@oxygen-agent/cli 1.1014.1035 → 1.1014.1132

package/README.md

@@ -34,4 +34,4 @@ oxygen update
 
 For product documentation, visit https://oxygen-agent.com/docs. For support, visit https://oxygen-agent.com.
 
-Version: 1.1014.1035
+Version: 1.1014.1132

package/dist/command-manifest.js

@@ -262,6 +262,7 @@ const PREVIEW_BY_DEFAULT_COMMANDS = new Set([
     "domains dns apply",
     "mailboxes warmup enable",
     "mailboxes warmup google",
+    "deliverability workspace-test run",
     "deliverability placement-test run",
     "deliverability placement-test send",
     "managed-inboxes recover",

package/dist/commands/columns.js

@@ -830,7 +830,7 @@ export function registerColumnsFamily(program, handleAsyncAction) {
         .addCommand(new Command("add")
         .description("Add a nullable column, a catalog template (--prompt-key) or a multi-column enrichment bundle (--preset) to a workspace table. Writes the definition only — this never runs the column and never spends credits; use `columns run` for that, with --dry-run first to see the cost. For a page, posting or filing the row already links to, or a company fact Oxygen already knows how to research (founders, parent company, funding, cloud provider, offers demos, industry, NAICS, HQ, a LinkedIn or Crunchbase page), pick a template from `columns catalog` (--prompt-key) instead of writing a prompt; or read a URL column with --kind research --research-url. The guide is the oxygen-tables skill (`oxygen skills get oxygen-tables --json`). For ICP fit, use Classify Score: `columns add <table> --label 'ICP fit' --score 'low,medium,high' --prompt 'Assess {{company_name}}: {{description}}, {{employees}} employees' --grounding workspace` (0.075 credits/row). A formula column needs no run at all: it evaluates on read from its current inputs, so `tables query` shows its values immediately. A plain field is --type: text, number, checkbox, date, json, markdown, image, or a choice column — select, multi_select or status, with --options \"Lead,Contacted,Won\". To link another table row to row, use `oxygen tables relate <table> --to <other-table> --live`; to read a value out of one, --lookup-table.")
         .argument("<table>", "Table id or slug.")
-        .option("--preset <preset>", "Add a pre-built column bundle instead of one column, which is what --prompt-key adds: a preset writes SEVERAL columns at once and needs no --input on a table whose identity column it can find, while --prompt-key adds one template column and binds each input you name. Presets: `person_enrich` (one LinkedIn profile lookup — Blitz first, Professional Network Data (Up2Data) only when Blitz has no match — then first/last/full name, current company and its LinkedIn URL, job title, start date, education, school, headline, bio, location and followers as free stored fields that fill when the lookup runs, followers only on rows Professional Network Data answers because Blitz publishes none; the person templates in `columns catalog --category people` all read its payload column), `company_enrich` (one company lookup from a domain or LinkedIn URL — Blitz first, Professional Network Data (Up2Data) only when Blitz has no match, about 1 credit a company — keeping the whole profile in its JSON column plus name, domain, LinkedIn URL, headcount, industry, description, founded year and HQ country as free stored fields; no field choices; binds to the person preset's current_company_linkedin_url automatically), `company_tech_stack` (the technologies a company runs, from its website and hiring), `company_funding` (total raised, latest round, number of rounds and investors), `company_revenue` (an annual revenue estimate), `company_hiring` (the roles a company is hiring for, with a count) — each of these four is one paid lookup column that fills its own columns, priced per row in `tools search --for-table` — plus `company_lookalikes` (one managed lookup from --input company_domain=website; keeps similar companies separate from the seed; dry-run for price) — or `domain_check` (0.1 credits/row at list price for a live/redirect/parked/not_found/dead verdict on every domain, cached 30 days, plus a free label column to filter on). For a single cleaned or classified column, use a template from `columns catalog` instead — that is one column, not a bundle. Name the input column with --input: `url` for person_enrich, `domain` and/or `linkedin_url` for the company presets. Any column works whatever it is called; without --input Oxygen guesses from column names. Creating the columns is free; run them afterwards, --dry-run first.")
+        .option("--preset <preset>", "Add a pre-built column bundle instead of one column, which is what --prompt-key adds: a preset writes SEVERAL columns at once and needs no --input on a table whose identity column it can find, while --prompt-key adds one template column and binds each input you name. Presets: `person_enrich` (one LinkedIn profile lookup — Blitz first, Professional Network Data only when Blitz has no match — then first/last/full name, current company and its LinkedIn URL, job title, start date, education, school, headline, bio, location and followers as free stored fields that fill when the lookup runs, followers only on rows Professional Network Data answers because Blitz publishes none; the person templates in `columns catalog --category people` all read its payload column), `company_enrich` (one company lookup from a domain or LinkedIn URL — Blitz first, Professional Network Data only when Blitz has no match, about 1 credit a company — keeping the whole profile in its JSON column plus name, domain, LinkedIn URL, headcount, industry, description, founded year and HQ country as free stored fields; no field choices; binds to the person preset's current_company_linkedin_url automatically), `company_tech_stack` (the technologies a company runs, from its website and hiring), `company_funding` (total raised, latest round, number of rounds and investors), `company_revenue` (an annual revenue estimate), `company_hiring` (the roles a company is hiring for, with a count) — each of these four is one paid lookup column that fills its own columns, priced per row in `tools search --for-table` — plus `company_lookalikes` (one managed lookup from --input company_domain=website; keeps similar companies separate from the seed; dry-run for price) — or `domain_check` (0.1 credits/row at list price for a live/redirect/parked/not_found/dead verdict on every domain, cached 30 days, plus a free label column to filter on). For a single cleaned or classified column, use a template from `columns catalog` instead — that is one column, not a bundle. Name the input column with --input: `url` for person_enrich, `domain` and/or `linkedin_url` for the company presets. Any column works whatever it is called; without --input Oxygen guesses from column names. Creating the columns is free; run them afterwards, --dry-run first.")
         .option("--input <slot=column...>", "Bind a preset or template input to an exact column, e.g. --input url=pricing_url with --prompt-key, or --input domain=website --input linkedin_url=company_li with --preset. Repeatable. For a preset it is only needed when the automatic match is wrong or missing; for a template it names the column each declared input reads.", collectRepeatable, [])
         // No preset takes a field list any more (founder, 2026-09-24). Hidden,
         // not removed: an old script passing them gets the server's refusal,

package/dist/commands/deliverability.js

@@ -1,3 +1,4 @@
+import { registerWorkspacePlacementCommands } from "../workspace-placement-commands.js";
 import { requestOxygen } from "../http-client.js";
 import { readOption } from "../util.js";
 import { Command, CommanderError, Option } from "commander";
@@ -95,4 +96,5 @@ export function registerDeliverabilityFamily(program, handleAsyncAction) {
         .action(async (id, options) => {
         await handleAsyncAction("deliverability placement-test get", options, () => requestOxygen(`/api/cli/deliverability/placement-tests/${encodeURIComponent(id)}`));
     }))));
+    registerWorkspacePlacementCommands(program.commands.find(c => c.name() === "deliverability"), handleAsyncAction);
 }

package/dist/commands/sequences.js

@@ -1593,6 +1593,7 @@ export function registerSequencesFamily(program, handleAsyncAction) {
         .option("--senders <ids>", "Comma-separated LinkedIn or WhatsApp sender account ids (or connection / Unipile ids; `senders list` / `whatsapp accounts` list them). Optional at create; enroll and start require at least one when the journey has LinkedIn or WhatsApp steps (attach later with `sequences update --senders`).")
         .option("--table <id>", "Source table id or slug whose rows supply {{column}} template values.")
         .option("--activation-id <id>", "Guided authored LinkedIn draft: bind the creator's activation and exact First leads Table. Free; retries reuse the native draft.")
+        .option("--activation-revision <n>", "Reviewed current activation revision, a positive safe integer; requires --activation-id. Native first creation checks it before mutation.")
         .option("--from-table <id>", "Alias of --table: the source table id or slug this sequence draws its leads and {{column}} values from.")
         .option("--enroll", "After creating the sequence, immediately enroll every row of the bound table (same as running `sequences enroll --from-table` next). Requires --table/--from-table. Enrolling spends no credits and sends nothing.")
         .option("--url-column <key>", "Column key holding each lead's LinkedIn URL/provider id.")
@@ -1649,6 +1650,11 @@ export function registerSequencesFamily(program, handleAsyncAction) {
             // so it names the same thing here rather than being a second
             // concept; `--table` stays for every existing script.
             const sourceTable = readOption(options.fromTable) ?? readOption(options.table);
+            const activationId = readOption(options.activationId);
+            const activationRevision = readPositiveInt(options.activationRevision);
+            if (options.activationRevision !== undefined && (!activationId || !Number.isSafeInteger(activationRevision))) {
+                throw new OxygenError("invalid_input", "--activation-revision needs --activation-id and a positive safe integer from current onboarding.", { exitCode: 1 });
+            }
             if (options.enroll && !sourceTable) {
                 throw new Error("--enroll needs a source table: pass --from-table <table> (or --table <table>).");
             }
@@ -1662,7 +1668,8 @@ export function registerSequencesFamily(program, handleAsyncAction) {
                     ...(senders.length > 0 ? { senders } : {}),
                     ...(tags.length > 0 ? { tags } : {}),
                     ...(sourceTable ? { source_table_id: sourceTable } : {}),
-                    ...(readOption(options.activationId) ? { activation_id: readOption(options.activationId) } : {}),
+                    ...(activationId ? { activation_id: activationId } : {}),
+                    ...(activationRevision !== undefined ? { activation_revision: activationRevision } : {}),
                     ...(options.enroll ? { enroll_from_table: true } : {}),
                     ...(readOption(options.urlColumn) ? { linkedin_url_column_key: readOption(options.urlColumn) } : {}),
                     ...(email ? { email } : {}),
@@ -1709,6 +1716,9 @@ export function registerSequencesFamily(program, handleAsyncAction) {
         .description("Update a sequence. Journey structure/channels/email binding are draft-only so revised scope receives a fresh launch approval; a started sequence may only re-time waits it already has (clear a delay by zeroing it, never by deleting the step — enrollments track position by index); sender pools can change while draft or paused; launch caps change through `sequences start` after first start. Name, throttles, the sending schedule, tags, the unsubscribe option (off by default), and open/click tracking toggles remain editable as allowed by the server. Pass only the fields you want to change.")
         .addHelpText("after", "\nSenders: email_send.sender_profile_id sends one email from any inbox of a selected person (a lead already assigned to that person keeps its own inbox), and email_send.sender_mailbox_id from one exact inbox of a selected sender; a LinkedIn step's sender_profile_id sends it from a selected person (invite, message, inmail and withdraw_invite share one or none). Omit both to use the lead's assigned person. An email whose From changes needs its own subject_template. `sequences start <sequence>` without --approved shows who sends each step; nothing changes.\n")
         .argument("<sequence>", "Sequence id or slug.")
+        .option("--expected-revision <revision>", "Exact sequence_revision from sequences get; stale edits refuse. Not launch approval.")
+        .option("--activation-id <id>", "Guided activation UUID; requires --activation-revision and --expected-revision.")
+        .option("--activation-revision <revision>", "Current guided activation revision; requires --activation-id and --expected-revision.")
         .option("--name <name>", "New human-readable sequence name.")
         .option("--steps-file <path>", "Path to a JSON file: { \"steps\": [...] } replacing the journey. Once started, only wait timing may change: same steps, same order (zero a delay, never delete its step). Copy supports {{column}} interpolation; every step also takes {{sender_first_name}} / {{sender_last_name}} / {{sender_full_name}} for the person who sends it, and email adds {{sender_email}} (a same-named row column wins). A `branch` can also route on the lead's data with a data leaf { has_column: \"email\" } (true when that row_values column is non-empty; present:false for \"missing\").")
         .option("--channels <list>", "Draft only: comma-separated channels: linkedin,email,whatsapp,call,crm.")
@@ -1771,6 +1781,18 @@ export function registerSequencesFamily(program, handleAsyncAction) {
         .action(async (sequence, options) => {
         await handleAsyncAction("sequences update", options, () => {
             const body = {};
+            const expectedRevision = options.expectedRevision;
+            const activationId = options.activationId;
+            const activationRevision = readPositiveInt(options.activationRevision);
+            if (options.activationRevision !== undefined && activationRevision === undefined) {
+                throw new OxygenError("invalid_number", "Expected a positive activation revision.", { exitCode: 1 });
+            }
+            if (expectedRevision !== undefined)
+                body.expected_revision = expectedRevision;
+            if (activationId !== undefined)
+                body.activation_id = activationId;
+            if (activationRevision !== undefined)
+                body.activation_revision = activationRevision;
             const name = readOption(options.name);
             if (name)
                 body.name = name;
@@ -1834,9 +1856,15 @@ export function registerSequencesFamily(program, handleAsyncAction) {
         .description("Get a sequence's definition, senders, status, and credit usage. --readiness adds the launch check — whether it CAN go live, why not, and the mailbox pool it would send from — without touching it; `sequences preview <sequence>` (a read; 0 credits) shows who sends each step (sender_journey).")
         .argument("<sequence>", "Sequence id or slug.")
         .option("--readiness", "Add launch_readiness: blockers (e.g. a missing send cap), warnings, and the resolved sending mailboxes. Read-only — sends nothing, changes nothing, spends nothing. Skips the LinkedIn rendered-copy scan, which stays in `sequences start` without --approved.")
+        .addOption(new Option("--include <fields>", "Add readiness or your retained guided_proposal, comma-separated. Reading a proposal does not apply it or start the campaign.")
+        .choices(["readiness", "guided_proposal", "readiness,guided_proposal", "guided_proposal,readiness"]))
         .option("--json", "Print a JSON envelope.")
         .action(async (sequence, options) => {
-        await handleAsyncAction("sequences get", options, () => requestOxygen(`/api/cli/sequences/${encodeURIComponent(sequence)}${options.readiness ? "?include=readiness" : ""}`));
+        const include = new Set(options.include?.split(",") ?? []);
+        if (options.readiness)
+            include.add("readiness");
+        const query = include.size ? `?include=${[...include].join(",")}` : "";
+        await handleAsyncAction("sequences get", options, () => requestOxygen(`/api/cli/sequences/${encodeURIComponent(sequence)}${query}`));
     }))
         .addCommand(new Command("enroll")
         .description("Enroll leads into a sequence. Enrolling spends no credits. An active sequence contacts the new leads on its next dispatch tick; a draft or paused one holds them until `sequences start`. --from-table enrolls every not-yet-enrolled row of the sequence's bound source table (up to 500 per run; the response's from_table.has_more says whether to run again) — for a LinkedIn sequence the profile is read from the bound table's URL column, where a full /in/ URL and a bare public handle carrying a hyphen or digit (ada-lovelace) both work, so no pre-resolved provider ids are needed; each handle Oxygen canonicalized is echoed in linkedin_handles_canonicalized (value + url) to check before start, and every row that still cannot be resolved is named in unresolved_linkedin_lead_details (row, value, reason) rather than only counted in unresolved_linkedin_leads. In a LinkedIn + email sequence a row with no usable profile but a recipient email is still enrolled for the email steps (its LinkedIn steps are skipped as no_linkedin_profile, a connection wait passes at once and a connection branch takes its not-connected path) and is listed in linkedin_unavailable_lead_details instead; unresolved_linkedin_leads names only rows that were not enrolled. --leads-file enrolls an explicit JSON list { leads: [...] }: for an email/WhatsApp sequence a lead identified only by an email (row_values.email) or phone (row_values.phone) is auto-filed as a row in the sequence's leads table (auto-creating and binding one if there is none), deduped by email/phone, so no table has to exist first (the table is returned as leads_table with a web_url); a LinkedIn + email sequence auto-files an email-only lead the same way; a LinkedIn lead needs a lead_provider_id, a lead_profile_url (a /in/ URL or a bare public handle with a hyphen or digit), or a table_row_id whose row carries one of those. A CRM-only lead needs a stable table_row_id or lead_provider_id in addition to mapped row_values; a HubSpot contact id used in crm_task associations identifies the destination record, not the Oxygen enrollment. When the sequence is bound to a source table, a lead's table_row_id auto-snapshots that row's columns (incl. AI/tool outputs) into row_values for {{column}} copy — explicit row_values win. Idempotent per table row (and per email/phone for auto-filed leads). WhatsApp-only campaigns also enroll each normalized number once across all source rows and enrollment statuses; mixed campaigns keep other channels and skip duplicate WhatsApp actions. Duplicate protection defaults to this campaign; --whatsapp-duplicate-scope on create/update can additionally block identical copy across all campaigns. The org do-not-contact list is always enforced; --exclude-contacted and --suppress-list add further opt-in skips (reported under skipped_by_reason). Leads already owned by a sender account (from an earlier real send) are routed back to that same account; a lead owned by a sender NOT on this sequence is skipped (bound_to_other_sender) unless --ignore-sender-bindings. This enrolls into an OXYGEN Sequence; to put the same rows into a campaign you already run in Smartlead, Instantly, lemlist or HeyReach, use `sequences push-external`. esp.pool_scope identifies the active workspace inventory used for routing and strict_deferred_leads estimates; these estimates omit sequence sender restrictions, readiness and daily limits. A zero estimate does not guarantee readiness. Review sequences preview before launch.")

package/dist/commands/viewers.js

@@ -1,6 +1,5 @@
 import { requestOxygen } from "../http-client.js";
 import { readOption } from "../util.js";
-import { MANAGED_DATA_SUPPLIERS } from "@oxygen/shared/data-suppliers";
 import { Command } from "commander";
 export function registerViewersFamily(program, handleAsyncAction) {
     program.addCommand(new Command("viewers")
@@ -54,7 +53,7 @@ export function registerViewersFamily(program, handleAsyncAction) {
         });
     }))
         .addCommand(new Command("enrichment")
-        .description("Turn automatic full-profile enrichment of NEW profile viewers on or off for the viewers table (" + MANAGED_DATA_SUPPLIERS.scraper + " profile: about, current role and company, experience, education, location). This is STANDING credit spend, charged credits_per_person credits per enriched viewer, applied only to viewers first seen after `enrichment.enabled_at`, each delivery bounded by `enrichment.max_credits_per_delivery` (the plan default). Switching on adds the table's Person profile columns (a paid lookup plus its extractors); they stay, with their data, when switched off. Existing rows are never charged by it — enrich them on demand by running the Person profile column. `viewers status` shows `enrichment` (on, credits_per_person, enabled_at, max_credits_per_delivery, next_capture_at: when new viewers can next arrive); the runs appear on the table's Runs page. Requires exactly one of --on or --off.")
+        .description("Turn automatic full-profile enrichment of NEW profile viewers on or off for the viewers table (managed LinkedIn profile: about, current role and company, experience, education, location). This is STANDING credit spend, charged credits_per_person credits per enriched viewer, applied only to viewers first seen after `enrichment.enabled_at`, each delivery bounded by `enrichment.max_credits_per_delivery` (the plan default). Switching on adds the table's Person profile columns (a paid lookup plus its extractors); they stay, with their data, when switched off. Existing rows are never charged by it — enrich them on demand by running the Person profile column. `viewers status` shows `enrichment` (on, credits_per_person, enabled_at, max_credits_per_delivery, next_capture_at: when new viewers can next arrive); the runs appear on the table's Runs page. Requires exactly one of --on or --off.")
         .option("--on", "Switch standing enrichment on for new viewers.")
         .option("--off", "Switch standing enrichment off.")
         .option("--json", "Print a JSON envelope.")

package/dist/credentials.js

@@ -3,7 +3,7 @@ import { existsSync, mkdirSync, readFileSync, renameSync, rmSync, writeFileSync,
 import { homedir } from "node:os";
 import { dirname, join } from "node:path";
 import { promisify } from "node:util";
-import { OxygenError } from "@oxygen/shared";
+import { OxygenError } from "@oxygen/shared/cli-result";
 import { sameApiOrigin } from "./runtime.js";
 const execFileAsync = promisify(execFile);
 const SERVICE_NAME = "oxygen-cli";

package/dist/customer-operation-commands.js

@@ -1,3 +1,4 @@
+import { createHash } from "node:crypto";
 import { readFile, writeFile } from "node:fs/promises";
 import { basename, extname, resolve } from "node:path";
 import { OxygenError } from "@oxygen/shared/cli-result";
@@ -31,8 +32,50 @@ const GROUP_PURPOSES = {
     "notetaker notes": "Edit saved meeting notes.",
     onboarding: "Save workspace discovery choices and resume guided onboarding.",
     "onboarding activation": "Resume your dev-pilot activation and its native resources.",
+    "onboarding journey": "Resume private onboarding, save answers and navigate using native revisions.",
+    "onboarding first-sourcing": "Read and review the native first-leads search before approving a capped run.",
+};
+const GUIDED_JOURNEY_FLAGS = {
+    activationId: { flag: "activation-id", help: "Exact activation ID returned by onboarding activation start or status." },
+    revision: { help: "Current activation revision returned by onboarding journey get; refresh after a conflict." },
+    mutation_id: { help: "Stable ID for this exact change; reuse only to recover the same request." },
+    step: { help: "Current saved step from onboarding journey get; use the revision you reviewed." },
+    answers: { help: "JSON object keyed by the current step, containing that step's reviewed answers." },
+    paused: { help: "Pause at this saved step; --no-paused resumes without advancing.", negateHelp: "Resume the saved step and tour position without changing visited history." },
+    tour_active_stop: { help: "Exact tour panel to return to, separate from visited history; only at the tour step." },
+};
+const GUIDED_FIRST_SOURCING_FLAGS = {
+    activationId: GUIDED_JOURNEY_FLAGS.activationId,
+    revision: { help: "Current activation revision from onboarding first-sourcing get; refresh and review after a conflict." },
+    generation: { help: "Current journey generation from onboarding journey get; supply revision, generation and --timezone-hint together for nightly defaults." },
+    timezoneHint: { flag: "timezone-hint", aliases: ["timezoneHint"], help: "Provisional customer/browser IANA timezone; supply revision, generation and --timezone-hint together. Does not confirm or save a schedule." },
+    "bounds.targetCount": { flag: "bounds-target-count", help: "Positive lead target, at most 50000; must match the stored preview for run." },
+    "bounds.maxPages": { flag: "bounds-max-pages", help: "Positive provider-page ceiling, at most 1000; must match the stored preview for run." },
+    "bounds.maxCredits": { flag: "bounds-max-credits", help: "Positive credit ceiling; native current pricing and the stored preview apply." },
+    previewId: { flag: "preview-id", help: "Exact stored previewId returned by onboarding first-sourcing preview; pass unchanged." },
+    previewDigest: { flag: "preview-digest", help: "Exact lowercase previewDigest from the stored native preview; pass unchanged." },
+    approved: { help: "Approve this exact stored preview and its bounds; native billing, access and current revision still apply." },
 };
 const OPERATION_FLAGS = {
+    "onboarding first-sourcing get": GUIDED_FIRST_SOURCING_FLAGS,
+    "onboarding first-sourcing preview": GUIDED_FIRST_SOURCING_FLAGS,
+    "onboarding first-sourcing run": GUIDED_FIRST_SOURCING_FLAGS,
+    "onboarding company-files upload": {
+        activationId: GUIDED_JOURNEY_FLAGS.activationId,
+        revision: GUIDED_JOURNEY_FLAGS.revision,
+        upload_id: { help: "Stable UUID for these exact original file bytes; reuse only to recover the same upload." },
+        sha256: { help: "Lowercase SHA-256 of the original file bytes; native storage verifies it." },
+        size_bytes: { help: "Exact original file byte length, before base64 encoding." },
+    },
+    "onboarding journey get": GUIDED_JOURNEY_FLAGS,
+    "onboarding journey save": GUIDED_JOURNEY_FLAGS,
+    "onboarding journey advance": GUIDED_JOURNEY_FLAGS,
+    "onboarding journey back": GUIDED_JOURNEY_FLAGS,
+    "onboarding journey restart": GUIDED_JOURNEY_FLAGS,
+    "onboarding journey navigation": GUIDED_JOURNEY_FLAGS,
+    "onboarding journey prospects-preview": GUIDED_JOURNEY_FLAGS,
+    "onboarding journey billing": GUIDED_JOURNEY_FLAGS,
+    "onboarding journey checkout": GUIDED_JOURNEY_FLAGS,
     "agent session activate": {
         revision: { help: "Current session revision returned by agent session preview; must match the reviewed configuration." },
         preview_token: { help: "Exact preview_token from agent session preview, binding reviewed resources, actions, schedule and credit caps. Pass unchanged; --approved is separate. Preview again after changes." },
@@ -85,12 +128,14 @@ export function registerCustomerOperationCommands(program, handle) {
         if (spec.binary)
             command.requiredOption("--output <path>", "Write the exact downloaded bytes to this local file.");
         if (spec.multipart)
-            command.option("--file <path>", "Upload bytes from this local file. Omit the base64 flag; file name and content type default from the path.");
+            command.option("--file <path>", "Upload bytes from this local file. Omit the base64 flag; file name and content type default from the path."
+                + (spec.multipart.fileMetadata ? " Original SHA-256 and size are derived; explicit assertions must match." : ""));
         for (const name of contract.required ?? []) {
             const property = contract.properties[name];
             const flag = `--${overlay[name]?.flag ?? name.replace(/_/g, "-")}`;
             const option = command.options.find((candidate) => candidate.long === flag || candidate.long === `${flag}-json`);
-            const multipartAlternative = spec.multipart && [spec.multipart.contentField, spec.multipart.nameField, spec.multipart.typeField].includes(name);
+            const multipartAlternative = spec.multipart && [spec.multipart.contentField, spec.multipart.nameField, spec.multipart.typeField,
+                ...(spec.multipart.fileMetadata ? [spec.multipart.fileMetadata.sha256Field, spec.multipart.fileMetadata.sizeBytesField] : [])].includes(name);
             if (multipartAlternative) {
                 if (option)
                     option.description = `${option.description} Required unless supplied by --file.`.trim();
@@ -113,9 +158,22 @@ export function registerCustomerOperationCommands(program, handle) {
                     if (input[spec.multipart.contentField] !== undefined)
                         throw new OxygenError("invalid_request", "Choose --file or the base64 content flag, not both.", { exitCode: 2 });
                     const filePath = String(options.file);
-                    input[spec.multipart.contentField] = (await readFile(filePath)).toString("base64");
+                    const bytes = await readFile(filePath);
+                    input[spec.multipart.contentField] = bytes.toString("base64");
                     input[spec.multipart.nameField] ??= basename(filePath);
                     input[spec.multipart.typeField] ??= uploadContentType(filePath);
+                    const metadata = spec.multipart.fileMetadata;
+                    if (metadata) {
+                        const digest = createHash("sha256").update(bytes).digest("hex");
+                        if (input[metadata.sha256Field] !== undefined && input[metadata.sha256Field] !== digest) {
+                            throw new OxygenError("invalid_request", `${metadata.sha256Field} must match the original file bytes.`, { exitCode: 2 });
+                        }
+                        if (input[metadata.sizeBytesField] !== undefined && input[metadata.sizeBytesField] !== bytes.length) {
+                            throw new OxygenError("invalid_request", `${metadata.sizeBytesField} must equal the original decoded byte length.`, { exitCode: 2 });
+                        }
+                        input[metadata.sha256Field] ??= digest;
+                        input[metadata.sizeBytesField] ??= bytes.length;
+                    }
                 }
                 const issues = operationInputIssues(spec, input);
                 if (issues.length)
@@ -188,6 +246,7 @@ function uploadContentType(filePath) {
     const types = {
         ".png": "image/png", ".jpg": "image/jpeg", ".jpeg": "image/jpeg", ".webp": "image/webp", ".svg": "image/svg+xml",
         ".csv": "text/csv", ".json": "application/json", ".jsonl": "application/x-ndjson",
+        ".txt": "text/plain", ".md": "text/markdown", ".markdown": "text/markdown", ".pdf": "application/pdf",
         ".xlsx": "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet",
     };
     return types[extname(filePath).toLowerCase()] ?? "application/octet-stream";

package/dist/help.js

@@ -170,7 +170,7 @@ export function applyOxygenHelp(program, binaryName, docsUrl = "https://oxygen-a
         // first-touch surface names the skill that teaches the GTM loops.
         `  2. ${binaryName} skills install --json      load the skills that teach the GTM loops (automatic after login)`,
         "     Add --project to keep the skills inside the current project, including confined agent sessions.",
-        `  3. ${binaryName} context resolve --purpose onboarding --json   load workspace context and the next reads`,
+        `  3. ${binaryName} context resolve --purpose onboarding --json   load context; may migrate the workspace schema`,
         // Populated workspaces need the same first-win guidance as empty ones.
         `     Getting started? ${binaryName} skills get oxygen-onboarding --json`,
         "     It sharpens your offer and ICP, then ranks the warmest leads you can reach now.",

package/dist/index.d.ts

@@ -1,99 +1,2 @@
-import "./admin-lead-magnet-commands.js";
-import "./admin-primary-providers-render.js";
-import "./auto-update.js";
-import "./browser-login.js";
-import "./cli-values.js";
-import "./column-decision-options.js";
-import "./column-run-notices.js";
-import "./command-manifest.js";
-import "./compact-list-flags.js";
-import "./connectors-commands.js";
-import "./contract-flags.js";
-import "./credentials.js";
-import "./crm-file-read-commands.js";
-import "./crm-support-flags.js";
-import "./customer-operation-commands.js";
-import "./database-query-flags.js";
-import "./diagnostics.js";
-import "./feed-read-flags.js";
-import "./functions-commands.js";
-import "./help.js";
-import "./home-standup.js";
-import "./http-client.js";
-import "./inbox-needs-reply-notice.js";
-import "./json-output.js";
-import "./knowledge-mirror.js";
-import "./knowledge-repository-commands.js";
-import "./local-custom-http-column.js";
-import "./mailbox-ramp-notice.js";
-import "./run-wait.js";
-import "./runtime.js";
-import "./search-ai-filter-notice.js";
-import "./sender-limits-flags.js";
-import "./session.js";
-import "./settings-commands.js";
-import "./skills.js";
-import "./streamed-file-import.js";
-import "./tool-catalog-detail-command.js";
-import "./tool-catalog-search-window.js";
-import "./transcript.js";
-import "./ugc-commands.js";
-import "./update.js";
-import "./util.js";
-import "./visual-commands.js";
-import "./whatsapp-account-flags.js";
-import "./workflow-plan-limit-notices.js";
-import "./workflow-run-list-flags.js";
-import "./workspace-skill-commands.js";
-import "./workspace-utility-flags.js";
-import "@oxygen/recipe-sdk";
-import "@oxygen/shared";
-import "@oxygen/shared/billing";
-import "@oxygen/shared/company-reply-pause";
-import "@oxygen/shared/contracts/billing-owner-read";
-import "@oxygen/shared/contracts/copilot-sessions";
-import "@oxygen/shared/contracts/crm-enrichment-read";
-import "@oxygen/shared/contracts/database";
-import "@oxygen/shared/contracts/inbox-drafts-read";
-import "@oxygen/shared/contracts/integration-connect";
-import "@oxygen/shared/contracts/knowledge-content-reads";
-import "@oxygen/shared/contracts/limits-read";
-import "@oxygen/shared/contracts/linkedin-invites-list";
-import "@oxygen/shared/contracts/operations";
-import "@oxygen/shared/contracts/pipedrive-catalog";
-import "@oxygen/shared/contracts/publishing-reads";
-import "@oxygen/shared/contracts/sender-limits";
-import "@oxygen/shared/contracts/sequence-analytics-read";
-import "@oxygen/shared/contracts/sequence-list";
-import "@oxygen/shared/contracts/table-feed-update";
-import "@oxygen/shared/contracts/table-list";
-import "@oxygen/shared/contracts/table-query-grid";
-import "@oxygen/shared/contracts/table-query-raw";
-import "@oxygen/shared/contracts/whatsapp-reads";
-import "@oxygen/shared/contracts/workflow-run-list";
-import "@oxygen/shared/copilot-questions";
-import "@oxygen/shared/data-suppliers";
-import "@oxygen/shared/file-import";
-import "@oxygen/shared/knowledge-constants";
-import "@oxygen/shared/linkedin-sequences";
-import "@oxygen/shared/mailbox-import";
-import "@oxygen/shared/plan-band";
-import "@oxygen/shared/pricing-sheet";
-import "@oxygen/shared/select-options";
-import "@oxygen/shared/sequence-lifecycle";
-import "@oxygen/shared/table-field-types";
-import "@oxygen/shared/table-filter-operators";
-import "@oxygen/shared/table-run-summary";
-import "@oxygen/shared/user-capability-routing";
-import "@oxygen/workflows";
-import "commander";
-import "node:child_process";
-import "node:crypto";
-import "node:fs";
-import "node:os";
-import "node:path";
-import "node:process";
-import "node:readline/promises";
-import "node:url";
 export { createProgram } from "./command-families/program.js";
 export { formatDisabledWorkflowNotices } from "./command-support.js";

package/dist/index.js

@@ -1,101 +1,3 @@
-// Preserve pre-extraction runtime import initialization order.
-import "./admin-lead-magnet-commands.js";
-import "./admin-primary-providers-render.js";
-import "./auto-update.js";
-import "./browser-login.js";
-import "./cli-values.js";
-import "./column-decision-options.js";
-import "./column-run-notices.js";
-import "./command-manifest.js";
-import "./compact-list-flags.js";
-import "./connectors-commands.js";
-import "./contract-flags.js";
-import "./credentials.js";
-import "./crm-file-read-commands.js";
-import "./crm-support-flags.js";
-import "./customer-operation-commands.js";
-import "./database-query-flags.js";
-import "./diagnostics.js";
-import "./feed-read-flags.js";
-import "./functions-commands.js";
-import "./help.js";
-import "./home-standup.js";
-import "./http-client.js";
-import "./inbox-needs-reply-notice.js";
-import "./json-output.js";
-import "./knowledge-mirror.js";
-import "./knowledge-repository-commands.js";
-import "./local-custom-http-column.js";
-import "./mailbox-ramp-notice.js";
-import "./run-wait.js";
-import "./runtime.js";
-import "./search-ai-filter-notice.js";
-import "./sender-limits-flags.js";
-import "./session.js";
-import "./settings-commands.js";
-import "./skills.js";
-import "./streamed-file-import.js";
-import "./tool-catalog-detail-command.js";
-import "./tool-catalog-search-window.js";
-import "./transcript.js";
-import "./ugc-commands.js";
-import "./update.js";
-import "./util.js";
-import "./visual-commands.js";
-import "./whatsapp-account-flags.js";
-import "./workflow-plan-limit-notices.js";
-import "./workflow-run-list-flags.js";
-import "./workspace-skill-commands.js";
-import "./workspace-utility-flags.js";
-import "@oxygen/recipe-sdk";
-import "@oxygen/shared";
-import "@oxygen/shared/billing";
-import "@oxygen/shared/company-reply-pause";
-import "@oxygen/shared/contracts/billing-owner-read";
-import "@oxygen/shared/contracts/copilot-sessions";
-import "@oxygen/shared/contracts/crm-enrichment-read";
-import "@oxygen/shared/contracts/database";
-import "@oxygen/shared/contracts/inbox-drafts-read";
-import "@oxygen/shared/contracts/integration-connect";
-import "@oxygen/shared/contracts/knowledge-content-reads";
-import "@oxygen/shared/contracts/limits-read";
-import "@oxygen/shared/contracts/linkedin-invites-list";
-import "@oxygen/shared/contracts/operations";
-import "@oxygen/shared/contracts/pipedrive-catalog";
-import "@oxygen/shared/contracts/publishing-reads";
-import "@oxygen/shared/contracts/sender-limits";
-import "@oxygen/shared/contracts/sequence-analytics-read";
-import "@oxygen/shared/contracts/sequence-list";
-import "@oxygen/shared/contracts/table-feed-update";
-import "@oxygen/shared/contracts/table-list";
-import "@oxygen/shared/contracts/table-query-grid";
-import "@oxygen/shared/contracts/table-query-raw";
-import "@oxygen/shared/contracts/whatsapp-reads";
-import "@oxygen/shared/contracts/workflow-run-list";
-import "@oxygen/shared/copilot-questions";
-import "@oxygen/shared/data-suppliers";
-import "@oxygen/shared/file-import";
-import "@oxygen/shared/knowledge-constants";
-import "@oxygen/shared/linkedin-sequences";
-import "@oxygen/shared/mailbox-import";
-import "@oxygen/shared/plan-band";
-import "@oxygen/shared/pricing-sheet";
-import "@oxygen/shared/select-options";
-import "@oxygen/shared/sequence-lifecycle";
-import "@oxygen/shared/table-field-types";
-import "@oxygen/shared/table-filter-operators";
-import "@oxygen/shared/table-run-summary";
-import "@oxygen/shared/user-capability-routing";
-import "@oxygen/workflows";
-import "commander";
-import "node:child_process";
-import "node:crypto";
-import "node:fs";
-import "node:os";
-import "node:path";
-import "node:process";
-import "node:readline/promises";
-import "node:url";
 import { maybeScheduleBackgroundUpdate } from "./auto-update.js";
 import { emitCliFailure, writeJson } from "./cli-output.js";
 import { createProgram } from "./command-families/program.js";

package/dist/workspace-placement-commands.d.ts

@@ -0,0 +1,3 @@
+import { Command } from "commander";
+import { type ExtractedCommandActionHandler } from "./command-support.js";
+export declare function registerWorkspacePlacementCommands(root: Command, handle: ExtractedCommandActionHandler): void;

package/dist/workspace-placement-commands.js

@@ -0,0 +1,42 @@
+import { Command } from "commander";
+import { resolve } from "node:path";
+import { readJsonFileValue } from "./command-support.js";
+import { requestOxygen } from "./http-client.js";
+export function registerWorkspacePlacementCommands(root, handle) {
+    root.addCommand(new Command("workspace-test").description("Compare email copy placement in this workspace's connected Google/Microsoft receiving inboxes: Gmail Primary/Promotions and Microsoft Focused/Other. Native sends, 0 additional credits; preview and exact message approval required.")
+        .addCommand(new Command("run").description("Preview an internal or cross-workspace copy test. Input JSON: sender_mailbox_ids, receiver_mailbox_ids, variants [{key,subject,body_text,body_html?}]. Approve the same input with returned request_id/plan_hash/rendered_at and max_live_sends. Up to five variants and 50 messages; never buys provider tests or resumes campaigns.")
+        .option("--receiver-scope <scope>", "workspace or network; network privately selects participating receivers.").option("--receiver-providers <providers>", "Comma-separated google,microsoft for network tests.")
+        .requiredOption("--input <file>", "JSON test input file.").option("--approved", "Execute the exact reviewed matrix.")
+        .option("--rendered-at <timestamp>", "Rendering timestamp returned by preview; reuse when approving.").option("--tracking-opens", "Preview with open tracking on verified workspace domain.").option("--tracking-clicks", "Preview with click tracking on verified workspace domain.")
+        .option("--request-id <id>", "Request UUID from preview.").option("--plan <hash>", "Exact preview plan hash.").option("--max-live-sends <n>", "Maximum approved diagnostic emails (1–50).")
+        .option("--preview-cursor <id>", "Read the next manifest page using the same input, request ID and rendering time.").option("--preview-limit <n>", "Preview manifest page size (1–20); never use with approval.")
+        .option("--preview-probe-id <id>", "Read exact rendered copy for a preview probe; reuse request ID and rendering time.").option("--preview-part <part>", "body_text or body_html.").option("--preview-offset <n>", "Unicode character offset returned by copy preview.").option("--preview-copy-limit <n>", "Copy page size (1–3000 characters).")
+        .option("--allow-paused-probe", "Explicitly allow diagnostic sends from paused senders, preserving pauses.").option("--json", "Print JSON.")
+        .action(async (options) => handle("deliverability workspace-test run", options, () => {
+        const input = readJsonFileValue(resolve(options.input), "--input");
+        if (!input || typeof input !== "object" || Array.isArray(input))
+            throw new Error("--input must contain a JSON object.");
+        return requestOxygen("/api/cli/deliverability/workspace-tests", { method: "POST", body: { ...input, approved: options.approved === true,
+                ...(options.approved ? { approved: true } : {}), ...(options.requestId ? { request_id: options.requestId } : {}),
+                ...(options.plan ? { plan_hash: options.plan } : {}), ...(options.renderedAt ? { rendered_at: options.renderedAt } : {}), ...(options.trackingOpens ? { tracking_opens: true } : {}), ...(options.trackingClicks ? { tracking_clicks: true } : {}), ...(options.maxLiveSends ? { max_live_sends: Number(options.maxLiveSends) } : {}),
+                ...(options.allowPausedProbe ? { allow_paused_probe: true } : {}), ...(options.receiverScope ? { receiver_scope: options.receiverScope } : {}), ...(options.receiverProviders ? { receiver_providers: String(options.receiverProviders).split(",") } : {}),
+                ...(options.previewCursor ? { preview_cursor: options.previewCursor } : {}), ...(options.previewLimit !== undefined ? { preview_limit: Number(options.previewLimit) } : {}),
+                ...(options.previewProbeId ? { preview_probe_id: options.previewProbeId } : {}), ...(options.previewPart ? { preview_part: options.previewPart } : {}), ...(options.previewOffset !== undefined ? { preview_offset: Number(options.previewOffset) } : {}), ...(options.previewCopyLimit !== undefined ? { preview_copy_limit: Number(options.previewCopyLimit) } : {}) } });
+    })))
+        .addCommand(new Command("network").description("Read or manage default-on receiving-pool participation. Administrators can opt out or accept the current disclosure. Does not send mail.")
+        .option("--enabled <boolean>", "true or false; omit to read.").option("--accept-disclosure", "Accept real-copy delivery to participating mailboxes and metadata processing.").option("--json", "Print JSON.")
+        .action(async (options) => handle("deliverability workspace-test network", options, () => {
+        if (options.enabled === undefined)
+            return requestOxygen("/api/cli/deliverability/workspace-tests?action=network");
+        if (options.enabled !== "true" && options.enabled !== "false")
+            throw new Error("--enabled must be true or false.");
+        return requestOxygen("/api/cli/deliverability/workspace-tests", { method: "POST", body: { operation: "participation", network_enabled: options.enabled === "true", accept_network_disclosure: options.acceptDisclosure === true } });
+    })))
+        .addCommand(new Command("copy").description("Read a Sequence email step and its copy variants for workspace placement testing. Resolve personalization before preview; no send or charge.").argument("<sequence-id>").option("--step-index <n>", "Zero-based email step index.", "0").option("--json", "Print JSON.")
+        .action(async (id, options) => handle("deliverability workspace-test copy", options, () => requestOxygen(`/api/cli/deliverability/workspace-tests/copy?sequence_id=${encodeURIComponent(id)}&step_index=${encodeURIComponent(options.stepIndex)}`))))
+        .addCommand(new Command("list").description("Read this workspace's recent copy/Primary/Focused placement tests. Saved state only: no send, provider refresh or charge.").option("--cursor <id>", "Next cursor returned by list.").option("--limit <n>", "Tests per page (1–20).").option("--json", "Print JSON.")
+        .action(async (options) => handle("deliverability workspace-test list", options, () => requestOxygen(`/api/cli/deliverability/workspace-tests?${new URLSearchParams({ ...options.cursor ? { cursor: options.cursor } : {}, ...options.limit !== undefined ? { limit: String(options.limit) } : {} })}`))))
+        .addCommand(new Command("get").description("Read one workspace copy test: variant comparison, per-receiver category, partial results and unknowns. No send or provider refresh.").argument("<id>").option("--cursor <id>", "Next receiver-result cursor.").option("--limit <n>", "Receiver results per page (1–20).")
+        .option("--probe <id>", "Read this probe's frozen message copy.").option("--part <part>", "body_text or body_html.").option("--offset <n>", "Returned Unicode character offset.").option("--copy-limit <n>", "Copy page size (1–3000 characters).").option("--json", "Print JSON.")
+        .action(async (id, options) => handle("deliverability workspace-test get", options, () => requestOxygen(`/api/cli/deliverability/workspace-tests/${encodeURIComponent(id)}?${new URLSearchParams({ ...options.cursor ? { cursor: options.cursor } : {}, ...options.limit !== undefined ? { limit: String(options.limit) } : {}, ...options.probe ? { probe_id: options.probe } : {}, ...options.part ? { body_part: options.part } : {}, ...options.offset !== undefined ? { offset: String(options.offset) } : {}, ...options.copyLimit !== undefined ? { copy_limit: String(options.copyLimit) } : {} })}`)))));
+}

package/node_modules/@oxygen/shared/dist/agent-sessions.d.ts

@@ -40,7 +40,12 @@ export type AgentSessionTeammateRoutine = {
 };
 /** The routine marker of a session's settings, or null for a general session. */
 export declare function agentSessionTeammateRoutine(config: Pick<AgentSessionConfig, "teammate_routine">): AgentSessionTeammateRoutine | null;
-/** Staff only: on dev, and in production's staff workspaces (`agentsEnabledIn`; Tim, 2026-10-16). */
+/**
+ * Who has Ongoing Agent sessions, and so Oxygent routines: "staff" for staff
+ * emails, "all" for every member who is not a client login (the customer
+ * launch, Tim, 2026-10-17), in a workspace Agents run in (`agentsEnabledIn`).
+ */
+export declare function agentSessionsAudience(env?: Record<string, string | undefined>): "off" | "staff" | "all";
 export declare function agentSessionsEnabled(env?: Record<string, string | undefined>): boolean;
 /** Whether this workspace has Ongoing Agent sessions, and so Oxygent routines. */
 export declare function agentSessionsEnabledIn(organizationId: string | null | undefined, env?: Record<string, string | undefined>): boolean;

package/node_modules/@oxygen/shared/dist/agent-sessions.js

@@ -11,18 +11,30 @@ export function agentSessionTeammateRoutine(config) {
     const marker = config.teammate_routine;
     return marker && typeof marker.chat_id === "string" ? marker : null;
 }
-/** Staff only: on dev, and in production's staff workspaces (`agentsEnabledIn`; Tim, 2026-10-16). */
+/**
+ * Who has Ongoing Agent sessions, and so Oxygent routines: "staff" for staff
+ * emails, "all" for every member who is not a client login (the customer
+ * launch, Tim, 2026-10-17), in a workspace Agents run in (`agentsEnabledIn`).
+ */
+export function agentSessionsAudience(env = process.env) {
+    if (env.OXYGEN_DEPLOY_ENV !== "selfhost-dev" && env.OXYGEN_DEPLOY_ENV !== "selfhost-prod")
+        return "off";
+    const flag = env.OXYGEN_AGENT_SESSIONS_ENABLED;
+    if ((flag !== "staff" && flag !== "all") || !agentsEnabled(env))
+        return "off";
+    return flag;
+}
 export function agentSessionsEnabled(env = process.env) {
-    return (env.OXYGEN_DEPLOY_ENV === "selfhost-dev" || env.OXYGEN_DEPLOY_ENV === "selfhost-prod")
-        && env.OXYGEN_AGENT_SESSIONS_ENABLED === "staff" && agentsEnabled(env);
+    return agentSessionsAudience(env) !== "off";
 }
 /** Whether this workspace has Ongoing Agent sessions, and so Oxygent routines. */
 export function agentSessionsEnabledIn(organizationId, env = process.env) {
     return agentSessionsEnabled(env) && agentsEnabledIn(organizationId, env);
 }
 export function agentSessionsAvailableTo(env, viewer) {
-    return agentSessionsEnabledIn(viewer.organizationId, env) && viewer.member && viewer.oxygenRole !== "client"
-        && (guidedActivationEnabled(env) || isStaffEmail(viewer.email, env));
+    if (!agentSessionsEnabledIn(viewer.organizationId, env) || !viewer.member || viewer.oxygenRole === "client")
+        return false;
+    return agentSessionsAudience(env) === "all" || guidedActivationEnabled(env) || isStaffEmail(viewer.email, env);
 }
 /** Reviewed native adapters. Unknown tools (including generic dispatch and agent management) fail closed. */
 export const AGENT_SESSION_ADAPTERS = {
@@ -132,7 +144,7 @@ export function validateAgentSessionConfig(config, requireResources = true) {
     if (config.guided_activation !== undefined && (!config.teammate_routine
         || !config.guided_activation || !/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(config.guided_activation.activation_id)
         || !["lead_scan", "morning_briefing"].includes(config.guided_activation.purpose))) {
-        fail("Guided routines require an activation, purpose and private Oxygent chat.");
+        fail("Guided routines require an activation, purpose and bound Oxygent chat.");
     }
     if (config.guided_activation?.purpose === "lead_scan") {
         const policy = config.guided_activation.scan_policy;