@oxygen-agent/cli 1.1014.1343 → 1.1014.1420

package/README.md

@@ -34,4 +34,4 @@ oxygen update
 
 For product documentation, visit https://oxygen-agent.com/docs. For support, visit https://oxygen-agent.com.
 
-Version: 1.1014.1343
+Version: 1.1014.1420

package/dist/command-families/tables/register-reads.js

@@ -108,7 +108,7 @@ export function registerReads({ tablesCommand, handleAsyncAction }) {
             if (options.format !== "grid" && !tableQueryRawResultFits(data, typeof gridArgs.max_chars === "number" ? gridArgs.max_chars : undefined)) {
                 const firstRow = Array.isArray(data.rows) ? data.rows[0] : undefined;
                 throw new OxygenError("table_query_result_too_large", "Table rows exceed the requested result window.", {
-                    details: { max_chars: gridArgs.max_chars, ...tableQueryRawRecovery(table, typeof firstRow?._row_id === "string" ? firstRow._row_id : undefined) }, exitCode: 2,
+                    details: { max_chars: gridArgs.max_chars, ...tableQueryRawRecovery(table, typeof firstRow?._row_id === "string" ? firstRow._row_id : undefined, firstRow) }, exitCode: 2,
                 });
             }
             if (!options.output)

package/dist/command-support.js

@@ -15,6 +15,7 @@ import { tableRunSummary } from "@oxygen/shared/table-run-summary";
 import { describeWorkflowStatusChange, parseWorkflowStatusChange } from "@oxygen/shared/workflow-status-change";
 import { createHash } from "node:crypto";
 import { readFileSync } from "node:fs";
+import { readFile } from "node:fs/promises";
 import { basename, resolve } from "node:path";
 import { stdout as output } from "node:process";
 // --- Collaboration: comments + approvals (Control layer) ---------------------
@@ -1199,8 +1200,9 @@ export async function buildDirectoryProfileBody(options) {
     if (!profile.description) {
         const path = readOption(options.descriptionFile);
         if (path) {
-            const fs = await import("node:fs/promises");
-            profile.description = await fs.readFile(path, "utf8");
+            // Keep the existing asynchronous steps before local file access.
+            await undefined;
+            profile.description = await readFile(path, "utf8");
         }
     }
     if (readOption(options.foundersJson)) {

package/dist/commands/blueprints.js

@@ -3,6 +3,7 @@ import { collectMultiple, isUuid, parseJsonValue, readCsvOption, splitCommaList
 import { requestOxygen } from "../http-client.js";
 import { readOption } from "../util.js";
 import { Command } from "commander";
+import { readFile, writeFile } from "node:fs/promises";
 async function buildBlueprintRequestBody(// skipcq: JS-R1005
 slug, options) {
     const body = {};
@@ -10,8 +11,9 @@ slug, options) {
         body.slug = slug.trim();
     const filePath = readOption(options.file);
     if (filePath) {
-        const fs = await import("node:fs/promises");
-        const raw = await fs.readFile(filePath, "utf8");
+        // Keep the existing asynchronous steps before local file access.
+        await undefined;
+        const raw = await readFile(filePath, "utf8");
         body.envelope = parseJsonValue(raw, "--file");
     }
     const fromUrl = readOption(options.fromUrl);
@@ -137,9 +139,10 @@ export function registerBlueprintsFamily(program, handleAsyncAction) {
             });
             const outPath = readOption(options.out);
             if (outPath) {
-                const fs = await import("node:fs/promises");
+                // Keep the existing asynchronous steps before local file access.
+                await undefined;
                 const blueprint = result.blueprint;
-                await fs.writeFile(outPath, JSON.stringify(blueprint, null, 2), "utf8");
+                await writeFile(outPath, JSON.stringify(blueprint, null, 2), "utf8");
             }
             return result;
         });
@@ -187,8 +190,9 @@ export function registerBlueprintsFamily(program, handleAsyncAction) {
             const filePath = readOption(options.file);
             if (!filePath)
                 throw new Error("--file is required for blueprints save");
-            const fs = await import("node:fs/promises");
-            const raw = await fs.readFile(filePath, "utf8");
+            // Keep the existing asynchronous steps before local file access.
+            await undefined;
+            const raw = await readFile(filePath, "utf8");
             const envelope = parseJsonValue(raw, "--file");
             const body = { envelope };
             const slug = readOption(options.slug);

package/dist/commands/crm.js

@@ -10,6 +10,8 @@ import { isRecord, readClearableOption, readOption } from "../util.js";
 import { OxygenError, success } from "@oxygen/shared/cli-result";
 import { CRM_ENRICHMENT_READ_CONTRACT } from "@oxygen/shared/contracts/crm-enrichment-read";
 import { Command, Option } from "commander";
+import { readFile } from "node:fs/promises";
+import { basename } from "node:path";
 import { stdout as output } from "node:process";
 const DEFAULT_CRM_SETUP_OBJECTS = ["companies", "people", "deals"];
 function buildCrmSetupBody(options) {
@@ -1066,8 +1068,9 @@ export function registerCrmFamily(program, handleAsyncAction) {
         .option("--json", "Print a JSON envelope.")
         .action(async (object, rowId, filePath, options) => {
         await handleAsyncAction("crm files attach", options, async () => {
-            const { readFile } = await import("node:fs/promises");
-            const { basename } = await import("node:path");
+            // Keep the existing asynchronous steps before local file access.
+            await undefined;
+            await undefined;
             const { createHash } = await import("node:crypto");
             const bytes = await readFile(filePath);
             // Presign, PUT straight to object storage, then have the server

package/dist/commands/dashboards.js

@@ -3,6 +3,7 @@ import { requestOxygen } from "../http-client.js";
 import { readOption } from "../util.js";
 import { OxygenError } from "@oxygen/shared/cli-result";
 import { Command } from "commander";
+import { readFile } from "node:fs/promises";
 /**
  * A widget configuration from `--config` or `--config-file`.
  *
@@ -21,8 +22,9 @@ async function readDashboardWidgetConfig(options) {
     if (inline)
         return parseJsonObject(inline);
     if (path) {
-        const fs = await import("node:fs/promises");
-        return parseJsonObject(await fs.readFile(path, "utf8"));
+        // Keep the existing asynchronous steps before local file access.
+        await undefined;
+        return parseJsonObject(await readFile(path, "utf8"));
     }
     return {};
 }

package/dist/commands/db.js

@@ -23,7 +23,7 @@ export function registerDbFamily(program, handleAsyncAction) {
         await handleAsyncAction("db provision", options, () => requestOxygen("/api/cli/db/provision", { method: "POST", body: {} }));
     }))
         .addCommand(addContractFlags(new Command("migrate")
-        .description("Apply pending tenant database migrations for the current organization."), DATABASE_MIGRATE_CONTRACT, { rotate_credentials: { noNegate: true } })
+        .description("Apply pending tenant database migrations for the current organization. Staff can pass global --org to repair another org."), DATABASE_MIGRATE_CONTRACT, { rotate_credentials: { noNegate: true } })
         .option("--json", "Print a JSON envelope.")
         .action(async (options) => {
         await handleAsyncAction("db migrate", options, () => requestOxygen("/api/cli/db/migrate", {

package/dist/commands/directory.js

@@ -4,6 +4,8 @@ import { readOption } from "../util.js";
 import { OxygenError } from "@oxygen/shared/cli-result";
 import { AGENCY_DIRECTORY_REGIONS, AGENCY_DIRECTORY_SERVICES } from "@oxygen/shared/directory";
 import { Command } from "commander";
+import { readFile } from "node:fs/promises";
+import { basename, extname } from "node:path";
 function directoryLogoMimeType(extension) {
     switch (extension.toLowerCase()) {
         case ".png":
@@ -20,11 +22,12 @@ function directoryLogoMimeType(extension) {
     }
 }
 async function uploadDirectoryLogo(logoPath) {
-    const fs = await import("node:fs/promises");
-    const path = await import("node:path");
-    const buffer = await fs.readFile(logoPath);
+    // Keep the existing asynchronous steps before local file access.
+    await undefined;
+    await undefined;
+    const buffer = await readFile(logoPath);
     const form = new FormData();
-    form.append("file", new File([buffer], path.basename(logoPath), { type: directoryLogoMimeType(path.extname(logoPath)) }));
+    form.append("file", new File([buffer], basename(logoPath), { type: directoryLogoMimeType(extname(logoPath)) }));
     return await requestOxygen("/api/cli/directory/listing/logo", {
         method: "POST",
         formData: form,

package/dist/commands/inbox.js

@@ -6,6 +6,8 @@ import { readOption } from "../util.js";
 import { OxygenError } from "@oxygen/shared/cli-result";
 import { INBOX_DRAFTS_READ_CONTRACT } from "@oxygen/shared/contracts/inbox-drafts-read";
 import { Command, Option } from "commander";
+import { readFile, stat } from "node:fs/promises";
+import { basename } from "node:path";
 export function registerInboxFamily(program, handleAsyncAction) {
     program.addCommand(new Command("inbox")
         .description("Unified inbox (unibox): private email + LinkedIn DM + WhatsApp conversations in one stream (the default), or a single channel with --channel; `get` and `send` resolve a conversation's channel from its id. Public comments on owned LinkedIn posts are not inbox messages; use `publishing comments`. Scan, read, reply, or start a WhatsApp chat.")
@@ -144,8 +146,9 @@ export function registerInboxFamily(program, handleAsyncAction) {
             const attachments = channel === "linkedin" ? attached.map((url) => ({ url })) : [];
             const attachmentIds = [];
             if (attached.length && channel === "email") {
-                const { readFile, stat } = await import("node:fs/promises");
-                const { basename } = await import("node:path");
+                // Keep the existing asynchronous steps before local file access.
+                await undefined;
+                await undefined;
                 const { createHash } = await import("node:crypto");
                 let totalBytes = 0;
                 const base = `/api/cli/inbox/${encodeURIComponent(conversation)}/attachments`;

package/dist/commands/prompts.js

@@ -3,6 +3,7 @@ import { isUuid } from "../command-support.js";
 import { requestOxygen } from "../http-client.js";
 import { readClearableOption, readOption } from "../util.js";
 import { Command } from "commander";
+import { readFile } from "node:fs/promises";
 function buildPromptTemplatesCommand(surface, description) {
     return new Command(surface)
         .description(description)
@@ -64,8 +65,9 @@ function buildPromptTemplatesCommand(surface, description) {
             else {
                 const path = readOption(options.bodyFile);
                 if (path) {
-                    const fs = await import("node:fs/promises");
-                    body.body = await fs.readFile(path, "utf8");
+                    // Keep the existing asynchronous steps before local file access.
+                    await undefined;
+                    body.body = await readFile(path, "utf8");
                 }
             }
             return requestOxygen("/api/cli/templates/upsert", { method: "POST", body });

package/dist/commands/publishing.js

@@ -9,6 +9,8 @@ import { isRecord, readOption } from "../util.js";
 import { OxygenError } from "@oxygen/shared/cli-result";
 import { publishingAmplificationListQueryContract, publishingAmplificationActionsQueryContract, publishingNotesQueryContract, publishingRevisionsQueryContract, publishingAnalyticsQueryContract, publishingReadQueryParams } from "@oxygen/shared/contracts/publishing-reads";
 import { Command } from "commander";
+import { openAsBlob } from "node:fs";
+import { basename } from "node:path";
 function buildPublishingPostsListPath(options) {
     const query = new URLSearchParams();
     const filters = {
@@ -296,8 +298,9 @@ function publishingMediaContentTypeForPath(path) {
  * a large video streams from disk instead of being read into memory.
  */
 async function uploadPublishingMediaFile(filePath, options) {
-    const { openAsBlob } = await import("node:fs");
-    const { basename } = await import("node:path");
+    // Keep the existing asynchronous steps before local file access.
+    await undefined;
+    await undefined;
     const contentType = options.contentType ?? publishingMediaContentTypeForPath(filePath);
     if (!contentType) {
         throw new OxygenError("invalid_request", "Could not tell the file type from its extension. Pass --content-type, such as video/mp4 or image/png.", { details: { path: filePath }, exitCode: 2 });

package/dist/commands/sequences.js

@@ -1223,6 +1223,11 @@ function readSequenceSettings(options) {
     if (options.excludeContacted !== undefined) {
         settings.exclude_contacted = options.excludeContacted;
     }
+    // Tri-state like exclude_contacted: absent leaves the stored value (a first
+    // launch arms it), either flag persists the choice.
+    if (options.autoEnrollTableRows !== undefined) {
+        settings.auto_enroll_table_rows = options.autoEnrollTableRows;
+    }
     // A visible footer mutates outbound copy, so it is opt-in and tri-state:
     // absent leaves the stored value alone; either explicit flag persists the
     // chosen boolean. Missing/false is interpreted as OFF by the dispatcher.
@@ -1586,7 +1591,7 @@ export function registerSequencesFamily(program, handleAsyncAction) {
         .addHelpText("after", "\nSenders: each new lead gets one of the --sender-profiles people, the one with the fewest of this sequence's leads (a lead already talking to one of your LinkedIn accounts keeps that account's person), and its LinkedIn and email steps come from that person (email from one of their inboxes). Per step, in the steps file: email_send.sender_profile_id sends that email from any inbox of one selected person (the normal inbox rotation spreads leads across that person's inboxes and each lead keeps its one; a lead already assigned to that person keeps its own inbox; with none usable the lead waits, never using a colleague's inbox), and email_send.sender_mailbox_id from one exact inbox (set one or neither); a LinkedIn step's sender_profile_id sends it from one selected person. Invite, message, inmail and withdraw_invite steps must share one sender_profile_id or none: that person then owns every lead's LinkedIn thread (LinkedIn allows one of your accounts per conversation). visit_profile, follow, like_post and comment_post may each name anyone selected. An email whose From changes, including the return to the lead's inbox, needs its own subject_template. To check who sends each step, run `sequences start <sequence>` without --approved; nothing changes.\n")
         .requiredOption("--name <name>", "Human-readable sequence name.")
         .requiredOption("--slug <slug>", "Unique slug for the sequence.")
-        .requiredOption("--steps-file <path>", "Path to a JSON file: { \"steps\": [...] }. LinkedIn steps (visit_profile | invite | wait_for_connection | message | inmail | follow | like_post | comment_post | withdraw_invite), email steps (email_send | email_enroll | email_move | email_stop), WhatsApp (whatsapp_message), human call tasks (call_task), connected-CRM tasks (crm_task; channel crm; exact identity record_mappings + explicit create/update policy + record_links + dynamic task property_mappings/associations), and control steps (wait | wait_for_signal | branch | stop), each with an `id`. Copy templates support {{column}} interpolation from the lead's row, {{column|fallback}} inline fallbacks, deterministic spintax — {{RANDOM|a|b|c}} or industry-standard bare {Hi|Hey|Hello}, nestable like {Would {Tuesday|Thursday} work|next week?} — and {% if column %}…{% endif %} conditionals; a bare {…} region is spintax only when it contains a top-level |, so literal braces (CSS/JSON) pass through. Every step's copy can also use {{sender_first_name}}, {{sender_last_name}} and {{sender_full_name}} (alias {{sender_name}}): the name of the person who sends that step (their sender profile, else the account or inbox display name), with no table column needed; email steps add {{sender_email}} (the from address). A row column of the same name WINS on collision, and a missing name renders empty. comment_post takes text_template and/or ai_prompt — a KG-grounded comment generated at send time (a paid AI call) that falls back to text_template if generation fails. A `branch` routes on signals (then/else) or the legacy connection_accepted/already_connected/open_profile sugar (then_id/else_id). A signal condition can also branch on the LEAD'S DATA: a data leaf { has_column: \"email\" } is true when that row_values column has a non-empty value (add present:false for \"missing\") — e.g. route leads that have an email down an email arm and the rest down a LinkedIn arm. MINIMAL EMAIL STEP SHAPE: { \"id\": \"s1\", \"channel\": \"email\", \"kind\": \"email_send\", \"subject_template\": \"...\", \"body_template\": \"...\" } — body_template is REQUIRED on email_send; subject_template is OPTIONAL and is the one control that decides threading: give a step its own subject and it goes out as a NEW email, omit it and the step continues the lead's previous email in the same thread, going out as \"Re: <the previous email's subject>\" (what the retired email_reply kind used to be — still accepted on input, rewritten into this shape, and reported under `warnings` in the response). The FIRST email step of a sequence must carry a subject, since it has no earlier thread to continue. MINIMAL WHATSAPP STEP SHAPE: { \"id\": \"s1\", \"channel\": \"whatsapp\", \"kind\": \"whatsapp_message\", \"template\": \"Hi {{first_name|there}} …\" } — template is REQUIRED, and a live WhatsApp start also needs the sequence's --whatsapp-cold-initiate opt-in. MINIMAL WAIT STEP SHAPE: { \"id\": \"w1\", \"kind\": \"wait\", \"days\": 3 } — days and/or hours, at least 1 hour in total. A/B tests use an explicit `variants` array of copy partials on the step (up to 25 alternates, a–z; spintax varies wording INSIDE one variant and is not A/B-tracked). For the complete replay-safe crm_task upsert mapping shape, read `oxygen skills get oxygen-sequencer --file references/calls-and-crm-tasks.md`.")
+        .requiredOption("--steps-file <path>", "Path to a JSON file: { \"steps\": [...] }. LinkedIn steps (visit_profile | invite | wait_for_connection | message | inmail | follow | like_post | comment_post | withdraw_invite), email steps (email_send | email_enroll | email_move | email_stop), WhatsApp (whatsapp_message), human call tasks (call_task), connected-CRM tasks (crm_task; channel crm; exact identity record_mappings + explicit create/update policy + record_links + dynamic task property_mappings/associations), and control steps (wait | wait_for_signal | branch | stop), each with an `id`. Copy templates support {{column}} interpolation from the lead's row, {{column|fallback}} inline fallbacks, deterministic spintax — {{RANDOM|a|b|c}} or industry-standard bare {Hi|Hey|Hello}, nestable like {Would {Tuesday|Thursday} work|next week?} — and {% if column %}…{% endif %} conditionals; a bare {…} region is spintax only when it contains a top-level |, so literal braces (CSS/JSON) pass through. Every step's copy can also use {{sender_first_name}}, {{sender_last_name}} and {{sender_full_name}} (alias {{sender_name}}): the name of the person who sends that step (their sender profile, else the account or inbox display name), with no table column needed; email steps add {{sender_email}} (the from address). A row column of the same name WINS on collision, and a missing name renders empty. comment_post takes text_template and/or ai_prompt — a KG-grounded comment generated at send time (a paid AI call) that falls back to text_template if generation fails. A `branch` routes on signals (then/else) or the legacy connection_accepted/already_connected/open_profile sugar (then_id/else_id). A signal condition can also branch on the LEAD'S DATA: a contact leaf { has_contact: \"email\" | \"linkedin\" | \"phone\" } is true when that step's channel can reach the lead (resolved as sending resolves it; add present:false for \"missing\") — e.g. route leads that have an email down an email arm and the rest down a LinkedIn arm; a data leaf { has_column: \"<key>\" } tests one row_values column. MINIMAL EMAIL STEP SHAPE: { \"id\": \"s1\", \"channel\": \"email\", \"kind\": \"email_send\", \"subject_template\": \"...\", \"body_template\": \"...\" } — body_template is REQUIRED on email_send; subject_template is OPTIONAL and is the one control that decides threading: give a step its own subject and it goes out as a NEW email, omit it and the step continues the lead's previous email in the same thread, going out as \"Re: <the previous email's subject>\" (what the retired email_reply kind used to be — still accepted on input, rewritten into this shape, and reported under `warnings` in the response). The FIRST email step of a sequence must carry a subject, since it has no earlier thread to continue. MINIMAL WHATSAPP STEP SHAPE: { \"id\": \"s1\", \"channel\": \"whatsapp\", \"kind\": \"whatsapp_message\", \"template\": \"Hi {{first_name|there}} …\" } — template is REQUIRED, and a live WhatsApp start also needs the sequence's --whatsapp-cold-initiate opt-in. MINIMAL WAIT STEP SHAPE: { \"id\": \"w1\", \"kind\": \"wait\", \"days\": 3 } — days and/or hours, at least 1 hour in total. A/B tests use an explicit `variants` array of copy partials on the step (up to 25 alternates, a–z; spintax varies wording INSIDE one variant and is not A/B-tracked). For the complete replay-safe crm_task upsert mapping shape, read `oxygen skills get oxygen-sequencer --file references/calls-and-crm-tasks.md`.")
         .option("--channels <list>", "Comma-separated channels: linkedin,email,whatsapp,call,crm. Defaults to the channels the journey touches. crm_task currently supports HubSpot.")
         .option("--whatsapp-cold-initiate", "WhatsApp: allow cold-initiating new chats (no prior conversation). Required to start a WhatsApp sequence live — WhatsApp via Unipile is unofficial WhatsApp Web, so cold-initiating is an explicit ban-risk opt-in.")
         .addOption(new Option("--whatsapp-duplicate-scope <scope>", "Prevent duplicate WhatsApp copy in this campaign (default) or all campaigns.").choices(["campaign", "workspace"]))
@@ -1621,6 +1626,8 @@ export function registerSequencesFamily(program, handleAsyncAction) {
         .option("--no-stop-on-bounce", "Keep a lead's enrollment running after a hard bounce (default: stop it). The bounce is still recorded as an email_bounced signal either way.")
         .option("--exclude-contacted", "Default every enroll into this sequence to cross-campaign exclusion — skip leads any OTHER active sequence is already contacting. A per-enroll `sequences enroll --exclude-contacted` / `--no-exclude-contacted` always overrides this default. Off by default.")
         .option("--no-exclude-contacted", "Turn the sequence-level exclude-contacted default back OFF (enrollments then exclude cross-campaign only when a call opts in).")
+        .option("--auto-enroll-table-rows", "Rows added to the sequence's table join it while it is active (a first launch turns this on unless it was turned off).")
+        .option("--no-auto-enroll-table-rows", "Keep enrollment manual: launching does not enroll the table, and new rows wait for `sequences enroll`.")
         .option("--company-reply-pause <off|default|statuses>", "Pause the replier's company in this campaign when a reply has one of these statuses. Oxygen detects the company from work-email domains or explicit company fields; with no company identity, only the replier stops. New sequences start with this setting off. 'default' = interested,neutral,not_now,not_interested; or comma-separated Inbox status keys (`inbox labels list`); 'off' disables it. Read the saved setting with `sequences get`.")
         .option("--stop-on-reply-scope <scope>", "(deprecated: use --company-reply-pause) 'company_domain' = --company-reply-pause interested,neutral,not_now,not_interested,wrong_person; 'lead' = off.")
         .option("--bounce-protection <json>", "Sequence bounce policy JSON (partial updates merge): enabled=true, warning_rate=.02, pause_rate=.03, min_sends=20, window_days=7. Hard bounces / accepted sends in the rolling window; pauses this sequence, not the fleet. Rates are fractions; mailbox protection is separate.")
@@ -1721,7 +1728,7 @@ export function registerSequencesFamily(program, handleAsyncAction) {
         .option("--activation-id <id>", "Guided activation UUID; requires --activation-revision and --expected-revision.")
         .option("--activation-revision <revision>", "Current guided activation revision; requires --activation-id and --expected-revision.")
         .option("--name <name>", "New human-readable sequence name.")
-        .option("--steps-file <path>", "Path to a JSON file: { \"steps\": [...] } replacing the journey. Once started, only wait timing may change: same steps, same order (zero a delay, never delete its step). Copy supports {{column}} interpolation; every step also takes {{sender_first_name}} / {{sender_last_name}} / {{sender_full_name}} for the person who sends it, and email adds {{sender_email}} (a same-named row column wins). A `branch` can also route on the lead's data with a data leaf { has_column: \"email\" } (true when that row_values column is non-empty; present:false for \"missing\").")
+        .option("--steps-file <path>", "Path to a JSON file: { \"steps\": [...] } replacing the journey. Once started, only wait timing may change: same steps, same order (zero a delay, never delete its step). Copy supports {{column}} interpolation; every step also takes {{sender_first_name}} / {{sender_last_name}} / {{sender_full_name}} for the person who sends it, and email adds {{sender_email}} (a same-named row column wins). A `branch` can also route on the lead's data with a contact leaf { has_contact: \"email\" | \"linkedin\" | \"phone\" } or a data leaf { has_column: \"<key>\" } (present:false for \"missing\").")
         .option("--channels <list>", "Draft only: comma-separated channels: linkedin,email,whatsapp,call,crm.")
         .option("--whatsapp-cold-initiate", "WhatsApp: allow cold-initiating new chats (no prior conversation). Required to start a WhatsApp sequence live (draft-editable).")
         .option("--no-whatsapp-cold-initiate", "WhatsApp: stop allowing cold chats; a live WhatsApp start then refuses.")
@@ -1762,6 +1769,8 @@ export function registerSequencesFamily(program, handleAsyncAction) {
         .option("--no-stop-on-bounce", "Keep a lead's enrollment running after a hard bounce (default: stop it). The bounce is still recorded as an email_bounced signal either way.")
         .option("--exclude-contacted", "Default every enroll into this sequence to cross-campaign exclusion — skip leads any OTHER active sequence is already contacting. A per-enroll `sequences enroll --exclude-contacted` / `--no-exclude-contacted` always overrides this default. Off by default.")
         .option("--no-exclude-contacted", "Turn the sequence-level exclude-contacted default back OFF (enrollments then exclude cross-campaign only when a call opts in).")
+        .option("--auto-enroll-table-rows", "Rows added to the sequence's table join it while it is active (a first launch turns this on unless it was turned off).")
+        .option("--no-auto-enroll-table-rows", "Keep enrollment manual: launching does not enroll the table, and new rows wait for `sequences enroll`.")
         .option("--company-reply-pause <off|default|statuses>", "Pause the replier's company in this campaign when a reply has one of these statuses. Oxygen detects the company from work-email domains or explicit company fields; with no company identity, only the replier stops. New sequences start with this setting off. 'default' = interested,neutral,not_now,not_interested; or comma-separated Inbox status keys (`inbox labels list`); 'off' disables it. Read the saved setting with `sequences get`.")
         .option("--stop-on-reply-scope <scope>", "(deprecated: use --company-reply-pause) 'company_domain' = --company-reply-pause interested,neutral,not_now,not_interested,wrong_person; 'lead' = off.")
         .option("--bounce-protection <json>", "Sequence bounce policy JSON (partial updates merge): enabled=true, warning_rate=.02, pause_rate=.03, min_sends=20, window_days=7. Hard bounces / accepted sends in the rolling window; pauses this sequence, not the fleet. Rates are fractions; mailbox protection is separate.")
@@ -1845,7 +1854,7 @@ export function registerSequencesFamily(program, handleAsyncAction) {
                     body.email = email;
             }
             if (Object.keys(body).length === 0) {
-                throw new Error("Provide at least one field to update (--name, --steps-file, --source-table, --channels, --senders, --tags, --email-*, --clear-email, --max-credits, --max-live-sends, --max-emails-per-mailbox-per-day, --schedule-* sending schedule, --send-window-file, --linkedin-* schedule, --company-reply-pause, --[no-]include-unsubscribe, --[no-]include-unsubscribe-link, --no-stop-on-bounce, --[no-]exclude-contacted, or --[no-]tracking-opens / --[no-]tracking-clicks).");
+                throw new Error("Provide at least one field to update (--name, --steps-file, --source-table, --channels, --senders, --tags, --email-*, --clear-email, --max-credits, --max-live-sends, --max-emails-per-mailbox-per-day, --schedule-* sending schedule, --send-window-file, --linkedin-* schedule, --company-reply-pause, --[no-]include-unsubscribe, --[no-]include-unsubscribe-link, --no-stop-on-bounce, --[no-]exclude-contacted, --[no-]auto-enroll-table-rows, or --[no-]tracking-opens / --[no-]tracking-clicks).");
             }
             return requestOxygen(`/api/cli/sequences/${encodeURIComponent(sequence)}`, {
                 method: "PATCH",
@@ -1868,7 +1877,7 @@ export function registerSequencesFamily(program, handleAsyncAction) {
         await handleAsyncAction("sequences get", options, () => requestOxygen(`/api/cli/sequences/${encodeURIComponent(sequence)}${query}`));
     }))
         .addCommand(new Command("enroll")
-        .description("Enroll leads into a sequence. Enrolling spends no credits. An active sequence contacts the new leads on its next dispatch tick; a draft or paused one holds them until `sequences start`. --from-table enrolls every not-yet-enrolled row of the sequence's bound source table (up to 500 per run; the response's from_table.has_more says whether to run again) — for a LinkedIn sequence the profile is read from the bound table's URL column, where a full /in/ URL and a bare public handle carrying a hyphen or digit (ada-lovelace) both work, so no pre-resolved provider ids are needed; each handle Oxygen canonicalized is echoed in linkedin_handles_canonicalized (value + url) to check before start, and every row that still cannot be resolved is named in unresolved_linkedin_lead_details (row, value, reason) rather than only counted in unresolved_linkedin_leads. In a LinkedIn + email sequence a row with no usable profile but a recipient email is still enrolled for the email steps (its LinkedIn steps are skipped as no_linkedin_profile, a connection wait passes at once and a connection branch takes its not-connected path) and is listed in linkedin_unavailable_lead_details instead; unresolved_linkedin_leads names only rows that were not enrolled. --leads-file enrolls an explicit JSON list { leads: [...] }: for an email/WhatsApp sequence a lead identified only by an email (row_values.email) or phone (row_values.phone) is auto-filed as a row in the sequence's leads table (auto-creating and binding one if there is none), deduped by email/phone, so no table has to exist first (the table is returned as leads_table with a web_url); a LinkedIn + email sequence auto-files an email-only lead the same way; a LinkedIn lead needs a lead_provider_id, a lead_profile_url (a /in/ URL or a bare public handle with a hyphen or digit), or a table_row_id whose row carries one of those; in a sequence with LinkedIn steps a lead with a lead_profile_url and no table_row_id is filed the same way, onto the person's existing row in the bound table (another spelling of the same profile URL matches) or as a new row, deduped by profile URL, and a person the sequence already holds keeps that enrollment; where the sequence has no table and every new table needs a client signoff the enroll is refused instead (sequence_leads_table_needs_signoff). Like any table-row lead a filed one cannot re-enroll in that sequence once its enrollment ends; leads_without_table_row counts the leads in the request that no table lists (those given only a lead_provider_id, and people the sequence already holds without a row). A CRM-only lead needs a stable table_row_id or lead_provider_id in addition to mapped row_values; a HubSpot contact id used in crm_task associations identifies the destination record, not the Oxygen enrollment. When the sequence is bound to a source table, a lead's table_row_id auto-snapshots that row's columns (incl. AI/tool outputs) into row_values for {{column}} copy — explicit row_values win. Idempotent per table row (and per email/phone or profile URL for auto-filed leads). WhatsApp-only campaigns also enroll each normalized number once across all source rows and enrollment statuses; mixed campaigns keep other channels and skip duplicate WhatsApp actions. Duplicate protection defaults to this campaign; --whatsapp-duplicate-scope on create/update can additionally block identical copy across all campaigns. The org do-not-contact list is always enforced; --exclude-contacted and --suppress-list add further opt-in skips (reported under skipped_by_reason). Leads already owned by a sender account (from an earlier real send) are routed back to that same account; a lead owned by a sender NOT on this sequence is skipped (bound_to_other_sender) unless --ignore-sender-bindings. This enrolls into an OXYGEN Sequence; to put the same rows into a campaign you already run in Smartlead, Instantly, lemlist or HeyReach, use `sequences push-external`. esp.pool_scope identifies the active workspace inventory used for routing and strict_deferred_leads estimates; these estimates omit sequence sender restrictions, readiness and daily limits. A zero estimate does not guarantee readiness. Review sequences preview before launch.")
+        .description("Enroll leads into a sequence. Enrolling spends no credits. An active sequence contacts the new leads on its next dispatch tick; a draft or paused one holds them until `sequences start`. --from-table enrolls every not-yet-enrolled row of the sequence's bound source table (up to 500 per run; the response's from_table.has_more says whether to run again) — for a LinkedIn sequence the profile is read from the bound table's URL column, where a full /in/ URL and a bare public handle carrying a hyphen or digit (ada-lovelace) both work, so no pre-resolved provider ids are needed; each handle Oxygen canonicalized is echoed in linkedin_handles_canonicalized (value + url) to check before start, and every row that still cannot be resolved is named in unresolved_linkedin_lead_details (row, value, reason) rather than only counted in unresolved_linkedin_leads. In a sequence with LinkedIn steps a row with no usable profile is still enrolled when its email or phone reaches the journey's email, call or WhatsApp steps (its LinkedIn steps are skipped as no_linkedin_profile, a connection wait passes at once and a connection branch takes its not-connected path) and is listed in linkedin_unavailable_lead_details instead, with channels naming what reaches it; unresolved_linkedin_leads names only rows that were not enrolled. --leads-file enrolls an explicit JSON list { leads: [...] }: for an email/WhatsApp sequence a lead identified only by an email (row_values.email) or phone (row_values.phone) is auto-filed as a row in the sequence's leads table (auto-creating and binding one if there is none), deduped by email/phone, so no table has to exist first (the table is returned as leads_table with a web_url); a LinkedIn + email sequence auto-files an email-only lead the same way; a LinkedIn lead needs a lead_provider_id, a lead_profile_url (a /in/ URL or a bare public handle with a hyphen or digit), or a table_row_id whose row carries one of those; in a sequence with LinkedIn steps a lead with a lead_profile_url and no table_row_id is filed the same way, onto the person's existing row in the bound table (another spelling of the same profile URL matches) or as a new row, deduped by profile URL, and a person the sequence already holds keeps that enrollment; where the sequence has no table and every new table needs a client signoff the enroll is refused instead (sequence_leads_table_needs_signoff). Like any table-row lead a filed one cannot re-enroll in that sequence once its enrollment ends; leads_without_table_row counts the leads in the request that no table lists (those given only a lead_provider_id, and people the sequence already holds without a row). A CRM-only lead needs a stable table_row_id or lead_provider_id in addition to mapped row_values; a HubSpot contact id used in crm_task associations identifies the destination record, not the Oxygen enrollment. When the sequence is bound to a source table, a lead's table_row_id auto-snapshots that row's columns (incl. AI/tool outputs) into row_values for {{column}} copy — explicit row_values win. Idempotent per table row (and per email/phone or profile URL for auto-filed leads). WhatsApp-only campaigns also enroll each normalized number once across all source rows and enrollment statuses; mixed campaigns keep other channels and skip duplicate WhatsApp actions. Duplicate protection defaults to this campaign; --whatsapp-duplicate-scope on create/update can additionally block identical copy across all campaigns. The org do-not-contact list is always enforced; --exclude-contacted and --suppress-list add further opt-in skips (reported under skipped_by_reason). Leads already owned by a sender account (from an earlier real send) are routed back to that same account; a lead owned by a sender NOT on this sequence is skipped (bound_to_other_sender) unless --ignore-sender-bindings. This enrolls into an OXYGEN Sequence; to put the same rows into a campaign you already run in Smartlead, Instantly, lemlist or HeyReach, use `sequences push-external`. esp.pool_scope identifies the active workspace inventory used for routing and strict_deferred_leads estimates; these estimates omit sequence sender restrictions, readiness and daily limits. A zero estimate does not guarantee readiness. Review sequences preview before launch.")
         .argument("<sequence>", "Sequence id or slug.")
         .option("--leads-file <path>", "Path to a JSON file: { \"leads\": [{ row_values: { email }, lead_name }] } for cold email; { lead_profile_url, lead_name, row_values } or { lead_provider_id, lead_name, table_row_id, row_values } for LinkedIn/existing rows; CRM-only leads require table_row_id or a stable lead_provider_id alongside mapped row_values. A CRM association object id is not the enrollment identity. Exactly one of --leads-file or --from-table.")
         .option("--from-table", "Enroll every not-yet-enrolled row of the sequence's bound source table (up to 500 per run; re-run to continue). Exactly one of --leads-file or --from-table.")

package/dist/commands/support.js

@@ -536,29 +536,40 @@ The final readback must show ticket.status triaging, plain_status TODO, the In p
         }));
     }))
         .addCommand(new Command("done")
-        .description("Preview or mark a Plain Thread Done after the exact verified agent reply; new customer activity reopens it to Todo (staff only). CLI completion is agent-only.")
+        .description("Preview or mark a Plain Thread Done after the verified agent reply, or with no reply when a human says so; new customer activity reopens it to Todo (staff only). CLI completion is agent-only.")
         .argument("<ticketId>", "Plain Thread ID (th_...) or Thread ref (T-<n>), as shown by `oxygen support admin list`.")
-        .requiredOption("--agent", "Required safety declaration: mark Done as the authenticated Oxygen Support machine user while it still owns the Thread.")
-        .requiredOption("--reply-token <token>", "Use the exact agent_done_token returned by the preceding live `support admin reply --agent`; previews and errors never mint or reveal one.")
+        .requiredOption("--agent", "Required safety declaration: mark Done as the authenticated Oxygen Support machine user.")
+        .option("--reply-token <token>", "Close after a reply: the exact agent_done_token returned by the preceding live `support admin reply --agent`; previews and errors never mint or reveal one.")
+        .option("--without-reply", "Close without sending anything, only when a human in the current chat said to close this exact Thread without replying. Never on a schedule or as a substitute for a fix update.")
         .option("--confirm-ref <ref>", "Complete only when this exactly matches the previewed Plain ref.")
-        .option("--confirm-message <messageId>", "Complete only when this exactly matches the latest verified staff reply ID from preview.")
+        .option("--confirm-message <messageId>", "Complete only when this exactly matches the latest message ID from preview: the verified staff reply, or with --without-reply the latest customer-visible message.")
         .option("--json", "Print a JSON envelope.")
+        .addHelpText("after", `
+Pass exactly one mode: --reply-token or --without-reply. Run the same command without --confirm-ref and --confirm-message first; that preview changes nothing and returns the values to confirm.
+
+--without-reply binds the latest customer-visible message from the preview, keeps the assignee and records Plain's manual Done reason. A newer customer message, staff reply or note during the close returns the Thread to Todo and fails.
+`)
         .action(async (ticketId, options) => {
-        await handleAsyncAction("support admin done", options, () => requestOxygen(`/api/cli/admin/support/tickets/${encodeURIComponent(ticketId)}/resolve`, {
-            method: "POST",
-            body: {
-                as_agent: true,
-                ...(readOption(options.replyToken)
-                    ? { agent_reply_token: readOption(options.replyToken) }
-                    : {}),
-                ...(readOption(options.confirmRef)
-                    ? { confirm_ref: readOption(options.confirmRef) }
-                    : {}),
-                ...(readOption(options.confirmMessage)
-                    ? { confirm_message_id: readOption(options.confirmMessage) }
-                    : {}),
-            },
-        }));
+        await handleAsyncAction("support admin done", options, () => {
+            const replyToken = readOption(options.replyToken);
+            if (Boolean(replyToken) === (options.withoutReply === true)) {
+                throw new OxygenError("invalid_request", "Choose one Done mode: --reply-token <token> after the agent's own verified reply, or --without-reply when a human in the current chat said to close this exact Thread without replying.", { exitCode: 2 });
+            }
+            return requestOxygen(`/api/cli/admin/support/tickets/${encodeURIComponent(ticketId)}/resolve`, {
+                method: "POST",
+                body: {
+                    as_agent: true,
+                    ...(replyToken ? { agent_reply_token: replyToken } : {}),
+                    ...(options.withoutReply === true ? { without_reply: true } : {}),
+                    ...(readOption(options.confirmRef)
+                        ? { confirm_ref: readOption(options.confirmRef) }
+                        : {}),
+                    ...(readOption(options.confirmMessage)
+                        ? { confirm_message_id: readOption(options.confirmMessage) }
+                        : {}),
+                },
+            });
+        });
     }))
         .addCommand(new Command("file")
         .description("Retired legacy write; always returns the Plain-cutover error (staff only).")

package/dist/customer-operation-commands.js

@@ -32,50 +32,8 @@ const GROUP_PURPOSES = {
     "notetaker notes": "Edit saved meeting notes.",
     onboarding: "Save workspace discovery choices and resume guided onboarding.",
     "onboarding activation": "Resume your dev-pilot activation and its native resources.",
-    "onboarding journey": "Resume private onboarding, save answers and navigate using native revisions.",
-    "onboarding first-sourcing": "Read and review the native first-leads search before approving a capped run.",
-};
-const GUIDED_JOURNEY_FLAGS = {
-    activationId: { flag: "activation-id", help: "Exact activation ID returned by onboarding activation start or status." },
-    revision: { help: "Current activation revision returned by onboarding journey get; refresh after a conflict." },
-    mutation_id: { help: "Stable ID for this exact change; reuse only to recover the same request." },
-    step: { help: "Current saved step from onboarding journey get; use the revision you reviewed." },
-    answers: { help: "JSON object keyed by the current step, containing that step's reviewed answers." },
-    paused: { help: "Pause at this saved step; --no-paused resumes without advancing.", negateHelp: "Resume the saved step and tour position without changing visited history." },
-    tour_active_stop: { help: "Exact tour panel to return to, separate from visited history; only at the tour step." },
-};
-const GUIDED_FIRST_SOURCING_FLAGS = {
-    activationId: GUIDED_JOURNEY_FLAGS.activationId,
-    revision: { help: "Current activation revision from onboarding first-sourcing get; refresh and review after a conflict." },
-    generation: { help: "Current journey generation from onboarding journey get; supply revision, generation and --timezone-hint together for nightly defaults." },
-    timezoneHint: { flag: "timezone-hint", aliases: ["timezoneHint"], help: "Provisional customer/browser IANA timezone; supply revision, generation and --timezone-hint together. Does not confirm or save a schedule." },
-    "bounds.targetCount": { flag: "bounds-target-count", help: "Positive lead target, at most 50000; must match the stored preview for run." },
-    "bounds.maxPages": { flag: "bounds-max-pages", help: "Positive provider-page ceiling, at most 1000; must match the stored preview for run." },
-    "bounds.maxCredits": { flag: "bounds-max-credits", help: "Positive credit ceiling; native current pricing and the stored preview apply." },
-    previewId: { flag: "preview-id", help: "Exact stored previewId returned by onboarding first-sourcing preview; pass unchanged." },
-    previewDigest: { flag: "preview-digest", help: "Exact lowercase previewDigest from the stored native preview; pass unchanged." },
-    approved: { help: "Approve this exact stored preview and its bounds; native billing, access and current revision still apply." },
 };
 const OPERATION_FLAGS = {
-    "onboarding first-sourcing get": GUIDED_FIRST_SOURCING_FLAGS,
-    "onboarding first-sourcing preview": GUIDED_FIRST_SOURCING_FLAGS,
-    "onboarding first-sourcing run": GUIDED_FIRST_SOURCING_FLAGS,
-    "onboarding company-files upload": {
-        activationId: GUIDED_JOURNEY_FLAGS.activationId,
-        revision: GUIDED_JOURNEY_FLAGS.revision,
-        upload_id: { help: "Stable UUID for these exact original file bytes; reuse only to recover the same upload." },
-        sha256: { help: "Lowercase SHA-256 of the original file bytes; native storage verifies it." },
-        size_bytes: { help: "Exact original file byte length, before base64 encoding." },
-    },
-    "onboarding journey get": GUIDED_JOURNEY_FLAGS,
-    "onboarding journey save": GUIDED_JOURNEY_FLAGS,
-    "onboarding journey advance": GUIDED_JOURNEY_FLAGS,
-    "onboarding journey back": GUIDED_JOURNEY_FLAGS,
-    "onboarding journey restart": GUIDED_JOURNEY_FLAGS,
-    "onboarding journey navigation": GUIDED_JOURNEY_FLAGS,
-    "onboarding journey prospects-preview": GUIDED_JOURNEY_FLAGS,
-    "onboarding journey billing": GUIDED_JOURNEY_FLAGS,
-    "onboarding journey checkout": GUIDED_JOURNEY_FLAGS,
     "agent session activate": {
         revision: { help: "Current session revision returned by agent session preview; must match the reviewed configuration." },
         preview_token: { help: "Exact preview_token from agent session preview, binding reviewed resources, actions, schedule and credit caps. Pass unchanged; --approved is separate. Preview again after changes." },

package/dist/http-client.js

@@ -1,5 +1,8 @@
 import { readGeoExportPagination } from "@oxygen/shared/geo";
-import { OXYGEN_VERSION, OxygenError, isCliResult, isVersionGreater, parseSemver, readEnvelopeCompatibility, vercelProtectionBypassHeaders, withRetryAfterDetails, } from "@oxygen/shared";
+import { isCliResult, readEnvelopeCompatibility, vercelProtectionBypassHeaders, withRetryAfterDetails, } from "@oxygen/shared/cli-envelope";
+import { OxygenError } from "@oxygen/shared/cli-result";
+import { isVersionGreater, parseSemver } from "@oxygen/shared/semver";
+import { OXYGEN_VERSION } from "@oxygen/shared/version";
 import { randomUUID } from "node:crypto";
 import { cliDiagnosticHeaders, cliDiagnosticInvocation, recordCliDiagnosticRequest } from "./diagnostic-context.js";
 import { readBoundedBinaryResponse, streamBinaryResponse } from "./refactor-internals/binary-download.js";

package/dist/workspace-placement-commands.js

@@ -4,7 +4,7 @@ import { readJsonFileValue } from "./command-support.js";
 import { requestOxygen } from "./http-client.js";
 export function registerWorkspacePlacementCommands(root, handle) {
     root.addCommand(new Command("workspace-test").description("Compare email copy placement in this workspace's connected Google/Microsoft receiving inboxes: Gmail Primary/Promotions and Microsoft Focused/Other. Native sends, 0 additional credits; preview and exact message approval required.")
-        .addCommand(new Command("run").description("Preview an internal or cross-workspace copy test. Input JSON: sender_mailbox_ids, receiver_mailbox_ids, variants [{key,subject,body_text,body_html?}]. Approve the same input with returned request_id/plan_hash/rendered_at and max_live_sends. Up to five variants and 50 messages; never buys provider tests or resumes campaigns.")
+        .addCommand(new Command("run").description("Preview real outreach copy internally or across workspaces. Use a Sequence step or realistic prospect email, never delivery-check/no-reply text. Input JSON: sender_mailbox_ids, receiver_mailbox_ids, variants [{key,subject,body_text,body_html?}]. Approve the same input with returned request_id/plan_hash/rendered_at and max_live_sends. Five variants/50 messages; no provider purchase or campaign resume.")
         .option("--receiver-scope <scope>", "workspace or network; network privately selects participating receivers.").option("--receiver-providers <providers>", "Comma-separated google,microsoft for network tests.")
         .requiredOption("--input <file>", "JSON test input file.").option("--approved", "Execute the exact reviewed matrix.")
         .option("--rendered-at <timestamp>", "Rendering timestamp returned by preview; reuse when approving.").option("--tracking-opens", "Preview with open tracking on verified workspace domain.").option("--tracking-clicks", "Preview with click tracking on verified workspace domain.")

package/node_modules/@oxygen/shared/dist/capability-args.d.ts

@@ -0,0 +1,19 @@
+/** Existing shallow capability argument check, shared by approval and dispatch surfaces.
+ * Checks top-level required keys, closed properties, types and string enums only.
+ * Nested/unsupported schema rules remain the native route owner’s validation.
+ */
+export type CapabilityArgsValidation = {
+    ok: true;
+} | {
+    ok: false;
+    errors: string[];
+};
+/**
+ * Shallow top-level validation of proposed args against a capability's own
+ * inputSchema. Fail-open on anything it cannot read (no `properties`, exotic
+ * keywords, nested shapes): a wrongly-rejected call is a worse outcome than a
+ * call the route rejects a moment later, and the route still rejects it.
+ */
+export declare function validateCapabilityArgs(def: {
+    inputSchema?: unknown;
+}, args: Record<string, unknown>): CapabilityArgsValidation;

package/node_modules/@oxygen/shared/dist/capability-args.js

@@ -0,0 +1,73 @@
+const MAX_ARG_ERRORS = 8;
+function matchesJsonType(value, type) {
+    switch (type) {
+        case "string":
+            return typeof value === "string";
+        case "number":
+            return typeof value === "number" && Number.isFinite(value);
+        case "integer":
+            return typeof value === "number" && Number.isInteger(value);
+        case "boolean":
+            return typeof value === "boolean";
+        case "array":
+            return Array.isArray(value);
+        case "object":
+            return value !== null && typeof value === "object" && !Array.isArray(value);
+        case "null":
+            return value === null;
+        default:
+            // An unrecognised type keyword is not something this shallow check gets to
+            // fail a call over — silence beats a false positive that blocks a good call.
+            return true;
+    }
+}
+/**
+ * Shallow top-level validation of proposed args against a capability's own
+ * inputSchema. Fail-open on anything it cannot read (no `properties`, exotic
+ * keywords, nested shapes): a wrongly-rejected call is a worse outcome than a
+ * call the route rejects a moment later, and the route still rejects it.
+ */
+export function validateCapabilityArgs(def, args) {
+    const schema = (def.inputSchema ?? {});
+    const properties = schema.properties;
+    if (!properties || typeof properties !== "object")
+        return { ok: true };
+    const errors = [];
+    const required = Array.isArray(schema.required)
+        ? schema.required.filter((entry) => typeof entry === "string")
+        : [];
+    for (const name of required) {
+        if (!(name in args) || args[name] === undefined) {
+            errors.push(`missing required argument "${name}"`);
+        }
+    }
+    if (schema.additionalProperties === false) {
+        for (const key of Object.keys(args)) {
+            if (!(key in properties))
+                errors.push(`unknown argument "${key}"`);
+        }
+    }
+    for (const [key, value] of Object.entries(args)) {
+        const property = properties[key];
+        if (!property || value === undefined)
+            continue;
+        const declared = Array.isArray(property.type)
+            ? property.type
+            : property.type !== undefined
+                ? [property.type]
+                : [];
+        const types = declared.filter((entry) => typeof entry === "string");
+        if (types.length > 0 && !types.some((type) => matchesJsonType(value, type))) {
+            errors.push(`argument "${key}" must be ${types.join(" or ")}`);
+        }
+        const allowed = property.enum;
+        if (Array.isArray(allowed) &&
+            allowed.length > 0 &&
+            allowed.every((entry) => typeof entry === "string") &&
+            typeof value === "string" &&
+            !allowed.includes(value)) {
+            errors.push(`argument "${key}" must be one of: ${allowed.join(", ")}`);
+        }
+    }
+    return errors.length > 0 ? { ok: false, errors: errors.slice(0, MAX_ARG_ERRORS) } : { ok: true };
+}

package/node_modules/@oxygen/shared/dist/contracts/browser-operations.js

@@ -134,5 +134,6 @@ export const BROWSER_OPERATIONS = [
     operation("notetaker.note.edit", "/api/cli/notetaker/sessions/{session}/note", "PATCH", "notetaker notes edit", "oxygen_notetaker_note_edit", "crm", "Save the markdown note for one meeting session and return the committed note.", { markdown: text() }, ["markdown"]),
     operation("orgs.create", "/api/cli/orgs/create", "POST", "orgs create", "oxygen_workspace_create", "workspace", "Create a workspace for the authenticated person's account and begin native company setup. Workspace API keys cannot create personal workspaces.", { name: text(), company_domain: text("Company website or domain, or its LinkedIn company page URL when it has no website."), linkedin_profile_url: text("Creator's LinkedIn profile URL, separate from the company's page.") }, ["name", "company_domain"]),
     operation("onboarding.complete", "/api/cli/onboarding/complete", "POST", "onboarding complete", "oxygen_onboarding_complete", "workspace", "Complete the active workspace's onboarding step and record its discovery-source choices. The other choice requires source_other.", { sources: arr(enumOf(["linkedin_content", "linkedin_dm", "linkedin_ads", "x", "youtube", "google", "ai_assistant", "email", "word_of_mouth", "referral", "event", "other"])), source_other: text(), redirect_url: text() }, ["sources"]),
-    operation("onboarding.start", "/api/cli/onboarding/start", "POST", "onboarding start", "oxygen_onboarding_start", "workspace", "Answer onboarding's choice card. own_agent continues to connecting your own agent. copilot opens the Workspace Copilot with the onboarding conversation already started, billed in credits like any Copilot turn; choosing again reopens that conversation.", { path: enumOf(["own_agent", "copilot"]), play: text("A play slug carried to the install step.") }, ["path"], { spends: true }),
+    operation("onboarding.finish", "/api/cli/onboarding/finish", "POST", "onboarding finish", "oxygen_onboarding_finish", "workspace", "Finish agent-led onboarding once a play is chosen: the onboarding Oxygent chat opens as an ordinary chat, without the Knowledge pane. Changes nothing else and spends nothing."),
+    operation("onboarding.start", "/api/cli/onboarding/start", "POST", "onboarding start", "oxygen_onboarding_start", "workspace", "Answer onboarding's choice card. own_agent continues to connecting your own agent. copilot opens the Workspace Copilot with the onboarding conversation already started, billed in credits like any Copilot turn; choosing again reopens that conversation. restart (copilot) shows a finished onboarding again and asks the Oxygent to start over, as an ordinary send.", { path: enumOf(["own_agent", "copilot"]), play: text("A play slug carried to the install step."), restart: bool() }, ["path"], { spends: true }),
 ];