@oxygen-agent/cli 1.632.3 → 1.638.1

package/README.md

@@ -34,4 +34,4 @@ oxygen update
 
 For product documentation, visit https://oxygen-agent.com/docs. For support, visit https://oxygen-agent.com.
 
-Version: 1.632.3
+Version: 1.638.1

package/dist/command-manifest.js

@@ -23,7 +23,11 @@ const COMMAND_SEARCH_STOP_WORDS = new Set([
 // trusting the default.
 const MUTATING_VERBS = new Set([
     "accept", "ack", "add", "adopt", "apply", "approve", "archive",
-    "assign", "attach", "backfill", "bind", "buy", "call", "cancel", "chat-action", "clear",
+    "assign", "attach", "backfill",
+    // Exact leaves, not the `billing` prefix — `orgs billing-owners` is a read.
+    // Both move a workspace's billing owner, so an agent must treat them as writes.
+    "billing-link", "billing-unlink",
+    "bind", "buy", "call", "cancel", "chat-action", "clear",
     "comment", "configure", "connect", "create", "delete", "delist", "disable",
     "disconnect", "dispatch", "draft", "duplicate", "edit", "emit", "enable", "enroll",
     "file", "forward", "grant", "harvest", "history", "import", "insert", "interrupt", "invite",

package/dist/index.js

@@ -888,9 +888,9 @@ const MAILBOX_IMPORT_ROW_LIMIT = 500;
  * Normalize common mailbox-vendor export labels locally, then send only
  * Oxygen's canonical fields. Passwords are accepted only in credential mode
  * and only become Google app passwords; Microsoft passwords are dropped because
- * tenant consent is its only warmup path. OAuth grants, MFA/TOTP seeds, and
- * delegation keys are rejected in every mode. Host columns may prove the
- * provider but never cross the request boundary.
+ * one Outlook OAuth consent per mailbox is its only warmup path. OAuth grants,
+ * MFA/TOTP seeds, and delegation keys are rejected in every mode. Host columns
+ * may prove the provider but never cross the request boundary.
  */
 function normalizeMailboxExportRow(row, index, mode) {
     const byHeader = new Map();
@@ -2040,8 +2040,14 @@ function buildPublishingAnalyticsPath(base, params) {
     return suffix ? `${base}?${suffix}` : base;
 }
 function buildPublishingCommentsListPath(options) {
+    const view = readOption(options.view);
+    const status = readOption(options.status);
+    if (view && status) {
+        throw new OxygenError("conflicting_flags", "Pass either --view or --status, not both.", { exitCode: 1 });
+    }
     return buildPublishingAnalyticsPath("/api/cli/publishing/comments", {
-        status: readOption(options.status),
+        view,
+        status,
         post_id: readOption(options.post),
         assignee: readOption(options.assignee),
         channel: readOption(options.channel),
@@ -2511,6 +2517,7 @@ function buildPromptTemplatesCommand(surface, description) {
 export function createProgram() {
     const program = new Command();
     const binaryName = resolveCliBinaryName();
+    const directoryDocsUrl = `${defaultApiUrl()}/docs/agencies`;
     program
         .name(binaryName)
         .description("Revenue infrastructure for B2B startups — agent-operated GTM: tables, enrichment, sequences, workflows, CRM, knowledge. MCP + CLI first; every state-changing action returns a web_url deep-link.")
@@ -2774,7 +2781,7 @@ export function createProgram() {
     });
     program
         .command("orgs")
-        .description("Organization selection commands.")
+        .description("Switch between the organizations (workspaces) you belong to, and share one paid plan across them. If this workspace has no plan of its own, `orgs billing-link` puts it on a plan you already pay for somewhere else instead of buying a second subscription.")
         .addCommand(new Command("list")
         .description("List organizations available to the current CLI identity.")
         .option("--json", "Print a JSON envelope.")
@@ -2794,30 +2801,43 @@ export function createProgram() {
         .option("--json", "Print a JSON envelope.")
         .action(async (organization, options) => {
         await handleOrgUseAction(organization, options, "orgs select");
+    }))
+        .addCommand(new Command("billing-owners")
+        .description("List the organizations that could pay for this workspace: which of the organizations you belong to can cover another workspace's credits, and for each of the rest, why it cannot. Read-only, 0 Oxygen credits.")
+        .option("--json", "Print a JSON envelope.")
+        .action(async (options) => {
+        await handleAsyncAction("orgs billing-owners", options, () => requestOxygen("/api/cli/orgs/billing-owners"));
     }))
         .addCommand(new Command("billing-link")
-        .description("Bill a workspace through another organization you administer.")
-        .requiredOption("--owner <organization>", "Billing owner organization id, Clerk org id, or slug.")
+        .description("Cover a workspace with a plan you already pay for in another organization (one plan, many workspaces) instead of buying a second subscription. Omit --owner when exactly one of your organizations can pay and Oxygen will use it; `orgs billing-owners` lists them all. Credit billing moves, workspace data access does not.")
+        .option("--owner <organization>", "Billing owner organization id, Clerk org id, or slug. Optional — when omitted, Oxygen uses your one eligible organization, and refuses to pick if there is more than one.")
         .option("--organization <organization>", "Workspace organization to link. Defaults to the active organization.")
         .option("--organization-id <id>", "Alias for --organization.")
-        .option("--monthly-credit-cap <credits>", "Optional monthly credit cap for this workspace.")
+        .option("--monthly-credit-cap <credits>", "Optional monthly credit cap for this workspace. Omit it to leave any existing cap untouched.")
         .option("--json", "Print a JSON envelope.")
         .action(async (options) => {
-        await handleAsyncAction("orgs billing-link", options, () => requestOxygen("/api/cli/orgs/billing-link", {
-            method: "POST",
-            body: {
-                billing_owner_organization_id: readOption(options.owner),
-                ...(readOption(options.organization) || readOption(options.organizationId)
-                    ? { organization_id: readOption(options.organization) ?? readOption(options.organizationId) }
-                    : {}),
-                ...(readOption(options.monthlyCreditCap)
-                    ? { monthly_credit_cap: readPositiveNumber(options.monthlyCreditCap) }
-                    : {}),
-            },
-        }));
+        await handleAsyncAction("orgs billing-link", options, async () => {
+            const billingOwner = readOption(options.owner) ?? await resolveSoleBillingOwnerRef();
+            return requestOxygen("/api/cli/orgs/billing-link", {
+                method: "POST",
+                body: {
+                    billing_owner_organization_id: billingOwner,
+                    ...(readOption(options.organization) || readOption(options.organizationId)
+                        ? { organization_id: readOption(options.organization) ?? readOption(options.organizationId) }
+                        : {}),
+                    // The key is omitted, never sent as null, when the flag is
+                    // absent: the server treats a present key as an explicit write,
+                    // so sending it unconditionally would wipe an agency's
+                    // per-client cap on every re-link.
+                    ...(readOption(options.monthlyCreditCap)
+                        ? { monthly_credit_cap: readPositiveNumber(options.monthlyCreditCap) }
+                        : {}),
+                },
+            });
+        });
     }))
         .addCommand(new Command("billing-unlink")
-        .description("Return a workspace to owning its own billing.")
+        .description("Return a workspace to owning its own billing: it stops being covered by another organization's plan and needs a subscription of its own again.")
         .option("--organization <organization>", "Workspace organization to unlink. Defaults to the active organization.")
         .option("--organization-id <id>", "Alias for --organization.")
         .option("--json", "Print a JSON envelope.")
@@ -3316,7 +3336,7 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
     }));
     program
         .command("publishing")
-        .description("Social publishing, performance, and public-comment operations.")
+        .description("Social publishing, performance, and public-comment operations. Start Community triage with `oxygen publishing comments list --view unanswered --json`.")
         .addCommand(new Command("mentions")
         .description("Resolve LinkedIn identities for a publish-faithful post preview.")
         .addCommand(new Command("resolve")
@@ -3644,10 +3664,11 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         }));
     })))
         .addCommand(new Command("comments")
-        .description("Public comments on posts published through OXYGEN. These are network conversations, not workspace review notes. The local queue targets a six-hour background poll; provider quota/backoff can delay it, and list reports the exact freshness plus empty_queue_is_current. If that field is false, do not conclude there are no comments: wait for next_sync_at. The worker retries automatically; there is no manual retry by design because it could loop against LinkedIn quota. Queue reads use 0 credits and make no provider call; only explicit approval can post a public reply.")
+        .description("Publishing Community for public comments on every recent post owned by a connected LinkedIn account, including posts created directly on LinkedIn. Start with `oxygen publishing comments list --view unanswered --json`. These are network conversations, not workspace review notes. The local queue targets a six-hour background discovery + comment poll; provider quota/backoff can delay it, and list reports the exact freshness plus empty_queue_is_current. If that field is false, do not conclude there are no comments: wait for next_sync_at. The worker retries automatically; there is no manual retry by design because it could loop against LinkedIn quota. Queue reads use 0 credits and make no provider call; only explicit approval can post a public reply.")
         .addCommand(new Command("list")
-        .description("List the local public-comment work queue, oldest first, with polling freshness/backoff even when empty. Defaults to LinkedIn comments needing a reply. Read-only: no provider call, 0 credits.")
-        .option("--status <status>", "Filter by needs_reply, draft, awaiting_approval, replied, resolved, ignored, spam, or action_unavailable.")
+        .description("List the Publishing Community work queue, oldest first, with polling freshness/backoff even when empty. Defaults to the Unanswered view: needs_reply, draft, awaiting_approval, and action_unavailable. All means every lifecycle state inside the rolling 30-day recent-owned-post scope, not lifetime LinkedIn history. Read-only: no provider call, 0 credits.")
+        .option("--view <view>", "Community view: unanswered (default) or all; all is bounded to recent owned posts.")
+        .option("--status <status>", "Advanced exact-state filter: needs_reply, draft, awaiting_approval, replied, resolved, ignored, spam, or action_unavailable. Cannot be combined with --view.")
         .option("--post <post_id>", "Only comments on one scheduled Publishing post.")
         .option("--assignee <actor>", "Only one actor id; pass me for your own assignments.")
         .option("--channel <channel>", "Social channel. Defaults to linkedin.")
@@ -8176,14 +8197,15 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
     program
         .command("directory")
         .description("Manage this organization's public OXYGEN agency directory listing.")
+        .addHelpText("after", `\nDocs: ${directoryDocsUrl}\n`)
         .addCommand(new Command("get")
-        .description("Read the listing, its publish state, and its public/settings deep-links.")
+        .description("Read-only, 0 credits. Read the listing, publish state, and public/settings deep-links.")
         .option("--json", "Print a JSON envelope.")
         .action(async (options) => {
         await handleAsyncAction("directory get", options, () => requestOxygen("/api/cli/directory/listing"));
     }))
         .addCommand(new Command("update")
-        .description("Update listing profile fields. Only invited organizations can edit.")
+        .description("Update listing fields. Changes to a published listing are public immediately. Only invited organizations can edit.")
         .option("--name <text>", "Agency display name.")
         .option("--slug <slug>", "Public URL slug (lowercase letters, digits, dashes).")
         .option("--logo-url <url>", "Logo image URL.")
@@ -8214,7 +8236,7 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         });
     }))
         .addCommand(new Command("publish")
-        .description("Publish the listing to the public directory at https://oxygen-agent.com/agencies.")
+        .description("Publish at https://oxygen-agent.com/agencies. Requires a tagline, description, and at least one contact method (website, booking link, email, or LinkedIn).")
         .option("--json", "Print a JSON envelope.")
         .action(async (options) => {
         await handleAsyncAction("directory publish", options, () => requestOxygen("/api/cli/directory/listing/publish", { method: "POST", body: {} }));
@@ -9819,7 +9841,7 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         await handleAsyncAction("senders limits get", options, () => requestOxygen(`/api/cli/senders/${encodeURIComponent(id)}/limits`));
     }))
         .addCommand(new Command("set")
-        .description("Adjust per-account daily action limits and the daily-reset timezone. Values are clamped to safe maximums (e.g. max 80 invites/day). Send windows (time of day) are set per sequence in the campaign schedule, not per account. <id> accepts a sender account id, connection id, or Unipile account id.")
+        .description("Adjust per-account daily action limits and the daily-reset timezone. Values are clamped to safe maximums (30 invites/day and 40 messages/day). Send windows (time of day) are set per sequence in the campaign schedule, not per account. <id> accepts a sender account id, connection id, or Unipile account id.")
         .argument("<id>", "Sender account id, connection id, or Unipile account id.")
         .option("--invites-per-day <n>", "Daily LinkedIn connection invites cap.")
         .option("--invites-per-week <n>", "Weekly LinkedIn connection invites cap.")
@@ -10053,10 +10075,10 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         });
     })));
     program.addCommand(new Command("posts")
-        .description("Read and publish LinkedIn posts through a connected account. `get`, `comments`, and `reactions` are LIVE provider reads: they use 0 Oxygen credits but consume the sender's daily account-read allowance. Do not use them when a task forbids provider calls; use `publishing comments list` for the local cross-post queue. `create` publishes a real post (approval-gated). Every command here addresses ONE post you already have an id for — Oxygen cannot enumerate an account's own LinkedIn history, so analytics only cover posts Oxygen itself published (`oxygen publishing ...`).")
+        .description("Read and publish LinkedIn posts through a connected account. `get`, `comments`, and `reactions` are LIVE provider reads: they use 0 Oxygen credits but consume the sender's daily account-read allowance. Do not use them when a task forbids provider calls; use `publishing comments list` for the local Community queue, which discovers recent posts owned by connected accounts in the background. `create` publishes a real post (approval-gated). The direct commands here address ONE post you already have an id for; aggregate analytics still cover posts Oxygen itself published (`oxygen publishing ...`).")
         .addCommand(new Command("get")
         .description("LIVE provider read of one LinkedIn post. Uses 0 Oxygen credits but consumes the sender's metered account-read allowance; do not run it when the task forbids provider calls. Returns the post and its composite social_id (reuse that social_id for `posts comments`, `posts reactions`, and `engagement harvest --source unipile` — NOT the raw activity URN). This does not populate or refresh the durable `publishing comments` queue.")
-        .requiredOption("--post <id>", "Numeric activity id, activity URL, or composite social_id. There is no way to LIST your own posts: take the id from the post's LinkedIn URL, or from a post you scheduled (`oxygen publishing posts get <post_id>` → provider_post_id).")
+        .requiredOption("--post <id>", "Numeric activity id, activity URL, or composite social_id. For a direct live read, take the id from the post's LinkedIn URL or a scheduled post (`oxygen publishing posts get <post_id>` → provider_post_id); Community discovers recent owned posts separately in the background.")
         .option("--account <ref>", "Sender account to read through (sender id, connection id, or Unipile account id). Omit for the org default.")
         .option("--json", "Print a JSON envelope.")
         .action(async (options) => {
@@ -10711,7 +10733,7 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         });
     })));
     program.addCommand(new Command("inbox")
-        .description("Unified inbox (unibox): private email + LinkedIn DM + WhatsApp conversations in one stream (--channel all), or a single channel. Public comments on OXYGEN-published posts are not inbox messages; use `publishing comments`. Scan, read threads, and reply.")
+        .description("Unified inbox (unibox): private email + LinkedIn DM + WhatsApp conversations in one stream (--channel all), or a single channel. Public comments on owned LinkedIn posts are not inbox messages; use `publishing comments`. Scan, read threads, and reply.")
         .addCommand(new Command("list")
         .description("List conversations newest first. --channel all merges email + LinkedIn + WhatsApp into one stream (narrow it with --channels); --channel email/linkedin/whatsapp lists a single channel. Primary excludes the negative tier (not_now, not_interested, lost, bounced); All includes every ordinary conversation.")
         .option("--channel <channel>", "Inbox channel: all (merged), linkedin (default), whatsapp, or email.")
@@ -12596,7 +12618,7 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         });
     })));
     program.addCommand(new Command("mailboxes")
-        .description("Native email sending pool: register/refresh Google/Microsoft mailboxes (including secure local Hypertide transfer), pause/disable inboxes, connect EmailGuard monitoring, and run managed TrulyInbox warmup with explicit plans and credit caps. Safe import preflight: run `oxygen mailboxes compatibility --catalog-only --json`, then `oxygen mailboxes import --file <path> --validate-only --json` (add the credential source flags shown by import help when the file contains credentials).")
+        .description("Native email sending pool: register/refresh Google/Microsoft mailboxes (including secure local Hypertide transfer), pause/disable inboxes, connect EmailGuard monitoring, and run managed SendKit warmup with explicit plans and credit caps. Safe import preflight: run `oxygen mailboxes compatibility --catalog-only --json`, then `oxygen mailboxes import --file <path> --validate-only --json` (add the credential source flags shown by import help when the file contains credentials).")
         .addCommand(new Command("list")
         .description("List the org's sending mailboxes with provider, status, warmup state, source (managed = bought through Oxygen, byok = bring-your-own), and a pool overview (including counts by source).")
         .option("--status <status>", "Filter by status: active, paused, or disabled.")
@@ -12612,7 +12634,7 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         });
     }))
         .addCommand(new Command("get")
-        .description("Get one sending mailbox's configuration/readiness detail (provider, status, daily cap, warmup state, auth mode, and source — managed vs bring-your-own) plus a one-row pool summary. This is not sent/replied/bounced performance; use `oxygen sequences analytics` for native Sequence attribution by mailbox/domain. An ineligible native-send transport includes transport_reason + transport_hint; it does not by itself block TrulyInbox warmup or EmailGuard monitoring. <mailbox> accepts a mailbox id or email address.")
+        .description("Get one sending mailbox's configuration/readiness detail (provider, status, daily cap, warmup state, auth mode, and source — managed vs bring-your-own) plus a one-row pool summary. This is not sent/replied/bounced performance; use `oxygen sequences analytics` for native Sequence attribution by mailbox/domain. An ineligible native-send transport includes transport_reason + transport_hint; it does not by itself block SendKit warmup or EmailGuard monitoring. <mailbox> accepts a mailbox id or email address.")
         .argument("<mailbox>", "Mailbox id or email address.")
         .option("--json", "Print a JSON envelope.")
         .action(async (mailbox, options) => {
@@ -12625,7 +12647,7 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         await handleAsyncAction("mailboxes health", options, () => requestOxygen("/api/cli/mailboxes/health"));
     }))
         .addCommand(new Command("compatibility")
-        .description("Read-only compatibility report for every selected mailbox: origin vendor, real infrastructure tier (including InboxKit Azure), OXYGEN native-send connection quality, TrulyInbox warmup path, EmailGuard monitoring path, and exact next actions. Native send distinguishes destination-bound OAuth, provider-managed API transport, admin delegation, and authorization_required. Use --catalog-only for the compact workspace-independent import contract. JSON data.compatibility contains checked rows; data.import_methods and data.import_fields describe accepted transfer inputs; data.provider_matrix is the complete current 18-pair product matrix; data.non_transferable_auth names credentials that must be reconnected; data.summary rolls up states; data.web_url opens the pool. Downstream states distinguish credential_required, consent_required, and vendor_blocked. Never decrypts a credential or calls a downstream provider.")
+        .description("Read-only compatibility report for every selected mailbox: origin vendor, real infrastructure tier (including InboxKit Azure), OXYGEN native-send connection quality, SendKit warmup path, EmailGuard monitoring path, and exact next actions. Native send distinguishes destination-bound OAuth, provider-managed API transport, admin delegation, and authorization_required. Use --catalog-only for the compact workspace-independent import contract. JSON data.compatibility contains checked rows; data.import_methods and data.import_fields describe accepted transfer inputs; data.provider_matrix is the complete current 18-pair product matrix; data.non_transferable_auth names credentials that must be reconnected; data.summary rolls up states; data.web_url opens the pool. Downstream states distinguish credential_required, consent_required, and vendor_blocked. Never decrypts a credential or calls a downstream provider.")
         .option("--mailboxes <list>", "Comma-separated mailbox ids or addresses. Omit for the whole pool.")
         .option("--catalog-only", "Return only the bounded import-method, field, auth-boundary, and 18-pair provider catalogs; do not read or return workspace mailbox rows.")
         .option("--json", "Print a JSON envelope.")
@@ -12647,7 +12669,7 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         });
     }))
         .addCommand(new Command("import")
-        .description("Register (or refresh) sending mailboxes in bulk. Use --validate-only with a local file for a non-mutating, no-network preflight; without it, import is a 0-credit state mutation whose upsert is idempotent by mailbox address. CSV/JSON/JSONL/XLSX identity files from any vendor use --file plus optional --vendor. Compatible Google app-password exports use --from credentials --vendor <source>; --from hypertide remains a shortcut. Connected Zapmail inventories use --from zapmail. In credential files, app_password is Google-only; Microsoft password fields are discarded locally. OAuth grants, MFA/TOTP seeds, and delegation keys never transfer: Microsoft warmup requires Entra tenant-admin consent and EmailGuard remains vendor_blocked for Microsoft. Google app passwords are sent only in the request body, encrypted server-side, and never returned.")
+        .description("Register (or refresh) sending mailboxes in bulk. Use --validate-only with a local file for a non-mutating, no-network preflight; without it, import is a 0-credit state mutation whose upsert is idempotent by mailbox address. CSV/JSON/JSONL/XLSX identity files from any vendor use --file plus optional --vendor. Compatible Google app-password exports use --from credentials --vendor <source>; --from hypertide remains a shortcut. Connected Zapmail inventories use --from zapmail. In credential files, app_password is Google-only; Microsoft password fields are discarded locally. OAuth grants, MFA/TOTP seeds, and delegation keys never transfer: Microsoft warmup requires one Outlook OAuth authorization per mailbox (`mailboxes warmup microsoft`) and EmailGuard remains vendor_blocked for Microsoft. Google app passwords are sent only in the request body, encrypted server-side, and never returned.")
         .addHelpText("after", [
         "",
         "Ordinary identity file contract (CSV / JSON / JSONL / XLSX):",
@@ -12975,7 +12997,7 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         });
     })))
         .addCommand(new Command("delegation")
-        .description("Google sending-domain delegation only — not Microsoft OAuth and not a Hypertide handoff to TrulyInbox or EmailGuard. Reports covered domains plus the exact client id/scopes; --probe mints a real token per mailbox. Read-only, sends no mail, 0 Oxygen credits.")
+        .description("Google sending-domain delegation only — not Microsoft OAuth and not a Hypertide handoff to SendKit warmup or EmailGuard. Reports covered domains plus the exact client id/scopes; --probe mints a real token per mailbox. Read-only, sends no mail, 0 Oxygen credits.")
         .option("--domain <domain>", "Only report this sending domain.")
         .option("--probe", "Verify each delegated domain by minting a real delegated token per mailbox. Makes one Google token call per mailbox; still 0 Oxygen credits.")
         .option("--json", "Print a JSON envelope.")
@@ -12992,9 +13014,9 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         });
     }))
         .addCommand(new Command("warmup")
-        .description("Mailbox warmup for the sending pool. Oxygen's native warmup runs on ONE rail: TrulyInbox, managed and credit-billed per warming-inbox-month. Oxygen enrolls the mailbox for you — preview first, then re-run with --approved to execute and bill. (Instantly and Warmforge remain BYOK integrations elsewhere in Oxygen; they are no longer warmup rails.)")
+        .description("Mailbox warmup for the sending pool — the weeks of low-volume conversational mail that make a new inbox look trusted before you cold-send from it. Oxygen's native warmup runs on ONE rail: SendKit, managed and credit-billed at 3,000 credits per warming inbox per month ($3). Oxygen enrolls the mailbox for you — preview first, then re-run with --approved to execute and bill. Google and Microsoft both warm here; a Microsoft inbox first needs one Outlook authorization of its own (`mailboxes warmup microsoft`). Inboxes already warming on the retired TrulyInbox rail keep reporting and are wound down here with `warmup disable`; they are never silently moved onto SendKit.")
         .addCommand(new Command("enable")
-        .description("Enable warmup for sending mailboxes and stamp each mailbox's warmup state. Targets the whole pool unless --mailboxes is given. Without --approved this is a 0-credit, no-provider-write priced preview: nothing is enrolled or billed. Preview one inbox with `oxygen mailboxes warmup enable --mailboxes sender@example.com --json`. Execute by echoing its --plan and --max-credits with --approved.")
+        .description("Enroll sending mailboxes in Oxygen's managed SendKit warmup and stamp each mailbox's warmup state. Targets the whole pool unless --mailboxes is given. Without --approved this is a 0-credit, no-provider-write priced preview: nothing is enrolled or billed. Preview one inbox with `oxygen mailboxes warmup enable --mailboxes sender@example.com --json`. Execute by echoing its --plan and --max-credits with --approved. Microsoft inboxes must finish `mailboxes warmup microsoft` (one Outlook authorization each) before they can enroll. New enrollments only ever land on SendKit — the retired TrulyInbox rail is refused here and only accepts teardown.")
         .option("--mailboxes <list>", "Comma-separated mailbox ids or addresses to warm. Omit to warm the whole pool.")
         .option("--approved", "Execute the PRICED enrollment. Without it the response is a priced preview and nothing is enrolled or billed.")
         .option("--plan <hash>", "Hash from the fresh preview (required with --approved).")
@@ -13038,13 +13060,13 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         });
     }))
         .addCommand(new Command("microsoft")
-        .description("Set up Microsoft/Entra mailboxes for TrulyInbox through tenant-admin consent — never through a mailbox password. Preview returns the consent URL and exact 0-credit sync plan. If it is not executable yet, open consent and re-preview with --tenant <directory-guid>; approve only that fresh hash with --max-credits 0. Warmup remains OFF until a separately approved `warmup enable`.")
+        .description("Authorize Microsoft/Outlook mailboxes for SendKit warmup — ONE browser consent PER MAILBOX, never a password or app password. There is no tenant-admin shortcut: a 40-inbox Microsoft pool means 40 separate authorizations, each opened by whoever can sign in to that mailbox. The preview names the exact mailboxes and how many consent links are still outstanding, at 0 credits. Approve that fresh hash with --max-credits 0 to mint the links, open every returned consent_url, then re-run with --status to see which mailboxes came back authorized. Warmup itself stays OFF until a separately approved `warmup enable`.")
         .option("--mailboxes <list>", "Comma-separated Microsoft mailbox ids or addresses. Omit to select every Microsoft mailbox in the pool.")
-        .option("--tenant <id>", "Entra directory/tenant GUID. Usually inferred from mailbox metadata or the consent response.")
-        .option("--approved", "Register/sync the exact previewed tenant scope after the admin opened the consent URL.")
+        .option("--tenant <id>", "Deprecated and ignored: SendKit consent is per mailbox, so there is no tenant-wide scope to bind. Still accepted so older scripts keep running.")
+        .option("--approved", "Mint the per-mailbox consent links for the exact previewed mailbox scope. Still 0 credits — a human then has to open each link.")
         .option("--plan <hash>", "Fresh setup preview hash (required with --approved).")
         .option("--max-credits <n>", "Hard Oxygen credit cap; this setup requires exactly 0 (required with --approved).")
-        .option("--status", "Poll the persisted TrulyInbox workspace sync instead of creating a new setup preview.")
+        .option("--status", "Poll the per-mailbox consents instead of creating a new setup preview: reports which mailboxes are authorized and which are still waiting for someone to open their link.")
         .option("--json", "Print a JSON envelope.")
         .action(async (options) => {
         await handleAsyncAction("mailboxes warmup microsoft", options, () => {
@@ -13125,7 +13147,7 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         });
     }))
         .addCommand(new Command("pause")
-        .description("Pause warmup for TrulyInbox-enrolled mailboxes. Rows left on a retired rail report unsupported rather than being retargeted. Targets the whole pool unless --mailboxes is given.")
+        .description("Pause warmup at the rail that actually enrolled each mailbox — SendKit for current enrollments, TrulyInbox for inboxes still warming there. A mailbox left on a rail Oxygen no longer drives reports unsupported instead of being retargeted, so the reply never claims a pause that did not happen. Targets the whole pool unless --mailboxes is given.")
         .option("--mailboxes <list>", "Comma-separated mailbox ids or addresses. Omit for the whole pool.")
         .option("--json", "Print a JSON envelope.")
         .action(async (options) => {
@@ -13138,7 +13160,7 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         });
     }))
         .addCommand(new Command("resume")
-        .description("Resume paused warmup at each mailbox's recorded provider. Targets the whole pool unless --mailboxes is given.")
+        .description("Resume paused warmup at each mailbox's recorded rail (SendKit, or TrulyInbox for inboxes still warming there). A mailbox on a rail Oxygen no longer drives reports unsupported instead of being retargeted. Targets the whole pool unless --mailboxes is given.")
         .option("--mailboxes <list>", "Comma-separated mailbox ids or addresses. Omit for the whole pool.")
         .option("--json", "Print a JSON envelope.")
         .action(async (options) => {
@@ -13151,7 +13173,7 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         });
     }))
         .addCommand(new Command("disable")
-        .description("Disable warmup and unenroll each mailbox from its recorded provider. On the managed trulyinbox rail this also cancels the warmup subscription — billing stops with the vendor removal. Targets the whole pool unless --mailboxes is given.")
+        .description("Disable warmup and unenroll each mailbox from the rail that actually enrolled it. On a managed rail — SendKit today, TrulyInbox for older enrollments — this also cancels that mailbox's warmup subscription, so billing stops with the vendor removal. This is how you wind an inbox off the retired TrulyInbox rail. Targets the whole pool unless --mailboxes is given.")
         .option("--mailboxes <list>", "Comma-separated mailbox ids or addresses. Omit for the whole pool.")
         .option("--json", "Print a JSON envelope.")
         .action(async (options) => {
@@ -13164,9 +13186,9 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         });
     }))
         .addCommand(new Command("status")
-        .description("Sync TrulyInbox warmup analytics into the pool, updating each mailbox's state. Targets the whole pool unless --mailboxes is given.")
+        .description("Read warmup analytics back from the rail each mailbox is enrolled on and update its state in the pool. Read-only at the vendor, 0 Oxygen credits. Targets the whole pool unless --mailboxes is given.")
         .option("--mailboxes <list>", "Comma-separated mailbox ids or addresses to sync. Omit to sync the whole pool.")
-        .option("--provider <name>", "Optional; trulyinbox is the only native warmup rail.")
+        .option("--provider <name>", "Optional. sendkit is the rail every current enrollment uses; pass trulyinbox only to read inboxes still warming on the retired rail. Omit it to read each mailbox on the rail it is recorded against.")
         .option("--dry-run", "Skip the provider call (mailboxes marked pending).")
         .option("--json", "Print a JSON envelope.")
         .action(async (options) => {
@@ -13189,28 +13211,6 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
             const suffix = params.toString();
             return requestOxygen(`/api/cli/mailboxes/warmup/status${suffix ? `?${suffix}` : ""}`);
         });
-    }))
-        .addCommand(new Command("provision")
-        .description("Legacy Zapmail-to-Instantly export for fleets already provisioned on that retired rail. It is not required for native TrulyInbox warmup; new Hypertide/Zapmail/InboxKit mailboxes use `mailboxes warmup enable`.")
-        .option("--mailboxes <list>", "Comma-separated mailbox ids or addresses to provision. Omit for the whole pool.")
-        .option("--connection <id>", "Zapmail connection id. Defaults to the org's active Zapmail connection (or the managed wallet).")
-        .option("--force", "Re-export mailboxes already exporting/warming/active (default skips them).")
-        .option("--dry-run", "Simulate without calling Zapmail (reports the mailboxes that would be exported).")
-        .option("--json", "Print a JSON envelope.")
-        .action(async (options) => {
-        await handleAsyncAction("mailboxes warmup provision", options, () => {
-            const mailboxes = readCsvOption(options.mailboxes);
-            const connection = readOption(options.connection);
-            return requestOxygen("/api/cli/mailboxes/warmup/provision", {
-                method: "POST",
-                body: {
-                    ...(mailboxes.length > 0 ? { mailboxes } : {}),
-                    ...(connection ? { connection_id: connection } : {}),
-                    ...(options.force ? { force: true } : {}),
-                    ...(options.dryRun ? { dry_run: true } : {}),
-                },
-            });
-        });
     })))
         .addCommand(new Command("order")
         .description("RETIRED — managed mailboxes are now purchased as monthly subscriptions via `oxygen managed-inboxes subscribe` (InboxKit-backed). This legacy Zapmail order path was never enabled anywhere and now always fails with code `gone`.")
@@ -16041,11 +16041,24 @@ async function requestColumnsRun(body, table, options) {
     // Inline (formula) results carry no action_run_id and pass through as-is.
     if (!options.background && typeof body.row_id === "string" && isRecord(result)) {
         const actionRunId = readRecordString(result, "action_run_id");
-        if (actionRunId)
+        if (actionRunId) {
+            writeSingleRowColumnRunReceipt(result, actionRunId);
             return resolveSingleRowColumnRun(result, actionRunId);
+        }
     }
     return result;
 }
+// The durable run exists before the convenience auto-wait begins. Emit its
+// receipt on stderr immediately so strict JSON stdout remains one envelope while
+// a shell/agent timeout can still recover the charged run instead of reporting
+// a silent failure with no inspectable id.
+function writeSingleRowColumnRunReceipt(envelope, actionRunId) {
+    const webUrl = readRecordString(envelope, "web_url")
+        ?? readRecordString(envelope, "run_web_url");
+    const inspection = webUrl ? ` (${webUrl})` : "";
+    process.stderr.write(`queued: column run ${actionRunId}${inspection}\n`);
+    process.stderr.write(`hint: if this process stops, continue with oxygen table-runs wait ${actionRunId}\n`);
+}
 /**
  * Wait for an auto-backgrounded single-row column run to finish and return the
  * terminal run merged with its item output (the cell value). On wait timeout
@@ -18204,6 +18217,72 @@ async function handleOrgUseAction(organization, options, command) {
         emitCliFailure(command, error);
     }
 }
+// Why each organization cannot pay for another workspace, in the user's words.
+// The codes are the server's; the sentences exist so a blocked `billing-link`
+// says what to fix instead of printing an enum.
+const BILLING_OWNER_INELIGIBLE_REASONS = {
+    not_admin: "You are not an admin of that organization.",
+    no_plan: "It has no active paid plan.",
+    trialing: "It is on a trial, and a trial only covers the workspace it started in.",
+    already_linked: "Its own billing is already covered by another organization.",
+};
+// `--owner` is optional because the case that matters is the plainest one: the
+// user pays for exactly one organization and wants this workspace on it. The
+// eligibility rules (admin seat, active paid plan, no trial) stay on the server
+// — the CLI only picks when the answer is unambiguous, and turns "which one?"
+// into a typed failure rather than a guess.
+async function resolveSoleBillingOwnerRef() {
+    const candidates = readBillingOwnerCandidates(await requestOxygen("/api/cli/orgs/billing-owners"));
+    const eligible = candidates.filter((candidate) => candidate.eligible);
+    if (eligible.length === 1)
+        return eligible[0].id;
+    if (eligible.length > 1) {
+        throw new OxygenError("missing_billing_owner", `${eligible.length} of your organizations can pay for this workspace, so Oxygen will not choose for you. Re-run with --owner <organization>.`, {
+            details: {
+                eligible_billing_owners: eligible.map((candidate) => ({
+                    organization_id: candidate.id,
+                    name: candidate.name,
+                })),
+                next_step: `oxygen orgs billing-link --owner ${eligible[0].id}`,
+            },
+        });
+    }
+    throw new OxygenError("no_eligible_billing_owner", candidates.length === 0
+        ? "You do not belong to another organization, so there is no existing plan to put this workspace on. Start one at https://oxygen-agent.com/billing."
+        : "None of your other organizations can pay for this workspace. Only an organization you administer that is on an active paid plan can cover another workspace — a trial cannot.", {
+        details: {
+            candidates: candidates.map((candidate) => ({
+                organization_id: candidate.id,
+                name: candidate.name,
+                ineligible_reason: candidate.ineligible_reason,
+                reason: candidate.ineligible_reason
+                    ? BILLING_OWNER_INELIGIBLE_REASONS[candidate.ineligible_reason] ?? null
+                    : null,
+            })),
+            next_step: "Start a plan on the organization that should pay at https://oxygen-agent.com/billing, then re-run `oxygen orgs billing-link`.",
+        },
+    });
+}
+// Both spellings of the reason field are read, the same way the billing-link
+// route accepts either spelling of its body keys: the rows come straight out of
+// the billing-ownership library, and a casing change there must not silently
+// downgrade "we picked your plan" into "you have no eligible plan".
+function readBillingOwnerCandidates(payload) {
+    const rows = isRecord(payload) && Array.isArray(payload.candidates) ? payload.candidates : [];
+    const candidates = [];
+    for (const row of rows) {
+        if (!isRecord(row) || typeof row.id !== "string" || !row.id)
+            continue;
+        const reason = row.ineligible_reason ?? row.ineligibleReason;
+        candidates.push({
+            id: row.id,
+            name: typeof row.name === "string" ? row.name : row.id,
+            eligible: row.eligible === true,
+            ineligible_reason: typeof reason === "string" ? reason : null,
+        });
+    }
+    return candidates;
+}
 async function handleProfilesListAction(options) {
     try {
         const state = await listCredentialProfiles();

package/node_modules/@oxygen/shared/dist/capability-discovery.js

@@ -188,7 +188,7 @@ export const OXYGEN_CAPABILITY_ROUTES = [
         gatewayCommands: ["publishing comments list", "publishing analytics summary", "posts get", "posts create"],
         skills: ["oxygen-linkedin-marketing"],
         endpointSections: [],
-        intentTerms: ["post artifact", "social post", "post comments", "public comments", "comments needing reply", "post reactions", "post performance", "posting analytics", "broadcast content"],
+        intentTerms: ["post artifact", "social post", "post comments", "public comments", "unanswered comments", "comments needing reply", "owned posts", "post reactions", "post performance", "posting analytics", "broadcast content"],
     },
     {
         id: "signals",
@@ -746,9 +746,9 @@ function isNetNewLinkedInInitiation(query) {
 function isOwnedPostCommentIntent(query) {
     if (!/\bcomments?\b/.test(query) || !/\b(linkedin|posts?|publishing)\b/.test(query))
         return false;
-    const owned = /\b(my|our|own)\b|\boxygen[ -]published\b|\bpublished through oxygen\b/.test(query);
+    const owned = /\b(my|our|own|owned)\b|\boxygen[ -]published\b|\bpublished through oxygen\b/.test(query);
     const operatorWork = /\b(needs?|needing|awaiting)\b.{0,20}\b(response|reply|answer)\b/.test(query)
-        || /\b(reply|respond|answer|triage|queue)\b/.test(query);
+        || /\b(reply|respond|answer|triage|queue|unanswered|unreplied)\b/.test(query);
     return owned || operatorWork;
 }
 function isHostedWorkflowIntent(query) {
@@ -770,7 +770,7 @@ function isPublicLinkedInRead(query) {
         return false;
     const disclaimsConnectedAccount = /\b(without|no|not using|does not require)\b.{0,24}\bconnected(?: linkedin)? account\b/.test(query);
     const connectedOwnership = !disclaimsConnectedAccount
-        && /\b(my|our|own|connected|connections|followers|inbox|messages|recruiter|sales\s*navigator|salesnav|unipile|viewers)\b/.test(query);
+        && /\b(my|our|own|owned|connected|connections|followers|inbox|messages|recruiter|sales\s*navigator|salesnav|unipile|viewers)\b/.test(query);
     if (connectedOwnership)
         return false;
     return /\b(comments?|companies|company|competitor|cookieless|engagers?|harvest|posts?|profiles?|public|reactions?|reactors?|scrape|scraper|search|third[ -]party)\b/.test(query);

package/node_modules/@oxygen/shared/dist/social-capabilities.js

@@ -32,10 +32,10 @@ const LINKEDIN_UNIPILE_CAPABILITIES = {
     operations: {
         list_owned_posts: {
             status: "limited",
-            source: "oxygen_store",
-            provider_operation: null,
+            source: "provider",
+            provider_operation: "linkedin.users_posts",
             external_write: false,
-            limitation: "oxygen_published_posts_only",
+            limitation: "recent_owned_posts_30_day_window",
         },
         read_post_metrics: {
             status: "limited",

package/node_modules/@oxygen/shared/dist/version.d.ts

@@ -1,3 +1,3 @@
-export declare const OXYGEN_VERSION = "1.632.3";
+export declare const OXYGEN_VERSION = "1.638.1";
 export declare const OXYGEN_MINIMUM_CLI_VERSION = "1.181.0";
 export declare const MANAGED_INBOX_MINIMUM_CLI_VERSION = "1.326.2";

package/node_modules/@oxygen/shared/dist/version.js

@@ -1,4 +1,4 @@
-export const OXYGEN_VERSION = "1.632.3";
+export const OXYGEN_VERSION = "1.638.1";
 // The GLOBAL CLI compatibility floor: the oldest CLI allowed to call any
 // operational route. Raising it hard-rejects every older CLI from the entire
 // product, so it obeys one law, enforced by scripts/ci/cli-min-version-gate.mjs:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oxygen-agent/cli",
-  "version": "1.632.3",
+  "version": "1.638.1",
   "private": false,
   "license": "UNLICENSED",
   "type": "module",