@oxygen-agent/cli 1.1014.1600 → 1.1014.1763

package/node_modules/@oxygen/shared/dist/contracts/clay-migration.js

@@ -1,17 +1,35 @@
-import { arr, enumOf, int, obj, str } from "./schema.js";
+import { arr, bool, enumOf, int, obj, str } from "./schema.js";
 export const CLAY_MIGRATION_ACTIONS = ["connect", "status", "discover", "read", "transfer", "checkpoint", "report", "disconnect"];
 export const CLAY_RESOURCE_TYPES = ["workspace", "folder", "workbook", "table", "audience", "workflow", "function", "claygent", "knowledge", "schedule", "campaign"];
 export const CLAY_RESOURCE_DISPOSITIONS = ["pending", "copied", "rebuilt", "needs_decision", "unsupported", "inaccessible", "excluded", "failed"];
+const FULL_READ_SECTIONS = {
+    table: ["metadata", "columns", "rows", "row"], audience: ["metadata", "fields", "record_ids", "records"],
+    workflow: ["metadata", "graph"], campaign: ["metadata", "sequence"],
+};
+export const CLAY_GLOBAL_AUDIENCE_SCOPES = {
+    "global-people": { entity_type: "people", global: true },
+    "global-companies": { entity_type: "companies", global: true },
+    "global-deals": { entity_type: "deals", global: true },
+    "global-archived-people": { entity_type: "people", global: true, archived: true },
+    "global-archived-companies": { entity_type: "companies", global: true, archived: true },
+    "global-archived-deals": { entity_type: "deals", global: true, archived: true },
+};
+export function clayGlobalAudienceScope(resourceId) {
+    return Object.hasOwn(CLAY_GLOBAL_AUDIENCE_SCOPES, resourceId) ? CLAY_GLOBAL_AUDIENCE_SCOPES[resourceId] : null;
+}
 export const CLAY_MIGRATION_CONTRACT = obj({
     action: enumOf(CLAY_MIGRATION_ACTIONS),
     migration_id: str({ minLength: 1, maxLength: 200 }),
     source_workspace_id: str({ minLength: 1, maxLength: 200 }),
     resource_type: enumOf(CLAY_RESOURCE_TYPES),
-    resource_id: str({ minLength: 1, maxLength: 200 }),
-    section: enumOf(["metadata", "columns", "rows", "graph", "fields", "record_ids", "records", "sequence"]),
-    path: str({ minLength: 1, maxLength: 1000, description: "Dotted path or JSON pointer into source configuration, e.g. data.0.settings." }),
+    resource_id: str({ minLength: 1, maxLength: 256 }),
+    row_id: str({ minLength: 1, maxLength: 200, pattern: "^[a-zA-Z0-9][a-zA-Z0-9_-]*$", description: "Source row ID for table read section=row; retains structured cell fields separately from displayed values." }),
+    section: enumOf(["metadata", "columns", "rows", "row", "graph", "fields", "record_ids", "records", "sequence"]),
+    full: bool({ description: "Export one entire adapter response (8 MiB data + 1 MiB envelope); config credential redaction applies. No path/text projection. Discover omits derived resources; use report for dispositions/targets." }),
+    path: str({ minLength: 1, maxLength: 1000, description: "Dotted path or JSON pointer into a source response, e.g. cells.f_1.fields." }),
     text_offset: int({ minimum: 0, maximum: 8388608, description: "Continue a large scalar read at next_text_offset." }),
     entity_type: enumOf(["people", "companies", "deals"]),
+    archived: bool({ description: "Read archived Audience IDs instead of the default scope; only read section=record_ids. Transfer scope is pinned by resource_id." }),
     record_ids: arr(int({ minimum: 1 }), { minItems: 1, maxItems: 100 }),
     cursor: str({ maxLength: 4000 }),
     limit: int({ minimum: 1, maximum: 100 }),
@@ -44,17 +62,53 @@ export function clayMigrationInputIssues(args) {
     }
     if (args.action === "checkpoint")
         requireField("disposition");
+    if (args.full !== undefined && !["read", "discover"].includes(String(args.action)))
+        issues.push({ path: "full", message: "full is only available for read or discover." });
+    if (args.full === true) {
+        if (args.action === "discover") {
+            requireField("resource_type");
+            for (const key of ["section", "resource_id", "record_ids"]) {
+                if (args[key] !== undefined)
+                    issues.push({ path: key, message: `${key} is unavailable for a complete catalog response; use read for an individual resource section.` });
+            }
+        }
+        const sections = Object.hasOwn(FULL_READ_SECTIONS, String(args.resource_type)) ? FULL_READ_SECTIONS[args.resource_type] : ["metadata"];
+        if (args.action === "read" && !sections.includes(String(args.section ?? "metadata"))) {
+            issues.push({ path: "section", message: "This resource does not expose that section for complete export." });
+        }
+        if (args.entity_type !== undefined && args.resource_type !== "audience")
+            issues.push({ path: "entity_type", message: "entity_type only identifies Audience source responses." });
+        for (const key of ["path", "text_offset"]) {
+            if (args[key] !== undefined)
+                issues.push({ path: key, message: `${key} cannot be combined with full; export the entire response or inspect a projection.` });
+        }
+    }
     if (args.section === "records") {
         requireField("entity_type");
         requireField("record_ids");
     }
+    if (args.archived !== undefined && !(args.action === "read" && args.resource_type === "audience" && args.section === "record_ids")) {
+        issues.push({ path: "archived", message: "archived is only available for Audience read section=record_ids; transfer scope is bound to its discovered resource." });
+    }
+    const rowRead = args.action === "read" && args.resource_type === "table" && args.section === "row";
+    if (args.section === "row" && !rowRead)
+        issues.push({ path: "section", message: "section=row requires action=read and resource_type=table." });
+    if (rowRead) {
+        requireField("row_id");
+        for (const key of ["cursor", "limit", "entity_type", "record_ids", "target_table", "mapping", "source_cells_column", "source_row_id_column", "disposition", "target_kind", "target_id", "notes"]) {
+            if (args[key] !== undefined)
+                issues.push({ path: key, message: `${key} is unavailable for a single row read.` });
+        }
+    }
+    else if (args.row_id !== undefined)
+        issues.push({ path: "row_id", message: "row_id is only available for table read section=row." });
     return issues;
 }
 export const CLAY_MIGRATION_OPERATION = {
     id: "clay.migration", route: "/api/cli/migrations/clay", method: "POST",
     contract: CLAY_MIGRATION_CONTRACT, inputCheck: clayMigrationInputIssues,
     generated: { cli: false, mcp: false },
-    cli: { path: ["clay", "migration"], summary: "Migrate a Clay workspace into Oxygen: connect, discover source configuration, inspect bounded samples, transfer table and Audience rows, checkpoint native rebuilds and reconcile coverage. Creates no paid runs or active schedules." },
-    mcp: { name: "oxygen_clay_migration", title: "Oxygen: Migrate from Clay", description: "Connect to Clay with browser sign-in, discover resources, read source configuration and samples, transfer table and Audience rows to existing Oxygen tables, checkpoint rebuilds and report coverage. Use native Oxygen tools to create targets and rebuild behavior. Follow cursors; report unsupported or inaccessible resources. Never activates schedules or paid runs.", pack: "integrations", annotations: { openWorldHint: true, destructiveHint: false, idempotentHint: false } },
+    cli: { path: ["clay", "migration"], summary: "Migrate a Clay workspace into Oxygen: connect, discover configuration, inspect samples or export complete responses, transfer table and Audience rows, checkpoint native rebuilds and reconcile coverage. Creates no paid runs or active schedules. Complete exports (--full): 8 MiB data + 1 MiB envelope. Full discovery omits derived resources; report retains dispositions and targets." },
+    mcp: { name: "oxygen_clay_migration", title: "Oxygen: Migrate from Clay", description: "Connect to Clay with browser sign-in, discover resources, inspect or export complete source responses, transfer table and Audience rows to existing Oxygen tables, checkpoint rebuilds and report coverage. Use native Oxygen tools to create targets and rebuild behavior. Follow cursors; report unsupported or inaccessible resources. Never activates schedules or paid runs. Full exports: 8 MiB data + 1 MiB envelope; discover omits derived resources, report retains dispositions and targets.", pack: "integrations", annotations: { openWorldHint: true, destructiveHint: false, idempotentHint: false } },
     mutates: true, spends: false,
 };

package/node_modules/@oxygen/shared/dist/contracts/copilot-attachment-read.d.ts

@@ -0,0 +1,24 @@
+export declare const COPILOT_ATTACHMENT_READ_CONTRACT: import("./schema.js").ContractObject<{
+    readonly offset: {
+        type: "integer";
+        description?: string;
+        minimum?: number;
+        maximum?: number;
+        "x-clamp"?: true;
+    };
+    readonly limit: {
+        type: "integer";
+        description?: string;
+        minimum?: number;
+        maximum?: number;
+        "x-clamp"?: true;
+    };
+    readonly version: import("./schema.js").StringProperty;
+    readonly max_chars: {
+        type: "integer";
+        description?: string;
+        minimum?: number;
+        maximum?: number;
+        "x-clamp"?: true;
+    };
+}, never>;

package/node_modules/@oxygen/shared/dist/contracts/copilot-attachment-read.js

@@ -0,0 +1,7 @@
+import { int, obj, str } from "./schema.js";
+export const COPILOT_ATTACHMENT_READ_CONTRACT = obj({
+    offset: int({ minimum: 0, maximum: 512 * 1024 * 1024, description: "Byte offset; default 0. Resume at next_offset." }),
+    limit: int({ minimum: 1, maximum: 2048, description: "Original bytes requested; default 2048. Context bounds may return fewer." }),
+    version: str({ minLength: 64, maxLength: 64, description: "Opaque file revision returned by the first read; required when resuming." }),
+    max_chars: int({ minimum: 1024, maximum: 40_000, description: "Complete serialized byte-window size." }),
+});

package/node_modules/@oxygen/shared/dist/contracts/customer-operations.js

@@ -36,8 +36,9 @@ export const CUSTOMER_OPERATIONS = [
     operation("sequences.standby.get", "/api/cli/sequences/{sequence}/standby", "GET", "sequences standby get", "oxygen_sequences_standby_get", "sequences", "Read automatic mailbox replacement policy, ready reserve and replacements for a campaign."),
     operation("sequences.standby.set", "/api/cli/sequences/{sequence}/standby", "PATCH", "sequences standby set", "oxygen_sequences_standby_set", "sequences", "Enable or disable automatic replacement after bounce protection pauses a mailbox. Preview first; apply with approved and returned plan. Shared reserves may change sender identity for uncontacted leads. Contacted leads keep their original inbox and hold follow-ups. 0 credits.", { enabled: bool(), approved: bool(), plan: text() }, ["enabled"]),
     operation("chat.channel", "/api/cli/chat", "GET", "chat channel", "oxygen_chat_channel", "workspace", "Dev only: read or initialize this workspace's native support channel, persistent threads, unread counts and members; optional search matches messages.", {}, [], { contract: CHAT_CHANNEL_READ_CONTRACT, mutates: true }),
+    operation("chat.threads.list", "/api/cli/chat/threads", "GET", "chat threads list", "oxygen_chat_threads_list", "workspace", "Dev only: list up to 100 recently updated support threads in this workspace. Search retained subjects and visible messages; initialized=false means no channel. Never creates a channel or marks messages read.", {}, [], { contract: CHAT_CHANNEL_READ_CONTRACT }),
     operation("chat.threads.create", "/api/cli/chat/threads", "POST", "chat threads create", "oxygen_chat_thread_create", "workspace", "Dev only: create a persistent native support thread; subject and body are customer-visible. No Plain or Slack transport.", {}, [], { contract: CHAT_THREAD_CREATE_CONTRACT }),
-    operation("chat.threads.get", "/api/cli/chat/threads/{thread_id}", "GET", "chat threads get", "oxygen_chat_thread_get", "workspace", "Dev only: read a native support thread, messages, members and release progress. Continue message history with the returned cursor.", {}, [], { contract: CHAT_THREAD_READ_CONTRACT }),
+    operation("chat.threads.get", "/api/cli/chat/threads/{thread_id}", "GET", "chat threads get", "oxygen_chat_thread_get", "workspace", "Dev only: read a native support thread, messages, members and release progress (none: no verified deployment, dev: verified on dev, prod: verified in production; stale means recheck). Continue message history with the returned cursor.", {}, [], { contract: CHAT_THREAD_READ_CONTRACT }),
     operation("chat.threads.reply", "/api/cli/chat/threads/{thread_id}/messages", "POST", "chat threads reply", "oxygen_chat_thread_reply", "workspace", "Dev only: reply in a native support thread with uploaded attachment IDs and member mentions. Public by default; internal notes require staff.", {}, [], { contract: CHAT_MESSAGE_CONTRACT }),
     operation("chat.threads.update", "/api/cli/chat/threads/{thread_id}", "PATCH", "chat threads update", "oxygen_chat_thread_update", "workspace", "Staff-only. Dev only: update native support status, assignment, urgency, fixing-agent progress or fix evidence; release status is verified separately.", {}, [], { contract: CHAT_THREAD_PATCH_CONTRACT }),
     operation("chat.threads.read", "/api/cli/chat/threads/{thread_id}/read", "POST", "chat threads read", "oxygen_chat_thread_read", "workspace", "Dev only: mark a native support thread read through the viewed cursor; omit cursor to mark all currently visible messages.", { cursor: text() }, [], { bodyRequired: true }),

package/node_modules/@oxygen/shared/dist/contracts/teammates.js

@@ -136,7 +136,12 @@ export const TEAMMATE_OPERATIONS = [
         make_admin: GROUP_PEOPLE("People in it to make admins, by workspace email."),
         remove_admin: GROUP_PEOPLE("Admins to make members again, by workspace email; a group keeps at least one admin."),
     }),
-    teammateGroupOperation("teammate_groups.message", "group_message", "POST", "/{group_id}/messages", "Send a message in a group chat. The Oxygents it @mentions answer, in order; with no mention, the Oxygents it is for answer, or, in a group of only you, whoever answered last. A message that @mentions only people goes to them. In a group with other people, each answer waits for the one before it, and paid or external actions ask whoever sent the message. Each answer is a turn billed from workspace credits.", { message: str({ minLength: 1, maxLength: 16000 }) }, ["message"], true),
+    teammateGroupOperation("teammate_groups.message", "group_message", "POST", "/{group_id}/messages", "Send a message and uploaded files in a group chat. group_id is its Copilot session id: upload with oxygen copilot attach <group_id> <path>, inspect files with copilot attachments (oxygen_copilot_attachments), then bind attachment_ids here; read messages with copilot get (oxygen_copilot_get). The Oxygents it @mentions answer in order; otherwise those it is for answer, or whoever answered last in a group of only you. A mention of only people goes to them. Answers wait for earlier ones and are billed from workspace credits; paid or external actions ask the sender.", {
+        message: str({ minLength: 1, maxLength: 16000 }),
+        attachment_ids: arr(str({ pattern: "^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$" }), {
+            description: "File UUIDs uploaded by you to this group session and ready to send. Omit for text only.",
+        }),
+    }, ["message"], true),
     teammateGroupOperation("teammate_groups.read", "group_read", "POST", "/{group_id}/read", "Mark a group chat read up to its newest turn, or up to turn_index.", { turn_index: int({ minimum: 0 }) }),
     teammateGroupOperation("teammate_groups.leave", "group_leave", "POST", "/{group_id}/leave", "Leave a group chat: it disappears for you and its Oxygents stop answering your waiting messages. If you were its last admin, whoever has been in it longest becomes one; if you were the last person, it ends."),
     teammateGroupOperation("teammate_groups.end", "group_end", "POST", "/{group_id}/end", "End a group chat for everyone in it, as one of its admins: nobody answers in it again, and its messages stay readable."),

package/node_modules/@oxygen/shared/dist/copilot-journeys.generated.js

@@ -1,5 +1,5 @@
 // GENERATED by apps/web/scripts/generate-copilot-journeys.ts from the recipe
-// catalog (`journey:` blocks in apps/web/src/lib/recipes/plays).
+// catalog (`journey:` blocks in apps/web/src/lib/agent-skill-plays.ts).
 // Do not edit by hand — run `npm run skills:metadata -w @oxygen/web`.
 export const COPILOT_JOURNEYS_GENERATED = [
     {

package/node_modules/@oxygen/shared/dist/copilot-playbooks.generated.d.ts

@@ -1,7 +1,7 @@
 export declare const COPILOT_PLAYBOOKS_GENERATED: readonly [{
     readonly slug: "icp-to-account-map";
     readonly title: "TAM sourcing";
-    readonly prompt: "Find about 25 companies that look like our best customers, grade how well each one fits and why, and show me which kinds fit best. If I share a list, portfolio page or event list, grade that instead.";
+    readonly prompt: "Find about 25 companies that fit who we sell to, grade how well each one fits and why, and show me which kinds fit best. If I share a list, portfolio page or event list, grade that instead.";
 }, {
     readonly slug: "founder-posting-system";
     readonly title: "LinkedIn content strategy";

package/node_modules/@oxygen/shared/dist/copilot-playbooks.generated.js

@@ -1,12 +1,12 @@
 // GENERATED by apps/web/scripts/generate-copilot-playbooks.ts from the play
 // catalog (featured plays: `featured_order`, `label`, `prompt` in
-// apps/web/src/lib/recipes/plays).
+// apps/web/src/lib/agent-skill-plays.ts).
 // Do not edit by hand — run `npm run skills:metadata -w @oxygen/web`.
 export const COPILOT_PLAYBOOKS_GENERATED = [
     {
         slug: "icp-to-account-map",
         title: "TAM sourcing",
-        prompt: "Find about 25 companies that look like our best customers, grade how well each one fits and why, and show me which kinds fit best. If I share a list, portfolio page or event list, grade that instead.",
+        prompt: "Find about 25 companies that fit who we sell to, grade how well each one fits and why, and show me which kinds fit best. If I share a list, portfolio page or event list, grade that instead.",
     },
     {
         slug: "founder-posting-system",

package/node_modules/@oxygen/shared/dist/email-brand-kit.d.ts

@@ -0,0 +1,108 @@
+/**
+ * The workspace's newsletter brand kit (tenant table ox_sequencer.email_brand_kit,
+ * migration 0559): the logo, colours, width and font newsletters are designed
+ * with, the company name and postal address every bulk email carries in its
+ * footer, social links and the preference page's title.
+ *
+ * One parser serves the `/api/cli/sequencer/brand-kit` route (web, CLI, MCP):
+ * a patch names only the fields it changes, `null` clears one (a colour, width
+ * or font falls back to its default). Pure and browser-safe.
+ */
+export declare const EMAIL_BRAND_FONT_FAMILIES: readonly ["system", "georgia", "arial", "helvetica", "verdana"];
+export type EmailBrandFontFamily = typeof EMAIL_BRAND_FONT_FAMILIES[number];
+export declare const EMAIL_BRAND_FONT_LABELS: Record<EmailBrandFontFamily, string>;
+/** The CSS font stack each allowlisted family renders with in an email. */
+export declare const EMAIL_BRAND_FONT_STACKS: Record<EmailBrandFontFamily, string>;
+export declare const EMAIL_BRAND_SOCIAL_NETWORKS: readonly ["website", "linkedin", "x", "facebook", "instagram", "youtube", "tiktok", "github"];
+export type EmailBrandSocialNetwork = typeof EMAIL_BRAND_SOCIAL_NETWORKS[number];
+export declare const EMAIL_BRAND_COLOR_FIELDS: readonly ["background_color", "content_background_color", "text_color", "link_color", "button_color", "button_text_color"];
+export type EmailBrandColorField = typeof EMAIL_BRAND_COLOR_FIELDS[number];
+export declare const EMAIL_BRAND_LIMITS: {
+    readonly containerWidthMin: 480;
+    readonly containerWidthMax: 800;
+    readonly logoWidthMin: 40;
+    readonly logoWidthMax: 600;
+    readonly urlMax: 2048;
+    readonly companyNameMax: 120;
+    readonly postalAddressMax: 500;
+    readonly socialLinksMax: 10;
+    readonly preferencePageTitleMax: 120;
+    readonly preferencePageDescriptionMax: 500;
+};
+export type EmailBrandSocialLink = {
+    network: EmailBrandSocialNetwork;
+    url: string;
+};
+/** The kit as every surface reads it (snake_case wire shape), defaults applied. */
+export type EmailBrandKit = {
+    logo_url: string | null;
+    logo_width: number | null;
+    background_color: string;
+    content_background_color: string;
+    text_color: string;
+    link_color: string;
+    button_color: string;
+    button_text_color: string;
+    container_width: number;
+    font_family: EmailBrandFontFamily;
+    company_name: string | null;
+    postal_address: string | null;
+    social_links: EmailBrandSocialLink[];
+    preference_page_title: string | null;
+    preference_page_description: string | null;
+    updated_by: string | null;
+    updated_at: string | null;
+};
+export declare const DEFAULT_EMAIL_BRAND_COLORS: Record<EmailBrandColorField, string>;
+export declare const DEFAULT_EMAIL_BRAND_KIT: EmailBrandKit;
+/** Every editable field; a patch names a subset. */
+export declare const EMAIL_BRAND_KIT_FIELDS: readonly ["logo_url", "logo_width", "background_color", "content_background_color", "text_color", "link_color", "button_color", "button_text_color", "container_width", "font_family", "company_name", "postal_address", "social_links", "preference_page_title", "preference_page_description"];
+export type EmailBrandKitField = typeof EMAIL_BRAND_KIT_FIELDS[number];
+/** A validated change: a present key is written, `null` clears it. */
+export type EmailBrandKitPatch = {
+    logo_url?: string | null;
+    logo_width?: number | null;
+    background_color?: string | null;
+    content_background_color?: string | null;
+    text_color?: string | null;
+    link_color?: string | null;
+    button_color?: string | null;
+    button_text_color?: string | null;
+    container_width?: number | null;
+    font_family?: EmailBrandFontFamily | null;
+    company_name?: string | null;
+    postal_address?: string | null;
+    social_links?: EmailBrandSocialLink[] | null;
+    preference_page_title?: string | null;
+    preference_page_description?: string | null;
+};
+export declare class EmailBrandKitInputError extends Error {
+    readonly field: string;
+    readonly code = "invalid_brand_kit";
+    constructor(field: string, message: string);
+}
+/** `#rrggbb` lowercase from `#rrggbb`, `rrggbb` or `#rgb`; throws on anything else. */
+export declare function normalizeBrandColor(value: unknown, field: string): string;
+/** An absolute https URL; email clients block or warn on plain http images and links. */
+export declare function normalizeBrandUrl(value: unknown, field: string): string;
+export declare function isEmailBrandFontFamily(value: unknown): value is EmailBrandFontFamily;
+/**
+ * Validate a brand kit change. Only the named fields are returned; `null` (or
+ * an empty string for text) clears one. Throws `EmailBrandKitInputError` naming
+ * the field, and refuses a body that names no field.
+ */
+export declare function parseEmailBrandKitPatch(body: Record<string, unknown>): EmailBrandKitPatch;
+/** A newsletter may go live only once the kit carries a postal address. */
+export declare function brandKitHasPostalAddress(kit: Pick<EmailBrandKit, "postal_address"> | null | undefined): boolean;
+/** The email editor's global styles, as the composer and its preview consume them. */
+export type EmailBrandGlobalStyles = {
+    background: string;
+    contentBackground: string;
+    text: string;
+    link: string;
+    button: string;
+    buttonText: string;
+    containerWidth: number;
+    fontFamily: string;
+};
+export declare function brandKitGlobalStyles(kit: Partial<EmailBrandKit> | null | undefined): EmailBrandGlobalStyles;

package/node_modules/@oxygen/shared/dist/email-brand-kit.js

@@ -0,0 +1,214 @@
+/**
+ * The workspace's newsletter brand kit (tenant table ox_sequencer.email_brand_kit,
+ * migration 0559): the logo, colours, width and font newsletters are designed
+ * with, the company name and postal address every bulk email carries in its
+ * footer, social links and the preference page's title.
+ *
+ * One parser serves the `/api/cli/sequencer/brand-kit` route (web, CLI, MCP):
+ * a patch names only the fields it changes, `null` clears one (a colour, width
+ * or font falls back to its default). Pure and browser-safe.
+ */
+export const EMAIL_BRAND_FONT_FAMILIES = ["system", "georgia", "arial", "helvetica", "verdana"];
+export const EMAIL_BRAND_FONT_LABELS = {
+    system: "System sans",
+    georgia: "Georgia",
+    arial: "Arial",
+    helvetica: "Helvetica",
+    verdana: "Verdana",
+};
+/** The CSS font stack each allowlisted family renders with in an email. */
+export const EMAIL_BRAND_FONT_STACKS = {
+    system: "-apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif",
+    georgia: "Georgia, 'Times New Roman', Times, serif",
+    arial: "Arial, Helvetica, sans-serif",
+    helvetica: "Helvetica, Arial, sans-serif",
+    verdana: "Verdana, Geneva, sans-serif",
+};
+export const EMAIL_BRAND_SOCIAL_NETWORKS = [
+    "website", "linkedin", "x", "facebook", "instagram", "youtube", "tiktok", "github",
+];
+export const EMAIL_BRAND_COLOR_FIELDS = [
+    "background_color", "content_background_color", "text_color", "link_color", "button_color", "button_text_color",
+];
+export const EMAIL_BRAND_LIMITS = {
+    containerWidthMin: 480,
+    containerWidthMax: 800,
+    logoWidthMin: 40,
+    logoWidthMax: 600,
+    urlMax: 2048,
+    companyNameMax: 120,
+    postalAddressMax: 500,
+    socialLinksMax: 10,
+    preferencePageTitleMax: 120,
+    preferencePageDescriptionMax: 500,
+};
+export const DEFAULT_EMAIL_BRAND_COLORS = {
+    background_color: "#f4f4f5",
+    content_background_color: "#ffffff",
+    text_color: "#18181b",
+    link_color: "#2563eb",
+    button_color: "#18181b",
+    button_text_color: "#ffffff",
+};
+export const DEFAULT_EMAIL_BRAND_KIT = {
+    logo_url: null,
+    logo_width: null,
+    ...DEFAULT_EMAIL_BRAND_COLORS,
+    container_width: 600,
+    font_family: "system",
+    company_name: null,
+    postal_address: null,
+    social_links: [],
+    preference_page_title: null,
+    preference_page_description: null,
+    updated_by: null,
+    updated_at: null,
+};
+/** Every editable field; a patch names a subset. */
+export const EMAIL_BRAND_KIT_FIELDS = [
+    "logo_url", "logo_width", ...EMAIL_BRAND_COLOR_FIELDS, "container_width", "font_family", "company_name",
+    "postal_address", "social_links", "preference_page_title", "preference_page_description",
+];
+export class EmailBrandKitInputError extends Error {
+    field;
+    code = "invalid_brand_kit";
+    constructor(field, message) {
+        super(message);
+        this.field = field;
+        this.name = "EmailBrandKitInputError";
+    }
+}
+const HEX_RE = /^#?([0-9a-f]{6}|[0-9a-f]{3})$/i;
+/** `#rrggbb` lowercase from `#rrggbb`, `rrggbb` or `#rgb`; throws on anything else. */
+export function normalizeBrandColor(value, field) {
+    const raw = typeof value === "string" ? value.trim() : "";
+    const match = HEX_RE.exec(raw);
+    if (!match)
+        throw new EmailBrandKitInputError(field, `${field} must be a hex colour such as #1a2b3c.`);
+    const hex = match[1].toLowerCase();
+    return `#${hex.length === 3 ? hex.split("").map((char) => char + char).join("") : hex}`;
+}
+/** An absolute https URL; email clients block or warn on plain http images and links. */
+export function normalizeBrandUrl(value, field) {
+    const raw = typeof value === "string" ? value.trim() : "";
+    let parsed = null;
+    try {
+        parsed = raw ? new URL(raw) : null;
+    }
+    catch {
+        parsed = null;
+    }
+    if (!parsed || parsed.protocol !== "https:" || !parsed.hostname || raw.length > EMAIL_BRAND_LIMITS.urlMax) {
+        throw new EmailBrandKitInputError(field, `${field} must be an https:// URL.`);
+    }
+    return parsed.toString();
+}
+function boundedInteger(value, field, min, max) {
+    if (typeof value !== "number" || !Number.isInteger(value) || value < min || value > max) {
+        throw new EmailBrandKitInputError(field, `${field} must be a whole number from ${min} to ${max}.`);
+    }
+    return value;
+}
+function boundedText(value, field, max, options = {}) {
+    if (typeof value !== "string")
+        throw new EmailBrandKitInputError(field, `${field} must be text.`);
+    const lines = value.replace(/\r\n?/g, "\n").split("\n").map((line) => line.replace(/\s+/g, " ").trim());
+    const text = options.multiline ? lines.filter(Boolean).join("\n") : lines.filter(Boolean).join(" ");
+    if (!text)
+        return null;
+    if (text.length > max)
+        throw new EmailBrandKitInputError(field, `${field} must be at most ${max} characters.`);
+    return text;
+}
+export function isEmailBrandFontFamily(value) {
+    return typeof value === "string" && EMAIL_BRAND_FONT_FAMILIES.includes(value);
+}
+function parseSocialLinks(value) {
+    if (!Array.isArray(value))
+        throw new EmailBrandKitInputError("social_links", "social_links must be a list of { network, url }.");
+    if (value.length > EMAIL_BRAND_LIMITS.socialLinksMax) {
+        throw new EmailBrandKitInputError("social_links", `At most ${EMAIL_BRAND_LIMITS.socialLinksMax} social links.`);
+    }
+    return value.map((entry, index) => {
+        const record = entry && typeof entry === "object" && !Array.isArray(entry) ? entry : {};
+        const network = typeof record.network === "string" ? record.network.trim().toLowerCase() : "";
+        if (!EMAIL_BRAND_SOCIAL_NETWORKS.includes(network)) {
+            throw new EmailBrandKitInputError(`social_links[${index}].network`, `network must be one of ${EMAIL_BRAND_SOCIAL_NETWORKS.join(", ")}.`);
+        }
+        return { network: network, url: normalizeBrandUrl(record.url, `social_links[${index}].url`) };
+    });
+}
+/**
+ * Validate a brand kit change. Only the named fields are returned; `null` (or
+ * an empty string for text) clears one. Throws `EmailBrandKitInputError` naming
+ * the field, and refuses a body that names no field.
+ */
+export function parseEmailBrandKitPatch(body) {
+    const patch = {};
+    const has = (field) => Object.hasOwn(body, field) && body[field] !== undefined;
+    const cleared = (field) => body[field] === null || body[field] === "";
+    if (has("logo_url"))
+        patch.logo_url = cleared("logo_url") ? null : normalizeBrandUrl(body.logo_url, "logo_url");
+    if (has("logo_width")) {
+        patch.logo_width = cleared("logo_width") ? null
+            : boundedInteger(body.logo_width, "logo_width", EMAIL_BRAND_LIMITS.logoWidthMin, EMAIL_BRAND_LIMITS.logoWidthMax);
+    }
+    for (const field of EMAIL_BRAND_COLOR_FIELDS) {
+        if (has(field))
+            patch[field] = cleared(field) ? null : normalizeBrandColor(body[field], field);
+    }
+    if (has("container_width")) {
+        patch.container_width = cleared("container_width") ? null
+            : boundedInteger(body.container_width, "container_width", EMAIL_BRAND_LIMITS.containerWidthMin, EMAIL_BRAND_LIMITS.containerWidthMax);
+    }
+    if (has("font_family")) {
+        const font = typeof body.font_family === "string" ? body.font_family.trim().toLowerCase() : body.font_family;
+        if (cleared("font_family"))
+            patch.font_family = null;
+        else if (isEmailBrandFontFamily(font))
+            patch.font_family = font;
+        else
+            throw new EmailBrandKitInputError("font_family", `font_family must be one of ${EMAIL_BRAND_FONT_FAMILIES.join(", ")}.`);
+    }
+    if (has("company_name")) {
+        patch.company_name = body.company_name === null ? null : boundedText(body.company_name, "company_name", EMAIL_BRAND_LIMITS.companyNameMax);
+    }
+    if (has("postal_address")) {
+        patch.postal_address = body.postal_address === null ? null
+            : boundedText(body.postal_address, "postal_address", EMAIL_BRAND_LIMITS.postalAddressMax, { multiline: true });
+    }
+    if (has("social_links"))
+        patch.social_links = body.social_links === null ? null : parseSocialLinks(body.social_links);
+    if (has("preference_page_title")) {
+        patch.preference_page_title = body.preference_page_title === null ? null
+            : boundedText(body.preference_page_title, "preference_page_title", EMAIL_BRAND_LIMITS.preferencePageTitleMax);
+    }
+    if (has("preference_page_description")) {
+        patch.preference_page_description = body.preference_page_description === null ? null
+            : boundedText(body.preference_page_description, "preference_page_description", EMAIL_BRAND_LIMITS.preferencePageDescriptionMax, { multiline: true });
+    }
+    if (Object.keys(patch).length === 0) {
+        throw new EmailBrandKitInputError("brand_kit", `Pass at least one of ${EMAIL_BRAND_KIT_FIELDS.join(", ")}.`);
+    }
+    return patch;
+}
+/** A newsletter may go live only once the kit carries a postal address. */
+export function brandKitHasPostalAddress(kit) {
+    return typeof kit?.postal_address === "string" && kit.postal_address.trim().length > 0;
+}
+export function brandKitGlobalStyles(kit) {
+    const merged = { ...DEFAULT_EMAIL_BRAND_KIT, ...stripNullish(kit ?? {}) };
+    return {
+        background: merged.background_color,
+        contentBackground: merged.content_background_color,
+        text: merged.text_color,
+        link: merged.link_color,
+        button: merged.button_color,
+        buttonText: merged.button_text_color,
+        containerWidth: merged.container_width,
+        fontFamily: EMAIL_BRAND_FONT_STACKS[merged.font_family] ?? EMAIL_BRAND_FONT_STACKS.system,
+    };
+}
+function stripNullish(value) {
+    return Object.fromEntries(Object.entries(value).filter(([, entry]) => entry !== null && entry !== undefined));
+}

package/node_modules/@oxygen/shared/dist/email-classification-scope.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Which inbound email conversations of a mailbox the paid inbox classifier
+ * triages (Tim, 2026-10-21, T-316). `replies`: Sequence threads and threads the
+ * workspace wrote in; every other conversation (newsletters, notifications,
+ * cold pitches) stays in Unibox unclassified and costs nothing. `all`: every
+ * inbound conversation.
+ *
+ * Without a choice, a Google mailbox the customer added themselves defaults to
+ * `replies`: most of its mail is not outreach, and its poll reads Sent mail, so
+ * a thread they wrote in is recognisable. Every other mailbox defaults to `all`:
+ * Microsoft's poll reads only the Inbox, and a reply to a campaign sent from
+ * another platform has no outbound message here to be recognised by.
+ * tenant-db's `emailClassificationInScopeSql` is the SQL twin of this default.
+ */
+export declare const EMAIL_CLASSIFICATION_SCOPES: readonly ["replies", "all"];
+export type EmailClassificationScope = (typeof EMAIL_CLASSIFICATION_SCOPES)[number];
+/** Mailbox metadata key holding an explicit choice. */
+export declare const EMAIL_CLASSIFICATION_SCOPE_KEY = "classification_scope";
+/** The `mailbox_origin` stamp of a mailbox the customer added themselves. */
+export declare const SELF_ADDED_MAILBOX_ORIGIN = "manual";
+/** The provider whose self-added mailboxes default to `replies`. */
+export declare const SELF_ADDED_REPLIES_PROVIDER = "google";
+export type EmailClassificationScopeView = {
+    scope: EmailClassificationScope;
+    /** `setting` when someone chose it; `default` when it follows the mailbox kind. */
+    source: "setting" | "default";
+};
+export declare function isEmailClassificationScope(value: unknown): value is EmailClassificationScope;
+/** True for a connected full-mail inbox: its analysis is included in the monthly connection, so no scope applies. */
+export declare function isMailboxSyncMetadata(metadata: Record<string, unknown> | null | undefined): boolean;
+/** The scope a mailbox's inbound mail is classified under, or null for a connected full-mail inbox. */
+export declare function resolveEmailClassificationScope(mailbox: {
+    provider: string;
+    metadata: Record<string, unknown> | null | undefined;
+}): EmailClassificationScopeView | null;

package/node_modules/@oxygen/shared/dist/email-classification-scope.js

@@ -0,0 +1,40 @@
+/**
+ * Which inbound email conversations of a mailbox the paid inbox classifier
+ * triages (Tim, 2026-10-21, T-316). `replies`: Sequence threads and threads the
+ * workspace wrote in; every other conversation (newsletters, notifications,
+ * cold pitches) stays in Unibox unclassified and costs nothing. `all`: every
+ * inbound conversation.
+ *
+ * Without a choice, a Google mailbox the customer added themselves defaults to
+ * `replies`: most of its mail is not outreach, and its poll reads Sent mail, so
+ * a thread they wrote in is recognisable. Every other mailbox defaults to `all`:
+ * Microsoft's poll reads only the Inbox, and a reply to a campaign sent from
+ * another platform has no outbound message here to be recognised by.
+ * tenant-db's `emailClassificationInScopeSql` is the SQL twin of this default.
+ */
+export const EMAIL_CLASSIFICATION_SCOPES = ["replies", "all"];
+/** Mailbox metadata key holding an explicit choice. */
+export const EMAIL_CLASSIFICATION_SCOPE_KEY = "classification_scope";
+/** The `mailbox_origin` stamp of a mailbox the customer added themselves. */
+export const SELF_ADDED_MAILBOX_ORIGIN = "manual";
+/** The provider whose self-added mailboxes default to `replies`. */
+export const SELF_ADDED_REPLIES_PROVIDER = "google";
+export function isEmailClassificationScope(value) {
+    return typeof value === "string" && EMAIL_CLASSIFICATION_SCOPES.includes(value);
+}
+/** True for a connected full-mail inbox: its analysis is included in the monthly connection, so no scope applies. */
+export function isMailboxSyncMetadata(metadata) {
+    return metadata != null && Object.hasOwn(metadata, "mailbox_sync");
+}
+/** The scope a mailbox's inbound mail is classified under, or null for a connected full-mail inbox. */
+export function resolveEmailClassificationScope(mailbox) {
+    const { metadata } = mailbox;
+    if (isMailboxSyncMetadata(metadata))
+        return null;
+    const stored = metadata?.[EMAIL_CLASSIFICATION_SCOPE_KEY];
+    if (isEmailClassificationScope(stored))
+        return { scope: stored, source: "setting" };
+    const selfAddedGoogle = metadata?.mailbox_origin === SELF_ADDED_MAILBOX_ORIGIN
+        && mailbox.provider === SELF_ADDED_REPLIES_PROVIDER;
+    return { scope: selfAddedGoogle ? "replies" : "all", source: "default" };
+}

package/node_modules/@oxygen/shared/dist/email-delivery.d.ts

@@ -25,6 +25,14 @@ export type SendingDomainEmailDelivery = {
 export type SequenceEmailDelivery = {
     mode: "inboxes";
 } | SendingDomainEmailDelivery;
+/**
+ * The opt-out line of a cold email sent as plain text, when its Sequence turned the
+ * visible unsubscribe on without writing its own `reply_to_stop_text`. Plain text
+ * shows a line, never the signed URL (Plain T-317). Any reply stops the lead's
+ * enrollment in that Sequence, and opt-out wording ("not interested") puts the
+ * address on do-not-contact unless the workspace lowered `email_optout_phrase`.
+ */
+export declare const DEFAULT_PLAIN_TEXT_OPT_OUT = "Not interested? Just reply and I won't follow up.";
 export declare class EmailDeliverySettingError extends Error {
     readonly field: string;
     constructor(field: string, message: string);
@@ -120,6 +128,8 @@ export declare function sendingDomainRemainingCapacity(input: {
 export declare function bulkSendIntervalMs(maxSendRate: number): number;
 /** Estimated AWS cost of a send count, USD rounded up to the cent. */
 export declare function estimateSesCostUsd(sends: number): number;
+/** Credits for newsletter emails sent through a sending domain (`send.bulk_email`, 5x AWS). */
+export declare function bulkEmailCredits(emails: number): number;
 export declare const RELEASE_SLICE_FRACTION = 0.05;
 export declare const RELEASE_SLICE_MINIMUM = 50;
 export declare const RELEASE_SLICE_HOLD_MS: number;