@oxygen-agent/cli 1.1011.974 → 1.1012.2

package/node_modules/@oxygen/shared/dist/linkedin-quota-denial.js

@@ -70,3 +70,97 @@ export function linkedInQuotaParkedUntil(metadata, key) {
     const ms = Date.parse(raw);
     return Number.isNaN(ms) ? 0 : ms;
 }
+// ===== Inbox sync failures that are not quota denials (OXP-1.11.72) =====
+//
+// A quota denial parks the sender until its budget resets (above). Every other
+// whole-sender inbox sync failure used to leave the sender eligible on the next
+// backstop pass: in the week to 2026-10-07 production retried one sender 45
+// times through "Managed provider capacity is busy." and 24 senders every few
+// minutes through a 27-minute LinkedIn 5xx incident, and nothing on the sender
+// said so. These failures now park on a bounded, doubling backoff and leave an
+// inspectable record that the next successful sync clears.
+/**
+ * Where a sender's inbox sync is parked until, quota or failure backoff alike,
+ * in the freeform `sender_accounts.metadata` jsonb.
+ */
+export const INBOX_SYNC_BACKOFF_KEY = "inbox_sync_backoff_until";
+/** The sender metadata key holding the latest non-quota inbox sync failure. */
+export const INBOX_SYNC_FAILURE_KEY = "inbox_sync_failure";
+// Refusals raised before the read leaves the process that clear on their own:
+// the managed-provider limiter after waiting out its window, a runtime with no
+// quota enforcer registered, and an unsizable worker fleet. The same set the
+// LinkedIn ingestion drip defers on.
+const TRANSIENT_CODES = new Set([
+    "rate_limit_exceeded",
+    "linkedin_quota_enforcement_unavailable",
+    "worker_fleet_discovery_unavailable",
+]);
+/** First park after a non-quota failure; it doubles per consecutive failure. */
+export const INBOX_SYNC_FAILURE_BASE_BACKOFF_MS = 5 * 60 * 1000;
+/** No non-quota failure parks a sender longer than this. */
+export const INBOX_SYNC_FAILURE_MAX_BACKOFF_MS = 2 * 60 * 60 * 1000;
+function errorStatus(error) {
+    const status = isRecord(error) ? error.status : undefined;
+    return typeof status === "number" && Number.isFinite(status) ? status : null;
+}
+/** Quota, authentication (401/403), transient (capacity, 429, 5xx, retryable), else other. */
+export function classifyInboxSyncFailure(error) {
+    if (isLinkedInQuotaDenial(error))
+        return "quota";
+    const status = errorStatus(error);
+    if (status === 401 || status === 403)
+        return "authentication";
+    if (error instanceof OxygenError && TRANSIENT_CODES.has(error.code))
+        return "transient";
+    if (status === 429 || (status !== null && status >= 500))
+        return "transient";
+    if (isRecord(error) && error.retryable === true)
+        return "transient";
+    return "other";
+}
+/** The latest non-quota inbox sync failure recorded on a sender, or null. */
+export function readInboxSyncFailure(metadata) {
+    const raw = isRecord(metadata) ? metadata[INBOX_SYNC_FAILURE_KEY] : undefined;
+    if (!isRecord(raw) || typeof raw.consecutive !== "number" || raw.consecutive < 1 || typeof raw.first_at !== "string")
+        return null;
+    return raw;
+}
+/**
+ * The park and record for a whole-sender inbox sync failure that is not a quota
+ * denial: 5 min, doubling per consecutive failure, capped at 2 h. Null for a
+ * quota denial, which keeps its own park (linkedInQuotaBackoffUntil).
+ */
+export function inboxSyncFailureBackoff(error, metadata, now) {
+    const failureClass = classifyInboxSyncFailure(error);
+    if (failureClass === "quota")
+        return null;
+    const previous = readInboxSyncFailure(metadata);
+    const consecutive = (previous?.consecutive ?? 0) + 1;
+    const delay = Math.min(INBOX_SYNC_FAILURE_BASE_BACKOFF_MS * 2 ** Math.min(consecutive - 1, 16), INBOX_SYNC_FAILURE_MAX_BACKOFF_MS);
+    const until = new Date(now.getTime() + delay);
+    return {
+        until,
+        record: {
+            class: failureClass,
+            code: error instanceof OxygenError ? error.code : null,
+            status: errorStatus(error),
+            consecutive,
+            first_at: previous?.first_at ?? now.toISOString(),
+            last_at: now.toISOString(),
+            retry_at: until.toISOString(),
+        },
+    };
+}
+/**
+ * A sender's whole-inbox sync state for health reads: the last successful sync,
+ * the latest failure that was not a quota denial (cleared by the next success),
+ * and until when the background sync leaves the sender alone.
+ */
+export function inboxSyncHealth(sender, now = new Date()) {
+    const parkedUntil = linkedInQuotaParkedUntil(sender.metadata, INBOX_SYNC_BACKOFF_KEY);
+    return {
+        last_synced_at: sender.lastInboxSyncAt ? sender.lastInboxSyncAt.toISOString() : null,
+        background_sync_paused_until: parkedUntil > now.getTime() ? new Date(parkedUntil).toISOString() : null,
+        last_failure: readInboxSyncFailure(sender.metadata),
+    };
+}

package/node_modules/@oxygen/shared/dist/managed-email-branding.d.ts

@@ -0,0 +1,15 @@
+/** Public vocabulary for OXYGEN-managed email services. Backend ids stay in storage. */
+export type ManagedEmailProduct = "warmup" | "placement";
+export declare const OXYGEN_WARMUP_PROVIDER = "oxygen_warmup";
+export declare const OXYGEN_PLACEMENT_PROVIDER = "oxygen_placement";
+export declare function managedEmailProviderInput(value: unknown, product: ManagedEmailProduct): unknown;
+export declare function isManagedWarmupProvider(value: unknown): boolean;
+export declare function isManagedPlacementProvider(value: unknown): boolean;
+export declare function managedEmailMessage(value: string, product?: ManagedEmailProduct): string;
+/**
+ * Project only service identifiers and copy. Preserve URLs, ids, hashes, dates,
+ * customer-authored subject/body/configuration, and provider evidence verbatim.
+ * The caller must choose a managed email surface; do not apply to generic BYOK tools.
+ */
+export declare function publicManagedEmail<T>(value: T, product?: ManagedEmailProduct): T;
+export declare function publicManagedEmailCommand<T>(command: string, value: T): T;

package/node_modules/@oxygen/shared/dist/managed-email-branding.js

@@ -0,0 +1,81 @@
+export const OXYGEN_WARMUP_PROVIDER = "oxygen_warmup";
+export const OXYGEN_PLACEMENT_PROVIDER = "oxygen_placement";
+export function managedEmailProviderInput(value, product) {
+    const publicId = product === "warmup" ? OXYGEN_WARMUP_PROVIDER : OXYGEN_PLACEMENT_PROVIDER;
+    return typeof value === "string" && value.trim().toLowerCase() === publicId ? "sendkit" : value;
+}
+export function isManagedWarmupProvider(value) {
+    return value === "sendkit" || value === OXYGEN_WARMUP_PROVIDER;
+}
+export function isManagedPlacementProvider(value) {
+    return value === "sendkit" || value === OXYGEN_PLACEMENT_PROVIDER;
+}
+// These are service-owned fields, never arbitrary customer content or opaque receipts.
+const IDENTIFIER_FIELDS = new Set([
+    "provider", "active_provider", "warmup_provider", "warmupProvider", "warmupRail",
+    "action", "code", "failure_code", "error_code", "credential_source", "credentialSource",
+    "method", "handoff", "reason_code", "kind", "type", "source",
+]);
+const COPY_FIELDS = new Set([
+    "message", "note", "reason", "description", "hint", "transport_hint", "next_step",
+    "next_action", "nextAction", "label", "title", "instruction", "instructions", "warnings",
+    "recommendation", "recommendations", "limitations", "next_external_write", "price_note",
+    "error", "errors", "summary", "blocker", "blockers", "detail", "details_text", "provider_label",
+]);
+export function managedEmailMessage(value, product = "warmup") {
+    const label = product === "warmup" ? "OXYGEN Warm-up" : "OXYGEN placement evaluation";
+    if (product === "placement") {
+        value = value.replace(/(?:SendKit|OXYGEN placement evaluation) does not document whether inbox, spam, and missing summary values are counts or percentages; Oxygen preserves the values without conversion\./gi, "Summary units are unverified (counts or percentages); values are shown as recorded, without conversion.");
+    }
+    return value.replace(/SendKit(?:'s)?\s+warm-?up/gi, label).replace(/SendKit/gi, label);
+}
+/**
+ * Project only service identifiers and copy. Preserve URLs, ids, hashes, dates,
+ * customer-authored subject/body/configuration, and provider evidence verbatim.
+ * The caller must choose a managed email surface; do not apply to generic BYOK tools.
+ */
+export function publicManagedEmail(value, product = "warmup") {
+    const opaqueFields = new Set(["plan_hash", "id", "subject", "body", "body_text", "body_html", "config", "warmupConfig", "rampConfig", "email_address", "emailAddress", "tags", "displayName", "signatureHtml"]);
+    function project(entry, field = "", context = product) {
+        const publicId = context === "warmup" ? OXYGEN_WARMUP_PROVIDER : OXYGEN_PLACEMENT_PROVIDER;
+        if (opaqueFields.has(field))
+            return entry;
+        if (typeof entry === "string") {
+            if (field === "source_id" || field === "sourceId") {
+                return entry.replace(/^warmup:sendkit:/, "warmup:oxygen_warmup:");
+            }
+            if (IDENTIFIER_FIELDS.has(field)) {
+                if (entry.toLowerCase() === "sendkit")
+                    return publicId;
+                return entry.replace(/sendkit_/gi, `${publicId}_`).replace(/_sendkit/gi, `_${publicId}`);
+            }
+            return COPY_FIELDS.has(field) ? managedEmailMessage(entry, context) : entry;
+        }
+        if (Array.isArray(entry))
+            return entry.map((item) => project(item, field, context));
+        if (!entry || typeof entry !== "object" || entry instanceof Date)
+            return entry;
+        const record = entry;
+        // Existing customer-owned bindings stay private; never label their usage managed warmup.
+        const groupKey = record.key && typeof record.key === "object" && !Array.isArray(record.key)
+            ? record.key : null;
+        const privateUsage = (record.provider === "sendkit" || groupKey?.provider === "sendkit") &&
+            (record.type === "byok_usage" || (typeof record.byok_usage_events === "number" && record.byok_usage_events > 0));
+        return Object.fromEntries(Object.entries(record).map(([key, item]) => [
+            { sendkit_google: "oxygen_warmup_google", sendkit_microsoft: "oxygen_warmup_microsoft", sendkit_binding: "oxygen_placement_binding", sendkitBinding: "oxygen_placement_binding" }[key] ?? key,
+            privateUsage && key === "provider" ? "private_integration"
+                : privateUsage && key === "key" ? project({ ...groupKey, provider: "private_integration" }, key, context)
+                    : privateUsage && key === "tool_id" ? null
+                        : privateUsage && key === "description" ? "Existing private integration usage."
+                            : project(item, key, /^warmup/i.test(key) ? "warmup" : /^placement/i.test(key) ? "placement" : context),
+        ]));
+    }
+    return project(value);
+}
+export function publicManagedEmailCommand(command, value) {
+    if (/^(mailboxes|managed-inboxes|billing)(?: |$)/.test(command))
+        return publicManagedEmail(value);
+    if (/^deliverability(?: |$)/.test(command))
+        return publicManagedEmail(value, "placement");
+    return value;
+}

package/node_modules/@oxygen/shared/dist/pricing-sheet.d.ts

@@ -137,11 +137,7 @@ export declare const RESEARCH_DEPTH_MODEL_CREDITS: {
     readonly standard: 4.3;
     readonly deep: 7.6;
 };
-/** The tier whose model each loop depth runs on, whatever tier the column stores. */
-export declare const RESEARCH_DEPTH_MODEL_TIER: {
-    readonly standard: "low";
-    readonly deep: "medium";
-};
+/** The tier whose model each loop depth runs on lives in ./research-depth.ts: a routing fact, not a price. */
 /**
  * The tool half of a standard/deep row. `typical` is the ratified planning shape —
  * standard: 2 serper searches + 2 native page reads; deep: 3 serper searches + 4
@@ -177,18 +173,18 @@ export declare const RESEARCH_DEPTH_TYPICAL_ROW_CREDITS: {
  */
 export { AUTOMATION_STEP_CREDITS_REPRICING } from "./repricing.js";
 /**
- * The flat mailbox line of a managed Google inbox after the 2026-09 repricing
- * (400, decision 3.1, slice S32). Its 100-credit mailbox connection, warm-up
- * included, bills beside it: 500 all-in. The all-in price waits for the S07
- * switch, so a surface that quotes it uses `managedInboxAllInCredits()` from
- * `@oxygen/shared/repricing`, resolved on the server. Kept as an object
- * (min/typical/max all equal) so callers that destructure any field need no
- * shape change.
+ * The flat mailbox line of a managed Google or Microsoft 365 inbox: 300 (founder,
+ * 2026-10-07; repricing decision 3.1 had set 400 for Google alone). Its 100-credit
+ * mailbox connection, warm-up included, bills beside it: 400 all-in, which
+ * `managedInboxAllInCredits()` from `@oxygen/shared/repricing` quotes. The price
+ * charged is the pricing book's row; this is its committed default. Kept as an
+ * object (min/typical/max all equal) so callers that destructure any field need
+ * no shape change.
  */
 export declare const MANAGED_INBOX_CREDITS_PER_MONTH: {
-    readonly min: 400;
-    readonly typical: 400;
-    readonly max: 400;
+    readonly min: 300;
+    readonly typical: 300;
+    readonly max: 300;
 };
 /**
  * VOICE (the call channel). One price per connected minute, 5 credits ($0.05),
@@ -221,17 +217,17 @@ export declare const SENDING_DOMAIN_CREDITS_PER_YEAR_TYPICAL = 1250;
  * THE ALLOWANCE IS LOAD-BEARING, not a perk. Placement COGS is per TEST
  * ($0.1327 on EmailGuard's Agency plan), not per inbox, so an unbounded seat
  * inverts its own margin: at $1.00/inbox-month the EIGHTH test in a cycle was
- * already sold at a loss. Two included tests cost $0.265 against $1.35 of
- * revenue at the 2026-09 price, and everything past them bills
+ * already sold at a loss. Two included tests cost $0.265 against $1.00 of
+ * revenue at today's price, and everything past them bills
  * PLACEMENT_TEST_OVERAGE_CREDITS. Orgs on their own EmailGuard key (BYOK) pay 0.
  *
- * These two prices are the RATIFIED list prices from the 2026-09 repricing
- * (135 and 66, slice S30). The rises wait for the S07 effective-date switch, so
- * a surface that quotes or bills uses `deliverabilitySeatCredits()` and
- * `placementTestCredits()` from `@oxygen/shared/repricing` (100 and 16.6 until
- * the switch's instant), never these constants.
+ * Monitoring is 100 credits per inbox-month (founder, 2026-10-07; the 2026-09
+ * repricing had set 135). The extra test is the RATIFIED 66 (slice S30), whose rise
+ * waits for the S07 effective-date switch, so a surface that quotes or bills uses
+ * `deliverabilitySeatCredits()` and `placementTestCredits()` from
+ * `@oxygen/shared/repricing` (16.6 for the test until the switch's instant).
  */
-export declare const DELIVERABILITY_SEAT_CREDITS_PER_MONTH = 135;
+export declare const DELIVERABILITY_SEAT_CREDITS_PER_MONTH = 100;
 export declare const DELIVERABILITY_INCLUDED_TESTS_PER_INBOX = 2;
 export declare const PLACEMENT_TEST_OVERAGE_CREDITS = 66;
 /**
@@ -262,7 +258,7 @@ export declare const LINKEDIN_TYPICAL_ACTIONS_CREDITS_PER_MONTH = 0;
  * Seeded at the 2026-09 repricing's price (3,000, decision 2.3); resolve the
  * price in force with repricedChargeCredits.
  */
-export declare const WHATSAPP_ACCOUNT_CREDITS_PER_MONTH = 3000;
+export declare const WHATSAPP_ACCOUNT_CREDITS_PER_MONTH = 3400;
 /**
  * X accounts: monthly credit reservation per connected account (2026-09
  * repricing, decision 2.2). Like the LinkedIn and WhatsApp constants above this

package/node_modules/@oxygen/shared/dist/pricing-sheet.js

@@ -134,8 +134,7 @@ export const AI_COLUMN_WEB_SEARCH_RESERVED_CREDITS = 4.6;
  * likely under 5x once a loop runs more than two turns.
  */
 export const RESEARCH_DEPTH_MODEL_CREDITS = { standard: 4.3, deep: 7.6 };
-/** The tier whose model each loop depth runs on, whatever tier the column stores. */
-export const RESEARCH_DEPTH_MODEL_TIER = { standard: "low", deep: "medium" };
+/** The tier whose model each loop depth runs on lives in ./research-depth.ts: a routing fact, not a price. */
 /**
  * The tool half of a standard/deep row. `typical` is the ratified planning shape —
  * standard: 2 serper searches + 2 native page reads; deep: 3 serper searches + 4
@@ -161,13 +160,13 @@ export const RESEARCH_DEPTH_TYPICAL_ROW_CREDITS = { quick: 2.1, standard: 5.5, d
  */
 export { AUTOMATION_STEP_CREDITS_REPRICING } from "./repricing.js";
 /**
- * The flat mailbox line of a managed Google inbox after the 2026-09 repricing
- * (400, decision 3.1, slice S32). Its 100-credit mailbox connection, warm-up
- * included, bills beside it: 500 all-in. The all-in price waits for the S07
- * switch, so a surface that quotes it uses `managedInboxAllInCredits()` from
- * `@oxygen/shared/repricing`, resolved on the server. Kept as an object
- * (min/typical/max all equal) so callers that destructure any field need no
- * shape change.
+ * The flat mailbox line of a managed Google or Microsoft 365 inbox: 300 (founder,
+ * 2026-10-07; repricing decision 3.1 had set 400 for Google alone). Its 100-credit
+ * mailbox connection, warm-up included, bills beside it: 400 all-in, which
+ * `managedInboxAllInCredits()` from `@oxygen/shared/repricing` quotes. The price
+ * charged is the pricing book's row; this is its committed default. Kept as an
+ * object (min/typical/max all equal) so callers that destructure any field need
+ * no shape change.
  */
 export const MANAGED_INBOX_CREDITS_PER_MONTH = {
     min: SNAPSHOT_MANAGED_INBOX_CREDITS_PER_MONTH,
@@ -205,15 +204,15 @@ export const SENDING_DOMAIN_CREDITS_PER_YEAR_TYPICAL = SNAPSHOT_SENDING_DOMAIN_C
  * THE ALLOWANCE IS LOAD-BEARING, not a perk. Placement COGS is per TEST
  * ($0.1327 on EmailGuard's Agency plan), not per inbox, so an unbounded seat
  * inverts its own margin: at $1.00/inbox-month the EIGHTH test in a cycle was
- * already sold at a loss. Two included tests cost $0.265 against $1.35 of
- * revenue at the 2026-09 price, and everything past them bills
+ * already sold at a loss. Two included tests cost $0.265 against $1.00 of
+ * revenue at today's price, and everything past them bills
  * PLACEMENT_TEST_OVERAGE_CREDITS. Orgs on their own EmailGuard key (BYOK) pay 0.
  *
- * These two prices are the RATIFIED list prices from the 2026-09 repricing
- * (135 and 66, slice S30). The rises wait for the S07 effective-date switch, so
- * a surface that quotes or bills uses `deliverabilitySeatCredits()` and
- * `placementTestCredits()` from `@oxygen/shared/repricing` (100 and 16.6 until
- * the switch's instant), never these constants.
+ * Monitoring is 100 credits per inbox-month (founder, 2026-10-07; the 2026-09
+ * repricing had set 135). The extra test is the RATIFIED 66 (slice S30), whose rise
+ * waits for the S07 effective-date switch, so a surface that quotes or bills uses
+ * `deliverabilitySeatCredits()` and `placementTestCredits()` from
+ * `@oxygen/shared/repricing` (16.6 for the test until the switch's instant).
  */
 export const DELIVERABILITY_SEAT_CREDITS_PER_MONTH = SNAPSHOT_DELIVERABILITY_SEAT_CREDITS_PER_MONTH;
 export const DELIVERABILITY_INCLUDED_TESTS_PER_INBOX = SNAPSHOT_DELIVERABILITY_INCLUDED_TESTS_PER_INBOX;

package/node_modules/@oxygen/shared/dist/pricing-snapshot.generated.d.ts

@@ -15,13 +15,13 @@ export declare const SUBSCRIPTION_USD_PER_100 = 1;
 /** Applied to actual provider inference cost at settle time. */
 export declare const COPILOT_CREDIT_MARKUP_MULTIPLIER = 5;
 export declare const LINKEDIN_ACCOUNT_CREDITS_PER_MONTH = 3400;
-export declare const WHATSAPP_ACCOUNT_CREDITS_PER_MONTH = 3000;
+export declare const WHATSAPP_ACCOUNT_CREDITS_PER_MONTH = 3400;
 export declare const X_ACCOUNT_CREDITS_PER_MONTH = 1000;
 export declare const EGRESS_IP_CREDITS_PER_MONTH = 2500;
 export declare const SENDING_MAILBOX_CREDITS_PER_MONTH = 100;
-export declare const MANAGED_INBOX_CREDITS_PER_MONTH = 400;
+export declare const MANAGED_INBOX_CREDITS_PER_MONTH = 300;
 export declare const MAILBOX_WARMUP_CREDITS_PER_MONTH = 0;
-export declare const DELIVERABILITY_SEAT_CREDITS_PER_MONTH = 135;
+export declare const DELIVERABILITY_SEAT_CREDITS_PER_MONTH = 100;
 /** Included inbox-placement tests per subscribed inbox per cycle. */
 export declare const DELIVERABILITY_INCLUDED_TESTS_PER_INBOX = 2;
 /** A placement test beyond the included allowance. */

package/node_modules/@oxygen/shared/dist/pricing-snapshot.generated.js

@@ -37,13 +37,13 @@ export const COPILOT_CREDIT_MARKUP_MULTIPLIER = 5;
 // force is lower; a surface that shows or charges one resolves it with
 // repricedChargeCredits (@oxygen/shared/repricing), never from this literal alone.
 export const LINKEDIN_ACCOUNT_CREDITS_PER_MONTH = 3_400;
-export const WHATSAPP_ACCOUNT_CREDITS_PER_MONTH = 3_000;
+export const WHATSAPP_ACCOUNT_CREDITS_PER_MONTH = 3_400;
 export const X_ACCOUNT_CREDITS_PER_MONTH = 1_000;
 export const EGRESS_IP_CREDITS_PER_MONTH = 2_500;
 export const SENDING_MAILBOX_CREDITS_PER_MONTH = 100;
-export const MANAGED_INBOX_CREDITS_PER_MONTH = 400;
+export const MANAGED_INBOX_CREDITS_PER_MONTH = 300;
 export const MAILBOX_WARMUP_CREDITS_PER_MONTH = 0;
-export const DELIVERABILITY_SEAT_CREDITS_PER_MONTH = 135;
+export const DELIVERABILITY_SEAT_CREDITS_PER_MONTH = 100;
 /** Included inbox-placement tests per subscribed inbox per cycle. */
 export const DELIVERABILITY_INCLUDED_TESTS_PER_INBOX = 2;
 /** A placement test beyond the included allowance. */

package/node_modules/@oxygen/shared/dist/product-doctrine.js

@@ -49,22 +49,23 @@ function rosterLines(routes) {
  * a grown or shrunk route array and watching the output follow.
  */
 export function renderOxygenProductDoctrine(routes = OXYGEN_PRIMITIVE_ROUTES) {
-    return `OXYGEN is hosted revenue infrastructure for B2B startups; OXYGEN OS is its five-layer stack. Control surfaces (CLI, MCP, web, desktop, Copilot) call one contract, own no state; External is the platforms OXYGEN acts on. Between them, the ${routes.length} primitives, each owning its facts:
+    return `OXYGEN is hosted revenue infrastructure for B2B startups; OXYGEN OS has five layers. Control (CLI, MCP, web, desktop, Copilot) calls one contract, owns no state; External holds integrations. Between them, the ${routes.length} primitives, each owns its facts:
 
 ${rosterLines(routes)}
 
-Use native primitives so state, approvals, costs, provenance, and runs stay hosted and inspectable; never rebuild one with scripts, cron, files, or a second engine.
+Use native primitives: state, approvals, costs, provenance and runs stay inspectable; never rebuild one with scripts, cron, files, or a second engine.
 
 Ownership law — one owner per fact, no primitive re-implements another:
 
+- Geo owns AI-search prompts, answers, citations and experiments; staff/dev pilot only.
 - Records hold canonical truth; Tables hold disposable work promoted onto Records — a row is a candidate, not canon. Tables own typed rows, formulas, AI and tool columns, waterfalls, cell state, and provenance; simple row dependencies stay chained Table columns, not Workflows.
 - Interaction state, not recipient count, owns LinkedIn routing: net-new outreach is Sequences even for one recipient and one step; a reply in an existing thread or one direct email is Messages, holding conversation content, stored once. Cadence, enrollment, sender rotation, suppression, and reply-stop are Sequences.
-- Signals hold durable typed events and record only that something happened; acting on one is Workflows or Sequences; an inbound reply is both, a reaction only a Signal.
+- Signals hold durable typed events; they record what happened, and acting on one is Workflows or Sequences; an inbound reply is both, a reaction only a Signal.
 - Deterministic scheduled, cron, webhook, event, branching, waiting, retrying, or approval-gated orchestration belongs to hosted OXYGEN Workflows: schema → lint → apply → call, and local files are authoring inputs only. Adaptive goals, persistent threads, and checkpoints belong to governed Agents, owning first-class runs and calling Workflows as child actions; neither compiles into the other nor is a store — a draft is Messages, a note Records activity, and Workflow outreach enrolls into an active, bounded Sequence and never sends raw provider messages.
 - Posts hold broadcast artifacts and engagement telemetry; Publishing owns approval-gated scheduling, dispatch, retries, and provenance; Ads owns competitor ad intelligence; Tags are the cross-primitive label vocabulary; Dashboards curates native reporting; Observability is the read lens over runs, costs, and failures, never a second engine.
-- The Knowledge Graph describes kinds of customer (ICP, personas, offers, rubrics, voice); Records holds the companies and people they describe. Durable knowledge belongs there, not chat memory: read pages, cite their slugs, search before minting a near-duplicate, file durable findings back. Canonical voice and positioning stay proposal-gated. Pinned canonical context is auto-applied to AI copy; if reported missing, say so rather than write off-voice. Recipes package motions that read it, advisory only.
+- Knowledge Graph describes customer kinds (ICP, personas, offers, rubrics, voice); Records holds the companies and people they describe. Store durable knowledge there, not chat memory: read pages, cite their slugs, search before minting a near-duplicate, file durable findings back. Canonical voice and positioning stay proposal-gated. Pinned canonical context is auto-applied to AI copy; if reported missing, say so rather than write off-voice. Recipes package motions that read it, advisory only.
 
-Paid provider work and external writes require a preview on a small sample, exact scope, approval, and a hard credit or action ceiling. Never infer spend authority from tool authority. Surface deep-links, costs, failures, retries, and approval needs, not a bare success; name missing context, never guess.`;
+Paid provider work and external writes require a preview on a small sample, exact scope, approval, and a hard credit or action ceiling. Never infer spend authority from tool authority. Show deep-links, costs, failures, retries and approval needs; name missing context, never guess.`;
 }
 /** The rendered doctrine for the shipped primitive roster. */
 export const OXYGEN_PRODUCT_DOCTRINE = renderOxygenProductDoctrine();

package/node_modules/@oxygen/shared/dist/provider-balance-signal.js

@@ -101,8 +101,9 @@ export const MANAGED_BALANCE_FLOORS = {
     // to us, which sits at 0.00 in the normal case (it did on 2026-09-07) and goes
     // negative after a refund. A floor here would page daily about nothing.
     stripe: null,
-    // Reachability probes with no balance concept at all: both fetchers return
-    // `balanceRemaining: null` by construction.
+    // No balance concept at all. Neither is probed any more (Vercel left the stack
+    // on 2026-10-06); null keeps a historical row from ever reading as a low wallet
+    // under the generic default floor.
     vercel: null,
     neon: null,
 };

package/node_modules/@oxygen/shared/dist/recipes.d.ts

@@ -9,7 +9,7 @@ export declare const RECIPE_STATUSES: readonly ["draft", "beta", "stable", "depr
 export type RecipeStatus = typeof RECIPE_STATUSES[number];
 export declare const RECIPE_BENCHMARK_BASES: readonly ["estimate", "observed"];
 export type RecipeBenchmarkBasis = typeof RECIPE_BENCHMARK_BASES[number];
-export declare const RECIPE_PRIMITIVES: readonly ["knowledge-graph", "recipes", "records", "tables", "messages", "posts", "signals", "dashboards", "ads", "tags", "sequences", "publishing", "workflows", "agents", "observability"];
+export declare const RECIPE_PRIMITIVES: readonly ["knowledge-graph", "recipes", "records", "tables", "messages", "posts", "signals", "dashboards", "geo", "ads", "tags", "sequences", "publishing", "workflows", "agents", "observability"];
 export type RecipePrimitive = typeof RECIPE_PRIMITIVES[number];
 export declare const RECIPE_PREREQUISITE_KINDS: readonly ["sender", "mailbox", "domain", "integration", "knowledge", "asset", "plan", "data"];
 export type RecipePrerequisiteKind = typeof RECIPE_PREREQUISITE_KINDS[number];

package/node_modules/@oxygen/shared/dist/recipes.js

@@ -49,6 +49,7 @@ export const RECIPE_PRIMITIVES = [
     "posts",
     "signals",
     "dashboards",
+    "geo",
     "ads",
     "tags",
     "sequences",

package/node_modules/@oxygen/shared/dist/repricing.d.ts

@@ -118,28 +118,18 @@ export declare const AUTOMATION_STEP_CREDITS_REPRICING: RepricedValue<0.001 | 0.
  * approved ceiling, so it starts with the price and not before.
  */
 export declare const AUTOMATION_STEPS_COUNT_TOWARD_RUN_CAP_REPRICING: RepricedValue<boolean>;
-/**
- * S30 (decision 3.5): EmailGuard monitoring per subscribed inbox, including the
- * cycle's placement-test allowance, 100 -> 135 credits a month. Existing
- * subscriptions pay the price in force at each renewal.
- */
-export declare const DELIVERABILITY_SEAT_REPRICING: RepricedValue<100 | 135>;
+/** EmailGuard monitoring per subscribed inbox-month, in credits, including its placement tests. */
+export declare function deliverabilitySeatCredits(): number;
 /**
  * S30 (decision 3.6; flat literal, proposal P-29): one managed placement test
  * past an inbox's included allowance, or on an inbox with no monitoring
  * subscription, 16.6 -> 66 credits. Tests on your own EmailGuard key stay 0.
  */
 export declare const PLACEMENT_TEST_REPRICING: RepricedValue<16.6 | 66>;
-/** EmailGuard monitoring per subscribed inbox-month, in credits, at the price in force. */
-export declare function deliverabilitySeatCredits(options?: RepricingOptions): number;
 /** One managed placement test beyond the included allowance, in credits, at the price in force. */
 export declare function placementTestCredits(options?: RepricingOptions): number;
-/** The flat monthly mailbox line of a managed Google inbox (the pricing seed's `commitment.managed_mailbox`). */
-export declare const MANAGED_MAILBOX_REPRICING: RepricedValue<300 | 400>;
-/** What a managed Google inbox costs a month, all-in: mailbox, connection and warm-up. */
-export declare const MANAGED_INBOX_ALL_IN_REPRICING: RepricedValue<number>;
-/** A managed Google inbox's monthly credits, all-in, at the switch state (marketing and docs). */
-export declare function managedInboxAllInCredits(options?: RepricingOptions): number;
+/** A managed inbox's committed monthly credits, all-in: the flat mailbox line plus its connection. */
+export declare function managedInboxAllInCredits(): number;
 /**
  * S41 (decision 6.3): a provider call made with the customer's own API key
  * (BYOK) pays a 0.05-credit platform fee, up from nothing. The vendor still

package/node_modules/@oxygen/shared/dist/repricing.js

@@ -240,7 +240,8 @@ export const S20_RESERVATION_PRICE_RISES = [
         unit: "credits_per_number_per_month",
         description: "Monthly credit reservation for a connected WhatsApp number.",
         before: 1_000,
-        after: 3_000,
+        // Decision 2.3 set 3,000; the founder made it 3,400, a LinkedIn account's price (2026-10-07).
+        after: 3_400,
     }),
     defineRepricedValue({
         key: "seat.phone_number",
@@ -286,25 +287,16 @@ export const AUTOMATION_STEPS_COUNT_TOWARD_RUN_CAP_REPRICING = defineRepricedVal
     before: false,
     after: true,
 });
-// ---- S30 (decisions 3.5 and 3.6): EmailGuard back on the 5x markup. -------
-// Both keys are the pricing-seed charge keys, so the seed row and the snapshot
-// carry the new price, `after` reads it from the snapshot (one definition), and
-// `repricedChargeCredits` / `repricedValue` hold the old price until the instant.
-/**
- * S30 (decision 3.5): EmailGuard monitoring per subscribed inbox, including the
- * cycle's placement-test allowance, 100 -> 135 credits a month. Existing
- * subscriptions pay the price in force at each renewal.
- */
-export const DELIVERABILITY_SEAT_REPRICING = defineRepricedValue({
-    key: "commitment.deliverability_unit",
-    kind: "price",
-    slice: "S30",
-    decision: "3.5",
-    unit: "credits_per_inbox_per_month",
-    description: "EmailGuard monitoring per subscribed inbox, including its included placement tests each cycle.",
-    before: 100,
-    after: SNAPSHOT_DELIVERABILITY_SEAT_CREDITS,
-});
+// ---- S30 (decision 3.6): the extra placement test on the 5x markup. -------
+// The key is the pricing-seed charge key, so the seed row and the snapshot carry
+// the new price, `after` reads it from the snapshot (one definition), and
+// `repricedValue` holds the old price until the instant. EmailGuard monitoring
+// itself rose 100 -> 135 here (decision 3.5) until the founder set it back to a
+// round 100 on 2026-10-07, so nothing about it moves at the switch any more.
+/** EmailGuard monitoring per subscribed inbox-month, in credits, including its placement tests. */
+export function deliverabilitySeatCredits() {
+    return SNAPSHOT_DELIVERABILITY_SEAT_CREDITS;
+}
 /**
  * S30 (decision 3.6; flat literal, proposal P-29): one managed placement test
  * past an inbox's included allowance, or on an inbox with no monitoring
@@ -320,51 +312,23 @@ export const PLACEMENT_TEST_REPRICING = defineRepricedValue({
     before: 16.6,
     after: SNAPSHOT_PLACEMENT_TEST_CREDITS,
 });
-/** EmailGuard monitoring per subscribed inbox-month, in credits, at the price in force. */
-export function deliverabilitySeatCredits(options = {}) {
-    return repricedValue(DELIVERABILITY_SEAT_REPRICING, options);
-}
 /** One managed placement test beyond the included allowance, in credits, at the price in force. */
 export function placementTestCredits(options = {}) {
     return repricedValue(PLACEMENT_TEST_REPRICING, options);
 }
-// ---- S32 (decision 3.1): a managed Google inbox at 500 credits all-in. ----
-// Until the instant, a managed mailbox is priced at the inbox vendor's cost x 1.2
-// (300 credits for Google at $2.50) and its warm-up add-on bills 100 on top. From
-// it, a Google mailbox is a flat 400 plus the 100-credit mailbox connection every
-// sending mailbox holds, 500 in total, with warm-up included in the connection.
-// Microsoft and Azure keep their cost-derived mailbox or tenant price (proposals
-// P-25, P-26) and gain the same included warm-up and connection.
-//
-// The switch alone does not move it. `isManagedInboxAllInPriceActive`
-// (@oxygen/integrations) also requires credit commitments to bill
-// `sending_mailbox` and `managed_mailbox` (the S26 arming): otherwise the order
-// would drop to 400 while nobody collects the connection it includes.
-/** The flat monthly mailbox line of a managed Google inbox (the pricing seed's `commitment.managed_mailbox`). */
-export const MANAGED_MAILBOX_REPRICING = defineRepricedValue({
-    key: "commitment.managed_mailbox",
-    kind: "price",
-    slice: "S32",
-    decision: "3.1",
-    unit: "credits_per_inbox_per_month",
-    description: "The mailbox line of a managed Google inbox, a flat price. Its 100-credit mailbox connection, with warm-up included, is billed beside it.",
-    before: 300,
-    after: SNAPSHOT_MANAGED_MAILBOX_CREDITS,
-});
-/** What a managed Google inbox costs a month, all-in: mailbox, connection and warm-up. */
-export const MANAGED_INBOX_ALL_IN_REPRICING = defineRepricedValue({
-    key: "managed_inbox.google_all_in_credits",
-    kind: "price",
-    slice: "S32",
-    decision: "3.1",
-    unit: "credits_per_inbox_per_month",
-    description: "A managed Google inbox, all-in: the mailbox plus its mailbox connection, warm-up included. Inbox placement is an optional add-on.",
-    before: 400,
-    after: SNAPSHOT_MANAGED_MAILBOX_CREDITS + SNAPSHOT_SENDING_MAILBOX_CREDITS,
-});
-/** A managed Google inbox's monthly credits, all-in, at the switch state (marketing and docs). */
-export function managedInboxAllInCredits(options = {}) {
-    return repricedValue(MANAGED_INBOX_ALL_IN_REPRICING, options);
+// ---- S32: a managed inbox, all-in. --------------------------------------
+// Once the all-in price applies (`isManagedInboxAllInPriceActive` in
+// @oxygen/integrations: the 2026-09 switch AND credit commitments billing
+// `sending_mailbox` and `managed_mailbox`), a Google or Microsoft 365 mailbox sells
+// at the pricing book's flat `commitment.managed_mailbox` line and an Azure tenant at
+// its flat `commitment.managed_azure_tenant` (founder, 2026-10-07: one inbox price,
+// a round tenant price). Each inbox also holds the 100-credit mailbox connection,
+// warm-up included. Before it, a mailbox was priced from vendor cost and warm-up
+// billed beside it: 300 + 100 for Google at the $2.50 contracted cost, the same 400
+// a month, so nothing about the all-in total moves at the switch.
+/** A managed inbox's committed monthly credits, all-in: the flat mailbox line plus its connection. */
+export function managedInboxAllInCredits() {
+    return SNAPSHOT_MANAGED_MAILBOX_CREDITS + SNAPSHOT_SENDING_MAILBOX_CREDITS;
 }
 /**
  * S41 (decision 6.3): a provider call made with the customer's own API key
@@ -611,10 +575,7 @@ export const REPRICING_2026_09_SCHEDULE = [
     TOPUP_RATE_REPRICING,
     ...storageCutEntries(),
     ...S20_RESERVATION_PRICE_RISES,
-    DELIVERABILITY_SEAT_REPRICING,
     PLACEMENT_TEST_REPRICING,
-    MANAGED_MAILBOX_REPRICING,
-    MANAGED_INBOX_ALL_IN_REPRICING,
     EMAIL_MAILBOX_DAILY_CAP_MAXIMUM,
     EMAIL_MAILBOX_OLD_DEFAULT_DAILY_CAP,
     AUTOMATION_STEP_CREDITS_REPRICING,

package/node_modules/@oxygen/shared/dist/research-depth.d.ts

@@ -0,0 +1,11 @@
+/**
+ * The model tier each AI-column research-loop depth runs on, whatever tier the
+ * column stores. A routing fact, not a price: the credits a depth costs come from
+ * the pricing book (OXP-1.22.25 retires the committed price sheet), so this lives
+ * apart from every price.
+ */
+export declare const RESEARCH_DEPTH_MODEL_TIER: {
+    readonly standard: "low";
+    readonly deep: "medium";
+};
+export type ResearchLoopDepth = keyof typeof RESEARCH_DEPTH_MODEL_TIER;

package/node_modules/@oxygen/shared/dist/research-depth.js

@@ -0,0 +1,7 @@
+/**
+ * The model tier each AI-column research-loop depth runs on, whatever tier the
+ * column stores. A routing fact, not a price: the credits a depth costs come from
+ * the pricing book (OXP-1.22.25 retires the committed price sheet), so this lives
+ * apart from every price.
+ */
+export const RESEARCH_DEPTH_MODEL_TIER = { standard: "low", deep: "medium" };

package/node_modules/@oxygen/shared/dist/version.d.ts

@@ -1,2 +1,2 @@
 export declare const OXYGEN_VERSION: string;
-export declare const OXYGEN_MINIMUM_CLI_VERSION = "1.917.5";
+export declare const OXYGEN_MINIMUM_CLI_VERSION = "1.922.14";