@oxygen-agent/cli 1.1014.1087 → 1.1014.1136

package/README.md

@@ -34,4 +34,4 @@ oxygen update
 
 For product documentation, visit https://oxygen-agent.com/docs. For support, visit https://oxygen-agent.com.
 
-Version: 1.1014.1087
+Version: 1.1014.1136

package/dist/commands/columns.js

@@ -830,7 +830,7 @@ export function registerColumnsFamily(program, handleAsyncAction) {
         .addCommand(new Command("add")
         .description("Add a nullable column, a catalog template (--prompt-key) or a multi-column enrichment bundle (--preset) to a workspace table. Writes the definition only — this never runs the column and never spends credits; use `columns run` for that, with --dry-run first to see the cost. For a page, posting or filing the row already links to, or a company fact Oxygen already knows how to research (founders, parent company, funding, cloud provider, offers demos, industry, NAICS, HQ, a LinkedIn or Crunchbase page), pick a template from `columns catalog` (--prompt-key) instead of writing a prompt; or read a URL column with --kind research --research-url. The guide is the oxygen-tables skill (`oxygen skills get oxygen-tables --json`). For ICP fit, use Classify Score: `columns add <table> --label 'ICP fit' --score 'low,medium,high' --prompt 'Assess {{company_name}}: {{description}}, {{employees}} employees' --grounding workspace` (0.075 credits/row). A formula column needs no run at all: it evaluates on read from its current inputs, so `tables query` shows its values immediately. A plain field is --type: text, number, checkbox, date, json, markdown, image, or a choice column — select, multi_select or status, with --options \"Lead,Contacted,Won\". To link another table row to row, use `oxygen tables relate <table> --to <other-table> --live`; to read a value out of one, --lookup-table.")
         .argument("<table>", "Table id or slug.")
-        .option("--preset <preset>", "Add a pre-built column bundle instead of one column, which is what --prompt-key adds: a preset writes SEVERAL columns at once and needs no --input on a table whose identity column it can find, while --prompt-key adds one template column and binds each input you name. Presets: `person_enrich` (one LinkedIn profile lookup — Blitz first, Professional Network Data (Up2Data) only when Blitz has no match — then first/last/full name, current company and its LinkedIn URL, job title, start date, education, school, headline, bio, location and followers as free stored fields that fill when the lookup runs, followers only on rows Professional Network Data answers because Blitz publishes none; the person templates in `columns catalog --category people` all read its payload column), `company_enrich` (one company lookup from a domain or LinkedIn URL — Blitz first, Professional Network Data (Up2Data) only when Blitz has no match, about 1 credit a company — keeping the whole profile in its JSON column plus name, domain, LinkedIn URL, headcount, industry, description, founded year and HQ country as free stored fields; no field choices; binds to the person preset's current_company_linkedin_url automatically), `company_tech_stack` (the technologies a company runs, from its website and hiring), `company_funding` (total raised, latest round, number of rounds and investors), `company_revenue` (an annual revenue estimate), `company_hiring` (the roles a company is hiring for, with a count) — each of these four is one paid lookup column that fills its own columns, priced per row in `tools search --for-table` — plus `company_lookalikes` (one managed lookup from --input company_domain=website; keeps similar companies separate from the seed; dry-run for price) — or `domain_check` (0.1 credits/row at list price for a live/redirect/parked/not_found/dead verdict on every domain, cached 30 days, plus a free label column to filter on). For a single cleaned or classified column, use a template from `columns catalog` instead — that is one column, not a bundle. Name the input column with --input: `url` for person_enrich, `domain` and/or `linkedin_url` for the company presets. Any column works whatever it is called; without --input Oxygen guesses from column names. Creating the columns is free; run them afterwards, --dry-run first.")
+        .option("--preset <preset>", "Add a pre-built column bundle instead of one column, which is what --prompt-key adds: a preset writes SEVERAL columns at once and needs no --input on a table whose identity column it can find, while --prompt-key adds one template column and binds each input you name. Presets: `person_enrich` (one LinkedIn profile lookup — Blitz first, Professional Network Data only when Blitz has no match — then first/last/full name, current company and its LinkedIn URL, job title, start date, education, school, headline, bio, location and followers as free stored fields that fill when the lookup runs, followers only on rows Professional Network Data answers because Blitz publishes none; the person templates in `columns catalog --category people` all read its payload column), `company_enrich` (one company lookup from a domain or LinkedIn URL — Blitz first, Professional Network Data only when Blitz has no match, about 1 credit a company — keeping the whole profile in its JSON column plus name, domain, LinkedIn URL, headcount, industry, description, founded year and HQ country as free stored fields; no field choices; binds to the person preset's current_company_linkedin_url automatically), `company_tech_stack` (the technologies a company runs, from its website and hiring), `company_funding` (total raised, latest round, number of rounds and investors), `company_revenue` (an annual revenue estimate), `company_hiring` (the roles a company is hiring for, with a count) — each of these four is one paid lookup column that fills its own columns, priced per row in `tools search --for-table` — plus `company_lookalikes` (one managed lookup from --input company_domain=website; keeps similar companies separate from the seed; dry-run for price) — or `domain_check` (0.1 credits/row at list price for a live/redirect/parked/not_found/dead verdict on every domain, cached 30 days, plus a free label column to filter on). For a single cleaned or classified column, use a template from `columns catalog` instead — that is one column, not a bundle. Name the input column with --input: `url` for person_enrich, `domain` and/or `linkedin_url` for the company presets. Any column works whatever it is called; without --input Oxygen guesses from column names. Creating the columns is free; run them afterwards, --dry-run first.")
         .option("--input <slot=column...>", "Bind a preset or template input to an exact column, e.g. --input url=pricing_url with --prompt-key, or --input domain=website --input linkedin_url=company_li with --preset. Repeatable. For a preset it is only needed when the automatic match is wrong or missing; for a template it names the column each declared input reads.", collectRepeatable, [])
         // No preset takes a field list any more (founder, 2026-09-24). Hidden,
         // not removed: an old script passing them gets the server's refusal,

package/dist/commands/viewers.js

@@ -1,6 +1,5 @@
 import { requestOxygen } from "../http-client.js";
 import { readOption } from "../util.js";
-import { MANAGED_DATA_SUPPLIERS } from "@oxygen/shared/data-suppliers";
 import { Command } from "commander";
 export function registerViewersFamily(program, handleAsyncAction) {
     program.addCommand(new Command("viewers")
@@ -54,7 +53,7 @@ export function registerViewersFamily(program, handleAsyncAction) {
         });
     }))
         .addCommand(new Command("enrichment")
-        .description("Turn automatic full-profile enrichment of NEW profile viewers on or off for the viewers table (" + MANAGED_DATA_SUPPLIERS.scraper + " profile: about, current role and company, experience, education, location). This is STANDING credit spend, charged credits_per_person credits per enriched viewer, applied only to viewers first seen after `enrichment.enabled_at`, each delivery bounded by `enrichment.max_credits_per_delivery` (the plan default). Switching on adds the table's Person profile columns (a paid lookup plus its extractors); they stay, with their data, when switched off. Existing rows are never charged by it — enrich them on demand by running the Person profile column. `viewers status` shows `enrichment` (on, credits_per_person, enabled_at, max_credits_per_delivery, next_capture_at: when new viewers can next arrive); the runs appear on the table's Runs page. Requires exactly one of --on or --off.")
+        .description("Turn automatic full-profile enrichment of NEW profile viewers on or off for the viewers table (managed LinkedIn profile: about, current role and company, experience, education, location). This is STANDING credit spend, charged credits_per_person credits per enriched viewer, applied only to viewers first seen after `enrichment.enabled_at`, each delivery bounded by `enrichment.max_credits_per_delivery` (the plan default). Switching on adds the table's Person profile columns (a paid lookup plus its extractors); they stay, with their data, when switched off. Existing rows are never charged by it — enrich them on demand by running the Person profile column. `viewers status` shows `enrichment` (on, credits_per_person, enabled_at, max_credits_per_delivery, next_capture_at: when new viewers can next arrive); the runs appear on the table's Runs page. Requires exactly one of --on or --off.")
         .option("--on", "Switch standing enrichment on for new viewers.")
         .option("--off", "Switch standing enrichment off.")
         .option("--json", "Print a JSON envelope.")

package/dist/workspace-placement-commands.js

@@ -4,7 +4,8 @@ import { readJsonFileValue } from "./command-support.js";
 import { requestOxygen } from "./http-client.js";
 export function registerWorkspacePlacementCommands(root, handle) {
     root.addCommand(new Command("workspace-test").description("Compare email copy placement in this workspace's connected Google/Microsoft receiving inboxes: Gmail Primary/Promotions and Microsoft Focused/Other. Native sends, 0 additional credits; preview and exact message approval required.")
-        .addCommand(new Command("run").description("Preview a workspace-only copy test. Input JSON: sender_mailbox_ids, receiver_mailbox_ids, variants [{key,subject,body_text,body_html?}]. Approve the same input with returned request_id/plan_hash/rendered_at and max_live_sends. Up to five variants and 50 messages; never buys provider tests or resumes campaigns.")
+        .addCommand(new Command("run").description("Preview an internal or cross-workspace copy test. Input JSON: sender_mailbox_ids, receiver_mailbox_ids, variants [{key,subject,body_text,body_html?}]. Approve the same input with returned request_id/plan_hash/rendered_at and max_live_sends. Up to five variants and 50 messages; never buys provider tests or resumes campaigns.")
+        .option("--receiver-scope <scope>", "workspace or network; network privately selects participating receivers.").option("--receiver-providers <providers>", "Comma-separated google,microsoft for network tests.")
         .requiredOption("--input <file>", "JSON test input file.").option("--approved", "Execute the exact reviewed matrix.")
         .option("--rendered-at <timestamp>", "Rendering timestamp returned by preview; reuse when approving.").option("--tracking-opens", "Preview with open tracking on verified workspace domain.").option("--tracking-clicks", "Preview with click tracking on verified workspace domain.")
         .option("--request-id <id>", "Request UUID from preview.").option("--plan <hash>", "Exact preview plan hash.").option("--max-live-sends <n>", "Maximum approved diagnostic emails (1–50).")
@@ -18,9 +19,18 @@ export function registerWorkspacePlacementCommands(root, handle) {
         return requestOxygen("/api/cli/deliverability/workspace-tests", { method: "POST", body: { ...input, approved: options.approved === true,
                 ...(options.approved ? { approved: true } : {}), ...(options.requestId ? { request_id: options.requestId } : {}),
                 ...(options.plan ? { plan_hash: options.plan } : {}), ...(options.renderedAt ? { rendered_at: options.renderedAt } : {}), ...(options.trackingOpens ? { tracking_opens: true } : {}), ...(options.trackingClicks ? { tracking_clicks: true } : {}), ...(options.maxLiveSends ? { max_live_sends: Number(options.maxLiveSends) } : {}),
-                ...(options.allowPausedProbe ? { allow_paused_probe: true } : {}),
+                ...(options.allowPausedProbe ? { allow_paused_probe: true } : {}), ...(options.receiverScope ? { receiver_scope: options.receiverScope } : {}), ...(options.receiverProviders ? { receiver_providers: String(options.receiverProviders).split(",") } : {}),
                 ...(options.previewCursor ? { preview_cursor: options.previewCursor } : {}), ...(options.previewLimit !== undefined ? { preview_limit: Number(options.previewLimit) } : {}),
                 ...(options.previewProbeId ? { preview_probe_id: options.previewProbeId } : {}), ...(options.previewPart ? { preview_part: options.previewPart } : {}), ...(options.previewOffset !== undefined ? { preview_offset: Number(options.previewOffset) } : {}), ...(options.previewCopyLimit !== undefined ? { preview_copy_limit: Number(options.previewCopyLimit) } : {}) } });
+    })))
+        .addCommand(new Command("network").description("Read or manage default-on receiving-pool participation. Administrators can opt out or accept the current disclosure. Does not send mail.")
+        .option("--enabled <boolean>", "true or false; omit to read.").option("--accept-disclosure", "Accept real-copy delivery to participating mailboxes and metadata processing.").option("--json", "Print JSON.")
+        .action(async (options) => handle("deliverability workspace-test network", options, () => {
+        if (options.enabled === undefined)
+            return requestOxygen("/api/cli/deliverability/workspace-tests?action=network");
+        if (options.enabled !== "true" && options.enabled !== "false")
+            throw new Error("--enabled must be true or false.");
+        return requestOxygen("/api/cli/deliverability/workspace-tests", { method: "POST", body: { operation: "participation", network_enabled: options.enabled === "true", accept_network_disclosure: options.acceptDisclosure === true } });
     })))
         .addCommand(new Command("copy").description("Read a Sequence email step and its copy variants for workspace placement testing. Resolve personalization before preview; no send or charge.").argument("<sequence-id>").option("--step-index <n>", "Zero-based email step index.", "0").option("--json", "Print JSON.")
         .action(async (id, options) => handle("deliverability workspace-test copy", options, () => requestOxygen(`/api/cli/deliverability/workspace-tests/copy?sequence_id=${encodeURIComponent(id)}&step_index=${encodeURIComponent(options.stepIndex)}`))))

package/node_modules/@oxygen/shared/dist/agent-sessions.d.ts

@@ -40,7 +40,12 @@ export type AgentSessionTeammateRoutine = {
 };
 /** The routine marker of a session's settings, or null for a general session. */
 export declare function agentSessionTeammateRoutine(config: Pick<AgentSessionConfig, "teammate_routine">): AgentSessionTeammateRoutine | null;
-/** Staff only: on dev, and in production's staff workspaces (`agentsEnabledIn`; Tim, 2026-10-16). */
+/**
+ * Who has Ongoing Agent sessions, and so Oxygent routines: "staff" for staff
+ * emails, "all" for every member who is not a client login (the customer
+ * launch, Tim, 2026-10-17), in a workspace Agents run in (`agentsEnabledIn`).
+ */
+export declare function agentSessionsAudience(env?: Record<string, string | undefined>): "off" | "staff" | "all";
 export declare function agentSessionsEnabled(env?: Record<string, string | undefined>): boolean;
 /** Whether this workspace has Ongoing Agent sessions, and so Oxygent routines. */
 export declare function agentSessionsEnabledIn(organizationId: string | null | undefined, env?: Record<string, string | undefined>): boolean;

package/node_modules/@oxygen/shared/dist/agent-sessions.js

@@ -11,18 +11,30 @@ export function agentSessionTeammateRoutine(config) {
     const marker = config.teammate_routine;
     return marker && typeof marker.chat_id === "string" ? marker : null;
 }
-/** Staff only: on dev, and in production's staff workspaces (`agentsEnabledIn`; Tim, 2026-10-16). */
+/**
+ * Who has Ongoing Agent sessions, and so Oxygent routines: "staff" for staff
+ * emails, "all" for every member who is not a client login (the customer
+ * launch, Tim, 2026-10-17), in a workspace Agents run in (`agentsEnabledIn`).
+ */
+export function agentSessionsAudience(env = process.env) {
+    if (env.OXYGEN_DEPLOY_ENV !== "selfhost-dev" && env.OXYGEN_DEPLOY_ENV !== "selfhost-prod")
+        return "off";
+    const flag = env.OXYGEN_AGENT_SESSIONS_ENABLED;
+    if ((flag !== "staff" && flag !== "all") || !agentsEnabled(env))
+        return "off";
+    return flag;
+}
 export function agentSessionsEnabled(env = process.env) {
-    return (env.OXYGEN_DEPLOY_ENV === "selfhost-dev" || env.OXYGEN_DEPLOY_ENV === "selfhost-prod")
-        && env.OXYGEN_AGENT_SESSIONS_ENABLED === "staff" && agentsEnabled(env);
+    return agentSessionsAudience(env) !== "off";
 }
 /** Whether this workspace has Ongoing Agent sessions, and so Oxygent routines. */
 export function agentSessionsEnabledIn(organizationId, env = process.env) {
     return agentSessionsEnabled(env) && agentsEnabledIn(organizationId, env);
 }
 export function agentSessionsAvailableTo(env, viewer) {
-    return agentSessionsEnabledIn(viewer.organizationId, env) && viewer.member && viewer.oxygenRole !== "client"
-        && (guidedActivationEnabled(env) || isStaffEmail(viewer.email, env));
+    if (!agentSessionsEnabledIn(viewer.organizationId, env) || !viewer.member || viewer.oxygenRole === "client")
+        return false;
+    return agentSessionsAudience(env) === "all" || guidedActivationEnabled(env) || isStaffEmail(viewer.email, env);
 }
 /** Reviewed native adapters. Unknown tools (including generic dispatch and agent management) fail closed. */
 export const AGENT_SESSION_ADAPTERS = {

package/node_modules/@oxygen/shared/dist/agents-enabled.d.ts

@@ -3,11 +3,11 @@
  * execution, which carries tool authority and credit spend (feature-gates.ts),
  * and Oxygents and their routines need it too (ADR 0032).
  *
- * - "true" opens every workspace on dev and in tests.
- * - "staff" opens only the workspaces listed in OXYGEN_AGENTS_WORKSPACE_IDS.
- * - Production opens only listed workspaces that are also in
- *   PRODUCTION_AGENT_WORKSPACE_IDS below, whichever value switches it on, so
- *   Doppler can narrow production but never widen it.
+ * - "true" opens every workspace: on dev and in tests, and in production since
+ *   the customer launch (Tim, 2026-10-17: "all customers real launch").
+ * - "staff" opens only the workspaces listed in OXYGEN_AGENTS_WORKSPACE_IDS; on
+ *   production they must also be in PRODUCTION_AGENT_WORKSPACE_IDS below, so the
+ *   staff stage can be narrowed but never widened by a Doppler edit.
  * - Shadow never opens, a deployment name nobody knows never opens every
  *   workspace, and anything else is off, as is an empty list where one is needed.
  *
@@ -16,10 +16,9 @@
  */
 export type AgentsWorkspaceScope = "off" | "all" | ReadonlySet<string>;
 /**
- * The production workspaces Agents, Oxygents and their routines may run in:
- * staff workspaces only (Tim, 2026-10-16). Adding a customer's workspace opens
- * autonomous runs and their spend there, so it needs a founder decision
- * recorded in OXYGEN_PRODUCT.md and a reviewed change here.
+ * The production workspaces the "staff" stage may open: staff workspaces only
+ * (Tim, 2026-10-16). Production opens every workspace only on "true", the
+ * customer launch.
  */
 export declare const PRODUCTION_AGENT_WORKSPACE_IDS: ReadonlySet<string>;
 export declare function agentsWorkspaceScope(env?: Record<string, string | undefined>): AgentsWorkspaceScope;

package/node_modules/@oxygen/shared/dist/agents-enabled.js

@@ -1,9 +1,8 @@
 import { isProductionData, resolveDeployEnv } from "./deploy-env.js";
 /**
- * The production workspaces Agents, Oxygents and their routines may run in:
- * staff workspaces only (Tim, 2026-10-16). Adding a customer's workspace opens
- * autonomous runs and their spend there, so it needs a founder decision
- * recorded in OXYGEN_PRODUCT.md and a reviewed change here.
+ * The production workspaces the "staff" stage may open: staff workspaces only
+ * (Tim, 2026-10-16). Production opens every workspace only on "true", the
+ * customer launch.
  */
 export const PRODUCTION_AGENT_WORKSPACE_IDS = new Set([
     "4257983c-406e-4658-b899-d7ba3cc760a6", // OXYGEN
@@ -16,12 +15,13 @@ export function agentsWorkspaceScope(env = process.env) {
     const tier = deploymentTier(env);
     if (tier === "shadow")
         return "off";
-    if (flag === "true" && tier === "other")
+    if (flag === "true" && (tier === "other" || tier === "prod"))
         return "all";
+    const reviewedOnly = tier === "prod" || tier === "production-data";
     const listed = (env.OXYGEN_AGENTS_WORKSPACE_IDS ?? "")
         .split(",")
         .map((id) => id.trim().toLowerCase())
-        .filter((id) => id.length > 0 && (tier !== "prod" || PRODUCTION_AGENT_WORKSPACE_IDS.has(id)));
+        .filter((id) => id.length > 0 && (!reviewedOnly || PRODUCTION_AGENT_WORKSPACE_IDS.has(id)));
     return listed.length > 0 ? new Set(listed) : "off";
 }
 /** Whether Agents run in any workspace here: what a worker loop or family checks before it looks at one. */
@@ -42,8 +42,9 @@ function deploymentTier(env) {
         const { tier } = resolveDeployEnv(env);
         if (tier === "prod" || tier === "shadow")
             return tier;
-        // Managed dev telemetry can still carry production data via NODE_ENV.
-        return isProductionData(env) ? "prod" : "other";
+        // Managed dev telemetry can still carry production data via NODE_ENV: it
+        // keeps the reviewed staff intersection and never opens every workspace.
+        return isProductionData(env) ? "production-data" : "other";
     }
     catch {
         return "unknown";

package/node_modules/@oxygen/shared/dist/capability-discovery.js

@@ -423,7 +423,7 @@ export const OXYGEN_CAPABILITY_ROUTES = [
         primitive: "agents",
         owns: "Adaptive governed worker definitions, versions, authorization, context, triggers, threads, checkpoints, inference, and first-class runs.",
         notFor: "A known deterministic graph that belongs in Workflows or an opaque uploaded runtime.",
-        execution: "Publish and run a governed Agent with explicit tool authority and bounded spend. Where admitted, staff can create ongoing sessions: draft, exact resource scope, per-run and rolling 24-hour caps, preview/activate, continuing conversation and bounded self-scheduling. Inspect agent session templates; pause/resume preserves history. Where admitted, Oxygents (AI teammates) default to Workspace: one ongoing chat shared by everyone with access. Choose visibility personal when creating one for creator-only access; an API key acts as its issuing person. Home stays Workspace. Owners change visibility with confirm_visibility: publishing shares all existing history; Personal keeps history but removes others' future access and cannot retract what they saw. Collaborators use the shared chat; managers also change its profile and access. everyone off restricts Workspace access to its owner and named people, with workspace administrators retaining management access; it does not make it Personal. Group chats hold up to six Oxygents and optional teammates; messages go to the Oxygents mentioned or addressed.",
+        execution: "Publish and run a governed Agent with explicit tool authority and bounded spend. Members can create ongoing sessions: draft, exact resource scope, per-run and rolling 24-hour caps, preview/activate, continuing conversation and bounded self-scheduling. Inspect agent session templates; pause/resume preserves history. Where admitted, Oxygents (AI teammates) default to Workspace: one ongoing chat shared by everyone with access. Choose visibility personal when creating one for creator-only access; an API key acts as its issuing person. Home stays Workspace. Owners change visibility with confirm_visibility: publishing shares all existing history; Personal keeps history but removes others' future access and cannot retract what they saw. Collaborators use the shared chat; managers also change its profile and access. everyone off restricts Workspace access to its owner and named people, with workspace administrators retaining management access; it does not make it Personal. Group chats hold up to six Oxygents and optional teammates; messages go to the Oxygents mentioned or addressed.",
         posture: "mixed",
         gatewayTools: ["oxygen_agent_list", "oxygen_agent_create", "oxygen_agent_run"],
         gatewayCommands: ["agent list", "agent create", "agent run"],

package/node_modules/@oxygen/shared/dist/column-autofill.js

@@ -1,4 +1,4 @@
-import { PROFESSIONAL_NETWORK_DATA_LABEL } from "./data-suppliers.js";
+import { professionalNetworkDataLabel } from "./data-suppliers.js";
 function readString(definition, key) {
     const value = definition?.[key];
     return typeof value === "string" && value.trim() !== "" ? value : null;
@@ -20,7 +20,7 @@ function enrichmentLabel(column) {
     // data-extraction labels say "Professional Network"). The label comes from
     // one owner so it cannot drift from the picker and the Connections card.
     if (toolId?.startsWith("scraper.linkedin"))
-        return `Enriched from ${PROFESSIONAL_NETWORK_DATA_LABEL}`;
+        return `Enriched from ${professionalNetworkDataLabel()}`;
     if (toolId)
         return "Enriched by a data provider";
     return "Enriched automatically";

package/node_modules/@oxygen/shared/dist/contracts/teammates.js

@@ -6,7 +6,8 @@ import { arr, bool, enumOf, int, obj, str } from "./schema.js";
 /**
  * AI teammates (ADR 0032), branded Oxygents: Agents with one ongoing chat,
  * shared by default or Personal, the workspace's first one ("New Bot" until named) and
- * any others added, none with a role (Tim, 2026-10-13). Staff on dev only.
+ * any others added, none with a role (Tim, 2026-10-13). Every member but a client
+ * login has them where the workspace does (launched 2026-10-17).
  * The people-facing names say Oxygent (`oxygen oxygents`, `oxygen_oxygents_*`,
  * Tim 2026-10-12); the HTTP family and the code keep "teammates".
  */

package/node_modules/@oxygen/shared/dist/data-suppliers.d.ts

@@ -1,3 +1,4 @@
+import { type ManagedScraperBackend } from "./managed-scraper-backend.js";
 /**
  * The companies that supply OXYGEN's managed data, keyed by OXYGEN provider id.
  *
@@ -12,7 +13,11 @@
  * import it.
  */
 export declare const MANAGED_DATA_SUPPLIERS: {
-    /** The managed `scraper.*` LinkedIn rail. HarvestAPI is BYOK only and is not listed. */
+    /**
+     * The managed `scraper.*` LinkedIn rail on its default backend. The rail's
+     * supplier follows LINKEDIN_SCRAPER_PROVIDER: read it through
+     * managedDataSupplier("scraper"), never from this entry.
+     */
     readonly scraper: "Up2Data";
     /** Company-page follower audiences, fulfilled by the vendor. */
     readonly scrapeli: "ScrapeLi";
@@ -22,6 +27,17 @@ export declare const MANAGED_DATA_SUPPLIERS: {
     readonly crustdata: "Crustdata";
 };
 export type ManagedDataSupplierProvider = keyof typeof MANAGED_DATA_SUPPLIERS;
+/**
+ * Every company that can supply the managed LinkedIn rail, by backend (Philipp,
+ * 2026-10-17). Both are subprocessors: HarvestAPI serves OXYGEN's key once the
+ * switch is flipped, and Up2Data keeps serving a workspace's own Up2Data key.
+ */
+export declare const MANAGED_SCRAPER_SUPPLIERS: {
+    readonly up2data: "Up2Data";
+    readonly harvestapi: "HarvestAPI";
+};
+/** The managed LinkedIn rail's supplier on the backend this server selects. */
+export declare function managedScraperSupplier(backend?: ManagedScraperBackend): string;
 /**
  * Customer-visible name of the managed LinkedIn data rail (`scraper.*`). Founder
  * decision 2026-09-25: data-extraction labels say "Professional Network", while
@@ -36,7 +52,21 @@ export declare function managedDataSupplier(provider: string | null | undefined)
  * · supplied by Bright Data").
  */
 export declare function suppliedByLabel(name: string, provider: string | null | undefined): string;
-/** "Professional Network Data · supplied by Up2Data" — the managed LinkedIn rail's label. */
+/**
+ * "Professional Network Data · supplied by <supplier>" — the managed LinkedIn
+ * rail's label, naming the supplier the server's backend switch selects. A
+ * browser bundle cannot read that switch, so there the label names no supplier
+ * rather than a possibly wrong one.
+ */
+export declare function professionalNetworkDataLabel(): string;
+/**
+ * "Professional Network Data (<supplier>)" in running prose on a server; the
+ * bare name where the backend switch cannot be read (a browser bundle).
+ */
+export declare function professionalNetworkDataSource(): string;
+/** "Supplied by <supplier>." for the managed LinkedIn rail, or "" where the switch cannot be read. */
+export declare function managedScraperSuppliedBySentence(): string;
+/** The label resolved when this module loads (server processes read their switch at boot). */
 export declare const PROFESSIONAL_NETWORK_DATA_LABEL: string;
 /**
  * How a supplier obtains an operation's data. Informational only: it never gates,

package/node_modules/@oxygen/shared/dist/data-suppliers.js

@@ -1,3 +1,4 @@
+import { readManagedScraperBackend, serverEnv } from "./managed-scraper-backend.js";
 /**
  * The companies that supply OXYGEN's managed data, keyed by OXYGEN provider id.
  *
@@ -12,7 +13,11 @@
  * import it.
  */
 export const MANAGED_DATA_SUPPLIERS = {
-    /** The managed `scraper.*` LinkedIn rail. HarvestAPI is BYOK only and is not listed. */
+    /**
+     * The managed `scraper.*` LinkedIn rail on its default backend. The rail's
+     * supplier follows LINKEDIN_SCRAPER_PROVIDER: read it through
+     * managedDataSupplier("scraper"), never from this entry.
+     */
     scraper: "Up2Data",
     /** Company-page follower audiences, fulfilled by the vendor. */
     scrapeli: "ScrapeLi",
@@ -21,6 +26,19 @@ export const MANAGED_DATA_SUPPLIERS = {
     /** Indexed company and people data on OXYGEN's managed key. */
     crustdata: "Crustdata",
 };
+/**
+ * Every company that can supply the managed LinkedIn rail, by backend (Philipp,
+ * 2026-10-17). Both are subprocessors: HarvestAPI serves OXYGEN's key once the
+ * switch is flipped, and Up2Data keeps serving a workspace's own Up2Data key.
+ */
+export const MANAGED_SCRAPER_SUPPLIERS = {
+    up2data: "Up2Data",
+    harvestapi: "HarvestAPI",
+};
+/** The managed LinkedIn rail's supplier on the backend this server selects. */
+export function managedScraperSupplier(backend = readManagedScraperBackend()) {
+    return MANAGED_SCRAPER_SUPPLIERS[backend];
+}
 /**
  * Customer-visible name of the managed LinkedIn data rail (`scraper.*`). Founder
  * decision 2026-09-25: data-extraction labels say "Professional Network", while
@@ -31,6 +49,8 @@ export const PROFESSIONAL_NETWORK_DATA_NAME = "Professional Network Data";
 export function managedDataSupplier(provider) {
     if (!provider || !Object.hasOwn(MANAGED_DATA_SUPPLIERS, provider))
         return null;
+    if (provider === "scraper")
+        return managedScraperSupplier();
     return MANAGED_DATA_SUPPLIERS[provider];
 }
 /**
@@ -44,11 +64,31 @@ export function suppliedByLabel(name, provider) {
         return name;
     return `${name} · supplied by ${supplier}`;
 }
-/** "Professional Network Data · supplied by Up2Data" — the managed LinkedIn rail's label. */
-export const PROFESSIONAL_NETWORK_DATA_LABEL = suppliedByLabel(PROFESSIONAL_NETWORK_DATA_NAME, "scraper");
+/**
+ * "Professional Network Data · supplied by <supplier>" — the managed LinkedIn
+ * rail's label, naming the supplier the server's backend switch selects. A
+ * browser bundle cannot read that switch, so there the label names no supplier
+ * rather than a possibly wrong one.
+ */
+export function professionalNetworkDataLabel() {
+    return serverEnv() ? suppliedByLabel(PROFESSIONAL_NETWORK_DATA_NAME, "scraper") : PROFESSIONAL_NETWORK_DATA_NAME;
+}
+/**
+ * "Professional Network Data (<supplier>)" in running prose on a server; the
+ * bare name where the backend switch cannot be read (a browser bundle).
+ */
+export function professionalNetworkDataSource() {
+    return serverEnv() ? `${PROFESSIONAL_NETWORK_DATA_NAME} (${managedScraperSupplier()})` : PROFESSIONAL_NETWORK_DATA_NAME;
+}
+/** "Supplied by <supplier>." for the managed LinkedIn rail, or "" where the switch cannot be read. */
+export function managedScraperSuppliedBySentence() {
+    return serverEnv() ? `Supplied by ${managedScraperSupplier()}.` : "";
+}
+/** The label resolved when this module loads (server processes read their switch at boot). */
+export const PROFESSIONAL_NETWORK_DATA_LABEL = professionalNetworkDataLabel();
 /** The disclosure an operation carries, in one sentence per method. */
 export function dataSourcingFor(provider, method) {
-    const supplier = MANAGED_DATA_SUPPLIERS[provider];
+    const supplier = managedDataSupplier(provider) ?? MANAGED_DATA_SUPPLIERS[provider];
     return {
         supplier,
         method,

package/node_modules/@oxygen/shared/dist/feature-gates.d.ts

@@ -71,10 +71,9 @@ export type FeatureGateResolution = {
  * - OXYGEN_AGENTS_ENABLED — (b). Authorizes autonomous Agent run execution —
  *   tool authority AND credit spend (`apps/web/src/lib/agent-runtime.ts`,
  *   `apps/worker/src/agent-cycle.ts`). Same class as publishing.
- * - OXYGEN_AGENTS_WORKSPACE_IDS — (b). Which workspaces that execution may run
- *   in (`packages/shared/src/agents-enabled.ts`); production also requires its
- *   reviewed PRODUCTION_AGENT_WORKSPACE_IDS, so a wrong "on" for a customer's
- *   workspace there needs a code change as well.
+ * - OXYGEN_AGENTS_WORKSPACE_IDS — (b). Which workspaces the "staff" stage of
+ *   that execution may run in (`packages/shared/src/agents-enabled.ts`);
+ *   production also requires its reviewed PRODUCTION_AGENT_WORKSPACE_IDS.
  * - OXYGEN_REPRICING_2026_09_EFFECTIVE_AT — (b). The instant every held price
  *   rise and limit cut of the 2026-09 repricing takes effect
  *   (`packages/shared/src/repricing.ts`). A remotely flippable value would let

package/node_modules/@oxygen/shared/dist/feature-gates.js

@@ -62,10 +62,9 @@
  * - OXYGEN_AGENTS_ENABLED — (b). Authorizes autonomous Agent run execution —
  *   tool authority AND credit spend (`apps/web/src/lib/agent-runtime.ts`,
  *   `apps/worker/src/agent-cycle.ts`). Same class as publishing.
- * - OXYGEN_AGENTS_WORKSPACE_IDS — (b). Which workspaces that execution may run
- *   in (`packages/shared/src/agents-enabled.ts`); production also requires its
- *   reviewed PRODUCTION_AGENT_WORKSPACE_IDS, so a wrong "on" for a customer's
- *   workspace there needs a code change as well.
+ * - OXYGEN_AGENTS_WORKSPACE_IDS — (b). Which workspaces the "staff" stage of
+ *   that execution may run in (`packages/shared/src/agents-enabled.ts`);
+ *   production also requires its reviewed PRODUCTION_AGENT_WORKSPACE_IDS.
  * - OXYGEN_REPRICING_2026_09_EFFECTIVE_AT — (b). The instant every held price
  *   rise and limit cut of the 2026-09 repricing takes effect
  *   (`packages/shared/src/repricing.ts`). A remotely flippable value would let

package/node_modules/@oxygen/shared/dist/hosted-ai.js

@@ -22,6 +22,101 @@
  * can re-source the catalog without dragging the barrel in.
  */
 import { copilotAudience, isCopilotFlagOn } from "./copilot-access.js";
+/**
+ * The Copilot's tiers, which an Oxygent's own chat runs at. Hoisted out of the
+ * registry so the Agent use case can share the same spec objects.
+ */
+const COPILOT_MODEL_SPECS = {
+    /**
+     * "Oxygen Auto" -- the earlier default, retained as an explicit choice.
+     * Its conversation thread stays fixed for its whole life. It is NOT a router: the
+     * model never changes mid-session, because an OpenRouter prompt cache is
+     * model-scoped and a mid-turn switch would turn a ~66% cache HIT rate into a
+     * cache WRITE on a fresh model, ten times a turn. Models only change below
+     * this thread, where the context is fresh -- see COPILOT_ERRAND_LEVEL.
+     *
+     * Before the 2026-10-10 Sol refresh, Auto ran Kimi K3. Its
+     * `reasoningEffort: "medium"` made that tier worth shipping.
+     * Until 2026-09-21 Kimi was sent with NO `reasoning` field at
+     * all, on a registry comment asserting K3 was max-reasoning-only. Measured
+     * against the live API on the same prompt and tool schema, that claim was
+     * false and the omission was the expensive case:
+     *
+     *   omitted -> 412 reasoning tokens, $0.00779, 10.0s
+     *   low     -> 206,                  $0.00566,  9.2s
+     *   medium  -> 124,                  $0.00342,  4.8s   <- 56% cheaper, 2.1x faster
+     *   high    -> 528,                  $0.01075, 14.8s
+     *
+     * All four returned the same answer. Reasoning was 38% of output tokens on a
+     * surface where output is ~61% of the bill.
+     */
+    auto: {
+        model: "openai/gpt-6.1-sol",
+        displayName: "Oxygen Auto",
+        // Approved 2026-10-10 for NEW sessions. Existing sessions retain their
+        // persisted resolved_model; Kimi's priced spec survives in the legacy map.
+        fallbackModels: ["anthropic/claude-sonnet-5.5"],
+        reasoningEffort: "medium",
+        estPromptUsdPerM: 2,
+        estCompletionUsdPerM: 10,
+        // Reasoning tokens count against this cap, so 8,192 left a long tool call
+        // (a full sequence draft, a wide table write) to be cut off mid-argument,
+        // which fails the turn on the second time. Credit holds are sized from the
+        // expected output (billing.ts), so this moves only the conservative clamp.
+        maxOutputTokens: 16_384,
+    },
+    low: {
+        // The errand model: sub-agents, compaction summaries and auto-titles. A
+        // child builds its own Agent with its own messages, so it starts cold on
+        // any model -- which is why a switch is free HERE and nowhere above it.
+        //
+        // This was deepseek/deepseek-v4.1-flash for about an hour, chosen for
+        // being newer and measured correct on a one-tool arithmetic probe. Probed
+        // again against the REAL runtime tool schemas from tools.ts
+        // (capability_search + capability_run, nested `args`, optional approval
+        // fields) under the same provider.require_parameters=true the transport
+        // always sends, it returned `finish_reason: "error"` with zero tool calls
+        // on 1 of 5 attempts, every one served by the Relace endpoint. v4-flash
+        // went 5/5 clean on StreamLake, is CHEAPER on both axes, and is already
+        // what auto-titles run on -- so the newer model was worse on reliability
+        // and on price, and the only thing recommending it was its version number.
+        //
+        // A child that emits no tool call returns nothing for what it spent, and
+        // the transport does not retry `finish_reason: "error"` on the primary
+        // (classifyModelError sends it straight to the next model), so a 20%
+        // error rate here is a 20% double round trip on every delegation.
+        model: "deepseek/deepseek-v4-flash",
+        displayName: "Oxygen Fast",
+        // v4.1-flash earns its place HERE: it works 4 times in 5 and it is a
+        // genuinely different endpoint on a different provider, which is the one
+        // thing a fallback has to be.
+        fallbackModels: ["deepseek/deepseek-v4.1-flash"],
+        reasoningEffort: "low",
+        estPromptUsdPerM: 0.09,
+        estCompletionUsdPerM: 0.18,
+        maxOutputTokens: 8192,
+    },
+    medium: {
+        model: "anthropic/claude-haiku-5.5",
+        displayName: "Oxygen Balanced",
+        fallbackModels: ["deepseek/deepseek-v4.1-flash"],
+        reasoningEffort: "medium",
+        estPromptUsdPerM: 0.1,
+        estCompletionUsdPerM: 0.5,
+        // A conversation tier (the default since #5225), so Auto's cap (see Auto).
+        maxOutputTokens: 16_384,
+    },
+    high: {
+        model: "openai/gpt-6.1-sol",
+        displayName: "Oxygen Max",
+        fallbackModels: ["anthropic/claude-sonnet-5.5"],
+        reasoningEffort: "medium",
+        estPromptUsdPerM: 2,
+        estCompletionUsdPerM: 10,
+        // A conversation tier, so Auto's cap (see Auto).
+        maxOutputTokens: 16_384,
+    },
+};
 export const HOSTED_AI_MODEL_REGISTRY = {
     /**
      * Historical calibration of the September AI-column tiers, re-picked
@@ -112,124 +207,20 @@ export const HOSTED_AI_MODEL_REGISTRY = {
             maxOutputTokens: 4096,
         },
     },
-    copilot: {
-        /**
-         * "Oxygen Auto" -- the earlier default, retained as an explicit choice.
-         * Its conversation thread stays fixed for its whole life. It is NOT a router: the
-         * model never changes mid-session, because an OpenRouter prompt cache is
-         * model-scoped and a mid-turn switch would turn a ~66% cache HIT rate into a
-         * cache WRITE on a fresh model, ten times a turn. Models only change below
-         * this thread, where the context is fresh -- see COPILOT_ERRAND_LEVEL.
-         *
-         * Before the 2026-10-10 Sol refresh, Auto ran Kimi K3. Its
-         * `reasoningEffort: "medium"` made that tier worth shipping.
-         * Until 2026-09-21 Kimi was sent with NO `reasoning` field at
-         * all, on a registry comment asserting K3 was max-reasoning-only. Measured
-         * against the live API on the same prompt and tool schema, that claim was
-         * false and the omission was the expensive case:
-         *
-         *   omitted -> 412 reasoning tokens, $0.00779, 10.0s
-         *   low     -> 206,                  $0.00566,  9.2s
-         *   medium  -> 124,                  $0.00342,  4.8s   <- 56% cheaper, 2.1x faster
-         *   high    -> 528,                  $0.01075, 14.8s
-         *
-         * All four returned the same answer. Reasoning was 38% of output tokens on a
-         * surface where output is ~61% of the bill.
-         */
-        auto: {
-            model: "openai/gpt-6.1-sol",
-            displayName: "Oxygen Auto",
-            // Approved 2026-10-10 for NEW sessions. Existing sessions retain their
-            // persisted resolved_model; Kimi's priced spec survives in the legacy map.
-            fallbackModels: ["anthropic/claude-sonnet-5.5"],
-            reasoningEffort: "medium",
-            estPromptUsdPerM: 2,
-            estCompletionUsdPerM: 10,
-            // Reasoning tokens count against this cap, so 8,192 left a long tool call
-            // (a full sequence draft, a wide table write) to be cut off mid-argument,
-            // which fails the turn on the second time. Credit holds are sized from the
-            // expected output (billing.ts), so this moves only the conservative clamp.
-            maxOutputTokens: 16_384,
-        },
-        low: {
-            // The errand model: sub-agents, compaction summaries and auto-titles. A
-            // child builds its own Agent with its own messages, so it starts cold on
-            // any model -- which is why a switch is free HERE and nowhere above it.
-            //
-            // This was deepseek/deepseek-v4.1-flash for about an hour, chosen for
-            // being newer and measured correct on a one-tool arithmetic probe. Probed
-            // again against the REAL runtime tool schemas from tools.ts
-            // (capability_search + capability_run, nested `args`, optional approval
-            // fields) under the same provider.require_parameters=true the transport
-            // always sends, it returned `finish_reason: "error"` with zero tool calls
-            // on 1 of 5 attempts, every one served by the Relace endpoint. v4-flash
-            // went 5/5 clean on StreamLake, is CHEAPER on both axes, and is already
-            // what auto-titles run on -- so the newer model was worse on reliability
-            // and on price, and the only thing recommending it was its version number.
-            //
-            // A child that emits no tool call returns nothing for what it spent, and
-            // the transport does not retry `finish_reason: "error"` on the primary
-            // (classifyModelError sends it straight to the next model), so a 20%
-            // error rate here is a 20% double round trip on every delegation.
-            model: "deepseek/deepseek-v4-flash",
-            displayName: "Oxygen Fast",
-            // v4.1-flash earns its place HERE: it works 4 times in 5 and it is a
-            // genuinely different endpoint on a different provider, which is the one
-            // thing a fallback has to be.
-            fallbackModels: ["deepseek/deepseek-v4.1-flash"],
-            reasoningEffort: "low",
-            estPromptUsdPerM: 0.09,
-            estCompletionUsdPerM: 0.18,
-            maxOutputTokens: 8192,
-        },
-        medium: {
-            model: "anthropic/claude-haiku-5.5",
-            displayName: "Oxygen Balanced",
-            fallbackModels: ["deepseek/deepseek-v4.1-flash"],
-            reasoningEffort: "medium",
-            estPromptUsdPerM: 0.1,
-            estCompletionUsdPerM: 0.5,
-            // A conversation tier (the default since #5225), so Auto's cap (see Auto).
-            maxOutputTokens: 16_384,
-        },
-        high: {
-            model: "openai/gpt-6.1-sol",
-            displayName: "Oxygen Max",
-            fallbackModels: ["anthropic/claude-sonnet-5.5"],
-            reasoningEffort: "medium",
-            estPromptUsdPerM: 2,
-            estCompletionUsdPerM: 10,
-            // A conversation tier, so Auto's cap (see Auto).
-            maxOutputTokens: 16_384,
-        },
-    },
+    copilot: COPILOT_MODEL_SPECS,
+    /**
+     * An Oxygent's background tasks and routines run on the very models its chat
+     * does, so one tier means one model wherever the Oxygent works (Philipp,
+     * 2026-10-17). Until then Agents kept their September tiers (DeepSeek V4
+     * Flash / V4 Pro / Kimi K2.6), which the 2026-10-10 refresh left out of scope.
+     * Shared by reference, so a Copilot tier refresh moves Agents with it;
+     * `OXYGEN_AGENT_MODEL_*` still overrides Agents alone. Retired ids keep
+     * their tier label through LEGACY_MANAGED_AI_COLUMN_MODELS.
+     */
     agent: {
-        low: {
-            model: "deepseek/deepseek-v4-flash",
-            displayName: "Oxygen Fast",
-            fallbackModels: [],
-            reasoningEffort: "medium",
-            estPromptUsdPerM: 0.09,
-            estCompletionUsdPerM: 0.18,
-            maxOutputTokens: 8192,
-        },
-        medium: {
-            model: "deepseek/deepseek-v4-pro",
-            displayName: "Oxygen Balanced",
-            fallbackModels: ["deepseek/deepseek-v4-flash"],
-            reasoningEffort: "high",
-            estPromptUsdPerM: 0.435,
-            estCompletionUsdPerM: 0.87,
-            maxOutputTokens: 8192,
-        },
-        high: {
-            model: "moonshotai/kimi-k2.6",
-            displayName: "Oxygen Max",
-            fallbackModels: ["deepseek/deepseek-v4-pro"],
-            estPromptUsdPerM: 0.66,
-            estCompletionUsdPerM: 3.41,
-            maxOutputTokens: 8192,
-        },
+        low: COPILOT_MODEL_SPECS.low,
+        medium: COPILOT_MODEL_SPECS.medium,
+        high: COPILOT_MODEL_SPECS.high,
     },
 };
 /** Persisted conversations keep their original pricing, effort and fallbacks. */
@@ -449,7 +440,6 @@ export const IMAGE_INPUT_MODELS = new Set([
     "anthropic/claude-sonnet-5.5",
     "anthropic/claude-haiku-5.5",
     "moonshotai/kimi-k3",
-    "moonshotai/kimi-k2.6",
     "deepseek/deepseek-v4.1-flash",
     "google/gemini-3.8-flash",
 ]);

package/node_modules/@oxygen/shared/dist/knowledge-links.d.ts

@@ -14,3 +14,32 @@ export type KnowledgeWikilink = {
  * empty key (e.g. [[---]]) are dropped.
  */
 export declare function extractKnowledgeLinks(body: string | null | undefined): KnowledgeWikilink[];
+/**
+ * The exact vault paths, in priority order, and the basename that
+ * resolveKnowledgeVaultLink can match for a [[wikilink]] target written in the
+ * file at `currentPath`. A store fetches only these files and resolves against
+ * them with the same result as against the whole vault. Null when the target is
+ * empty or absolute.
+ */
+export declare function knowledgeVaultLinkCandidates(target: string, currentPath: string): {
+    paths: string[];
+    basename: string | null;
+} | null;
+/**
+ * Resolve a [[wikilink]] target in a repository vault the way Obsidian does: a
+ * bare name prefers the same folder, then the vault-relative path, a path target
+ * is also tried relative to the current folder, and a bare name finally matches
+ * a basename that is unique in the vault. A target without an extension names a
+ * Markdown note. The web file view and the page-link graph both resolve through
+ * here, so a link that opens a note is the edge the graph shows.
+ */
+export declare function resolveKnowledgeVaultLink<T extends {
+    path: string;
+}>(target: string, currentPath: string, files: readonly T[]): T | null;
+/**
+ * Every link key a [[wikilink]] that resolves to the vault file at `path` can
+ * carry: each trailing path suffix, and for a note also without its .md
+ * extension. A new or moved file can satisfy only dangling links with one of
+ * these keys.
+ */
+export declare function knowledgeVaultLinkKeys(path: string): string[];

package/node_modules/@oxygen/shared/dist/knowledge-links.js

@@ -4,7 +4,8 @@
 // here and nowhere else. The regex + alias/heading stripping mirror the vault
 // component's original parser (apps/web/src/components/vault/vault.ts), which
 // now delegates here — [[Target|alias]] and [[Target#heading]] both link to
-// Target.
+// Target. Links inside a connected repository resolve by vault path first
+// (resolveKnowledgeVaultLink), for the mounted file view and the graph alike.
 import { knowledgeLinkKey } from "./knowledge-constants.js";
 const WIKILINK_RE = /\[\[([^\]]+)\]\]/g;
 /**
@@ -36,3 +37,85 @@ export function extractKnowledgeLinks(body) {
     }
     return [...byKey.values()];
 }
+function normalizedVaultPath(candidate) {
+    const normalized = [];
+    for (const segment of candidate.split("/")) {
+        if (!segment || segment === ".")
+            continue;
+        if (segment === "..") {
+            if (!normalized.pop())
+                return null;
+        }
+        else {
+            normalized.push(segment);
+        }
+    }
+    return normalized.join("/") || null;
+}
+/**
+ * The exact vault paths, in priority order, and the basename that
+ * resolveKnowledgeVaultLink can match for a [[wikilink]] target written in the
+ * file at `currentPath`. A store fetches only these files and resolves against
+ * them with the same result as against the whole vault. Null when the target is
+ * empty or absolute.
+ */
+export function knowledgeVaultLinkCandidates(target, currentPath) {
+    const pathTarget = target.split("#", 1)[0]?.trim();
+    if (!pathTarget || pathTarget.startsWith("/"))
+        return null;
+    const withExtension = /\.[^/]+$/.test(pathTarget) ? pathTarget : `${pathTarget}.md`;
+    const directory = currentPath.includes("/") ? currentPath.slice(0, currentPath.lastIndexOf("/")) : "";
+    const paths = [];
+    if (!pathTarget.includes("/"))
+        paths.push(`${directory ? `${directory}/` : ""}${withExtension}`);
+    const vaultPath = normalizedVaultPath(withExtension);
+    if (vaultPath)
+        paths.push(vaultPath);
+    if (pathTarget.includes("/")) {
+        const relativePath = normalizedVaultPath(`${directory}/${withExtension}`);
+        if (relativePath)
+            paths.push(relativePath);
+    }
+    return { paths, basename: pathTarget.includes("/") ? null : withExtension };
+}
+/**
+ * Resolve a [[wikilink]] target in a repository vault the way Obsidian does: a
+ * bare name prefers the same folder, then the vault-relative path, a path target
+ * is also tried relative to the current folder, and a bare name finally matches
+ * a basename that is unique in the vault. A target without an extension names a
+ * Markdown note. The web file view and the page-link graph both resolve through
+ * here, so a link that opens a note is the edge the graph shows.
+ */
+export function resolveKnowledgeVaultLink(target, currentPath, files) {
+    const candidates = knowledgeVaultLinkCandidates(target, currentPath);
+    if (!candidates)
+        return null;
+    for (const path of candidates.paths) {
+        const file = files.find((candidate) => candidate.path === path);
+        if (file)
+            return file;
+    }
+    if (!candidates.basename)
+        return null;
+    const matches = files.filter((file) => file.path.split("/").at(-1) === candidates.basename);
+    return matches.length === 1 ? matches[0] : null;
+}
+/**
+ * Every link key a [[wikilink]] that resolves to the vault file at `path` can
+ * carry: each trailing path suffix, and for a note also without its .md
+ * extension. A new or moved file can satisfy only dangling links with one of
+ * these keys.
+ */
+export function knowledgeVaultLinkKeys(path) {
+    const segments = path.split("/");
+    const keys = new Set();
+    for (let start = segments.length - 1; start >= 0; start -= 1) {
+        const suffix = segments.slice(start).join("/");
+        for (const form of /\.md$/.test(suffix) ? [suffix, suffix.slice(0, -3)] : [suffix]) {
+            const key = knowledgeLinkKey(form);
+            if (key)
+                keys.add(key);
+        }
+    }
+    return [...keys];
+}

package/node_modules/@oxygen/shared/dist/linkedin-sequences.d.ts

@@ -202,17 +202,6 @@ export type LinkedInRefusalScope =
  | "already_engaged"
 /** Unrecognised. Callers MUST preserve their existing behaviour. */
  | "unknown";
-/**
- * Classify a LinkedIn refusal from the provider's own account of it.
- *
- * Deliberately a CLOSED set of anchored, full-string matches, in the same
- * discipline as the sequence-recovery allowlists: matching vendor prose is
- * fragile, so an unrecognised message must degrade to `unknown` and leave the
- * caller's behaviour exactly as it was. Extending the set is an evidence-driven
- * act — callers log what they could not classify.
- *
- * Pure and total; never throws.
- */
 export declare function classifyLinkedInRefusal(input: {
     providerType: string | null;
     providerMessage: string | null;
@@ -394,9 +383,11 @@ export declare function linkedInLimitCautionNotices(metadata: Record<string, unk
 export declare const LINKEDIN_REINVITE_COOLDOWN_DAYS = 21;
 /**
  * Whether a refused invitation is LinkedIn's re-invite cooldown: Unipile answers
- * HTTP 422 with the `cannot_resend_yet` error type. Anchored on the type, with
- * the message as a fallback for the provider shapes that carry the type only in
- * the sentence. Pure and total.
+ * HTTP 422 with the `cannot_resend_yet` error type, or with
+ * `provider/unprocessable_entity` and LinkedIn's "already handled a request from
+ * you in the past 3 weeks" sentence. Anchored on the type, with the message as a
+ * fallback for the provider shapes that carry the type only in the sentence.
+ * Pure and total.
  */
 export declare function isLinkedInReinviteCooldownRefusal(input: {
     status: number | null;

package/node_modules/@oxygen/shared/dist/linkedin-sequences.js

@@ -113,6 +113,14 @@ export const LINKEDIN_INVITE_NOTE_LIMIT_BASIC = 200;
  *
  * Pure and total; never throws.
  */
+/**
+ * LinkedIn's sentence when an invitation is refused because the member handled
+ * an earlier one from this account (accepted, ignored or withdrawn) within three
+ * weeks. Unipile returns it as HTTP 422 `provider/unprocessable_entity`, the v2
+ * client prefixes the title. Verified on dev 2026-10-17 (Unipile req-3i5d,
+ * req-7edn, req-7nsa): no invitation was created.
+ */
+const LINKEDIN_RECENTLY_HANDLED_INVITE_MESSAGE = /^(?:Unprocessable entity: )?This user has already handled a request from you in the past 3 weeks\./u;
 export function classifyLinkedInRefusal(input) {
     const message = typeof input.providerMessage === "string" ? input.providerMessage.trim() : "";
     if (message.length === 0)
@@ -146,7 +154,7 @@ export function classifyLinkedInRefusal(input) {
     }
     if (input.status === 422
         && input.providerType === "provider/unprocessable_entity"
-        && /^Unprocessable entity: This user has already handled a request from you in the past 3 weeks\./u.test(message)) {
+        && LINKEDIN_RECENTLY_HANDLED_INVITE_MESSAGE.test(message)) {
         return "already_engaged";
     }
     if (input.status === 409
@@ -440,14 +448,23 @@ export function linkedInLimitCautionNotices(metadata, overrides) {
 export const LINKEDIN_REINVITE_COOLDOWN_DAYS = 21;
 /**
  * Whether a refused invitation is LinkedIn's re-invite cooldown: Unipile answers
- * HTTP 422 with the `cannot_resend_yet` error type. Anchored on the type, with
- * the message as a fallback for the provider shapes that carry the type only in
- * the sentence. Pure and total.
+ * HTTP 422 with the `cannot_resend_yet` error type, or with
+ * `provider/unprocessable_entity` and LinkedIn's "already handled a request from
+ * you in the past 3 weeks" sentence. Anchored on the type, with the message as a
+ * fallback for the provider shapes that carry the type only in the sentence.
+ * Pure and total.
  */
 export function isLinkedInReinviteCooldownRefusal(input) {
     if (input.status !== 422)
         return false;
     if (typeof input.providerType === "string" && /(?:^|\/)cannot_resend_yet$/u.test(input.providerType.trim()))
         return true;
-    return typeof input.providerMessage === "string" && /\bcannot_resend_yet\b/u.test(input.providerMessage);
+    if (typeof input.providerMessage !== "string")
+        return false;
+    if (/\bcannot_resend_yet\b/u.test(input.providerMessage))
+        return true;
+    // The same refusal in LinkedIn's own words. Without it, the BullMQ runtime
+    // read the write as possibly delivered and parked the lead for reconciliation.
+    return input.providerType === "provider/unprocessable_entity"
+        && LINKEDIN_RECENTLY_HANDLED_INVITE_MESSAGE.test(input.providerMessage.trim());
 }

package/node_modules/@oxygen/shared/dist/managed-scraper-backend.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Which vendor serves OXYGEN's managed `scraper.*` LinkedIn rail
+ * (LINKEDIN_SCRAPER_PROVIDER, Philipp 2026-10-17: a pure provider exchange from
+ * Up2Data to HarvestAPI behind a Doppler switch). Up2Data is the default, so an
+ * unset or unrecognised value never moves paid traffic.
+ *
+ * Dependency-free and browser-safe: a bundle without the server environment
+ * reads the default, so a label rendered in the browser must not rely on it.
+ */
+export type ManagedScraperBackend = "up2data" | "harvestapi";
+export declare const MANAGED_SCRAPER_BACKEND_ENV = "LINKEDIN_SCRAPER_PROVIDER";
+type Env = Readonly<Record<string, string | undefined>>;
+/** The server environment, or null in a bundle that has none. */
+export declare function serverEnv(): Env | null;
+/** The configured backend, or null when the value names neither vendor. */
+export declare function parseManagedScraperBackend(value: string | undefined): ManagedScraperBackend | null;
+export declare function readManagedScraperBackend(env?: Env | null): ManagedScraperBackend;
+export {};

package/node_modules/@oxygen/shared/dist/managed-scraper-backend.js

@@ -0,0 +1,17 @@
+export const MANAGED_SCRAPER_BACKEND_ENV = "LINKEDIN_SCRAPER_PROVIDER";
+/** The server environment, or null in a bundle that has none. */
+export function serverEnv() {
+    const env = typeof process !== "undefined" ? process.env : undefined;
+    // `window` is absent from this package's types (no DOM lib), so read it off globalThis.
+    return env && !("window" in globalThis) ? env : null;
+}
+/** The configured backend, or null when the value names neither vendor. */
+export function parseManagedScraperBackend(value) {
+    const normalized = value?.trim().toLowerCase();
+    if (!normalized || normalized === "up2data")
+        return "up2data";
+    return normalized === "harvestapi" ? "harvestapi" : null;
+}
+export function readManagedScraperBackend(env = serverEnv()) {
+    return parseManagedScraperBackend(env?.[MANAGED_SCRAPER_BACKEND_ENV]) ?? "up2data";
+}

package/node_modules/@oxygen/shared/dist/teammates.d.ts

@@ -3,12 +3,14 @@
  * per Workspace Oxygent, on the Copilot runtime. Explicit Personal Oxygents
  * are creator-only; the first one stays Workspace (Philipp, 2026-10-16).
  *
- * Staff only: on dev, and in production's staff workspaces, the ones Agents run
- * in (`agentsEnabledIn`; Tim, 2026-10-16). `OXYGEN_TEAMMATES_ENABLED` is the
- * switch; when it is unset the feature follows the Ongoing Agent sessions staff
- * gate, because teammates re-scope those sessions into routines. Shadow never
- * qualifies.
+ * Who has them: `OXYGEN_TEAMMATES_ENABLED` is the switch, "staff" for staff emails
+ * and "all" for every member who is not a client login (the customer launch,
+ * Tim, 2026-10-17). Unset, it follows the Ongoing Agent sessions switch, because
+ * teammates re-scope those sessions into routines. Only workspaces Agents run in
+ * qualify (`agentsEnabledIn`); shadow never does.
  */
+export type TeammatesAudience = "off" | "staff" | "all";
+export declare function teammatesAudience(env?: Record<string, string | undefined>): TeammatesAudience;
 export declare function teammatesEnabled(env?: Record<string, string | undefined>): boolean;
 /** Whether this workspace has Oxygents. */
 export declare function teammatesEnabledIn(organizationId: string | null | undefined, env?: Record<string, string | undefined>): boolean;

package/node_modules/@oxygen/shared/dist/teammates.js

@@ -1,34 +1,25 @@
 import { agentsEnabled, agentsEnabledIn } from "./agents-enabled.js";
 import { guidedActivationEnabled } from "./guided-activation.js";
 import { isStaffEmail } from "./staff.js";
-/**
- * AI teammates (ADR 0032): Agents people talk to in one ongoing shared chat
- * per Workspace Oxygent, on the Copilot runtime. Explicit Personal Oxygents
- * are creator-only; the first one stays Workspace (Philipp, 2026-10-16).
- *
- * Staff only: on dev, and in production's staff workspaces, the ones Agents run
- * in (`agentsEnabledIn`; Tim, 2026-10-16). `OXYGEN_TEAMMATES_ENABLED` is the
- * switch; when it is unset the feature follows the Ongoing Agent sessions staff
- * gate, because teammates re-scope those sessions into routines. Shadow never
- * qualifies.
- */
-export function teammatesEnabled(env = process.env) {
+export function teammatesAudience(env = process.env) {
     if (env.OXYGEN_DEPLOY_ENV !== "selfhost-dev" && env.OXYGEN_DEPLOY_ENV !== "selfhost-prod")
-        return false;
+        return "off";
     if (!agentsEnabled(env))
-        return false;
-    const flag = env.OXYGEN_TEAMMATES_ENABLED?.trim().toLowerCase();
-    if (flag)
-        return flag === "staff";
-    return env.OXYGEN_AGENT_SESSIONS_ENABLED === "staff";
+        return "off";
+    const flag = env.OXYGEN_TEAMMATES_ENABLED?.trim().toLowerCase() || env.OXYGEN_AGENT_SESSIONS_ENABLED?.trim();
+    return flag === "staff" || flag === "all" ? flag : "off";
+}
+export function teammatesEnabled(env = process.env) {
+    return teammatesAudience(env) !== "off";
 }
 /** Whether this workspace has Oxygents. */
 export function teammatesEnabledIn(organizationId, env = process.env) {
     return teammatesEnabled(env) && agentsEnabledIn(organizationId, env);
 }
 export function teammatesAvailableTo(env, viewer) {
-    return teammatesEnabledIn(viewer.organizationId, env) && viewer.member && viewer.oxygenRole !== "client"
-        && (guidedActivationEnabled(env) || isStaffEmail(viewer.email, env));
+    if (!teammatesEnabledIn(viewer.organizationId, env) || !viewer.member || viewer.oxygenRole === "client")
+        return false;
+    return teammatesAudience(env) === "all" || guidedActivationEnabled(env) || isStaffEmail(viewer.email, env);
 }
 /**
  * The Workspace Agent's slug. Every workspace's first Oxygent is that Agent: an

package/node_modules/@oxygen/shared/dist/user-capability-routing.js

@@ -222,7 +222,14 @@ function isGuidedOnboardingDiscoveryIntent(query) {
         || (/\b(?:guide|guided|journey|part [12])\b/.test(query)
             && /\b(?:business|company|icp|personas?|prospects?|trial|campaign|sequence|briefing)\b/.test(query))
         || (/\b(?:trial|prospects?|personas?)\b/.test(query)
-            && /\b(?:context|icp|campaign|sequence)\b/.test(query));
+            && /\b(?:context|icp|campaign|sequence)\b/.test(query))
+        // Company-statement review is a guided step even without the words guide
+        // or journey. Existing channel conversations keep their message owner.
+        || (/\bcompany profile\b/.test(query)
+            && /\b(?:review|correct|confirm)\b/.test(query)
+            && /\b(?:statement|profile revision)\b/.test(query)
+            && /\b(?:prospects?|evidence|sources?)\b/.test(query)
+            && !/\b(?:inbox|unibox|messages?|threads?|repl(?:y|ies)|email|whatsapp|slack|teams)\b/.test(query));
 }
 function isCompanyOnboardingContextIntent(query) {
     return /\bonboard\w*\b/.test(query)
@@ -337,7 +344,10 @@ function oxygentsRoute(normalized) {
     // Explicit content reads and other operations retain their native verbs.
     const privacy = /\b(?:visibility|personal|workspace|private|shared)\b/.test(normalized);
     const rosterRead = /\b(?:list|inventory|roster)\b|\bwhich\b.*\b(?:have|available)\b/.test(normalized);
-    const contentRead = /\b(?:read|see|view|show|transcript)\b/.test(normalized);
+    // Bare history asks read content; creation/configuration asks describe its contract.
+    const historyContract = /\b(?:visibility|configur\w*|settings?|privacy|defaults?|create|creating|make|add|new|set up|spawn|hire)\b/.test(normalized);
+    const contentRead = /\b(?:read|see|view|show|transcript)\b/.test(normalized)
+        || (/\bhistory\b/.test(normalized) && !historyContract);
     const contentSend = /\b(?:messages?|ask|tell|send|talk|continue|resume|handoff|delegat\w*)\b|\b(?:chat with|hand\w* off)\b/.test(normalized);
     if (!group && privacy && ((verb === "list" && !rosterRead) || verb === "create"
         || (verb === "update" && /\bvisibility\b/.test(normalized))

package/node_modules/@oxygen/shared/dist/version.generated.d.ts

@@ -1 +1 @@
-export declare const OXYGEN_BUILD_VERSION = "1.1014.1087";
+export declare const OXYGEN_BUILD_VERSION = "1.1014.1136";

package/node_modules/@oxygen/shared/dist/version.generated.js

@@ -1,2 +1,2 @@
 // GENERATED by scripts/ci/version-stamp.mjs from VERSION + git history. Do not edit; do not commit.
-export const OXYGEN_BUILD_VERSION = "1.1014.1087";
+export const OXYGEN_BUILD_VERSION = "1.1014.1136";

package/node_modules/@oxygen/shared/dist/workspace-placement-view.d.ts

@@ -1,4 +1,4 @@
-import type { WorkspacePlacementPlan, WorkspacePlacementObservation } from "./workspace-placement.js";
+import { type WorkspacePlacementPlan, type WorkspacePlacementObservation } from "./workspace-placement.js";
 export type WorkspacePlacementView = {
     id: string;
     provider: "internal";
@@ -123,6 +123,7 @@ export declare function workspacePlacementPreviewPage(plan: WorkspacePlacementPl
     billing_mode: "internal";
     credits: 0;
     allow_paused_probe: boolean;
+    receiver_scope?: "workspace" | "network";
     rendered_at?: string;
     rendering?: {
         tracking_opens: boolean;

package/node_modules/@oxygen/shared/dist/workspace-placement-view.js

@@ -1,4 +1,5 @@
 import { CliHttpError } from "./cli-http-error.js";
+import { placementReceiverLabel } from "./workspace-placement.js";
 export function workspacePlacementView(input, webUrl) {
     const variants = new Map();
     const probes = input.plan.probes.map(p => {
@@ -46,12 +47,12 @@ export function workspacePlacementView(input, webUrl) {
         else if (out?.state === "read_blocked")
             v.read_blocked++;
         const state = out?.state ?? (input.deliveries?.[p.id]?.status === "sent" ? "awaiting_results" : input.deliveries?.[p.id]?.status ?? "pending");
-        return { ...workspacePlacementProbeMeta(p), state, status_label: workspacePlacementStateLabel(state), ...(input.deliveries?.[p.id] ? { delivery: input.deliveries[p.id] } : {}), ...(o ? { observation: o } : {}) };
+        return { ...workspacePlacementProbeMeta(p), state, status_label: workspacePlacementStateLabel(state), ...(input.deliveries?.[p.id] ? { delivery: input.deliveries[p.id] } : {}), ...(o ? { observation: p.receiver.network_id ? { ...o, receiver_message_id: "private" } : o } : {}) };
     });
     const settled = input.plan.probes.filter(p => input.outcomes[p.id]).length;
     return { id: input.id, provider: "internal", billing_mode: "internal", credits_used: 0, status: settled < probes.length ? "running" : probes.every(p => p.state === "observed") ? "completed" : "incomplete",
         created_at: new Date(input.created_at).toISOString(), message_count: probes.length, variants: [...variants.values()], probes, plan_hash: input.plan.plan_hash, web_url: webUrl,
-        directional_note: "Observed placement in this workspace's receiving accounts; not a campaign placement guarantee. Primary and Focused are separate provider classifications." };
+        directional_note: "Observed placement in participating receiving accounts; not a campaign placement guarantee. Primary and Focused are separate provider classifications." };
 }
 export function workspacePlacementStateLabel(state) {
     return { pending: "Queued", leased: "Preparing send", sent: "Awaiting receiver observation", awaiting_results: "Awaiting receiver observation", observed: "Observed", not_observed: "Not observed within two hours", send_failed: "Send failed", send_unknown: "Send outcome unknown; do not resend", read_blocked: "Receiver could not be checked", uncertain: "Send outcome unknown; do not resend", canceled: "Send canceled", failed: "Send failed" }[state] ?? "Pending";
@@ -64,7 +65,7 @@ function pageNumber(value, fallback, max, field) {
     return value;
 }
 export function workspacePlacementProbeMeta(probe) {
-    return { id: probe.id, sender: probe.sender.address, sender_name: probe.sender.display_name ?? null, receiver: probe.receiver.address, receiver_provider: probe.receiver.provider, variant: probe.variant.key, subject: probe.variant.subject,
+    return { id: probe.id, sender: probe.sender.address, sender_name: probe.sender.display_name ?? null, receiver: placementReceiverLabel(probe.receiver), receiver_provider: probe.receiver.provider, variant: probe.variant.key, subject: probe.variant.subject,
         body_text_characters: Array.from(probe.variant.body_text).length, body_html_characters: Array.from(probe.variant.body_html ?? "").length };
 }
 export function workspacePlacementCopyPage(plan, input) {
@@ -81,7 +82,7 @@ export function workspacePlacementCopyPage(plan, input) {
     if (limit < 1)
         throw new CliHttpError(400, "workspace_test_page_invalid", "copy_limit must be at least 1.");
     const end = Math.min(chars.length, offset + limit);
-    return { id: probe.id, variant: probe.variant.key, sender: probe.sender.address, sender_name: probe.sender.display_name ?? null, receiver: probe.receiver.address, subject: probe.variant.subject, part, offset, total_characters: chars.length, text: chars.slice(offset, end).join(""), has_more: end < chars.length, next_offset: end < chars.length ? end : null };
+    return { id: probe.id, variant: probe.variant.key, sender: probe.sender.address, sender_name: probe.sender.display_name ?? null, receiver: placementReceiverLabel(probe.receiver), subject: probe.variant.subject, part, offset, total_characters: chars.length, text: chars.slice(offset, end).join(""), has_more: end < chars.length, next_offset: end < chars.length ? end : null };
 }
 export function workspacePlacementProbePage(probes, input, defaultLimit = 10) {
     const limit = pageNumber(input.limit, defaultLimit, 20, "limit");

package/node_modules/@oxygen/shared/dist/workspace-placement.d.ts

@@ -11,6 +11,8 @@ export type WorkspacePlacementMailbox = {
     transport: string;
     display_name?: string | null;
     signature_html: string | null;
+    organization_id?: string;
+    network_id?: string;
 };
 export type WorkspacePlacementProbe = {
     id: string;
@@ -25,6 +27,7 @@ export type WorkspacePlacementPlan = {
     billing_mode: "internal";
     credits: 0;
     allow_paused_probe: boolean;
+    receiver_scope?: "workspace" | "network";
     rendered_at?: string;
     rendering?: {
         tracking_opens: boolean;
@@ -48,6 +51,7 @@ export declare function buildWorkspacePlacementPlan(input: {
     allowPausedProbe: boolean;
     renderedAt?: string;
     rendering?: WorkspacePlacementPlan["rendering"];
+    network?: boolean;
     renderVariant?: (variant: WorkspacePlacementVariant, sender: WorkspacePlacementMailbox, probeId: string) => WorkspacePlacementVariant;
 }): WorkspacePlacementPlan;
 export type WorkspacePlacementObservation = {
@@ -75,3 +79,6 @@ export declare function workspacePlacementPayload(probe: WorkspacePlacementProbe
     apply_mailbox_signature: boolean;
     diagnostic_probe_id: string;
 };
+/** Foreign identities remain private even in previews, copy pages and manifests. */
+export declare function placementReceiverLabel(receiver: WorkspacePlacementMailbox): string;
+export declare function publicWorkspacePlacementPlan(plan: WorkspacePlacementPlan): WorkspacePlacementPlan;

package/node_modules/@oxygen/shared/dist/workspace-placement.js

@@ -51,17 +51,23 @@ export function buildWorkspacePlacementPlan(input) {
             else
                 pairs++;
         }
-    if (pairs * variants.length < 1 || pairs * variants.length > 50)
+    if ((input.network ? senders.length * variants.length * new Set(receivers.map(r => r.provider)).size : pairs * variants.length) < 1 || (input.network ? senders.length * variants.length * new Set(receivers.map(r => r.provider)).size : pairs * variants.length) > 50)
         invalid("A workspace test must send between one and 50 messages after excluding self-sends.");
     const probes = [];
     // Reject oversized matrices before signatures/HTML/tracking allocate per-probe content.
     // Rotate variants per receiver: no variant always gets the first submission.
-    for (const sender of senders) {
+    for (const [senderIndex, sender] of senders.entries()) {
         for (const [index, receiver] of receivers.entries()) {
             if (self(sender, receiver))
                 continue;
             for (let offset = 0; offset < variants.length; offset++) {
                 const original = variants[(offset + index) % variants.length];
+                if (input.network) {
+                    const group = receivers.filter(r => r.provider === receiver.provider);
+                    const sequence = senderIndex * variants.length + variants.indexOf(original);
+                    if (group[sequence % group.length].id !== receiver.id)
+                        continue;
+                }
                 const id = probeId(`${organizationId}:${requestId}:${sender.id}:${receiver.id}:${original.key}`);
                 const variant = input.renderVariant ? input.renderVariant(original, sender, id) : original;
                 probes.push({ id, sender, receiver, variant });
@@ -71,7 +77,7 @@ export function buildWorkspacePlacementPlan(input) {
     if (!probes.length || probes.length > 50)
         invalid("A workspace test must send between one and 50 messages after excluding self-sends.");
     const plan = { request_id: requestId, organization_id: organizationId, provider: "internal",
-        billing_mode: "internal", credits: 0, allow_paused_probe: input.allowPausedProbe,
+        ...(input.network ? { receiver_scope: "network" } : {}), billing_mode: "internal", credits: 0, allow_paused_probe: input.allowPausedProbe,
         ...(input.renderedAt ? { rendered_at: input.renderedAt } : {}), ...(input.rendering ? { rendering: input.rendering } : {}),
         probes, excluded_self_sends: excluded, message_count: probes.length };
     return { ...plan, plan_hash: createHash("sha256").update(JSON.stringify(plan)).digest("hex") };
@@ -92,3 +98,10 @@ export function workspacePlacementPayload(probe) {
     return { kind: "email_send", to: probe.receiver.address, subject: probe.variant.subject, body: probe.variant.body_text,
         ...(probe.variant.body_html ? { body_html: probe.variant.body_html } : {}), apply_mailbox_signature: false, diagnostic_probe_id: probe.id };
 }
+/** Foreign identities remain private even in previews, copy pages and manifests. */
+export function placementReceiverLabel(receiver) {
+    return receiver.network_id ? `${receiver.provider === "google" ? "Google" : "Microsoft"} receiver ${receiver.network_id.slice(0, 8)}` : receiver.address;
+}
+export function publicWorkspacePlacementPlan(plan) {
+    return { ...plan, probes: plan.probes.map(p => ({ ...p, receiver: p.receiver.network_id ? { id: p.receiver.network_id, address: placementReceiverLabel(p.receiver), provider: p.receiver.provider, transport: "network", signature_html: null } : p.receiver })) };
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oxygen-agent/cli",
-  "version": "1.1014.1087",
+  "version": "1.1014.1136",
   "private": false,
   "license": "UNLICENSED",
   "type": "module",