@oxygen-agent/cli 1.618.4 → 1.627.1

package/README.md

@@ -34,4 +34,4 @@ oxygen update
 
 For product documentation, visit https://oxygen-agent.com/docs. For support, visit https://oxygen-agent.com.
 
-Version: 1.618.4
+Version: 1.627.1

package/dist/index.js

@@ -187,7 +187,7 @@ function writeTableLinkPreview(table, data, options) {
     }
     // Approved run: it is queued, so print how to watch it, not the plan again.
     // The two follow-ups take DIFFERENT ids and that is not cosmetic — undo
-    // archives by record_edges.run_id, which is the parent workspace run.
+    // archives by edge run_id, which is the parent workspace run.
     const watchId = data.action_run_id ?? data.workspace_run_id;
     const undoId = data.workspace_run_id;
     if (!data.dry_run && watchId) {
@@ -252,7 +252,7 @@ function writeTableLinkPreview(table, data, options) {
         out();
     }
     if ((chosen.unmatchedRows ?? 0) > 0 && !options.createMissing) {
-        out(`  Add --create-missing to create the missing records too (free).`);
+        out(`  Add --create-missing to create the missing target rows too (free).`);
         out();
     }
     const alternatives = data.alternatives ?? [];
@@ -264,10 +264,8 @@ function writeTableLinkPreview(table, data, options) {
             out();
         }
     }
-    // Registering a plain table as a CRM object is irreversible today, so it is
-    // never a silent side effect of approving.
-    if (data.registersEntity) {
-        out(`  This will also register these tables as CRM objects so they can hold links.`);
+    if (data.relationStorage === "tables") {
+        out(`  Stored in Tables — neither table is registered as a CRM object.`);
         out();
     }
     out("  Free — 0 credits. Nothing has been written.");
@@ -1460,6 +1458,18 @@ function buildCrmObjectCreateBody(options) {
         ...(readOption(options.project) ? { project: readOption(options.project) } : {}),
     };
 }
+function buildCrmObjectDeleteBody(options) {
+    const mode = resolveLiveDryRunMode(options);
+    if (mode === "live" && options.confirm !== true) {
+        throw new OxygenError("confirm_required", "crm objects delete --live requires --confirm after inspecting the dry-run impact.", { exitCode: 1 });
+    }
+    return {
+        mode,
+        ...(options.confirm === true ? { confirm: true } : {}),
+        ...(options.keepTable === true ? { keep_table: true } : {}),
+        ...(readOption(options.purgeAfter) ? { purge_after_days: options.purgeAfter } : {}),
+    };
+}
 function buildCrmObjectAddAttrBody(options) {
     const column = readOption(options.columnJson)
         ? parseJsonObject(options.columnJson)
@@ -3163,7 +3173,7 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
     }));
     program
         .command("projects")
-        .description("Tenant project commands.")
+        .description("Manage table projects. Inspect contents with `oxygen tables list --project <project>`.")
         .addCommand(new Command("list")
         .description("List table projects in the current tenant database.")
         .option("--json", "Print a JSON envelope.")
@@ -3179,6 +3189,47 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
             method: "POST",
             body: { name },
         }));
+    }))
+        .addCommand(new Command("rename")
+        .description("Rename a table project's display name and slug without changing its tables.")
+        .argument("<project>", "Project slug or id.")
+        .requiredOption("--name <name>", "New display name for the project.")
+        .option("--json", "Print a JSON envelope.")
+        .action(async (project, options) => {
+        await handleAsyncAction("projects rename", options, () => {
+            const name = readOption(options.name);
+            if (!name) {
+                throw new OxygenError("invalid_project_name", "--name is required.", {
+                    exitCode: 1,
+                });
+            }
+            return requestOxygen(`/api/cli/projects/${encodeURIComponent(project)}`, {
+                method: "PATCH",
+                body: { name },
+            });
+        });
+    }))
+        .addCommand(new Command("delete")
+        .description("Delete an empty non-General table project. Defaults to dry-run; --live requires --confirm.")
+        .argument("<project>", "Project slug or id.")
+        .option("--dry-run", "Preview whether the project can be deleted without writing. Default.")
+        .option("--live", "Delete the project after inspecting the dry-run preview. Requires --confirm.")
+        .option("--confirm", "Confirm the live delete.")
+        .option("--json", "Print a JSON envelope.")
+        .action(async (project, options) => {
+        await handleAsyncAction("projects delete", options, () => {
+            const mode = resolveLiveDryRunMode(options);
+            if (mode === "live" && options.confirm !== true) {
+                throw new OxygenError("confirm_required", "projects delete --live requires --confirm after inspecting the dry-run preview.", { exitCode: 1 });
+            }
+            return requestOxygen(`/api/cli/projects/${encodeURIComponent(project)}`, {
+                method: "DELETE",
+                body: {
+                    mode,
+                    ...(mode === "live" ? { confirm: true } : {}),
+                },
+            });
+        });
     }))
         .addCommand(new Command("tag")
         .description("Replace a project's workspace tags (whole set; `--tags \"\"` clears). See `oxygen tags list` for the vocabulary.")
@@ -3800,8 +3851,8 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         .description("Create or repair a custom CRM object. Defaults to dry-run.")
         .requiredOption("--slug <slug>", "Object slug (snake_case), such as projects or tasks.")
         .requiredOption("--display-name <name>", "Human-readable object name, such as Projects.")
-        .requiredOption("--columns-json <json>", "JSON array of column definitions {key,label,dataType,semanticType,...}.")
-        .option("--identities-json <json>", "JSON array of identity definitions {columnKey,normalization,isPrimary?}.")
+        .requiredOption("--columns-json <json>", 'JSON array. Every column requires key,label,data_type,semantic_type; camelCase aliases are accepted. Example: [{"key":"name","label":"Name","data_type":"text","semantic_type":"text","is_record_label":true}].')
+        .option("--identities-json <json>", "JSON array. Every identity requires column_key and normalization; camelCase columnKey is accepted.")
         .option("--label-column <key>", "Column key to use as the record label. Defaults to the isRecordLabel column or the first column.")
         .option("--singular-name <name>", "Singular display name, such as Project.")
         .option("--plural-name <name>", "Plural display name, such as Projects.")
@@ -3819,11 +3870,28 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
             method: "POST",
             body: buildCrmObjectCreateBody(options),
         }));
+    }))
+        .addCommand(new Command("delete")
+        .description("Delete a CUSTOM CRM object: removes the object and schedules its backing table for deletion (restorable for 14 days). Standard objects (companies, people, deals) are permanent and refused. Defaults to dry-run; --live requires --confirm.")
+        .argument("<object>", "Custom CRM object slug, such as projects or tasks.")
+        .option("--keep-table", "Deregister the object but keep its table as an ordinary workspace table (no delete timer).")
+        .option("--purge-after <days>", "Days until the backing table's physical purge. Defaults to 14; restorable via `tables restore` until then.")
+        .option("--dry-run", "Preview the object, rows, relationships, and edges the delete would take. Default.")
+        .option("--live", "Apply the delete. Requires --confirm.")
+        .option("--confirm", "Confirm the live delete after inspecting the dry-run impact.")
+        .option("--json", "Print a JSON envelope.")
+        .action(async (object, options, command) => {
+        // See `objects create` above: optsWithGlobals() recovers --json,
+        // which the parent command otherwise swallows.
+        await handleAsyncAction("crm object delete", { json: Boolean(command.optsWithGlobals().json) }, () => requestOxygen(`/api/cli/crm/objects/${encodeURIComponent(object)}`, {
+            method: "DELETE",
+            body: buildCrmObjectDeleteBody(options),
+        }));
     }))
         .addCommand(new Command("add-attr")
         .description("Add one attribute to an existing custom CRM object, optionally as an identity. Defaults to dry-run.")
         .argument("<object>", "Custom CRM object slug, such as projects or tasks. Standard objects are managed by `crm setup`.")
-        .requiredOption("--column-json <json>", "JSON column definition {key,label,dataType,semanticType,...}.")
+        .requiredOption("--column-json <json>", "JSON column. Required: key,label,data_type,semantic_type; camelCase aliases are accepted.")
         .option("--as-identity-json <json>", "JSON identity definition {columnKey,normalization,isPrimary?} promoting the new column.")
         .option("--dry-run", "Preview the attribute plan without altering the table.")
         .option("--live", "Apply the attribute. Default is dry-run.")
@@ -4364,7 +4432,7 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         .addCommand(new Command("create")
         .description("Create a real Postgres-backed workspace table.")
         .argument("<name>", "Display name for the table.")
-        .requiredOption("--columns-json <json>", "JSON array of column definitions.")
+        .requiredOption("--columns-json <json>", 'JSON array of column definitions, e.g. [{"key":"name","label":"Name","dataType":"text"},{"key":"domain","label":"Domain","dataType":"text"}]. Inspect an existing shape with `oxygen tables describe <table>`.')
         .option("--project <project>", "Project id or slug. Defaults to General.")
         .option("--json", "Print a JSON envelope.")
         .action(async (name, options) => {
@@ -4396,7 +4464,7 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         .addCommand(new Command("insert")
         .description("Insert rows into a workspace table.")
         .argument("<table>", "Table id or slug.")
-        .requiredOption("--rows-json <json>", "JSON array of row objects keyed by column key.")
+        .requiredOption("--rows-json <json>", 'JSON array of row objects keyed by column key, e.g. [{"name":"Acme","domain":"acme.test"},{"name":"Globex","domain":"globex.test"}].')
         .option("--json", "Print a JSON envelope.")
         .action(async (table, options) => {
         await handleAsyncAction("tables insert", options, () => requestOxygen("/api/cli/tables/rows", {
@@ -4750,7 +4818,7 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         });
     }));
     tablesCommand.addCommand(new Command("relate")
-        .description("Relate two tables: define a relation column on the source that links rows to the target table. Works on ANY table — plain tables are registered under the hood automatically. Defaults to dry-run.")
+        .description("Relate two tables: define empty Tables-owned relation columns on the source and target. Then use `oxygen tables link` to populate row-to-row edges. Works on any workspace table; plain tables stay plain and are never registered as CRM objects. Defaults to dry-run.")
         .argument("<table>", "Source table id or slug.")
         .argument("<slug>", "Relation slug — also the relation column key on the source, such as client.")
         .requiredOption("--target-table <table>", "Target table id or slug. May also be a CRM object table (companies, people, deals).")
@@ -4779,14 +4847,14 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         }));
     }))
         .addCommand(new Command("link")
-        .description("Link two tables: Oxygen finds the column that joins them, works out the direction, shows you how many rows will match, and on approval links every row. Free. Previews by default. (Also links one row to one row — see --relation.)")
+        .description("Link two tables: Oxygen finds the column that joins them, works out the direction, shows you how many rows will match, and on approval links every row. Free. Previews by default; --approved queues a background run and records each row's outcome in a system link_status_<relation> column. Wait for that run with `oxygen table-runs wait <run_id>`. (Also links one row to one row — see --relation.)")
         .argument("<table>", "Table id or slug to link FROM.")
         .argument("[row_id]", "Row form only: the source row id to link. Omit for the whole-table form.")
         .option("--to <table>", "Table id or slug to link TO. May be a CRM object table (companies, people, deals).")
-        .option("--on <column>", "Match on this column instead of the one Oxygen picked. Accepts the column's name or key.")
-        .option("--approved", "Apply the link after inspecting the preview.")
-        .option("--create-missing", "Also create records for rows whose match does not exist yet. Free.")
-        .option("--max-concurrency <n>", "Maximum concurrent row items for the run. Defaults to 50.")
+        .option("--on <column>", "Pin one table's column by name or key. Oxygen must still find a compatible column on the other table: generic text needs a strongly similar label, while domains, emails, LinkedIn URLs, and external IDs pair by semantic role.")
+        .option("--approved", "Queue the bulk link after inspecting the preview; then wait with `oxygen table-runs wait <run_id>`.")
+        .option("--create-missing", "Also create target rows for unmatched source keys (CRM records when filling an existing CRM relationship). Free.")
+        .option("--max-concurrency <n>", "Maximum concurrent row items for the run. Defaults to 50; native --create-missing runs serialize target-row creation safely.")
         .option("--undo <run_id>", "Undo a previous link run, archiving only the links that run created.")
         .option("--relation <slug>", "Row form: relation slug defined on the source table, such as client.")
         .option("--target-row-id <row_id>", "Row form: target row id in the related table.")
@@ -9365,7 +9433,7 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         });
     }));
     program.addCommand(new Command("senders")
-        .description("Manage the org's connected LinkedIn sender accounts for Sequencer: list, connect, sync, inspect, disconnect, and tune rate limits.")
+        .description("Manage the org's connected LinkedIn sender accounts for Sequencer: list, connect, sync, get details, disconnect, and tune rate limits.")
         .addCommand(new Command("list")
         .description("List connected LinkedIn sender accounts with health status, rate limits, and today's usage.")
         .option("--status <status>", "Filter by sender status: active, paused, disconnected, restricted, or credentials_required.")
@@ -9390,17 +9458,19 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         await handleAsyncAction("senders checkpoints", options, () => requestOxygen("/api/cli/senders/checkpoints"));
     }))
         .addCommand(new Command("connect")
-        .description("Get a Unipile hosted-auth URL to connect a new LinkedIn account (or reconnect with --reconnect). New accounts require --country: the account owner's normal LinkedIn login country, not the target market. Use --count for bulk onboarding. Links are shareable and valid for 10 minutes.")
+        .description("Get a Unipile hosted-auth URL to connect a new LinkedIn account (or reconnect with --reconnect). New accounts require --country (the owner's normal LinkedIn login country) and default to syncing only conversations OXYGEN starts; use --inbox-scope all to opt into the full LinkedIn inbox. Use --count for bulk onboarding. Links are shareable and valid for 10 minutes.")
         .option("--reconnect <connection_id>", "Reconnect an existing connection instead of creating a new one. Accepts a connection id.")
         .option("--country <code>", "Required for new accounts: ISO 3166-1 alpha-2 code for the account owner's normal LinkedIn login country (for example DE or US).")
         .option("--sales-nav", "Request Classic + Sales Navigator access during Unipile hosted authentication.")
         .option("--count <n>", "Mint N hosted-auth links in one call for bulk onboarding (1-25, default 1). Every link uses the same --country; use separate calls for different login countries. Ignored when reconnecting.")
+        .option("--inbox-scope <scope>", "LinkedIn inbox privacy for new accounts: oxygen_initiated (default) or all. Reconnect preserves the existing account setting.")
         .option("--json", "Print a JSON envelope.")
         .action(async (options) => {
         await handleAsyncAction("senders connect", options, () => {
             const reconnect = readOption(options.reconnect);
             const country = readOption(options.country)?.toUpperCase();
             const count = readPositiveInt(options.count);
+            const inboxScope = readOption(options.inboxScope);
             return requestOxygen("/api/cli/senders/connect", {
                 method: "POST",
                 body: {
@@ -9408,10 +9478,31 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
                     ...(country ? { country } : {}),
                     ...(options.salesNav ? { sales_nav: true } : {}),
                     ...(count ? { count } : {}),
+                    ...(inboxScope ? { inbox_sync_scope: inboxScope } : {}),
                 },
             });
         });
     }))
+        .addCommand(new Command("inbox-scope")
+        .description("Inspect or change which LinkedIn conversations OXYGEN stores for one sender. Scope changes are internal and zero-credit: they do not sync LinkedIn or send a message.")
+        .addCommand(new Command("get")
+        .description("Show whether a sender syncs only OXYGEN-started conversations or its entire LinkedIn inbox.")
+        .argument("<id>", "Sender account id, connection id, or Unipile account id.")
+        .option("--json", "Print a JSON envelope.")
+        .action(async (id, options) => {
+        await handleAsyncAction("senders inbox-scope get", options, () => requestOxygen(`/api/cli/senders/${encodeURIComponent(id)}/inbox-scope`));
+    }))
+        .addCommand(new Command("set")
+        .description("Set LinkedIn inbox privacy. oxygen_initiated hides and stops ingesting unrelated chats; all opts into the full inbox. This internal, zero-credit change does not trigger a provider sync or send a message. Existing stored messages are not deleted.")
+        .argument("<id>", "Sender account id, connection id, or Unipile account id.")
+        .requiredOption("--scope <scope>", "oxygen_initiated or all.")
+        .option("--json", "Print a JSON envelope.")
+        .action(async (id, options) => {
+        await handleAsyncAction("senders inbox-scope set", options, () => requestOxygen(`/api/cli/senders/${encodeURIComponent(id)}/inbox-scope`, {
+            method: "PATCH",
+            body: { scope: options.scope },
+        }));
+    })))
         .addCommand(new Command("get")
         .description("Get one LinkedIn sender account with status, limits, daily-reset timezone, and usage. <id> accepts a sender account id, connection id, or Unipile account id.")
         .argument("<id>", "Sender account id, connection id, or Unipile account id.")
@@ -11001,7 +11092,7 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         });
     }))
         .addCommand(new Command("stats")
-        .description("Cross-channel campaign analytics: outbound/inbound totals, heuristic reply rate by channel + campaign, status breakdowns, response-time percentiles, top counterpart domains, and winning openers. Scope with --sequence-id, --channel, and a date range. Defaults to the last 30 days; pass --all-time for full history.")
+        .description("Unibox/Message-ledger analytics: outbound/inbound totals, heuristic reply rate by channel + campaign, status breakdowns, response-time percentiles, top counterpart domains, and winning openers. Messages with no sequence id remain outside byCampaign. For native Sequence sent/replied/bounced attribution by mailbox and sending domain, use `oxygen sequences analytics`. Scope with --sequence-id, --channel, and a date range. Defaults to the last 30 days; pass --all-time for full history.")
         .option("--sequence-id <ids>", "Comma-separated campaign (sequence) ids to scope to.")
         .option("--channel <channel>", "Channel: all (default), email, linkedin, or whatsapp.")
         .option("--since <iso>", "Only messages sent at or after this ISO timestamp. Defaults to 30 days ago.")
@@ -11167,7 +11258,7 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         });
     })))
         .addCommand(new Command("analytics")
-        .description("Show organization-level sequencer analytics plus per-sequence funnels. Also reports whether the reply → CRM automation is armed, with a link to the workflow.")
+        .description("Show organization-level sequencer analytics, per-sequence funnels, and native email attribution under analytics.emailAttribution: byMailbox, byDomain, and explicit unattributed facts. Provider-owned campaigns appear only after their telemetry is normalized into Oxygen's native Sequence ledgers. Also reports whether the reply → CRM automation is armed, with a link to the workflow.")
         .option("--range <range>", "Preset range: 7d, 14d, 28d, 30d, 90d, 180d, 365d, or all. Defaults to 14d. `all` starts at the oldest campaign in scope.")
         .option("--from <date>", "Custom start date (YYYY-MM-DD). Windows up to five years are accepted.")
         .option("--to <date>", "Custom end date (YYYY-MM-DD).")
@@ -11587,7 +11678,7 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         });
     }))
         .addCommand(new Command("events")
-        .description("Chronological activity feed for a sequence (like Instantly's Sending Activities): sends, failures, deferrals, opens, clicks, replies, bounces, unsubscribes, and positive reply-status transitions, newest first. Keyset-paginated via --before.")
+        .description("Chronological activity feed for a sequence (like Instantly's Sending Activities): sends, failures, deferrals, opens, clicks, replies, bounces, unsubscribes, and positive reply-status transitions, newest first. Email events include mailboxEmail and sendingDomain when durable evidence preserved them; missing identity remains null instead of being guessed. Keyset-paginated via --before.")
         .argument("<sequence>", "Sequence id or slug.")
         .option("--enrollment <id>", "Scope the feed to one enrollment id.")
         .option("--kind <list>", "Comma-separated event kinds to include (sent,failed,skipped,open,click,replied,bounced,unsubscribed,positive).")
@@ -11599,7 +11690,7 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         await handleSequenceEventsAction(sequence, options);
     }))
         .addCommand(new Command("variants")
-        .description("A/B scoreboard for a sequence: per-step/per-variant sent, replied, reply rate, bounced, credits, plus the reversible auto-winner state (which variants are paused + evidence). Flags run the auto-winner or manually override/reset a variant's pause.")
+        .description("A/B scoreboard for one sequence: per-step/per-variant results plus native email by_mailbox, by_domain, reply types, rates, and explicit unattributed facts. Provider-owned campaigns appear only after normalization into Oxygen's native Sequence ledgers. Also returns reversible auto-winner state (paused variants + evidence); flags run or override/reset that state.")
         .argument("<sequence>", "Sequence id or slug.")
         .option("--auto-optimize", "Run the auto-winner now: pause the statistically-losing variant(s) of any step carrying an auto_optimize config, once every variant clears its thresholds, on that step's configured metric — reply (the recommended default), click, or open (click/open need native open/click tracking; opens are soft signals under Apple Mail Privacy Protection). Reversible.")
         .option("--pause <variant>", "Manually pause one variant (requires --step). Overrides the auto-winner.")
@@ -12305,7 +12396,7 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         });
     }))
         .addCommand(new Command("get")
-        .description("Get one sending mailbox's detail (provider, status, daily cap, warmup state, auth mode, and source — managed vs bring-your-own) plus a one-row pool summary. An ineligible native-send transport includes transport_reason + transport_hint; it does not by itself block TrulyInbox warmup or EmailGuard monitoring. <mailbox> accepts a mailbox id or email address.")
+        .description("Get one sending mailbox's configuration/readiness detail (provider, status, daily cap, warmup state, auth mode, and source — managed vs bring-your-own) plus a one-row pool summary. This is not sent/replied/bounced performance; use `oxygen sequences analytics` for native Sequence attribution by mailbox/domain. An ineligible native-send transport includes transport_reason + transport_hint; it does not by itself block TrulyInbox warmup or EmailGuard monitoring. <mailbox> accepts a mailbox id or email address.")
         .argument("<mailbox>", "Mailbox id or email address.")
         .option("--json", "Print a JSON envelope.")
         .action(async (mailbox, options) => {
@@ -13098,7 +13189,7 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         await handleAsyncAction("domains sync", options, () => runDomainsSync(options));
     }))
         .addCommand(new Command("get")
-        .description("Get one domain's full detail: zone state, age with provenance, mailboxes, sending volume, and the last DNS health check. For an Oxygen-managed (vendor-registered) domain it returns the vendor's rail instead — subscription, registration and renewal, nameservers and delegation, catch-all, DMARC, and a live DNS verdict. For a domain hosted OUTSIDE Oxygen that you send from (bought from an inbox provider, DNS elsewhere), rail=external answers from public DNS + the RDAP registry: SPF/DKIM/DMARC/MX verdict, nameservers, MX provider, registrar, domain age, web root, plus your own capacity, sending volume and readiness. Free — no credits, no provider keys.")
+        .description("Get one domain's infrastructure/readiness detail: zone state, age with provenance, mailboxes, cached sending volume, and the last DNS health check. This is not Sequence/campaign attribution; use `oxygen sequences analytics` for native sent/replied/bounced results by mailbox/domain. For an Oxygen-managed (vendor-registered) domain it returns the vendor's rail instead — subscription, registration and renewal, nameservers and delegation, catch-all, DMARC, and a live DNS verdict. For a domain hosted OUTSIDE Oxygen that you send from (bought from an inbox provider, DNS elsewhere), rail=external answers from public DNS + the RDAP registry: SPF/DKIM/DMARC/MX verdict, nameservers, MX provider, registrar, domain age, web root, plus your own capacity, sending volume and readiness. Free — no credits, no provider keys.")
         .argument("<domain>", "Domain name, such as acme.com.")
         .option("--json", "Print a JSON envelope.")
         .action(async (domain, options) => {
@@ -18792,6 +18883,10 @@ function formatSequenceEvents(data) {
         }
         if (event.actionKind)
             segments.push(event.actionKind);
+        if (event.mailboxEmail)
+            segments.push(`via ${event.mailboxEmail}`);
+        else if (event.mailboxId)
+            segments.push(`via mailbox ${event.mailboxId}`);
         if (event.url)
             segments.push(event.url);
         if (event.detail)
@@ -18848,6 +18943,15 @@ function formatRatePercent(value) {
     // Rates arrive as a 0–1 fraction; render as a one-decimal percentage.
     return `${(value * 100).toFixed(1)}%`;
 }
+function formatReplyTypes(value) {
+    if (!value || typeof value !== "object" || Array.isArray(value))
+        return "—";
+    const entries = Object.entries(value)
+        .map(([key, count]) => [key, Number(count)])
+        .filter(([, count]) => Number.isFinite(count) && count > 0)
+        .sort((left, right) => right[1] - left[1] || left[0].localeCompare(right[0]));
+    return entries.length > 0 ? entries.map(([key, count]) => `${key}:${count}`).join(", ") : "—";
+}
 function renderVariantTable(headers, rows) {
     const widths = headers.map((header, columnIndex) => {
         let max = header.length;
@@ -18866,6 +18970,8 @@ function formatSequenceVariants(data) {
     const styles = ansi(output.isTTY === true && !process.env.NO_COLOR);
     const byVariant = Array.isArray(data.by_variant) ? data.by_variant : [];
     const byMailbox = Array.isArray(data.by_mailbox) ? data.by_mailbox : [];
+    const byDomain = Array.isArray(data.by_domain) ? data.by_domain : [];
+    const unattributed = data.unattributed;
     const lines = ["", styles.bold("By variant")];
     if (byVariant.length === 0) {
         lines.push(`  ${styles.dim("No variant analytics yet.")}`);
@@ -18888,16 +18994,54 @@ function formatSequenceVariants(data) {
         lines.push(`  ${styles.dim("No mailbox analytics yet.")}`);
     }
     else {
-        const headers = ["MAILBOX", "SENT", "REPLIED", "REPLY RATE", "FAILED"];
+        const headers = ["MAILBOX", "CAMPAIGNS", "SENT", "REPLIED", "REPLY RATE", "BOUNCED", "BOUNCE RATE", "REPLY TYPES", "FAILED"];
         const rows = byMailbox.map((row) => [
-            formatVariantCell(row.email_address),
+            formatVariantCell(row.email_address ?? row.emailAddress),
+            formatVariantCell(row.campaign_count ?? row.campaignCount),
             formatVariantCell(row.sent),
             formatVariantCell(row.replied),
-            formatRatePercent(row.reply_rate),
+            formatRatePercent(row.reply_rate ?? row.replyRate),
+            formatVariantCell(row.bounced),
+            formatRatePercent(row.bounce_rate ?? row.bounceRate),
+            formatReplyTypes(row.reply_types ?? row.replyTypes),
             formatVariantCell(row.failed),
         ]);
         lines.push(...renderVariantTable(headers, rows));
     }
+    lines.push("", styles.bold("By sending domain"));
+    if (byDomain.length === 0) {
+        lines.push(`  ${styles.dim("No sending-domain analytics yet.")}`);
+    }
+    else {
+        const headers = ["DOMAIN", "MAILBOXES", "CAMPAIGNS", "SENT", "REPLIED", "REPLY RATE", "BOUNCED", "BOUNCE RATE", "REPLY TYPES"];
+        const rows = byDomain.map((row) => [
+            formatVariantCell(row.sending_domain ?? row.sendingDomain),
+            formatVariantCell(row.mailbox_count ?? row.mailboxCount),
+            formatVariantCell(row.campaign_count ?? row.campaignCount),
+            formatVariantCell(row.sent),
+            formatVariantCell(row.replied),
+            formatRatePercent(row.reply_rate ?? row.replyRate),
+            formatVariantCell(row.bounced),
+            formatRatePercent(row.bounce_rate ?? row.bounceRate),
+            formatReplyTypes(row.reply_types ?? row.replyTypes),
+        ]);
+        lines.push(...renderVariantTable(headers, rows));
+    }
+    const hasUnattributed = unattributed
+        && [unattributed.sent, unattributed.replied, unattributed.bounced, unattributed.failed]
+            .some((value) => typeof value === "number" && value > 0);
+    if (hasUnattributed && unattributed) {
+        lines.push("", styles.bold("Unattributed sending identity"));
+        lines.push(...renderVariantTable(["SENT", "REPLIED", "POSITIVE", "BOUNCED", "FAILED", "REPLY TYPES"], [[
+                formatVariantCell(unattributed.sent),
+                formatVariantCell(unattributed.replied),
+                formatVariantCell(unattributed.positive_replies ?? unattributed.positiveReplies),
+                formatVariantCell(unattributed.bounced),
+                formatVariantCell(unattributed.failed),
+                formatReplyTypes(unattributed.reply_types ?? unattributed.replyTypes),
+            ]]));
+        lines.push(`  ${styles.dim("Campaign attribution is preserved; mailbox/domain is left unassigned instead of guessed.")}`);
+    }
     lines.push("");
     return lines.join("\n");
 }

package/node_modules/@oxygen/shared/dist/index.d.ts

@@ -42,6 +42,7 @@ export * from "./call-outcomes.js";
 export * from "./dial-guardrail-overrides.js";
 export * from "./sequences.js";
 export * from "./suppression-entries.js";
+export * from "./table-limits.js";
 export * from "./log.js";
 export { sanitizeLogFields } from "./redaction.js";
 export * from "./provider-request-outcomes.js";

package/node_modules/@oxygen/shared/dist/index.js

@@ -42,6 +42,7 @@ export * from "./call-outcomes.js";
 export * from "./dial-guardrail-overrides.js";
 export * from "./sequences.js";
 export * from "./suppression-entries.js";
+export * from "./table-limits.js";
 export * from "./log.js";
 // Narrow, deliberate export (ADR 0014): lets telemetry emitters regression-test
 // their field names against the REAL log sanitizer — the unanchored

package/node_modules/@oxygen/shared/dist/table-limits.d.ts

@@ -0,0 +1,2 @@
+export declare const MAX_TABLE_ACTION_RUN_ROWS = 500000;
+export declare const MAX_WORKSPACE_ROW_DELETE_ROWS = 50000;

package/node_modules/@oxygen/shared/dist/table-limits.js

@@ -0,0 +1,4 @@
+// Shared request/action ceilings used by tenant-db enforcement and every
+// surface that resolves a symbolic row selection before invoking it.
+export const MAX_TABLE_ACTION_RUN_ROWS = 500_000;
+export const MAX_WORKSPACE_ROW_DELETE_ROWS = 50_000;

package/node_modules/@oxygen/shared/dist/version.d.ts

@@ -1,3 +1,3 @@
-export declare const OXYGEN_VERSION = "1.618.4";
+export declare const OXYGEN_VERSION = "1.627.1";
 export declare const OXYGEN_MINIMUM_CLI_VERSION = "1.181.0";
 export declare const MANAGED_INBOX_MINIMUM_CLI_VERSION = "1.326.2";

package/node_modules/@oxygen/shared/dist/version.js

@@ -1,4 +1,4 @@
-export const OXYGEN_VERSION = "1.618.4";
+export const OXYGEN_VERSION = "1.627.1";
 // The GLOBAL CLI compatibility floor: the oldest CLI allowed to call any
 // operational route. Raising it hard-rejects every older CLI from the entire
 // product, so it obeys one law, enforced by scripts/ci/cli-min-version-gate.mjs:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oxygen-agent/cli",
-  "version": "1.618.4",
+  "version": "1.627.1",
   "private": false,
   "license": "UNLICENSED",
   "type": "module",