@oxygen-agent/cli 1.1014.1035 → 1.1014.1132

package/node_modules/@oxygen/shared/dist/contracts/guided-onboarding-journey.d.ts

@@ -0,0 +1,267 @@
+/** Hiring roles remain strings. Technology identity includes its relationship. */
+export declare const GUIDED_ONBOARDING_SIGNALS_CONTRACT: import("./schema.js").ContractObject<{
+    readonly hiring: import("./schema.js").ContractObject<{
+        readonly mode: {
+            type: "string";
+            enum: readonly ("none" | "selected")[];
+            description?: string;
+        };
+        readonly values: import("./schema.js").ArrayProperty<import("./schema.js").StringProperty>;
+    }, "mode" | "values">;
+    readonly technology: import("./schema.js").ContractObject<{
+        readonly mode: {
+            type: "string";
+            enum: readonly ("none" | "selected")[];
+            description?: string;
+        };
+        readonly values: import("./schema.js").ArrayProperty<import("./schema.js").ContractObject<{
+            readonly name: import("./schema.js").StringProperty;
+            readonly relationship: {
+                type: "string";
+                enum: readonly ("integrates_with" | "replaces" | "uses")[];
+                description?: string;
+            };
+        }, "name" | "relationship">>;
+    }, "mode" | "values">;
+}, "hiring" | "technology">;
+export declare const GUIDED_ONBOARDING_ANSWERS_CONTRACT: import("./schema.js").ContractObject<{
+    readonly company_context: import("./schema.js").ContractObject<{
+        readonly website: {
+            oneOf: [import("./schema.js").StringProperty, import("./schema.js").NullProperty];
+            description?: string;
+        };
+        readonly name: import("./schema.js").StringProperty;
+        readonly description: import("./schema.js").StringProperty;
+        readonly context_links: import("./schema.js").ArrayProperty<import("./schema.js").StringProperty>;
+        readonly file_ids: import("./schema.js").ArrayProperty<import("./schema.js").StringProperty>;
+    }, "context_links" | "description" | "file_ids" | "name" | "website">;
+    readonly company_review: import("./schema.js").ContractObject<{
+        readonly statement: import("./schema.js").StringProperty;
+        readonly profile_revision: import("./schema.js").StringProperty;
+    }, "profile_revision" | "statement">;
+    readonly audience_company_size: import("./schema.js").ContractObject<{
+        readonly values: import("./schema.js").ArrayProperty<import("./schema.js").StringProperty>;
+    }, "values">;
+    readonly audience_markets: import("./schema.js").ContractObject<{
+        readonly values: import("./schema.js").ArrayProperty<import("./schema.js").StringProperty>;
+    }, "values">;
+    readonly audience_industries: import("./schema.js").ContractObject<{
+        readonly values: import("./schema.js").ArrayProperty<import("./schema.js").StringProperty>;
+    }, "values">;
+    readonly audience_personas: import("./schema.js").ContractObject<{
+        readonly values: import("./schema.js").ArrayProperty<import("./schema.js").StringProperty>;
+    }, "values">;
+    readonly signals: import("./schema.js").ContractObject<{
+        readonly hiring: import("./schema.js").ContractObject<{
+            readonly mode: {
+                type: "string";
+                enum: readonly ("none" | "selected")[];
+                description?: string;
+            };
+            readonly values: import("./schema.js").ArrayProperty<import("./schema.js").StringProperty>;
+        }, "mode" | "values">;
+        readonly technology: import("./schema.js").ContractObject<{
+            readonly mode: {
+                type: "string";
+                enum: readonly ("none" | "selected")[];
+                description?: string;
+            };
+            readonly values: import("./schema.js").ArrayProperty<import("./schema.js").ContractObject<{
+                readonly name: import("./schema.js").StringProperty;
+                readonly relationship: {
+                    type: "string";
+                    enum: readonly ("integrates_with" | "replaces" | "uses")[];
+                    description?: string;
+                };
+            }, "name" | "relationship">>;
+        }, "mode" | "values">;
+    }, "hiring" | "technology">;
+    readonly prospects: import("./schema.js").ContractObject<{
+        readonly decision: {
+            type: "string";
+            enum: readonly ("continue" | "refine")[];
+            description?: string;
+        };
+        readonly feedback: import("./schema.js").StringProperty;
+    }, "decision" | "feedback">;
+    readonly linkedin: import("./schema.js").ContractObject<{
+        readonly choice: {
+            type: "string";
+            enum: readonly ("connect" | "skip")[];
+            description?: string;
+        };
+    }, "choice">;
+    readonly sequence: import("./schema.js").ContractObject<{
+        readonly decision: {
+            type: "string";
+            enum: readonly ("keep_draft" | "review")[];
+            description?: string;
+        };
+    }, "decision">;
+    readonly tour: import("./schema.js").ContractObject<{
+        readonly visited: import("./schema.js").ArrayProperty<{
+            type: "string";
+            enum: readonly ("leads" | "overview" | "sequence" | "sourcing")[];
+            description?: string;
+        }>;
+    }, "visited">;
+}, never>;
+export declare const GUIDED_ONBOARDING_MUTATION_CONTRACT: import("./schema.js").ContractObject<{
+    revision: {
+        type: "integer";
+        description?: string;
+        minimum?: number;
+        maximum?: number;
+        "x-clamp"?: true;
+    };
+    mutation_id: import("./schema.js").StringProperty;
+}, "mutation_id" | "revision">;
+export declare const GUIDED_ONBOARDING_ADVANCE_CONTRACT: import("./schema.js").ContractObject<{
+    readonly revision: {
+        type: "integer";
+        description?: string;
+        minimum?: number;
+        maximum?: number;
+        "x-clamp"?: true;
+    };
+    readonly mutation_id: import("./schema.js").StringProperty;
+    readonly step: {
+        type: "string";
+        enum: readonly ("audience_company_size" | "audience_industries" | "audience_markets" | "audience_personas" | "campaign" | "company_context" | "company_research" | "company_review" | "complete" | "daily_rhythm" | "linkedin" | "prospects" | "routines" | "sequence" | "signals" | "tour" | "trial" | "welcome")[];
+        description?: string;
+    };
+}, "mutation_id" | "revision" | "step">;
+export declare const GUIDED_ONBOARDING_SAVE_CONTRACT: import("./schema.js").ContractObject<{
+    readonly revision: {
+        type: "integer";
+        description?: string;
+        minimum?: number;
+        maximum?: number;
+        "x-clamp"?: true;
+    };
+    readonly mutation_id: import("./schema.js").StringProperty;
+    readonly step: {
+        type: "string";
+        enum: readonly ("audience_company_size" | "audience_industries" | "audience_markets" | "audience_personas" | "campaign" | "company_context" | "company_research" | "company_review" | "complete" | "daily_rhythm" | "linkedin" | "prospects" | "routines" | "sequence" | "signals" | "tour" | "trial" | "welcome")[];
+        description?: string;
+    };
+    readonly answers: import("./schema.js").ContractObject<{
+        readonly company_context: import("./schema.js").ContractObject<{
+            readonly website: {
+                oneOf: [import("./schema.js").StringProperty, import("./schema.js").NullProperty];
+                description?: string;
+            };
+            readonly name: import("./schema.js").StringProperty;
+            readonly description: import("./schema.js").StringProperty;
+            readonly context_links: import("./schema.js").ArrayProperty<import("./schema.js").StringProperty>;
+            readonly file_ids: import("./schema.js").ArrayProperty<import("./schema.js").StringProperty>;
+        }, "context_links" | "description" | "file_ids" | "name" | "website">;
+        readonly company_review: import("./schema.js").ContractObject<{
+            readonly statement: import("./schema.js").StringProperty;
+            readonly profile_revision: import("./schema.js").StringProperty;
+        }, "profile_revision" | "statement">;
+        readonly audience_company_size: import("./schema.js").ContractObject<{
+            readonly values: import("./schema.js").ArrayProperty<import("./schema.js").StringProperty>;
+        }, "values">;
+        readonly audience_markets: import("./schema.js").ContractObject<{
+            readonly values: import("./schema.js").ArrayProperty<import("./schema.js").StringProperty>;
+        }, "values">;
+        readonly audience_industries: import("./schema.js").ContractObject<{
+            readonly values: import("./schema.js").ArrayProperty<import("./schema.js").StringProperty>;
+        }, "values">;
+        readonly audience_personas: import("./schema.js").ContractObject<{
+            readonly values: import("./schema.js").ArrayProperty<import("./schema.js").StringProperty>;
+        }, "values">;
+        readonly signals: import("./schema.js").ContractObject<{
+            readonly hiring: import("./schema.js").ContractObject<{
+                readonly mode: {
+                    type: "string";
+                    enum: readonly ("none" | "selected")[];
+                    description?: string;
+                };
+                readonly values: import("./schema.js").ArrayProperty<import("./schema.js").StringProperty>;
+            }, "mode" | "values">;
+            readonly technology: import("./schema.js").ContractObject<{
+                readonly mode: {
+                    type: "string";
+                    enum: readonly ("none" | "selected")[];
+                    description?: string;
+                };
+                readonly values: import("./schema.js").ArrayProperty<import("./schema.js").ContractObject<{
+                    readonly name: import("./schema.js").StringProperty;
+                    readonly relationship: {
+                        type: "string";
+                        enum: readonly ("integrates_with" | "replaces" | "uses")[];
+                        description?: string;
+                    };
+                }, "name" | "relationship">>;
+            }, "mode" | "values">;
+        }, "hiring" | "technology">;
+        readonly prospects: import("./schema.js").ContractObject<{
+            readonly decision: {
+                type: "string";
+                enum: readonly ("continue" | "refine")[];
+                description?: string;
+            };
+            readonly feedback: import("./schema.js").StringProperty;
+        }, "decision" | "feedback">;
+        readonly linkedin: import("./schema.js").ContractObject<{
+            readonly choice: {
+                type: "string";
+                enum: readonly ("connect" | "skip")[];
+                description?: string;
+            };
+        }, "choice">;
+        readonly sequence: import("./schema.js").ContractObject<{
+            readonly decision: {
+                type: "string";
+                enum: readonly ("keep_draft" | "review")[];
+                description?: string;
+            };
+        }, "decision">;
+        readonly tour: import("./schema.js").ContractObject<{
+            readonly visited: import("./schema.js").ArrayProperty<{
+                type: "string";
+                enum: readonly ("leads" | "overview" | "sequence" | "sourcing")[];
+                description?: string;
+            }>;
+        }, "visited">;
+    }, never>;
+    readonly advance: import("./schema.js").BooleanProperty;
+}, "answers" | "mutation_id" | "revision" | "step">;
+export declare const GUIDED_ONBOARDING_NAVIGATION_CONTRACT: import("./schema.js").ContractObject<{
+    readonly revision: {
+        type: "integer";
+        description?: string;
+        minimum?: number;
+        maximum?: number;
+        "x-clamp"?: true;
+    };
+    readonly mutation_id: import("./schema.js").StringProperty;
+    readonly step: {
+        type: "string";
+        enum: readonly ("audience_company_size" | "audience_industries" | "audience_markets" | "audience_personas" | "campaign" | "company_context" | "company_research" | "company_review" | "complete" | "daily_rhythm" | "linkedin" | "prospects" | "routines" | "sequence" | "signals" | "tour" | "trial" | "welcome")[];
+        description?: string;
+    };
+    readonly paused: import("./schema.js").BooleanProperty;
+    readonly tour_active_stop: {
+        type: "string";
+        enum: readonly ("leads" | "overview" | "sequence" | "sourcing")[];
+        description?: string;
+    };
+}, "mutation_id" | "paused" | "revision" | "step">;
+export declare const GUIDED_ONBOARDING_CHECKOUT_CONTRACT: import("./schema.js").ContractObject<{
+    readonly revision: {
+        type: "integer";
+        description?: string;
+        minimum?: number;
+        maximum?: number;
+        "x-clamp"?: true;
+    };
+    readonly mutation_id: import("./schema.js").StringProperty;
+    readonly approved: import("./schema.js").BooleanProperty;
+}, "approved" | "mutation_id" | "revision">;
+export declare const GUIDED_ONBOARDING_JOURNEY_ACTIONS: readonly ["get", "save", "advance", "back", "restart", "billing", "checkout", "navigation", "prospects_preview"];
+export type GuidedOnboardingJourneyAction = typeof GUIDED_ONBOARDING_JOURNEY_ACTIONS[number];
+import type { OperationSpec } from "./operations.js";
+export declare const GUIDED_ONBOARDING_JOURNEY_OPERATIONS: readonly OperationSpec[];

package/node_modules/@oxygen/shared/dist/contracts/guided-onboarding-journey.js

@@ -0,0 +1,63 @@
+import { arr, bool, enumOf, int, obj, str } from "./schema.js";
+import { GUIDED_ONBOARDING_COMPANY_CONTEXT_CONTRACT } from "../guided-onboarding-company-context.js";
+import { GUIDED_ONBOARDING_STEPS, GUIDED_ONBOARDING_TECHNOLOGY_RELATIONSHIPS } from "../guided-onboarding-journey.js";
+const mode = () => enumOf(["none", "selected"]);
+const name = () => str({ minLength: 1, maxLength: 160 });
+/** Hiring roles remain strings. Technology identity includes its relationship. */
+export const GUIDED_ONBOARDING_SIGNALS_CONTRACT = obj({
+    hiring: obj({ mode: mode(), values: arr(name(), { maxItems: 40 }) }, { required: ["mode", "values"] }),
+    technology: obj({
+        mode: mode(),
+        values: arr(obj({ name: name(), relationship: enumOf(GUIDED_ONBOARDING_TECHNOLOGY_RELATIONSHIPS) }, { required: ["name", "relationship"] }), { maxItems: 40 }),
+    }, { required: ["mode", "values"] }),
+}, { required: ["hiring", "technology"] });
+const choice = () => obj({ values: arr(name(), { minItems: 1, maxItems: 40 }) }, { required: ["values"] });
+export const GUIDED_ONBOARDING_ANSWERS_CONTRACT = obj({
+    company_context: GUIDED_ONBOARDING_COMPANY_CONTEXT_CONTRACT,
+    company_review: obj({ statement: str({ minLength: 1, maxLength: 12000 }), profile_revision: str({ minLength: 1, maxLength: 160 }) }, { required: ["statement", "profile_revision"] }),
+    audience_company_size: choice(), audience_markets: choice(), audience_industries: choice(), audience_personas: choice(),
+    signals: GUIDED_ONBOARDING_SIGNALS_CONTRACT,
+    prospects: obj({ decision: enumOf(["continue", "refine"]), feedback: str({ maxLength: 4000 }) }, { required: ["decision", "feedback"] }),
+    linkedin: obj({ choice: enumOf(["connect", "skip"]) }, { required: ["choice"] }),
+    sequence: obj({ decision: enumOf(["review", "keep_draft"]) }, { required: ["decision"] }),
+    tour: obj({ visited: arr(enumOf(["overview", "leads", "sourcing", "sequence"]), { maxItems: 4 }) }, { required: ["visited"] }),
+});
+const mutation = { revision: int({ minimum: 1 }), mutation_id: str({ minLength: 1, maxLength: 160, pattern: "^[a-zA-Z0-9_.:-]+$" }) };
+export const GUIDED_ONBOARDING_MUTATION_CONTRACT = obj(mutation, { required: ["revision", "mutation_id"] });
+export const GUIDED_ONBOARDING_ADVANCE_CONTRACT = obj({ ...mutation, step: enumOf(GUIDED_ONBOARDING_STEPS) }, { required: ["revision", "mutation_id", "step"] });
+export const GUIDED_ONBOARDING_SAVE_CONTRACT = obj({ ...mutation, step: enumOf(GUIDED_ONBOARDING_STEPS),
+    answers: GUIDED_ONBOARDING_ANSWERS_CONTRACT, advance: bool({ description: "Save and advance in one native transaction after checking this step. No provider action or implicit activation." }) }, { required: ["revision", "mutation_id", "step", "answers"] });
+export const GUIDED_ONBOARDING_NAVIGATION_CONTRACT = obj({ ...mutation, step: enumOf(GUIDED_ONBOARDING_STEPS), paused: bool(),
+    tour_active_stop: enumOf(["overview", "leads", "sourcing", "sequence"]) }, { required: ["revision", "mutation_id", "step", "paused"] });
+export const GUIDED_ONBOARDING_CHECKOUT_CONTRACT = obj({ ...mutation, approved: bool() }, { required: ["revision", "mutation_id", "approved"] });
+export const GUIDED_ONBOARDING_JOURNEY_ACTIONS = ["get", "save", "advance", "back", "restart", "billing", "checkout", "navigation", "prospects_preview"];
+const base = "/api/cli/onboarding/activation/{activationId}/journey";
+export const GUIDED_ONBOARDING_JOURNEY_OPERATIONS = [
+    { id: "onboarding.journey.get", route: base, method: "GET", contract: obj({}), parameters: ["activationId"],
+        cli: { path: ["onboarding", "journey", "get"], summary: "Read your private resumable onboarding answers and native progress." },
+        mcp: { name: "oxygen_onboarding_journey_get", title: "Oxygen: Read onboarding journey", description: "Read your activationId journey and saved answers. Creator-private; enabled genuine DEV only. No research, model call or message send.", pack: "agents" }, mutates: false, spends: false },
+    { id: "onboarding.journey.save", route: base, method: "POST", parameters: ["activationId"], contract: GUIDED_ONBOARDING_SAVE_CONTRACT,
+        cli: { path: ["onboarding", "journey", "save"], summary: "Save reviewed answers and optionally advance atomically. Free; no model, send or routine execution." },
+        mcp: { name: "oxygen_onboarding_journey_save", title: "Oxygen: Onboarding save", description: "Creator-private DEV onboarding save for activationId. Requires current revision and stable mutation_id. Save accepts only current step answers; company context prepares native sources and records existing bounded research consent. Advance checks native readiness and billing. No paid turn, synchronous research, outreach or routine activation.", pack: "agents", annotations: { destructiveHint: false, openWorldHint: false, idempotentHint: true } }, mutates: true, spends: false },
+    { id: "onboarding.journey.advance", route: `${base}/advance`, method: "POST", parameters: ["activationId"], contract: GUIDED_ONBOARDING_ADVANCE_CONTRACT,
+        cli: { path: ["onboarding", "journey", "advance"], summary: "Advance after native readiness checks. Free; no model, send or routine execution." },
+        mcp: { name: "oxygen_onboarding_journey_advance", title: "Oxygen: Onboarding advance", description: "Creator-private DEV onboarding advance for activationId. Requires current revision and stable mutation_id. Save accepts only current step answers; advance checks native readiness and billing. Restart preserves resources and consumed funding. No paid turn, research, outreach or routine activation.", pack: "agents", annotations: { destructiveHint: false, openWorldHint: false, idempotentHint: true } }, mutates: true, spends: false },
+    { id: "onboarding.journey.back", route: `${base}/back`, method: "POST", parameters: ["activationId"], contract: GUIDED_ONBOARDING_MUTATION_CONTRACT,
+        cli: { path: ["onboarding", "journey", "back"], summary: "Return to the previous step with saved answers. Free; no model, send or routine execution." },
+        mcp: { name: "oxygen_onboarding_journey_back", title: "Oxygen: Onboarding back", description: "Creator-private DEV onboarding back for activationId. Requires current revision and stable mutation_id. Save accepts only current step answers; advance checks native readiness and billing. Restart preserves resources and consumed funding. No paid turn, research, outreach or routine activation.", pack: "agents", annotations: { destructiveHint: false, openWorldHint: false, idempotentHint: true } }, mutates: true, spends: false },
+    { id: "onboarding.journey.restart", route: `${base}/restart`, method: "POST", parameters: ["activationId"], contract: GUIDED_ONBOARDING_MUTATION_CONTRACT,
+        cli: { path: ["onboarding", "journey", "restart"], summary: "Restart progress, preserving Knowledge, chats, campaigns and billing. Free; no model, send or routine execution." },
+        mcp: { name: "oxygen_onboarding_journey_restart", title: "Oxygen: Onboarding restart", description: "Creator-private DEV onboarding restart for activationId. Requires current revision and stable mutation_id. Save accepts only current step answers; advance checks native readiness and billing. Restart preserves resources and consumed funding. No paid turn, research, outreach or routine activation.", pack: "agents", annotations: { destructiveHint: false, openWorldHint: false, idempotentHint: true } }, mutates: true, spends: false },
+    { id: "onboarding.journey.prospects_preview", route: `${base}/prospects/preview`, method: "POST", parameters: ["activationId"], contract: GUIDED_ONBOARDING_MUTATION_CONTRACT,
+        cli: { path: ["onboarding", "journey", "prospects-preview"], summary: "Preview up to five real people for saved targeting through the native free source; persist inspectable native results." },
+        mcp: { name: "oxygen_onboarding_journey_prospects_preview", title: "Oxygen: Preview onboarding prospects", description: "At the prospects step, use current revision and stable mutation_id to preview up to five people from saved targeting. Native free source read and manual preview Table writes; cached retries, no paid fallback, inference, enrollment or outreach. Unsupported criteria remain explicit diagnostics, never verified fit.", pack: "agents", annotations: { openWorldHint: true, destructiveHint: false, idempotentHint: true } }, mutates: true, spends: false },
+    { id: "onboarding.journey.navigation", route: `${base}/navigation`, method: "POST", parameters: ["activationId"], contract: GUIDED_ONBOARDING_NAVIGATION_CONTRACT,
+        cli: { path: ["onboarding", "journey", "navigation"], summary: "Save pause/resume and exact tour position, retaining the current journey step and visited history." },
+        mcp: { name: "oxygen_onboarding_journey_navigation", title: "Oxygen: Save onboarding position", description: "Persist paused and optional tour_active_stop at current step/revision with stable mutation_id. Position is separate from visited history. No step advance, research, send or routine activation.", pack: "agents" }, mutates: true, spends: false },
+    { id: "onboarding.journey.billing", route: `${base}/billing`, method: "GET", contract: obj({}), parameters: ["activationId"],
+        cli: { path: ["onboarding", "journey", "billing"], summary: "Read native trial eligibility; may reconcile an already-earned trial credit grant." },
+        mcp: { name: "oxygen_onboarding_journey_billing", title: "Oxygen: Onboarding billing", description: "Read native TEST trial/paid eligibility for your activationId. May reconcile an already-earned native credit grant, so this is a mutating call. No new subscription or charge; errors remain errors.", pack: "agents", annotations: { openWorldHint: true } }, mutates: true, spends: false },
+    { id: "onboarding.journey.checkout", route: `${base}/checkout`, method: "POST", contract: GUIDED_ONBOARDING_CHECKOUT_CONTRACT, parameters: ["activationId"],
+        cli: { path: ["onboarding", "journey", "checkout"], summary: "Open approved DEV TEST Checkout as current workspace admin/owner, or reuse existing eligible billing." },
+        mcp: { name: "oxygen_onboarding_journey_checkout", title: "Oxygen: Onboarding test Checkout", description: "Current DEV admin/owner only: approved=true, revision and stable mutation_id open card-required TEST Checkout, $0 for seven days then $49/month, once-only 2000 trial credits. Reuses eligible existing paid/trial. No live Stripe fallback or early charge.", pack: "agents", annotations: { openWorldHint: true } }, mutates: true, spends: false },
+];

package/node_modules/@oxygen/shared/dist/contracts/operations.d.ts

@@ -33,6 +33,12 @@ export type OperationSpec<C extends ContractObject = ContractObject> = {
         nameField: string;
         typeField: string;
         fileField: string;
+        /** Opt-in metadata derived from the original --file bytes. Explicit caller
+         * assertions must match; required native fields remain required on the wire. */
+        fileMetadata?: {
+            sha256Field: string;
+            sizeBytesField: string;
+        };
     };
     /** Download bytes through the same authenticated route; never follow redirects. */
     binary?: {

package/node_modules/@oxygen/shared/dist/contracts/operations.js

@@ -12,6 +12,9 @@ import { BROWSER_OPERATIONS } from "./browser-operations.js";
 import { TABLE_FEED_UPDATE_OPERATION } from "./table-feed-update.js";
 import { GEO_OPERATIONS } from "./geo.js";
 import { CUSTOMER_OPERATIONS } from "./customer-operations.js";
+import { GUIDED_ONBOARDING_JOURNEY_OPERATIONS } from "./guided-onboarding-journey.js";
+import { GUIDED_FIRST_SOURCING_OPERATIONS } from "./guided-first-sourcing.js";
+import { GUIDED_COMPANY_FILE_UPLOAD_OPERATION } from "./guided-company-files.js";
 import { GUIDED_ACTIVATION_OPERATIONS } from "./guided-activation.js";
 import { AGENT_SESSION_OPERATIONS } from "./agent-sessions.js";
 import { TEAMMATE_OPERATIONS } from "./teammates.js";
@@ -79,7 +82,9 @@ export function operationFormData(spec, body) {
     if (!fields)
         throw new Error("This operation does not accept a file.");
     const encoded = body[fields.contentField];
-    if (typeof encoded !== "string" || !/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/.test(encoded) || !encoded) {
+    // A repeated capture over multi-megabyte uploads can overflow V8's regexp
+    // stack. Validate the same alphabet, length and terminal padding separately.
+    if (typeof encoded !== "string" || !encoded || encoded.length % 4 !== 0 || /[^A-Za-z0-9+/]/u.test(encoded.replace(/={1,2}$/u, ""))) {
         throw new Error(`${fields.contentField} must contain valid non-empty base64 file bytes.`);
     }
     const bytes = Uint8Array.from(atob(encoded), (character) => character.charCodeAt(0));
@@ -92,6 +97,6 @@ export function operationFormData(spec, body) {
     }
     return form;
 }
-export const OPERATION_SPECS = [SENDER_LIMITS_SET_OPERATION, CONNECTOR_UPDATE_OPERATION, CONNECTOR_EVENTS_REVOKE_OPERATION, WORKSPACE_PAGES_GET_OPERATION, WORKSPACE_PAGES_UPDATE_OPERATION, TABLE_FEED_UPDATE_OPERATION, ...CUSTOMER_OPERATIONS, ...GEO_OPERATIONS, ...BROWSER_OPERATIONS, ...AGENT_SESSION_OPERATIONS, ...GUIDED_ACTIVATION_OPERATIONS, ...TEAMMATE_OPERATIONS, ...WORKSPACE_SKILL_OPERATIONS];
-export const CLI_OPERATIONS = [...CUSTOMER_OPERATIONS, ...GEO_OPERATIONS, ...BROWSER_OPERATIONS, ...AGENT_SESSION_OPERATIONS, ...GUIDED_ACTIVATION_OPERATIONS, ...TEAMMATE_OPERATIONS, ...WORKSPACE_SKILL_OPERATIONS].filter((spec) => spec.generated?.cli !== false);
-export const MCP_OPERATIONS = [...CUSTOMER_OPERATIONS, ...GEO_OPERATIONS, ...BROWSER_OPERATIONS, ...AGENT_SESSION_OPERATIONS, ...GUIDED_ACTIVATION_OPERATIONS, ...TEAMMATE_OPERATIONS, ...WORKSPACE_SKILL_OPERATIONS].filter((spec) => spec.generated?.mcp !== false);
+export const OPERATION_SPECS = [SENDER_LIMITS_SET_OPERATION, CONNECTOR_UPDATE_OPERATION, CONNECTOR_EVENTS_REVOKE_OPERATION, WORKSPACE_PAGES_GET_OPERATION, WORKSPACE_PAGES_UPDATE_OPERATION, TABLE_FEED_UPDATE_OPERATION, ...CUSTOMER_OPERATIONS, ...GEO_OPERATIONS, ...BROWSER_OPERATIONS, ...AGENT_SESSION_OPERATIONS, ...GUIDED_ACTIVATION_OPERATIONS, ...GUIDED_ONBOARDING_JOURNEY_OPERATIONS, ...GUIDED_FIRST_SOURCING_OPERATIONS, GUIDED_COMPANY_FILE_UPLOAD_OPERATION, ...TEAMMATE_OPERATIONS, ...WORKSPACE_SKILL_OPERATIONS];
+export const CLI_OPERATIONS = [...CUSTOMER_OPERATIONS, ...GEO_OPERATIONS, ...BROWSER_OPERATIONS, ...AGENT_SESSION_OPERATIONS, ...GUIDED_ACTIVATION_OPERATIONS, ...GUIDED_ONBOARDING_JOURNEY_OPERATIONS, ...GUIDED_FIRST_SOURCING_OPERATIONS, GUIDED_COMPANY_FILE_UPLOAD_OPERATION, ...TEAMMATE_OPERATIONS, ...WORKSPACE_SKILL_OPERATIONS].filter((spec) => spec.generated?.cli !== false);
+export const MCP_OPERATIONS = [...CUSTOMER_OPERATIONS, ...GEO_OPERATIONS, ...BROWSER_OPERATIONS, ...AGENT_SESSION_OPERATIONS, ...GUIDED_ACTIVATION_OPERATIONS, ...GUIDED_ONBOARDING_JOURNEY_OPERATIONS, ...GUIDED_FIRST_SOURCING_OPERATIONS, GUIDED_COMPANY_FILE_UPLOAD_OPERATION, ...TEAMMATE_OPERATIONS, ...WORKSPACE_SKILL_OPERATIONS].filter((spec) => spec.generated?.mcp !== false);

package/node_modules/@oxygen/shared/dist/contracts/table-query-raw.d.ts

@@ -11,4 +11,6 @@ export declare const TABLE_QUERY_RAW_CONTRACT: import("./schema.js").ContractObj
 export declare const TABLE_QUERY_CLI_DEFAULT_LIMIT = 20;
 export declare const TABLE_QUERY_CLI_DEFAULT_MAX_CHARS = 12000;
 export declare function tableQueryRawResultFits(data: Record<string, unknown>, maxChars: number | undefined): boolean;
+/** What a page shortened to fit its result window says to do next (CLI, MCP and API alike). */
+export declare const TABLE_QUERY_RESULT_WINDOW_NEXT_STEP: string;
 export declare function tableQueryRawRecovery(table: string, row?: string): Record<string, unknown>;

package/node_modules/@oxygen/shared/dist/contracts/table-query-raw.js

@@ -9,6 +9,9 @@ export const TABLE_QUERY_CLI_DEFAULT_MAX_CHARS = 12_000;
 export function tableQueryRawResultFits(data, maxChars) {
     return maxChars === undefined || JSON.stringify(success("tables query", data)).length <= maxChars;
 }
+/** What a page shortened to fit its result window says to do next (CLI, MCP and API alike). */
+export const TABLE_QUERY_RESULT_WINDOW_NEXT_STEP = "This page holds fewer rows than the limit so it fits the result window; every value is complete. "
+    + "Continue with nextCursor (same table, filters, sorts and fields), or select fewer fields for more rows per page.";
 export function tableQueryRawRecovery(table, row) {
     return {
         table,

package/node_modules/@oxygen/shared/dist/contracts/teammates.js

@@ -6,7 +6,8 @@ import { arr, bool, enumOf, int, obj, str } from "./schema.js";
 /**
  * AI teammates (ADR 0032), branded Oxygents: Agents with one ongoing chat,
  * shared by default or Personal, the workspace's first one ("New Bot" until named) and
- * any others added, none with a role (Tim, 2026-10-13). Staff on dev only.
+ * any others added, none with a role (Tim, 2026-10-13). Every member but a client
+ * login has them where the workspace does (launched 2026-10-17).
  * The people-facing names say Oxygent (`oxygen oxygents`, `oxygen_oxygents_*`,
  * Tim 2026-10-12); the HTTP family and the code keep "teammates".
  */
@@ -53,20 +54,20 @@ export const TEAMMATE_OPERATIONS = [
     // Adding a teammate (phase 7): a custom Agent that can chat at once and run
     // on its own, under a policy that asks before any write, send or spend. As in
     // Grok Bot, it can start as just "New Bot" and learn its job in the chat.
-    teammateOperation("teammates.create", "create", "POST", "", `Add an Oxygent to the workspace, named "${NEW_TEAMMATE_NAME}" unless you name it; tell it its job in your chat with it. It can chat at once and run on its own (background tasks, routines), reading freely and asking before anything that writes, sends or spends. You own it. Workspace access and a shared chat are the default; choose personal for creator-only access. Free: adding one starts no inference.`, {
+    teammateOperation("teammates.create", "create", "POST", "", `Add an Oxygent to the workspace, named "${NEW_TEAMMATE_NAME}" unless you name it; tell it its job in your chat with it. It can chat at once and run on its own (background tasks, routines), reading freely and asking before anything that writes, sends or spends. You own it. Workspace access as collaborators and a shared chat are the default; choose personal for creator-only access. Free: adding one starts no inference.`, {
         ...TEAMMATE_PROFILE_FIELDS,
-        visibility: enumOf(["workspace", "personal"], { description: "Workspace (default) shares one chat history with everyone who has access. Personal is accessible only to its creator here, including against workspace admins. An API key acts as the person who issued it." }),
+        visibility: enumOf(["workspace", "personal"], { description: "Workspace (default) shares one chat history with everyone who has access. Personal is accessible only to its creator here, including against workspace admins. Explicitly saving to team memory publishes that entry to the workspace. An API key acts as the person who issued it." }),
         slug: str({ minLength: 2, maxLength: 49, pattern: TEAMMATE_SLUG_PATTERN, description: "Its permanent handle in commands and links; made from the name when omitted." }),
     }),
     teammateOperation("teammates.get", "get", "GET", "/{slug}", "Read one Oxygent's profile and its ongoing chat and visibility."),
-    teammateOperation("teammates.update", "update", "PATCH", "/{slug}", "Edit an Oxygent's profile as its owner, manager or a workspace admin. Only its owner can change visibility, with confirm_visibility. History is kept in both directions: Workspace shares it all; Personal removes others' future access but cannot retract what they saw. Home stays Workspace. Free.", { ...TEAMMATE_PROFILE_FIELDS, visibility: enumOf(["workspace", "personal"], { description: "Only the owner can change visibility. Workspace shares the complete history; Personal retains all messages, removes additional grants and everyone else's future access. Home stays Workspace." }), confirm_visibility: bool({ description: "Required when changing visibility: publishing shares all history; making personal removes everyone else's future access but cannot retract what they saw." }) }),
+    teammateOperation("teammates.update", "update", "PATCH", "/{slug}", "Edit an Oxygent's profile, or change visibility as its owner with confirm_visibility. Owners, managers and workspace admins can edit profiles. History is kept in both directions: Workspace shares it all; Personal removes others' future access but cannot retract what they saw. Home (the first Oxygent) stays Workspace. Free.", { ...TEAMMATE_PROFILE_FIELDS, visibility: enumOf(["workspace", "personal"], { description: "Only the owner can change visibility. Workspace grants everyone collaborator access and shares the complete history; Personal retains all messages, removes additional grants and everyone else's future access. Explicitly saving to team memory publishes that entry to the workspace. Home (the first Oxygent) stays Workspace." }), confirm_visibility: bool({ description: "Required when changing visibility: publishing shares all history; making personal removes everyone else's future access but cannot retract what they saw." }) }),
     // Sharing (Tim, 2026-10-14: "make agents accessible to your team mates"), the
     // way Grok Bot shares a Bot: everyone in the workspace, or people by email,
     // each as a collaborator or a manager, with one ongoing shared chat.
-    teammateOperation("teammates.access", "access", "GET", "/{slug}/access", "Read access (visibility, owner, everyone, named people with roles, fixed and your permissions), without chat history. A collaborator uses its shared chat; a manager also changes its profile and access. Personal is creator-only; Home is fixed. Free."),
+    teammateOperation("teammates.access", "access", "GET", "/{slug}/access", "Read access (visibility, owner, everyone, named people with roles, fixed and your permissions), without chat history. A collaborator uses its shared chat; a manager also changes its profile and access. Personal is creator-only; Home (the first Oxygent) is fixed. Free."),
     teammateOperation("teammates.share", "share", "POST", "/{slug}/access", "Share an Oxygent with teammates, or stop sharing it: with everyone in the workspace (everyone), or with people by their workspace email (add, as role; remove). Everyone with access reads the same chat history. Personal Oxygents cannot be shared; change visibility explicitly first. Its owner, its managers or a workspace admin only; never the first Oxygent, which is everyone's. Free.", {
         everyone: enumOf([...TEAMMATE_SHARE_ROLES, "off"], {
-            description: "Workspace-wide role: collaborator, manager, or off (owner and named people, with workspace admins retaining management access). This restricts a Workspace Oxygent's audience; it does not make it Personal or split its shared chat.",
+            description: "Workspace-wide role: collaborator (the default), manager, or off (owner and named people, with workspace admins retaining management access). This restricts a Workspace Oxygent's audience; it does not make it Personal or split its shared chat.",
         }),
         add: arr(str({ minLength: 3, maxLength: 320 }), { maxItems: 50, description: "People to share it with, by their workspace email." }),
         role: enumOf([...TEAMMATE_SHARE_ROLES], {
@@ -80,7 +81,7 @@ export const TEAMMATE_OPERATIONS = [
     // Copy and delete (Tim, 2026-10-13: "CRUD actions ... through the right
     // click"; "'delete' should be 'full delete'"), as Grok Bot's Bot menu has.
     teammateOperation("teammates.duplicate", "duplicate", "POST", "/{slug}/duplicate", `Copy an Oxygent as a new one you own, named "<name> copy" unless you name it: its job, look, instructions, skills and tool settings, but not its chats, memory, routines or who it is shared with. The copy defaults to Workspace; choose Personal for creator-only access. Free.`, {
-        visibility: enumOf(["workspace", "personal"], { description: "Visibility of the copy; Workspace by default. No history is copied." }),
+        visibility: enumOf(["workspace", "personal"], { description: "Visibility of the copy; Workspace by default. No history is copied. Explicitly saving to team memory publishes that entry to the workspace." }),
         name: str({
             minLength: 1, maxLength: TEAMMATE_NAME_MAX_CHARS,
             description: "What everyone calls the copy. Its slug is made from the name, and a deleted Oxygent's slug stays taken, so a copy can get a numbered one (scout-2).",
@@ -115,7 +116,7 @@ export const TEAMMATE_OPERATIONS = [
     teammateOperation("teammates.memory", "memory", "GET", "/{slug}/memory", "List what the team asked an Oxygent to remember. Every chat with it reads this; it is a Knowledge page."),
     teammateOperation("teammates.remember", "remember", "POST", "/{slug}/memory", "Add one thing to an Oxygent's team memory: every chat with it reads it, and the whole workspace can see it. Free.", { text: str({ minLength: 1, maxLength: 500 }) }, ["text"]),
     teammateOperation("teammates.forget", "forget", "DELETE", "/{slug}/memory/{entry_id}", "Remove one entry from an Oxygent's team memory."),
-    teammateOperation("teammates.notes", "notes", "GET", "/{slug}/notes", "Read what an Oxygent keeps about you: private to you, read only in your own chat with it."),
+    teammateOperation("teammates.notes", "notes", "GET", "/{slug}/notes", "Read what an Oxygent keeps about you. Private to you; never included in shared Workspace or multi-person group chats."),
     teammateOperation("teammates.notes_set", "notes_set", "POST", "/{slug}/notes", "Replace what an Oxygent keeps about you; empty clears it. Private to you.", { notes: str({ maxLength: 4000 }) }, ["notes"]),
     teammateOperation("teammates.activity", "activity", "GET", "/{slug}/activity", "List an Oxygent's recent work: its runs and the actions taken in its chats, as metadata only (no goals or messages)."),
     teammateGroupOperation("teammate_groups.list", "groups", "GET", "", "List the group chats you are in: name, Oxygents, people (each an admin or member) and the chat (working or waiting for you, unread, the latest words and who said them). Candidates are the teammates a new group chat could bring in."),

package/node_modules/@oxygen/shared/dist/data-suppliers.d.ts

@@ -1,3 +1,4 @@
+import { type ManagedScraperBackend } from "./managed-scraper-backend.js";
 /**
  * The companies that supply OXYGEN's managed data, keyed by OXYGEN provider id.
  *
@@ -12,7 +13,11 @@
  * import it.
  */
 export declare const MANAGED_DATA_SUPPLIERS: {
-    /** The managed `scraper.*` LinkedIn rail. HarvestAPI is BYOK only and is not listed. */
+    /**
+     * The managed `scraper.*` LinkedIn rail on its default backend. The rail's
+     * supplier follows LINKEDIN_SCRAPER_PROVIDER: read it through
+     * managedDataSupplier("scraper"), never from this entry.
+     */
     readonly scraper: "Up2Data";
     /** Company-page follower audiences, fulfilled by the vendor. */
     readonly scrapeli: "ScrapeLi";
@@ -22,6 +27,17 @@ export declare const MANAGED_DATA_SUPPLIERS: {
     readonly crustdata: "Crustdata";
 };
 export type ManagedDataSupplierProvider = keyof typeof MANAGED_DATA_SUPPLIERS;
+/**
+ * Every company that can supply the managed LinkedIn rail, by backend (Philipp,
+ * 2026-10-17). Both are subprocessors: HarvestAPI serves OXYGEN's key once the
+ * switch is flipped, and Up2Data keeps serving a workspace's own Up2Data key.
+ */
+export declare const MANAGED_SCRAPER_SUPPLIERS: {
+    readonly up2data: "Up2Data";
+    readonly harvestapi: "HarvestAPI";
+};
+/** The managed LinkedIn rail's supplier on the backend this server selects. */
+export declare function managedScraperSupplier(backend?: ManagedScraperBackend): string;
 /**
  * Customer-visible name of the managed LinkedIn data rail (`scraper.*`). Founder
  * decision 2026-09-25: data-extraction labels say "Professional Network", while
@@ -36,7 +52,21 @@ export declare function managedDataSupplier(provider: string | null | undefined)
  * · supplied by Bright Data").
  */
 export declare function suppliedByLabel(name: string, provider: string | null | undefined): string;
-/** "Professional Network Data · supplied by Up2Data" — the managed LinkedIn rail's label. */
+/**
+ * "Professional Network Data · supplied by <supplier>" — the managed LinkedIn
+ * rail's label, naming the supplier the server's backend switch selects. A
+ * browser bundle cannot read that switch, so there the label names no supplier
+ * rather than a possibly wrong one.
+ */
+export declare function professionalNetworkDataLabel(): string;
+/**
+ * "Professional Network Data (<supplier>)" in running prose on a server; the
+ * bare name where the backend switch cannot be read (a browser bundle).
+ */
+export declare function professionalNetworkDataSource(): string;
+/** "Supplied by <supplier>." for the managed LinkedIn rail, or "" where the switch cannot be read. */
+export declare function managedScraperSuppliedBySentence(): string;
+/** The label resolved when this module loads (server processes read their switch at boot). */
 export declare const PROFESSIONAL_NETWORK_DATA_LABEL: string;
 /**
  * How a supplier obtains an operation's data. Informational only: it never gates,

package/node_modules/@oxygen/shared/dist/data-suppliers.js

@@ -1,3 +1,4 @@
+import { readManagedScraperBackend, serverEnv } from "./managed-scraper-backend.js";
 /**
  * The companies that supply OXYGEN's managed data, keyed by OXYGEN provider id.
  *
@@ -12,7 +13,11 @@
  * import it.
  */
 export const MANAGED_DATA_SUPPLIERS = {
-    /** The managed `scraper.*` LinkedIn rail. HarvestAPI is BYOK only and is not listed. */
+    /**
+     * The managed `scraper.*` LinkedIn rail on its default backend. The rail's
+     * supplier follows LINKEDIN_SCRAPER_PROVIDER: read it through
+     * managedDataSupplier("scraper"), never from this entry.
+     */
     scraper: "Up2Data",
     /** Company-page follower audiences, fulfilled by the vendor. */
     scrapeli: "ScrapeLi",
@@ -21,6 +26,19 @@ export const MANAGED_DATA_SUPPLIERS = {
     /** Indexed company and people data on OXYGEN's managed key. */
     crustdata: "Crustdata",
 };
+/**
+ * Every company that can supply the managed LinkedIn rail, by backend (Philipp,
+ * 2026-10-17). Both are subprocessors: HarvestAPI serves OXYGEN's key once the
+ * switch is flipped, and Up2Data keeps serving a workspace's own Up2Data key.
+ */
+export const MANAGED_SCRAPER_SUPPLIERS = {
+    up2data: "Up2Data",
+    harvestapi: "HarvestAPI",
+};
+/** The managed LinkedIn rail's supplier on the backend this server selects. */
+export function managedScraperSupplier(backend = readManagedScraperBackend()) {
+    return MANAGED_SCRAPER_SUPPLIERS[backend];
+}
 /**
  * Customer-visible name of the managed LinkedIn data rail (`scraper.*`). Founder
  * decision 2026-09-25: data-extraction labels say "Professional Network", while
@@ -31,6 +49,8 @@ export const PROFESSIONAL_NETWORK_DATA_NAME = "Professional Network Data";
 export function managedDataSupplier(provider) {
     if (!provider || !Object.hasOwn(MANAGED_DATA_SUPPLIERS, provider))
         return null;
+    if (provider === "scraper")
+        return managedScraperSupplier();
     return MANAGED_DATA_SUPPLIERS[provider];
 }
 /**
@@ -44,11 +64,31 @@ export function suppliedByLabel(name, provider) {
         return name;
     return `${name} · supplied by ${supplier}`;
 }
-/** "Professional Network Data · supplied by Up2Data" — the managed LinkedIn rail's label. */
-export const PROFESSIONAL_NETWORK_DATA_LABEL = suppliedByLabel(PROFESSIONAL_NETWORK_DATA_NAME, "scraper");
+/**
+ * "Professional Network Data · supplied by <supplier>" — the managed LinkedIn
+ * rail's label, naming the supplier the server's backend switch selects. A
+ * browser bundle cannot read that switch, so there the label names no supplier
+ * rather than a possibly wrong one.
+ */
+export function professionalNetworkDataLabel() {
+    return serverEnv() ? suppliedByLabel(PROFESSIONAL_NETWORK_DATA_NAME, "scraper") : PROFESSIONAL_NETWORK_DATA_NAME;
+}
+/**
+ * "Professional Network Data (<supplier>)" in running prose on a server; the
+ * bare name where the backend switch cannot be read (a browser bundle).
+ */
+export function professionalNetworkDataSource() {
+    return serverEnv() ? `${PROFESSIONAL_NETWORK_DATA_NAME} (${managedScraperSupplier()})` : PROFESSIONAL_NETWORK_DATA_NAME;
+}
+/** "Supplied by <supplier>." for the managed LinkedIn rail, or "" where the switch cannot be read. */
+export function managedScraperSuppliedBySentence() {
+    return serverEnv() ? `Supplied by ${managedScraperSupplier()}.` : "";
+}
+/** The label resolved when this module loads (server processes read their switch at boot). */
+export const PROFESSIONAL_NETWORK_DATA_LABEL = professionalNetworkDataLabel();
 /** The disclosure an operation carries, in one sentence per method. */
 export function dataSourcingFor(provider, method) {
-    const supplier = MANAGED_DATA_SUPPLIERS[provider];
+    const supplier = managedDataSupplier(provider) ?? MANAGED_DATA_SUPPLIERS[provider];
     return {
         supplier,
         method,

package/node_modules/@oxygen/shared/dist/email-tracking-token.d.ts

@@ -37,6 +37,8 @@ export type EmailTrackingTokenPayload = {
     enr?: string;
     /** Issued-at (epoch ms), recorded as provenance. */
     iat: number;
+    /** Diagnostic copy test: preserve transport rendering without campaign analytics. */
+    diagnostic?: true;
 };
 /** SHA-256 hex of a destination URL — the value bound into a click token's `uh`. */
 export declare function hashTrackingUrl(url: string): string;