@oxygen-agent/cli 1.1011.853 → 1.1011.974

package/dist/index.js

@@ -1,3 +1,4 @@
+import { registerAdminLeadMagnetCommands } from "./admin-lead-magnet-commands.js";
 import { renderPrimaryProviderBoard } from "./admin-primary-providers-render.js";
 import { isTruthyEnv, markStdinConsumed, maybeScheduleBackgroundUpdate, readAutoUpdateStatus, runBackgroundUpdate, } from "./auto-update.js";
 import { createBrowserLoginSession, createRelayLoginSession, openBrowser } from "./browser-login.js";
@@ -40,6 +41,7 @@ import { registerVisualCommands } from "./visual-commands.js";
 import { WHATSAPP_ACCOUNT_FLAGS, whatsappAccountQuery } from "./whatsapp-account-flags.js";
 import { formatWorkflowPlanLimitNotices } from "./workflow-plan-limit-notices.js";
 import { WORKFLOW_RUN_LIST_FLAG_OVERLAY, readWorkflowRunListFlags } from "./workflow-run-list-flags.js";
+import { addProviderLimitFlags, addSuppressionListFlags, providerLimitBody, providerLimitQuery, suppressionListQuery } from "./workspace-utility-flags.js";
 import { isRecipeDefinition } from "@oxygen/recipe-sdk";
 import { AGENCY_DIRECTORY_REGIONS, AGENCY_DIRECTORY_SERVICES, COLLAB_GATE_KINDS, COLLAB_GATE_PROSE, COLLAB_SUBJECT_KINDS, COLLAB_SUBJECT_KINDS_PROSE, COLLAB_SUBJECT_LABELS, COLLAB_SUBJECT_PROSE, GATE_KIND_SUBJECTS, describeWorkflowStatusChange, formatCellForDisplay, formatCopilotPlanDuration, formatCopilotPlanSeconds, formatPublicBudgetScopes, SUBJECT_PATH_FORMS_PROSE, formatSubjectPath, exitCodeForOxygenError, parseSubjectPath, parseSubjectRef, parseWorkflowStatusChange, chunk, isVersionGreater, isVersionLess, KNOWLEDGE_BOOTSTRAP_MAX_CREDITS, MAX_CLI_JSON_BODY_BYTES, MAX_MCP_TOOL_NAME_LENGTH, normalizeCopilotPlanStepStatus, OXYGEN_CAPABILITY_ROUTES, OXYGEN_VERSION, OxygenError, getCapabilityRouteMatch, inferUserCapabilityRoute, parseKnowledgePageMarkdown, PLAN_LIMITS, serializeCapabilityRoute, sleep, success, TAG_KINDS_PROSE, toFailure, workflowMcpToolName, } from "@oxygen/shared";
 import { PURCHASABLE_PLAN_KEYS, planVolumeBonusPercent, resolveBasePricingPlan } from "@oxygen/shared/billing";
@@ -72,6 +74,7 @@ import { PUBLIC_WEBHOOK_INGRESS_PER_TARGET_PER_MINUTE } from "@oxygen/shared/pla
 import { AI_COLUMN_CREDITS, AI_COLUMN_WEB_SEARCH_TYPICAL_CREDITS } from "@oxygen/shared/pricing-sheet";
 import { TAG_COLORS } from "@oxygen/shared/select-options";
 import { SEQUENCE_LIFECYCLES, sequenceDisplayStatus } from "@oxygen/shared/sequence-lifecycle";
+import { FILTER_TREE_OPERATORS } from "@oxygen/shared/table-filter-operators";
 import { assertRecipeBundleSafe, assertPortableWorkflowDefinition, assertWorkflowGraphManifest, assertWorkflowManifest, buildRecipeManifest, compileWorkflowDefinition, isAnyWorkflowManifest, isRecipeManifest, isWorkflowDefinition, isWorkflowGraphManifest, isWorkflowManifest, hashPortableWorkflowGraphManifest, WORKFLOW_GRAPH_COMPILER_VERSION, WORKFLOW_GRAPH_MANIFEST_VERSION, } from "@oxygen/workflows";
 import { Command, CommanderError, Option } from "commander";
 import { execFileSync } from "node:child_process";
@@ -1703,6 +1706,15 @@ function writeMaxCreditsHint(error) {
             process.stderr.write(`hint: the estimate is ${estimated} credits; re-run with --max-credits ${estimated} or higher\n`);
             return;
         }
+        case "copilot_send_timeout": {
+            const nextStep = readDetailsString(error.details, "next_step");
+            const interrupt = readDetailsString(error.details, "interrupt_command");
+            if (nextStep)
+                process.stderr.write(`hint: the turn is still running; read it with \`${nextStep}\`\n`);
+            if (interrupt)
+                process.stderr.write(`hint: stop it (and its spend) with \`${interrupt}\`\n`);
+            return;
+        }
         default:
     }
 }
@@ -4188,11 +4200,12 @@ Examples:
         await handleAsyncAction("support admin list", options, () => requestOxygen(withSupportListQuery("/api/cli/admin/support/tickets", options)));
     }))
         .addCommand(new Command("get")
-        .description("Show one live Plain Thread, its routing metadata, and customer-visible messages (staff only).")
+        .description("Show one live Plain Thread, its routing metadata, and customer-visible messages (staff only). Add --include-notes to also read back the Thread's team-only notes and staged reply drafts as `internal_notes` (kind note, reply_draft, suggested_reply_provenance or undelivered_customer_report); read-only, never shown to the customer.")
         .argument("<ticketId>", "Plain Thread ID (th_...) or Thread ref (T-<n>), as shown by `oxygen support admin list`.")
+        .option("--include-notes", "Also return team-only internal notes and staged drafts.")
         .option("--json", "Print a JSON envelope.")
         .action(async (ticketId, options) => {
-        await handleAsyncAction("support admin get", options, () => requestOxygen(`/api/cli/admin/support/tickets/${encodeURIComponent(ticketId)}`));
+        await handleAsyncAction("support admin get", options, () => requestOxygen(`/api/cli/admin/support/tickets/${encodeURIComponent(ticketId)}${options.includeNotes ? "?include_notes=1" : ""}`));
     }))
         .addCommand(new Command("open")
         .description("Return the exact Plain Inbox URL for one live Thread (staff only).")
@@ -4756,7 +4769,7 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         }));
     }))
         .addCommand(new Command("color")
-        .description("Set a project's colour in the Tables rail. `--color auto` restores the automatic colour.")
+        .description("Set a folder's colour in the Tables sidebar (rail) for everyone in the workspace. `--color auto` restores the automatic colour. Free.")
         .argument("<project>", "Project slug or id.")
         .requiredOption("--color <color>", "Colour name (gray, red, orange, amber, yellow, green, teal, blue, indigo, purple, pink) or `auto` to clear.")
         .option("--json", "Print a JSON envelope.")
@@ -5805,16 +5818,16 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         // and options.json is undefined here. optsWithGlobals() reads --json
         // wherever it landed, so the envelope is emitted like every other
         // crm_* command instead of printing the bare result.
-        await handleAsyncAction("crm object create", { json: Boolean(command.optsWithGlobals().json) }, () => requestOxygen("/api/cli/crm/objects", {
+        await handleAsyncAction("crm objects create", { json: Boolean(command.optsWithGlobals().json) }, () => requestOxygen("/api/cli/crm/objects", {
             method: "POST",
             body: buildCrmObjectCreateBody(options),
         }));
     }))
         .addCommand(new Command("delete")
-        .description("Delete a CUSTOM CRM object: removes the object and schedules its backing table for deletion (restorable for 14 days). Standard objects (companies, people, deals) are permanent and refused. Defaults to dry-run; --live requires --confirm. Re-run on an object a teammate already deleted, it reports alreadyArchived with the table's deletion state and purge date.")
+        .description("Delete a CUSTOM CRM object: removes the object and schedules its backing table for deletion (restorable for 14 days). Standard objects (companies, people, deals) are permanent and refused. Defaults to dry-run; --live requires --confirm. Re-run on an object a teammate already deleted, it reports alreadyArchived with the table's deletion state and purge date. Restoring that table returns its rows as an ordinary table; the object stays deleted. Purging it also removes the object's archived definition.")
         .argument("<object>", "Custom CRM object slug, such as projects or tasks.")
-        .option("--keep-table", "Deregister the object but keep its table as an ordinary workspace table (no delete timer).")
-        .option("--purge-after <days>", "Days until the backing table's physical purge. Defaults to 14; restorable via `tables restore` until then.")
+        .option("--keep-table", "Deregister the object but keep its table as an ordinary workspace table (no delete timer). Ignored once the table is already scheduled.")
+        .option("--purge-after <days>", "Days until the backing table's physical purge. Defaults to 14; restorable via `tables restore` until then. Ignored once the table is already scheduled.")
         .option("--dry-run", "Preview the object, rows, relationships, and edges the delete would take. Default.")
         .option("--live", "Apply the delete. Requires --confirm.")
         .option("--confirm", "Confirm the live delete after inspecting the dry-run impact.")
@@ -5822,7 +5835,7 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         .action(async (object, options, command) => {
         // See `objects create` above: optsWithGlobals() recovers --json,
         // which the parent command otherwise swallows.
-        await handleAsyncAction("crm object delete", { json: Boolean(command.optsWithGlobals().json) }, () => requestOxygen(`/api/cli/crm/objects/${encodeURIComponent(object)}`, {
+        await handleAsyncAction("crm objects delete", { json: Boolean(command.optsWithGlobals().json) }, () => requestOxygen(`/api/cli/crm/objects/${encodeURIComponent(object)}`, {
             method: "DELETE",
             body: buildCrmObjectDeleteBody(options),
         }));
@@ -5838,7 +5851,7 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         .action(async (object, options, command) => {
         // See `objects create` above: optsWithGlobals() recovers --json,
         // which the parent command otherwise swallows.
-        await handleAsyncAction("crm object add-attr", { json: Boolean(command.optsWithGlobals().json) }, () => requestOxygen(`/api/cli/crm/objects/${encodeURIComponent(object)}/attributes`, {
+        await handleAsyncAction("crm objects add-attr", { json: Boolean(command.optsWithGlobals().json) }, () => requestOxygen(`/api/cli/crm/objects/${encodeURIComponent(object)}/attributes`, {
             method: "POST",
             body: buildCrmObjectAddAttrBody(options),
         }));
@@ -5855,7 +5868,7 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         .option("--live", "Apply the change. Default is dry-run.")
         .option("--json", "Print a JSON envelope.")
         .action(async (object, attribute, options, command) => {
-        await handleAsyncAction("crm object update-attr", { json: Boolean(command.optsWithGlobals().json) }, () => requestOxygen(`/api/cli/crm/objects/${encodeURIComponent(object)}/attributes/${encodeURIComponent(attribute)}`, { method: "PATCH", body: buildCrmObjectUpdateAttrBody(options) }));
+        await handleAsyncAction("crm objects update-attr", { json: Boolean(command.optsWithGlobals().json) }, () => requestOxygen(`/api/cli/crm/objects/${encodeURIComponent(object)}/attributes/${encodeURIComponent(attribute)}`, { method: "PATCH", body: buildCrmObjectUpdateAttrBody(options) }));
     }))
         .addCommand(new Command("remove-attr")
         .description("Remove a field you added to a CRM object. The column is archived (restorable with `columns restore <table> <key>`, which brings the field back; no cell destroyed), the object stops listing it, and the key is free for a new field at once. Oxygen-shipped fields, the title field, identity fields and relations cannot be removed. Defaults to dry-run.")
@@ -5865,7 +5878,7 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         .option("--live", "Remove the field. Default is dry-run.")
         .option("--json", "Print a JSON envelope.")
         .action(async (object, attribute, options, command) => {
-        await handleAsyncAction("crm object remove-attr", { json: Boolean(command.optsWithGlobals().json) }, () => requestOxygen(`/api/cli/crm/objects/${encodeURIComponent(object)}/attributes/${encodeURIComponent(attribute)}`, { method: "DELETE", body: { mode: resolveLiveDryRunMode(options) } }));
+        await handleAsyncAction("crm objects remove-attr", { json: Boolean(command.optsWithGlobals().json) }, () => requestOxygen(`/api/cli/crm/objects/${encodeURIComponent(object)}/attributes/${encodeURIComponent(attribute)}`, { method: "DELETE", body: { mode: resolveLiveDryRunMode(options) } }));
     })))
         .addCommand(new Command("search")
         .description("Search CRM records by identity or record label. Takes ONE query; narrow the objects with --object, not a second argument.")
@@ -6161,6 +6174,14 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
                 },
             });
         });
+    }))
+        .addCommand(new Command("keep")
+        .description("Keep one sample record as real. A new workspace starts with sample companies, CEOs and deals: their reads carry `_sample: true` (`sample: true` on `crm pipeline` deals) and pipeline totals leave them out. Keep one only when it is real; it then counts like any record. Linked records stay as they are: a kept sample deal's company and contact stay samples until each is kept. Free and idempotent, no undo.")
+        .argument("<object>", "CRM object slug: companies, people or deals.")
+        .argument("<record>", "Row id (`crm pipeline` lists each deal's), or an identity value such as stripe.com.")
+        .option("--json", "Print a JSON envelope.")
+        .action(async (object, record, options) => {
+        await handleAsyncAction("crm keep", options, () => requestOxygen(`/api/cli/crm/objects/${encodeURIComponent(object)}/records/${encodeURIComponent(record)}/keep`, { method: "POST" }));
     }))
         .addCommand(new Command("relationships")
         .description("Define CRM relationships and manage record relationship edges.")
@@ -6259,7 +6280,7 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         await handleAsyncAction("crm activity timeline", options, () => requestOxygen(buildCrmTimelinePath(object, rowId, options)));
     })))
         .addCommand(new Command("describe")
-        .description("Describe one configured CRM object: its fields, identities and relationships. Pass --field <key> to read just one field (its name, type, choices, flags) instead of the whole object. A deleted custom object answers not found; `crm objects delete <slug> --dry-run` shows its archived state.")
+        .description("Describe one configured CRM object: its fields, identities and relationships. Pass --field <key> to read just one field (its name, type, choices, flags) instead of the whole object. Custom slugs accept hyphens. A deleted custom object answers crm_object_not_found with state archived; its next step, `crm objects delete <slug> --dry-run`, shows the purge time.")
         .argument("<object>", "CRM object slug, such as companies or people.")
         .option("--field <key>", "Narrow the answer to one field by its key, e.g. --field pipeline_stage. Also accepted as --attribute.")
         .option("--attribute <key>", "Alias for --field.")
@@ -6293,7 +6314,7 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         }));
     }))
         .addCommand(new Command("pipeline")
-        .description("Show the deals pipeline grouped by stage, with per-stage counts and amount totals.")
+        .description("Show the deals pipeline grouped by stage, with per-stage counts and amount totals. Seeded sample deals are listed with `sample: true` but never counted; `samples` reports them.")
         .option("--pipeline <name>", "Filter to one pipeline, such as sales, expansion, or renewal.")
         .option("--limit <limit>", "Maximum deals to return per stage.")
         .option("--json", "Print a JSON envelope.")
@@ -6371,7 +6392,7 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         .requiredOption("--object <object>", "Provider object: hubspot contacts|companies, attio people|companies, or pipedrive persons|organizations|deals. Import Pipedrive persons and organizations before deals so each deal links to them.")
         .option("--into <object>", "Oxygen CRM object slug to import into. Defaults to the natural mapping.")
         .option("--limit <n>", "Max records to pull this run.")
-        .option("--max-credits <n>", "OXYGEN spend ceiling for the run. Own-API-key calls cost 0.05 credits each; OAuth follows its tool quote, and Workflow steps are billed separately. Use --limit for rows; CRM API quota also applies.")
+        .option("--max-credits <n>", "OXYGEN credit ceiling for the run. Review the current quote: own-API-key calls cost 0.05 credits each after repricing takes effect; OAuth follows its tool quote. Workflow steps count toward the ceiling after repricing takes effect. Use --limit for rows; provider billing and API quota are separate.")
         .option("--approved", "Confirm a live import after inspecting a dry run.")
         .option("--dry-run", "Preview the import without pulling. Default.")
         .option("--live", "Run the live import. Requires --approved and --max-credits.")
@@ -6390,7 +6411,7 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         .option("--cron <cron>", "Cron expression for the scheduled reconciliation cadence, e.g. '*/15 * * * *'.")
         .option("--timezone <tz>", "IANA timezone the cron schedule runs in, e.g. America/New_York. Defaults to UTC.")
         .option("--max-rows <n>", "Per-cycle row cap, separate from the --max-credits OXYGEN spend ceiling. OAuth provider calls follow their tool quote; own-API-key calls and live Workflow steps have separate charges.")
-        .option("--max-credits <n>", "Managed-credit + external-quota cap per cycle.")
+        .option("--max-credits <n>", "OXYGEN credit ceiling per cycle. Provider/data-read fees count toward it; Workflow steps count after repricing takes effect. Provider billing and API quota are separate.")
         .option("--field-mappings-json <json>", "HubSpot custom-property mappings as a JSON array of {oxygen_field, provider_field, direction}. Pass [] to clear; canonical identity/name mappings stay fixed.")
         .option("--approved", "Confirm a live configuration after inspecting a dry run.")
         .option("--dry-run", "Preview the configuration and next cycle without writing. Inbound/bidirectional previews perform bounded CRM reads and may use external API quota. Default.")
@@ -6409,8 +6430,8 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         .option("--direction <direction>", "Override this cycle's direction: inbound, outbound, or bidirectional.")
         .option("--since <iso>", "Read provider changes since this watermark.")
         .option("--config-id <id>", "Use this standing CRM sync configuration for the cycle.")
-        .option("--max-rows <n>", "Per-cycle row cap. The real volume brake on provider writes (BYOK writes cost 0 Oxygen credits).")
-        .option("--max-credits <n>", "Managed-credit + external-quota cap for this cycle.")
+        .option("--max-rows <n>", "Per-cycle row cap, separate from the --max-credits OXYGEN spend ceiling. OAuth provider calls follow their tool quote; own-API-key calls and live Workflow steps have separate charges.")
+        .option("--max-credits <n>", "OXYGEN credit ceiling per cycle. Provider/data-read fees count toward it; Workflow steps count after repricing takes effect. Provider billing and API quota are separate.")
         .option("--approved", "Confirm a live cycle after inspecting a dry run.")
         .option("--dry-run", "Preview the cycle without pulling or pushing. Default.")
         .option("--live", "Run the live reconciliation cycle. Requires --approved and --max-credits.")
@@ -6429,7 +6450,7 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         .option("--cron <cron>", "Cron expression for the cadence, e.g. '*/15 * * * *'. Defaults to every 15 minutes.")
         .option("--timezone <tz>", "IANA timezone the cron runs in. Defaults to UTC.")
         .requiredOption("--max-rows <n>", "Per-cycle row cap — the volume brake on provider writes (required).")
-        .requiredOption("--max-credits <n>", "Managed-credit + external-quota cap per cycle (required).")
+        .requiredOption("--max-credits <n>", "OXYGEN credit ceiling per cycle. Provider/data-read fees count toward it; Workflow steps count after repricing takes effect. Provider billing and API quota are separate.")
         .option("--field-mappings-json <json>", "HubSpot custom-property mappings as a JSON array of {oxygen_field, provider_field, direction}. Omit to preserve the configured mappings.")
         .option("--approved", "Confirm enabling scheduled provider writes after inspecting a dry run.")
         .option("--no-run-now", "Do not run an immediate first cycle after enabling.")
@@ -6466,7 +6487,7 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         await handleAsyncAction("crm sync status", resolved, () => requestOxygen(buildCrmSyncConfigStatusPath(resolved)));
     }))
         .addCommand(new Command("links")
-        .description("Show provider record links (HubSpot/Attio ids) mapped to one Oxygen CRM record.")
+        .description("Show provider record links (HubSpot/Attio/Pipedrive ids) mapped to one Oxygen CRM record.")
         .argument("<object>", "Oxygen CRM object slug, such as companies or people.")
         .argument("<row_id>", "Oxygen CRM record row id.")
         .option("--json", "Print a JSON envelope.")
@@ -7147,7 +7168,7 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         .option("--offset <n>", "Skip this many rows and start there — jump straight to a row without paging to it. Mutually exclusive with --cursor.")
         .option("--fields <columns>", "Comma-separated column keys or ids to include.")
         .option("--filter-json <json>", "Legacy filter object or array, e.g. '{\"column\":\"mobile_phone_e164\",\"op\":\"is_null\"}'. Mutually exclusive with --filter-tree-json/--sort-json.")
-        .option("--filter-tree-json <json>", "Airtable-style filter group, e.g. '{\"type\":\"group\",\"conjunction\":\"and\",\"children\":[{\"type\":\"leaf\",\"columnKey\":\"stage\",\"operator\":\"is\",\"value\":\"won\"}]}'. Add \"path\":\"a.b\" to a leaf to match a key inside a JSON cell, e.g. the rows one Function run touched: {\"columnKey\":\"<function_column>\",\"path\":\"action_run_id\",\"operator\":\"is\",\"value\":\"<run_id>\"}. Mutually exclusive with --filter-json.")
+        .option("--filter-tree-json <json>", `Airtable-style filter group, e.g. '{\"type\":\"group\",\"conjunction\":\"and\",\"children\":[{\"type\":\"leaf\",\"columnKey\":\"stage\",\"operator\":\"is\",\"value\":\"won\"}]}'. Add \"path\":\"a.b\" to a leaf to match a key inside a JSON cell, e.g. the rows one Function run touched: {\"columnKey\":\"<function_column>\",\"path\":\"action_run_id\",\"operator\":\"is\",\"value\":\"<run_id>\"}. Leaf operators: ${FILTER_TREE_OPERATORS.join(", ")} (is_true/is_false need a checkbox column; --filter-json's is_null/is_not_null are is_empty/is_not_empty here). Mutually exclusive with --filter-json.`)
         .option("--search <text>", "Find rows by one piece of text, matched against every text, number, date and checkbox column at once — the grid's magnifier. Combines with --filter-tree-json (both must hold). Use --filter-tree-json when you know which column to match.")
         .option("--formula-values <mode>", "Formula filters are refused by default because displayed formulas are evaluated live. Refresh the formula's stored cells with `columns run <table> <column> --force` (0 credits), then pass 'materialized'; filtering uses that stored snapshot and returns a freshness note.")
         .option("--sort-json <json>", "Ordered sort rules, e.g. '[{\"columnKey\":\"_created_at\",\"direction\":\"desc\"}]'. Earlier rules dominate. Mutually exclusive with --filter-json.")
@@ -8371,7 +8392,7 @@ Examples:
         .option("--live", "Authorize this manual run to spend and write. Requires --max-credits. Without it the command previews and nothing is billed.")
         .option("--approved", "Same as --live. Accepted because the global help footer names --approved as the way to authorize a credit-spending command.")
         .option("--max-credits <credits>", `Hard credit ceiling for the whole pass. Required with --live, and clamped server-side to ${KNOWLEDGE_BOOTSTRAP_MAX_CREDITS}.`)
-        .option("--force", "Clear an existing once-ever marker first and re-arm the pass. This is the one deliberate way to research the same workspace twice — pair it with --live to actually spend again.")
+        .option("--force", "Re-arm past an existing once-ever marker, the one deliberate way to research the same workspace twice. Without --live it only previews the re-arm for free: nothing is cleared or written. With --live it replaces the marker with a new pass and spends again.")
         .option("--json", "Print a JSON envelope.")
         .action(async (options) => {
         await handleAsyncAction("knowledge bootstrap", options, () => requestOxygen("/api/cli/knowledge/bootstrap", {
@@ -10951,9 +10972,10 @@ Examples:
         await handleAsyncAction("companies search filters", options, () => requestOxygen(`/api/cli/companies/search/preview${readCompanySourceQuery(options.source)}`));
     }))
         .addCommand(new Command("preview")
-        .description("Preview up to 50 rows free, using native filters from companies search filters. --source google_maps previews 20 businesses with a q business-and-area filter; total_results is unavailable when the API publishes no total. --source hiring previews matching job postings with an exact total.")
+        .description("Preview up to 50 rows free, using native filters from companies search filters. --source google_maps previews 20 businesses with a q business-and-area filter; total_results is unavailable when the API publishes no total. --source hiring previews matching job postings with an exact total. Totals, notes and the priced next step come first and the rows last; each row is compact (name, domain, LinkedIn, headcount, industry, location, a one-line description) unless --view full.")
         .requiredOption("--filters-json <json-or-file>", 'Native filters as JSON or @file/path. Google Maps requires q, placeId or cid; other sources accept {} for all results.')
         .option("--source <source>", "company_search (default), hiring or google_maps. Filters for hiring nest under job and company, e.g. {\"job\":{\"title\":{\"include\":[\"Account Executive\"]}}}.")
+        .option("--view <view>", "compact (default) or full: full adds each row's provider record as raw_source, about 2.5 KB a company.")
         .option("--json", "Print a JSON envelope.")
         .action(async (options) => {
         await handleAsyncAction("companies search preview", options, () => requestOxygen("/api/cli/companies/search/preview", {
@@ -10961,6 +10983,7 @@ Examples:
             body: {
                 filters: parseJsonObject(readFileIfPresent(options.filtersJson)),
                 ...(readCompanySearchSource(options.source) !== "company_search" ? { source: readCompanySearchSource(options.source) } : {}),
+                ...(options.view !== undefined ? { view: options.view } : {}),
             },
         }));
     }))
@@ -11082,7 +11105,7 @@ Examples:
         await handleAsyncAction("people search filters", options, () => requestOxygen("/api/cli/people/search/preview"));
     }))
         .addCommand(new Command("preview")
-        .description("Preview up to 50 people free, using native filters from people search filters. For the companies in one of your tables, pass --from-table with --linkedin-url-column; for a few named companies, put their LinkedIn company URLs in company.linkedin_url. Then people search run --source people_search --source-filters-json <same filters> for a quoted, approved table fill; people search run --from-table instead runs one paid search per company in a table and covers each one.")
+        .description("Preview up to 50 people free, using native filters from people search filters. For the companies in one of your tables, pass --from-table with --linkedin-url-column; for a few named companies, put their LinkedIn company URLs in company.linkedin_url. Totals, per-company counts, company_fit (what a person row cannot tell you about fit) and the priced next step come first, the rows last. Then people search run --source people_search --source-filters-json <same filters> for a quoted, approved table fill; people search run --from-table instead runs one paid search per company in a table and covers each one.")
         .requiredOption("--filters-json <json-or-file>", 'Nested native filters as JSON or @file/path, e.g. {"people":{"job_title":{"include":["VP Sales"]}},"company":{"linkedin_url":["https://linkedin.com/company/acme"]}}; {} searches all.')
         .option("--from-table <table>", "Free sample of Find decision makers at companies: search the first 50 companies in this table in one free page. Pair with --linkedin-url-column.")
         .option("--linkedin-url-column <key>", "Column of --from-table that holds each company's LinkedIn URL.")
@@ -11269,49 +11292,32 @@ Examples:
     }))
         .addCommand(new Command("provider")
         .description("Per-provider call-rate overrides and BYOK daily warning thresholds. With no subcommand, lists policies (same as `limits provider list`).")
-        .addCommand(new Command("list")
-        .description("List enforced provider overrides and the plan-tier BYOK daily threshold with its enforcement mode.")
-        .option("--provider <provider>", "Filter saved overrides to one provider id; plan-tier defaults are always returned.")
+        .addCommand(addProviderLimitFlags(new Command("list")
+        .description("List enforced provider overrides and the plan-tier BYOK daily threshold with its enforcement mode."), "list")
         .option("--json", "Print a JSON envelope.")
         .action(async (options) => {
-        const query = new URLSearchParams();
-        if (readOption(options.provider))
-            query.set("provider", readOption(options.provider) ?? "");
-        const suffix = query.toString();
+        const suffix = providerLimitQuery(options, "list");
         await handleAsyncAction("limits provider list", options, () => requestOxygen(`/api/cli/limits/provider${suffix ? `?${suffix}` : ""}`));
     }), { isDefault: true })
-        .addCommand(new Command("set")
-        .description("Set an enforced per-provider call ceiling. Use --window-seconds 86400 for an explicit daily policy.")
-        .requiredOption("--provider <provider>", "Provider id (e.g. hubspot, leadmagic).")
-        .requiredOption("--limit <n>", "Calls allowed per window.")
-        .requiredOption("--window-seconds <n>", "Window size in seconds (86400 = one day).")
-        .option("--operation <operation>", "Scope to one operation; omitted = provider-wide.")
+        .addCommand(addProviderLimitFlags(new Command("set")
+        .description("Set an enforced provider request limit; admin/owner only. Approve the exact provider, operation and window before running; execution saves the policy. Raising a cap can permit more use. 0 credits."), "set")
         .option("--json", "Print a JSON envelope.")
         .action(async (options) => {
         await handleAsyncAction("limits provider set", options, () => requestOxygen("/api/cli/limits/provider", {
             method: "POST",
-            body: {
-                provider: options.provider,
-                limit: Number(options.limit),
-                window_seconds: Number(options.windowSeconds),
-                ...(options.operation ? { operation: options.operation } : {}),
-            },
+            body: providerLimitBody(options),
         }));
     }))
-        .addCommand(new Command("delete")
-        .description("Remove a per-provider override (falls back to the plan-tier default).")
-        .requiredOption("--provider <provider>", "Provider id.")
-        .option("--operation <operation>", "Operation scope; omitted targets the provider-wide row.")
+        .addCommand(addProviderLimitFlags(new Command("delete")
+        .description("Remove one provider override; admin/owner only. Approve its selector before running; execution deletes the policy. Other overrides remain; BYOK defaults may be observe-only. 0 credits."), "delete")
         .option("--json", "Print a JSON envelope.")
         .action(async (options) => {
-        const query = new URLSearchParams({ provider: options.provider });
-        if (options.operation)
-            query.set("operation", options.operation);
+        const query = providerLimitQuery(options, "delete");
         await handleAsyncAction("limits provider delete", options, () => requestOxygen(`/api/cli/limits/provider?${query.toString()}`, { method: "DELETE" }));
     })));
     program
         .command("billing")
-        .description("Plan and managed credit commands. Spend splits into FLEXIBLE (ad-hoc: enrichment, AI, automation — drawn from your free-to-spend balance) and FIXED recurring per-resource monthly commitments blocked out of it; see `billing commitments`. THREE CLOCKS, deliberately different: the CREDIT CYCLE that `billing allowance` reports against (your plan's monthly grant window); each resource's own COMMITMENT RENEWAL, anchored to the day you connected it, so `billing commitments --json` next_due_at rarely matches the cycle end; and your SUBSCRIPTION PERIOD in `billing balance` (annual plans span many credit cycles). A number from one clock will not reconcile against another. On a plan that pays for several workspaces, `billing usage --group-by workspace` totals what each one spent. To price a month of outreach before building it (leads, enrichment, sequence steps, senders), run `billing estimate`. Failed-payment grace, suspension, and recovery: https://oxygen-agent.com/docs/safety/billing.")
+        .description("Plan and managed credit commands. Credits reserved but not yet charged are listed hold by hold with `billing usage --meter holds`. Spend splits into FLEXIBLE (ad-hoc: enrichment, AI, automation — drawn from your free-to-spend balance) and FIXED recurring per-resource monthly commitments blocked out of it; see `billing commitments`. THREE CLOCKS, deliberately different: the CREDIT CYCLE that `billing allowance` reports against (your plan's monthly grant window); each resource's own COMMITMENT RENEWAL, anchored to the day you connected it, so `billing commitments --json` next_due_at rarely matches the cycle end; and your SUBSCRIPTION PERIOD in `billing balance` (annual plans span many credit cycles). A number from one clock will not reconcile against another. On a plan that pays for several workspaces, `billing usage --group-by workspace` totals what each one spent. To price a month of outreach before building it (leads, enrichment, sequence steps, senders), run `billing estimate`. Failed-payment grace, suspension, and recovery: https://oxygen-agent.com/docs/safety/billing.")
         .addCommand(new Command("change")
         .description("Create an approval link (`approval_url`) to start or change a plan; nothing changes until an organization admin confirms. Compare all six prices, credits and yearly terms with `billing balance` first. Use --interval month --term year for twelve discounted monthly payments, renewing for another year: the $99 plan costs $82.50 per month before tax, not $990 upfront. Credits arrive monthly after successful payment. On a workspace that has never had a plan, the Checkout for any monthly plan from $99 up carries the first-month offer, half its first month, while its 24-hour window is open (`offer`; `billing balance` lists every size under `first_month_offer.plans`): `amount_due_now` is then the discounted first month and `next_invoice_total` the regular price, both before tax. Creating that Checkout starts the window if nothing has started it yet. Upgrades during an annual commitment apply immediately with proration and keep its end date; downgrades and switching to a monthly commitment wait for the term end. Switching from a monthly commitment to yearly starts at the next monthly boundary. Existing prepaid yearly plans keep their cadence unless a new term is selected; transitions wait until their paid period ends. Omit interval and term to preserve the current contract. For an existing subscription, a yearly preview returns charges, start and term-end dates; nothing changes until separate confirmation.")
         .requiredOption("--to <plan>", 
@@ -11351,10 +11357,11 @@ Examples:
         await handleAsyncAction("billing balance", options, () => requestOxygen("/api/cli/billing/balance"));
     }))
         .addCommand(new Command("commitments")
-        .description("List the fixed monthly credit commitments blocked at your subscription renewal — per connected sending mailbox, OXYGEN-sold mailbox, warm-up, deliverability, connected LinkedIn, WhatsApp and X account, and rented phone number — with unit price, quantity, and next-due date. When your balance cannot cover an account's renewal, sending from that account pauses at once and it disconnects 7 days later (a phone number is released after 30): paused_quantity, past_due_since, disconnects_at and topup_url say which kind, since when and by when to top up; a top-up resumes it within minutes. This is the FORWARD run-rate: what your currently-connected resources will cost at their next renewal. It is NOT this cycle's charges — compare `billing allowance` fixed_spent_credits for that, and expect the two to differ. Each resource renews on its OWN anchor (the day it was connected), so next_due_at is per-resource and rarely lines up with the credit cycle. The top-level count is the number of individual resource rows; the commitments list groups them by kind. A past next_due_at is an unpaid renewal still due. To stop all infrastructure renewals while retaining records, preview `workspace infrastructure-exit`; plan cancellation alone does not stop these resources. Read-only, 0 Oxygen credits.")
+        .description("List recurring commitments, or inspect monthly connection prices and first-debit timing with --view connection-prices without creating authorization. Default: list the fixed monthly credit commitments — per connected sending mailbox, OXYGEN-sold mailbox, warm-up, deliverability, connected LinkedIn, WhatsApp and X account, and rented phone number — with unit price, quantity, and next-due date. When your balance cannot cover an account's renewal, sending from that account pauses at once and it disconnects 7 days later (a phone number is released after 30): paused_quantity, past_due_since, disconnects_at and topup_url say which kind, since when and by when to top up; a top-up resumes it within minutes. This is the FORWARD run-rate: what your currently-connected resources will cost at their next renewal. It is NOT this cycle's charges — compare `billing allowance` fixed_spent_credits for that, and expect the two to differ. Each resource renews on its OWN anchor (the day it was connected), so next_due_at is per-resource and rarely lines up with the credit cycle. The top-level count is the number of individual resource rows; the commitments list groups them by kind. A past next_due_at is an unpaid renewal still due. To stop all infrastructure renewals while retaining records, preview `workspace infrastructure-exit`; plan cancellation alone does not stop these resources. Read-only, 0 Oxygen credits.")
+        .addOption(new Option("--view <view>", "Inspect connection-prices before authorizing a new account, or current commitments (default).").choices(["commitments", "connection-prices"]))
         .option("--json", "Print a JSON envelope.")
         .action(async (options) => {
-        await handleAsyncAction("billing commitments", options, () => requestOxygen("/api/cli/billing/commitments"));
+        await handleAsyncAction("billing commitments", options, () => requestOxygen(`/api/cli/billing/commitments${options.view ? `?view=${encodeURIComponent(options.view)}` : ""}`));
     }))
         .addCommand(new Command("estimate")
         .description("Estimate what a month of outreach costs before you build it: leads × enrichment × sequence steps × senders. Returns one line per cost (enrichment credits expected and worst case, each mailbox and LinkedIn account at its monthly price, sends at 0 credits), `totals`, `plan_fit` (does your plan cover it, and the top-up if not), `recommended_plan` (the cheapest plan plus top-ups that covers it) and `limits` (emails per mailbox, LinkedIn invites and messages per account; `limits_hit` names each one the scenario exceeds and `senders_needed` how many senders it takes). Steps are counted per channel: a 3-step sequence of two emails and one LinkedIn invite is `--email-steps 2 --linkedin-steps 1`, and `summary` restates what was priced. `monthly_usd` is all in: plan, top-ups and dollar seats. Prices are the ones in force; `sender_billing` says whether senders are paid as dollar seats or monthly credit reservations. Example: `oxygen billing estimate --leads 500 --enrich work_email --email-steps 2 --linkedin-steps 1 --mailboxes 1 --linkedin-accounts 1 --json`. `web_url` opens the same estimate in Settings → Plan limits. Read-only, 0 Oxygen credits.")
@@ -11383,7 +11390,7 @@ Examples:
         }));
     }))
         .addCommand(new Command("seats")
-        .description("Show sending capacity per channel: how many seats are purchased, how many are grandfathered, how many senders are connected, and how many are left. Sending seats are what let you CONNECT a sender — a LinkedIn account, WhatsApp number, phone number, or email mailbox — and they are billed in dollars on their own subscription, separate from your plan and separate from credits. You do not need a plan to buy seats. Seats belong to the billing owner: a workspace linked to another organization's plan with `orgs billing-link` connects senders against that organization's seats and buys them there. A grandfathered value of null means unlimited for that channel. Email mailbox allocation is read from this workspace's own database; when it cannot be read, the email seat's allocated/available/can_connect read null and `email_sender_allocation` is `tenant_unavailable`. When seats are retired because connected accounts reserve credits instead, the envelope says `status: seats_retired` with a `next_step`; seats already held keep covering their accounts until they end at renewal (`held_seats_end_at`), and from then on each of those accounts reserves credits instead, never both (`after_seats_end` on each channel gives the monthly reservation). Read-only, 0 Oxygen credits.")
+        .description("Show sending seats, current billing-period end and next-connection eligibility (null: unknown, with a reason). Includes purchased, grandfathered (null: unlimited), connected and left per channel. Seats belong to the billing owner. Email mailbox allocation is workspace-scoped; unreadable mailbox data leaves allocated/available/can_connect null. When retired, held_seats_end_at_reason and held_seats_end_at_message distinguish no paying subscription from an unknown end date; after_seats_end gives monthly credit prices (null: unconfirmed). connect_eligibility explains a single new connection's credit affordability, sponsorship and attachment capacity; paying-seat coverage may remain unknown. Existing accounts and reconnects differ. Charges 0 credits and creates no reservation; like billing balance, it may apply a due plan grant or already-due sponsored-credit expiry.")
         .option("--json", "Print a JSON envelope.")
         .action(async (options) => {
         await handleAsyncAction("billing seats", options, () => requestOxygen("/api/cli/billing/seats"));
@@ -11415,8 +11422,8 @@ Examples:
         await handleAsyncAction("billing allowance", options, () => requestOxygen("/api/cli/billing/allowance"));
     }))
         .addCommand(new Command("usage")
-        .description("Show credit ledger events (each tagged with its FIXED/FLEXIBLE spend_class), workflow step usage (automation_actions: credits per step, credits billed; writing rows is free), calls with your own API keys (byok_calls: the platform fee per call and the fee credits this month; your provider bills the call itself), or connected LinkedIn and WhatsApp accounts (provider_seats: the rolling-30d peak and its implied Unipile cost; what each account is charged is its credit reservation in `billing commitments`). On a plan that pays for several workspaces (an agency covering client workspaces), `--group-by workspace` totals the credits each workspace spent (`by_workspace`) and `--workspace <id|slug>` narrows the ledger to one of them; a linked client workspace sees only its own spend.")
-        .option("--meter <meter>", "credits, automation_actions, byok_calls, or provider_seats (rolling-30d peak connected accounts and the flat per-account charge; each account's reservation is listed by `billing commitments`). Defaults to credits.")
+        .description("Show credit ledger events (each tagged with its FIXED/FLEXIBLE spend_class), workflow step usage (automation_actions: credits per step, credits billed; writing rows is free), calls with your own API keys (byok_calls: the platform fee per call and the fee credits this month; your provider bills the call itself), or connected LinkedIn and WhatsApp accounts (provider_seats: the rolling-30d peak and its implied connectivity cost; what each account is charged is its credit reservation in `billing commitments`). On a plan that pays for several workspaces (an agency covering client workspaces), `--group-by workspace` totals the credits each workspace spent (`by_workspace`) and `--workspace <id|slug>` narrows the ledger to one of them; a linked client workspace sees only its own spend. managed_credits_used counts captured credits; for where credits went by category, provider or tool, with shares, run `billing audit`.")
+        .option("--meter <meter>", "credits, automation_actions, byok_calls, provider_seats (rolling-30d peak connected accounts and the flat per-account charge; each account's reservation is listed by `billing commitments`), or holds (each held reservation behind reserved_credits in this workspace: credits, run, why it is held (an unmarked LinkedIn lookup hold cannot say whether its result was unknown or delivered), and automatic_return: only a LinkedIn lookup hold from 24 hours to 30 days old is eligible, only while that is switched on, and an hourly release returns it on a later pass with no fixed deadline; read-only, newest first, --days up to 365 and --limit apply). Defaults to credits.")
         .option("--days <n>", "Lookback window in days. Defaults to 30.")
         .option("--from <iso>", "Only include ledger events at or after this ISO timestamp.")
         .option("--to <iso>", "Only include ledger events at or before this ISO timestamp.")
@@ -11444,7 +11451,7 @@ Examples:
         });
     }))
         .addCommand(new Command("audit")
-        .description("Summarize where managed credits were granted, reserved, captured, released, or spent. Groups carrying a category are tagged with a FIXED/FLEXIBLE spend_class, and totals include fixed_credits_spent/flexible_credits_spent — pass --group-by category (or include it alongside other keys) for that split to be meaningful.")
+        .description("Summarize where managed credits were granted, reserved, captured, released, or spent. Every result lists spend_by_category (each spend area's credits and share of the window's spend, largest first) and totals fixed_credits_spent/flexible_credits_spent over the whole window, whatever --group-by is. groups_truncated says when --limit cut grouped rows, and managed_credits_spent_outside_groups how much they carried. Spent is reserved minus released, so it includes open holds; totals.managed_credits_captured is the settled part, equal to `billing usage`'s managed_credits_used.")
         .option("--days <n>", "Lookback window in days. Defaults to 365.")
         .option("--from <iso>", "Only include ledger events at or after this ISO timestamp.")
         .option("--to <iso>", "Only include ledger events at or before this ISO timestamp.")
@@ -11816,8 +11823,8 @@ Examples:
         .command("admin")
         .description("Staff-only commands.")
         .addCommand(new Command("kpis")
-        .description("Show company acquisition with self-reported signup-channel attribution, signup-to-CLI/MCP activation, matured seven-day trial conversion, positive-paid MRR/ARR, and paid churn separated from trial loss. OXYGEN staff only; workspace admin role alone does not grant access.")
-        .addOption(new Option("--range <range>", "Range for acquisition, actor-and-surface-tracked activation, seven-day trial cohorts, and churn; current MRR/ARR and scheduled cancellations remain point-in-time.")
+        .description("Show the company conversion funnel (visitors → signups → agent connected → CLI/MCP activation → paid, with step rates), self-reported signup-channel attribution, new and positive-paid MRR/ARR, and paid churn separated from trial loss. OXYGEN staff only; workspace admin role alone does not grant access.")
+        .addOption(new Option("--range <range>", "Range for acquisition, the funnel's signup cohort, new revenue, and churn; current MRR/ARR and scheduled cancellations remain point-in-time.")
         .choices(["7d", "30d", "90d"])
         .default("30d"))
         .option("--json", "Print a JSON envelope.")
@@ -12478,7 +12485,7 @@ Examples:
         .description("Start an attended Workspace Copilot session on Oxygen Auto — Oxygen picks the model, keeps one conversation on one model, and runs its own errands on a cheaper one. Starting is free; the next send starts inference. No inference budget is required; inference bills at 5x actual model cost under a 3,000-credit internal platform safety backstop. Legacy budget and tier flags remain accepted for older clients but do not authorize or cap spend. Paid or external actions require separate approval.")
         .option("--budget-credits <number>", "Legacy compatibility only: accepted and clamped, but does not authorize or cap attended Copilot inference.")
         .option("--tier <auto|low|medium|high>", "Legacy. Sessions run on Oxygen Auto; Oxygen picks the model. The three older tiers are still accepted so existing scripts keep working.")
-        .option("--model <id>", "Pin a specific priced model id instead of letting Oxygen choose.")
+        .option("--model <id>", "Pin a specific priced model id instead of letting Oxygen choose. An id Oxygen does not price is ignored and the session runs on Oxygen Auto.")
         .option("--per-turn-ceiling <number>", "Legacy compatibility only: accepted and clamped, but does not cap an attended turn.")
         .option("--journey <slug>", "Optional journey slug to seed the session's goal and context.")
         .option("--title <text>", "Optional human title for the session.")
@@ -12669,8 +12676,8 @@ Examples:
         .command("runs")
         .description("Workspace run ledger and provenance. `runs list --table <table>` is one table's full run history: imports, row writes and column runs.")
         .addCommand(new Command("list")
-        .description("List recent tenant runs, newest first.")
-        .option("--table <table>", "Only runs of this table (id, slug or table URL), e.g. to check whether a column run started.")
+        .description("List workspace runs, newest first; --table gives one table's full run history.")
+        .option("--table <table>", "One table's full run history (id, slug or table URL): imports, row writes, column runs and Function calls.")
         .option("--limit <n>", "Maximum runs to return. Defaults to 50.")
         .option("--json", "Print a JSON envelope.")
         .action(async (options) => {
@@ -13244,9 +13251,9 @@ Examples:
         await handleAsyncAction("find linkedin", options, () => requestOxygen("/api/cli/find/run", { method: "POST", body: buildFindBody("linkedin", options) }));
     }))
         .addCommand(new Command("person")
-        .description("Enrich one person from a LinkedIn URL, a LinkedIn public id, a Sales Navigator link, or an email / name + company: one managed profile lookup returns the profile block — first, last and full name, current company and its LinkedIn URL, job title, job start date, education and school, headline, bio, location and follower count — the same fields the person_enrich table preset extracts for free. An email or name is first resolved to the profile through the LinkedIn URL waterfall (priced as an identity prerequisite). A Sales Navigator link or member id resolves only on the workspace's own HarvestAPI key. dry_run previews the lookup and its price for free.")
+        .description("Enrich one person from a LinkedIn URL, a LinkedIn public id or member id, a Sales Navigator link, or an email / name + company: one managed profile lookup returns the profile block — first, last and full name, current company and its LinkedIn URL, job title, job start date, education and school, headline, bio, location and follower count — the same fields the person_enrich table preset extracts for free. An email or name is first resolved to the profile through the LinkedIn URL waterfall (priced as an identity prerequisite). A member id uses managed enrichment. A Sales Navigator link resolves on the workspace's own HarvestAPI key. dry_run previews the lookup and its price for free.")
         .option("--linkedin-url <url>", "Person LinkedIn profile URL (linkedin.com/in/<handle>).")
-        .option("--linkedin-id <id>", "LinkedIn public identifier (the part after /in/), or an ACoAA/ACwAA member id (BYOK HarvestAPI only).")
+        .option("--linkedin-id <id>", "LinkedIn public identifier (the part after /in/), or a member ID beginning ACo/ACw; both support managed enrichment. Preview checks input shape and price without resolving the ID.")
         .option("--sales-navigator-url <url>", "Sales Navigator lead or people link; resolved on the workspace's own HarvestAPI key.")
         .option("--email <email>", "Known email; resolved to the profile through the LinkedIn URL waterfall first.")
         .option("--full-name <name>", "Person full name; with --company-domain or --company-name, resolved through the LinkedIn URL waterfall first.")
@@ -13537,17 +13544,21 @@ Examples:
         });
     })))
         .addCommand(new Command("list")
-        .description("List supported integrations and this org's connections.")
+        .description("List supported integrations and this org's connections. Add --integration <id> to read one integration and its connection state.")
+        .option("--integration <id>", "Return only this integration and its connections, such as hubspot.")
         .option("--json", "Print a JSON envelope.")
         .action(async (options) => {
-        await handleAsyncAction("integrations list", options, () => requestOxygen("/api/cli/integrations/composio/list"));
+        await handleAsyncAction("integrations list", options, () => {
+            const integration = readOption(options.integration)?.trim();
+            return requestOxygen(`/api/cli/integrations/composio/list${integration ? `?integration=${encodeURIComponent(integration)}` : ""}`);
+        });
     }))
         .addCommand(addContractFlags(new Command("connect")
-        .description("Connect an integration. For OAuth toolkits, running this command immediately creates a pending provider authorization and returns a redirect URL; account access starts only if you approve on the provider's page. This is not a price preview. On a repriced workspace, a connected X account reserves 1,000 credits ($10) monthly; inspect the current pricing schedule with `oxygen limits show --json` before connecting. API-key integrations accept --api-key. Run without credentials only for an API-key integration to get a 0-credit preview of its exact fields (mode: needs_api_key): no credential is submitted, nothing is stored, and no provider call is made. Use repeatable --credential name=value when a provider also requires a host, subdomain, or other named value. To keep a secret out of shell history and process arguments, open the preview's web_url and submit it in Connections; --api-key is for controlled noninteractive use. Credential submission creates or replaces the connection immediately and needs no separate --approved flag. LinkedIn and WhatsApp return a Unipile hosted-auth URL instead (`oxygen senders connect` / `oxygen whatsapp connect` are the canonical paths).")
+        .description("Connect an integration. For OAuth toolkits, running this command immediately creates a pending provider authorization and returns a redirect URL; account access starts only if you approve on the provider's page. This is not a price preview. On a repriced workspace, a connected X account reserves 1,000 credits ($10) monthly; inspect current connection prices and first billing timing with `oxygen billing commitments --view connection-prices --json` before connecting. API-key integrations accept --api-key. Run without credentials only for an API-key integration to get a 0-credit preview of its exact fields (mode: needs_api_key): no credential is submitted, nothing is stored, and no provider call is made. Use repeatable --credential name=value when a provider also requires a host, subdomain, or other named value. To keep a secret out of shell history and process arguments, open the preview's web_url and submit it in Connections; --api-key is for controlled noninteractive use. Credential submission creates or replaces the connection immediately and needs no separate --approved flag. LinkedIn and WhatsApp return a hosted sign-in link instead (`oxygen senders connect` / `oxygen whatsapp connect` are the canonical paths).")
         .argument("<integration_id>", "Integration id, such as 'slack' or 'serpapi'.")
         .option("--api-key <value>", "API key for controlled noninteractive use. Literal values can appear in shell history and process arguments; prefer the preview web_url for manual entry.")
         .option("--credential <name=value>", "Named provider credential field. Repeat for multi-field integrations (for example, PostHog: --credential subdomain=us).", collectRepeatable, [])
-        .option("--country <code>", "ISO 3166-1 alpha-2 country where the LinkedIn account owner normally signs in (required for `connect linkedin`; picks the egress proxy).")
+        .option("--country <code>", "ISO 3166-1 alpha-2 country where the LinkedIn account owner normally signs in (required for `connect linkedin`; picks the egress proxy from the 56 countries OXYGEN has LinkedIn proxies in).")
         .option("--pairing-phone-number <e164>", "WhatsApp only: pair by code sent to this E.164 number instead of showing a QR.")
         .addOption(new Option("--acknowledge-risk", "Deprecated: LinkedIn connect no longer needs it. Still accepted so older scripts keep running.").hideHelp())
         .option("--return-to <path>", "In-product destination after OAuth approval.")
@@ -13594,7 +13605,7 @@ Examples:
         }));
     }))
         .addCommand(new Command("disconnect")
-        .description("Disconnect an integration. LinkedIn and WhatsApp remove the Unipile connected account; pass --connection-id when more than one is connected.")
+        .description("Disconnect an integration. LinkedIn and WhatsApp remove the connected account; pass --connection-id when more than one is connected.")
         .argument("<integration_id>", "Integration id, such as 'slack'.")
         .option("--connection-id <id>", "Disconnect a specific connected account when multiple exist.")
         .option("--json", "Print a JSON envelope.")
@@ -13705,12 +13716,12 @@ Examples:
         await handleAsyncAction("senders checkpoints", options, () => requestOxygen("/api/cli/senders/checkpoints"));
     }))
         .addCommand(new Command("connect")
-        .description("Get a Unipile hosted-auth URL to connect a new LinkedIn account (or reconnect with --reconnect). This command creates a pending provider authorization; it does not preview a price. Each connected LinkedIn account has one monthly charge, never two: an existing dollar seat until it ends at renewal, or a monthly credit reservation after seats retire. Once the workspace is repriced that reservation is 3,400 credits ($34) monthly; a connect the balance cannot cover fails with insufficient_credits. Invites, messages and other LinkedIn actions cost 0 credits on top. `oxygen billing seats --json` reports the charge that applies to this workspace now, and `oxygen billing estimate --linkedin-accounts <n> --json` prices n accounts against your plan. A workspace linked to another organization's plan is billed at that organization. New accounts require --country (the owner's normal LinkedIn login country) and default to syncing only conversations OXYGEN starts; use --inbox-scope all to opt into the full LinkedIn inbox. Use --cookie-auth and --custom-proxy to expose those inputs inside Unipile's hosted wizard; their secrets never pass through OXYGEN. Use --count for bulk onboarding; --count above 1 needs --owner-consent (each owner connects their own account). Links are shareable and valid for 10 minutes.")
+        .description("Get a hosted sign-in link to connect a new LinkedIn account (or reconnect with --reconnect). This command creates a pending provider authorization. Inspect prices first with `oxygen billing commitments --view connection-prices --json`, which creates no authorization. Each connected LinkedIn account has one monthly charge, never two: an existing dollar seat until it ends at renewal, or a monthly credit reservation after seats retire. Once the workspace is repriced that reservation is 3,400 credits ($34) monthly; with the credit gate active, a connect the balance cannot cover fails with insufficient_credits. Invites, messages and other LinkedIn actions cost 0 credits on top. `oxygen billing seats --json` reports the charge that applies to this workspace now, and `oxygen billing estimate --linkedin-accounts <n> --json` prices n accounts against your plan. A workspace linked to another organization's plan is billed at that organization. New accounts require --country (the owner's normal LinkedIn login country) and default to syncing only conversations OXYGEN starts; use --inbox-scope all to opt into the full LinkedIn inbox. Use --cookie-auth and --custom-proxy to expose those inputs in the hosted sign-in wizard; their secrets never pass through OXYGEN. Use --count for bulk onboarding; --count above 1 needs --owner-consent (each owner connects their own account). Links are shareable and valid for 10 minutes.")
         .option("--reconnect <connection_id>", "Reconnect an existing connection instead of creating a new one. Accepts a connection id.")
-        .option("--country <code>", "Required for new accounts: ISO 3166-1 alpha-2 code for the account owner's normal LinkedIn login country (for example DE or US).")
-        .option("--sales-nav", "Request Classic + Sales Navigator access during Unipile hosted authentication.")
-        .option("--cookie-auth", "Offer LinkedIn cookie authentication in Unipile's hosted wizard. The account owner enters li_at/li_a there; OXYGEN never receives them.")
-        .option("--custom-proxy", "Let the account owner enter a custom proxy in Unipile's hosted wizard. OXYGEN never receives the proxy credentials.")
+        .option("--country <code>", "Required for new accounts: ISO 3166-1 alpha-2 code for the account owner's normal LinkedIn login country (for example DE or US); one of the 56 countries OXYGEN has LinkedIn proxies in.")
+        .option("--sales-nav", "Request Classic + Sales Navigator access during hosted sign-in.")
+        .option("--cookie-auth", "Offer LinkedIn cookie authentication in the hosted sign-in wizard. The account owner enters li_at/li_a there; OXYGEN never receives them.")
+        .option("--custom-proxy", "Let the account owner enter a custom proxy in the hosted sign-in wizard. OXYGEN never receives the proxy credentials.")
         .option("--count <n>", "Mint N hosted-auth links in one call for bulk onboarding (1-25, default 1). Every link uses the same --country; use separate calls for different login countries. Ignored when reconnecting.")
         .option("--share-link", "Return a shareable connection link for one account; its owner completes authentication.")
         .option("--inbox-scope <scope>", "LinkedIn inbox privacy for new accounts: oxygen_initiated (default) or all. Reconnect preserves the existing account setting.")
@@ -13762,6 +13773,17 @@ Examples:
             body: { scope: options.scope },
         }));
     })))
+        .addCommand(new Command("proxy-country")
+        .description("Move a LinkedIn sender's automatic proxy to another country without reconnecting. The account picks a proxy there at once when one is free; otherwise its sequences stay paused and each `senders sync` asks again. Zero credits.")
+        .argument("<id>", "Sender account id, connection id, or Unipile account id.")
+        .requiredOption("--country <code>", "ISO 3166-1 alpha-2 country where the account owner logs in; one of the 56 countries OXYGEN has LinkedIn proxies in (others are refused with the list).")
+        .option("--json", "Print a JSON envelope.")
+        .action(async (id, options) => {
+        await handleAsyncAction("senders proxy-country", options, () => requestOxygen(`/api/cli/senders/${encodeURIComponent(id)}/proxy-country`, {
+            method: "PATCH",
+            body: { country: options.country.trim().toUpperCase() },
+        }));
+    }))
         .addCommand(new Command("get")
         .description("Get one LinkedIn sender account with status, limits, daily-reset timezone, and usage. <id> accepts a sender account id, connection id, or Unipile account id.")
         .argument("<id>", "Sender account id, connection id, or Unipile account id.")
@@ -14665,7 +14687,7 @@ Examples:
         });
     }))
         .addCommand(new Command("connect")
-        .description("Get a Unipile hosted-auth URL to connect a new WhatsApp account by scanning a QR in WhatsApp → Linked Devices (or reconnect with --reconnect). Newly connected accounts start a mandatory warm-up ramp.")
+        .description("Get a hosted sign-in link to connect a new WhatsApp account by scanning a QR in WhatsApp → Linked Devices (or reconnect with --reconnect). Running this command creates a pending provider authorization. Inspect the current monthly price and first billing timing with `oxygen billing commitments --view connection-prices --json` before connecting. Newly connected accounts start a mandatory warm-up ramp.")
         .option("--reconnect <connection_id>", "Reconnect an existing connection id instead of linking a new account.")
         .option("--pairing-phone-number <phone>", "Offer phone-number pairing instead of QR where supported; use your international number.")
         .option("--json", "Print a JSON envelope.")
@@ -14900,7 +14922,8 @@ Examples:
         .option("--domain <domains>", "Email only: comma-separated counterpart domains to include.")
         .option("--exclude-domain <domains>", "Email only: comma-separated counterpart domains to exclude.")
         .option("--mailbox-id <ids>", "Email only: comma-separated mailbox ids.")
-        .option("--sender-profile <ids>", "Comma-separated sender profile ids (people, from `senders profiles list`): only conversations on their own inboxes and LinkedIn/WhatsApp accounts. Merged stream only; narrow channels with --channels.")
+        .option("--sender-profile-id <ids>", "Comma-separated sender profile ids (people; `unibox metadata` and `senders profiles list` list them): only conversations on their own inboxes and LinkedIn/WhatsApp accounts. The same `sender_profile_id` key a saved view's --filters takes. Merged stream only; narrow channels with --channels.")
+        .addOption(new Option("--sender-profile <ids>", "Alias of --sender-profile-id.").hideHelp())
         .option("--search <text>", "Fuzzy search (typos, word order, prefixes) over names, addresses, subjects and the text of every message in EVERY non-warmup conversation: all channels unless --channel narrows, archived and sent-only threads included. --segment, --unanswered and the Primary tab's negative-tier exclusion are ignored while set; explicit facets such as --status still narrow. For structured filters use --status or --tag, not a text search.")
         .option("--include-archived", "Include archived conversations.")
         .option("--limit <n>", "Maximum conversations to return (1-200). Defaults to 50.")
@@ -14938,6 +14961,7 @@ Examples:
                 ["excludeDomain", "exclude_domain"],
                 ["mailboxId", "mailbox_id"],
                 ["senderProfile", "sender_profile_id"],
+                ["senderProfileId", "sender_profile_id"],
                 ["cursor", "cursor"],
             ]) {
                 const value = readOption(options[flag]);
@@ -15120,7 +15144,8 @@ Examples:
         .option("--exclude-domain <domains>", "Email only: comma-separated counterpart domains to exclude.")
         .option("--mailbox-id <ids>", "Email only: comma-separated mailbox ids.")
         .option("--sender-account-id <ids>", "DMs only: comma-separated OXYGEN sender UUIDs from `oxygen senders list --json` (not LinkedIn member ids).")
-        .option("--sender-profile <ids>", "Comma-separated sender profile ids (people, from `senders profiles list`): only their own inboxes and LinkedIn/WhatsApp accounts, as in `inbox list --sender-profile`.")
+        .option("--sender-profile-id <ids>", "Comma-separated sender profile ids (people; `unibox metadata` lists them): only their own inboxes and LinkedIn/WhatsApp accounts, as in `inbox list --sender-profile-id`.")
+        .addOption(new Option("--sender-profile <ids>", "Alias of --sender-profile-id.").hideHelp())
         .option("--since <iso>", "Only conversations whose last message is on/after this ISO date/timestamp. Excludes conversations without a last-message date. Cross-channel.")
         .option("--until <iso>", "Only conversations whose last message is on/before this ISO date/timestamp. Excludes conversations without a last-message date. Cross-channel.")
         .option("--search <text>", "Fuzzy search (typos, word order, prefixes) over names, addresses, subjects and the text of every message in EVERY non-warmup conversation: all channels unless --channel narrows, archived and sent-only threads included. --segment, --unanswered and the Primary tab's negative-tier exclusion are ignored while set; explicit facets such as --status still narrow.")
@@ -15151,6 +15176,7 @@ Examples:
                 ["mailboxId", "mailbox_id"],
                 ["senderAccountId", "sender_account_id"],
                 ["senderProfile", "sender_profile_id"],
+                ["senderProfileId", "sender_profile_id"],
                 ["since", "since"],
                 ["until", "until"],
                 ["search", "search"],
@@ -15352,7 +15378,7 @@ Examples:
         .addCommand(new Command("create")
         .description("Save a view for the team.")
         .requiredOption("--name <name>", "View name, unique in the workspace (up to 80 characters).")
-        .option("--filters <url-or-query>", "A Unibox URL or its query string, e.g. 'sender_profile_id=<id>&channels=linkedin&status=interested' (the `inbox list` params). Omit for every conversation.")
+        .option("--filters <url-or-query>", "A Unibox URL or its query string, e.g. 'sender_profile_id=<id>&channels=linkedin&status=interested'. Keys are the `inbox list` filters (sender_profile_id is --sender-profile-id); a view without segment opens on the Primary tab, segment=all on every conversation. Omit for every conversation.")
         .option("--default", "Also make it your own default view.")
         .option("--json", "Print a JSON envelope.")
         .action(async (options) => {
@@ -15369,7 +15395,7 @@ Examples:
         .description("Rename, re-filter or reorder a view, or set it as (or stop using it as) your own default.")
         .argument("<view>", "View id (from `inbox views list`).")
         .option("--name <name>", "New name.")
-        .option("--filters <url-or-query>", "Replace the view's filters: a Unibox URL or its query string.")
+        .option("--filters <url-or-query>", "Replace the view's filters: a Unibox URL or its query string (the `inbox list` filter keys; without segment the view opens on the Primary tab).")
         .option("--position <n>", "Zero-based order in the team's list.")
         .option("--default", "Make it your own default view.")
         .option("--no-default", "Stop using it as your default view (you open on the built-in view).")
@@ -16224,7 +16250,7 @@ Examples:
         });
     }))
         .addCommand(new Command("get")
-        .description("Get a sequence's definition, senders, status, and credit usage. --readiness adds the launch check — whether it CAN go live, why not, and the mailbox pool it would send from — without touching it; `sequences start <sequence>` without --approved shows who sends each step (sender_journey).")
+        .description("Get a sequence's definition, senders, status, and credit usage. --readiness adds the launch check — whether it CAN go live, why not, and the mailbox pool it would send from — without touching it; `sequences preview <sequence>` (a read; 0 credits) shows who sends each step (sender_journey).")
         .argument("<sequence>", "Sequence id or slug.")
         .option("--readiness", "Add launch_readiness: blockers (e.g. a missing send cap), warnings, and the resolved sending mailboxes. Read-only — sends nothing, changes nothing, spends nothing. Skips the LinkedIn rendered-copy scan, which stays in `sequences start` without --approved.")
         .option("--json", "Print a JSON envelope.")
@@ -16232,7 +16258,7 @@ Examples:
         await handleAsyncAction("sequences get", options, () => requestOxygen(`/api/cli/sequences/${encodeURIComponent(sequence)}${options.readiness ? "?include=readiness" : ""}`));
     }))
         .addCommand(new Command("enroll")
-        .description("Enroll leads into a sequence. Enrolling spends no credits. An active sequence contacts the new leads on its next dispatch tick; a draft or paused one holds them until `sequences start`. --from-table enrolls every not-yet-enrolled row of the sequence's bound source table (up to 500 per run; the response's from_table.has_more says whether to run again) — for a LinkedIn sequence the profile is read from the bound table's URL column, where a full /in/ URL and a bare public handle carrying a hyphen or digit (ada-lovelace) both work, so no pre-resolved provider ids are needed; each handle Oxygen canonicalized is echoed in linkedin_handles_canonicalized (value + url) to check before start, and every row that still cannot be resolved is named in unresolved_linkedin_lead_details (row, value, reason) rather than only counted in unresolved_linkedin_leads. --leads-file enrolls an explicit JSON list { leads: [...] }: for an email/WhatsApp sequence a lead identified only by an email (row_values.email) or phone (row_values.phone) is auto-filed as a row in the sequence's leads table (auto-creating and binding one if there is none), deduped by email/phone, so no table has to exist first (the table is returned as leads_table with a web_url); a LinkedIn lead needs a lead_provider_id, a lead_profile_url (a /in/ URL or a bare public handle with a hyphen or digit), or a table_row_id whose row carries one of those. A CRM-only lead needs a stable table_row_id or lead_provider_id in addition to mapped row_values; a HubSpot contact id used in crm_task associations identifies the destination record, not the Oxygen enrollment. When the sequence is bound to a source table, a lead's table_row_id auto-snapshots that row's columns (incl. AI/tool outputs) into row_values for {{column}} copy — explicit row_values win. Idempotent per table row (and per email/phone for auto-filed leads). WhatsApp-only campaigns also enroll each normalized number once across all source rows and enrollment statuses; mixed campaigns keep other channels and skip duplicate WhatsApp actions. Duplicate protection defaults to this campaign; --whatsapp-duplicate-scope on create/update can additionally block identical copy across all campaigns. The org do-not-contact list is always enforced; --exclude-contacted and --suppress-list add further opt-in skips (reported under skipped_by_reason). Leads already owned by a sender account (from an earlier real send) are routed back to that same account; a lead owned by a sender NOT on this sequence is skipped (bound_to_other_sender) unless --ignore-sender-bindings. This enrolls into an OXYGEN Sequence; to put the same rows into a campaign you already run in Smartlead, Instantly, lemlist or HeyReach, use `sequences push-external`.")
+        .description("Enroll leads into a sequence. Enrolling spends no credits. An active sequence contacts the new leads on its next dispatch tick; a draft or paused one holds them until `sequences start`. --from-table enrolls every not-yet-enrolled row of the sequence's bound source table (up to 500 per run; the response's from_table.has_more says whether to run again) — for a LinkedIn sequence the profile is read from the bound table's URL column, where a full /in/ URL and a bare public handle carrying a hyphen or digit (ada-lovelace) both work, so no pre-resolved provider ids are needed; each handle Oxygen canonicalized is echoed in linkedin_handles_canonicalized (value + url) to check before start, and every row that still cannot be resolved is named in unresolved_linkedin_lead_details (row, value, reason) rather than only counted in unresolved_linkedin_leads. In a LinkedIn + email sequence a row with no usable profile but a recipient email is still enrolled for the email steps (its LinkedIn steps are skipped as no_linkedin_profile, a connection wait passes at once and a connection branch takes its not-connected path) and is listed in linkedin_unavailable_lead_details instead; unresolved_linkedin_leads names only rows that were not enrolled. --leads-file enrolls an explicit JSON list { leads: [...] }: for an email/WhatsApp sequence a lead identified only by an email (row_values.email) or phone (row_values.phone) is auto-filed as a row in the sequence's leads table (auto-creating and binding one if there is none), deduped by email/phone, so no table has to exist first (the table is returned as leads_table with a web_url); a LinkedIn + email sequence auto-files an email-only lead the same way; a LinkedIn lead needs a lead_provider_id, a lead_profile_url (a /in/ URL or a bare public handle with a hyphen or digit), or a table_row_id whose row carries one of those. A CRM-only lead needs a stable table_row_id or lead_provider_id in addition to mapped row_values; a HubSpot contact id used in crm_task associations identifies the destination record, not the Oxygen enrollment. When the sequence is bound to a source table, a lead's table_row_id auto-snapshots that row's columns (incl. AI/tool outputs) into row_values for {{column}} copy — explicit row_values win. Idempotent per table row (and per email/phone for auto-filed leads). WhatsApp-only campaigns also enroll each normalized number once across all source rows and enrollment statuses; mixed campaigns keep other channels and skip duplicate WhatsApp actions. Duplicate protection defaults to this campaign; --whatsapp-duplicate-scope on create/update can additionally block identical copy across all campaigns. The org do-not-contact list is always enforced; --exclude-contacted and --suppress-list add further opt-in skips (reported under skipped_by_reason). Leads already owned by a sender account (from an earlier real send) are routed back to that same account; a lead owned by a sender NOT on this sequence is skipped (bound_to_other_sender) unless --ignore-sender-bindings. This enrolls into an OXYGEN Sequence; to put the same rows into a campaign you already run in Smartlead, Instantly, lemlist or HeyReach, use `sequences push-external`. esp.strict_deferred_leads is how many leads esp_matching=strict would hold back (unmatched providers plus providers with no sendable mailbox); 0 means strict is safe, and it changes nothing under prefer or off.")
         .argument("<sequence>", "Sequence id or slug.")
         .option("--leads-file <path>", "Path to a JSON file: { \"leads\": [{ row_values: { email }, lead_name }] } for cold email; { lead_provider_id, lead_name, table_row_id, row_values } for LinkedIn/existing rows; CRM-only leads require table_row_id or a stable lead_provider_id alongside mapped row_values. A CRM association object id is not the enrollment identity. Exactly one of --leads-file or --from-table.")
         .option("--from-table", "Enroll every not-yet-enrolled row of the sequence's bound source table (up to 500 per run; re-run to continue). Exactly one of --leads-file or --from-table.")
@@ -16323,7 +16349,7 @@ Examples:
         }, formatSequencePushExternal);
     }))
         .addCommand(new Command("start")
-        .description("Preview or start a sequence. Without --approved this is the launch check and changes nothing: it returns launch_readiness (blockers such as a missing send cap or the WhatsApp cold-initiate opt-in, plus warnings), who sends each step (sender_journey: each step's From, its candidate inboxes and how a lead's inbox is picked; no leads needed), scans pending LinkedIn copy, and returns exact rendered recipient samples, character counts/limits, copy blockers, per-kind scope, sender/mailbox capacity, CRM readiness, and safety caps. Live start requires --approved; --max-credits is optional. Email/WhatsApp/CRM-task journeys additionally require --max-live-sends because their external actions cost 0 Oxygen credits. --dry-run is not this preview: it starts the sequence in simulated mode (it leaves draft), with no send, provider campaign, CRM task, or credits. The first live start also switches on the standing reply → CRM automation for the workspace.")
+        .description("Preview or start a sequence. Without --approved this is the launch check and changes nothing: it returns launch_readiness (blockers such as a missing send cap or the WhatsApp cold-initiate opt-in, plus warnings), who sends each step (sender_journey: each step's From, its candidate inboxes and how a lead's inbox is picked; no leads needed), scans pending LinkedIn copy, and returns exact rendered recipient samples, character counts/limits, copy blockers, per-kind scope, sender/mailbox capacity, CRM readiness, and safety caps. Live start requires --approved; --max-credits is optional. Email/WhatsApp/CRM-task journeys additionally require --max-live-sends because their external actions cost 0 Oxygen credits. --dry-run is not this preview: it starts the sequence in simulated mode (it leaves draft), with no send, provider campaign, CRM task, or credits. The first live start also switches on the standing reply → CRM automation for the workspace. Planned action counts include only the leads each step's channel can reach (an email-only lead gets no LinkedIn actions); skipped_actions_by_reason and channel_coverage show the rest.")
         .argument("<sequence>", "Sequence id or slug.")
         .option("--approved", "Approve and activate live. Without this flag, returns a preview only, including copy_preview rendered samples and blockers.")
         .option("--max-credits <n>", "Optional positive credit ceiling. Omit for the free launch preview. Live start uses the saved ceiling when omitted; an unset ceiling means unbounded credits, not recipient approval.")
@@ -16344,6 +16370,15 @@ Examples:
                 },
             });
         });
+    }))
+        .addCommand(new Command("preview")
+        .description("The free launch check, as a read: the same preview `sequences start` returns without --approved, and nothing else. It returns launch_readiness (blockers and warnings), sender_journey (who sends each step and how a lead's inbox is picked), copy_preview (rendered copy for pending leads, character counts, the copy scan), caps and the credit estimate. Changes nothing and costs 0 credits; it never starts, resumes or dry-runs the sequence. Start it with `sequences start <sequence> --approved` after reviewing this. Planned action counts include only the leads each step's channel can reach (an email-only lead gets no LinkedIn actions); skipped_actions_by_reason and channel_coverage show the rest. copy_preview renders LinkedIn step copy only, for the leads each step can reach (skipped_leads counts the others).")
+        .argument("<sequence>", "Sequence id or slug.")
+        .option("--json", "Print a JSON envelope.")
+        .action(async (sequence, options) => {
+        await handleAsyncAction("sequences preview", options, () => 
+        // The start route's preview branch: no approved, no dry_run, no ceilings.
+        requestOxygen(`/api/cli/sequences/${encodeURIComponent(sequence)}/start`, { method: "POST", body: {} }));
     }))
         .addCommand(new Command("signal")
         .description("Record an external GTM signal (e.g. linkedin_connected, email_replied, company_raised_funds, job_change, web_visit, intent) onto a running sequence's enrollment(s) to drive signal-triggered branch/wait control. Target an enrollment by --enrollment or --lead (at least one is required); the server validates the signal name.")
@@ -16392,10 +16427,15 @@ Examples:
         await handleAsyncAction("sequences delete", options, () => requestOxygen(`/api/cli/sequences/${encodeURIComponent(sequence)}${options.approved ? "?approved=true" : ""}`, { method: "DELETE" }));
     }))
         .addCommand(new Command("enrollments")
-        .description("List per-lead enrollment state plus the latest action status, error, attempts, and retry time. missing_source_row is true for a lead whose source-table row was deleted: still enrolled and contacted (remove with `contacts-remove --missing-source-rows`); null when the campaign has no live source table to check against, or the check failed.")
+        .description("List per-lead enrollment state plus the latest action status, error, attempts, and retry time. --view compact answers 'when is each lead's next message due' per lead: lead, status, invite (accepted, pending, not_invited), accepted_at, current_step and next_due. next_due.summary says it in words, at_local/gives_up_at_local give the time in the campaign's timezone (its schedule's, else UTC) and at/gives_up_at in UTC. Reasons: step_scheduled (planned send time; held_by names what holds it, e.g. send_cap_reached), planner_due (when the planner next looks at the lead), not_started (begins when the campaign is started or resumed), nothing_scheduled (enrolled, no step will run), waiting_for_connection / waiting_for_signal (no send time; acceptance makes the next step due at once; gives_up_at is when the wait ends, and on_timeout says whether the lead then leaves or moves on), finished. missing_source_row is true for a lead whose source-table row was deleted: still enrolled and contacted (remove with `contacts-remove --missing-source-rows`); null when the campaign has no live source table to check against, or the check failed. channels says which of the sequence's channels reach each lead: usable, and unavailable with a reason (no_linkedin_profile = enrolled for email only, its LinkedIn steps are skipped; no_recipient_email; no_phone_number).")
         .argument("<sequence>", "Sequence id or slug.")
-        .option("--status <status>", "Filter by enrollment status (active, waiting_connection, replied, completed, stopped, failed).")
+        .option("--status <status>", "Filter by enrollment status (active, waiting_connection, replied, completed, stopped, failed). waiting_connection = invite sent, not accepted yet. Status is the lead's progress, not its invite: use --invite accepted for the leads that accepted.")
+        .option("--step <n>", "Only leads currently on this step (0-based index, as in the sequence's steps).")
+        .option("--invite <state>", "Only leads in this LinkedIn invite state: accepted (invited and connected), pending (invited, not accepted yet) or not_invited (no invite: already connected before, suppressed or email-only).")
+        .option("--view <view>", "full (default, every enrollment field) or compact (one short row per lead with next_due in words and local time).")
+        .option("--order <order>", "created (default) or due: soonest next_due first, then waiting leads by gives_up_at, then leads with nothing due.")
         .option("--limit <n>", "Maximum enrollments to return (1-500).")
+        .option("--offset <n>", "Skip this many enrollments; pass next_offset from the previous page to continue.")
         .option("--json", "Print a JSON envelope.")
         .action(async (sequence, options) => {
         await handleAsyncAction("sequences enrollments", options, () => {
@@ -16403,9 +16443,24 @@ Examples:
             const status = readOption(options.status);
             if (status)
                 params.set("status", status);
+            const step = readOption(options.step);
+            if (step)
+                params.set("step", step);
+            const invite = readOption(options.invite);
+            if (invite)
+                params.set("invite", invite);
+            const view = readOption(options.view);
+            if (view)
+                params.set("view", view);
+            const order = readOption(options.order);
+            if (order)
+                params.set("order", order);
             const limit = readOption(options.limit);
             if (limit)
                 params.set("limit", limit);
+            const offset = readOption(options.offset);
+            if (offset)
+                params.set("offset", offset);
             const suffix = params.toString();
             return requestOxygen(`/api/cli/sequences/${encodeURIComponent(sequence)}/enrollments${suffix ? `?${suffix}` : ""}`);
         });
@@ -17494,55 +17549,21 @@ Examples:
             });
         });
     })))
-        .addCommand(new Command("domains")
-        .description("List the org's whole-domain email blocks, newest first. Filter by --reason (manual | complaint | policy) or --search (case-insensitive substring of the domain).")
-        .option("--reason <reason>", "Filter by reason: manual, complaint, policy.")
-        .option("--search <text>", "Case-insensitive substring match on the domain.")
-        .option("--limit <n>", "Maximum domain blocks to return (1-500; default 100).")
-        .option("--offset <n>", "Pagination offset (0-based).")
+        .addCommand(addSuppressionListFlags(new Command("domains")
+        .description("List the org's whole-domain email blocks, newest first. Filter by --reason (manual | complaint | policy) or --search (case-insensitive substring of the domain)."), "domains")
         .option("--json", "Print a JSON envelope.")
         .action(async (options) => {
         await handleAsyncAction("suppressions domains", options, () => {
-            const params = new URLSearchParams();
-            const reason = readOption(options.reason);
-            if (reason)
-                params.set("reason", reason);
-            const search = readOption(options.search);
-            if (search)
-                params.set("search", search);
-            const limit = readOption(options.limit);
-            if (limit)
-                params.set("limit", limit);
-            const offset = readOption(options.offset);
-            if (offset)
-                params.set("offset", offset);
-            const suffix = params.toString();
+            const suffix = suppressionListQuery(options, "domains");
             return requestOxygen(`/api/cli/suppressions/domains${suffix ? `?${suffix}` : ""}`);
         });
     }))
-        .addCommand(new Command("addresses")
-        .description("List the org's blocked email ADDRESSES, newest first (bounces, unsubscribes, and `suppressions import` land here). Filter by --reason (hard_bounce | complaint | unsubscribe | manual) or --search (case-insensitive substring of the address). Rows carry a CRM person name when one matches.")
-        .option("--reason <reason>", "Filter by reason: hard_bounce, complaint, unsubscribe, manual.")
-        .option("--search <text>", "Case-insensitive substring match on the address.")
-        .option("--limit <n>", "Maximum addresses to return (1-500; default 100).")
-        .option("--offset <n>", "Pagination offset (0-based).")
+        .addCommand(addSuppressionListFlags(new Command("addresses")
+        .description("List the org's blocked email ADDRESSES, newest first (bounces, unsubscribes, and `suppressions import` land here). Filter by --reason (hard_bounce | complaint | unsubscribe | manual) or --search (case-insensitive substring of the address). Rows carry a CRM person name when one matches."), "addresses")
         .option("--json", "Print a JSON envelope.")
         .action(async (options) => {
         await handleAsyncAction("suppressions addresses", options, () => {
-            const params = new URLSearchParams();
-            const reason = readOption(options.reason);
-            if (reason)
-                params.set("reason", reason);
-            const search = readOption(options.search);
-            if (search)
-                params.set("search", search);
-            const limit = readOption(options.limit);
-            if (limit)
-                params.set("limit", limit);
-            const offset = readOption(options.offset);
-            if (offset)
-                params.set("offset", offset);
-            const suffix = params.toString();
+            const suffix = suppressionListQuery(options, "addresses");
             return requestOxygen(`/api/cli/suppressions/addresses${suffix ? `?${suffix}` : ""}`);
         });
     }))
@@ -18455,7 +18476,7 @@ Examples:
         .option("--approved", "Execute the PRICED enrollment. Without it the response is a priced preview and nothing is enrolled or billed.")
         .option("--plan <hash>", "Hash from the fresh preview (required with --approved).")
         .option("--max-credits <n>", "Hard first-cycle credit cap from the preview (required with --approved).")
-        .option("--ramp-weeks <n>", "Auto-unenroll after this many weeks (the ramp window) so billing stops by itself.")
+        .option("--ramp-weeks <n>", "Weeks the warm-up volume climb is spread over (default 4). A paid enrollment completes its ramp after 28 days with a provider-confirmed warm-up send, then keeps warming at 10 a day until you disable it.")
         .option("--dry-run", "Simulate without calling the provider (mailboxes marked pending).")
         .option("--json", "Print a JSON envelope.")
         .action(async (options) => {
@@ -18758,6 +18779,7 @@ Examples:
         .addOption(new Option("--provider <provider>", "Health provider: emailguard, zapmail, or sendkit. Omit to auto-resolve EmailGuard/Zapmail. SendKit is never auto-selected and requires the configured dev canary sender.").choices(["emailguard", "zapmail", "sendkit"]))
         .option("--subject <subject>", "Seed-message subject. Required with --provider sendkit; Zapmail ignores it beyond labeling the test.")
         .option("--body <text>", "Plain-text seed-message body. Required with --provider sendkit; ignored by Zapmail.")
+        .option("--allow-paused-probe", "Opt in to one diagnostic probe while preserving campaign pause; repeat at both create and send approvals. Never permits disabled senders.")
         .option("--approved", "Actually run the test (otherwise a preview is returned).")
         .option("--max-credits <n>", "Credit cap the caller accepts (must be >= credits_required for managed runs).")
         .option("--plan <hash>", "plan_hash from a fresh create preview (required with --approved).")
@@ -18777,6 +18799,7 @@ Examples:
                     ? { body_text: readOption(options.body) }
                     : {}),
                 ...(options.approved ? { approved: true } : {}),
+                ...(options.allowPausedProbe ? { allow_paused_probe: true } : {}),
                 ...(readOption(options.maxCredits)
                     ? {
                         max_credits: Number(readOption(options.maxCredits)),
@@ -18791,6 +18814,7 @@ Examples:
         .addCommand(new Command("send")
         .description("Preview or send the exact EmailGuard seed message for a provider-created test. Preview returns sender, all recipients, exact content, and plan_hash. Live send requires --approved --plan <hash>, costs 0 additional credits, and sends one message only.")
         .argument("<id>", "Oxygen placement-test id returned by `placement-test run`.")
+        .option("--allow-paused-probe", "Opt in to one diagnostic probe while preserving campaign pause; repeat at both create and send approvals. Never permits disabled senders.")
         .option("--approved", "Send the exact previewed seed message (otherwise preview only).")
         .option("--plan <hash>", "plan_hash from a fresh send preview (required with --approved).")
         .option("--json", "Print a JSON envelope.")
@@ -18799,6 +18823,7 @@ Examples:
             method: "POST",
             body: {
                 ...(options.approved ? { approved: true } : {}),
+                ...(options.allowPausedProbe ? { allow_paused_probe: true } : {}),
                 ...(readOption(options.plan)
                     ? { plan_hash: readOption(options.plan) }
                     : {}),
@@ -19501,7 +19526,7 @@ Run completion:
         });
     }))
         .addCommand(new Command("get")
-        .description("Get one workflow automation, including any cron slowdown to your plan's minimum interval.")
+        .description("Get one workflow automation, including any cron slowdown to your plan's minimum interval and `draftRevision` when a saved revision is newer than the published one. The top-level `status` is the live state; `manifest.workflow.status` is what the revision was authored with and does not change on enable or disable.")
         .argument("<workflow>", "Workflow id, slug, or name.")
         .option("--include-bundle", "Include durable recipe bundles in JSON output.")
         .option("--json", "Print a JSON envelope.")
@@ -19601,7 +19626,7 @@ Run completion:
         });
     }))
         .addCommand(new Command("webhooks")
-        .description("Workflow webhook trigger utilities. A trigger's inbound URL and the deliveries a minute it accepts (`rate_limit`) are in `oxygen workflows get <workflow>`.")
+        .description("Workflow webhook trigger utilities. A trigger's inbound URL and the deliveries a minute it accepts (`rate_limit`) are in `oxygen workflows get <workflow>`. Senders authenticate by sending the trigger's shared secret in the `x-oxygen-workflow-secret` header; a missing or wrong secret is recorded as a `rejected` delivery that starts no run and costs nothing.")
         .addCommand(new Command("rotate")
         .description("Replace a workflow webhook's shared secret. Previews by default; the old sender secret stops working immediately after approval.")
         .argument("<workflow>", "Webhook workflow id, slug, or name.")
@@ -19627,9 +19652,9 @@ Run completion:
         },
     }))))
         .addCommand(new Command("deliveries")
-        .description("List inbound workflow webhook deliveries: what arrived, whether it verified, and the run it started. Replays never append here; only a verified outcome=ran delivery can be replayed.")
+        .description("List inbound workflow webhook deliveries: what arrived, whether it verified, and the run it started. Stored headers never include `x-oxygen-workflow-secret`, so its absence does not show whether a rejected sender's secret was missing or wrong. Replays never append here; only a verified outcome=ran delivery can be replayed.")
         .argument("[trigger_id]", "Optional webhook trigger name, such as lead-created.")
-        .option("--workflow-id <id>", "Filter to deliveries that started a run of this workflow.")
+        .option("--workflow-id <id>", "Filter to this workflow's deliveries, including rejected and blocked ones that started no run.")
         .option("--outcome <outcome>", "Filter by rejected (sender authentication failed), blocked (authenticated, no run), or ran.")
         .option("--limit <n>", "Maximum deliveries to return. Defaults to 50.")
         .option("--json", "Print a JSON envelope.")
@@ -20171,6 +20196,7 @@ Full trigger schema: oxygen workflows schema --subject trigger --json
     registerFunctionsCommands(program, handleAsyncAction);
     registerUgcCommands(program, handleAsyncAction);
     registerKnowledgeRepositoryCommands(program, handleAsyncAction);
+    registerAdminLeadMagnetCommands(program, handleAsyncAction);
     registerConnectorsCommands(program, handleAsyncAction);
     registerSettingsCommands(program, handleAsyncAction);
     registerCrmSupportFlags(program);
@@ -21056,8 +21082,17 @@ function waitForCopilotTurn(options) {
         isTerminal: isTerminalCopilotTurnStatus,
         shapeTerminal: () => latestData,
         timeoutCode: "copilot_send_timeout",
-        timeoutMessage: "Timed out waiting for the copilot turn to finish.",
+        // Only the CLI stops waiting. The turn keeps running on the server and keeps
+        // billing until it finishes or is interrupted, so the timeout says so and names
+        // the commands that read and stop it.
+        timeoutMessage: "Stopped waiting for the copilot turn. It is still running and keeps spending credits until it finishes or you interrupt it.",
         timeoutDetailIdKey: "turn_id",
+        timeoutExtraDetails: () => ({
+            session_id: options.sessionId,
+            turn_still_running: true,
+            next_step: `oxygen copilot get ${options.sessionId}`,
+            interrupt_command: `oxygen copilot interrupt ${options.sessionId} ${options.turnId}`,
+        }),
     });
 }
 function workflowTemplateActionBody(templateId, options) {
@@ -26639,11 +26674,23 @@ function formatCrmObjects(data) {
         // System attributes are bookkeeping, not fields anyone chose.
         const fieldCount = attributes.filter((attribute) => attribute.attributeKind !== "system").length;
         const primary = identities.find((identity) => identity.isPrimary === true) ?? identities[0];
+        // A compact projection carries no attributes or identities (and an older
+        // server no standardKey): print what it does carry, never "custom, 0
+        // fields, can duplicate" for companies/people/deals.
+        const compact = !Array.isArray(object.attributes);
+        const kind = object.standardKey ? "standard" : object.standardKey === null || !compact ? "custom" : "—";
+        let identity = describeCrmIdentity(primary, attributes);
+        if (!Array.isArray(object.identities) && Object.hasOwn(object, "primaryIdentitySlug")) {
+            identity = typeof object.primaryIdentitySlug === "string" ? object.primaryIdentitySlug : "nothing — can duplicate";
+        }
+        else if (compact && !Array.isArray(object.identities)) {
+            identity = "—";
+        }
         return [
             String(object.pluralName || object.displayName || object.slug || "—"),
-            object.standardKey ? "standard" : "custom",
-            String(fieldCount),
-            describeCrmIdentity(primary, attributes),
+            kind,
+            compact ? "—" : String(fieldCount),
+            identity,
             String(object.slug ?? "—"),
         ];
     });