@oxygen-agent/cli 1.1014.1465 → 1.1014.1598

package/dist/workspace-placement-commands.js

@@ -3,9 +3,9 @@ import { resolve } from "node:path";
 import { readJsonFileValue } from "./command-support.js";
 import { requestOxygen } from "./http-client.js";
 export function registerWorkspacePlacementCommands(root, handle) {
-    root.addCommand(new Command("workspace-test").description("Compare email copy placement in this workspace's connected Google/Microsoft receiving inboxes: Gmail Primary/Promotions and Microsoft Focused/Other. Native sends, 0 additional credits; preview and exact message approval required.")
+    root.addCommand(new Command("workspace-test").addCommand(bulkCommands(handle)).description("Compare email copy placement in this workspace's connected Google/Microsoft receiving inboxes: Gmail Primary/Promotions and Microsoft Focused/Other. Native sends, 0 additional credits; preview and exact message approval required.")
         .addCommand(new Command("run").description("Preview real outreach copy internally or across workspaces. Use a Sequence step or realistic prospect email, never delivery-check/no-reply text. Input JSON: sender_mailbox_ids, receiver_mailbox_ids, variants [{key,subject,body_text,body_html?}]. Approve the same input with returned request_id/plan_hash/rendered_at and max_live_sends. Five variants/50 messages; no provider purchase or campaign resume.")
-        .option("--receiver-scope <scope>", "workspace or network; network privately selects participating receivers.").option("--receiver-providers <providers>", "Comma-separated google,microsoft for network tests.")
+        .option("--receiver-scope <scope>", "workspace, network or staff; staff selects named receivers across dev/prod workspaces.").option("--receiver-environment <environment>", "dev or prod for staff tests.").option("--receiver-workspace <id>", "Receiving workspace UUID for staff tests.").option("--receiver-providers <providers>", "Comma-separated google,microsoft for network tests.")
         .requiredOption("--input <file>", "JSON test input file.").option("--approved", "Execute the exact reviewed matrix.")
         .option("--rendered-at <timestamp>", "Rendering timestamp returned by preview; reuse when approving.").option("--tracking-opens", "Preview with open tracking on verified workspace domain.").option("--tracking-clicks", "Preview with click tracking on verified workspace domain.")
         .option("--request-id <id>", "Request UUID from preview.").option("--plan <hash>", "Exact preview plan hash.").option("--max-live-sends <n>", "Maximum approved diagnostic emails (1–50).")
@@ -19,10 +19,14 @@ export function registerWorkspacePlacementCommands(root, handle) {
         return requestOxygen("/api/cli/deliverability/workspace-tests", { method: "POST", body: { ...input, approved: options.approved === true,
                 ...(options.approved ? { approved: true } : {}), ...(options.requestId ? { request_id: options.requestId } : {}),
                 ...(options.plan ? { plan_hash: options.plan } : {}), ...(options.renderedAt ? { rendered_at: options.renderedAt } : {}), ...(options.trackingOpens ? { tracking_opens: true } : {}), ...(options.trackingClicks ? { tracking_clicks: true } : {}), ...(options.maxLiveSends ? { max_live_sends: Number(options.maxLiveSends) } : {}),
+                ...(options.receiverEnvironment ? { receiver_environment: options.receiverEnvironment } : {}), ...(options.receiverWorkspace ? { receiver_workspace_id: options.receiverWorkspace } : {}),
                 ...(options.allowPausedProbe ? { allow_paused_probe: true } : {}), ...(options.receiverScope ? { receiver_scope: options.receiverScope } : {}), ...(options.receiverProviders ? { receiver_providers: String(options.receiverProviders).split(",") } : {}),
                 ...(options.previewCursor ? { preview_cursor: options.previewCursor } : {}), ...(options.previewLimit !== undefined ? { preview_limit: Number(options.previewLimit) } : {}),
                 ...(options.previewProbeId ? { preview_probe_id: options.previewProbeId } : {}), ...(options.previewPart ? { preview_part: options.previewPart } : {}), ...(options.previewOffset !== undefined ? { preview_offset: Number(options.previewOffset) } : {}), ...(options.previewCopyLimit !== undefined ? { preview_copy_limit: Number(options.previewCopyLimit) } : {}) } });
     })))
+        .addCommand(new Command("receivers").description("Discover staff-only receiving workspaces and connected Google/Microsoft mailboxes across dev and prod. No send or participation change.")
+        .requiredOption("--receiver-environment <environment>", "dev or prod.").option("--receiver-workspace <id>", "List mailboxes in this workspace UUID.").option("--query <search>", "Search workspaces by name, slug or ID.").option("--json", "Print JSON.")
+        .action(async (options) => handle("deliverability workspace-test receivers", options, () => requestOxygen(`/api/cli/deliverability/workspace-tests?${new URLSearchParams({ action: "receivers", receiver_environment: String(options.receiverEnvironment), ...(options.receiverWorkspace ? { receiver_workspace_id: String(options.receiverWorkspace) } : {}), ...(options.query ? { query: String(options.query) } : {}) })}`))))
         .addCommand(new Command("network").description("Read or manage default-on receiving-pool participation. Administrators can opt out or accept the current disclosure. Does not send mail.")
         .option("--enabled <boolean>", "true or false; omit to read.").option("--accept-disclosure", "Accept real-copy delivery to participating mailboxes and metadata processing.").option("--json", "Print JSON.")
         .action(async (options) => handle("deliverability workspace-test network", options, () => {
@@ -40,3 +44,64 @@ export function registerWorkspacePlacementCommands(root, handle) {
         .option("--probe <id>", "Read this probe's frozen message copy.").option("--part <part>", "body_text or body_html.").option("--offset <n>", "Returned Unicode character offset.").option("--copy-limit <n>", "Copy page size (1–3000 characters).").option("--json", "Print JSON.")
         .action(async (id, options) => handle("deliverability workspace-test get", options, () => requestOxygen(`/api/cli/deliverability/workspace-tests/${encodeURIComponent(id)}?${new URLSearchParams({ ...options.cursor ? { cursor: options.cursor } : {}, ...options.limit !== undefined ? { limit: String(options.limit) } : {}, ...options.probe ? { probe_id: options.probe } : {}, ...options.part ? { body_part: options.part } : {}, ...options.offset !== undefined ? { offset: String(options.offset) } : {}, ...options.copyLimit !== undefined ? { copy_limit: String(options.copyLimit) } : {} })}`)))));
 }
+function bulkCommands(handle) {
+    return new Command("bulk").description("Deliverability testing for all eligible mailboxes using this workspace's Google/Microsoft receivers. Preview first; 0 additional credits; approval sends real email.")
+        .addCommand(new Command("run").description("Preview deliverability testing of all eligible mailboxes, independent of page filters. Input JSON: variants [{key,subject,body_text,body_html?}], optional receiver_providers (google,microsoft). Review every recipient and rendered copy, then approve the same input with request_id/plan_hash/rendered_at and the exact aggregate max_live_sends. Child runs hold at most 50 messages; a batch can exceed 50. No selected sender/receiver IDs.")
+        .requiredOption("--input <file>", "JSON copy and test input file.")
+        .option("--receiver-providers <providers>", "Comma-separated google,microsoft; default both.")
+        .option("--approved", "Send the exact reviewed batch.")
+        .option("--request-id <id>", "Request UUID returned by preview.")
+        .option("--plan <hash>", "Exact aggregate preview plan hash.")
+        .option("--rendered-at <timestamp>", "Rendering timestamp returned by preview; reuse when approving.")
+        .option("--max-live-sends <n>", "Exact approved aggregate message count; can exceed 50.")
+        .option("--allow-paused-probe", "Explicitly allow diagnostic sends from paused senders, preserving pauses.")
+        .option("--tracking-opens", "Preview with open tracking on a verified workspace domain.")
+        .option("--tracking-clicks", "Preview with click tracking on a verified workspace domain.")
+        .option("--preview-skipped-cursor <id>", "Read the next skipped-sender page with the same frozen preview.")
+        .option("--preview-cursor <id>", "Read the next manifest page with the same input, request ID and rendering time.")
+        .option("--preview-limit <n>", "Manifest page size (1–20); omit paging when approving.")
+        .option("--preview-probe-id <id>", "Read exact rendered copy for this preview probe.")
+        .option("--preview-part <part>", "body_text or body_html.")
+        .option("--preview-offset <n>", "Returned Unicode character offset.")
+        .option("--preview-copy-limit <n>", "Copy page size (1–3000 characters).")
+        .option("--json", "Print JSON.")
+        .action(async (options) => handle("deliverability workspace-test bulk run", options, () => {
+        const input = readJsonFileValue(resolve(options.input), "--input");
+        if (!input || typeof input !== "object" || Array.isArray(input))
+            throw new Error("--input must contain a JSON object.");
+        return requestOxygen("/api/cli/deliverability/workspace-tests/bulk", { method: "POST", body: {
+                ...input, approved: options.approved === true,
+                ...(options.receiverProviders ? { receiver_providers: String(options.receiverProviders).split(",") } : {}),
+                ...(options.requestId ? { request_id: options.requestId } : {}),
+                ...(options.plan ? { plan_hash: options.plan } : {}),
+                ...(options.renderedAt ? { rendered_at: options.renderedAt } : {}),
+                ...(options.maxLiveSends !== undefined ? { max_live_sends: Number(options.maxLiveSends) } : {}),
+                ...(options.allowPausedProbe ? { allow_paused_probe: true } : {}),
+                ...(options.trackingOpens ? { tracking_opens: true } : {}),
+                ...(options.trackingClicks ? { tracking_clicks: true } : {}),
+                ...(options.previewSkippedCursor ? { preview_skipped_cursor: options.previewSkippedCursor } : {}),
+                ...(options.previewCursor ? { preview_cursor: options.previewCursor } : {}),
+                ...(options.previewLimit !== undefined ? { preview_limit: Number(options.previewLimit) } : {}),
+                ...(options.previewProbeId ? { preview_probe_id: options.previewProbeId } : {}),
+                ...(options.previewPart ? { preview_part: options.previewPart } : {}),
+                ...(options.previewOffset !== undefined ? { preview_offset: Number(options.previewOffset) } : {}),
+                ...(options.previewCopyLimit !== undefined ? { preview_copy_limit: Number(options.previewCopyLimit) } : {}),
+            } });
+    })))
+        .addCommand(new Command("list").description("Read saved deliverability testing batches for all mailboxes. No sends, refresh or charge.")
+        .option("--cursor <id>", "Next batch cursor.").option("--limit <n>", "Batches per page (1–20).").option("--json", "Print JSON.")
+        .action(async (options) => handle("deliverability workspace-test bulk list", options, () => requestOxygen(`/api/cli/deliverability/workspace-tests/bulk?${new URLSearchParams({
+        ...(options.cursor ? { cursor: options.cursor } : {}), ...(options.limit !== undefined ? { limit: String(options.limit) } : {}),
+    })}`))))
+        .addCommand(new Command("get").description("Read one deliverability testing batch, provider coverage and bounded results. No sends or provider refresh.")
+        .argument("<id>").option("--cursor <id>", "Next receiver-result cursor.").option("--skipped-cursor <id>", "Next skipped-sender cursor.").option("--limit <n>", "Receiver results per page (1–20).")
+        .option("--probe <id>", "Read this probe's frozen message copy.").option("--part <part>", "body_text or body_html.")
+        .option("--offset <n>", "Returned Unicode character offset.").option("--copy-limit <n>", "Copy page size (1–3000 characters).")
+        .option("--json", "Print JSON.")
+        .action(async (id, options) => handle("deliverability workspace-test bulk get", options, () => requestOxygen(`/api/cli/deliverability/workspace-tests/bulk/${encodeURIComponent(id)}?${new URLSearchParams({
+        ...(options.cursor ? { cursor: options.cursor } : {}), ...(options.limit !== undefined ? { limit: String(options.limit) } : {}),
+        ...(options.skippedCursor ? { skipped_cursor: options.skippedCursor } : {}),
+        ...(options.probe ? { probe_id: options.probe } : {}), ...(options.part ? { body_part: options.part } : {}),
+        ...(options.offset !== undefined ? { offset: String(options.offset) } : {}), ...(options.copyLimit !== undefined ? { copy_limit: String(options.copyLimit) } : {}),
+    })}`))));
+}

package/node_modules/@oxygen/shared/dist/capability-discovery.d.ts

@@ -104,8 +104,10 @@ export declare function readProductSkillInstructionResult(capabilityName: string
 export declare function isPublicCapabilitySkill(name: string): boolean;
 export declare function serializeCapabilityRoute(route: CapabilityRouteMatch | null, surfaceOrOptions?: CapabilityRouteSurface | {
     visibleSkills?: readonly string[];
+    nativeChat?: boolean;
 }, options?: {
     visibleSkills?: readonly string[];
+    nativeChat?: boolean;
 }): Record<string, unknown> | null;
 /**
  * Put the Network Mining record brief first on a record-dossier route where the
@@ -187,6 +189,13 @@ export declare const CAPABILITY_ROUTE_MCP_CALLS: {
             include_unsubscribe: boolean;
         };
     };
+    sequenceReplyToStop: () => {
+        tool: string;
+        arguments: {
+            sequence: string;
+            reply_to_stop_text: string;
+        };
+    };
     ugcProgramCreate: () => {
         tool: string;
         arguments: {

package/node_modules/@oxygen/shared/dist/capability-discovery.js

@@ -1,5 +1,6 @@
 import { findEnrichmentIntentByAlias } from "./enrichment-intents.js";
 import { networkMiningEnabled } from "./network-mining.js";
+import { nativeChatEnabled, withNativeChatDiscovery } from "./native-chat-discovery.js";
 import { RECIPE_PRIMITIVES } from "./recipes.js";
 // One compact semantic index covers every top-level /api/cli endpoint section.
 // It is navigation, never execution: live schemas, prices, readiness, and
@@ -113,11 +114,11 @@ export const OXYGEN_CAPABILITY_ROUTES = [
         notFor: "Primitive run diagnosis when no support report is needed; inspect Observability first.",
         execution: "Start or continue a hosted support conversation, optionally file structured metadata, and return its deep link; never send a customer reply automatically.",
         posture: "workspace_write",
-        gatewayTools: ["oxygen_feedback", "oxygen_support_ticket_create", "oxygen_support_tickets_list"],
-        gatewayCommands: ["feedback", "support chat", "support file", "support list"],
+        gatewayTools: ["oxygen_feedback", "oxygen_support_ticket_create", "oxygen_support_tickets_list", "oxygen_chat_channel", "oxygen_chat_thread_get", "oxygen_chat_thread_create", "oxygen_chat_thread_reply", "oxygen_chat_file_upload", "oxygen_chat_file_get", "oxygen_chat_thread_read"],
+        gatewayCommands: ["feedback", "support chat", "support file", "support list", "chat channel", "chat threads get", "chat threads create", "chat threads reply", "chat files upload", "chat files get", "chat threads read"],
         skills: ["oxygen-feedback"],
-        endpointSections: ["feedback", "support"],
-        intentTerms: ["support", "feedback", "bug report", "feature request", "report issue", "ticket", "complaint"],
+        endpointSections: ["feedback", "support", "chat"],
+        intentTerms: ["support", "feedback", "bug report", "feature request", "report issue", "ticket", "complaint", "support chat", "support thread", "chat attachment"],
     },
     {
         id: "platform-operations",
@@ -371,10 +372,10 @@ export const OXYGEN_CAPABILITY_ROUTES = [
         // elsewhere is `sequences push-external`; it is not a Sequence.
         execution: "Use the one-step gateway for new LinkedIn initiation or create/enroll/start a hosted campaign with bounded send authority. Native email sends through connected Google/Microsoft mailboxes, including Microsoft SMTP transport. To push table rows into an existing Smartlead, Instantly, lemlist or HeyReach campaign you already run, use `sequences push-external` (dry_run preview, then --approved). To stop a company's other leads when one of them replies, set `--company-reply-pause` on the campaign (choose the reply categories); to pause or resume a company on demand, e.g. from a workflow when a meeting is booked, use `sequences pause-company` / `resume-company`. A pause is resumable; a company do-not-contact entry is a permanent block on every campaign. Step copy takes lead columns as {{column}} and the sending person's name as {{sender_first_name}}, {{sender_last_name}} or {{sender_full_name}} (email adds {{sender_email}}), with no table column.",
         posture: "external_write",
-        gatewayTools: ["oxygen_sequences_send", "oxygen_sequences_create", "oxygen_sequences_enroll", "oxygen_sequences_start", "oxygen_sequences_list", "oxygen_sequences_push_external", "oxygen_sequences_company_pause"],
-        gatewayCommands: ["sequences send", "sequences create", "sequences enroll", "sequences start", "sequences list", "sequences push-external", "sequences pause-company"],
+        gatewayTools: ["oxygen_sequences_send", "oxygen_sequences_create", "oxygen_sequences_enroll", "oxygen_sequences_start", "oxygen_sequences_list", "oxygen_sequences_update", "oxygen_sequences_get", "oxygen_sequences_push_external", "oxygen_sequences_company_pause"],
+        gatewayCommands: ["sequences send", "sequences create", "sequences enroll", "sequences start", "sequences list", "sequences update", "sequences get", "sequences push-external", "sequences pause-company"],
         skills: ["oxygen-sequencer"],
-        endpointSections: ["senders", "sequencer", "sequences", "spintax", "suppressions", "voice"],
+        endpointSections: ["senders", "sequencer", "sequences", "spintax", "subscriptions", "suppressions", "voice"],
         // "sender identity", "sender profile" and "phone number" are here because a
         // blind-user eval (2026-08-09) asked for "our sender identity" and got routed
         // to workspace-access — "identity" matched the AUTH sense. The nouns a user
@@ -385,7 +386,7 @@ export const OXYGEN_CAPABILITY_ROUTES = [
         // collaboration; the {{sender_*}} copy variables live on sequence steps.
         // A/B tests are Sequence step variants: "pause a losing A/B variant" ranked
         // Table-run pauses first (2026-10-10 parity audit).
-        intentTerms: ["a/b test", "a/b variant", "ab test", "split test", "auto-winner", "winning variant", "losing variant", "sequence", "campaign", "cadence", "enroll", "outreach", "linkedin message", "linkedin dm", "nurture", "follow up", "sender rotation", "stop on reply", "company replied", "pause company", "pause outreach to a company", "stop outreach to a company", "stop emailing a company", "colleagues", "do not contact a company", "sender identity", "sending identity", "sender profile", "phone number", "dialing", "dialer", "call", "cold call", "smartlead", "instantly", "lemlist", "heyreach", "external sequencer", "push to campaign", "push rows to campaign", "add leads to campaign", "sign-off", "sign off", "signature", "sender name", "sender first name", "sender variable", "sender_first_name"],
+        intentTerms: ["withdraw invitation on timeout", "withdraw unanswered invite", "withdraw_on_timeout", "a/b test", "a/b variant", "ab test", "split test", "auto-winner", "winning variant", "losing variant", "sequence", "campaign", "cadence", "enroll", "outreach", "linkedin message", "linkedin dm", "nurture", "follow up", "sender rotation", "stop on reply", "company replied", "pause company", "pause outreach to a company", "stop outreach to a company", "stop emailing a company", "colleagues", "do not contact a company", "sender identity", "sending identity", "sender profile", "phone number", "dialing", "dialer", "call", "cold call", "smartlead", "instantly", "lemlist", "heyreach", "external sequencer", "push to campaign", "push rows to campaign", "add leads to campaign", "sign-off", "sign off", "signature", "sender name", "sender first name", "sender variable", "sender_first_name"],
     },
     {
         id: "publishing",
@@ -410,7 +411,7 @@ export const OXYGEN_CAPABILITY_ROUTES = [
         primitive: "workflows",
         owns: "Deterministic hosted automation definitions, versions, triggers, branching, retries, approvals, modes, and durable runs.",
         notFor: "Local cron, client-side execution, adaptive Agent goals, or outreach cadence already owned by Sequences.",
-        execution: "Author locally if useful, then schema/lint/apply and call the Workflow on OXYGEN workers; outbound uses internal oxygen.sequence_enroll against an already active bounded Sequence.",
+        execution: "Author locally if useful, then schema/lint/apply and call the Workflow on OXYGEN workers; outbound uses internal oxygen.sequence_enroll against an already active bounded Sequence. Start from the graph schema's examples[0] (oxygen_workflows_schema subject graph): a minimal valid manifest whose tool node adds a Table row with oxygen_table_rows_insert. A draft that is not saved exists only in your reply, so show its manifest there. To find why a definition fails, lint it as written first. Saving without running is apply with publish false and workflow and trigger status disabled.",
         posture: "mixed",
         gatewayTools: ["oxygen_workflows_schema", "oxygen_workflows_lint", "oxygen_workflows_apply", "oxygen_workflows_call", "oxygen_workflows_tail"],
         gatewayCommands: ["workflows schema", "workflows lint", "workflows apply", "workflows call", "workflows tail"],
@@ -590,6 +591,16 @@ export function inferCapabilityRoute(query) {
     const normalized = normalizeIntent(query);
     if (!normalized)
         return null;
+    if (/\b(mailbox(?:es)?|inbox(?:es)?)\b/.test(normalized) && /\b(standby|reserve|replacement|replace|burn(?:ed|t)?)\b/.test(normalized)) {
+        const campaign = /\b(campaign|sequence|cadence)\b/.test(normalized);
+        const card = ROUTE_BY_ID.get(campaign ? "sequences" : "sending-infrastructure") ?? ROUTE_BY_PRIMITIVE.get("sequences");
+        if (card)
+            return {
+                card,
+                recommendedTools: campaign ? ["oxygen_sequences_standby_get", "oxygen_sequences_standby_set", "oxygen_mailboxes_standby_pool"] : ["oxygen_mailboxes_standby_pool", "oxygen_mailboxes_standby_get", "oxygen_mailboxes_standby_set", "oxygen_mailboxes_standby_policy"],
+                recommendedCommands: campaign ? ["sequences standby get", "sequences standby set", "mailboxes standby pool"] : ["mailboxes standby pool", "mailboxes standby get", "mailboxes standby set", "mailboxes standby policy"],
+            };
+    }
     // A complete audience play starts from its Recipe and the shared audience
     // guide; onboarding consults on open-ended goals and never routes this ask.
     // Its source nouns otherwise select a one-shot post search or follower order.
@@ -790,6 +801,8 @@ export function serializeCapabilityRoute(route, surfaceOrOptions = "cli", option
     const visibleSkills = typeof surfaceOrOptions === "string" ? options.visibleSkills : surfaceOrOptions.visibleSkills;
     if (!route)
         return null;
+    const nativeChat = (typeof surfaceOrOptions === "string" ? options.nativeChat : surfaceOrOptions.nativeChat) ?? nativeChatEnabled(runtimeEnv());
+    route = withNativeChatDiscovery(route, nativeChat);
     return {
         capability_id: route.card.id,
         layer: route.card.layer,
@@ -865,7 +878,7 @@ function isLinkedInAudienceCampaignIntent(rawQuery) {
         || isPostCoverOrPreviewIntent(query) || isFailedPostIntent(query)
         || isOwnedPostCommentIntent(query) || isSecondPartyDecisionIntent(query)
         || tableReadRecommendation(query) || tableMaintenanceRecommendation(query)
-        || isSequenceScheduleIntent(query) || isSequenceUnsubscribeIntent(query)
+        || isSequenceScheduleIntent(query) || isSequenceUnsubscribeIntent(query) || isSequenceInvitationTimeoutIntent(query)
         || isSenderProfileIntent(query) || isSenderCopyVariableIntent(query)
         || isLinkedInAccountLimitsIntent(query)
         || /\b(workflows?|sequences?|cadences?|webhook|cron|event trigger|branching|retries)\b/.test(query)
@@ -1481,6 +1494,7 @@ const WORKSPACE_VOICE_EXECUTION = "A writing voice is learned from the workspace
 export const SEQUENCE_SENDING_SCHEDULE_COMMAND = "oxygen sequences update <sequence> --schedule-timezone <IANA zone> --schedule-days mon-fri --schedule-hours-start 09:00 --schedule-hours-end 17:00 --json";
 /** Launch's unsubscribe switch: the visible link and the one-click headers together. */
 export const SEQUENCE_UNSUBSCRIBE_COMMAND = "oxygen sequences update <sequence> --include-unsubscribe --json";
+const SEQUENCE_REPLY_TO_STOP_COMMAND = 'oxygen sequences update <sequence> --reply-to-stop-text "Reply STOP to opt out." --json';
 /**
  * Every exact CLI command a route hands out, as the MCP tool call that sends the
  * same request. The MCP surface serves these in place of the command: an MCP
@@ -1502,6 +1516,7 @@ export const CAPABILITY_ROUTE_MCP_CALLS = {
         arguments: { sequence: "<sequence>", sending_schedule: { timezone: "<IANA zone>", days: [1, 2, 3, 4, 5], start: "09:00", end: "17:00" } },
     }),
     sequenceUnsubscribe: () => ({ tool: "oxygen_sequences_update", arguments: { sequence: "<sequence>", include_unsubscribe: true } }),
+    sequenceReplyToStop: () => ({ tool: "oxygen_sequences_update", arguments: { sequence: "<sequence>", reply_to_stop_text: "Reply STOP to opt out." } }),
     ugcProgramCreate: () => ({ tool: "oxygen_ugc_program_create", arguments: { product_url: "<your product site>" } }),
     // The first comment rides in `content`, as the CLI's --first-comment does.
     publishingFirstComment: () => ({
@@ -1557,6 +1572,15 @@ export function catalogueIntentMcpCall(intentId) {
 function isSequenceLeadProgressIntent(query) {
     return /\b(?:next (?:message|step|send)|stuck|blocked|held|per[- ]lead (?:status|progress)|why (?:\w+ )?(?:stopped|failed))\b/.test(query);
 }
+function isSequenceInvitationTimeoutIntent(query) {
+    if (/\b(?:workflow|automation|automate|webhook|cron)\b/.test(query))
+        return false;
+    if (/\bwithdraw on timeout\b/.test(query))
+        return true;
+    return /\b(?:withdraw\w*|cancel\w*)\b/.test(query)
+        && /\b(?:invitations?|invites?|connection requests?)\b/.test(query)
+        && /\b(?:timeouts?|time out|expires?|expired|expiry|unanswered|unaccepted)\b/.test(query);
+}
 function isSequenceScheduleIntent(query) {
     return /\bsend(?:ing)? (?:schedule|window)s?\b/.test(query)
         && !/\b(workflow|automation|automate|webhook|cron)\b/.test(query);
@@ -1574,6 +1598,14 @@ function isMailboxVolumeIntent(query) {
     const volume = /\b(ramp\w*|daily (?:campaign )?(?:limit|cap)s?|sending limits?|send limits?|(?:emails?|sends?) (?:per|a) day|volume)\b/.test(query);
     return inbox && volume;
 }
+function isSequenceReplyToStopIntent(query) {
+    if (/\b(workflow|automation|automate|webhook|cron|lists?|import\w*|suppress\w*|block ?list|blocklist|do not contact|dnc|conversations?|threads?)\b/.test(query))
+        return false;
+    const footer = /\bfooter\b/.test(query) || /\breply to stop text\b/.test(query);
+    const sequenceSetting = /\b(sequences?|campaigns?)\b/.test(query) && /\b(text|wording|line|setting)\b/.test(query);
+    return (footer || sequenceSetting) && (/\breply (?:to )?stop\b/.test(query)
+        || /\bopt out\b/.test(query) && /\b(text|wording|line|footer)\b/.test(query));
+}
 // The unsubscribe option on a Sequence's emails, not the list of people who
 // opted out: a list, import or do-not-contact ask stays with suppressions.
 function isSequenceUnsubscribeIntent(query) {
@@ -2258,6 +2290,8 @@ function explicitCapabilityIntent(query) {
         return ROUTE_BY_PRIMITIVE.get("publishing") ?? null;
     if (isWorkspaceVoiceIntent(query))
         return ROUTE_BY_ID.get("knowledge-graph") ?? null;
+    if (isSequenceInvitationTimeoutIntent(query))
+        return ROUTE_BY_PRIMITIVE.get("sequences") ?? null;
     if (isOwnLinkedInNetworkIntent(query) || isOpenLinkedInRequestsIntent(query))
         return ROUTE_BY_ID.get("connected-linkedin") ?? null;
     if (isCompanyPageFollowersIntent(query))
@@ -2316,7 +2350,7 @@ function explicitCapabilityIntent(query) {
     // option. Ahead of the workflow rule, whose bare "schedule" sent the 2026-09-29
     // unified-launch acceptance agent's "sending schedule" search to Workflows and
     // hid every Sequences command.
-    if (isSequenceScheduleIntent(query) || isSequenceUnsubscribeIntent(query))
+    if (isSequenceReplyToStopIntent(query) || isSequenceScheduleIntent(query) || isSequenceUnsubscribeIntent(query))
         return ROUTE_BY_PRIMITIVE.get("sequences") ?? null;
     if (isMailboxVolumeIntent(query) && !/\b(workflow|automation|automate|webhook|cron)\b/.test(query)) {
         return ROUTE_BY_ID.get("sending-infrastructure") ?? null;
@@ -3075,6 +3109,20 @@ function recommendationsFor(card, query) {
         if (isSpintaxIntent(query)) {
             return { tools: ["oxygen_spintax_generate"], commands: ["spintax generate"] };
         }
+        if (isSequenceInvitationTimeoutIntent(query)) {
+            return {
+                tools: ["oxygen_sequences_update", "oxygen_sequences_get", "oxygen_sequences_create"],
+                commands: ["sequences update", "sequences get", "sequences create"],
+            };
+        }
+        if (isSequenceReplyToStopIntent(query)) {
+            return {
+                tools: ["oxygen_sequences_update", "oxygen_sequences_get"],
+                commands: ["sequences update", "sequences get"],
+                exactCommand: SEQUENCE_REPLY_TO_STOP_COMMAND,
+                exactMcpCall: CAPABILITY_ROUTE_MCP_CALLS.sequenceReplyToStop(),
+            };
+        }
         if (isSequenceScheduleIntent(query) || isSequenceUnsubscribeIntent(query)) {
             return {
                 tools: ["oxygen_sequences_update", "oxygen_sequences_get"],

package/node_modules/@oxygen/shared/dist/contracts/browser-operations.js

@@ -50,7 +50,7 @@ export const BROWSER_OPERATIONS = [
     operation("billing.commitments.view", "/api/cli/billing/commitments/view", "GET", "billing commitments view", "oxygen_billing_commitments_view", "billing", "Read the complete fixed-credit commitment view and linked billing-owner display, without enumerating a child's sibling resources."),
     operation("billing.invoices.view", "/api/cli/billing/invoices/view", "GET", "billing invoices view", "oxygen_billing_invoices_view", "billing", "Read the browser invoice-history projection, including exact native timestamps, amounts and signed Stripe invoice links."),
     operation("billing.summary", "/api/cli/billing/summary", "GET", "billing summary", "oxygen_billing_summary", "billing", "Read saved wallet/plan, partner bonus and sending_seats status, period-end meaning, channel capacity, prices and snapshot eligibility. No grants or expiry. Connection actions recheck eligibility; first debit may remain unknown. trialCreditGrant is a budget, not a recorded grant."),
-    operation("billing.usage.view", "/api/cli/billing/usage/view", "GET", "billing usage view", "oxygen_billing_usage_view", "billing", "Credit spend over 7, 30 or 90 days by category and provider, each with its share, plus permitted linked-workspace rollups. totalSpent is reserved minus released; billing usage managed_credits_used counts captured credits only. Other windows or groupings: billing audit.", { days: enumOf(["7", "30", "90"]), workspace: text() }),
+    operation("billing.usage.view", "/api/cli/billing/usage/view", "GET", "billing usage view", "oxygen_billing_usage_view", "billing", "Credit spend over 7, 30 or 90 days by category and provider, each with its share, plus permitted linked-workspace rollups; due plan grants or credit expiry may apply. totalSpent is reserved minus released; billing usage managed_credits_used counts captured credits only. Other windows or groupings: billing audit.", { days: enumOf(["7", "30", "90"]), workspace: text() }, [], { mutates: true }),
     operation("integrations.managed_endpoints", "/api/cli/integrations/composio/endpoints", "GET", "integrations managed-endpoints", "oxygen_integration_managed_endpoints", "integrations", "Read a managed integration's full action catalog and parameter schemas.", { integration_id: text() }, ["integration_id"]),
     operation("integrations.openrouter_models", "/api/cli/integrations/openrouter/models", "GET", "integrations openrouter-models", "oxygen_openrouter_models", "integrations", "Read model and pricing metadata using this workspace's connected OpenRouter account; credentials are never returned."),
     operation("integrations.status", "/api/cli/integrations/status", "GET", "integrations status", "oxygen_integration_status", "integrations", "Read active connection counts, sender connection state and the workspace's usable BYOK plan entitlement."),
@@ -134,6 +134,6 @@ export const BROWSER_OPERATIONS = [
     operation("notetaker.note.edit", "/api/cli/notetaker/sessions/{session}/note", "PATCH", "notetaker notes edit", "oxygen_notetaker_note_edit", "crm", "Save the markdown note for one meeting session and return the committed note.", { markdown: text() }, ["markdown"]),
     operation("orgs.create", "/api/cli/orgs/create", "POST", "orgs create", "oxygen_workspace_create", "workspace", "Create a workspace for the authenticated person's account and begin native company setup. Workspace API keys cannot create personal workspaces.", { name: text(), company_domain: text("Company website or domain, or its LinkedIn company page URL when it has no website."), linkedin_profile_url: text("Creator's LinkedIn profile URL, separate from the company's page.") }, ["name", "company_domain"]),
     operation("onboarding.complete", "/api/cli/onboarding/complete", "POST", "onboarding complete", "oxygen_onboarding_complete", "workspace", "Complete the active workspace's onboarding step and record its discovery-source choices. The other choice requires source_other.", { sources: arr(enumOf(["linkedin_content", "linkedin_dm", "linkedin_ads", "x", "youtube", "google", "ai_assistant", "email", "word_of_mouth", "referral", "event", "other"])), source_other: text(), redirect_url: text() }, ["sources"]),
-    operation("onboarding.finish", "/api/cli/onboarding/finish", "POST", "onboarding finish", "oxygen_onboarding_finish", "workspace", "Finish agent-led onboarding once a play is chosen: the onboarding Oxygent chat opens as an ordinary chat, without the Knowledge pane. Changes nothing else and spends nothing."),
+    operation("onboarding.finish", "/api/cli/onboarding/finish", "POST", "onboarding finish", "oxygen_onboarding_finish", "workspace", "Finish agent-led onboarding once a play is chosen: the onboarding Oxygent chat opens as an ordinary chat, without the Knowledge pane. If the chat holds your sent play, records your activation once. Spends nothing."),
     operation("onboarding.start", "/api/cli/onboarding/start", "POST", "onboarding start", "oxygen_onboarding_start", "workspace", "Answer onboarding's choice card. own_agent continues to connecting your own agent. copilot opens the Workspace Copilot with the onboarding conversation already started, billed in credits like any Copilot turn; choosing again reopens that conversation. restart (copilot) shows a finished onboarding again and asks the Oxygent to start over, as an ordinary send.", { path: enumOf(["own_agent", "copilot"]), play: text("A play slug carried to the install step."), restart: bool() }, ["path"], { spends: true }),
 ];

package/node_modules/@oxygen/shared/dist/contracts/customer-operations.js

@@ -9,6 +9,7 @@ import { CRM_CONNECTIONS_QUERY_CONTRACT, CRM_FILE_ATTACH_INPUT_CONTRACT, CRM_FIL
 import { spintaxContract } from "./spintax.js";
 import { betaFeaturesUpdateContract, emailDomainSuppressionListContract, emailDomainSuppressionRemoveContract, emailSuppressionRemoveContract, providerLimitListContract, providerLimitSelectorContract, providerLimitUpdateContract } from "./workspace-utilities.js";
 import { knowledgeSyncReadContract } from "./knowledge-sync.js";
+import { CHAT_ADMIN_READ_CONTRACT, CHAT_CHANNEL_READ_CONTRACT, CHAT_FILE_UPLOAD_CONTRACT, CHAT_MESSAGE_CONTRACT, CHAT_THREAD_CREATE_CONTRACT, CHAT_THREAD_PATCH_CONTRACT, CHAT_THREAD_READ_CONTRACT } from "./native-chat.js";
 const text = (description) => str(description === undefined ? {} : { description });
 const list = () => arr(str());
 const json = { type: "object", additionalProperties: true };
@@ -28,6 +29,23 @@ function operation(id, route, method, cli, mcp, pack, summary, fields = {}, requ
 const mcpOnly = { generated: { cli: false, mcp: true } };
 const cliOnly = { generated: { cli: true, mcp: false } };
 export const CUSTOMER_OPERATIONS = [
+    operation("mailboxes.standby.get", "/api/cli/mailboxes/{mailbox}/standby", "GET", "mailboxes standby get", "oxygen_mailboxes_standby_get", "deliverability", "Read a mailbox's standby role, readiness blockers and replacements."),
+    operation("mailboxes.standby.set", "/api/cli/mailboxes/{mailbox}/standby", "PATCH", "mailboxes standby set", "oxygen_mailboxes_standby_set", "deliverability", "Set outreach or standby. Preview; apply with approved and returned plan. Standby holds pending outreach; existing warm-up continues. 0 credits.", { role: enumOf(["outreach", "standby"]), approved: bool(), plan: text() }, ["role"]),
+    operation("mailboxes.standby.pool", "/api/cli/mailboxes/standby", "GET", "mailboxes standby pool", "oxygen_mailboxes_standby_pool", "deliverability", "Read shared warm standby reserve, readiness policy and replacements."),
+    operation("mailboxes.standby.policy", "/api/cli/mailboxes/standby", "PATCH", "mailboxes standby policy", "oxygen_mailboxes_standby_policy", "deliverability", "Set required confirmed warm-up sending days (default 14); no subscription changes. 0 credits.", { minimum_days: int({ minimum: 1, maximum: 28 }) }, ["minimum_days"]),
+    operation("sequences.standby.get", "/api/cli/sequences/{sequence}/standby", "GET", "sequences standby get", "oxygen_sequences_standby_get", "sequences", "Read automatic mailbox replacement policy, ready reserve and replacements for a campaign."),
+    operation("sequences.standby.set", "/api/cli/sequences/{sequence}/standby", "PATCH", "sequences standby set", "oxygen_sequences_standby_set", "sequences", "Enable or disable automatic replacement after bounce protection pauses a mailbox. Preview first; apply with approved and returned plan. Shared reserves may change sender identity for uncontacted leads. Contacted leads keep their original inbox and hold follow-ups. 0 credits.", { enabled: bool(), approved: bool(), plan: text() }, ["enabled"]),
+    operation("chat.channel", "/api/cli/chat", "GET", "chat channel", "oxygen_chat_channel", "workspace", "Dev only: read or initialize this workspace's native support channel, persistent threads, unread counts and members; optional search matches messages.", {}, [], { contract: CHAT_CHANNEL_READ_CONTRACT, mutates: true }),
+    operation("chat.threads.create", "/api/cli/chat/threads", "POST", "chat threads create", "oxygen_chat_thread_create", "workspace", "Dev only: create a persistent native support thread; subject and body are customer-visible. No Plain or Slack transport.", {}, [], { contract: CHAT_THREAD_CREATE_CONTRACT }),
+    operation("chat.threads.get", "/api/cli/chat/threads/{thread_id}", "GET", "chat threads get", "oxygen_chat_thread_get", "workspace", "Dev only: read a native support thread, messages, members and release progress. Continue message history with the returned cursor.", {}, [], { contract: CHAT_THREAD_READ_CONTRACT }),
+    operation("chat.threads.reply", "/api/cli/chat/threads/{thread_id}/messages", "POST", "chat threads reply", "oxygen_chat_thread_reply", "workspace", "Dev only: reply in a native support thread with uploaded attachment IDs and member mentions. Public by default; internal notes require staff.", {}, [], { contract: CHAT_MESSAGE_CONTRACT }),
+    operation("chat.threads.update", "/api/cli/chat/threads/{thread_id}", "PATCH", "chat threads update", "oxygen_chat_thread_update", "workspace", "Staff-only. Dev only: update native support status, assignment, urgency, fixing-agent progress or fix evidence; release status is verified separately.", {}, [], { contract: CHAT_THREAD_PATCH_CONTRACT }),
+    operation("chat.threads.read", "/api/cli/chat/threads/{thread_id}/read", "POST", "chat threads read", "oxygen_chat_thread_read", "workspace", "Dev only: mark a native support thread read through the viewed cursor; omit cursor to mark all currently visible messages.", { cursor: text() }, [], { bodyRequired: true }),
+    operation("chat.admin.list", "/api/cli/admin/chat", "GET", "chat admin list", "oxygen_chat_admin_list", "workspace", "Staff-only. Dev only: list native customer support channels by urgency and customer significance, filtered by thread or agent state.", {}, [], { contract: CHAT_ADMIN_READ_CONTRACT }),
+    operation("chat.admin.channel", "/api/cli/admin/chat/{channel_id}", "GET", "chat admin channel", "oxygen_chat_admin_channel", "workspace", "Staff-only. Dev only: read a customer's native support channel, thread status and billing significance; optional search matches messages.", {}, [], { contract: CHAT_CHANNEL_READ_CONTRACT }),
+    operation("chat.release_check", "/api/cli/chat/threads/{thread_id}/release-check", "POST", "chat release-check", "oxygen_chat_release_check", "workspace", "Staff-only. Dev only: verify whether the thread's fix is deployed to dev or production, preserving stale evidence when verification is unavailable.", {}, [], { bodyRequired: true }),
+    operation("chat.files.upload", "/api/cli/chat/threads/{thread_id}/files", "POST", "chat files upload", "oxygen_chat_file_upload", "workspace", "Dev only: upload a file into a native support thread; attach the returned ID in a reply. CLI accepts --file; MCP accepts data_base64.", {}, [], { contract: CHAT_FILE_UPLOAD_CONTRACT, multipart: { contentField: "data_base64", nameField: "name", typeField: "content_type", fileField: "file" } }),
+    operation("chat.files.get", "/api/cli/chat/threads/{thread_id}/files/{file_id}", "GET", "chat files get", "oxygen_chat_file_get", "workspace", "Dev only: download exact bytes of a file in an authorized native support thread. CLI requires --output; MCP returns an authenticated file resource.", {}, [], { binary: { maxBytes: 10 * 1024 * 1024 } }),
     operation("activation.state", "/api/cli/activation/state", "GET", "activation state", "oxygen_activation_state", "workspace", "Read this workspace's onboarding activation state and next available actions.", {}, [], mcpOnly),
     operation("activation.checklist", "/api/cli/activation/checklist", "GET", "activation checklist", "oxygen_activation_checklist", "workspace", "Read this workspace's getting-started checklist: leads in a table, a first sequence, a connected sending account and a launched sequence, each with whether it is done and a link to do it; eligible says whether the sidebar shows it. Read-only, 0 credits."),
     operation("api_keys.list", "/api/cli/api-keys", "GET", "api-keys list", "oxygen_api_keys_list", "workspace", "List workspace API keys without revealing their tokens.", {}, [], mcpOnly),

package/node_modules/@oxygen/shared/dist/contracts/guided-activation.js

@@ -36,14 +36,14 @@ export const GUIDED_ACTIVATION_ROUTINE_ACTIVATE_CONTRACT = obj({
 }, { required: ["purpose", "revision", "preview_token"] });
 export const GUIDED_ACTIVATION_OPERATIONS = [
     { id: "onboarding.activation.status", route: "/api/cli/onboarding/activation", method: "GET", contract: obj({}),
-        cli: { path: ["onboarding", "activation", "status"], summary: "Resume your guided onboarding and native resource links. Enabled genuine dev only; current non-client workspace members." },
-        mcp: { name: "oxygen_onboarding_activation_status", title: "Oxygen: Onboarding status", description: "Read your resumable guided onboarding and native links. Enabled genuine dev only; current non-client workspace members.", pack: "agents" }, mutates: false, spends: false },
+        cli: { path: ["onboarding", "activation", "status"], summary: "Resume your guided onboarding and native resource links. Requires enabled onboarding and current non-client membership." },
+        mcp: { name: "oxygen_onboarding_activation_status", title: "Oxygen: Onboarding status", description: "Read your resumable guided onboarding and native links. Requires enabled onboarding and current non-client membership.", pack: "agents" }, mutates: false, spends: false },
     { id: "onboarding.activation.start", route: "/api/cli/onboarding/activation", method: "POST", contract: GUIDED_ACTIVATION_START_CONTRACT,
         cli: { path: ["onboarding", "activation", "start"], summary: "Prepare your creator-only activation and Oxygent chat: Workspace shared, Personal creator-only. Free; no send or outreach." },
-        mcp: { name: "oxygen_onboarding_activation_start", title: "Oxygen: Start onboarding record", description: "Prepare your creator-only activation with operating_path own_agent or oxygent. Oxygent binds its native Agent/chat: Workspace shared, Personal creator-only. Free; no turn, inference, provider or outreach dispatch. Enabled genuine dev only; current non-client workspace members.", pack: "agents" }, mutates: true, spends: false },
+        mcp: { name: "oxygen_onboarding_activation_start", title: "Oxygen: Start onboarding record", description: "Prepare your creator-only activation with operating_path own_agent or oxygent. Oxygent binds its native Agent/chat: Workspace shared, Personal creator-only. Free; no turn, inference, provider or outreach dispatch. Requires enabled onboarding and current non-client membership.", pack: "agents" }, mutates: true, spends: false },
     { id: "onboarding.activation.get", route: "/api/cli/onboarding/activation/{activationId}", method: "GET", parameters: ["activationId"], contract: obj({}),
         cli: { path: ["onboarding", "activation", "get"], summary: "Read your activation by ID and its native resource links." },
-        mcp: { name: "oxygen_onboarding_activation_get", title: "Oxygen: Read onboarding record", description: "Read your activation by activationId. Only its creator can read it. Enabled genuine dev only; current non-client workspace members.", pack: "agents" }, mutates: false, spends: false },
+        mcp: { name: "oxygen_onboarding_activation_get", title: "Oxygen: Read onboarding record", description: "Read your activation by activationId. Only its creator can read it. Requires enabled onboarding and current non-client membership.", pack: "agents" }, mutates: false, spends: false },
     { id: "onboarding.activation.link", route: "/api/cli/onboarding/activation/{activationId}/resources", method: "POST", parameters: ["activationId"], contract: GUIDED_ACTIVATION_LINK_CONTRACT,
         cli: { path: ["onboarding", "activation", "link"], summary: "Link an existing native onboarding resource at the expected revision. Does not create, enroll or send." },
         mcp: { name: "oxygen_onboarding_activation_link", title: "Oxygen: Link onboarding resource", description: "Link an existing Knowledge page, First leads Table, pilot Sequence or LinkedIn sender to your activationId at revision. Native ownership and Sequence binding are verified; no create, enrollment or send.", pack: "agents" }, mutates: true, spends: false },

package/node_modules/@oxygen/shared/dist/contracts/native-chat.d.ts

@@ -0,0 +1,120 @@
+export declare const CHAT_STATUS: readonly ["todo", "snoozed", "done"];
+export declare const CHAT_PRIORITY: readonly ["urgent", "high", "normal", "low"];
+export declare const CHAT_AGENT_STAGE: readonly ["investigating", "fixing", "testing", "awaiting_release", "needs_human", "completed"];
+export declare const CHAT_RELEASE_STATUS: readonly ["none", "dev", "prod"];
+export declare const CHAT_CHANNEL_READ_CONTRACT: import("./schema.js").ContractObject<{
+    readonly search: import("./schema.js").StringProperty;
+}, never>;
+export declare const CHAT_THREAD_CREATE_CONTRACT: import("./schema.js").ContractObject<{
+    readonly subject: import("./schema.js").StringProperty;
+    readonly body: import("./schema.js").StringProperty;
+    readonly idempotency_key: import("./schema.js").StringProperty;
+    readonly context: {
+        readonly type: "object";
+        readonly additionalProperties: true;
+    };
+}, "body" | "subject">;
+export declare const CHAT_THREAD_READ_CONTRACT: import("./schema.js").ContractObject<{
+    readonly after: import("./schema.js").StringProperty;
+    readonly before: import("./schema.js").StringProperty;
+    readonly search: import("./schema.js").StringProperty;
+    readonly limit: {
+        type: "integer";
+        description?: string;
+        minimum?: number;
+        maximum?: number;
+        "x-clamp"?: true;
+    };
+}, never>;
+export declare const CHAT_MESSAGE_CONTRACT: import("./schema.js").ContractObject<{
+    readonly body: import("./schema.js").StringProperty;
+    readonly attachments: import("./schema.js").ArrayProperty<import("./schema.js").StringProperty>;
+    readonly mentions: import("./schema.js").ArrayProperty<import("./schema.js").StringProperty>;
+    readonly visibility: {
+        type: "string";
+        enum: readonly ("internal" | "public")[];
+        description?: string;
+    };
+    readonly idempotency_key: import("./schema.js").StringProperty;
+}, "body">;
+export declare const CHAT_THREAD_PATCH_CONTRACT: import("./schema.js").ContractObject<{
+    readonly status: {
+        type: "string";
+        enum: readonly ("done" | "snoozed" | "todo")[];
+        description?: string;
+    };
+    readonly waiting_for_customer: import("./schema.js").BooleanProperty;
+    readonly snoozed_until: {
+        oneOf: [import("./schema.js").StringProperty, import("./schema.js").NullProperty];
+        description?: string;
+    };
+    readonly assignee_email: {
+        oneOf: [import("./schema.js").StringProperty, import("./schema.js").NullProperty];
+        description?: string;
+    };
+    readonly priority: {
+        type: "string";
+        enum: readonly ("high" | "low" | "normal" | "urgent")[];
+        description?: string;
+    };
+    readonly agent: {
+        oneOf: [import("./schema.js").ContractObject<{
+            readonly id: import("./schema.js").StringProperty;
+            readonly name: import("./schema.js").StringProperty;
+            readonly stage: {
+                type: "string";
+                enum: readonly ("awaiting_release" | "completed" | "fixing" | "investigating" | "needs_human" | "testing")[];
+                description?: string;
+            };
+            readonly summary: {
+                oneOf: [import("./schema.js").StringProperty, import("./schema.js").NullProperty];
+                description?: string;
+            };
+            readonly session_url: {
+                oneOf: [import("./schema.js").StringProperty, import("./schema.js").NullProperty];
+                description?: string;
+            };
+        }, "id" | "name" | "stage">, import("./schema.js").NullProperty];
+        description?: string;
+    };
+    readonly release: import("./schema.js").ContractObject<{
+        readonly fix_sha: {
+            oneOf: [import("./schema.js").StringProperty, import("./schema.js").NullProperty];
+            description?: string;
+        };
+        readonly pr_url: {
+            oneOf: [import("./schema.js").StringProperty, import("./schema.js").NullProperty];
+            description?: string;
+        };
+        readonly required_roles: import("./schema.js").ArrayProperty<import("./schema.js").StringProperty>;
+    }, "fix_sha" | "pr_url" | "required_roles">;
+}, never>;
+export declare const CHAT_ADMIN_READ_CONTRACT: import("./schema.js").ContractObject<{
+    readonly search: import("./schema.js").StringProperty;
+    readonly status: {
+        type: "string";
+        enum: readonly ("done" | "snoozed" | "todo")[];
+        description?: string;
+    };
+    readonly priority: {
+        type: "string";
+        enum: readonly ("high" | "low" | "normal" | "urgent")[];
+        description?: string;
+    };
+    readonly assignee: import("./schema.js").StringProperty;
+    readonly agent_stage: {
+        type: "string";
+        enum: readonly ("awaiting_release" | "completed" | "fixing" | "investigating" | "needs_human" | "testing" | "unassigned")[];
+        description?: string;
+    };
+    readonly release: {
+        type: "string";
+        enum: readonly ("dev" | "none" | "prod")[];
+        description?: string;
+    };
+}, never>;
+export declare const CHAT_FILE_UPLOAD_CONTRACT: import("./schema.js").ContractObject<{
+    readonly name: import("./schema.js").StringProperty;
+    readonly content_type: import("./schema.js").StringProperty;
+    readonly data_base64: import("./schema.js").StringProperty;
+}, "content_type" | "data_base64" | "name">;

package/node_modules/@oxygen/shared/dist/contracts/native-chat.js

@@ -0,0 +1,35 @@
+import { arr, bool, enumOf, int, nullable, obj, str } from "./schema.js";
+const text = () => str();
+export const CHAT_STATUS = ["todo", "snoozed", "done"];
+export const CHAT_PRIORITY = ["urgent", "high", "normal", "low"];
+export const CHAT_AGENT_STAGE = ["investigating", "fixing", "testing", "awaiting_release", "needs_human", "completed"];
+export const CHAT_RELEASE_STATUS = ["none", "dev", "prod"];
+export const CHAT_CHANNEL_READ_CONTRACT = obj({ search: text() });
+export const CHAT_THREAD_CREATE_CONTRACT = obj({
+    subject: str({ minLength: 1 }), body: str({ minLength: 1, maxLength: 20_000 }),
+    idempotency_key: text(), context: { type: "object", additionalProperties: true },
+}, { required: ["subject", "body"] });
+export const CHAT_THREAD_READ_CONTRACT = obj({
+    after: text(), before: text(), search: text(), limit: int({ minimum: 1, maximum: 100 }),
+});
+export const CHAT_MESSAGE_CONTRACT = obj({
+    body: str({ maxLength: 20_000 }), attachments: arr(text()), mentions: arr(text()),
+    visibility: enumOf(["public", "internal"], { description: "Public replies are customer-visible; internal notes require staff." }),
+    idempotency_key: text(),
+}, { required: ["body"] });
+export const CHAT_THREAD_PATCH_CONTRACT = obj({
+    status: enumOf(CHAT_STATUS), waiting_for_customer: bool(), snoozed_until: nullable(text()),
+    assignee_email: nullable(text()), priority: enumOf(CHAT_PRIORITY),
+    agent: nullable(obj({
+        id: str({ minLength: 1 }), name: str({ minLength: 1 }), stage: enumOf(CHAT_AGENT_STAGE),
+        summary: nullable(text()), session_url: nullable(text()),
+    }, { required: ["id", "name", "stage"] })),
+    release: obj({ fix_sha: nullable(text()), pr_url: nullable(text()), required_roles: arr(text()) }),
+});
+export const CHAT_ADMIN_READ_CONTRACT = obj({
+    search: text(), status: enumOf(CHAT_STATUS), priority: enumOf(CHAT_PRIORITY),
+    assignee: text(), agent_stage: enumOf(["unassigned", ...CHAT_AGENT_STAGE]), release: enumOf(CHAT_RELEASE_STATUS),
+});
+export const CHAT_FILE_UPLOAD_CONTRACT = obj({
+    name: str({ minLength: 1 }), content_type: str({ minLength: 1 }), data_base64: str({ minLength: 1 }),
+}, { required: ["name", "content_type", "data_base64"] });

package/node_modules/@oxygen/shared/dist/contracts/sender-limits.d.ts

@@ -28,6 +28,15 @@ export declare const SENDER_WARMUP_CONTRACT: import("./schema.js").ContractObjec
 }, never>;
 export declare const LINKEDIN_WARMUP_PRESETS: readonly ["conservative", "standard", "fast"];
 export declare const SENDER_LIMITS_PATCH_CONTRACT: import("./schema.js").ContractObject<{
+    readonly publishing_approval: import("./schema.js").ContractObject<{
+        readonly mode: {
+            type: "string";
+            enum: readonly ("owner" | "workspace")[];
+            description?: string;
+        };
+        readonly owner_user_id: import("./schema.js").StringProperty;
+        readonly delegate_user_ids: import("./schema.js").ArrayProperty<import("./schema.js").StringProperty>;
+    }, "mode">;
     readonly limits: import("./schema.js").ContractObject<Record<"action_spacing_jitter_seconds" | "api_ingest_reads_per_day" | "api_reads_per_day" | "comments_per_day" | "endorsements_per_day" | "follows_per_day" | "inmails_per_day" | "inmails_per_month" | "interactive_min_spacing_seconds" | "interactive_sends_per_hour" | "interactive_spacing_jitter_seconds" | "invites_per_day" | "invites_per_week" | "likes_per_day" | "messages_ingest_reads_per_day" | "messages_per_day" | "messages_reads_per_day" | "min_action_spacing_seconds" | "network_backfill_reads_per_day" | "network_delta_reads_per_day" | "posts_per_day" | "profile_lookups_per_day" | "profile_views_per_day" | "relations_ingest_reads_per_day" | "relations_reads_per_day" | "sales_nav_search_results_per_day" | "searches_per_day" | "total_actions_per_day" | "total_reads_per_day" | "withdrawals_per_day", {
         type: "integer";
         description?: string;

package/node_modules/@oxygen/shared/dist/contracts/sender-limits.js

@@ -57,6 +57,11 @@ export const SENDER_WARMUP_CONTRACT = obj({
 });
 export const LINKEDIN_WARMUP_PRESETS = ["conservative", "standard", "fast"];
 export const SENDER_LIMITS_PATCH_CONTRACT = obj({
+    publishing_approval: obj({
+        mode: enumOf(["workspace", "owner"]),
+        owner_user_id: str({ description: "Workspace user UUID; required for owner mode." }),
+        delegate_user_ids: arr(str(), { maxItems: 50, description: "Workspace user UUIDs." }),
+    }, { required: ["mode"], description: "Admin sets initial owner; only owner manages delegates/policy. Free." }),
     limits: SENDER_LIMITS_CONTRACT,
     working_hours: SENDER_WORKING_HOURS_CONTRACT,
     warmup: SENDER_WARMUP_CONTRACT,
@@ -82,7 +87,7 @@ export const SENDER_LIMITS_SET_OPERATION = {
     mcp: {
         name: "oxygen_senders_limits_set",
         title: "Oxygen: Set LinkedIn Account Limits",
-        description: "Updates per-account daily limits for sends (invites/messages/InMails) AND reads (relations lists, message history, searches, profile views), working hours, and the warm-up ramp (enable/disable/anchor). Values are clamped to hard maximums; above the caution levels restriction risk rises. LinkedIn actions run only inside working hours.",
+        description: "Update account send/read caps, working hours, warm-up or profile approvals. Limits clamp to hard maxima; above caution levels restriction risk rises. Actions obey working hours.",
         pack: "deliverability",
     },
     mutates: true,