@oxygen-agent/cli 1.1011.97 → 1.1011.288

package/node_modules/@oxygen/shared/dist/enrichment-intents.js

@@ -31,6 +31,8 @@ export const ENRICHMENT_INTENT_GROUP_LABELS = {
     signal: "Signals",
 };
 const f = (key, label, semanticType, dataType = "text", derived) => ({ key, label, semanticType, dataType, ...(derived ? { derived: true } : {}) });
+/** A field read out of one column's cell, e.g. the email in `work_email_enrichment.value`. */
+const cell = (key, path, label, semanticType, dataType = "text") => ({ key, path, label, semanticType, dataType });
 export const ENRICHMENT_INTENT_TAXONOMY = [
     // ── Person ────────────────────────────────────────────────────────────────
     {
@@ -48,13 +50,13 @@ export const ENRICHMENT_INTENT_TAXONOMY = [
             f("first_name", "First name", "person.first_name"),
             f("last_name", "Last name", "person.last_name"),
             f("job_title", "Job title", "person.job_title"),
-            f("headline", "Headline", "person.headline"),
+            f("person_headline", "Headline", "person.headline"),
             f("current_company", "Current company", null),
             f("current_company_linkedin_url", "Current company LinkedIn URL", "company.linkedin_url"),
             f("job_start_date", "Job start date", null),
-            f("location", "Location", "person.location"),
-            f("bio", "Bio", "person.bio"),
-            f("linkedin_followers", "LinkedIn followers", "person.linkedin_followers", "numeric"),
+            f("person_location", "Location", "person.location"),
+            f("person_bio", "Bio", "person.bio"),
+            f("person_linkedin_followers", "LinkedIn followers", "person.linkedin_followers", "numeric"),
             f("education", "Education", null, "jsonb"),
             f("school_name", "School", null),
         ],
@@ -73,8 +75,9 @@ export const ENRICHMENT_INTENT_TAXONOMY = [
         aliases: ["linkedin url", "linkedin urls", "find linkedin", "profile url", "resolve linkedin", "linkedin for each"],
         inputShapes: ["name_company"],
         outputFields: [
-            f("linkedin_url", "LinkedIn URL", "person.linkedin_url"),
-            f("linkedin_url_confidence", "Match confidence", null),
+            cell("linkedin_url_enrichment", "value", "LinkedIn URL", "person.linkedin_url"),
+            // The identity check's verdict on the hit (D46): a URL that fails it is a miss.
+            cell("linkedin_url_enrichment", "confidence", "Match confidence", null),
         ],
         surfaces: { capability: "linkedin_url", find: "find linkedin", managedFunction: "person_linkedin_url", catalogEntry: "capability:linkedin_url", registryFunction: "enrichment", registryIntent: "find_linkedin_profile" },
         status: "default",
@@ -83,7 +86,7 @@ export const ENRICHMENT_INTENT_TAXONOMY = [
     {
         id: "person_company",
         label: "Person's company",
-        description: "Adds the person's current company, then fills that company's domain, industry and headcount from the same profile.",
+        description: "Adds the person's current company from their profile, then fills that company's domain, industry and headcount.",
         entity: "person",
         group: "person",
         kind: "template",
@@ -94,8 +97,10 @@ export const ENRICHMENT_INTENT_TAXONOMY = [
             f("current_company_linkedin_url", "Company LinkedIn URL", "company.linkedin_url"),
             f("company_domain", "Company domain", "company.domain"),
             f("company_industry", "Industry", "company.industry"),
-            f("company_headcount", "Headcount", "company.employee_count", "numeric"),
+            // Text: the exact count when the lookup has one, otherwise the size band.
+            f("company_headcount", "Headcount", "company.employee_count"),
         ],
+        // The recipe's two preset commands are this row's add path.
         surfaces: { catalogEntry: "recipe:person_company" },
         status: "default",
     },
@@ -111,11 +116,22 @@ export const ENRICHMENT_INTENT_TAXONOMY = [
         aliases: ["work email", "business email", "email address", "find email", "emails for", "email finder", "with emails"],
         inputShapes: ["linkedin_url", "name_domain", "first_last_domain"],
         outputFields: [
-            f("email", "Work email", "person.work_email"),
-            f("email_status", "Deliverability", "person.email_status"),
+            cell("work_email_enrichment", "value", "Work email", "person.work_email"),
+            // verified | catch_all | guessed | unverified, the grade the hit landed with.
+            cell("work_email_enrichment", "confidence", "Deliverability", "person.email_status"),
         ],
         surfaces: { capability: "work_email", find: "find email", managedFunction: "work_email", catalogEntry: "capability:work_email", registryFunction: "enrichment", registryIntent: "find_work_email" },
         status: "default",
+        // Founder, 2026-09-29: one email column; personal email is its option.
+        options: [
+            {
+                id: "include_personal_email",
+                intent: "find_personal_email",
+                label: "Personal email",
+                cliFlag: "--include-personal-email",
+                outputFields: [cell("work_email_enrichment", "personal_email.value", "Personal email", "person.personal_email")],
+            },
+        ],
     },
     {
         id: "find_personal_email",
@@ -127,10 +143,17 @@ export const ENRICHMENT_INTENT_TAXONOMY = [
         rank: 50,
         aliases: ["personal email", "gmail", "home email", "private email", "consumer email"],
         inputShapes: ["linkedin_url"],
-        outputFields: [f("personal_email", "Personal email", "person.personal_email")],
-        surfaces: { capability: "personal_email", find: "find personal-email", managedFunction: "personal_email", catalogEntry: "capability:personal_email", registryFunction: "enrichment", registryIntent: "find_personal_email" },
-        status: "default",
-        decision: "D43",
+        // The address lands in the Work email column's cell: the option is this
+        // row's add path.
+        outputFields: [cell("work_email_enrichment", "personal_email.value", "Personal email", "person.personal_email")],
+        // No column of its own (founder, 2026-09-29): the Work email column's
+        // `include_personal_email` option is its add path. `--capability
+        // personal_email` still seeds one for scripts that used it.
+        surfaces: { find: "find personal-email", managedFunction: "personal_email", catalogEntry: "capability:personal_email", registryFunction: "enrichment", registryIntent: "find_personal_email" },
+        status: "selectable",
+        statusReason: "An option of the Work email column rather than a column of its own: switch on Personal email when you add or edit Work email.",
+        decision: "D59",
+        optionOf: "find_work_email",
     },
     {
         id: "find_phone",
@@ -142,12 +165,10 @@ export const ENRICHMENT_INTENT_TAXONOMY = [
         rank: 60,
         aliases: ["mobile number", "mobile phone", "cell phone", "direct dial", "work phone", "phone number", "phone numbers", "this person's mobile", "find phone", "find mobile", "a mobile"],
         inputShapes: ["linkedin_url", "email", "name_domain"],
-        outputFields: [
-            f("mobile_phone", "Mobile phone", "person.mobile_phone"),
-            f("work_phone", "Work / direct-dial phone", "person.phone"),
-            f("phone_line_type", "Line type", null),
-            f("phone_carrier", "Carrier", null),
-        ],
+        // One number per row. Line type and carrier are the optional verification
+        // step's (`enrich-column run --verify-phone`), written as companion columns
+        // that run creates; the column this row's add path creates never holds them.
+        outputFields: [cell("mobile_phone_enrichment", "value", "Mobile phone", "person.mobile_phone")],
         surfaces: { capability: "mobile_phone", find: "find phone", managedFunction: "mobile_phone", catalogEntry: "capability:mobile_phone", registryFunction: "enrichment", registryIntent: "find_mobile_phone" },
         status: "default",
         decision: "D44",
@@ -162,7 +183,8 @@ export const ENRICHMENT_INTENT_TAXONOMY = [
         rank: 70,
         aliases: ["verify email", "verify these emails", "validate email", "email verification", "deliverability", "bounce check", "catch-all"],
         inputShapes: ["email"],
-        outputFields: [f("email_verdict", "Verdict", "person.email_status")],
+        // The verdict is the cell's value: valid, invalid or catch_all (unknown writes none).
+        outputFields: [cell("email_verification", "value", "Verdict", "person.email_status")],
         surfaces: { capability: "verify_email", find: "verify email", catalogEntry: "capability:verify_email", registryFunction: "enrichment", registryIntent: "verify_email" },
         status: "default",
         decision: "D45",
@@ -177,14 +199,17 @@ export const ENRICHMENT_INTENT_TAXONOMY = [
         rank: 80,
         aliases: ["verify phone", "verify these phone numbers", "validate phone", "line type", "is this a mobile"],
         inputShapes: ["phone"],
+        // The companions the Phone column's verification step writes; the verdict
+        // only gates whether a found number is kept, and nothing stores it.
         outputFields: [
             f("phone_line_type", "Line type", null),
             f("phone_carrier", "Carrier", null),
-            f("phone_verdict", "Verdict", null),
         ],
-        surfaces: { registryFunction: "enrichment", registryIntent: "verify_phone" },
-        status: "selectable",
-        statusReason: "Runs today as the optional verification step of the Phone column; a standalone phone-verification column is a follow-up.",
+        surfaces: {},
+        status: "coming_soon",
+        statusReason: "Coming soon: checking numbers you already hold is not a column yet. The Phone column's optional verification step adds line type and carrier to the numbers it finds.",
+        decision: "D59",
+        candidateProviders: ["clearoutphone"],
     },
     // ── Company ───────────────────────────────────────────────────────────────
     {
@@ -205,14 +230,15 @@ export const ENRICHMENT_INTENT_TAXONOMY = [
     {
         id: "enrich_company:headcount",
         label: "Headcount",
-        description: "Current employee count and size band.",
+        description: "Current employee count, or the size band when no exact count is published.",
         entity: "company",
         group: "company",
         kind: "enrichment",
         rank: 110,
         aliases: ["headcount", "employee count", "how many employees", "company size", "employees"],
         inputShapes: ["domain", "linkedin_url"],
-        outputFields: [f("company_headcount", "Headcount", "company.employee_count", "numeric"), f("company_employee_range", "Size band", "company.employee_range", "text", true)],
+        // One text column: the exact count when the lookup has one, otherwise the band.
+        outputFields: [f("company_headcount", "Headcount", "company.employee_count")],
         surfaces: { preset: "company_enrich", companyFields: ["headcount"], managedFunction: "company_employee_count", catalogEntry: "preset:company_enrich", registryFunction: "enrichment", registryIntent: "enrich_company", registryInputShapes: ["field:headcount"] },
         status: "default",
         decision: "D48",
@@ -235,22 +261,21 @@ export const ENRICHMENT_INTENT_TAXONOMY = [
     {
         id: "enrich_company:company_profile",
         label: "Company profile",
-        description: "Description, founded year, headquarters, company type, specialties, size band and logo from one profile lookup.",
+        description: "Description, founded year and headquarters country from one profile lookup, with the whole profile kept alongside.",
         entity: "company",
         group: "company",
         kind: "profile",
         rank: 130,
         aliases: ["company profile", "company description", "founded year", "headquarters", "company type", "specialties", "company logo", "firmographics"],
         inputShapes: ["domain", "linkedin_url"],
+        // The company bundle's own columns (D56): its payload column holds the
+        // whole profile; HQ address, type, specialties and logo have no column of
+        // their own since the bundle stopped taking field choices.
         outputFields: [
-            f("company_profile", "Company profile", null, "jsonb"),
+            f("company_enrich", "Company profile", null, "jsonb"),
             f("company_description", "Description", "company.description", "text", true),
             f("company_founded_year", "Founded year", "company.founded_year", "numeric", true),
-            f("company_hq_address", "HQ address", "company.hq_location", "text", true),
             f("company_hq_country", "HQ country", "company.hq_country", "text", true),
-            f("company_type", "Company type", null, "text", true),
-            f("company_specialties", "Specialties", "company.specialties", "jsonb", true),
-            f("company_logo_url", "Logo", "company.logo_url", "text", true),
         ],
         surfaces: { preset: "company_enrich", companyFields: ["company_profile", "description", "founded_year", "hq_address", "hq_country", "company_type", "specialties", "logo_url"], managedFunction: "enrich_company", catalogEntry: "preset:company_enrich", registryFunction: "enrichment", registryIntent: "enrich_company", registryInputShapes: ["field:company_profile"] },
         status: "default",
@@ -275,22 +300,26 @@ export const ENRICHMENT_INTENT_TAXONOMY = [
             f("company_investors", "Investors", null, "jsonb", true),
         ],
         // Not in the company bundle (founder, 2026-09-24: one profile lookup, no
-        // opt-in fields); a caller names the fields on `find company`.
-        surfaces: { find: "find company --domain <domain> --fields funding,funding_stage,latest_funding_round,total_funding,funding_rounds_count,investors", companyFields: ["funding", "funding_stage", "latest_funding_round", "total_funding", "funding_rounds_count", "investors"], managedFunction: "company_total_funding", registryFunction: "enrichment", registryIntent: "enrich_company", registryInputShapes: ["field:funding"] },
+        // opt-in fields). Its own bundle since 2026-09-29, the Tech stack shape:
+        // one waterfall column over these fields; `find company` answers one company.
+        surfaces: { preset: "company_funding", find: "find company --domain <domain> --fields funding,funding_stage,latest_funding_round,total_funding,funding_rounds_count,investors", companyFields: ["funding", "funding_stage", "latest_funding_round", "total_funding", "funding_rounds_count", "investors"], managedFunction: "company_total_funding", catalogEntry: "preset:company_funding", registryFunction: "enrichment", registryIntent: "enrich_company", registryInputShapes: ["field:funding"] },
         status: "default",
         decision: "D49",
     },
     {
         id: "enrich_company:technologies",
         label: "Tech stack",
-        description: "Technologies the company runs: from its job postings with confidence and first/last-seen dates, or from its website; plus a yes/no check for technologies you name.",
+        description: "Technologies the company runs: from its job postings with confidence and first/last-seen dates, or from its website.",
         entity: "company",
         group: "company",
         kind: "enrichment",
         rank: 150,
         aliases: ["tech stack", "technologies they use", "technographics", "tools they use", "software they use", "built with"],
         inputShapes: ["domain"],
-        outputFields: [f("company_technologies", "Technologies", "company.technologies", "jsonb"), f("company_technology_check", "Uses named technology", null, "boolean", true)],
+        // The yes/no check for named technologies is `find company --fields
+        // technology_check --check-technologies <names>`, one company at a time: no
+        // preset takes a technology list since 2026-09-24, so the column never has it.
+        outputFields: [f("company_technologies", "Technologies", "company.technologies", "jsonb")],
         surfaces: { preset: "company_tech_stack", companyFields: ["technologies", "technology_check"], managedFunction: "company_tech_stack", catalogEntry: "preset:company_tech_stack", registryFunction: "enrichment", registryIntent: "enrich_company", registryInputShapes: ["field:technologies"] },
         status: "default",
         decision: "D49",
@@ -305,9 +334,9 @@ export const ENRICHMENT_INTENT_TAXONOMY = [
         rank: 160,
         aliases: ["open roles", "job openings", "are they hiring", "is hiring", "job postings", "hiring signals"],
         inputShapes: ["domain", "linkedin_url"],
-        outputFields: [f("company_hiring_signals", "Hiring signals", null, "jsonb"), f("company_job_openings", "Open roles", null, "numeric", true)],
-        // Not in the company bundle (founder, 2026-09-24).
-        surfaces: { find: "find company --domain <domain> --fields hiring_signals,job_openings", companyFields: ["hiring_signals", "job_openings"], managedFunction: "company_job_openings", registryFunction: "enrichment", registryIntent: "enrich_company", registryInputShapes: ["field:hiring_signals"] },
+        outputFields: [f("company_hiring_signals", "Hiring signals", null, "jsonb"), f("company_job_openings", "Open roles", null, "jsonb", true)],
+        // Not in the company bundle (founder, 2026-09-24); its own bundle since 2026-09-29.
+        surfaces: { preset: "company_hiring", find: "find company --domain <domain> --fields hiring_signals,job_openings", companyFields: ["hiring_signals", "job_openings"], managedFunction: "company_job_openings", catalogEntry: "preset:company_hiring", registryFunction: "enrichment", registryIntent: "enrich_company", registryInputShapes: ["field:hiring_signals"] },
         status: "default",
     },
     {
@@ -432,8 +461,8 @@ export const ENRICHMENT_INTENT_TAXONOMY = [
         aliases: ["revenue", "annual revenue", "revenue estimate", "how much do they make", "arr", "reported revenue", "exact revenue", "financials", "company revenue"],
         inputShapes: ["domain"],
         outputFields: [f("company_revenue", "Revenue (estimate)", "company.revenue")],
-        // Not in the company bundle (founder, 2026-09-24).
-        surfaces: { find: "find company --domain <domain> --fields revenue", companyFields: ["revenue"], managedFunction: "company_revenue_estimate", registryFunction: "enrichment", registryIntent: "enrich_company", registryInputShapes: ["field:revenue"] },
+        // Not in the company bundle (founder, 2026-09-24); its own bundle since 2026-09-29.
+        surfaces: { preset: "company_revenue", find: "find company --domain <domain> --fields revenue", companyFields: ["revenue"], managedFunction: "company_revenue_estimate", catalogEntry: "preset:company_revenue", registryFunction: "enrichment", registryIntent: "enrich_company", registryInputShapes: ["field:revenue"] },
         status: "default",
         decision: "D50",
     },
@@ -498,7 +527,13 @@ export const ENRICHMENT_INTENT_TAXONOMY = [
         rank: 300,
         aliases: ["decision maker", "decision makers", "head of sales at", "people at these companies", "contacts at each account", "who should i contact", "find people at company"],
         inputShapes: ["company_domain", "company_linkedin_url"],
-        outputFields: [f("full_name", "Full name", "person.full_name"), f("job_title", "Job title", "person.job_title"), f("linkedin_url", "LinkedIn URL", "person.linkedin_url")],
+        // The people table a table-sourced run creates, each row linked back to its company.
+        outputFields: [
+            f("first_name", "First name", "person.first_name"),
+            f("last_name", "Last name", "person.last_name"),
+            f("title", "Job title", "person.job_title"),
+            f("linkedin_url", "LinkedIn URL", "person.linkedin_url"),
+        ],
         surfaces: { managedFunction: "find_people_at_company", registryFunction: "people_search", registryIntent: "account_contacts" },
         status: "default",
     },
@@ -512,7 +547,7 @@ export const ENRICHMENT_INTENT_TAXONOMY = [
         rank: 310,
         aliases: ["find people matching", "people search", "persona list", "prospect list", "leads matching"],
         inputShapes: ["persona_filters"],
-        outputFields: [f("full_name", "Full name", "person.full_name"), f("job_title", "Job title", "person.job_title"), f("linkedin_url", "LinkedIn URL", "person.linkedin_url")],
+        outputFields: [f("full_name", "Full name", "person.full_name"), f("title", "Job title", "person.job_title"), f("linkedin_url", "LinkedIn URL", "person.linkedin_url")],
         surfaces: { registryFunction: "people_search", registryIntent: "persona_search" },
         status: "default",
     },

package/node_modules/@oxygen/shared/dist/linkedin-url.d.ts

@@ -25,6 +25,13 @@ export type LinkedinUrlNormalization = {
     dispatchUrl: string;
 } | null;
 export declare function normalizeLinkedinProfileUrl(raw: string | null | undefined): LinkedinUrlNormalization;
+/**
+ * True when a profile handle is a member PROVIDER id (`ACoAA…` / `ACwAA…`), not a
+ * public identifier. People search answers some members with `/in/<id>` instead
+ * of their public URL; such a URL never equals the member's public profile URL
+ * from any other source, so it cannot serve as a LinkedIn URL identity key.
+ */
+export declare function isLinkedinMemberIdHandle(handle: string | null | undefined): boolean;
 /**
  * Canonicalize any LinkedIn PROFILE REFERENCE a customer might put in a cell:
  * a full `/in/` URL, a scheme-less `linkedin.com/in/…`, or a BARE public handle

package/node_modules/@oxygen/shared/dist/linkedin-url.js

@@ -75,6 +75,15 @@ export function normalizeLinkedinProfileUrl(raw) {
 // too (`ACOAA…`, the shape a spreadsheet UPPER() or a CRM export produces), so
 // such an id is named as unrecognized at enrollment instead of dying at send.
 const LINKEDIN_MEMBER_ID_PREFIX_RE = /^AC[OoWw]/;
+/**
+ * True when a profile handle is a member PROVIDER id (`ACoAA…` / `ACwAA…`), not a
+ * public identifier. People search answers some members with `/in/<id>` instead
+ * of their public URL; such a URL never equals the member's public profile URL
+ * from any other source, so it cannot serve as a LinkedIn URL identity key.
+ */
+export function isLinkedinMemberIdHandle(handle) {
+    return typeof handle === "string" && LINKEDIN_MEMBER_ID_PREFIX_RE.test(handle.trim());
+}
 // LinkedIn's public identifier ("vanity slug") charset: letters, digits and
 // hyphens only, 3–100 characters, never leading with a hyphen. Deliberately
 // NARROWER than "any non-URL string" — no `.`, `@`, `_`, `:`, `/` or whitespace

package/node_modules/@oxygen/shared/dist/log.d.ts

@@ -18,6 +18,7 @@ export declare function withLogContext<T>(ctx: LogContext, fn: () => T): T;
 export declare function enterLogContext(ctx: LogContext): void;
 export declare function logLevelForHttpStatus(status: number): LogLevel;
 export type LogSink = (record: Record<string, unknown>) => void;
+export declare function takeWebLogVolumeCount(): number;
 export declare function setLogSink(sink: LogSink | null): void;
 export declare function getLogSink(): LogSink | null;
 export declare function log(level: LogLevel, msg: string, fields?: Record<string, unknown>): void;

package/node_modules/@oxygen/shared/dist/log.js

@@ -115,6 +115,17 @@ export function logLevelForHttpStatus(status) {
 // object all bundle copies share; Symbol.for gives every copy the same slot.
 // Same trap + same fix as linkedin-quota's enforcer registration.
 const LOG_SINK_SLOT = Symbol.for("oxygen.log.sink");
+const WEB_LOG_VOLUME_SLOT = Symbol.for("oxygen.log.web-volume");
+// Count the same web records eligible for the log sink before the OTLP WARN
+// floor discards INFO. The slot must be shared across Next.js route bundles and
+// instrumentation, just like LOG_SINK_SLOT. A one-minute summary lets SigNoz
+// detect a fall in total logging without storing every INFO record.
+export function takeWebLogVolumeCount() {
+    const carrier = globalThis;
+    const count = carrier[WEB_LOG_VOLUME_SLOT] ?? 0;
+    carrier[WEB_LOG_VOLUME_SLOT] = 0;
+    return count;
+}
 export function setLogSink(sink) {
     globalThis[LOG_SINK_SLOT] = sink;
 }
@@ -188,6 +199,10 @@ export function log(level, msg, fields) {
     const logSink = getLogSink();
     if (!logSink)
         return;
+    if (record.service_name === "oxygen-web" && msg !== "web.log_volume") {
+        const carrier = globalThis;
+        carrier[WEB_LOG_VOLUME_SLOT] = (carrier[WEB_LOG_VOLUME_SLOT] ?? 0) + 1;
+    }
     try {
         logSink(record);
     }

package/node_modules/@oxygen/shared/dist/operational-telemetry.d.ts

@@ -2,6 +2,7 @@ type AttributeContainer = {
     attributes?: Record<string, unknown>;
     name?: string;
 };
+export declare function maskEmails(value: string): string;
 /** Sink-local copy; the managed logger retains its original record. */
 export declare function operationalLogSnapshot(record: Record<string, unknown>): Record<string, unknown>;
 /** Export a sanitized copy; never mutate the span another destination reads. */

package/node_modules/@oxygen/shared/dist/operational-telemetry.js

@@ -3,18 +3,22 @@ import { forwardExporterMethods } from "./telemetry-export-observer.js";
 // Namespaced semantic-convention fields evade the generic exact-key log policy.
 // Numeric usage remains operational data, subject to the shared secret policy.
 const PAYLOAD_KEY = /(?:^|[._-])(?:prompts?|completions?|inputs?|outputs?|payloads?|rows?|messages?|content|body|customer_data)(?:$|[._-])|^(?:request|response)$/i;
+// Error text, not a message body: ADR 0023 logs the detail withheld from a
+// customer as `error_message` (errorFields) or `<scope>_error_message`, and
+// SigNoz is the only dev log store. Sanitized like `error` (decided 2026-09-29).
+const ERROR_TEXT_KEY = /(?:^|_)error_message$/i;
 const EXCEPTION_CONTENT = /^exception\.(?:message|stacktrace)$/i;
 const QUERY_CONTENT = /^(?:db\.(?:statement|query\.text)(?:[._].*)?|(?:http|url)\.(?:query|query_string|request\.query)|process\.command(?:_args|_line)?)$/i;
 // Addresses keep their domain (the operational signal) and drop the person.
 const EMAIL_ADDRESS = /[A-Za-z0-9._%+-]+@((?:[A-Za-z0-9-]+\.)+[A-Za-z]{2,})/g;
-function maskEmails(value) {
+export function maskEmails(value) {
     return value.replace(EMAIL_ADDRESS, "***@$1");
 }
 function operationalText(value) {
     return maskEmails(redactSecretsInString(value).replace(/(?:https?:\/\/|\/)[^\s"'<>]+/gi, stripOperationalUrl));
 }
 function operationalValue(value, key, depth = 0) {
-    if (PAYLOAD_KEY.test(key) && typeof value !== "number" && typeof value !== "boolean")
+    if (PAYLOAD_KEY.test(key) && !ERROR_TEXT_KEY.test(key) && typeof value !== "number" && typeof value !== "boolean")
         return "[omitted]";
     if (typeof value === "string")
         return /(?:^|[._-])(?:url|path|target|href)(?:$|[._-])/i.test(key)

package/node_modules/@oxygen/shared/dist/otlp-log-sink.d.ts

@@ -46,13 +46,17 @@ export type OtlpLogSinkOptions = {
     /** Clock for the report throttle; tests only. */
     now?: (() => number) | undefined;
     /**
-     * Lowest level this sink ships; records below it never enter the queue. Null
-     * or absent ships every level. Sinks composed beside this one (Axiom) and
-     * stdout are unaffected; see `resolveOtlpLogMinLevel`.
+     * Lowest level this sink ships, except exact messages listed in
+     * includeMessagesBelowMinLevel. Null or absent ships every level. Sinks
+     * composed beside this one (Axiom) and stdout are unaffected.
      */
     minLevel?: LogLevel | null | undefined;
+    /** Exact, low-volume monitor events that must reach OTLP below minLevel. */
+    includeMessagesBelowMinLevel?: readonly string[] | undefined;
     fetch?: typeof globalThis.fetch | undefined;
 };
+/** Source alerts #13, #16, #17, #19, #43, #45, #51, #71, #73, #75–77, #87, #90, #92, #95 and #97 need these INFO events. */
+export declare const OTLP_MONITOR_INFO_EVENTS: readonly ["tenant.migrations.cron.done", "outbound_send.sent", "worker_workflow_cron_overlap_skipped", "worker_workflow_cron_enqueued", "copilot.turn.finished", "worker.queue.heartbeat", "worker.queue.ledger", "worker.queue.redis", "worker.queue.unregistered_kind", "automation_usage.reconcile_completed", "provider_health.cron_completed", "provider_balances.cron_completed", "cost_snapshot.cron_completed", "worker.egress_order_reconcile_sweep", "posthog_canary.round_trip_ok", "web.log_volume"];
 export type OtlpLogSinkHandle = {
     sink: LogSink;
     flush: () => Promise<void>;

package/node_modules/@oxygen/shared/dist/otlp-log-sink.js

@@ -6,6 +6,25 @@ import { sanitizeLogFields } from "./redaction.js";
 import { trace } from "@opentelemetry/api";
 import { operationalLogSnapshot } from "./operational-telemetry.js";
 import { telemetryEndpointForLog } from "./telemetry-export-observer.js";
+/** Source alerts #13, #16, #17, #19, #43, #45, #51, #71, #73, #75–77, #87, #90, #92, #95 and #97 need these INFO events. */
+export const OTLP_MONITOR_INFO_EVENTS = [
+    "tenant.migrations.cron.done",
+    "outbound_send.sent",
+    "worker_workflow_cron_overlap_skipped",
+    "worker_workflow_cron_enqueued",
+    "copilot.turn.finished",
+    "worker.queue.heartbeat",
+    "worker.queue.ledger",
+    "worker.queue.redis",
+    "worker.queue.unregistered_kind",
+    "automation_usage.reconcile_completed",
+    "provider_health.cron_completed",
+    "provider_balances.cron_completed",
+    "cost_snapshot.cron_completed",
+    "worker.egress_order_reconcile_sweep",
+    "posthog_canary.round_trip_ok",
+    "web.log_volume",
+];
 const DEFAULT_BATCH_SIZE = 500;
 const DEFAULT_FLUSH_INTERVAL_MS = 2_000;
 const DEFAULT_MAX_QUEUE = 10_000;
@@ -189,6 +208,7 @@ export function createOtlpLogSink(options) {
     const doFetch = options.fetch ?? globalThis.fetch;
     const now = options.now ?? Date.now;
     const minSeverity = options.minLevel ? SEVERITY_NUMBERS[options.minLevel] : null;
+    const includedMessages = new Set(options.includeMessagesBelowMinLevel ?? []);
     // A null/undefined override is dropped rather than applied, so a caller that
     // resolves its own environment and comes back empty-handed falls back to the
     // default here instead of shipping records with no `deployment.environment`.
@@ -275,7 +295,8 @@ export function createOtlpLogSink(options) {
         if (stopped || emittingInternal)
             return;
         // An unknown level ships as INFO (see toLogRecord), so it filters as one.
-        if (minSeverity !== null && SEVERITY_NUMBERS[recordLevel(record)] < minSeverity)
+        if (minSeverity !== null && SEVERITY_NUMBERS[recordLevel(record)] < minSeverity
+            && (typeof record.msg !== "string" || !includedMessages.has(record.msg)))
             return;
         // Drop the OLDEST record and keep this one: under sustained backpressure the
         // newest lines are the ones describing the incident being debugged.

package/node_modules/@oxygen/shared/dist/plan-limits.d.ts

@@ -807,21 +807,17 @@ export declare function resolvePlanAgentCreditLimits(tier: LimitsTier, options?:
  */
 export declare const AGENT_RUN_APPROVED_CEILING_MAX_CREDITS = 25000;
 /** Where an org's default Agent run ceiling came from. */
-export type AgentRunDefaultCeilingSource = "plan" | "enterprise_contract";
+export type AgentRunDefaultCeilingSource = "plan";
 /** The Agent run ceilings an org's runs are held to without a further approval. */
 export type AgentRunDefaultCeilings = PlanAgentCreditLimits & {
     source: AgentRunDefaultCeilingSource;
 };
 /**
- * The default Agent run ceilings for an org: its plan rung's, unless an
- * enterprise contract names its own default (decision F.4). The contract value
- * replaces the rung's total and model calls take half of it, as on every paid
- * rung. A contract value is clamped to the platform backstop; an unusable one
- * (absent, non-numeric, not positive) is ignored.
+ * The default Agent run ceilings for an org come from its plan rung. Enterprise
+ * uses the $1,999 rung; any higher run ceiling needs explicit approval.
  */
 export declare function resolveAgentRunDefaultCeilings(input: {
     tier: LimitsTier;
-    enterpriseDefaultCredits?: number | null;
     options?: RepricingOptions;
 }): AgentRunDefaultCeilings;
 /** `details.approval_kind` on the refusal below, so every surface can render its own approval card. */

package/node_modules/@oxygen/shared/dist/plan-limits.js

@@ -368,22 +368,10 @@ export function resolvePlanAgentCreditLimits(tier, options = {}) {
  */
 export const AGENT_RUN_APPROVED_CEILING_MAX_CREDITS = 25_000;
 /**
- * The default Agent run ceilings for an org: its plan rung's, unless an
- * enterprise contract names its own default (decision F.4). The contract value
- * replaces the rung's total and model calls take half of it, as on every paid
- * rung. A contract value is clamped to the platform backstop; an unusable one
- * (absent, non-numeric, not positive) is ignored.
+ * The default Agent run ceilings for an org come from its plan rung. Enterprise
+ * uses the $1,999 rung; any higher run ceiling needs explicit approval.
  */
 export function resolveAgentRunDefaultCeilings(input) {
-    const contract = input.enterpriseDefaultCredits;
-    if (typeof contract === "number" && Number.isFinite(contract) && contract >= 1) {
-        const total = Math.min(Math.floor(contract), AGENT_RUN_APPROVED_CEILING_MAX_CREDITS);
-        return {
-            maxTotalCredits: total,
-            maxInferenceCredits: Math.max(1, Math.floor(total / 2)),
-            source: "enterprise_contract",
-        };
-    }
     return { ...resolvePlanAgentCreditLimits(input.tier, input.options), source: "plan" };
 }
 /** `details.approval_kind` on the refusal below, so every surface can render its own approval card. */

package/node_modules/@oxygen/shared/dist/sending-schedule.d.ts

@@ -0,0 +1,39 @@
+import type { SequenceSendWindow } from "./sequences.js";
+/**
+ * The one sending schedule Launch shows (web editor, CLI `--schedule-*`, MCP
+ * `sending_schedule`). Email and social dispatch keep separate stored windows,
+ * `settings.email_send_window` and `settings.schedule`, so one schedule is
+ * written to both.
+ *
+ * A leaf of its own, importing only types: the Launch editor's day and time
+ * pickers are also rendered on Connections, and a value import of the whole
+ * sequences module added 13.8 KB gzip to that page (measured 2026-09-29).
+ */
+export type SendingSchedule = {
+    timezone: string;
+    days: number[];
+    start: string;
+    end: string;
+};
+/**
+ * The settings fragment that applies one schedule to every channel. The email
+ * window keeps its recipient-timezone fields; the social window takes the same
+ * zone, days and hours.
+ */
+export declare function sendingScheduleSettings(emailWindow: SequenceSendWindow | null | undefined, schedule: SendingSchedule): {
+    email_send_window: SequenceSendWindow;
+    schedule: SendingSchedule;
+};
+/**
+ * Stable comparison key for a window: zone, sorted ISO days and hours. Days are
+ * read the way dispatch reads them (sendWindowAllowsWeekday in ./sequences):
+ * day names count, and a missing, malformed or unrecognisable list means every
+ * day.
+ */
+export declare function sendingScheduleKey(window: Pick<SequenceSendWindow, "timezone" | "days" | "start" | "end">): string;
+/**
+ * Whether a mixed journey's two stored windows disagree: the social window is
+ * unset, or its zone, days or hours differ from the effective email window.
+ * Launch marks this state and the launch check warns about it.
+ */
+export declare function sendingWindowsDiverge(effectiveEmailWindow: SequenceSendWindow, socialWindow: Pick<SequenceSendWindow, "timezone" | "days" | "start" | "end"> | null | undefined): boolean;

package/node_modules/@oxygen/shared/dist/sending-schedule.js

@@ -0,0 +1,41 @@
+/**
+ * The settings fragment that applies one schedule to every channel. The email
+ * window keeps its recipient-timezone fields; the social window takes the same
+ * zone, days and hours.
+ */
+export function sendingScheduleSettings(emailWindow, schedule) {
+    return { email_send_window: { ...emailWindow, ...schedule }, schedule: { ...schedule } };
+}
+/**
+ * Stable comparison key for a window: zone, sorted ISO days and hours. Days are
+ * read the way dispatch reads them (sendWindowAllowsWeekday in ./sequences):
+ * day names count, and a missing, malformed or unrecognisable list means every
+ * day.
+ */
+export function sendingScheduleKey(window) {
+    const listed = Array.isArray(window.days) ? window.days : [];
+    const days = [...new Set(listed.map(isoWeekdayOf).filter((day) => day !== null))].sort((a, b) => a - b);
+    return JSON.stringify({
+        timezone: window.timezone,
+        days: days.length > 0 ? days : [1, 2, 3, 4, 5, 6, 7],
+        start: window.start,
+        end: window.end,
+    });
+}
+/**
+ * Whether a mixed journey's two stored windows disagree: the social window is
+ * unset, or its zone, days or hours differ from the effective email window.
+ * Launch marks this state and the launch check warns about it.
+ */
+export function sendingWindowsDiverge(effectiveEmailWindow, socialWindow) {
+    return !socialWindow || sendingScheduleKey(socialWindow) !== sendingScheduleKey(effectiveEmailWindow);
+}
+const WEEKDAY_BY_NAME = { Mon: 1, Tue: 2, Wed: 3, Thu: 4, Fri: 5, Sat: 6, Sun: 7 };
+function isoWeekdayOf(entry) {
+    const day = typeof entry === "number"
+        ? entry
+        : typeof entry === "string"
+            ? WEEKDAY_BY_NAME[`${entry.trim().slice(0, 1).toUpperCase()}${entry.trim().slice(1, 3).toLowerCase()}`] ?? Number(entry)
+            : Number.NaN;
+    return Number.isInteger(day) && day >= 1 && day <= 7 ? day : null;
+}

package/node_modules/@oxygen/shared/dist/sequence-lifecycle.d.ts

@@ -0,0 +1,19 @@
+/** Every lifecycle a person reads: the stored statuses plus the derived `completed`. */
+export declare const SEQUENCE_LIFECYCLES: readonly ["draft", "active", "completed", "paused", "archived"];
+export type SequenceLifecycle = (typeof SEQUENCE_LIFECYCLES)[number];
+/**
+ * The lifecycle word a person reads for a Sequence.
+ *
+ * The stored status records launch intent only (draft, active, paused,
+ * archived), and nothing moves it when the last lead finishes, so a campaign
+ * that contacted everyone kept reading "Active" forever. Whether work remains
+ * is the derived operational state; `drained` means every enrolled lead has
+ * reached an end. An active Sequence in that state reads as completed.
+ *
+ * Derived on read and never stored: operational health is one derived
+ * contract, not another lifecycle (docs/primitives/sequences.md, 2026-08-26).
+ * Enrolling new leads makes the same Sequence read as active again with no
+ * transition to undo. A paused Sequence stays paused, because someone decided
+ * that and the decision still holds.
+ */
+export declare function sequenceDisplayStatus<Status extends string>(status: Status, operationalState: string | null | undefined): Status | "completed";