@oxygen-agent/cli 1.1014.620 → 1.1014.773

package/node_modules/@oxygen/shared/dist/contracts/customer-operations.js

@@ -39,7 +39,7 @@ export const CUSTOMER_OPERATIONS = [
     operation("members.client_role", "/api/cli/collab/members/role", "POST", "approvals client grant", "oxygen_members_client_role_set", "collaboration", "Set or clear the restricted client overlay; admin only. May read pending Clerk invitations; sends no invitation. Free.", { email: text(), role: nullable(enumOf(["client"])) }, ["email", "role"], { ...mcpOnly, annotations: { openWorldHint: true } }),
     operation("members.workspace_role", "/api/cli/collab/members/workspace-role", "POST", "orgs member-role", "oxygen_members_workspace_role_set", "collaboration", "Change a member's workspace role in Clerk; admin only, with self-role and last-administrator protection. Free.", { email: text(), role: enumOf(["admin", "member"]) }, ["email", "role"], { ...mcpOnly, annotations: { openWorldHint: true } }),
     operation("copilot.sessions.list", "/api/cli/copilot/sessions", "GET", "copilot list", "oxygen_copilot_sessions_list", "agents", "List attended Copilot sessions in this workspace.", COPILOT_SESSIONS_LIST_CONTRACT.properties, [], mcpOnly),
-    operation("copilot.sessions.update", "/api/cli/copilot/sessions/{session_id}", "PATCH", "copilot policy set", "oxygen_copilot_session_update", "agents", "Set an attended Copilot session's approval policy. Paid auto-approval is explicit standing authorization.", { auto_approve_policy: enumOf(["off", "paid"]) }, ["auto_approve_policy"], { spends: true }),
+    operation("copilot.sessions.update", "/api/cli/copilot/sessions/{session_id}", "PATCH", "copilot policy set", "oxygen_copilot_session_update", "agents", "Set an attended Copilot session's approval policy. `paid` (Auto-approve) is standing authorization for every action, paid and external ones included.", { auto_approve_policy: enumOf(["off", "paid"]) }, ["auto_approve_policy"], { spends: true }),
     operation("copilot.attachments.list", "/api/cli/copilot/sessions/{session_id}/attachments", "GET", "copilot attachments list", "oxygen_copilot_attachments_list", "agents", "List sent and unsent attachments in one Copilot session.", {}, []),
     operation("copilot.attachments.prepare", "/api/cli/copilot/sessions/{session_id}/attachments", "POST", "copilot attachments prepare", "oxygen_copilot_attachment_prepare", "agents", "Reserve a Copilot attachment and return its scoped upload URL; complete only after uploading the exact bytes.", { file_name: text(), content_type: text(), content_length: int({ minimum: 1 }) }, ["file_name", "content_length"]),
     operation("copilot.attachments.complete", "/api/cli/copilot/sessions/{session_id}/attachments/{attachment_id}/complete", "POST", "copilot attachments complete", "oxygen_copilot_attachment_complete", "agents", "Verify and describe an uploaded Copilot attachment in its session.", {}, []),

package/node_modules/@oxygen/shared/dist/contracts/limits-read.js

@@ -119,6 +119,7 @@ export function projectLimitsRead(data, query) {
     else if (section === "pricing") {
         selected.plan_bands = bands.map(pricingBand);
         selected.pricing_schedule = scheduleProjection(data, section);
+        selected.pricing_note = "Plan-band prices below are monthly. Full upfront yearly prices and terms: CLI billing balance --json; MCP oxygen_billing_balance (available_plans[].yearly and annual_terms).";
     }
     else
         selected[SECTION_FIELDS[section]] = data[SECTION_FIELDS[section]];

package/node_modules/@oxygen/shared/dist/contracts/teammates.js

@@ -1,7 +1,7 @@
-import { TEAMMATE_GROUP_MAX_MEMBERS, TEAMMATE_GROUP_MIN_MEMBERS, TEAMMATE_GROUP_TITLE_MAX_CHARS } from "../teammate-groups.js";
+import { TEAMMATE_GROUP_MAX_MEMBERS, TEAMMATE_GROUP_MAX_PEOPLE, TEAMMATE_GROUP_MIN_MEMBERS, TEAMMATE_GROUP_TITLE_MAX_CHARS } from "../teammate-groups.js";
 import { TEAMMATE_SLUG_PATTERN } from "../teammate-messages.js";
 import { TEAMMATE_TASK_LIMITS } from "../teammate-tasks.js";
-import { NEW_TEAMMATE_NAME, TEAMMATE_AVATAR_COLORS, TEAMMATE_AVATAR_KEYS, TEAMMATE_DESCRIPTION_MAX_CHARS, TEAMMATE_NAME_MAX_CHARS, } from "../teammates.js";
+import { NEW_TEAMMATE_NAME, TEAMMATE_AVATAR_COLORS, TEAMMATE_AVATAR_KEYS, TEAMMATE_DESCRIPTION_MAX_CHARS, TEAMMATE_NAME_MAX_CHARS, TEAMMATE_SHARE_ROLES, } from "../teammates.js";
 import { arr, bool, enumOf, int, obj, str } from "./schema.js";
 /**
  * AI teammates (ADR 0032), branded Oxygents: Agents each person talks to in one
@@ -22,9 +22,9 @@ function teammateOperation(id, verb, method, suffix, summary, fields = {}, requi
     };
 }
 /**
- * Group chats (phase 7): one person's private chat with two to six Oxygents,
- * the way Grok Bot's are. Their own route family, so a group never shadows a
- * teammate whose slug happens to read like a route word.
+ * Group chats (phase 7): a chat with up to six Oxygents and, since 2026-10-15,
+ * teammates too, the way Grok Bot's are. Their own route family, so a group
+ * never shadows a teammate whose slug happens to read like a route word.
  */
 function teammateGroupOperation(id, verb, method, suffix, summary, fields = {}, required = [], spends = false) {
     const route = `/api/cli/teammate-groups${suffix}`;
@@ -38,6 +38,7 @@ function teammateGroupOperation(id, verb, method, suffix, summary, fields = {},
     };
 }
 const GROUP_MEMBER_SLUGS = (description) => arr(str({ minLength: 2, maxLength: 49, pattern: TEAMMATE_SLUG_PATTERN }), { maxItems: TEAMMATE_GROUP_MAX_MEMBERS, description });
+const GROUP_PEOPLE = (description) => arr(str({ minLength: 3, maxLength: 320 }), { maxItems: TEAMMATE_GROUP_MAX_PEOPLE, description });
 export const TEAMMATE_PROFILE_FIELDS = {
     name: str({ minLength: 1, maxLength: TEAMMATE_NAME_MAX_CHARS, description: "What everyone calls it." }),
     description: str({
@@ -48,26 +49,43 @@ export const TEAMMATE_PROFILE_FIELDS = {
     avatar_color: enumOf([...TEAMMATE_AVATAR_COLORS], { description: "The colour of its face." }),
 };
 export const TEAMMATE_OPERATIONS = [
-    teammateOperation("teammates.list", "list", "GET", "", "List this workspace's Oxygents, the first one (is_default) on top: name, what each does, its look and your chat with each (working or waiting for you, unread, its latest words). Pinned ones follow the first; hidden ones are marked."),
+    teammateOperation("teammates.list", "list", "GET", "", "List the Oxygents you can use, the first one (is_default) on top: name, what each does, its look, what you are to it (access: owner, manager or collaborator) and your chat with each (working or waiting for you, unread, its latest words). Pinned ones follow the first; hidden ones are marked."),
     // Adding a teammate (phase 7): a custom Agent that can chat at once and run
     // on its own, under a policy that asks before any write, send or spend. As in
     // Grok Bot, it can start as just "New Bot" and learn its job in the chat.
-    teammateOperation("teammates.create", "create", "POST", "", `Add an Oxygent to the workspace, named "${NEW_TEAMMATE_NAME}" unless you name it; tell it its job in your chat with it. It can chat at once and run on its own (background tasks, routines), reading freely and asking before anything that writes, sends or spends. The whole workspace sees it; you own it. Free: adding one starts no inference.`, {
+    teammateOperation("teammates.create", "create", "POST", "", `Add an Oxygent to the workspace, named "${NEW_TEAMMATE_NAME}" unless you name it; tell it its job in your chat with it. It can chat at once and run on its own (background tasks, routines), reading freely and asking before anything that writes, sends or spends. You own it, and only you can use it until you share it. Free: adding one starts no inference.`, {
         ...TEAMMATE_PROFILE_FIELDS,
         slug: str({ minLength: 2, maxLength: 49, pattern: TEAMMATE_SLUG_PATTERN, description: "Its permanent handle in commands and links; made from the name when omitted." }),
     }),
     teammateOperation("teammates.get", "get", "GET", "/{slug}", "Read one Oxygent's profile and your ongoing private chat with it."),
-    teammateOperation("teammates.update", "update", "PATCH", "/{slug}", "Edit an Oxygent's name, what it does (description) or its look (avatar_key, avatar_color). Its instructions, tools and versions are unchanged. Free.", TEAMMATE_PROFILE_FIELDS),
+    teammateOperation("teammates.update", "update", "PATCH", "/{slug}", "Edit an Oxygent's name, what it does (description) or its look (avatar_key, avatar_color): its owner, its managers or a workspace admin. Its instructions, tools and versions are unchanged. Free.", TEAMMATE_PROFILE_FIELDS),
+    // Sharing (Tim, 2026-10-14: "make agents accessible to your team mates"), the
+    // way Grok Bot shares a Bot: everyone in the workspace, or people by email,
+    // each as a collaborator or a manager. Everyone still has a chat of their own.
+    teammateOperation("teammates.access", "access", "GET", "/{slug}/access", "Read who can use an Oxygent: its owner, what everyone in the workspace may do with it, and the people it is shared with. A collaborator chats with it in a chat of their own; a manager also changes its profile and who has access. Free."),
+    teammateOperation("teammates.share", "share", "POST", "/{slug}/access", "Share an Oxygent with teammates, or stop sharing it: with everyone in the workspace (everyone), or with people by their workspace email (add, as role; remove). Each person gets their own private chat with it; nobody reads anyone else's. Its owner, its managers or a workspace admin only; never the first Oxygent, which is everyone's. Free.", {
+        everyone: enumOf([...TEAMMATE_SHARE_ROLES, "off"], {
+            description: "What everyone in the workspace may do with it: collaborator, manager, or off (only its owner and the people it is shared with).",
+        }),
+        add: arr(str({ minLength: 3, maxLength: 320 }), { maxItems: 50, description: "People to share it with, by their workspace email." }),
+        role: enumOf([...TEAMMATE_SHARE_ROLES], {
+            description: "What the people in add become: collaborator (the default), who chats with it in a chat of their own, or manager, who also changes its profile and who has access. Adding someone already listed changes their role.",
+        }),
+        remove: arr(str({ minLength: 3, maxLength: 320 }), {
+            maxItems: 50,
+            description: "People to stop sharing it with, by their workspace email; for someone who has left the workspace, the user_id that access lists for them. Their chat with it stays, closed to them until it is shared with them again.",
+        }),
+    }),
     // Copy and delete (Tim, 2026-10-13: "CRUD actions ... through the right
     // click"; "'delete' should be 'full delete'"), as Grok Bot's Bot menu has.
-    teammateOperation("teammates.duplicate", "duplicate", "POST", "/{slug}/duplicate", `Copy an Oxygent as a new one you own, named "<name> copy" unless you name it: its job, look, instructions, skills and tool settings, but not its chats, memory or routines. Free.`, {
+    teammateOperation("teammates.duplicate", "duplicate", "POST", "/{slug}/duplicate", `Copy an Oxygent as a new one you own, named "<name> copy" unless you name it: its job, look, instructions, skills and tool settings, but not its chats, memory, routines or who it is shared with. Only you can use the copy until you share it. Free.`, {
         name: str({
             minLength: 1, maxLength: TEAMMATE_NAME_MAX_CHARS,
             description: "What everyone calls the copy. Its slug is made from the name, and a deleted Oxygent's slug stays taken, so a copy can get a numbered one (scout-2).",
         }),
     }),
-    teammateOperation("teammates.delete", "delete", "POST", "/{slug}/delete", "Delete an Oxygent for good, for everyone: its profile, every chat with it (group chats included), its routines, team memory and runs. What it made in the workspace stays. Its owner or a workspace admin only; never the first Oxygent. Preview first to see what would go, then delete with confirm set to its slug. Its slug stays taken afterwards. Free; cannot be undone.", {
-        preview: bool({ description: "Only say what would go: its chats and the people they belong to, group chats, routines, runs, attached files and team memory entries." }),
+    teammateOperation("teammates.delete", "delete", "POST", "/{slug}/delete", "Delete an Oxygent for good, for everyone: its profile, every chat with it (its group chats too, except those other people are in, which it leaves and where only its answers go), its routines, team memory and runs. What it made in the workspace stays. Its owner or a workspace admin only; never the first Oxygent. Preview first to see what would go, then delete with confirm set to its slug. Its slug stays taken afterwards. Free; cannot be undone.", {
+        preview: bool({ description: "Only say what would go: its chats and the people they belong to, group chats, the group chats with other people it would leave, routines, runs, attached files and team memory entries." }),
         confirm: str({ maxLength: 49, description: "Its slug, repeated, to delete it." }),
     }),
     teammateOperation("teammates.chat", "chat", "POST", "/{slug}/chat", "Open your ongoing private chat with an Oxygent, creating it the first time. Starts no inference."),
@@ -98,18 +116,24 @@ export const TEAMMATE_OPERATIONS = [
     teammateOperation("teammates.notes", "notes", "GET", "/{slug}/notes", "Read what an Oxygent keeps about you: private to you, read only in your own chat with it."),
     teammateOperation("teammates.notes_set", "notes_set", "POST", "/{slug}/notes", "Replace what an Oxygent keeps about you; empty clears it. Private to you.", { notes: str({ maxLength: 4000 }) }, ["notes"]),
     teammateOperation("teammates.activity", "activity", "GET", "/{slug}/activity", "List an Oxygent's recent work: its runs and the actions taken in its chats, as metadata only (no goals or messages)."),
-    teammateGroupOperation("teammate_groups.list", "groups", "GET", "", "List your group chats with Oxygents: name, members and the chat (working or waiting for you, unread, the latest words and who said them). Private to you."),
-    teammateGroupOperation("teammate_groups.create", "group_create", "POST", "", `Start a private group chat with ${TEAMMATE_GROUP_MIN_MEMBERS} to ${TEAMMATE_GROUP_MAX_MEMBERS} Oxygents (members, by slug), named name. Starts no inference: @mention a member in a message to have it answer.`, {
+    teammateGroupOperation("teammate_groups.list", "groups", "GET", "", "List the group chats you are in: name, Oxygents, people (each an admin or member) and the chat (working or waiting for you, unread, the latest words and who said them). Candidates are the teammates a new group chat could bring in."),
+    teammateGroupOperation("teammate_groups.create", "group_create", "POST", "", `Start a group chat with a name, Oxygents (members, by slug) and, if you like, teammates (people, by workspace email): ${TEAMMATE_GROUP_MIN_MEMBERS} to ${TEAMMATE_GROUP_MAX_MEMBERS} Oxygents with only you, 1 to ${TEAMMATE_GROUP_MAX_MEMBERS} with others. You are its admin. Every Oxygent must be shared with everyone in it. Starts no inference.`, {
         name: str({ minLength: 1, maxLength: TEAMMATE_GROUP_TITLE_MAX_CHARS }),
         members: GROUP_MEMBER_SLUGS("The Oxygents in it, by slug, in the order they show."),
+        people: GROUP_PEOPLE("Teammates to bring in, by their workspace email; they see the whole chat."),
     }, ["name", "members"]),
-    teammateGroupOperation("teammate_groups.get", "group", "GET", "/{group_id}", "Read one of your group chats: its name, members and the chat's state."),
-    teammateGroupOperation("teammate_groups.update", "group_update", "PATCH", "/{group_id}", `Rename a group chat, or add or remove Oxygents (by slug); it keeps ${TEAMMATE_GROUP_MIN_MEMBERS} to ${TEAMMATE_GROUP_MAX_MEMBERS}. A removed member's earlier messages stay.`, {
+    teammateGroupOperation("teammate_groups.get", "group", "GET", "/{group_id}", "Read a group chat you are in: its name, Oxygents, people and the chat's state. Its admins also see who else could be brought in (candidates)."),
+    teammateGroupOperation("teammate_groups.update", "group_update", "PATCH", "/{group_id}", `Change a group chat, as one of its admins: add or remove people (by workspace email), make them admins or members, rename it, or add or remove Oxygents (by slug). It keeps ${TEAMMATE_GROUP_MIN_MEMBERS} to ${TEAMMATE_GROUP_MAX_MEMBERS} Oxygents with only you, 1 to ${TEAMMATE_GROUP_MAX_MEMBERS} with others. Someone added sees the whole chat; removed people and Oxygents keep their earlier messages.`, {
         name: str({ minLength: 1, maxLength: TEAMMATE_GROUP_TITLE_MAX_CHARS }),
         add: GROUP_MEMBER_SLUGS("Oxygents to add, by slug."),
         remove: GROUP_MEMBER_SLUGS("Oxygents to remove, by slug."),
+        add_people: GROUP_PEOPLE("People to add, by their workspace email."),
+        remove_people: GROUP_PEOPLE("People to remove, by their workspace email; for someone who has left the workspace, the user_id the group lists for them."),
+        make_admin: GROUP_PEOPLE("People in it to make admins, by workspace email."),
+        remove_admin: GROUP_PEOPLE("Admins to make members again, by workspace email; a group keeps at least one admin."),
     }),
-    teammateGroupOperation("teammate_groups.message", "group_message", "POST", "/{group_id}/messages", "Send a message in a group chat. The first Oxygent it @mentions answers (else whoever answered last), then each other one it mentions, or one an answer brings in. Each answer is a turn billed from workspace credits; paid or external actions still need approval.", { message: str({ minLength: 1, maxLength: 16000 }) }, ["message"], true),
+    teammateGroupOperation("teammate_groups.message", "group_message", "POST", "/{group_id}/messages", "Send a message in a group chat. The Oxygents it @mentions answer, in order; with no mention, the Oxygents it is for answer, or, in a group of only you, whoever answered last. A message that @mentions only people goes to them. In a group with other people, each answer waits for the one before it, and paid or external actions ask whoever sent the message. Each answer is a turn billed from workspace credits.", { message: str({ minLength: 1, maxLength: 16000 }) }, ["message"], true),
     teammateGroupOperation("teammate_groups.read", "group_read", "POST", "/{group_id}/read", "Mark a group chat read up to its newest turn, or up to turn_index.", { turn_index: int({ minimum: 0 }) }),
-    teammateGroupOperation("teammate_groups.end", "group_end", "POST", "/{group_id}/end", "End a group chat: nobody answers in it again, and its messages stay readable."),
+    teammateGroupOperation("teammate_groups.leave", "group_leave", "POST", "/{group_id}/leave", "Leave a group chat: it disappears for you and its Oxygents stop answering your waiting messages. If you were its last admin, whoever has been in it longest becomes one; if you were the last person, it ends."),
+    teammateGroupOperation("teammate_groups.end", "group_end", "POST", "/{group_id}/end", "End a group chat for everyone in it, as one of its admins: nobody answers in it again, and its messages stay readable."),
 ];

package/node_modules/@oxygen/shared/dist/email-verification-batch.d.ts

@@ -0,0 +1,26 @@
+/**
+ * How a batch of email verifications is sized and read. `/api/cli/verify/run`
+ * and the CLI that pages a longer list through it share this, so a one-page and
+ * a many-page run can never disagree about the summary or the leading next action.
+ */
+/**
+ * Addresses one live request verifies. Each one is a paid provider call made in
+ * sequence, so the CLI sends a longer list in pages under one credit ceiling.
+ */
+export declare const EMAIL_VERIFICATION_LIVE_PAGE_MAX = 100;
+/**
+ * Addresses one `verify email` command takes. The free preview prices the whole
+ * list in one request, so this also bounds that request body.
+ */
+export declare const EMAIL_VERIFICATION_LIST_MAX = 5000;
+type VerificationRow = Readonly<Record<string, unknown>>;
+export declare function summarizeEmailVerificationResults(results: ReadonlyArray<VerificationRow>): {
+    total: number;
+    valid: number;
+    invalid: number;
+    catch_all: number;
+    unknown: number;
+};
+/** The one per-address `next_action` worth lifting to the top of the envelope. */
+export declare function leadingEmailVerificationNextAction(results: ReadonlyArray<VerificationRow>): string | null;
+export {};

package/node_modules/@oxygen/shared/dist/email-verification-batch.js

@@ -0,0 +1,55 @@
+/**
+ * How a batch of email verifications is sized and read. `/api/cli/verify/run`
+ * and the CLI that pages a longer list through it share this, so a one-page and
+ * a many-page run can never disagree about the summary or the leading next action.
+ */
+/**
+ * Addresses one live request verifies. Each one is a paid provider call made in
+ * sequence, so the CLI sends a longer list in pages under one credit ceiling.
+ */
+export const EMAIL_VERIFICATION_LIVE_PAGE_MAX = 100;
+/**
+ * Addresses one `verify email` command takes. The free preview prices the whole
+ * list in one request, so this also bounds that request body.
+ */
+export const EMAIL_VERIFICATION_LIST_MAX = 5_000;
+export function summarizeEmailVerificationResults(results) {
+    const count = (verdict) => results.filter((row) => row.verdict === verdict).length;
+    return {
+        total: results.length,
+        valid: count("valid"),
+        invalid: count("invalid"),
+        catch_all: count("catch_all"),
+        unknown: count("unknown"),
+    };
+}
+// Rank order for the batch-level next action: the condition a human has to act
+// on outranks the ones that resolve themselves on a re-run.
+const NEXT_ACTION_RANK = {
+    // A held escalation outranks everything: re-running it, as the other skips
+    // suggest, could charge the same address twice.
+    "escalation_unavailable:outcome_unknown": 7,
+    "escalation_unavailable:provider_account_held": 6,
+    "escalation_unavailable:provider_account_dry": 5,
+    "escalation_unavailable:not_configured": 4,
+    "escalation_unavailable:provider_error": 3,
+    budget_exhausted: 2,
+    not_configured: 1,
+};
+/** The one per-address `next_action` worth lifting to the top of the envelope. */
+export function leadingEmailVerificationNextAction(results) {
+    let best = null;
+    for (const row of results) {
+        const text = typeof row.next_action === "string" ? row.next_action : null;
+        if (!text)
+            continue;
+        const skipped = typeof row.escalation_skipped === "string" ? row.escalation_skipped : "";
+        const unavailable = typeof row.escalation_unavailable_reason === "string"
+            ? row.escalation_unavailable_reason
+            : null;
+        const rank = NEXT_ACTION_RANK[unavailable ? `${skipped}:${unavailable}` : skipped] ?? 0;
+        if (!best || rank > best.rank)
+            best = { rank, text };
+    }
+    return best?.text ?? null;
+}

package/node_modules/@oxygen/shared/dist/knowledge-bootstrap.d.ts

@@ -70,9 +70,9 @@ export declare const KNOWLEDGE_BOOTSTRAP_ENRICHMENT_MAX_CREDITS = 6;
  */
 export declare const KNOWLEDGE_BOOTSTRAP_SYNTHESIS_TIER: HostedAiLevel;
 /**
- * Most URLs whose text the pass may read — inside ONE `exa.contents` call, which is
- * priced per call. Raising this raises latency and prompt size, not provider spend;
- * it is a quality/latency knob, and the credit ceilings above remain the money guard.
+ * Most URLs whose text the pass may read inside ONE `exa.contents` call. Each URL
+ * is billed, so raising this raises the read ceiling as well as latency and prompt
+ * size. The credit ceilings above remain the money guard.
  */
 export declare const KNOWLEDGE_BOOTSTRAP_MAX_PAGES_READ = 5;
 /**

package/node_modules/@oxygen/shared/dist/knowledge-bootstrap.js

@@ -71,9 +71,9 @@ export const KNOWLEDGE_BOOTSTRAP_ENRICHMENT_MAX_CREDITS = 6;
  */
 export const KNOWLEDGE_BOOTSTRAP_SYNTHESIS_TIER = "medium";
 /**
- * Most URLs whose text the pass may read — inside ONE `exa.contents` call, which is
- * priced per call. Raising this raises latency and prompt size, not provider spend;
- * it is a quality/latency knob, and the credit ceilings above remain the money guard.
+ * Most URLs whose text the pass may read inside ONE `exa.contents` call. Each URL
+ * is billed, so raising this raises the read ceiling as well as latency and prompt
+ * size. The credit ceilings above remain the money guard.
  */
 export const KNOWLEDGE_BOOTSTRAP_MAX_PAGES_READ = 5;
 /**

package/node_modules/@oxygen/shared/dist/knowledge-brain-draft.d.ts

@@ -0,0 +1,70 @@
+/** The draft's centre page: the company itself. Stable, so a rerun never mints a second one. */
+export declare const KNOWLEDGE_BRAIN_DRAFT_COMPANY_SLUG = "company";
+/** What marks a page as written by the draft; the onboarding graph watches for it. */
+export declare const KNOWLEDGE_BRAIN_DRAFT_TAG = "onboarding-draft";
+/** Tags every drafted page carries. */
+export declare const KNOWLEDGE_BRAIN_DRAFT_TAGS: readonly ["agent-derived", "onboarding-draft"];
+/** The hub pages, revealed right after the company and kept at the explorer's root. */
+export declare const KNOWLEDGE_BRAIN_DRAFT_HUBS: readonly ["offers", "icp", "messaging"];
+/** Leaf-page kinds by slug prefix, in the order onboarding reveals them after the hubs. */
+export declare const KNOWLEDGE_BRAIN_DRAFT_KINDS: readonly [{
+    readonly prefix: "segment-";
+    readonly folder: "Segments";
+    readonly type: "strategy";
+    readonly tag: "segment";
+}, {
+    readonly prefix: "persona-";
+    readonly folder: "Personas";
+    readonly type: "persona";
+    readonly tag: "persona";
+}, {
+    readonly prefix: "product-";
+    readonly folder: "Products";
+    readonly type: "entity";
+    readonly tag: "product";
+}, {
+    readonly prefix: "use-case-";
+    readonly folder: "Use cases";
+    readonly type: "topic";
+    readonly tag: "use-case";
+}, {
+    readonly prefix: "pain-";
+    readonly folder: "Pains";
+    readonly type: "topic";
+    readonly tag: "pain";
+}, {
+    readonly prefix: "trigger-";
+    readonly folder: "Buying triggers";
+    readonly type: "topic";
+    readonly tag: "trigger";
+}, {
+    readonly prefix: "angle-";
+    readonly folder: "Messaging";
+    readonly type: "message_playbook";
+    readonly tag: "angle";
+}, {
+    readonly prefix: "objection-";
+    readonly folder: "Messaging";
+    readonly type: "message_playbook";
+    readonly tag: "objection";
+}, {
+    readonly prefix: "filter-";
+    readonly folder: "Search filters";
+    readonly type: "strategy";
+    readonly tag: "filter";
+}, {
+    readonly prefix: "customer-";
+    readonly folder: "Customers";
+    readonly type: "entity";
+    readonly tag: "customer";
+}, {
+    readonly prefix: "competitor-";
+    readonly folder: "Competitors";
+    readonly type: "competitor";
+    readonly tag: "competitor";
+}];
+/**
+ * Where a page falls in the reveal: the company, the hubs, then each leaf kind in turn,
+ * then any other page the workspace already holds (the research note, a seeded page).
+ */
+export declare function knowledgeBrainDraftRevealRank(slug: string): number;

package/node_modules/@oxygen/shared/dist/knowledge-brain-draft.js

@@ -0,0 +1,42 @@
+// The second-brain draft's page vocabulary (Tim, 2026-10-14/15): which pages a new
+// workspace's homepage draft writes, the folder each kind is filed in, and the order
+// onboarding's second-brain step reveals them. One browser-safe owner, so the writer
+// (@oxygen/integrations knowledge-brain-draft) and the step that draws the graph
+// (apps/web onboarding-brain) can never disagree.
+/** The draft's centre page: the company itself. Stable, so a rerun never mints a second one. */
+export const KNOWLEDGE_BRAIN_DRAFT_COMPANY_SLUG = "company";
+/** What marks a page as written by the draft; the onboarding graph watches for it. */
+export const KNOWLEDGE_BRAIN_DRAFT_TAG = "onboarding-draft";
+/** Tags every drafted page carries. */
+export const KNOWLEDGE_BRAIN_DRAFT_TAGS = ["agent-derived", KNOWLEDGE_BRAIN_DRAFT_TAG];
+/** The hub pages, revealed right after the company and kept at the explorer's root. */
+export const KNOWLEDGE_BRAIN_DRAFT_HUBS = ["offers", "icp", "messaging"];
+/** Leaf-page kinds by slug prefix, in the order onboarding reveals them after the hubs. */
+export const KNOWLEDGE_BRAIN_DRAFT_KINDS = [
+    { prefix: "segment-", folder: "Segments", type: "strategy", tag: "segment" },
+    { prefix: "persona-", folder: "Personas", type: "persona", tag: "persona" },
+    { prefix: "product-", folder: "Products", type: "entity", tag: "product" },
+    { prefix: "use-case-", folder: "Use cases", type: "topic", tag: "use-case" },
+    { prefix: "pain-", folder: "Pains", type: "topic", tag: "pain" },
+    { prefix: "trigger-", folder: "Buying triggers", type: "topic", tag: "trigger" },
+    { prefix: "angle-", folder: "Messaging", type: "message_playbook", tag: "angle" },
+    { prefix: "objection-", folder: "Messaging", type: "message_playbook", tag: "objection" },
+    { prefix: "filter-", folder: "Search filters", type: "strategy", tag: "filter" },
+    { prefix: "customer-", folder: "Customers", type: "entity", tag: "customer" },
+    { prefix: "competitor-", folder: "Competitors", type: "competitor", tag: "competitor" },
+];
+/**
+ * Where a page falls in the reveal: the company, the hubs, then each leaf kind in turn,
+ * then any other page the workspace already holds (the research note, a seeded page).
+ */
+export function knowledgeBrainDraftRevealRank(slug) {
+    if (slug === KNOWLEDGE_BRAIN_DRAFT_COMPANY_SLUG)
+        return 0;
+    const hub = KNOWLEDGE_BRAIN_DRAFT_HUBS.indexOf(slug);
+    if (hub >= 0)
+        return 1 + hub;
+    const kind = KNOWLEDGE_BRAIN_DRAFT_KINDS.findIndex((entry) => slug.startsWith(entry.prefix));
+    if (kind >= 0)
+        return 1 + KNOWLEDGE_BRAIN_DRAFT_HUBS.length + kind;
+    return 1 + KNOWLEDGE_BRAIN_DRAFT_HUBS.length + KNOWLEDGE_BRAIN_DRAFT_KINDS.length;
+}

package/node_modules/@oxygen/shared/dist/linkedin-url.d.ts

@@ -32,6 +32,14 @@ export declare function normalizeLinkedinProfileUrl(raw: string | null | undefin
  * from any other source, so it cannot serve as a LinkedIn URL identity key.
  */
 export declare function isLinkedinMemberIdHandle(handle: string | null | undefined): boolean;
+/**
+ * True for a Sales Navigator member id (`ACwAA…`). LinkedIn mints one id per
+ * product for the same person, and Unipile reports a Classic connection, chat
+ * attendee or `new_relation` under the Classic id (`ACoAA…`). A Sales Navigator
+ * id therefore never equals any id LinkedIn reports back; convert it with a
+ * profile read before keying anything on it (Plain T-282).
+ */
+export declare function isLinkedinSalesNavigatorMemberId(value: string | null | undefined): boolean;
 /**
  * Canonicalize any LinkedIn PROFILE REFERENCE a customer might put in a cell:
  * a full `/in/` URL, a scheme-less `linkedin.com/in/…`, or a BARE public handle

package/node_modules/@oxygen/shared/dist/linkedin-url.js

@@ -84,6 +84,16 @@ const LINKEDIN_MEMBER_ID_PREFIX_RE = /^AC[OoWw]/;
 export function isLinkedinMemberIdHandle(handle) {
     return typeof handle === "string" && LINKEDIN_MEMBER_ID_PREFIX_RE.test(handle.trim());
 }
+/**
+ * True for a Sales Navigator member id (`ACwAA…`). LinkedIn mints one id per
+ * product for the same person, and Unipile reports a Classic connection, chat
+ * attendee or `new_relation` under the Classic id (`ACoAA…`). A Sales Navigator
+ * id therefore never equals any id LinkedIn reports back; convert it with a
+ * profile read before keying anything on it (Plain T-282).
+ */
+export function isLinkedinSalesNavigatorMemberId(value) {
+    return typeof value === "string" && /^ACw[A-Za-z0-9_-]+$/.test(value.trim());
+}
 // LinkedIn's public identifier ("vanity slug") charset: letters, digits and
 // hyphens only, 3–100 characters, never leading with a hyphen. Deliberately
 // NARROWER than "any non-URL string" — no `.`, `@`, `_`, `:`, `/` or whitespace

package/node_modules/@oxygen/shared/dist/plan-capabilities.js

@@ -97,7 +97,7 @@ export const PLAN_GATED_CAPABILITY_COPY = {
     },
     publishing_deliver: {
         label: "Publishing a post",
-        freeAlternative: "You can draft, review, and approve posts on Free. Delivering them to a live account is what needs a plan.",
+        freeAlternative: "You can draft and review posts on Free. Approving one for delivery to a live account is what needs a plan.",
         deepLinkPath: "/publishing",
     },
     managed_email_infrastructure: {

package/node_modules/@oxygen/shared/dist/pricing-sheet.d.ts

@@ -155,7 +155,7 @@ export declare const RESEARCH_DEPTH_GROUNDING_CREDITS: {
     };
     readonly deep: {
         readonly typical: 2.4;
-        readonly reserved: 17.4;
+        readonly reserved: 22.4;
     };
 };
 /** Typical per-row totals at each depth's default tier (founder-ratified 2026-09-26). */

package/node_modules/@oxygen/shared/dist/pricing-sheet.js

@@ -147,7 +147,9 @@ export const RESEARCH_DEPTH_MODEL_CREDITS = { standard: 4.3, deep: 7.6 };
  */
 export const RESEARCH_DEPTH_GROUNDING_CREDITS = {
     standard: { typical: 1.2, reserved: 7.4 },
-    deep: { typical: 2.4, reserved: 17.4 },
+    // Each of the two site_pages calls can fetch its root plus five subpages:
+    // 6 x 0.5 credits per call, rather than one 0.5-credit page per call.
+    deep: { typical: 2.4, reserved: 22.4 },
 };
 /** Typical per-row totals at each depth's default tier (founder-ratified 2026-09-26). */
 export const RESEARCH_DEPTH_TYPICAL_ROW_CREDITS = { quick: 2.1, standard: 5.5, deep: 10 };

package/node_modules/@oxygen/shared/dist/product-doctrine.js

@@ -49,7 +49,7 @@ function rosterLines(routes) {
  * a grown or shrunk route array and watching the output follow.
  */
 export function renderOxygenProductDoctrine(routes = OXYGEN_PRIMITIVE_ROUTES) {
-    return `OXYGEN is hosted revenue infrastructure for B2B startups; OXYGEN OS has five layers. Control (CLI, MCP, web, desktop, Copilot) calls one contract, owns no state; External holds integrations. Between them, the ${routes.length} primitives, each owns its facts:
+    return `OXYGEN is the agentic GTM platform for B2B GTM teams; OXYGEN OS has five layers. Control (CLI, MCP, web, desktop, Copilot) calls one contract, owns no state; External holds integrations. Between them, the ${routes.length} primitives, each owns its facts:
 
 ${rosterLines(routes)}