@oxygen-agent/cli 1.1011.974 → 1.1012.2

package/dist/sender-limits-flags.d.ts

@@ -1,4 +1,11 @@
+import type { Command } from "commander";
 import { type ContractFlagOverlay } from "./contract-flags.js";
+/**
+ * `whatsapp limits set`: one flag per key the WhatsApp limits route keeps, with
+ * the WhatsApp defaults and maximums from the shared owner (OXP-11.3.19). The
+ * body is still built by buildSenderLimitsBody, which reads the same flag names.
+ */
+export declare function addWhatsAppLimitFlags(command: Command): Command;
 /**
  * `--working-days` → ISO weekday numbers. Accepts day names or 1-7, comma
  * separated, and ranges (`mon-fri`, `1-5`). A token it cannot read is sent as

package/dist/sender-limits-flags.js

@@ -5,6 +5,7 @@
 import { OxygenError } from "@oxygen/shared/cli-result";
 import { LINKEDIN_SENDER_LIMIT_DEFAULTS, LINKEDIN_SENDER_LIMIT_MAXIMUMS, linkedInSenderLimitCautionLevel, } from "@oxygen/shared/linkedin-sequences";
 import { SENDER_LIMITS_PATCH_CONTRACT } from "@oxygen/shared/contracts/sender-limits";
+import { WHATSAPP_SENDER_LIMIT_DEFAULTS, WHATSAPP_SENDER_LIMIT_KEYS, WHATSAPP_SENDER_LIMIT_MAXIMUMS, WHATSAPP_SENDER_LIMIT_NOTES, } from "@oxygen/shared/whatsapp-sender-limits";
 import { readContractFlags } from "./contract-flags.js";
 /** "<text> (default N, max M)." for a LinkedIn sender limit flag, from the enforced constants. */
 function linkedInLimitHelp(key, text) {
@@ -48,6 +49,18 @@ const LIMIT_FLAG_NAMES = {
     min_action_spacing_seconds: "min-spacing-seconds",
     action_spacing_jitter_seconds: "spacing-jitter-seconds",
 };
+/**
+ * `whatsapp limits set`: one flag per key the WhatsApp limits route keeps, with
+ * the WhatsApp defaults and maximums from the shared owner (OXP-11.3.19). The
+ * body is still built by buildSenderLimitsBody, which reads the same flag names.
+ */
+export function addWhatsAppLimitFlags(command) {
+    for (const key of WHATSAPP_SENDER_LIMIT_KEYS) {
+        const flag = LIMIT_FLAG_NAMES[key] ?? key.replace(/_/g, "-");
+        command.option(`--${flag} <n>`, `${WHATSAPP_SENDER_LIMIT_NOTES[key]} (default ${WHATSAPP_SENDER_LIMIT_DEFAULTS[key]}, max ${WHATSAPP_SENDER_LIMIT_MAXIMUMS[key]}; higher values are clamped).`);
+    }
+    return command;
+}
 const WORKING_DAY_NAMES = {
     mon: 1, monday: 1, tue: 2, tues: 2, tuesday: 2, wed: 3, wednesday: 3, thu: 4, thur: 4, thurs: 4, thursday: 4,
     fri: 5, friday: 5, sat: 6, saturday: 6, sun: 7, sunday: 7,

package/dist/transcript.js

@@ -129,7 +129,7 @@ const SECRET_PATTERNS = [
     [/\bgh[pousr]_[A-Za-z0-9]{20,}/g, "ghx_[REDACTED]"],
     [/\bxox[baprs]-[A-Za-z0-9-]{10,}/g, "xox-[REDACTED]"],
     [/\beyJ[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{6,}/g, "[REDACTED_JWT]"],
-    [/\/skills-access\/v1\.[A-Za-z0-9_-]+\.\d+\.[A-Za-z0-9_-]+/g, "/skills-access/[REDACTED_GRANT]"],
+    [/\/skills-access\/v[12]\.[A-Za-z0-9_-]+\.\d+\.(?:[A-Za-z0-9_-]+\.)?[A-Za-z0-9_-]+/g, "/skills-access/[REDACTED_GRANT]"],
     [/\b(Bearer|Basic)\s+[A-Za-z0-9._~+/=-]{16,}/gi, "$1 [REDACTED]"],
     // "secret-ish key": "value"  /  secret_ish_key=value  (JSON + env shapes)
     [/("?(?:api[_-]?key|apikey|secret|password|passwd|token|access[_-]?token|refresh[_-]?token|client[_-]?secret|authorization|auth[_-]?token|private[_-]?key)"?\s*[:=]\s*"?)([^"\s,}]{6,})/gi, "$1[REDACTED]"],

package/node_modules/@oxygen/formula/dist/expression.js

@@ -403,6 +403,22 @@ function tokenize(expression, options = {}) {
             index += 1;
             continue;
         }
+        // A `{{column}}` template token is the most common paste from another tool
+        // (and from an AI or tool column's prompt here). It stays the same typed
+        // syntax error at the same position; the hint names the bare-identifier form
+        // and the expression with every token unwrapped. Nothing is accepted:
+        // `{{` is still not formula syntax (OXP-1.27.6 AC4).
+        if (char === "{" && expression[index + 1] === "{") {
+            const suggested = expression.replace(/\{\{\s*([A-Za-z_][A-Za-z0-9_]*)\s*\}\}/g, "$1");
+            const example = suggested !== expression ? suggested : "upper(company_name)";
+            throw formulaExpressionError(`Unexpected character in formula expression. Formulas name columns as bare identifiers, not {{templates}}: write ${example}.`, {
+                position: index,
+                character: char,
+                expression,
+                hint: "Formulas read columns by bare key (company_name), not {{company_name}}; {{ }} is template syntax for AI and tool column prompts.",
+                ...(suggested !== expression ? { suggested_expression: suggested } : {}),
+            });
+        }
         throw formulaExpressionError("Unexpected character in formula expression.", {
             position: index,
             character: char,

package/node_modules/@oxygen/shared/dist/attempt-provenance.d.ts

@@ -0,0 +1,30 @@
+/**
+ * The identity a request asked about versus the one a provider answered with.
+ * Present on a refused attempt; `matched` is `false` whenever it is recorded.
+ */
+export type AttemptIdentityMatch = {
+    matched?: boolean;
+    requested?: string | null;
+    returned?: string | null;
+};
+/** Label for a skipped attempt's reason. Unknown reasons stay generic. */
+export declare function describeSkipReason(reason: string): string;
+/**
+ * Label for a `no_result` attempt whose answer was refused rather than absent,
+ * or `null` for an ordinary empty answer (which still reads "No result").
+ */
+export declare function describeRejectedAnswer(reason: string | null | undefined): string | null;
+/**
+ * One-line requested-vs-returned evidence for a refused attempt, for the cell's
+ * hover title. `null` when neither side named an identity — there is nothing to
+ * show and an empty tooltip is worse than none.
+ */
+export declare function describeIdentityMatch(identityMatch: AttemptIdentityMatch | null | undefined): string | null;
+/**
+ * One provider attempt with its lane named the same way for every waterfall.
+ * Person waterfalls name a lane by `operation`; the company waterfall names it
+ * by `toolId`. Readers that key on `operation` dropped every company attempt,
+ * and with it the identity evidence the attempt carried (OXP-7.3.40), so each
+ * cell renderer normalizes through here before validating an attempt.
+ */
+export declare function normalizeAttemptLane(value: unknown): unknown;

package/node_modules/@oxygen/shared/dist/attempt-provenance.js

@@ -0,0 +1,98 @@
+/**
+ * Human labels for a waterfall attempt's recorded `reason`. Single source of
+ * truth for the /tables data grid (`tables-workspace.tsx`) and the MCP
+ * enrichment-cell-detail widget, so an attempt explains itself one way wherever
+ * it is shown (OXP-7.3.40).
+ *
+ * Every label is grid-cell sized — these render inside a truncated attempt cell,
+ * not a detail panel.
+ */
+const ATTEMPT_REASON_LABELS = {
+    missing_input: "Run condition not met",
+    // The company waterfall's spelling of `missing_input`: it needs at least one
+    // of domain / name / linkedin_url before any lane can be dispatched.
+    missing_identity_input: "Missing identity",
+    byok_not_connected: "Not connected",
+    byok_requires_paid_plan: "Plan required",
+    step_disabled: "Step disabled",
+    unsupported_credential_mode: "Mode unsupported",
+    unknown_capability: "Unknown provider",
+    // A provider answered about a DIFFERENT company than the request named. The
+    // answer was refused rather than written to the row (Plain T-111), so calling
+    // it "skipped" would describe the wrong event entirely.
+    identity_mismatch: "Wrong company",
+    // A search-shaped lane returned no identity at all, so its answer could not be
+    // checked against the requested company and was not trusted.
+    identity_unverifiable: "Identity unverified",
+    // A pre-step that ran only to resolve an identity (e.g. a company LinkedIn
+    // URL) a later requested field needs. It owns no target column and writes no
+    // cell — recorded so the extra provider call is visible, never silent.
+    identity_prerequisite: "Identity step",
+    // Bring-your-own-key lane with no usable connection for this workspace:
+    // not connected, unhealthy, missing secret, or plan-gated.
+    provider_credentials_unavailable: "No credentials",
+    // Priced above the run's approved credit ceiling, so it was never dispatched.
+    credit_ceiling_reached: "Credit cap reached",
+    // An identity pre-step lane the run stood down: the ceiling had no headroom
+    // above what the requested fields themselves need, so resolving the identity
+    // would have spent the answer-bearing lane's budget.
+    identity_prerequisite_unaffordable: "Identity step unfunded",
+    // Oxygen could not resolve a managed price for the lane, so it never ran.
+    managed_price_unavailable: "Price unavailable",
+    // The row's person LinkedIn input is a company or school page, or no profile
+    // link at all, so the row was refused before any lane ran.
+    linkedin_url_not_a_profile: "Not a profile URL",
+};
+/**
+ * Reasons that mean "we got an answer and refused it", not "there was nothing
+ * to find". They arrive on an attempt whose status is `no_result`, where the
+ * bare "No result" reads as an absent answer and hides the rejection.
+ */
+const REJECTED_ANSWER_REASONS = new Set([
+    "identity_mismatch",
+    "identity_unverifiable",
+]);
+/** Label for a skipped attempt's reason. Unknown reasons stay generic. */
+export function describeSkipReason(reason) {
+    return ATTEMPT_REASON_LABELS[reason] ?? "Skipped";
+}
+/**
+ * Label for a `no_result` attempt whose answer was refused rather than absent,
+ * or `null` for an ordinary empty answer (which still reads "No result").
+ */
+export function describeRejectedAnswer(reason) {
+    if (!reason || !REJECTED_ANSWER_REASONS.has(reason))
+        return null;
+    return ATTEMPT_REASON_LABELS[reason] ?? null;
+}
+/**
+ * One-line requested-vs-returned evidence for a refused attempt, for the cell's
+ * hover title. `null` when neither side named an identity — there is nothing to
+ * show and an empty tooltip is worse than none.
+ */
+export function describeIdentityMatch(identityMatch) {
+    if (!identityMatch)
+        return null;
+    const requested = typeof identityMatch.requested === "string" ? identityMatch.requested.trim() : "";
+    const returned = typeof identityMatch.returned === "string" ? identityMatch.returned.trim() : "";
+    if (!requested && !returned)
+        return null;
+    const asked = requested ? `Requested ${requested}` : "Requested company";
+    const got = returned ? `provider returned ${returned}` : "provider returned no identity";
+    return `${asked}; ${got}`;
+}
+/**
+ * One provider attempt with its lane named the same way for every waterfall.
+ * Person waterfalls name a lane by `operation`; the company waterfall names it
+ * by `toolId`. Readers that key on `operation` dropped every company attempt,
+ * and with it the identity evidence the attempt carried (OXP-7.3.40), so each
+ * cell renderer normalizes through here before validating an attempt.
+ */
+export function normalizeAttemptLane(value) {
+    if (!value || typeof value !== "object" || Array.isArray(value))
+        return value;
+    const record = value;
+    if (typeof record.operation === "string" || typeof record.toolId !== "string")
+        return value;
+    return { ...record, operation: record.toolId };
+}

package/node_modules/@oxygen/shared/dist/byok-connect.js

@@ -91,6 +91,8 @@ export const NATIVE_API_KEY_CONNECT_INTEGRATION_IDS = new Set([
     "serper",
     "signalbase",
     "up2data",
+    // whitewhale: BYOK-only; its connect form takes the API key and a user email.
+    "whitewhale",
     "zapmail",
     "zerobounce",
 ]);

package/node_modules/@oxygen/shared/dist/capability-discovery.d.ts

@@ -90,10 +90,11 @@ export declare function inferPrimitiveRoute(query: string): PrimitiveRouteMatch
  */
 export declare const RETIRED_PRODUCT_SKILLS: readonly string[];
 /** Current hosted instruction audiences, shared by discovery and Agent snapshots. */
-export declare const OXYGEN_PRODUCT_SKILL_AUDIENCES: Readonly<Record<string, "workspace" | "agency_partner">>;
+export declare const OXYGEN_PRODUCT_SKILL_AUDIENCES: Readonly<Record<string, "workspace" | "agency_partner" | "internal_dev">>;
 export declare function canReadProductSkillInstructions(name: string, entitlements: {
     authenticated?: boolean;
     agencyPartner: boolean;
+    internalDev?: boolean;
 }): boolean;
 /** Identify hosted instruction bodies by native tool lineage, never by user prose. */
 export declare function readProductSkillInstructionResult(capabilityName: string, result: unknown): {
@@ -119,6 +120,12 @@ export declare const SEQUENCE_UNSUBSCRIBE_COMMAND = "oxygen sequences update <se
  * Factories, so a caller can edit the object it gets.
  */
 export declare const CAPABILITY_ROUTE_MCP_CALLS: {
+    connectionPrices: () => {
+        tool: string;
+        arguments: {
+            view: string;
+        };
+    };
     connectedAppsList: () => {
         tool: string;
         arguments: {};