@oxygen-agent/cli 1.1011.974 → 1.1011.1091

package/dist/sender-limits-flags.d.ts

@@ -1,4 +1,11 @@
+import type { Command } from "commander";
 import { type ContractFlagOverlay } from "./contract-flags.js";
+/**
+ * `whatsapp limits set`: one flag per key the WhatsApp limits route keeps, with
+ * the WhatsApp defaults and maximums from the shared owner (OXP-11.3.19). The
+ * body is still built by buildSenderLimitsBody, which reads the same flag names.
+ */
+export declare function addWhatsAppLimitFlags(command: Command): Command;
 /**
  * `--working-days` → ISO weekday numbers. Accepts day names or 1-7, comma
  * separated, and ranges (`mon-fri`, `1-5`). A token it cannot read is sent as

package/dist/sender-limits-flags.js

@@ -5,6 +5,7 @@
 import { OxygenError } from "@oxygen/shared/cli-result";
 import { LINKEDIN_SENDER_LIMIT_DEFAULTS, LINKEDIN_SENDER_LIMIT_MAXIMUMS, linkedInSenderLimitCautionLevel, } from "@oxygen/shared/linkedin-sequences";
 import { SENDER_LIMITS_PATCH_CONTRACT } from "@oxygen/shared/contracts/sender-limits";
+import { WHATSAPP_SENDER_LIMIT_DEFAULTS, WHATSAPP_SENDER_LIMIT_KEYS, WHATSAPP_SENDER_LIMIT_MAXIMUMS, WHATSAPP_SENDER_LIMIT_NOTES, } from "@oxygen/shared/whatsapp-sender-limits";
 import { readContractFlags } from "./contract-flags.js";
 /** "<text> (default N, max M)." for a LinkedIn sender limit flag, from the enforced constants. */
 function linkedInLimitHelp(key, text) {
@@ -48,6 +49,18 @@ const LIMIT_FLAG_NAMES = {
     min_action_spacing_seconds: "min-spacing-seconds",
     action_spacing_jitter_seconds: "spacing-jitter-seconds",
 };
+/**
+ * `whatsapp limits set`: one flag per key the WhatsApp limits route keeps, with
+ * the WhatsApp defaults and maximums from the shared owner (OXP-11.3.19). The
+ * body is still built by buildSenderLimitsBody, which reads the same flag names.
+ */
+export function addWhatsAppLimitFlags(command) {
+    for (const key of WHATSAPP_SENDER_LIMIT_KEYS) {
+        const flag = LIMIT_FLAG_NAMES[key] ?? key.replace(/_/g, "-");
+        command.option(`--${flag} <n>`, `${WHATSAPP_SENDER_LIMIT_NOTES[key]} (default ${WHATSAPP_SENDER_LIMIT_DEFAULTS[key]}, max ${WHATSAPP_SENDER_LIMIT_MAXIMUMS[key]}; higher values are clamped).`);
+    }
+    return command;
+}
 const WORKING_DAY_NAMES = {
     mon: 1, monday: 1, tue: 2, tues: 2, tuesday: 2, wed: 3, wednesday: 3, thu: 4, thur: 4, thurs: 4, thursday: 4,
     fri: 5, friday: 5, sat: 6, saturday: 6, sun: 7, sunday: 7,

package/node_modules/@oxygen/shared/dist/attempt-provenance.d.ts

@@ -0,0 +1,22 @@
+/**
+ * The identity a request asked about versus the one a provider answered with.
+ * Present on a refused attempt; `matched` is `false` whenever it is recorded.
+ */
+export type AttemptIdentityMatch = {
+    matched?: boolean;
+    requested?: string | null;
+    returned?: string | null;
+};
+/** Label for a skipped attempt's reason. Unknown reasons stay generic. */
+export declare function describeSkipReason(reason: string): string;
+/**
+ * Label for a `no_result` attempt whose answer was refused rather than absent,
+ * or `null` for an ordinary empty answer (which still reads "No result").
+ */
+export declare function describeRejectedAnswer(reason: string | null | undefined): string | null;
+/**
+ * One-line requested-vs-returned evidence for a refused attempt, for the cell's
+ * hover title. `null` when neither side named an identity — there is nothing to
+ * show and an empty tooltip is worse than none.
+ */
+export declare function describeIdentityMatch(identityMatch: AttemptIdentityMatch | null | undefined): string | null;

package/node_modules/@oxygen/shared/dist/attempt-provenance.js

@@ -0,0 +1,83 @@
+/**
+ * Human labels for a waterfall attempt's recorded `reason`. Single source of
+ * truth for the /tables data grid (`tables-workspace.tsx`) and the MCP
+ * enrichment-cell-detail widget, so an attempt explains itself one way wherever
+ * it is shown (OXP-7.3.40).
+ *
+ * Every label is grid-cell sized — these render inside a truncated attempt cell,
+ * not a detail panel.
+ */
+const ATTEMPT_REASON_LABELS = {
+    missing_input: "Run condition not met",
+    // The company waterfall's spelling of `missing_input`: it needs at least one
+    // of domain / name / linkedin_url before any lane can be dispatched.
+    missing_identity_input: "Missing identity",
+    byok_not_connected: "Not connected",
+    byok_requires_paid_plan: "Plan required",
+    step_disabled: "Step disabled",
+    unsupported_credential_mode: "Mode unsupported",
+    unknown_capability: "Unknown provider",
+    // A provider answered about a DIFFERENT company than the request named. The
+    // answer was refused rather than written to the row (Plain T-111), so calling
+    // it "skipped" would describe the wrong event entirely.
+    identity_mismatch: "Wrong company",
+    // A search-shaped lane returned no identity at all, so its answer could not be
+    // checked against the requested company and was not trusted.
+    identity_unverifiable: "Identity unverified",
+    // A pre-step that ran only to resolve an identity (e.g. a company LinkedIn
+    // URL) a later requested field needs. It owns no target column and writes no
+    // cell — recorded so the extra provider call is visible, never silent.
+    identity_prerequisite: "Identity step",
+    // Bring-your-own-key lane with no usable connection for this workspace:
+    // not connected, unhealthy, missing secret, or plan-gated.
+    provider_credentials_unavailable: "No credentials",
+    // Priced above the run's approved credit ceiling, so it was never dispatched.
+    credit_ceiling_reached: "Credit cap reached",
+    // An identity pre-step lane the run stood down: the ceiling had no headroom
+    // above what the requested fields themselves need, so resolving the identity
+    // would have spent the answer-bearing lane's budget.
+    identity_prerequisite_unaffordable: "Identity step unfunded",
+    // Oxygen could not resolve a managed price for the lane, so it never ran.
+    managed_price_unavailable: "Price unavailable",
+    // The row's person LinkedIn input is a company or school page, or no profile
+    // link at all, so the row was refused before any lane ran.
+    linkedin_url_not_a_profile: "Not a profile URL",
+};
+/**
+ * Reasons that mean "we got an answer and refused it", not "there was nothing
+ * to find". They arrive on an attempt whose status is `no_result`, where the
+ * bare "No result" reads as an absent answer and hides the rejection.
+ */
+const REJECTED_ANSWER_REASONS = new Set([
+    "identity_mismatch",
+    "identity_unverifiable",
+]);
+/** Label for a skipped attempt's reason. Unknown reasons stay generic. */
+export function describeSkipReason(reason) {
+    return ATTEMPT_REASON_LABELS[reason] ?? "Skipped";
+}
+/**
+ * Label for a `no_result` attempt whose answer was refused rather than absent,
+ * or `null` for an ordinary empty answer (which still reads "No result").
+ */
+export function describeRejectedAnswer(reason) {
+    if (!reason || !REJECTED_ANSWER_REASONS.has(reason))
+        return null;
+    return ATTEMPT_REASON_LABELS[reason] ?? null;
+}
+/**
+ * One-line requested-vs-returned evidence for a refused attempt, for the cell's
+ * hover title. `null` when neither side named an identity — there is nothing to
+ * show and an empty tooltip is worse than none.
+ */
+export function describeIdentityMatch(identityMatch) {
+    if (!identityMatch)
+        return null;
+    const requested = typeof identityMatch.requested === "string" ? identityMatch.requested.trim() : "";
+    const returned = typeof identityMatch.returned === "string" ? identityMatch.returned.trim() : "";
+    if (!requested && !returned)
+        return null;
+    const asked = requested ? `Requested ${requested}` : "Requested company";
+    const got = returned ? `provider returned ${returned}` : "provider returned no identity";
+    return `${asked}; ${got}`;
+}

package/node_modules/@oxygen/shared/dist/capability-discovery.d.ts

@@ -119,6 +119,12 @@ export declare const SEQUENCE_UNSUBSCRIBE_COMMAND = "oxygen sequences update <se
  * Factories, so a caller can edit the object it gets.
  */
 export declare const CAPABILITY_ROUTE_MCP_CALLS: {
+    connectionPrices: () => {
+        tool: string;
+        arguments: {
+            view: string;
+        };
+    };
     connectedAppsList: () => {
         tool: string;
         arguments: {};

package/node_modules/@oxygen/shared/dist/capability-discovery.js

@@ -206,7 +206,7 @@ export const OXYGEN_CAPABILITY_ROUTES = [
         primitive: "records",
         owns: "Canonical companies, people, deals, identities, relationships, activities, notes, tasks (reminders), files, merges, and CRM sync state.",
         notFor: "Disposable sourcing, enrichment, or scoring work; use Tables before promotion.",
-        execution: "Operate the hosted native CRM and preserve field/relationship provenance. Importing FROM a connected CRM lands here via `crm sync import <provider> --object <object>` (HubSpot contacts|companies, Attio people|companies, Pipedrive persons|organizations|deals), which pulls the whole object and has no list/segment filter. To import ONE HubSpot saved list or ONE Pipedrive saved filter into a new table the user can filter and enrich — optionally suppressing a do-not-contact list/filter first — use `tables hubspot import` or `tables pipedrive import` instead. Open work across the workspace is one read: `crm tasks list`.",
+        execution: "Operate the hosted native CRM and preserve field/relationship provenance. For an object inventory, `crm objects` supplies each backing Table; `tables preview <table> --fields <field-key> --summary-only` returns its exact total row count at 0 credits. Choose an existing column key from the object description for both counts and row lists (Companies: name; People: full_name). That total includes sample rows; native CRM reads mark seeded samples `_sample: true`; an absent marker means the record is not a seeded sample. Importing FROM a connected CRM lands here via `crm sync import <provider> --object <object>` (HubSpot contacts|companies, Attio people|companies, Pipedrive persons|organizations|deals), which pulls the whole object and has no list/segment filter. To import ONE HubSpot saved list or ONE Pipedrive saved filter into a new table the user can filter and enrich — optionally suppressing a do-not-contact list/filter first — use `tables hubspot import` or `tables pipedrive import` instead. Open work across the workspace is one read: `crm tasks list`.",
         posture: "workspace_write",
         gatewayTools: ["oxygen_crm_record_search", "oxygen_crm_record_get"],
         gatewayCommands: ["crm search", "crm get", "crm describe", "crm tasks list", "crm notes list"],
@@ -225,8 +225,8 @@ export const OXYGEN_CAPABILITY_ROUTES = [
         notFor: "Canonical CRM truth: use Records via oxygen_crm_objects_list, oxygen_crm_record_get or oxygen_crm_record_search. Not message cadence or an off-platform spreadsheet runtime.",
         execution: "Create and run work in hosted OXYGEN Tables; validate a small sample before bounded paid runs. To see what a table's own columns can be enriched with and what each costs per row before adding anything, run `tools search --for-table <table>` (MCP oxygen_tools_search with for_table): free, it returns priced suggestions with the exact add command. For standard person or company enrichment, `columns add <table> --preset person_enrich|company_enrich` (MCP oxygen_columns_add with preset) adds the maintained bundle in one call before any hand-built tool column. Person questions over that bundle's profile payload (skill set, grad school, location, job fit, current company) and person appearance research (events, keynotes, podcasts, GitHub profile) are `columns catalog --category people` templates, added with `columns add <table> --prompt-key <key> --input <name>=<column>`. For a company fact OXYGEN already knows how to research (founders, parent company, funding, cloud provider, offers demos, industry, NAICS, HQ, LinkedIn/Crunchbase page lookups) or a page extraction, `columns catalog` lists the ready-made template and `columns add <table> --prompt-key <key> --input <name>=<column>` (MCP oxygen_columns_add with prompt_key) adds it with no prompt to write. For ICP tiers, read the saved profile with `knowledge page get icp`, then add native Classify Score: `columns add <table> --label 'ICP fit' --score 'low,medium,high' --prompt '<ICP criteria using {{evidence_column}} tokens>' --grounding workspace`. It costs 0.075 credits/row; preview with `columns run --dry-run`. `columns catalog --family classification --json` puts Classify in `data.native`; `data.entries` holds separate prompt templates that can cost more.",
         posture: "mixed",
-        gatewayTools: ["oxygen_tables_create", "oxygen_tools_search", "oxygen_columns_add", "oxygen_columns_catalog", "oxygen_enrich_column_preview", "oxygen_tables_link_bulk", "oxygen_callables_manage"],
-        gatewayCommands: ["tables create", "tools search", "columns add", "columns catalog", "enrich-column preview", "tables link", "functions list", "functions draft"],
+        gatewayTools: ["oxygen_tables_create", "oxygen_tools_search", "oxygen_columns_add", "oxygen_columns_catalog", "oxygen_enrich_column_preview", "oxygen_tables_link_bulk", "oxygen_callables_manage", "oxygen_tables_records_import"],
+        gatewayCommands: ["tables create", "tools search", "columns add", "columns catalog", "enrich-column preview", "tables link", "functions list", "functions draft", "tables records import"],
         skills: ["oxygen-tables", "oxygen-enrichment", "oxygen-table-tidy", "oxygen-diagnostics", "oxygen-clay-migration", "oxygen-signals"],
         endpointSections: ["action-columns", "callables", "functions", "columns", "company-enrichment", "enrich-column", "enrichment", "projects", "supabase", "table-action-items", "table-action-runs", "table-ingestion-runs", "tables"],
         // "link"/"join"/"connect"/"relate" route here for `tables link`. Added after a
@@ -1041,7 +1041,9 @@ function routeCardFor(card, query) {
             ...card, posture: "paid_read",
             execution: "Generate wording variations with the native Spintax owner; sending is separate. Hydrate oxygen_spintax_generate. External MCP uses oxygen_capabilities_call, including its explicit free mode=dry_run preview; built-in agents invoke the native capability under their current policy. Omitted mode is live and costs 3 credits. After preview, live requires approval of the exact text with approved=true and max_credits>=3. Failed generation refunds the reservation.",
         };
-    if (card.id === "knowledge-graph" && isWorkspaceVoiceIntent(query))
+    if (card.id === "knowledge-graph" && isCanonicalCopyReadIntent(query))
+        card = { ...card, posture: "read_only", execution: CANONICAL_COPY_READ_EXECUTION };
+    else if (card.id === "knowledge-graph" && isWorkspaceVoiceIntent(query))
         card = { ...card, execution: WORKSPACE_VOICE_EXECUTION };
     if (card.primitive === "workflows" && isRecurringCompanyMonitoringIntent(query))
         card = {
@@ -1063,12 +1065,18 @@ function routeCardFor(card, query) {
             ...card,
             execution: "Create a workspace-private Table or inspect its schema and rows. Manual rows, column labels, visibility and member favorites cost 0 credits. Change only the display label with columns update (oxygen_columns_update); columns rename (oxygen_columns_rename) requires a new stable key. Favorite one table or folder with tables favorite (oxygen_tables_favorite), then read tables favorites (oxygen_tables_favorites). For tidy guidance, read oxygen-table-tidy with skills get (oxygen_skills_get); tables tidy-suggest (oxygen_tables_tidy_suggest) analyzes without changes. Read the owning schema, apply the requested scope, then describe or query the Table to verify it.",
         };
+    const recordsCopy = card.primitive === "tables" ? recordsTableImportRecommendation(query) : null;
+    if (recordsCopy)
+        card = { ...card, posture: "workspace_write", execution: recordsCopy.execution };
     const maintenance = card.primitive === "tables" ? tableMaintenanceRecommendation(query) : null;
     if (maintenance)
         card = { ...card, execution: maintenance.execution };
     const read = card.primitive === "tables" ? tableReadRecommendation(query) : null;
     if (read)
         card = { ...card, execution: read.execution };
+    const removal = card.primitive === "tables" ? tableRowRemovalRecommendation(query) : null;
+    if (removal)
+        card = { ...card, posture: "workspace_write", execution: removal.execution };
     const sent = card.id === "connected-linkedin" ? sentLinkedInInvitationReadRecommendation(query) : null;
     if (sent)
         card = { ...card, execution: sent.execution };
@@ -1162,6 +1170,23 @@ function isOwnLinkedInNetworkIntent(query) {
  * claimed first (isUgcVoiceIntent); phone voice (numbers, calls) never matches.
  * The blind baseline also searched "writing style" and "voice learn".
  */
+/**
+ * Which voice, brand or positioning AI copy uses right now: a free read of the pinned
+ * canonical doc. A blind operator searched "current canonical voice", got the wiki
+ * search tools, and concluded no such read existed; "which voice does AI copy use"
+ * read as "copy my voice" and was sent to paid synthesis (OXP-1.4.18).
+ */
+function isCanonicalCopyReadIntent(query) {
+    if (/\b(?:learn\w*|synthesi[sz]\w*|generat\w*|creat\w*|writ\w*|set|pin|unpin|chang\w*|edit\w*|updat\w*|approv\w*|propos\w*|import\w*|calls?|phone|numbers?|creators?|ugc)\b/.test(query))
+        return false;
+    const copyType = /\b(?:voice|brand|positioning)\b/;
+    if (!copyType.test(query))
+        return false;
+    return /\b(?:canonical|pinned|current|active|live)\b/.test(query)
+        || /\b(?:ai|generated) copy\b/.test(query)
+        || /\bwhich\b.{0,20}\b(?:voice|brand|positioning)\b/.test(query);
+}
+const CANONICAL_COPY_READ_EXECUTION = "Read the canonical copy AI uses with `oxygen context canonical get --type <voice|brand|positioning> --json` (MCP: oxygen_context_canonical_get), a free read. present=false means none is pinned, and grounding_when_absent says what AI copy uses instead. Pinning one (knowledge page pin) files a proposal a human approves.";
 function isWorkspaceVoiceIntent(query) {
     if (/\b(?:calls?|calling|dial\w*|phone|softphone|voicemail|numbers?)\b/.test(query))
         return false;
@@ -1169,7 +1194,7 @@ function isWorkspaceVoiceIntent(query) {
         || /\b(?:learn|capture|mimic|copy|match)\w*\b.{0,30}\bvoice\b/.test(query)
         || /\bvoice\b.{0,30}\b(?:learn|capture|mimic|copy|match)\w*\b/.test(query);
 }
-const WORKSPACE_VOICE_EXECUTION = "A writing voice is learned from the workspace's own sent LinkedIn and WhatsApp messages: `oxygen knowledge synthesize --kind voice --json` (MCP: oxygen_context_synthesize with kind voice) runs one low-cost AI call, priced as one low-reasoning AI column cell, the preview included, and reports credits_used; to pin the guide a preview showed, pass its body back with --approved --body (no new AI call), because --approved alone synthesizes and charges again. The pinned guide is the canonical voice at once and grounds message, reply, sequence and post drafts and AI columns. It reads sent messages only, not posts, emails or web pages. Brand voice and tone live in wiki pages (knowledge search). A creator's voice in a UGC program is `ugc voice import`.";
+const WORKSPACE_VOICE_EXECUTION = "A writing voice is learned from the workspace's own sent LinkedIn and WhatsApp messages: `oxygen knowledge synthesize --kind voice --json` (MCP: oxygen_context_synthesize with kind voice) runs one low-cost AI call, priced as one low-reasoning AI column cell, the preview included, and reports credits_used; to save the guide a preview showed, pass its body back with --approved --body (no new AI call) at 0 credits, because --approved alone synthesizes and charges again. Saving files a pin proposal: the guide becomes the canonical voice, which grounds message, reply, sequence and post drafts and AI columns, only once a human approves that proposal (oxygen knowledge proposals approve <id>; MCP oxygen_knowledge_proposal_decide). It reads sent messages only, not posts, emails or web pages. Brand voice and tone live in wiki pages (knowledge search). A creator's voice in a UGC program is `ugc voice import`. When the user already has the guide's text, no synthesis is needed: save it with `knowledge page upsert --type voice` and request the pin with `knowledge page pin` (MCP oxygen_knowledge_page_upsert with canonical: true), both 0 credits. Which voice AI copy uses now: `context canonical get --type voice` (MCP oxygen_context_canonical_get). To hard-cap a synthesis run, pass `--max-credits <n>` (MCP max_credits): a higher estimate is refused before the AI call, with nothing charged.";
 /** One schedule for every channel of a Sequence, the same as Launch's Sending schedule. */
 export const SEQUENCE_SENDING_SCHEDULE_COMMAND = "oxygen sequences update <sequence> --schedule-timezone <IANA zone> --schedule-days mon-fri --schedule-hours-start 09:00 --schedule-hours-end 17:00 --json";
 /** Launch's unsubscribe switch: the visible link and the one-click headers together. */
@@ -1183,6 +1208,7 @@ export const SEQUENCE_UNSUBSCRIBE_COMMAND = "oxygen sequences update <sequence>
  * Factories, so a caller can edit the object it gets.
  */
 export const CAPABILITY_ROUTE_MCP_CALLS = {
+    connectionPrices: () => ({ tool: "oxygen_billing_commitments", arguments: { view: "connection-prices" } }),
     connectedAppsList: () => ({ tool: "oxygen_connector_list", arguments: {} }),
     connectedAppEvents: () => ({ tool: "oxygen_connector_events_get", arguments: { connection: "<app>" } }),
     workspacePagesList: () => ({ tool: "oxygen_settings_pages_get", arguments: {} }),
@@ -1242,6 +1268,13 @@ export function catalogueIntentMcpCall(intentId) {
 // A Sequence's sending schedule or send window. Workflow language still wins
 // ("a workflow that changes the send window nightly" is automation), and
 // "sending hours" stays with the connected account's working hours.
+// Where each enrolled lead stands: its next message time, what holds it, why it
+// stopped. Both 2026-10-06 collateral acceptance operators searched for this
+// ("why is a lead stuck in a LinkedIn campaign, next message time") and got only
+// create/enroll/start, never the read that answers it.
+function isSequenceLeadProgressIntent(query) {
+    return /\b(?:next (?:message|step|send)|stuck|blocked|held|per[- ]lead (?:status|progress)|why (?:\w+ )?(?:stopped|failed))\b/.test(query);
+}
 function isSequenceScheduleIntent(query) {
     return /\bsend(?:ing)? (?:schedule|window)s?\b/.test(query)
         && !/\b(workflow|automation|automate|webhook|cron)\b/.test(query);
@@ -1454,6 +1487,18 @@ function isCompanySourcingIntent(query) {
     return /\b(companies|businesses|firms|company search|company sourcing)\b/.test(query)
         && /\b(search|plan|find|source|sourcing|discover|build|tam|prospect)\b/.test(query);
 }
+/** Scoped row deletion keeps creation and enrichment out of its discovery path. */
+function tableRowRemovalRecommendation(query) {
+    if (!/\brows?\b/.test(query) || !/\b(delete|remove)\b/.test(query)
+        || /\b(workflows?|agents?|campaigns?|sequences?|columns?|functions?|callables?|crm|records?|views?|dedup\w*|duplicates?)\b/.test(query)
+        || isSecondPartyDecisionIntent(query))
+        return null;
+    return {
+        tools: ["oxygen_table_rows_remove_selection", "oxygen_tables_query", "oxygen_table_rows_page"],
+        commands: ["tables rows remove-selection", "tables query", "tables rows page"],
+        execution: "Delete Table rows with tables rows remove-selection (oxygen_table_rows_remove_selection): exact row_ids or all_matching with the browser's serialized filter, search, sort, range and exclusions. Hydrate its schema first. Unsupported filters arrays are refused; unqualified all_matching deletes every row. This is permanent and costs 0 credits. Read the matching rows before deletion and the survivors afterward; deleting rows does not stop campaign enrollment.",
+    };
+}
 /** Reads of grid values/state are separate from executing or resolving actions. */
 function tableReadRecommendation(query) {
     if (!/\btables?\b/.test(query) || isFunctionIntent(query) || isSecondPartyDecisionIntent(query)
@@ -1612,6 +1657,14 @@ function crmSampleRecordRecommendation(query) {
         execution: "A new workspace's seeded companies, CEOs and deals read _sample: true (sample: true on suggest hits and crm pipeline deals); pipeline, dashboard and chart totals leave them out and say how many. Keep one as real only when the user says it is: crm keep <object> <record> takes a row id or an identity such as stripe.com. It is free and idempotent, has no undo, and keeps that record alone: a kept deal's company and contact stay samples until each is kept. MCP runs oxygen_crm_record_keep through oxygen_capabilities_call.",
     };
 }
+/** Inventory reads select existing Table fields and retain honest sample totals. */
+function crmInventoryRecommendation(query) {
+    if (!/\b(crm|records?)\b/.test(query)
+        || !/\b(count|how many|inventory|list|enumerate|browse)\b/.test(query)
+        || /\b(enrich\w*|configur\w*|settings?|presets?|fields?|attributes?|identities|relationships?|tasks?|notes?|files?|sync|hubspot|attio|pipedrive|import|create|add|edit|update|delete|remove|merge|workflows?|agents?)\b/.test(query))
+        return null;
+    return { tools: ["oxygen_crm_objects_list", "oxygen_tables_preview", "oxygen_crm_record_get"], commands: ["crm objects", "tables preview", "crm get"] };
+}
 /** Saved contact facts belong to Records, regardless of email/phone channel words. */
 function storedCrmContactReadRecommendation(query) {
     if (!/\b(crm|records?)\b/.test(query)
@@ -1658,6 +1711,24 @@ function tableFeedRecommendation(rawQuery) {
         return { tools: ["oxygen_feeds_bind", "oxygen_feeds_list"], commands: ["feeds bind", "feeds list"], execution: "Bind the native Table row-supply feed. Inspect source, cadence and standing credit scope first; pull feeds are distinct from inbound webhook endpoints. Feed tools are executable through the core gateways or Signals pack." };
     return { tools: ["oxygen_feeds_list", "oxygen_feeds_get", "oxygen_feeds_update"], commands: ["feeds list", "feeds get", "feeds update"], execution: "Inspect the existing Table feed with feeds_get(include_route=true), then update it in place with oxygen_feeds_update (Signals pack or core write gateway). Preserve the complete frozen request; source replacement resets the cursor. Scheduled replacements require one executable lane; fallbacks require no cadence. Changed cadence, increased paid cap or replaced paid source can require renewed standing authorization. Configuration is free; future refreshes retain their approved cycle ceiling." };
 }
+/**
+ * Records into a working Table (OXP-1.1.10): "turn my CRM view into a table
+ * that stays current". External CRM imports keep their own lanes, and a Table
+ * going INTO Records is promote, the other direction.
+ */
+function recordsTableImportRecommendation(query) {
+    if (!/\b(crm|records?)\b/.test(query)
+        || !/\b(tables?|working copy|spreadsheet)\b/.test(query)
+        || !/\b(import\w*|cop(?:y|ies)|turn\w*|pull\w*|bring|sync\w*|mirror\w*|into)\b/.test(query)
+        || /\b(hubspot|attio|pipedrive|salesforce|csv|promot\w*|bind)\b/.test(query)
+        || /\b(tables?|rows?)\b.{0,40}\b(?:into|to)\s+(?:the\s+|my\s+|our\s+)?(?:crm|records)\b/.test(query))
+        return null;
+    return {
+        tools: ["oxygen_tables_records_import", "oxygen_tables_records_sync", "oxygen_tables_records_status"],
+        commands: ["tables records import", "tables records sync", "tables records status"],
+        execution: "Copy a Records object or saved view into a new Table with oxygen_tables_records_import (dry_run first counts records and lists columns); refresh=sync with approved=true keeps it current on a schedule. One-way: the copy is free and Records never change, rows key on record_id, cells edited in the Table are kept, and records that leave the view stay as rows with in_records=false. Sync now or change the schedule with oxygen_tables_records_sync; read the last sync with oxygen_tables_records_status. Each scheduled sync bills one workflow step.",
+    };
+}
 function providerPolicyReadRecommendation(query) {
     if (!/\bproviders?\b/.test(query)
         || !/\b(limits?|request caps?|rate caps?|overrides?)\b/.test(query)
@@ -1681,7 +1752,7 @@ function spendBreakdownRecommendation(query) {
         return null;
     return {
         tools: ["oxygen_billing_audit", "oxygen_billing_usage"], commands: ["billing audit", "billing usage"],
-        execution: "Read where managed credits went with oxygen_billing_audit: spend_by_category ranks each area's credits and share of managed_credits_spent, largest first, over the whole window; group_by provider, tool, model, run or workspace narrows it. Spent is reserved minus released, so it includes open holds; oxygen_billing_usage lists the ledger and its managed_credits_used counts captured credits only. External MCP uses oxygen_capabilities_read; built-in agents invoke the native capability. Reads cost 0 credits.",
+        execution: "Read where managed credits went with oxygen_billing_audit: spend_by_category ranks each area's credits and share of managed_credits_spent, largest first, over the whole window; group_by provider, tool, model, run or workspace narrows it. Spent is reserved minus released in the window; it differs from captured (oxygen_billing_usage's managed_credits_used) by holds still open and holds settling across the window edge, so do not attribute the whole gap to open holds. External MCP uses oxygen_capabilities_read; built-in agents invoke the native capability. Reads cost 0 credits.",
     };
 }
 function sendingBlockReadRecommendation(query) {
@@ -1708,6 +1779,8 @@ function isSpintaxIntent(query) {
         || /\b(paraphrase|rewrite|variations?)\b.{0,45}\b(wording|copy|message|draft|subject(?: line)?)\b/.test(query);
 }
 function explicitCapabilityIntent(query) {
+    if (isConnectionPriceIntent(query))
+        return ROUTE_BY_ID.get("billing-and-budgets") ?? null;
     if (sentLinkedInInvitationReadRecommendation(query))
         return ROUTE_BY_ID.get("connected-linkedin") ?? null;
     if (isCrmEnrichmentConfigurationRead(query))
@@ -1726,6 +1799,8 @@ function explicitCapabilityIntent(query) {
         return ROUTE_BY_PRIMITIVE.get("messages") ?? null;
     if (tableFeedRecommendation(query))
         return ROUTE_BY_PRIMITIVE.get("tables") ?? null;
+    if (recordsTableImportRecommendation(query))
+        return ROUTE_BY_PRIMITIVE.get("tables") ?? null;
     if (providerPolicyReadRecommendation(query))
         return ROUTE_BY_ID.get("billing-and-budgets") ?? null;
     if (sendingBlockReadRecommendation(query))
@@ -1914,9 +1989,12 @@ function explicitCapabilityIntent(query) {
     if (/\bwhatsapp\b.{0,30}\b(account|connect|limits?|sync)\b/.test(query)) {
         return ROUTE_BY_ID.get("connected-whatsapp") ?? null;
     }
+    const hasSequenceProgramIntent = /\b(sequence|campaign|cadence|enroll|nurture)\b/.test(query)
+        || /\b(day\s*\d+|days?\s+\d|multi[ -]step|rotate senders?|sender rotation|stop on reply|until (?:they )?reply)\b/.test(query);
     if (!isNetNewLinkedInInitiation(query)
         && (/\b(one[ -]off|ad[ -]hoc|just once|reply once|single message|direct message|direct email|no cadence)\b/.test(query)
-            || /\b(reply|respond|follow up)\b.{0,30}\b(conversation|thread|email|linkedin|whatsapp|dm)\b/.test(query))) {
+            || (!hasSequenceProgramIntent
+                && /\b(reply|respond|follow up)\b.{0,30}\b(conversation|thread|email|linkedin|whatsapp|dm)\b/.test(query)))) {
         return ROUTE_BY_PRIMITIVE.get("messages") ?? null;
     }
     if (/\b(my|our|own|connected)\b.{0,40}\blinkedin\b|\b(sales navigator|salesnav|recruiter|profile viewers?|linkedin inbox)\b/.test(query)) {
@@ -1925,8 +2003,7 @@ function explicitCapabilityIntent(query) {
     if (/\b(publish|schedule|approve)\b.{0,24}\b(post|content)\b|\bcontent calendar\b/.test(query)) {
         return ROUTE_BY_PRIMITIVE.get("publishing") ?? null;
     }
-    if (/\b(sequence|campaign|cadence|enroll|nurture)\b/.test(query)
-        || /\b(day\s*\d+|days?\s+\d|multi[ -]step|rotate senders?|sender rotation|stop on reply|until (?:they )?reply)\b/.test(query)) {
+    if (hasSequenceProgramIntent) {
         return ROUTE_BY_PRIMITIVE.get("sequences") ?? null;
     }
     // Existing reply handling is Messages even without a channel name. Keep this
@@ -2027,12 +2104,21 @@ function recommendationsFor(card, query) {
     const contactFind = card.id === "sourcing-and-provider-tools" ? oneShotContactFindingRecommendation(query) : null;
     if (contactFind)
         return contactFind;
+    if (card.id === "knowledge-graph" && isCanonicalCopyReadIntent(query)) {
+        return {
+            tools: ["oxygen_context_canonical_get", "oxygen_knowledge_page_get", "oxygen_knowledge_search"],
+            commands: ["context canonical get", "knowledge page get", "knowledge search"],
+        };
+    }
     const crmSample = card.id === "records" ? crmSampleRecordRecommendation(query) : null;
     if (crmSample)
         return crmSample;
     const crmContactRead = card.id === "records" ? storedCrmContactReadRecommendation(query) : null;
     if (crmContactRead)
         return crmContactRead;
+    const crmInventory = card.id === "records" ? crmInventoryRecommendation(query) : null;
+    if (crmInventory)
+        return crmInventory;
     const replyDraftRead = card.primitive === "messages" ? storedReplyDraftReadRecommendation(query) : null;
     if (replyDraftRead)
         return replyDraftRead;
@@ -2042,6 +2128,14 @@ function recommendationsFor(card, query) {
     const spendRead = card.id === "billing-and-budgets" ? spendBreakdownRecommendation(query) : null;
     if (spendRead)
         return spendRead;
+    if (card.id === "billing-and-budgets" && isConnectionPriceIntent(query)) {
+        return {
+            tools: ["oxygen_billing_commitments"],
+            commands: ["billing commitments"],
+            exactCommand: "oxygen billing commitments --view connection-prices --json",
+            exactMcpCall: CAPABILITY_ROUTE_MCP_CALLS.connectionPrices(),
+        };
+    }
     const blockRead = card.primitive === "sequences" ? sendingBlockReadRecommendation(query) : null;
     if (blockRead)
         return blockRead;
@@ -2059,6 +2153,9 @@ function recommendationsFor(card, query) {
     const feed = card.primitive === "tables" ? tableFeedRecommendation(query) : null;
     if (feed)
         return { tools: feed.tools, commands: feed.commands };
+    const recordsCopy = card.primitive === "tables" ? recordsTableImportRecommendation(query) : null;
+    if (recordsCopy)
+        return { tools: recordsCopy.tools, commands: recordsCopy.commands };
     if (card.id === "billing-and-budgets" && /\b(credit prices|credit price catalog|customer credit)\b/.test(query)) {
         return { tools: ["oxygen_customer_credit_prices"], commands: ["pricing customer-credit-prices"] };
     }
@@ -2113,7 +2210,7 @@ function recommendationsFor(card, query) {
     if (card.primitive === "tables" && isCompanyPageFollowersIntent(query)) {
         return {
             tools: ["oxygen_tables_followers", "oxygen_tables_sources"],
-            commands: ["tables followers check", "tables followers order", "tables sources"],
+            commands: ["tables followers check", "tables followers order", "tables followers status", "tables sources"],
             exactCommand: COMPANY_PAGE_FOLLOWERS_COMMAND,
             exactMcpCall: CAPABILITY_ROUTE_MCP_CALLS.companyPageFollowers(),
         };
@@ -2298,6 +2395,9 @@ function recommendationsFor(card, query) {
         };
     }
     if (card.primitive === "tables") {
+        const removal = tableRowRemovalRecommendation(query);
+        if (removal)
+            return removal;
         const read = tableReadRecommendation(query);
         if (read)
             return read;
@@ -2496,6 +2596,12 @@ function recommendationsFor(card, query) {
                 commands: ["senders profiles list", "senders profiles get"],
             };
         }
+        if (isSequenceLeadProgressIntent(query)) {
+            return {
+                tools: ["oxygen_sequences_enrollments", "oxygen_sequences_stats", "oxygen_sequences_list"],
+                commands: ["sequences enrollments", "sequences stats", "sequences list"],
+            };
+        }
         if (isNetNewLinkedInInitiation(query)) {
             const publicResearch = isPublicLinkedInRead(query);
             const harvestEngagers = publicResearch && isPublicLinkedInEngagerHarvest(query);
@@ -2719,7 +2825,33 @@ function isSenderCopyVariableIntent(query) {
         || /\bsign off (?:variable|with|per sender)\b|\bper sender sign off\b/.test(query)
         || /\bsign (?:every|each|all) (?:emails?|messages?|dms?|notes?) with\b/.test(query);
 }
-/** The account's own working hours or daily caps (`senders limits`), not its network. */
+/** OXP-43.36: inspect recurring account prices before creating authorization. */
+function isConnectionPriceIntent(query) {
+    if (!/\b(costs?|prices?|credits?|reser(?:ve[sd]?|vations?)|charges?|charged|fees?|pay|quote)\b/.test(query))
+        return false;
+    if (/\b(per (?:message|send|action|call)|scrap\w*|research|enrich\w*|public (?:profiles?|posts?))\b/.test(query))
+        return false;
+    // A whole mailbox onboarding motion can mention price alongside importing
+    // history and syncing CRM. Keep that owner unless the ask isolates a quote.
+    if (/\b(import|sync)\b/.test(query) && /\b(history|crm|unibox)\b/.test(query)
+        && !/\b(monthly|recurring|quote|before (?:consent|connect|authorization))\b/.test(query))
+        return false;
+    // Lookup, purchase and sending prices keep their own previews. Naming a
+    // mailbox or a phone number alone does not make it an account connection.
+    if (/\b(?:find|look ?up|lookup)\b/.test(query) && /\bphones?\b/.test(query))
+        return false;
+    if (/\b(?:warm ?up|deliverability|placement)\b/.test(query))
+        return false;
+    if (/\bmailbox(?:es)?\b/.test(query) && /\b(?:buy|purchase|order)\b/.test(query))
+        return false;
+    if (/\blinkedin\b/.test(query) && /\b(?:messages?|invites?|invitations?|connection requests?)\b/.test(query))
+        return false;
+    const accountContext = /\b(accounts?|connect(?:ing|ed|ion)?|reconnect|oauth|consent)\b/.test(query);
+    return /\b(connected accounts?|account connections?|connection prices?)\b/.test(query)
+        || (/\b(linkedin|whatsapp|twitter|x)\b/.test(query)
+            && (accountContext || /\b(numbers?|seats?)\b/.test(query)))
+        || (/\bmailbox(?:es)?\b/.test(query) && accountContext);
+}
 /**
  * Connecting, or asking what it takes to connect, the workspace's own LinkedIn
  * sending account. The 2026-09-26 repricing baseline asked "connect a LinkedIn
@@ -2824,6 +2956,9 @@ function isFailedPostIntent(query) {
 function isPostCoverOrPreviewIntent(query) {
     if (/\b(ads?|competitors?)\b/.test(query))
         return false;
+    // A draft in an existing inbox conversation is a reply, not a post artifact.
+    if (/\b(inbox|unibox|conversation)\b/.test(query) && !/\bposts?\b/.test(query))
+        return false;
     return (/\b(cover|thumbnail)\b/.test(query) && /\b(post|video|draft)\b/.test(query))
         || /\bpreview\b.{0,40}\b(post|draft)\b/.test(query);
 }

package/node_modules/@oxygen/shared/dist/cli-result.js

@@ -79,6 +79,12 @@ export function exitCodeForErrorCode(code) {
     if (code.startsWith("invalid_")
         || code.startsWith("missing_")
         || code === "unknown_fields"
+        || code === "unknown_filter_column"
+        || code === "unknown_sort_column"
+        || code === "formula_filter_not_supported"
+        || code === "formula_sort_not_supported"
+        || code === "lookup_filter_not_supported"
+        || code === "lookup_sort_not_supported"
         || code === "validation_failed") {
         return 2;
     }

package/node_modules/@oxygen/shared/dist/contracts/browser-operations.js

@@ -1,7 +1,19 @@
 /** Browser resource operations, using the same scoped handlers on every surface. */
 import { arr, bool, enumOf, int, nullable, num, obj, str } from "./schema.js";
 import { TABLE_ROW_READ_WINDOW_FIELDS } from "./table-row-read.js";
+import { TABLE_ROW_REMOVAL_FIELDS } from "./table-row-removal.js";
 const text = (description) => str(description ? { description } : {});
+// The grid's own URL state (Sequence lead/contact grids reuse the Table grid): copying f / s from a
+// filtered, sorted browser view is the supported way to build them.
+const FILTER_PARAM = "Filter tree as the grid URL's f parameter (base64url JSON); copy it from a filtered browser view.";
+const SORT_PARAM = "Sort list as the grid URL's s parameter (base64url JSON); copy it from a sorted browser view.";
+// Sequence lead/contact rows: one row can carry ~100 KB of research and
+// enrichment values, so these reads select columns and compact values (OXP-1.11.67).
+const sequenceRowsProjection = {
+    fields: text("Comma-separated column keys to return, e.g. full_name,company,__seq_status; omit for every column."),
+    projection: enumOf(["grid", "values"], { description: "values: compact {id, values} rows, long values capped; grid (default): the full grid payload." }),
+};
+const SEQUENCE_ROWS_TRUNCATION_HINT = "Result trimmed for context size. Pass projection=values (values over 2,000 characters are capped) and fields=<column keys>; a smaller limit cannot shrink one row.";
 const json = { type: "object", additionalProperties: true };
 const strings = () => arr(str());
 const objects = () => arr(json);
@@ -15,12 +27,12 @@ const selection = obj({
 const actions = arr(obj({ type: enumOf(["tool_column"]), column: text(), definition: json }, { required: ["column"] }));
 const viewFields = { name: text(), view_type: text(), config: json, group_by: text(), is_default: bool(), position: int({ minimum: 0 }) };
 const crmLinks = arr(obj({ object: text(), row_id: text(), role: text() }, { required: ["object", "row_id"] }));
-function operation(id, route, method, cli, mcp, pack, summary, fields = {}, required = [], options = {}) {
+function operation(id, route, method, cli, mcp, pack, summary, fields = {}, required = [], options = {}, annotations) {
     return {
         id, route, method, parameters: [...route.matchAll(/\{(\w+)\}/g)].map((match) => match[1]),
         contract: obj(fields, { required }),
         cli: { path: cli.split(" "), summary },
-        mcp: { name: mcp, title: `Oxygen: ${cli}`, description: summary, pack },
+        mcp: { name: mcp, title: `Oxygen: ${cli}`, description: summary, pack, ...(annotations ? { annotations } : {}) },
         mutates: method !== "GET", spends: false, ...options,
     };
 }
@@ -33,17 +45,17 @@ const multipart = { contentField: "content_base64", nameField: "file_name", type
 const nativeCli = { generated: { cli: false, mcp: false } };
 export const BROWSER_OPERATIONS = [
     operation("tables.resource.export_csv", `${table}/export/csv`, "GET", "tables export-csv", "oxygen_table_export_csv", "tables", "Download every row in the exact filtered Table view as streamed CSV. CLI writes --output; MCP returns an authenticated download resource link. Unsupported live lookup filters fail before download; rows and bytes are not capped or truncated.", { f: text("Serialized filter tree."), s: text("Serialized sort state."), q: text(), fields: text("Comma-separated exact column keys.") }, [], { binary: { stream: true, resourceParameter: "table" } }),
-    operation("billing.allowance.view", "/api/cli/billing/allowance/view", "GET", "billing allowance view", "oxygen_billing_allowance_view", "billing", "Read the complete current-cycle allowance view, including billing-owner display and partner-bonus eligibility."),
+    operation("billing.allowance.view", "/api/cli/billing/allowance/view", "GET", "billing allowance view", "oxygen_billing_allowance_view", "billing", "Inspect the current-cycle allowance, billing owner and partner-bonus eligibility. 0 credits; reserves nothing. Due plan grants or credit expiry may apply."),
     operation("billing.commitments.view", "/api/cli/billing/commitments/view", "GET", "billing commitments view", "oxygen_billing_commitments_view", "billing", "Read the complete fixed-credit commitment view and linked billing-owner display, without enumerating a child's sibling resources."),
     operation("billing.invoices.view", "/api/cli/billing/invoices/view", "GET", "billing invoices view", "oxygen_billing_invoices_view", "billing", "Read the browser invoice-history projection, including exact native timestamps, amounts and signed Stripe invoice links."),
     operation("billing.summary", "/api/cli/billing/summary", "GET", "billing summary", "oxygen_billing_summary", "billing", "Read the complete non-writing wallet, plan, seat-capacity and billing-owner summary."),
-    operation("billing.usage.view", "/api/cli/billing/usage/view", "GET", "billing usage view", "oxygen_billing_usage_view", "billing", "Credit spend over 7, 30 or 90 days by category and provider, each with its share, plus permitted linked-workspace rollups. totalSpent includes open holds; billing usage managed_credits_used counts captured credits only. Other windows or groupings: billing audit.", { days: enumOf(["7", "30", "90"]), workspace: text() }),
+    operation("billing.usage.view", "/api/cli/billing/usage/view", "GET", "billing usage view", "oxygen_billing_usage_view", "billing", "Credit spend over 7, 30 or 90 days by category and provider, each with its share, plus permitted linked-workspace rollups. totalSpent is reserved minus released; billing usage managed_credits_used counts captured credits only. Other windows or groupings: billing audit.", { days: enumOf(["7", "30", "90"]), workspace: text() }),
     operation("integrations.managed_endpoints", "/api/cli/integrations/composio/endpoints", "GET", "integrations managed-endpoints", "oxygen_integration_managed_endpoints", "integrations", "Read a managed integration's full action catalog and parameter schemas.", { integration_id: text() }, ["integration_id"]),
     operation("integrations.openrouter_models", "/api/cli/integrations/openrouter/models", "GET", "integrations openrouter-models", "oxygen_openrouter_models", "integrations", "Read model and pricing metadata using this workspace's connected OpenRouter account; credentials are never returned."),
     operation("integrations.status", "/api/cli/integrations/status", "GET", "integrations status", "oxygen_integration_status", "integrations", "Read active connection counts, sender connection state and the workspace's usable BYOK plan entitlement."),
     operation("pricing.customer_credit_prices", "/api/cli/pricing/customer-credit-prices", "GET", "pricing customer-credit-prices", "oxygen_customer_credit_prices", "workspace", "Read the customer credit-price catalog, quantity decisions and price provenance used by the Table picker."),
-    operation("sequences.contacts.rows", "/api/cli/sequences/{sequence}/contacts/rows", "GET", "sequences contacts rows", "oxygen_sequence_contacts_rows", "sequences", "Read the full contact grid projection with exact contact-state filter and native synthetic status columns.", { contact_state: enumOf(["all", "not_contacted", "contacted", "connected", "replied", "positive_reply"]), limit: int({ minimum: 1, maximum: 2000 }), cursor: text(), offset: int({ minimum: 0 }), f: text(), s: text() }),
-    operation("sequences.leads.rows", "/api/cli/sequences/{sequence}/leads/rows", "GET", "sequences leads rows", "oxygen_sequence_leads_rows", "sequences", "Read the complete enrolled-lead grid projection, including sequence status, step, action and failure columns.", { limit: int({ minimum: 1, maximum: 2000 }), cursor: text(), offset: int({ minimum: 0 }), f: text(), s: text() }),
+    operation("sequences.contacts.rows", "/api/cli/sequences/{sequence}/contacts/rows", "GET", "sequences contacts rows", "oxygen_sequence_contacts_rows", "sequences", "Read the full contact grid projection with exact contact-state filter and native synthetic status columns.", { contact_state: enumOf(["all", "not_contacted", "contacted", "connected", "replied", "positive_reply"]), limit: int({ minimum: 1, maximum: 2000 }), cursor: text(), offset: int({ minimum: 0 }), f: text(FILTER_PARAM), s: text(SORT_PARAM), ...sequenceRowsProjection }, [], { truncationHint: SEQUENCE_ROWS_TRUNCATION_HINT }),
+    operation("sequences.leads.rows", "/api/cli/sequences/{sequence}/leads/rows", "GET", "sequences leads rows", "oxygen_sequence_leads_rows", "sequences", "Read the complete enrolled-lead grid projection, including sequence status, step, action and failure columns.", { limit: int({ minimum: 1, maximum: 2000 }), cursor: text(), offset: int({ minimum: 0 }), f: text(FILTER_PARAM), s: text(SORT_PARAM), ...sequenceRowsProjection }, [], { truncationHint: SEQUENCE_ROWS_TRUNCATION_HINT }),
     operation("unibox.metadata", "/api/cli/unibox/metadata", "GET", "unibox metadata", "oxygen_unibox_metadata", "inbox", "Read the complete authenticated inbox account, filter and tag metadata, including each sender profile (person) and its id."),
     operation("workflows.observed_output", "/api/cli/workflows/{workflow}/observed-output", "GET", "workflows observed-output", "oxygen_workflow_observed_output", "workflows", "Inspect observed output paths and bounded samples from an exact run or recent matching workflow revision.", { run_id: text(), source_hash: text() }),
     operation("workflows.run.events", "/api/cli/workflows/{workflow}/runs/{run}/events", "GET", "workflows runs events", "oxygen_workflow_run_events", "workflows", "Read the exact Workflow run's bounded event history and whether it is still active.", { limit: int({ minimum: 1, maximum: 1000 }) }),
@@ -70,7 +82,7 @@ export const BROWSER_OPERATIONS = [
     operation("tables.resource.rows.get", `${table}/rows/{row}`, "GET", "tables rows inspect", "oxygen_table_row_inspect", "tables", "Read one row; field selects column keys and hydrate_relations=1 includes relations. projection=value returns lossless JSON fragments; resume value_cursor with identical table/row/field/path.", { hydrate_relations: enumOf(["1"]), field: strings(), ...TABLE_ROW_READ_WINDOW_FIELDS }, [], { repeatedQueryFields: ["field"] }),
     operation("tables.resource.rows.edit", `${table}/rows/{row}`, "PATCH", "tables rows edit", "oxygen_table_row_edit", "tables", "Patch one row's values and return the committed row.", { values: json }, ["values"]),
     operation("tables.resource.rows.delete", `${table}/rows/{row}`, "DELETE", "tables rows remove", "oxygen_table_row_remove", "tables", "Remove one row from a workspace Table."),
-    operation("tables.resource.rows.bulk_delete", `${table}/rows/delete`, "POST", "tables rows remove-selection", "oxygen_table_rows_remove_selection", "tables", "Remove exact row ids or the same all-matching filtered selection used by the browser.", { row_ids: strings(), selection }),
+    operation("tables.resource.rows.bulk_delete", `${table}/rows/delete`, "POST", "tables rows remove-selection", "oxygen_table_rows_remove_selection", "tables", "Permanently delete Table rows by exact ids or a matching filtered selection. Unsupported scope fields are refused.", TABLE_ROW_REMOVAL_FIELDS, [], {}, { destructiveHint: true }),
     operation("tables.resource.rows.ids", `${table}/rows/ids`, "GET", "tables rows range-ids", "oxygen_table_rows_range_ids", "tables", "Resolve a bounded row range into exact ids, preserving the current filter, search, sort and CRM scope.", { offset: int({ minimum: 0 }), limit: int({ minimum: 1 }), filter: text(), search: text(), sort: text(), crm_object: text() }, ["offset", "limit"]),
     operation("tables.resource.relationships.get", `${table}/records/{row}/relationships`, "GET", "tables rows relationships", "oxygen_table_row_relationships", "crm", "Read a CRM-backed Table row's relationship links and available targets."),
     operation("tables.resource.relationships.set", `${table}/records/{row}/relationships`, "POST", "tables rows relationship-set", "oxygen_table_row_relationship_set", "crm", "Set one CRM-backed Table row's relationship and return the saved links.", { relationship: text(), target_row_id: text() }, ["relationship", "target_row_id"]),

package/node_modules/@oxygen/shared/dist/contracts/crm-attributes.d.ts

@@ -1,4 +1,10 @@
 import type { ObjectProperty } from "./schema.js";
 /** Custom CRM column writes accept both canonical snake_case and legacy aliases. */
-export declare const CRM_CUSTOM_COLUMN_SCHEMA: ObjectProperty;
+export declare const CRM_CUSTOM_COLUMN_SCHEMA: ObjectProperty & {
+    allOf: Array<{
+        anyOf: Array<{
+            required: string[];
+        }>;
+    }>;
+};
 export declare const CRM_CUSTOM_IDENTITY_SCHEMA: ObjectProperty;