@oxygen-agent/cli 1.1014.1035 → 1.1014.1087

package/README.md

@@ -34,4 +34,4 @@ oxygen update
 
 For product documentation, visit https://oxygen-agent.com/docs. For support, visit https://oxygen-agent.com.
 
-Version: 1.1014.1035
+Version: 1.1014.1087

package/dist/command-manifest.js

@@ -262,6 +262,7 @@ const PREVIEW_BY_DEFAULT_COMMANDS = new Set([
     "domains dns apply",
     "mailboxes warmup enable",
     "mailboxes warmup google",
+    "deliverability workspace-test run",
     "deliverability placement-test run",
     "deliverability placement-test send",
     "managed-inboxes recover",

package/dist/commands/deliverability.js

@@ -1,3 +1,4 @@
+import { registerWorkspacePlacementCommands } from "../workspace-placement-commands.js";
 import { requestOxygen } from "../http-client.js";
 import { readOption } from "../util.js";
 import { Command, CommanderError, Option } from "commander";
@@ -95,4 +96,5 @@ export function registerDeliverabilityFamily(program, handleAsyncAction) {
         .action(async (id, options) => {
         await handleAsyncAction("deliverability placement-test get", options, () => requestOxygen(`/api/cli/deliverability/placement-tests/${encodeURIComponent(id)}`));
     }))));
+    registerWorkspacePlacementCommands(program.commands.find(c => c.name() === "deliverability"), handleAsyncAction);
 }

package/dist/commands/sequences.js

@@ -1593,6 +1593,7 @@ export function registerSequencesFamily(program, handleAsyncAction) {
         .option("--senders <ids>", "Comma-separated LinkedIn or WhatsApp sender account ids (or connection / Unipile ids; `senders list` / `whatsapp accounts` list them). Optional at create; enroll and start require at least one when the journey has LinkedIn or WhatsApp steps (attach later with `sequences update --senders`).")
         .option("--table <id>", "Source table id or slug whose rows supply {{column}} template values.")
         .option("--activation-id <id>", "Guided authored LinkedIn draft: bind the creator's activation and exact First leads Table. Free; retries reuse the native draft.")
+        .option("--activation-revision <n>", "Reviewed current activation revision, a positive safe integer; requires --activation-id. Native first creation checks it before mutation.")
         .option("--from-table <id>", "Alias of --table: the source table id or slug this sequence draws its leads and {{column}} values from.")
         .option("--enroll", "After creating the sequence, immediately enroll every row of the bound table (same as running `sequences enroll --from-table` next). Requires --table/--from-table. Enrolling spends no credits and sends nothing.")
         .option("--url-column <key>", "Column key holding each lead's LinkedIn URL/provider id.")
@@ -1649,6 +1650,11 @@ export function registerSequencesFamily(program, handleAsyncAction) {
             // so it names the same thing here rather than being a second
             // concept; `--table` stays for every existing script.
             const sourceTable = readOption(options.fromTable) ?? readOption(options.table);
+            const activationId = readOption(options.activationId);
+            const activationRevision = readPositiveInt(options.activationRevision);
+            if (options.activationRevision !== undefined && (!activationId || !Number.isSafeInteger(activationRevision))) {
+                throw new OxygenError("invalid_input", "--activation-revision needs --activation-id and a positive safe integer from current onboarding.", { exitCode: 1 });
+            }
             if (options.enroll && !sourceTable) {
                 throw new Error("--enroll needs a source table: pass --from-table <table> (or --table <table>).");
             }
@@ -1662,7 +1668,8 @@ export function registerSequencesFamily(program, handleAsyncAction) {
                     ...(senders.length > 0 ? { senders } : {}),
                     ...(tags.length > 0 ? { tags } : {}),
                     ...(sourceTable ? { source_table_id: sourceTable } : {}),
-                    ...(readOption(options.activationId) ? { activation_id: readOption(options.activationId) } : {}),
+                    ...(activationId ? { activation_id: activationId } : {}),
+                    ...(activationRevision !== undefined ? { activation_revision: activationRevision } : {}),
                     ...(options.enroll ? { enroll_from_table: true } : {}),
                     ...(readOption(options.urlColumn) ? { linkedin_url_column_key: readOption(options.urlColumn) } : {}),
                     ...(email ? { email } : {}),
@@ -1709,6 +1716,9 @@ export function registerSequencesFamily(program, handleAsyncAction) {
         .description("Update a sequence. Journey structure/channels/email binding are draft-only so revised scope receives a fresh launch approval; a started sequence may only re-time waits it already has (clear a delay by zeroing it, never by deleting the step — enrollments track position by index); sender pools can change while draft or paused; launch caps change through `sequences start` after first start. Name, throttles, the sending schedule, tags, the unsubscribe option (off by default), and open/click tracking toggles remain editable as allowed by the server. Pass only the fields you want to change.")
         .addHelpText("after", "\nSenders: email_send.sender_profile_id sends one email from any inbox of a selected person (a lead already assigned to that person keeps its own inbox), and email_send.sender_mailbox_id from one exact inbox of a selected sender; a LinkedIn step's sender_profile_id sends it from a selected person (invite, message, inmail and withdraw_invite share one or none). Omit both to use the lead's assigned person. An email whose From changes needs its own subject_template. `sequences start <sequence>` without --approved shows who sends each step; nothing changes.\n")
         .argument("<sequence>", "Sequence id or slug.")
+        .option("--expected-revision <revision>", "Exact sequence_revision from sequences get; stale edits refuse. Not launch approval.")
+        .option("--activation-id <id>", "Guided activation UUID; requires --activation-revision and --expected-revision.")
+        .option("--activation-revision <revision>", "Current guided activation revision; requires --activation-id and --expected-revision.")
         .option("--name <name>", "New human-readable sequence name.")
         .option("--steps-file <path>", "Path to a JSON file: { \"steps\": [...] } replacing the journey. Once started, only wait timing may change: same steps, same order (zero a delay, never delete its step). Copy supports {{column}} interpolation; every step also takes {{sender_first_name}} / {{sender_last_name}} / {{sender_full_name}} for the person who sends it, and email adds {{sender_email}} (a same-named row column wins). A `branch` can also route on the lead's data with a data leaf { has_column: \"email\" } (true when that row_values column is non-empty; present:false for \"missing\").")
         .option("--channels <list>", "Draft only: comma-separated channels: linkedin,email,whatsapp,call,crm.")
@@ -1771,6 +1781,18 @@ export function registerSequencesFamily(program, handleAsyncAction) {
         .action(async (sequence, options) => {
         await handleAsyncAction("sequences update", options, () => {
             const body = {};
+            const expectedRevision = options.expectedRevision;
+            const activationId = options.activationId;
+            const activationRevision = readPositiveInt(options.activationRevision);
+            if (options.activationRevision !== undefined && activationRevision === undefined) {
+                throw new OxygenError("invalid_number", "Expected a positive activation revision.", { exitCode: 1 });
+            }
+            if (expectedRevision !== undefined)
+                body.expected_revision = expectedRevision;
+            if (activationId !== undefined)
+                body.activation_id = activationId;
+            if (activationRevision !== undefined)
+                body.activation_revision = activationRevision;
             const name = readOption(options.name);
             if (name)
                 body.name = name;
@@ -1834,9 +1856,15 @@ export function registerSequencesFamily(program, handleAsyncAction) {
         .description("Get a sequence's definition, senders, status, and credit usage. --readiness adds the launch check — whether it CAN go live, why not, and the mailbox pool it would send from — without touching it; `sequences preview <sequence>` (a read; 0 credits) shows who sends each step (sender_journey).")
         .argument("<sequence>", "Sequence id or slug.")
         .option("--readiness", "Add launch_readiness: blockers (e.g. a missing send cap), warnings, and the resolved sending mailboxes. Read-only — sends nothing, changes nothing, spends nothing. Skips the LinkedIn rendered-copy scan, which stays in `sequences start` without --approved.")
+        .addOption(new Option("--include <fields>", "Add readiness or your retained guided_proposal, comma-separated. Reading a proposal does not apply it or start the campaign.")
+        .choices(["readiness", "guided_proposal", "readiness,guided_proposal", "guided_proposal,readiness"]))
         .option("--json", "Print a JSON envelope.")
         .action(async (sequence, options) => {
-        await handleAsyncAction("sequences get", options, () => requestOxygen(`/api/cli/sequences/${encodeURIComponent(sequence)}${options.readiness ? "?include=readiness" : ""}`));
+        const include = new Set(options.include?.split(",") ?? []);
+        if (options.readiness)
+            include.add("readiness");
+        const query = include.size ? `?include=${[...include].join(",")}` : "";
+        await handleAsyncAction("sequences get", options, () => requestOxygen(`/api/cli/sequences/${encodeURIComponent(sequence)}${query}`));
     }))
         .addCommand(new Command("enroll")
         .description("Enroll leads into a sequence. Enrolling spends no credits. An active sequence contacts the new leads on its next dispatch tick; a draft or paused one holds them until `sequences start`. --from-table enrolls every not-yet-enrolled row of the sequence's bound source table (up to 500 per run; the response's from_table.has_more says whether to run again) — for a LinkedIn sequence the profile is read from the bound table's URL column, where a full /in/ URL and a bare public handle carrying a hyphen or digit (ada-lovelace) both work, so no pre-resolved provider ids are needed; each handle Oxygen canonicalized is echoed in linkedin_handles_canonicalized (value + url) to check before start, and every row that still cannot be resolved is named in unresolved_linkedin_lead_details (row, value, reason) rather than only counted in unresolved_linkedin_leads. In a LinkedIn + email sequence a row with no usable profile but a recipient email is still enrolled for the email steps (its LinkedIn steps are skipped as no_linkedin_profile, a connection wait passes at once and a connection branch takes its not-connected path) and is listed in linkedin_unavailable_lead_details instead; unresolved_linkedin_leads names only rows that were not enrolled. --leads-file enrolls an explicit JSON list { leads: [...] }: for an email/WhatsApp sequence a lead identified only by an email (row_values.email) or phone (row_values.phone) is auto-filed as a row in the sequence's leads table (auto-creating and binding one if there is none), deduped by email/phone, so no table has to exist first (the table is returned as leads_table with a web_url); a LinkedIn + email sequence auto-files an email-only lead the same way; a LinkedIn lead needs a lead_provider_id, a lead_profile_url (a /in/ URL or a bare public handle with a hyphen or digit), or a table_row_id whose row carries one of those. A CRM-only lead needs a stable table_row_id or lead_provider_id in addition to mapped row_values; a HubSpot contact id used in crm_task associations identifies the destination record, not the Oxygen enrollment. When the sequence is bound to a source table, a lead's table_row_id auto-snapshots that row's columns (incl. AI/tool outputs) into row_values for {{column}} copy — explicit row_values win. Idempotent per table row (and per email/phone for auto-filed leads). WhatsApp-only campaigns also enroll each normalized number once across all source rows and enrollment statuses; mixed campaigns keep other channels and skip duplicate WhatsApp actions. Duplicate protection defaults to this campaign; --whatsapp-duplicate-scope on create/update can additionally block identical copy across all campaigns. The org do-not-contact list is always enforced; --exclude-contacted and --suppress-list add further opt-in skips (reported under skipped_by_reason). Leads already owned by a sender account (from an earlier real send) are routed back to that same account; a lead owned by a sender NOT on this sequence is skipped (bound_to_other_sender) unless --ignore-sender-bindings. This enrolls into an OXYGEN Sequence; to put the same rows into a campaign you already run in Smartlead, Instantly, lemlist or HeyReach, use `sequences push-external`. esp.pool_scope identifies the active workspace inventory used for routing and strict_deferred_leads estimates; these estimates omit sequence sender restrictions, readiness and daily limits. A zero estimate does not guarantee readiness. Review sequences preview before launch.")

package/dist/credentials.js

@@ -3,7 +3,7 @@ import { existsSync, mkdirSync, readFileSync, renameSync, rmSync, writeFileSync,
 import { homedir } from "node:os";
 import { dirname, join } from "node:path";
 import { promisify } from "node:util";
-import { OxygenError } from "@oxygen/shared";
+import { OxygenError } from "@oxygen/shared/cli-result";
 import { sameApiOrigin } from "./runtime.js";
 const execFileAsync = promisify(execFile);
 const SERVICE_NAME = "oxygen-cli";

package/dist/customer-operation-commands.js

@@ -1,3 +1,4 @@
+import { createHash } from "node:crypto";
 import { readFile, writeFile } from "node:fs/promises";
 import { basename, extname, resolve } from "node:path";
 import { OxygenError } from "@oxygen/shared/cli-result";
@@ -31,8 +32,50 @@ const GROUP_PURPOSES = {
     "notetaker notes": "Edit saved meeting notes.",
     onboarding: "Save workspace discovery choices and resume guided onboarding.",
     "onboarding activation": "Resume your dev-pilot activation and its native resources.",
+    "onboarding journey": "Resume private onboarding, save answers and navigate using native revisions.",
+    "onboarding first-sourcing": "Read and review the native first-leads search before approving a capped run.",
+};
+const GUIDED_JOURNEY_FLAGS = {
+    activationId: { flag: "activation-id", help: "Exact activation ID returned by onboarding activation start or status." },
+    revision: { help: "Current activation revision returned by onboarding journey get; refresh after a conflict." },
+    mutation_id: { help: "Stable ID for this exact change; reuse only to recover the same request." },
+    step: { help: "Current saved step from onboarding journey get; use the revision you reviewed." },
+    answers: { help: "JSON object keyed by the current step, containing that step's reviewed answers." },
+    paused: { help: "Pause at this saved step; --no-paused resumes without advancing.", negateHelp: "Resume the saved step and tour position without changing visited history." },
+    tour_active_stop: { help: "Exact tour panel to return to, separate from visited history; only at the tour step." },
+};
+const GUIDED_FIRST_SOURCING_FLAGS = {
+    activationId: GUIDED_JOURNEY_FLAGS.activationId,
+    revision: { help: "Current activation revision from onboarding first-sourcing get; refresh and review after a conflict." },
+    generation: { help: "Current journey generation from onboarding journey get; supply revision, generation and --timezone-hint together for nightly defaults." },
+    timezoneHint: { flag: "timezone-hint", aliases: ["timezoneHint"], help: "Provisional customer/browser IANA timezone; supply revision, generation and --timezone-hint together. Does not confirm or save a schedule." },
+    "bounds.targetCount": { flag: "bounds-target-count", help: "Positive lead target, at most 50000; must match the stored preview for run." },
+    "bounds.maxPages": { flag: "bounds-max-pages", help: "Positive provider-page ceiling, at most 1000; must match the stored preview for run." },
+    "bounds.maxCredits": { flag: "bounds-max-credits", help: "Positive credit ceiling; native current pricing and the stored preview apply." },
+    previewId: { flag: "preview-id", help: "Exact stored previewId returned by onboarding first-sourcing preview; pass unchanged." },
+    previewDigest: { flag: "preview-digest", help: "Exact lowercase previewDigest from the stored native preview; pass unchanged." },
+    approved: { help: "Approve this exact stored preview and its bounds; native billing, access and current revision still apply." },
 };
 const OPERATION_FLAGS = {
+    "onboarding first-sourcing get": GUIDED_FIRST_SOURCING_FLAGS,
+    "onboarding first-sourcing preview": GUIDED_FIRST_SOURCING_FLAGS,
+    "onboarding first-sourcing run": GUIDED_FIRST_SOURCING_FLAGS,
+    "onboarding company-files upload": {
+        activationId: GUIDED_JOURNEY_FLAGS.activationId,
+        revision: GUIDED_JOURNEY_FLAGS.revision,
+        upload_id: { help: "Stable UUID for these exact original file bytes; reuse only to recover the same upload." },
+        sha256: { help: "Lowercase SHA-256 of the original file bytes; native storage verifies it." },
+        size_bytes: { help: "Exact original file byte length, before base64 encoding." },
+    },
+    "onboarding journey get": GUIDED_JOURNEY_FLAGS,
+    "onboarding journey save": GUIDED_JOURNEY_FLAGS,
+    "onboarding journey advance": GUIDED_JOURNEY_FLAGS,
+    "onboarding journey back": GUIDED_JOURNEY_FLAGS,
+    "onboarding journey restart": GUIDED_JOURNEY_FLAGS,
+    "onboarding journey navigation": GUIDED_JOURNEY_FLAGS,
+    "onboarding journey prospects-preview": GUIDED_JOURNEY_FLAGS,
+    "onboarding journey billing": GUIDED_JOURNEY_FLAGS,
+    "onboarding journey checkout": GUIDED_JOURNEY_FLAGS,
     "agent session activate": {
         revision: { help: "Current session revision returned by agent session preview; must match the reviewed configuration." },
         preview_token: { help: "Exact preview_token from agent session preview, binding reviewed resources, actions, schedule and credit caps. Pass unchanged; --approved is separate. Preview again after changes." },
@@ -85,12 +128,14 @@ export function registerCustomerOperationCommands(program, handle) {
         if (spec.binary)
             command.requiredOption("--output <path>", "Write the exact downloaded bytes to this local file.");
         if (spec.multipart)
-            command.option("--file <path>", "Upload bytes from this local file. Omit the base64 flag; file name and content type default from the path.");
+            command.option("--file <path>", "Upload bytes from this local file. Omit the base64 flag; file name and content type default from the path."
+                + (spec.multipart.fileMetadata ? " Original SHA-256 and size are derived; explicit assertions must match." : ""));
         for (const name of contract.required ?? []) {
             const property = contract.properties[name];
             const flag = `--${overlay[name]?.flag ?? name.replace(/_/g, "-")}`;
             const option = command.options.find((candidate) => candidate.long === flag || candidate.long === `${flag}-json`);
-            const multipartAlternative = spec.multipart && [spec.multipart.contentField, spec.multipart.nameField, spec.multipart.typeField].includes(name);
+            const multipartAlternative = spec.multipart && [spec.multipart.contentField, spec.multipart.nameField, spec.multipart.typeField,
+                ...(spec.multipart.fileMetadata ? [spec.multipart.fileMetadata.sha256Field, spec.multipart.fileMetadata.sizeBytesField] : [])].includes(name);
             if (multipartAlternative) {
                 if (option)
                     option.description = `${option.description} Required unless supplied by --file.`.trim();
@@ -113,9 +158,22 @@ export function registerCustomerOperationCommands(program, handle) {
                     if (input[spec.multipart.contentField] !== undefined)
                         throw new OxygenError("invalid_request", "Choose --file or the base64 content flag, not both.", { exitCode: 2 });
                     const filePath = String(options.file);
-                    input[spec.multipart.contentField] = (await readFile(filePath)).toString("base64");
+                    const bytes = await readFile(filePath);
+                    input[spec.multipart.contentField] = bytes.toString("base64");
                     input[spec.multipart.nameField] ??= basename(filePath);
                     input[spec.multipart.typeField] ??= uploadContentType(filePath);
+                    const metadata = spec.multipart.fileMetadata;
+                    if (metadata) {
+                        const digest = createHash("sha256").update(bytes).digest("hex");
+                        if (input[metadata.sha256Field] !== undefined && input[metadata.sha256Field] !== digest) {
+                            throw new OxygenError("invalid_request", `${metadata.sha256Field} must match the original file bytes.`, { exitCode: 2 });
+                        }
+                        if (input[metadata.sizeBytesField] !== undefined && input[metadata.sizeBytesField] !== bytes.length) {
+                            throw new OxygenError("invalid_request", `${metadata.sizeBytesField} must equal the original decoded byte length.`, { exitCode: 2 });
+                        }
+                        input[metadata.sha256Field] ??= digest;
+                        input[metadata.sizeBytesField] ??= bytes.length;
+                    }
                 }
                 const issues = operationInputIssues(spec, input);
                 if (issues.length)
@@ -188,6 +246,7 @@ function uploadContentType(filePath) {
     const types = {
         ".png": "image/png", ".jpg": "image/jpeg", ".jpeg": "image/jpeg", ".webp": "image/webp", ".svg": "image/svg+xml",
         ".csv": "text/csv", ".json": "application/json", ".jsonl": "application/x-ndjson",
+        ".txt": "text/plain", ".md": "text/markdown", ".markdown": "text/markdown", ".pdf": "application/pdf",
         ".xlsx": "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet",
     };
     return types[extname(filePath).toLowerCase()] ?? "application/octet-stream";

package/dist/help.js

@@ -170,7 +170,7 @@ export function applyOxygenHelp(program, binaryName, docsUrl = "https://oxygen-a
         // first-touch surface names the skill that teaches the GTM loops.
         `  2. ${binaryName} skills install --json      load the skills that teach the GTM loops (automatic after login)`,
         "     Add --project to keep the skills inside the current project, including confined agent sessions.",
-        `  3. ${binaryName} context resolve --purpose onboarding --json   load workspace context and the next reads`,
+        `  3. ${binaryName} context resolve --purpose onboarding --json   load context; may migrate the workspace schema`,
         // Populated workspaces need the same first-win guidance as empty ones.
         `     Getting started? ${binaryName} skills get oxygen-onboarding --json`,
         "     It sharpens your offer and ICP, then ranks the warmest leads you can reach now.",

package/dist/index.d.ts

@@ -1,99 +1,2 @@
-import "./admin-lead-magnet-commands.js";
-import "./admin-primary-providers-render.js";
-import "./auto-update.js";
-import "./browser-login.js";
-import "./cli-values.js";
-import "./column-decision-options.js";
-import "./column-run-notices.js";
-import "./command-manifest.js";
-import "./compact-list-flags.js";
-import "./connectors-commands.js";
-import "./contract-flags.js";
-import "./credentials.js";
-import "./crm-file-read-commands.js";
-import "./crm-support-flags.js";
-import "./customer-operation-commands.js";
-import "./database-query-flags.js";
-import "./diagnostics.js";
-import "./feed-read-flags.js";
-import "./functions-commands.js";
-import "./help.js";
-import "./home-standup.js";
-import "./http-client.js";
-import "./inbox-needs-reply-notice.js";
-import "./json-output.js";
-import "./knowledge-mirror.js";
-import "./knowledge-repository-commands.js";
-import "./local-custom-http-column.js";
-import "./mailbox-ramp-notice.js";
-import "./run-wait.js";
-import "./runtime.js";
-import "./search-ai-filter-notice.js";
-import "./sender-limits-flags.js";
-import "./session.js";
-import "./settings-commands.js";
-import "./skills.js";
-import "./streamed-file-import.js";
-import "./tool-catalog-detail-command.js";
-import "./tool-catalog-search-window.js";
-import "./transcript.js";
-import "./ugc-commands.js";
-import "./update.js";
-import "./util.js";
-import "./visual-commands.js";
-import "./whatsapp-account-flags.js";
-import "./workflow-plan-limit-notices.js";
-import "./workflow-run-list-flags.js";
-import "./workspace-skill-commands.js";
-import "./workspace-utility-flags.js";
-import "@oxygen/recipe-sdk";
-import "@oxygen/shared";
-import "@oxygen/shared/billing";
-import "@oxygen/shared/company-reply-pause";
-import "@oxygen/shared/contracts/billing-owner-read";
-import "@oxygen/shared/contracts/copilot-sessions";
-import "@oxygen/shared/contracts/crm-enrichment-read";
-import "@oxygen/shared/contracts/database";
-import "@oxygen/shared/contracts/inbox-drafts-read";
-import "@oxygen/shared/contracts/integration-connect";
-import "@oxygen/shared/contracts/knowledge-content-reads";
-import "@oxygen/shared/contracts/limits-read";
-import "@oxygen/shared/contracts/linkedin-invites-list";
-import "@oxygen/shared/contracts/operations";
-import "@oxygen/shared/contracts/pipedrive-catalog";
-import "@oxygen/shared/contracts/publishing-reads";
-import "@oxygen/shared/contracts/sender-limits";
-import "@oxygen/shared/contracts/sequence-analytics-read";
-import "@oxygen/shared/contracts/sequence-list";
-import "@oxygen/shared/contracts/table-feed-update";
-import "@oxygen/shared/contracts/table-list";
-import "@oxygen/shared/contracts/table-query-grid";
-import "@oxygen/shared/contracts/table-query-raw";
-import "@oxygen/shared/contracts/whatsapp-reads";
-import "@oxygen/shared/contracts/workflow-run-list";
-import "@oxygen/shared/copilot-questions";
-import "@oxygen/shared/data-suppliers";
-import "@oxygen/shared/file-import";
-import "@oxygen/shared/knowledge-constants";
-import "@oxygen/shared/linkedin-sequences";
-import "@oxygen/shared/mailbox-import";
-import "@oxygen/shared/plan-band";
-import "@oxygen/shared/pricing-sheet";
-import "@oxygen/shared/select-options";
-import "@oxygen/shared/sequence-lifecycle";
-import "@oxygen/shared/table-field-types";
-import "@oxygen/shared/table-filter-operators";
-import "@oxygen/shared/table-run-summary";
-import "@oxygen/shared/user-capability-routing";
-import "@oxygen/workflows";
-import "commander";
-import "node:child_process";
-import "node:crypto";
-import "node:fs";
-import "node:os";
-import "node:path";
-import "node:process";
-import "node:readline/promises";
-import "node:url";
 export { createProgram } from "./command-families/program.js";
 export { formatDisabledWorkflowNotices } from "./command-support.js";

package/dist/index.js

@@ -1,101 +1,3 @@
-// Preserve pre-extraction runtime import initialization order.
-import "./admin-lead-magnet-commands.js";
-import "./admin-primary-providers-render.js";
-import "./auto-update.js";
-import "./browser-login.js";
-import "./cli-values.js";
-import "./column-decision-options.js";
-import "./column-run-notices.js";
-import "./command-manifest.js";
-import "./compact-list-flags.js";
-import "./connectors-commands.js";
-import "./contract-flags.js";
-import "./credentials.js";
-import "./crm-file-read-commands.js";
-import "./crm-support-flags.js";
-import "./customer-operation-commands.js";
-import "./database-query-flags.js";
-import "./diagnostics.js";
-import "./feed-read-flags.js";
-import "./functions-commands.js";
-import "./help.js";
-import "./home-standup.js";
-import "./http-client.js";
-import "./inbox-needs-reply-notice.js";
-import "./json-output.js";
-import "./knowledge-mirror.js";
-import "./knowledge-repository-commands.js";
-import "./local-custom-http-column.js";
-import "./mailbox-ramp-notice.js";
-import "./run-wait.js";
-import "./runtime.js";
-import "./search-ai-filter-notice.js";
-import "./sender-limits-flags.js";
-import "./session.js";
-import "./settings-commands.js";
-import "./skills.js";
-import "./streamed-file-import.js";
-import "./tool-catalog-detail-command.js";
-import "./tool-catalog-search-window.js";
-import "./transcript.js";
-import "./ugc-commands.js";
-import "./update.js";
-import "./util.js";
-import "./visual-commands.js";
-import "./whatsapp-account-flags.js";
-import "./workflow-plan-limit-notices.js";
-import "./workflow-run-list-flags.js";
-import "./workspace-skill-commands.js";
-import "./workspace-utility-flags.js";
-import "@oxygen/recipe-sdk";
-import "@oxygen/shared";
-import "@oxygen/shared/billing";
-import "@oxygen/shared/company-reply-pause";
-import "@oxygen/shared/contracts/billing-owner-read";
-import "@oxygen/shared/contracts/copilot-sessions";
-import "@oxygen/shared/contracts/crm-enrichment-read";
-import "@oxygen/shared/contracts/database";
-import "@oxygen/shared/contracts/inbox-drafts-read";
-import "@oxygen/shared/contracts/integration-connect";
-import "@oxygen/shared/contracts/knowledge-content-reads";
-import "@oxygen/shared/contracts/limits-read";
-import "@oxygen/shared/contracts/linkedin-invites-list";
-import "@oxygen/shared/contracts/operations";
-import "@oxygen/shared/contracts/pipedrive-catalog";
-import "@oxygen/shared/contracts/publishing-reads";
-import "@oxygen/shared/contracts/sender-limits";
-import "@oxygen/shared/contracts/sequence-analytics-read";
-import "@oxygen/shared/contracts/sequence-list";
-import "@oxygen/shared/contracts/table-feed-update";
-import "@oxygen/shared/contracts/table-list";
-import "@oxygen/shared/contracts/table-query-grid";
-import "@oxygen/shared/contracts/table-query-raw";
-import "@oxygen/shared/contracts/whatsapp-reads";
-import "@oxygen/shared/contracts/workflow-run-list";
-import "@oxygen/shared/copilot-questions";
-import "@oxygen/shared/data-suppliers";
-import "@oxygen/shared/file-import";
-import "@oxygen/shared/knowledge-constants";
-import "@oxygen/shared/linkedin-sequences";
-import "@oxygen/shared/mailbox-import";
-import "@oxygen/shared/plan-band";
-import "@oxygen/shared/pricing-sheet";
-import "@oxygen/shared/select-options";
-import "@oxygen/shared/sequence-lifecycle";
-import "@oxygen/shared/table-field-types";
-import "@oxygen/shared/table-filter-operators";
-import "@oxygen/shared/table-run-summary";
-import "@oxygen/shared/user-capability-routing";
-import "@oxygen/workflows";
-import "commander";
-import "node:child_process";
-import "node:crypto";
-import "node:fs";
-import "node:os";
-import "node:path";
-import "node:process";
-import "node:readline/promises";
-import "node:url";
 import { maybeScheduleBackgroundUpdate } from "./auto-update.js";
 import { emitCliFailure, writeJson } from "./cli-output.js";
 import { createProgram } from "./command-families/program.js";

package/dist/workspace-placement-commands.d.ts

@@ -0,0 +1,3 @@
+import { Command } from "commander";
+import { type ExtractedCommandActionHandler } from "./command-support.js";
+export declare function registerWorkspacePlacementCommands(root: Command, handle: ExtractedCommandActionHandler): void;

package/dist/workspace-placement-commands.js

@@ -0,0 +1,32 @@
+import { Command } from "commander";
+import { resolve } from "node:path";
+import { readJsonFileValue } from "./command-support.js";
+import { requestOxygen } from "./http-client.js";
+export function registerWorkspacePlacementCommands(root, handle) {
+    root.addCommand(new Command("workspace-test").description("Compare email copy placement in this workspace's connected Google/Microsoft receiving inboxes: Gmail Primary/Promotions and Microsoft Focused/Other. Native sends, 0 additional credits; preview and exact message approval required.")
+        .addCommand(new Command("run").description("Preview a workspace-only copy test. Input JSON: sender_mailbox_ids, receiver_mailbox_ids, variants [{key,subject,body_text,body_html?}]. Approve the same input with returned request_id/plan_hash/rendered_at and max_live_sends. Up to five variants and 50 messages; never buys provider tests or resumes campaigns.")
+        .requiredOption("--input <file>", "JSON test input file.").option("--approved", "Execute the exact reviewed matrix.")
+        .option("--rendered-at <timestamp>", "Rendering timestamp returned by preview; reuse when approving.").option("--tracking-opens", "Preview with open tracking on verified workspace domain.").option("--tracking-clicks", "Preview with click tracking on verified workspace domain.")
+        .option("--request-id <id>", "Request UUID from preview.").option("--plan <hash>", "Exact preview plan hash.").option("--max-live-sends <n>", "Maximum approved diagnostic emails (1–50).")
+        .option("--preview-cursor <id>", "Read the next manifest page using the same input, request ID and rendering time.").option("--preview-limit <n>", "Preview manifest page size (1–20); never use with approval.")
+        .option("--preview-probe-id <id>", "Read exact rendered copy for a preview probe; reuse request ID and rendering time.").option("--preview-part <part>", "body_text or body_html.").option("--preview-offset <n>", "Unicode character offset returned by copy preview.").option("--preview-copy-limit <n>", "Copy page size (1–3000 characters).")
+        .option("--allow-paused-probe", "Explicitly allow diagnostic sends from paused senders, preserving pauses.").option("--json", "Print JSON.")
+        .action(async (options) => handle("deliverability workspace-test run", options, () => {
+        const input = readJsonFileValue(resolve(options.input), "--input");
+        if (!input || typeof input !== "object" || Array.isArray(input))
+            throw new Error("--input must contain a JSON object.");
+        return requestOxygen("/api/cli/deliverability/workspace-tests", { method: "POST", body: { ...input, approved: options.approved === true,
+                ...(options.approved ? { approved: true } : {}), ...(options.requestId ? { request_id: options.requestId } : {}),
+                ...(options.plan ? { plan_hash: options.plan } : {}), ...(options.renderedAt ? { rendered_at: options.renderedAt } : {}), ...(options.trackingOpens ? { tracking_opens: true } : {}), ...(options.trackingClicks ? { tracking_clicks: true } : {}), ...(options.maxLiveSends ? { max_live_sends: Number(options.maxLiveSends) } : {}),
+                ...(options.allowPausedProbe ? { allow_paused_probe: true } : {}),
+                ...(options.previewCursor ? { preview_cursor: options.previewCursor } : {}), ...(options.previewLimit !== undefined ? { preview_limit: Number(options.previewLimit) } : {}),
+                ...(options.previewProbeId ? { preview_probe_id: options.previewProbeId } : {}), ...(options.previewPart ? { preview_part: options.previewPart } : {}), ...(options.previewOffset !== undefined ? { preview_offset: Number(options.previewOffset) } : {}), ...(options.previewCopyLimit !== undefined ? { preview_copy_limit: Number(options.previewCopyLimit) } : {}) } });
+    })))
+        .addCommand(new Command("copy").description("Read a Sequence email step and its copy variants for workspace placement testing. Resolve personalization before preview; no send or charge.").argument("<sequence-id>").option("--step-index <n>", "Zero-based email step index.", "0").option("--json", "Print JSON.")
+        .action(async (id, options) => handle("deliverability workspace-test copy", options, () => requestOxygen(`/api/cli/deliverability/workspace-tests/copy?sequence_id=${encodeURIComponent(id)}&step_index=${encodeURIComponent(options.stepIndex)}`))))
+        .addCommand(new Command("list").description("Read this workspace's recent copy/Primary/Focused placement tests. Saved state only: no send, provider refresh or charge.").option("--cursor <id>", "Next cursor returned by list.").option("--limit <n>", "Tests per page (1–20).").option("--json", "Print JSON.")
+        .action(async (options) => handle("deliverability workspace-test list", options, () => requestOxygen(`/api/cli/deliverability/workspace-tests?${new URLSearchParams({ ...options.cursor ? { cursor: options.cursor } : {}, ...options.limit !== undefined ? { limit: String(options.limit) } : {} })}`))))
+        .addCommand(new Command("get").description("Read one workspace copy test: variant comparison, per-receiver category, partial results and unknowns. No send or provider refresh.").argument("<id>").option("--cursor <id>", "Next receiver-result cursor.").option("--limit <n>", "Receiver results per page (1–20).")
+        .option("--probe <id>", "Read this probe's frozen message copy.").option("--part <part>", "body_text or body_html.").option("--offset <n>", "Returned Unicode character offset.").option("--copy-limit <n>", "Copy page size (1–3000 characters).").option("--json", "Print JSON.")
+        .action(async (id, options) => handle("deliverability workspace-test get", options, () => requestOxygen(`/api/cli/deliverability/workspace-tests/${encodeURIComponent(id)}?${new URLSearchParams({ ...options.cursor ? { cursor: options.cursor } : {}, ...options.limit !== undefined ? { limit: String(options.limit) } : {}, ...options.probe ? { probe_id: options.probe } : {}, ...options.part ? { body_part: options.part } : {}, ...options.offset !== undefined ? { offset: String(options.offset) } : {}, ...options.copyLimit !== undefined ? { copy_limit: String(options.copyLimit) } : {} })}`)))));
+}

package/node_modules/@oxygen/shared/dist/agent-sessions.js

@@ -132,7 +132,7 @@ export function validateAgentSessionConfig(config, requireResources = true) {
     if (config.guided_activation !== undefined && (!config.teammate_routine
         || !config.guided_activation || !/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(config.guided_activation.activation_id)
         || !["lead_scan", "morning_briefing"].includes(config.guided_activation.purpose))) {
-        fail("Guided routines require an activation, purpose and private Oxygent chat.");
+        fail("Guided routines require an activation, purpose and bound Oxygent chat.");
     }
     if (config.guided_activation?.purpose === "lead_scan") {
         const policy = config.guided_activation.scan_policy;

package/node_modules/@oxygen/shared/dist/agents-enabled.js

@@ -1,4 +1,4 @@
-import { resolveDeployEnv } from "./deploy-env.js";
+import { isProductionData, resolveDeployEnv } from "./deploy-env.js";
 /**
  * The production workspaces Agents, Oxygents and their routines may run in:
  * staff workspaces only (Tim, 2026-10-16). Adding a customer's workspace opens
@@ -40,7 +40,10 @@ export function agentsEnabledIn(organizationId, env = process.env) {
 function deploymentTier(env) {
     try {
         const { tier } = resolveDeployEnv(env);
-        return tier === "prod" || tier === "shadow" ? tier : "other";
+        if (tier === "prod" || tier === "shadow")
+            return tier;
+        // Managed dev telemetry can still carry production data via NODE_ENV.
+        return isProductionData(env) ? "prod" : "other";
     }
     catch {
         return "unknown";

package/node_modules/@oxygen/shared/dist/capability-discovery.js

@@ -1553,8 +1553,17 @@ function isOxygentChatIntent(query) {
         return true;
     if (/\b(chatgpt|claude|codex|oauth|mcp|connectors?|connected apps?)\b/.test(query))
         return false;
-    return /\bai (?:assistants?|teammates?)\b/.test(query)
-        && /\b(chats?|conversations?|histor(?:y|ies)|visibility|shared|private|personal)\b/.test(query);
+    const chatPrivacy = /\b(chats?|conversations?|histor(?:y|ies)|visibility|shared|private|personal)\b/.test(query);
+    if (/\bai (?:assistants?|teammates?)\b/.test(query))
+        return chatPrivacy;
+    // Human membership asks must not re-enter Oxygent mutations through the
+    // generic fallback after the user-facing routine router excludes them.
+    // Explicit Oxygent/AI teammate access above keeps its native owner.
+    if (/\b(?:invite|members?|membership|permissions?|roles?|human|colleague|coworker)\b/.test(query))
+        return false;
+    return /\b(?:assistants?|teammates?)\b/.test(query)
+        && /\b(chats?|conversations?|histor(?:y|ies)|visibility)\b/.test(query)
+        && /\b(shared|private|personal|workspace|team|visibility)\b/.test(query);
 }
 /**
  * The apps a person connected with OAuth and where each one works: "make
@@ -2409,9 +2418,10 @@ function isPublishingPostIntent(query) {
 }
 function recommendationsFor(card, query) {
     if (card.id === "agents" && isOxygentChatIntent(query)) {
+        const continuing = /\b(continue|resume|talk)\b|\b(?:read|send|post)\b.*\b(?:chat|conversation|message)s?\b/.test(query);
         return {
-            tools: ["oxygen_oxygents_create", "oxygen_oxygents_update", "oxygen_oxygents_access", "oxygen_oxygents_get", "oxygen_oxygents_message"],
-            commands: ["oxygents create", "oxygents update", "oxygents access", "oxygents get", "oxygents message"],
+            tools: ["oxygen_oxygents_create", "oxygen_oxygents_update", "oxygen_oxygents_access", ...(continuing ? ["oxygen_oxygents_get", "oxygen_oxygents_message"] : [])],
+            commands: ["oxygents create", "oxygents update", "oxygents access", ...(continuing ? ["oxygents get", "oxygents message"] : [])],
         };
     }
     if (card.id === "billing-and-budgets" && isPartnerBonusReadIntent(query)) {
@@ -3310,11 +3320,19 @@ function isConnectionPriceIntent(query) {
  * it. Sending, network, profile and post asks keep their own owners.
  */
 function isLinkedInAccountConnectIntent(query) {
+    // Exact native command discovery has no LinkedIn noun to score.
+    if (/^(?:oxygen )?senders connect$/.test(query))
+        return true;
     if (!/\b(linkedin|unipile)\b/.test(query))
         return false;
     if (/^(linkedin|unipile)( accounts?)?$/.test(query))
         return true;
-    if (/\b(send|sending|enroll|sequence|campaign|cadence|messages?|dms?|invites?|invitations?|posts?|profiles?|network|connections|followers|viewers|limits|hours|ads?|scrape|research|company|companies|url|pac(?:e|ing)|spacing|spaced|spread|apart|throttl\w*)\b/.test(query))
+    const authenticationUrl = /\b(?:authentication|authorization|oauth|auth)\b/.test(query)
+        && /\b(?:url|link)\b/.test(query)
+        && /\b(?:connect|reconnect|account|sender)\b/.test(query);
+    if (/\burl\b/.test(query) && !authenticationUrl)
+        return false;
+    if (/\b(send|sending|enroll|sequence|campaign|cadence|messages?|dms?|invites?|invitations?|posts?|profiles?|network|connections|followers|viewers|limits|hours|ads?|scrape|research|company|companies|pac(?:e|ing)|spacing|spaced|spread|apart|throttl\w*)\b/.test(query))
         return false;
     return /\b(connect|reconnect|link|add|accounts?|senders?|seats?|free|plan)\b/.test(query);
 }

package/node_modules/@oxygen/shared/dist/contracts/agent-sessions.js

@@ -23,7 +23,7 @@ function agentSessionOperation(id, verb, method, suffix, summary, fields = {}, r
     };
 }
 export const AGENT_SESSION_OPERATIONS = [
-    agentSessionOperation("agent.sessions.templates", "templates", "GET", "/templates", "Discover eight ongoing Agent job templates, reviewed actions, required resources, the full config schema and a draft example. Staff on dev only; legacy Agents remain available."),
+    agentSessionOperation("agent.sessions.templates", "templates", "GET", "/templates", "Discover eight ongoing Agent job templates, reviewed actions, required resources, the full config schema and a draft example. Dev only; requires a current non-client workspace member and enabled sessions. Legacy Agents remain available."),
     agentSessionOperation("agent.sessions.list", "list", "GET", "", "List independent ongoing sessions under an Agent, including status, next check and spend."),
     agentSessionOperation("agent.sessions.create", "create", "POST", "", "Create a draft ongoing session. Explicit caps are required; review and activate separately.", { config: AGENT_SESSION_CONFIG_CONTRACT }, ["config"]),
     agentSessionOperation("agent.sessions.get", "get", "GET", "/{session}", "Read this session's configuration revision, conversation, memory, next check, approvals and budget reservations."),

package/node_modules/@oxygen/shared/dist/contracts/customer-operations.js

@@ -91,7 +91,7 @@ export const CUSTOMER_OPERATIONS = [
     operation("tables.import.csv", "/api/cli/tables/import-csv", "POST", "tables import-csv", "oxygen_tables_import_csv", "tables", "Import inline CSV into a hosted Table through its durable ingestion run. Use staged upload for large files.", { csv_text: text(), csv_base64: text(), table: text(), table_name: text(), project: text(), filename: text(), upsert_key: text(), skip_blank_cells: skipBlankCells(), batch_size: int({ minimum: 1, maximum: 5000 }) }, [], cliOnly),
     operation("tables.import.prepare", "/api/cli/tables/import-url", "POST", "tables import-upload", "oxygen_tables_import_upload", "tables", "Prepare a scoped storage upload for a hosted Table import; uploads and imports are separate, inspectable steps.", { file_name: text(), content_type: text(), byte_length: int({ minimum: 1 }), trace_id: text(), format: enumOf(["csv", "json", "xlsx"]) }, ["file_name", "byte_length"]),
     operation("tables.import.preview", "/api/cli/tables/import-preview", "POST", "tables import-preview", "oxygen_tables_import_preview", "tables", "Preview a staged file's headers, rows and existing-table mapping; writes no imported rows.", { storage_key: text(), file_name: text(), format: enumOf(["csv", "json", "xlsx"]), byte_length: int({ minimum: 1 }), table: text(), upsert_key: text() }, ["storage_key", "byte_length"], { mutates: false }),
-    operation("tables.import.staged", "/api/cli/tables/import-staged", "POST", "tables import-staged", "oxygen_tables_import_staged", "tables", "Start a durable hosted import from this workspace's staged file; choose an existing table or create_name.", { table: text(), create_name: text(), project: text(), storage_key: text(), storage_bucket: text(), storage_provider: enumOf(["s3"]), file_name: text(), format: enumOf(["csv", "json", "xlsx"]), sha256: text(), upsert_key: text(), skip_blank_cells: skipBlankCells(), source_key_map: json, byte_length: int({ minimum: 1 }), row_count: int({ minimum: 1 }), max_concurrency: int({ minimum: 1, maximum: 1000 }), source: enumOf(["cli", "mcp", "web"]), batch_size: int({ minimum: 1, maximum: 5000 }) }, ["storage_key", "byte_length"]),
+    operation("tables.import.staged", "/api/cli/tables/import-staged", "POST", "tables import-staged", "oxygen_tables_import_staged", "tables", "Import a staged file into a table or a new create_name table.", { table: text(), create_name: text(), project: text(), storage_key: text(), storage_bucket: text(), storage_provider: enumOf(["s3"]), file_name: text(), format: enumOf(["csv", "json", "xlsx"]), sha256: text(), upsert_key: text(), skip_blank_cells: skipBlankCells(), source_key_map: json, ignore_source_keys: list(), byte_length: int({ minimum: 1 }), row_count: int({ minimum: 1 }), max_concurrency: int({ minimum: 1, maximum: 1000 }), source: enumOf(["cli", "mcp", "web"]), batch_size: int({ minimum: 1, maximum: 5000 }) }, ["storage_key", "byte_length"]),
     operation("tables.import.file", "/api/cli/tables/import-file", "POST", "tables import-file", "oxygen_tables_import_file", "tables", "Import small base64 file bytes through the shared multipart import API; use staged upload for large files.", { content_base64: text(), file_name: text(), content_type: text(), table: text(), table_name: text(), project: text(), format: enumOf(["csv", "json", "xlsx"]), sheet: text(), upsert_key: text(), source_key_map: json, source_hash: text(), batch_size: int({ minimum: 1, maximum: 5000 }), max_concurrency: int({ minimum: 1 }) }, ["content_base64", "file_name"], { multipart: { contentField: "content_base64", nameField: "file_name", typeField: "content_type", fileField: "file" } }),
     operation("tables.link.suggest", "/api/cli/tables/link/suggest", "POST", "tables link-suggest", "oxygen_tables_link_suggest", "tables", "Plan column links and matching row counts between Tables; creates no relation. Apply with tables link --to (MCP oxygen_tables_link_bulk).", TABLE_LINK_SUGGEST_CONTRACT.properties, ["table", "to"], { mutates: false }),
     operation("tables.recover_pending", "/api/cli/tables/recover-pending", "POST", "tables recover-pending", "oxygen_tables_recover_pending", "tables", "Recover BetterContact email/phone requests and read verification blockers; no new orders or imports.", TABLE_RECOVER_PENDING_CONTRACT.properties, ["table"], { ...mcpOnly, annotations: { openWorldHint: true } }),