@oxygen-agent/cli 1.615.0 → 1.618.2

package/README.md

@@ -34,4 +34,4 @@ oxygen update
 
 For product documentation, visit https://oxygen-agent.com/docs. For support, visit https://oxygen-agent.com.
 
-Version: 1.615.0
+Version: 1.618.2

package/dist/index.js

@@ -28,6 +28,8 @@ import { doctorAgentSkills, getAgentSkill, installAgentSkills, listAgentSkills,
 import { resolveCliBinaryName } from "./runtime.js";
 import { updateCli } from "./update.js";
 import { isRecord, readErrorMessage, readOption } from "./util.js";
+const AGENT_MODEL_POLICY_HELP = "Model policy JSON: level low (Fast), medium (Balanced, default), or high (Max); credential_mode managed or organization_byok.";
+const AGENT_TOOL_POLICY_HELP = "Tool policy JSON. Effects: read, internal_write, paid, external_write. Ask-before-changes preset: {\"mode\":\"scoped\",\"rules\":[{\"decision\":\"allow\",\"effect\":\"read\"},{\"decision\":\"ask\",\"effect\":\"internal_write\"},{\"decision\":\"ask\",\"effect\":\"paid\"},{\"decision\":\"ask\",\"effect\":\"external_write\"}]}. Full mode requires --confirm-full-access.";
 /**
  * Build the registry patch body. An omitted field keeps its stored value; an
  * explicit null clears it — so a `--clear-*` flag must send null, and a flag the
@@ -555,6 +557,97 @@ function writeBulkWorkflowResults(data, okVerb) {
         process.stdout.write(`${counts.join(", ")}\n`);
     writeWorkflowActionTail(record);
 }
+const WORKSPACE_EVENTS_HUMAN_LIMIT = 20;
+function workspaceEventFilterText(event) {
+    const filters = Array.isArray(event.filters) ? event.filters : [];
+    if (filters.length === 0)
+        return "all payloads";
+    return filters
+        .filter(isRecord)
+        .map((filter) => {
+        const path = typeof filter.path === "string" ? filter.path : "?";
+        const op = typeof filter.op === "string" ? filter.op : "?";
+        return filter.value === undefined ? `${path} ${op}` : `${path} ${op} ${String(filter.value)}`;
+    })
+        .join(" · ");
+}
+function formatWorkspaceEventsList(data) {
+    const events = Array.isArray(data.events) ? data.events.filter(isRecord) : [];
+    const total = typeof data.total === "number" ? data.total : events.length;
+    const availableTotal = typeof data.available_total === "number" ? data.available_total : total;
+    const builtin = typeof data.builtin_count === "number"
+        ? data.builtin_count
+        : events.filter((event) => event.kind === "builtin").length;
+    const integrations = typeof data.integration_count === "number"
+        ? data.integration_count
+        : events.filter((event) => event.kind === "integration").length;
+    const existing = typeof data.existing_count === "number"
+        ? data.existing_count
+        : events.filter((event) => event.kind === "existing").length;
+    const query = isRecord(data.query) ? data.query : {};
+    const queryParts = ["search", "source", "kind"].flatMap((key) => typeof query[key] === "string" ? [`${key}=${query[key]}`] : []);
+    const lines = [
+        total === availableTotal
+            ? `${total} workspace event${total === 1 ? "" : "s"} available`
+            : `${total} of ${availableTotal} workspace events matched`,
+        `${builtin} curated preset${builtin === 1 ? "" : "s"} · ${integrations} connected · ${existing} existing`,
+    ];
+    if (queryParts.length > 0)
+        lines.push(`Filters: ${queryParts.join(" · ")}`);
+    lines.push("");
+    if (events.length === 0) {
+        lines.push("No workspace events matched. Try a broader --search, or remove --source/--kind.");
+    }
+    else {
+        for (const event of events.slice(0, WORKSPACE_EVENTS_HUMAN_LIMIT)) {
+            const label = typeof event.label === "string"
+                ? event.label
+                : typeof event.event === "string" ? event.event : "Workspace event";
+            const kind = typeof event.kind === "string" ? event.kind : "event";
+            lines.push(`- ${label} [${kind}]`);
+            if (typeof event.catalogId === "string")
+                lines.push(`  catalog: ${event.catalogId}`);
+            const source = typeof event.source === "string" ? event.source : "?";
+            const eventName = typeof event.event === "string" ? event.event : "?";
+            lines.push(`  trigger: ${source}.${eventName} · ${workspaceEventFilterText(event)}`);
+            if (typeof event.description === "string")
+                lines.push(`  ${event.description}`);
+        }
+    }
+    if (events.length > WORKSPACE_EVENTS_HUMAN_LIMIT) {
+        lines.push("", `Showing ${WORKSPACE_EVENTS_HUMAN_LIMIT} of ${events.length}; narrow with --search, --source, or --kind. Use --json for every match.`);
+    }
+    lines.push("", "Inspect one: oxygen workflows events get <catalog-id>");
+    if (typeof data.web_url === "string")
+        lines.push(data.web_url);
+    return `${lines.join("\n")}\n`;
+}
+function formatWorkspaceEventDetail(data) {
+    const event = isRecord(data.event) ? data.event : null;
+    if (!event)
+        return `${JSON.stringify(data, null, 2)}\n`;
+    const label = typeof event.label === "string" ? event.label : String(event.event ?? "Workspace event");
+    const lines = [label];
+    if (typeof event.catalogId === "string")
+        lines.push(`Catalog: ${event.catalogId}`);
+    if (typeof event.group === "string")
+        lines.push(`Group: ${event.group}`);
+    if (typeof event.kind === "string")
+        lines.push(`Kind: ${event.kind}`);
+    if (typeof event.description === "string")
+        lines.push(`When it fires: ${event.description}`);
+    if (isRecord(data.trigger)) {
+        lines.push("", "Trigger:", ...JSON.stringify(data.trigger, null, 2).split("\n").map((line) => `  ${line}`));
+    }
+    const payloadFields = Array.isArray(event.payloadFields)
+        ? event.payloadFields.filter((field) => typeof field === "string")
+        : [];
+    if (payloadFields.length > 0)
+        lines.push("", `Payload fields: ${payloadFields.join(", ")}`);
+    if (typeof data.web_url === "string")
+        lines.push("", data.web_url);
+    return `${lines.join("\n")}\n`;
+}
 // Paid live runs and ambiguous external-effect retries are refused server-side with typed safety-gate errors
 // (max_credits_required, approval_required, spend_cap_required,
 // spend_cap_too_low). Surface each as a one-line stderr hint with the concrete
@@ -8154,7 +8247,7 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
     // `oxygen knowledge agent`, which configures the AI Knowledge Agent itself.)
     program
         .command("agent")
-        .description("Agents: the programmable Workspace Agent plus built-in specialist agents. Publish versioned instructions and policies, start durable runs, trigger them by cron/event/webhook, inspect every event, and control approvals. Web: /agents.")
+        .description("Agents: the programmable Workspace Agent, custom Agents, and built-in specialists. Publish versioned instructions and policies, start durable chats/runs, inspect every event, and control approvals. Web: /agents.")
         .addCommand(new Command("list")
         .description("List the Workspace Agent and built-in specialists with state and recent run history.")
         .option("--json", "Print a JSON envelope.")
@@ -8204,8 +8297,8 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         .description("Publish an immutable version (reconfigure) for a runtime agent: the Workspace Agent or a custom agent.")
         .argument("<slug>", "workspace, or a custom agent slug (from `oxygen agent create`).")
         .requiredOption("--instructions <text>", "Workspace Agent instructions for this version.")
-        .option("--model-policy-json <json>", "Model policy JSON. Defaults to managed OpenRouter medium.")
-        .option("--tool-policy-json <json>", "Tool policy JSON. Omit restrictions for full eligible catalog access.")
+        .option("--model-policy-json <json>", AGENT_MODEL_POLICY_HELP)
+        .option("--tool-policy-json <json>", AGENT_TOOL_POLICY_HELP)
         .option("--context-policy-json <json>", "Context policy JSON: on_demand or prefetch, optional resolve_args and file_ids.")
         .option("--skills <csv>", "Comma-separated product skill slugs snapshotted into this immutable version.")
         .option("--sandbox-policy-json <json>", "Sandbox policy JSON.")
@@ -8228,13 +8321,13 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         }));
     }))
         .addCommand(new Command("create")
-        .description("Create a custom agent and publish its first immutable version. Schedule it with `oxygen agent trigger create`.")
+        .description("Create a custom Agent and publish its first immutable version. This internal configuration write starts no chat/run and spends no credits.")
         .argument("<slug>", "User-minted agent slug: a lowercase letter then letters, digits, or hyphens (2-49 chars).")
         .requiredOption("--name <name>", "Display name for the agent.")
         .requiredOption("--instructions <text>", "Durable standing instructions for the first immutable version.")
         .option("--description <text>", "Optional one-line description of the agent's job.")
-        .option("--model-policy-json <json>", "Model policy JSON. Defaults to managed OpenRouter medium.")
-        .option("--tool-policy-json <json>", "Tool policy JSON. Omit restrictions for full eligible catalog access.")
+        .option("--model-policy-json <json>", AGENT_MODEL_POLICY_HELP)
+        .option("--tool-policy-json <json>", AGENT_TOOL_POLICY_HELP)
         .option("--context-policy-json <json>", "Context policy JSON: on_demand or prefetch, optional resolve_args and file_ids.")
         .option("--skills <csv>", "Comma-separated product skill slugs snapshotted into this immutable version.")
         .option("--sandbox-policy-json <json>", "Sandbox policy JSON.")
@@ -8273,8 +8366,8 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         await handleAsyncAction("agent delete", options, () => requestOxygen(`/api/cli/agent/${encodeURIComponent(slug)}`, { method: "DELETE" }));
     }))
         .addCommand(new Command("run")
-        .description("Start a durable Workspace Agent run on the Fly worker.")
-        .argument("<slug>", "Currently: workspace.")
+        .description("Start a durable chat/run for the Workspace Agent or a custom Agent on the Fly worker.")
+        .argument("<slug>", "workspace, or a custom Agent slug from `oxygen agent custom`.")
         .option("--goal <text>", "Natural-language goal.")
         .option("--input-json <json>", "Structured run input instead of --goal.")
         .option("--idempotency-key <key>", "Deduplicate retries of the same source event.")
@@ -8305,8 +8398,8 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         });
     }))
         .addCommand(new Command("run-get")
-        .description("Inspect one Workspace Agent run and its append-only event ledger.")
-        .argument("<slug>", "Currently: workspace.")
+        .description("Inspect one Workspace or custom Agent run and its append-only event ledger.")
+        .argument("<slug>", "workspace, or a custom Agent slug from `oxygen agent custom`.")
         .argument("<run-id>", "Agent run id.")
         .option("--after-seq <n>", "Return events after this sequence number.")
         .option("--json", "Print a JSON envelope.")
@@ -8320,16 +8413,16 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         });
     }))
         .addCommand(new Command("cancel")
-        .description("Request cancellation of an active Workspace Agent run.")
-        .argument("<slug>", "Currently: workspace.")
+        .description("Request cancellation of an active Workspace or custom Agent run.")
+        .argument("<slug>", "workspace, or a custom Agent slug from `oxygen agent custom`.")
         .argument("<run-id>", "Agent run id.")
         .option("--json", "Print a JSON envelope.")
         .action(async (slug, runId, options) => {
         await handleAsyncAction("agent run cancel", options, () => requestOxygen(`/api/cli/agent/${encodeURIComponent(slug)}/runs/${encodeURIComponent(runId)}/cancel`, { method: "POST" }));
     }))
         .addCommand(new Command("approval-decide")
-        .description("Approve or reject one pending Workspace Agent tool call, then resume its durable run.")
-        .argument("<slug>", "Currently: workspace.")
+        .description("Approve or reject one pending Workspace or custom Agent tool call, then resume its durable run.")
+        .argument("<slug>", "workspace, or a custom Agent slug from `oxygen agent custom`.")
         .argument("<run-id>", "Agent run id.")
         .argument("<approval-id>", "Approval id from the run event ledger.")
         .requiredOption("--decision <approved|rejected>", "Decision.")
@@ -9072,11 +9165,11 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
     }));
     program
         .command("integrations")
-        .description("Integration connection and event trigger commands. Hypertide mailbox exports use `mailboxes import --from hypertide`, not this group.")
+        .description("Integration connections and raw provider-webhook subscriptions. Trigger-ready workspace events live under `workflows events list`. Hypertide mailbox exports use `mailboxes import --from hypertide`, not this group.")
         .addCommand(new Command("events")
-        .description("Configure provider events that can trigger workflows.")
+        .description("Inspect raw provider event definitions and manage subscriptions that feed workflows; use `workflows events list` for the trigger-ready workspace catalog.")
         .addCommand(new Command("list")
-        .description("List supported provider events and this org's enabled subscriptions.")
+        .description("List raw provider event definitions and this org's enabled subscriptions. To choose a workflow trigger, use `oxygen workflows events list`.")
         .option("--source <source>", "Filter by event source, such as hubspot or composio.gmail.")
         .option("--event <event>", "Filter by event type, such as contact.created.")
         .option("--toolkit <id>", "Filter by toolkit / integration id, such as gmail.")
@@ -13585,6 +13678,74 @@ Run completion:
     })))
         .addCommand(new Command("events")
         .description("Workflow event trigger utilities.")
+        .addCommand(new Command("list")
+        .description("Search and filter every app-native and connected event this workspace can use as a workflow trigger.")
+        .option("--search <text>", "Match labels, catalog ids, descriptions, endpoints, filters, or payload fields.")
+        .option("--source <source>", "Match one event source exactly, such as sequencer or crm.")
+        .option("--kind <kind>", "Match builtin, integration, or existing events.")
+        .option("--json", "Print a JSON envelope.")
+        .addHelpText("after", `
+Cost: 0 credits · read-only.
+
+Use each returned source, event, and filters array together. Curated presets can
+share one underlying source/event pair and differ only by filters.
+
+This is the trigger-ready workspace catalog. oxygen integrations events list
+instead shows raw provider webhook definitions and the subscriptions that feed
+connected entries into this catalog.
+
+Kinds:
+  builtin      Curated Oxygen preset with labels, filters, and payload fields.
+  integration  Event from an active workspace integration subscription.
+  existing     Raw source/event retained from an existing workflow trigger;
+               no preset filter is required.
+
+Example trigger:
+  {"type":"event","source":"crm","event":"activity_created",
+   "filters":[{"path":"activity_type","op":"eq","value":"meeting_booked"}]}
+
+Full trigger schema: oxygen workflows schema --subject trigger --json
+`)
+        .action(async (options) => {
+        try {
+            const query = new URLSearchParams();
+            const search = readOption(options.search);
+            const source = readOption(options.source);
+            const kind = readOption(options.kind);
+            if (search)
+                query.set("search", search);
+            if (source)
+                query.set("source", source);
+            if (kind)
+                query.set("kind", kind);
+            const suffix = query.toString() ? `?${query.toString()}` : "";
+            const data = await requestOxygen(`/api/cli/workflows/events/catalog${suffix}`);
+            if (options.json)
+                writeJson(success("workflows events list", data));
+            else
+                process.stdout.write(formatWorkspaceEventsList(data));
+        }
+        catch (error) {
+            emitCliFailure("workflows events list", error);
+        }
+    }))
+        .addCommand(new Command("get")
+        .description("Get one curated workspace-event preset and its ready-to-copy trigger object.")
+        .argument("<catalog_id>", "Exact catalog id returned by workflows events list.")
+        .option("--json", "Print a JSON envelope.")
+        .addHelpText("after", "\nCost: 0 credits · read-only. Integration/existing entries have no curated catalog id; filter them with workflows events list.\n")
+        .action(async (catalogId, options) => {
+        try {
+            const data = await requestOxygen(`/api/cli/workflows/events/catalog?catalog_id=${encodeURIComponent(catalogId)}`);
+            if (options.json)
+                writeJson(success("workflows events get", data));
+            else
+                process.stdout.write(formatWorkspaceEventDetail(data));
+        }
+        catch (error) {
+            emitCliFailure("workflows events get", error);
+        }
+    }))
         .addCommand(new Command("emit")
         .description("Emit a normalized workflow event and enqueue matching event-triggered workflows.")
         .requiredOption("--source <source>", "Event source, such as instantly, calendar, hubspot, or oxygen.notetaker.")

package/node_modules/@oxygen/shared/dist/capability-discovery.js

@@ -151,11 +151,16 @@ export const OXYGEN_CAPABILITY_ROUTES = [
         notFor: "Canonical CRM truth, message cadence, or an off-platform spreadsheet runtime.",
         execution: "Create and run work in hosted OXYGEN Tables; validate a small sample before bounded paid runs.",
         posture: "mixed",
-        gatewayTools: ["oxygen_tables_create", "oxygen_columns_add", "oxygen_enrich_column_preview"],
-        gatewayCommands: ["tables create", "columns add", "enrich-column preview"],
+        gatewayTools: ["oxygen_tables_create", "oxygen_columns_add", "oxygen_enrich_column_preview", "oxygen_tables_link_bulk"],
+        gatewayCommands: ["tables create", "columns add", "enrich-column preview", "tables link"],
         skills: ["oxygen-gtm", "oxygen-table-tidy", "oxygen-diagnostics", "oxygen-clay-migration"],
         endpointSections: ["action-columns", "callables", "columns", "company-enrichment", "enrich-column", "enrichment", "projects", "table-action-runs", "table-ingestion-runs", "tables"],
-        intentTerms: ["table", "rows", "column", "columns", "dataset", "csv", "import", "enrich", "enrichment", "waterfall", "score", "formula", "ai column", "lookup"],
+        // "link"/"join"/"connect"/"relate" route here for `tables link`. Added after a
+        // blind user eval asked for exactly "link two tables" and was routed to
+        // `tables create` / `columns add` / `enrich-column preview` — none of which
+        // do it. The agent only found the right command by grepping the raw 25k-line
+        // command manifest, which is not a discovery path a customer has.
+        intentTerms: ["table", "rows", "column", "columns", "dataset", "csv", "import", "enrich", "enrichment", "waterfall", "score", "formula", "ai column", "lookup", "link", "link tables", "join", "connect", "relate", "relationship"],
     },
     {
         id: "messages",

package/node_modules/@oxygen/shared/dist/crm-activity-events.d.ts

@@ -0,0 +1,127 @@
+/**
+ * Closed CRM timeline vocabulary exposed to workspace event triggers.
+ *
+ * The tenant activity writer imports this list as its validation allowlist, and
+ * the workflow event catalog imports the same definitions for its presets. That
+ * makes it impossible to advertise a CRM activity kind the write path rejects.
+ */
+export declare const CRM_ACTIVITY_CREATED_EVENT = "activity_created";
+export declare const CRM_ACTIVITY_EVENT_DEFINITIONS: readonly [{
+    readonly key: "note";
+    readonly label: "Note added";
+    readonly group: "Notes";
+}, {
+    readonly key: "email_sent";
+    readonly label: "Email sent";
+    readonly group: "Email";
+}, {
+    readonly key: "email_received";
+    readonly label: "Email received";
+    readonly group: "Email";
+}, {
+    readonly key: "email_reply";
+    readonly label: "Email reply";
+    readonly group: "Email";
+}, {
+    readonly key: "linkedin_message";
+    readonly label: "LinkedIn message";
+    readonly group: "LinkedIn";
+}, {
+    readonly key: "call";
+    readonly label: "Call logged";
+    readonly group: "Calls & meetings";
+}, {
+    readonly key: "meeting_booked";
+    readonly label: "Meeting booked";
+    readonly group: "Calls & meetings";
+}, {
+    readonly key: "meeting_completed";
+    readonly label: "Meeting completed";
+    readonly group: "Calls & meetings";
+}, {
+    readonly key: "no_show";
+    readonly label: "Meeting no-show";
+    readonly group: "Outcomes";
+}, {
+    readonly key: "stage_changed";
+    readonly label: "Stage changed";
+    readonly group: "CRM operations";
+}, {
+    readonly key: "task_created";
+    readonly label: "Task created";
+    readonly group: "CRM operations";
+}, {
+    readonly key: "task_completed";
+    readonly label: "Task completed";
+    readonly group: "CRM operations";
+}, {
+    readonly key: "record_merged";
+    readonly label: "Records merged";
+    readonly group: "CRM operations";
+}, {
+    readonly key: "enrichment_run";
+    readonly label: "Enrichment completed";
+    readonly group: "CRM operations";
+}, {
+    readonly key: "sync_pushed";
+    readonly label: "CRM sync pushed";
+    readonly group: "CRM operations";
+}, {
+    readonly key: "sync_pulled";
+    readonly label: "CRM sync pulled";
+    readonly group: "CRM operations";
+}, {
+    readonly key: "signup";
+    readonly label: "Signup";
+    readonly group: "Signals";
+}, {
+    readonly key: "website_visit";
+    readonly label: "Website visit";
+    readonly group: "Signals";
+}, {
+    readonly key: "profile_view";
+    readonly label: "Profile view";
+    readonly group: "Signals";
+}, {
+    readonly key: "post_reaction";
+    readonly label: "Post reaction";
+    readonly group: "Signals";
+}, {
+    readonly key: "new_follower";
+    readonly label: "New follower";
+    readonly group: "Signals";
+}, {
+    readonly key: "connection_sent";
+    readonly label: "Connection request sent";
+    readonly group: "LinkedIn";
+}, {
+    readonly key: "connection_accepted";
+    readonly label: "Connection accepted";
+    readonly group: "LinkedIn";
+}, {
+    readonly key: "sequence_enrolled";
+    readonly label: "Sequence enrolled";
+    readonly group: "Sequences";
+}, {
+    readonly key: "sequence_stopped";
+    readonly label: "Sequence stopped";
+    readonly group: "Sequences";
+}, {
+    readonly key: "email_bounced";
+    readonly label: "Email bounced";
+    readonly group: "Outcomes";
+}, {
+    readonly key: "unsubscribed";
+    readonly label: "Unsubscribed";
+    readonly group: "Outcomes";
+}, {
+    readonly key: "spam_complaint";
+    readonly label: "Spam complaint";
+    readonly group: "Outcomes";
+}, {
+    readonly key: "whatsapp_message";
+    readonly label: "WhatsApp message";
+    readonly group: "WhatsApp";
+}];
+export type CrmActivityType = (typeof CRM_ACTIVITY_EVENT_DEFINITIONS)[number]["key"];
+export declare const CRM_ACTIVITY_TYPES: readonly CrmActivityType[];

package/node_modules/@oxygen/shared/dist/crm-activity-events.js

@@ -0,0 +1,40 @@
+/**
+ * Closed CRM timeline vocabulary exposed to workspace event triggers.
+ *
+ * The tenant activity writer imports this list as its validation allowlist, and
+ * the workflow event catalog imports the same definitions for its presets. That
+ * makes it impossible to advertise a CRM activity kind the write path rejects.
+ */
+export const CRM_ACTIVITY_CREATED_EVENT = "activity_created";
+export const CRM_ACTIVITY_EVENT_DEFINITIONS = [
+    { key: "note", label: "Note added", group: "Notes" },
+    { key: "email_sent", label: "Email sent", group: "Email" },
+    { key: "email_received", label: "Email received", group: "Email" },
+    { key: "email_reply", label: "Email reply", group: "Email" },
+    { key: "linkedin_message", label: "LinkedIn message", group: "LinkedIn" },
+    { key: "call", label: "Call logged", group: "Calls & meetings" },
+    { key: "meeting_booked", label: "Meeting booked", group: "Calls & meetings" },
+    { key: "meeting_completed", label: "Meeting completed", group: "Calls & meetings" },
+    { key: "no_show", label: "Meeting no-show", group: "Outcomes" },
+    { key: "stage_changed", label: "Stage changed", group: "CRM operations" },
+    { key: "task_created", label: "Task created", group: "CRM operations" },
+    { key: "task_completed", label: "Task completed", group: "CRM operations" },
+    { key: "record_merged", label: "Records merged", group: "CRM operations" },
+    { key: "enrichment_run", label: "Enrichment completed", group: "CRM operations" },
+    { key: "sync_pushed", label: "CRM sync pushed", group: "CRM operations" },
+    { key: "sync_pulled", label: "CRM sync pulled", group: "CRM operations" },
+    { key: "signup", label: "Signup", group: "Signals" },
+    { key: "website_visit", label: "Website visit", group: "Signals" },
+    { key: "profile_view", label: "Profile view", group: "Signals" },
+    { key: "post_reaction", label: "Post reaction", group: "Signals" },
+    { key: "new_follower", label: "New follower", group: "Signals" },
+    { key: "connection_sent", label: "Connection request sent", group: "LinkedIn" },
+    { key: "connection_accepted", label: "Connection accepted", group: "LinkedIn" },
+    { key: "sequence_enrolled", label: "Sequence enrolled", group: "Sequences" },
+    { key: "sequence_stopped", label: "Sequence stopped", group: "Sequences" },
+    { key: "email_bounced", label: "Email bounced", group: "Outcomes" },
+    { key: "unsubscribed", label: "Unsubscribed", group: "Outcomes" },
+    { key: "spam_complaint", label: "Spam complaint", group: "Outcomes" },
+    { key: "whatsapp_message", label: "WhatsApp message", group: "WhatsApp" },
+];
+export const CRM_ACTIVITY_TYPES = CRM_ACTIVITY_EVENT_DEFINITIONS.map((definition) => definition.key);

package/node_modules/@oxygen/shared/dist/crm-reply-events.d.ts

@@ -18,6 +18,49 @@ export declare const CRM_WORKFLOW_EVENT_SOURCE = "crm";
  * consumes is a dead signal.
  */
 export declare const CRM_EMAIL_REPLY_CLASSIFIED_EVENT = "email_reply_classified";
+/** App-native CRM events that can start ordinary workspace workflows. */
+export declare const CRM_SIGNUP_EVENT = "signup";
+export declare const CRM_WEBSITE_VISIT_EVENT = "website_visit";
+export declare const CRM_PROFILE_VIEW_EVENT = "profile_view";
+export declare const CRM_POST_ENGAGER_EVENT = "post_engager";
+export declare const CRM_NEW_FOLLOWER_EVENT = "new_follower";
+export declare const CRM_SIGNAL_WORKFLOW_EVENT_DEFINITIONS: readonly [{
+    readonly event: "email_reply_classified";
+    readonly label: "Reply classified";
+    readonly group: "Replies";
+    readonly description: "An inbound email, LinkedIn, or WhatsApp reply received a CRM classification.";
+    readonly payloadFields: readonly ["channel", "status", "email", "linkedin_url", "external_id", "conversation_id", "conversation_url", "counterpart_name", "message", "sequence_id", "enrollment_id", "primary_source"];
+}, {
+    readonly event: "signup";
+    readonly label: "Signup received";
+    readonly group: "Lifecycle";
+    readonly description: "A product or workspace signup was recorded for CRM routing.";
+    readonly payloadFields: readonly ["event_id", "occurred_at", "email", "first_name", "last_name", "company_domain", "company_name", "linkedin_url", "attribution", "channel", "provider"];
+}, {
+    readonly event: "website_visit";
+    readonly label: "Website visit received";
+    readonly group: "Signals";
+    readonly description: "A known visitor signal was recorded against the CRM.";
+    readonly payloadFields: readonly ["email", "linkedin_url", "first_name", "last_name", "company_domain", "company_name", "provider_event_id", "session_id", "page_url"];
+}, {
+    readonly event: "profile_view";
+    readonly label: "Profile view received";
+    readonly group: "Signals";
+    readonly description: "A profile-view signal was recorded against the CRM.";
+    readonly payloadFields: readonly ["email", "linkedin_url", "first_name", "last_name", "company_domain", "company_name", "provider_event_id"];
+}, {
+    readonly event: "post_engager";
+    readonly label: "Post engagement received";
+    readonly group: "Signals";
+    readonly description: "A post-reaction or comment signal was recorded against the CRM.";
+    readonly payloadFields: readonly ["email", "linkedin_url", "first_name", "last_name", "company_domain", "company_name", "provider_event_id", "post_url"];
+}, {
+    readonly event: "new_follower";
+    readonly label: "New follower received";
+    readonly group: "Signals";
+    readonly description: "A new-follower signal was recorded against the CRM.";
+    readonly payloadFields: readonly ["email", "linkedin_url", "first_name", "last_name", "company_domain", "company_name", "provider_event_id"];
+}];
 /**
  * Channel an inbound CRM signal arrived on. Selects which person identity the
  * standing lead-stage router resolves on (email → email, linkedin →

package/node_modules/@oxygen/shared/dist/crm-reply-events.js

@@ -18,6 +18,116 @@ export const CRM_WORKFLOW_EVENT_SOURCE = "crm";
  * consumes is a dead signal.
  */
 export const CRM_EMAIL_REPLY_CLASSIFIED_EVENT = "email_reply_classified";
+/** App-native CRM events that can start ordinary workspace workflows. */
+export const CRM_SIGNUP_EVENT = "signup";
+export const CRM_WEBSITE_VISIT_EVENT = "website_visit";
+export const CRM_PROFILE_VIEW_EVENT = "profile_view";
+export const CRM_POST_ENGAGER_EVENT = "post_engager";
+export const CRM_NEW_FOLLOWER_EVENT = "new_follower";
+export const CRM_SIGNAL_WORKFLOW_EVENT_DEFINITIONS = [
+    {
+        event: CRM_EMAIL_REPLY_CLASSIFIED_EVENT,
+        label: "Reply classified",
+        group: "Replies",
+        description: "An inbound email, LinkedIn, or WhatsApp reply received a CRM classification.",
+        payloadFields: [
+            "channel",
+            "status",
+            "email",
+            "linkedin_url",
+            "external_id",
+            "conversation_id",
+            "conversation_url",
+            "counterpart_name",
+            "message",
+            "sequence_id",
+            "enrollment_id",
+            "primary_source",
+        ],
+    },
+    {
+        event: CRM_SIGNUP_EVENT,
+        label: "Signup received",
+        group: "Lifecycle",
+        description: "A product or workspace signup was recorded for CRM routing.",
+        payloadFields: [
+            "event_id",
+            "occurred_at",
+            "email",
+            "first_name",
+            "last_name",
+            "company_domain",
+            "company_name",
+            "linkedin_url",
+            "attribution",
+            "channel",
+            "provider",
+        ],
+    },
+    {
+        event: CRM_WEBSITE_VISIT_EVENT,
+        label: "Website visit received",
+        group: "Signals",
+        description: "A known visitor signal was recorded against the CRM.",
+        payloadFields: [
+            "email",
+            "linkedin_url",
+            "first_name",
+            "last_name",
+            "company_domain",
+            "company_name",
+            "provider_event_id",
+            "session_id",
+            "page_url",
+        ],
+    },
+    {
+        event: CRM_PROFILE_VIEW_EVENT,
+        label: "Profile view received",
+        group: "Signals",
+        description: "A profile-view signal was recorded against the CRM.",
+        payloadFields: [
+            "email",
+            "linkedin_url",
+            "first_name",
+            "last_name",
+            "company_domain",
+            "company_name",
+            "provider_event_id",
+        ],
+    },
+    {
+        event: CRM_POST_ENGAGER_EVENT,
+        label: "Post engagement received",
+        group: "Signals",
+        description: "A post-reaction or comment signal was recorded against the CRM.",
+        payloadFields: [
+            "email",
+            "linkedin_url",
+            "first_name",
+            "last_name",
+            "company_domain",
+            "company_name",
+            "provider_event_id",
+            "post_url",
+        ],
+    },
+    {
+        event: CRM_NEW_FOLLOWER_EVENT,
+        label: "New follower received",
+        group: "Signals",
+        description: "A new-follower signal was recorded against the CRM.",
+        payloadFields: [
+            "email",
+            "linkedin_url",
+            "first_name",
+            "last_name",
+            "company_domain",
+            "company_name",
+            "provider_event_id",
+        ],
+    },
+];
 /**
  * Deterministic external event id for one conversation settling on one status.
  *

package/node_modules/@oxygen/shared/dist/index.d.ts

@@ -12,6 +12,7 @@ export * from "./cli-envelope.js";
 export * from "./cli-login-code.js";
 export * from "./cli-result.js";
 export * from "./crm-reply-events.js";
+export * from "./crm-activity-events.js";
 export * from "./column-types.js";
 export * from "./copilot-journeys.js";
 export * from "./credit-guidance.js";
@@ -54,6 +55,7 @@ export * from "./timing.js";
 export * from "./type-guards.js";
 export * from "./worker-failures-queue.js";
 export * from "./workflow-mcp-tools.js";
+export * from "./workspace-event-catalog.js";
 export * from "./workspace-agents.js";
 export declare const MAX_ROW_LOOP_WRITE_ROWS = 500;
 export type SemanticVersion = {

package/node_modules/@oxygen/shared/dist/index.js

@@ -12,6 +12,7 @@ export * from "./cli-envelope.js";
 export * from "./cli-login-code.js";
 export * from "./cli-result.js";
 export * from "./crm-reply-events.js";
+export * from "./crm-activity-events.js";
 export * from "./column-types.js";
 export * from "./copilot-journeys.js";
 export * from "./credit-guidance.js";
@@ -58,6 +59,7 @@ export * from "./timing.js";
 export * from "./type-guards.js";
 export * from "./worker-failures-queue.js";
 export * from "./workflow-mcp-tools.js";
+export * from "./workspace-event-catalog.js";
 export * from "./workspace-agents.js";
 // Maximum rows a single row-loop write (insert/upsert/preview) may process. The
 // row-loop engine issues one DB round-trip per row, so a 500-row write already

package/node_modules/@oxygen/shared/dist/sequence-crm-events.d.ts

@@ -287,5 +287,5 @@ export declare const SEQUENCE_HUBSPOT_EVENT_SYNC_TEMPLATE_ID = "sequencer-hubspo
 export declare const SEQUENCE_WORKFLOW_EVENT_SOURCE = "sequencer";
 export declare const SEQUENCE_CONTACT_ACTIVITY_EVENT = "contact_activity";
 export declare const SEQUENCE_HUBSPOT_LINKEDIN_IDENTITY_PROPERTY = "oxygen_linkedin_url";
-export declare const DEFAULT_SEQUENCE_HUBSPOT_EVENT_MAPPINGS: Readonly<Record<"linkedin_profile_visited" | "linkedin_connection_sent" | "linkedin_connection_accepted" | "linkedin_message_sent" | "linkedin_inmail_sent" | "linkedin_reply_received" | "linkedin_followed" | "linkedin_post_liked" | "linkedin_post_commented" | "linkedin_connection_withdrawn" | "email_sent" | "email_campaign_enrolled" | "email_campaign_moved" | "email_campaign_stopped" | "email_opened" | "email_clicked" | "email_reply_received" | "email_bounced" | "email_unsubscribed" | "email_spam_complaint" | "whatsapp_message_sent" | "whatsapp_reply_received" | "call_task_created" | "call_connected" | "call_no_answer" | "call_voicemail" | "meeting_booked" | "crm_task_created", string>>;
+export declare const DEFAULT_SEQUENCE_HUBSPOT_EVENT_MAPPINGS: Readonly<Record<"email_sent" | "meeting_booked" | "email_bounced" | "linkedin_profile_visited" | "linkedin_connection_sent" | "linkedin_connection_accepted" | "linkedin_message_sent" | "linkedin_inmail_sent" | "linkedin_reply_received" | "linkedin_followed" | "linkedin_post_liked" | "linkedin_post_commented" | "linkedin_connection_withdrawn" | "email_campaign_enrolled" | "email_campaign_moved" | "email_campaign_stopped" | "email_opened" | "email_clicked" | "email_reply_received" | "email_unsubscribed" | "email_spam_complaint" | "whatsapp_message_sent" | "whatsapp_reply_received" | "call_task_created" | "call_connected" | "call_no_answer" | "call_voicemail" | "crm_task_created", string>>;
 export declare function isSequenceCrmEventKey(value: unknown): value is SequenceCrmEventKey;

package/node_modules/@oxygen/shared/dist/version.d.ts

@@ -1,3 +1,3 @@
-export declare const OXYGEN_VERSION = "1.615.0";
+export declare const OXYGEN_VERSION = "1.618.2";
 export declare const OXYGEN_MINIMUM_CLI_VERSION = "1.181.0";
 export declare const MANAGED_INBOX_MINIMUM_CLI_VERSION = "1.326.2";

package/node_modules/@oxygen/shared/dist/version.js

@@ -1,4 +1,4 @@
-export const OXYGEN_VERSION = "1.615.0";
+export const OXYGEN_VERSION = "1.618.2";
 // The GLOBAL CLI compatibility floor: the oldest CLI allowed to call any
 // operational route. Raising it hard-rejects every older CLI from the entire
 // product, so it obeys one law, enforced by scripts/ci/cli-min-version-gate.mjs:

package/node_modules/@oxygen/shared/dist/workspace-agents.d.ts

@@ -30,14 +30,14 @@ export type WorkspaceAgentDescriptor = {
     deepLinkKind: WorkspaceAgentDeepLinkKind;
 };
 /**
- * A single run this specialist produced. Field names are aligned with the
+ * A single run a built-in or user-defined Agent produced. Field names align with the
  * observability run vocabulary so the cross-primitive runs console can consume
  * these without a parallel shape. Nulls are explicit (never omitted) so every
  * consumer reads the same keys regardless of specialist.
  */
 export type WorkspaceAgentRunItem = {
-    /** The specialist that produced this run. */
-    slug: WorkspaceAgentSlug;
+    /** The built-in or user-defined Agent that produced this run. */
+    slug: string;
     /** The run's stable id (draft id / session id / knowledge-log id). */
     id: string;
     /** The kind of artifact this run produced. */

package/node_modules/@oxygen/shared/dist/workspace-agents.js

@@ -6,11 +6,11 @@
 // behavior elsewhere in the product, surfaced under /agents and `oxygen agent`.
 // Agents are governed workspace workers: the runtime envelope (approval posture,
 // credit budgets, run observability) is platform-enforced, never agent-optional.
-// User-defined custom agents are ratified (ADR 0011) but arrive after the unified
-// Workspace Agent runtime — until then there is no custom create/delete verb,
-// and there are never placeholder rows: the roster lists only agents that are
-// actually implemented today. CRM-hygiene, deliverability, and any other roadmap
-// agent stay OUT until they ship — the no-placeholder-surface rule.
+// User-defined custom Agents use the same runtime but stay outside this built-in
+// descriptor roster: their tenant-owned definitions come from the custom Agent
+// API and their runs join the shared history dynamically. There are never
+// placeholder rows. CRM-hygiene, deliverability, and any other roadmap Agent stay
+// OUT until they ship — the no-placeholder-surface rule.
 //
 // This module is a dependency-free leaf (pure descriptors + types) so it can live
 // in @oxygen/shared without importing tenant-db: the actual per-agent wiring

package/node_modules/@oxygen/shared/dist/workspace-event-catalog.d.ts

@@ -0,0 +1,22 @@
+export type WorkspaceEventCatalogFilter = {
+    path: string;
+    op: "eq";
+    value: string;
+};
+export type WorkspaceEventCatalogEntry = {
+    /** Stable catalog identity; independent of the underlying source/event pair. */
+    id: string;
+    source: string;
+    event: string;
+    group: string;
+    label: string;
+    description: string;
+    filters?: readonly WorkspaceEventCatalogFilter[];
+    payloadFields: readonly string[];
+};
+export declare const WORKSPACE_EVENT_CATALOG_VERSION = 1;
+/**
+ * Every app-native workspace event that has a durable or explicitly callable
+ * producer. Integration-specific subscriptions are merged in at request time.
+ */
+export declare const WORKSPACE_EVENT_CATALOG: readonly WorkspaceEventCatalogEntry[];

package/node_modules/@oxygen/shared/dist/workspace-event-catalog.js

@@ -0,0 +1,144 @@
+import { CRM_ACTIVITY_CREATED_EVENT, CRM_ACTIVITY_EVENT_DEFINITIONS, } from "./crm-activity-events.js";
+import { CRM_SIGNAL_WORKFLOW_EVENT_DEFINITIONS, CRM_WORKFLOW_EVENT_SOURCE, } from "./crm-reply-events.js";
+import { SEQUENCE_CONTACT_ACTIVITY_EVENT, SEQUENCE_CRM_EVENT_DEFINITIONS, SEQUENCE_WORKFLOW_EVENT_SOURCE, } from "./sequence-crm-events.js";
+import { SEQUENCE_ENROLLMENT_TERMINAL_EVENT, SEQUENCE_TERMINAL_EVENT_SOURCE, SEQUENCE_TERMINAL_STATUSES, } from "./sequence-terminal-events.js";
+export const WORKSPACE_EVENT_CATALOG_VERSION = 1;
+const sequenceActivityFields = [
+    "event",
+    "occurred_at",
+    "sequence_id",
+    "enrollment_id",
+    "email",
+    "linkedin_url",
+    "lead_name",
+];
+const sequenceTerminalFields = [
+    "occurred_at",
+    "sequence_id",
+    "enrollment_id",
+    "status",
+    "reason",
+    "endpoint_id",
+    "endpoint_kind",
+    "step_id",
+    "branch_id",
+    "branch_arm",
+    "lead_name",
+    "email",
+    "linkedin_url",
+];
+const crmActivityFields = [
+    "activity_id",
+    "activity_type",
+    "occurred_at",
+    "channel",
+    "direction",
+    "summary",
+    "body",
+    "source_type",
+    "source_provider",
+    "provider_event_id",
+    "run_id",
+    "metadata",
+    "links",
+];
+function sequenceActivityDescription(key, label) {
+    if (key === "email_bounced") {
+        return "An outreach sequence enrollment reported an email bounce. Use the CRM timeline preset instead for any bounce activity logged on a CRM record.";
+    }
+    if (key === "meeting_booked") {
+        return "An outreach sequence enrollment reported a booked meeting. Use the CRM timeline preset instead for any meeting-booked activity logged on a CRM record.";
+    }
+    return `A sequence emitted the ${label.toLowerCase()} outcome.`;
+}
+function crmActivityDescription(key, label) {
+    if (key === "email_bounced") {
+        return "An email-bounce activity was added to a CRM record timeline, regardless of which producer logged it. Use the Sequencer preset for an outreach enrollment's own bounce outcome.";
+    }
+    if (key === "meeting_booked") {
+        return "A meeting-booked activity was added to a CRM record timeline, regardless of which producer logged it. Use the Sequencer preset for an outreach enrollment's own meeting outcome.";
+    }
+    return `A ${label.toLowerCase()} activity was added to a CRM timeline.`;
+}
+const sequenceActivityEntries = [
+    {
+        id: "sequencer.contact_activity.any",
+        source: SEQUENCE_WORKFLOW_EVENT_SOURCE,
+        event: SEQUENCE_CONTACT_ACTIVITY_EVENT,
+        group: "Sequencer · All activity",
+        label: "Any contact activity",
+        description: "Any durable contact activity emitted by any sequence in this workspace.",
+        payloadFields: sequenceActivityFields,
+    },
+    ...SEQUENCE_CRM_EVENT_DEFINITIONS.map((definition) => ({
+        id: `sequencer.contact_activity.${definition.key}`,
+        source: SEQUENCE_WORKFLOW_EVENT_SOURCE,
+        event: SEQUENCE_CONTACT_ACTIVITY_EVENT,
+        group: `Sequencer · ${definition.group}`,
+        label: definition.label,
+        description: sequenceActivityDescription(definition.key, definition.label),
+        filters: [{ path: "event", op: "eq", value: definition.key }],
+        payloadFields: sequenceActivityFields,
+    })),
+];
+const sequenceTerminalEntries = [
+    {
+        id: "sequencer.enrollment_terminal.any",
+        source: SEQUENCE_TERMINAL_EVENT_SOURCE,
+        event: SEQUENCE_ENROLLMENT_TERMINAL_EVENT,
+        group: "Sequencer · Journey status",
+        label: "Any terminal enrollment",
+        description: "Any sequence enrollment reached a terminal state or visible graph endpoint.",
+        payloadFields: sequenceTerminalFields,
+    },
+    ...SEQUENCE_TERMINAL_STATUSES.map((status) => ({
+        id: `sequencer.enrollment_terminal.${status}`,
+        source: SEQUENCE_TERMINAL_EVENT_SOURCE,
+        event: SEQUENCE_ENROLLMENT_TERMINAL_EVENT,
+        group: "Sequencer · Journey status",
+        label: `Enrollment ${status}`,
+        description: `A sequence enrollment became ${status}.`,
+        filters: [{ path: "status", op: "eq", value: status }],
+        payloadFields: sequenceTerminalFields,
+    })),
+];
+const crmActivityEntries = [
+    {
+        id: "crm.activity_created.any",
+        source: CRM_WORKFLOW_EVENT_SOURCE,
+        event: CRM_ACTIVITY_CREATED_EVENT,
+        group: "CRM · All timeline activity",
+        label: "Any CRM activity",
+        description: "Any non-workflow-authored activity was added to a CRM record timeline.",
+        payloadFields: crmActivityFields,
+    },
+    ...CRM_ACTIVITY_EVENT_DEFINITIONS.map((definition) => ({
+        id: `crm.activity_created.${definition.key}`,
+        source: CRM_WORKFLOW_EVENT_SOURCE,
+        event: CRM_ACTIVITY_CREATED_EVENT,
+        group: `CRM · ${definition.group}`,
+        label: definition.label,
+        description: crmActivityDescription(definition.key, definition.label),
+        filters: [{ path: "activity_type", op: "eq", value: definition.key }],
+        payloadFields: crmActivityFields,
+    })),
+];
+const crmSignalEntries = CRM_SIGNAL_WORKFLOW_EVENT_DEFINITIONS.map((definition) => ({
+    id: `crm.${definition.event}`,
+    source: CRM_WORKFLOW_EVENT_SOURCE,
+    event: definition.event,
+    group: `CRM · ${definition.group}`,
+    label: definition.label,
+    description: definition.description,
+    payloadFields: definition.payloadFields,
+}));
+/**
+ * Every app-native workspace event that has a durable or explicitly callable
+ * producer. Integration-specific subscriptions are merged in at request time.
+ */
+export const WORKSPACE_EVENT_CATALOG = [
+    ...sequenceActivityEntries,
+    ...sequenceTerminalEntries,
+    ...crmActivityEntries,
+    ...crmSignalEntries,
+];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oxygen-agent/cli",
-  "version": "1.615.0",
+  "version": "1.618.2",
   "private": false,
   "license": "UNLICENSED",
   "type": "module",