@oxygen-agent/cli 1.1011.974 → 1.1012.2

package/node_modules/@oxygen/shared/dist/version.generated.d.ts

@@ -1 +1 @@
-export declare const OXYGEN_BUILD_VERSION = "1.1011.974";
+export declare const OXYGEN_BUILD_VERSION = "1.1012.2";

package/node_modules/@oxygen/shared/dist/version.generated.js

@@ -1,2 +1,2 @@
 // GENERATED by scripts/ci/version-stamp.mjs from VERSION + git history. Do not edit; do not commit.
-export const OXYGEN_BUILD_VERSION = "1.1011.974";
+export const OXYGEN_BUILD_VERSION = "1.1012.2";

package/node_modules/@oxygen/shared/dist/version.js

@@ -49,4 +49,4 @@ export const OXYGEN_VERSION = OXYGEN_BUILD_VERSION;
 // Since 2026-09-28 the release-preparation step advances this literal to the
 // highest CLI version published on npm for at least 30 days. It never lowers
 // the floor. The source change lands on dev before the next production release.
-export const OXYGEN_MINIMUM_CLI_VERSION = "1.917.5";
+export const OXYGEN_MINIMUM_CLI_VERSION = "1.922.14";

package/node_modules/@oxygen/shared/dist/whatsapp-sender-limits.d.ts

@@ -0,0 +1,88 @@
+/**
+ * The WhatsApp sender-limit overlay: the keys a WhatsApp account accepts and
+ * their defaults and hard maximums. One owner for the quota enforcer
+ * (packages/integrations/src/whatsapp-quota.ts), the limits route, the MCP and
+ * CLI surfaces and the web form (OXP-11.3.19): the MCP tool once advertised a
+ * chats_reads_per_day key the route silently dropped and maxima (400 reads,
+ * 7200 s spacing, 3600 s jitter) the quota never allowed.
+ *
+ * Everything stays deliberately small: WhatsApp Web bans on volume.
+ */
+export declare const WHATSAPP_SENDER_LIMIT_KEYS: readonly ["messages_per_day", "likes_per_day", "messages_reads_per_day", "relations_reads_per_day", "total_actions_per_day", "total_reads_per_day", "min_action_spacing_seconds", "action_spacing_jitter_seconds"];
+export type WhatsAppSenderLimitKey = (typeof WHATSAPP_SENDER_LIMIT_KEYS)[number];
+export declare const WHATSAPP_SENDER_LIMIT_DEFAULTS: {
+    readonly messages_per_day: 20;
+    readonly likes_per_day: 20;
+    readonly messages_reads_per_day: 200;
+    readonly relations_reads_per_day: 40;
+    readonly total_actions_per_day: 40;
+    readonly total_reads_per_day: 240;
+    readonly min_action_spacing_seconds: 600;
+    readonly action_spacing_jitter_seconds: 300;
+};
+export declare const WHATSAPP_SENDER_LIMIT_MAXIMUMS: {
+    readonly messages_per_day: 40;
+    readonly likes_per_day: 40;
+    readonly messages_reads_per_day: 600;
+    readonly relations_reads_per_day: 100;
+    readonly total_actions_per_day: 80;
+    readonly total_reads_per_day: 700;
+    readonly min_action_spacing_seconds: 3600;
+    readonly action_spacing_jitter_seconds: 1800;
+};
+/** OXYGEN policy, not a provider-published guarantee of account safety. */
+export declare const WHATSAPP_WARMUP_RAMP: ReadonlyArray<{
+    throughDay: number;
+    cap: number;
+}>;
+export declare const WHATSAPP_WARMUP_FULL_CAP: 40;
+export declare const WHATSAPP_CONNECTION_COOLDOWN_MS: number;
+export declare const WHATSAPP_WARMUP_DAY_BASIS: "elapsed_24_hour_periods";
+export declare function whatsAppRampCapForDay(day: number): number;
+export declare function whatsAppWarmupDay(anchor: Date | null, now?: Date): number;
+/** Poll timestamps never advance this clock; legacy mirrors retain their creation time. */
+export declare function whatsAppConnectionCooldown(sender: {
+    metadata?: Record<string, unknown> | null;
+    createdAt?: Date | string | null;
+}, now?: Date): {
+    session_connected_at: string | null;
+    outreach_resume_at: string | null;
+    blocked: boolean;
+};
+/** Stored reads expose the same elapsed-day policy that dispatch enforces. */
+export declare function whatsAppWarmupStatus(sender: {
+    warmupStartedAt: Date | null;
+    limitOverrides?: Partial<Record<WhatsAppSenderLimitKey, unknown>> | null;
+    metadata?: Record<string, unknown> | null;
+    createdAt?: Date | string | null;
+}, now?: Date): {
+    session_connected_at: string | null;
+    outreach_resume_at: string | null;
+    blocked: boolean;
+    warmup_started_at: string | null;
+    warmup_day: number;
+    day_basis: "elapsed_24_hour_periods";
+    ramp_cap_today: number;
+    configured_daily_cap: number;
+    effective_daily_cap: number;
+    ramp: ({
+        from_day: number;
+        through_day: number;
+        messages_per_day: number;
+    } | {
+        from_day: number;
+        through_day: null;
+        messages_per_day: number;
+    })[];
+    connection_cooldown_hours: number;
+};
+/** What each WhatsApp limit counts, for MCP and CLI help. */
+export declare const WHATSAPP_SENDER_LIMIT_NOTES: Record<WhatsAppSenderLimitKey, string>;
+/**
+ * The WhatsApp limits an account runs at: each stored override, floored and
+ * capped at its WhatsApp maximum, else the WhatsApp default. Read from the
+ * overrides alone: a sender's resolved `limits` start from the LinkedIn
+ * defaults (300 s spacing, 150 actions, 1000 reads a day), which a WhatsApp
+ * number must never inherit (OXP-11.3.21).
+ */
+export declare function resolveWhatsAppSenderLimits(overrides: Partial<Record<WhatsAppSenderLimitKey, unknown>> | null | undefined): Record<WhatsAppSenderLimitKey, number>;

package/node_modules/@oxygen/shared/dist/whatsapp-sender-limits.js

@@ -0,0 +1,118 @@
+/**
+ * The WhatsApp sender-limit overlay: the keys a WhatsApp account accepts and
+ * their defaults and hard maximums. One owner for the quota enforcer
+ * (packages/integrations/src/whatsapp-quota.ts), the limits route, the MCP and
+ * CLI surfaces and the web form (OXP-11.3.19): the MCP tool once advertised a
+ * chats_reads_per_day key the route silently dropped and maxima (400 reads,
+ * 7200 s spacing, 3600 s jitter) the quota never allowed.
+ *
+ * Everything stays deliberately small: WhatsApp Web bans on volume.
+ */
+export const WHATSAPP_SENDER_LIMIT_KEYS = [
+    "messages_per_day",
+    "likes_per_day",
+    "messages_reads_per_day",
+    "relations_reads_per_day",
+    "total_actions_per_day",
+    "total_reads_per_day",
+    "min_action_spacing_seconds",
+    "action_spacing_jitter_seconds",
+];
+export const WHATSAPP_SENDER_LIMIT_DEFAULTS = {
+    messages_per_day: 20,
+    likes_per_day: 20,
+    messages_reads_per_day: 200,
+    relations_reads_per_day: 40,
+    total_actions_per_day: 40,
+    total_reads_per_day: 240,
+    min_action_spacing_seconds: 600,
+    action_spacing_jitter_seconds: 300,
+};
+export const WHATSAPP_SENDER_LIMIT_MAXIMUMS = {
+    messages_per_day: 40,
+    likes_per_day: 40,
+    messages_reads_per_day: 600,
+    relations_reads_per_day: 100,
+    total_actions_per_day: 80,
+    total_reads_per_day: 700,
+    min_action_spacing_seconds: 3600,
+    action_spacing_jitter_seconds: 1800,
+};
+/** OXYGEN policy, not a provider-published guarantee of account safety. */
+export const WHATSAPP_WARMUP_RAMP = [
+    { throughDay: 2, cap: 5 },
+    { throughDay: 6, cap: 10 },
+    { throughDay: 13, cap: 15 },
+];
+export const WHATSAPP_WARMUP_FULL_CAP = WHATSAPP_SENDER_LIMIT_MAXIMUMS.messages_per_day;
+export const WHATSAPP_CONNECTION_COOLDOWN_MS = 24 * 60 * 60 * 1000;
+export const WHATSAPP_WARMUP_DAY_BASIS = "elapsed_24_hour_periods";
+export function whatsAppRampCapForDay(day) {
+    return WHATSAPP_WARMUP_RAMP.find((step) => day <= step.throughDay)?.cap ?? WHATSAPP_WARMUP_FULL_CAP;
+}
+export function whatsAppWarmupDay(anchor, now = new Date()) {
+    if (!anchor || !Number.isFinite(anchor.getTime()))
+        return 0;
+    return Math.max(0, Math.floor((now.getTime() - anchor.getTime()) / WHATSAPP_CONNECTION_COOLDOWN_MS));
+}
+/** Poll timestamps never advance this clock; legacy mirrors retain their creation time. */
+export function whatsAppConnectionCooldown(sender, now = new Date()) {
+    const raw = sender.metadata?.whatsapp_session_connected_at ?? sender.createdAt;
+    const at = raw instanceof Date ? raw : typeof raw === "string" ? new Date(raw) : null;
+    if (!at || !Number.isFinite(at.getTime())) {
+        return { session_connected_at: null, outreach_resume_at: null, blocked: true };
+    }
+    const resume = new Date(at.getTime() + WHATSAPP_CONNECTION_COOLDOWN_MS);
+    return { session_connected_at: at.toISOString(), outreach_resume_at: resume.toISOString(), blocked: now < resume };
+}
+/** Stored reads expose the same elapsed-day policy that dispatch enforces. */
+export function whatsAppWarmupStatus(sender, now = new Date()) {
+    const day = whatsAppWarmupDay(sender.warmupStartedAt, now);
+    const configured = resolveWhatsAppSenderLimits(sender.limitOverrides).messages_per_day;
+    const ramp = whatsAppRampCapForDay(day);
+    return {
+        warmup_started_at: sender.warmupStartedAt && Number.isFinite(sender.warmupStartedAt.getTime()) ? sender.warmupStartedAt.toISOString() : null,
+        warmup_day: day,
+        day_basis: WHATSAPP_WARMUP_DAY_BASIS,
+        ramp_cap_today: ramp,
+        configured_daily_cap: configured,
+        effective_daily_cap: Math.min(configured, ramp),
+        ramp: [
+            ...WHATSAPP_WARMUP_RAMP.map((step, index) => ({
+                from_day: index === 0 ? 0 : WHATSAPP_WARMUP_RAMP[index - 1].throughDay + 1,
+                through_day: step.throughDay, messages_per_day: Math.min(configured, step.cap),
+            })),
+            { from_day: 14, through_day: null, messages_per_day: configured },
+        ],
+        connection_cooldown_hours: 24,
+        ...whatsAppConnectionCooldown(sender, now),
+    };
+}
+/** What each WhatsApp limit counts, for MCP and CLI help. */
+export const WHATSAPP_SENDER_LIMIT_NOTES = {
+    messages_per_day: "Daily WhatsApp messages across direct warm traffic and opted-in Sequence actions. Ramp: days 0–2: 5; 3–6: 10; 7–13: 15; 14+: configured cap (20 default, 40 maximum). New outreach waits 24 hours after connection or reconnection.",
+    likes_per_day: "Daily reactions.",
+    messages_reads_per_day: "Chat and message-history reads.",
+    relations_reads_per_day: "Chat-list reads.",
+    total_actions_per_day: "All sends: messages, reactions and edits.",
+    total_reads_per_day: "All reads.",
+    min_action_spacing_seconds: "Minimum seconds between WhatsApp actions.",
+    action_spacing_jitter_seconds: "Random seconds added on top of the spacing floor.",
+};
+/**
+ * The WhatsApp limits an account runs at: each stored override, floored and
+ * capped at its WhatsApp maximum, else the WhatsApp default. Read from the
+ * overrides alone: a sender's resolved `limits` start from the LinkedIn
+ * defaults (300 s spacing, 150 actions, 1000 reads a day), which a WhatsApp
+ * number must never inherit (OXP-11.3.21).
+ */
+export function resolveWhatsAppSenderLimits(overrides) {
+    const limits = { ...WHATSAPP_SENDER_LIMIT_DEFAULTS };
+    for (const key of WHATSAPP_SENDER_LIMIT_KEYS) {
+        const value = overrides?.[key];
+        if (typeof value === "number" && Number.isFinite(value) && value >= 0) {
+            limits[key] = Math.min(Math.floor(value), WHATSAPP_SENDER_LIMIT_MAXIMUMS[key]);
+        }
+    }
+    return limits;
+}

package/node_modules/@oxygen/shared/dist/workflow-trigger-metadata.d.ts

@@ -1,2 +1,17 @@
 export declare const WORKFLOW_TRIGGER_AUTO_PAUSE_METADATA_KEYS: readonly ["consecutive_failure_count", "consecutive_capacity_failure_count", "last_failure_code", "last_failure_at", "auto_paused_at", "auto_pause_reason"];
 export declare function clearWorkflowTriggerAutoPauseMetadata(metadata: Record<string, unknown>): Record<string, unknown>;
+export type WorkflowAutomationPauseCode = "automation_actions_exceeded" | "insufficient_credits";
+export type TriggerAutomationPause = {
+    reason: string;
+    reasonCode?: WorkflowAutomationPauseCode | null;
+    blockedAt: string | null;
+    resumesAt: string | null;
+};
+/** Decode typed refusals and the two controlled messages written before codes were stored. */
+export declare function readWorkflowAutomationPauseCode(code: unknown, reason: unknown): WorkflowAutomationPauseCode | null;
+/** Customer copy never echoes arbitrary persisted error text or invents a credit refill date. */
+export declare function workflowAutomationPauseMessage(pause: {
+    reason?: unknown;
+    reasonCode?: unknown;
+    resumesAt?: unknown;
+}): string;

package/node_modules/@oxygen/shared/dist/workflow-trigger-metadata.js

@@ -13,3 +13,36 @@ const WORKFLOW_TRIGGER_AUTO_PAUSE_METADATA_KEY_SET = new Set(WORKFLOW_TRIGGER_AU
 export function clearWorkflowTriggerAutoPauseMetadata(metadata) {
     return Object.fromEntries(Object.entries(metadata).filter(([key]) => !WORKFLOW_TRIGGER_AUTO_PAUSE_METADATA_KEY_SET.has(key)));
 }
+/** Decode typed refusals and the two controlled messages written before codes were stored. */
+export function readWorkflowAutomationPauseCode(code, reason) {
+    // An older scheduler can replace the reason without replacing a newer
+    // worker's code. Only a controlled legacy reason may override that code.
+    const text = typeof reason === "string" ? reason.trim() : "";
+    if (text === "automation_actions_exceeded" || text === "This workspace has reached its monthly automation action limit.") {
+        return "automation_actions_exceeded";
+    }
+    if (text === "insufficient_credits" || text.startsWith("Not enough credits for this automation work (")) {
+        return "insufficient_credits";
+    }
+    if (code === "automation_actions_exceeded" || code === "insufficient_credits")
+        return code;
+    return null;
+}
+/** Customer copy never echoes arbitrary persisted error text or invents a credit refill date. */
+export function workflowAutomationPauseMessage(pause) {
+    const code = readWorkflowAutomationPauseCode(pause.reasonCode, pause.reason);
+    if (code === "insufficient_credits") {
+        return "Not enough credits for the next scheduled run. Add credits before the next scheduled attempt.";
+    }
+    if (code === "automation_actions_exceeded") {
+        const resume = typeof pause.resumesAt === "string" ? new Date(pause.resumesAt) : null;
+        if (resume && !Number.isNaN(resume.getTime())) {
+            const day = new Intl.DateTimeFormat("en-US", {
+                month: "short", day: "numeric", year: "numeric", timeZone: "UTC",
+            }).format(resume);
+            return `The monthly automation-action allowance is exhausted. Cron runs resume on ${day} when the window resets.`;
+        }
+        return "The monthly automation-action allowance is exhausted. Check billing before the next scheduled attempt.";
+    }
+    return "Automation admission was refused. Check billing before the next scheduled attempt.";
+}

package/node_modules/@oxygen/shared/package.json

@@ -6,16 +6,16 @@
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
   "exports": {
+    "./external-write-policy": {
+      "types": "./dist/external-write-policy.d.ts",
+      "import": "./dist/external-write-policy.js",
+      "default": "./dist/external-write-policy.js"
+    },
     "./knowledge-vault-markdown": {
       "types": "./dist/knowledge-vault-markdown.d.ts",
       "import": "./dist/knowledge-vault-markdown.js",
       "default": "./dist/knowledge-vault-markdown.js"
     },
-    "./vercel-sandbox-fetch": {
-      "types": "./dist/vercel-sandbox-fetch.d.ts",
-      "import": "./dist/vercel-sandbox-fetch.js",
-      "default": "./dist/vercel-sandbox-fetch.js"
-    },
     ".": {
       "types": "./dist/index.d.ts",
       "import": "./dist/index.js",
@@ -201,6 +201,11 @@
       "import": "./dist/pricing-sheet.js",
       "default": "./dist/pricing-sheet.js"
     },
+    "./research-depth": {
+      "types": "./dist/research-depth.d.ts",
+      "import": "./dist/research-depth.js",
+      "default": "./dist/research-depth.js"
+    },
     "./copilot-plan": {
       "types": "./dist/copilot-plan.d.ts",
       "import": "./dist/copilot-plan.js",
@@ -291,6 +296,11 @@
       "types": "./dist/provider-balance-signal.d.ts",
       "import": "./dist/provider-balance-signal.js"
     },
+    "./attempt-provenance": {
+      "types": "./dist/attempt-provenance.d.ts",
+      "import": "./dist/attempt-provenance.js",
+      "default": "./dist/attempt-provenance.js"
+    },
     "./copilot-skills.generated": null
   },
   "dependencies": {}

package/node_modules/@oxygen/workflows/dist/usage-estimate.js

@@ -1,7 +1,8 @@
 // Static automation usage estimation shared by the web workflow page and the
-// worker scheduler's admission gate. The unit is the workflow STEP: every step a
-// live run executes bills one (repricing 2026-09, decision 6.1) and rows written
-// inside a run are free (decision 6.2), so a row-writing step costs one step
+// worker scheduler's admission gate. The unit is the workflow STEP: every
+// billable node a live graph executes bills one (repricing 2026-09, decision
+// 6.1). Control nodes and rows written inside a run are free (decision 6.2),
+// so a row-writing step costs one step
 // however many rows it writes. The per-run count derived from a manifest is a
 // FLOOR, never a projection: recipe code emits one step per checkpoint (loops
 // multiply) and a retried attempt bills again. Surfaces present these numbers as
@@ -167,7 +168,8 @@ function estimateWorkflowGraphActionsFloor(graph) {
     }
     // Nested caps multiply, and two large ones overflow Number's exact range;
     // clamping keeps every downstream product (runs x floor) a finite number.
-    return Math.max(1, Math.min(floor, Number.MAX_SAFE_INTEGER));
+    // Free control-only graphs have no step charge, including in previews.
+    return Math.min(floor, Number.MAX_SAFE_INTEGER);
 }
 export function estimateWorkflowAutomationUsage(manifest, cron) {
     if (!isRecord(manifest))
@@ -320,7 +322,9 @@ export function assessCronCadenceViability(input) {
         return null;
     const actionsPerRunFloor = estimateWorkflowRunAutomationActionsFloor(input.manifest);
     const floorActionsPer30Days = scheduledRunsPer30Days * actionsPerRunFloor;
-    const runsAllowedPer30Days = Math.floor(includedActions / actionsPerRunFloor);
+    const runsAllowedPer30Days = actionsPerRunFloor === 0
+        ? MINUTES_PER_30_DAYS
+        : Math.floor(includedActions / actionsPerRunFloor);
     return {
         scheduledRunsPer30Days,
         actionsPerRunFloor,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oxygen-agent/cli",
-  "version": "1.1011.974",
+  "version": "1.1012.2",
   "private": false,
   "license": "UNLICENSED",
   "type": "module",

package/node_modules/@oxygen/shared/dist/vercel-sandbox-fetch.d.ts

@@ -1,9 +0,0 @@
-/** The Sandbox SDK retries transport failures and 429/5xx responses even for
- * POSTs. Visual execution cannot replay an ambiguously accepted mutation.
- * The SDK recognizes AbortError as non-retryable; outcomeUnknown deliberately
- * distinguishes this transport fence from ordinary caller cancellation. */
-export declare class SandboxMutationOutcomeUnknownError extends Error {
-    readonly outcomeUnknown = true;
-    constructor(options?: ErrorOptions);
-}
-export declare function createSandboxNonReplayFetch(rawFetch?: typeof globalThis.fetch): typeof globalThis.fetch;

package/node_modules/@oxygen/shared/dist/vercel-sandbox-fetch.js

@@ -1,33 +0,0 @@
-/** The Sandbox SDK retries transport failures and 429/5xx responses even for
- * POSTs. Visual execution cannot replay an ambiguously accepted mutation.
- * The SDK recognizes AbortError as non-retryable; outcomeUnknown deliberately
- * distinguishes this transport fence from ordinary caller cancellation. */
-export class SandboxMutationOutcomeUnknownError extends Error {
-    outcomeUnknown = true;
-    constructor(options) {
-        super("Sandbox mutation acceptance requires reconciliation.", options);
-        this.name = "AbortError";
-    }
-}
-export function createSandboxNonReplayFetch(rawFetch = globalThis.fetch) {
-    return async (input, init) => {
-        const method = (init?.method ?? (input instanceof Request ? input.method : "GET")).toUpperCase();
-        if (["GET", "HEAD", "OPTIONS"].includes(method))
-            return rawFetch(input, init);
-        try {
-            // Redirects must not resubmit a mutation either. No request URL, body or
-            // authentication header is copied into the error or telemetry.
-            const response = await rawFetch(input, { ...init, redirect: "error" });
-            if (response.status === 429 || response.status >= 500) {
-                void response.body?.cancel().catch(() => { });
-                throw new SandboxMutationOutcomeUnknownError();
-            }
-            return response;
-        }
-        catch (error) {
-            if (error instanceof SandboxMutationOutcomeUnknownError)
-                throw error;
-            throw new SandboxMutationOutcomeUnknownError({ cause: error });
-        }
-    };
-}