@oxygen-agent/cli 1.632.3 → 1.662.0

package/node_modules/@oxygen/shared/dist/column-types.js

@@ -14,6 +14,7 @@ export const RETYPEABLE_DATA_TYPES = [
     "text",
     "numeric",
     "boolean",
+    "jsonb",
     "timestamptz",
 ];
 // Excel/Sheets store dates as a serial number of days since 1899-12-30.
@@ -134,7 +135,17 @@ value, dataType) {
     }
     switch (dataType) { // skipcq: JS-0047
         case "text":
-            return { ok: true, value: typeof value === "string" ? value : String(value) };
+            if (typeof value === "string")
+                return { ok: true, value };
+            if (typeof value === "object") {
+                try {
+                    return { ok: true, value: JSON.stringify(value) };
+                }
+                catch {
+                    return { ok: false, reason: "not JSON-serializable text" };
+                }
+            }
+            return { ok: true, value: String(value) };
         case "timestamptz": {
             const iso = parseDateValueToIso(value, { allowExcelSerial: true });
             return iso
@@ -157,5 +168,19 @@ value, dataType) {
             }
             return { ok: false, reason: "not a recognized boolean" };
         }
+        case "jsonb": {
+            try {
+                if (typeof value === "string") {
+                    return { ok: true, value: JSON.parse(value.trim()) };
+                }
+                const serialized = JSON.stringify(value);
+                if (serialized === undefined)
+                    return { ok: false, reason: "not valid JSON" };
+                return { ok: true, value: JSON.parse(serialized) };
+            }
+            catch {
+                return { ok: false, reason: "not valid JSON" };
+            }
+        }
     }
 }

package/node_modules/@oxygen/shared/dist/index.d.ts

@@ -11,6 +11,7 @@ export * from "./cell-format.js";
 export * from "./cli-envelope.js";
 export * from "./cli-login-code.js";
 export * from "./cli-result.js";
+export * from "./collab.js";
 export * from "./crm-reply-events.js";
 export * from "./crm-activity-events.js";
 export * from "./column-types.js";
@@ -45,6 +46,7 @@ export * from "./sequences.js";
 export * from "./suppression-entries.js";
 export * from "./table-limits.js";
 export * from "./log.js";
+export * from "./axiom-field-budget.js";
 export { sanitizeLogFields } from "./redaction.js";
 export * from "./provider-request-outcomes.js";
 export * from "./schedule-label.js";

package/node_modules/@oxygen/shared/dist/index.js

@@ -11,6 +11,7 @@ export * from "./cell-format.js";
 export * from "./cli-envelope.js";
 export * from "./cli-login-code.js";
 export * from "./cli-result.js";
+export * from "./collab.js";
 export * from "./crm-reply-events.js";
 export * from "./crm-activity-events.js";
 export * from "./column-types.js";
@@ -45,6 +46,7 @@ export * from "./sequences.js";
 export * from "./suppression-entries.js";
 export * from "./table-limits.js";
 export * from "./log.js";
+export * from "./axiom-field-budget.js";
 // Narrow, deliberate export (ADR 0014): lets telemetry emitters regression-test
 // their field names against the REAL log sanitizer — the unanchored
 // SECRET_KEY_PATTERN redacts any name containing "token", which mocked loggers

package/node_modules/@oxygen/shared/dist/pricing-sheet.d.ts

@@ -90,6 +90,36 @@ export declare const VOICE_CREDITS_PER_AMD_CALL = 38;
 /** Managed domains: registrar at-cost × 1.25 (≈ a $10.44 .com → ~13,050 credits/yr). */
 export declare const MANAGED_DOMAIN_MARKUP = 1.25;
 export declare const MANAGED_DOMAIN_CREDITS_PER_YEAR_TYPICAL = 13050;
+/**
+ * Inbox deliverability (EmailGuard placement seat). A flat monthly price per
+ * SUBSCRIBED inbox covering continuous deliverability monitoring (blacklist,
+ * SPF/DKIM/DMARC, domain reputation) plus an included allowance of
+ * inbox-placement (spam) tests; tests beyond the allowance bill the per-test
+ * price.
+ *
+ * All three are DISPLAY mirrors, per this file's contract. The canonical values
+ * live where they are enforced, and seed-parity.test.ts binds them so a mirror
+ * can never quietly drift from the number actually billed:
+ *   seat      DELIVERABILITY_UNIT_MONTHLY_CREDITS       (@oxygen/control-db,
+ *             also PRICING_SEED commitment.deliverability_unit) — 1,000 credits
+ *             ($1.00), restored by the founder on 2026-07-30 after reviewing the
+ *             Agency-plan unit economics, superseding the 2026-07-26 signature
+ *             of 2,000.
+ *   allowance DELIVERABILITY_INCLUDED_TESTS_PER_INBOX  (@oxygen/control-db)
+ *   overage   EMAILGUARD_MANAGED_PLACEMENT_CREDITS     (@oxygen/providers,
+ *             derived from the Agency plan rather than typed in)
+ *
+ * THE ALLOWANCE IS LOAD-BEARING, not a perk. Placement COGS is per TEST
+ * ($0.1327 on EmailGuard's Agency plan), not per inbox, so an unbounded seat
+ * inverts its own margin: at $1.00/inbox-month the EIGHTH test in a cycle is
+ * already sold at a loss. Two included tests cost $0.265 against $1.00 of
+ * revenue — a ~73% margin — and everything past them bills
+ * PLACEMENT_TEST_OVERAGE_CREDITS. Orgs on their own EmailGuard key (BYOK) pay 0.
+ */
+export declare const DELIVERABILITY_SEAT_CREDITS_PER_MONTH = 1000;
+export declare const DELIVERABILITY_INCLUDED_TESTS_PER_INBOX = 2;
+/** Overage placement test: $0.1327 EmailGuard COGS × 1.25, rounded up. */
+export declare const PLACEMENT_TEST_OVERAGE_CREDITS = 166;
 /**
  * LinkedIn accounts: founder decision (2026-07-25) — a PURE seat model. The
  * flat monthly connection fee per connected account is now the WHOLE LinkedIn

package/node_modules/@oxygen/shared/dist/pricing-sheet.js

@@ -82,6 +82,36 @@ export const VOICE_CREDITS_PER_AMD_CALL = 38;
 /** Managed domains: registrar at-cost × 1.25 (≈ a $10.44 .com → ~13,050 credits/yr). */
 export const MANAGED_DOMAIN_MARKUP = 1.25;
 export const MANAGED_DOMAIN_CREDITS_PER_YEAR_TYPICAL = 13_050;
+/**
+ * Inbox deliverability (EmailGuard placement seat). A flat monthly price per
+ * SUBSCRIBED inbox covering continuous deliverability monitoring (blacklist,
+ * SPF/DKIM/DMARC, domain reputation) plus an included allowance of
+ * inbox-placement (spam) tests; tests beyond the allowance bill the per-test
+ * price.
+ *
+ * All three are DISPLAY mirrors, per this file's contract. The canonical values
+ * live where they are enforced, and seed-parity.test.ts binds them so a mirror
+ * can never quietly drift from the number actually billed:
+ *   seat      DELIVERABILITY_UNIT_MONTHLY_CREDITS       (@oxygen/control-db,
+ *             also PRICING_SEED commitment.deliverability_unit) — 1,000 credits
+ *             ($1.00), restored by the founder on 2026-07-30 after reviewing the
+ *             Agency-plan unit economics, superseding the 2026-07-26 signature
+ *             of 2,000.
+ *   allowance DELIVERABILITY_INCLUDED_TESTS_PER_INBOX  (@oxygen/control-db)
+ *   overage   EMAILGUARD_MANAGED_PLACEMENT_CREDITS     (@oxygen/providers,
+ *             derived from the Agency plan rather than typed in)
+ *
+ * THE ALLOWANCE IS LOAD-BEARING, not a perk. Placement COGS is per TEST
+ * ($0.1327 on EmailGuard's Agency plan), not per inbox, so an unbounded seat
+ * inverts its own margin: at $1.00/inbox-month the EIGHTH test in a cycle is
+ * already sold at a loss. Two included tests cost $0.265 against $1.00 of
+ * revenue — a ~73% margin — and everything past them bills
+ * PLACEMENT_TEST_OVERAGE_CREDITS. Orgs on their own EmailGuard key (BYOK) pay 0.
+ */
+export const DELIVERABILITY_SEAT_CREDITS_PER_MONTH = 1_000;
+export const DELIVERABILITY_INCLUDED_TESTS_PER_INBOX = 2;
+/** Overage placement test: $0.1327 EmailGuard COGS × 1.25, rounded up. */
+export const PLACEMENT_TEST_OVERAGE_CREDITS = 166;
 /**
  * LinkedIn accounts: founder decision (2026-07-25) — a PURE seat model. The
  * flat monthly connection fee per connected account is now the WHOLE LinkedIn

package/node_modules/@oxygen/shared/dist/social-capabilities.d.ts

@@ -2,13 +2,12 @@
  * Social channel capability registry.
  *
  * Channel, provider rail, and operation support are deliberately independent.
- * LinkedIn is the only registered channel today, but callers resolve capabilities
- * through this contract instead of branching on `channel === "linkedin"`. Adding a
- * channel later means registering a real adapter profile, not adding placeholder UI.
+ * Callers resolve capabilities through this contract instead of branching on a
+ * channel name. A channel is registered only when a real adapter exists.
  */
-export declare const SOCIAL_CHANNELS: readonly ["linkedin"];
+export declare const SOCIAL_CHANNELS: readonly ["linkedin", "x"];
 export type SocialChannel = (typeof SOCIAL_CHANNELS)[number];
-export declare const SOCIAL_PROVIDER_RAILS: readonly ["unipile"];
+export declare const SOCIAL_PROVIDER_RAILS: readonly ["unipile", "composio"];
 export type SocialProviderRail = (typeof SOCIAL_PROVIDER_RAILS)[number];
 export declare const SOCIAL_OPERATIONS: readonly ["list_owned_posts", "read_post_metrics", "list_comments", "reply_to_comment"];
 export type SocialOperation = (typeof SOCIAL_OPERATIONS)[number];
@@ -24,7 +23,7 @@ export type SocialOperationCapability = {
     limitation: string | null;
 };
 export type SocialMetricCapability = {
-    status: "available" | "unavailable";
+    status: SocialCapabilityStatus;
     provider_field: string | null;
     reason: string | null;
 };
@@ -41,3 +40,5 @@ export type SocialCapabilityProfile = {
 };
 export declare function listSocialCapabilityProfiles(): readonly SocialCapabilityProfile[];
 export declare function getSocialCapabilityProfile(channel: string, providerRail: string): SocialCapabilityProfile | null;
+/** Resolve the first configured rail that can perform an operation for a channel. */
+export declare function getSocialCapabilityProfileForOperation(channel: string, operation: SocialOperation): SocialCapabilityProfile | null;

package/node_modules/@oxygen/shared/dist/social-capabilities.js

@@ -2,12 +2,11 @@
  * Social channel capability registry.
  *
  * Channel, provider rail, and operation support are deliberately independent.
- * LinkedIn is the only registered channel today, but callers resolve capabilities
- * through this contract instead of branching on `channel === "linkedin"`. Adding a
- * channel later means registering a real adapter profile, not adding placeholder UI.
+ * Callers resolve capabilities through this contract instead of branching on a
+ * channel name. A channel is registered only when a real adapter exists.
  */
-export const SOCIAL_CHANNELS = ["linkedin"];
-export const SOCIAL_PROVIDER_RAILS = ["unipile"];
+export const SOCIAL_CHANNELS = ["linkedin", "x"];
+export const SOCIAL_PROVIDER_RAILS = ["unipile", "composio"];
 export const SOCIAL_OPERATIONS = [
     "list_owned_posts",
     "read_post_metrics",
@@ -32,10 +31,10 @@ const LINKEDIN_UNIPILE_CAPABILITIES = {
     operations: {
         list_owned_posts: {
             status: "limited",
-            source: "oxygen_store",
-            provider_operation: null,
+            source: "provider",
+            provider_operation: "linkedin.users_posts",
             external_write: false,
-            limitation: "oxygen_published_posts_only",
+            limitation: "recent_owned_posts_30_day_window",
         },
         read_post_metrics: {
             status: "limited",
@@ -61,9 +60,9 @@ const LINKEDIN_UNIPILE_CAPABILITIES = {
     },
     metrics: {
         impressions: { status: "unavailable", provider_field: null, reason: NOT_EXPOSED_BY_UNIPILE },
-        reactions: { status: "available", provider_field: "reaction_count", reason: null },
-        comments: { status: "available", provider_field: "comment_count", reason: null },
-        reposts: { status: "available", provider_field: "repost_count", reason: null },
+        reactions: { status: "available", provider_field: "reaction_counter", reason: null },
+        comments: { status: "available", provider_field: "comment_counter", reason: null },
+        reposts: { status: "available", provider_field: "repost_counter", reason: null },
         saves: { status: "unavailable", provider_field: null, reason: NOT_EXPOSED_BY_UNIPILE },
         sends: { status: "unavailable", provider_field: null, reason: NOT_EXPOSED_BY_UNIPILE },
         clicks: { status: "unavailable", provider_field: null, reason: NOT_EXPOSED_BY_UNIPILE },
@@ -74,8 +73,66 @@ const LINKEDIN_UNIPILE_CAPABILITIES = {
         webhooks: false,
     },
 };
+const X_COMPOSIO_CAPABILITIES = {
+    version: 1,
+    channel: "x",
+    provider_rail: "composio",
+    operations: {
+        list_owned_posts: {
+            status: "unavailable",
+            source: "provider",
+            provider_operation: null,
+            external_write: false,
+            limitation: "oxygen_published_posts_only",
+        },
+        read_post_metrics: {
+            status: "limited",
+            source: "provider",
+            provider_operation: "TWITTER_POST_LOOKUP_BY_POST_ID",
+            external_write: false,
+            limitation: "connected_user_oauth_owned_posts",
+        },
+        list_comments: {
+            status: "unavailable",
+            source: "provider",
+            provider_operation: null,
+            external_write: false,
+            limitation: "not_implemented_for_x",
+        },
+        reply_to_comment: {
+            status: "unavailable",
+            source: "provider",
+            provider_operation: null,
+            external_write: true,
+            limitation: "not_implemented_for_x",
+        },
+    },
+    metrics: {
+        impressions: { status: "available", provider_field: "public_metrics.impression_count", reason: null },
+        reactions: { status: "available", provider_field: "public_metrics.like_count", reason: null },
+        comments: { status: "available", provider_field: "public_metrics.reply_count", reason: null },
+        reposts: { status: "available", provider_field: "public_metrics.retweet_count", reason: null },
+        saves: { status: "available", provider_field: "public_metrics.bookmark_count", reason: null },
+        sends: { status: "unavailable", provider_field: null, reason: "not_exposed_by_x_post_lookup" },
+        clicks: {
+            status: "limited",
+            provider_field: "non_public_metrics.url_link_clicks",
+            reason: "owned_posts_user_context_30_day_window",
+        },
+        video_views: {
+            status: "limited",
+            provider_field: "includes.media[].public_metrics.view_count",
+            reason: "video_media_only",
+        },
+    },
+    ingestion: {
+        polling: true,
+        webhooks: false,
+    },
+};
 const SOCIAL_CAPABILITY_PROFILES = [
     LINKEDIN_UNIPILE_CAPABILITIES,
+    X_COMPOSIO_CAPABILITIES,
 ];
 export function listSocialCapabilityProfiles() {
     return SOCIAL_CAPABILITY_PROFILES;
@@ -83,3 +140,7 @@ export function listSocialCapabilityProfiles() {
 export function getSocialCapabilityProfile(channel, providerRail) {
     return SOCIAL_CAPABILITY_PROFILES.find((profile) => profile.channel === channel && profile.provider_rail === providerRail) ?? null;
 }
+/** Resolve the first configured rail that can perform an operation for a channel. */
+export function getSocialCapabilityProfileForOperation(channel, operation) {
+    return SOCIAL_CAPABILITY_PROFILES.find((profile) => profile.channel === channel && profile.operations[operation].status !== "unavailable") ?? null;
+}

package/node_modules/@oxygen/shared/dist/tags.d.ts

@@ -1,6 +1,6 @@
 import type { TagColor } from "./select-options.js";
 /** Primitive kinds that participate in the workspace tag union today. */
-export declare const TAG_KINDS: readonly ["knowledge_page", "publishing_post", "sequence", "table", "workflow", "recipe", "conversation", "mailbox", "sender", "record", "domain", "project", "engagement_watch"];
+export declare const TAG_KINDS: readonly ["knowledge_page", "publishing_post", "sequence", "table", "workflow", "recipe", "conversation", "mailbox", "sender", "record", "domain", "project"];
 export type TagKind = (typeof TAG_KINDS)[number];
 /**
  * The taggable kinds in prose, for CLI `--help` and MCP tool descriptions.
@@ -8,7 +8,7 @@ export type TagKind = (typeof TAG_KINDS)[number];
  * Lives next to {@link TAG_KINDS} because those descriptions are the *discovery*
  * surface: a blind-user eval (2026-07-21) found the tags help still advertising
  * the original seven kinds, so a user reading `tags --help` had no way to learn
- * that domains, projects, or engagement watches were taggable at all — they had
+ * that domains or projects were taggable at all — they had
  * to stumble on each owning group's own help. One string, one import, and
  * `TAG_KIND_PROSE_MARKERS` fails the build/test if a new kind skips it.
  */

package/node_modules/@oxygen/shared/dist/tags.js

@@ -24,7 +24,6 @@ export const TAG_KINDS = [
     "record",
     "domain",
     "project",
-    "engagement_watch",
 ];
 /**
  * The taggable kinds in prose, for CLI `--help` and MCP tool descriptions.
@@ -32,13 +31,13 @@ export const TAG_KINDS = [
  * Lives next to {@link TAG_KINDS} because those descriptions are the *discovery*
  * surface: a blind-user eval (2026-07-21) found the tags help still advertising
  * the original seven kinds, so a user reading `tags --help` had no way to learn
- * that domains, projects, or engagement watches were taggable at all — they had
+ * that domains or projects were taggable at all — they had
  * to stumble on each owning group's own help. One string, one import, and
  * `TAG_KIND_PROSE_MARKERS` fails the build/test if a new kind skips it.
  */
 export const TAG_KINDS_PROSE = "publishing posts, knowledge pages, sequences, tables, workflows, recipes, " +
     "inbox conversations, CRM records, mailboxes, sender accounts, sending domains, " +
-    "projects, and engagement watches";
+    "and projects";
 /**
  * The phrase each kind must contribute to {@link TAG_KINDS_PROSE}. Typed as a
  * total map over TagKind, so adding a kind is a compile error until it is named
@@ -57,7 +56,6 @@ export const TAG_KIND_PROSE_MARKERS = {
     record: "CRM record",
     domain: "sending domain",
     project: "project",
-    engagement_watch: "engagement watch",
 };
 export function isTagKind(value) {
     return typeof value === "string" && TAG_KINDS.includes(value);
@@ -87,7 +85,6 @@ export const TAG_KIND_LABELS = {
     record: { one: "CRM record", many: "CRM records" },
     domain: { one: "domain", many: "domains" },
     project: { one: "project", many: "projects" },
-    engagement_watch: { one: "engagement watch", many: "engagement watches" },
 };
 /** Inline label for a count: `tagKindLabel("sequence", 1)` → "sequence". */
 export function tagKindLabel(kind, count) {

package/node_modules/@oxygen/shared/dist/version.d.ts

@@ -1,3 +1,3 @@
-export declare const OXYGEN_VERSION = "1.632.3";
+export declare const OXYGEN_VERSION = "1.662.0";
 export declare const OXYGEN_MINIMUM_CLI_VERSION = "1.181.0";
 export declare const MANAGED_INBOX_MINIMUM_CLI_VERSION = "1.326.2";

package/node_modules/@oxygen/shared/dist/version.js

@@ -1,4 +1,4 @@
-export const OXYGEN_VERSION = "1.632.3";
+export const OXYGEN_VERSION = "1.662.0";
 // The GLOBAL CLI compatibility floor: the oldest CLI allowed to call any
 // operational route. Raising it hard-rejects every older CLI from the entire
 // product, so it obeys one law, enforced by scripts/ci/cli-min-version-gate.mjs:

package/node_modules/@oxygen/shared/package.json

@@ -111,6 +111,11 @@
       "import": "./dist/tags.js",
       "default": "./dist/tags.js"
     },
+    "./collab": {
+      "types": "./dist/collab.d.ts",
+      "import": "./dist/collab.js",
+      "default": "./dist/collab.js"
+    },
     "./schedule-label": {
       "types": "./dist/schedule-label.d.ts",
       "import": "./dist/schedule-label.js",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oxygen-agent/cli",
-  "version": "1.632.3",
+  "version": "1.662.0",
   "private": false,
   "license": "UNLICENSED",
   "type": "module",