@oxygen-agent/cli 1.1011.974 → 1.1011.1091

package/node_modules/@oxygen/shared/dist/contracts/crm-attributes.js

@@ -5,7 +5,7 @@ export const CRM_CUSTOM_COLUMN_SCHEMA = {
         key: { type: "string" }, label: { type: "string" },
         data_type: { type: "string", enum: ["text", "numeric", "boolean", "jsonb", "timestamptz"] },
         dataType: { type: "string", enum: ["text", "numeric", "boolean", "jsonb", "timestamptz"] },
-        semantic_type: { type: "string" }, semanticType: { type: "string" },
+        semantic_type: { type: "string", minLength: 1, description: "Required with data_type; text for a generic field, or a semantic such as company.name, company.domain or email." }, semanticType: { type: "string", minLength: 1, description: "Alias of semantic_type." },
         kind: { type: "string" }, attribute_kind: { type: "string" }, attributeKind: { type: "string" },
         option_model_type: { type: "string" }, optionModelType: { type: "string" },
         is_required: { type: "boolean" }, isRequired: { type: "boolean" },
@@ -21,6 +21,10 @@ export const CRM_CUSTOM_COLUMN_SCHEMA = {
         attributeMetadata: { type: "object", additionalProperties: true },
     },
     required: ["key", "label"],
+    allOf: [
+        { anyOf: [{ required: ["data_type"] }, { required: ["dataType"] }] },
+        { anyOf: [{ required: ["semantic_type"] }, { required: ["semanticType"] }] },
+    ],
     additionalProperties: false,
 };
 export const CRM_CUSTOM_IDENTITY_SCHEMA = {

package/node_modules/@oxygen/shared/dist/contracts/crm-support.d.ts

@@ -72,6 +72,20 @@ export declare const CRM_OBJECTS_QUERY_CONTRACT: import("./schema.js").ContractO
         "x-clamp"?: true;
     };
 }, never>;
+export declare const CRM_RECORD_QUERY_CONTRACT: import("./schema.js").ContractObject<{
+    readonly projection: {
+        type: "string";
+        enum: readonly ("compact" | "full")[];
+        description?: string;
+    };
+    readonly max_chars: {
+        type: "integer";
+        description?: string;
+        minimum?: number;
+        maximum?: number;
+        "x-clamp"?: true;
+    };
+}, never>;
 export declare const CRM_CONNECTIONS_QUERY_CONTRACT: import("./schema.js").ContractObject<{
     readonly projection: {
         type: "string";

package/node_modules/@oxygen/shared/dist/contracts/crm-support.js

@@ -30,6 +30,10 @@ export const CRM_OBJECTS_QUERY_CONTRACT = obj({
     limit: int({ minimum: 1, maximum: 100, description: "Objects in one batch; default 20 for bounded reads." }),
     max_chars: int({ minimum: 2000, maximum: 40_000, description: "Complete response window; oversized objects refuse without advancing." }),
 });
+export const CRM_RECORD_QUERY_CONTRACT = obj({
+    projection: enumOf(["compact", "full"], { description: "compact omits object configuration and oversized row fields, naming omissions. HTTP/CLI default full; MCP default compact." }),
+    max_chars: int({ minimum: 2000, maximum: 40_000, description: "Complete receipt window. Omitted cells remain available through the Table row inspector." }),
+});
 export const CRM_CONNECTIONS_QUERY_CONTRACT = obj({
     projection: enumOf(["compact", "full"], { description: "Compact returns identifiers and short communication previews. HTTP default full." }),
     max_chars: int({ minimum: 2000, maximum: 40_000, description: "Complete recent-window response; hasMore includes omitted links." }),

package/node_modules/@oxygen/shared/dist/contracts/customer-operations.js

@@ -43,7 +43,7 @@ export const CUSTOMER_OPERATIONS = [
     operation("copilot.attachments.delete", "/api/cli/copilot/sessions/{session_id}/attachments/{attachment_id}", "DELETE", "copilot attachments delete", "oxygen_copilot_attachment_delete", "agents", "Detach an unsent Copilot attachment; attachments already quoted by a turn cannot be removed."),
     operation("copilot.feedback", "/api/cli/copilot/sessions/{session_id}/turns/{turn_id}/feedback", "POST", "copilot feedback", "oxygen_copilot_feedback", "agents", "Rate one attended Copilot turn and optionally explain the rating.", { rating: enumOf(["up", "down"]), comment: text() }, ["rating"]),
     operation("copilot.interrupt", "/api/cli/copilot/sessions/{session_id}/turns/{turn_id}/interrupt", "POST", "copilot interrupt", "oxygen_copilot_interrupt", "agents", "Request cancellation of one Copilot turn. Read the session again to confirm it stopped.", {}, [], mcpOnly),
-    operation("context.canonical.get", "/api/cli/context/canonical/get", "POST", "context canonical get", "oxygen_context_canonical_get", "knowledge", "Read the pinned active context asset for a type; present=false means none is set.", { type: text() }, ["type"], { mutates: false }),
+    operation("context.canonical.get", "/api/cli/context/canonical/get", "POST", "context canonical get", "oxygen_context_canonical_get", "knowledge", "Read the current canonical (pinned) voice, brand or positioning that AI copy uses, or any type's pinned asset. present=false means none is pinned; grounding_when_absent says what AI copy uses instead.", { type: text("Type to read: voice, brand or positioning (the canonical copy AI uses), or another context type such as playbook or persona.") }, ["type"], { mutates: false }),
     operation("crm.notes.update", "/api/cli/crm/notes/{note_id}", "PATCH", "crm notes update", "oxygen_crm_note_update", "crm", "Edit a CRM note's body, title or pinned state; an empty title clears it.", { body: text(), title: nullable(text()), pinned: bool() }, [], mcpOnly),
     operation("crm.notes.delete", "/api/cli/crm/notes/{note_id}", "DELETE", "crm notes delete", "oxygen_crm_note_delete", "crm", "Delete one CRM note in this workspace.", {}, [], mcpOnly),
     operation("crm.files.attach_inline", "/api/cli/crm/objects/{object}/records/{row_id}/files", "POST", "crm files attach-inline", "oxygen_crm_file_attach", "crm", CRM_FILE_ATTACH_DESCRIPTION, CRM_FILE_ATTACH_CONTRACT.properties, [...(CRM_FILE_ATTACH_CONTRACT.required ?? [])]),
@@ -62,7 +62,7 @@ export const CUSTOMER_OPERATIONS = [
     operation("directory.apply", "/api/cli/directory/apply", "POST", "directory apply", "oxygen_directory_apply", "crm", "Apply for an agency-directory listing for this workspace; reuses an existing open application.", { message: text(), website: text() }, [], mcpOnly),
     operation("directory.logo", "/api/cli/directory/listing/logo", "POST", "directory logo upload", "oxygen_directory_logo_upload", "crm", "Upload a public agency-directory logo and read back the updated listing; PNG, JPEG, WebP or SVG, at most 2 MB.", { content_base64: text(), file_name: text(), content_type: enumOf(["image/png", "image/jpeg", "image/webp", "image/svg+xml"]) }, ["content_base64", "file_name", "content_type"], { multipart: { contentField: "content_base64", nameField: "file_name", typeField: "content_type", fileField: "file" } }),
     operation("domains.delete", "/api/cli/domains/delete", "POST", "domains delete", "oxygen_domains_delete", "deliverability", "Preview domain removal and renewal cancellation; execute only with the exact plan hash and confirmation.", { domains: list(), approved: bool(), plan_hash: text(), confirmation: text() }, ["domains"], mcpOnly),
-    operation("knowledge.pages.archive", "/api/cli/knowledge/pages/archive", "POST", "knowledge page archive", "oxygen_knowledge_page_archive", "knowledge", "Archive a knowledge page while preserving its history.", { slug: text(), id: text(), expected_revision: int({ minimum: 1 }) }, [], mcpOnly),
+    operation("knowledge.pages.archive", "/api/cli/knowledge/pages/archive", "POST", "knowledge page archive", "oxygen_knowledge_page_archive", "knowledge", "Archive a knowledge page; content/history remain, links become unresolved. Pass expected_revision for the version you reviewed.", { slug: text(), id: text(), expected_revision: int({ minimum: 1 }) }, [], mcpOnly),
     operation("knowledge.sync.manifest", "/api/cli/knowledge/sync/manifest", "POST", "knowledge sync-manifest", "oxygen_knowledge_sync_manifest", "knowledge", "Read the wiki revision and content-hash inventory without downloading instruction bodies.", {}, [], { mutates: false }),
     operation("knowledge.sync.delta", "/api/cli/knowledge/sync/delta", "POST", "knowledge sync", "oxygen_knowledge_sync_delta", "knowledge", "Read one resumable batch of wiki pages and tombstones, bounded by the server's byte budget.", { cursor: text(), limit: int({ minimum: 1, maximum: 200 }) }, [], { ...mcpOnly, mutates: false }),
     operation("limits.provider.get", "/api/cli/limits/provider", "GET", "limits provider list", "oxygen_provider_limits_list", "billing", "Read provider request limits and BYOK warning defaults. MCP defaults to bounded summary pages; follow paging.next_offset with the same filter. HTTP/CLI omit pagination for the full legacy list. 0 credits.", {}, [], { contract: providerLimitListContract, generated: { cli: false, mcp: false } }),
@@ -102,7 +102,7 @@ export const CUSTOMER_OPERATIONS = [
     operation("db.provision", "/api/cli/db/provision", "POST", "db provision", "oxygen_workspace_database_provision", "workspace", "Provision or retry this workspace database immediately; already-ready workspaces retain it. No preview or confirmation field; native workspace write access applies. May outlast the connector deadline: read oxygen_workspace_database_status before retrying. Hosting is plan-included; 0 credits.", {}, [], mcpOnly),
     operation("sessions.list", "/api/cli/sessions", "GET", "sessions list", "oxygen_sessions_list", "workspace", "List your personal CLI sessions across workspaces; OAuth or personal user session required, organization API keys are refused."),
     operation("sessions.revoke", "/api/cli/sessions/{session_id}", "DELETE", "sessions revoke", "oxygen_sessions_revoke", "workspace", "Revoke one of your personal CLI sessions; OAuth or personal user session required, organization API keys are refused."),
-    operation("billing.allowance", "/api/cli/billing/allowance", "GET", "billing allowance", "oxygen_billing_allowance", "billing", "Read this workspace's current recurring credit allowance and period.", {}, [], mcpOnly),
+    operation("billing.allowance", "/api/cli/billing/allowance", "GET", "billing allowance", "oxygen_billing_allowance", "billing", "Inspect this workspace's recurring credit allowance and period. 0 credits; reserves nothing. Due plan grants or credit expiry may apply.", {}, [], mcpOnly),
     operation("billing.invoices", "/api/cli/billing/invoices", "GET", "billing invoices", "oxygen_billing_invoices", "billing", "Read this workspace's billing invoices and their hosted payment links.", {}, [], mcpOnly),
     operation("billing.seats.set", "/api/cli/billing/seats", "POST", "billing seats set", "oxygen_billing_seats_set", "billing", "Set purchased legacy sending-seat quantity. Retired seats cannot increase; reducing existing seats lowers the next renewal charge.", { seat_key: enumOf(["linkedin", "whatsapp", "phone_number", "email_sender"]), quantity: int({ minimum: 0 }) }, ["seat_key", "quantity"], mcpOnly),
     operation("collaboration.gates.list", "/api/cli/collab/gates", "GET", "approvals gate list", "oxygen_approval_gates_list", "collaboration", "Read this workspace's approval gates, optionally for one exact subject.", { subject: text() }, [], mcpOnly),

package/node_modules/@oxygen/shared/dist/contracts/operations.d.ts

@@ -61,6 +61,12 @@ export type OperationSpec<C extends ContractObject = ContractObject> = {
     };
     mutates: boolean;
     spends: boolean;
+    /**
+     * MCP only: what a trimmed result should advise instead of the generic
+     * "smaller limit / a cursor", for a read whose single row can exceed the
+     * result ceiling (OXP-1.11.67).
+     */
+    truncationHint?: string;
 };
 /** The route with its `{param}` segments filled in, each URL-encoded. */
 export declare function operationPath(spec: Pick<OperationSpec, "route">, params: Readonly<Record<string, string>>): string;

package/node_modules/@oxygen/shared/dist/contracts/publishing-reads.js

@@ -12,6 +12,7 @@ export const PUBLISHING_AMPLIFICATION_SCOPE_KINDS = ["all", "tag", "post", "ugc_
  * closed. Coarse tool annotations remain mixed; native identity/schema checks
  * still run after this call-level classification. */
 export const PUBLISHING_STORED_READ_SELECTORS = {
+    oxygen_publishing_comments: { argument: "action", values: ["list", "get"] },
     oxygen_publishing_notes: { argument: "action", values: ["list"] },
     oxygen_publishing_revisions: { argument: "action", values: ["list"] },
     oxygen_publishing_analytics: { argument: "scope", values: ["summary", "timeseries", "post", "account"] },

package/node_modules/@oxygen/shared/dist/contracts/table-row-removal.d.ts

@@ -0,0 +1,8 @@
+export declare const TABLE_ROW_REMOVAL_FIELDS: {
+    row_ids: import("./schema.js").ArrayProperty<import("./schema.js").StringProperty>;
+    selection: import("./schema.js").OneOfProperty;
+};
+export declare const TABLE_ROW_REMOVAL_CONTRACT: import("./schema.js").ContractObject<{
+    row_ids: import("./schema.js").ArrayProperty<import("./schema.js").StringProperty>;
+    selection: import("./schema.js").OneOfProperty;
+}, never>;

package/node_modules/@oxygen/shared/dist/contracts/table-row-removal.js

@@ -0,0 +1,21 @@
+import { arr, enumOf, int, obj, str } from "./schema.js";
+const rowIds = () => arr(str({ minLength: 1 }), { minItems: 1 });
+// Removal uses the grid's scope, not the broader execution selection. In
+// particular, execution's `filters` array is not a serialized browser filter.
+const selection = {
+    description: '{"mode":"row_ids","row_ids":["id"]} or {"mode":"all_matching","filter":"<grid f>"}. Optional search, sort, range {offset,limit}, excluded_row_ids, crm_object. filter is base64url grid JSON; filters/limit are refused. Unqualified all_matching removes every row. Encoding guide: oxygen_skills_get({name:"oxygen-tables"}) or oxygen skills get oxygen-tables --json.',
+    oneOf: [
+        obj({ mode: enumOf(["row_ids"]), row_ids: rowIds() }, { required: ["mode", "row_ids"] }),
+        obj({
+            mode: enumOf(["all_matching"]),
+            filter: str({ description: "Serialized browser filter tree." }),
+            search: str(),
+            sort: str(),
+            range: obj({ offset: int({ minimum: 0 }), limit: int({ minimum: 1 }) }, { required: ["offset", "limit"] }),
+            excluded_row_ids: arr(str({ minLength: 1 })),
+            crm_object: str(),
+        }, { required: ["mode"] }),
+    ],
+};
+export const TABLE_ROW_REMOVAL_FIELDS = { row_ids: rowIds(), selection };
+export const TABLE_ROW_REMOVAL_CONTRACT = obj(TABLE_ROW_REMOVAL_FIELDS);

package/node_modules/@oxygen/shared/dist/knowledge-seed-content.js

@@ -137,7 +137,7 @@ const ICP_BODY = `# ICP — ideal customer profile
 `;
 const POSITIONING_BODY = `# Positioning
 
-> **Stub — fill me.** Non-canonical draft. Fill it, then a human pins the canonical version (\`oxygen knowledge page pin positioning --approved\`) — pinning is gated because canonical positioning grounds live copy. See [[conventions]].
+> **Stub — fill me.** Non-canonical draft. Fill it, then pin it (\`oxygen knowledge page pin positioning\`): the pin files a proposal a human approves, because canonical positioning grounds live copy. See [[conventions]].
 
 ## For whom
 - Our [[icp]], and the moment they buy.
@@ -251,7 +251,7 @@ Banned hedges: just, hope this finds you well, wanted to reach out, circling bac
 - **We would not send:** the same idea, wrong — and why it fails
 
 ## Canonical
-Not pinned. Pinning it (\`oxygen knowledge page pin voice --approved\`) is a human-approved act — canonical voice grounds live copy. Claims are [[brand]]; what we do is [[positioning]].
+Not pinned. Pinning it (\`oxygen knowledge page pin voice\`) files a proposal a human approves — canonical voice grounds live copy. Claims are [[brand]]; what we do is [[positioning]].
 `;
 const BRAND_BODY = `# Brand
 

package/node_modules/@oxygen/shared/dist/linkedin-quota-denial.d.ts

@@ -31,3 +31,51 @@ export declare function linkedInQuotaBackoffUntil(error: unknown, now: Date): Da
  * `sender_accounts.metadata` jsonb — expires; 0 when it is not parked.
  */
 export declare function linkedInQuotaParkedUntil(metadata: unknown, key: string): number;
+/**
+ * Where a sender's inbox sync is parked until, quota or failure backoff alike,
+ * in the freeform `sender_accounts.metadata` jsonb.
+ */
+export declare const INBOX_SYNC_BACKOFF_KEY = "inbox_sync_backoff_until";
+/** The sender metadata key holding the latest non-quota inbox sync failure. */
+export declare const INBOX_SYNC_FAILURE_KEY = "inbox_sync_failure";
+export type InboxSyncFailureClass = "quota" | "authentication" | "transient" | "other";
+export type InboxSyncFailureRecord = {
+    class: Exclude<InboxSyncFailureClass, "quota">;
+    code: string | null;
+    status: number | null;
+    /** Consecutive failed syncs, reset by a successful one. */
+    consecutive: number;
+    first_at: string;
+    last_at: string;
+    retry_at: string;
+};
+/** First park after a non-quota failure; it doubles per consecutive failure. */
+export declare const INBOX_SYNC_FAILURE_BASE_BACKOFF_MS: number;
+/** No non-quota failure parks a sender longer than this. */
+export declare const INBOX_SYNC_FAILURE_MAX_BACKOFF_MS: number;
+/** Quota, authentication (401/403), transient (capacity, 429, 5xx, retryable), else other. */
+export declare function classifyInboxSyncFailure(error: unknown): InboxSyncFailureClass;
+/** The latest non-quota inbox sync failure recorded on a sender, or null. */
+export declare function readInboxSyncFailure(metadata: unknown): InboxSyncFailureRecord | null;
+/**
+ * The park and record for a whole-sender inbox sync failure that is not a quota
+ * denial: 5 min, doubling per consecutive failure, capped at 2 h. Null for a
+ * quota denial, which keeps its own park (linkedInQuotaBackoffUntil).
+ */
+export declare function inboxSyncFailureBackoff(error: unknown, metadata: unknown, now: Date): {
+    until: Date;
+    record: InboxSyncFailureRecord;
+} | null;
+/**
+ * A sender's whole-inbox sync state for health reads: the last successful sync,
+ * the latest failure that was not a quota denial (cleared by the next success),
+ * and until when the background sync leaves the sender alone.
+ */
+export declare function inboxSyncHealth(sender: {
+    lastInboxSyncAt: Date | null;
+    metadata: unknown;
+}, now?: Date): {
+    last_synced_at: string | null;
+    background_sync_paused_until: string | null;
+    last_failure: InboxSyncFailureRecord | null;
+};

package/node_modules/@oxygen/shared/dist/linkedin-quota-denial.js

@@ -70,3 +70,97 @@ export function linkedInQuotaParkedUntil(metadata, key) {
     const ms = Date.parse(raw);
     return Number.isNaN(ms) ? 0 : ms;
 }
+// ===== Inbox sync failures that are not quota denials (OXP-1.11.72) =====
+//
+// A quota denial parks the sender until its budget resets (above). Every other
+// whole-sender inbox sync failure used to leave the sender eligible on the next
+// backstop pass: in the week to 2026-10-07 production retried one sender 45
+// times through "Managed provider capacity is busy." and 24 senders every few
+// minutes through a 27-minute LinkedIn 5xx incident, and nothing on the sender
+// said so. These failures now park on a bounded, doubling backoff and leave an
+// inspectable record that the next successful sync clears.
+/**
+ * Where a sender's inbox sync is parked until, quota or failure backoff alike,
+ * in the freeform `sender_accounts.metadata` jsonb.
+ */
+export const INBOX_SYNC_BACKOFF_KEY = "inbox_sync_backoff_until";
+/** The sender metadata key holding the latest non-quota inbox sync failure. */
+export const INBOX_SYNC_FAILURE_KEY = "inbox_sync_failure";
+// Refusals raised before the read leaves the process that clear on their own:
+// the managed-provider limiter after waiting out its window, a runtime with no
+// quota enforcer registered, and an unsizable worker fleet. The same set the
+// LinkedIn ingestion drip defers on.
+const TRANSIENT_CODES = new Set([
+    "rate_limit_exceeded",
+    "linkedin_quota_enforcement_unavailable",
+    "worker_fleet_discovery_unavailable",
+]);
+/** First park after a non-quota failure; it doubles per consecutive failure. */
+export const INBOX_SYNC_FAILURE_BASE_BACKOFF_MS = 5 * 60 * 1000;
+/** No non-quota failure parks a sender longer than this. */
+export const INBOX_SYNC_FAILURE_MAX_BACKOFF_MS = 2 * 60 * 60 * 1000;
+function errorStatus(error) {
+    const status = isRecord(error) ? error.status : undefined;
+    return typeof status === "number" && Number.isFinite(status) ? status : null;
+}
+/** Quota, authentication (401/403), transient (capacity, 429, 5xx, retryable), else other. */
+export function classifyInboxSyncFailure(error) {
+    if (isLinkedInQuotaDenial(error))
+        return "quota";
+    const status = errorStatus(error);
+    if (status === 401 || status === 403)
+        return "authentication";
+    if (error instanceof OxygenError && TRANSIENT_CODES.has(error.code))
+        return "transient";
+    if (status === 429 || (status !== null && status >= 500))
+        return "transient";
+    if (isRecord(error) && error.retryable === true)
+        return "transient";
+    return "other";
+}
+/** The latest non-quota inbox sync failure recorded on a sender, or null. */
+export function readInboxSyncFailure(metadata) {
+    const raw = isRecord(metadata) ? metadata[INBOX_SYNC_FAILURE_KEY] : undefined;
+    if (!isRecord(raw) || typeof raw.consecutive !== "number" || raw.consecutive < 1 || typeof raw.first_at !== "string")
+        return null;
+    return raw;
+}
+/**
+ * The park and record for a whole-sender inbox sync failure that is not a quota
+ * denial: 5 min, doubling per consecutive failure, capped at 2 h. Null for a
+ * quota denial, which keeps its own park (linkedInQuotaBackoffUntil).
+ */
+export function inboxSyncFailureBackoff(error, metadata, now) {
+    const failureClass = classifyInboxSyncFailure(error);
+    if (failureClass === "quota")
+        return null;
+    const previous = readInboxSyncFailure(metadata);
+    const consecutive = (previous?.consecutive ?? 0) + 1;
+    const delay = Math.min(INBOX_SYNC_FAILURE_BASE_BACKOFF_MS * 2 ** Math.min(consecutive - 1, 16), INBOX_SYNC_FAILURE_MAX_BACKOFF_MS);
+    const until = new Date(now.getTime() + delay);
+    return {
+        until,
+        record: {
+            class: failureClass,
+            code: error instanceof OxygenError ? error.code : null,
+            status: errorStatus(error),
+            consecutive,
+            first_at: previous?.first_at ?? now.toISOString(),
+            last_at: now.toISOString(),
+            retry_at: until.toISOString(),
+        },
+    };
+}
+/**
+ * A sender's whole-inbox sync state for health reads: the last successful sync,
+ * the latest failure that was not a quota denial (cleared by the next success),
+ * and until when the background sync leaves the sender alone.
+ */
+export function inboxSyncHealth(sender, now = new Date()) {
+    const parkedUntil = linkedInQuotaParkedUntil(sender.metadata, INBOX_SYNC_BACKOFF_KEY);
+    return {
+        last_synced_at: sender.lastInboxSyncAt ? sender.lastInboxSyncAt.toISOString() : null,
+        background_sync_paused_until: parkedUntil > now.getTime() ? new Date(parkedUntil).toISOString() : null,
+        last_failure: readInboxSyncFailure(sender.metadata),
+    };
+}

package/node_modules/@oxygen/shared/dist/provider-balance-signal.js

@@ -101,8 +101,9 @@ export const MANAGED_BALANCE_FLOORS = {
     // to us, which sits at 0.00 in the normal case (it did on 2026-09-07) and goes
     // negative after a refund. A floor here would page daily about nothing.
     stripe: null,
-    // Reachability probes with no balance concept at all: both fetchers return
-    // `balanceRemaining: null` by construction.
+    // No balance concept at all. Neither is probed any more (Vercel left the stack
+    // on 2026-10-06); null keeps a historical row from ever reading as a low wallet
+    // under the generic default floor.
     vercel: null,
     neon: null,
 };

package/node_modules/@oxygen/shared/dist/version.generated.d.ts

@@ -1 +1 @@
-export declare const OXYGEN_BUILD_VERSION = "1.1011.974";
+export declare const OXYGEN_BUILD_VERSION = "1.1011.1091";

package/node_modules/@oxygen/shared/dist/version.generated.js

@@ -1,2 +1,2 @@
 // GENERATED by scripts/ci/version-stamp.mjs from VERSION + git history. Do not edit; do not commit.
-export const OXYGEN_BUILD_VERSION = "1.1011.974";
+export const OXYGEN_BUILD_VERSION = "1.1011.1091";

package/node_modules/@oxygen/shared/dist/whatsapp-sender-limits.d.ts

@@ -0,0 +1,42 @@
+/**
+ * The WhatsApp sender-limit overlay: the keys a WhatsApp account accepts and
+ * their defaults and hard maximums. One owner for the quota enforcer
+ * (packages/integrations/src/whatsapp-quota.ts), the limits route, the MCP and
+ * CLI surfaces and the web form (OXP-11.3.19): the MCP tool once advertised a
+ * chats_reads_per_day key the route silently dropped and maxima (400 reads,
+ * 7200 s spacing, 3600 s jitter) the quota never allowed.
+ *
+ * Everything stays deliberately small: WhatsApp Web bans on volume.
+ */
+export declare const WHATSAPP_SENDER_LIMIT_KEYS: readonly ["messages_per_day", "likes_per_day", "messages_reads_per_day", "relations_reads_per_day", "total_actions_per_day", "total_reads_per_day", "min_action_spacing_seconds", "action_spacing_jitter_seconds"];
+export type WhatsAppSenderLimitKey = (typeof WHATSAPP_SENDER_LIMIT_KEYS)[number];
+export declare const WHATSAPP_SENDER_LIMIT_DEFAULTS: {
+    readonly messages_per_day: 20;
+    readonly likes_per_day: 20;
+    readonly messages_reads_per_day: 200;
+    readonly relations_reads_per_day: 40;
+    readonly total_actions_per_day: 40;
+    readonly total_reads_per_day: 240;
+    readonly min_action_spacing_seconds: 600;
+    readonly action_spacing_jitter_seconds: 300;
+};
+export declare const WHATSAPP_SENDER_LIMIT_MAXIMUMS: {
+    readonly messages_per_day: 40;
+    readonly likes_per_day: 40;
+    readonly messages_reads_per_day: 600;
+    readonly relations_reads_per_day: 100;
+    readonly total_actions_per_day: 80;
+    readonly total_reads_per_day: 700;
+    readonly min_action_spacing_seconds: 3600;
+    readonly action_spacing_jitter_seconds: 1800;
+};
+/** What each WhatsApp limit counts, for MCP and CLI help. */
+export declare const WHATSAPP_SENDER_LIMIT_NOTES: Record<WhatsAppSenderLimitKey, string>;
+/**
+ * The WhatsApp limits an account runs at: each stored override, floored and
+ * capped at its WhatsApp maximum, else the WhatsApp default. Read from the
+ * overrides alone: a sender's resolved `limits` start from the LinkedIn
+ * defaults (300 s spacing, 150 actions, 1000 reads a day), which a WhatsApp
+ * number must never inherit (OXP-11.3.21).
+ */
+export declare function resolveWhatsAppSenderLimits(overrides: Partial<Record<WhatsAppSenderLimitKey, unknown>> | null | undefined): Record<WhatsAppSenderLimitKey, number>;

package/node_modules/@oxygen/shared/dist/whatsapp-sender-limits.js

@@ -0,0 +1,68 @@
+/**
+ * The WhatsApp sender-limit overlay: the keys a WhatsApp account accepts and
+ * their defaults and hard maximums. One owner for the quota enforcer
+ * (packages/integrations/src/whatsapp-quota.ts), the limits route, the MCP and
+ * CLI surfaces and the web form (OXP-11.3.19): the MCP tool once advertised a
+ * chats_reads_per_day key the route silently dropped and maxima (400 reads,
+ * 7200 s spacing, 3600 s jitter) the quota never allowed.
+ *
+ * Everything stays deliberately small: WhatsApp Web bans on volume.
+ */
+export const WHATSAPP_SENDER_LIMIT_KEYS = [
+    "messages_per_day",
+    "likes_per_day",
+    "messages_reads_per_day",
+    "relations_reads_per_day",
+    "total_actions_per_day",
+    "total_reads_per_day",
+    "min_action_spacing_seconds",
+    "action_spacing_jitter_seconds",
+];
+export const WHATSAPP_SENDER_LIMIT_DEFAULTS = {
+    messages_per_day: 20,
+    likes_per_day: 20,
+    messages_reads_per_day: 200,
+    relations_reads_per_day: 40,
+    total_actions_per_day: 40,
+    total_reads_per_day: 240,
+    min_action_spacing_seconds: 600,
+    action_spacing_jitter_seconds: 300,
+};
+export const WHATSAPP_SENDER_LIMIT_MAXIMUMS = {
+    messages_per_day: 40,
+    likes_per_day: 40,
+    messages_reads_per_day: 600,
+    relations_reads_per_day: 100,
+    total_actions_per_day: 80,
+    total_reads_per_day: 700,
+    min_action_spacing_seconds: 3600,
+    action_spacing_jitter_seconds: 1800,
+};
+/** What each WhatsApp limit counts, for MCP and CLI help. */
+export const WHATSAPP_SENDER_LIMIT_NOTES = {
+    messages_per_day: "Daily WhatsApp messages across direct warm traffic and opted-in Sequence actions; the warm-up ceiling (5, 10, 15, 20 by account age) wins when lower.",
+    likes_per_day: "Daily reactions.",
+    messages_reads_per_day: "Chat and message-history reads.",
+    relations_reads_per_day: "Chat-list reads.",
+    total_actions_per_day: "All sends: messages, reactions and edits.",
+    total_reads_per_day: "All reads.",
+    min_action_spacing_seconds: "Minimum seconds between WhatsApp actions.",
+    action_spacing_jitter_seconds: "Random seconds added on top of the spacing floor.",
+};
+/**
+ * The WhatsApp limits an account runs at: each stored override, floored and
+ * capped at its WhatsApp maximum, else the WhatsApp default. Read from the
+ * overrides alone: a sender's resolved `limits` start from the LinkedIn
+ * defaults (300 s spacing, 150 actions, 1000 reads a day), which a WhatsApp
+ * number must never inherit (OXP-11.3.21).
+ */
+export function resolveWhatsAppSenderLimits(overrides) {
+    const limits = { ...WHATSAPP_SENDER_LIMIT_DEFAULTS };
+    for (const key of WHATSAPP_SENDER_LIMIT_KEYS) {
+        const value = overrides?.[key];
+        if (typeof value === "number" && Number.isFinite(value) && value >= 0) {
+            limits[key] = Math.min(Math.floor(value), WHATSAPP_SENDER_LIMIT_MAXIMUMS[key]);
+        }
+    }
+    return limits;
+}

package/node_modules/@oxygen/shared/dist/workflow-trigger-metadata.d.ts

@@ -1,2 +1,17 @@
 export declare const WORKFLOW_TRIGGER_AUTO_PAUSE_METADATA_KEYS: readonly ["consecutive_failure_count", "consecutive_capacity_failure_count", "last_failure_code", "last_failure_at", "auto_paused_at", "auto_pause_reason"];
 export declare function clearWorkflowTriggerAutoPauseMetadata(metadata: Record<string, unknown>): Record<string, unknown>;
+export type WorkflowAutomationPauseCode = "automation_actions_exceeded" | "insufficient_credits";
+export type TriggerAutomationPause = {
+    reason: string;
+    reasonCode?: WorkflowAutomationPauseCode | null;
+    blockedAt: string | null;
+    resumesAt: string | null;
+};
+/** Decode typed refusals and the two controlled messages written before codes were stored. */
+export declare function readWorkflowAutomationPauseCode(code: unknown, reason: unknown): WorkflowAutomationPauseCode | null;
+/** Customer copy never echoes arbitrary persisted error text or invents a credit refill date. */
+export declare function workflowAutomationPauseMessage(pause: {
+    reason?: unknown;
+    reasonCode?: unknown;
+    resumesAt?: unknown;
+}): string;

package/node_modules/@oxygen/shared/dist/workflow-trigger-metadata.js

@@ -13,3 +13,36 @@ const WORKFLOW_TRIGGER_AUTO_PAUSE_METADATA_KEY_SET = new Set(WORKFLOW_TRIGGER_AU
 export function clearWorkflowTriggerAutoPauseMetadata(metadata) {
     return Object.fromEntries(Object.entries(metadata).filter(([key]) => !WORKFLOW_TRIGGER_AUTO_PAUSE_METADATA_KEY_SET.has(key)));
 }
+/** Decode typed refusals and the two controlled messages written before codes were stored. */
+export function readWorkflowAutomationPauseCode(code, reason) {
+    // An older scheduler can replace the reason without replacing a newer
+    // worker's code. Only a controlled legacy reason may override that code.
+    const text = typeof reason === "string" ? reason.trim() : "";
+    if (text === "automation_actions_exceeded" || text === "This workspace has reached its monthly automation action limit.") {
+        return "automation_actions_exceeded";
+    }
+    if (text === "insufficient_credits" || text.startsWith("Not enough credits for this automation work (")) {
+        return "insufficient_credits";
+    }
+    if (code === "automation_actions_exceeded" || code === "insufficient_credits")
+        return code;
+    return null;
+}
+/** Customer copy never echoes arbitrary persisted error text or invents a credit refill date. */
+export function workflowAutomationPauseMessage(pause) {
+    const code = readWorkflowAutomationPauseCode(pause.reasonCode, pause.reason);
+    if (code === "insufficient_credits") {
+        return "Not enough credits for the next scheduled run. Add credits before the next scheduled attempt.";
+    }
+    if (code === "automation_actions_exceeded") {
+        const resume = typeof pause.resumesAt === "string" ? new Date(pause.resumesAt) : null;
+        if (resume && !Number.isNaN(resume.getTime())) {
+            const day = new Intl.DateTimeFormat("en-US", {
+                month: "short", day: "numeric", year: "numeric", timeZone: "UTC",
+            }).format(resume);
+            return `The monthly automation-action allowance is exhausted. Cron runs resume on ${day} when the window resets.`;
+        }
+        return "The monthly automation-action allowance is exhausted. Check billing before the next scheduled attempt.";
+    }
+    return "Automation admission was refused. Check billing before the next scheduled attempt.";
+}

package/node_modules/@oxygen/shared/package.json

@@ -11,11 +11,6 @@
       "import": "./dist/knowledge-vault-markdown.js",
       "default": "./dist/knowledge-vault-markdown.js"
     },
-    "./vercel-sandbox-fetch": {
-      "types": "./dist/vercel-sandbox-fetch.d.ts",
-      "import": "./dist/vercel-sandbox-fetch.js",
-      "default": "./dist/vercel-sandbox-fetch.js"
-    },
     ".": {
       "types": "./dist/index.d.ts",
       "import": "./dist/index.js",
@@ -291,6 +286,11 @@
       "types": "./dist/provider-balance-signal.d.ts",
       "import": "./dist/provider-balance-signal.js"
     },
+    "./attempt-provenance": {
+      "types": "./dist/attempt-provenance.d.ts",
+      "import": "./dist/attempt-provenance.js",
+      "default": "./dist/attempt-provenance.js"
+    },
     "./copilot-skills.generated": null
   },
   "dependencies": {}

package/node_modules/@oxygen/workflows/dist/usage-estimate.js

@@ -1,7 +1,8 @@
 // Static automation usage estimation shared by the web workflow page and the
-// worker scheduler's admission gate. The unit is the workflow STEP: every step a
-// live run executes bills one (repricing 2026-09, decision 6.1) and rows written
-// inside a run are free (decision 6.2), so a row-writing step costs one step
+// worker scheduler's admission gate. The unit is the workflow STEP: every
+// billable node a live graph executes bills one (repricing 2026-09, decision
+// 6.1). Control nodes and rows written inside a run are free (decision 6.2),
+// so a row-writing step costs one step
 // however many rows it writes. The per-run count derived from a manifest is a
 // FLOOR, never a projection: recipe code emits one step per checkpoint (loops
 // multiply) and a retried attempt bills again. Surfaces present these numbers as
@@ -167,7 +168,8 @@ function estimateWorkflowGraphActionsFloor(graph) {
     }
     // Nested caps multiply, and two large ones overflow Number's exact range;
     // clamping keeps every downstream product (runs x floor) a finite number.
-    return Math.max(1, Math.min(floor, Number.MAX_SAFE_INTEGER));
+    // Free control-only graphs have no step charge, including in previews.
+    return Math.min(floor, Number.MAX_SAFE_INTEGER);
 }
 export function estimateWorkflowAutomationUsage(manifest, cron) {
     if (!isRecord(manifest))
@@ -320,7 +322,9 @@ export function assessCronCadenceViability(input) {
         return null;
     const actionsPerRunFloor = estimateWorkflowRunAutomationActionsFloor(input.manifest);
     const floorActionsPer30Days = scheduledRunsPer30Days * actionsPerRunFloor;
-    const runsAllowedPer30Days = Math.floor(includedActions / actionsPerRunFloor);
+    const runsAllowedPer30Days = actionsPerRunFloor === 0
+        ? MINUTES_PER_30_DAYS
+        : Math.floor(includedActions / actionsPerRunFloor);
     return {
         scheduledRunsPer30Days,
         actionsPerRunFloor,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oxygen-agent/cli",
-  "version": "1.1011.974",
+  "version": "1.1011.1091",
   "private": false,
   "license": "UNLICENSED",
   "type": "module",

package/node_modules/@oxygen/shared/dist/vercel-sandbox-fetch.d.ts

@@ -1,9 +0,0 @@
-/** The Sandbox SDK retries transport failures and 429/5xx responses even for
- * POSTs. Visual execution cannot replay an ambiguously accepted mutation.
- * The SDK recognizes AbortError as non-retryable; outcomeUnknown deliberately
- * distinguishes this transport fence from ordinary caller cancellation. */
-export declare class SandboxMutationOutcomeUnknownError extends Error {
-    readonly outcomeUnknown = true;
-    constructor(options?: ErrorOptions);
-}
-export declare function createSandboxNonReplayFetch(rawFetch?: typeof globalThis.fetch): typeof globalThis.fetch;

package/node_modules/@oxygen/shared/dist/vercel-sandbox-fetch.js

@@ -1,33 +0,0 @@
-/** The Sandbox SDK retries transport failures and 429/5xx responses even for
- * POSTs. Visual execution cannot replay an ambiguously accepted mutation.
- * The SDK recognizes AbortError as non-retryable; outcomeUnknown deliberately
- * distinguishes this transport fence from ordinary caller cancellation. */
-export class SandboxMutationOutcomeUnknownError extends Error {
-    outcomeUnknown = true;
-    constructor(options) {
-        super("Sandbox mutation acceptance requires reconciliation.", options);
-        this.name = "AbortError";
-    }
-}
-export function createSandboxNonReplayFetch(rawFetch = globalThis.fetch) {
-    return async (input, init) => {
-        const method = (init?.method ?? (input instanceof Request ? input.method : "GET")).toUpperCase();
-        if (["GET", "HEAD", "OPTIONS"].includes(method))
-            return rawFetch(input, init);
-        try {
-            // Redirects must not resubmit a mutation either. No request URL, body or
-            // authentication header is copied into the error or telemetry.
-            const response = await rawFetch(input, { ...init, redirect: "error" });
-            if (response.status === 429 || response.status >= 500) {
-                void response.body?.cancel().catch(() => { });
-                throw new SandboxMutationOutcomeUnknownError();
-            }
-            return response;
-        }
-        catch (error) {
-            if (error instanceof SandboxMutationOutcomeUnknownError)
-                throw error;
-            throw new SandboxMutationOutcomeUnknownError({ cause: error });
-        }
-    };
-}