@oxygen-agent/cli 1.184.3 → 1.209.23

package/node_modules/@oxygen/recipe-sdk/dist/index.d.ts

@@ -78,6 +78,46 @@ export type RecipeContextProfileApi = {
 export type RecipeContextApi = {
     profile: RecipeContextProfileApi;
 };
+export type RecipeCrmIdentity = {
+    key: string;
+    value: unknown;
+};
+export type RecipeCrmActivityLink = {
+    object: string;
+    row_id: string;
+    role?: string;
+};
+export type RecipeCrmActivityInput = {
+    type: string;
+    links: RecipeCrmActivityLink[];
+    summary?: string | null;
+    body?: string | null;
+    channel?: string | null;
+    direction?: "inbound" | "outbound" | "internal" | "system" | null;
+    occurred_at?: string | null;
+    source_provider?: string | null;
+    provider_event_id?: string | null;
+    metadata?: Record<string, unknown>;
+};
+export type RecipeCrmExternalRef = {
+    provider: string;
+    object: string;
+    external_id: string;
+    pulled_at?: string | null;
+    provider_event_id?: string | null;
+    confidence?: number | null;
+};
+export type RecipeCrmApi = {
+    assert: <T = unknown>(object: string, identity: RecipeCrmIdentity, values: Record<string, unknown> | undefined, options: {
+        key: string;
+    }) => Promise<T>;
+    assertFromProvider: <T = unknown>(object: string, identity: RecipeCrmIdentity, values: Record<string, unknown> | undefined, external: RecipeCrmExternalRef, options: {
+        key: string;
+    }) => Promise<T>;
+    logActivity: <T = unknown>(input: RecipeCrmActivityInput, options: {
+        key: string;
+    }) => Promise<T>;
+};
 export type RecipeApprovalApi = {
     require: <T = {
         approved: boolean;
@@ -97,6 +137,7 @@ export type RecipeContext = {
     rows: RecipeRowsApi;
     columns: RecipeColumnsApi;
     context: RecipeContextApi;
+    crm: RecipeCrmApi;
     approvals: RecipeApprovalApi;
     log: (level: RecipeLogLevel, message: string, payload?: Record<string, unknown>) => void;
     step: <T = unknown>(key: string, options: RecipeStepOptions<T>) => Promise<T>;

package/node_modules/@oxygen/shared/dist/billing.d.ts

@@ -13,6 +13,9 @@ export type PricingPlanDefinition = {
     monthlyCredits: number | null;
     weeklyCreditsLimit: number | null;
     rolloverCap: number | null;
+    monthlyAutomationActions: number | null;
+    automationOverageCentsPerMillion: number | null;
+    automationOverageEnabledDefault: boolean;
     byokEnabled: boolean;
     description: string;
     badge?: string;
@@ -31,10 +34,13 @@ export declare const BASE_PRICING_PLANS: {
         readonly monthlyCredits: 500;
         readonly weeklyCreditsLimit: 500;
         readonly rolloverCap: 500;
+        readonly monthlyAutomationActions: 10000;
+        readonly automationOverageCentsPerMillion: null;
+        readonly automationOverageEnabledDefault: false;
         readonly byokEnabled: false;
         readonly description: "Get $10 in credits on us every month — try OXYGEN with managed email, phone enrichment, and AI credits.";
         readonly ctaLabel: "Start free";
-        readonly features: readonly ["$10 in credits every month", "All integrations", "Workflows", "No card required"];
+        readonly features: readonly ["$10 in credits every month", "10,000 automation actions / month", "All integrations", "Workflows", "No card required"];
     };
     readonly starter: {
         readonly tier: "starter";
@@ -43,10 +49,13 @@ export declare const BASE_PRICING_PLANS: {
         readonly monthlyCredits: 5000;
         readonly weeklyCreditsLimit: 2000;
         readonly rolloverCap: 5000;
+        readonly monthlyAutomationActions: 250000;
+        readonly automationOverageCentsPerMillion: 1000;
+        readonly automationOverageEnabledDefault: false;
         readonly byokEnabled: true;
         readonly description: "For founders running focused managed enrichment and AI columns.";
         readonly ctaLabel: "Choose Starter";
-        readonly features: readonly ["All integrations", "Bring your own keys", "Workflows", "Standard support"];
+        readonly features: readonly ["All integrations", "250,000 automation actions / month", "Bring your own keys", "Workflows", "Standard support"];
     };
     readonly pro: {
         readonly tier: "pro";
@@ -55,12 +64,15 @@ export declare const BASE_PRICING_PLANS: {
         readonly monthlyCredits: 12500;
         readonly weeklyCreditsLimit: 5000;
         readonly rolloverCap: 12500;
+        readonly monthlyAutomationActions: 2000000;
+        readonly automationOverageCentsPerMillion: 1000;
+        readonly automationOverageEnabledDefault: false;
         readonly byokEnabled: true;
         readonly description: "For recurring GTM enrichment and AI-column workflows on managed credits.";
         readonly badge: "Most popular";
         readonly highlighted: true;
         readonly ctaLabel: "Choose Pro";
-        readonly features: readonly ["All integrations", "Bring your own keys", "Workflows", "Standard support"];
+        readonly features: readonly ["All integrations", "2,000,000 automation actions / month", "Bring your own keys", "Workflows", "Standard support"];
     };
     readonly team: {
         readonly tier: "team";
@@ -69,10 +81,13 @@ export declare const BASE_PRICING_PLANS: {
         readonly monthlyCredits: 37500;
         readonly weeklyCreditsLimit: 15000;
         readonly rolloverCap: 37500;
+        readonly monthlyAutomationActions: 10000000;
+        readonly automationOverageCentsPerMillion: 500;
+        readonly automationOverageEnabledDefault: false;
         readonly byokEnabled: true;
         readonly description: "For small GTM teams and agencies running shared workflows with their own AI keys.";
         readonly ctaLabel: "Choose Team";
-        readonly features: readonly ["All integrations", "Bring your own keys", "Workflows", "Premium support"];
+        readonly features: readonly ["All integrations", "10,000,000 automation actions / month", "Bring your own keys", "Workflows", "Premium support"];
     };
     readonly scale: {
         readonly tier: "scale";
@@ -81,11 +96,14 @@ export declare const BASE_PRICING_PLANS: {
         readonly monthlyCredits: 500000;
         readonly weeklyCreditsLimit: 500000;
         readonly rolloverCap: 500000;
+        readonly monthlyAutomationActions: 50000000;
+        readonly automationOverageCentsPerMillion: null;
+        readonly automationOverageEnabledDefault: false;
         readonly byokEnabled: true;
         readonly description: "For high-volume GTM teams that need custom limits and rollout support.";
         readonly ctaLabel: "Contact sales";
         readonly contactHref: "https://cal.com/tim-scheuer-mxbib9/45";
-        readonly features: readonly ["500,000+ managed credits / month", "Phone number enrichment on managed credits", "Custom provider routing and BYOK policies", "Dedicated onboarding"];
+        readonly features: readonly ["500,000+ managed credits / month", "50,000,000+ automation actions / month", "Phone number enrichment on managed credits", "Custom provider routing and BYOK policies", "Dedicated onboarding"];
     };
     readonly enterprise: {
         readonly tier: "enterprise";
@@ -94,11 +112,14 @@ export declare const BASE_PRICING_PLANS: {
         readonly monthlyCredits: null;
         readonly weeklyCreditsLimit: null;
         readonly rolloverCap: null;
+        readonly monthlyAutomationActions: null;
+        readonly automationOverageCentsPerMillion: null;
+        readonly automationOverageEnabledDefault: false;
         readonly byokEnabled: true;
         readonly description: "Custom procurement, invoicing, limits, and rollout support.";
         readonly ctaLabel: "Talk to us";
         readonly contactHref: "https://cal.com/tim-scheuer-mxbib9/45";
-        readonly features: readonly ["Custom monthly usage pool", "Phone number enrichment", "Custom AI-key and provider routing policies", "SSO, invoicing, and procurement support"];
+        readonly features: readonly ["Custom monthly usage pool", "Custom automation action allowance", "Phone number enrichment", "Custom AI-key and provider routing policies", "SSO, invoicing, and procurement support"];
     };
 };
 export declare const PUBLIC_PLAN_ORDER: readonly PlanTier[];
@@ -114,6 +135,7 @@ export declare function isSelfServePlanTier(value: string): value is SelfServePl
 export declare function isBillingCurrency(value: string): value is BillingCurrency;
 export declare function normalizeBillingCurrency(value: string | null | undefined): BillingCurrency;
 export declare function getCurrentFreeTierCycleKey(date?: Date): string;
+export declare function getCurrentBillingCycleKey(date?: Date): string;
 export declare function evaluateWeeklyQuota(usedCredits: number, requestedCredits: number, weeklyCreditsLimit: number): {
     usedCredits: number;
     requestedCredits: number;

package/node_modules/@oxygen/shared/dist/billing.js

@@ -10,11 +10,15 @@ export const BASE_PRICING_PLANS = {
         monthlyCredits: 500,
         weeklyCreditsLimit: 500,
         rolloverCap: 500,
+        monthlyAutomationActions: 10_000,
+        automationOverageCentsPerMillion: null,
+        automationOverageEnabledDefault: false,
         byokEnabled: false,
         description: "Get $10 in credits on us every month — try OXYGEN with managed email, phone enrichment, and AI credits.",
         ctaLabel: "Start free",
         features: [
             "$10 in credits every month",
+            "10,000 automation actions / month",
             "All integrations",
             "Workflows",
             "No card required",
@@ -27,11 +31,15 @@ export const BASE_PRICING_PLANS = {
         monthlyCredits: 5_000,
         weeklyCreditsLimit: 2_000,
         rolloverCap: 5_000,
+        monthlyAutomationActions: 250_000,
+        automationOverageCentsPerMillion: 1_000,
+        automationOverageEnabledDefault: false,
         byokEnabled: true,
         description: "For founders running focused managed enrichment and AI columns.",
         ctaLabel: "Choose Starter",
         features: [
             "All integrations",
+            "250,000 automation actions / month",
             "Bring your own keys",
             "Workflows",
             "Standard support",
@@ -44,6 +52,9 @@ export const BASE_PRICING_PLANS = {
         monthlyCredits: 12_500,
         weeklyCreditsLimit: 5_000,
         rolloverCap: 12_500,
+        monthlyAutomationActions: 2_000_000,
+        automationOverageCentsPerMillion: 1_000,
+        automationOverageEnabledDefault: false,
         byokEnabled: true,
         description: "For recurring GTM enrichment and AI-column workflows on managed credits.",
         badge: "Most popular",
@@ -51,6 +62,7 @@ export const BASE_PRICING_PLANS = {
         ctaLabel: "Choose Pro",
         features: [
             "All integrations",
+            "2,000,000 automation actions / month",
             "Bring your own keys",
             "Workflows",
             "Standard support",
@@ -63,11 +75,15 @@ export const BASE_PRICING_PLANS = {
         monthlyCredits: 37_500,
         weeklyCreditsLimit: 15_000,
         rolloverCap: 37_500,
+        monthlyAutomationActions: 10_000_000,
+        automationOverageCentsPerMillion: 500,
+        automationOverageEnabledDefault: false,
         byokEnabled: true,
         description: "For small GTM teams and agencies running shared workflows with their own AI keys.",
         ctaLabel: "Choose Team",
         features: [
             "All integrations",
+            "10,000,000 automation actions / month",
             "Bring your own keys",
             "Workflows",
             "Premium support",
@@ -80,12 +96,16 @@ export const BASE_PRICING_PLANS = {
         monthlyCredits: 500_000,
         weeklyCreditsLimit: 500_000,
         rolloverCap: 500_000,
+        monthlyAutomationActions: 50_000_000,
+        automationOverageCentsPerMillion: null,
+        automationOverageEnabledDefault: false,
         byokEnabled: true,
         description: "For high-volume GTM teams that need custom limits and rollout support.",
         ctaLabel: "Contact sales",
         contactHref: CONTACT_SALES_URL,
         features: [
             "500,000+ managed credits / month",
+            "50,000,000+ automation actions / month",
             "Phone number enrichment on managed credits",
             "Custom provider routing and BYOK policies",
             "Dedicated onboarding",
@@ -98,12 +118,16 @@ export const BASE_PRICING_PLANS = {
         monthlyCredits: null,
         weeklyCreditsLimit: null,
         rolloverCap: null,
+        monthlyAutomationActions: null,
+        automationOverageCentsPerMillion: null,
+        automationOverageEnabledDefault: false,
         byokEnabled: true,
         description: "Custom procurement, invoicing, limits, and rollout support.",
         ctaLabel: "Talk to us",
         contactHref: CONTACT_SALES_URL,
         features: [
             "Custom monthly usage pool",
+            "Custom automation action allowance",
             "Phone number enrichment",
             "Custom AI-key and provider routing policies",
             "SSO, invoicing, and procurement support",
@@ -229,6 +253,11 @@ plan, metadata) {
     const monthlyCredits = readCreditLimit(config, "monthlyCredits", "monthly_credits", "monthly_credit_limit");
     const weeklyCreditsLimit = readCreditLimit(config, "weeklyCreditsLimit", "weekly_credits_limit", "weekly_credit_limit");
     const rolloverCap = readCreditLimit(config, "rolloverCap", "rollover_cap", "rollover_credits");
+    const monthlyAutomationActions = readCreditLimit(config, "monthlyAutomationActions", "monthly_automation_actions", "automation_actions", "automation_action_limit");
+    const automationOverageCentsPerMillion = readCreditLimit(config, "automationOverageCentsPerMillion", "automation_overage_cents_per_million", "automation_action_overage_cents_per_million");
+    const automationOverageEnabledDefault = readBoolean(config, "automationOverageEnabledDefault")
+        ?? readBoolean(config, "automation_overage_enabled_default")
+        ?? readBoolean(config, "automation_overage_enabled");
     const byokEnabled = readBoolean(config, "byokEnabled")
         ?? readBoolean(config, "byok_enabled");
     return {
@@ -237,6 +266,9 @@ plan, metadata) {
         monthlyCredits: monthlyCredits ?? plan.monthlyCredits,
         weeklyCreditsLimit: weeklyCreditsLimit ?? plan.weeklyCreditsLimit,
         rolloverCap: rolloverCap ?? plan.rolloverCap,
+        monthlyAutomationActions: monthlyAutomationActions ?? plan.monthlyAutomationActions,
+        automationOverageCentsPerMillion: automationOverageCentsPerMillion ?? plan.automationOverageCentsPerMillion,
+        automationOverageEnabledDefault: automationOverageEnabledDefault ?? plan.automationOverageEnabledDefault,
         byokEnabled: byokEnabled ?? plan.byokEnabled,
         description: description ?? plan.description,
     };
@@ -284,6 +316,15 @@ export function getCurrentFreeTierCycleKey(date = new Date()) {
     const month = String(date.getUTCMonth() + 1).padStart(2, "0");
     return `free:${year}-${month}`;
 }
+// Calendar-month cycle key (UTC `YYYY-MM`) for off-Stripe custom plans. Stripe
+// subscriptions advance their billing period via webhooks; manual/invoiced
+// plans never do, so we renew their monthly credit grant by calendar month
+// instead of by Stripe period boundary.
+export function getCurrentBillingCycleKey(date = new Date()) {
+    const year = date.getUTCFullYear();
+    const month = String(date.getUTCMonth() + 1).padStart(2, "0");
+    return `${year}-${month}`;
+}
 export function evaluateWeeklyQuota(usedCredits, requestedCredits, weeklyCreditsLimit) {
     const projectedCredits = usedCredits + requestedCredits;
     return {

package/node_modules/@oxygen/shared/dist/index.d.ts

@@ -8,6 +8,7 @@ export * from "./cli-result.js";
 export * from "./column-types.js";
 export * from "./credit-guidance.js";
 export * from "./linkedin-sequences.js";
+export * from "./networks.js";
 export * from "./sequences.js";
 export * from "./log.js";
 export * from "./provider-request-outcomes.js";

package/node_modules/@oxygen/shared/dist/index.js

@@ -8,6 +8,7 @@ export * from "./cli-result.js";
 export * from "./column-types.js";
 export * from "./credit-guidance.js";
 export * from "./linkedin-sequences.js";
+export * from "./networks.js";
 export * from "./sequences.js";
 export * from "./log.js";
 export * from "./provider-request-outcomes.js";

package/node_modules/@oxygen/shared/dist/networks.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Sequencer networks — the channel discriminator for the Unipile-backed sender
+ * pool, unibox, and per-account daily quota ledger (schema `ox_sequencer`).
+ *
+ * The sequencer primitives (sender_accounts, conversations, messages,
+ * sender_action_counts) are channel-agnostic; `network` tells one Unipile
+ * network from another. LinkedIn is the original network and the default for
+ * every row/call site that predates the discriminator, so a missing/unknown
+ * value always resolves to `"linkedin"` (zero behaviour change). WhatsApp is the
+ * second network and is warm-only (no cold sequencer dispatch).
+ *
+ * Email is intentionally NOT a sequencer network: it has its own mailbox and
+ * conversation tables (`email_mailboxes`, `email_conversations`, …).
+ */
+export declare const SEQUENCER_NETWORKS: readonly ["linkedin", "whatsapp"];
+export type SequencerNetwork = (typeof SEQUENCER_NETWORKS)[number];
+/** The network assumed for any row/call site that predates the discriminator. */
+export declare const DEFAULT_SEQUENCER_NETWORK: SequencerNetwork;
+export declare function isSequencerNetwork(value: unknown): value is SequencerNetwork;
+/** Coerce an unknown/null DB value to a network, defaulting to LinkedIn. */
+export declare function coerceSequencerNetwork(value: unknown): SequencerNetwork;

package/node_modules/@oxygen/shared/dist/networks.js

@@ -0,0 +1,25 @@
+/**
+ * Sequencer networks — the channel discriminator for the Unipile-backed sender
+ * pool, unibox, and per-account daily quota ledger (schema `ox_sequencer`).
+ *
+ * The sequencer primitives (sender_accounts, conversations, messages,
+ * sender_action_counts) are channel-agnostic; `network` tells one Unipile
+ * network from another. LinkedIn is the original network and the default for
+ * every row/call site that predates the discriminator, so a missing/unknown
+ * value always resolves to `"linkedin"` (zero behaviour change). WhatsApp is the
+ * second network and is warm-only (no cold sequencer dispatch).
+ *
+ * Email is intentionally NOT a sequencer network: it has its own mailbox and
+ * conversation tables (`email_mailboxes`, `email_conversations`, …).
+ */
+export const SEQUENCER_NETWORKS = ["linkedin", "whatsapp"];
+/** The network assumed for any row/call site that predates the discriminator. */
+export const DEFAULT_SEQUENCER_NETWORK = "linkedin";
+export function isSequencerNetwork(value) {
+    return (typeof value === "string" &&
+        SEQUENCER_NETWORKS.includes(value));
+}
+/** Coerce an unknown/null DB value to a network, defaulting to LinkedIn. */
+export function coerceSequencerNetwork(value) {
+    return isSequencerNetwork(value) ? value : DEFAULT_SEQUENCER_NETWORK;
+}

package/node_modules/@oxygen/shared/dist/search-vocab.d.ts

@@ -2,7 +2,7 @@ export declare function normalizeText(value: string): string;
 export declare function escapeRegExp(value: string): string;
 export declare function extractUrls(value: string): string[];
 export declare function extractDomains(value: string): string[];
-export declare function parseMoney(amount: string, unit: string | undefined): number;
+export declare function parseMoney(amount: string, unit?: string): number;
 export declare function regionDisplayName(code: string): string | null;
 export declare const COUNTRY_NAME_TO_ISO: Map<string, string>;
 export declare const COUNTRY_ALIAS_TO_ISO: Record<string, string>;

package/node_modules/@oxygen/shared/dist/sequences.d.ts

@@ -315,7 +315,7 @@ export declare function selectStepVariant(step: SequenceStep, key: string): {
  * "recipient" mode reads the lead's tz from `recipient_timezone_column`, falling
  * back to the window's fixed `timezone` when the column is absent/blank.
  */
-export declare function resolveSendWindowTimezone(window: SequenceSendWindow, rowValues: Record<string, unknown> | null | undefined): string;
+export declare function resolveSendWindowTimezone(window: SequenceSendWindow, rowValues?: Record<string, unknown> | null): string;
 /**
  * Is `now` inside the send window, evaluated in `timezone` (already resolved for
  * recipient mode via resolveSendWindowTimezone)? Pure; Intl only

package/node_modules/@oxygen/shared/dist/sequences.js

@@ -628,7 +628,7 @@ export function resolveSendWindowTimezone(window, rowValues) {
  * start>end wraps past midnight.
  */
 export function isWithinSendWindow(window, now, timezone) {
-    const tz = timezone && timezone.trim() ? timezone.trim() : window.timezone;
+    const tz = timezone?.trim() ? timezone.trim() : window.timezone;
     const parts = tzParts(now, tz) ?? tzParts(now, window.timezone) ?? tzParts(now, "UTC");
     if (!parts)
         return true; // unresolvable tz → fail open (caps still apply)
@@ -714,6 +714,14 @@ function normalizeSendWindow(raw, path, issues) {
         issues.push({ path: `${path}.timezone`, message: "timezone (IANA, e.g. America/New_York) is required." });
     const start = normalizeHhmm(raw.start, `${path}.start`, issues);
     const end = normalizeHhmm(raw.end, `${path}.end`, issues);
+    // A zero-width window (start === end) is never open — isWithinSendWindow
+    // returns false for every instant — so a step carrying it defers
+    // (outside_send_window) on every dispatch and the enrollment silently stalls
+    // forever (nothing sends, so the send cap never advances it). Reject it at
+    // write time instead of letting the misconfiguration strand the sequence.
+    if (start !== undefined && end !== undefined && hhmmToMinutes(start) === hhmmToMinutes(end)) {
+        issues.push({ path: `${path}.end`, message: "must differ from start — a zero-width send_window never sends." });
+    }
     const days = normalizeWeekdays(raw.days, `${path}.days`, issues);
     const mode = raw.timezone_mode === "recipient" ? "recipient" : "fixed";
     const column = mode === "recipient"

package/node_modules/@oxygen/shared/dist/signup-lead-webhook.d.ts

@@ -14,7 +14,7 @@ export declare function isOxygenHostname(hostname: string): boolean;
  * internal secrets; external hosts with Oxygen-looking paths are "external" and
  * must never be trusted with the internal webhook secret.
  */
-export declare function classifySignupLeadWebhookTarget(value: string | null | undefined): SignupLeadWebhookTarget;
+export declare function classifySignupLeadWebhookTarget(value?: string | null): SignupLeadWebhookTarget;
 /** HMAC-SHA256 hex digest of the request body keyed by the webhook secret. */
 export declare function signSignupLeadWebhookBody(secret: string, body: string): string;
 export type BuildSignupLeadWebhookHeadersInput = {

package/node_modules/@oxygen/shared/dist/sql-error.d.ts

@@ -44,6 +44,6 @@ export declare function redactSqlParameters(text: string): string;
  * exhausted. Reuses the same SQLSTATE classifier as the telemetry helpers so the
  * 40001/40P01 knowledge lives in one place. Never throws.
  */
-export declare function isRetryableConcurrencyError(error: unknown): boolean;
+export declare function isRetryableConcurrencyError(error?: unknown): boolean;
 /** Telemetry-attribute shape (dotted keys) for span error attribution. */
 export declare function sqlErrorTelemetryAttributes(error: unknown): Record<string, unknown>;

package/node_modules/@oxygen/shared/dist/version.d.ts

@@ -1,2 +1,2 @@
-export declare const OXYGEN_VERSION = "1.184.3";
+export declare const OXYGEN_VERSION = "1.209.23";
 export declare const OXYGEN_MINIMUM_CLI_VERSION = "1.181.0";

package/node_modules/@oxygen/shared/dist/version.js

@@ -1,4 +1,4 @@
-export const OXYGEN_VERSION = "1.184.3";
+export const OXYGEN_VERSION = "1.209.23";
 // Bump this only when deployed CLI/API contracts require a newer CLI.
 // 1.181.0: paid table action runs and background columns run require
 // approved=true in addition to max_credits; older CLIs cannot send the flag.

package/node_modules/@oxygen/shared/dist/workflow-trigger-metadata.js

@@ -5,10 +5,7 @@ export const WORKFLOW_TRIGGER_AUTO_PAUSE_METADATA_KEYS = [
     "auto_paused_at",
     "auto_pause_reason",
 ];
+const WORKFLOW_TRIGGER_AUTO_PAUSE_METADATA_KEY_SET = new Set(WORKFLOW_TRIGGER_AUTO_PAUSE_METADATA_KEYS);
 export function clearWorkflowTriggerAutoPauseMetadata(metadata) {
-    const next = { ...metadata };
-    for (const key of WORKFLOW_TRIGGER_AUTO_PAUSE_METADATA_KEYS) {
-        delete next[key];
-    }
-    return next;
+    return Object.fromEntries(Object.entries(metadata).filter(([key]) => !WORKFLOW_TRIGGER_AUTO_PAUSE_METADATA_KEY_SET.has(key)));
 }

package/node_modules/@oxygen/workflows/dist/index.d.ts

@@ -828,6 +828,7 @@ export declare function getWorkflowSchema(subject?: "apply" | "call" | "event" |
 export declare function computeWorkflowPlanHash(input: Record<string, unknown>): string;
 export declare const WORKFLOW_MAX_CREDITS_EXCEEDED_ERROR_CODE = "max_credits_exceeded";
 export declare function readWorkflowRunMaxCredits(metadata: Record<string, unknown> | null | undefined): number | null;
+export declare function readWorkflowRunPreApprovedLabels(metadata: Record<string, unknown> | null | undefined): string[];
 export declare function readManagedToolRunCredits(output: unknown): number;
 export type WorkflowSpendCapDecision = {
     allowed: boolean;

package/node_modules/@oxygen/workflows/dist/index.js

@@ -112,12 +112,24 @@ export function nextCronRunAfter(input) {
         // If the calendar date itself can't match, no minute that day matches —
         // jump to the next day instead of scanning all 1440 minutes. This keeps
         // sparse schedules (e.g. "0 9 29 2 *") and unsatisfiable ones fast over the
-        // multi-year window. The big jump always lands at ~00:00 of the next day,
-        // so a subsequently matching date is scanned from its start (no missed
-        // earlier minutes).
+        // multi-year window. The jump targets ~00:00 of the next day, so a
+        // subsequently matching date is scanned from its start (no missed minutes).
         if (!matchesCronDate(schedule, parts)) {
             const minutesToNextDay = Math.max(1, 24 * 60 - (parts.hour * 60 + parts.minute));
-            candidate = new Date(candidate.getTime() + minutesToNextDay * 60_000);
+            let next = new Date(candidate.getTime() + minutesToNextDay * 60_000);
+            // minutesToNextDay is a LOCAL-clock count added to a UTC instant. On a
+            // spring-forward day the local day is < 24h, so the jump overshoots the
+            // next local midnight and lands at ~01:00 — skipping an early-of-day match
+            // (e.g. "0 0 …"), which can push the next run a full year out. If the jump
+            // crossed into the next local day but past midnight, pull it back to that
+            // midnight. (A fall-back day is > 24h: the jump undershoots and stays on
+            // the same date, which the next iteration advances — left as-is.)
+            const landed = zonedDateParts(next, timezone);
+            const intoNextLocalDay = landed.hour * 60 + landed.minute;
+            if (landed.dayOfMonth !== parts.dayOfMonth && intoNextLocalDay > 0) {
+                next = new Date(next.getTime() - intoNextLocalDay * 60_000);
+            }
+            candidate = next;
         }
         else {
             candidate = new Date(candidate.getTime() + 60_000);
@@ -1424,7 +1436,7 @@ function isValidTimeZone(timezone) {
     try {
         // Throws RangeError for an unknown IANA zone; same mechanism the scheduler
         // uses, so lint accepts exactly the zones the runtime can resolve.
-        new Intl.DateTimeFormat("en-US", { timeZone: timezone });
+        new Intl.DateTimeFormat("en-US", { timeZone: timezone }).format(0);
         return true;
     }
     catch {
@@ -1557,6 +1569,28 @@ export function readWorkflowRunMaxCredits(metadata) {
         return null;
     return parsed;
 }
+// Approval labels the run's enqueue route already collected SYNCHRONOUS human
+// approval for (a CLI/MCP `approved=true` gate before the run was created), and
+// recorded in run metadata as `preapproved_labels`. A live ctx.approvals.require()
+// call whose `label` is in this set is honored immediately by both recipe
+// executors instead of parking on a durable decision row (local) or failing
+// closed with approval_requires_local_executor (sandbox). Every other label
+// still goes through the full durable gate, and the max_credits spend cap is
+// enforced separately per paid tool step, so a pre-approved label never widens
+// spend. Only trusted server code (the enqueue route) sets this — it is read
+// from run metadata, never from user-suppliable workflow input.
+export function readWorkflowRunPreApprovedLabels(metadata) {
+    if (!isRecord(metadata))
+        return [];
+    const raw = metadata.preapproved_labels ?? metadata.preApprovedLabels;
+    if (!Array.isArray(raw))
+        return [];
+    const labels = raw
+        .filter((entry) => typeof entry === "string")
+        .map((entry) => entry.trim())
+        .filter((entry) => entry.length > 0);
+    return Array.from(new Set(labels));
+}
 // Managed tool runs attach `meta.billing` with the credits the run charged
 // (`managed_credit_estimate` is reserved and captured in full). BYOK and
 // user-connection runs consume no OXYGEN credits, so they never count

package/oxygen.js

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+import "./dist/index.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oxygen-agent/cli",
-  "version": "1.184.3",
+  "version": "1.209.23",
   "private": false,
   "license": "UNLICENSED",
   "type": "module",
@@ -12,7 +12,7 @@
     "directory": "packages/cli"
   },
   "bin": {
-    "oxygen": "./dist/index.js"
+    "oxygen": "./oxygen.js"
   },
   "exports": {
     ".": {