@oxygen-agent/cli 1.1013.15 → 1.1013.38

package/README.md

@@ -34,4 +34,4 @@ oxygen update
 
 For product documentation, visit https://oxygen-agent.com/docs. For support, visit https://oxygen-agent.com.
 
-Version: 1.1013.15
+Version: 1.1013.38

package/dist/index.js

@@ -11928,7 +11928,7 @@ Examples:
         .command("admin")
         .description("Staff-only commands.")
         .addCommand(new Command("kpis")
-        .description("Show the company conversion funnel (visitors → signups → agent connected → CLI/MCP activation → paid, with step rates), self-reported signup-channel attribution, new and positive-paid MRR/ARR, and paid churn separated from trial loss. OXYGEN staff only; workspace admin role alone does not grant access.")
+        .description("Show the company conversion funnel (visitors → signups → activation on any surface, web, CLI or MCP → paid, with step rates and agent connected beside it), self-reported signup-channel attribution, new and positive-paid MRR/ARR, and paid churn separated from trial loss. OXYGEN staff only; workspace admin role alone does not grant access.")
         .addOption(new Option("--range <range>", "Range for acquisition, the funnel's signup cohort, new revenue, and churn; current MRR/ARR and scheduled cancellations remain point-in-time.")
         .choices(["7d", "30d", "90d"])
         .default("30d"))

package/node_modules/@oxygen/cli-ugc/dist/commands.js

@@ -4,7 +4,7 @@ export function registerUgcCommands(program, { request: requestOxygen, handle })
         .command("ugc")
         .description("Manage UGC programs and independent creator participations: voice, posts, approvals, sponsorship and bounded amplification. Requires UGC availability. Start with memberships list in a creator workspace. See the oxygen-ugc skill; JSON reads return web_url for inspection.");
     const groupDescriptions = {
-        programs: "Programs you operate or joined; discover public programs from other brands and apply to them. Lifecycle: create, update, duplicate (settings), archive (stops future work, keeps shared history, reversible with restore) and delete (permanent; only while no creator has ever joined).",
+        programs: "Programs you operate or joined; discover public programs from other brands and apply to or join them. Lifecycle: create, update, duplicate (settings), archive (stops future work, keeps shared history, reversible with restore) and delete (permanent; only while no creator has ever joined).",
         creators: "Creator participations: invite, set one creator's own posting deal, revoke an invite, accept in the creator workspace, connect a sender, change approval authority, or revoke.",
         memberships: "Active programs this creator workspace has joined, each with your deal (posting_target), this period's progress and your published posts. Your own numbers only. Read these before choosing a program for a personal post.",
         applications: "Applications to public programs: the ones you sent as a creator, or the ones your program received as a brand.",
@@ -83,9 +83,15 @@ export function registerUgcCommands(program, { request: requestOxygen, handle })
         .action((options) => handle("ugc creators invitation", options, () => requestOxygen(`/api/cli/ugc?${new URLSearchParams({ view: "invitation", token: String(options.token) })}`)));
     group("programs")
         .command("discover")
-        .description("Public programs from every brand on Oxygen that you can apply to, with each brand's deal and brief excerpt, and whether you already joined or applied. Free, read-only.")
+        .description("Public programs from every brand on Oxygen that you can apply to, with each brand's deal, brief excerpt and join_policy (automatic: you join at once; approval: the brand decides), and whether you already joined or applied. Free, read-only.")
+        .option("--program-id <id>", "Only this program, e.g. the id in a join link (…/ugc?join=<id>).")
         .option("--json", "Print a JSON envelope.")
-        .action((options) => handle("ugc programs discover", options, () => requestOxygen("/api/cli/ugc?view=discover")));
+        .action((options) => handle("ugc programs discover", options, () => {
+        const query = new URLSearchParams({ view: "discover" });
+        if (options.programId)
+            query.set("program_id", String(options.programId));
+        return requestOxygen(`/api/cli/ugc?${query}`);
+    }));
     group("applications")
         .command("list")
         .description("Applications to public programs. Without --program-id: the ones this creator workspace sent, with status. With --program-id: the ones your program received (brand), pending first. Read-only.")
@@ -318,7 +324,13 @@ export function registerUgcCommands(program, { request: requestOxygen, handle })
                 {
                     name: "knowledge_slugs",
                     kind: "array",
-                    description: "Selected live master wiki slugs shared with creators; empty array clears sharing.",
+                    description: "Knowledge file slugs, skills included, shared live with creators and loaded into their AI context (up to 30); empty array clears sharing.",
+                    required: false,
+                },
+                {
+                    name: "knowledge_folder_ids",
+                    kind: "array",
+                    description: "Knowledge folder ids (from knowledge folders list) shared live with creators, skill folders included: files added to them later reach existing creators too (up to 10); empty array clears.",
                     required: false,
                 },
                 {
@@ -330,7 +342,13 @@ export function registerUgcCommands(program, { request: requestOxygen, handle })
                 {
                     name: "visibility",
                     kind: "string",
-                    description: "private (default: invitation only) or public (listed in every creator's Discover, where creators apply and you approve).",
+                    description: "private (default: invitation only) or public (listed in every creator's Discover, where creators apply).",
+                    required: false,
+                },
+                {
+                    name: "join_policy",
+                    kind: "string",
+                    description: "Public programs only: approval (default: you approve each application) or automatic (creators join at once, from Discover or the program's join_url). automatic needs --visibility public.",
                     required: false,
                 },
             ],
@@ -373,7 +391,13 @@ export function registerUgcCommands(program, { request: requestOxygen, handle })
                 {
                     name: "knowledge_slugs",
                     kind: "array",
-                    description: "Selected live master wiki slugs shared with creators; empty array clears sharing.",
+                    description: "Knowledge file slugs, skills included, shared live with creators and loaded into their AI context (up to 30); empty array clears sharing.",
+                    required: false,
+                },
+                {
+                    name: "knowledge_folder_ids",
+                    kind: "array",
+                    description: "Knowledge folder ids (from knowledge folders list) shared live with creators, skill folders included: files added to them later reach existing creators too (up to 10); empty array clears.",
                     required: false,
                 },
                 {
@@ -385,7 +409,13 @@ export function registerUgcCommands(program, { request: requestOxygen, handle })
                 {
                     name: "visibility",
                     kind: "string",
-                    description: "private (default: invitation only) or public (listed in every creator's Discover, where creators apply and you approve).",
+                    description: "private (invitation only; also turns automatic join off) or public (listed in every creator's Discover, where creators apply).",
+                    required: false,
+                },
+                {
+                    name: "join_policy",
+                    kind: "string",
+                    description: "approval (you approve each application) or automatic (creators join at once, from Discover or the program's join_url). automatic needs a public program. programs get shows join_policy and join_url.",
                     required: false,
                 },
                 {
@@ -532,10 +562,10 @@ export function registerUgcCommands(program, { request: requestOxygen, handle })
         {
             action: "application_create",
             command: "programs apply",
-            description: "Apply to a public program from programs discover, with a short note to the brand. The brand approves or declines; approval makes you a creator in the program and emails you. Free: 0 credits.",
+            description: "Join or apply to a public program from programs discover or a join link: with join_policy automatic you join at once (joined: true, with your participation); otherwise the brand approves or declines (joined: false), and approval makes you a creator and emails you. Free: 0 credits.",
             fields: [
-                { name: "program_id", kind: "string", description: "Public program ID from programs discover.", required: true },
-                { name: "message", kind: "string", description: "Your note to the brand (up to 600 characters).", required: true },
+                { name: "program_id", kind: "string", description: "Public program ID from programs discover or a join link (…/ugc?join=<id>).", required: true },
+                { name: "message", kind: "string", description: "Your note to the brand (up to 600 characters). Required unless the program's join_policy is automatic.", required: false },
                 { name: "linkedin_url", kind: "string", description: "Your LinkedIn profile URL; passing it also saves it to your profile. Omit to use the one on your profile (ugc profile get); if neither exists, ask the person rather than guess.", required: false },
             ],
         },

package/node_modules/@oxygen/shared/dist/column-operation.d.ts

@@ -0,0 +1,5 @@
+/** A named column operation constrains execution; it never grants authority. */
+export declare const COLUMN_OPERATION_HEADER = "X-Oxygen-Column-Operation";
+export declare const COLUMN_OPERATIONS: readonly ["ai", "research", "formula", "enrichment", "bind", "lookup"];
+export type ColumnOperation = typeof COLUMN_OPERATIONS[number];
+export declare function isColumnOperation(value: unknown): value is ColumnOperation;

package/node_modules/@oxygen/shared/dist/column-operation.js

@@ -0,0 +1,6 @@
+/** A named column operation constrains execution; it never grants authority. */
+export const COLUMN_OPERATION_HEADER = "X-Oxygen-Column-Operation";
+export const COLUMN_OPERATIONS = ["ai", "research", "formula", "enrichment", "bind", "lookup"];
+export function isColumnOperation(value) {
+    return typeof value === "string" && COLUMN_OPERATIONS.includes(value);
+}

package/node_modules/@oxygen/shared/dist/contracts/customer-operations.js

@@ -27,6 +27,7 @@ const mcpOnly = { generated: { cli: false, mcp: true } };
 const cliOnly = { generated: { cli: true, mcp: false } };
 export const CUSTOMER_OPERATIONS = [
     operation("activation.state", "/api/cli/activation/state", "GET", "activation state", "oxygen_activation_state", "workspace", "Read this workspace's onboarding activation state and next available actions.", {}, [], mcpOnly),
+    operation("activation.checklist", "/api/cli/activation/checklist", "GET", "activation checklist", "oxygen_activation_checklist", "workspace", "Read this workspace's getting-started checklist: leads in a table, a first sequence, a connected sending account and a launched sequence, each with whether it is done and a link to do it; eligible says whether the sidebar shows it. Read-only, 0 credits."),
     operation("api_keys.list", "/api/cli/api-keys", "GET", "api-keys list", "oxygen_api_keys_list", "workspace", "List workspace API keys without revealing their tokens.", {}, [], mcpOnly),
     operation("api_keys.create", "/api/cli/api-keys", "POST", "api-keys create", "oxygen_api_keys_create", "workspace", "Create a workspace API key; requires the caller's personal user session. The token is returned once.", { name: text(), expires_at: text("ISO timestamp; omit for no expiry.") }, [], mcpOnly),
     operation("api_keys.revoke", "/api/cli/api-keys/{key_id}", "DELETE", "api-keys revoke", "oxygen_api_keys_revoke", "workspace", "Revoke a workspace API key; requires the caller's personal user session.", {}, [], mcpOnly),

package/node_modules/@oxygen/shared/dist/future-signup-events.d.ts

@@ -13,6 +13,13 @@ export declare const FUTURE_SIGNUP_LIFECYCLE_PROJECTION_CONTRACT_VERSION: "futur
 export declare const FUTURE_SIGNUP_CRM_DESTINATION = "oxygen_company_crm";
 export declare const FUTURE_SIGNUP_ACTIVATION_COMMANDS: readonly ["agent create", "crm activity log", "crm assert", "crm object add-attr", "crm object create", "crm objects add-attr", "crm objects create", "crm relationships define", "crm relationships upsert", "knowledge page upsert", "publishing posts create", "sequences create", "tables create", "tables duplicate", "tables import-csv", "tables import-file", "tables import-staged", "tables import-url", "tables insert", "tables relate", "tables update", "tables upsert", "workflows apply"];
 export declare function isFutureSignupActivationCommand(command: string): boolean;
+/**
+ * The browser resource routes (`/api/cli/tables/{table}/rows…`) report their own command
+ * names, and the web grid and record panel write through them. Each is the same creation as
+ * its flat twin in the set above, so it counts as that: in the first-record marker and in the
+ * staff KPI board's web activation.
+ */
+export declare const FUTURE_SIGNUP_ACTIVATION_COMMAND_ALIASES: Readonly<Record<string, string>>;
 export declare function futureSignupJourneyId(clerkUserId: string): string;
 export declare function futureSignupFactId(clerkUserId: string): string;
 export declare function futureSignupOperationFactId(operationEventId: string): string;

package/node_modules/@oxygen/shared/dist/future-signup-events.js

@@ -42,6 +42,17 @@ const ACTIVATION_COMMAND_SET = new Set(FUTURE_SIGNUP_ACTIVATION_COMMANDS);
 export function isFutureSignupActivationCommand(command) {
     return ACTIVATION_COMMAND_SET.has(command.trim().toLowerCase());
 }
+/**
+ * The browser resource routes (`/api/cli/tables/{table}/rows…`) report their own command
+ * names, and the web grid and record panel write through them. Each is the same creation as
+ * its flat twin in the set above, so it counts as that: in the first-record marker and in the
+ * staff KPI board's web activation.
+ */
+export const FUTURE_SIGNUP_ACTIVATION_COMMAND_ALIASES = {
+    "tables rows insert": "tables insert",
+    "tables rows edit": "tables update",
+    "tables rows relationship-set": "tables relate",
+};
 export function futureSignupJourneyId(clerkUserId) {
     return `future_signup:v1:clerk_user:${requiredId(clerkUserId, "clerkUserId")}`;
 }

package/node_modules/@oxygen/shared/dist/knowledge-constants.d.ts

@@ -41,3 +41,10 @@ export declare const KNOWLEDGE_STUB_MARKER = "Stub \u2014 fill me.";
 export declare const KNOWLEDGE_BOOTSTRAP_COMMAND = "oxygen knowledge bootstrap";
 export declare const KNOWLEDGE_BOOTSTRAP_AVAILABLE = true;
 export declare const RESERVED_KNOWLEDGE_FRONTMATTER_KEYS: readonly ["oxygen_page", "id", "slug", "type", "title", "status", "tags", "canonical", "summary", "revision", "updated_at", "web_url"];
+/**
+ * A Knowledge folder is a skill when it holds the skill's entry file, named
+ * SKILL (the Agent Skills SKILL.md convention); its other files are the
+ * skill's supporting files. Shared by the program file picker and the reads
+ * that load a creator's program files.
+ */
+export declare function isKnowledgeSkillEntryTitle(title: string): boolean;

package/node_modules/@oxygen/shared/dist/knowledge-constants.js

@@ -159,3 +159,12 @@ export const RESERVED_KNOWLEDGE_FRONTMATTER_KEYS = [
     "updated_at",
     "web_url",
 ];
+/**
+ * A Knowledge folder is a skill when it holds the skill's entry file, named
+ * SKILL (the Agent Skills SKILL.md convention); its other files are the
+ * skill's supporting files. Shared by the program file picker and the reads
+ * that load a creator's program files.
+ */
+export function isKnowledgeSkillEntryTitle(title) {
+    return /^skill(\.md)?$/i.test(title.trim());
+}

package/node_modules/@oxygen/shared/dist/product-analytics-events.d.ts

@@ -44,6 +44,13 @@ export declare const PRODUCT_EVENTS: {
     readonly FIRST_PLAY_STARTED: "first_play_started";
     readonly FIRST_PLAY_STEP_COMPLETED: "first_play_step_completed";
     readonly FIRST_PLAY_COMPLETED: "first_play_completed";
+    /**
+     * The getting-started checklist (2026-10-09): one event per workspace and step, the
+     * first time any surface's read sees it done, gated by a stamp on the organization
+     * (apps/web `lib/activation/getting-started.ts`). `step` is first_leads,
+     * first_sequence, first_account or first_launch.
+     */
+    readonly GETTING_STARTED_STEP_COMPLETED: "getting_started_step_completed";
     /**
      * Usage — what was ASKED for. `mcp_tool_called` used to sit here as the
      * second highest-volume event; it was REPLACED (not joined) by the reserved

package/node_modules/@oxygen/shared/dist/product-analytics-events.js

@@ -44,6 +44,13 @@ export const PRODUCT_EVENTS = {
     FIRST_PLAY_STARTED: "first_play_started",
     FIRST_PLAY_STEP_COMPLETED: "first_play_step_completed",
     FIRST_PLAY_COMPLETED: "first_play_completed",
+    /**
+     * The getting-started checklist (2026-10-09): one event per workspace and step, the
+     * first time any surface's read sees it done, gated by a stamp on the organization
+     * (apps/web `lib/activation/getting-started.ts`). `step` is first_leads,
+     * first_sequence, first_account or first_launch.
+     */
+    GETTING_STARTED_STEP_COMPLETED: "getting_started_step_completed",
     /**
      * Usage — what was ASKED for. `mcp_tool_called` used to sit here as the
      * second highest-volume event; it was REPLACED (not joined) by the reserved

package/node_modules/@oxygen/shared/dist/ugc.d.ts

@@ -8,12 +8,26 @@ export type UgcPostingTarget = {
 };
 export declare const UGC_POSTING_TARGET_MAX = 100;
 export declare const UGC_POSTING_TARGET_PERIODS: readonly ["week", "month", "total"];
+/**
+ * How creators get into a public program (Tim, 2026-10-09): the brand approves
+ * each application, or an application joins at once. Private programs are
+ * joined by invitation only, so they are always `approval`.
+ */
+export declare const UGC_JOIN_POLICIES: readonly ["approval", "automatic"];
+export type UgcJoinPolicy = (typeof UGC_JOIN_POLICIES)[number];
 /**
  * The operator-written creator brief: one page, not a document (Philipp, 2026-09-23;
  * raised from 1,200 on 2026-09-29, when a natural founder brief ran 1,298 and blind
  * operators either trimmed it or left the program without one).
  */
 export declare const UGC_PROGRAM_BRIEF_MAX_CHARS = 4000;
+/**
+ * A creator's live, read-only handle on one file a program shares:
+ * `ugc:<programId>:<page id or slug>`. Every surface that lists or opens a
+ * shared file builds and reads it here, so web, worker and agents agree.
+ */
+export declare function ugcKnowledgeReference(programId: string, key: string): string;
+export declare function isUgcKnowledgeReference(value: string): boolean;
 /** The program's target as its API shape, or null when none is set. */
 export declare function ugcPostingTarget(program: {
     postingTargetCount?: number | null | undefined;
@@ -25,6 +39,8 @@ export type UgcProgram = {
     productUrl: string;
     description: string;
     knowledgePageSlugs: string[];
+    /** Folders shared live with creators (skills included); absent before migration 0482. */
+    knowledgeFolderIds?: string[];
     peerEngagementEnabled?: boolean;
     peerEngagementVersion?: number;
     peerEngagementEffectiveAt?: Date | null;
@@ -35,6 +51,8 @@ export type UgcProgram = {
     /** Posts each creator is expected to publish per period; both null when unset. */
     postingTargetCount?: number | null;
     postingTargetPeriod?: UgcPostingTargetPeriod | null;
+    /** How creators join while the program is public; older rows read as approval. */
+    joinPolicy?: UgcJoinPolicy;
     status: "active" | "archived";
     createdAt: Date;
     updatedAt: Date;

package/node_modules/@oxygen/shared/dist/ugc.js

@@ -1,11 +1,29 @@
 export const UGC_POSTING_TARGET_MAX = 100;
 export const UGC_POSTING_TARGET_PERIODS = ["week", "month", "total"];
+/**
+ * How creators get into a public program (Tim, 2026-10-09): the brand approves
+ * each application, or an application joins at once. Private programs are
+ * joined by invitation only, so they are always `approval`.
+ */
+export const UGC_JOIN_POLICIES = ["approval", "automatic"];
 /**
  * The operator-written creator brief: one page, not a document (Philipp, 2026-09-23;
  * raised from 1,200 on 2026-09-29, when a natural founder brief ran 1,298 and blind
  * operators either trimmed it or left the program without one).
  */
 export const UGC_PROGRAM_BRIEF_MAX_CHARS = 4000;
+const UGC_KNOWLEDGE_REFERENCE_PREFIX = "ugc:";
+/**
+ * A creator's live, read-only handle on one file a program shares:
+ * `ugc:<programId>:<page id or slug>`. Every surface that lists or opens a
+ * shared file builds and reads it here, so web, worker and agents agree.
+ */
+export function ugcKnowledgeReference(programId, key) {
+    return `${UGC_KNOWLEDGE_REFERENCE_PREFIX}${programId}:${key}`;
+}
+export function isUgcKnowledgeReference(value) {
+    return value.startsWith(UGC_KNOWLEDGE_REFERENCE_PREFIX);
+}
 /** The program's target as its API shape, or null when none is set. */
 export function ugcPostingTarget(program) {
     return program.postingTargetCount && program.postingTargetPeriod

package/node_modules/@oxygen/shared/dist/version.generated.d.ts

@@ -1 +1 @@
-export declare const OXYGEN_BUILD_VERSION = "1.1013.15";
+export declare const OXYGEN_BUILD_VERSION = "1.1013.38";

package/node_modules/@oxygen/shared/dist/version.generated.js

@@ -1,2 +1,2 @@
 // GENERATED by scripts/ci/version-stamp.mjs from VERSION + git history. Do not edit; do not commit.
-export const OXYGEN_BUILD_VERSION = "1.1013.15";
+export const OXYGEN_BUILD_VERSION = "1.1013.38";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oxygen-agent/cli",
-  "version": "1.1013.15",
+  "version": "1.1013.38",
   "private": false,
   "license": "UNLICENSED",
   "type": "module",