@oxygen-agent/cli 1.1014.136 → 1.1014.618

package/node_modules/@oxygen/shared/dist/capability-discovery.js

@@ -20,8 +20,8 @@ export const OXYGEN_CAPABILITY_ROUTES = [
         primitive: null,
         owns: "Agent-authored GTM infographics and carousel pages: editable HTML/CSS/SVG sources, isolated PNG/PDF rendering, actual visual inspection, revisions and downloads.",
         notFor: "A separate product primitive, arbitrary package execution, image generation providers, motion/video, or publishing.",
-        execution: "Save source in workspace files; preview exact rendering scope and price; approve, poll the durable job, inspect its PNG pixels, revise and export. Renderer availability is checked by preview.",
-        posture: "mixed",
+        execution: "Save source in workspace files; preview the exact rendering scope, start it (rendering is free), poll the durable job, inspect its PNG pixels, revise and export. Renderer availability is checked by preview.",
+        posture: "workspace_write",
         gatewayTools: ["oxygen_visual_source_create", "oxygen_visual_render_preview", "oxygen_visual_render_get", "oxygen_visual_image_view"],
         gatewayCommands: ["visuals source-create", "visuals render-preview", "visuals render-get", "visuals download"],
         skills: ["oxygen-knowledge"],
@@ -102,7 +102,7 @@ export const OXYGEN_CAPABILITY_ROUTES = [
         gatewayCommands: ["billing balance", "billing usage", "billing audit", "billing estimate", "budget list", "billing invoices", "pricing customer-credit-prices"],
         skills: ["oxygen-gtm", "oxygen-diagnostics"],
         endpointSections: ["billing", "budget", "limits", "pricing"],
-        intentTerms: ["billing", "credits", "credit balance", "customer credit prices", "credit price catalog", "usage", "spend", "cost", "cost estimate", "monthly cost", "budget", "subscription", "invoice", "vat", "vat number", "tax id", "cancel plan", "change plan", "upgrade", "downgrade", "subscription plans", "annual plan", "yearly commitment", "yearly saving", "annual discount", "retention offer", "cancellation reason", "winback discount"],
+        intentTerms: ["billing", "credits", "credit balance", "customer credit prices", "credit price catalog", "usage", "spend", "cost", "cost estimate", "monthly cost", "budget", "subscription", "invoice", "vat", "vat number", "tax id", "cancel plan", "change plan", "upgrade", "downgrade", "subscription plans", "annual plan", "yearly commitment", "yearly saving", "annual discount", "retention offer", "cancellation reason", "winback discount", "partner bonus", "partner credits", "partner_bonus", "partners2026", "coupon", "promotion", "promo code", "discount"],
     },
     {
         id: "support-and-feedback",
@@ -174,10 +174,10 @@ export const OXYGEN_CAPABILITY_ROUTES = [
         primitive: null,
         owns: "The current organization profile and publication state in the public OXYGEN agency directory.",
         notFor: "CRM company records, workspace membership, or outbound campaigns.",
-        execution: "Read, update, publish, or unpublish the hosted directory listing.",
+        execution: "Read, update, publish, or unpublish the hosted directory listing. Read partner-bonus eligibility and timing without credit grants with billing summary (oxygen_billing_summary). Application: /docs/workspace/agency-directory. Partner benefits: /docs/safety/billing#agency-partner-bonus. Skill instructions require the applicable workspace entitlement.",
         posture: "workspace_write",
-        gatewayTools: ["oxygen_directory_get", "oxygen_directory_update", "oxygen_directory_publish"],
-        gatewayCommands: ["directory get", "directory update", "directory publish"],
+        gatewayTools: ["oxygen_directory_get", "oxygen_billing_summary", "oxygen_directory_update", "oxygen_directory_publish"],
+        gatewayCommands: ["directory get", "billing summary", "directory update", "directory publish"],
         skills: ["oxygen-agency-directory"],
         endpointSections: ["directory"],
         intentTerms: ["agency directory", "agency listing", "directory profile", "publish agency", "partner listing"],
@@ -288,7 +288,7 @@ export const OXYGEN_CAPABILITY_ROUTES = [
         gatewayCommands: ["publishing comments list", "publishing analytics summary", "posts get", "posts create"],
         skills: ["oxygen-publishing"],
         endpointSections: [],
-        intentTerms: ["post artifact", "social post", "post comments", "public comments", "unanswered comments", "comments needing reply", "owned posts", "post reactions", "post performance", "posting analytics", "broadcast content"],
+        intentTerms: ["post artifact", "social post", "post comments", "public comments", "unanswered comments", "comments needing reply", "owned posts", "published posts", "post reactions", "post performance", "content performance", "posting analytics", "broadcast content"],
     },
     {
         id: "signals",
@@ -423,13 +423,13 @@ export const OXYGEN_CAPABILITY_ROUTES = [
         primitive: "agents",
         owns: "Adaptive governed worker definitions, versions, authorization, context, triggers, threads, checkpoints, inference, and first-class runs.",
         notFor: "A known deterministic graph that belongs in Workflows or an opaque uploaded runtime.",
-        execution: "Publish and run a governed Agent with explicit tool authority and bounded spend. Staff on dev can create ongoing sessions: draft, exact resource scope, per-run and rolling 24-hour caps, preview/activate, continuing conversation and bounded self-scheduling. Inspect agent session templates; pause/resume preserves history.",
+        execution: "Publish and run a governed Agent with explicit tool authority and bounded spend. Staff on dev can create ongoing sessions: draft, exact resource scope, per-run and rolling 24-hour caps, preview/activate, continuing conversation and bounded self-scheduling. Inspect agent session templates; pause/resume preserves history. Staff on dev also talk to Oxygents (AI teammates): the workspace's first one (New Bot until named) and any others added, one ongoing private chat each.",
         posture: "mixed",
         gatewayTools: ["oxygen_agent_list", "oxygen_agent_create", "oxygen_agent_run"],
         gatewayCommands: ["agent list", "agent create", "agent run"],
         skills: ["oxygen-gtm"],
-        endpointSections: ["agent", "notetaker"],
-        intentTerms: ["agent", "adaptive", "goal directed", "autonomous", "persistent thread", "checkpoint", "standing job", "notetaker", "ongoing worker", "ongoing session", "watch a campaign", "watch one campaign", "campaign monitor", "remember earlier reviews", "rolling daily", "long horizon", "long session"],
+        endpointSections: ["agent", "notetaker", "teammates", "teammate-groups"],
+        intentTerms: ["agent", "teammate", "oxygent", "ai teammate", "adaptive", "goal directed", "autonomous", "persistent thread", "checkpoint", "standing job", "notetaker", "ongoing worker", "ongoing session", "watch a campaign", "watch one campaign", "campaign monitor", "remember earlier reviews", "rolling daily", "long horizon", "long session"],
     },
     {
         id: "observability",
@@ -986,6 +986,122 @@ function crmEnrichmentReadRecommendation(query) {
         exactMcpCall: { tool: "oxygen_crm_enrichment", arguments: { action: "list", ...(omitCounts ? { backfill: false } : {}), projection: "summary" } },
     };
 }
+/** Stored communications linked to one CRM record use its bounded native read. */
+function crmConnectionsReadRecommendation(query) {
+    if (!/\b(?:crm|records?)\b/.test(query)
+        || !/\b(?:conversations?|sequences?|communications?)\b/.test(query)
+        || !/\b(?:connected|linked|links|associated|belongs?)\b/.test(query)
+        || !/\b(?:read|show|list|inspect|view)\b/.test(query)
+        || isHostedWorkflowIntent(query)
+        || /\b(?:send\w*|repl(?:y|ies|ied|ying)|draft\w*|compos\w*|enroll\w*|launch\w*|creat\w*|schedul\w*|edit\w*|updat\w*|chang\w*|delet\w*|remov\w*|merg\w*|attach\w*|complet\w*|finish\w*|prepar\w*|reserv\w*|renam\w*|archiv\w*|assign\w*|cancel\w*|set(?:s|ting)?|add\w*|appl(?:y|ies|ied|ying)|clear\w*|tables?|workflows?|agents?|providers?|sync\w*|import\w*)\b/.test(query))
+        return null;
+    return {
+        tools: ["oxygen_crm_record_connections"], commands: ["crm connections"],
+        execution: "Read stored conversations and Sequence links for one CRM record with oxygen_crm_record_connections. Request projection=compact and a max_chars window; conversation_limit and sequence_limit bound the recent links. hasMore includes older or omitted links; this read has no cursor for older links and does not sync Messages, contact anyone or spend credits.",
+    };
+}
+/** Record-file lifecycle asks outrank the generic workspace label vocabulary. */
+function crmFileUploadRecommendation(query) {
+    // Literal filenames and record identities are values, not competing owners:
+    // mailbox.csv or sarah@acme.com must not turn a record upload into mail work.
+    const intent = query
+        .replace(/\b[^\s@]+@[^\s@]+\b/g, "identity")
+        .replace(/\b(?:file ?name|filename|named|label)\s+(["'])[^"']*\1/g, "value")
+        .replace(/\b(?:file ?name|filename|named)\s+\S+/g, "value")
+        .replace(/\S+\.[a-z0-9]{1,12}\b/g, "value");
+    if (!/\b(?:crm|records?)\b/.test(intent)
+        || !/\b(?:files?|attachments?|uploads?|uploaded)\b/.test(intent))
+        return null;
+    if (isHostedWorkflowIntent(intent)
+        || /\b(?:tags?|tagging|classif\w*|categori[sz]\w*|tables?|spreadsheets?|datasets?|worksheets?|columns?|copilot|sessions?|workflows?|agents?|functions?|callables?|recurring|mailboxes?|inbox|messages?|knowledge|wiki|repositories|repository|skills?|logos?|branding|avatars?|hubspot|attio|pipedrive|salesforce)\b/.test(intent)
+        || /\b(?:send|reply|compose)\b/.test(intent)
+        || /\b(?:email|e mail)\s+attachments?\b/.test(intent))
+        return null;
+    const complete = /\b(?:finish|complete|confirm)\b/.test(intent)
+        && /\b(?:uploads?|uploaded|prepared|reserved)\b/.test(intent);
+    const list = /\b(?:list|show|inspect|view)\b/.test(intent);
+    if (list && !complete && /\b(?:pending|prepared|reserved|incomplete)\b/.test(intent))
+        return null;
+    const prepare = /\b(?:prepare|reserve|attach)\b/.test(intent);
+    const boundary = "A record-local label names this attachment; it is separate from workspace Tags and the stored filename. Preparing or completing writes workspace state under the existing authorization; discovery does not approve a write.";
+    if (complete)
+        return {
+            tools: ["oxygen_crm_files_upload_complete", "oxygen_crm_files_upload_prepare", "oxygen_crm_files_list"],
+            commands: ["crm files complete-upload", "crm files prepare-upload", "crm files list"],
+            execution: `Hydrate oxygen_crm_files_upload_complete to confirm a prepared upload after its exact bytes were PUT; completion verifies the reserved file before attaching. List the record's files to inspect existing attachments. ${boundary}`,
+        };
+    if (prepare || (!list && /\bupload\b/.test(intent)))
+        return {
+            tools: ["oxygen_crm_files_upload_prepare", "oxygen_crm_files_upload_complete", "oxygen_crm_files_list"],
+            commands: ["crm files prepare-upload", "crm files complete-upload", "crm files list"],
+            execution: `Hydrate oxygen_crm_files_upload_prepare to reserve an exact filename, byte length and SHA-256. Preparation does not attach; upload the declared bytes before completing. ${boundary}`,
+        };
+    if (list)
+        return {
+            tools: ["oxygen_crm_files_list"],
+            commands: ["crm files list"],
+            execution: `List the record's attached originals with oxygen_crm_files_list; this does not list pending upload reservations. ${boundary}`,
+        };
+    return null;
+}
+/** Stored inspections precede similarly named execution and review queues. */
+function readInspectionRecommendation(query) {
+    const positive = query.replace(/\b(?:do not|don't)\b(?:(?!\b(?:but|then)\b)[^.;])*/g, "");
+    const documentation = positive.replace(/\b(?:would|could|how to)\s+(?:review|create|approve|schedule|publish)(?:\s+(?:and|or)\s+(?:review|create|approve|schedule|publish))*/g, "hypothetical action");
+    const action = /\b(?:but|then)\s+(?:please\s+)?(?:creat\w*|updat\w*|edit\w*|delet\w*|cancel\w*|approv\w*|schedul\w*|publish\w*|sav\w*|enabl\w*|appl\w*|send\w*|clear\w*|set|add)\b/.test(query);
+    if (action)
+        return null;
+    const stored = positive.replace(/\bwithout\s+(?:changing|approving|rejecting|publishing|running|executing|refreshing)\b(?:\s+(?:widget\s+)?data\b)?/g, "");
+    const storedOnly = !isHostedWorkflowIntent(stored) && !isSecondPartyDecisionIntent(stored)
+        && !/\b(?:create|write|edit|update|change|delete|remove|archive|save|approve|reject|publish|run|running|execute|send|refresh|launch|enable|disable|apply|materialize|import|sync|schedule|enroll|add|set)\b/.test(stored);
+    // The connector BEFORE's explicit Knowledge requests were claimed by the
+    // generic message-review rule. Captured patches live in Knowledge proposals.
+    if (storedOnly && /\b(?:knowledge|wiki|canonical[ -]copy)\b/.test(stored)
+        && !/\b(?:message reviews?|inbox messages?|reply drafts?|conversations?)\b/.test(stored)
+        && /\b(?:proposals?|captured(?: page)? changes?|(?:pending|awaiting|waiting)\b[^.;]{0,60}\breview)\b/.test(stored)
+        && /\b(?:list|read|show|get|inspect|view|review|pending|awaiting|waiting|queue)\b/.test(stored))
+        return {
+            capabilityId: "knowledge-graph",
+            tools: ["oxygen_knowledge_proposals_list"],
+            commands: ["knowledge proposals"],
+            execution: "Read pending Knowledge changes with oxygen_knowledge_proposals_list (status=open), including their exact captured patch and target revision. These are Knowledge proposals; message reviews and page revision history have separate owners. External MCP uses oxygen_capabilities_read; built-in agents invoke the native tool. Inspect the returned proposal before a separately approved decision. An empty result contains no change to inspect; do not invent one or claim unreported pagination.",
+        };
+    if (storedOnly && /\bdashboards?\b/.test(stored)
+        && /\b(?:saved|stored|existing|user[ -]defined)\b/.test(stored)
+        && /\b(?:get|read|show|inspect|view|describe)\b/.test(stored)
+        && /\b(?:definitions?|configurations?|settings|setup|tabs?|widgets?)\b/.test(stored)
+        && !/\b(?:data|live|analytics|metrics|funnel|summary)\b/.test(stored))
+        return {
+            capabilityId: "dashboards",
+            tools: ["oxygen_dashboards_list", "oxygen_dashboards_get"],
+            commands: ["dashboards list", "dashboards get"],
+            execution: "Read saved Dashboard names with oxygen_dashboards_list, then oxygen_dashboards_get for one exact saved definition, tabs and widget configuration. External MCP uses oxygen_capabilities_read; built-in agents invoke the native tools. Reading the saved setup does not execute or refresh widget data. Curated funnel reports, widget data and Dashboard authoring have separate operations.",
+        };
+    if (/^\s*(?:show|explain|describe|read|inspect)\b/.test(query)
+        && /\bposts?\b/.test(query) && /\b(?:linkedin|publishing)\b/.test(query)
+        && /\b(?:how|process|paths?)\b/.test(query) && /\b(?:review|approval|approve)\b/.test(query)
+        && /\b(?:do not|don't)\b[^.;]{0,120}\b(?:create|approve|schedule|publish)\b/.test(query)
+        && !/\b(?:creat\w*|updat\w*|edit\w*|delet\w*|cancel\w*|approv(?:e|es|ing)|schedul\w*|publish(?:es)?|send\w*|clear\w*|set|add)\b/.test(documentation)
+        && !/\b(?:workflows?|agents?|tables?|crm|knowledge|comments?|scrape\w*|search|find)\b/.test(positive))
+        return {
+            capabilityId: "publishing",
+            tools: ["oxygen_publishing_posts_list", "oxygen_publishing_posts_get"],
+            commands: ["publishing posts list", "publishing posts get"],
+            execution: "Read stored Publishing posts and their approval state first. Hydrate list/get; approval_status=needs_approval selects the review queue. Inspect create/update/approve schemas to explain scheduling or immediate-publication paths without executing them. Schema discovery grants no approval to create, approve, schedule or publish a post.",
+        };
+    if (/\bfolders?\b/.test(query) && /\b(?:shared|reference|knowledge)\b/.test(query)
+        && /\b(?:names?|show|list|read|inspect)\b/.test(query)
+        && isRecurringCompanyMonitoringIntent(query) && /\b(?:first step|plan|inspect)\b/.test(query)
+        && /\b(?:do not|don't)\b[^.;]{0,120}\b(?:save|spend)\b/.test(query)
+        && !/\b(?:creat\w*|writ\w*|edit\w*|updat\w*|delet\w*|cancel\w*|sav\w*|enabl\w*|appl\w*|launch\w*|send\w*|import\w*|sync\w*|clear\w*|set|add|tables?|copilot|mailboxes?|crm)\b/.test(positive))
+        return {
+            capabilityId: "knowledge-graph",
+            tools: ["oxygen_knowledge_folders_list", "oxygen_blueprints_list"],
+            commands: ["knowledge folders list", "blueprints list"],
+            execution: "Read workspace folder names with oxygen_knowledge_folders_list; the registry includes empty folders. Report them as workspace metadata: this native contract has no per-folder sharing or ownership fields. truncated qualifies incomplete page lists. For the separate recurring company-monitoring first step, inspect oxygen_blueprints_list with a narrow query and describe a matching definition. Workflows own recurring execution; discovery does not save or enable automation and grants no provider spend or write approval.",
+        };
+    return null;
+}
 /** CRM backfills and account projections use native Records repair owners. */
 function crmMaintenanceRecommendation(query) {
     if (isHostedWorkflowIntent(query)
@@ -1016,8 +1132,15 @@ const CRM_ENRICHMENT_READ_VIEW = {
     execution: "Read the saved configuration with action=list, free through oxygen_capabilities_call: this tool also writes, so its paid/write annotations and built-in approval policy remain. Omit object and use backfill=false to skip historical counts; object reads ignore it. summary is compact; preset_count counts catalog entries, trigger_default is the current plan-default cap, and backfill:null means no count was produced. set/enable/disable change standing auto-run; action=backfill previews for free, while paid live batches require native approval and a ceiling.",
     posture: "mixed",
 };
+function isPartnerBonusReadIntent(query) {
+    return /\b(partner[ _-]+(?:program[ _-]+)?(?:bonus|credits)|partners2026|promotions?|promo codes?|coupons?)\b/.test(query)
+        && !/\b(apply|redeem|remove|change|cancel|upgrade|downgrade|switch)\b/.test(query);
+}
 /** The card a route reports: Publishing's own, or its UGC view for a creator-program ask. */
 function routeCardFor(card, query) {
+    const readOnly = readInspectionRecommendation(query);
+    if (readOnly?.capabilityId === card.id)
+        return { ...card, posture: "read_only", execution: readOnly.execution };
     const placementGuide = card.id === "sending-infrastructure" ? placementGuideRecommendation(query) : null;
     if (placementGuide)
         card = { ...card, posture: "read_only", execution: placementGuide.execution };
@@ -1030,6 +1153,12 @@ function routeCardFor(card, query) {
     const collaboration = card.id === "collaboration" ? collaborationRecommendation(query) : null;
     if (collaboration)
         card = { ...card, execution: collaboration.execution, posture: collaboration.posture };
+    const crmConnections = card.id === "records" ? crmConnectionsReadRecommendation(query) : null;
+    if (crmConnections)
+        return { ...card, posture: "read_only", execution: crmConnections.execution };
+    const crmFileUpload = card.id === "records" ? crmFileUploadRecommendation(query) : null;
+    if (crmFileUpload)
+        return { ...card, execution: crmFileUpload.execution };
     if (card.id === "records" && isCrmEnrichmentConfigurationRead(query))
         return { ...card, ...CRM_ENRICHMENT_READ_VIEW };
     const crmMaintenance = card.id === "records" ? crmMaintenanceRecommendation(query) : null;
@@ -1058,6 +1187,11 @@ function routeCardFor(card, query) {
     const spendRead = card.id === "billing-and-budgets" && !providerRead ? spendBreakdownRecommendation(query) : null;
     if (spendRead)
         card = { ...card, posture: "mixed", execution: spendRead.execution };
+    if (card.id === "billing-and-budgets" && isPartnerBonusReadIntent(query))
+        card = {
+            ...card, posture: "read_only",
+            execution: "Read partner_bonus eligibility, amount, conditions and timing with billing summary (oxygen_billing_summary), without grants or expiry. Captured coupon evidence is conditional and dated; a future bonus still requires a fresh Stripe check. Balance and usage can reconcile credits. Publication and plan changes need separate approval.",
+        };
     const blockRead = card.primitive === "sequences" ? sendingBlockReadRecommendation(query) : null;
     if (blockRead)
         card = { ...card, posture: "read_only", execution: blockRead.execution };
@@ -1083,7 +1217,7 @@ function routeCardFor(card, query) {
     if (card.primitive === "tables" && isFunctionIntent(query))
         card = {
             ...card,
-            execution: "List, describe or inspect Function runs without executing. Draft edits are isolated; publish requires the inspected draft hash and changes future invocations. Bind adds a caller column for free; columns run previews cost before a bounded approved run. MCP uses the mixed-effect oxygen_callables_manage through oxygen_capabilities_call, including its read operations.",
+            execution: "List, describe or inspect Function runs without executing. Draft edits are isolated; publish requires the inspected draft hash and changes future invocations. Bind adds a caller column for free; columns run previews cost before a bounded approved run. External MCP uses oxygen_capabilities_read for oxygen_callables_manage operation=list/list_functions/describe/runs; other operations use oxygen_capabilities_call. Built-in agents invoke the native tool under their existing policy.",
         };
     if (card.primitive === "tables" && isPlainTableIntent(query))
         card = {
@@ -1566,7 +1700,7 @@ function tableReadRecommendation(query) {
         && !/\b(do not|don't|avoid|without)\s+(sort|order|rank)\w*\b/.test(query))
         return {
             tools: ["oxygen_tables_query", "oxygen_tables_describe"], commands: ["tables query", "tables describe"],
-            execution: "Raw tables query supports sorts[].valueOrder (alias value_order) for an explicit label order. Inspect the Table's column keys and query schema first. Values are trimmed/lowercased and deduplicated; asc puts listed values first and unlisted/null last, desc reverses. An empty list uses ordinary sorting. Keep the same sorts when following its cursor. format=grid rejects sorts; rows-page and saved-view sort formats have separate schemas. This read does not classify rows or run columns.",
+            execution: "Raw tables query supports sorts[].valueOrder (alias value_order) for an explicit label order. Inspect the Table's column keys and query schema first. Values are trimmed/lowercased and deduplicated; asc puts listed values first and unlisted/null last, desc reverses. Equal ranks follow later sorts; implicit creation-time and final row-ID tiebreaks mirror the leading direction. An empty list uses ordinary sorting. Keep the same sorts when following its cursor. format=grid rejects sorts; rows-page and saved-view sort formats have separate schemas. This read does not classify rows or run columns.",
         };
     if (!/\btables?\b/.test(query))
         return null;
@@ -1860,7 +1994,7 @@ function spendBreakdownRecommendation(query) {
         return null;
     return {
         tools: ["oxygen_billing_audit", "oxygen_billing_usage"], commands: ["billing audit", "billing usage"],
-        execution: "Read where managed credits went with oxygen_billing_audit: spend_by_category ranks each area's credits and share of managed_credits_spent, largest first, over the whole window; group_by provider, tool, model, run or workspace narrows it. Spent is reserved minus released in the window; it differs from captured (oxygen_billing_usage's managed_credits_used) by holds still open and holds settling across the window edge, so do not attribute the whole gap to open holds. External MCP uses oxygen_capabilities_call; built-in agents invoke the native capability. Reports cost 0 credits; billing audit may apply due plan grants or credit expiry.",
+        execution: "Read where managed credits went with oxygen_billing_audit: spend_by_category ranks each area's credits and share of managed_credits_spent, largest first, over the whole window; group_by provider, tool, model, run or workspace narrows it. Spent is reserved minus released in the window; it differs from captured (oxygen_billing_usage's managed_credits_used) because of holds at the window edges and adjustments to reserved credits, so do not attribute the whole gap to open holds. External MCP uses oxygen_capabilities_call; built-in agents invoke the native capability. Reports cost 0 credits; billing audit and billing usage may apply due plan grants or credit expiry.",
     };
 }
 function sendingBlockReadRecommendation(query) {
@@ -1897,6 +2031,9 @@ function isWorkspaceSkillIntent(query) {
 function explicitCapabilityIntent(query) {
     if (isWorkspaceSkillIntent(query))
         return ROUTE_BY_ID.get("knowledge-graph") ?? null;
+    const readOnly = readInspectionRecommendation(query);
+    if (readOnly)
+        return ROUTE_BY_ID.get(readOnly.capabilityId) ?? null;
     // Importing an AI answer is GEO evidence, rather than a Table file import.
     if (/\b(?:geo|aeo|ai (?:(?:search|answer) )?visibility|consumer ai answers?|answer engine optimization|generative engine optimization)\b/.test(query))
         return ROUTE_BY_ID.get("geo") ?? null;
@@ -1908,6 +2045,10 @@ function explicitCapabilityIntent(query) {
         return ROUTE_BY_ID.get("connected-linkedin") ?? null;
     if (isCrmEnrichmentConfigurationRead(query))
         return ROUTE_BY_ID.get("records") ?? null;
+    if (crmConnectionsReadRecommendation(query))
+        return ROUTE_BY_ID.get("records") ?? null;
+    if (crmFileUploadRecommendation(query))
+        return ROUTE_BY_ID.get("records") ?? null;
     if (crmMaintenanceRecommendation(query))
         return ROUTE_BY_ID.get("records") ?? null;
     if (crmSampleRecordRecommendation(query))
@@ -1981,7 +2122,7 @@ function explicitCapabilityIntent(query) {
     if (isInboxAvatarIntent(query)) {
         return ROUTE_BY_ID.get("sending-infrastructure") ?? null;
     }
-    if (isMailboxDeleteIntent(query) || isSendingDomainDeleteIntent(query)) {
+    if (isDomainDnsIntent(query) || isMailboxDeleteIntent(query) || isSendingDomainDeleteIntent(query)) {
         return ROUTE_BY_ID.get("sending-infrastructure") ?? null;
     }
     if (isMailboxOnboardingIntent(query) || isWarmupEnrollmentIntent(query)) {
@@ -2236,6 +2377,12 @@ function isPublishingPostIntent(query) {
         && !(/\b(find|search|scrape|research)\b/.test(query) && /\b(about|mention|containing)\b/.test(query));
 }
 function recommendationsFor(card, query) {
+    if (card.id === "billing-and-budgets" && isPartnerBonusReadIntent(query)) {
+        return { tools: ["oxygen_billing_summary"], commands: ["billing summary"] };
+    }
+    const readOnly = readInspectionRecommendation(query);
+    if (readOnly?.capabilityId === card.id)
+        return readOnly;
     const placementGuide = card.id === "sending-infrastructure" ? placementGuideRecommendation(query) : null;
     if (placementGuide)
         return placementGuide;
@@ -2261,7 +2408,13 @@ function recommendationsFor(card, query) {
             commands: ["context canonical get", "knowledge page get", "knowledge search"],
         };
     }
+    const crmConnections = card.id === "records" ? crmConnectionsReadRecommendation(query) : null;
+    if (crmConnections)
+        return crmConnections;
     const crmSample = card.id === "records" ? crmSampleRecordRecommendation(query) : null;
+    const crmFileUpload = card.id === "records" ? crmFileUploadRecommendation(query) : null;
+    if (crmFileUpload)
+        return crmFileUpload;
     if (crmSample)
         return crmSample;
     const crmContactRead = card.id === "records" ? storedCrmContactReadRecommendation(query) : null;
@@ -3156,6 +3309,10 @@ function isMailboxDeleteIntent(query) {
  * also a data word, so the ask must mark the domains as the workspace's own or
  * as sending infrastructure, and a table/list/suppression context is excluded.
  */
+function isDomainDnsIntent(query) {
+    return /\bdns\b/.test(query)
+        && !/\b(tables?|columns?|rows?|crm|contacts?|leads?)\b/.test(query);
+}
 function isSendingDomainDeleteIntent(query) {
     if (!/\b(delete|remove|shut ?down|tear down|get rid of|decommission)\b/.test(query))
         return false;
@@ -3263,6 +3420,10 @@ function isPostCoverOrPreviewIntent(query) {
         || /\bpreview\b.{0,40}\b(post|draft)\b/.test(query);
 }
 function isOwnedPostCommentIntent(query) {
+    // Community is the stored public-comment queue, including its coverage and
+    // refresh state. Do not send this first-touch intent to paid public research.
+    if (/\bcommunity\b/.test(query) && /\b(comments?|sync|coverage|freshness|queue|unanswered|replies)\b/.test(query))
+        return true;
     if (!/\bcomments?\b/.test(query) || !/\b(linkedin|posts?|publishing)\b/.test(query))
         return false;
     const owned = /\b(my|our|own|owned)\b|\boxygen[ -]published\b|\bpublished through oxygen\b/.test(query);

package/node_modules/@oxygen/shared/dist/compact-list-result.d.ts

@@ -0,0 +1,6 @@
+/** Plain jsonResult's complete projection. Compact owners use no widget or
+ * custom summary. Surface is a formatting hint, never access/approval authority. */
+export declare function compactListResultFits(command: string, data: Record<string, unknown>, maxChars: number, surface: string | null): boolean;
+/** Keep the existing array-of-strings next shape; use the caller's executable
+ * read gateway on MCP/built-ins and retain CLI syntax on API/CLI. */
+export declare function compactListReadNext(surface: string | null, tool: string, args: Record<string, unknown>, cli: string): string;

package/node_modules/@oxygen/shared/dist/compact-list-result.js

@@ -0,0 +1,27 @@
+import { success } from "./cli-result.js";
+import { OXYGEN_VERSION } from "./version.js";
+import { MCP_SERVER_INFO_META_KEY, OXYGEN_MCP_SERVER_INFO } from "./mcp-server-info.js";
+/** Plain jsonResult's complete projection. Compact owners use no widget or
+ * custom summary. Surface is a formatting hint, never access/approval authority. */
+export function compactListResultFits(command, data, maxChars, surface) {
+    if (JSON.stringify(success(command, data)).length > maxChars)
+        return false;
+    if (surface !== "mcp" && surface !== "agent" && surface !== "copilot")
+        return true;
+    const text = JSON.stringify(data);
+    const structured = { ...data, oxygen_version: OXYGEN_VERSION };
+    const mcp = { content: [{ type: "text", text }], structuredContent: structured, _meta: { oxygen_version: OXYGEN_VERSION } };
+    const modernMcp = { ...mcp, resultType: "complete", _meta: { ...mcp._meta, [MCP_SERVER_INFO_META_KEY]: OXYGEN_MCP_SERVER_INFO } };
+    const agent = { ok: true, text, structured };
+    const copilot = { ok: true, result: structured };
+    return [mcp, modernMcp, agent, copilot].every((result) => JSON.stringify(result).length <= 6_000);
+}
+/** Keep the existing array-of-strings next shape; use the caller's executable
+ * read gateway on MCP/built-ins and retain CLI syntax on API/CLI. */
+export function compactListReadNext(surface, tool, args, cli) {
+    if (surface === "mcp")
+        return JSON.stringify({ tool: "oxygen_capabilities_read", arguments: { tool, arguments: args } });
+    if (surface === "agent" || surface === "copilot")
+        return JSON.stringify({ tool: "capability_run", arguments: { name: tool, args } });
+    return cli;
+}

package/node_modules/@oxygen/shared/dist/contracts/agent-sessions.d.ts

@@ -22,6 +22,11 @@ export declare const AGENT_SESSION_CONFIG_CONTRACT: import("./schema.js").Contra
     };
     readonly events: import("./schema.js").ArrayProperty<import("./schema.js").StringProperty>;
     readonly schedule: import("./schema.js").ContractObject<{
+        readonly kind: {
+            type: "string";
+            enum: readonly ("cron" | "interval")[];
+            description?: string;
+        };
         readonly interval_minutes: {
             type: "integer";
             description?: string;
@@ -43,7 +48,9 @@ export declare const AGENT_SESSION_CONFIG_CONTRACT: import("./schema.js").Contra
             maximum?: number;
             "x-clamp"?: true;
         };
-    }, "interval_minutes" | "max_interval_minutes" | "min_interval_minutes">;
+        readonly cron: import("./schema.js").StringProperty;
+        readonly timezone: import("./schema.js").StringProperty;
+    }, "cron" | "interval_minutes" | "kind" | "max_interval_minutes" | "min_interval_minutes" | "timezone">;
     readonly budget: import("./schema.js").ContractObject<{
         readonly per_run_credits: {
             type: "number";
@@ -68,5 +75,9 @@ export declare const AGENT_SESSION_CONFIG_CONTRACT: import("./schema.js").Contra
         };
     }, "daily_credits" | "per_run_credits">;
     readonly ends_at: import("./schema.js").StringProperty;
+    readonly teammate_routine: import("./schema.js").ContractObject<{
+        readonly chat_id: import("./schema.js").StringProperty;
+        readonly proposal_id: import("./schema.js").StringProperty;
+    }, "chat_id">;
 }, "actions" | "budget" | "events" | "goal" | "resources" | "schedule" | "template" | "title">;
 export declare const AGENT_SESSION_OPERATIONS: readonly OperationSpec[];

package/node_modules/@oxygen/shared/dist/contracts/agent-sessions.js

@@ -1,13 +1,14 @@
-import { arr, bool, int, num, obj, str } from "./schema.js";
+import { arr, bool, enumOf, int, num, obj, str } from "./schema.js";
 const strings = () => arr(str({ minLength: 1 }), { maxItems: 100 });
 export const AGENT_SESSION_CONFIG_CONTRACT = obj({
     title: str({ minLength: 1, maxLength: 160 }), goal: str({ minLength: 1, maxLength: 16000 }),
     template: str({ minLength: 1 }),
     resources: obj({ sequences: strings(), tables: strings(), conversations: strings(), mailboxes: strings(), records: strings(), objects: strings(), knowledge: strings(), domains: strings() }, { required: ["sequences", "tables", "conversations", "mailboxes", "records", "objects", "knowledge", "domains"] }),
     actions: { ...strings(), description: "Optional standing write permissions from the template catalog. Empty means scoped reads only; template suggestions are never automatically granted." }, events: strings(),
-    schedule: obj({ interval_minutes: int({ minimum: 5, description: "Default cadence in minutes; 1440 means one day." }), min_interval_minutes: int({ minimum: 5, description: "Earliest permitted interval when the Agent requests its next check." }), max_interval_minutes: int({ minimum: 5, maximum: 525600, description: "Latest permitted interval when the Agent requests its next check." }) }, { required: ["interval_minutes", "min_interval_minutes", "max_interval_minutes"] }),
+    schedule: obj({ kind: enumOf(["interval", "cron"], { description: "interval (default) wakes every interval_minutes; cron wakes at each cron time in timezone and needs no interval fields." }), interval_minutes: int({ minimum: 5, description: "Default cadence in minutes; 1440 means one day." }), min_interval_minutes: int({ minimum: 5, description: "Earliest permitted interval when the Agent requests its next check." }), max_interval_minutes: int({ minimum: 5, maximum: 525600, description: "Latest permitted interval when the Agent requests its next check." }), cron: str({ minLength: 9, maxLength: 120, description: "Five fields, e.g. \"0 9 * * 1-5\"." }), timezone: str({ minLength: 1, maxLength: 64, description: "IANA zone for cron, e.g. Europe/Berlin." }) }),
     budget: obj({ per_run_credits: num({ minimum: 0.01, maximum: 25000, description: "Credit cap for each check, including inference and paid tools. The host reserves this full cap before starting." }), daily_credits: num({ minimum: 0.01, description: "Rolling 24-hour credit cap. Settled costs count for 24 hours; unresolved costs remain held until settled." }), lifetime_credits: num({ minimum: 0.01, description: "Optional total credit cap across all checks in this session." }) }, { required: ["per_run_credits", "daily_credits"] }),
     ends_at: str({ description: "Optional ISO end time." }),
+    teammate_routine: obj({ chat_id: str({ minLength: 36, maxLength: 36 }), proposal_id: str({ minLength: 1, maxLength: 64 }) }, { required: ["chat_id"], description: "An Oxygent routine: your chat with this Agent, which its reports post into. Only you may then start, change or message it." }),
 }, { required: ["title", "goal", "template", "resources", "actions", "events", "schedule", "budget"] });
 function agentSessionOperation(id, verb, method, suffix, summary, fields = {}, required = [], spends = false) {
     const route = `/api/cli/agent/{slug}/sessions${suffix}`;
@@ -28,6 +29,8 @@ export const AGENT_SESSION_OPERATIONS = [
     agentSessionOperation("agent.sessions.preview", "preview", "POST", "/{session}/preview", "Preview the exact pinned Agent version, resource scope, actions, schedule and caps. Returns the revision and approval token; starts no inference."),
     agentSessionOperation("agent.sessions.activate", "activate", "POST", "/{session}/activate", "Approve the exact preview revision and activate scoped standing authority. Starts bounded inference. A cap above default_max_credits requires separate approve_above_default=true. Later settings changes require a fresh preview.", { revision: int({ minimum: 1 }), preview_token: str({ minLength: 1 }), approved: bool(), approve_above_default: bool({ description: "Separately approve a per-run cap above the workspace's default Agent ceiling." }) }, ["revision", "preview_token", "approved"], true),
     agentSessionOperation("agent.sessions.message", "message", "POST", "/{session}/messages", "Queue durable human steering. Draft chat proposes settings for review; active chat resumes the same memory. A bounded run reserves the approved per-run cap.", { message: str({ minLength: 1, maxLength: 16000 }), idempotency_key: str({ minLength: 1, maxLength: 200 }) }, ["message", "idempotency_key"], true),
+    agentSessionOperation("agent.sessions.run", "run", "POST", "/{session}/run", "Run this active session's next check now, within its approved caps. Refused while a check runs or a cap is reached.", {}, [], true),
+    agentSessionOperation("agent.sessions.webhook", "webhook", "POST", "/{session}/webhook", "Create this session's webhook or rotate its secret (returned once); remove deletes it. A delivery wakes the active session within its caps; its external writes then ask first.", { remove: bool({ description: "Delete the webhook; its URL stops accepting deliveries." }) }),
     agentSessionOperation("agent.sessions.pause", "pause", "POST", "/{session}/pause", "Pause this ongoing session, retaining conversation and run history."),
     agentSessionOperation("agent.sessions.resume", "resume", "POST", "/{session}/resume", "Resume this ongoing session. Requires unchanged approved settings.", {}, [], true),
     agentSessionOperation("agent.sessions.complete", "complete", "POST", "/{session}/complete", "Complete this ongoing session, retaining conversation and run history."),

package/node_modules/@oxygen/shared/dist/contracts/browser-operations.js

@@ -49,7 +49,7 @@ export const BROWSER_OPERATIONS = [
     operation("billing.allowance.view", "/api/cli/billing/allowance/view", "GET", "billing allowance view", "oxygen_billing_allowance_view", "billing", "Inspect the current-cycle allowance, billing owner and partner-bonus eligibility; due plan grants or credit expiry may apply. 0 credits; reserves nothing.", {}, [], { mutates: true }),
     operation("billing.commitments.view", "/api/cli/billing/commitments/view", "GET", "billing commitments view", "oxygen_billing_commitments_view", "billing", "Read the complete fixed-credit commitment view and linked billing-owner display, without enumerating a child's sibling resources."),
     operation("billing.invoices.view", "/api/cli/billing/invoices/view", "GET", "billing invoices view", "oxygen_billing_invoices_view", "billing", "Read the browser invoice-history projection, including exact native timestamps, amounts and signed Stripe invoice links."),
-    operation("billing.summary", "/api/cli/billing/summary", "GET", "billing summary", "oxygen_billing_summary", "billing", "Read the complete non-writing wallet, plan, seat-capacity and billing-owner summary."),
+    operation("billing.summary", "/api/cli/billing/summary", "GET", "billing summary", "oxygen_billing_summary", "billing", "Read the saved wallet balance, plan and billing owner; trialCreditGrant is the trial budget. Grant records establish actual signup credits. Includes partner-bonus eligibility/timing; applies no grants or expiry."),
     operation("billing.usage.view", "/api/cli/billing/usage/view", "GET", "billing usage view", "oxygen_billing_usage_view", "billing", "Credit spend over 7, 30 or 90 days by category and provider, each with its share, plus permitted linked-workspace rollups. totalSpent is reserved minus released; billing usage managed_credits_used counts captured credits only. Other windows or groupings: billing audit.", { days: enumOf(["7", "30", "90"]), workspace: text() }),
     operation("integrations.managed_endpoints", "/api/cli/integrations/composio/endpoints", "GET", "integrations managed-endpoints", "oxygen_integration_managed_endpoints", "integrations", "Read a managed integration's full action catalog and parameter schemas.", { integration_id: text() }, ["integration_id"]),
     operation("integrations.openrouter_models", "/api/cli/integrations/openrouter/models", "GET", "integrations openrouter-models", "oxygen_openrouter_models", "integrations", "Read model and pricing metadata using this workspace's connected OpenRouter account; credentials are never returned."),
@@ -93,7 +93,9 @@ export const BROWSER_OPERATIONS = [
     operation("tables.resource.views.delete", `${table}/views/{view}`, "DELETE", "tables views delete", "oxygen_tables_views_delete", "tables", "Delete one saved Table view.", {}, [], nativeCli),
     operation("tables.resource.runs.list", `${table}/runs`, "GET", "tables runs history", "oxygen_table_runs_history", "runs", "Read this Table's action-run history and progress.", { status: enumOf(["all", "active", "queued", "running", "paused", "completed", "completed_with_errors", "failed", "canceling", "canceled"]), limit: int({ minimum: 1 }) }),
     operation("tables.resource.runs.start", `${table}/runs`, "POST", "tables runs start", "oxygen_table_resource_run_start", "runs", "Start selected Table actions using the browser's exact row-selection contract. Paid runs require an approved max_credits ceiling.", { actions, selection, max_credits: num({ minimum: 0 }), max_concurrency: int({ minimum: 1 }), force: bool(), approved: bool() }, ["actions"], { spends: true }),
-    operation("tables.resource.runs.estimate", `${table}/runs/estimate`, "POST", "tables runs preview", "oxygen_table_resource_run_preview", "runs", "Preview selected Table action costs and provider availability, including draft column definitions; starts no run.", { actions, selection }, ["actions"], { mutates: false }),
+    // Estimation can seed pricing and reconcile billing grants/expiry; it starts
+    // no run and spends no credits, but is not a read-only operation.
+    operation("tables.resource.runs.estimate", `${table}/runs/estimate`, "POST", "tables runs preview", "oxygen_table_resource_run_preview", "runs", "Preview selected Table action costs and provider availability, including draft column definitions; starts no run.", { actions, selection }, ["actions"], { mutates: true }),
     operation("tables.resource.runs.cancel", `${run}/cancel`, "POST", "tables runs stop", "oxygen_table_resource_run_stop", "runs", "Cancel one durable Table run; never repeats external provider effects."),
     operation("tables.resource.runs.pause", `${run}/pause`, "POST", "tables runs pause", "oxygen_table_resource_run_pause", "runs", "Pause one durable Table run without discarding its approved scope."),
     operation("tables.resource.runs.resume", `${run}/resume`, "POST", "tables runs resume", "oxygen_table_resource_run_resume", "runs", "Resume a paused Table run within its existing approved scope and credit ceiling."),

package/node_modules/@oxygen/shared/dist/contracts/compact-list-reads.d.ts

@@ -0,0 +1,57 @@
+export declare const knowledgeFolderListReadContract: import("./schema.js").ContractObject<{
+    readonly limit: {
+        type: "integer";
+        description?: string;
+        minimum?: number;
+        maximum?: number;
+        "x-clamp"?: true;
+    };
+    readonly cursor: import("./schema.js").StringProperty;
+    readonly max_chars: {
+        type: "integer";
+        description?: string;
+        minimum?: number;
+        maximum?: number;
+        "x-clamp"?: true;
+    };
+    readonly view: {
+        type: "string";
+        enum: readonly ("folders" | "full")[];
+        description?: string;
+    };
+    readonly query: import("./schema.js").StringProperty;
+}, never>;
+export declare const blueprintListWindowContract: import("./schema.js").ContractObject<{
+    readonly limit: {
+        type: "integer";
+        description?: string;
+        minimum?: number;
+        maximum?: number;
+        "x-clamp"?: true;
+    };
+    readonly cursor: import("./schema.js").StringProperty;
+    readonly max_chars: {
+        type: "integer";
+        description?: string;
+        minimum?: number;
+        maximum?: number;
+        "x-clamp"?: true;
+    };
+    readonly view: {
+        type: "string";
+        enum: readonly ("full" | "names" | "summary")[];
+        description?: string;
+    };
+}, never>;
+export declare const blueprintListSelectorContract: import("./schema.js").ContractObject<{
+    readonly query: import("./schema.js").StringProperty;
+    readonly tag: import("./schema.js").StringProperty;
+    readonly include_seeds: import("./schema.js").BooleanProperty;
+}, never>;
+export type CompactListReadOptions = {
+    view?: "full" | "folders" | "summary" | "names";
+    query?: string;
+    limit?: number;
+    cursor?: string;
+    max_chars?: number;
+};

package/node_modules/@oxygen/shared/dist/contracts/compact-list-reads.js

@@ -0,0 +1,23 @@
+import { bool, enumOf, int, obj, str } from "./schema.js";
+// Explicit views only: omitted/full requests retain each owner's legacy shape.
+const window = {
+    limit: int({ minimum: 1, maximum: 200, description: "Maximum complete entries in an opt-in view; follow next_cursor." }),
+    cursor: str({ minLength: 1, maxLength: 4096, description: "Resume the same view and exact query. Source changes refuse continuation; cursor grants no access." }),
+    max_chars: int({ minimum: 2000, maximum: 48000, description: "Complete native receipt window. MCP/built-in caps also apply; entries stay whole." }),
+};
+export const knowledgeFolderListReadContract = obj({
+    view: enumOf(["full", "folders"], { description: "Omit/full: existing folder+page explorer. folders: only id/name/parentId; empty folders remain." }),
+    query: str({ maxLength: 200, description: "Folders view: case-insensitive substring of folder name. No sharing/permission meaning." }),
+    ...window,
+});
+export const blueprintListWindowContract = obj({
+    view: enumOf(["full", "summary", "names"], { description: "Omit/full: existing summary shape including creates_columns. summary: identity/summary/integrations/counts. names: identity only; describe for details." }),
+    ...window,
+});
+// Existing ordinary MCP selectors; opt-in native windows validate them before
+// producing an executable continuation. Legacy full HTTP reads remain tolerant.
+export const blueprintListSelectorContract = obj({
+    query: str({ description: "Search text (matches name/slug/summary).", maxLength: 200 }),
+    tag: str({ description: "Optional tag filter.", maxLength: 80 }),
+    include_seeds: bool({ description: "Include shipped seed blueprints (default true)." }),
+});