms: ["message", "messages", "reply", "email", "inbox", "unibox", "inbox metadata", "conversation", "thread", "direct email", "draft reply", "one off", "email history", "mail history", "analyze emails", "email crm"],
     },
     {
         id: "posts",
@@ -476,17 +476,23 @@ export const OXYGEN_CAPABILITY_ROUTES = [
         id: "sending-infrastructure",
         layer: "External",
         primitive: null,
-        owns: "Sending domains, managed/BYOK mailboxes, warmup, deliverability, egress IPs, and infrastructure health beneath Sequences.",
+        owns: "Sending domains, managed/BYOK mailboxes, customer Gmail/Microsoft 365 connections, mail history controls, warmup, deliverability, egress IPs, and infrastructure health.",
         notFor: "Writing campaign copy or sending outside a Sequence/Message owner.",
-        execution: "Inspect or provision hosted sending infrastructure with explicit recurring-cost and external-write approval.",
+        execution: "Inspect or provision hosted sending infrastructure with explicit recurring-cost and external-write approval. Connect existing Gmail or Microsoft 365/Exchange Online mailboxes using mailboxes connect-oauth --vendor composio where enabled; 100 credits/month per mailbox includes mail history and CRM analysis. Read progress with oxygen_mailboxes_sync_status (CLI: mailboxes sync without --action); control it with oxygen_mailboxes_sync. Read oxygen-email-infra for history coverage and CRM rules.",
         posture: "mixed",
-        gatewayTools: ["oxygen_mailboxes_list", "oxygen_domains_list", "oxygen_mailboxes_health"],
-        gatewayCommands: ["mailboxes list", "domains list", "mailboxes health"],
+        gatewayTools: ["oxygen_mailboxes_list", "oxygen_mailboxes_connect_oauth", "oxygen_mailboxes_sync_status", "oxygen_mailboxes_sync", "oxygen_domains_list", "oxygen_mailboxes_health"],
+        gatewayCommands: ["mailboxes list", "mailboxes connect-oauth", "mailboxes sync", "domains list", "mailboxes health"],
         skills: ["oxygen-email-infra", "oxygen-deliverability", "oxygen-sequencer"],
         endpointSections: ["deliverability", "domains", "egress", "mailboxes", "managed-inboxes"],
         intentTerms: [
             "mailbox",
             "mailboxes",
+            "gmail",
+            "microsoft 365",
+            "exchange online",
+            "outlook",
+            "connect inbox",
+            "mailbox history",
             "sending domain",
             "dns",
             "warmup",
@@ -563,6 +569,33 @@ export function inferCapabilityRoute(query) {
     const normalized = normalizeIntent(query);
     if (!normalized)
         return null;
+    // A complete audience play starts from its Recipe and the shared audience
+    // guide; onboarding consults on open-ended goals and never routes this ask.
+    // Its source nouns otherwise select a one-shot post search or follower order.
+    if (isLinkedInAudienceCampaignIntent(query)) {
+        const recipes = ROUTE_BY_ID.get("recipes");
+        const slug = query.trim().toLowerCase();
+        const namedPlay = AUDIENCE_PLAY_SLUGS.includes(slug) ? slug : null;
+        if (recipes)
+            return {
+                card: {
+                    ...recipes,
+                    execution: "Pick the matching audience Recipe (own, competitor, creator or keyword post engagers, company-page followers or own followers), resolve current company/ICP context, then read that Recipe and oxygen-recipes file guides/audience-campaign.md. Preserve the exact source, attribution, qualification rule/version and object IDs. Prepare a bounded native audience campaign for email, LinkedIn DM/connection requests or WhatsApp. Keep capture, standing qualification, router and Sequence disabled until their own approval and credit scope; the shared guide owns execution.",
+                    skills: ["oxygen-recipes", "oxygen-linkedin-marketing"],
+                },
+                recommendedTools: ["oxygen_recipes_list", "oxygen_recipes_get", "oxygen_context_resolve"],
+                recommendedCommands: ["recipes list", "recipes show", "context resolve"],
+                ...(namedPlay
+                    ? {
+                        exactCommand: `oxygen recipes show ${namedPlay} --json`,
+                        exactMcpCall: { tool: "oxygen_recipes_get", arguments: { slug: namedPlay } },
+                    }
+                    : {
+                        exactCommand: 'oxygen recipes list "linkedin audience" --view summary --json',
+                        exactMcpCall: { tool: "oxygen_recipes_list", arguments: { query: "linkedin audience", view: "summary" } },
+                    }),
+            };
+    }
     const explicit = explicitCapabilityIntent(normalized);
     const catalogRow = findEnrichmentIntentByAlias(normalized);
     // Card scoring stays the owner of routing; the catalogue only breaks a
@@ -764,6 +797,60 @@ export function serializeCapabilityRoute(route, surfaceOrOptions = "cli", option
 function normalizeIntent(query) {
     return query.toLowerCase().replace(/[_-]+/g, " ").replace(/\s+/g, " ").trim();
 }
+/** The six LinkedIn audience-campaign Recipes, by catalog slug. */
+const AUDIENCE_PLAY_SLUGS = [
+    "own-post-engagers",
+    "competitor-post-engagers",
+    "creator-post-engagers",
+    "keyword-post-engagers",
+    "company-page-followers",
+    "own-profile-followers",
+];
+/** Whole audience acquisition/outreach; individual reads and runtime controls keep their owners. */
+function isLinkedInAudienceCampaignIntent(rawQuery) {
+    const query = normalizeIntent(rawQuery);
+    // Match exact Recipe slugs before punctuation normalization makes a slug
+    // indistinguishable from a plain company-page follower research request.
+    const canonicalPlay = new RegExp(`\\b(?:${AUDIENCE_PLAY_SLUGS.join("|")})\\b`, "i").exec(rawQuery);
+    if (canonicalPlay?.[0].toLowerCase() === rawQuery.trim().toLowerCase())
+        return true;
+    if (!/\blinkedin\b/.test(query) && !canonicalPlay)
+        return false;
+    // Audience nouns can be the subject of a local read/control operation. Only
+    // explicit acquisition/setup language may turn such a request into a play.
+    const acquisition = /\b(build|prepare|create|start|launch|scrape|capture|collect)\b|\bset up\b/.test(query);
+    if (!acquisition && /\b(show|list|read|inspect|verify|validate|label|classify|tag|rank|grade|score|rename|update|change|edit|delete|remove|clear|export|import)\b/.test(query))
+        return false;
+    if (/\boxygen_\w+\b/i.test(rawQuery)
+        || isUgcIntent(query)
+        || isWorkspacePagesIntent(query) || isWorkspaceSettingsIntent(query)
+        || isPublishingPostIntent(query) || isFirstCommentIntent(query)
+        || isPostCoverOrPreviewIntent(query) || isFailedPostIntent(query)
+        || isOwnedPostCommentIntent(query) || isSecondPartyDecisionIntent(query)
+        || tableReadRecommendation(query) || tableMaintenanceRecommendation(query)
+        || isSequenceScheduleIntent(query) || isSequenceUnsubscribeIntent(query)
+        || isSenderProfileIntent(query) || isSenderCopyVariableIntent(query)
+        || isLinkedInAccountLimitsIntent(query)
+        || /\b(workflows?|sequences?|cadences?|webhook|cron|event trigger|branching|retries)\b/.test(query)
+        || /\b(status|pause|resume|disable|enable|logs?|tail|price|pricing|order)\b/.test(query)
+        || /\b(known|this|single|one) posts?\b|linkedin\.com\/(?:posts\/|feed\/update\/)/.test(query)
+        || /\b(one|single) (?:of them|person|recipient)\b/.test(query))
+        return false;
+    if (canonicalPlay)
+        return true;
+    const audienceFromSources = /\baudience\b/.test(query) && /\b(from|using|sources?|based on)\b/.test(query);
+    if (audienceFromSources && /\b(posts?|creators?|keywords?|profiles?|followers?)\b/.test(query))
+        return true;
+    const engagement = /\bposts?\b/.test(query) && /\b(engagers?|engaged|engagement|reactors?|reacting|reactions?|commenters?|commenting)\b/.test(query);
+    const followers = /\bfollowers?\b/.test(query);
+    if (!engagement && !followers)
+        return false;
+    const outreach = /\b(campaigns?|outreach|warm outbound|inbound led outbound)\b/.test(query)
+        || /\b(?:cold )?(email|dm|whatsapp|invite) (?:them|the (?:engagers|followers|audience))\b/.test(query)
+        || /\b(send|start)\b.{0,35}\b(emails?|dms?|connection requests?|invitations?|whatsapp messages?)\b/.test(query);
+    const namedPlay = /\b(recipes?|playbooks?|plays?|whole motion|complete motion|end to end motion)\b/.test(query);
+    return outreach || namedPlay;
+}
 /**
  * "LinkedIn posts about X" / "posts mentioning Y" / "monitor LinkedIn posts by
  * keyword" is keyword post search, a Signals source with all-of / any-of /
@@ -849,6 +936,15 @@ const UGC_ROUTE_VIEW = {
 function routeCardFor(card, query) {
     if (card.primitive === "publishing" && isUgcIntent(query))
         return { ...card, ...UGC_ROUTE_VIEW };
+    const contactFind = card.id === "sourcing-and-provider-tools" ? oneShotContactFindingRecommendation(query) : null;
+    if (contactFind)
+        card = { ...card, execution: contactFind.execution };
+    const crmContactRead = card.id === "records" ? storedCrmContactReadRecommendation(query) : null;
+    if (crmContactRead)
+        card = { ...card, posture: "read_only", execution: crmContactRead.execution };
+    const replyDraftRead = card.primitive === "messages" ? storedReplyDraftReadRecommendation(query) : null;
+    if (replyDraftRead)
+        card = { ...card, posture: "read_only", execution: replyDraftRead.execution };
     if (card.id === "knowledge-graph" && isWorkspaceVoiceIntent(query))
         card = { ...card, execution: WORKSPACE_VOICE_EXECUTION };
     if (card.primitive === "workflows" && isRecurringCompanyMonitoringIntent(query))
@@ -859,7 +955,7 @@ function routeCardFor(card, query) {
     if (card.primitive === "tables" && isTableCapacityReadIntent(query))
         card = {
             ...card,
-            execution: "Read oxygen_limits_show for Tables capacity, largest_table and largest_table_rows. Use that returned table reference with oxygen_tables_query and a small limit to inspect sample rows; no enrichment run is needed.",
+            execution: "Read oxygen_limits_show with section=capacity for largest_table and largest_table_rows. Counts cover all registered workspace Tables, including CRM and archived Tables, and are available only when row_usage_reconciled is true; pending counts are unknown. Use the returned table reference with oxygen_tables_query and a small limit for sample rows. Planned capacity is not current headroom.",
         };
     if (card.primitive === "tables" && isFunctionIntent(query))
         card = {
@@ -877,6 +973,9 @@ function routeCardFor(card, query) {
     const read = card.primitive === "tables" ? tableReadRecommendation(query) : null;
     if (read)
         card = { ...card, execution: read.execution };
+    const sent = card.id === "connected-linkedin" ? sentLinkedInInvitationReadRecommendation(query) : null;
+    if (sent)
+        card = { ...card, execution: sent.execution };
     const database = card.id === "platform-operations" ? databaseRecommendation(query) : null;
     if (database)
         card = { ...card,
@@ -1017,6 +1116,16 @@ export const CAPABILITY_ROUTE_MCP_CALLS = {
     // Like the CLI command, it leaves the LinkedIn risk acknowledgement to the user.
     senderConnect: () => ({ tool: "oxygen_senders_connect", arguments: { country: "<cc>" } }),
     rowClassification: () => ({ tool: "oxygen_columns_catalog", arguments: { family: "classification" } }),
+    rowFanOut: () => ({
+        tool: "oxygen_tables_send",
+        arguments: {
+            source: "<source table>",
+            target: "<target table>",
+            flatten: { column: "<column holding the array>", path: "<path to the array>" },
+            mapping: [{ target: "<target column>", source: { type: "column", key: "$element" }, path: "<field in each element>" }],
+            dry_run: true,
+        },
+    }),
     // The tool has no `family`: it always searches linkedin_posts, which the API reads as the same source.
     linkedinKeywordPosts: () => ({
         tool: "oxygen_signals_search_preview",
@@ -1102,6 +1211,21 @@ function isOpenLinkedInRequestsIntent(query) {
     return /\b(connection|invitation|invite|connect) requests?\b/.test(query)
         || /\b(pending|open|unanswered|outstanding|received|sent) (linkedin )?(invitations?|invites?)\b/.test(query);
 }
+/** One live sent-invitation page, separate from recurring capture and writes. */
+function sentLinkedInInvitationReadRecommendation(query) {
+    if (!/\blinkedin\b/.test(query) || !/\b(invitations?|invites?|connection requests?)\b/.test(query)
+        || !/\b(sent|outgoing)\b/.test(query)
+        || /\b(incoming|received|mixed|tables?|workflows?|agents?|functions?|crm|mailbox\w*|setup|capture|monitor\w*|sync|recurring|schedule\w*|cron|send|sending|enroll|withdraw\w*|cancel|accept|decline|sequences?|outreach|cadence|research|third party|public)\b/.test(query))
+        return null;
+    if (!/\b(read|list|show|inspect|review|resume|next page|cursor|pagination)\b/.test(query)
+        && !/\b(cli|command line|native command)\b/.test(query))
+        return null;
+    return {
+        tools: ["oxygen_linkedin_invites_sent", "oxygen_senders_list"],
+        commands: ["linkedin invitations list", "senders list"],
+        execution: "Read one live, free pending-sent invitation page with oxygen_linkedin_invites_sent via oxygen_capabilities_read; CLI twin: oxygen linkedin invitations list --account <ref> --limit <n> --cursor <token> --json. Resolve the sender with oxygen_senders_list. Resume invitations.cursor unchanged with the same account; a full v2 page can need one empty final page. No provider writes or credits. Recurring received/sent capture is linkedin invitations setup; withdrawal is a separate external action.",
+    };
+}
 /**
  * The apps a person connected with OAuth and where each one works: "make
  * ChatGPT always use workspace X", "default workspace for my Claude
@@ -1163,7 +1287,7 @@ function isConnectedAppSpendIntent(query) {
     return !/\b(linkedin|senders?|mailbox(?:es)?|sequences?|email|emails|whatsapp|warm\s?up|invites?|rate)\b/.test(query);
 }
 /**
- * The web app's sidebar pages a workspace hides for every member (Settings →
+ * The web app's sidebar pages a person hides from their own sidebar (Settings →
  * Customise, `settings pages`). Both blind baselines of 2026-09-30 searched
  * "hide navigation pages sidebar", "customise pages", "pages visibility", "nav
  * items" and "workspace navigation hidden pages unibox publishing workflows",
@@ -1185,6 +1309,14 @@ function isWorkspacePagesIntent(query) {
         return true;
     if (/\bmenu items?\b/.test(query) && /\b(hid(?:e|es|den|ing)|unhide|show(?:s|n|ing)?|visib\w*)\b/.test(query))
         return true;
+    // Sidebar page names with a hide verb and a personal scope ("hide Unibox and
+    // Workflows only for me") name the sidebar, not those pages' data; both
+    // personal-sidebar acceptance runs (2026-10-02) found this routed to Messages.
+    if (/\b(unibox|workflows|publishing|sequencer|tables|crm|analytics|knowledge)\b/.test(query)
+        && /\b(hid(?:e|es|den|ing)|unhide)\b/.test(query)
+        && /\b(for me|only me|just me|myself|my own|personally)\b/.test(query)
+        && !/\b(messages?|emails?|threads?|conversations?|repl(?:y|ies)|contacts?|leads?|runs?)\b/.test(query))
+        return true;
     // Content and navigation within a primitive keep that primitive's owner.
     // Check this before generic "customize pages" or a navigation noun.
     if (/\b(wiki|knowledge|linkedin|compan(?:y|ies)|tables?|landing|web ?pages?|websites?|carousels?|pdfs?|paginat\w*|next page|per page|page size|results?|dashboards?)\b/.test(query))
@@ -1246,16 +1378,17 @@ function tableReadRecommendation(query) {
     if (/\b(filtered?|filters?|sorts?|search|crm)\b/.test(query) && /\b(grid|counts?|registry)\b/.test(query))
         return {
             tools: ["oxygen_table_rows_page", "oxygen_tables_query", "oxygen_tables_preview"], commands: ["tables rows page", "tables query", "tables preview"],
-            execution: "Read the native rows page for grid filters/sorts/search and count modes. exact counts the matching rows; estimate uses reconciled registry metadata only for an unfiltered scope, otherwise counts exactly. registry never counts and returns no total for a narrowed or unavailable registry scope; skip returns no total. Follow nextCursor with the same table, filters, search, sort and CRM scope; do not substitute an offset. Canonical tables query reads raw values; format=grid refuses those filters/projections.",
+            execution: "Use tables rows page for filtered/sorted/searchable grid cells and summarized run state, with CRM scope and count modes. exact counts matches; estimate uses reconciled registry only when unnarrowed, else exact. registry never counts and returns null for narrowed/unreconciled scope; skip returns no total (null). Cursor walks retain the same read scope; offset supports random access. Raw tables query supports its declared selectors; query format=grid refuses them.",
         };
-    if (/\b(preview|fill rates?|without row|summary only|summary_only)\b/.test(query))
+    if (/\b(fill rates?|without row|summary only|summary_only)\b/.test(query)
+        || (/\bpreview\b/.test(query) && !/\bgrid\b/.test(query)))
         return {
             tools: ["oxygen_tables_preview", "oxygen_tables_query", "oxygen_table_fill_progress"], commands: ["tables preview", "tables query", "tables fill-progress"],
-            execution: "Use tables preview for compact rows, optional include_cell_states and whole-table fill stats; summary_only omits row JSON. rowCount is exact, rates may be sampled and summary.statsSampled labels that scope. Follow its nextCursor with the same options. tables query reads raw values or format=grid previews/state. tables fill-progress separately reports ingestion progress/failure; none of these runs columns.",
+            execution: "Use tables preview for projected rows and whole-table fill stats; include_cell_states adds compact state and summary_only omits row JSON. rowCount is exact; summary.statsSampled labels sampled rates. Its cursor pages the MCP widget with a minimal plain receipt, not preview row/stat JSON. For data paging use tables query format=grid or tables rows page; fill-progress reads ingestion state. These reads do not run columns.",
         };
     return {
         tools: ["oxygen_tables_query", "oxygen_tables_preview", "oxygen_table_rows_page", "oxygen_table_fill_progress"], commands: ["tables query", "tables preview", "tables rows page", "tables fill-progress"],
-        execution: 'Read tables query raw values, or format="grid" for summarized cell previews and per-cell state. Grid defaults to 50 rows and caps at 200; pass grid.nextCursor as cursor with the same table/limit. Grid refuses row_id, fields, filters/filterTree, search, sorts, formula_values and nonzero offset; it is not a snapshot. Its first page uses the reconciled registry count when available, otherwise exact; continuation skips counting (null total), labeled rowCountMode. include_stats adds optional whole-table column stats/count; unavailable stats are omitted. include_fill only adds optional fill state when the first page is empty; later/nonempty pages omit it. tables preview supplies fill-rate summaries; tables fill-progress reads ingestion status. These reads do not execute columns.',
+        execution: "Use tables query for raw values, format=\"grid\" for cell previews and summarized run state, or tables preview for fill rates. Grid HTTP/CLI defaults 50 and caps 200; MCP defaults 50 and clamps supplied limits to 100. Follow grid.nextCursor with the same read scope; hasMore=false and nextCursor=null end the walk, without a snapshot. Grid refuses row_id, fields, filters/filterTree, search, sorts, formula_values and nonzero offset; system/widget flags do not change it. Without stats, first-page rowCountMode is registry if reconciled, else exact; cursor pages are skipped (rowCount=null). include_stats can replace rowCount with an exact whole-table count even on continuation; column rates may be sampled and unavailable stats are omitted. include_fill adds ingestion state only to an empty first page, distinct from fill rates. The native max_chars window can shorten a whole-row prefix or refuse an oversized first row/metadata. These reads do not run columns.",
     };
 }
 /** Native database work outranks generic workspace access and credit billing. */
@@ -1332,9 +1465,65 @@ function tableMaintenanceRecommendation(query) {
     }
     return null;
 }
+/** Stored conversation drafts are Messages data, rather than worker queue health. */
+function storedReplyDraftReadRecommendation(query) {
+    if (!/\bdrafts?\b/.test(query)
+        || !/\b(read|inspect|list|show|stored|retained|queue|history|historical)\b/.test(query)
+        || !/\b(conversations?|threads?|inbox|unibox|repl(?:y|ies)|whatsapp|email|linkedin)\b/.test(query)
+        || /\b(workers?|jobs?|workflows?|cron|repair|publishing|posts?|creators?|ugc|sequences?|campaigns?)\b/.test(query)
+        || /\b(approve|approving|send|sending|edit|editing|reject|rejecting|generate|generating|create|creating)\b/.test(query))
+        return null;
+    const whatsapp = /\bwhatsapp\b/.test(query);
+    const otherChannel = /\b(email|linkedin)\b/.test(query);
+    const tools = whatsapp && !otherChannel ? ["oxygen_whatsapp_drafts_list"]
+        : otherChannel && !whatsapp ? ["oxygen_inbox_drafts_list"]
+            : ["oxygen_inbox_drafts_list", "oxygen_whatsapp_drafts_list"];
+    const commands = tools.map(tool => tool === "oxygen_whatsapp_drafts_list" ? "whatsapp drafts list" : "inbox drafts list");
+    return { tools, commands, execution: "Hydrate the selected native draft-read schema. External MCP clients use oxygen_capabilities_read for an unlisted target; built-in agents invoke the native capability. oxygen_inbox_drafts_list covers email/LinkedIn; oxygen_whatsapp_drafts_list covers WhatsApp. When the channel is unknown, inspect both schemas before selecting. Filter by the native conversation and CSV status controls; personal composer drafts stay private. Historical states are current draft statuses, not a transition audit. Generation, edits, approval and sending are separate actions." };
+}
+/** Saved contact facts belong to Records, regardless of email/phone channel words. */
+function storedCrmContactReadRecommendation(query) {
+    if (!/\b(crm|records?)\b/.test(query)
+        || !/\b(read|show|get|find|lookup|look up|retrieve|inspect|view|describe)\b/.test(query)
+        || !/\b(emails?|phones?|mobile|contact details|contact information)\b/.test(query)
+        || /\b(send\w*|repl(?:y|ies)|messages?|inbox|threads?|drafts?|posts?|comments?|outreach|sequences?|campaigns?|dial\w*|call|create|add|edit|update|change|delete|remove|merge|import|sync|missing|new|enrich\w*|providers?|waterfall|verify|verification|validate|tables?|rows?|columns?|spreadsheet|dataset|workflows?|schedule\w*|recurring|cron)\b/.test(query))
+        return null;
+    return {
+        tools: ["oxygen_crm_record_search", "oxygen_crm_record_get", "oxygen_crm_object_describe"],
+        commands: ["crm search", "crm get", "crm describe"],
+        execution: "Read saved Records; no lookup or send. Hydrate search/get schemas; mode=suggest finds partial names, records resolves identities. Get takes object + row_id; describe the object or one attribute for unknown field keys. External MCP uses oxygen_capabilities_read for these unlisted reads; built-in agents invoke the native tools. Missing contact enrichment and CRM writes are separate actions.",
+    };
+}
+/** Finding contact details is a native lookup; channel words alone do not mean sending. */
+function oneShotContactFindingRecommendation(query) {
+    if (/\b(send\w*|repl(?:y|ies)|messages?|inbox|threads?|drafts?|posts?|comments?|engagement|audiences?|followers?|outreach|sequences?|campaigns?|dial\w*|call|crm|records?|stored|saved|verify|verification|validate|deliverability|mailboxes?|warmup|accounts?|limits?|tables?|rows?|columns?|spreadsheet|dataset|enrich\w*|bulk|batch|workflows?|schedule\w*|recurring|weekly|daily|every|cron|workers?|jobs?|providers?|catalog|schemas?|metadata|pricing|personal|private|home|scrape\w*|public)\b/.test(query)
+        || /\bfind companies\b/.test(query))
+        return null;
+    const verb = /\b(find|lookup|look up|get|locate|obtain)\b/.exec(query);
+    if (!verb)
+        return null;
+    const target = query.slice(verb.index + verb[0].length, verb.index + verb[0].length + 120);
+    const email = /\bemails?\b/.test(target);
+    const phone = /\bphones?\b|\bmobile numbers?\b/.test(target);
+    if (!email && !phone)
+        return null;
+    return {
+        tools: [...(email ? ["oxygen_find_email"] : []), ...(phone ? ["oxygen_find_phone"] : []), "oxygen_tools_search"],
+        commands: [...(email ? ["find email"] : []), ...(phone ? ["find phone"] : []), "tools search"],
+        execution: "Hydrate the selected native one-shot lookup schema. mode=dry_run previews its waterfall; live requires the user's approved exact scope and positive max_credits. readOnlyHint=false and openWorldHint=true still apply to previews. External MCP uses oxygen_capabilities_call for an unlisted lookup; built-in agents call the native capability under their existing policy. Free catalog metadata uses the read gateway. Sending and bulk Table enrichment have separate owners.",
+    };
+}
 function explicitCapabilityIntent(query) {
+    if (sentLinkedInInvitationReadRecommendation(query))
+        return ROUTE_BY_ID.get("connected-linkedin") ?? null;
     if (databaseRecommendation(query))
         return ROUTE_BY_ID.get("platform-operations") ?? null;
+    if (oneShotContactFindingRecommendation(query))
+        return ROUTE_BY_ID.get("sourcing-and-provider-tools") ?? null;
+    if (storedCrmContactReadRecommendation(query))
+        return ROUTE_BY_ID.get("records") ?? null;
+    if (storedReplyDraftReadRecommendation(query))
+        return ROUTE_BY_PRIMITIVE.get("messages") ?? null;
     if (isConnectedAppsIntent(query) || isConnectedAppEventsIntent(query) || isConnectedAppSpendIntent(query)) {
         return ROUTE_BY_ID.get("workspace-access") ?? null;
     }
@@ -1503,6 +1692,8 @@ function explicitCapabilityIntent(query) {
     // and the "label" wording fell to the Tags card below.
     if (isRowClassificationIntent(query))
         return ROUTE_BY_PRIMITIVE.get("tables") ?? null;
+    if (isRowFanOutIntent(query))
+        return ROUTE_BY_PRIMITIVE.get("tables") ?? null;
     if (isTableMaintenanceIntent(query))
         return ROUTE_BY_PRIMITIVE.get("tables") ?? null;
     if (/\b(tag|tags|label|labels)\b/.test(query))
@@ -1623,12 +1814,27 @@ function isPublishingPostIntent(query) {
         && !(/\b(find|search|scrape|research)\b/.test(query) && /\b(about|mention|containing)\b/.test(query));
 }
 function recommendationsFor(card, query) {
+    const contactFind = card.id === "sourcing-and-provider-tools" ? oneShotContactFindingRecommendation(query) : null;
+    if (contactFind)
+        return contactFind;
+    const crmContactRead = card.id === "records" ? storedCrmContactReadRecommendation(query) : null;
+    if (crmContactRead)
+        return crmContactRead;
+    const replyDraftRead = card.primitive === "messages" ? storedReplyDraftReadRecommendation(query) : null;
+    if (replyDraftRead)
+        return replyDraftRead;
+    const sent = card.id === "connected-linkedin" ? sentLinkedInInvitationReadRecommendation(query) : null;
+    if (sent)
+        return sent;
     const database = card.id === "platform-operations" ? databaseRecommendation(query) : null;
     if (database)
         return database;
     if (card.id === "billing-and-budgets" && /\b(credit prices|credit price catalog|customer credit)\b/.test(query)) {
         return { tools: ["oxygen_customer_credit_prices"], commands: ["pricing customer-credit-prices"] };
     }
+    if (card.id === "billing-and-budgets" && /\b(plan|plans|annual|yearly|subscription)\b/.test(query)) {
+        return { tools: ["oxygen_billing_balance", "oxygen_limits_show", "oxygen_billing_change_plan"], commands: ["billing balance", "limits show", "billing change"] };
+    }
     if (card.id === "messages" && /\b(unibox|inbox)\b/.test(query) && /\b(metadata|taxonomy|filters|accounts|tags)\b/.test(query)) {
         return { tools: ["oxygen_unibox_metadata"], commands: ["unibox metadata"] };
     }
@@ -1805,12 +2011,15 @@ function recommendationsFor(card, query) {
                 "oxygen_mailboxes_compatibility",
                 "oxygen_mailboxes_import",
                 "oxygen_mailboxes_connect_oauth",
+                "oxygen_mailboxes_sync_status",
+                "oxygen_mailboxes_sync",
                 "oxygen_mailboxes_oauth_health",
             ],
             commands: [
                 "mailboxes compatibility",
                 "mailboxes import",
                 "mailboxes connect-oauth",
+                "mailboxes sync",
                 "mailboxes oauth-health",
             ],
         };
@@ -1868,8 +2077,8 @@ function recommendationsFor(card, query) {
         if (isTableCapacityReadIntent(query))
             return {
                 tools: ["oxygen_limits_show", "oxygen_tables_query", "oxygen_tables_describe"],
-                commands: ["limits show", "tables query", "tables describe"],
-                exactMcpCall: { tool: "oxygen_limits_show", arguments: {} },
+                commands: ["limits show --section capacity", "tables query", "tables describe"],
+                exactMcpCall: { tool: "oxygen_limits_show", arguments: { section: "capacity" } },
             };
         if (isFunctionIntent(query)) {
             if (/\b(?:list|show|read|see|my)\b.{0,30}\bfavou?rites?\b/.test(query))
@@ -1948,6 +2157,15 @@ function recommendationsFor(card, query) {
                 commands: ["tables watcher preview", "tables watcher create", "tables watcher get", "tables watcher update", "tables watcher pause", "tables watcher resume"],
             };
         }
+        if (isRowFanOutIntent(query)) {
+            // `tables send --flatten` writes one row per array element (free, durable).
+            return {
+                tools: ["oxygen_tables_send"],
+                commands: ["tables send"],
+                exactCommand: ROW_FAN_OUT_COMMAND,
+                exactMcpCall: CAPABILITY_ROUTE_MCP_CALLS.rowFanOut(),
+            };
+        }
         if (isRowClassificationIntent(query)) {
             // The classification list (free) names the template production has and,
             // where the deployment runs it, the native Classify column; any other
@@ -2177,6 +2395,16 @@ function isEmailVerificationIntent(query) {
  * column through `columns add`, which the route recommends next.
  */
 export const ROW_CLASSIFICATION_COMMAND = "oxygen columns catalog --family classification";
+export const ROW_FAN_OUT_COMMAND = "oxygen tables send <source> <target> --flatten <column> --flatten-path <path> --mapping '[{\"target\":\"<column>\",\"source\":{\"type\":\"column\",\"key\":\"$element\"},\"path\":\"<field>\"}]' --dry-run";
+// "flatten the search results into one row per company", "explode this JSON array
+// into rows". Both MCP acceptance agents for OXP-1.39.2 (S26) reported no native way
+// to turn a search tool column's result array into rows, and two capability searches
+// never surfaced `tables send`, which does exactly that with --flatten.
+function isRowFanOutIntent(query) {
+    return /\b(flatten|explode|unnest|fan[ -]?out)\b.{0,60}\b(rows?|arrays?|lists?|json|results?|cells?)\b/.test(query)
+        || /\b(arrays?|lists?|results?)\b.{0,40}\binto\b.{0,20}\bone row (?:per|for each)\b/.test(query)
+        || /\b(json array|array cell|list cell)\b.{0,40}\brows?\b/.test(query);
+}
 /** Nouns another primitive owns: a classify ask that names one keeps that owner. */
 const ROW_CLASSIFICATION_OTHER_OWNER = /\b(inbox|repl(?:y|ies)|conversations?|threads?|messages?|dms?|e-?mails?|bounces?|signals?|visitors?|workflows?|deals?|crm|records?|icp|knowledge|wiki|pages?|ads|dashboards?|metrics?|agents?|runs)\b/;
 /** What one table row is: the noun a per-row classification is about. */
@@ -2262,12 +2490,17 @@ function isLinkedInAccountConnectIntent(query) {
         return false;
     if (/^(linkedin|unipile)( accounts?)?$/.test(query))
         return true;
-    if (/\b(send|sending|enroll|sequence|campaign|cadence|messages?|dms?|invites?|invitations?|posts?|profiles?|network|connections|followers|viewers|limits|hours|ads?|scrape|research|company|companies|url)\b/.test(query))
+    if (/\b(send|sending|enroll|sequence|campaign|cadence|messages?|dms?|invites?|invitations?|posts?|profiles?|network|connections|followers|viewers|limits|hours|ads?|scrape|research|company|companies|url|pac(?:e|ing)|spacing|spaced|spread|apart|throttl\w*)\b/.test(query))
         return false;
     return /\b(connect|reconnect|link|add|accounts?|senders?|seats?|free|plan)\b/.test(query);
 }
+/**
+ * The connected account's hours, caps or pacing (`senders limits`). The
+ * 2026-10-02 pacing acceptance asked "linkedin sender pacing connection requests
+ * spread over day" and was sent to `senders connect` by the word "sender".
+ */
 function isLinkedInAccountLimitsIntent(query) {
-    return /\b(working hours|sending hours|business hours|office hours|weekdays?|time ?zone|linkedin limits|daily limits?)\b/.test(query);
+    return /\b(working hours|sending hours|business hours|office hours|weekdays?|time ?zone|linkedin limits|daily limits?|pac(?:e|ing)|spacing|spaced|spread|apart|throttl\w*)\b/.test(query);
 }
 function isMutualLinkedInConnectionsIntent(query) {
     const linkedInContext = /\blinkedin\b|\bprofiles?\b/.test(query);

package/node_modules/@oxygen/shared/dist/contracts/billing-owner-read.d.ts

@@ -0,0 +1,6 @@
+import { type Infer } from "./schema.js";
+/** The credential selects the workspace; this optional ref only checks it. */
+export declare const BILLING_OWNER_READ_CONTRACT: import("./schema.js").ContractObject<{
+    readonly organization: import("./schema.js").StringProperty;
+}, never>;
+export type BillingOwnerReadInput = Infer<typeof BILLING_OWNER_READ_CONTRACT>;

package/node_modules/@oxygen/shared/dist/contracts/billing-owner-read.js

@@ -0,0 +1,7 @@
+import { obj, str } from "./schema.js";
+/** The credential selects the workspace; this optional ref only checks it. */
+export const BILLING_OWNER_READ_CONTRACT = obj({
+    organization: str({
+        description: "Optional assertion of the current workspace's id, Clerk org id or slug. A mismatch fails before reading billing; this never selects another workspace.",
+    }),
+});

package/node_modules/@oxygen/shared/dist/contracts/browser-operations.js

@@ -1,5 +1,6 @@
 /** Browser resource operations, using the same scoped handlers on every surface. */
 import { arr, bool, enumOf, int, nullable, num, obj, str } from "./schema.js";
+import { TABLE_ROW_READ_WINDOW_FIELDS } from "./table-row-read.js";
 const text = (description) => str(description ? { description } : {});
 const json = { type: "object", additionalProperties: true };
 const strings = () => arr(str());
@@ -66,7 +67,7 @@ export const BROWSER_OPERATIONS = [
     operation("tables.resource.action_columns", `${table}/action-columns`, "POST", "columns provider-action", "oxygen_table_provider_action_column", "tables", "Preview or create a provider action column; creating it does not execute provider actions.", { provider: text(), label: text(), key: text(), operations: strings(), dry_run: bool() }, ["provider"]),
     operation("tables.resource.rows.page", `${table}/rows`, "GET", "tables rows page", "oxygen_table_rows_page", "tables", "Read a Table row page with the same filter, sort, counts and CRM relationship projection as the grid.", { limit: int({ minimum: 1 }), cursor: text(), offset: int({ minimum: 0 }), f: text("Serialized filter tree."), s: text("Serialized sort state."), q: text(), count: enumOf(["exact", "estimate", "registry", "skip"]), crm_object: text() }),
     operation("tables.resource.rows.insert", `${table}/rows`, "POST", "tables rows insert", "oxygen_table_rows_insert", "tables", "Insert Table row values and return the committed rows plus any existing automatic run or dedupe grant.", { rows: objects(), values: json }),
-    operation("tables.resource.rows.get", `${table}/rows/{row}`, "GET", "tables rows inspect", "oxygen_table_row_inspect", "tables", "Read one Table row; hydrate_relations=1 includes CRM relationship display values. The optional field list narrows cell hydration to exact column keys.", { hydrate_relations: enumOf(["1"]), field: strings() }, [], { repeatedQueryFields: ["field"] }),
+    operation("tables.resource.rows.get", `${table}/rows/{row}`, "GET", "tables rows inspect", "oxygen_table_row_inspect", "tables", "Read one row; field selects column keys and hydrate_relations=1 includes relations. projection=value returns lossless JSON fragments; resume value_cursor with identical table/row/field/path.", { hydrate_relations: enumOf(["1"]), field: strings(), ...TABLE_ROW_READ_WINDOW_FIELDS }, [], { repeatedQueryFields: ["field"] }),
     operation("tables.resource.rows.edit", `${table}/rows/{row}`, "PATCH", "tables rows edit", "oxygen_table_row_edit", "tables", "Patch one row's values and return the committed row.", { values: json }, ["values"]),
     operation("tables.resource.rows.delete", `${table}/rows/{row}`, "DELETE", "tables rows remove", "oxygen_table_row_remove", "tables", "Remove one row from a workspace Table."),
     operation("tables.resource.rows.bulk_delete", `${table}/rows/delete`, "POST", "tables rows remove-selection", "oxygen_table_rows_remove_selection", "tables", "Remove exact row ids or the same all-matching filtered selection used by the browser.", { row_ids: strings(), selection }),
@@ -89,7 +90,8 @@ export const BROWSER_OPERATIONS = [
     operation("tables.resource.ingestions.retry", `${table}/ingestions/{ingestion_run}/retry-failed`, "POST", "tables ingestion retry", "oxygen_table_resource_ingestion_retry", "runs", "Retry failed items in this Table's hosted ingestion run."),
     operation("tables.resource.import", "/api/cli/tables/import", "POST", "tables upload", "oxygen_table_resource_upload", "tables", "Preview or import small uploaded CSV, JSON or XLSX bytes through the exact browser import contract. Preview writes no rows.", upload, ["content_base64", "file_name"], { multipart }),
     operation("billing.activate", "/api/cli/billing/activate", "POST", "billing activate", "oxygen_billing_activate", "billing", "Activate a trial subscription now and charge its saved payment method; administrator approval is required. An optional tier reprices the active trial in the same call.", { approved: bool(), tier: text() }, ["approved"], { spends: true }),
-    operation("billing.checkout", "/api/cli/billing/checkout", "POST", "billing checkout", "oxygen_billing_checkout", "billing", "Open the same hosted plan checkout as the browser; the returned URL carries the payment approval step.", { plan: text(), interval: enumOf(["month", "year"]), currency: text(), trial: bool(), return_to: text(), source: text(), blocked: text() }, ["plan"]),
+    operation("billing.checkout", "/api/cli/billing/checkout", "POST", "billing checkout", "oxygen_billing_checkout", "billing", "Open the same hosted plan checkout as the browser; the returned URL carries the payment approval step.", { plan: text(), interval: enumOf(["month", "year"]), term: enumOf(["month", "year"]), terms_version: text(), currency: text(), trial: bool(), return_to: text(), source: text(), blocked: text() }, ["plan"]),
+    operation("billing.confirm", "/api/cli/billing/confirm", "POST", "billing confirm", "oxygen_billing_confirm", "billing", "Confirm an exact unexpired plan-change preview. approved accepts its payment, term and effective date; workspace administrator required.", { token: text(), approved: bool() }, ["token", "approved"], { spends: true }),
     operation("billing.portal", "/api/cli/billing/portal", "POST", "billing portal", "oxygen_billing_portal", "billing", "Create the workspace's authenticated Stripe billing-portal URL; requires workspace administrator authorization.", { returnUrl: text() }),
     operation("billing.ownership.get", "/api/cli/billing/ownership", "GET", "billing ownership get", "oxygen_billing_ownership_get", "billing", "Read the active workspace's shared billing owner, candidate owners and credit cap."),
     operation("billing.ownership.set", "/api/cli/billing/ownership", "POST", "billing ownership set", "oxygen_billing_ownership_set", "billing", "Set the billing owner and optional monthly credit cap using the browser's administrator and workspace eligibility checks.", { billing_owner_organization_id: text(), monthly_credit_cap: nullable(num({ minimum: 0 })) }, ["billing_owner_organization_id"]),

package/node_modules/@oxygen/shared/dist/contracts/copilot-sessions.d.ts

@@ -0,0 +1,11 @@
+export declare const COPILOT_SESSION_STATUSES: readonly ["active", "completed", "cancelled", "failed"];
+export declare const COPILOT_SESSIONS_LIST_CONTRACT: import("./schema.js").ContractObject<{
+    readonly status: import("./schema.js").StringProperty;
+    readonly limit: {
+        type: "integer";
+        description?: string;
+        minimum?: number;
+        maximum?: number;
+        "x-clamp"?: true;
+    };
+}, never>;

package/node_modules/@oxygen/shared/dist/contracts/copilot-sessions.js

@@ -0,0 +1,7 @@
+/** Stored attended session-list selectors. Native HTTP trimming/clamping remains authoritative. */
+import { int, obj, str } from "./schema.js";
+export const COPILOT_SESSION_STATUSES = ["active", "completed", "cancelled", "failed"];
+export const COPILOT_SESSIONS_LIST_CONTRACT = obj({
+    status: str({ description: `Session status: ${COPILOT_SESSION_STATUSES.join(", ")}. Separate from latest turn status; omit for all.` }),
+    limit: int({ minimum: 1, description: "Newest sessions first. Default 50; native maximum 200 (larger values clamp)." }),
+});

package/node_modules/@oxygen/shared/dist/contracts/crm-file-bytes.d.ts

@@ -0,0 +1,33 @@
+export declare const CRM_FILE_BYTES_MAX = 2048;
+export declare const CRM_FILE_BYTES_QUERY_CONTRACT: import("./schema.js").ContractObject<{
+    readonly offset: {
+        type: "integer";
+        description?: string;
+        minimum?: number;
+        maximum?: number;
+        "x-clamp"?: true;
+    };
+    readonly limit: {
+        type: "integer";
+        description?: string;
+        minimum?: number;
+        maximum?: number;
+        "x-clamp"?: true;
+    };
+    readonly sha256: import("./schema.js").StringProperty;
+    readonly max_chars: {
+        type: "integer";
+        description?: string;
+        minimum?: number;
+        maximum?: number;
+        "x-clamp"?: true;
+    };
+}, never>;
+/** A same-original resume address. Credentials and organizations never appear in it. */
+export declare function crmFileBytesUri(input: {
+    attachmentId: string;
+    sha256: string;
+    offset: number;
+    limit: number;
+    maxChars: number;
+}): string;

package/node_modules/@oxygen/shared/dist/contracts/crm-file-bytes.js

@@ -0,0 +1,12 @@
+import { int, obj, str } from "./schema.js";
+export const CRM_FILE_BYTES_MAX = 2048;
+export const CRM_FILE_BYTES_QUERY_CONTRACT = obj({
+    offset: int({ minimum: 0, maximum: 100 * 1024 * 1024, description: "Byte offset; default 0. Resume at next_offset." }),
+    limit: int({ minimum: 1, maximum: CRM_FILE_BYTES_MAX, description: "Original bytes requested; default 2048. Context bounds may return fewer." }),
+    sha256: str({ minLength: 64, maxLength: 64, description: "Original SHA-256 from the previous chunk; required when resuming." }),
+    max_chars: int({ minimum: 1024, maximum: 40_000, description: "Complete serialized chunk window. Smaller native windows preserve exact continuation." }),
+});
+/** A same-original resume address. Credentials and organizations never appear in it. */
+export function crmFileBytesUri(input) {
+    return `oxygen://crm/files/${encodeURIComponent(input.attachmentId)}/original/${input.sha256}/${input.offset}/${input.limit}?max_chars=${input.maxChars}`;
+}