@oxygen-agent/cli 1.1011.98 → 1.1011.322

package/node_modules/@oxygen/shared/dist/enrichment-intents.js

@@ -31,6 +31,8 @@ export const ENRICHMENT_INTENT_GROUP_LABELS = {
     signal: "Signals",
 };
 const f = (key, label, semanticType, dataType = "text", derived) => ({ key, label, semanticType, dataType, ...(derived ? { derived: true } : {}) });
+/** A field read out of one column's cell, e.g. the email in `work_email_enrichment.value`. */
+const cell = (key, path, label, semanticType, dataType = "text") => ({ key, path, label, semanticType, dataType });
 export const ENRICHMENT_INTENT_TAXONOMY = [
     // ── Person ────────────────────────────────────────────────────────────────
     {
@@ -48,13 +50,13 @@ export const ENRICHMENT_INTENT_TAXONOMY = [
             f("first_name", "First name", "person.first_name"),
             f("last_name", "Last name", "person.last_name"),
             f("job_title", "Job title", "person.job_title"),
-            f("headline", "Headline", "person.headline"),
+            f("person_headline", "Headline", "person.headline"),
             f("current_company", "Current company", null),
             f("current_company_linkedin_url", "Current company LinkedIn URL", "company.linkedin_url"),
             f("job_start_date", "Job start date", null),
-            f("location", "Location", "person.location"),
-            f("bio", "Bio", "person.bio"),
-            f("linkedin_followers", "LinkedIn followers", "person.linkedin_followers", "numeric"),
+            f("person_location", "Location", "person.location"),
+            f("person_bio", "Bio", "person.bio"),
+            f("person_linkedin_followers", "LinkedIn followers", "person.linkedin_followers", "numeric"),
             f("education", "Education", null, "jsonb"),
             f("school_name", "School", null),
         ],
@@ -73,8 +75,9 @@ export const ENRICHMENT_INTENT_TAXONOMY = [
         aliases: ["linkedin url", "linkedin urls", "find linkedin", "profile url", "resolve linkedin", "linkedin for each"],
         inputShapes: ["name_company"],
         outputFields: [
-            f("linkedin_url", "LinkedIn URL", "person.linkedin_url"),
-            f("linkedin_url_confidence", "Match confidence", null),
+            cell("linkedin_url_enrichment", "value", "LinkedIn URL", "person.linkedin_url"),
+            // The identity check's verdict on the hit (D46): a URL that fails it is a miss.
+            cell("linkedin_url_enrichment", "confidence", "Match confidence", null),
         ],
         surfaces: { capability: "linkedin_url", find: "find linkedin", managedFunction: "person_linkedin_url", catalogEntry: "capability:linkedin_url", registryFunction: "enrichment", registryIntent: "find_linkedin_profile" },
         status: "default",
@@ -83,7 +86,7 @@ export const ENRICHMENT_INTENT_TAXONOMY = [
     {
         id: "person_company",
         label: "Person's company",
-        description: "Adds the person's current company, then fills that company's domain, industry and headcount from the same profile.",
+        description: "Adds the person's current company from their profile, then fills that company's domain, industry and headcount.",
         entity: "person",
         group: "person",
         kind: "template",
@@ -94,8 +97,10 @@ export const ENRICHMENT_INTENT_TAXONOMY = [
             f("current_company_linkedin_url", "Company LinkedIn URL", "company.linkedin_url"),
             f("company_domain", "Company domain", "company.domain"),
             f("company_industry", "Industry", "company.industry"),
-            f("company_headcount", "Headcount", "company.employee_count", "numeric"),
+            // Text: the exact count when the lookup has one, otherwise the size band.
+            f("company_headcount", "Headcount", "company.employee_count"),
         ],
+        // The recipe's two preset commands are this row's add path.
         surfaces: { catalogEntry: "recipe:person_company" },
         status: "default",
     },
@@ -111,11 +116,22 @@ export const ENRICHMENT_INTENT_TAXONOMY = [
         aliases: ["work email", "business email", "email address", "find email", "emails for", "email finder", "with emails"],
         inputShapes: ["linkedin_url", "name_domain", "first_last_domain"],
         outputFields: [
-            f("email", "Work email", "person.work_email"),
-            f("email_status", "Deliverability", "person.email_status"),
+            cell("work_email_enrichment", "value", "Work email", "person.work_email"),
+            // verified | catch_all | guessed | unverified, the grade the hit landed with.
+            cell("work_email_enrichment", "confidence", "Deliverability", "person.email_status"),
         ],
         surfaces: { capability: "work_email", find: "find email", managedFunction: "work_email", catalogEntry: "capability:work_email", registryFunction: "enrichment", registryIntent: "find_work_email" },
         status: "default",
+        // Founder, 2026-09-29: one email column; personal email is its option.
+        options: [
+            {
+                id: "include_personal_email",
+                intent: "find_personal_email",
+                label: "Personal email",
+                cliFlag: "--include-personal-email",
+                outputFields: [cell("work_email_enrichment", "personal_email.value", "Personal email", "person.personal_email")],
+            },
+        ],
     },
     {
         id: "find_personal_email",
@@ -127,10 +143,17 @@ export const ENRICHMENT_INTENT_TAXONOMY = [
         rank: 50,
         aliases: ["personal email", "gmail", "home email", "private email", "consumer email"],
         inputShapes: ["linkedin_url"],
-        outputFields: [f("personal_email", "Personal email", "person.personal_email")],
-        surfaces: { capability: "personal_email", find: "find personal-email", managedFunction: "personal_email", catalogEntry: "capability:personal_email", registryFunction: "enrichment", registryIntent: "find_personal_email" },
-        status: "default",
-        decision: "D43",
+        // The address lands in the Work email column's cell: the option is this
+        // row's add path.
+        outputFields: [cell("work_email_enrichment", "personal_email.value", "Personal email", "person.personal_email")],
+        // No column of its own (founder, 2026-09-29): the Work email column's
+        // `include_personal_email` option is its add path. `--capability
+        // personal_email` still seeds one for scripts that used it.
+        surfaces: { find: "find personal-email", managedFunction: "personal_email", catalogEntry: "capability:personal_email", registryFunction: "enrichment", registryIntent: "find_personal_email" },
+        status: "selectable",
+        statusReason: "An option of the Work email column rather than a column of its own: switch on Personal email when you add or edit Work email.",
+        decision: "D59",
+        optionOf: "find_work_email",
     },
     {
         id: "find_phone",
@@ -142,12 +165,10 @@ export const ENRICHMENT_INTENT_TAXONOMY = [
         rank: 60,
         aliases: ["mobile number", "mobile phone", "cell phone", "direct dial", "work phone", "phone number", "phone numbers", "this person's mobile", "find phone", "find mobile", "a mobile"],
         inputShapes: ["linkedin_url", "email", "name_domain"],
-        outputFields: [
-            f("mobile_phone", "Mobile phone", "person.mobile_phone"),
-            f("work_phone", "Work / direct-dial phone", "person.phone"),
-            f("phone_line_type", "Line type", null),
-            f("phone_carrier", "Carrier", null),
-        ],
+        // One number per row. Line type and carrier are the optional verification
+        // step's (`enrich-column run --verify-phone`), written as companion columns
+        // that run creates; the column this row's add path creates never holds them.
+        outputFields: [cell("mobile_phone_enrichment", "value", "Mobile phone", "person.mobile_phone")],
         surfaces: { capability: "mobile_phone", find: "find phone", managedFunction: "mobile_phone", catalogEntry: "capability:mobile_phone", registryFunction: "enrichment", registryIntent: "find_mobile_phone" },
         status: "default",
         decision: "D44",
@@ -162,7 +183,8 @@ export const ENRICHMENT_INTENT_TAXONOMY = [
         rank: 70,
         aliases: ["verify email", "verify these emails", "validate email", "email verification", "deliverability", "bounce check", "catch-all"],
         inputShapes: ["email"],
-        outputFields: [f("email_verdict", "Verdict", "person.email_status")],
+        // The verdict is the cell's value: valid, invalid or catch_all (unknown writes none).
+        outputFields: [cell("email_verification", "value", "Verdict", "person.email_status")],
         surfaces: { capability: "verify_email", find: "verify email", catalogEntry: "capability:verify_email", registryFunction: "enrichment", registryIntent: "verify_email" },
         status: "default",
         decision: "D45",
@@ -177,14 +199,17 @@ export const ENRICHMENT_INTENT_TAXONOMY = [
         rank: 80,
         aliases: ["verify phone", "verify these phone numbers", "validate phone", "line type", "is this a mobile"],
         inputShapes: ["phone"],
+        // The companions the Phone column's verification step writes; the verdict
+        // only gates whether a found number is kept, and nothing stores it.
         outputFields: [
             f("phone_line_type", "Line type", null),
             f("phone_carrier", "Carrier", null),
-            f("phone_verdict", "Verdict", null),
         ],
-        surfaces: { registryFunction: "enrichment", registryIntent: "verify_phone" },
-        status: "selectable",
-        statusReason: "Runs today as the optional verification step of the Phone column; a standalone phone-verification column is a follow-up.",
+        surfaces: {},
+        status: "coming_soon",
+        statusReason: "Coming soon: checking numbers you already hold is not a column yet. The Phone column's optional verification step adds line type and carrier to the numbers it finds.",
+        decision: "D59",
+        candidateProviders: ["clearoutphone"],
     },
     // ── Company ───────────────────────────────────────────────────────────────
     {
@@ -205,14 +230,15 @@ export const ENRICHMENT_INTENT_TAXONOMY = [
     {
         id: "enrich_company:headcount",
         label: "Headcount",
-        description: "Current employee count and size band.",
+        description: "Current employee count, or the size band when no exact count is published.",
         entity: "company",
         group: "company",
         kind: "enrichment",
         rank: 110,
         aliases: ["headcount", "employee count", "how many employees", "company size", "employees"],
         inputShapes: ["domain", "linkedin_url"],
-        outputFields: [f("company_headcount", "Headcount", "company.employee_count", "numeric"), f("company_employee_range", "Size band", "company.employee_range", "text", true)],
+        // One text column: the exact count when the lookup has one, otherwise the band.
+        outputFields: [f("company_headcount", "Headcount", "company.employee_count")],
         surfaces: { preset: "company_enrich", companyFields: ["headcount"], managedFunction: "company_employee_count", catalogEntry: "preset:company_enrich", registryFunction: "enrichment", registryIntent: "enrich_company", registryInputShapes: ["field:headcount"] },
         status: "default",
         decision: "D48",
@@ -235,22 +261,21 @@ export const ENRICHMENT_INTENT_TAXONOMY = [
     {
         id: "enrich_company:company_profile",
         label: "Company profile",
-        description: "Description, founded year, headquarters, company type, specialties, size band and logo from one profile lookup.",
+        description: "Description, founded year and headquarters country from one profile lookup, with the whole profile kept alongside.",
         entity: "company",
         group: "company",
         kind: "profile",
         rank: 130,
         aliases: ["company profile", "company description", "founded year", "headquarters", "company type", "specialties", "company logo", "firmographics"],
         inputShapes: ["domain", "linkedin_url"],
+        // The company bundle's own columns (D56): its payload column holds the
+        // whole profile; HQ address, type, specialties and logo have no column of
+        // their own since the bundle stopped taking field choices.
         outputFields: [
-            f("company_profile", "Company profile", null, "jsonb"),
+            f("company_enrich", "Company profile", null, "jsonb"),
             f("company_description", "Description", "company.description", "text", true),
             f("company_founded_year", "Founded year", "company.founded_year", "numeric", true),
-            f("company_hq_address", "HQ address", "company.hq_location", "text", true),
             f("company_hq_country", "HQ country", "company.hq_country", "text", true),
-            f("company_type", "Company type", null, "text", true),
-            f("company_specialties", "Specialties", "company.specialties", "jsonb", true),
-            f("company_logo_url", "Logo", "company.logo_url", "text", true),
         ],
         surfaces: { preset: "company_enrich", companyFields: ["company_profile", "description", "founded_year", "hq_address", "hq_country", "company_type", "specialties", "logo_url"], managedFunction: "enrich_company", catalogEntry: "preset:company_enrich", registryFunction: "enrichment", registryIntent: "enrich_company", registryInputShapes: ["field:company_profile"] },
         status: "default",
@@ -275,22 +300,26 @@ export const ENRICHMENT_INTENT_TAXONOMY = [
             f("company_investors", "Investors", null, "jsonb", true),
         ],
         // Not in the company bundle (founder, 2026-09-24: one profile lookup, no
-        // opt-in fields); a caller names the fields on `find company`.
-        surfaces: { find: "find company --domain <domain> --fields funding,funding_stage,latest_funding_round,total_funding,funding_rounds_count,investors", companyFields: ["funding", "funding_stage", "latest_funding_round", "total_funding", "funding_rounds_count", "investors"], managedFunction: "company_total_funding", registryFunction: "enrichment", registryIntent: "enrich_company", registryInputShapes: ["field:funding"] },
+        // opt-in fields). Its own bundle since 2026-09-29, the Tech stack shape:
+        // one waterfall column over these fields; `find company` answers one company.
+        surfaces: { preset: "company_funding", find: "find company --domain <domain> --fields funding,funding_stage,latest_funding_round,total_funding,funding_rounds_count,investors", companyFields: ["funding", "funding_stage", "latest_funding_round", "total_funding", "funding_rounds_count", "investors"], managedFunction: "company_total_funding", catalogEntry: "preset:company_funding", registryFunction: "enrichment", registryIntent: "enrich_company", registryInputShapes: ["field:funding"] },
         status: "default",
         decision: "D49",
     },
     {
         id: "enrich_company:technologies",
         label: "Tech stack",
-        description: "Technologies the company runs: from its job postings with confidence and first/last-seen dates, or from its website; plus a yes/no check for technologies you name.",
+        description: "Technologies the company runs: from its job postings with confidence and first/last-seen dates, or from its website.",
         entity: "company",
         group: "company",
         kind: "enrichment",
         rank: 150,
         aliases: ["tech stack", "technologies they use", "technographics", "tools they use", "software they use", "built with"],
         inputShapes: ["domain"],
-        outputFields: [f("company_technologies", "Technologies", "company.technologies", "jsonb"), f("company_technology_check", "Uses named technology", null, "boolean", true)],
+        // The yes/no check for named technologies is `find company --fields
+        // technology_check --check-technologies <names>`, one company at a time: no
+        // preset takes a technology list since 2026-09-24, so the column never has it.
+        outputFields: [f("company_technologies", "Technologies", "company.technologies", "jsonb")],
         surfaces: { preset: "company_tech_stack", companyFields: ["technologies", "technology_check"], managedFunction: "company_tech_stack", catalogEntry: "preset:company_tech_stack", registryFunction: "enrichment", registryIntent: "enrich_company", registryInputShapes: ["field:technologies"] },
         status: "default",
         decision: "D49",
@@ -305,9 +334,9 @@ export const ENRICHMENT_INTENT_TAXONOMY = [
         rank: 160,
         aliases: ["open roles", "job openings", "are they hiring", "is hiring", "job postings", "hiring signals"],
         inputShapes: ["domain", "linkedin_url"],
-        outputFields: [f("company_hiring_signals", "Hiring signals", null, "jsonb"), f("company_job_openings", "Open roles", null, "numeric", true)],
-        // Not in the company bundle (founder, 2026-09-24).
-        surfaces: { find: "find company --domain <domain> --fields hiring_signals,job_openings", companyFields: ["hiring_signals", "job_openings"], managedFunction: "company_job_openings", registryFunction: "enrichment", registryIntent: "enrich_company", registryInputShapes: ["field:hiring_signals"] },
+        outputFields: [f("company_hiring_signals", "Hiring signals", null, "jsonb"), f("company_job_openings", "Open roles", null, "jsonb", true)],
+        // Not in the company bundle (founder, 2026-09-24); its own bundle since 2026-09-29.
+        surfaces: { preset: "company_hiring", find: "find company --domain <domain> --fields hiring_signals,job_openings", companyFields: ["hiring_signals", "job_openings"], managedFunction: "company_job_openings", catalogEntry: "preset:company_hiring", registryFunction: "enrichment", registryIntent: "enrich_company", registryInputShapes: ["field:hiring_signals"] },
         status: "default",
     },
     {
@@ -432,8 +461,8 @@ export const ENRICHMENT_INTENT_TAXONOMY = [
         aliases: ["revenue", "annual revenue", "revenue estimate", "how much do they make", "arr", "reported revenue", "exact revenue", "financials", "company revenue"],
         inputShapes: ["domain"],
         outputFields: [f("company_revenue", "Revenue (estimate)", "company.revenue")],
-        // Not in the company bundle (founder, 2026-09-24).
-        surfaces: { find: "find company --domain <domain> --fields revenue", companyFields: ["revenue"], managedFunction: "company_revenue_estimate", registryFunction: "enrichment", registryIntent: "enrich_company", registryInputShapes: ["field:revenue"] },
+        // Not in the company bundle (founder, 2026-09-24); its own bundle since 2026-09-29.
+        surfaces: { preset: "company_revenue", find: "find company --domain <domain> --fields revenue", companyFields: ["revenue"], managedFunction: "company_revenue_estimate", catalogEntry: "preset:company_revenue", registryFunction: "enrichment", registryIntent: "enrich_company", registryInputShapes: ["field:revenue"] },
         status: "default",
         decision: "D50",
     },
@@ -498,7 +527,13 @@ export const ENRICHMENT_INTENT_TAXONOMY = [
         rank: 300,
         aliases: ["decision maker", "decision makers", "head of sales at", "people at these companies", "contacts at each account", "who should i contact", "find people at company"],
         inputShapes: ["company_domain", "company_linkedin_url"],
-        outputFields: [f("full_name", "Full name", "person.full_name"), f("job_title", "Job title", "person.job_title"), f("linkedin_url", "LinkedIn URL", "person.linkedin_url")],
+        // The people table a table-sourced run creates, each row linked back to its company.
+        outputFields: [
+            f("first_name", "First name", "person.first_name"),
+            f("last_name", "Last name", "person.last_name"),
+            f("title", "Job title", "person.job_title"),
+            f("linkedin_url", "LinkedIn URL", "person.linkedin_url"),
+        ],
         surfaces: { managedFunction: "find_people_at_company", registryFunction: "people_search", registryIntent: "account_contacts" },
         status: "default",
     },
@@ -512,7 +547,7 @@ export const ENRICHMENT_INTENT_TAXONOMY = [
         rank: 310,
         aliases: ["find people matching", "people search", "persona list", "prospect list", "leads matching"],
         inputShapes: ["persona_filters"],
-        outputFields: [f("full_name", "Full name", "person.full_name"), f("job_title", "Job title", "person.job_title"), f("linkedin_url", "LinkedIn URL", "person.linkedin_url")],
+        outputFields: [f("full_name", "Full name", "person.full_name"), f("title", "Job title", "person.job_title"), f("linkedin_url", "LinkedIn URL", "person.linkedin_url")],
         surfaces: { registryFunction: "people_search", registryIntent: "persona_search" },
         status: "default",
     },

package/node_modules/@oxygen/shared/dist/feature-gates.d.ts

@@ -80,6 +80,11 @@ export type FeatureGateResolution = {
  *   instead of a sending seat (`packages/shared/src/credit-gate.ts`). A wrong
  *   "on" while commitments do not bill every connectable kind would admit
  *   accounts nothing ever charges.
+ * - OXYGEN_MCP_EVENTS_ENABLED — (b). Lets workspace events leave OXYGEN as
+ *   signed POSTs to third-party callback URLs and lets those events start
+ *   unattended ChatGPT runs (`packages/shared/src/mcp-events-enabled.ts`, ADR
+ *   0030 §11). It stays off in production until the per-connection credit
+ *   ceiling exists; a remote "on" would bypass that decision.
  *
  * The list is a guard, not a to-do: none of these is migrated, and
  * `findFeatureGateRegistryViolations` fails the build's tests if one ever is.

package/node_modules/@oxygen/shared/dist/feature-gates.js

@@ -71,6 +71,11 @@
  *   instead of a sending seat (`packages/shared/src/credit-gate.ts`). A wrong
  *   "on" while commitments do not bill every connectable kind would admit
  *   accounts nothing ever charges.
+ * - OXYGEN_MCP_EVENTS_ENABLED — (b). Lets workspace events leave OXYGEN as
+ *   signed POSTs to third-party callback URLs and lets those events start
+ *   unattended ChatGPT runs (`packages/shared/src/mcp-events-enabled.ts`, ADR
+ *   0030 §11). It stays off in production until the per-connection credit
+ *   ceiling exists; a remote "on" would bypass that decision.
  *
  * The list is a guard, not a to-do: none of these is migrated, and
  * `findFeatureGateRegistryViolations` fails the build's tests if one ever is.
@@ -87,6 +92,7 @@ export const NEVER_FLAGGABLE = [
     "OXYGEN_BYOK_DAILY_CAPS",
     "OXYGEN_REPRICING_2026_09_EFFECTIVE_AT",
     "OXYGEN_CREDIT_GATE_ENABLED",
+    "OXYGEN_MCP_EVENTS_ENABLED",
 ];
 /**
  * Every server-side gate resolved through PostHog.

package/node_modules/@oxygen/shared/dist/knowledge-bootstrap.d.ts

@@ -3,7 +3,8 @@
  *
  * WHAT IT IS. Exactly once in a workspace's life, OXYGEN researches the customer's
  * OWN company from the domain the creator typed when the workspace was created
- * (control-DB `organizations.iconDomain`), then fills the typed company profile
+ * (control-DB `organizations.iconDomain`), or from the company LinkedIn page they
+ * typed instead when the company has no website, then fills the typed company profile
  * (`ox_context.company_profile`) and writes one cited wiki page. A founder who
  * signs up should not face an empty Knowledge Graph and have to type their own
  * positioning back at us; every grounded AI action downstream (message drafts, AI
@@ -25,8 +26,9 @@
  *                    sub-ceiling on the provider (external-money) half. The cap bounds
  *                    OXYGEN's own money now, and it is the same number.
  *   2. AUTHORIZED  — it runs only for a workspace whose creator typed the company
- *                    website into the REQUIRED field at workspace creation; that
- *                    entry is recorded as `knowledge_bootstrap_consent` (source
+ *                    website, or its LinkedIn company page when it has no website
+ *                    (Philipp, 2026-09-30), into the REQUIRED field at workspace
+ *                    creation; that entry is recorded as `knowledge_bootstrap_consent` (source
  *                    `workspace_creation`) and read FAIL-CLOSED, so a workspace that
  *                    predates the field is never researched and a personal-email
  *                    signup with no website never reaches the worker. We never
@@ -86,6 +88,17 @@ export declare const KNOWLEDGE_BOOTSTRAP_MAX_PAGES_READ = 5;
  * it. This bounds latency only; the credit ceilings above remain the money guard.
  */
 export declare const KNOWLEDGE_BOOTSTRAP_PROVIDER_TIMEOUT_MS = 45000;
+/**
+ * The company-page lookup's budget when a LinkedIn company page, not a domain, names
+ * the company. That lookup is then the pass's only company evidence, and there is no
+ * website to fall back on. The managed lane measured successful company lookups at
+ * p90 37.1 s, p99 62.2 s and max 68.6 s over 3,138 calls to 2026-09-20
+ * (packages/providers/src/scraper/managed.ts), so the 45 s leg budget would abandon
+ * real answers. 90 s matches that lane's own abort budget. A pass with a website
+ * behind the page can overrun the step deadline in the worst case. The abort check
+ * between legs then ends it as `step_aborted`, and the credit ceilings are unchanged.
+ */
+export declare const KNOWLEDGE_BOOTSTRAP_COMPANY_PAGE_LOOKUP_TIMEOUT_MS = 90000;
 /** Fleet-wide kill switch, matching OXYGEN_KNOWLEDGE_RETRIEVAL/AUTO_SOURCES_DISABLED. */
 export declare const KNOWLEDGE_BOOTSTRAP_DISABLED_ENV_VAR = "OXYGEN_KNOWLEDGE_BOOTSTRAP_DISABLED";
 /**
@@ -140,7 +153,11 @@ export type KnowledgeBootstrapMarker = {
     run_id: string | null;
     /** Managed credits actually spent, across every phase. Never exceeds the cap. */
     credits_used: number;
-    /** The workspace domain researched (from organizations.iconDomain). */
+    /**
+     * The workspace domain researched (from organizations.iconDomain). Null (stored
+     * as "", the key the execution and onboarding checks compare on) for a company
+     * named by its LinkedIn page, which `linkedin_url` then carries.
+     */
     domain: string | null;
     /** Why a pass was skipped/partial/failed — a short machine-ish token, not prose. */
     reason: string | null;
@@ -163,7 +180,8 @@ export type KnowledgeBootstrapMarker = {
      * Canonical company LinkedIn URL the requester supplied, when they supplied one.
      * The same hint `/setup` stores at KNOWLEDGE_BOOTSTRAP_LINKEDIN_METADATA_KEY, but
      * carried per-request so a one-off `--linkedin` never mutates the workspace's
-     * recorded answer.
+     * recorded answer. For a company named by its LinkedIn page it is the company
+     * itself: the page the automatic pass was claimed for.
      */
     linkedin_url?: string | null;
 };
@@ -180,11 +198,32 @@ export type KnowledgeBootstrapMarker = {
  * nobody recorded.
  */
 export declare const KNOWLEDGE_BOOTSTRAP_CONSENT_METADATA_KEY = "knowledge_bootstrap_consent";
+/**
+ * Control-DB `organizations.metadata` key for the consent of a workspace named by its
+ * LinkedIn company page because the company has no website (Philipp, 2026-09-30).
+ *
+ * A key of its own, not a field on the consent above, on purpose. A worker built before
+ * it existed reads only that key, and a consent there with a page and no domain would
+ * send it to its icon fallback (a domain derived from the creator's email address, so
+ * possibly another company) or to a durable `no_company_domain` skip. Under this key the
+ * same worker finds no consent at all: a transient `not_consented` that writes nothing,
+ * until a worker that reads pages takes the pass. A rolling deploy serves new web code
+ * well before the worker roles move, so this is a real window, not a hypothetical one.
+ * Writers set exactly one of the two keys.
+ */
+export declare const KNOWLEDGE_BOOTSTRAP_COMPANY_PAGE_CONSENT_METADATA_KEY = "knowledge_bootstrap_company_page_consent";
 /** The recorded consent, exactly as stored under the key above. */
 export type KnowledgeBootstrapConsent = {
     /** New workspace creation may authorize bounded creator-profile research. */
     scope?: "company_and_creator";
     domain?: string;
+    /**
+     * The company LinkedIn page the creator named INSTEAD of a website, canonical
+     * `/company/` form. Present only on a company-page consent
+     * (`KNOWLEDGE_BOOTSTRAP_COMPANY_PAGE_CONSENT_METADATA_KEY`), which never carries a
+     * domain; it is then the company the research pass starts from.
+     */
+    company_linkedin_url?: string;
     /** Canonical `/in/` profile supplied by this exact creator; never company evidence. */
     creator_linkedin_url?: string;
     /** ISO timestamp consent was recorded. Must parse; a marker that does not is not consent. */
@@ -222,11 +261,21 @@ export declare function readKnowledgeBootstrapConsent(metadata: unknown): Knowle
  * personal profile as if it were the company is exactly the confidently-wrong write
  * the bootstrap's domain gate exists to prevent.
  *
- * Optional by design. Its absence is normal and costs nothing: the research pass
- * resolves the company from the domain and pays for a LinkedIn lookup only when it
- * has a page worth looking up.
+ * Optional when the workspace named a domain: the research pass then resolves the
+ * company from the domain. For a company with no website it is the only company
+ * identity the workspace has, and the consent carries the same page as the anchor
+ * the research starts from.
  */
 export declare const KNOWLEDGE_BOOTSTRAP_LINKEDIN_METADATA_KEY = "company_linkedin_url";
+/**
+ * The company LinkedIn page a workspace names instead of a website, as canonical
+ * `https://www.linkedin.com/company/<slug>`, or null. A pasted sub-page
+ * (`/company/acme/about/`) resolves to its company; `/school/` pages and personal
+ * `/in/` profiles do not, because the research provider looks a company up by
+ * exactly this form, and researching a person as if they were the company is the
+ * confidently-wrong write the authorization exists to prevent.
+ */
+export declare function normalizeBootstrapCompanyLinkedinUrl(value: unknown): string | null;
 /**
  * How long a `running` marker may sit before the workspace is reported as STUCK.
  *

package/node_modules/@oxygen/shared/dist/knowledge-bootstrap.js

@@ -3,7 +3,8 @@
  *
  * WHAT IT IS. Exactly once in a workspace's life, OXYGEN researches the customer's
  * OWN company from the domain the creator typed when the workspace was created
- * (control-DB `organizations.iconDomain`), then fills the typed company profile
+ * (control-DB `organizations.iconDomain`), or from the company LinkedIn page they
+ * typed instead when the company has no website, then fills the typed company profile
  * (`ox_context.company_profile`) and writes one cited wiki page. A founder who
  * signs up should not face an empty Knowledge Graph and have to type their own
  * positioning back at us; every grounded AI action downstream (message drafts, AI
@@ -25,8 +26,9 @@
  *                    sub-ceiling on the provider (external-money) half. The cap bounds
  *                    OXYGEN's own money now, and it is the same number.
  *   2. AUTHORIZED  — it runs only for a workspace whose creator typed the company
- *                    website into the REQUIRED field at workspace creation; that
- *                    entry is recorded as `knowledge_bootstrap_consent` (source
+ *                    website, or its LinkedIn company page when it has no website
+ *                    (Philipp, 2026-09-30), into the REQUIRED field at workspace
+ *                    creation; that entry is recorded as `knowledge_bootstrap_consent` (source
  *                    `workspace_creation`) and read FAIL-CLOSED, so a workspace that
  *                    predates the field is never researched and a personal-email
  *                    signup with no website never reaches the worker. We never
@@ -52,6 +54,7 @@
  * Professional person evidence remains actor-scoped; ICP/offers are hypotheses.
  * The provider sub-cap covers every external research leg, including fallbacks.
  */
+import { normalizeLinkedinCompanyUrl } from "./dnc-identities.js";
 import { normalizeLinkedinProfileUrl } from "./linkedin-url.js";
 /** Hard ceiling on managed credits ONE workspace bootstrap may spend, all phases. */
 export const KNOWLEDGE_BOOTSTRAP_MAX_CREDITS = 30;
@@ -86,6 +89,17 @@ export const KNOWLEDGE_BOOTSTRAP_MAX_PAGES_READ = 5;
  * it. This bounds latency only; the credit ceilings above remain the money guard.
  */
 export const KNOWLEDGE_BOOTSTRAP_PROVIDER_TIMEOUT_MS = 45_000;
+/**
+ * The company-page lookup's budget when a LinkedIn company page, not a domain, names
+ * the company. That lookup is then the pass's only company evidence, and there is no
+ * website to fall back on. The managed lane measured successful company lookups at
+ * p90 37.1 s, p99 62.2 s and max 68.6 s over 3,138 calls to 2026-09-20
+ * (packages/providers/src/scraper/managed.ts), so the 45 s leg budget would abandon
+ * real answers. 90 s matches that lane's own abort budget. A pass with a website
+ * behind the page can overrun the step deadline in the worst case. The abort check
+ * between legs then ends it as `step_aborted`, and the credit ceilings are unchanged.
+ */
+export const KNOWLEDGE_BOOTSTRAP_COMPANY_PAGE_LOOKUP_TIMEOUT_MS = 90_000;
 /** Fleet-wide kill switch, matching OXYGEN_KNOWLEDGE_RETRIEVAL/AUTO_SOURCES_DISABLED. */
 export const KNOWLEDGE_BOOTSTRAP_DISABLED_ENV_VAR = "OXYGEN_KNOWLEDGE_BOOTSTRAP_DISABLED";
 /**
@@ -149,6 +163,20 @@ export function isKnowledgeBootstrapStatus(value) {
  * nobody recorded.
  */
 export const KNOWLEDGE_BOOTSTRAP_CONSENT_METADATA_KEY = "knowledge_bootstrap_consent";
+/**
+ * Control-DB `organizations.metadata` key for the consent of a workspace named by its
+ * LinkedIn company page because the company has no website (Philipp, 2026-09-30).
+ *
+ * A key of its own, not a field on the consent above, on purpose. A worker built before
+ * it existed reads only that key, and a consent there with a page and no domain would
+ * send it to its icon fallback (a domain derived from the creator's email address, so
+ * possibly another company) or to a durable `no_company_domain` skip. Under this key the
+ * same worker finds no consent at all: a transient `not_consented` that writes nothing,
+ * until a worker that reads pages takes the pass. A rolling deploy serves new web code
+ * well before the worker roles move, so this is a real window, not a hypothetical one.
+ * Writers set exactly one of the two keys.
+ */
+export const KNOWLEDGE_BOOTSTRAP_COMPANY_PAGE_CONSENT_METADATA_KEY = "knowledge_bootstrap_company_page_consent";
 /**
  * Read consent out of an organization's control-DB metadata blob, FAIL-CLOSED.
  *
@@ -163,7 +191,22 @@ export const KNOWLEDGE_BOOTSTRAP_CONSENT_METADATA_KEY = "knowledge_bootstrap_con
 export function readKnowledgeBootstrapConsent(metadata) {
     if (!metadata || typeof metadata !== "object" || Array.isArray(metadata))
         return null;
-    const raw = metadata[KNOWLEDGE_BOOTSTRAP_CONSENT_METADATA_KEY];
+    const record = metadata;
+    const domainConsent = readGrant(record[KNOWLEDGE_BOOTSTRAP_CONSENT_METADATA_KEY]);
+    if (domainConsent) {
+        const domain = domainConsent.record.domain;
+        return { ...domainConsent.grant, ...(typeof domain === "string" ? { domain } : {}) };
+    }
+    // Fail closed here too: a page consent counts only as the creator-scoped grant it is
+    // written as, naming a page that still resolves to a company. Anything less is no
+    // consent, never a reason to fall back to a domain nobody named.
+    const pageConsent = readGrant(record[KNOWLEDGE_BOOTSTRAP_COMPANY_PAGE_CONSENT_METADATA_KEY]);
+    const page = normalizeBootstrapCompanyLinkedinUrl(pageConsent?.record.company_linkedin_url);
+    if (!pageConsent || pageConsent.grant.scope !== "company_and_creator" || !page)
+        return null;
+    return { ...pageConsent.grant, company_linkedin_url: page };
+}
+function readGrant(raw) {
     if (!raw || typeof raw !== "object" || Array.isArray(raw))
         return null;
     const record = raw;
@@ -182,12 +225,14 @@ export function readKnowledgeBootstrapConsent(metadata) {
         ? normalizeLinkedinProfileUrl(record.creator_linkedin_url)?.dispatchUrl ?? null
         : null;
     return {
-        granted_at: grantedAt,
-        ...(scope ? { scope } : {}),
-        ...(typeof record.domain === "string" ? { domain: record.domain } : {}),
-        ...(creatorLinkedinUrl ? { creator_linkedin_url: creatorLinkedinUrl } : {}),
-        source: typeof record.source === "string" && record.source.length > 0 ? record.source : null,
-        granted_by_clerk_user_id: grantedBy,
+        record,
+        grant: {
+            granted_at: grantedAt,
+            ...(scope ? { scope } : {}),
+            ...(creatorLinkedinUrl ? { creator_linkedin_url: creatorLinkedinUrl } : {}),
+            source: typeof record.source === "string" && record.source.length > 0 ? record.source : null,
+            granted_by_clerk_user_id: grantedBy,
+        },
     };
 }
 /**
@@ -203,11 +248,27 @@ export function readKnowledgeBootstrapConsent(metadata) {
  * personal profile as if it were the company is exactly the confidently-wrong write
  * the bootstrap's domain gate exists to prevent.
  *
- * Optional by design. Its absence is normal and costs nothing: the research pass
- * resolves the company from the domain and pays for a LinkedIn lookup only when it
- * has a page worth looking up.
+ * Optional when the workspace named a domain: the research pass then resolves the
+ * company from the domain. For a company with no website it is the only company
+ * identity the workspace has, and the consent carries the same page as the anchor
+ * the research starts from.
  */
 export const KNOWLEDGE_BOOTSTRAP_LINKEDIN_METADATA_KEY = "company_linkedin_url";
+/**
+ * The company LinkedIn page a workspace names instead of a website, as canonical
+ * `https://www.linkedin.com/company/<slug>`, or null. A pasted sub-page
+ * (`/company/acme/about/`) resolves to its company; `/school/` pages and personal
+ * `/in/` profiles do not, because the research provider looks a company up by
+ * exactly this form, and researching a person as if they were the company is the
+ * confidently-wrong write the authorization exists to prevent.
+ */
+export function normalizeBootstrapCompanyLinkedinUrl(value) {
+    if (typeof value !== "string")
+        return null;
+    const companyRoot = value.trim().replace(/(\/company\/[^/?#]+)\/[^?#]*/i, "$1");
+    const canonical = normalizeLinkedinCompanyUrl(companyRoot);
+    return canonical?.startsWith("https://www.linkedin.com/company/") ? canonical : null;
+}
 /**
  * How long a `running` marker may sit before the workspace is reported as STUCK.
  *

package/node_modules/@oxygen/shared/dist/linkedin-url.d.ts

@@ -25,6 +25,13 @@ export type LinkedinUrlNormalization = {
     dispatchUrl: string;
 } | null;
 export declare function normalizeLinkedinProfileUrl(raw: string | null | undefined): LinkedinUrlNormalization;
+/**
+ * True when a profile handle is a member PROVIDER id (`ACoAA…` / `ACwAA…`), not a
+ * public identifier. People search answers some members with `/in/<id>` instead
+ * of their public URL; such a URL never equals the member's public profile URL
+ * from any other source, so it cannot serve as a LinkedIn URL identity key.
+ */
+export declare function isLinkedinMemberIdHandle(handle: string | null | undefined): boolean;
 /**
  * Canonicalize any LinkedIn PROFILE REFERENCE a customer might put in a cell:
  * a full `/in/` URL, a scheme-less `linkedin.com/in/…`, or a BARE public handle

package/node_modules/@oxygen/shared/dist/linkedin-url.js

@@ -75,6 +75,15 @@ export function normalizeLinkedinProfileUrl(raw) {
 // too (`ACOAA…`, the shape a spreadsheet UPPER() or a CRM export produces), so
 // such an id is named as unrecognized at enrollment instead of dying at send.
 const LINKEDIN_MEMBER_ID_PREFIX_RE = /^AC[OoWw]/;
+/**
+ * True when a profile handle is a member PROVIDER id (`ACoAA…` / `ACwAA…`), not a
+ * public identifier. People search answers some members with `/in/<id>` instead
+ * of their public URL; such a URL never equals the member's public profile URL
+ * from any other source, so it cannot serve as a LinkedIn URL identity key.
+ */
+export function isLinkedinMemberIdHandle(handle) {
+    return typeof handle === "string" && LINKEDIN_MEMBER_ID_PREFIX_RE.test(handle.trim());
+}
 // LinkedIn's public identifier ("vanity slug") charset: letters, digits and
 // hyphens only, 3–100 characters, never leading with a hyphen. Deliberately
 // NARROWER than "any non-URL string" — no `.`, `@`, `_`, `:`, `/` or whitespace

package/node_modules/@oxygen/shared/dist/log.d.ts

@@ -18,6 +18,7 @@ export declare function withLogContext<T>(ctx: LogContext, fn: () => T): T;
 export declare function enterLogContext(ctx: LogContext): void;
 export declare function logLevelForHttpStatus(status: number): LogLevel;
 export type LogSink = (record: Record<string, unknown>) => void;
+export declare function takeWebLogVolumeCount(): number;
 export declare function setLogSink(sink: LogSink | null): void;
 export declare function getLogSink(): LogSink | null;
 export declare function log(level: LogLevel, msg: string, fields?: Record<string, unknown>): void;