@oxygen-agent/cli 1.1014.985 → 1.1014.1087

package/node_modules/@oxygen/shared/dist/contracts/guided-onboarding-journey.d.ts

@@ -0,0 +1,267 @@
+/** Hiring roles remain strings. Technology identity includes its relationship. */
+export declare const GUIDED_ONBOARDING_SIGNALS_CONTRACT: import("./schema.js").ContractObject<{
+    readonly hiring: import("./schema.js").ContractObject<{
+        readonly mode: {
+            type: "string";
+            enum: readonly ("none" | "selected")[];
+            description?: string;
+        };
+        readonly values: import("./schema.js").ArrayProperty<import("./schema.js").StringProperty>;
+    }, "mode" | "values">;
+    readonly technology: import("./schema.js").ContractObject<{
+        readonly mode: {
+            type: "string";
+            enum: readonly ("none" | "selected")[];
+            description?: string;
+        };
+        readonly values: import("./schema.js").ArrayProperty<import("./schema.js").ContractObject<{
+            readonly name: import("./schema.js").StringProperty;
+            readonly relationship: {
+                type: "string";
+                enum: readonly ("integrates_with" | "replaces" | "uses")[];
+                description?: string;
+            };
+        }, "name" | "relationship">>;
+    }, "mode" | "values">;
+}, "hiring" | "technology">;
+export declare const GUIDED_ONBOARDING_ANSWERS_CONTRACT: import("./schema.js").ContractObject<{
+    readonly company_context: import("./schema.js").ContractObject<{
+        readonly website: {
+            oneOf: [import("./schema.js").StringProperty, import("./schema.js").NullProperty];
+            description?: string;
+        };
+        readonly name: import("./schema.js").StringProperty;
+        readonly description: import("./schema.js").StringProperty;
+        readonly context_links: import("./schema.js").ArrayProperty<import("./schema.js").StringProperty>;
+        readonly file_ids: import("./schema.js").ArrayProperty<import("./schema.js").StringProperty>;
+    }, "context_links" | "description" | "file_ids" | "name" | "website">;
+    readonly company_review: import("./schema.js").ContractObject<{
+        readonly statement: import("./schema.js").StringProperty;
+        readonly profile_revision: import("./schema.js").StringProperty;
+    }, "profile_revision" | "statement">;
+    readonly audience_company_size: import("./schema.js").ContractObject<{
+        readonly values: import("./schema.js").ArrayProperty<import("./schema.js").StringProperty>;
+    }, "values">;
+    readonly audience_markets: import("./schema.js").ContractObject<{
+        readonly values: import("./schema.js").ArrayProperty<import("./schema.js").StringProperty>;
+    }, "values">;
+    readonly audience_industries: import("./schema.js").ContractObject<{
+        readonly values: import("./schema.js").ArrayProperty<import("./schema.js").StringProperty>;
+    }, "values">;
+    readonly audience_personas: import("./schema.js").ContractObject<{
+        readonly values: import("./schema.js").ArrayProperty<import("./schema.js").StringProperty>;
+    }, "values">;
+    readonly signals: import("./schema.js").ContractObject<{
+        readonly hiring: import("./schema.js").ContractObject<{
+            readonly mode: {
+                type: "string";
+                enum: readonly ("none" | "selected")[];
+                description?: string;
+            };
+            readonly values: import("./schema.js").ArrayProperty<import("./schema.js").StringProperty>;
+        }, "mode" | "values">;
+        readonly technology: import("./schema.js").ContractObject<{
+            readonly mode: {
+                type: "string";
+                enum: readonly ("none" | "selected")[];
+                description?: string;
+            };
+            readonly values: import("./schema.js").ArrayProperty<import("./schema.js").ContractObject<{
+                readonly name: import("./schema.js").StringProperty;
+                readonly relationship: {
+                    type: "string";
+                    enum: readonly ("integrates_with" | "replaces" | "uses")[];
+                    description?: string;
+                };
+            }, "name" | "relationship">>;
+        }, "mode" | "values">;
+    }, "hiring" | "technology">;
+    readonly prospects: import("./schema.js").ContractObject<{
+        readonly decision: {
+            type: "string";
+            enum: readonly ("continue" | "refine")[];
+            description?: string;
+        };
+        readonly feedback: import("./schema.js").StringProperty;
+    }, "decision" | "feedback">;
+    readonly linkedin: import("./schema.js").ContractObject<{
+        readonly choice: {
+            type: "string";
+            enum: readonly ("connect" | "skip")[];
+            description?: string;
+        };
+    }, "choice">;
+    readonly sequence: import("./schema.js").ContractObject<{
+        readonly decision: {
+            type: "string";
+            enum: readonly ("keep_draft" | "review")[];
+            description?: string;
+        };
+    }, "decision">;
+    readonly tour: import("./schema.js").ContractObject<{
+        readonly visited: import("./schema.js").ArrayProperty<{
+            type: "string";
+            enum: readonly ("leads" | "overview" | "sequence" | "sourcing")[];
+            description?: string;
+        }>;
+    }, "visited">;
+}, never>;
+export declare const GUIDED_ONBOARDING_MUTATION_CONTRACT: import("./schema.js").ContractObject<{
+    revision: {
+        type: "integer";
+        description?: string;
+        minimum?: number;
+        maximum?: number;
+        "x-clamp"?: true;
+    };
+    mutation_id: import("./schema.js").StringProperty;
+}, "mutation_id" | "revision">;
+export declare const GUIDED_ONBOARDING_ADVANCE_CONTRACT: import("./schema.js").ContractObject<{
+    readonly revision: {
+        type: "integer";
+        description?: string;
+        minimum?: number;
+        maximum?: number;
+        "x-clamp"?: true;
+    };
+    readonly mutation_id: import("./schema.js").StringProperty;
+    readonly step: {
+        type: "string";
+        enum: readonly ("audience_company_size" | "audience_industries" | "audience_markets" | "audience_personas" | "campaign" | "company_context" | "company_research" | "company_review" | "complete" | "daily_rhythm" | "linkedin" | "prospects" | "routines" | "sequence" | "signals" | "tour" | "trial" | "welcome")[];
+        description?: string;
+    };
+}, "mutation_id" | "revision" | "step">;
+export declare const GUIDED_ONBOARDING_SAVE_CONTRACT: import("./schema.js").ContractObject<{
+    readonly revision: {
+        type: "integer";
+        description?: string;
+        minimum?: number;
+        maximum?: number;
+        "x-clamp"?: true;
+    };
+    readonly mutation_id: import("./schema.js").StringProperty;
+    readonly step: {
+        type: "string";
+        enum: readonly ("audience_company_size" | "audience_industries" | "audience_markets" | "audience_personas" | "campaign" | "company_context" | "company_research" | "company_review" | "complete" | "daily_rhythm" | "linkedin" | "prospects" | "routines" | "sequence" | "signals" | "tour" | "trial" | "welcome")[];
+        description?: string;
+    };
+    readonly answers: import("./schema.js").ContractObject<{
+        readonly company_context: import("./schema.js").ContractObject<{
+            readonly website: {
+                oneOf: [import("./schema.js").StringProperty, import("./schema.js").NullProperty];
+                description?: string;
+            };
+            readonly name: import("./schema.js").StringProperty;
+            readonly description: import("./schema.js").StringProperty;
+            readonly context_links: import("./schema.js").ArrayProperty<import("./schema.js").StringProperty>;
+            readonly file_ids: import("./schema.js").ArrayProperty<import("./schema.js").StringProperty>;
+        }, "context_links" | "description" | "file_ids" | "name" | "website">;
+        readonly company_review: import("./schema.js").ContractObject<{
+            readonly statement: import("./schema.js").StringProperty;
+            readonly profile_revision: import("./schema.js").StringProperty;
+        }, "profile_revision" | "statement">;
+        readonly audience_company_size: import("./schema.js").ContractObject<{
+            readonly values: import("./schema.js").ArrayProperty<import("./schema.js").StringProperty>;
+        }, "values">;
+        readonly audience_markets: import("./schema.js").ContractObject<{
+            readonly values: import("./schema.js").ArrayProperty<import("./schema.js").StringProperty>;
+        }, "values">;
+        readonly audience_industries: import("./schema.js").ContractObject<{
+            readonly values: import("./schema.js").ArrayProperty<import("./schema.js").StringProperty>;
+        }, "values">;
+        readonly audience_personas: import("./schema.js").ContractObject<{
+            readonly values: import("./schema.js").ArrayProperty<import("./schema.js").StringProperty>;
+        }, "values">;
+        readonly signals: import("./schema.js").ContractObject<{
+            readonly hiring: import("./schema.js").ContractObject<{
+                readonly mode: {
+                    type: "string";
+                    enum: readonly ("none" | "selected")[];
+                    description?: string;
+                };
+                readonly values: import("./schema.js").ArrayProperty<import("./schema.js").StringProperty>;
+            }, "mode" | "values">;
+            readonly technology: import("./schema.js").ContractObject<{
+                readonly mode: {
+                    type: "string";
+                    enum: readonly ("none" | "selected")[];
+                    description?: string;
+                };
+                readonly values: import("./schema.js").ArrayProperty<import("./schema.js").ContractObject<{
+                    readonly name: import("./schema.js").StringProperty;
+                    readonly relationship: {
+                        type: "string";
+                        enum: readonly ("integrates_with" | "replaces" | "uses")[];
+                        description?: string;
+                    };
+                }, "name" | "relationship">>;
+            }, "mode" | "values">;
+        }, "hiring" | "technology">;
+        readonly prospects: import("./schema.js").ContractObject<{
+            readonly decision: {
+                type: "string";
+                enum: readonly ("continue" | "refine")[];
+                description?: string;
+            };
+            readonly feedback: import("./schema.js").StringProperty;
+        }, "decision" | "feedback">;
+        readonly linkedin: import("./schema.js").ContractObject<{
+            readonly choice: {
+                type: "string";
+                enum: readonly ("connect" | "skip")[];
+                description?: string;
+            };
+        }, "choice">;
+        readonly sequence: import("./schema.js").ContractObject<{
+            readonly decision: {
+                type: "string";
+                enum: readonly ("keep_draft" | "review")[];
+                description?: string;
+            };
+        }, "decision">;
+        readonly tour: import("./schema.js").ContractObject<{
+            readonly visited: import("./schema.js").ArrayProperty<{
+                type: "string";
+                enum: readonly ("leads" | "overview" | "sequence" | "sourcing")[];
+                description?: string;
+            }>;
+        }, "visited">;
+    }, never>;
+    readonly advance: import("./schema.js").BooleanProperty;
+}, "answers" | "mutation_id" | "revision" | "step">;
+export declare const GUIDED_ONBOARDING_NAVIGATION_CONTRACT: import("./schema.js").ContractObject<{
+    readonly revision: {
+        type: "integer";
+        description?: string;
+        minimum?: number;
+        maximum?: number;
+        "x-clamp"?: true;
+    };
+    readonly mutation_id: import("./schema.js").StringProperty;
+    readonly step: {
+        type: "string";
+        enum: readonly ("audience_company_size" | "audience_industries" | "audience_markets" | "audience_personas" | "campaign" | "company_context" | "company_research" | "company_review" | "complete" | "daily_rhythm" | "linkedin" | "prospects" | "routines" | "sequence" | "signals" | "tour" | "trial" | "welcome")[];
+        description?: string;
+    };
+    readonly paused: import("./schema.js").BooleanProperty;
+    readonly tour_active_stop: {
+        type: "string";
+        enum: readonly ("leads" | "overview" | "sequence" | "sourcing")[];
+        description?: string;
+    };
+}, "mutation_id" | "paused" | "revision" | "step">;
+export declare const GUIDED_ONBOARDING_CHECKOUT_CONTRACT: import("./schema.js").ContractObject<{
+    readonly revision: {
+        type: "integer";
+        description?: string;
+        minimum?: number;
+        maximum?: number;
+        "x-clamp"?: true;
+    };
+    readonly mutation_id: import("./schema.js").StringProperty;
+    readonly approved: import("./schema.js").BooleanProperty;
+}, "approved" | "mutation_id" | "revision">;
+export declare const GUIDED_ONBOARDING_JOURNEY_ACTIONS: readonly ["get", "save", "advance", "back", "restart", "billing", "checkout", "navigation", "prospects_preview"];
+export type GuidedOnboardingJourneyAction = typeof GUIDED_ONBOARDING_JOURNEY_ACTIONS[number];
+import type { OperationSpec } from "./operations.js";
+export declare const GUIDED_ONBOARDING_JOURNEY_OPERATIONS: readonly OperationSpec[];

package/node_modules/@oxygen/shared/dist/contracts/guided-onboarding-journey.js

@@ -0,0 +1,63 @@
+import { arr, bool, enumOf, int, obj, str } from "./schema.js";
+import { GUIDED_ONBOARDING_COMPANY_CONTEXT_CONTRACT } from "../guided-onboarding-company-context.js";
+import { GUIDED_ONBOARDING_STEPS, GUIDED_ONBOARDING_TECHNOLOGY_RELATIONSHIPS } from "../guided-onboarding-journey.js";
+const mode = () => enumOf(["none", "selected"]);
+const name = () => str({ minLength: 1, maxLength: 160 });
+/** Hiring roles remain strings. Technology identity includes its relationship. */
+export const GUIDED_ONBOARDING_SIGNALS_CONTRACT = obj({
+    hiring: obj({ mode: mode(), values: arr(name(), { maxItems: 40 }) }, { required: ["mode", "values"] }),
+    technology: obj({
+        mode: mode(),
+        values: arr(obj({ name: name(), relationship: enumOf(GUIDED_ONBOARDING_TECHNOLOGY_RELATIONSHIPS) }, { required: ["name", "relationship"] }), { maxItems: 40 }),
+    }, { required: ["mode", "values"] }),
+}, { required: ["hiring", "technology"] });
+const choice = () => obj({ values: arr(name(), { minItems: 1, maxItems: 40 }) }, { required: ["values"] });
+export const GUIDED_ONBOARDING_ANSWERS_CONTRACT = obj({
+    company_context: GUIDED_ONBOARDING_COMPANY_CONTEXT_CONTRACT,
+    company_review: obj({ statement: str({ minLength: 1, maxLength: 12000 }), profile_revision: str({ minLength: 1, maxLength: 160 }) }, { required: ["statement", "profile_revision"] }),
+    audience_company_size: choice(), audience_markets: choice(), audience_industries: choice(), audience_personas: choice(),
+    signals: GUIDED_ONBOARDING_SIGNALS_CONTRACT,
+    prospects: obj({ decision: enumOf(["continue", "refine"]), feedback: str({ maxLength: 4000 }) }, { required: ["decision", "feedback"] }),
+    linkedin: obj({ choice: enumOf(["connect", "skip"]) }, { required: ["choice"] }),
+    sequence: obj({ decision: enumOf(["review", "keep_draft"]) }, { required: ["decision"] }),
+    tour: obj({ visited: arr(enumOf(["overview", "leads", "sourcing", "sequence"]), { maxItems: 4 }) }, { required: ["visited"] }),
+});
+const mutation = { revision: int({ minimum: 1 }), mutation_id: str({ minLength: 1, maxLength: 160, pattern: "^[a-zA-Z0-9_.:-]+$" }) };
+export const GUIDED_ONBOARDING_MUTATION_CONTRACT = obj(mutation, { required: ["revision", "mutation_id"] });
+export const GUIDED_ONBOARDING_ADVANCE_CONTRACT = obj({ ...mutation, step: enumOf(GUIDED_ONBOARDING_STEPS) }, { required: ["revision", "mutation_id", "step"] });
+export const GUIDED_ONBOARDING_SAVE_CONTRACT = obj({ ...mutation, step: enumOf(GUIDED_ONBOARDING_STEPS),
+    answers: GUIDED_ONBOARDING_ANSWERS_CONTRACT, advance: bool({ description: "Save and advance in one native transaction after checking this step. No provider action or implicit activation." }) }, { required: ["revision", "mutation_id", "step", "answers"] });
+export const GUIDED_ONBOARDING_NAVIGATION_CONTRACT = obj({ ...mutation, step: enumOf(GUIDED_ONBOARDING_STEPS), paused: bool(),
+    tour_active_stop: enumOf(["overview", "leads", "sourcing", "sequence"]) }, { required: ["revision", "mutation_id", "step", "paused"] });
+export const GUIDED_ONBOARDING_CHECKOUT_CONTRACT = obj({ ...mutation, approved: bool() }, { required: ["revision", "mutation_id", "approved"] });
+export const GUIDED_ONBOARDING_JOURNEY_ACTIONS = ["get", "save", "advance", "back", "restart", "billing", "checkout", "navigation", "prospects_preview"];
+const base = "/api/cli/onboarding/activation/{activationId}/journey";
+export const GUIDED_ONBOARDING_JOURNEY_OPERATIONS = [
+    { id: "onboarding.journey.get", route: base, method: "GET", contract: obj({}), parameters: ["activationId"],
+        cli: { path: ["onboarding", "journey", "get"], summary: "Read your private resumable onboarding answers and native progress." },
+        mcp: { name: "oxygen_onboarding_journey_get", title: "Oxygen: Read onboarding journey", description: "Read your activationId journey and saved answers. Creator-private; enabled genuine DEV only. No research, model call or message send.", pack: "agents" }, mutates: false, spends: false },
+    { id: "onboarding.journey.save", route: base, method: "POST", parameters: ["activationId"], contract: GUIDED_ONBOARDING_SAVE_CONTRACT,
+        cli: { path: ["onboarding", "journey", "save"], summary: "Save reviewed answers and optionally advance atomically. Free; no model, send or routine execution." },
+        mcp: { name: "oxygen_onboarding_journey_save", title: "Oxygen: Onboarding save", description: "Creator-private DEV onboarding save for activationId. Requires current revision and stable mutation_id. Save accepts only current step answers; company context prepares native sources and records existing bounded research consent. Advance checks native readiness and billing. No paid turn, synchronous research, outreach or routine activation.", pack: "agents", annotations: { destructiveHint: false, openWorldHint: false, idempotentHint: true } }, mutates: true, spends: false },
+    { id: "onboarding.journey.advance", route: `${base}/advance`, method: "POST", parameters: ["activationId"], contract: GUIDED_ONBOARDING_ADVANCE_CONTRACT,
+        cli: { path: ["onboarding", "journey", "advance"], summary: "Advance after native readiness checks. Free; no model, send or routine execution." },
+        mcp: { name: "oxygen_onboarding_journey_advance", title: "Oxygen: Onboarding advance", description: "Creator-private DEV onboarding advance for activationId. Requires current revision and stable mutation_id. Save accepts only current step answers; advance checks native readiness and billing. Restart preserves resources and consumed funding. No paid turn, research, outreach or routine activation.", pack: "agents", annotations: { destructiveHint: false, openWorldHint: false, idempotentHint: true } }, mutates: true, spends: false },
+    { id: "onboarding.journey.back", route: `${base}/back`, method: "POST", parameters: ["activationId"], contract: GUIDED_ONBOARDING_MUTATION_CONTRACT,
+        cli: { path: ["onboarding", "journey", "back"], summary: "Return to the previous step with saved answers. Free; no model, send or routine execution." },
+        mcp: { name: "oxygen_onboarding_journey_back", title: "Oxygen: Onboarding back", description: "Creator-private DEV onboarding back for activationId. Requires current revision and stable mutation_id. Save accepts only current step answers; advance checks native readiness and billing. Restart preserves resources and consumed funding. No paid turn, research, outreach or routine activation.", pack: "agents", annotations: { destructiveHint: false, openWorldHint: false, idempotentHint: true } }, mutates: true, spends: false },
+    { id: "onboarding.journey.restart", route: `${base}/restart`, method: "POST", parameters: ["activationId"], contract: GUIDED_ONBOARDING_MUTATION_CONTRACT,
+        cli: { path: ["onboarding", "journey", "restart"], summary: "Restart progress, preserving Knowledge, chats, campaigns and billing. Free; no model, send or routine execution." },
+        mcp: { name: "oxygen_onboarding_journey_restart", title: "Oxygen: Onboarding restart", description: "Creator-private DEV onboarding restart for activationId. Requires current revision and stable mutation_id. Save accepts only current step answers; advance checks native readiness and billing. Restart preserves resources and consumed funding. No paid turn, research, outreach or routine activation.", pack: "agents", annotations: { destructiveHint: false, openWorldHint: false, idempotentHint: true } }, mutates: true, spends: false },
+    { id: "onboarding.journey.prospects_preview", route: `${base}/prospects/preview`, method: "POST", parameters: ["activationId"], contract: GUIDED_ONBOARDING_MUTATION_CONTRACT,
+        cli: { path: ["onboarding", "journey", "prospects-preview"], summary: "Preview up to five real people for saved targeting through the native free source; persist inspectable native results." },
+        mcp: { name: "oxygen_onboarding_journey_prospects_preview", title: "Oxygen: Preview onboarding prospects", description: "At the prospects step, use current revision and stable mutation_id to preview up to five people from saved targeting. Native free source read and manual preview Table writes; cached retries, no paid fallback, inference, enrollment or outreach. Unsupported criteria remain explicit diagnostics, never verified fit.", pack: "agents", annotations: { openWorldHint: true, destructiveHint: false, idempotentHint: true } }, mutates: true, spends: false },
+    { id: "onboarding.journey.navigation", route: `${base}/navigation`, method: "POST", parameters: ["activationId"], contract: GUIDED_ONBOARDING_NAVIGATION_CONTRACT,
+        cli: { path: ["onboarding", "journey", "navigation"], summary: "Save pause/resume and exact tour position, retaining the current journey step and visited history." },
+        mcp: { name: "oxygen_onboarding_journey_navigation", title: "Oxygen: Save onboarding position", description: "Persist paused and optional tour_active_stop at current step/revision with stable mutation_id. Position is separate from visited history. No step advance, research, send or routine activation.", pack: "agents" }, mutates: true, spends: false },
+    { id: "onboarding.journey.billing", route: `${base}/billing`, method: "GET", contract: obj({}), parameters: ["activationId"],
+        cli: { path: ["onboarding", "journey", "billing"], summary: "Read native trial eligibility; may reconcile an already-earned trial credit grant." },
+        mcp: { name: "oxygen_onboarding_journey_billing", title: "Oxygen: Onboarding billing", description: "Read native TEST trial/paid eligibility for your activationId. May reconcile an already-earned native credit grant, so this is a mutating call. No new subscription or charge; errors remain errors.", pack: "agents", annotations: { openWorldHint: true } }, mutates: true, spends: false },
+    { id: "onboarding.journey.checkout", route: `${base}/checkout`, method: "POST", contract: GUIDED_ONBOARDING_CHECKOUT_CONTRACT, parameters: ["activationId"],
+        cli: { path: ["onboarding", "journey", "checkout"], summary: "Open approved DEV TEST Checkout as current workspace admin/owner, or reuse existing eligible billing." },
+        mcp: { name: "oxygen_onboarding_journey_checkout", title: "Oxygen: Onboarding test Checkout", description: "Current DEV admin/owner only: approved=true, revision and stable mutation_id open card-required TEST Checkout, $0 for seven days then $49/month, once-only 2000 trial credits. Reuses eligible existing paid/trial. No live Stripe fallback or early charge.", pack: "agents", annotations: { openWorldHint: true } }, mutates: true, spends: false },
+];

package/node_modules/@oxygen/shared/dist/contracts/operations.d.ts

@@ -33,6 +33,12 @@ export type OperationSpec<C extends ContractObject = ContractObject> = {
         nameField: string;
         typeField: string;
         fileField: string;
+        /** Opt-in metadata derived from the original --file bytes. Explicit caller
+         * assertions must match; required native fields remain required on the wire. */
+        fileMetadata?: {
+            sha256Field: string;
+            sizeBytesField: string;
+        };
     };
     /** Download bytes through the same authenticated route; never follow redirects. */
     binary?: {

package/node_modules/@oxygen/shared/dist/contracts/operations.js

@@ -12,6 +12,9 @@ import { BROWSER_OPERATIONS } from "./browser-operations.js";
 import { TABLE_FEED_UPDATE_OPERATION } from "./table-feed-update.js";
 import { GEO_OPERATIONS } from "./geo.js";
 import { CUSTOMER_OPERATIONS } from "./customer-operations.js";
+import { GUIDED_ONBOARDING_JOURNEY_OPERATIONS } from "./guided-onboarding-journey.js";
+import { GUIDED_FIRST_SOURCING_OPERATIONS } from "./guided-first-sourcing.js";
+import { GUIDED_COMPANY_FILE_UPLOAD_OPERATION } from "./guided-company-files.js";
 import { GUIDED_ACTIVATION_OPERATIONS } from "./guided-activation.js";
 import { AGENT_SESSION_OPERATIONS } from "./agent-sessions.js";
 import { TEAMMATE_OPERATIONS } from "./teammates.js";
@@ -79,7 +82,9 @@ export function operationFormData(spec, body) {
     if (!fields)
         throw new Error("This operation does not accept a file.");
     const encoded = body[fields.contentField];
-    if (typeof encoded !== "string" || !/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/.test(encoded) || !encoded) {
+    // A repeated capture over multi-megabyte uploads can overflow V8's regexp
+    // stack. Validate the same alphabet, length and terminal padding separately.
+    if (typeof encoded !== "string" || !encoded || encoded.length % 4 !== 0 || /[^A-Za-z0-9+/]/u.test(encoded.replace(/={1,2}$/u, ""))) {
         throw new Error(`${fields.contentField} must contain valid non-empty base64 file bytes.`);
     }
     const bytes = Uint8Array.from(atob(encoded), (character) => character.charCodeAt(0));
@@ -92,6 +97,6 @@ export function operationFormData(spec, body) {
     }
     return form;
 }
-export const OPERATION_SPECS = [SENDER_LIMITS_SET_OPERATION, CONNECTOR_UPDATE_OPERATION, CONNECTOR_EVENTS_REVOKE_OPERATION, WORKSPACE_PAGES_GET_OPERATION, WORKSPACE_PAGES_UPDATE_OPERATION, TABLE_FEED_UPDATE_OPERATION, ...CUSTOMER_OPERATIONS, ...GEO_OPERATIONS, ...BROWSER_OPERATIONS, ...AGENT_SESSION_OPERATIONS, ...GUIDED_ACTIVATION_OPERATIONS, ...TEAMMATE_OPERATIONS, ...WORKSPACE_SKILL_OPERATIONS];
-export const CLI_OPERATIONS = [...CUSTOMER_OPERATIONS, ...GEO_OPERATIONS, ...BROWSER_OPERATIONS, ...AGENT_SESSION_OPERATIONS, ...GUIDED_ACTIVATION_OPERATIONS, ...TEAMMATE_OPERATIONS, ...WORKSPACE_SKILL_OPERATIONS].filter((spec) => spec.generated?.cli !== false);
-export const MCP_OPERATIONS = [...CUSTOMER_OPERATIONS, ...GEO_OPERATIONS, ...BROWSER_OPERATIONS, ...AGENT_SESSION_OPERATIONS, ...GUIDED_ACTIVATION_OPERATIONS, ...TEAMMATE_OPERATIONS, ...WORKSPACE_SKILL_OPERATIONS].filter((spec) => spec.generated?.mcp !== false);
+export const OPERATION_SPECS = [SENDER_LIMITS_SET_OPERATION, CONNECTOR_UPDATE_OPERATION, CONNECTOR_EVENTS_REVOKE_OPERATION, WORKSPACE_PAGES_GET_OPERATION, WORKSPACE_PAGES_UPDATE_OPERATION, TABLE_FEED_UPDATE_OPERATION, ...CUSTOMER_OPERATIONS, ...GEO_OPERATIONS, ...BROWSER_OPERATIONS, ...AGENT_SESSION_OPERATIONS, ...GUIDED_ACTIVATION_OPERATIONS, ...GUIDED_ONBOARDING_JOURNEY_OPERATIONS, ...GUIDED_FIRST_SOURCING_OPERATIONS, GUIDED_COMPANY_FILE_UPLOAD_OPERATION, ...TEAMMATE_OPERATIONS, ...WORKSPACE_SKILL_OPERATIONS];
+export const CLI_OPERATIONS = [...CUSTOMER_OPERATIONS, ...GEO_OPERATIONS, ...BROWSER_OPERATIONS, ...AGENT_SESSION_OPERATIONS, ...GUIDED_ACTIVATION_OPERATIONS, ...GUIDED_ONBOARDING_JOURNEY_OPERATIONS, ...GUIDED_FIRST_SOURCING_OPERATIONS, GUIDED_COMPANY_FILE_UPLOAD_OPERATION, ...TEAMMATE_OPERATIONS, ...WORKSPACE_SKILL_OPERATIONS].filter((spec) => spec.generated?.cli !== false);
+export const MCP_OPERATIONS = [...CUSTOMER_OPERATIONS, ...GEO_OPERATIONS, ...BROWSER_OPERATIONS, ...AGENT_SESSION_OPERATIONS, ...GUIDED_ACTIVATION_OPERATIONS, ...GUIDED_ONBOARDING_JOURNEY_OPERATIONS, ...GUIDED_FIRST_SOURCING_OPERATIONS, GUIDED_COMPANY_FILE_UPLOAD_OPERATION, ...TEAMMATE_OPERATIONS, ...WORKSPACE_SKILL_OPERATIONS].filter((spec) => spec.generated?.mcp !== false);

package/node_modules/@oxygen/shared/dist/contracts/table-query-raw.d.ts

@@ -11,4 +11,6 @@ export declare const TABLE_QUERY_RAW_CONTRACT: import("./schema.js").ContractObj
 export declare const TABLE_QUERY_CLI_DEFAULT_LIMIT = 20;
 export declare const TABLE_QUERY_CLI_DEFAULT_MAX_CHARS = 12000;
 export declare function tableQueryRawResultFits(data: Record<string, unknown>, maxChars: number | undefined): boolean;
+/** What a page shortened to fit its result window says to do next (CLI, MCP and API alike). */
+export declare const TABLE_QUERY_RESULT_WINDOW_NEXT_STEP: string;
 export declare function tableQueryRawRecovery(table: string, row?: string): Record<string, unknown>;

package/node_modules/@oxygen/shared/dist/contracts/table-query-raw.js

@@ -9,6 +9,9 @@ export const TABLE_QUERY_CLI_DEFAULT_MAX_CHARS = 12_000;
 export function tableQueryRawResultFits(data, maxChars) {
     return maxChars === undefined || JSON.stringify(success("tables query", data)).length <= maxChars;
 }
+/** What a page shortened to fit its result window says to do next (CLI, MCP and API alike). */
+export const TABLE_QUERY_RESULT_WINDOW_NEXT_STEP = "This page holds fewer rows than the limit so it fits the result window; every value is complete. "
+    + "Continue with nextCursor (same table, filters, sorts and fields), or select fewer fields for more rows per page.";
 export function tableQueryRawRecovery(table, row) {
     return {
         table,

package/node_modules/@oxygen/shared/dist/contracts/teammates.js

@@ -4,8 +4,8 @@ import { TEAMMATE_TASK_LIMITS } from "../teammate-tasks.js";
 import { NEW_TEAMMATE_NAME, TEAMMATE_AVATAR_COLORS, TEAMMATE_AVATAR_KEYS, TEAMMATE_DESCRIPTION_MAX_CHARS, TEAMMATE_NAME_MAX_CHARS, TEAMMATE_SHARE_ROLES, } from "../teammates.js";
 import { arr, bool, enumOf, int, obj, str } from "./schema.js";
 /**
- * AI teammates (ADR 0032), branded Oxygents: Agents each person talks to in one
- * ongoing private chat, the workspace's first one ("New Bot" until named) and
+ * AI teammates (ADR 0032), branded Oxygents: Agents with one ongoing chat,
+ * shared by default or Personal, the workspace's first one ("New Bot" until named) and
  * any others added, none with a role (Tim, 2026-10-13). Staff on dev only.
  * The people-facing names say Oxygent (`oxygen oxygents`, `oxygen_oxygents_*`,
  * Tim 2026-10-12); the HTTP family and the code keep "teammates".
@@ -53,32 +53,34 @@ export const TEAMMATE_OPERATIONS = [
     // Adding a teammate (phase 7): a custom Agent that can chat at once and run
     // on its own, under a policy that asks before any write, send or spend. As in
     // Grok Bot, it can start as just "New Bot" and learn its job in the chat.
-    teammateOperation("teammates.create", "create", "POST", "", `Add an Oxygent to the workspace, named "${NEW_TEAMMATE_NAME}" unless you name it; tell it its job in your chat with it. It can chat at once and run on its own (background tasks, routines), reading freely and asking before anything that writes, sends or spends. You own it, and only you can use it until you share it. Free: adding one starts no inference.`, {
+    teammateOperation("teammates.create", "create", "POST", "", `Add an Oxygent to the workspace, named "${NEW_TEAMMATE_NAME}" unless you name it; tell it its job in your chat with it. It can chat at once and run on its own (background tasks, routines), reading freely and asking before anything that writes, sends or spends. You own it. Workspace access as collaborators and a shared chat are the default; choose personal for creator-only access. Free: adding one starts no inference.`, {
         ...TEAMMATE_PROFILE_FIELDS,
+        visibility: enumOf(["workspace", "personal"], { description: "Workspace (default) shares one chat history with everyone who has access. Personal is accessible only to its creator here, including against workspace admins. Explicitly saving to team memory publishes that entry to the workspace. An API key acts as the person who issued it." }),
         slug: str({ minLength: 2, maxLength: 49, pattern: TEAMMATE_SLUG_PATTERN, description: "Its permanent handle in commands and links; made from the name when omitted." }),
     }),
-    teammateOperation("teammates.get", "get", "GET", "/{slug}", "Read one Oxygent's profile and your ongoing private chat with it."),
-    teammateOperation("teammates.update", "update", "PATCH", "/{slug}", "Edit an Oxygent's name, what it does (description) or its look (avatar_key, avatar_color): its owner, its managers or a workspace admin. Its instructions, tools and versions are unchanged. Free.", TEAMMATE_PROFILE_FIELDS),
+    teammateOperation("teammates.get", "get", "GET", "/{slug}", "Read one Oxygent's profile and its ongoing chat and visibility."),
+    teammateOperation("teammates.update", "update", "PATCH", "/{slug}", "Edit an Oxygent's profile, or change visibility as its owner with confirm_visibility. Owners, managers and workspace admins can edit profiles. History is kept in both directions: Workspace shares it all; Personal removes others' future access but cannot retract what they saw. Home (the first Oxygent) stays Workspace. Free.", { ...TEAMMATE_PROFILE_FIELDS, visibility: enumOf(["workspace", "personal"], { description: "Only the owner can change visibility. Workspace grants everyone collaborator access and shares the complete history; Personal retains all messages, removes additional grants and everyone else's future access. Explicitly saving to team memory publishes that entry to the workspace. Home (the first Oxygent) stays Workspace." }), confirm_visibility: bool({ description: "Required when changing visibility: publishing shares all history; making personal removes everyone else's future access but cannot retract what they saw." }) }),
     // Sharing (Tim, 2026-10-14: "make agents accessible to your team mates"), the
     // way Grok Bot shares a Bot: everyone in the workspace, or people by email,
-    // each as a collaborator or a manager. Everyone still has a chat of their own.
-    teammateOperation("teammates.access", "access", "GET", "/{slug}/access", "Read who can use an Oxygent: its owner, what everyone in the workspace may do with it, and the people it is shared with. A collaborator chats with it in a chat of their own; a manager also changes its profile and who has access. Free."),
-    teammateOperation("teammates.share", "share", "POST", "/{slug}/access", "Share an Oxygent with teammates, or stop sharing it: with everyone in the workspace (everyone), or with people by their workspace email (add, as role; remove). Each person gets their own private chat with it; nobody reads anyone else's. Its owner, its managers or a workspace admin only; never the first Oxygent, which is everyone's. Free.", {
+    // each as a collaborator or a manager, with one ongoing shared chat.
+    teammateOperation("teammates.access", "access", "GET", "/{slug}/access", "Read access (visibility, owner, everyone, named people with roles, fixed and your permissions), without chat history. A collaborator uses its shared chat; a manager also changes its profile and access. Personal is creator-only; Home (the first Oxygent) is fixed. Free."),
+    teammateOperation("teammates.share", "share", "POST", "/{slug}/access", "Share an Oxygent with teammates, or stop sharing it: with everyone in the workspace (everyone), or with people by their workspace email (add, as role; remove). Everyone with access reads the same chat history. Personal Oxygents cannot be shared; change visibility explicitly first. Its owner, its managers or a workspace admin only; never the first Oxygent, which is everyone's. Free.", {
         everyone: enumOf([...TEAMMATE_SHARE_ROLES, "off"], {
-            description: "What everyone in the workspace may do with it: collaborator, manager, or off (only its owner and the people it is shared with).",
+            description: "Workspace-wide role: collaborator (the default), manager, or off (owner and named people, with workspace admins retaining management access). This restricts a Workspace Oxygent's audience; it does not make it Personal or split its shared chat.",
         }),
         add: arr(str({ minLength: 3, maxLength: 320 }), { maxItems: 50, description: "People to share it with, by their workspace email." }),
         role: enumOf([...TEAMMATE_SHARE_ROLES], {
-            description: "What the people in add become: collaborator (the default), who chats with it in a chat of their own, or manager, who also changes its profile and who has access. Adding someone already listed changes their role.",
+            description: "What the people in add become: collaborator (the default), who uses the same shared chat, or manager, who also changes its profile and access. Adding someone already listed changes their role.",
         }),
         remove: arr(str({ minLength: 3, maxLength: 320 }), {
             maxItems: 50,
-            description: "People to stop sharing it with, by their workspace email; for someone who has left the workspace, the user_id that access lists for them. Their chat with it stays, closed to them until it is shared with them again.",
+            description: "Remove named grants by workspace email or the user_id access lists for former members. All messages stay in the shared history. Workspace-wide access still applies; use everyone off to remove that grant too.",
         }),
     }),
     // Copy and delete (Tim, 2026-10-13: "CRUD actions ... through the right
     // click"; "'delete' should be 'full delete'"), as Grok Bot's Bot menu has.
-    teammateOperation("teammates.duplicate", "duplicate", "POST", "/{slug}/duplicate", `Copy an Oxygent as a new one you own, named "<name> copy" unless you name it: its job, look, instructions, skills and tool settings, but not its chats, memory, routines or who it is shared with. Only you can use the copy until you share it. Free.`, {
+    teammateOperation("teammates.duplicate", "duplicate", "POST", "/{slug}/duplicate", `Copy an Oxygent as a new one you own, named "<name> copy" unless you name it: its job, look, instructions, skills and tool settings, but not its chats, memory, routines or who it is shared with. The copy defaults to Workspace; choose Personal for creator-only access. Free.`, {
+        visibility: enumOf(["workspace", "personal"], { description: "Visibility of the copy; Workspace by default. No history is copied. Explicitly saving to team memory publishes that entry to the workspace." }),
         name: str({
             minLength: 1, maxLength: TEAMMATE_NAME_MAX_CHARS,
             description: "What everyone calls the copy. Its slug is made from the name, and a deleted Oxygent's slug stays taken, so a copy can get a numbered one (scout-2).",
@@ -88,8 +90,8 @@ export const TEAMMATE_OPERATIONS = [
         preview: bool({ description: "Only say what would go: its chats and the people they belong to, group chats, the group chats with other people it would leave, routines, runs, attached files and team memory entries." }),
         confirm: str({ maxLength: 49, description: "Its slug, repeated, to delete it." }),
     }),
-    teammateOperation("teammates.chat", "chat", "POST", "/{slug}/chat", "Open your ongoing private chat with an Oxygent, creating it the first time. Starts no inference."),
-    teammateOperation("teammates.message", "message", "POST", "/{slug}/messages", "Send a message in your ongoing private chat with an Oxygent. Starts a turn billed from workspace credits; paid or external actions still need approval.", { message: str({ minLength: 1, maxLength: 16000 }) }, ["message"], true),
+    teammateOperation("teammates.chat", "chat", "POST", "/{slug}/chat", "Open the ongoing chat with an Oxygent, creating it the first time. Starts no inference."),
+    teammateOperation("teammates.message", "message", "POST", "/{slug}/messages", "Send a message in the ongoing chat with an Oxygent. Starts a turn billed from workspace credits; paid or external actions still need approval.", { message: str({ minLength: 1, maxLength: 16000 }) }, ["message"], true),
     // Read state is the reader's own: a person's client may mark it, a runtime
     // acting in a chat never does (platform-denied, and refused at the route).
     teammateOperation("teammates.read", "read", "POST", "/{slug}/read", "Mark your chat with an Oxygent read up to its newest turn (or turn_index), or mark its newest turn unread again. Free.", { turn_index: int({ minimum: 0 }), unread: bool({ description: "On marks its newest turn unread again." }) }),
@@ -113,7 +115,7 @@ export const TEAMMATE_OPERATIONS = [
     teammateOperation("teammates.memory", "memory", "GET", "/{slug}/memory", "List what the team asked an Oxygent to remember. Every chat with it reads this; it is a Knowledge page."),
     teammateOperation("teammates.remember", "remember", "POST", "/{slug}/memory", "Add one thing to an Oxygent's team memory: every chat with it reads it, and the whole workspace can see it. Free.", { text: str({ minLength: 1, maxLength: 500 }) }, ["text"]),
     teammateOperation("teammates.forget", "forget", "DELETE", "/{slug}/memory/{entry_id}", "Remove one entry from an Oxygent's team memory."),
-    teammateOperation("teammates.notes", "notes", "GET", "/{slug}/notes", "Read what an Oxygent keeps about you: private to you, read only in your own chat with it."),
+    teammateOperation("teammates.notes", "notes", "GET", "/{slug}/notes", "Read what an Oxygent keeps about you. Private to you; never included in shared Workspace or multi-person group chats."),
     teammateOperation("teammates.notes_set", "notes_set", "POST", "/{slug}/notes", "Replace what an Oxygent keeps about you; empty clears it. Private to you.", { notes: str({ maxLength: 4000 }) }, ["notes"]),
     teammateOperation("teammates.activity", "activity", "GET", "/{slug}/activity", "List an Oxygent's recent work: its runs and the actions taken in its chats, as metadata only (no goals or messages)."),
     teammateGroupOperation("teammate_groups.list", "groups", "GET", "", "List the group chats you are in: name, Oxygents, people (each an admin or member) and the chat (working or waiting for you, unread, the latest words and who said them). Candidates are the teammates a new group chat could bring in."),

package/node_modules/@oxygen/shared/dist/email-tracking-token.d.ts

@@ -37,6 +37,8 @@ export type EmailTrackingTokenPayload = {
     enr?: string;
     /** Issued-at (epoch ms), recorded as provenance. */
     iat: number;
+    /** Diagnostic copy test: preserve transport rendering without campaign analytics. */
+    diagnostic?: true;
 };
 /** SHA-256 hex of a destination URL — the value bound into a click token's `uh`. */
 export declare function hashTrackingUrl(url: string): string;

package/node_modules/@oxygen/shared/dist/email-tracking-token.js

@@ -45,6 +45,7 @@ function parseTokenPayload(body) {
         ...(uh ? { uh } : {}),
         ...(typeof candidate.seq === "string" && candidate.seq ? { seq: candidate.seq } : {}),
         ...(typeof candidate.enr === "string" && candidate.enr ? { enr: candidate.enr } : {}),
+        ...(candidate.diagnostic === true ? { diagnostic: true } : {}),
         iat: typeof candidate.iat === "number" && Number.isFinite(candidate.iat) ? candidate.iat : 0,
     };
 }

package/node_modules/@oxygen/shared/dist/feature-gates.d.ts

@@ -71,6 +71,10 @@ export type FeatureGateResolution = {
  * - OXYGEN_AGENTS_ENABLED — (b). Authorizes autonomous Agent run execution —
  *   tool authority AND credit spend (`apps/web/src/lib/agent-runtime.ts`,
  *   `apps/worker/src/agent-cycle.ts`). Same class as publishing.
+ * - OXYGEN_AGENTS_WORKSPACE_IDS — (b). Which workspaces that execution may run
+ *   in (`packages/shared/src/agents-enabled.ts`); production also requires its
+ *   reviewed PRODUCTION_AGENT_WORKSPACE_IDS, so a wrong "on" for a customer's
+ *   workspace there needs a code change as well.
  * - OXYGEN_REPRICING_2026_09_EFFECTIVE_AT — (b). The instant every held price
  *   rise and limit cut of the 2026-09 repricing takes effect
  *   (`packages/shared/src/repricing.ts`). A remotely flippable value would let

package/node_modules/@oxygen/shared/dist/feature-gates.js

@@ -62,6 +62,10 @@
  * - OXYGEN_AGENTS_ENABLED — (b). Authorizes autonomous Agent run execution —
  *   tool authority AND credit spend (`apps/web/src/lib/agent-runtime.ts`,
  *   `apps/worker/src/agent-cycle.ts`). Same class as publishing.
+ * - OXYGEN_AGENTS_WORKSPACE_IDS — (b). Which workspaces that execution may run
+ *   in (`packages/shared/src/agents-enabled.ts`); production also requires its
+ *   reviewed PRODUCTION_AGENT_WORKSPACE_IDS, so a wrong "on" for a customer's
+ *   workspace there needs a code change as well.
  * - OXYGEN_REPRICING_2026_09_EFFECTIVE_AT — (b). The instant every held price
  *   rise and limit cut of the 2026-09 repricing takes effect
  *   (`packages/shared/src/repricing.ts`). A remotely flippable value would let
@@ -90,6 +94,7 @@ export const NEVER_FLAGGABLE = [
     "OXYGEN_PUBLISHING_ENABLED",
     "OXYGEN_UGC_ENABLED",
     "OXYGEN_AGENTS_ENABLED",
+    "OXYGEN_AGENTS_WORKSPACE_IDS",
     "OXYGEN_TELEMETRY_ENABLED",
     "OXYGEN_LOG_SHIPPING_ENABLED",
     "OXYGEN_LLM_TRACING_ENABLED",

package/node_modules/@oxygen/shared/dist/file-import.d.ts

@@ -76,6 +76,52 @@ export declare function normalizeRowsForNewTable(rows: Record<string, unknown>[]
  */
 export declare function dropBlankImportCells(row: Record<string, unknown>, keepKey?: string | null): Record<string, unknown>;
 export declare function normalizeImportColumnKey(value: string): string;
+/**
+ * Read `ignore_source_keys`: the headers a mapping step set to "Don't import".
+ * A JSON array (staged body) or its JSON text (multipart form field); headers
+ * are matched verbatim, so they are not trimmed. Anything malformed reads as
+ * no choice at all, never as a reason to fail the import.
+ */
+export declare function readImportHeaderList(value: unknown): string[];
+/** A column of the table an import writes into. */
+export type ImportTargetColumn = {
+    key: string;
+    label?: string | null;
+};
+/** Why a file column was not written. */
+export type IgnoredImportHeaderReason = "not_selected" | "no_matching_column" | "duplicate_target" | "system_column";
+export type IgnoredImportHeader = {
+    header: string;
+    reason: IgnoredImportHeaderReason;
+    column?: string;
+};
+/**
+ * Decide, once per file header, which column of an EXISTING table it lands in.
+ *
+ * File imports used to hand every header to the row writer verbatim, and the
+ * writer refuses an unknown key for the whole chunk. A standard export carries
+ * columns the table does not have — Baserow puts an `id` first — so on
+ * 2026-10-12 and 2026-10-15 three workspaces' CRM imports wrote nothing at all
+ * and showed only `invalid_row_values`. Headers now resolve in a fixed order:
+ * an explicit choice (`explicitMap`, `ignore`) first, then the column key, then
+ * the column's label or the normalized key. A header that resolves to no
+ * column, or to a column another header already fills, is left out and
+ * reported, never guessed: two headers writing one column would overwrite each
+ * other. Rows keep their cells; only the keys are renamed or dropped.
+ */
+export declare function createImportHeaderProjector(input: {
+    columns: readonly ImportTargetColumn[];
+    explicitMap?: Readonly<Record<string, string>> | null;
+    ignore?: readonly string[] | null;
+}): {
+    /** Resolve any headers first seen in these rows; earlier decisions stand. */
+    observe(rows: readonly Record<string, unknown>[]): void;
+    /** The row with every key renamed to its column, unwritten headers dropped. */
+    project(row: Record<string, unknown>): Record<string, unknown>;
+    /** header → column for every header that writes; for a preview or a receipt. */
+    mapping(): Record<string, string>;
+    ignored(): IgnoredImportHeader[];
+};
 /**
  * Refuse a JSON or XLSX file over the buffered-parse ceiling before anything is
  * uploaded or queued. CSV and JSONL stream, so they pass at any size and only