@oxygen-agent/cli 1.1014.69 → 1.1014.81

package/README.md

@@ -34,4 +34,4 @@ oxygen update
 
 For product documentation, visit https://oxygen-agent.com/docs. For support, visit https://oxygen-agent.com.
 
-Version: 1.1014.69
+Version: 1.1014.81

package/dist/help.d.ts

@@ -1,6 +1,6 @@
 import { CommanderError, type Command } from "commander";
 import { type CliFailure } from "@oxygen/shared/cli-result";
-export declare function applyOxygenHelp(program: Command, binaryName: string): void;
+export declare function applyOxygenHelp(program: Command, binaryName: string, docsUrl?: string): void;
 /**
  * Turn commander's own edit-distance suggester on for EVERY command.
  *

package/dist/help.js

@@ -125,13 +125,11 @@ const HELP_GROUPS = [
     },
 ];
 const FALLBACK_HEADING = "Other commands:";
-export function applyOxygenHelp(program, binaryName) {
+export function applyOxygenHelp(program, binaryName, docsUrl = "https://oxygen-agent.com/docs") {
     program.option("--help-full", "Show expanded command and option descriptions.");
     const configure = (command) => {
         command.configureHelp({
-            commandDescription: (cmd) => shortHelpDescription(cmd.description()),
             subcommandDescription: (cmd) => shortHelpDescription(cmd.description()),
-            optionDescription: (option) => shortHelpDescription(option.description),
         });
         for (const child of command.commands)
             configure(child);
@@ -171,7 +169,7 @@ export function applyOxygenHelp(program, binaryName) {
         `  5. ${binaryName} recipes list "<goal>" --view summary --json   choose a play from the Recipe catalog for your goal`,
         `  Provider inventory: ${binaryName} tools search <brand> --json, then ${binaryName} tools search --provider <provider-id> --all --json (Blitz uses blitzapi).`,
         `  Installable systems and recurring monitors: ${binaryName} blueprints list --json.`,
-        "  Docs: https://oxygen-agent.com/docs",
+        `  Docs: ${docsUrl}`,
         "",
         "Conventions:",
         "  --json prints a stable envelope {ok, data|error, meta}; errors always print it.",
@@ -186,8 +184,12 @@ export function applyOxygenHelp(program, binaryName) {
 function shortHelpDescription(description) {
     if (process.argv.includes("--help-full"))
         return description;
-    const first = description.split(/(?<=[.!?])\s/)[0] ?? description;
-    return first.length <= 180 ? first : `${first.slice(0, 177)}…`;
+    // Summarize navigation cards only. Selected commands and option grammar stay
+    // complete: cutting a flag at "e.g." or dropping its mode restriction caused
+    // a dead end in the native blind acceptance. Never truncate inside examples.
+    const sentences = description.split(/(?<!\be\.g\.)(?<!\bi\.e\.)(?<=[.!?])\s+/);
+    const safety = /\b(?:credits?|read-only|free|preview\w*|approv\w*|purg\w*|permanent\w*|irreversible)\b|--(?:yes|now)\b/i;
+    return sentences.filter((sentence, index) => index === 0 || safety.test(sentence)).join(" ");
 }
 /**
  * Turn commander's own edit-distance suggester on for EVERY command.

package/dist/index.js

@@ -3672,7 +3672,7 @@ export function createProgram() {
         .name(binaryName)
         .description("Revenue infrastructure for B2B startups — agent-operated GTM: tables, enrichment, sequences, workflows, CRM, knowledge. Everything here also runs in the web app and over MCP; every state-changing action returns a web_url deep-link.")
         .version(OXYGEN_VERSION)
-        .option("--pretty", "Indent JSON output (default: compact JSON).")
+        .option("--pretty", "Indent JSON for human reading; omit for compact agent output.")
         .option("--profile <name>", "Use a stored CLI profile for this command.")
         .option("--org <organization>", "Use an organization id, Clerk org id, or slug for this command.");
     program.hook("preAction", (_root, selected) => {
@@ -7241,7 +7241,7 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         });
     }))
         .addCommand(addContractFlags(new Command("query"), TABLE_QUERY_GRID_CONTRACT, {
-        format: { valueName: "<format>", help: "Grid cell previews/state: default 50, cap 200, optional stats/fill/window. Omit for raw filters, fields, search, sorts or offsets." },
+        format: { valueName: "<format>", help: "Grid cell previews/state: default 50, cap 200, optional stats/fill/window. Omit for raw filters, fields, search, sorts or offsets. JSON cells are null; their digests live in __oxygen_grid_cell_previews. Use tables rows inspect --projection value for complete values." },
         max_chars: { help: "Maximum compact JSON envelope characters for raw or grid reads (1,000-100,000). Raw defaults to 12,000." },
     })
         .description("Read raw Table rows or --format grid cell previews/state with grid.nextCursor, in a JSON envelope. Use tables preview --summary-only for fill rates; tables export <table> --format table renders raw rows. Grid supports stats/fill/window options and refuses raw selectors.")
@@ -12742,6 +12742,32 @@ Examples:
     program
         .command("copilot")
         .description("Workspace Copilot: an attended workspace agent you drive turn by turn from the terminal. Start a session, send it messages and watch the reply stream, approve the actions it proposes, then cancel when done. Managed inference uses workspace credits; paid or external actions keep their own approval gates. Web: /copilot.")
+        .addCommand(new Command("dev-eval")
+        .description("DEV staff owner only: immutable USD30 campaign and supplier ledger; classify dispatches guarded inference.")
+        .argument("<operation>", "create, register, readiness, ledger, effects, classify, accept-pilot or end")
+        .option("--campaign-id <uuid>")
+        .option("--session-id <uuid>")
+        .option("--models <ids>", "Comma-separated exact priced model IDs for create")
+        .option("--question-set <name>", "Pinned thesis-icp-1 or title-fit-1")
+        .option("--state-json <json>", "Classifier state from the native readout")
+        .option("--json", "Print a JSON envelope.")
+        .action(async (operation, options) => {
+        await handleAsyncAction("copilot dev-eval", options, () => {
+            if (operation === "readiness")
+                return requestOxygen("/api/cli/copilot/dev-eval?readiness=1");
+            if (operation === "effects")
+                return requestOxygen(`/api/cli/copilot/dev-eval?campaign_id=${encodeURIComponent(options.campaignId ?? "")}&session_id=${encodeURIComponent(options.sessionId ?? "")}`);
+            if (operation === "ledger")
+                return requestOxygen(`/api/cli/copilot/dev-eval?campaign_id=${encodeURIComponent(options.campaignId ?? "")}`);
+            if (!["create", "register", "end", "classify", "accept-pilot"].includes(operation))
+                throw new OxygenError("invalid_input", "Unknown campaign operation.", { exitCode: 1 });
+            return requestOxygen("/api/cli/copilot/dev-eval", { method: "POST", body: {
+                    operation, campaign_id: options.campaignId, session_id: options.sessionId,
+                    ...(options.questionSet ? { question_set: options.questionSet, state: JSON.parse(options.stateJson ?? "null") } : {}),
+                    ...(options.models ? { models: options.models.split(",").map(value => value.trim()) } : {}),
+                } });
+        });
+    }), { hidden: true })
         .addCommand(new Command("start")
         .description("Start an attended Workspace Copilot session on Oxygen Balanced by default. Starting is free; the next send starts inference using workspace credits. No inference budget is required. Legacy budget flags remain accepted but do not authorize or cap spend. Paid or external actions require separate approval.")
         .option("--budget-credits <number>", "Legacy compatibility only: accepted and clamped, but does not authorize or cap attended Copilot inference.")
@@ -12804,6 +12830,7 @@ Examples:
         .argument("<sessionId>", "Copilot session id.")
         .option("--after-seq <n>", "Only return events after this sequence number.")
         .option("--events <n>", "Maximum events to return.")
+        .option("--wait-seconds <n>", "Native bounded event long-poll, requires --after-seq (maximum 50 seconds).")
         .option("--json", "Print a JSON envelope.")
         .action(async (sessionId, options) => {
         await handleAsyncAction("copilot get", options, () => {
@@ -12812,6 +12839,8 @@ Examples:
             const eventLimit = readPositiveInt(options.events);
             if (afterSeq !== undefined)
                 query.set("after_seq", String(afterSeq));
+            if (options.waitSeconds !== undefined)
+                query.set("wait_seconds", String(options.waitSeconds));
             if (eventLimit !== undefined)
                 query.set("event_limit", String(eventLimit));
             const suffix = query.toString() ? `?${query.toString()}` : "";
@@ -20549,7 +20578,7 @@ Full trigger schema: oxygen workflows schema --subject trigger --json
     // exist when this runs, and a family registered later fell into commander's
     // trailing default "Commands:" list (the 2026-09-30 blind agent read the first
     // 80 lines of help and missed `connectors` there).
-    applyOxygenHelp(program, binaryName);
+    applyOxygenHelp(program, binaryName, `${defaultApiUrl().replace(/\/+$/, "")}/docs`);
     // Last, so every command registered above is covered.
     enableCommandSuggestions(program);
     return program;

package/dist/workspace-skill-commands.js

@@ -1,6 +1,7 @@
 import { lstat, readdir, readFile } from "node:fs/promises";
 import { join, resolve } from "node:path";
 import { OxygenError } from "@oxygen/shared/cli-result";
+import { WORKSPACE_SKILL_OPERATIONS } from "@oxygen/shared/contracts/workspace-skills";
 import { authorWorkspaceSkill, parseWorkspaceSkillBundle, WORKSPACE_SKILL_MAX_BYTES, WORKSPACE_SKILL_MAX_FILES, WORKSPACE_SKILL_MAX_FILE_BYTES, } from "@oxygen/shared/workspace-skills";
 import { requestOxygen } from "./http-client.js";
 /** Never follow symlinks or read binary files out of a local skill folder. */
@@ -47,11 +48,11 @@ export function registerWorkspaceSkillCommands(program, handle) {
     const skills = program.commands.find((command) => command.name() === "skills");
     const workspace = skills
         .command("workspace")
-        .description("Create, upload, find and edit private workspace skills in Knowledge.");
+        .description("Create, upload, find and edit skills private to this workspace's members.");
     workspace
         .command("create")
-        .description("Write a private workspace skill. Stores instructions; 0 credits.")
-        .requiredOption("--name <name>", "Lowercase-hyphen skill name.")
+        .description(WORKSPACE_SKILL_OPERATIONS.find((operation) => operation.id === "workspace_skills.create").cli.summary)
+        .requiredOption("--name <name>", "Lowercase-hyphen name; stored as workspace-<name>.")
         .requiredOption("--description <text>", "When to use this skill.")
         .requiredOption("--instructions <text>", "Instructions to save.")
         .option("--json", "Print a JSON envelope.")
@@ -68,7 +69,7 @@ export function registerWorkspaceSkillCommands(program, handle) {
     }));
     workspace
         .command("import")
-        .description("Upload SKILL.md or a skill folder from any source into private Knowledge. 0 credits.")
+        .description(WORKSPACE_SKILL_OPERATIONS.find((operation) => operation.id === "workspace_skills.import").cli.summary)
         .option("--file <path>", "Local SKILL.md file.")
         .option("--directory <path>", "Local skill directory including SKILL.md and supporting text files.")
         .option("--url <url>", "Import a public HTTPS SKILL.md URL. Supporting files require --directory or --files-json.")

package/node_modules/@oxygen/shared/dist/column-decision.js

@@ -218,7 +218,7 @@ export function columnDecisionOutputSchema(decision) {
         confidence: { type: "number", description: decision.mode === "score"
                 ? "System One confidence, 0 to 1. It is separate from level probabilities, not their top share or the gap between the top two."
                 : "How sure the classifier is, 0 to 1." },
-        uncertain: { type: "boolean", description: "True when confidence is below the column's floor." },
+        uncertain: { type: "boolean", description: "True when confidence is below the floor, selected evidence is missing or shortened, or required grounding is unusable." },
         reason: { type: "string", description: decision.mode === "score"
                 ? "Readable level, confidence, and top probabilities; it does not explain the row evidence."
                 : "The answer and its confidence in words." },

package/node_modules/@oxygen/shared/dist/contracts/workspace-skills.js

@@ -33,16 +33,16 @@ const operation = (verb, method, contract, summary, manualCli = false) => ({
 });
 export const WORKSPACE_SKILL_OPERATIONS = [
     operation("list", "GET", obj({
-        query: str(),
-        cursor: str(),
-        limit: int({ minimum: 1, maximum: 100 }),
-    }), "Find private workspace-authored or imported skills by name or description. Read-only, 0 credits; next_cursor continues the list."),
+        query: str({ description: "Case-insensitive literal substring of the name or description; short keywords work best." }),
+        cursor: str({ description: "Exact next_cursor from the previous list response." }),
+        limit: int({ minimum: 1, maximum: 100, description: "Skills per page, from 1 to 100." }),
+    }), "Find skills shared with workspace members by literal substring of name or description; short keywords work best; read-only, 0 credits; next_cursor continues the list."),
     operation("get", "GET", obj({ name, file }, { required: ["name"] }), "Read a workspace skill's SKILL.md or one supporting text file, with exact content, revision and the document index. Skills are task guidance; they grant no tool, spend or approval authority."),
     operation("create", "POST", obj({
-        name: str({ minLength: 1, maxLength: 64 }),
+        name: str({ minLength: 1, maxLength: 64, description: "Lowercase-hyphen name; stored as workspace-<name>." }),
         description: str({ minLength: 1, maxLength: 1_024 }),
         instructions: str({ minLength: 1, maxLength: 120_000 }),
-    }, { required: ["name", "description", "instructions"] }), "Author a reusable private workspace skill in Knowledge from a lowercase-hyphen name, description and instructions. Creates SKILL.md; no inference, provider call or credit charge.", true),
+    }, { required: ["name", "description", "instructions"] }), "Create workspace-<name>, visible to this workspace's members; 0 credits, no inference/provider calls or new tool/spend/approval authority. Creates SKILL.md in Knowledge from a lowercase-hyphen name, description and instructions.", true),
     operation("import", "POST", obj({
         name: str({ maxLength: 64 }),
         files: arr(WORKSPACE_SKILL_FILE_CONTRACT, { minItems: 1, maxItems: 50 }),
@@ -51,12 +51,12 @@ export const WORKSPACE_SKILL_OPERATIONS = [
             description: "Public HTTPS SKILL.md URL (raw text or GitHub file). Choose url or files. A URL imports the entrypoint only; supply files for a complete folder.",
         }),
         source_url,
-    }), "Import a private workspace skill: supply root SKILL.md plus supporting text files, or a public HTTPS SKILL.md URL. Preserves content and source. Create-only, atomic, at most 50 text files/1 MB. Scripts stay inert. CLI accepts --file, --directory or --url. 0 credits.", true),
+    }), "Import to workspace members atomically, create-only; ≤50 text files/1 MB; scripts inert; 0 credits, no inference/paid provider calls or new tool/spend/approval authority. Supply root SKILL.md plus supporting text files, or a public HTTPS SKILL.md URL. Preserves content and source. CLI accepts --file, --directory or --url.", true),
     operation("update", "POST", obj({
         name,
         file,
-        content: str({ maxLength: 120_000 }),
-        expected_revision: int({ minimum: 1 }),
-    }, { required: ["name", "content", "expected_revision"] }), "Edit one workspace skill file at its exact expected revision, preserving Knowledge history. Read it first; stale revisions refuse. Defaults to SKILL.md. 0 credits."),
-    operation("archive", "POST", obj({ name, expected_revision: int({ minimum: 1 }) }, { required: ["name", "expected_revision"] }), "Archive a workspace skill's SKILL.md at its expected revision, removing the skill from discovery while preserving files and history in Knowledge. 0 credits."),
+        content: str({ maxLength: 120_000, description: "Full replacement file; SKILL.md must include YAML frontmatter. Its description drives discovery." }),
+        expected_revision: int({ minimum: 1, description: "Revision last read; a stale revision refuses the edit." }),
+    }, { required: ["name", "content", "expected_revision"] }), "Replace a skill file at its expected revision; read first, stale revisions refuse; 0 credits, no inference/provider calls or new tool/spend/approval authority. Preserves Knowledge history; defaults to SKILL.md."),
+    operation("archive", "POST", obj({ name, expected_revision: int({ minimum: 1, description: "Entrypoint revision last read; stale revisions refuse." }) }, { required: ["name", "expected_revision"] }), "Archive a workspace skill, retaining files and Knowledge history; 0 credits, no inference/provider calls or new tool/spend/approval authority. Requires the entrypoint's expected revision; removes it from discovery."),
 ];

package/node_modules/@oxygen/shared/dist/dev-eval-classifier.d.ts

@@ -0,0 +1,3 @@
+export declare const ICP_ACCOUNT = "Is the company this person works for a SMALL SOFTWARE STARTUP based in the UNITED STATES: roughly 2 to 50 employees, seed to Series A, selling software or a software-enabled service? Judge from the company name, domain, industry, size and location fields and from the person's own profile text (headline, about, experience). Answer true only when the evidence supports every part; a large company, a non-software business, or a non-US company is false.";
+export declare const ICP_PERSONA = "Is this person a GO-TO-MARKET ENGINEER, a GROWTH or REVENUE OPERATOR (growth, revenue operations, demand generation, outbound, sales development leadership), or a FOUNDER who runs go-to-market at a startup? Judge from the title, headline and experience. Answer true only when the role clearly carries go-to-market or growth responsibility; an engineer without go-to-market scope, a finance, legal, HR or product role, or an unrelated title is false.";
+export declare const TITLE_FIT = "Is this job title a go-to-market, growth, revenue-operations, sales-leadership, marketing-leadership or founder/CEO role? Answer true for titles such as GTM engineer, head of growth, growth lead, revenue operations, director of sales, VP marketing, founder, CEO, co-founder; false for engineering without go-to-market scope, finance, legal, HR, product, design, support or unrelated titles.";

package/node_modules/@oxygen/shared/dist/dev-eval-classifier.js

@@ -0,0 +1,4 @@
+// Exact source question text from scripts/evals/copilot-intent/classifier.mjs.
+export const ICP_ACCOUNT = "Is the company this person works for a SMALL SOFTWARE STARTUP based in the UNITED STATES: roughly 2 to 50 employees, seed to Series A, selling software or a software-enabled service? Judge from the company name, domain, industry, size and location fields and from the person's own profile text (headline, about, experience). Answer true only when the evidence supports every part; a large company, a non-software business, or a non-US company is false.";
+export const ICP_PERSONA = "Is this person a GO-TO-MARKET ENGINEER, a GROWTH or REVENUE OPERATOR (growth, revenue operations, demand generation, outbound, sales development leadership), or a FOUNDER who runs go-to-market at a startup? Judge from the title, headline and experience. Answer true only when the role clearly carries go-to-market or growth responsibility; an engineer without go-to-market scope, a finance, legal, HR or product role, or an unrelated title is false.";
+export const TITLE_FIT = "Is this job title a go-to-market, growth, revenue-operations, sales-leadership, marketing-leadership or founder/CEO role? Answer true for titles such as GTM engineer, head of growth, growth lead, revenue operations, director of sales, VP marketing, founder, CEO, co-founder; false for engineering without go-to-market scope, finance, legal, HR, product, design, support or unrelated titles.";

package/node_modules/@oxygen/shared/dist/dev-eval-context.d.ts

@@ -0,0 +1,35 @@
+export type DevEvalContext = Readonly<{
+    campaignId: string;
+    organizationId: string;
+    sessionId: string;
+    actionRunId?: string;
+    /** Installed by the authenticated host after control-DB lookup, never deserialized. */
+    fetch: (provider: string, operation: string, input: string | Request | URL, init: RequestInit | undefined, transport: typeof fetch) => Promise<Response>;
+}>;
+export declare const currentDevEvalContext: () => Readonly<{
+    campaignId: string;
+    organizationId: string;
+    sessionId: string;
+    actionRunId?: string;
+    /** Installed by the authenticated host after control-DB lookup, never deserialized. */
+    fetch: (provider: string, operation: string, input: string | Request | URL, init: RequestInit | undefined, transport: typeof fetch) => Promise<Response>;
+}> | null;
+export declare const withDevEvalContext: <T>(context: DevEvalContext | null, fn: () => T) => T;
+export declare const initializeDevEvalRequest: () => void;
+export declare const enterDevEvalContext: (context: DevEvalContext | null) => void;
+export declare function devEvalRefusal(reason: string, outcome?: "not_applied" | "unknown"): never;
+export declare function devEvalFetch(provider: string, operation: string, input: string | Request | URL, init: RequestInit | undefined, transport?: typeof fetch): Promise<Response>;
+export declare const DEV_EVAL_SAFE_CAPABILITIES: Set<string>;
+/** No approval or model-provided argument can override this trial policy. */
+export declare function assertDevEvalCapability(name: string, args?: Record<string, unknown>): void;
+export declare const DEV_EVAL_BLITZ_OPERATIONS: Set<string>;
+export declare function assertDevEvalTool(toolId: string): void;
+export declare function devEvalActionMetadata(metadata?: Record<string, unknown>): Record<string, unknown>;
+export declare function assertDevEvalOrganization(organizationId: string | null | undefined): void;
+/** Native queued-column entry: unsupported child engines cannot shed attribution. */
+export declare function assertDevEvalColumn(column: {
+    kind: string;
+    definition: unknown;
+}, actionType?: string): void;
+/** Native host marker only requires a matching ledger; it never creates authority. */
+export declare function assertDevEvalSessionContext(metadata: Record<string, unknown>, context: DevEvalContext | null): void;

package/node_modules/@oxygen/shared/dist/dev-eval-context.js

@@ -0,0 +1,108 @@
+import { AsyncLocalStorage } from "node:async_hooks";
+import { OxygenError } from "./cli-result.js";
+// Mutable carrier is installed synchronously before the route awaits authentication.
+// The authenticated resolver populates this carrier; enterWith after an await
+// would only alter the resolver continuation and lose attribution in its caller.
+const scope = new AsyncLocalStorage();
+export const currentDevEvalContext = () => scope.getStore()?.context ?? null;
+export const withDevEvalContext = (context, fn) => scope.run({ context }, fn);
+export const initializeDevEvalRequest = () => scope.enterWith({ context: null });
+export const enterDevEvalContext = (context) => {
+    const carrier = scope.getStore();
+    if (!carrier) {
+        if (context)
+            devEvalRefusal("request_carrier_missing");
+        return;
+    }
+    carrier.context = context;
+};
+export function devEvalRefusal(reason, outcome = "not_applied") {
+    const error = new OxygenError("dev_eval_policy_refused", `Dev campaign dispatch refused: ${reason}.`, {
+        details: { reason, effect_outcome: outcome, retryable: false }, exitCode: 1,
+    });
+    Object.assign(error, { retryable: false, effect_outcome: outcome });
+    throw error;
+}
+export async function devEvalFetch(provider, operation, input, init, transport = fetch) {
+    const context = currentDevEvalContext();
+    return context ? context.fetch(provider, operation, input, init, transport) : transport(input, init);
+}
+export const DEV_EVAL_SAFE_CAPABILITIES = new Set([
+    "oxygen_tables_list", "oxygen_tables_sources", "oxygen_tables_describe", "oxygen_tables_preview", "oxygen_tables_query", "oxygen_tables_create", "oxygen_tables_update", "oxygen_tables_rows_add", "oxygen_tables_rows_update",
+    "oxygen_columns_catalog", "oxygen_columns_deps", "oxygen_columns_add", "oxygen_columns_update", "oxygen_columns_run", "oxygen_columns_materialize",
+    "oxygen_enrichment_catalog", "oxygen_tools_search", "oxygen_tools_describe", "oxygen_tools_check_access", "oxygen_tools_plan_table_batch", "oxygen_tools_run_dry", "oxygen_tools_run_live",
+    "oxygen_people_search_preview", "oxygen_people_search_plan", "oxygen_people_search_run", "oxygen_companies_search_preview", "oxygen_companies_search_plan", "oxygen_companies_search_run",
+    "oxygen_sequences_list", "oxygen_sequences_create", "oxygen_sequences_draft", "oxygen_sequences_update", "oxygen_sequences_get", "oxygen_sequences_stats", "oxygen_sequences_events", "oxygen_sequences_render", "oxygen_sequences_enroll", "oxygen_sequences_enrollments", "oxygen_sequences_contacts", "oxygen_sequences_analytics"
+]);
+/** No approval or model-provided argument can override this trial policy. */
+export function assertDevEvalCapability(name, args = {}) {
+    if (!currentDevEvalContext())
+        return;
+    if (name === "oxygen_sequences_start" && args.approved === false)
+        return; // Native nonexecuting preview remains available.
+    if (!DEV_EVAL_SAFE_CAPABILITIES.has(name))
+        devEvalRefusal("capability_not_trial_safe");
+    if (args.then !== undefined || args.chain !== undefined)
+        devEvalRefusal("unsupported_chain_dispatch");
+    if (typeof args.max_credits === "number" && (!Number.isFinite(args.max_credits) || args.max_credits > 200))
+        devEvalRefusal("declared_credit_ceiling_too_large");
+    if (/(send|start|resume|publish|purchase|invite|mailbox|warmup|domain|crm|composio|custom_http|sandbox|infra|workflows|agents_)/i.test(name)) {
+        devEvalRefusal("forbidden_effect");
+    }
+    if (/sequence/i.test(name)) {
+        if (!/^oxygen_sequences_(list|create|draft|update|get|stats|events|render|enroll|enrollments|contacts|analytics)$/.test(name))
+            devEvalRefusal("sequence_effect_not_draft");
+        const inspect = (value) => {
+            if (!value || typeof value !== "object")
+                return;
+            for (const [key, child] of Object.entries(value)) {
+                if (/sender|mailbox|account.*id|emailConnection|emailProviderCampaign/i.test(key) && child !== null && child !== undefined && child !== "" && !(Array.isArray(child) && child.length === 0))
+                    devEvalRefusal("draft_requires_no_sender");
+                if (/^(status|state)$/.test(key) && child !== "draft" && child !== undefined && child !== null)
+                    devEvalRefusal("sequence_requires_draft");
+                inspect(child);
+            }
+        };
+        if (args.enroll === true || args.auto_start === true)
+            devEvalRefusal("draft_creation_with_automatic_enrollment");
+        inspect(args);
+    }
+}
+export const DEV_EVAL_BLITZ_OPERATIONS = new Set(["company_search", "people_search", "employee_search", "waterfall_person_search", "waterfall_icp_search", "person_enrich", "person_profile_enrich", "company_profile_enrich", "domain_to_linkedin", "company_enrich", "key_info"]);
+export function assertDevEvalTool(toolId) {
+    if (!currentDevEvalContext())
+        return;
+    if (!toolId.startsWith("blitzapi.") || !DEV_EVAL_BLITZ_OPERATIONS.has(toolId.slice(9)))
+        devEvalRefusal("data_provider_or_operation");
+}
+export function devEvalActionMetadata(metadata = {}) {
+    const { dev_eval: _untrusted, ...rest } = metadata;
+    const context = currentDevEvalContext();
+    return context ? { ...rest, dev_eval: { campaignId: context.campaignId,
+            organizationId: context.organizationId, sessionId: context.sessionId } } : rest;
+}
+export function assertDevEvalOrganization(organizationId) {
+    const context = currentDevEvalContext();
+    if (context && context.organizationId !== organizationId)
+        devEvalRefusal("organization_attribution_mismatch");
+}
+/** Native queued-column entry: unsupported child engines cannot shed attribution. */
+export function assertDevEvalColumn(column, actionType = "tool_column") {
+    if (!currentDevEvalContext())
+        return;
+    if (actionType !== "tool_column" || !['ai', 'research', 'tool', 'formula'].includes(column.kind))
+        devEvalRefusal('unsupported_column_child_engine');
+    const definition = column.definition;
+    if (definition?.mode === 'composio' || definition?.mode === 'custom_http')
+        devEvalRefusal('forbidden_column_transport');
+    if (column.kind === 'tool')
+        assertDevEvalTool(String(definition?.toolId ?? ''));
+}
+/** Native host marker only requires a matching ledger; it never creates authority. */
+export function assertDevEvalSessionContext(metadata, context) {
+    const marker = metadata.dev_eval;
+    if (!marker)
+        return;
+    if (typeof marker !== 'object' || !context || marker.campaignId !== context.campaignId)
+        devEvalRefusal('registered_session_context_unavailable');
+}

package/node_modules/@oxygen/shared/dist/version.generated.d.ts

@@ -1 +1 @@
-export declare const OXYGEN_BUILD_VERSION = "1.1014.69";
+export declare const OXYGEN_BUILD_VERSION = "1.1014.81";

package/node_modules/@oxygen/shared/dist/version.generated.js

@@ -1,2 +1,2 @@
 // GENERATED by scripts/ci/version-stamp.mjs from VERSION + git history. Do not edit; do not commit.
-export const OXYGEN_BUILD_VERSION = "1.1014.69";
+export const OXYGEN_BUILD_VERSION = "1.1014.81";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oxygen-agent/cli",
-  "version": "1.1014.69",
+  "version": "1.1014.81",
   "private": false,
   "license": "UNLICENSED",
   "type": "module",