@oxygen-agent/cli 1.286.13 → 1.309.0

package/dist/index.js

@@ -9,15 +9,16 @@ import { fileURLToPath, pathToFileURL } from "node:url";
 import { Command, Option } from "commander";
 import { applyOxygenHelp } from "./help.js";
 import { buildCommandManifest } from "./command-manifest.js";
-import { AGENCY_DIRECTORY_REGIONS, AGENCY_DIRECTORY_SERVICES, formatCellForDisplay, formatPublicBudgetScopes, exitCodeForOxygenError, isVersionGreater, isVersionLess, OXYGEN_VERSION, OxygenError, parseKnowledgePageMarkdown, success, toFailure, } from "@oxygen/shared";
+import { AGENCY_DIRECTORY_REGIONS, AGENCY_DIRECTORY_SERVICES, formatCellForDisplay, formatPublicBudgetScopes, exitCodeForOxygenError, isVersionGreater, isVersionLess, OXYGEN_VERSION, OxygenError, parseKnowledgePageMarkdown, sleep, success, toFailure, } from "@oxygen/shared";
 import { inferImportColumnLabels, inferRowsFileFormat, normalizeImportColumnKey, normalizeRowsForNewTable, normalizeRowsFormat, parseRowsFileBuffer, } from "@oxygen/shared/file-import";
 import { assertRecipeBundleSafe, assertWorkflowManifest, buildRecipeManifest, compileWorkflowDefinition, isAnyWorkflowManifest, isRecipeManifest, isWorkflowDefinition, isWorkflowManifest, } from "@oxygen/workflows";
 import { isRecipeDefinition } from "@oxygen/recipe-sdk";
 import { createBrowserLoginSession, openBrowser } from "./browser-login.js";
 import { clearCredentials, defaultApiUrl, listCredentialProfiles, loadCredentials, normalizeApiUrl, pickProfileNameForIdentity, pickProfileNameForUserSession, resolveActiveProfile, saveCredentials, switchCredentialProfile, updateActiveOrganizationForProfile, } from "./credentials.js";
 import { ensureFreshCliForApiUrl, requestOxygen } from "./http-client.js";
-import { acquireMirrorLock, clearConflictFiles, deletePageFile, emptyMirrorState, findMirrorSlugByPageId, isFileDirty, listConflictFiles, localPageSha256, markMirrorStale, mirrorExists, pageFilePath, planMirrorPush, purgeMirror, resetMirrorForFullResync, quarantineDirtyFile, readMirrorState, releaseMirrorLock, resolveDefaultConfigDir, resolveMirrorDir, writeGeneratedIndexFile, writeGeneratedLogFile, writeMirrorState, writePageFile, } from "./knowledge-mirror.js";
+import { acquireMirrorLock, clearConflictFiles, deletePageFile, emptyMirrorState, findMirrorSlugByPageId, isFileDirty, listConflictFiles, listLocalMirrors, localPageSha256, markMirrorStale, mirrorExists, pageFilePath, planMirrorPush, purgeMirror, resetMirrorForFullResync, quarantineDirtyFile, readMirrorState, releaseMirrorLock, resolveDefaultConfigDir, resolveMirrorDir, writeGeneratedIndexFile, writeGeneratedLogFile, writeMirrorState, writePageFile, } from "./knowledge-mirror.js";
 import { waitForCliRun } from "./run-wait.js";
+import { assertModeFlagsExclusive, parseJsonObject, readJsonObjectOption, readPositiveInt, readRecordString, resolveLiveDryRunMode, } from "./cli-values.js";
 import { runLocalCustomHttpColumn } from "./local-custom-http-column.js";
 import { captureCurrentTranscript, collectFeedbackEnvironment, TranscriptCaptureError, } from "./transcript.js";
 import { addSessionOutput, addSessionStatus, getSessionUsage, startSession, updateSessionStep, } from "./session.js";
@@ -125,12 +126,18 @@ async function handleAsyncAction(command, options, action) {
         writeCreditsReceipt(data);
     }
     catch (error) {
-        const failure = toFailure(command, error);
-        writeJson(failure);
-        writeMaxCreditsHint(error);
-        process.exitCode = error instanceof OxygenError ? exitCodeForOxygenError(error) : 1;
+        emitCliFailure(command, error);
     }
 }
+// Single-source the CLI failure-emit contract: write the machine-readable
+// failure envelope to stdout, surface any spend-gate hint on stderr, and set the
+// process exit code from the error. Command handlers that don't route through
+// handleAsyncAction catch straight into this so the shape can't drift.
+function emitCliFailure(command, error) {
+    writeJson(toFailure(command, error));
+    writeMaxCreditsHint(error);
+    process.exitCode = error instanceof OxygenError ? exitCodeForOxygenError(error) : 1;
+}
 // Paid envelopes (push 3 legibility) carry a `credits` block: quote on
 // dry_run, receipt on live, remaining balance on both. Mirror it as one
 // stderr line so spend stays visible in a terminal without polluting the
@@ -153,6 +160,53 @@ function writeCreditsReceipt(data) {
         process.stderr.write(`estimated ${block.estimated_credits.toLocaleString("en-US")} credits for a live run${remaining !== null ? `, ${remaining} available` : ""}\n`);
     }
 }
+// Arming a cron commits recurring spend, so `workflows enable` mirrors its
+// `automation` block as stderr lines: what the schedule burns per day, what
+// share of the monthly allowance that is, and when it runs out. Observed burn
+// (this workflow's own billed runs) is the honest number and is preferred; the
+// manifest floor is a MINIMUM and is labelled as one, because it excludes the
+// per-row billing that is ~93% of the meter in practice.
+function writeAutomationProjection(data) {
+    if (!data || typeof data !== "object" || Array.isArray(data))
+        return;
+    const automation = data.automation;
+    if (!automation || typeof automation !== "object" || Array.isArray(automation))
+        return;
+    const block = automation;
+    const estimate = block.estimate;
+    const observed = block.observed;
+    const allowance = block.allowance;
+    const runsPer30Days = typeof estimate?.scheduledRunsPer30Days === "number"
+        ? estimate.scheduledRunsPer30Days
+        : null;
+    if (runsPer30Days === null)
+        return; // On-demand: no schedule, no burn to project.
+    const projected = typeof observed?.projectedActionsPer30Days === "number"
+        ? observed.projectedActionsPer30Days
+        : typeof estimate?.scheduledActionsPer30DaysFloor === "number"
+            ? estimate.scheduledActionsPer30DaysFloor
+            : null;
+    if (projected === null)
+        return;
+    const fromHistory = typeof observed?.projectedActionsPer30Days === "number";
+    const perDay = Math.round(projected / 30);
+    const included = typeof allowance?.includedActions === "number" ? allowance.includedActions : null;
+    // A cheap schedule on a big plan rounds to "0% of the allowance", which reads
+    // as a bug rather than as reassurance. Floor the display at "<1%".
+    const sharePct = included !== null && included > 0 ? (projected / included) * 100 : null;
+    const share = sharePct === null
+        ? ""
+        : ` (${sharePct < 1 ? "<1" : Math.round(sharePct)}% of the ${included.toLocaleString("en-US")}/mo allowance)`;
+    const basis = fromHistory
+        ? `based on ${typeof observed?.runSample === "number" ? observed.runSample : 0} past billed runs`
+        : "MINIMUM — excludes per-row billing, real cost will be higher";
+    process.stderr.write(`schedule: ${runsPer30Days.toLocaleString("en-US")} runs/30d, ~${perDay.toLocaleString("en-US")} automation actions/day${share}\n`);
+    process.stderr.write(`  ${basis}\n`);
+    const exhaustion = observed?.projectedExhaustionAt;
+    if (typeof exhaustion === "string") {
+        process.stderr.write(`  allowance runs out ${exhaustion} at this pace — the schedule pauses until the window resets\n`);
+    }
+}
 // Paid live runs are refused server-side with typed spend-gate errors
 // (max_credits_required, approval_required, spend_cap_required,
 // spend_cap_too_low). Surface each as a one-line stderr hint with the concrete
@@ -196,24 +250,6 @@ function readDetailsNumber(details, key) {
     const value = details[key];
     return typeof value === "number" && Number.isFinite(value) ? value : null;
 }
-function parseJsonObject(value) {
-    let parsed;
-    try {
-        parsed = JSON.parse(value);
-    }
-    catch (error) {
-        throw new OxygenError("invalid_json", "Input must be valid JSON.", {
-            details: { reason: error instanceof Error ? error.message : "unknown" },
-            exitCode: 1,
-        });
-    }
-    if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
-        throw new OxygenError("invalid_json", "Input JSON must be an object.", {
-            exitCode: 1,
-        });
-    }
-    return parsed;
-}
 function parseJsonArray(value) {
     let parsed;
     try {
@@ -452,9 +488,7 @@ function parseSuppressListOption(value) {
     ];
 }
 function resolveComposioRunMode(options) {
-    if (options.live === true && options.dryRun === true) {
-        throw new OxygenError("conflicting_flags", "Pass either --live or --dry-run, not both.", { exitCode: 1 });
-    }
+    assertModeFlagsExclusive(options);
     if (options.live === true)
         return "live";
     if (options.dryRun === true)
@@ -472,7 +506,7 @@ const DEFAULT_CRM_SETUP_OBJECTS = ["companies", "people"];
 function buildCrmSetupBody(options) {
     return {
         objects: readCrmSetupObjects(options.objects),
-        mode: resolveCrmSetupMode(options),
+        mode: resolveLiveDryRunMode(options),
         ...(readOption(options.project) ? { project: readOption(options.project) } : {}),
     };
 }
@@ -480,12 +514,6 @@ function readCrmSetupObjects(value) {
     const objects = readCsvOption(value);
     return objects.length > 0 ? [...new Set(objects)] : DEFAULT_CRM_SETUP_OBJECTS;
 }
-function resolveCrmSetupMode(options) {
-    if (options.live === true && options.dryRun === true) {
-        throw new OxygenError("conflicting_flags", "Pass either --live or --dry-run, not both.", { exitCode: 1 });
-    }
-    return options.live === true ? "live" : "dry_run";
-}
 function buildCrmObjectCreateBody(options) {
     const slug = readOption(options.slug);
     if (!slug) {
@@ -502,7 +530,7 @@ function buildCrmObjectCreateBody(options) {
         display_name: displayName,
         columns,
         identities,
-        mode: resolveCrmSetupMode(options),
+        mode: resolveLiveDryRunMode(options),
         ...(readOption(options.singularName) ? { singular_name: readOption(options.singularName) } : {}),
         ...(readOption(options.pluralName) ? { plural_name: readOption(options.pluralName) } : {}),
         ...(readOption(options.labelColumn) ? { label_column: readOption(options.labelColumn) } : {}),
@@ -519,7 +547,7 @@ function buildCrmObjectAddAttrBody(options) {
     }
     return {
         column,
-        mode: resolveCrmSetupMode(options),
+        mode: resolveLiveDryRunMode(options),
         ...(options.asIdentityJson ? { identity: parseJsonObject(options.asIdentityJson) } : {}),
     };
 }
@@ -528,14 +556,14 @@ function buildCrmAssertBody(object, options) {
         object,
         identity: parseCrmIdentityOption(options.identity),
         values: options.valuesJson ? parseJsonObject(options.valuesJson) : {},
-        mode: resolveCrmSetupMode(options),
+        mode: resolveLiveDryRunMode(options),
     };
 }
 function buildCrmSyncImportBody(provider, options) {
     return {
         provider,
         object: options.object,
-        mode: resolveCrmSetupMode(options),
+        mode: resolveLiveDryRunMode(options),
         ...(options.into ? { into: options.into } : {}),
         ...(readPositiveInt(options.limit) !== undefined ? { limit: readPositiveInt(options.limit) } : {}),
         ...(readPositiveNumber(options.maxCredits) !== undefined ? { max_credits: readPositiveNumber(options.maxCredits) } : {}),
@@ -546,7 +574,7 @@ function buildCrmSyncConfigureBody(options) {
     return {
         provider: options.provider,
         object: options.object,
-        mode: resolveCrmSetupMode(options),
+        mode: resolveLiveDryRunMode(options),
         ...(readOption(options.direction) ? { direction: readOption(options.direction) } : {}),
         ...(readOption(options.cron) ? { cron: readOption(options.cron) } : {}),
         ...(readOption(options.timezone) ? { timezone: readOption(options.timezone) } : {}),
@@ -559,7 +587,7 @@ function buildCrmSyncRunBody(options) {
     return {
         provider: options.provider,
         object: options.object,
-        mode: resolveCrmSetupMode(options),
+        mode: resolveLiveDryRunMode(options),
         ...(readPositiveInt(options.maxRows) !== undefined ? { max_rows_per_cycle: readPositiveInt(options.maxRows) } : {}),
         ...(readPositiveNumber(options.maxCredits) !== undefined ? { max_credits: readPositiveNumber(options.maxCredits) } : {}),
         ...(options.approved ? { approved: true } : {}),
@@ -620,7 +648,7 @@ function buildCrmSearchBody(query, options) {
     };
 }
 function buildCrmMergeBody(object, survivorRowId, loserRowId, options) {
-    const mode = resolveCrmSetupMode(options);
+    const mode = resolveLiveDryRunMode(options);
     if (mode === "live" && options.confirm !== true) {
         throw new OxygenError("confirm_required", "crm merge --live requires --confirm after inspecting the dry-run field diff.", { exitCode: 1 });
     }
@@ -635,7 +663,7 @@ function buildCrmMergeBody(object, survivorRowId, loserRowId, options) {
 }
 function buildNotetakerSetupBody(options) {
     return {
-        mode: resolveNotetakerMode(options),
+        mode: resolveLiveDryRunMode(options),
         enabled: options.disabled === true ? false : true,
         capture_mode: "invited_bot",
         auto_record_scope: "manual",
@@ -647,7 +675,7 @@ function buildNotetakerSetupBody(options) {
 }
 function buildNotetakerScheduleBody(meetingUrl, options) {
     return {
-        mode: resolveNotetakerMode(options),
+        mode: resolveLiveDryRunMode(options),
         meeting_url: meetingUrl,
         approved: options.approved === true,
         ...(readOption(options.title) ? { title: readOption(options.title) } : {}),
@@ -657,12 +685,6 @@ function buildNotetakerScheduleBody(meetingUrl, options) {
         ...(readOption(options.crmLinksJson) ? { crm_links: parseJsonArray(readOption(options.crmLinksJson) ?? "") } : {}),
     };
 }
-function resolveNotetakerMode(options) {
-    if (options.live === true && options.dryRun === true) {
-        throw new OxygenError("conflicting_flags", "Pass either --live or --dry-run, not both.", { exitCode: 1 });
-    }
-    return options.live === true ? "live" : "dry_run";
-}
 function buildPublishingPostsListPath(options) {
     const query = new URLSearchParams();
     const status = readOption(options.status);
@@ -803,16 +825,93 @@ function readPublishingPostText(options, required) {
         return null;
     throw new OxygenError("invalid_request", "Pass --text or --text-file.", { exitCode: 1 });
 }
-// Read --text-file, sanitizing the OS error so a missing/unreadable file reports
-// only the basename the user passed — never the resolved absolute filesystem path
-// Node's ENOENT would otherwise leak into the CLI error output.
-function readPublishingTextFile(textFile) {
+// Read a file-backed flag, sanitizing the OS error so a missing/unreadable file
+// reports only the basename the user passed — never the resolved absolute filesystem
+// path Node's ENOENT would otherwise leak into the CLI error output. `flag` names the
+// option in the error so --source-file doesn't report itself as --text-file.
+function readPublishingTextFile(textFile, flag = "--text-file") {
     try {
         return readFileSync(resolve(textFile), "utf8").trimEnd();
     }
     catch {
-        throw new OxygenError("text_file_unreadable", `Couldn't read --text-file '${basename(textFile)}'. Check the path exists and is readable.`, { exitCode: 1 });
+        throw new OxygenError("text_file_unreadable", `Couldn't read ${flag} '${basename(textFile)}'. Check the path exists and is readable.`, { exitCode: 1 });
+    }
+}
+// --source-text / --source-file for the AI draft templates that rewrite a source
+// (summarize, repurpose, podcast_clip, hashtags). Mirrors readPublishingPostText.
+function readPublishingSourceText(options) {
+    const inlineText = readOption(options.sourceText);
+    const sourceFile = readOption(options.sourceFile);
+    if (inlineText && sourceFile) {
+        throw new OxygenError("conflicting_flags", "Pass either --source-text or --source-file, not both.", {
+            exitCode: 1,
+        });
     }
+    if (sourceFile)
+        return readPublishingTextFile(sourceFile, "--source-file");
+    return inlineText?.trim() ? inlineText : null;
+}
+function buildPublishingPostsDraftBody(options) {
+    const body = {
+        template: options.template,
+        max_credits: readPositiveNumber(options.maxCredits),
+    };
+    const topic = readOption(options.topic);
+    const channels = readOption(options.channels);
+    const variants = readPositiveInt(options.variants);
+    const sourceText = readPublishingSourceText(options);
+    const sourceUrl = readOption(options.sourceUrl);
+    if (topic)
+        body.topic = topic;
+    if (channels) {
+        body.channels = channels.split(",").map((channel) => channel.trim()).filter(Boolean);
+    }
+    if (variants !== undefined)
+        body.variants = variants;
+    // Commander's --no-ground sets ground=false; the default (true) is the API's too,
+    // so only the explicit opt-out is worth sending.
+    if (options.ground === false)
+        body.ground = false;
+    if (sourceText)
+        body.source_text = sourceText;
+    if (sourceUrl)
+        body.source_url = sourceUrl;
+    return body;
+}
+function buildPublishingDraftsListPath(options) {
+    const query = new URLSearchParams();
+    const kind = readOption(options.kind);
+    const status = readOption(options.status);
+    const limit = readOption(options.limit);
+    if (kind)
+        query.set("kind", kind);
+    if (status)
+        query.set("status", status);
+    if (limit)
+        query.set("limit", limit);
+    const suffix = query.toString();
+    return suffix ? `/api/cli/publishing/drafts?${suffix}` : "/api/cli/publishing/drafts";
+}
+function buildPublishingDraftsAcceptBody(options) {
+    const body = {
+        variant_index: readNonNegativeInt(options.variant) ?? 0,
+    };
+    const publishAt = readOption(options.publishAt);
+    const channel = readOption(options.channel);
+    const sender = readOption(options.sender);
+    const providerConnection = readOption(options.providerConnection);
+    const timezone = readOption(options.timezone);
+    if (publishAt)
+        body.publish_at = publishAt;
+    if (channel)
+        body.channel = channel;
+    if (sender)
+        body.sender_account_id = sender;
+    if (providerConnection)
+        body.provider_connection_id = providerConnection;
+    if (timezone)
+        body.timezone = timezone;
+    return body;
 }
 function buildCrmRelationshipUpsertBody(object, rowId, options) {
     return {
@@ -824,12 +923,12 @@ function buildCrmRelationshipUpsertBody(object, rowId, options) {
             row_id: options.targetRowId,
         },
         ...(readOption(options.role) ? { role: readOption(options.role) } : {}),
-        mode: resolveCrmSetupMode(options),
+        mode: resolveLiveDryRunMode(options),
     };
 }
 function buildCrmActivityBody(object, rowId, options) {
     const body = {
-        mode: resolveCrmSetupMode(options),
+        mode: resolveLiveDryRunMode(options),
         activity_type: options.type,
         links: [{ object, row_id: rowId, role: options.role ?? "actor" }],
     };
@@ -853,7 +952,7 @@ function buildCrmActivityBody(object, rowId, options) {
 }
 function buildCrmActivityNoteBody(object, rowId, text, options) {
     return {
-        mode: resolveCrmSetupMode(options),
+        mode: resolveLiveDryRunMode(options),
         activity_type: "note",
         summary: text,
         links: [{ object, row_id: rowId, role: "actor" }],
@@ -936,6 +1035,17 @@ function buildCrmLeadsTodayPath(options) {
     const query = params.toString();
     return query ? `/api/cli/crm/signals/leads-today?${query}` : "/api/cli/crm/signals/leads-today";
 }
+function buildSignalsListPath(options) {
+    const params = new URLSearchParams();
+    if (options.types)
+        params.set("types", options.types);
+    if (options.since)
+        params.set("since", options.since);
+    if (options.limit)
+        params.set("limit", options.limit);
+    const query = params.toString();
+    return query ? `/api/cli/signals?${query}` : "/api/cli/signals";
+}
 function buildCrmAutomationSetBody(templateId, options) {
     if (options.armed === true && options.disarmed === true) {
         throw new OxygenError("conflicting_flags", "Pass either --armed or --disarmed, not both.", { exitCode: 1 });
@@ -946,7 +1056,7 @@ function buildCrmAutomationSetBody(templateId, options) {
     const body = {
         template_id: templateId,
         armed: options.armed === true,
-        mode: resolveCrmSetupMode(options),
+        mode: resolveLiveDryRunMode(options),
     };
     if (options.configJson)
         body.config = parseJsonObject(options.configJson);
@@ -966,7 +1076,7 @@ function buildCrmListCreateBody(slug, options) {
         slug,
         base_object: options.base,
         kind: options.kind,
-        mode: resolveCrmSetupMode(options),
+        mode: resolveLiveDryRunMode(options),
     };
     if (options.displayName)
         body.display_name = options.displayName;
@@ -980,7 +1090,7 @@ function buildCrmListEntryBody(object, rowId, options) {
     return {
         object,
         row_id: rowId,
-        mode: resolveCrmSetupMode(options),
+        mode: resolveLiveDryRunMode(options),
     };
 }
 function buildCrmListMembersPath(list, options) {
@@ -1126,6 +1236,7 @@ export function createProgram() {
         .option("--token <token>", "CLI API token created in the Oxygen dashboard.")
         .option("--api-url <url>", "Oxygen API URL. Defaults to OXYGEN_API_URL or https://oxygen-agent.com.")
         .option("--profile <name>", "Store credentials under a named CLI profile and make it active.")
+        .option("--force", "Repoint an existing profile at a different API host. Refused without this flag.")
         .option("--no-browser", "Skip the browser handoff and paste the token manually.")
         .option("--json", "Print a JSON envelope.")
         .action(async (options) => {
@@ -1139,6 +1250,7 @@ export function createProgram() {
         .requiredOption("--token <token>", "CLI API token.")
         .option("--api-url <url>", "Oxygen API URL. Defaults to OXYGEN_API_URL or https://oxygen-agent.com.")
         .option("--profile <name>", "Store credentials under a named CLI profile and make it active.")
+        .option("--force", "Repoint an existing profile at a different API host. Refused without this flag.")
         .option("--json", "Print a JSON envelope.")
         .action(async (options) => {
         await handleAuthUseTokenAction(options);
@@ -1834,6 +1946,98 @@ export function createProgram() {
         await handleAsyncAction("publishing posts retry", options, () => requestOxygen(`/api/cli/publishing/posts/${encodeURIComponent(postId)}/retry`, {
             method: "POST",
         }));
+    }))
+        .addCommand(new Command("delete")
+        .description("Delete a never-attempted post from the queue (draft, scheduled, or queued with no publish attempts). A post that was ever attempted — published, publishing, failed, or re-armed after a provider error — is refused: cancel it instead, so its attempt history is kept. To remove a LinkedIn post that already went live, use `oxygen posts delete`.")
+        .argument("<post_id>", "Scheduled post id.")
+        .option("--json", "Print a JSON envelope.")
+        .action(async (postId, options) => {
+        await handleAsyncAction("publishing posts delete", options, () => requestOxygen(`/api/cli/publishing/posts/${encodeURIComponent(postId)}`, {
+            method: "DELETE",
+        }));
+    }))
+        .addCommand(new Command("draft")
+        .description("Draft posts with AI, grounded in the workspace Knowledge Graph. PAID (one AI call) — requires --max-credits. Writes drafts only: nothing is scheduled or published until you accept a draft and approve the post.")
+        .requiredOption("--template <key>", "Draft template: summarize, repurpose, changelog, feature_launch, case_study, personal_story, startup_advice, company_milestone, hiring, fundraise, hook_generator, popular_questions, tech_stack, podcast_clip, or hashtags.")
+        .requiredOption("--max-credits <n>", "Credit cap for the AI call (required — this is a paid action).")
+        .option("--topic <topic>", "What the post is about. Required by most templates.")
+        .option("--channels <list>", "Comma-separated target channels: linkedin, x, instagram, tiktok, facebook, youtube.")
+        .option("--variants <n>", "How many angles to draft (1-5). Defaults to 3.")
+        .option("--no-ground", "Skip Knowledge-Graph page retrieval. The canonical brand voice still applies.")
+        .option("--source-text <text>", "Source text for summarize, repurpose, podcast_clip, and hashtags.")
+        .option("--source-file <path>", "Read the source text from a local file.")
+        .option("--source-url <url>", "Source URL to reference.")
+        .option("--json", "Print a JSON envelope.")
+        .action(async (options) => {
+        await handleAsyncAction("publishing posts draft", options, () => requestOxygen("/api/cli/publishing/posts/draft", {
+            method: "POST",
+            body: buildPublishingPostsDraftBody(options),
+        }));
+    }))
+        .addCommand(new Command("review")
+        .description("Pre-publish review of a post: deterministic channel lint (free, and blocking at approve) plus an AI voice/claims check against the Knowledge Graph. PAID (one AI call) — requires --max-credits. AI findings never block approval.")
+        .argument("<post_id>", "Scheduled post id.")
+        .requiredOption("--max-credits <n>", "Credit cap for the AI review call (required — this is a paid action).")
+        .option("--json", "Print a JSON envelope.")
+        .action(async (postId, options) => {
+        await handleAsyncAction("publishing posts review", options, () => requestOxygen(`/api/cli/publishing/posts/${encodeURIComponent(postId)}/review`, {
+            method: "POST",
+            body: { max_credits: readPositiveNumber(options.maxCredits) },
+        }));
+    })))
+        .addCommand(new Command("drafts")
+        .description("Review the AI post-draft queue before anything reaches the publish queue.")
+        .addCommand(new Command("list")
+        .description("List post drafts. Defaults to the open queue (queued + edited).")
+        .option("--kind <kind>", "Filter by ai or idea.")
+        .option("--status <list>", "Comma-separated statuses: queued, edited, accepted, rejected.")
+        .option("--limit <n>", "Maximum drafts to return.")
+        .option("--json", "Print a JSON envelope.")
+        .action(async (options) => {
+        await handleAsyncAction("publishing drafts list", options, () => requestOxygen(buildPublishingDraftsListPath(options)));
+    }))
+        .addCommand(new Command("accept")
+        .description("Accept a draft variant into the publish queue. The post is created needs-approval — approve it separately before it can publish.")
+        .argument("<draft_id>", "Post draft id.")
+        .option("--variant <i>", "Which variant to accept (0-based). Defaults to 0.")
+        .option("--publish-at <iso>", "ISO date-time to schedule the post for. Defaults to now (still needs approval).")
+        .option("--channel <channel>", "Channel override. Defaults to the draft's first target channel.")
+        .option("--sender <sender_account_id>", "LinkedIn sender account id.")
+        .option("--provider-connection <connection_id>", "Oxygen integration connection id for Composio-backed providers.")
+        .option("--timezone <tz>", "Display timezone for the scheduled date.")
+        .option("--json", "Print a JSON envelope.")
+        .action(async (draftId, options) => {
+        await handleAsyncAction("publishing drafts accept", options, () => requestOxygen(`/api/cli/publishing/drafts/${encodeURIComponent(draftId)}/accept`, {
+            method: "POST",
+            body: buildPublishingDraftsAcceptBody(options),
+        }));
+    }))
+        .addCommand(new Command("reject")
+        .description("Reject a draft. The reason is filed to the Knowledge Graph so the next drafts learn from it.")
+        .argument("<draft_id>", "Post draft id.")
+        .option("--reason <reason>", "Why this draft was rejected.")
+        .option("--json", "Print a JSON envelope.")
+        .action(async (draftId, options) => {
+        await handleAsyncAction("publishing drafts reject", options, () => requestOxygen(`/api/cli/publishing/drafts/${encodeURIComponent(draftId)}/reject`, {
+            method: "POST",
+            body: readOption(options.reason) ? { reason: readOption(options.reason) } : {},
+        }));
+    }))
+        .addCommand(new Command("edit")
+        .description("Rewrite one variant's text. The first edit snapshots the AI's original copy, so accepting it teaches the Knowledge Graph what you changed.")
+        .argument("<draft_id>", "Post draft id.")
+        .option("--variant <i>", "Which variant to edit (0-based). Defaults to 0.")
+        .option("--text <text>", "The replacement post text.")
+        .option("--text-file <path>", "Read the replacement text from a local file.")
+        .option("--json", "Print a JSON envelope.")
+        .action(async (draftId, options) => {
+        await handleAsyncAction("publishing drafts edit", options, () => requestOxygen(`/api/cli/publishing/drafts/${encodeURIComponent(draftId)}`, {
+            method: "PATCH",
+            body: {
+                variant_index: readNonNegativeInt(options.variant) ?? 0,
+                text: readPublishingPostText(options, true),
+            },
+        }));
     })))
         .addCommand(new Command("media")
         .description("Manage Publishing media uploads.")
@@ -2326,6 +2530,52 @@ export function createProgram() {
         .action(async (object, rowId, options) => {
         await handleAsyncAction("crm sync links", options, () => requestOxygen(buildCrmSyncLinksPath(object, rowId)));
     })));
+    program
+        .command("signals")
+        .description("The Signals primitive: the typed GTM intent-event stream — record signals, list the raw event feed, inspect the type registry, and read the ranked leads-to-contact-today queue.")
+        .addCommand(new Command("list")
+        .description("List the raw GTM signal-event feed newest-first (website_visit / profile_view / post_reaction / new_follower), each resolved onto the person it attached to. Read-only.")
+        .option("--types <types>", "Comma-separated signal types to include. Defaults to all four.")
+        .option("--since <days>", "Look-back window in days. Defaults to 7, max 30.")
+        .option("--limit <limit>", "Maximum events to return. Defaults to 25, max 100.")
+        .option("--json", "Print a JSON envelope.")
+        .action(async (options) => {
+        await handleAsyncAction("signals list", options, () => requestOxygen(buildSignalsListPath(options)));
+    }))
+        .addCommand(new Command("registry")
+        .description("Show the signal-type registry: each registered type with its intent weight and capture status (all four registered types are live end-to-end — website_visit via the RB2B webhook, the engagement family via the engagement→signal bridge). Read-only.")
+        .option("--json", "Print a JSON envelope.")
+        .action(async (options) => {
+        await handleAsyncAction("signals registry", options, () => requestOxygen("/api/cli/signals/registry"));
+    }))
+        .addCommand(new Command("record")
+        .description("Record one inbound GTM signal (website_visit, profile_view, post_engager, new_follower). Internal write — free, no approval. Idempotent on --external-event-id.")
+        .requiredOption("--event <event>", "Signal event: website_visit | profile_view | post_engager | new_follower.")
+        .option("--external-event-id <id>", "Stable provider event id (redelivery/idempotency guard). Derived from --session-id when omitted.")
+        .option("--email <email>", "Person email (identity).")
+        .option("--linkedin-url <url>", "Person LinkedIn URL (identity when no email).")
+        .option("--company-domain <domain>", "Company domain for the company assert.")
+        .option("--company-name <name>", "Company name.")
+        .option("--first-name <name>", "Person first name.")
+        .option("--last-name <name>", "Person last name.")
+        .option("--page-url <url>", "Page the signal fired on (website visit).")
+        .option("--session-id <id>", "Provider session id (provenance + idempotency).")
+        .option("--payload-json <json>", "JSON object merged into the signal payload (wins over the flags above).")
+        .option("--json", "Print a JSON envelope.")
+        .action(async (options) => {
+        await handleAsyncAction("signals record", options, () => requestOxygen("/api/cli/signals", {
+            method: "POST",
+            body: buildCrmSignalRecordBody(options),
+        }));
+    }))
+        .addCommand(new Command("leads-today")
+        .description("List people to contact today, ranked by their most recent GTM intent signal. Do-not-contact filtering is best-effort (email-only leads surface unchecked).")
+        .option("--limit <limit>", "Maximum leads to return. Defaults to 25, max 100.")
+        .option("--within-days <days>", "Signal look-back window in days. Defaults to 7, max 30.")
+        .option("--json", "Print a JSON envelope.")
+        .action(async (options) => {
+        await handleAsyncAction("signals leads-today", options, () => requestOxygen(buildCrmLeadsTodayPath(options)));
+    }));
     const tablesCommand = program
         .command("tables")
         .description("Tenant workspace table commands.")
@@ -2518,7 +2768,7 @@ export function createProgram() {
         await handleAsyncAction("tables query", options, () => {
             const limit = readPositiveInt(options.limit);
             const filters = readFilterJsonOption(options.filterJson);
-            const filterTree = readFilterTreeJsonOption(options.filterTreeJson);
+            const filterTree = readJsonObjectOption(options.filterTreeJson);
             const sorts = readSortJsonOption(options.sortJson);
             if (filters && (filterTree || sorts)) {
                 throw new OxygenError("invalid_filter", "Pass either --filter-json (legacy) or --filter-tree-json/--sort-json, not both.", { exitCode: 1 });
@@ -2953,7 +3203,7 @@ export function createProgram() {
         .option("--body <text>", "Page body (Markdown, supports [[wikilinks]]).")
         .option("--data-json <json>", "Flexible JSON object for structured page data.")
         .option("--expected-revision <n>", "Fail the write if the current page revision differs (optimistic concurrency guard).")
-        .option("--approved", "Mark the write as human-approved.")
+        .option("--approved", "Accepted for compatibility but never honored for canonical live copy: a gated edit always files a proposal - approve it with `oxygen knowledge proposals approve <id>`.")
         .option("--json", "Print a JSON envelope.")
         .action(async (options) => {
         await handleAsyncAction("knowledge page upsert", options, async () => {
@@ -3007,7 +3257,7 @@ export function createProgram() {
         .argument("<slug_or_id>", "Page slug or UUID.")
         .option("--canonical", "Pin as the canonical default for its type (default).")
         .option("--no-canonical", "Unpin instead of pin (clears the canonical default for this type).")
-        .option("--approved", "Mark the pin as human-approved (required for sensitive types: voice, brand, positioning).")
+        .option("--approved", "Accepted for compatibility but never honored: pinning a sensitive type (voice, brand, positioning, playbooks) always files a proposal - approve it with `oxygen knowledge proposals approve <id>`.")
         .option("--json", "Print a JSON envelope.")
         .action(async (slugOrId, options) => {
         await handleAsyncAction("knowledge page pin", options, async () => {
@@ -3083,8 +3333,10 @@ export function createProgram() {
         await handleAsyncAction("knowledge index", options, () => requestOxygen("/api/cli/knowledge/index"));
     }))
         .addCommand(new Command("graph")
-        .description("Knowledge graph of pages and their [[wikilink]] edges.")
+        .description("Knowledge graph of pages and their [[wikilink]] edges. Pass --center to render one page's local neighborhood instead of the whole graph.")
         .option("--max-nodes <n>", "Maximum nodes to include in the graph.")
+        .option("--center <slug_or_id>", "Center the graph on one page and show only its neighborhood (local mode).")
+        .option("--depth <n>", "Local-graph hop depth (1-3, default 1). Only applies with --center.")
         .option("--json", "Print a JSON envelope.")
         .action(async (options) => {
         await handleAsyncAction("knowledge graph", options, () => requestOxygen("/api/cli/knowledge/graph", {
@@ -3093,7 +3345,7 @@ export function createProgram() {
         }));
     }))
         .addCommand(new Command("lint")
-        .description("Structural wiki health report: orphans, unresolved links, missing canonicals, stale/oversized pages, aged proposals.")
+        .description("Structural wiki health report: orphans, dead-ends, unresolved links, missing canonicals, untagged pages, duplicate titles, oversized hubs, unfilled seed stubs, decisions missing a reversal condition, stale/oversized pages, and aged proposals.")
         .option("--json", "Print a JSON envelope.")
         .action(async (options) => {
         await handleAsyncAction("knowledge lint", options, () => requestOxygen("/api/cli/knowledge/lint"));
@@ -3210,7 +3462,7 @@ export function createProgram() {
         }));
     })))
         .addCommand(new Command("seed")
-        .description("Seed the knowledge wiki with starter pages.")
+        .description("Seed or upgrade the knowledge wiki scaffold: on first run creates the starter page set — a start-here guide, a conventions schema page, and stub hubs (icp, positioning, offers, competitors, playbooks, campaign-learnings, decisions), all [[wikilinked]]. Idempotent; never overwrites your edits.")
         .option("--json", "Print a JSON envelope.")
         .action(async (options) => {
         await handleAsyncAction("knowledge seed", options, () => requestOxygen("/api/cli/knowledge/seed", {
@@ -3240,14 +3492,45 @@ export function createProgram() {
             },
         }));
     }))
+        .addCommand(new Command("agent")
+        .description("The scheduled knowledge synthesis agent: unattended distillation of auto-filed sources into learnings pages (default off, spend-capped). Canonical changes still go through the proposal queue.")
+        .addCommand(new Command("get")
+        .description("Show the synthesis-agent config (enabled, cadence, per-day credit cap).")
+        .option("--json", "Print a JSON envelope.")
+        .action(async (options) => {
+        await handleAsyncAction("knowledge agent get", options, () => requestOxygen("/api/cli/knowledge/agent"));
+    }))
+        .addCommand(new Command("set")
+        .description("Configure the synthesis agent. Enabling lets the background worker distill new sources on the cadence; it only writes working learnings pages.")
+        .option("--enabled", "Enable unattended synthesis.")
+        .option("--disabled", "Disable unattended synthesis.")
+        .option("--cadence-hours <n>", "Hours between synthesis cycles (1-168, default 24).")
+        .option("--max-credits-per-day <n>", "Managed-credit cap per UTC day (0-500, default 5).")
+        .option("--json", "Print a JSON envelope.")
+        .action(async (options) => {
+        await handleAsyncAction("knowledge agent set", options, () => {
+            const body = {};
+            if (options.enabled)
+                body.enabled = true;
+            if (options.disabled)
+                body.enabled = false;
+            // Presence decides inclusion so an absent flag keeps the stored value.
+            if (options.cadenceHours !== undefined)
+                body.cadence_hours = Number(options.cadenceHours);
+            if (options.maxCreditsPerDay !== undefined)
+                body.max_credits_per_day = Number(options.maxCreditsPerDay);
+            return requestOxygen("/api/cli/knowledge/agent", { method: "POST", body });
+        });
+    })))
         .addCommand(new Command("sync")
-        .description("Clone or refresh the local knowledge mirror: server-rendered page markdown under the CLI config dir.")
+        .description("Clone or refresh the local knowledge mirror: server-rendered page markdown under the CLI config dir. Pass --all to mirror every workspace the credential can access.")
+        .option("--all", "Sync every organization the credential can access, each into its own mirror; one org's failure never aborts the rest.")
         .option("--full", "Purge the mirror (including its cursor) and re-clone every page.")
         .option("--if-stale", "Skip when the mirror completed a sync within the TTL (or one is already running).")
         .option("--ttl <minutes>", "Freshness window for --if-stale, in minutes. Defaults to 15.")
         .option("--json", "Print a JSON envelope.")
         .action(async (options) => {
-        await handleAsyncAction("knowledge sync", options, () => runKnowledgeMirrorSync(options));
+        await handleAsyncAction("knowledge sync", options, () => options.all ? runKnowledgeMirrorSyncAll(options) : runKnowledgeMirrorSync(options));
     }))
         .addCommand(new Command("push")
         .description("Push locally edited or newly created mirror pages back to the workspace wiki. Edits to canonical voice/brand/positioning pages become approval proposals instead of writing live.")
@@ -3257,7 +3540,8 @@ export function createProgram() {
         await handleAsyncAction("knowledge push", options, () => runKnowledgeMirrorPush(options));
     }))
         .addCommand(new Command("status")
-        .description("Report the local knowledge mirror: path, page count, last sync, quarantined conflicts.")
+        .description("Report the local knowledge mirror: path, page count, last sync, quarantined conflicts. Pass --all to report every locally mirrored workspace for the active API host.")
+        .option("--all", "Report every locally mirrored workspace for the active API host, with a per-mirror freshness flag.")
         .option("--print-path", "Print only the mirror directory path.")
         .option("--clear-conflicts", "Delete quarantined conflict copies from the mirror sidecar.")
         .option("--json", "Print a JSON envelope.")
@@ -3266,7 +3550,7 @@ export function createProgram() {
             await handleKnowledgeMirrorPrintPathAction();
             return;
         }
-        await handleAsyncAction("knowledge status", options, () => runKnowledgeMirrorStatus(options));
+        await handleAsyncAction("knowledge status", options, () => options.all ? runKnowledgeMirrorStatusAll() : runKnowledgeMirrorStatus(options));
     }))
         .addCommand(new Command("purge")
         .description("Delete the whole local knowledge mirror for the active API host and organization.")
@@ -3511,7 +3795,8 @@ export function createProgram() {
         });
     }));
     program.addCommand(buildPromptTemplatesCommand("prompts", "Reusable prompt templates layered into AI columns at run time."));
-    program.addCommand(buildPromptTemplatesCommand("templates", "Deprecated alias for 'oxygen prompts'. Will be removed in a future release."));
+    // The deprecated `templates` alias tree was removed at its registry sunset
+    // (v1.290.0) — `oxygen prompts` has been canonical since v1.80.0.
     program
         .command("reviews")
         .description("Human-in-the-loop reviews for AI-generated outreach messages.")
@@ -3869,6 +4154,20 @@ export function createProgram() {
                 },
             });
         });
+    }))
+        .addCommand(new Command("deps")
+        .description("Show the column dependency graph: which columns feed which (formulas, input mappings, run conditions, waterfall targets), transitive up/downstream, and cycles. Read-only.")
+        .argument("<table>", "Table id or slug.")
+        .option("--column <key>", "Focus on one column: its upstream inputs, downstream dependents, and edges.")
+        .option("--json", "Print a JSON envelope.")
+        .action(async (table, options) => {
+        await handleAsyncAction("columns deps", options, () => {
+            const params = new URLSearchParams({ table });
+            const column = readOption(options.column);
+            if (column)
+                params.set("column", column);
+            return requestOxygen(`/api/cli/tables/columns/deps?${params.toString()}`, { method: "GET" });
+        });
     }));
     program
         .command("action-column")
@@ -3906,6 +4205,38 @@ export function createProgram() {
             });
         });
     }));
+    program
+        .command("formulas")
+        .description("Formula language for formula columns and per-column run conditions (only-run-if).")
+        .addCommand(new Command("functions")
+        .description("List every formula function (name, signature, examples) and the operator grammar. The same language powers formula columns and --run-condition gates.")
+        .option("--category <category>", "Filter by category: logic, string, number, date, url_email, array, json, null_handling, cross_row.")
+        .option("--json", "Print a JSON envelope.")
+        .action(async (options) => {
+        await handleAsyncAction("formulas functions", options, () => {
+            const category = readOption(options.category);
+            const query = category ? `?category=${encodeURIComponent(category)}` : "";
+            return requestOxygen(`/api/cli/tables/formulas/functions${query}`, { method: "GET" });
+        });
+    }))
+        .addCommand(new Command("validate")
+        .description("Validate a formula against a table and preview its output on sample rows — free, no writes. Draft → validate → attach with `oxygen columns add --kind formula`.")
+        .argument("<table>", "Table id or slug.")
+        .requiredOption("--expression <expr>", "The formula expression to validate, e.g. \"if(score > 80, 'hot', 'warm')\".")
+        .option("--rows <n>", "How many sample rows to evaluate (0-25, default 5).")
+        .option("--row-id <id...>", "Evaluate specific row ids instead of the first rows.")
+        .option("--json", "Print a JSON envelope.")
+        .action(async (table, options) => {
+        await handleAsyncAction("formulas validate", options, () => requestOxygen("/api/cli/tables/formulas/validate", {
+            method: "POST",
+            body: {
+                table,
+                expression: options.expression,
+                ...(readOption(options.rows) ? { sample_limit: Number(readOption(options.rows)) } : {}),
+                ...(options.rowId && options.rowId.length > 0 ? { row_ids: options.rowId } : {}),
+            },
+        }));
+    }));
     program
         .command("table-runs")
         .description("Durable background table action run commands.")
@@ -4665,6 +4996,24 @@ export function createProgram() {
                 ...(readOption(options.note) ? { note: readOption(options.note) } : {}),
             },
         }));
+    }))
+        .addCommand(new Command("cancel")
+        .description("Schedule the plan subscription to cancel at period end. During a trial the card is never charged; undo any time before then with billing resume.")
+        .option("--json", "Print a JSON envelope.")
+        .action(async (options) => {
+        await handleAsyncAction("billing cancel", options, () => requestOxygen("/api/cli/billing/cancel", {
+            method: "POST",
+            body: { action: "cancel" },
+        }));
+    }))
+        .addCommand(new Command("resume")
+        .description("Remove a scheduled cancellation so the subscription renews (or the trial converts) normally.")
+        .option("--json", "Print a JSON envelope.")
+        .action(async (options) => {
+        await handleAsyncAction("billing resume", options, () => requestOxygen("/api/cli/billing/cancel", {
+            method: "POST",
+            body: { action: "resume" },
+        }));
     }));
     program
         .command("budget")
@@ -5414,6 +5763,7 @@ export function createProgram() {
         .option("--force", "Re-run rows with an existing target enrichment value.")
         .option("--max-concurrency <n>", "Maximum concurrent row items for this enrichment run. Defaults to 20.")
         .option("--json", "Print a JSON envelope.")
+        .option("--approved", "Approve THIS run after inspecting `enrich-column preview` (free). Paid enrichment runs fail with approval_required (exit 7) without it.")
         .action(async (table, options) => {
         const maxConcurrency = readPositiveInt(options.maxConcurrency);
         await handleAsyncAction("enrich-column run", options, () => requestOxygen("/api/cli/enrich-column/run", {
@@ -5421,6 +5771,7 @@ export function createProgram() {
             body: {
                 ...buildEnrichColumnBody(table, options),
                 max_credits: readPositiveNumber(options.maxCredits),
+                ...(options.approved ? { approved: true } : {}),
                 ...(maxConcurrency ? { max_concurrency: maxConcurrency } : {}),
                 ...(options.force ? { force: true } : {}),
             },
@@ -6029,6 +6380,36 @@ export function createProgram() {
                 },
             });
         });
+    }))
+        .addCommand(new Command("delete")
+        .description("Delete a LinkedIn post the connected account authored — a REAL, irreversible public write. Refuses without --approved (exit 7). --post is the composite social_id returned when the post was created (or by `oxygen posts get`), NOT the activity URN. To remove a post that is still only SCHEDULED in Oxygen, use `oxygen publishing posts delete` instead.")
+        .requiredOption("--post <social_id>", "Composite post social_id from `oxygen posts get` (the id returned when the post was created).")
+        .option("--account <ref>", "Sender account that authored the post (sender id, connection id, or Unipile account id). Omit for the org default.")
+        .option("--approved", "Actually delete the post. Without it the command refuses and deletes nothing.")
+        .option("--json", "Print a JSON envelope.")
+        .action(async (options) => {
+        await handleAsyncAction("posts delete", options, () => {
+            const post = readOption(options.post);
+            if (!post)
+                throw new Error("--post is required (the composite social_id from `oxygen posts get`).");
+            const account = readOption(options.account);
+            // The DELETE route has no preview mode — it removes the live post on
+            // the first call — so the approval gate lives here. Refuse rather than
+            // silently deleting a real, public, irreversible artifact.
+            if (!options.approved) {
+                throw new OxygenError("approval_required", "Deleting a LinkedIn post is a real, irreversible public write. Re-run with --approved to delete it.", {
+                    details: { post, ...(account ? { account } : {}) },
+                    exitCode: 7,
+                });
+            }
+            const params = new URLSearchParams();
+            params.set("post", post);
+            if (account)
+                params.set("account", account);
+            return requestOxygen(`/api/cli/linkedin/posts?${params.toString()}`, {
+                method: "DELETE",
+            });
+        });
     })));
     program.addCommand(new Command("engagement")
         .description("Harvest a LinkedIn post's engagers (reactors + commenters) into an enrollable CRM static list. The harvest runs as a slow, durable background drip under a dedicated conservative read budget — it never bursts and never starves the sequencer's own reads.")
@@ -7007,6 +7388,8 @@ export function createProgram() {
         .option("--sequence-prioritization <mode>", "Under a tight daily budget, serve 'followups' or 'new_leads' first.")
         .option("--schedule-template <name>", "Name of a saved schedule template (oxygen schedules) backing the sending window.")
         .option("--esp-matching <mode>", "Native-email ESP matching: 'off' (default) rotates mailboxes freely; 'prefer' biases toward a mailbox on the recipient's own provider; 'strict' requires a same-provider mailbox and defers the send when none exists.")
+        .option("--sender-failover <mode>", "What happens when an enrollment's LinkedIn/WhatsApp sender goes unavailable: 'wait' (default) resumes when the sender recovers; 'rebind' moves UNTOUCHED enrollments (no thread, no pending invite, no lead binding) to the least-loaded healthy sender in the pool after ~5h of confirmed outage.")
+        .option("--email-min-gap-minutes <n>", "Minimum minutes between two live emails from the SAME mailbox for this sequence (Instantly's 'time gap between emails'; integer 0-720, 0 = none). A humanization gap that only WIDENS the derived per-mailbox spacing — it never bypasses the daily caps or the send window.")
         .option("--no-stop-on-bounce", "Keep a lead's enrollment running after a hard bounce (default: stop it). The bounce is still recorded as an email_bounced signal either way.")
         .option("--json", "Print a JSON envelope.")
         .action(async (options) => {
@@ -7061,6 +7444,8 @@ export function createProgram() {
         .option("--sequence-prioritization <mode>", "Under a tight daily budget, serve 'followups' or 'new_leads' first.")
         .option("--schedule-template <name>", "Name of a saved schedule template (oxygen schedules) backing the sending window.")
         .option("--esp-matching <mode>", "Native-email ESP matching: 'off' (default) rotates mailboxes freely; 'prefer' biases toward a mailbox on the recipient's own provider; 'strict' requires a same-provider mailbox and defers the send when none exists.")
+        .option("--sender-failover <mode>", "What happens when an enrollment's LinkedIn/WhatsApp sender goes unavailable: 'wait' (default) resumes when the sender recovers; 'rebind' moves UNTOUCHED enrollments (no thread, no pending invite, no lead binding) to the least-loaded healthy sender in the pool after ~5h of confirmed outage.")
+        .option("--email-min-gap-minutes <n>", "Minimum minutes between two live emails from the SAME mailbox for this sequence (Instantly's 'time gap between emails'; integer 0-720, 0 = none). A humanization gap that only WIDENS the derived per-mailbox spacing — it never bypasses the daily caps or the send window.")
         .option("--no-stop-on-bounce", "Keep a lead's enrollment running after a hard bounce (default: stop it). The bounce is still recorded as an email_bounced signal either way.")
         .option("--tracking-opens", "Turn open-pixel tracking ON for this sequence's native email sends (the default; injection still needs a verified tracking domain — see `oxygen domains tracking`).")
         .option("--no-tracking-opens", "Turn OFF the open pixel for this sequence's native email sends (a deliverability knob — a pixel is spam-filter surface).")
@@ -7123,9 +7508,10 @@ export function createProgram() {
         await handleAsyncAction("sequences get", options, () => requestOxygen(`/api/cli/sequences/${encodeURIComponent(sequence)}`));
     }))
         .addCommand(new Command("enroll")
-        .description("Enroll leads into a sequence from a JSON file of { leads: [...] }. When the sequence is bound to a source table, a lead's table_row_id auto-snapshots that row's columns (incl. AI/tool outputs) into row_values for {{column}} copy — explicit row_values win. Idempotent per table row. The org do-not-contact list is always enforced; --exclude-contacted and --suppress-list add further opt-in skips (reported under skipped_by_reason). Leads already owned by a sender account (from an earlier real send) are routed back to that same account; a lead owned by a sender NOT on this sequence is skipped (bound_to_other_sender) unless --ignore-sender-bindings.")
+        .description("Enroll leads into a sequence. Enrolling spends no credits and sends nothing — dispatch only happens at `sequences start`. --from-table enrolls every not-yet-enrolled row of the sequence's bound source table (up to 500 per run; the response's from_table.has_more says whether to run again) — for a LinkedIn sequence the profile URL is read from the bound table's URL column, no pre-resolved provider ids needed. --leads-file enrolls an explicit JSON list { leads: [...] }: for an email/WhatsApp sequence a lead identified only by an email (row_values.email) or phone (row_values.phone) is auto-filed as a row in the sequence's leads table (auto-creating and binding one if there is none), deduped by email/phone, so no table has to exist first (the table is returned as leads_table with a web_url); a LinkedIn lead needs a lead_provider_id, a lead_profile_url, or a table_row_id whose row carries a LinkedIn URL. When the sequence is bound to a source table, a lead's table_row_id auto-snapshots that row's columns (incl. AI/tool outputs) into row_values for {{column}} copy — explicit row_values win. Idempotent per table row (and per email/phone for auto-filed leads). The org do-not-contact list is always enforced; --exclude-contacted and --suppress-list add further opt-in skips (reported under skipped_by_reason). Leads already owned by a sender account (from an earlier real send) are routed back to that same account; a lead owned by a sender NOT on this sequence is skipped (bound_to_other_sender) unless --ignore-sender-bindings.")
         .argument("<sequence>", "Sequence id or slug.")
-        .requiredOption("--leads-file <path>", "Path to a JSON file: { \"leads\": [{ lead_provider_id, lead_name, table_row_id, row_values }] }.")
+        .option("--leads-file <path>", "Path to a JSON file: { \"leads\": [{ row_values: { email }, lead_name }] } for cold email, or { lead_provider_id, lead_name, table_row_id, row_values } for LinkedIn / existing rows. Exactly one of --leads-file or --from-table.")
+        .option("--from-table", "Enroll every not-yet-enrolled row of the sequence's bound source table (up to 500 per run; re-run to continue). Exactly one of --leads-file or --from-table.")
         .option("--exclude-contacted", "Also skip leads any OTHER active sequence is already contacting (cross-campaign exclusion). Off by default.")
         .option("--suppress-list <ids>", "Per-call do-not-enroll lead provider ids dropped for this enroll only: a comma-separated list, or @<path> to a file of ids (comma/whitespace separated).")
         .option("--ignore-sender-bindings", "Enroll leads even when they are already owned by a sender account outside this sequence's pool (overrides the one-person-one-sender guarantee). Off by default.")
@@ -7133,17 +7519,30 @@ export function createProgram() {
         .action(async (sequence, options) => {
         await handleAsyncAction("sequences enroll", options, () => {
             const leadsPath = readOption(options.leadsFile);
-            if (!leadsPath)
-                throw new Error("--leads-file is required.");
-            const parsed = readJsonFileValue(resolve(leadsPath), "--leads-file");
+            if (options.fromTable && leadsPath) {
+                throw new Error("Provide exactly one of --leads-file or --from-table.");
+            }
+            if (!options.fromTable && !leadsPath) {
+                throw new Error("Provide exactly one of --leads-file or --from-table.");
+            }
             const suppressList = parseSuppressListOption(options.suppressList);
+            const sharedFlags = {
+                ...(options.excludeContacted ? { exclude_contacted: true } : {}),
+                ...(suppressList.length > 0 ? { suppress_list: suppressList } : {}),
+                ...(options.ignoreSenderBindings ? { ignore_sender_bindings: true } : {}),
+            };
+            if (options.fromTable) {
+                return requestOxygen(`/api/cli/sequences/${encodeURIComponent(sequence)}/enroll`, {
+                    method: "POST",
+                    body: { from_table: true, ...sharedFlags },
+                });
+            }
+            const parsed = readJsonFileValue(resolve(leadsPath), "--leads-file");
             return requestOxygen(`/api/cli/sequences/${encodeURIComponent(sequence)}/enroll`, {
                 method: "POST",
                 body: {
                     leads: parsed.leads ?? [],
-                    ...(options.excludeContacted ? { exclude_contacted: true } : {}),
-                    ...(suppressList.length > 0 ? { suppress_list: suppressList } : {}),
-                    ...(options.ignoreSenderBindings ? { ignore_sender_bindings: true } : {}),
+                    ...sharedFlags,
                 },
             });
         });
@@ -7174,7 +7573,7 @@ export function createProgram() {
         .addCommand(new Command("signal")
         .description("Record an external GTM signal (e.g. linkedin_connected, email_replied, company_raised_funds, job_change, web_visit, intent) onto a running sequence's enrollment(s) to drive signal-triggered branch/wait control. Target an enrollment by --enrollment or --lead (at least one is required); the server validates the signal name.")
         .argument("<sequence>", "Sequence id or slug.")
-        .requiredOption("--signal <name>", "Signal to record: linkedin_connected, linkedin_replied, email_sent, email_opened, email_clicked, email_replied, email_bounced, company_hiring, company_raised_funds, job_change, new_hire, web_visit, intent.")
+        .requiredOption("--signal <name>", "Signal to record: linkedin_connected, linkedin_replied, whatsapp_replied, email_sent, email_opened, email_clicked, email_replied, email_bounced, company_hiring, company_raised_funds, job_change, new_hire, web_visit, intent.")
         .option("--enrollment <id>", "Target enrollment id.")
         .option("--lead <provider_id>", "Target enrollment by its lead provider id.")
         .option("--json", "Print a JSON envelope.")
@@ -7386,16 +7785,19 @@ export function createProgram() {
         });
     })));
     program.addCommand(new Command("managed-inboxes")
-        .description("Managed whitelabel sending inboxes on the OXYGEN-managed Cold Mail Reseller (CMR) account: subscribe a domain + N mailboxes (google/microsoft) as a recurring MONTHLY subscription billed to Oxygen credits, list/get your subscriptions, and cancel. Subscribe/cancel are approval-gated (preview → re-run with --approved --quote).")
+        .description("Whitelabel sending inboxes bought through OXYGEN: subscribe a domain + N mailboxes (google/microsoft/azure) as a recurring MONTHLY subscription billed in USD to your Oxygen Email Infrastructure subscription, list/get your subscriptions, and cancel. Subscribe/cancel are approval-gated (preview → re-run with --approved --quote). The vendor is chosen for you; --vendor pins one.")
         .addCommand(new Command("subscribe")
-        .description("Subscribe a domain + mailboxes as a managed monthly CMR inbox subscription. WITHOUT --approved this prints a priced PREVIEW with a quote_id (nothing ordered or charged); re-run with --approved --quote <id> to place the order. Fails closed until the managed CMR wallet (CMR_RESELLER_API_KEY) + founder-signed pricing (CMR_MANAGED_INBOX_CREDITS_PER_MAILBOX) are configured.")
+        .description("Subscribe a domain + mailboxes as a managed monthly inbox subscription. WITHOUT --approved this prints a priced PREVIEW with a quote_id (nothing ordered, nothing charged); re-run with --approved --quote <id> to place the order. Prices come from the vendor's LIVE rate card and LIVE domain price, and are refused if they sit below vendor cost. Fails closed until the vendor key + founder-signed per-platform pricing are configured.")
         .requiredOption("--domain <domain>", "Sending domain to register + host the mailboxes (e.g. send.acme.com).")
-        .requiredOption("--provider <provider>", "Mailbox provider: google or microsoft.")
-        .option("--mailboxes <json>", "JSON array of mailboxes: [{\"username\",\"first_name\",\"last_name\",\"profile_picture?\"}].")
+        .requiredOption("--provider <provider>", "Mailbox PLATFORM: google, microsoft, or azure. (google/microsoft cap at 5 mailboxes per domain; azure allows 100.)")
+        .option("--vendor <vendor>", "Pin the vendor: inboxkit or cmr. Omit to let OXYGEN choose. A named vendor with no credential FAILS rather than falling back to another.")
+        .option("--mailboxes <json>", "JSON array of mailboxes: [{\"username\",\"first_name\",\"last_name\"}].")
         .option("--file <path>", "Path to a JSON file { \"mailboxes\": [...] } (alternative to --mailboxes).")
-        .option("--years <n>", "Years to register the domain for (positive whole number). Defaults to 1.")
-        .option("--billing <path>", "Path to a JSON file with the CMR billing address (required on the FIRST subscribe for an org that has no CMR account yet).")
-        .option("--zapshield", "Add the Zapshield deliverability-protection add-on to the domain (a one-time per-domain add-on billed once its price is founder-signed; recorded but not charged until then).")
+        .option("--years <n>", "Years to register the domain for (1-10). Defaults to 1.")
+        .option("--redirect-url <url>", "Where the domain's web root redirects. Defaults to https://<domain>.")
+        .option("--billing <path>", "Path to a JSON file with the registrant/WHOIS contact (first_name, last_name, phone, country, city, state, address_line_one, postal_code). Required — a registrar needs a real registrant.")
+        .option("--warmup", "Add the vendor's warmup pool for every mailbox (a recurring monthly per-mailbox add-on).")
+        .option("--infraguard", "Add deliverability monitoring for the domain — blacklist, DNS-drift, and bounce checks (a recurring monthly per-domain add-on).")
         .option("--approved", "Place the order (requires --quote). Without it, a priced preview is returned.")
         .option("--quote <id>", "The quote_id from a fresh preview. Required with --approved.")
         .option("--json", "Print a JSON envelope.")
@@ -7406,7 +7808,7 @@ export function createProgram() {
             if (!domain)
                 throw new Error("--domain is required.");
             if (!provider)
-                throw new Error("--provider is required (google or microsoft).");
+                throw new Error("--provider is required (google, microsoft, or azure).");
             let mailboxes;
             const mailboxesJson = readOption(options.mailboxes);
             const filePath = readOption(options.file);
@@ -7421,6 +7823,8 @@ export function createProgram() {
                 throw new Error("Provide --mailboxes <json> or --file <path>.");
             }
             const years = readOption(options.years);
+            const vendor = readOption(options.vendor);
+            const redirectUrl = readOption(options.redirectUrl);
             const billingPath = readOption(options.billing);
             const billing = billingPath ? readJsonFileValue(resolve(billingPath), "--billing") : undefined;
             const quote = readOption(options.quote);
@@ -7430,9 +7834,12 @@ export function createProgram() {
                     domain,
                     provider,
                     mailboxes,
+                    ...(vendor ? { vendor } : {}),
                     ...(years ? { years: Number(years) } : {}),
+                    ...(redirectUrl ? { redirect_url: redirectUrl } : {}),
                     ...(billing ? { billing } : {}),
-                    ...(options.zapshield ? { zapshield: true } : {}),
+                    ...(options.warmup ? { warmup: true } : {}),
+                    ...(options.infraguard ? { infraguard: true } : {}),
                     ...(options.approved ? { approved: true } : {}),
                     ...(quote ? { quote_id: quote } : {}),
                 },
@@ -7440,7 +7847,7 @@ export function createProgram() {
         });
     }))
         .addCommand(new Command("list")
-        .description("List the org's managed inbox subscriptions with provider, mailbox count, monthly price, CMR lifecycle status, and internal billing posture. Read-only, 0 Oxygen credits.")
+        .description("List the org's managed inbox subscriptions with vendor, platform, mailbox count, monthly USD price, lifecycle status, and internal billing posture. Read-only, 0 Oxygen credits.")
         .option("--status <status>", "Filter by status: pending, active, renewing, past_due, expired, cancelled, or failed.")
         .option("--json", "Print a JSON envelope.")
         .action(async (options) => {
@@ -7454,14 +7861,36 @@ export function createProgram() {
         });
     }))
         .addCommand(new Command("get")
-        .description("Get one managed inbox subscription by domain (provider, mailbox count, monthly price, CMR subscription id, lifecycle status, auto-renew, period end, internal billing status). Read-only, 0 Oxygen credits.")
+        .description("Get one managed inbox subscription by domain (vendor, platform, mailbox count, monthly USD price, vendor order id, lifecycle status, auto-renew, period end, internal billing status). Read-only, 0 Oxygen credits.")
         .argument("<domain>", "The managed inbox domain (e.g. send.acme.com).")
         .option("--json", "Print a JSON envelope.")
         .action(async (domain, options) => {
         await handleAsyncAction("managed-inboxes get", options, () => requestOxygen(`/api/cli/managed-inboxes/${encodeURIComponent(domain)}`));
+    }))
+        .addCommand(new Command("warmup")
+        .description("Turn the warmup pool on or off for a managed domain's inboxes, after purchase. Warmup runs on the vendor's pool against mailboxes it provisioned, so it is only available on inboxes BOUGHT through Oxygen — an imported inbox you already owned must arrive already warmed. WITHOUT --approved this prints a priced preview; re-run with --approved to apply.")
+        .argument("<domain>", "The managed inbox domain (e.g. send.acme.com).")
+        .option("--enable", "Turn warmup on (a recurring monthly per-mailbox add-on).")
+        .option("--disable", "Turn warmup off and stop billing for it.")
+        .option("--approved", "Apply the change (otherwise a priced preview is returned).")
+        .option("--json", "Print a JSON envelope.")
+        .action(async (domain, options) => {
+        await handleAsyncAction("managed-inboxes warmup", options, () => {
+            if (options.enable === options.disable) {
+                throw new Error("Pass exactly one of --enable or --disable.");
+            }
+            return requestOxygen("/api/cli/managed-inboxes/warmup", {
+                method: "POST",
+                body: {
+                    domain,
+                    enabled: options.enable === true,
+                    ...(options.approved ? { approved: true } : {}),
+                },
+            });
+        });
     }))
         .addCommand(new Command("cancel")
-        .description("Cancel a managed inbox subscription by domain (stops CMR's recurring monthly charge and frees the domain at period end). WITHOUT --approved prints a preview; re-run with --approved to cancel. Cancelling is free — 0 Oxygen credits.")
+        .description("Cancel a managed inbox subscription by domain (stops the recurring monthly charge and frees the domain at period end). WITHOUT --approved prints a preview; re-run with --approved to cancel. Cancelling is free.")
         .argument("<domain>", "The managed inbox domain to cancel.")
         .option("--approved", "Actually cancel (otherwise a preview is returned).")
         .option("--json", "Print a JSON envelope.")
@@ -7744,32 +8173,19 @@ export function createProgram() {
         });
     })))
         .addCommand(new Command("order")
-        .description("Order NEW sending mailboxes (domain + inboxes + warmup) on the OXYGEN-managed Zapmail wallet, billed to Oxygen credits. Without --approved returns a priced preview + quote_id. FAILS CLOSED (409) until managed ordering is enabled.")
-        .requiredOption("--provider <provider>", "Mailbox provider: google or microsoft.")
-        .requiredOption("--domains <domains>", "Comma-separated sending domains (e.g. send.acme.com,mail.acme.io).")
-        .option("--mailboxes-per-domain <n>", "Mailboxes to provision per domain (positive whole number). Defaults to 1.")
-        .option("--workspace <id>", "Optional Zapmail workspace key to provision into.")
-        .option("--approved", "Place the order (requires --quote from a fresh preview).")
-        .option("--quote <id>", "The quote_id from a fresh preview (required with --approved).")
-        .option("--json", "Print a JSON envelope.")
-        .action(async (options) => {
-        await handleAsyncAction("mailboxes order", options, () => {
-            const domains = readOption(options.domains)?.split(",").map((d) => d.trim()).filter(Boolean) ?? [];
-            const perDomain = readOption(options.mailboxesPerDomain);
-            const workspace = readOption(options.workspace);
-            const quote = readOption(options.quote);
-            return requestOxygen("/api/cli/mailboxes/order", {
-                method: "POST",
-                body: {
-                    provider: readOption(options.provider),
-                    domains,
-                    ...(perDomain ? { mailboxes_per_domain: Number(perDomain) } : {}),
-                    ...(workspace ? { workspace_id: workspace } : {}),
-                    ...(options.approved ? { approved: true } : {}),
-                    ...(quote ? { quote_id: quote } : {}),
-                },
-            });
-        });
+        .description("RETIRED — managed mailboxes are now purchased as monthly subscriptions via `oxygen managed-inboxes subscribe` (InboxKit-backed). This legacy Zapmail order path was never enabled anywhere and now always fails with code `gone`.")
+        // Swallow the old flags (--provider/--domains/--approved/...) so a
+        // stale invocation reaches the tombstone envelope instead of dying
+        // on commander's unknown-option parse error.
+        .allowUnknownOption(true)
+        .allowExcessArguments(true)
+        .action(() => {
+        emitCliFailure("mailboxes order", new OxygenError("gone", "`oxygen mailboxes order` is retired — managed mailboxes are now purchased as monthly subscriptions via `oxygen managed-inboxes subscribe` (InboxKit-backed). Preview a quote, then re-run with --approved --quote <id>. Nothing was ordered or charged.", {
+            details: {
+                replacement: "oxygen managed-inboxes subscribe",
+                deep_link: "https://oxygen-agent.com/billing",
+            },
+        }));
     }))
         .addCommand(new Command("orders")
         .description("List the org's managed mailbox provisioning orders (newest first).")
@@ -7953,14 +8369,14 @@ export function createProgram() {
         await handleAsyncAction("domains postmaster status", options, () => requestOxygen(`/api/cli/domains/${encodeURIComponent(domain)}/postmaster`));
     })))
         .addCommand(new Command("add")
-        .description("Onboard a domain registered elsewhere by creating a Cloudflare zone for it, so its DNS can be managed here. Returns the nameservers to set at your registrar. Idempotent.")
+        .description("BYOK CLOUDFLARE: onboard a domain registered elsewhere by creating a zone in your connected Cloudflare account. For managed domain + inbox provisioning use `managed-inboxes subscribe`.")
         .argument("<domain>", "Apex domain to add, such as acme.com.")
         .option("--json", "Print a JSON envelope.")
         .action(async (domain, options) => {
         await handleAsyncAction("domains add", options, () => requestOxygen("/api/cli/domains/add", { method: "POST", body: { domain } }));
     }))
         .addCommand(new Command("search")
-        .description("Search Cloudflare Registrar for available domains with registration/renewal pricing. Free — nothing is purchased.")
+        .description("BYOK CLOUDFLARE: search Registrar for available domains with registration/renewal pricing. Free — nothing is purchased.")
         .argument("<query>", "Search text, such as a brand or keyword.")
         .option("--json", "Print a JSON envelope.")
         .action(async (query, options) => {
@@ -7970,7 +8386,7 @@ export function createProgram() {
         });
     }))
         .addCommand(new Command("check")
-        .description("Check availability and pricing for up to 20 specific domains via Cloudflare Registrar. Free — nothing is purchased.")
+        .description("BYOK CLOUDFLARE: check availability and pricing for up to 20 exact domains. Free — nothing is purchased.")
         .argument("<domains...>", "Domain names to check (max 20).")
         .option("--json", "Print a JSON envelope.")
         .action(async (domains, options) => {
@@ -7985,7 +8401,7 @@ export function createProgram() {
         });
     }))
         .addCommand(new Command("buy")
-        .description("Buy domains through Cloudflare Registrar. REAL MONEY, NON-REFUNDABLE — the preview determines billing: BYOK orgs (connected Cloudflare token) bill their own Cloudflare payment method (0 Oxygen credits); managed orgs (no connected token) bill Oxygen credits at a markup on the shared Oxygen Cloudflare account. The preview's `billing` note states which applies. Without --approved, returns a priced preview plus a quote_id; re-run with --approved --quote <id> to execute.")
+        .description("BYOK CLOUDFLARE ONLY. REAL MONEY, NON-REFUNDABLE: approved purchases bill your connected Cloudflare account and use 0 Oxygen credits. Without --approved, returns a priced preview plus quote_id. For a managed domain + inbox bundle use `managed-inboxes subscribe` (InboxKit).")
         .argument("<domains...>", "Domain names to buy.")
         .option("--approved", "Execute the purchase. Without this flag, returns a preview only.")
         .option("--quote <id>", "Quote id from the preview (required with --approved).")
@@ -7998,7 +8414,7 @@ export function createProgram() {
         await handleAsyncAction("domains buy", options, () => runDomainsBuy(domains, options));
     }))
         .addCommand(new Command("adopt")
-        .description("STAFF: Import domains that already exist in the shared Oxygen-managed Cloudflare account into a workspace, then mirror them into the domain cache. FREE — no Oxygen credits and no Cloudflare purchase (the domains are already registered); this differs from `domains buy`. Idempotent. Without --yes, prints a preview of what would be adopted/skipped.")
+        .description("STAFF LEGACY RECOVERY: attach domains that already exist in the shared Oxygen-managed Cloudflare account to their workspace. FREE; no purchase. New managed domain + inbox bundles use InboxKit. Without --yes, previews only.")
         .argument("[domains...]", "Specific domains to adopt. Omit and pass --all to adopt every zone in the managed account.")
         .option("--all", "Adopt every zone discovered in the managed Cloudflare account.")
         .option("--organization-id <id>", "STAFF override: adopt into this workspace instead of the calling org.")
@@ -8362,14 +8778,18 @@ export function createProgram() {
         }));
     }))
         .addCommand(new Command("enable")
-        .description("Enable a workflow automation and its current trigger.")
+        .description("Enable a workflow automation and its current trigger. Prints the schedule's projected automation-action burn; refuses a cron cadence the plan's monthly allowance cannot sustain.")
         .argument("<workflow>", "Workflow id, slug, or name.")
         .option("--json", "Print a JSON envelope.")
         .action(async (workflow, options) => {
-        await handleAsyncAction("workflows enable", options, () => requestOxygen("/api/cli/workflows/enable", {
-            method: "POST",
-            body: { workflow },
-        }));
+        await handleAsyncAction("workflows enable", options, async () => {
+            const data = await requestOxygen("/api/cli/workflows/enable", {
+                method: "POST",
+                body: { workflow },
+            });
+            writeAutomationProjection(data);
+            return data;
+        });
     }))
         .addCommand(new Command("disable")
         .description("Disable a workflow automation and its current trigger.")
@@ -8380,7 +8800,56 @@ export function createProgram() {
             method: "POST",
             body: { workflow },
         }));
-    }));
+    }))
+        .addCommand(new Command("mcp")
+        .description("Publish workflows as dynamic MCP tools (oxygen_workflow_<slug>) — the 'Clay Functions' pattern.")
+        .addCommand(new Command("enable")
+        .description("Publish an active workflow as a callable MCP tool so any MCP client can run it.")
+        .argument("<workflow>", "Workflow id, slug, or name.")
+        .option("--display-name <name>", "Display name for the published MCP tool.")
+        .option("--description <text>", "Description for the published MCP tool.")
+        .option("--json", "Print a JSON envelope.")
+        .action(async (workflow, options) => {
+        await handleAsyncAction("workflows mcp enable", options, async () => {
+            const data = await requestOxygen("/api/cli/workflows/mcp", {
+                method: "POST",
+                body: {
+                    workflow,
+                    enabled: true,
+                    ...(readOption(options.displayName) ? { display_name: readOption(options.displayName) } : {}),
+                    ...(readOption(options.description) ? { description: readOption(options.description) } : {}),
+                },
+            });
+            // MCP tool names are capped at 64 chars. Warn (non-fatal) when the
+            // resolved slug pushes oxygen_workflow_<slug> over the limit: the
+            // flag is set but the tool is skipped in tools/list until the slug
+            // is shortened. Uses the server-resolved slug, not the raw ref.
+            const slug = data?.workflow?.slug;
+            if (typeof slug === "string") {
+                const toolName = `oxygen_workflow_${slug}`;
+                if (toolName.length > 64) {
+                    process.stderr.write(`warning: "${toolName}" is ${toolName.length} chars (limit 64) — the workflow is enabled for MCP but will not appear in tools/list until its slug is shortened.\n`);
+                }
+            }
+            return data;
+        });
+    }))
+        .addCommand(new Command("disable")
+        .description("Unpublish a workflow's MCP tool. The workflow stays active and callable via `oxygen workflows call`.")
+        .argument("<workflow>", "Workflow id, slug, or name.")
+        .option("--json", "Print a JSON envelope.")
+        .action(async (workflow, options) => {
+        await handleAsyncAction("workflows mcp disable", options, () => requestOxygen("/api/cli/workflows/mcp", {
+            method: "POST",
+            body: { workflow, enabled: false },
+        }));
+    }))
+        .addCommand(new Command("list")
+        .description("List workflows currently published as MCP tools.")
+        .option("--json", "Print a JSON envelope.")
+        .action(async (options) => {
+        await handleAsyncAction("workflows mcp list", options, () => requestOxygen("/api/cli/workflows/mcp-callable"));
+    })));
     program
         .command("skills")
         .description("Agent skill discovery and installation commands.")
@@ -9555,7 +10024,7 @@ function readCompaniesEnrichBody(table, options) {
     return body;
 }
 function readCompaniesEnrichSelection(options) {
-    const explicitSelection = readSelectionJsonOption(options.selectionJson);
+    const explicitSelection = readJsonObjectOption(options.selectionJson);
     const hasAll = Boolean(options.all);
     const limit = readPositiveInt(options.limit);
     const rowIds = readCsvOption(options.rowIds);
@@ -9586,12 +10055,6 @@ function readFilterSelectionOption(value) {
     const filters = readFilterJsonOption(value);
     return filters ? { mode: "filter", filters } : undefined;
 }
-function readSelectionJsonOption(value) {
-    const raw = readOption(value);
-    if (!raw)
-        return undefined;
-    return parseJsonObject(raw);
-}
 function readFilterJsonOption(value) {
     const raw = readOption(value);
     if (!raw)
@@ -9615,12 +10078,6 @@ function readFilterJsonOption(value) {
     }
     return filters;
 }
-function readFilterTreeJsonOption(value) {
-    const raw = readOption(value);
-    if (!raw)
-        return undefined;
-    return parseJsonObject(raw);
-}
 function readSortJsonOption(value) {
     const raw = readOption(value);
     if (!raw)
@@ -10917,12 +11374,6 @@ function chunk(values, size) {
 function readCount(value) {
     return typeof value === "number" && Number.isFinite(value) ? value : 0;
 }
-function readRecordString(value, key) {
-    if (!value || typeof value !== "object" || Array.isArray(value))
-        return null;
-    const entry = value[key];
-    return typeof entry === "string" ? entry : null;
-}
 function readRecord(value, key) {
     if (!value || typeof value !== "object" || Array.isArray(value))
         return null;
@@ -10957,9 +11408,6 @@ function isTerminalTableActionRunStatus(status) {
         || status === "failed"
         || status === "canceled";
 }
-function sleep(ms) {
-    return new Promise((resolve) => setTimeout(resolve, ms));
-}
 async function resolveActiveProfileWithSource() {
     const resolution = await resolveActiveProfile();
     let source;
@@ -11031,9 +11479,7 @@ async function handleWhoamiAction(options) {
         process.stdout.write(formatWhoami(identity, context));
     }
     catch (error) {
-        const failure = toFailure("whoami", error);
-        writeJson(failure);
-        process.exitCode = error instanceof OxygenError ? exitCodeForOxygenError(error) : 1;
+        emitCliFailure("whoami", error);
     }
 }
 async function handleOnboardingStartAction(options) {
@@ -11046,9 +11492,7 @@ async function handleOnboardingStartAction(options) {
         process.stdout.write(formatOnboardingStart(data));
     }
     catch (error) {
-        const failure = toFailure("onboarding start", error);
-        writeJson(failure);
-        process.exitCode = error instanceof OxygenError ? exitCodeForOxygenError(error) : 1;
+        emitCliFailure("onboarding start", error);
     }
 }
 async function handleOnboardingResetAction(options) {
@@ -11070,9 +11514,7 @@ async function handleOnboardingResetAction(options) {
         process.stdout.write(formatOnboardingReset(data));
     }
     catch (error) {
-        const failure = toFailure("onboarding reset", error);
-        writeJson(failure);
-        process.exitCode = error instanceof OxygenError ? exitCodeForOxygenError(error) : 1;
+        emitCliFailure("onboarding reset", error);
     }
 }
 function formatOnboardingReset(data) {
@@ -11128,9 +11570,7 @@ async function handleLoginAction(options) {
         }
     }
     catch (error) {
-        const failure = toFailure("login", error);
-        writeJson(failure);
-        process.exitCode = error instanceof OxygenError ? exitCodeForOxygenError(error) : 1;
+        emitCliFailure("login", error);
     }
 }
 async function handleAuthUseTokenAction(options) {
@@ -11173,9 +11613,7 @@ async function handleAuthDoctorAction(options) {
         process.stdout.write(formatAuthDoctor(data));
     }
     catch (error) {
-        const failure = toFailure("auth doctor", error);
-        writeJson(failure);
-        process.exitCode = error instanceof OxygenError ? exitCodeForOxygenError(error) : 1;
+        emitCliFailure("auth doctor", error);
     }
 }
 async function runAuthDoctor() {
@@ -11264,9 +11702,7 @@ async function handleOrgUseAction(organization, options, command) {
         writeJson(result);
     }
     catch (error) {
-        const failure = toFailure(command, error);
-        writeJson(failure);
-        process.exitCode = error instanceof OxygenError ? exitCodeForOxygenError(error) : 1;
+        emitCliFailure(command, error);
     }
 }
 async function handleProfilesListAction(options) {
@@ -11283,9 +11719,7 @@ async function handleProfilesListAction(options) {
         process.stdout.write(formatProfilesList(data));
     }
     catch (error) {
-        const failure = toFailure("profiles list", error);
-        writeJson(failure);
-        process.exitCode = error instanceof OxygenError ? exitCodeForOxygenError(error) : 1;
+        emitCliFailure("profiles list", error);
     }
 }
 async function handleProfilesUseAction(profile, options) {
@@ -11304,9 +11738,7 @@ async function handleProfilesUseAction(profile, options) {
         process.stdout.write(formatProfileUseSuccess(data.profile, { totalProfiles }));
     }
     catch (error) {
-        const failure = toFailure("profiles use", error);
-        writeJson(failure);
-        process.exitCode = error instanceof OxygenError ? exitCodeForOxygenError(error) : 1;
+        emitCliFailure("profiles use", error);
     }
 }
 async function handleProfilesEnvAction(profile, options) {
@@ -11343,9 +11775,7 @@ async function handleProfilesEnvAction(profile, options) {
         process.stdout.write(`export OXYGEN_API_URL=${shellQuote(match.apiUrl)}\n`);
     }
     catch (error) {
-        const failure = toFailure("profiles env", error);
-        writeJson(failure);
-        process.exitCode = error instanceof OxygenError ? exitCodeForOxygenError(error) : 1;
+        emitCliFailure("profiles env", error);
     }
 }
 async function handleProfilesCurrentAction(options) {
@@ -11367,9 +11797,7 @@ async function handleProfilesCurrentAction(options) {
         process.stdout.write(formatProfilesCurrent(context));
     }
     catch (error) {
-        const failure = toFailure("profiles current", error);
-        writeJson(failure);
-        process.exitCode = error instanceof OxygenError ? exitCodeForOxygenError(error) : 1;
+        emitCliFailure("profiles current", error);
     }
 }
 function shellQuote(value) {
@@ -11396,9 +11824,7 @@ async function handleLogoutAction(options) {
         process.stdout.write(formatLogoutSuccess(result));
     }
     catch (error) {
-        const failure = toFailure("logout", error);
-        writeJson(failure);
-        process.exitCode = error instanceof OxygenError ? exitCodeForOxygenError(error) : 1;
+        emitCliFailure("logout", error);
     }
 }
 async function handleUpdateAction(options) {
@@ -11411,9 +11837,7 @@ async function handleUpdateAction(options) {
         process.stdout.write(formatUpdateSuccess(result));
     }
     catch (error) {
-        const failure = toFailure("update", error);
-        writeJson(failure);
-        process.exitCode = error instanceof OxygenError ? exitCodeForOxygenError(error) : 1;
+        emitCliFailure("update", error);
     }
 }
 function buildApiKeyCreateBody(options) {
@@ -11477,8 +11901,16 @@ async function login(options) {
         chosenProfile = picked.name;
         renamed = picked.renamed;
     }
-    const profile = await saveCredentials(credentials, process.env, { profile: chosenProfile });
+    const profile = await saveCredentials(credentials, process.env, {
+        profile: chosenProfile,
+        allowHostChange: options.force === true,
+    });
     const skillsInstall = await runAutomaticSkillsInstall({ apiUrl: credentials.apiUrl, credentials });
+    // Opt-in eager mirror of every reachable workspace, off by default so login
+    // stays fast and non-surprising. Best-effort: a sync failure never fails login.
+    if (process.env.OXYGEN_KNOWLEDGE_AUTOSYNC === "1") {
+        await runKnowledgeMirrorSyncAll({ ifStale: true }).catch(() => undefined);
+    }
     if (!options.json) {
         process.stdout.write(formatLoginSuccessForResolved(loginIdentity, profile, { renamed, skillsInstall }));
         const hint = await buildPostLoginHint(profile);
@@ -11521,7 +11953,10 @@ async function applyAuthToken(options) {
         chosenProfile = picked.name;
         renamed = picked.renamed;
     }
-    const profile = await saveCredentials(loginIdentity.credentials, process.env, { profile: chosenProfile });
+    const profile = await saveCredentials(loginIdentity.credentials, process.env, {
+        profile: chosenProfile,
+        allowHostChange: options.force === true,
+    });
     return {
         identity: loginIdentity.whoami,
         loginIdentity,
@@ -11576,18 +12011,19 @@ async function resolveLoginIdentity(token, apiUrl) {
     };
 }
 function pickProfileForLogin(loginIdentity) {
+    const apiUrl = loginIdentity.credentials.apiUrl;
     if (loginIdentity.credentials.authKind === "user_session") {
         const seed = loginIdentity.activeOrganization?.slug
             ?? loginIdentity.user.email
             ?? loginIdentity.user.id;
-        return pickProfileNameForUserSession(loginIdentity.user.id, seed);
+        return pickProfileNameForUserSession(loginIdentity.user.id, seed, apiUrl);
     }
     const organization = loginIdentity.activeOrganization;
     if (!organization) {
-        return pickProfileNameForUserSession(loginIdentity.user.id, loginIdentity.user.email ?? loginIdentity.user.id);
+        return pickProfileNameForUserSession(loginIdentity.user.id, loginIdentity.user.email ?? loginIdentity.user.id, apiUrl);
     }
     const seed = organization.slug?.trim() || organization.id;
-    return pickProfileNameForIdentity(organization.id, seed);
+    return pickProfileNameForIdentity(organization.id, seed, apiUrl);
 }
 function readEnvProfileName() {
     const value = process.env.OXYGEN_PROFILE?.trim();
@@ -11624,17 +12060,20 @@ function isUserSessionToken(token) {
     return token.startsWith("oxy_user_");
 }
 async function buildPostLoginHint(activeProfile) {
-    if (output.isTTY !== true || process.env.NO_COLOR) {
-        const state = await listCredentialProfiles().catch(() => null);
-        if (!state || state.profiles.length < 2)
-            return "";
-        return `\n  Pin this terminal:  eval "$(oxygen profiles env ${activeProfile})"\n\n`;
-    }
+    const plain = output.isTTY !== true || Boolean(process.env.NO_COLOR);
+    const styles = ansi(!plain);
+    const label = (text) => (plain ? text : styles.dim(text));
+    const command = (text) => (plain ? text : styles.bold(text));
     const state = await listCredentialProfiles().catch(() => null);
-    if (!state || state.profiles.length < 2)
-        return "";
-    const styles = ansi(true);
-    return `\n  ${styles.dim("Pin this terminal:")}  ${styles.bold(`eval "$(oxygen profiles env ${activeProfile})"`)}\n\n`;
+    const lines = [];
+    // The pin hint only makes sense with more than one stored profile.
+    if (state && state.profiles.length >= 2) {
+        lines.push(`  ${label("Pin this terminal:")}  ${command(`eval "$(oxygen profiles env ${activeProfile})"`)}`);
+    }
+    // Mirror every reachable workspace into local markdown so agents can read/grep
+    // the wiki offline; --if-stale keeps a large multi-workspace loop cheap.
+    lines.push(`  ${label("Mirror your wikis:")}  ${command("oxygen knowledge sync --all --if-stale")}`);
+    return `\n${lines.join("\n")}\n\n`;
 }
 async function promptForToken(options) {
     const fallbackLoginUrl = createCliLoginUrl(options.apiUrl);
@@ -12018,10 +12457,7 @@ async function handleSequenceSignalAction(sequence, options) {
         process.stdout.write(`Recorded ${recordedSignal} on ${updated} enrollment(s).${link ? ` ${link}` : ""}\n`);
     }
     catch (error) {
-        const failure = toFailure("sequences signal", error);
-        writeJson(failure);
-        writeMaxCreditsHint(error);
-        process.exitCode = error instanceof OxygenError ? exitCodeForOxygenError(error) : 1;
+        emitCliFailure("sequences signal", error);
     }
 }
 async function handleSequenceVariantsAction(sequence, options) {
@@ -12055,10 +12491,7 @@ async function handleSequenceVariantsAction(sequence, options) {
         process.stdout.write(formatSequenceVariants(data));
     }
     catch (error) {
-        const failure = toFailure("sequences variants", error);
-        writeJson(failure);
-        writeMaxCreditsHint(error);
-        process.exitCode = error instanceof OxygenError ? exitCodeForOxygenError(error) : 1;
+        emitCliFailure("sequences variants", error);
     }
 }
 function formatVariantCell(value) {
@@ -12186,10 +12619,7 @@ async function handleTablesTidySuggestAction(table, options) {
         process.stdout.write(formatTidySuggestions(data));
     }
     catch (error) {
-        const failure = toFailure("tables tidy-suggest", error);
-        writeJson(failure);
-        writeMaxCreditsHint(error);
-        process.exitCode = error instanceof OxygenError ? exitCodeForOxygenError(error) : 1;
+        emitCliFailure("tables tidy-suggest", error);
     }
 }
 function formatTidyCount(value) {
@@ -12567,9 +12997,7 @@ async function handleSupportAdminWorkflowAction(ticketId, options) {
         process.stdout.write(formatSupportAdminWorkflowTicket(data));
     }
     catch (error) {
-        const failure = toFailure("support admin workflow", error);
-        writeJson(failure);
-        process.exitCode = error instanceof OxygenError ? exitCodeForOxygenError(error) : 1;
+        emitCliFailure("support admin workflow", error);
     }
 }
 async function handleSupportAdminUpdateAction(ticketId, options) {
@@ -12583,9 +13011,7 @@ async function handleSupportAdminUpdateAction(ticketId, options) {
         process.stdout.write(formatSupportAdminUpdateTicket(data));
     }
     catch (error) {
-        const failure = toFailure("support admin update", error);
-        writeJson(failure);
-        process.exitCode = error instanceof OxygenError ? exitCodeForOxygenError(error) : 1;
+        emitCliFailure("support admin update", error);
     }
 }
 function formatSupportAdminWorkflowStep(styles, label, status, artifactLabel, artifact) {
@@ -12883,8 +13309,12 @@ function buildKnowledgePageListBody(options) {
 }
 function buildKnowledgeGraphBody(options) {
     const maxNodes = readPositiveInt(options.maxNodes);
+    const center = readOption(options.center);
+    const depth = readPositiveInt(options.depth);
     return {
         ...(maxNodes !== undefined ? { max_nodes: maxNodes } : {}),
+        ...(center ? { center } : {}),
+        ...(depth !== undefined ? { depth } : {}),
     };
 }
 function buildKnowledgeLogListBody(options) {
@@ -12976,10 +13406,27 @@ async function resolveKnowledgeMirrorTarget() {
 async function markKnowledgeMirrorStaleAfterWrite() {
     try {
         const credentials = await loadCredentials().catch(() => null);
-        const target = credentials ? knowledgeMirrorTargetFromCredentials(credentials) : null;
-        if (!target || !mirrorExists(target.dir))
+        if (!credentials)
             return;
-        markMirrorStale(target.dir);
+        const cached = credentials.activeOrganization ?? credentials.identity?.organization ?? null;
+        const ref = process.env.OXYGEN_ORG?.trim() || cached?.id || cached?.slug;
+        if (!ref)
+            return;
+        // Resolve the ref to an org id offline — the hook stays network-free so a page
+        // write is never slowed by a whoami round-trip. A non-cached slug override
+        // (`--org <slug>` for an org we haven't cached) can't be mapped without a
+        // network call, so that mirror isn't stale-marked here; the 15-min --if-stale
+        // TTL and `knowledge sync --all` are the safety net.
+        let orgId = null;
+        if (cached && (ref === cached.id || ref === cached.slug))
+            orgId = cached.id;
+        else if (isUuid(ref))
+            orgId = ref;
+        if (!orgId)
+            return;
+        const target = knowledgeMirrorTargetFor(credentials.apiUrl, orgId);
+        if (mirrorExists(target.dir))
+            markMirrorStale(target.dir);
     }
     catch {
         // A broken local mirror must never fail the page write itself.
@@ -13035,8 +13482,24 @@ function applyKnowledgeSyncPage(dir, state, page, counters) {
     };
     counters.synced += 1;
 }
-async function runKnowledgeMirrorSync(options) {
-    const target = await resolveKnowledgeMirrorTarget();
+// `orgOverride` targets a specific org (used by `sync --all`): it names the mirror
+// directory explicitly and pins X-Oxygen-Organization on every request in the
+// loop, so each workspace clones into its own mirror regardless of the cached
+// active org. Absent (the default single-org path), behavior is unchanged.
+async function runKnowledgeMirrorSync(// skipcq: JS-R1005 -- one linear sync pipeline: staleness gate, lock, delta loop, generated files.
+options, orgOverride) {
+    const requestOrg = orgOverride ? { selectedOrganization: orgOverride.selector } : {};
+    let target;
+    if (orgOverride) {
+        const credentials = await loadCredentials();
+        if (!credentials) {
+            throw new OxygenError("not_logged_in", "Run `oxygen login` before using CLI commands.", { exitCode: 1 });
+        }
+        target = knowledgeMirrorTargetFor(credentials.apiUrl, orgOverride.orgId);
+    }
+    else {
+        target = await resolveKnowledgeMirrorTarget();
+    }
     const ttlMinutes = readPositiveInt(options.ttl) ?? KNOWLEDGE_SYNC_DEFAULT_TTL_MINUTES;
     if (options.ifStale && !options.full) {
         const state = readMirrorState(target.dir);
@@ -13073,6 +13536,7 @@ async function runKnowledgeMirrorSync(options) {
             const delta = await requestOxygen("/api/cli/knowledge/sync/delta", {
                 method: "POST",
                 body: cursor ? { cursor } : {},
+                ...requestOrg,
             });
             if (delta.web_url)
                 webUrl = delta.web_url;
@@ -13109,10 +13573,11 @@ async function runKnowledgeMirrorSync(options) {
         }
         // Generated summaries come from the server's own projections, not a client-side
         // recomputation. A real wiki page may own the `index`/`log` slug — page bytes win.
-        const index = await requestOxygen("/api/cli/knowledge/index");
+        const index = await requestOxygen("/api/cli/knowledge/index", requestOrg);
         const logPage = await requestOxygen("/api/cli/knowledge/log", {
             method: "POST",
             body: {},
+            ...requestOrg,
         });
         if (!state.pages.index)
             writeGeneratedIndexFile(target.dir, index.index);
@@ -13136,6 +13601,50 @@ async function runKnowledgeMirrorSync(options) {
         releaseMirrorLock(target.dir);
     }
 }
+// `knowledge sync --all` — mirror every workspace the credential can reach, each
+// into its own org-id-keyed mirror directory. Loops the same `/api/cli/orgs` list
+// the `orgs` command reads and syncs each org via `runKnowledgeMirrorSync` with an
+// explicit org override. One org's failure (including a revoked membership, which
+// purges just that org's mirror) is recorded and never aborts the rest. Pair with
+// `--if-stale` so a large fleet loop stays cheap (each org honors its own TTL).
+async function runKnowledgeMirrorSyncAll(options) {
+    const credentials = await loadCredentials();
+    if (!credentials) {
+        throw new OxygenError("not_logged_in", "Run `oxygen login` before using CLI commands.", { exitCode: 1 });
+    }
+    const orgs = await requestOxygen("/api/cli/orgs", { credentials });
+    const results = [];
+    for (const org of orgs.organizations) {
+        const selector = org.slug ?? org.id;
+        try {
+            const summary = await runKnowledgeMirrorSync({ ...options, all: false }, { orgId: org.id, selector });
+            results.push({
+                org_id: org.id,
+                slug: org.slug ?? null,
+                status: summary.skipped ? "skipped" : "synced",
+                ...summary,
+            });
+        }
+        catch (error) {
+            results.push({
+                org_id: org.id,
+                slug: org.slug ?? null,
+                status: "failed",
+                error: error instanceof OxygenError
+                    ? { code: error.code, message: error.message }
+                    : { code: "unknown", message: error instanceof Error ? error.message : "Unknown error." },
+            });
+        }
+    }
+    return {
+        orgs: results,
+        count: results.length,
+        synced: results.filter((result) => result.status === "synced").length,
+        skipped: results.filter((result) => result.status === "skipped").length,
+        failed: results.filter((result) => result.status === "failed").length,
+        web_url: `${credentials.apiUrl.replace(/\/$/, "")}/knowledge`,
+    };
+}
 // One page's push: parse the local file, guard identity, upsert with the manifest
 // revision as the optimistic-concurrency base, and translate the two expected
 // gate outcomes (approval proposal, revision conflict) into statuses.
@@ -13299,6 +13808,45 @@ async function runKnowledgeMirrorStatus(options) {
         web_url: target.webUrl,
     };
 }
+// `knowledge status --all` — freshness report across every locally mirrored
+// workspace for the active API host. Pure filesystem read (no network): enumerate
+// the org-id mirror dirs, read each `MirrorState`, and flag any whose last sync is
+// older than the default TTL. Slugs are cross-referenced from the cached active
+// org only (offline); other orgs report `org_id` alone.
+async function runKnowledgeMirrorStatusAll() {
+    const credentials = await loadCredentials();
+    if (!credentials) {
+        throw new OxygenError("not_logged_in", "Run `oxygen login` before using CLI commands.", { exitCode: 1 });
+    }
+    const apiHost = new URL(credentials.apiUrl).host;
+    const orgIds = listLocalMirrors({ configDir: resolveDefaultConfigDir(), apiHost });
+    const cached = credentials.activeOrganization ?? credentials.identity?.organization ?? null;
+    const ttlMs = KNOWLEDGE_SYNC_DEFAULT_TTL_MINUTES * 60_000;
+    const mirrors = orgIds.map((orgId) => {
+        const target = knowledgeMirrorTargetFor(credentials.apiUrl, orgId);
+        const state = readMirrorState(target.dir);
+        const conflicts = listConflictFiles(target.dir);
+        const lastSyncMs = state?.last_sync_at ? Date.parse(state.last_sync_at) : Number.NaN;
+        const stale = !Number.isFinite(lastSyncMs) || Date.now() - lastSyncMs >= ttlMs;
+        return {
+            org_id: orgId,
+            ...(cached && cached.id === orgId ? { slug: cached.slug ?? null } : {}),
+            mirror_path: target.dir,
+            exists: mirrorExists(target.dir),
+            pages_total: state ? Object.keys(state.pages).length : 0,
+            last_sync_at: state?.last_sync_at ?? null,
+            stale,
+            conflict_count: conflicts.length,
+            web_url: target.webUrl,
+        };
+    });
+    return {
+        api_host: apiHost,
+        count: mirrors.length,
+        mirrors,
+        web_url: `${credentials.apiUrl.replace(/\/$/, "")}/knowledge`,
+    };
+}
 async function runKnowledgeMirrorPurge() {
     const target = await resolveKnowledgeMirrorTarget();
     const existed = existsSync(target.dir);
@@ -13313,9 +13861,7 @@ async function handleKnowledgeMirrorPrintPathAction() {
         process.stdout.write(`${target.dir}\n`);
     }
     catch (error) {
-        const failure = toFailure("knowledge status", error);
-        writeJson(failure);
-        process.exitCode = error instanceof OxygenError ? exitCodeForOxygenError(error) : 1;
+        emitCliFailure("knowledge status", error);
     }
 }
 // Knowledge page routes accept either a UUID (`id`) or a slug (`slug`); split
@@ -13330,7 +13876,7 @@ function buildEnrichColumnBody(// skipcq: JS-R1005 -- CLI body builder maps enri
 table, options) {
     const limit = readPositiveInt(options.limit);
     const filterSelection = readFilterSelectionOption(options.filterJson);
-    const explicitSelection = readSelectionJsonOption(options.selectionJson);
+    const explicitSelection = readJsonObjectOption(options.selectionJson);
     const selectedModes = [
         Boolean(options.all),
         limit !== undefined,
@@ -13444,19 +13990,6 @@ options) {
         ...(hasRandomize ? { randomize_daily_caps: options.randomizeCaps } : {}),
     };
 }
-function readPositiveInt(value) {
-    const trimmed = value?.trim();
-    if (!trimmed)
-        return undefined;
-    const parsed = Number(trimmed);
-    if (!Number.isInteger(parsed) || parsed < 1) {
-        throw new OxygenError("invalid_number", "Expected a positive integer.", {
-            details: { value },
-            exitCode: 1,
-        });
-    }
-    return parsed;
-}
 function readPositiveNumber(value) {
     const trimmed = value?.trim();
     if (!trimmed)
@@ -13527,6 +14060,19 @@ function readSequenceSettings(options) {
     const espMatching = readOption(options.espMatching);
     if (espMatching)
         settings.esp_matching = espMatching;
+    const senderFailover = readOption(options.senderFailover);
+    if (senderFailover)
+        settings.sender_failover = senderFailover;
+    // email_min_gap_minutes accepts 0 ("no extra humanization gap"), which
+    // readPositiveInt rejects (it requires >= 1); treat a literal 0 as valid and
+    // defer any other value to readPositiveInt's positive-integer validation. The
+    // server enforces the 0-720 range (validateSequenceSettings).
+    const emailMinGapRaw = readOption(options.emailMinGapMinutes);
+    if (emailMinGapRaw !== null) {
+        const emailMinGap = Number(emailMinGapRaw) === 0 ? 0 : readPositiveInt(emailMinGapRaw);
+        if (emailMinGap !== undefined)
+            settings.email_min_gap_minutes = emailMinGap;
+    }
     return Object.keys(settings).length > 0 ? settings : undefined;
 }
 function muteTokenEcho() {