@oxygen-agent/cli 1.1014.86 → 1.1014.119

package/node_modules/@oxygen/shared/dist/capability-discovery.js

@@ -1018,6 +1018,18 @@ const CRM_ENRICHMENT_READ_VIEW = {
 };
 /** The card a route reports: Publishing's own, or its UGC view for a creator-program ask. */
 function routeCardFor(card, query) {
+    const placementGuide = card.id === "sending-infrastructure" ? placementGuideRecommendation(query) : null;
+    if (placementGuide)
+        card = { ...card, posture: "read_only", execution: placementGuide.execution };
+    const lookup = card.id === "tables" ? linkedinUrlFindingRecommendation(query) : null;
+    if (lookup)
+        card = { ...card, execution: lookup.execution };
+    const pageResearch = card.id === "sourcing-and-provider-tools" ? pageScrapingRecommendation(query) : null;
+    if (pageResearch)
+        card = { ...card, execution: pageResearch.execution };
+    const collaboration = card.id === "collaboration" ? collaborationRecommendation(query) : null;
+    if (collaboration)
+        card = { ...card, execution: collaboration.execution, posture: collaboration.posture };
     if (card.id === "records" && isCrmEnrichmentConfigurationRead(query))
         return { ...card, ...CRM_ENRICHMENT_READ_VIEW };
     const crmMaintenance = card.id === "records" ? crmMaintenanceRecommendation(query) : null;
@@ -1115,6 +1127,8 @@ function routeCardFor(card, query) {
 /** Search surfaces share the selected skill owner; a general router is fallback. */
 function preferredSkillForIntent(card, query) {
     if (card.id === "tables") {
+        if (linkedinUrlFindingRecommendation(query))
+            return "oxygen-enrichment";
         if (/\bclay\b/.test(query) && /\b(import|export|migrat\w*|mov\w*)\b/.test(query))
             return "oxygen-clay-migration";
         if (isTableMaintenanceIntent(query))
@@ -1926,6 +1940,8 @@ function explicitCapabilityIntent(query) {
     if (isWorkspacePagesIntent(query) || isWorkspaceSettingsIntent(query)) {
         return ROUTE_BY_ID.get("workspace-access") ?? null;
     }
+    if (collaborationRecommendation(query))
+        return ROUTE_BY_ID.get("collaboration") ?? null;
     if (/\btables?\b/.test(query) && isSecondPartyDecisionIntent(query))
         return ROUTE_BY_ID.get("collaboration") ?? null;
     if (tableReadRecommendation(query) || tableMaintenanceRecommendation(query))
@@ -2009,6 +2025,8 @@ function explicitCapabilityIntent(query) {
     }
     if (isHostedWorkflowIntent(query))
         return ROUTE_BY_PRIMITIVE.get("workflows") ?? null;
+    if (placementGuideRecommendation(query))
+        return ROUTE_BY_ID.get("sending-infrastructure") ?? null;
     if (isCompanySourcingIntent(query))
         return ROUTE_BY_ID.get("sourcing-and-provider-tools") ?? null;
     if (isOwnedPostCommentIntent(query))
@@ -2053,6 +2071,8 @@ function explicitCapabilityIntent(query) {
     // research input.
     if (isNetNewLinkedInInitiation(query))
         return ROUTE_BY_PRIMITIVE.get("sequences") ?? null;
+    if (linkedinUrlFindingRecommendation(query))
+        return ROUTE_BY_PRIMITIVE.get("tables") ?? null;
     if (isPublicLinkedInRead(query))
         return ROUTE_BY_ID.get("linkedin-public-research") ?? null;
     if (/\b(my|our|own)\b.{0,40}\blinkedin\b.{0,40}\b(post )?engagers?\b/.test(query)) {
@@ -2134,6 +2154,10 @@ function explicitCapabilityIntent(query) {
     // company_enrich preset instead.
     if (isCompanyUrlRecoveryIntent(query))
         return ROUTE_BY_ID.get("sourcing-and-provider-tools") ?? null;
+    if (pageScrapingRecommendation(query))
+        return ROUTE_BY_ID.get("sourcing-and-provider-tools") ?? null;
+    if (/\bagency partners?\b/.test(query))
+        return ROUTE_BY_ID.get("agency-directory") ?? null;
     // A category-plus-place ask ("dental practices in Austin", "local businesses",
     // "scrape Google Maps") is the companies-search `local` intent. A 2026-09-21
     // blind user typing "find local businesses like dental practices in a city"
@@ -2212,6 +2236,18 @@ function isPublishingPostIntent(query) {
         && !(/\b(find|search|scrape|research)\b/.test(query) && /\b(about|mention|containing)\b/.test(query));
 }
 function recommendationsFor(card, query) {
+    const placementGuide = card.id === "sending-infrastructure" ? placementGuideRecommendation(query) : null;
+    if (placementGuide)
+        return placementGuide;
+    const lookup = card.id === "tables" ? linkedinUrlFindingRecommendation(query) : null;
+    if (lookup)
+        return lookup;
+    const pageResearch = card.id === "sourcing-and-provider-tools" ? pageScrapingRecommendation(query) : null;
+    if (pageResearch)
+        return pageResearch;
+    const collaboration = card.id === "collaboration" ? collaborationRecommendation(query) : null;
+    if (collaboration)
+        return collaboration;
     if (card.id === "knowledge-graph" && isWorkspaceSkillIntent(query)) {
         return { tools: ["oxygen_workspace_skills_list", "oxygen_workspace_skills_create", "oxygen_workspace_skills_import", "oxygen_workspace_skills_get", "oxygen_workspace_skills_update", "oxygen_workspace_skills_archive"],
             commands: ["skills workspace list", "skills workspace create", "skills workspace import", "skills workspace get", "skills workspace update", "skills workspace archive"] };
@@ -2930,6 +2966,48 @@ function isRowClassificationIntent(query) {
 function isCompanyResearchQuestionIntent(query) {
     return /\b(founders?|founded by|parent compan(?:y|ies)|subsidiar(?:y|ies)|cloud provider|naics|column templates?|template catalog|ready[- ]made|research question|company research|offers? demos?|gives? demos?)\b/.test(query);
 }
+/** Supporting placement instructions belong to deliverability, even when the ask names an inbox. */
+function placementGuideRecommendation(query) {
+    if (!/\bplacement(?:[- ]tests?)?\b/.test(query)
+        || !/\b(guidance|guide|instructions|supporting|read|docs?|documentation)\b/.test(query)
+        || /\b(run|send|create|connect|enable)\b/.test(query))
+        return null;
+    return {
+        tools: ["oxygen_skills_get"],
+        commands: ["skills get"],
+        exactCommand: "oxygen skills get oxygen-deliverability --file references/placement.md --json",
+        exactMcpCall: { tool: "oxygen_skills_get", arguments: { name: "oxygen-deliverability", file: "references/placement.md" } },
+        execution: "Read oxygen-deliverability, references/placement.md for placement-test guidance and references/emailguard.md for inbox monitoring. Instruction reads do not run a test or enroll a mailbox. Keep the live preview, sender scope, credit ceiling and separate approvals for provider provisioning and test sends.",
+    };
+}
+/** OXP-43.72: pricing qualifies the lookup or scrape, rather than changing its owner. */
+function linkedinUrlFindingRecommendation(query) {
+    if (!/\blinkedin\b/.test(query) || !/\b(urls?|links?)\b/.test(query)
+        || !/\b(find|finding|lookup|look up|resolve|missing)\b/.test(query)
+        || /\b(scrape\w*|posts?|comments?|engagers?|followers?|connect|inbox|send\w*|publish\w*)\b/.test(query)
+        || /\bcompany pages?\b/.test(query))
+        return null;
+    return {
+        tools: ["oxygen_tools_search", "oxygen_columns_add", "oxygen_enrich_column_preview"],
+        commands: ["tools search", "columns add", "enrich-column preview"],
+        exactCommand: "oxygen tools search find_linkedin_url --json",
+        exactMcpCall: { tool: "oxygen_tools_search", arguments: { query: "find_linkedin_url" } },
+        execution: "Inspect the native LinkedIn URL waterfall and current pricing with tools search find_linkedin_url. Read oxygen-enrichment and its references/linkedin-url.md. Add the linkedin_url capability to existing rows, then preview the exact row scope for free before an approved run with a credit ceiling. Known-profile scraping is a separate operation.",
+    };
+}
+function pageScrapingRecommendation(query) {
+    if (!/\b(scrap(?:e|ing)|crawl\w*|fetch|extract)\b/.test(query)
+        || !/\b(pages?|websites?|web ?sites?|web content|urls?)\b/.test(query)
+        || /\b(linkedin|emails?|phones?|crm|records?)\b/.test(query))
+        return null;
+    return {
+        tools: ["oxygen_tools_search", "oxygen_tools_get"],
+        commands: ["tools search", "tools get"],
+        exactCommand: "oxygen tools search firecrawl --json",
+        exactMcpCall: { tool: "oxygen_tools_search", arguments: { query: "firecrawl" } },
+        execution: "Discover public-page operations with tools search firecrawl, then hydrate one exact tool and its pricing. Read oxygen-sourcing and provider-runbooks/firecrawl.md. Preview the selected URLs and price before execution; live scraping requires approval for the exact URL scope and credit ceiling. For durable per-row research, use native Tables research columns. Discovery does not run a scrape.",
+    };
+}
 function isCompanyUrlRecoveryIntent(query) {
     const urlNoun = /\b(websites?|web ?sites?|website urls?|domains?|urls?|homepages?)\b/;
     const companyNoun = /\b(compan(?:y|ies)|accounts?|organi[sz]ations?|brands?|vendors?)\b/;
@@ -3109,6 +3187,50 @@ function isNetNewLinkedInInitiation(query) {
         return false;
     return !/\b(sequence|campaign|cadence|enroll|nurture|multi[ -]step|multi[ -]recipient|leads|contacts|recipients|audience|rotate senders?|stop on reply|day\s*\d+)\b/.test(query);
 }
+/** Recommendations point to the mounted native owners, without conferring their write authority. */
+function collaborationRecommendation(query) {
+    const memberRead = { tools: ["oxygen_workspace_members_list"], commands: ["approvals client list"],
+        execution: "Read workspace member roles, Clerk profiles and pending invitations. This does not invite anyone or change access. Free.", posture: "read_only" };
+    const member = /\b(members?|memberships?)\b/.test(query);
+    const workspace = /\b(workspace|organization|org)\b/.test(query);
+    const clientRole = /\bclient (?:role|access|login)\b/.test(query);
+    const roleWrite = /\b(set|change|grant|clear|remove|revoke|restrict|promote|demote)\b/.test(query);
+    if (clientRole && roleWrite && !/\b(crm|records?|contacts?|companies|api|oauth)\b/.test(query)) {
+        const clear = /\b(clear|remove|revoke)\b/.test(query);
+        return { tools: ["oxygen_members_client_role_set", ...memberRead.tools], commands: [clear ? "approvals client revoke" : "approvals client grant", ...memberRead.commands],
+            execution: "An admin can set or clear the restricted client overlay; a pending invite is checked in Clerk. This sends no invitation and does not change the Clerk workspace role. Free.", posture: "workspace_write" };
+    }
+    if (workspace && member && roleWrite && /\b(roles?|admin|administrator)\b/.test(query))
+        return {
+            tools: ["oxygen_members_workspace_role_set", ...memberRead.tools], commands: ["orgs member-role", ...memberRead.commands],
+            execution: "An admin changes a member's workspace role in Clerk before Oxygen mirrors it. Self-role changes and the last administrator are protected; the client overlay is separate. Free.", posture: "workspace_write",
+        };
+    if (((workspace && member) || clientRole || /\bwho is in (?:my|our|this|the) workspace\b/.test(query))
+        && !/\b(invite|add|delete|cancel|enable|disable|set|change|grant|clear|remove|revoke|restrict|promote|demote)\b/.test(query))
+        return memberRead;
+    if (/\b(?:approval|launch|sign ?off) gates?\b/.test(query)) {
+        const write = /\b(arm|set|enable|disable|require|change|turn)\b/.test(query);
+        return { tools: write ? ["oxygen_approvals_gate_set", "oxygen_approval_gates_list"] : ["oxygen_approval_gates_list", "oxygen_approvals_gate_set"],
+            commands: write ? ["approvals gate set", "approvals gate list"] : ["approvals gate list", "approvals gate set"],
+            execution: write ? "An admin configures the approval gate; this grants no approval. Launch gates a sequence; signoff gates a table. The owning primitive enforces it. Free."
+                : "Read configured approval gates and effective state for an exact subject. Reading a gate grants no approval. Free.", posture: write ? "workspace_write" : "read_only" };
+    }
+    if (/\bcomments?\b/.test(query) && /\b(internal|workspace|teammate|client)\b/.test(query)
+        && !/\b(linkedin|public|published|posts?|publishing)\b/.test(query)) {
+        if (/\b(edit|update|correct)\b/.test(query))
+            return { tools: ["oxygen_comments_edit", "oxygen_comments_list"], commands: ["comments edit", "comments list"],
+                execution: "Edit your own internal workspace comment by comment id; the author check and edit time are enforced by its native owner. Free.", posture: "workspace_write" };
+        if (/\b(delete|retract|remove)\b/.test(query))
+            return { tools: ["oxygen_comments_delete", "oxygen_comments_list"], commands: ["comments delete", "comments list"],
+                execution: "Retract your own internal comment by comment id. Its audit placeholder remains; this does not delete a public post comment. Free.", posture: "workspace_write" };
+    }
+    if (/\b(cancel|withdraw|retract)\b/.test(query) && /\b(?:approval|sign ?off) requests?\b/.test(query))
+        return {
+            tools: ["oxygen_approvals_cancel", "oxygen_approvals_list"], commands: ["approvals cancel", "approvals list"],
+            execution: "Withdraw an approval request you created, by request id; this grants no approval. The requester check remains enforced by the native owner. Free.", posture: "workspace_write",
+        };
+    return null;
+}
 function isSecondPartyDecisionIntent(query) {
     const decisionLanguage = /\b(sign ?off|signoff|approval request|request approval|approval gate|go no go)\b/.test(query);
     const clientDecision = /\bclient\b.{0,20}\b(approv\w*|sign ?off|review|decide|decision|login|role)\b/.test(query)

package/node_modules/@oxygen/shared/dist/contracts/browser-operations.js

@@ -97,15 +97,25 @@ export const BROWSER_OPERATIONS = [
     operation("tables.resource.runs.cancel", `${run}/cancel`, "POST", "tables runs stop", "oxygen_table_resource_run_stop", "runs", "Cancel one durable Table run; never repeats external provider effects."),
     operation("tables.resource.runs.pause", `${run}/pause`, "POST", "tables runs pause", "oxygen_table_resource_run_pause", "runs", "Pause one durable Table run without discarding its approved scope."),
     operation("tables.resource.runs.resume", `${run}/resume`, "POST", "tables runs resume", "oxygen_table_resource_run_resume", "runs", "Resume a paused Table run within its existing approved scope and credit ceiling."),
-    operation("tables.resource.runs.retry", `${run}/retry-failed`, "POST", "tables runs retry", "oxygen_table_resource_run_retry", "runs", "Retry failed cells within a Table run's approved scope. Uncertain external effects require approved_effect_unknown=true.", { approved_effect_unknown: bool() }, [], { spends: true }),
+    operation("tables.resource.runs.retry", `${run}/retry-failed`, "POST", "tables runs retry", "oxygen_table_resource_run_retry", "runs", "Retry failed cells; a fresh allowance requires approved, retry_plan_hash and max_additional_credits. Uncertain effects require separate approval.", { approved_effect_unknown: bool(), approved: bool(), retry_plan_hash: text(), max_additional_credits: num({ minimum: 0 }) }, [], { spends: true }),
     operation("tables.resource.runs.provider_summary", `${run}/provider-summary`, "GET", "tables runs provider-summary", "oxygen_table_resource_run_provider_summary", "runs", "Read a Table run's provider outcomes, fulfilled rows, costs and timing."),
     operation("tables.resource.ingestions.cancel", `${table}/ingestions/{ingestion_run}/cancel`, "POST", "tables ingestion stop", "oxygen_table_resource_ingestion_stop", "runs", "Cancel this Table's active hosted ingestion run."),
     operation("tables.resource.ingestions.retry", `${table}/ingestions/{ingestion_run}/retry-failed`, "POST", "tables ingestion retry", "oxygen_table_resource_ingestion_retry", "runs", "Retry failed items in this Table's hosted ingestion run."),
     operation("tables.resource.import", "/api/cli/tables/import", "POST", "tables upload", "oxygen_table_resource_upload", "tables", "Preview or import small uploaded CSV, JSON or XLSX bytes through the exact browser import contract. Preview writes no rows.", upload, ["content_base64", "file_name"], { multipart }),
     operation("billing.activate", "/api/cli/billing/activate", "POST", "billing activate", "oxygen_billing_activate", "billing", "Activate a trial subscription now and charge its saved payment method; administrator approval is required. An optional tier reprices the active trial in the same call.", { approved: bool(), tier: text() }, ["approved"], { spends: true }),
-    operation("billing.checkout", "/api/cli/billing/checkout", "POST", "billing checkout", "oxygen_billing_checkout", "billing", "Open the same hosted plan checkout as the browser; the returned URL carries the payment approval step.", { plan: text(), interval: enumOf(["month", "year"]), term: enumOf(["month", "year"]), terms_version: text(), currency: text(), trial: bool(), return_to: text(), source: text(), blocked: text() }, ["plan"]),
-    operation("billing.confirm", "/api/cli/billing/confirm", "POST", "billing confirm", "oxygen_billing_confirm", "billing", "Confirm an exact unexpired plan-change preview. approved accepts its payment, term and effective date; workspace administrator required.", { token: text(), approved: bool() }, ["token", "approved"], { spends: true }),
-    operation("billing.portal", "/api/cli/billing/portal", "POST", "billing portal", "oxygen_billing_portal", "billing", "Create the workspace's authenticated Stripe billing-portal URL; requires workspace administrator authorization.", { returnUrl: text() }),
+    operation("billing.checkout", "/api/cli/billing/checkout", "POST", "billing checkout", "oxygen_billing_checkout", "billing", "Open browser Checkout; payment approves purchase. First purchase: admin/owner. New yearly plans use interval month, term year and the current terms_version.", {
+        plan: text("Plan key from billing balance available_plans, for example oxygen_49."),
+        interval: enumOf(["month", "year"], { description: "New purchases use month. year is legacy prepaid cadence, refused for new purchases." }),
+        term: enumOf(["month", "year"], { description: "year commits to twelve discounted monthly payments; month is the default." }),
+        terms_version: text("Required for term year: annual_monthly_terms.terms_version from billing balance."),
+        currency: text("Billing currency: usd (default)."),
+        trial: bool({ description: "Retired compatibility option; omit for a new paid subscription." }),
+        return_to: text("Same-origin path to return to after Checkout, for example /home."),
+        source: text("Optional upgrade-entry attribution; omit if unknown."),
+        blocked: text("Optional capability that led to the upgrade; omit if unknown."),
+    }, ["plan"]),
+    operation("billing.confirm", "/api/cli/billing/confirm", "POST", "billing confirm", "oxygen_billing_confirm", "billing", "Confirm a plan-change preview within 15 minutes; approved accepts payment, term and effective date. Unrestricted members allowed; restricted clients denied.", { token: text(), approved: bool() }, ["token", "approved"], { spends: true }),
+    operation("billing.portal", "/api/cli/billing/portal", "POST", "billing portal", "oxygen_billing_portal", "billing", "Create a Stripe billing-portal URL. Unrestricted members allowed; restricted clients denied.", { returnUrl: text() }),
     operation("billing.ownership.get", "/api/cli/billing/ownership", "GET", "billing ownership get", "oxygen_billing_ownership_get", "billing", "Read the active workspace's shared billing owner, candidate owners and credit cap."),
     operation("billing.ownership.set", "/api/cli/billing/ownership", "POST", "billing ownership set", "oxygen_billing_ownership_set", "billing", "Set the billing owner and optional monthly credit cap using the browser's administrator and workspace eligibility checks.", { billing_owner_organization_id: text(), monthly_credit_cap: nullable(num({ minimum: 0 })) }, ["billing_owner_organization_id"]),
     operation("billing.ownership.clear", "/api/cli/billing/ownership", "DELETE", "billing ownership clear", "oxygen_billing_ownership_clear", "billing", "Restore this workspace's own billing ownership after the same administrator checks as the browser."),

package/node_modules/@oxygen/shared/dist/contracts/customer-operations.js

@@ -8,6 +8,7 @@ import { COPILOT_SESSIONS_LIST_CONTRACT } from "./copilot-sessions.js";
 import { CRM_FILE_ATTACH_CONTRACT, CRM_FILE_ATTACH_DESCRIPTION } from "./crm-support.js";
 import { spintaxContract } from "./spintax.js";
 import { betaFeaturesUpdateContract, emailDomainSuppressionListContract, emailDomainSuppressionRemoveContract, emailSuppressionRemoveContract, providerLimitListContract, providerLimitSelectorContract, providerLimitUpdateContract } from "./workspace-utilities.js";
+import { knowledgeSyncReadContract } from "./knowledge-sync.js";
 const text = (description) => str(description === undefined ? {} : { description });
 const list = () => arr(str());
 const json = { type: "object", additionalProperties: true };
@@ -34,8 +35,8 @@ export const CUSTOMER_OPERATIONS = [
     operation("comments.edit", "/api/cli/collab/comments/{comment_id}", "PATCH", "comments edit", "oxygen_comments_edit", "collaboration", "Edit your own internal workspace comment; records the edit time.", { body: text() }, ["body"], mcpOnly),
     operation("comments.delete", "/api/cli/collab/comments/{comment_id}", "DELETE", "comments delete", "oxygen_comments_delete", "collaboration", "Retract your own internal workspace comment while retaining its audit trail.", {}, [], mcpOnly),
     operation("approvals.cancel", "/api/cli/collab/requests/{request_id}/cancel", "POST", "approvals cancel", "oxygen_approvals_cancel", "collaboration", "Withdraw an approval request you created; grants no approval.", { note: text() }, [], mcpOnly),
-    operation("members.client_role", "/api/cli/collab/members/role", "POST", "approvals client grant", "oxygen_members_client_role_set", "collaboration", "Set or clear a member's restricted client role; workspace admin only.", { email: text(), role: nullable(enumOf(["client"])) }, ["email", "role"], mcpOnly),
-    operation("members.workspace_role", "/api/cli/collab/members/workspace-role", "POST", "orgs member-role", "oxygen_members_workspace_role_set", "collaboration", "Change a member's workspace role; admin only and the last administrator is protected.", { email: text(), role: enumOf(["admin", "member"]) }, ["email", "role"], mcpOnly),
+    operation("members.client_role", "/api/cli/collab/members/role", "POST", "approvals client grant", "oxygen_members_client_role_set", "collaboration", "Set or clear the restricted client overlay; admin only. May read pending Clerk invitations; sends no invitation. Free.", { email: text(), role: nullable(enumOf(["client"])) }, ["email", "role"], { ...mcpOnly, annotations: { openWorldHint: true } }),
+    operation("members.workspace_role", "/api/cli/collab/members/workspace-role", "POST", "orgs member-role", "oxygen_members_workspace_role_set", "collaboration", "Change a member's workspace role in Clerk; admin only, with self-role and last-administrator protection. Free.", { email: text(), role: enumOf(["admin", "member"]) }, ["email", "role"], { ...mcpOnly, annotations: { openWorldHint: true } }),
     operation("copilot.sessions.list", "/api/cli/copilot/sessions", "GET", "copilot list", "oxygen_copilot_sessions_list", "agents", "List attended Copilot sessions in this workspace.", COPILOT_SESSIONS_LIST_CONTRACT.properties, [], mcpOnly),
     operation("copilot.sessions.update", "/api/cli/copilot/sessions/{session_id}", "PATCH", "copilot policy set", "oxygen_copilot_session_update", "agents", "Set an attended Copilot session's approval and screen-follow policies. Paid auto-approval is explicit standing authorization.", { auto_approve_policy: enumOf(["off", "paid"]), surface_policy: enumOf(["off", "follow"]) }, [], { spends: true }),
     operation("copilot.attachments.list", "/api/cli/copilot/sessions/{session_id}/attachments", "GET", "copilot attachments list", "oxygen_copilot_attachments_list", "agents", "List sent and unsent attachments in one Copilot session.", {}, []),
@@ -64,8 +65,8 @@ export const CUSTOMER_OPERATIONS = [
     operation("directory.logo", "/api/cli/directory/listing/logo", "POST", "directory logo upload", "oxygen_directory_logo_upload", "crm", "Upload a public agency-directory logo and read back the updated listing; PNG, JPEG, WebP or SVG, at most 2 MB.", { content_base64: text(), file_name: text(), content_type: enumOf(["image/png", "image/jpeg", "image/webp", "image/svg+xml"]) }, ["content_base64", "file_name", "content_type"], { multipart: { contentField: "content_base64", nameField: "file_name", typeField: "content_type", fileField: "file" } }),
     operation("domains.delete", "/api/cli/domains/delete", "POST", "domains delete", "oxygen_domains_delete", "deliverability", "Preview domain removal and renewal cancellation; execute only with the exact plan hash and confirmation.", { domains: list(), approved: bool(), plan_hash: text(), confirmation: text() }, ["domains"], mcpOnly),
     operation("knowledge.pages.archive", "/api/cli/knowledge/pages/archive", "POST", "knowledge page archive", "oxygen_knowledge_page_archive", "knowledge", "Archive a knowledge page; content/history remain, links become unresolved. Pass expected_revision for the version you reviewed.", { slug: text(), id: text(), expected_revision: int({ minimum: 1 }) }, [], mcpOnly),
-    operation("knowledge.sync.manifest", "/api/cli/knowledge/sync/manifest", "POST", "knowledge sync-manifest", "oxygen_knowledge_sync_manifest", "knowledge", "Read the wiki revision and content-hash inventory without downloading instruction bodies.", {}, [], { mutates: false }),
-    operation("knowledge.sync.delta", "/api/cli/knowledge/sync/delta", "POST", "knowledge sync", "oxygen_knowledge_sync_delta", "knowledge", "Read one resumable batch of wiki pages and tombstones, bounded by the server's byte budget.", { cursor: text(), limit: int({ minimum: 1, maximum: 200 }) }, [], { ...mcpOnly, mutates: false }),
+    operation("knowledge.sync.manifest", "/api/cli/knowledge/sync/manifest", "POST", "knowledge sync-manifest", "oxygen_knowledge_sync_manifest", "knowledge", "Read wiki revision/hash metadata. Follow next_cursor for remaining pages; scope is a live keyset, not a snapshot.", {}, [], { contract: knowledgeSyncReadContract, mutates: false }),
+    operation("knowledge.sync.delta", "/api/cli/knowledge/sync/delta", "POST", "knowledge sync-delta", "oxygen_knowledge_sync_delta", "knowledge", "Read complete wiki pages/tombstones. First call seeds missing starter pages. Follow next_cursor; an oversized page is refused without skipping. 0 credits.", {}, [], { contract: knowledgeSyncReadContract }),
     operation("limits.provider.get", "/api/cli/limits/provider", "GET", "limits provider list", "oxygen_provider_limits_list", "billing", "Read provider request limits and BYOK warning defaults. MCP defaults to bounded summary pages; follow paging.next_offset with the same filter. HTTP/CLI omit pagination for the full legacy list. 0 credits.", {}, [], { contract: providerLimitListContract, generated: { cli: false, mcp: false } }),
     operation("limits.provider.set", "/api/cli/limits/provider", "POST", "limits provider set", "oxygen_provider_limits_set", "billing", "Set an enforced provider request limit; admin or owner only. Approve the exact provider, operation and window: raising a cap may permit more provider use. 0 credits.", {}, [], { ...mcpOnly, contract: providerLimitUpdateContract }),
     operation("limits.provider.delete", "/api/cli/limits/provider", "DELETE", "limits provider delete", "oxygen_provider_limits_delete", "billing", "Clear one provider request-limit override; admin or owner only. Approve the exact selector. Other operation overrides remain; the provider returns to its defaults, whose BYOK threshold may be observe-only. 0 credits.", {}, [], { ...mcpOnly, contract: providerLimitSelectorContract, queryFields: ["provider", "operation"] }),
@@ -107,7 +108,7 @@ export const CUSTOMER_OPERATIONS = [
     operation("billing.invoices", "/api/cli/billing/invoices", "GET", "billing invoices", "oxygen_billing_invoices", "billing", "Read this workspace's billing invoices and their hosted payment links.", {}, [], mcpOnly),
     operation("billing.seats.set", "/api/cli/billing/seats", "POST", "billing seats set", "oxygen_billing_seats_set", "billing", "Set purchased legacy sending-seat quantity. Retired seats cannot increase; reducing existing seats lowers the next renewal charge.", { seat_key: enumOf(["linkedin", "whatsapp", "phone_number", "email_sender"]), quantity: int({ minimum: 0 }) }, ["seat_key", "quantity"], mcpOnly),
     operation("collaboration.gates.list", "/api/cli/collab/gates", "GET", "approvals gate list", "oxygen_approval_gates_list", "collaboration", "Read this workspace's approval gates, optionally for one exact subject.", { subject: text() }, [], mcpOnly),
-    operation("collaboration.members.list", "/api/cli/collab/members", "GET", "approvals client list", "oxygen_workspace_members_list", "collaboration", "Read workspace members and their collaboration roles.", {}, [], mcpOnly),
+    operation("collaboration.members.list", "/api/cli/collab/members", "GET", "approvals client list", "oxygen_workspace_members_list", "collaboration", "Read workspace member roles, with Clerk profiles and pending invitations. Free.", {}, [], { ...mcpOnly, annotations: { openWorldHint: true } }),
     operation("crm.connections", "/api/cli/crm/objects/{object}/records/{row_id}/connections", "GET", "crm connections", "oxygen_crm_connections", "crm", "Read a CRM record's connected conversations, sequence enrollments and related activity.", { conversation_limit: int({ minimum: 1 }), sequence_limit: int({ minimum: 1 }) }, [], mcpOnly),
     operation("crm.tasks.list", "/api/cli/crm/tasks", "GET", "crm tasks list", "oxygen_crm_tasks_queue", "crm", "Read the workspace task queue by status, assignee and cursor.", { status: text(), assignee: text(), cursor: text(), limit: int({ minimum: 1 }) }, [], mcpOnly),
     operation("crm.files.download", "/api/cli/crm/files/{attachment_id}/download", "GET", "crm files download", "oxygen_crm_file_download", "crm", "Download a tenant-owned record attachment by attachment_id. The native authenticated response contains its exact bytes.", {}, [], { binary: { maxBytes: 50 * 1024 * 1024 } }),

package/node_modules/@oxygen/shared/dist/contracts/knowledge-sync.d.ts

@@ -0,0 +1,19 @@
+/** Both sync readers expose complete native pages; no formatter may trim a
+ * page after its continuation position has been issued. */
+export declare const knowledgeSyncReadContract: import("./schema.js").ContractObject<{
+    readonly cursor: import("./schema.js").StringProperty;
+    readonly limit: {
+        type: "integer";
+        description?: string;
+        minimum?: number;
+        maximum?: number;
+        "x-clamp"?: true;
+    };
+    readonly max_chars: {
+        type: "integer";
+        description?: string;
+        minimum?: number;
+        maximum?: number;
+        "x-clamp"?: true;
+    };
+}, never>;

package/node_modules/@oxygen/shared/dist/contracts/knowledge-sync.js

@@ -0,0 +1,8 @@
+import { int, obj, str } from "./schema.js";
+/** Both sync readers expose complete native pages; no formatter may trim a
+ * page after its continuation position has been issued. */
+export const knowledgeSyncReadContract = obj({
+    cursor: str({ minLength: 1, maxLength: 256 }),
+    limit: int({ minimum: 1, maximum: 200 }),
+    max_chars: int({ minimum: 1000, maximum: 48000, description: "Complete receipt window; surface cap applies." }),
+});

package/node_modules/@oxygen/shared/dist/contracts/publishing-reads.d.ts

@@ -20,6 +20,7 @@ export declare const publishingReadProjectionContract: ContractObject<{
         readonly description?: string;
         readonly minLength?: number;
         readonly maxLength?: number;
+        readonly pattern?: string;
         readonly enum: readonly ["full", "summary", "value"];
     };
     readonly value_path: import("./schema.js").StringProperty;
@@ -40,6 +41,7 @@ export declare const publishingAmplificationListQueryContract: ContractObject<{
         readonly description?: string;
         readonly minLength?: number;
         readonly maxLength?: number;
+        readonly pattern?: string;
         readonly enum: readonly ["full", "summary", "value"];
     };
     readonly value_path: import("./schema.js").StringProperty;
@@ -57,6 +59,7 @@ export declare const publishingAmplificationListQueryContract: ContractObject<{
         readonly description?: string;
         readonly minLength?: number;
         readonly maxLength?: number;
+        readonly pattern?: string;
         readonly enum: readonly ["all", "tag", "post", "ugc_program", "ugc_peer_program"];
     };
     readonly limit: {
@@ -73,6 +76,7 @@ export declare const publishingAmplificationActionsQueryContract: ContractObject
         readonly description?: string;
         readonly minLength?: number;
         readonly maxLength?: number;
+        readonly pattern?: string;
         readonly enum: readonly ["full", "summary", "value"];
     };
     readonly value_path: import("./schema.js").StringProperty;
@@ -99,6 +103,7 @@ export declare const publishingNotesQueryContract: ContractObject<{
         readonly description?: string;
         readonly minLength?: number;
         readonly maxLength?: number;
+        readonly pattern?: string;
         readonly enum: readonly ["full", "summary", "value"];
     };
     readonly value_path: import("./schema.js").StringProperty;
@@ -127,6 +132,7 @@ export declare const publishingRevisionsQueryContract: ContractObject<{
         readonly description?: string;
         readonly minLength?: number;
         readonly maxLength?: number;
+        readonly pattern?: string;
         readonly enum: readonly ["full", "summary", "value"];
     };
     readonly value_path: import("./schema.js").StringProperty;
@@ -166,6 +172,7 @@ export declare const publishingAnalyticsQueryContract: ContractObject<{
         readonly description?: string;
         readonly minLength?: number;
         readonly maxLength?: number;
+        readonly pattern?: string;
         readonly enum: readonly ["full", "summary", "value"];
     };
     readonly value_path: import("./schema.js").StringProperty;

package/node_modules/@oxygen/shared/dist/contracts/schema.d.ts

@@ -15,6 +15,8 @@ export type StringProperty = {
     enum?: readonly string[];
     minLength?: number;
     maxLength?: number;
+    /** JSON Schema regular expression, evaluated with Unicode semantics. */
+    pattern?: string;
 };
 export type NumberProperty = {
     type: "number" | "integer";
@@ -99,6 +101,7 @@ export declare function jsonValue(options?: Described): {
 export declare function str(options?: Described & {
     minLength?: number;
     maxLength?: number;
+    pattern?: string;
 }): StringProperty;
 export declare function enumOf<const V extends string>(values: readonly V[], options?: Described): {
     type: "string";

package/node_modules/@oxygen/shared/dist/contracts/schema.js

@@ -210,6 +210,9 @@ function walkValue(schema, value, path, walk) {
             else if (schema.maxLength !== undefined && value.length > schema.maxLength) {
                 walk.issues.push({ path, message: `${path} must be at most ${schema.maxLength} characters.` });
             }
+            else if (schema.pattern !== undefined && !new RegExp(schema.pattern, "u").test(value)) {
+                walk.issues.push({ path, message: `${path} must match the required pattern.` });
+            }
             return value;
         }
         case "integer":

package/node_modules/@oxygen/shared/dist/contracts/table-feed-read.d.ts

@@ -55,6 +55,7 @@ export declare function tableFeedWindowProperties(contract: typeof TABLE_FEED_GE
         enum?: readonly string[];
         minLength?: number;
         maxLength?: number;
+        pattern?: string;
     } | {
         type: "integer";
         minimum?: number;

package/node_modules/@oxygen/shared/dist/contracts/table-row-read.d.ts

@@ -11,6 +11,7 @@ export declare const TABLE_ROW_READ_WINDOW_FIELDS: {
         readonly enum?: readonly string[];
         readonly minLength?: number;
         readonly maxLength?: number;
+        readonly pattern?: string;
         readonly description: "JSON Pointer; empty=root.";
     };
     readonly value_cursor: {
@@ -18,6 +19,7 @@ export declare const TABLE_ROW_READ_WINDOW_FIELDS: {
         readonly enum?: readonly string[];
         readonly minLength?: number;
         readonly maxLength?: number;
+        readonly pattern?: string;
         readonly description: "Resume with identical selection/path.";
     };
     readonly max_chars: {

package/node_modules/@oxygen/shared/dist/credit-gate.js

@@ -7,7 +7,8 @@
 // on, a connect is admitted when the spendable balance covers the account's
 // first monthly credit reservation, refused with `insufficient_credits` when it
 // does not, and `billing seats` reports that seats are retired (S21). The plan
-// wall removal (S22) sits behind the same flag.
+// wall removal (S22) sits behind the same flag; a LinkedIn account keeps its
+// plan wall (`linkedin_connect`, founder 2026-10-12).
 //
 // WHY IT IS ITS OWN FLAG, AND WHY IT IS NOT ENOUGH ALONE. A balance check debits
 // nothing: while commitments are dark, a workspace holding 3,400 credits would

package/node_modules/@oxygen/shared/dist/mcp-event-contract.d.ts

@@ -94,6 +94,7 @@ declare const REPLY_CLASSIFIED_PAYLOAD: ContractObject<{
         enum?: readonly string[];
         minLength?: number;
         maxLength?: number;
+        pattern?: string;
         format: "date-time";
     };
     readonly url: {
@@ -102,6 +103,7 @@ declare const REPLY_CLASSIFIED_PAYLOAD: ContractObject<{
         enum?: readonly string[];
         minLength?: number;
         maxLength?: number;
+        pattern?: string;
         format: "uri";
     };
 }, "channel" | "classification" | "conversation_id" | "enrollment_id" | "occurred_at" | "record_id" | "sequence_id" | "url">;
@@ -143,6 +145,7 @@ declare const ENROLLMENT_ENDED_PAYLOAD: ContractObject<{
         enum?: readonly string[];
         minLength?: number;
         maxLength?: number;
+        pattern?: string;
         format: "date-time";
     };
     readonly url: {
@@ -151,6 +154,7 @@ declare const ENROLLMENT_ENDED_PAYLOAD: ContractObject<{
         enum?: readonly string[];
         minLength?: number;
         maxLength?: number;
+        pattern?: string;
         format: "uri";
     };
 }, "enrollment_id" | "occurred_at" | "outcome" | "sequence_id" | "steps_sent" | "url">;
@@ -205,6 +209,7 @@ declare const MEETING_COMPLETED_PAYLOAD: ContractObject<{
         enum?: readonly string[];
         minLength?: number;
         maxLength?: number;
+        pattern?: string;
         format: "date-time";
     };
     readonly url: {
@@ -213,6 +218,7 @@ declare const MEETING_COMPLETED_PAYLOAD: ContractObject<{
         enum?: readonly string[];
         minLength?: number;
         maxLength?: number;
+        pattern?: string;
         format: "uri";
     };
 }, "activity_id" | "duration_seconds" | "occurred_at" | "record_ids" | "session_id" | "url">;
@@ -277,6 +283,7 @@ declare const RECORD_STAGE_CHANGED_PAYLOAD: ContractObject<{
         enum?: readonly string[];
         minLength?: number;
         maxLength?: number;
+        pattern?: string;
         format: "date-time";
     };
     readonly url: {
@@ -285,6 +292,7 @@ declare const RECORD_STAGE_CHANGED_PAYLOAD: ContractObject<{
         enum?: readonly string[];
         minLength?: number;
         maxLength?: number;
+        pattern?: string;
         format: "uri";
     };
 }, "activity_id" | "from_stage_id" | "object" | "occurred_at" | "pipeline_id" | "record_id" | "to_stage_id" | "url">;
@@ -323,6 +331,7 @@ declare const RUN_SETTLED_PAYLOAD: ContractObject<{
         enum?: readonly string[];
         minLength?: number;
         maxLength?: number;
+        pattern?: string;
         format: "date-time";
     };
     readonly url: {
@@ -331,6 +340,7 @@ declare const RUN_SETTLED_PAYLOAD: ContractObject<{
         enum?: readonly string[];
         minLength?: number;
         maxLength?: number;
+        pattern?: string;
         format: "uri";
     };
 }, "credits_used" | "kind" | "occurred_at" | "run_id" | "status" | "url">;
@@ -362,6 +372,7 @@ declare const APPROVAL_REQUESTED_PAYLOAD: ContractObject<{
         enum?: readonly string[];
         minLength?: number;
         maxLength?: number;
+        pattern?: string;
         format: "date-time";
     };
     readonly url: {
@@ -370,6 +381,7 @@ declare const APPROVAL_REQUESTED_PAYLOAD: ContractObject<{
         enum?: readonly string[];
         minLength?: number;
         maxLength?: number;
+        pattern?: string;
         format: "uri";
     };
 }, "approval_id" | "kind" | "occurred_at" | "run_id" | "url">;

package/node_modules/@oxygen/shared/dist/otlp-log-sink.d.ts

@@ -60,7 +60,7 @@ export type OtlpLogSinkOptions = {
  * `worker.log_shipper.stats` is the Axiom shipper's once-a-minute loss accounting,
  * which by design never reaches Axiom (OXP-1.6.126).
  */
-export declare const OTLP_MONITOR_INFO_EVENTS: readonly ["diagnostics.capture_stored", "diagnostics.invocation_completed", "diagnostics.canary_completed", "diagnostics.digest_completed", "tenant.migrations.cron.done", "outbound_send.sent", "worker_workflow_cron_overlap_skipped", "worker_workflow_cron_enqueued", "copilot.turn.finished", "worker.queue.heartbeat", "worker.queue.ledger", "worker.queue.redis", "worker.queue.unregistered_kind", "automation_usage.reconcile_completed", "provider_health.cron_completed", "provider_balances.cron_completed", "cost_snapshot.cron_completed", "worker.egress_order_reconcile_sweep", "posthog_canary.round_trip_ok", "web.log_volume", "worker.log_shipper.stats"];
+export declare const OTLP_MONITOR_INFO_EVENTS: readonly ["diagnostics.capture_stored", "diagnostics.invocation_completed", "diagnostics.canary_completed", "diagnostics.digest_completed", "tenant.migrations.cron.done", "outbound_send.sent", "worker_workflow_cron_overlap_skipped", "worker_workflow_cron_enqueued", "copilot.turn.finished", "worker.queue.heartbeat", "worker.queue.depth", "worker.queue.ledger", "worker.queue.redis", "worker.queue.unregistered_kind", "automation_usage.reconcile_completed", "provider_health.cron_completed", "provider_balances.cron_completed", "cost_snapshot.cron_completed", "worker.egress_order_reconcile_sweep", "posthog_canary.round_trip_ok", "web.log_volume", "worker.log_shipper.stats"];
 export type OtlpLogSinkHandle = {
     sink: LogSink;
     flush: () => Promise<void>;

package/node_modules/@oxygen/shared/dist/otlp-log-sink.js

@@ -22,6 +22,7 @@ export const OTLP_MONITOR_INFO_EVENTS = [
     "worker_workflow_cron_enqueued",
     "copilot.turn.finished",
     "worker.queue.heartbeat",
+    "worker.queue.depth",
     "worker.queue.ledger",
     "worker.queue.redis",
     "worker.queue.unregistered_kind",

package/node_modules/@oxygen/shared/dist/plan-capabilities.d.ts

@@ -37,11 +37,16 @@
  * billed that way (the credit gate, `OXYGEN_CREDIT_GATE_ENABLED`) credits are the
  * only gate and the sending walls retire: `CREDIT_GATE_RETIRED_CAPABILITIES`.
  * Until the gate is in force everything above still holds.
+ *
+ * EXCEPT LINKEDIN (founder, current chat, 2026-10-12: "you can only connect a
+ * linkedin account on a plan"). `linkedin_connect` is not retired by the credit
+ * gate, so a free workspace is told to subscribe before any balance check,
+ * however many credits it holds.
  */
 import type { PlanTier, PricingPlanDefinition } from "./billing.js";
 import { CREDIT_GATE_RETIRED_CAPABILITIES, isCapabilityRetiredByCreditGate } from "./credit-gate.js";
 import { type RepricingOptions } from "./repricing.js";
-export declare const PLAN_GATED_CAPABILITIES: readonly ["sender_connect", "sequence_dispatch", "publishing_connect", "publishing_deliver", "managed_email_infrastructure", "byok_provider_keys"];
+export declare const PLAN_GATED_CAPABILITIES: readonly ["sender_connect", "linkedin_connect", "sequence_dispatch", "publishing_connect", "publishing_deliver", "managed_email_infrastructure", "byok_provider_keys"];
 export type PlanGatedCapability = (typeof PLAN_GATED_CAPABILITIES)[number];
 /**
  * Every tier except `free` unblocks every gated capability.
@@ -75,7 +80,9 @@ export declare function isPlanGatedCapability(value: unknown): value is PlanGate
  * (`assertCreditGateArmed`). Until then every one of them stays walled exactly
  * as before.
  *
- * Two capabilities stay walled under the gate:
+ * Three capabilities stay walled under the gate:
+ * - `linkedin_connect`: a LinkedIn account connects only on a plan (founder,
+ *   current chat, 2026-10-12), whatever the balance.
  * - `byok_provider_keys`: bringing your own keys needs a plan that includes it
  *   ($99 or above from the repricing's effective date).
  * - `publishing_connect`: the only publishing connects that still reach it are

package/node_modules/@oxygen/shared/dist/plan-capabilities.js

@@ -37,11 +37,17 @@
  * billed that way (the credit gate, `OXYGEN_CREDIT_GATE_ENABLED`) credits are the
  * only gate and the sending walls retire: `CREDIT_GATE_RETIRED_CAPABILITIES`.
  * Until the gate is in force everything above still holds.
+ *
+ * EXCEPT LINKEDIN (founder, current chat, 2026-10-12: "you can only connect a
+ * linkedin account on a plan"). `linkedin_connect` is not retired by the credit
+ * gate, so a free workspace is told to subscribe before any balance check,
+ * however many credits it holds.
  */
 import { CREDIT_GATE_RETIRED_CAPABILITIES, isCapabilityRetiredByCreditGate } from "./credit-gate.js";
 import { OXYGEN_49_BYOK_REPRICING, readRepricingSwitch, repricedValue, } from "./repricing.js";
 export const PLAN_GATED_CAPABILITIES = [
     "sender_connect",
+    "linkedin_connect",
     "sequence_dispatch",
     "publishing_connect",
     "publishing_deliver",
@@ -71,6 +77,11 @@ export const PLAN_GATED_CAPABILITY_COPY = {
         freeAlternative: "You can build and preview the whole motion on Free — sequences, steps, and enrollment all work. Connecting a mailbox, LinkedIn account, or WhatsApp number is what needs a plan.",
         deepLinkPath: "/settings/connections",
     },
+    linkedin_connect: {
+        label: "Connecting a LinkedIn account",
+        freeAlternative: "Leads, sequences and enrollment all work on Free. To connect a LinkedIn account, subscribe to the Oxygen plan; its monthly credits pay for the account.",
+        deepLinkPath: "/settings/connections",
+    },
     sequence_dispatch: {
         label: "Sending a sequence",
         freeAlternative: "Authoring, versioning, enrolling, and previewing a sequence are all free. Dispatching to real recipients is what needs a plan.",
@@ -113,7 +124,9 @@ export function isPlanGatedCapability(value) {
  * (`assertCreditGateArmed`). Until then every one of them stays walled exactly
  * as before.
  *
- * Two capabilities stay walled under the gate:
+ * Three capabilities stay walled under the gate:
+ * - `linkedin_connect`: a LinkedIn account connects only on a plan (founder,
+ *   current chat, 2026-10-12), whatever the balance.
  * - `byok_provider_keys`: bringing your own keys needs a plan that includes it
  *   ($99 or above from the repricing's effective date).
  * - `publishing_connect`: the only publishing connects that still reach it are