@oxygen-agent/cli 1.1014.779 → 1.1014.951

package/dist/commands/sequences.js

@@ -45,6 +45,8 @@ function buildSequenceDraftBody(options) {
     return {
         goal,
         max_credits: readPositiveNumber(options.maxCredits),
+        ...(options.channel ? { channel: options.channel } : {}),
+        ...(readOption(options.activationId) ? { activation_id: readOption(options.activationId) } : {}),
         ...(audience ? { audience } : {}),
         ...(table ? { source_table: table } : {}),
         ...(steps !== undefined ? { steps } : {}),
@@ -70,11 +72,21 @@ function writeSequenceDraftPreview(data) {
             : [];
     const sequence = record.sequence;
     const lines = [];
-    if (record.created && sequence) {
+    const status = typeof sequence?.status === "string" ? sequence.status : "unknown";
+    if (record.reused === true && sequence) {
+        lines.push(`Recovered sequence "${String(sequence.name ?? "")}" (${String(sequence.slug ?? "")}), status: ${status}.`);
+    }
+    else if (record.created && sequence && status === "draft") {
         lines.push(`Saved draft sequence "${String(sequence.name ?? "")}" (${String(sequence.slug ?? "")}).`);
     }
+    else if (record.created && sequence) {
+        lines.push(`Saved sequence "${String(sequence.name ?? "")}" (${String(sequence.slug ?? "")}), status: ${status}.`);
+    }
     else {
-        lines.push("Drafted email sequence (preview — not saved):");
+        const channels = new Set(steps.flatMap(step => isRecord(step) && typeof step.channel === "string" ? [step.channel] : []));
+        const channel = channels.size === 1 ? [...channels][0] : null;
+        const label = channel === "linkedin" ? "LinkedIn " : channel === "email" ? "email " : "";
+        lines.push(`Drafted ${label}sequence (preview — not saved):`);
     }
     let emailNumber = 0;
     // The subject the next threaded email continues under. A drafted follow-up
@@ -1580,6 +1592,7 @@ export function registerSequencesFamily(program, handleAsyncAction) {
         .option("--phone-column-key <key>", "WhatsApp: row_values key holding each lead's phone number (else falls back to phone/phone_number/mobile).")
         .option("--senders <ids>", "Comma-separated LinkedIn or WhatsApp sender account ids (or connection / Unipile ids; `senders list` / `whatsapp accounts` list them). Optional at create; enroll and start require at least one when the journey has LinkedIn or WhatsApp steps (attach later with `sequences update --senders`).")
         .option("--table <id>", "Source table id or slug whose rows supply {{column}} template values.")
+        .option("--activation-id <id>", "Guided authored LinkedIn draft: bind the creator's activation and exact First leads Table. Free; retries reuse the native draft.")
         .option("--from-table <id>", "Alias of --table: the source table id or slug this sequence draws its leads and {{column}} values from.")
         .option("--enroll", "After creating the sequence, immediately enroll every row of the bound table (same as running `sequences enroll --from-table` next). Requires --table/--from-table. Enrolling spends no credits and sends nothing.")
         .option("--url-column <key>", "Column key holding each lead's LinkedIn URL/provider id.")
@@ -1649,6 +1662,7 @@ export function registerSequencesFamily(program, handleAsyncAction) {
                     ...(senders.length > 0 ? { senders } : {}),
                     ...(tags.length > 0 ? { tags } : {}),
                     ...(sourceTable ? { source_table_id: sourceTable } : {}),
+                    ...(readOption(options.activationId) ? { activation_id: readOption(options.activationId) } : {}),
                     ...(options.enroll ? { enroll_from_table: true } : {}),
                     ...(readOption(options.urlColumn) ? { linkedin_url_column_key: readOption(options.urlColumn) } : {}),
                     ...(email ? { email } : {}),
@@ -1663,12 +1677,14 @@ export function registerSequencesFamily(program, handleAsyncAction) {
         });
     }))
         .addCommand(new Command("draft")
-        .description("Draft an email outreach sequence with AI, grounded in the workspace Knowledge Graph (voice, positioning, campaign learnings) — Instantly's AI sequence generator, with provenance. PAID (one AI call, typically ~15 credits [low tier]; an under-cap call errors BEFORE spending and prints the live estimate) — requires --max-credits. Prints the drafted steps + the KG pages that grounded them; nothing is saved until you re-run with --create (which needs --name and --slug). Even created, it lands as a DRAFT — enrolling leads and starting it stay approval-gated.")
+        .description("Draft an email or LinkedIn sequence with AI, grounded in confirmed workspace Knowledge with cited provenance. PAID: --max-credits bounds generation. Email is the default; LinkedIn drafts invite/message actions and waits. --create with --name and --slug saves an inert draft; enrollment and launch remain separate.")
         .requiredOption("--goal <goal>", "Plain-language goal for the sequence (e.g. \"book demos with RevOps leaders at Series A SaaS\"). The trusted brief the copy is written to.")
+        .addOption(new Option("--channel <channel>", "Outreach channel; email default, linkedin for invite/message steps.").choices(["email", "linkedin"]))
+        .option("--activation-id <id>", "Guided onboarding activation UUID; --create reuses its bound native Sequence and exact First leads Table. Creator is derived from identity.")
         .option("--audience <audience>", "Who the sequence targets (e.g. \"RevOps leaders at 20-100 person B2B SaaS\"). Sharpens the Knowledge Graph retrieval.")
         .option("--table <id>", "Source table id whose column keys become the {{column|fallback}} personalization tokens the copy may use.")
-        .option("--steps <n>", "How many emails in the journey (1-7). Defaults to 4.")
-        .option("--variants <n>", "Copy variants per email for A/B testing (1-3). Defaults to 1.")
+        .option("--steps <n>", "Outreach actions (1-7), excluding waits; default 4 email or 3 LinkedIn.")
+        .option("--variants <n>", "Copy variants per outreach action (1-3); default 1.")
         .requiredOption("--max-credits <n>", "Credit cap for the AI call (required — this is a paid action).")
         .option("--create", "Save the draft as a DRAFT sequence (requires --name and --slug). Without this, the draft is only previewed.")
         .option("--name <name>", "Human-readable sequence name (required with --create).")
@@ -1917,14 +1933,23 @@ export function registerSequencesFamily(program, handleAsyncAction) {
         .description("Preview or start a sequence. Without --approved this is the launch check and changes nothing: it returns launch_readiness (blockers and warnings), sender_journey (each step's From, candidate inboxes and assignment; no leads needed), rendered pending-lead LinkedIn/WhatsApp copy, character counts/limits, copy blockers, per-kind scope, sender/mailbox capacity, CRM readiness and safety caps. Email copy is not rendered; inspect its saved templates and unsubscribe settings with sequences get. Live start requires --approved; --max-credits is optional. Email/WhatsApp/CRM-task journeys additionally require --max-live-sends because their external actions cost 0 Oxygen credits. --dry-run starts the sequence in simulated mode (it leaves draft), with no send, provider campaign, CRM task or credits. Live start enables the standing reply → CRM automation only if it has never been configured. Planned counts include only leads each step's channel can reach; skipped_actions_by_reason and channel_coverage show the rest.")
         .argument("<sequence>", "Sequence id or slug.")
         .option("--approved", "Approve and activate live. Without this flag, returns a preview only, including copy_preview rendered samples and blockers.")
-        .option("--max-credits <n>", "Optional positive credit ceiling. Omit for the free launch preview. Live start uses the saved ceiling when omitted; an unset ceiling means unbounded credits, not recipient approval.")
-        .option("--max-live-sends <n>", "Total live-send and CRM-write ceiling across channels, including LinkedIn invites/messages (positive integer). Required for email, WhatsApp, or crm_task steps; optional for LinkedIn.")
+        .option("--max-credits <n>", "Optional credit ceiling. Ordinary sequences require >0; guided LinkedIn permits 0 with a positive action ceiling and exact launch review.")
+        .option("--max-live-sends <n>", "Total live-send and CRM-write ceiling across channels, including LinkedIn invites/messages (positive integer). Required for email, WhatsApp, or crm_task steps; guided LinkedIn binds its positive cap in launch_review.")
+        .option("--launch-review-json <json>", "Guided onboarding: echo the exact preview.launch_review (digest, expiry, positive action ceiling and nonnegative credit cap). Changed inputs require a new preview.")
+        .option("--launch-review-file <path>", "Read the exact launch_review object from a JSON file instead of --launch-review-json.")
         .option("--dry-run", "Activate the sequence (status draft → active, startedAt set) in dry-run mode: every step advances with simulated actions — no sends, CRM writes, provider calls, or credits. This is NOT the preview: `sequences start` with no flags is the side-effect-free launch preview. A later live start (--approved) restarts those leads from the first step so they are contacted for real, except deleted source rows, a person another live campaign contacts under exclude_contacted, and older duplicates of a person.")
         .option("--json", "Print a JSON envelope.")
         .action(async (sequence, options) => {
         await handleAsyncAction("sequences start", options, () => {
-            const maxCredits = readPositiveNumber(options.maxCredits, "Omit --max-credits for the free launch preview. To set a live credit ceiling, pass a positive value after reviewing the preview; recipient approval remains separate.");
+            const maxCredits = readCreditCeilingOrZero(options.maxCredits);
             const maxLiveSends = readPositiveInt(options.maxLiveSends);
+            if (options.launchReviewJson !== undefined && options.launchReviewFile !== undefined)
+                throw new OxygenError("invalid_request", "Choose --launch-review-json or --launch-review-file, not both.", { exitCode: 2 });
+            const launchReview = options.launchReviewFile !== undefined
+                ? readJsonFileValue(resolve(options.launchReviewFile), "--launch-review-file")
+                : options.launchReviewJson !== undefined ? parseJsonObject(options.launchReviewJson) : undefined;
+            if (launchReview !== undefined && !isRecord(launchReview))
+                throw new OxygenError("invalid_request", "The launch review must be the exact object returned by the preview.", { exitCode: 2 });
             return requestOxygen(`/api/cli/sequences/${encodeURIComponent(sequence)}/start`, {
                 method: "POST",
                 body: {
@@ -1932,6 +1957,7 @@ export function registerSequencesFamily(program, handleAsyncAction) {
                     ...(options.approved ? { approved: true } : {}),
                     ...(maxCredits !== undefined ? { max_credits: maxCredits } : {}),
                     ...(maxLiveSends !== undefined ? { max_live_sends: maxLiveSends } : {}),
+                    ...(launchReview !== undefined ? { launch_review: launchReview } : {}),
                 },
             });
         });

package/dist/commands/voice.d.ts

@@ -1,3 +1,24 @@
+import { JsonOptions } from "../cli-output.js";
 import { ExtractedCommandActionHandler } from "../command-support.js";
 import { Command } from "commander";
+export type VoiceVerificationSubmitOptions = JsonOptions & {
+    country?: string;
+    email?: string;
+    field?: string[];
+    addressName?: string;
+    street?: string;
+    city?: string;
+    region?: string;
+    postalCode?: string;
+    file?: string[];
+    fileBase64?: string[];
+    documentType?: string[];
+    approved?: boolean;
+};
+/**
+ * The `voice verification submit` request body. Documents are read here from
+ * local paths (or taken as base64 for a caller with no file system), so the
+ * route receives exactly the bytes the customer pointed at.
+ */
+export declare function buildVoiceVerificationBody(options: VoiceVerificationSubmitOptions): Promise<Record<string, unknown>>;
 export declare function registerVoiceFamily(program: Command, handleAsyncAction: ExtractedCommandActionHandler): void;

package/dist/commands/voice.js

@@ -1,4 +1,7 @@
-import { splitCommaList } from "../command-support.js";
+import { readFile } from "node:fs/promises";
+import { basename, extname } from "node:path";
+import { OxygenError } from "@oxygen/shared/cli-result";
+import { collectRepeatable, splitCommaList } from "../command-support.js";
 import { requestOxygen } from "../http-client.js";
 import { readOption } from "../util.js";
 import { Command } from "commander";
@@ -13,9 +16,92 @@ function voiceNumberFilters(options) {
         ...(country ? { iso_country: country.toUpperCase() } : {}),
     };
 }
+const DOCUMENT_CONTENT_TYPES = {
+    ".pdf": "application/pdf",
+    ".jpg": "image/jpeg",
+    ".jpeg": "image/jpeg",
+    ".png": "image/png",
+};
+/** `slot=value` pairs from a repeatable flag, refusing a malformed one by name. */
+function slotPairs(values, flag) {
+    const pairs = new Map();
+    for (const raw of values ?? []) {
+        const index = raw.indexOf("=");
+        const key = index > 0 ? raw.slice(0, index).trim() : "";
+        if (!key) {
+            throw new OxygenError("invalid_request", `${flag} takes <slot>=<value>, e.g. ${flag} commercial_registrar_excerpt=...`, { exitCode: 2 });
+        }
+        pairs.set(key, raw.slice(index + 1));
+    }
+    return pairs;
+}
+/**
+ * The `voice verification submit` request body. Documents are read here from
+ * local paths (or taken as base64 for a caller with no file system), so the
+ * route receives exactly the bytes the customer pointed at.
+ */
+export async function buildVoiceVerificationBody(options) {
+    const country = readOption(options.country);
+    if (!country)
+        throw new OxygenError("invalid_request", "--country is required.", { exitCode: 2 });
+    const businessFields = Object.fromEntries(slotPairs(options.field, "--field"));
+    const files = slotPairs(options.file, "--file");
+    const inline = slotPairs(options.fileBase64, "--file-base64");
+    const types = slotPairs(options.documentType, "--document-type");
+    for (const slot of files.keys()) {
+        if (inline.has(slot)) {
+            throw new OxygenError("invalid_request", `Choose --file or --file-base64 for ${slot}, not both.`, { exitCode: 2 });
+        }
+    }
+    const documents = [];
+    for (const [slot, path] of files) {
+        documents.push({
+            slot,
+            file_name: basename(path),
+            content_type: DOCUMENT_CONTENT_TYPES[extname(path).toLowerCase()] ?? "application/pdf",
+            content_base64: (await readFile(path)).toString("base64"),
+            ...(types.get(slot) ? { document_type: types.get(slot) } : {}),
+        });
+    }
+    for (const [slot, content] of inline) {
+        documents.push({
+            slot,
+            file_name: `${slot}.pdf`,
+            content_type: "application/pdf",
+            content_base64: content,
+            ...(types.get(slot) ? { document_type: types.get(slot) } : {}),
+        });
+    }
+    const addressName = readOption(options.addressName);
+    const street = readOption(options.street);
+    const city = readOption(options.city);
+    const region = readOption(options.region);
+    const postalCode = readOption(options.postalCode);
+    const hasAddress = Boolean(addressName || street || city || region || postalCode);
+    const email = readOption(options.email);
+    return {
+        action: "submit",
+        iso_country: country.toUpperCase(),
+        ...(email ? { email } : {}),
+        business_fields: businessFields,
+        ...(hasAddress
+            ? {
+                address: {
+                    ...(addressName ? { customer_name: addressName } : {}),
+                    ...(street ? { street } : {}),
+                    ...(city ? { city } : {}),
+                    ...(region ? { region } : {}),
+                    ...(postalCode ? { postal_code: postalCode } : {}),
+                },
+            }
+            : {}),
+        documents,
+        ...(options.approved === true ? { approved: true } : {}),
+    };
+}
 export function registerVoiceFamily(program, handleAsyncAction) {
     program.addCommand(new Command("voice")
-        .description("The call channel. `tasks` works the call queue — leads waiting for a HUMAN to dial, queued by sequence call steps, CRM records, table rows, and replies. Claiming takes a lease so two reps never dial the same prospect. `numbers` manages the dialing pool: list, search, buy, tag, cap, release. Nothing here places a call: a call is live audio a rep holds in the web softphone at /sequencer/calls (a beta feature: Settings → Beta features; 5 credits per connected minute), so the terminal works everything around it. Only `numbers buy --approved` starts a charge.")
+        .description("The call channel. `tasks` works the call queue — leads waiting for a HUMAN to dial, queued by sequence call steps, CRM records, table rows, and replies. Claiming takes a lease so two reps never dial the same prospect. `numbers` manages the dialing pool: list, search, buy, tag, cap, release. `verification` is the business verification that unlocks numbers in the UK, Germany, Austria, Switzerland and France. Nothing here places a call: a call is live audio a rep holds in the web softphone at /sequencer/calls (a beta feature: Settings → Beta features; 5 credits per connected minute), so the terminal works everything around it. Only `numbers buy --approved` starts a charge.")
         .addCommand(new Command("tasks")
         .description("Work the call queue: queue | list | claim | complete | extend | skip | override.\n\nA call that nobody answers is dispositioned for you from the call itself, which\nalso resumes any sequence enrollment parked on it — so `complete` and `skip`\nreport already_recorded:true rather than failing when that has happened. You log\nonly what a person said.\n\nWhat blocks a dial, and what you can do about it:\n  calling_window     lead's local time outside 09:00-20:00      waivable per lead\n  unknown_timezone   no timezone on the lead, so the window\n                     cannot be checked (fails closed)          waivable per lead\n  daily_cap          the chosen number hit today's dial cap     waivable per lead\n  suppressed         on the workspace do-not-call list          NEVER waivable\n  destination_blocked your numbers cannot reach that country    NEVER waivable\n\n`list` reports dialable, block_reason and block_detail per lead, plus\ndialable_count and blocked_by_reason for the page. Waive one with `override`.")
         .addCommand(new Command("queue")
@@ -236,9 +322,9 @@ export function registerVoiceFamily(program, handleAsyncAction) {
     }))
         .addCommand(new Command("search")
         .description("Find numbers you could buy, by area code or region. Free: searching buys nothing and reserves nothing, so a listed number can be gone by the time you buy it.")
-        .option("--area-code <code>", "Area code, e.g. 415 (US/CA).")
-        .option("--region <code>", "State or region, e.g. CA.")
-        .option("--country <iso>", "ISO country code (default US). Run `voice numbers requirements` first for a country outside US/CA.")
+        .option("--area-code <code>", "Area code, e.g. 415, or 30 for Berlin.")
+        .option("--region <code>", "US/CA state or province, e.g. CA.")
+        .option("--country <iso>", "ISO country code (default US). Outside US/CA, see `voice verification list`.")
         .option("--limit <n>", "How many to return (1-30; default 10).")
         .option("--json", "Print a JSON envelope.")
         .action(async (options) => {
@@ -255,7 +341,7 @@ export function registerVoiceFamily(program, handleAsyncAction) {
         });
     }))
         .addCommand(new Command("requirements")
-        .description("What a country demands before it sells a number (business details, documents). Free, and read live from the carrier.")
+        .description("What a country demands before it sells a number: access (instant, verification, unavailable), business details, documents, and the collapsed `plan` that `voice verification submit` takes. Free, and read live from the carrier.")
         .option("--country <iso>", "ISO country code (default US).")
         .option("--end-user <type>", "business (default) or individual.")
         .option("--json", "Print a JSON envelope.")
@@ -347,5 +433,34 @@ export function registerVoiceFamily(program, handleAsyncAction) {
                 },
             });
         });
+    })))
+        .addCommand(new Command("verification")
+        .description("Business verification (a Twilio regulatory bundle): the paperwork that unlocks local numbers in the UK, Germany, Austria, Switzerland and France. Read what a country needs with `voice numbers requirements --country <iso>` (its `plan`), submit once with `voice verification submit`, then wait about three business days for Twilio's review. Free: no credits.")
+        .addCommand(new Command("list")
+        .description("Each country's number access for this workspace. Instant countries sell now; verification countries show not_started, draft, pending-review, in-review, twilio-approved or twilio-rejected with the reviewer's reason; unavailable ones say why. Refreshes bundles in review from the carrier. Read-only.")
+        .option("--json", "Print a JSON envelope.")
+        .action(async (options) => {
+        await handleAsyncAction("voice verification list", options, () => requestOxygen("/api/cli/voice/verification"));
+    }))
+        .addCommand(new Command("submit")
+        .description("Send the workspace's business details, registered address and documents to Twilio for review. Previews by default: the preview validates everything and names what would be sent (one file can become several provider documents). Pass --approved to submit; a submitted verification cannot be edited, only resubmitted after a rejection. Costs no credits. Example: `oxygen voice verification submit --country DE --field business_name=\"Acme GmbH\" --field business_registration_number=\"HRB 123456\" ... --street \"Unter den Linden 1\" --city Berlin --region Berlin --postal-code 10117 --file commercial_registrar_excerpt=./hrb.pdf`.")
+        .requiredOption("--country <iso>", "GB, DE, AT, CH or FR.")
+        .option("--field <key=value>", "One business detail by the plan's field key (repeatable), e.g. business_name=Acme GmbH.", collectRepeatable, [])
+        .option("--email <email>", "Where Twilio sends review updates. Defaults to the representative's email field when the country has one.")
+        .option("--address-name <name>", "Name on the registered address. Defaults to business_name.")
+        .option("--street <street>", "Registered address: street and number.")
+        .option("--city <city>", "Registered address: city.")
+        .option("--region <region>", "Registered address: state or region.")
+        .option("--postal-code <code>", "Registered address: postal code.")
+        .option("--file <slot=path>", "A document for one upload slot from the plan, read from a local PDF, JPEG or PNG under 5 MB (repeatable).", collectRepeatable, [])
+        .option("--file-base64 <slot=base64>", "The same document as base64 instead of a path (repeatable). Choose --file or this per slot.", collectRepeatable, [])
+        .option("--document-type <slot=type>", "Which accepted document type the file is, when the slot accepts several (repeatable), e.g. commercial_registrar_excerpt=tax_document.", collectRepeatable, [])
+        .option("--approved", "Actually submit. Without this you get a validated preview and nothing is sent.")
+        .option("--json", "Print a JSON envelope.")
+        .action(async (options) => {
+        await handleAsyncAction("voice verification submit", options, async () => requestOxygen("/api/cli/voice/verification", {
+            method: "POST",
+            body: await buildVoiceVerificationBody(options),
+        }));
     }))));
 }

package/dist/customer-operation-commands.js

@@ -29,9 +29,19 @@ const GROUP_PURPOSES = {
     "billing ownership": "Read or change a workspace's shared billing owner.",
     "notetaker calendar": "Connect calendars, sync meetings and approve meeting recording.",
     "notetaker notes": "Edit saved meeting notes.",
-    onboarding: "Save workspace discovery choices and continue onboarding.",
+    onboarding: "Save workspace discovery choices and resume guided onboarding.",
+    "onboarding activation": "Resume your dev-pilot activation and its native resources.",
 };
 const OPERATION_FLAGS = {
+    "agent session activate": {
+        revision: { help: "Current session revision returned by agent session preview; must match the reviewed configuration." },
+        preview_token: { help: "Exact preview_token from agent session preview, binding reviewed resources, actions, schedule and credit caps. Pass unchanged; --approved is separate. Preview again after changes." },
+    },
+    "onboarding activation get": { activationId: { flag: "activation-id", help: "Exact activation ID returned by start or status." } },
+    "onboarding activation link": { activationId: { flag: "activation-id", help: "Exact activation ID returned by start or status." } },
+    "onboarding activation first-leads": { activationId: { flag: "activation-id", help: "Exact activation ID returned by start or status." } },
+    "onboarding activation routines-preview": { activationId: { flag: "activation-id", help: "Exact activation ID returned by start or status." } },
+    "onboarding activation routine-activate": { activationId: { flag: "activation-id", help: "Exact activation ID returned by start or status." } },
     // Null and an omitted/empty label preserve an existing attachment label.
     "crm files complete-upload": { label: { noClear: true } },
     "tables rows remove-selection": {
@@ -78,7 +88,7 @@ export function registerCustomerOperationCommands(program, handle) {
             command.option("--file <path>", "Upload bytes from this local file. Omit the base64 flag; file name and content type default from the path.");
         for (const name of contract.required ?? []) {
             const property = contract.properties[name];
-            const flag = `--${name.replace(/_/g, "-")}`;
+            const flag = `--${overlay[name]?.flag ?? name.replace(/_/g, "-")}`;
             const option = command.options.find((candidate) => candidate.long === flag || candidate.long === `${flag}-json`);
             const multipartAlternative = spec.multipart && [spec.multipart.contentField, spec.multipart.nameField, spec.multipart.typeField].includes(name);
             if (multipartAlternative) {

package/dist/index.js

@@ -355,6 +355,12 @@ beginCliDiagnostics();
 maybeScheduleBackgroundUpdate();
 const program = createProgram();
 installCommanderExitOverride(program);
+// Compatibility dispatch stays out of help and the command catalog.
+const legacyMailboxCommand = process.argv.indexOf("mailboxes");
+if (legacyMailboxCommand >= 0 && process.argv[legacyMailboxCommand + 1] === "emailguard"
+    && !process.argv.slice(2, legacyMailboxCommand).some(arg => program.commands.some(command => command.name() === arg))) {
+    process.argv[legacyMailboxCommand + 1] = "deliverability";
+}
 const argv = withoutHelpForUnknownCommand(program, process.argv.map((arg) => arg === "--help-full" ? "--help" : arg));
 setCliDiagnosticOperation(commandNameForArgv(program, argv.slice(2)));
 try {

package/dist/run-wait.js

@@ -1,4 +1,5 @@
-import { OxygenError, sleep } from "@oxygen/shared";
+import { OxygenError } from "@oxygen/shared/cli-result";
+import { sleep } from "@oxygen/shared/timing";
 import { readPositiveInt, readRecordString } from "./cli-values.js";
 export async function waitForCliRun(config) {
     const timeoutSeconds = readPositiveInt(config.requestedTimeoutSeconds)
@@ -42,6 +43,13 @@ export async function waitForCliRun(config) {
                 exitCode: 1,
             });
         }
-        await sleep(Math.min(intervalSeconds * 1000, remainingMs));
+        // A timer can wake before its target. Preserve the poll interval even then,
+        // especially when the next permitted poll coincides with the deadline.
+        const nextPollAt = Math.min(deadline, Date.now() + intervalSeconds * 1000);
+        let sleepRemainingMs = nextPollAt - Date.now();
+        while (sleepRemainingMs > 0) {
+            await sleep(sleepRemainingMs);
+            sleepRemainingMs = nextPollAt - Date.now();
+        }
     }
 }

package/node_modules/@oxygen/formula/package.json

@@ -20,6 +20,14 @@
       "types": "./dist/value-normalizers.d.ts",
       "import": "./dist/value-normalizers.js",
       "default": "./dist/value-normalizers.js"
+    },
+    "./evaluate": {
+      "types": "./dist/evaluate.d.ts",
+      "import": "./dist/evaluate.js"
+    },
+    "./expression": {
+      "types": "./dist/expression.d.ts",
+      "import": "./dist/expression.js"
     }
   },
   "dependencies": {}

package/node_modules/@oxygen/shared/dist/agent-sessions.d.ts

@@ -1,3 +1,4 @@
+import type { GuidedActivationRoutine } from "./guided-activation.js";
 import { type AgentSessionSchedule } from "./agent-session-schedule.js";
 export type AgentSessionStatus = "draft" | "active" | "paused" | "budget_wait" | "completed" | "archived";
 export type AgentSessionResources = {
@@ -30,10 +31,12 @@ export type AgentSessionConfig = {
      * change or message it; anyone may pause it.
      */
     teammate_routine?: AgentSessionTeammateRoutine | undefined;
+    guided_activation?: GuidedActivationRoutine | undefined;
 };
 export type AgentSessionTeammateRoutine = {
     chat_id: string;
     proposal_id?: string | undefined;
+    report_policy?: "changes_only" | "periodic";
 };
 /** The routine marker of a session's settings, or null for a general session. */
 export declare function agentSessionTeammateRoutine(config: Pick<AgentSessionConfig, "teammate_routine">): AgentSessionTeammateRoutine | null;

package/node_modules/@oxygen/shared/dist/agent-sessions.js

@@ -1,3 +1,6 @@
+import { guidedActivationEnabled } from "./guided-activation.js";
+import { validateContract } from "./contracts/schema.js";
+import { GUIDED_ACTIVATION_SCAN_POLICY_CONTRACT } from "./contracts/guided-activation.js";
 import { isStaffEmail } from "./staff.js";
 import { OxygenError } from "./cli-result.js";
 import { WORKSPACE_EVENT_CATALOG } from "./workspace-event-catalog.js";
@@ -11,7 +14,7 @@ export function agentSessionsEnabled(env = process.env) {
     return env.OXYGEN_DEPLOY_ENV === "selfhost-dev" && env.OXYGEN_AGENT_SESSIONS_ENABLED === "staff" && env.OXYGEN_AGENTS_ENABLED?.trim().toLowerCase() === "true";
 }
 export function agentSessionsAvailableTo(env, viewer) {
-    return agentSessionsEnabled(env) && viewer.member && viewer.oxygenRole !== "client" && isStaffEmail(viewer.email, env);
+    return agentSessionsEnabled(env) && viewer.member && viewer.oxygenRole !== "client" && (guidedActivationEnabled(env) || isStaffEmail(viewer.email, env));
 }
 /** Reviewed native adapters. Unknown tools (including generic dispatch and agent management) fail closed. */
 export const AGENT_SESSION_ADAPTERS = {
@@ -118,6 +121,24 @@ export function validateAgentSessionConfig(config, requireResources = true) {
     const scheduleProblem = agentSessionScheduleProblem(config.schedule);
     if (scheduleProblem)
         fail(scheduleProblem);
+    if (config.guided_activation !== undefined && (!config.teammate_routine
+        || !config.guided_activation || !/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(config.guided_activation.activation_id)
+        || !["lead_scan", "morning_briefing"].includes(config.guided_activation.purpose))) {
+        fail("Guided routines require an activation, purpose and private Oxygent chat.");
+    }
+    if (config.guided_activation?.purpose === "lead_scan") {
+        const policy = config.guided_activation.scan_policy;
+        if (!policy || !validateContract(GUIDED_ACTIVATION_SCAN_POLICY_CONTRACT, policy, { unknown: "reject", overMax: "reject" }).ok
+            || policy.exclude_dnc !== true || policy.exclude_contacted !== true || policy.review_only !== true
+            || policy.max_new_leads > policy.max_examined || policy.max_provider_credits + policy.max_inference_credits > perRun) {
+            fail("Review the exact scan sources, review-only destination, exclusions and credit ceilings.");
+        }
+    }
+    else if (config.guided_activation?.scan_policy)
+        fail("Only a lead scan may have a sourcing policy.");
+    if (config.teammate_routine?.report_policy !== undefined && !["changes_only", "periodic"].includes(config.teammate_routine.report_policy)) {
+        fail("Choose changes_only or periodic for the routine report policy.");
+    }
     const routine = config.teammate_routine;
     if (routine !== undefined && (!routine || typeof routine.chat_id !== "string" || !/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(routine.chat_id)
         || (routine.proposal_id !== undefined && (typeof routine.proposal_id !== "string" || !routine.proposal_id.trim() || routine.proposal_id.length > 64)))) {

package/node_modules/@oxygen/shared/dist/billing-money.d.ts

@@ -0,0 +1,31 @@
+/** Milli-credit amounts shared by quoting and ledger settlement. Rounding policies
+ * are deliberately distinct: a positive hold rounds up, a quote rounds nearest,
+ * and persisted usage keeps its historical decimal rounding. */
+export declare const CREDIT_DECIMAL_SCALE = 1000;
+export type SettleCreditReservationInput = {
+    description?: string | null;
+    metadata?: Record<string, unknown>;
+};
+export type CreditReservationSettlement = {
+    kind: "release";
+} | {
+    kind: "capture";
+} | {
+    kind: "partial";
+    captured: number;
+    released: number;
+    captureIdempotencyKey: string;
+    releaseIdempotencyKey: string;
+    captureDescription: string;
+    releaseDescription: string;
+    metadataJson: string;
+};
+export declare function resolveCreditReservationSettlement(reservation: {
+    id: string;
+    credits: number;
+}, capturedCredits: number, input: SettleCreditReservationInput): CreditReservationSettlement;
+export declare function normalizeCredits(value: number): number;
+export declare function normalizeUsageCredits(value: number): number;
+/** A free quote is zero; negative, missing and nonfinite prices remain unknown. */
+export declare function normalizeQuotedCredits(value: number | null | undefined): number | null;
+export declare function roundQuotedCredits(value: number): number;

package/node_modules/@oxygen/shared/dist/billing-money.js

@@ -0,0 +1,60 @@
+import { OxygenError } from "./cli-result.js";
+/** Milli-credit amounts shared by quoting and ledger settlement. Rounding policies
+ * are deliberately distinct: a positive hold rounds up, a quote rounds nearest,
+ * and persisted usage keeps its historical decimal rounding. */
+export const CREDIT_DECIMAL_SCALE = 1000;
+export function resolveCreditReservationSettlement(reservation, capturedCredits, input) {
+    if (!Number.isFinite(capturedCredits) || capturedCredits < 0) {
+        throw new OxygenError("invalid_credit_amount", "Captured credit amount must be zero or positive.", {
+            details: { credits: capturedCredits },
+            exitCode: 1,
+        });
+    }
+    if (capturedCredits <= 0)
+        return { kind: "release" };
+    const captured = normalizeCredits(capturedCredits);
+    if (captured > reservation.credits) {
+        throw new OxygenError("credit_capture_exceeds_reservation", "Captured credits cannot exceed the reservation.", {
+            details: {
+                reservation_id: reservation.id,
+                reserved_credits: reservation.credits,
+                captured_credits: captured,
+            },
+            exitCode: 1,
+        });
+    }
+    if (captured === reservation.credits)
+        return { kind: "capture" };
+    const released = normalizeUsageCredits(reservation.credits - captured);
+    return {
+        kind: "partial",
+        captured,
+        released,
+        captureIdempotencyKey: `reservation:${reservation.id}:settle:capture`,
+        releaseIdempotencyKey: `reservation:${reservation.id}:settle:release`,
+        captureDescription: input.description ?? "Managed credit reservation partially captured",
+        releaseDescription: input.description ?? "Managed credit reservation remainder released",
+        metadataJson: JSON.stringify(input.metadata ?? {}),
+    };
+}
+export function normalizeCredits(value) {
+    if (!Number.isFinite(value) || value <= 0) {
+        throw new OxygenError("invalid_credit_amount", "Credit amount must be positive.", {
+            details: { credits: value },
+            exitCode: 1,
+        });
+    }
+    return Number((Math.ceil(value * CREDIT_DECIMAL_SCALE) / CREDIT_DECIMAL_SCALE).toFixed(3));
+}
+export function normalizeUsageCredits(value) {
+    return Number(value.toFixed(3));
+}
+/** A free quote is zero; negative, missing and nonfinite prices remain unknown. */
+export function normalizeQuotedCredits(value) {
+    if (typeof value !== "number" || !Number.isFinite(value) || value < 0)
+        return null;
+    return roundQuotedCredits(value);
+}
+export function roundQuotedCredits(value) {
+    return Math.round(value * CREDIT_DECIMAL_SCALE) / CREDIT_DECIMAL_SCALE;
+}

package/node_modules/@oxygen/shared/dist/billing.d.ts

@@ -159,6 +159,9 @@ export type CreditCommitmentKind = (typeof CREDIT_COMMITMENT_KINDS)[number];
  * there is one definition of the price.
  */
 export declare const SENDING_MAILBOX_MONTHLY_CREDITS = 100;
+/** Sequencer + included warm-up; managed tenant hosting is billed separately. */
+export declare function sendingMailboxMonthlyCredits(metadata?: unknown): number;
+export declare function sendingMailboxChargeKey(metadata?: unknown): string;
 /**
  * Grace window after a commitment goes past_due before the account disconnects.
  * Repricing 2026-09 decision 2.8: sending from the account pauses at once, and

package/node_modules/@oxygen/shared/dist/billing.js

@@ -1,4 +1,5 @@
-import { CREDITS_PER_USD as SNAPSHOT_CREDITS_PER_USD, PRICING_PLAN_SNAPSHOT, MANAGED_INBOX_CREDITS_PER_MONTH as SNAPSHOT_MANAGED_MAILBOX_CREDITS_PER_MONTH, SENDING_MAILBOX_CREDITS_PER_MONTH as SNAPSHOT_SENDING_MAILBOX_CREDITS_PER_MONTH, } from "./pricing-snapshot.generated.js";
+import { CREDITS_PER_USD as SNAPSHOT_CREDITS_PER_USD, PRICING_PLAN_SNAPSHOT, MANAGED_INBOX_CREDITS_PER_MONTH as SNAPSHOT_MANAGED_MAILBOX_CREDITS_PER_MONTH, SENDING_MAILBOX_CREDITS_PER_MONTH as SNAPSHOT_SENDING_MAILBOX_CREDITS_PER_MONTH, SENDING_ENTRA_MAILBOX_CREDITS_PER_MONTH, } from "./pricing-snapshot.generated.js";
+import { isEntraMailbox } from "./email-infrastructure-policy.js";
 import { currentSubscriptionGrantSlice, dueSubscriptionGrantSlices, } from "./billing-anchors.js";
 import { freeTierEntitlementEnabled } from "./plan-capabilities.js";
 import { AUTOMATION_STEP_CREDITS_REPRICING, AUTOMATION_STEPS_COUNT_TOWARD_RUN_CAP_REPRICING, isRepricingInForce, BYOK_PLATFORM_FEE_REPRICING, OXYGEN_49_BYOK_REPRICING, repricedValue, TOPUP_RATE_REPRICING, } from "./repricing.js";
@@ -222,6 +223,13 @@ export const CREDIT_COMMITMENT_KINDS = [
  * there is one definition of the price.
  */
 export const SENDING_MAILBOX_MONTHLY_CREDITS = SNAPSHOT_SENDING_MAILBOX_CREDITS_PER_MONTH;
+/** Sequencer + included warm-up; managed tenant hosting is billed separately. */
+export function sendingMailboxMonthlyCredits(metadata) {
+    return isEntraMailbox(metadata) ? SENDING_ENTRA_MAILBOX_CREDITS_PER_MONTH : SENDING_MAILBOX_MONTHLY_CREDITS;
+}
+export function sendingMailboxChargeKey(metadata) {
+    return isEntraMailbox(metadata) ? "commitment.sending_entra_mailbox" : "commitment.sending_mailbox";
+}
 /**
  * Grace window after a commitment goes past_due before the account disconnects.
  * Repricing 2026-09 decision 2.8: sending from the account pauses at once, and

package/node_modules/@oxygen/shared/dist/capability-discovery.js

@@ -3151,7 +3151,7 @@ function placementGuideRecommendation(query) {
         commands: ["skills get"],
         exactCommand: "oxygen skills get oxygen-deliverability --file references/placement.md --json",
         exactMcpCall: { tool: "oxygen_skills_get", arguments: { name: "oxygen-deliverability", file: "references/placement.md" } },
-        execution: "Read oxygen-deliverability, references/placement.md for placement-test guidance and references/emailguard.md for inbox monitoring. Instruction reads do not run a test or enroll a mailbox. Keep the live preview, sender scope, credit ceiling and separate approvals for provider provisioning and test sends.",
+        execution: "Read oxygen-deliverability, references/placement.md for placement-test guidance and references/monitoring.md for inbox monitoring. Instruction reads do not run a test or enroll a mailbox. Keep the live preview, sender scope, credit ceiling and separate approvals for provider provisioning and test sends.",
     };
 }
 /** OXP-43.72: pricing qualifies the lookup or scrape, rather than changing its owner. */
@@ -3336,7 +3336,7 @@ function isMailboxDeleteIntent(query) {
  * as sending infrastructure, and a table/list/suppression context is excluded.
  */
 function isDomainDnsIntent(query) {
-    return /\bdns\b/.test(query)
+    return /\b(dns|spf|dkim|dmarc)\b/.test(query)
         && !/\b(tables?|columns?|rows?|crm|contacts?|leads?)\b/.test(query);
 }
 function isSendingDomainDeleteIntent(query) {