@oxygen-agent/cli 1.691.5 → 1.692.5

package/README.md

@@ -34,4 +34,4 @@ oxygen update
 
 For product documentation, visit https://oxygen-agent.com/docs. For support, visit https://oxygen-agent.com.
 
-Version: 1.691.5
+Version: 1.692.5

package/dist/command-manifest.js

@@ -46,6 +46,13 @@ const MUTATING_VERBS = new Set([
     "unbind", "unsubscribe", "update", "upload", "upsert", "use", "warm-send", "warmup",
     "withdraw", "write",
 ]);
+// `--approved` usually identifies a paid or externally mutating execution
+// mode, but a small number of destructive local operations are explicitly
+// zero-credit. Keep those exceptions exact so discovery never invents spend.
+const ZERO_CREDIT_APPROVAL_COMMANDS = new Set(["mailboxes delete"]);
+// These commands preview when the execution approval is omitted even though
+// their gate is named `--approved` rather than `--live`.
+const APPROVAL_PREVIEW_COMMANDS = new Set(["mailboxes delete"]);
 export function buildCommandManifest(program, binaryName) {
     const commands = [];
     for (const child of program.commands) {
@@ -172,8 +179,9 @@ function toManifestEntry(command, path) {
     const flagStrings = options.map((option) => option.flags);
     const leafVerb = path[path.length - 1] ?? "";
     const verbPrefix = leafVerb.split("-")[0] ?? leafVerb;
+    const commandName = path.join(" ");
     return {
-        name: path.join(" "),
+        name: commandName,
         group: path[0] ?? "",
         description: command.description(),
         arguments: command.registeredArguments.map((argument) => ({
@@ -186,20 +194,22 @@ function toManifestEntry(command, path) {
             description: option.description,
             required: option.mandatory,
         })),
-        spends_credits: flagStrings.some((flags) => flags.includes("--approved") ||
-            flags.includes("--max-credits") ||
-            // Copilot's explicit session inference-budget approval flag.
-            flags.includes("--budget-credits")) ||
-            // `copilot send` bills managed inference (5x actual model cost) inside the
-            // session budget approved at `copilot start`, and `copilot approve`
-            // dispatches the gated paid/external capability and requeues the paused
-            // turn (waking the worker for more 5x-billed inference) — no per-command
-            // cap flag exists for either, so the flag heuristic alone would misreport
-            // them as free.
-            (path[0] === "copilot" &&
-                (leafVerb === "send" || leafVerb === "approve")),
+        spends_credits: !ZERO_CREDIT_APPROVAL_COMMANDS.has(commandName) &&
+            (flagStrings.some((flags) => flags.includes("--approved") ||
+                flags.includes("--max-credits") ||
+                // Copilot's explicit session inference-budget approval flag.
+                flags.includes("--budget-credits")) ||
+                // `copilot send` bills managed inference (5x actual model cost) inside the
+                // session budget approved at `copilot start`, and `copilot approve`
+                // dispatches the gated paid/external capability and requeues the paused
+                // turn (waking the worker for more 5x-billed inference) — no per-command
+                // cap flag exists for either, so the flag heuristic alone would misreport
+                // them as free.
+                (path[0] === "copilot" &&
+                    (leafVerb === "send" || leafVerb === "approve"))),
         mutates: MUTATING_VERBS.has(leafVerb) || MUTATING_VERBS.has(verbPrefix),
-        preview_by_default: flagStrings.some((flags) => flags.includes("--live")),
+        preview_by_default: flagStrings.some((flags) => flags.includes("--live")) ||
+            APPROVAL_PREVIEW_COMMANDS.has(commandName),
         json_supported: flagStrings.some((flags) => flags.includes("--json")),
         hidden: isHiddenCommand(command),
     };

package/dist/index.js

@@ -12704,6 +12704,35 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         .option("--json", "Print a JSON envelope.")
         .action(async (mailbox, options) => {
         await handleAsyncAction("mailboxes get", options, () => requestOxygen(`/api/cli/mailboxes/${encodeURIComponent(mailbox)}`));
+    }))
+        .addCommand(new Command("delete")
+        .description("Preview or approve removal of exact mailboxes from Oxygen at 0 credits. Deletion immediately removes them from sending but never deletes the underlying Google Workspace or Microsoft 365 accounts. It preserves conversation/message/delivery history and stops the 1,000-credit mailbox commitment for future renewals; the current period is not refunded. Listed active/paused sequences keep their status but lose these senders and are not automatically paused. Managed mailboxes and live warmup/monitoring add-ons fail closed with their exact address-scoped teardown steps.")
+        .requiredOption("--mailboxes <list>", "Comma-separated mailbox ids or addresses (maximum 500).")
+        .option("--approved", "Execute the fresh preview. Requires --plan-hash and --confirmation.")
+        .option("--plan-hash <hash>", "Fresh preview plan_hash.")
+        .option("--confirmation <phrase>", "Exact confirmation_phrase returned by the fresh preview.")
+        .option("--json", "Print a JSON envelope.")
+        .action(async (options) => {
+        await handleAsyncAction("mailboxes delete", options, () => {
+            const mailboxes = readCsvOption(options.mailboxes);
+            if (mailboxes.length === 0) {
+                throw new Error("--mailboxes must contain at least one mailbox id or address.");
+            }
+            const planHash = readOption(options.planHash);
+            const confirmation = readOption(options.confirmation);
+            if (options.approved === true && (!planHash || !confirmation)) {
+                throw new Error("--approved requires --plan-hash and --confirmation from a fresh deletion preview.");
+            }
+            return requestOxygen("/api/cli/mailboxes/delete", {
+                method: "POST",
+                body: {
+                    mailboxes,
+                    ...(options.approved === true ? { approved: true } : {}),
+                    ...(planHash ? { plan_hash: planHash } : {}),
+                    ...(confirmation ? { confirmation } : {}),
+                },
+            });
+        });
     }))
         .addCommand(new Command("health")
         .description("Fleet email-health: the sending pool rolled up by external deliverability reputation (healthy/degraded/critical/unknown), per-mailbox scores, connected health providers, and DIRECTIONAL recommendations. Pure read — 0 credits; never pauses a mailbox.")
@@ -12746,7 +12775,7 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         "Credential file contract:",
         '  JSON: {"mailboxes":[{"email_address":"ada@send-acme.com","provider":"google","app_password":"<Google mailbox app password>"}]}',
         "  Only Google app passwords enter the encrypted seven-day transfer vault. Microsoft rows remain identity-only. Generic SMTP passwords and OAuth/MFA/delegation secrets are rejected.",
-        "  Validation: add --validate-only to parse the complete real file and return safe aggregate counts without authentication, a network request, or a workspace write. Any parse, shape, provider, platform, tenant, secret-policy, or duplicate-conflict error rejects the entire file before the first mailbox write and names mailboxes[index]; validation-only never writes. A later import infrastructure failure may interrupt the upsert; re-run the same file because import is idempotent by address.",
+        "  Validation: add --validate-only to parse the complete real file and return safe aggregate counts plus the provider-specific exact-account OAuth review plan without authentication, a network request, or a workspace write. The plan groups only supplied addresses into reviews of at most 10; it never discovers a domain, and the later online preview may skip existing grants. Any parse, shape, provider, platform, tenant, secret-policy, or duplicate-conflict error rejects the entire file before the first mailbox write and names mailboxes[index]; validation-only never writes. A later import infrastructure failure may interrupt the upsert; re-run the same file because import is idempotent by address.",
         "  Docs: https://oxygen-agent.com/docs/providers/mailbox-compatibility",
         "  Skill: oxygen-email-infra (`oxygen skills install --skill oxygen-email-infra`).",
         "",

package/node_modules/@oxygen/shared/dist/capability-discovery.js

@@ -512,6 +512,12 @@ function normalizeIntent(query) {
     return query.toLowerCase().replace(/[_-]+/g, " ").replace(/\s+/g, " ").trim();
 }
 function explicitCapabilityIntent(query) {
+    if (isMailboxDeleteIntent(query)) {
+        return ROUTE_BY_ID.get("sending-infrastructure") ?? null;
+    }
+    if (isMailboxOnboardingIntent(query)) {
+        return ROUTE_BY_ID.get("sending-infrastructure") ?? null;
+    }
     if (isHostedWorkflowIntent(query))
         return ROUTE_BY_PRIMITIVE.get("workflows") ?? null;
     if (isOwnedPostCommentIntent(query))
@@ -603,6 +609,36 @@ function highestScoringRoute(query) {
     return best?.card ?? null;
 }
 function recommendationsFor(card, query) {
+    if (card.id === "sending-infrastructure" && isMailboxDeleteIntent(query)) {
+        return {
+            tools: [
+                "oxygen_mailboxes_delete",
+                "oxygen_mailboxes_compatibility",
+                "oxygen_mailboxes_list",
+            ],
+            commands: [
+                "mailboxes delete",
+                "mailboxes compatibility",
+                "mailboxes list",
+            ],
+        };
+    }
+    if (card.id === "sending-infrastructure" && isMailboxOnboardingIntent(query)) {
+        return {
+            tools: [
+                "oxygen_mailboxes_compatibility",
+                "oxygen_mailboxes_import",
+                "oxygen_mailboxes_connect_oauth",
+                "oxygen_mailboxes_oauth_health",
+            ],
+            commands: [
+                "mailboxes compatibility",
+                "mailboxes import",
+                "mailboxes connect-oauth",
+                "mailboxes oauth-health",
+            ],
+        };
+    }
     if (card.primitive === "posts" && isOwnedPostCommentIntent(query)) {
         return {
             tools: ["oxygen_publishing_comments", "oxygen_publishing_analytics"],
@@ -782,6 +818,18 @@ function recommendationsFor(card, query) {
     }
     return { tools: [...card.gatewayTools], commands: [...card.gatewayCommands] };
 }
+function isMailboxOnboardingIntent(query) {
+    const operation = /\b(import|migrat\w*|onboard|register|upload|bring|connect existing|add existing)\b/.test(query);
+    const mailboxScope = /\b(mailbox(?:es)?|inbox(?:es)?|sender accounts?|email accounts?|sending pool)\b/.test(query);
+    return operation && mailboxScope;
+}
+function isMailboxDeleteIntent(query) {
+    const mailboxScope = /\b(mailbox(?:es)?|inbox(?:es)?|sender accounts?|email accounts?)\b/.test(query);
+    const removal = /\b(delete|remove)\b/.test(query)
+        || /\bdisconnect\b.{0,24}\b(mailbox(?:es)?|inbox(?:es)?|sender accounts?|email accounts?)\b/.test(query);
+    const scopedDetach = /\b(remove|disconnect)\b.{0,48}\b(mailbox(?:es)?|inbox(?:es)?|sender accounts?|email accounts?)\b.{0,24}\b(?:from|in|on)\b.{0,24}\b(sequence|campaign|cadence|sender profile)\b/.test(query);
+    return mailboxScope && removal && !scopedDetach;
+}
 function isNetNewLinkedInInitiation(query) {
     const mentionsLinkedIn = /\blinkedin\b|\bdm\b/.test(query);
     const startsConversation = /\b(send|message|dm|contact|reach out|initiate|start)\b/.test(query)

package/node_modules/@oxygen/shared/dist/mailbox-import.d.ts

@@ -21,6 +21,7 @@ export type MailboxImportValidationSummary = {
     infrastructure_platforms: Record<string, number>;
     credential_rows: number;
     identity_only_rows: number;
+    oauth_review_plan: MailboxOAuthReviewPlan;
     limits: {
         max_rows: number;
         max_file_bytes: number;
@@ -31,8 +32,26 @@ export type MailboxImportValidationSummary = {
     credits_used: 0;
     next_action: string;
 };
+export type MailboxOAuthProviderReviewPlan = {
+    mailboxes: number;
+    batches: number;
+    batch_sizes: number[];
+};
+export type MailboxOAuthReviewPlan = {
+    authorization: "exact_account_oauth";
+    scope: "validated_addresses";
+    directory_discovery: false;
+    existing_grants_checked: false;
+    batch_size: number;
+    total_batches: number;
+    providers: {
+        google: MailboxOAuthProviderReviewPlan;
+        microsoft: MailboxOAuthProviderReviewPlan;
+    };
+};
 export declare const MAILBOX_IMPORT_FILE_MAX_BYTES: number;
 export declare const MAILBOX_IMPORT_ROW_LIMIT = 500;
+export declare const MAILBOX_OAUTH_REVIEW_BATCH_SIZE = 10;
 /**
  * Infer the bounded mailbox-import format without node:path so browser and CLI
  * preflight use the same extension contract.
@@ -55,4 +74,11 @@ export declare function summarizeMailboxImportValidation(mailboxes: readonly Nor
     source: MailboxImportValidationSource;
     sourceProvider: string | null;
 }): MailboxImportValidationSummary;
+/**
+ * Build the deterministic, provider-specific review queue for exact-account
+ * OAuth. This is safe during local file validation: it uses only normalized
+ * provider counts, performs no directory discovery, and does not claim to know
+ * whether a workspace already holds a usable grant for an address.
+ */
+export declare function planMailboxOAuthReviews(mailboxes: readonly Pick<NormalizedMailboxImportRow, "provider">[]): MailboxOAuthReviewPlan;
 export declare function normalizeMailboxImportVendor(raw: string | null | undefined, from: string | null | undefined): string | null;

package/node_modules/@oxygen/shared/dist/mailbox-import.js

@@ -1,6 +1,7 @@
 import { OxygenError } from "./cli-result.js";
 export const MAILBOX_IMPORT_FILE_MAX_BYTES = 5 * 1024 * 1024;
 export const MAILBOX_IMPORT_ROW_LIMIT = 500;
+export const MAILBOX_OAUTH_REVIEW_BATCH_SIZE = 10;
 const MAILBOX_EMAIL_HEADERS = new Set([
     "address",
     "email",
@@ -194,6 +195,7 @@ export function summarizeMailboxImportValidation(mailboxes, input) {
         infrastructure_platforms: infrastructurePlatforms,
         credential_rows: credentialRows,
         identity_only_rows: mailboxes.length - credentialRows,
+        oauth_review_plan: planMailboxOAuthReviews(mailboxes),
         limits: {
             max_rows: MAILBOX_IMPORT_ROW_LIMIT,
             max_file_bytes: MAILBOX_IMPORT_FILE_MAX_BYTES,
@@ -205,6 +207,40 @@ export function summarizeMailboxImportValidation(mailboxes, input) {
         next_action: "Submit this reviewed file to register the mailboxes.",
     };
 }
+/**
+ * Build the deterministic, provider-specific review queue for exact-account
+ * OAuth. This is safe during local file validation: it uses only normalized
+ * provider counts, performs no directory discovery, and does not claim to know
+ * whether a workspace already holds a usable grant for an address.
+ */
+export function planMailboxOAuthReviews(mailboxes) {
+    const counts = { google: 0, microsoft: 0 };
+    for (const mailbox of mailboxes)
+        counts[mailbox.provider] += 1;
+    const google = planProviderOAuthReviews(counts.google);
+    const microsoft = planProviderOAuthReviews(counts.microsoft);
+    return {
+        authorization: "exact_account_oauth",
+        scope: "validated_addresses",
+        directory_discovery: false,
+        existing_grants_checked: false,
+        batch_size: MAILBOX_OAUTH_REVIEW_BATCH_SIZE,
+        total_batches: google.batches + microsoft.batches,
+        providers: { google, microsoft },
+    };
+}
+function planProviderOAuthReviews(mailboxes) {
+    const fullBatches = Math.floor(mailboxes / MAILBOX_OAUTH_REVIEW_BATCH_SIZE);
+    const remainder = mailboxes % MAILBOX_OAUTH_REVIEW_BATCH_SIZE;
+    const batchSizes = Array.from({ length: fullBatches }, () => MAILBOX_OAUTH_REVIEW_BATCH_SIZE);
+    if (remainder > 0)
+        batchSizes.push(remainder);
+    return {
+        mailboxes,
+        batches: batchSizes.length,
+        batch_sizes: batchSizes,
+    };
+}
 export function normalizeMailboxImportVendor(raw, from) {
     if (from === "hypertide") {
         if (raw && raw.trim().toLowerCase() !== "hypertide") {

package/node_modules/@oxygen/shared/dist/version.d.ts

@@ -1,3 +1,3 @@
-export declare const OXYGEN_VERSION = "1.691.5";
+export declare const OXYGEN_VERSION = "1.692.5";
 export declare const OXYGEN_MINIMUM_CLI_VERSION = "1.181.0";
 export declare const MANAGED_INBOX_MINIMUM_CLI_VERSION = "1.326.2";

package/node_modules/@oxygen/shared/dist/version.js

@@ -1,4 +1,4 @@
-export const OXYGEN_VERSION = "1.691.5";
+export const OXYGEN_VERSION = "1.692.5";
 // The GLOBAL CLI compatibility floor: the oldest CLI allowed to call any
 // operational route. Raising it hard-rejects every older CLI from the entire
 // product, so it obeys one law, enforced by scripts/ci/cli-min-version-gate.mjs:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oxygen-agent/cli",
-  "version": "1.691.5",
+  "version": "1.692.5",
   "private": false,
   "license": "UNLICENSED",
   "type": "module",