@oxygen-agent/cli 1.662.0 → 1.677.10

package/README.md

@@ -34,4 +34,4 @@ oxygen update
 
 For product documentation, visit https://oxygen-agent.com/docs. For support, visit https://oxygen-agent.com.
 
-Version: 1.662.0
+Version: 1.677.10

package/dist/index.js

@@ -6311,7 +6311,7 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
     }));
     program
         .command("tags")
-        .description(`Workspace tags: one vocabulary across ${TAG_KINDS_PROSE}. Tags normalize to lowercase (trimmed, deduped, max 50 per item; any characters — nothing is slugified, so "Q3 Outbound" becomes "q3 outbound"). ATTACH tags on the owning surface — each of those groups has its own \`tag\` subcommand (e.g. \`oxygen inbox tag\`, \`oxygen tables tag\`, \`oxygen domains tag\`) — then \`tags get <tag>\` returns every carrier with deep-links. CURATE the vocabulary here: \`tags create\` declares a tag (with a description, color, and pin) before anything carries it, \`tags update\` re-annotates one, and \`tags rename\`/\`merge\`/\`delete\` reshape it everywhere at once.`)
+        .description(`Workspace tags: one vocabulary across ${TAG_KINDS_PROSE}. Tags normalize to lowercase (trimmed, deduped, max 50 per item; any characters — nothing is slugified, so "Q3 Outbound" becomes "q3 outbound"). ATTACH tags on the owning surface — each of those groups has its own \`tag\` subcommand (e.g. \`oxygen inbox tag\`, \`oxygen tables tag\`, \`oxygen domains tag\`) — then \`tags get <tag>\` returns every carrier with deep-links. CURATE the vocabulary here: \`tags create\` declares a tag (with a description, color, and pin) before anything carries it, \`tags update\` re-annotates one, and \`tags rename\`/\`merge\`/\`delete\` reshape it everywhere at once. Tags are free, inert metadata: attaching or removing one costs 0 credits, makes no provider call, and changes no sending, routing, or warm-up behaviour.`)
         .addCommand(new Command("list")
         .description("List every workspace tag with per-primitive counts, most-used first.")
         .option("--json", "Print a JSON envelope.")
@@ -8541,6 +8541,7 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         // appearing in a command's flag strings, so an approval-shaped name
         // here would mislabel every command that carries it.
         .option("--move-existing", "Also re-home the mailboxes you already have onto the new dedicated IP. Off by default because moving an established mailbox throws away the sending warmup it accumulated on its current IP.")
+        .option("--country <code>", "ISO 3166-1 alpha-2 country the dedicated IP should sit in (e.g. US, DE). Match it to where your mailboxes' owners plausibly sign in from — the IP's job is making the sign-in look ordinary, and an account that suddenly authenticates from another country is what gets it challenged. Omitted uses the default region. An unserviceable or out-of-stock country fails before anything is ordered or charged.")
         .option("--json", "Print a JSON envelope.")
         .action(async (options) => {
         await handleAsyncAction("egress dedicated request", options, () => requestOxygen("/api/cli/egress/dedicated", {
@@ -8548,6 +8549,7 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
             body: {
                 ...(options.approved ? { approve: true } : {}),
                 ...(options.moveExisting ? { move_existing: true } : {}),
+                ...(readOption(options.country) ? { country: readOption(options.country) } : {}),
             },
         }));
     }))
@@ -10075,9 +10077,10 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         });
     }))
         .addCommand(new Command("destinations")
-        .description("List where a connected integration can send — for Microsoft Teams, the teams you belong to, and one team's channels with --team-id. Free: these are read-only lookups, so no approval or credit cap is needed.")
+        .description("List where a connected integration can send — for Microsoft Teams, your teams and your chats, plus one team's channels with --team-id. Free: these are read-only lookups, so no approval or credit cap is needed.")
         .argument("<integration_id>", "Integration id. Supported: 'microsoft_teams'.")
-        .option("--team-id <id>", "List this team's channels as well as your teams.")
+        .option("--team-id <id>", "List this team's channels as well.")
+        .option("--kind <kind>", "Narrow to one of: teams, channels, chats. Default lists teams and chats.")
         .option("--connection-id <id>", "Use a specific connection when several are active.")
         .option("--json", "Print a JSON envelope.")
         .action(async (integrationId, options) => {
@@ -10086,6 +10089,9 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
             const teamId = readOption(options.teamId);
             if (teamId)
                 params.set("team_id", teamId);
+            const kind = readOption(options.kind);
+            if (kind)
+                params.set("kind", kind);
             const connectionId = readOption(options.connectionId);
             if (connectionId)
                 params.set("connection_id", connectionId);
@@ -10129,6 +10135,7 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         .description("List connected LinkedIn sender accounts with health status, rate limits, and today's usage.")
         .option("--status <status>", "Filter by sender status: active, paused, disconnected, restricted, or credentials_required.")
         .option("--no-usage", "Skip today's per-account usage counts for a faster, lighter response.")
+        .option("--tag <tags>", "Comma-separated workspace tags — matches sender accounts carrying ANY of these tags (see `oxygen tags list`).")
         .option("--json", "Print a JSON envelope.")
         .action(async (options) => {
         await handleAsyncAction("senders list", options, () => {
@@ -10138,6 +10145,9 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
             const status = readOption(options.status);
             if (status)
                 params.set("status", status);
+            const tags = splitCommaList(options.tag);
+            if (tags.length > 0)
+                params.set("tag", tags.join(","));
             const suffix = params.toString();
             return requestOxygen(`/api/cli/senders${suffix ? `?${suffix}` : ""}`);
         });
@@ -10313,6 +10323,9 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         .option("--total-reads-per-day <n>", "Daily cap across all read units.")
         .option("--min-spacing-seconds <n>", "Minimum seconds between actions.")
         .option("--spacing-jitter-seconds <n>", "Random jitter seconds added to action spacing.")
+        .option("--interactive-min-spacing-seconds <n>", "Minimum seconds between human-sent Unibox actions.")
+        .option("--interactive-spacing-jitter-seconds <n>", "Random jitter seconds added to human-sent Unibox action spacing.")
+        .option("--interactive-sends-per-hour <n>", "Hourly cap on human-sent Unibox actions.")
         .option("--timezone <tz>", "IANA timezone the daily action counters reset in, e.g. America/New_York.")
         .option("--warmup-restart", "Start (or restart) the warm-up ramp now — gradually raises this account's invite + message caps to full over ~2 weeks.")
         .option("--warmup-disable", "Turn off warm-up for this account (treat it as already warm and use its full configured caps).")
@@ -10335,12 +10348,31 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         .addCommand(new Command("list")
         .description("List sender profiles with their per-channel account counts (LinkedIn / WhatsApp / inboxes).")
         .option("--status <status>", "Filter by status: active, paused, or archived.")
+        .option("--tag <tags>", "Comma-separated workspace tags — matches sender profiles carrying ANY of these tags (see `oxygen tags list`).")
         .option("--json", "Print a JSON envelope.")
         .action(async (options) => {
         await handleAsyncAction("senders profiles list", options, () => {
+            const params = new URLSearchParams();
             const status = readOption(options.status);
-            return requestOxygen(`/api/cli/senders/profiles${status ? `?status=${encodeURIComponent(status)}` : ""}`);
+            if (status)
+                params.set("status", status);
+            const tags = splitCommaList(options.tag);
+            if (tags.length > 0)
+                params.set("tag", tags.join(","));
+            const suffix = params.toString();
+            return requestOxygen(`/api/cli/senders/profiles${suffix ? `?${suffix}` : ""}`);
         });
+    }))
+        .addCommand(new Command("tag")
+        .description("Replace a sender profile's workspace tags (whole set; `--tags \"\"` clears) — one edit pools the whole sending identity behind a campaign tag. Member accounts keep their own tags. See `oxygen tags list` for the vocabulary.")
+        .argument("<id>", "Sender profile id.")
+        .requiredOption("--tags <tags>", "Comma-separated workspace tags (replaces the whole set; empty clears).")
+        .option("--json", "Print a JSON envelope.")
+        .action(async (id, options) => {
+        await handleAsyncAction("senders profiles tag", options, () => requestOxygen(`/api/cli/senders/profiles/${encodeURIComponent(id)}/tags`, {
+            method: "POST",
+            body: { tags: splitCommaList(options.tags) },
+        }));
     }))
         .addCommand(new Command("get")
         .description("Get one sender profile with the LinkedIn/WhatsApp senders and inboxes attached to it.")
@@ -10864,6 +10896,7 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         .description("List connected WhatsApp accounts with health status, warm-up ramp state, limits, and today's usage.")
         .option("--status <status>", "Filter by account status: active, paused, disconnected, restricted, or credentials_required.")
         .option("--no-usage", "Skip today's per-account usage counts.")
+        .option("--tag <tags>", "Comma-separated workspace tags — matches WhatsApp accounts carrying ANY of these tags (see `oxygen tags list`).")
         .option("--json", "Print a JSON envelope.")
         .action(async (options) => {
         await handleAsyncAction("whatsapp accounts", options, () => {
@@ -10873,6 +10906,9 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
             const status = readOption(options.status);
             if (status)
                 params.set("status", status);
+            const tags = splitCommaList(options.tag);
+            if (tags.length > 0)
+                params.set("tag", tags.join(","));
             const suffix = params.toString();
             return requestOxygen(`/api/cli/whatsapp/accounts${suffix ? `?${suffix}` : ""}`);
         });
@@ -12508,12 +12544,31 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         });
     })))
         .addCommand(new Command("numbers")
-        .description("The org's dialing pool: list | release. Buying is done from the web shop, which prices and previews the recurring order before it is placed.")
+        .description("The org's dialing pool: list | tag | release. Buying is done from the web shop, which prices and previews the recurring order before it is placed.")
         .addCommand(new Command("list")
-        .description("List the org's phone numbers with warm-up state, daily cap, and what each one costs per month.")
+        .description("List the org's phone numbers with warm-up state, daily cap, and what each one costs per month. Optional --tag narrows to one campaign's numbers.")
+        .option("--tag <tags>", "Comma-separated workspace tags — matches phone numbers carrying ANY of these tags (see `oxygen tags list`).")
         .option("--json", "Print a JSON envelope.")
         .action(async (options) => {
-        await handleAsyncAction("voice numbers list", options, () => requestOxygen("/api/cli/voice/numbers"));
+        await handleAsyncAction("voice numbers list", options, () => {
+            const params = new URLSearchParams();
+            const tags = splitCommaList(options.tag);
+            if (tags.length > 0)
+                params.set("tag", tags.join(","));
+            const suffix = params.toString();
+            return requestOxygen(`/api/cli/voice/numbers${suffix ? `?${suffix}` : ""}`);
+        });
+    }))
+        .addCommand(new Command("tag")
+        .description("Replace a phone number's workspace tags (whole set; `--tags \"\"` clears) — e.g. pool the numbers dialing one campaign behind its tag. See `oxygen tags list` for the vocabulary.")
+        .argument("<number>", "Phone number in E.164 (e.g. +14155550142) or its id.")
+        .requiredOption("--tags <tags>", "Comma-separated workspace tags (replaces the whole set; empty clears).")
+        .option("--json", "Print a JSON envelope.")
+        .action(async (number, options) => {
+        await handleAsyncAction("voice numbers tag", options, () => requestOxygen(`/api/cli/voice/numbers/${encodeURIComponent(number)}/tags`, {
+            method: "POST",
+            body: { tags: splitCommaList(options.tags) },
+        }));
     }))
         .addCommand(new Command("release")
         .description("Give a number back to the carrier and stop its monthly charge. IRREVERSIBLE — the number returns to the carrier's pool and can be taken by someone else within minutes; you cannot get it back. Previews by default; pass --approved to actually release.")
@@ -12984,10 +13039,11 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         });
     })));
     program.addCommand(new Command("mailboxes")
-        .description("Native email sending pool: register/refresh Google/Microsoft mailboxes (including secure local Hypertide transfer), pause/disable inboxes, connect EmailGuard monitoring, and run managed SendKit warmup with explicit plans and credit caps. Safe import preflight: run `oxygen mailboxes compatibility --catalog-only --json`, then `oxygen mailboxes import --file <path> --validate-only --json` (add the credential source flags shown by import help when the file contains credentials).")
+        .description("Native email sending pool: register/refresh Google/Microsoft mailboxes (including secure local Hypertide transfer), pause/disable inboxes, connect EmailGuard monitoring, and run managed SendKit warmup with explicit plans and credit caps. Managed InboxKit Google and Microsoft mailboxes use InboxKit's native Sequencer export during the approved warmup action; SendKit warms them but never owns campaign dispatch. Safe import preflight: run `oxygen mailboxes compatibility --catalog-only --json`, then `oxygen mailboxes import --file <path> --validate-only --json` (add the credential source flags shown by import help when the file contains credentials).")
         .addCommand(new Command("list")
         .description("List the org's sending mailboxes with provider, status, warmup state, source (managed = bought through Oxygen, byok = bring-your-own), and a pool overview (including counts by source).")
         .option("--status <status>", "Filter by status: active, paused, or disabled.")
+        .option("--tag <tags>", "Comma-separated workspace tags — matches mailboxes carrying ANY of these tags (see `oxygen tags list`).")
         .option("--json", "Print a JSON envelope.")
         .action(async (options) => {
         await handleAsyncAction("mailboxes list", options, () => {
@@ -12995,6 +13051,9 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
             const status = readOption(options.status);
             if (status)
                 params.set("status", status);
+            const tags = splitCommaList(options.tag);
+            if (tags.length > 0)
+                params.set("tag", tags.join(","));
             const suffix = params.toString();
             return requestOxygen(`/api/cli/mailboxes${suffix ? `?${suffix}` : ""}`);
         });
@@ -13035,7 +13094,7 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         });
     }))
         .addCommand(new Command("import")
-        .description("Register (or refresh) sending mailboxes in bulk. Use --validate-only with a local file for a non-mutating, no-network preflight; without it, import is a 0-credit state mutation whose upsert is idempotent by mailbox address. CSV/JSON/JSONL/XLSX identity files from any vendor use --file plus optional --vendor. Compatible Google app-password exports use --from credentials --vendor <source>; --from hypertide remains a shortcut. Connected Zapmail inventories use --from zapmail. In credential files, app_password is Google-only; Microsoft password fields are discarded locally. OAuth grants, MFA/TOTP seeds, and delegation keys never transfer: Microsoft warmup requires one Outlook OAuth authorization per mailbox (`mailboxes warmup microsoft`) and EmailGuard remains vendor_blocked for Microsoft. Google app passwords are sent only in the request body, encrypted server-side, and never returned.")
+        .description("Register (or refresh) sending mailboxes in bulk. Use --validate-only with a local file for a non-mutating, no-network preflight; without it, import is a 0-credit state mutation whose upsert is idempotent by mailbox address. CSV/JSON/JSONL/XLSX identity files from any vendor use --file plus optional --vendor. Compatible Google app-password exports use --from credentials --vendor <source>; --from hypertide remains a shortcut. Connected Zapmail inventories use --from zapmail. In credential files, app_password is Google-only; Microsoft password fields are discarded locally. OAuth grants, MFA/TOTP seeds, and delegation keys never transfer: managed InboxKit Google/Microsoft warmup uses native InboxKit Sequencer export during `warmup enable`; eligible non-InboxKit Microsoft warmup uses the separate Outlook OAuth fallback (`mailboxes warmup microsoft`); EmailGuard remains vendor_blocked for Microsoft. Google app passwords are sent only in the request body, encrypted server-side, and never returned.")
         .addHelpText("after", [
         "",
         "Ordinary identity file contract (CSV / JSON / JSONL / XLSX):",
@@ -13380,9 +13439,9 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         });
     }))
         .addCommand(new Command("warmup")
-        .description("Mailbox warmup for the sending pool — the weeks of low-volume conversational mail that make a new inbox look trusted before you cold-send from it. Oxygen's native warmup runs on ONE rail: SendKit, managed and credit-billed at 3,000 credits per warming inbox per month ($3). Oxygen enrolls the mailbox for you — preview first, then re-run with --approved to execute and bill. Google and Microsoft both warm here; a Microsoft inbox first needs one Outlook authorization of its own (`mailboxes warmup microsoft`). Inboxes already warming on the retired TrulyInbox rail keep reporting and are wound down here with `warmup disable`; they are never silently moved onto SendKit.")
+        .description("Mailbox warmup for the sending pool — the weeks of low-volume conversational mail that make a new inbox look trusted before you cold-send from it. Oxygen's native warmup runs on ONE rail: SendKit, managed and credit-billed at 3,000 credits per warming inbox per month ($3). Oxygen enrolls the mailbox for you — preview first, then re-run with --approved to execute and bill. Managed InboxKit Google and Microsoft mailboxes are exported through InboxKit's native Sequencer integration inside that approved action; InboxKit auto-export stays off, and any non-cancelled InboxKit warmup blocks the handoff so one mailbox cannot warm twice. SendKit is warmup-only: native OXYGEN Sequences still own campaigns and sends. Eligible non-InboxKit Microsoft mailboxes use the separate `mailboxes warmup microsoft` OAuth fallback. Inboxes already warming on the retired TrulyInbox rail keep reporting and are wound down here with `warmup disable`; they are never silently moved onto SendKit.")
         .addCommand(new Command("enable")
-        .description("Enroll sending mailboxes in Oxygen's managed SendKit warmup and stamp each mailbox's warmup state. Targets the whole pool unless --mailboxes is given. Without --approved this is a 0-credit, no-provider-write priced preview: nothing is enrolled or billed. Preview one inbox with `oxygen mailboxes warmup enable --mailboxes sender@example.com --json`. Execute by echoing its --plan and --max-credits with --approved. Microsoft inboxes must finish `mailboxes warmup microsoft` (one Outlook authorization each) before they can enroll. New enrollments only ever land on SendKit — the retired TrulyInbox rail is refused here and only accepts teardown.")
+        .description("Enroll sending mailboxes in Oxygen's managed SendKit warmup and stamp each mailbox's warmup state. Targets the whole pool unless --mailboxes is given; one synchronous preview/approval is capped at 220 mailboxes, so split larger pools into explicit batches. Without --approved this is a 0-credit, no-provider-write priced preview: nothing is exported, enrolled, or billed. Preview one inbox with `oxygen mailboxes warmup enable --mailboxes sender@example.com --json`. Execute by echoing its --plan and --max-credits with --approved. Managed InboxKit Google and Microsoft mailboxes use InboxKit's native Sequencer export here by default; auto-export remains off, and any non-cancelled InboxKit warmup must be cancelled before export (pausing is not enough). Only eligible non-InboxKit Microsoft mailboxes need `mailboxes warmup microsoft`. SendKit supplies warmup only — OXYGEN Sequences retain campaign enrollment and dispatch. New enrollments only ever land on SendKit; the retired TrulyInbox rail is refused here and only accepts teardown.")
         .option("--mailboxes <list>", "Comma-separated mailbox ids or addresses to warm. Omit to warm the whole pool.")
         .option("--approved", "Execute the PRICED enrollment. Without it the response is a priced preview and nothing is enrolled or billed.")
         .option("--plan <hash>", "Hash from the fresh preview (required with --approved).")
@@ -13426,8 +13485,8 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         });
     }))
         .addCommand(new Command("microsoft")
-        .description("Authorize Microsoft/Outlook mailboxes for SendKit warmup — ONE browser consent PER MAILBOX, never a password or app password. There is no tenant-admin shortcut: a 40-inbox Microsoft pool means 40 separate authorizations, each opened by whoever can sign in to that mailbox. The preview names the exact mailboxes and how many consent links are still outstanding, at 0 credits. Approve that fresh hash with --max-credits 0 to mint the links, open every returned consent_url, then re-run with --status to see which mailboxes came back authorized. Warmup itself stays OFF until a separately approved `warmup enable`.")
-        .option("--mailboxes <list>", "Comma-separated Microsoft mailbox ids or addresses. Omit to select every Microsoft mailbox in the pool.")
+        .description("NON-INBOXKIT FALLBACK ONLY: authorize eligible Microsoft/Outlook mailboxes for SendKit warmup with ONE browser consent PER MAILBOX, never a password or app password. Do not run this for managed InboxKit mailboxes: both Google and Microsoft use InboxKit's native Sequencer export during the separately approved `warmup enable`. For the fallback there is no tenant-admin shortcut: a 40-inbox Microsoft pool means 40 separate authorizations, each opened by whoever can sign in to that mailbox. The preview names the exact fallback mailboxes and outstanding links at 0 credits. Approve that fresh hash with --max-credits 0, open every returned consent_url, then re-run with --status. Warmup itself stays OFF until `warmup enable`.")
+        .option("--mailboxes <list>", "Comma-separated eligible non-InboxKit Microsoft mailbox ids or addresses. Omit to select the pool; the command refuses a scope containing managed InboxKit rows and points to warmup enable.")
         .option("--tenant <id>", "Deprecated and ignored: SendKit consent is per mailbox, so there is no tenant-wide scope to bind. Still accepted so older scripts keep running.")
         .option("--approved", "Mint the per-mailbox consent links for the exact previewed mailbox scope. Still 0 credits — a human then has to open each link.")
         .option("--plan <hash>", "Fresh setup preview hash (required with --approved).")
@@ -13678,6 +13737,7 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         .option("--expiring", "Only non-deleted domains expiring within 60 days.")
         .option("--has-mailboxes <bool>", "true → only domains with sending mailboxes; false → only domains without.")
         .option("--include-archived", "Include archived domains (hidden by default).")
+        .option("--tag <tags>", "Comma-separated workspace tags — matches domains carrying ANY of these tags (see `oxygen tags list`).")
         .option("--json", "Print a JSON envelope.")
         .action(async (options) => {
         await handleAsyncAction("domains list", options, () => {
@@ -13701,6 +13761,9 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
                 params.set("has_mailboxes", hasMailboxes);
             if (options.includeArchived)
                 params.set("include_archived", "true");
+            const tags = splitCommaList(options.tag);
+            if (tags.length > 0)
+                params.set("tag", tags.join(","));
             const suffix = params.toString();
             return requestOxygen(`/api/cli/domains${suffix ? `?${suffix}` : ""}`);
         });
@@ -21731,6 +21794,9 @@ options) {
     setLimit("total_reads_per_day", options.totalReadsPerDay);
     setLimit("min_action_spacing_seconds", options.minSpacingSeconds);
     setLimit("action_spacing_jitter_seconds", options.spacingJitterSeconds);
+    setLimit("interactive_min_spacing_seconds", options.interactiveMinSpacingSeconds);
+    setLimit("interactive_spacing_jitter_seconds", options.interactiveSpacingJitterSeconds);
+    setLimit("interactive_sends_per_hour", options.interactiveSendsPerHour);
     // Send windows are campaign-scoped; the only per-account time setting is the
     // timezone the daily counters reset in.
     const workingHours = {};

package/node_modules/@oxygen/shared/dist/capability-discovery.js

@@ -294,7 +294,12 @@ export const OXYGEN_CAPABILITY_ROUTES = [
         gatewayCommands: ["sequences send", "sequences create", "sequences enroll", "sequences start", "sequences list"],
         skills: ["oxygen-sequencer"],
         endpointSections: ["senders", "sequencer", "sequences", "spintax", "suppressions", "voice"],
-        intentTerms: ["sequence", "campaign", "cadence", "enroll", "outreach", "linkedin message", "linkedin dm", "nurture", "follow up", "sender rotation", "stop on reply"],
+        // "sender identity", "sender profile" and "phone number" are here because a
+        // blind-user eval (2026-08-09) asked for "our sender identity" and got routed
+        // to workspace-access — "identity" matched the AUTH sense. The nouns a user
+        // reaches for when naming a sending identity or the dialing pool have to land
+        // on the group that actually owns `senders profiles` and `voice numbers`.
+        intentTerms: ["sequence", "campaign", "cadence", "enroll", "outreach", "linkedin message", "linkedin dm", "nurture", "follow up", "sender rotation", "stop on reply", "sender identity", "sending identity", "sender profile", "phone number", "dialing", "dialer"],
     },
     {
         id: "publishing",

package/node_modules/@oxygen/shared/dist/collab.d.ts

@@ -4,14 +4,15 @@ import { type TagKind } from "./tags.js";
  *
  * Seeded from {@link TAG_KINDS}: anything worth labelling for a campaign is
  * worth discussing with the client who signs that campaign off. The list is
- * RESTATED rather than aliased because it is also a stored value — the
- * `ox_collab` CHECK constraint and existing rows pin it — so widening the tag
- * vocabulary must be a deliberate decision here, not a silent side effect that
- * lets the API accept a kind the database rejects. The alignment is enforced
+ * RESTATED rather than aliased because it is also a stored value — existing
+ * `ox_collab` rows pin it — so widening the tag vocabulary must be a deliberate
+ * decision here, not a silent side effect. (`subject_kind` deliberately carries
+ * no enum CHECK; 0182_collab.sql explains why, so adding a kind here needs no
+ * tenant migration.) The alignment is enforced
  * both ways: {@link EveryTagKindIsCommentable} fails the build if a taggable
  * kind is missing, and the paired test pins today's list exactly.
  */
-export declare const COLLAB_SUBJECT_KINDS: readonly ["knowledge_page", "publishing_post", "sequence", "table", "workflow", "recipe", "conversation", "mailbox", "sender", "record", "domain", "project"];
+export declare const COLLAB_SUBJECT_KINDS: readonly ["knowledge_page", "publishing_post", "sequence", "table", "workflow", "recipe", "conversation", "mailbox", "sender", "record", "domain", "project", "sender_profile", "voice_number"];
 export type CollabSubjectKind = (typeof COLLAB_SUBJECT_KINDS)[number];
 /** Compile-time assertion helper: instantiating with `false` is a type error. */
 type AssertTrue<T extends true> = T;

package/node_modules/@oxygen/shared/dist/collab.js

@@ -22,10 +22,11 @@ import { OxygenError } from "./cli-result.js";
  *
  * Seeded from {@link TAG_KINDS}: anything worth labelling for a campaign is
  * worth discussing with the client who signs that campaign off. The list is
- * RESTATED rather than aliased because it is also a stored value — the
- * `ox_collab` CHECK constraint and existing rows pin it — so widening the tag
- * vocabulary must be a deliberate decision here, not a silent side effect that
- * lets the API accept a kind the database rejects. The alignment is enforced
+ * RESTATED rather than aliased because it is also a stored value — existing
+ * `ox_collab` rows pin it — so widening the tag vocabulary must be a deliberate
+ * decision here, not a silent side effect. (`subject_kind` deliberately carries
+ * no enum CHECK; 0182_collab.sql explains why, so adding a kind here needs no
+ * tenant migration.) The alignment is enforced
  * both ways: {@link EveryTagKindIsCommentable} fails the build if a taggable
  * kind is missing, and the paired test pins today's list exactly.
  */
@@ -42,6 +43,8 @@ export const COLLAB_SUBJECT_KINDS = [
     "record",
     "domain",
     "project",
+    "sender_profile",
+    "voice_number",
 ];
 export function isCollabSubjectKind(value) {
     return typeof value === "string" && COLLAB_SUBJECT_KINDS.includes(value);
@@ -69,6 +72,8 @@ export const COLLAB_SUBJECT_LABELS = {
     record: { one: "CRM record", many: "CRM records" },
     domain: { one: "sending domain", many: "sending domains" },
     project: { one: "project", many: "projects" },
+    sender_profile: { one: "sender profile", many: "sender profiles" },
+    voice_number: { one: "phone number", many: "phone numbers" },
 };
 /**
  * What a thread on each kind is usually about, for `--help` and MCP tool
@@ -93,6 +98,8 @@ export const COLLAB_SUBJECT_PROSE = {
     record: "a CRM record's truth",
     domain: "a sending domain's DNS and warmup",
     project: "a project's scope",
+    sender_profile: "a sending identity's accounts and inboxes",
+    voice_number: "a dialing number's caps and warmup",
 };
 /** Oxford-comma list: ["a"] -> "a"; ["a","b"] -> "a and b"; ["a","b","c"] -> "a, b, and c". */
 function formatProseList(items) {

package/node_modules/@oxygen/shared/dist/credit-guidance.d.ts

@@ -5,9 +5,18 @@ export type CreditGuidance = {
     available_credits: number | null;
     credit_posture: CreditPosture;
     credit_guidance: string;
+    /** Present only when the caller supplied an expected (average) figure. */
+    expected_credits?: number;
 };
 export declare function buildCreditGuidance(input: {
     estimatedCredits: number | null | undefined;
     availableCredits: number | null | undefined;
     headroomMultiplier?: number;
+    /** The average a run actually costs. When given, the ceiling is sized from this. */
+    expectedCredits?: number | null | undefined;
+    /** Dearest single lane a row can reach — the tail the band covers. */
+    worstCaseCreditsPerRow?: number | null | undefined;
+    rowCount?: number | null | undefined;
+    /** True when estimatedCredits is a genuine per-row bound (bill-on-hit lanes). */
+    worstCaseIsHardBound?: boolean;
 }): CreditGuidance;

package/node_modules/@oxygen/shared/dist/credit-guidance.js

@@ -1,10 +1,66 @@
 const DEFAULT_HEADROOM_MULTIPLIER = 1.25;
+/**
+ * Size a ceiling from the EXPECTED cost plus a variance band, rather than from
+ * the worst case.
+ *
+ * A waterfall lane bills only on a hit and a row stops at the first lane that
+ * resolves it, so the worst case is the dearest lane on EVERY row — a tail event,
+ * not a price. Quoting it made a 4.8k job read as 31.6k and told workspaces with
+ * ample balance they were "tight".
+ *
+ * The band is `expected + worst_row x tailRows`, where `tailRows` scales like
+ * sqrt(n): unlucky rows are a sample of the tail, and their count grows with the
+ * square root of the run, not linearly. `+1` guarantees a run can always afford at
+ * least one row above the mean, and `min(n, ...)` collapses the whole thing to the
+ * true worst case on tiny runs, where it is cheap to just cover everything.
+ *
+ * `expected x 1.25` remains the floor, so a flat/cheap chain with no meaningful
+ * tail keeps exactly the old headroom.
+ */
+function expectedCreditCeiling(input) {
+    const floor = input.expectedCredits * input.headroomMultiplier;
+    let ceiling = floor;
+    if (input.worstCaseCreditsPerRow !== null && input.rowCount !== null && input.rowCount > 0) {
+        const tailRows = Math.min(input.rowCount, Math.ceil(Math.sqrt(input.rowCount)) + 1);
+        ceiling = Math.max(floor, input.expectedCredits + input.worstCaseCreditsPerRow * tailRows);
+    }
+    // Only clamp where the worst case is a REAL per-row bound — bill-on-hit lanes,
+    // where one lane is the most a row can cost. An AI/tool column's "estimate" is a
+    // token guess that real usage can exceed, so clamping there would reintroduce
+    // mid-run truncation on exactly the columns that have no ceiling of their own.
+    //
+    // Clamp to the worst case WITH its headroom, not to the bare figure: the row
+    // count is itself an estimate for a filtered selection, and the multiplier is
+    // what absorbs an undercount. Clamping to the bare total would make a small run
+    // strictly tighter than before this change, which is the opposite of the point.
+    if (input.worstCaseIsHardBound && input.worstCaseTotal !== null) {
+        ceiling = Math.min(ceiling, input.worstCaseTotal * input.headroomMultiplier);
+    }
+    return Math.max(1, Math.ceil(ceiling));
+}
 export function buildCreditGuidance(input) {
     const estimatedCredits = normalizeCreditValue(input.estimatedCredits);
     const availableCredits = normalizeCreditValue(input.availableCredits);
-    const recommendedMaxCredits = recommendedCreditCeiling(estimatedCredits, input.headroomMultiplier ?? DEFAULT_HEADROOM_MULTIPLIER);
+    const expectedCredits = normalizeCreditValue(input.expectedCredits);
+    const headroomMultiplier = normalizeMultiplier(input.headroomMultiplier);
+    // No expected figure supplied => byte-identical to the pre-existing behaviour,
+    // so publishing / sequences / AI callers are untouched by this change.
+    const recommendedMaxCredits = expectedCredits === null
+        ? recommendedCreditCeiling(estimatedCredits, headroomMultiplier)
+        : expectedCreditCeiling({
+            expectedCredits,
+            worstCaseCreditsPerRow: normalizeCreditValue(input.worstCaseCreditsPerRow),
+            worstCaseTotal: estimatedCredits,
+            rowCount: typeof input.rowCount === "number" && Number.isFinite(input.rowCount)
+                ? Math.max(0, Math.floor(input.rowCount))
+                : null,
+            headroomMultiplier,
+            worstCaseIsHardBound: input.worstCaseIsHardBound === true,
+        });
+    const expectedFields = expectedCredits === null ? {} : { expected_credits: expectedCredits };
     if (estimatedCredits === null) {
         return {
+            ...expectedFields,
             estimated_credits: null,
             recommended_max_credits: null,
             available_credits: availableCredits,
@@ -14,6 +70,7 @@ export function buildCreditGuidance(input) {
     }
     if (availableCredits === null) {
         return {
+            ...expectedFields,
             estimated_credits: estimatedCredits,
             recommended_max_credits: recommendedMaxCredits,
             available_credits: null,
@@ -22,7 +79,30 @@ export function buildCreditGuidance(input) {
         };
     }
     if (recommendedMaxCredits !== null && recommendedMaxCredits <= availableCredits) {
+        // When an expected figure drove the ceiling, the copy has to describe THAT,
+        // not "the estimate plus 25% headroom" — the old sentence would misstate how
+        // the number was derived. The tail warning is added only when a full
+        // fall-through really could outrun the balance; saying it otherwise invents
+        // a risk that does not exist.
+        if (expectedCredits !== null) {
+            const tailWarning = estimatedCredits > availableCredits
+                ? " Only a run where nearly every row falls through to the dearest provider could exceed your"
+                    + " balance — the run keeps going and stops when the balance runs out, keeping every row it"
+                    + " has already completed."
+                : "";
+            return {
+                ...expectedFields,
+                estimated_credits: estimatedCredits,
+                recommended_max_credits: recommendedMaxCredits,
+                available_credits: availableCredits,
+                credit_posture: "sufficient",
+                credit_guidance: `Credits cover the expected cost (≈${formatCreditsForCopy(expectedCredits)} credits) with `
+                    + "headroom for the rows that fall through to a pricier provider."
+                    + `${tailWarning} Unused credits are not spent.`,
+            };
+        }
         return {
+            ...expectedFields,
             estimated_credits: estimatedCredits,
             recommended_max_credits: recommendedMaxCredits,
             available_credits: availableCredits,
@@ -33,6 +113,7 @@ export function buildCreditGuidance(input) {
         };
     }
     return {
+        ...expectedFields,
         estimated_credits: estimatedCredits,
         recommended_max_credits: availableCredits > 0 ? roundCreditValue(availableCredits) : null,
         available_credits: availableCredits,
@@ -51,6 +132,14 @@ function recommendedCreditCeiling(estimatedCredits, headroomMultiplier = DEFAULT
         : DEFAULT_HEADROOM_MULTIPLIER;
     return Math.max(1, Math.ceil(normalized * multiplier));
 }
+function normalizeMultiplier(value) {
+    return Number.isFinite(value) && (value ?? 0) > 0
+        ? value
+        : DEFAULT_HEADROOM_MULTIPLIER;
+}
+function formatCreditsForCopy(value) {
+    return Math.round(value).toLocaleString("en-US");
+}
 function normalizeCreditValue(value) {
     if (typeof value !== "number" || !Number.isFinite(value) || value < 0)
         return null;

package/node_modules/@oxygen/shared/dist/tags.d.ts

@@ -1,6 +1,6 @@
 import type { TagColor } from "./select-options.js";
 /** Primitive kinds that participate in the workspace tag union today. */
-export declare const TAG_KINDS: readonly ["knowledge_page", "publishing_post", "sequence", "table", "workflow", "recipe", "conversation", "mailbox", "sender", "record", "domain", "project"];
+export declare const TAG_KINDS: readonly ["knowledge_page", "publishing_post", "sequence", "table", "workflow", "recipe", "conversation", "mailbox", "sender", "record", "domain", "project", "sender_profile", "voice_number"];
 export type TagKind = (typeof TAG_KINDS)[number];
 /**
  * The taggable kinds in prose, for CLI `--help` and MCP tool descriptions.

package/node_modules/@oxygen/shared/dist/tags.js

@@ -24,6 +24,8 @@ export const TAG_KINDS = [
     "record",
     "domain",
     "project",
+    "sender_profile",
+    "voice_number",
 ];
 /**
  * The taggable kinds in prose, for CLI `--help` and MCP tool descriptions.
@@ -37,7 +39,7 @@ export const TAG_KINDS = [
  */
 export const TAG_KINDS_PROSE = "publishing posts, knowledge pages, sequences, tables, workflows, recipes, " +
     "inbox conversations, CRM records, mailboxes, sender accounts, sending domains, " +
-    "and projects";
+    "projects, sender profiles, and phone numbers";
 /**
  * The phrase each kind must contribute to {@link TAG_KINDS_PROSE}. Typed as a
  * total map over TagKind, so adding a kind is a compile error until it is named
@@ -56,6 +58,8 @@ export const TAG_KIND_PROSE_MARKERS = {
     record: "CRM record",
     domain: "sending domain",
     project: "project",
+    sender_profile: "sender profile",
+    voice_number: "phone number",
 };
 export function isTagKind(value) {
     return typeof value === "string" && TAG_KINDS.includes(value);
@@ -85,6 +89,8 @@ export const TAG_KIND_LABELS = {
     record: { one: "CRM record", many: "CRM records" },
     domain: { one: "domain", many: "domains" },
     project: { one: "project", many: "projects" },
+    sender_profile: { one: "sender profile", many: "sender profiles" },
+    voice_number: { one: "phone number", many: "phone numbers" },
 };
 /** Inline label for a count: `tagKindLabel("sequence", 1)` → "sequence". */
 export function tagKindLabel(kind, count) {

package/node_modules/@oxygen/shared/dist/version.d.ts

@@ -1,3 +1,3 @@
-export declare const OXYGEN_VERSION = "1.662.0";
+export declare const OXYGEN_VERSION = "1.677.10";
 export declare const OXYGEN_MINIMUM_CLI_VERSION = "1.181.0";
 export declare const MANAGED_INBOX_MINIMUM_CLI_VERSION = "1.326.2";

package/node_modules/@oxygen/shared/dist/version.js

@@ -1,4 +1,4 @@
-export const OXYGEN_VERSION = "1.662.0";
+export const OXYGEN_VERSION = "1.677.10";
 // The GLOBAL CLI compatibility floor: the oldest CLI allowed to call any
 // operational route. Raising it hard-rejects every older CLI from the entire
 // product, so it obeys one law, enforced by scripts/ci/cli-min-version-gate.mjs:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oxygen-agent/cli",
-  "version": "1.662.0",
+  "version": "1.677.10",
   "private": false,
   "license": "UNLICENSED",
   "type": "module",