@oxygen-agent/cli 1.1014.777 → 1.1014.913

package/node_modules/@oxygen/shared/dist/contracts/agent-sessions.d.ts

@@ -75,9 +75,85 @@ export declare const AGENT_SESSION_CONFIG_CONTRACT: import("./schema.js").Contra
         };
     }, "daily_credits" | "per_run_credits">;
     readonly ends_at: import("./schema.js").StringProperty;
+    readonly guided_activation: import("./schema.js").ContractObject<{
+        readonly activation_id: import("./schema.js").StringProperty;
+        readonly purpose: {
+            type: "string";
+            enum: readonly ("lead_scan" | "morning_briefing")[];
+            description?: string;
+        };
+        readonly scan_policy: import("./schema.js").ContractObject<{
+            readonly version: {
+                type: "integer";
+                description?: string;
+                minimum?: number;
+                maximum?: number;
+                "x-clamp"?: true;
+            };
+            readonly table_id: import("./schema.js").StringProperty;
+            readonly chat_id: import("./schema.js").StringProperty;
+            readonly policy_digest: import("./schema.js").StringProperty;
+            readonly revisions: import("./schema.js").ContractObject<{
+                [k: string]: import("./schema.js").StringProperty;
+            }, "audience" | "authority" | "configuration" | "copy" | "knowledge" | "recipients" | "schedule" | "sender" | "sequence">;
+            readonly sources: import("./schema.js").ArrayProperty<import("./schema.js").ContractObject<{
+                readonly source_id: import("./schema.js").StringProperty;
+                readonly config_digest: import("./schema.js").StringProperty;
+                readonly incremental_mode: {
+                    type: "string";
+                    enum: readonly ("cursor" | "watermark")[];
+                    description?: string;
+                };
+                readonly person_key_field: import("./schema.js").StringProperty;
+            }, "config_digest" | "incremental_mode" | "person_key_field" | "source_id">>;
+            readonly exclude_dnc: import("./schema.js").BooleanProperty;
+            readonly exclude_contacted: import("./schema.js").BooleanProperty;
+            readonly review_only: import("./schema.js").BooleanProperty;
+            readonly max_examined: {
+                type: "integer";
+                description?: string;
+                minimum?: number;
+                maximum?: number;
+                "x-clamp"?: true;
+            };
+            readonly max_new_leads: {
+                type: "integer";
+                description?: string;
+                minimum?: number;
+                maximum?: number;
+                "x-clamp"?: true;
+            };
+            readonly max_provider_pages: {
+                type: "integer";
+                description?: string;
+                minimum?: number;
+                maximum?: number;
+                "x-clamp"?: true;
+            };
+            readonly max_provider_credits: {
+                type: "number";
+                description?: string;
+                minimum?: number;
+                maximum?: number;
+                "x-clamp"?: true;
+            };
+            readonly max_inference_credits: {
+                type: "number";
+                description?: string;
+                minimum?: number;
+                maximum?: number;
+                "x-clamp"?: true;
+            };
+        }, "chat_id" | "exclude_contacted" | "exclude_dnc" | "max_examined" | "max_inference_credits" | "max_new_leads" | "max_provider_credits" | "max_provider_pages" | "policy_digest" | "review_only" | "revisions" | "sources" | "table_id" | "version">;
+    }, "activation_id" | "purpose">;
     readonly teammate_routine: import("./schema.js").ContractObject<{
         readonly chat_id: import("./schema.js").StringProperty;
         readonly proposal_id: import("./schema.js").StringProperty;
+        readonly report_policy: {
+            type: "string";
+            enum: readonly ("changes_only" | "periodic")[];
+            description?: string;
+        };
     }, "chat_id">;
 }, "actions" | "budget" | "events" | "goal" | "resources" | "schedule" | "template" | "title">;
 export declare const AGENT_SESSION_OPERATIONS: readonly OperationSpec[];

package/node_modules/@oxygen/shared/dist/contracts/agent-sessions.js

@@ -1,4 +1,5 @@
 import { arr, bool, enumOf, int, num, obj, str } from "./schema.js";
+import { GUIDED_ACTIVATION_SCAN_POLICY_CONTRACT } from "./guided-activation.js";
 const strings = () => arr(str({ minLength: 1 }), { maxItems: 100 });
 export const AGENT_SESSION_CONFIG_CONTRACT = obj({
     title: str({ minLength: 1, maxLength: 160 }), goal: str({ minLength: 1, maxLength: 16000 }),
@@ -8,7 +9,8 @@ export const AGENT_SESSION_CONFIG_CONTRACT = obj({
     schedule: obj({ kind: enumOf(["interval", "cron"], { description: "interval (default) wakes every interval_minutes; cron wakes at each cron time in timezone and needs no interval fields." }), interval_minutes: int({ minimum: 5, description: "Default cadence in minutes; 1440 means one day." }), min_interval_minutes: int({ minimum: 5, description: "Earliest permitted interval when the Agent requests its next check." }), max_interval_minutes: int({ minimum: 5, maximum: 525600, description: "Latest permitted interval when the Agent requests its next check." }), cron: str({ minLength: 9, maxLength: 120, description: "Five fields, e.g. \"0 9 * * 1-5\"." }), timezone: str({ minLength: 1, maxLength: 64, description: "IANA zone for cron, e.g. Europe/Berlin." }) }),
     budget: obj({ per_run_credits: num({ minimum: 0.01, maximum: 25000, description: "Credit cap for each check, including inference and paid tools. The host reserves this full cap before starting." }), daily_credits: num({ minimum: 0.01, description: "Rolling 24-hour credit cap. Settled costs count for 24 hours; unresolved costs remain held until settled." }), lifetime_credits: num({ minimum: 0.01, description: "Optional total credit cap across all checks in this session." }) }, { required: ["per_run_credits", "daily_credits"] }),
     ends_at: str({ description: "Optional ISO end time." }),
-    teammate_routine: obj({ chat_id: str({ minLength: 36, maxLength: 36 }), proposal_id: str({ minLength: 1, maxLength: 64 }) }, { required: ["chat_id"], description: "An Oxygent routine: your chat with this Agent, which its reports post into. Only you may then start, change or message it." }),
+    guided_activation: obj({ activation_id: str({ minLength: 36, maxLength: 36 }), purpose: enumOf(["lead_scan", "morning_briefing"]), scan_policy: GUIDED_ACTIVATION_SCAN_POLICY_CONTRACT }, { required: ["activation_id", "purpose"] }),
+    teammate_routine: obj({ chat_id: str({ minLength: 36, maxLength: 36 }), proposal_id: str({ minLength: 1, maxLength: 64 }), report_policy: enumOf(["changes_only", "periodic"]) }, { required: ["chat_id"], description: "An Oxygent routine: your chat with this Agent, which its reports post into. Only you may then start, change or message it." }),
 }, { required: ["title", "goal", "template", "resources", "actions", "events", "schedule", "budget"] });
 function agentSessionOperation(id, verb, method, suffix, summary, fields = {}, required = [], spends = false) {
     const route = `/api/cli/agent/{slug}/sessions${suffix}`;
@@ -29,7 +31,7 @@ export const AGENT_SESSION_OPERATIONS = [
     agentSessionOperation("agent.sessions.preview", "preview", "POST", "/{session}/preview", "Preview the exact pinned Agent version, resource scope, actions, schedule and caps. Returns the revision and approval token; starts no inference."),
     agentSessionOperation("agent.sessions.activate", "activate", "POST", "/{session}/activate", "Approve the exact preview revision and activate scoped standing authority. Starts bounded inference. A cap above default_max_credits requires separate approve_above_default=true. Later settings changes require a fresh preview.", { revision: int({ minimum: 1 }), preview_token: str({ minLength: 1 }), approved: bool(), approve_above_default: bool({ description: "Separately approve a per-run cap above the workspace's default Agent ceiling." }) }, ["revision", "preview_token", "approved"], true),
     agentSessionOperation("agent.sessions.message", "message", "POST", "/{session}/messages", "Queue durable human steering. Draft chat proposes settings for review; active chat resumes the same memory. A bounded run reserves the approved per-run cap.", { message: str({ minLength: 1, maxLength: 16000 }), idempotency_key: str({ minLength: 1, maxLength: 200 }) }, ["message", "idempotency_key"], true),
-    agentSessionOperation("agent.sessions.run", "run", "POST", "/{session}/run", "Run this active session's next check now, within its approved caps. Refused while a check runs or a cap is reached.", {}, [], true),
+    agentSessionOperation("agent.sessions.run", "run", "POST", "/{session}/run", "Run this active session's next check now. Guided routines require a separate bounded preview and approval; other sessions use existing caps. Refused while a check runs.", { approved: bool(), revision: int({ minimum: 1 }), preview_token: str({ minLength: 1, maxLength: 160 }) }, [], true),
     agentSessionOperation("agent.sessions.webhook", "webhook", "POST", "/{session}/webhook", "Create this session's webhook or rotate its secret (returned once); remove deletes it. A delivery wakes the active session within its caps; its external writes then ask first.", { remove: bool({ description: "Delete the webhook; its URL stops accepting deliveries." }) }),
     agentSessionOperation("agent.sessions.pause", "pause", "POST", "/{session}/pause", "Pause this ongoing session, retaining conversation and run history."),
     agentSessionOperation("agent.sessions.resume", "resume", "POST", "/{session}/resume", "Resume this ongoing session. Requires unchanged approved settings.", {}, [], true),

package/node_modules/@oxygen/shared/dist/contracts/customer-operations.js

@@ -72,8 +72,8 @@ export const CUSTOMER_OPERATIONS = [
     operation("limits.provider.get", "/api/cli/limits/provider", "GET", "limits provider list", "oxygen_provider_limits_list", "billing", "Read provider request limits and BYOK warning defaults. MCP defaults to bounded summary pages; follow paging.next_offset with the same filter. HTTP/CLI omit pagination for the full legacy list. 0 credits.", {}, [], { contract: providerLimitListContract, generated: { cli: false, mcp: false } }),
     operation("limits.provider.set", "/api/cli/limits/provider", "POST", "limits provider set", "oxygen_provider_limits_set", "billing", "Set an enforced provider request limit; admin or owner only. Approve the exact provider, operation and window: raising a cap may permit more provider use. 0 credits.", {}, [], { ...mcpOnly, contract: providerLimitUpdateContract }),
     operation("limits.provider.delete", "/api/cli/limits/provider", "DELETE", "limits provider delete", "oxygen_provider_limits_delete", "billing", "Clear one provider request-limit override; admin or owner only. Approve the exact selector. Other operation overrides remain; the provider returns to its defaults, whose BYOK threshold may be observe-only. 0 credits.", {}, [], { ...mcpOnly, contract: providerLimitSelectorContract, queryFields: ["provider", "operation"] }),
-    operation("mailboxes.emailguard.auto_enroll.get", "/api/cli/mailboxes/emailguard/auto-enroll", "GET", "mailboxes emailguard auto-enroll", "oxygen_mailboxes_emailguard_auto_enroll_get", "deliverability", "Read the workspace's automatic monitoring enrollment grant and last sweep.", {}, [], mcpOnly),
-    operation("mailboxes.emailguard.auto_enroll.set", "/api/cli/mailboxes/emailguard/auto-enroll", "POST", "mailboxes emailguard auto-enroll", "oxygen_mailboxes_emailguard_auto_enroll_set", "deliverability", "Preview, arm or disarm automatic mailbox monitoring. Arming recurring spend requires approved=true and max_credits_per_cycle.", { enabled: bool(), approved: bool(), max_credits_per_cycle: num({ minimum: 0 }), run: bool(), dry_run: bool() }, [], { ...mcpOnly, spends: true }),
+    operation("mailboxes.emailguard.auto_enroll.get", "/api/cli/mailboxes/emailguard/auto-enroll", "GET", "mailboxes deliverability auto-enroll", "oxygen_mailboxes_deliverability_auto_enroll_get", "deliverability", "Read the workspace's automatic monitoring enrollment grant and last sweep.", {}, [], mcpOnly),
+    operation("mailboxes.emailguard.auto_enroll.set", "/api/cli/mailboxes/emailguard/auto-enroll", "POST", "mailboxes deliverability auto-enroll", "oxygen_mailboxes_deliverability_auto_enroll_set", "deliverability", "Preview, arm or disarm automatic mailbox monitoring. Arming recurring spend requires approved=true and max_credits_per_cycle.", { enabled: bool(), approved: bool(), max_credits_per_cycle: num({ minimum: 0 }), run: bool(), dry_run: bool() }, [], { ...mcpOnly, spends: true }),
     operation("mailboxes.warmup_profiles.get", "/api/cli/mailboxes/warmup-profile", "GET", "mailboxes warmup profile", "oxygen_mailboxes_warmup_profiles", "deliverability", "Read available OXYGEN Warm-up profiles and current bindings.", {}, [], mcpOnly),
     operation("mailboxes.warmup_profiles.set", "/api/cli/mailboxes/warmup-profile", "POST", "mailboxes warmup profile", "oxygen_mailboxes_warmup_profile_set", "deliverability", "Preview or apply an OXYGEN Warm-up profile to exact mailboxes or domains; approved=true applies the reviewed scope.", { profile: { oneOf: [text(), json, { type: "null" }] }, budget: nullable(json), domains: list(), mailboxes: list(), all: bool(), approved: bool() }, [], mcpOnly),
     operation("managed_inboxes.avatars.prepare", "/api/cli/managed-inboxes/avatars", "POST", "managed-inboxes avatars prepare", "oxygen_managed_inbox_avatar_prepare", "deliverability", "Prepare a scoped mailbox profile-picture upload; confirm the stored bytes before using its URL.", { content_type: enumOf(["image/png", "image/jpeg", "image/webp"]), content_length: int({ minimum: 1 }) }, ["content_length"]),

package/node_modules/@oxygen/shared/dist/contracts/guided-activation.d.ts

@@ -0,0 +1,177 @@
+export declare const GUIDED_ACTIVATION_REVISIONS_CONTRACT: import("./schema.js").ContractObject<{
+    [k: string]: import("./schema.js").StringProperty;
+}, "audience" | "authority" | "configuration" | "copy" | "knowledge" | "recipients" | "schedule" | "sender" | "sequence">;
+export declare const GUIDED_ACTIVATION_SCAN_POLICY_CONTRACT: import("./schema.js").ContractObject<{
+    readonly version: {
+        type: "integer";
+        description?: string;
+        minimum?: number;
+        maximum?: number;
+        "x-clamp"?: true;
+    };
+    readonly table_id: import("./schema.js").StringProperty;
+    readonly chat_id: import("./schema.js").StringProperty;
+    readonly policy_digest: import("./schema.js").StringProperty;
+    readonly revisions: import("./schema.js").ContractObject<{
+        [k: string]: import("./schema.js").StringProperty;
+    }, "audience" | "authority" | "configuration" | "copy" | "knowledge" | "recipients" | "schedule" | "sender" | "sequence">;
+    readonly sources: import("./schema.js").ArrayProperty<import("./schema.js").ContractObject<{
+        readonly source_id: import("./schema.js").StringProperty;
+        readonly config_digest: import("./schema.js").StringProperty;
+        readonly incremental_mode: {
+            type: "string";
+            enum: readonly ("cursor" | "watermark")[];
+            description?: string;
+        };
+        readonly person_key_field: import("./schema.js").StringProperty;
+    }, "config_digest" | "incremental_mode" | "person_key_field" | "source_id">>;
+    readonly exclude_dnc: import("./schema.js").BooleanProperty;
+    readonly exclude_contacted: import("./schema.js").BooleanProperty;
+    readonly review_only: import("./schema.js").BooleanProperty;
+    readonly max_examined: {
+        type: "integer";
+        description?: string;
+        minimum?: number;
+        maximum?: number;
+        "x-clamp"?: true;
+    };
+    readonly max_new_leads: {
+        type: "integer";
+        description?: string;
+        minimum?: number;
+        maximum?: number;
+        "x-clamp"?: true;
+    };
+    readonly max_provider_pages: {
+        type: "integer";
+        description?: string;
+        minimum?: number;
+        maximum?: number;
+        "x-clamp"?: true;
+    };
+    readonly max_provider_credits: {
+        type: "number";
+        description?: string;
+        minimum?: number;
+        maximum?: number;
+        "x-clamp"?: true;
+    };
+    readonly max_inference_credits: {
+        type: "number";
+        description?: string;
+        minimum?: number;
+        maximum?: number;
+        "x-clamp"?: true;
+    };
+}, "chat_id" | "exclude_contacted" | "exclude_dnc" | "max_examined" | "max_inference_credits" | "max_new_leads" | "max_provider_credits" | "max_provider_pages" | "policy_digest" | "review_only" | "revisions" | "sources" | "table_id" | "version">;
+export declare const GUIDED_ACTIVATION_LINK_CONTRACT: import("./schema.js").ContractObject<{
+    readonly revision: {
+        type: "integer";
+        description?: string;
+        minimum?: number;
+        maximum?: number;
+        "x-clamp"?: true;
+    };
+    readonly resource: {
+        type: "string";
+        enum: readonly ("first_leads_table" | "knowledge" | "sender" | "sequence")[];
+        description?: string;
+    };
+    readonly resource_id: import("./schema.js").StringProperty;
+}, "resource" | "resource_id" | "revision">;
+export declare const GUIDED_ACTIVATION_START_CONTRACT: import("./schema.js").ContractObject<{
+    readonly operating_path: {
+        type: "string";
+        enum: readonly ("own_agent" | "oxygent")[];
+        description?: string;
+    };
+}, "operating_path">;
+import type { OperationSpec } from "./operations.js";
+export declare const GUIDED_ACTIVATION_ROUTINES_PREVIEW_CONTRACT: import("./schema.js").ContractObject<{
+    readonly revision: {
+        type: "integer";
+        description?: string;
+        minimum?: number;
+        maximum?: number;
+        "x-clamp"?: true;
+    };
+    readonly timezone: import("./schema.js").StringProperty;
+    readonly timezone_confirmed: import("./schema.js").BooleanProperty;
+    readonly scan_time: import("./schema.js").StringProperty;
+    readonly briefing_time: import("./schema.js").StringProperty;
+    readonly source_ids: import("./schema.js").ArrayProperty<import("./schema.js").StringProperty>;
+    readonly max_examined: {
+        type: "integer";
+        description?: string;
+        minimum?: number;
+        maximum?: number;
+        "x-clamp"?: true;
+    };
+    readonly max_new_leads: {
+        type: "integer";
+        description?: string;
+        minimum?: number;
+        maximum?: number;
+        "x-clamp"?: true;
+    };
+    readonly max_provider_pages: {
+        type: "integer";
+        description?: string;
+        minimum?: number;
+        maximum?: number;
+        "x-clamp"?: true;
+    };
+    readonly max_provider_credits: {
+        type: "number";
+        description?: string;
+        minimum?: number;
+        maximum?: number;
+        "x-clamp"?: true;
+    };
+    readonly scan_per_run_credits: {
+        type: "number";
+        description?: string;
+        minimum?: number;
+        maximum?: number;
+        "x-clamp"?: true;
+    };
+    readonly scan_daily_credits: {
+        type: "number";
+        description?: string;
+        minimum?: number;
+        maximum?: number;
+        "x-clamp"?: true;
+    };
+    readonly briefing_per_run_credits: {
+        type: "number";
+        description?: string;
+        minimum?: number;
+        maximum?: number;
+        "x-clamp"?: true;
+    };
+    readonly briefing_daily_credits: {
+        type: "number";
+        description?: string;
+        minimum?: number;
+        maximum?: number;
+        "x-clamp"?: true;
+    };
+}, "briefing_daily_credits" | "briefing_per_run_credits" | "briefing_time" | "max_examined" | "max_new_leads" | "max_provider_credits" | "max_provider_pages" | "revision" | "scan_daily_credits" | "scan_per_run_credits" | "scan_time" | "source_ids" | "timezone" | "timezone_confirmed">;
+export declare const GUIDED_ACTIVATION_ROUTINE_ACTIVATE_CONTRACT: import("./schema.js").ContractObject<{
+    readonly purpose: {
+        type: "string";
+        enum: readonly ("lead_scan" | "morning_briefing")[];
+        description?: string;
+    };
+    readonly revision: {
+        type: "integer";
+        description?: string;
+        minimum?: number;
+        maximum?: number;
+        "x-clamp"?: true;
+    };
+    readonly preview_token: import("./schema.js").StringProperty;
+    readonly approved: import("./schema.js").BooleanProperty;
+    readonly approve_above_default: import("./schema.js").BooleanProperty;
+}, "preview_token" | "purpose" | "revision">;
+export declare const GUIDED_ACTIVATION_OPERATIONS: readonly OperationSpec[];

package/node_modules/@oxygen/shared/dist/contracts/guided-activation.js

@@ -0,0 +1,59 @@
+import { arr, bool, enumOf, int, num, obj, str } from "./schema.js";
+import { GUIDED_ACTIVATION_REVISIONS } from "../guided-activation.js";
+const id = () => str({ minLength: 1, maxLength: 160 });
+export const GUIDED_ACTIVATION_REVISIONS_CONTRACT = obj(Object.fromEntries(GUIDED_ACTIVATION_REVISIONS.map(key => [key, id()])), { required: [...GUIDED_ACTIVATION_REVISIONS] });
+export const GUIDED_ACTIVATION_SCAN_POLICY_CONTRACT = obj({
+    version: int({ minimum: 1, maximum: 1 }), table_id: id(), chat_id: id(), policy_digest: id(),
+    revisions: GUIDED_ACTIVATION_REVISIONS_CONTRACT,
+    sources: arr(obj({ source_id: id(), config_digest: id(), incremental_mode: enumOf(["cursor", "watermark"]), person_key_field: id() }, { required: ["source_id", "config_digest", "incremental_mode", "person_key_field"] }), { minItems: 1, maxItems: 20 }),
+    exclude_dnc: bool(), exclude_contacted: bool(), review_only: bool(),
+    max_examined: int({ minimum: 1, maximum: 1000 }), max_new_leads: int({ minimum: 1, maximum: 100 }), max_provider_pages: int({ minimum: 1, maximum: 100 }),
+    max_provider_credits: num({ minimum: 0, maximum: 25000 }), max_inference_credits: num({ minimum: 0, maximum: 25000 }),
+}, { required: ["version", "table_id", "chat_id", "policy_digest", "revisions", "sources", "exclude_dnc", "exclude_contacted", "review_only", "max_examined", "max_new_leads", "max_provider_pages", "max_provider_credits", "max_inference_credits"] });
+export const GUIDED_ACTIVATION_LINK_CONTRACT = obj({
+    revision: int({ minimum: 1 }), resource: enumOf(["knowledge", "first_leads_table", "sequence", "sender"]), resource_id: str({ minLength: 1, maxLength: 160 }),
+}, { required: ["revision", "resource", "resource_id"] });
+export const GUIDED_ACTIVATION_START_CONTRACT = obj({ operating_path: enumOf(["own_agent", "oxygent"]) }, { required: ["operating_path"] });
+export const GUIDED_ACTIVATION_ROUTINES_PREVIEW_CONTRACT = obj({
+    revision: int({ minimum: 1, description: "Current activation revision from status/get (positive integer)." }),
+    timezone: str({ minLength: 1, maxLength: 80, description: "Confirmed IANA timezone, e.g. Europe/Berlin." }),
+    timezone_confirmed: bool({ description: "True only after the user confirms this timezone." }),
+    scan_time: str({ pattern: "^(?:[01]\\d|2[0-3]):[0-5]\\d$", description: "Scan start in HH:mm (00:00-23:59), local to timezone." }),
+    briefing_time: str({ pattern: "^(?:[01]\\d|2[0-3]):[0-5]\\d$", description: "Briefing start in HH:mm (00:00-23:59), local to timezone." }),
+    source_ids: arr(str({ minLength: 1, maxLength: 160 }), { minItems: 1, maxItems: 20,
+        description: "1-20 unique source IDs, comma-separated on CLI: table:<UUID> for a separate source Table or completed native people-search ingestion-run UUID." }),
+    max_examined: int({ minimum: 1, maximum: 1000, description: "Maximum source people examined per scan: integer 1-1000." }),
+    max_new_leads: int({ minimum: 1, maximum: 100, description: "Maximum review-only leads per scan: integer 1-100; no greater than max_examined." }),
+    max_provider_pages: int({ minimum: 1, maximum: 100, description: "Maximum provider pages per scan: integer 1-100." }),
+    max_provider_credits: num({ minimum: 0, maximum: 25000, description: "Provider credit ceiling per scan: 0-25000; native Table sources quote 0." }),
+    scan_per_run_credits: num({ minimum: .01, maximum: 25000, description: "Scan credit ceiling per run: 0.01-25000." }),
+    scan_daily_credits: num({ minimum: .01, description: "Scan credit ceiling per rolling 24h: at least 0.01 and scan_per_run_credits." }),
+    briefing_per_run_credits: num({ minimum: .01, maximum: 25000, description: "Briefing credit ceiling per run: 0.01-25000." }),
+    briefing_daily_credits: num({ minimum: .01, description: "Briefing credit ceiling per rolling 24h: at least 0.01 and briefing_per_run_credits." }),
+}, { required: ["revision", "timezone", "timezone_confirmed", "scan_time", "briefing_time", "source_ids", "max_examined", "max_new_leads", "max_provider_pages", "max_provider_credits", "scan_per_run_credits", "scan_daily_credits", "briefing_per_run_credits", "briefing_daily_credits"] });
+export const GUIDED_ACTIVATION_ROUTINE_ACTIVATE_CONTRACT = obj({
+    purpose: enumOf(["lead_scan", "morning_briefing"]), revision: int({ minimum: 1 }), preview_token: str({ minLength: 1, maxLength: 160 }), approved: bool(), approve_above_default: bool(),
+}, { required: ["purpose", "revision", "preview_token"] });
+export const GUIDED_ACTIVATION_OPERATIONS = [
+    { id: "onboarding.activation.status", route: "/api/cli/onboarding/activation", method: "GET", contract: obj({}),
+        cli: { path: ["onboarding", "activation", "status"], summary: "Resume your guided onboarding and native resource links. Enabled genuine dev only; current non-client workspace members." },
+        mcp: { name: "oxygen_onboarding_activation_status", title: "Oxygen: Onboarding status", description: "Read your resumable guided onboarding and native links. Enabled genuine dev only; current non-client workspace members.", pack: "agents" }, mutates: false, spends: false },
+    { id: "onboarding.activation.start", route: "/api/cli/onboarding/activation", method: "POST", contract: GUIDED_ACTIVATION_START_CONTRACT,
+        cli: { path: ["onboarding", "activation", "start"], summary: "Prepare your activation and private Oxygent chat. Free; no message send or outreach." },
+        mcp: { name: "oxygen_onboarding_activation_start", title: "Oxygen: Start onboarding record", description: "Prepare your activation with operating_path own_agent or oxygent. The oxygent path binds its native workspace Agent and creator-private chat. Free; no turn, inference, provider or outreach dispatch. Enabled genuine dev only; current non-client workspace members.", pack: "agents" }, mutates: true, spends: false },
+    { id: "onboarding.activation.get", route: "/api/cli/onboarding/activation/{activationId}", method: "GET", parameters: ["activationId"], contract: obj({}),
+        cli: { path: ["onboarding", "activation", "get"], summary: "Read your activation by ID and its native resource links." },
+        mcp: { name: "oxygen_onboarding_activation_get", title: "Oxygen: Read onboarding record", description: "Read your activation by activationId. Only its creator can read it. Enabled genuine dev only; current non-client workspace members.", pack: "agents" }, mutates: false, spends: false },
+    { id: "onboarding.activation.link", route: "/api/cli/onboarding/activation/{activationId}/resources", method: "POST", parameters: ["activationId"], contract: GUIDED_ACTIVATION_LINK_CONTRACT,
+        cli: { path: ["onboarding", "activation", "link"], summary: "Link an existing native onboarding resource at the expected revision. Does not create, enroll or send." },
+        mcp: { name: "oxygen_onboarding_activation_link", title: "Oxygen: Link onboarding resource", description: "Link an existing Knowledge page, First leads Table, pilot Sequence or LinkedIn sender to your activationId at revision. Native ownership and Sequence binding are verified; no create, enrollment or send.", pack: "agents" }, mutates: true, spends: false },
+    { id: "onboarding.activation.first_leads", route: "/api/cli/onboarding/activation/{activationId}/first-leads", method: "POST", bodyRequired: true, parameters: ["activationId"], contract: obj({}),
+        cli: { path: ["onboarding", "activation", "first-leads"], summary: "Create or resume the activation-owned First leads Table. Free; no discovery, enrichment or outreach." },
+        mcp: { name: "oxygen_onboarding_activation_first_leads", title: "Oxygen: First leads Table", description: "Create or resume one native First leads Table for your activationId. Free; no discovery, enrichment, enrollment or outreach. Use native search/ingestion separately.", pack: "agents" }, mutates: true, spends: false },
+    { id: "onboarding.activation.routines_preview", route: "/api/cli/onboarding/activation/{activationId}/routines/preview", method: "POST", parameters: ["activationId"], contract: GUIDED_ACTIVATION_ROUTINES_PREVIEW_CONTRACT,
+        cli: { path: ["onboarding", "activation", "routines-preview"], summary: "Review two explicitly configured draft routines, exact native source scope and caps. Arms no schedule." },
+        mcp: { name: "oxygen_onboarding_activation_routines_preview", title: "Oxygen: Review daily routines", description: "Build native scan/briefing drafts and exact previews for activationId. Requires confirmed IANA timezone, both local times, source_ids and caps. Native Table sources quote zero; original ingestion sources need a current quote. Arms no schedule.", pack: "agents" }, mutates: true, spends: false },
+    { id: "onboarding.activation.routine_activate", route: "/api/cli/onboarding/activation/{activationId}/routines/activate", method: "POST", parameters: ["activationId"], contract: GUIDED_ACTIVATION_ROUTINE_ACTIVATE_CONTRACT,
+        cli: { path: ["onboarding", "activation", "routine-activate"], summary: "Activate one exact routine preview at its native revision. Requires approval or valid current creator-chat auto-approve authority." },
+        mcp: { name: "oxygen_onboarding_activation_routine_activate", title: "Oxygen: Activate daily routine", description: "Activate one lead_scan or morning_briefing at exact native revision and preview_token. Requires approved=true or current auto-approve authority in the creator's bound private chat. Schedules are independent and remain capped; no automatic enrollment.", pack: "agents" }, mutates: true, spends: true },
+];

package/node_modules/@oxygen/shared/dist/contracts/operations.js

@@ -12,6 +12,7 @@ import { BROWSER_OPERATIONS } from "./browser-operations.js";
 import { TABLE_FEED_UPDATE_OPERATION } from "./table-feed-update.js";
 import { GEO_OPERATIONS } from "./geo.js";
 import { CUSTOMER_OPERATIONS } from "./customer-operations.js";
+import { GUIDED_ACTIVATION_OPERATIONS } from "./guided-activation.js";
 import { AGENT_SESSION_OPERATIONS } from "./agent-sessions.js";
 import { TEAMMATE_OPERATIONS } from "./teammates.js";
 import { WORKSPACE_SKILL_OPERATIONS } from "./workspace-skills.js";
@@ -91,6 +92,6 @@ export function operationFormData(spec, body) {
     }
     return form;
 }
-export const OPERATION_SPECS = [SENDER_LIMITS_SET_OPERATION, CONNECTOR_UPDATE_OPERATION, CONNECTOR_EVENTS_REVOKE_OPERATION, WORKSPACE_PAGES_GET_OPERATION, WORKSPACE_PAGES_UPDATE_OPERATION, TABLE_FEED_UPDATE_OPERATION, ...CUSTOMER_OPERATIONS, ...GEO_OPERATIONS, ...BROWSER_OPERATIONS, ...AGENT_SESSION_OPERATIONS, ...TEAMMATE_OPERATIONS, ...WORKSPACE_SKILL_OPERATIONS];
-export const CLI_OPERATIONS = [...CUSTOMER_OPERATIONS, ...GEO_OPERATIONS, ...BROWSER_OPERATIONS, ...AGENT_SESSION_OPERATIONS, ...TEAMMATE_OPERATIONS, ...WORKSPACE_SKILL_OPERATIONS].filter((spec) => spec.generated?.cli !== false);
-export const MCP_OPERATIONS = [...CUSTOMER_OPERATIONS, ...GEO_OPERATIONS, ...BROWSER_OPERATIONS, ...AGENT_SESSION_OPERATIONS, ...TEAMMATE_OPERATIONS, ...WORKSPACE_SKILL_OPERATIONS].filter((spec) => spec.generated?.mcp !== false);
+export const OPERATION_SPECS = [SENDER_LIMITS_SET_OPERATION, CONNECTOR_UPDATE_OPERATION, CONNECTOR_EVENTS_REVOKE_OPERATION, WORKSPACE_PAGES_GET_OPERATION, WORKSPACE_PAGES_UPDATE_OPERATION, TABLE_FEED_UPDATE_OPERATION, ...CUSTOMER_OPERATIONS, ...GEO_OPERATIONS, ...BROWSER_OPERATIONS, ...AGENT_SESSION_OPERATIONS, ...GUIDED_ACTIVATION_OPERATIONS, ...TEAMMATE_OPERATIONS, ...WORKSPACE_SKILL_OPERATIONS];
+export const CLI_OPERATIONS = [...CUSTOMER_OPERATIONS, ...GEO_OPERATIONS, ...BROWSER_OPERATIONS, ...AGENT_SESSION_OPERATIONS, ...GUIDED_ACTIVATION_OPERATIONS, ...TEAMMATE_OPERATIONS, ...WORKSPACE_SKILL_OPERATIONS].filter((spec) => spec.generated?.cli !== false);
+export const MCP_OPERATIONS = [...CUSTOMER_OPERATIONS, ...GEO_OPERATIONS, ...BROWSER_OPERATIONS, ...AGENT_SESSION_OPERATIONS, ...GUIDED_ACTIVATION_OPERATIONS, ...TEAMMATE_OPERATIONS, ...WORKSPACE_SKILL_OPERATIONS].filter((spec) => spec.generated?.mcp !== false);

package/node_modules/@oxygen/shared/dist/copilot-access.js

@@ -1,3 +1,4 @@
+import { guidedActivationEnabled } from "./guided-activation.js";
 import { isStaffEmail } from "./staff.js";
 export function copilotAudience(env = process.env) {
     const deployment = env.OXYGEN_DEPLOY_ENV?.trim().toLowerCase();
@@ -26,7 +27,7 @@ export function isCopilotAvailableTo(env, viewer) {
     const audience = copilotAudience(env);
     if (audience === "off" || !viewer.member || viewer.oxygenRole === "client")
         return false;
-    return audience === "all" || isStaffEmail(viewer.email, env);
+    return audience === "all" || guidedActivationEnabled(env) || isStaffEmail(viewer.email, env);
 }
 function normalizedFlag(env) {
     return env.OXYGEN_COPILOT_ENABLED?.trim().toLowerCase() ?? "";

package/node_modules/@oxygen/shared/dist/credit-guidance.js

@@ -1,3 +1,4 @@
+import { normalizeQuotedCredits, roundQuotedCredits } from "./billing-money.js";
 const DEFAULT_HEADROOM_MULTIPLIER = 1.25;
 /**
  * Size a ceiling from the EXPECTED cost plus a variance band, rather than from
@@ -39,9 +40,9 @@ function expectedCreditCeiling(input) {
     return Math.max(1, Math.ceil(ceiling));
 }
 export function buildCreditGuidance(input) {
-    const estimatedCredits = normalizeCreditValue(input.estimatedCredits);
-    const availableCredits = normalizeCreditValue(input.availableCredits);
-    const expectedCredits = normalizeCreditValue(input.expectedCredits);
+    const estimatedCredits = normalizeQuotedCredits(input.estimatedCredits);
+    const availableCredits = normalizeQuotedCredits(input.availableCredits);
+    const expectedCredits = normalizeQuotedCredits(input.expectedCredits);
     const headroomMultiplier = normalizeMultiplier(input.headroomMultiplier);
     // No expected figure supplied => byte-identical to the pre-existing behaviour,
     // so publishing / sequences / AI callers are untouched by this change.
@@ -49,7 +50,7 @@ export function buildCreditGuidance(input) {
         ? recommendedCreditCeiling(estimatedCredits, headroomMultiplier)
         : expectedCreditCeiling({
             expectedCredits,
-            worstCaseCreditsPerRow: normalizeCreditValue(input.worstCaseCreditsPerRow),
+            worstCaseCreditsPerRow: normalizeQuotedCredits(input.worstCaseCreditsPerRow),
             worstCaseTotal: estimatedCredits,
             rowCount: typeof input.rowCount === "number" && Number.isFinite(input.rowCount)
                 ? Math.max(0, Math.floor(input.rowCount))
@@ -92,7 +93,7 @@ export function buildCreditGuidance(input) {
                     recommended_max_credits: recommendedMaxCredits,
                     available_credits: availableCredits,
                     credit_posture: "sufficient",
-                    credit_guidance: `At the fixed per-row price, the selected rows are estimated at ${formatCreditsForCopy(estimatedCredits)} credits. `
+                    credit_guidance: `The selected rows are estimated at ${formatCreditsForCopy(estimatedCredits)} credits. `
                         + "recommended_max_credits is a safety ceiling; unused credits are not spent.",
                 };
             }
@@ -126,14 +127,14 @@ export function buildCreditGuidance(input) {
     return {
         ...expectedFields,
         estimated_credits: estimatedCredits,
-        recommended_max_credits: availableCredits > 0 ? roundCreditValue(availableCredits) : null,
+        recommended_max_credits: availableCredits > 0 ? roundQuotedCredits(availableCredits) : null,
         available_credits: availableCredits,
         credit_posture: "tight",
         credit_guidance: "Credits are tight for the recommended ceiling; ask before running, reduce scope, or top up credits.",
     };
 }
 function recommendedCreditCeiling(estimatedCredits, headroomMultiplier = DEFAULT_HEADROOM_MULTIPLIER) {
-    const normalized = normalizeCreditValue(estimatedCredits);
+    const normalized = normalizeQuotedCredits(estimatedCredits);
     if (normalized === null)
         return null;
     if (normalized === 0)
@@ -151,11 +152,3 @@ function normalizeMultiplier(value) {
 function formatCreditsForCopy(value) {
     return value.toLocaleString("en-US", { maximumFractionDigits: 3 });
 }
-function normalizeCreditValue(value) {
-    if (typeof value !== "number" || !Number.isFinite(value) || value < 0)
-        return null;
-    return roundCreditValue(value);
-}
-function roundCreditValue(value) {
-    return Math.round(value * 1000) / 1000;
-}

package/node_modules/@oxygen/shared/dist/domain-authentication.d.ts

@@ -0,0 +1,65 @@
+/** Public DNS configuration evidence, never a received-message authentication verdict. */
+export declare const DOMAIN_AUTHENTICATION_INTERVAL_MS: number;
+export declare const DOMAIN_AUTHENTICATION_CHECKS: readonly ["spf", "dkim", "dmarc", "mx", "nameservers"];
+export type DomainAuthenticationCheckName = (typeof DOMAIN_AUTHENTICATION_CHECKS)[number];
+export type DomainAuthenticationState = "configured" | "issues" | "unknown";
+export type DomainAuthenticationCheck = {
+    state: DomainAuthenticationState;
+    summary: string;
+    nextAction: string | null;
+    records: Array<{
+        name: string;
+        type: string;
+        content: string;
+    }>;
+};
+export type DomainAuthenticationObservation = {
+    domain: string;
+    source: "public_dns";
+    checkedAt: string;
+    state: DomainAuthenticationState;
+    complete: boolean;
+    checks: Record<DomainAuthenticationCheckName, DomainAuthenticationCheck>;
+    dkimSelectors: string[];
+    dmarcPolicy: string | null;
+    dmarcPolicyDomain: string | null;
+    spfLookupTerms: number | null;
+    spfLookupComplete: boolean;
+    messageAlignment: "unknown";
+};
+export type DomainAuthenticationSnapshot = {
+    domain: string;
+    observation: DomainAuthenticationObservation | null;
+    lastAttempt: DomainAuthenticationObservation | null;
+    lastAttemptAt: string | null;
+    lastAttemptFailed: boolean;
+    nextCheckAt: string | null;
+    monitoring?: {
+        enabled: boolean;
+        eligibleMailboxCount: number;
+        reason: string;
+        manualCheckEnablesMonitoring: false;
+    };
+};
+export type DomainAuthenticationRow = DomainAuthenticationSnapshot & {
+    mailboxCount: number;
+};
+export declare function domainAuthenticationStale(snapshot: DomainAuthenticationSnapshot, now?: number): boolean;
+export declare function domainAuthenticationNeedsAttention(snapshot: DomainAuthenticationSnapshot, now?: number): boolean;
+/** Eligibility comes from connected mailboxes, never from saving a DNS observation. */
+export declare function domainAuthenticationWithMonitoring(snapshot: DomainAuthenticationSnapshot, eligibleMailboxCount: number): DomainAuthenticationSnapshot;
+/** Compact list projection keeps raw DNS evidence in the per-domain detail read. */
+export declare function domainAuthenticationSummary(row: DomainAuthenticationRow, now?: number): {
+    domain: string;
+    mailboxCount: number;
+    monitored: boolean;
+    state: DomainAuthenticationState;
+    checks: {
+        [k: string]: DomainAuthenticationState;
+    } | null;
+    checkedAt: string | null;
+    lastAttemptAt: string | null;
+    lastAttemptFailed: boolean;
+    stale: boolean;
+    nextCheckAt: string | null;
+};

package/node_modules/@oxygen/shared/dist/domain-authentication.js

@@ -0,0 +1,54 @@
+/** Public DNS configuration evidence, never a received-message authentication verdict. */
+export const DOMAIN_AUTHENTICATION_INTERVAL_MS = 24 * 60 * 60_000;
+export const DOMAIN_AUTHENTICATION_CHECKS = [
+    "spf",
+    "dkim",
+    "dmarc",
+    "mx",
+    "nameservers",
+];
+export function domainAuthenticationStale(snapshot, now = Date.now()) {
+    return (!snapshot.observation ||
+        now - Date.parse(snapshot.observation.checkedAt) >=
+            DOMAIN_AUTHENTICATION_INTERVAL_MS);
+}
+export function domainAuthenticationNeedsAttention(snapshot, now = Date.now()) {
+    return snapshot.lastAttemptFailed || domainAuthenticationStale(snapshot, now) || snapshot.observation?.state !== "configured";
+}
+/** Eligibility comes from connected mailboxes, never from saving a DNS observation. */
+export function domainAuthenticationWithMonitoring(snapshot, eligibleMailboxCount) {
+    const enabled = eligibleMailboxCount > 0;
+    return {
+        ...snapshot,
+        nextCheckAt: enabled ? snapshot.nextCheckAt : null,
+        monitoring: {
+            enabled,
+            eligibleMailboxCount,
+            reason: enabled
+                ? "Daily checks cover non-disabled connected sending mailboxes, including paused mailboxes."
+                : "No eligible sending mailboxes. Disabled, deleted and mailbox-free domains are not checked daily; a free manual check saves one observation without enabling monitoring.",
+            manualCheckEnablesMonitoring: false,
+        },
+    };
+}
+/** Compact list projection keeps raw DNS evidence in the per-domain detail read. */
+export function domainAuthenticationSummary(row, now = Date.now()) {
+    const observation = row.observation ?? row.lastAttempt;
+    return {
+        domain: row.domain,
+        mailboxCount: row.mailboxCount,
+        monitored: row.mailboxCount > 0,
+        state: observation?.state ?? "unknown",
+        checks: observation
+            ? Object.fromEntries(DOMAIN_AUTHENTICATION_CHECKS.map((key) => [
+                key,
+                observation.checks[key].state,
+            ]))
+            : null,
+        checkedAt: observation?.checkedAt ?? null,
+        lastAttemptAt: row.lastAttemptAt,
+        lastAttemptFailed: row.lastAttemptFailed,
+        stale: domainAuthenticationStale(row, now),
+        nextCheckAt: row.nextCheckAt,
+    };
+}

package/node_modules/@oxygen/shared/dist/email-infrastructure-policy.d.ts

@@ -0,0 +1,5 @@
+/** Explicit mailbox infrastructure, independent of transport or domain density. */
+export declare function isEntraMailbox(metadata: unknown): boolean;
+/** Founder 2026-10-15: campaign ceiling across all Sequences, separate from warm-up. */
+export declare const ENTRA_CAMPAIGN_DAILY_CAP = 2;
+export declare function mailboxInfrastructureDailyCap(metadata: unknown): number | null;

package/node_modules/@oxygen/shared/dist/email-infrastructure-policy.js

@@ -0,0 +1,13 @@
+/** Explicit mailbox infrastructure, independent of transport or domain density. */
+export function isEntraMailbox(metadata) {
+    if (!metadata || typeof metadata !== "object" || Array.isArray(metadata))
+        return false;
+    const record = metadata;
+    const platform = record.infrastructure_platform ?? record.managed_platform;
+    return platform === "azure" || platform === "microsoft_azure" || platform === "entra";
+}
+/** Founder 2026-10-15: campaign ceiling across all Sequences, separate from warm-up. */
+export const ENTRA_CAMPAIGN_DAILY_CAP = 2;
+export function mailboxInfrastructureDailyCap(metadata) {
+    return isEntraMailbox(metadata) ? ENTRA_CAMPAIGN_DAILY_CAP : null;
+}