@oxygen-agent/cli 1.720.7 → 1.739.0

package/node_modules/@oxygen/shared/dist/index.d.ts

@@ -5,7 +5,9 @@ export * from "./billing.js";
 export * from "./billing-anchors.js";
 export * from "./budget-scopes.js";
 export * from "./capability-discovery.js";
+export * from "./user-capability-routing.js";
 export * from "./plan-limits.js";
+export * from "./plain-support-events.js";
 export * from "./spend-safety.js";
 export * from "./cell-format.js";
 export * from "./cli-envelope.js";
@@ -22,6 +24,8 @@ export * from "./directory.js";
 export * from "./email-tracking-token.js";
 export * from "./email-unsubscribe-token.js";
 export * from "./error-redaction.js";
+export * from "./future-signup-events.js";
+export * from "./future-signup-lifecycle-projection.js";
 export * from "./feature-gates.js";
 export * from "./hosted-ai.js";
 export * from "./identifiers.js";
@@ -64,8 +68,10 @@ export * from "./timing.js";
 export * from "./type-guards.js";
 export * from "./worker-failures-queue.js";
 export * from "./workflow-mcp-tools.js";
+export * from "./webhook-headers.js";
 export * from "./workflow-trigger-label.js";
 export * from "./workspace-event-catalog.js";
+export * from "./notetaker-events.js";
 export * from "./workspace-agents.js";
 export declare const MAX_ROW_LOOP_WRITE_ROWS = 500;
 export type SemanticVersion = {

package/node_modules/@oxygen/shared/dist/index.js

@@ -5,7 +5,9 @@ export * from "./billing.js";
 export * from "./billing-anchors.js";
 export * from "./budget-scopes.js";
 export * from "./capability-discovery.js";
+export * from "./user-capability-routing.js";
 export * from "./plan-limits.js";
+export * from "./plain-support-events.js";
 export * from "./spend-safety.js";
 export * from "./cell-format.js";
 export * from "./cli-envelope.js";
@@ -22,6 +24,8 @@ export * from "./directory.js";
 export * from "./email-tracking-token.js";
 export * from "./email-unsubscribe-token.js";
 export * from "./error-redaction.js";
+export * from "./future-signup-events.js";
+export * from "./future-signup-lifecycle-projection.js";
 export * from "./feature-gates.js";
 export * from "./hosted-ai.js";
 export * from "./identifiers.js";
@@ -75,8 +79,10 @@ export * from "./timing.js";
 export * from "./type-guards.js";
 export * from "./worker-failures-queue.js";
 export * from "./workflow-mcp-tools.js";
+export * from "./webhook-headers.js";
 export * from "./workflow-trigger-label.js";
 export * from "./workspace-event-catalog.js";
+export * from "./notetaker-events.js";
 export * from "./workspace-agents.js";
 // Maximum rows a single row-loop write (insert/upsert/preview) may process. The
 // row-loop engine issues one DB round-trip per row, so a 500-row write already

package/node_modules/@oxygen/shared/dist/notetaker-events.d.ts

@@ -0,0 +1,4 @@
+/** Canonical workflow-event contract emitted after a Meeting Notetaker run finishes. */
+export declare const NOTETAKER_WORKFLOW_EVENT_SOURCE = "oxygen.notetaker";
+export declare const NOTETAKER_MEETING_COMPLETED_EVENT = "meeting.completed";
+export declare const NOTETAKER_MEETING_COMPLETED_PAYLOAD_FIELDS: readonly ["provider", "source", "event", "session.id", "session.title", "session.status", "session.capture_mode", "session.scheduled_start_at", "session.started_at", "session.ended_at", "session.completed_at", "session.credits_used", "session.web_url", "meeting_note.markdown", "meeting_note.web_url", "crm.activity_id", "crm.links", "artifacts"];

package/node_modules/@oxygen/shared/dist/notetaker-events.js

@@ -0,0 +1,23 @@
+/** Canonical workflow-event contract emitted after a Meeting Notetaker run finishes. */
+export const NOTETAKER_WORKFLOW_EVENT_SOURCE = "oxygen.notetaker";
+export const NOTETAKER_MEETING_COMPLETED_EVENT = "meeting.completed";
+export const NOTETAKER_MEETING_COMPLETED_PAYLOAD_FIELDS = [
+    "provider",
+    "source",
+    "event",
+    "session.id",
+    "session.title",
+    "session.status",
+    "session.capture_mode",
+    "session.scheduled_start_at",
+    "session.started_at",
+    "session.ended_at",
+    "session.completed_at",
+    "session.credits_used",
+    "session.web_url",
+    "meeting_note.markdown",
+    "meeting_note.web_url",
+    "crm.activity_id",
+    "crm.links",
+    "artifacts",
+];

package/node_modules/@oxygen/shared/dist/plain-support-events.d.ts

@@ -0,0 +1,40 @@
+export declare const PLAIN_SUPPORT_WORKFLOW_EVENT_SOURCE = "plain_support";
+export declare const PLAIN_SUPPORT_MESSAGE_RECEIVED_EVENT = "message_received";
+export declare const PLAIN_SUPPORT_WEBHOOK_VERSION = "2026-02-11";
+export declare const PLAIN_SUPPORT_MESSAGE_RECEIVED_PAYLOAD_FIELDS: readonly ["event_id", "event_type", "occurred_at", "workspace_id", "webhook_target_id", "webhook_target_version", "thread_id", "thread_ref", "timeline_entry_id", "channel", "status", "priority", "tenant_external_id", "has_assignee", "assignee_kind", "label_external_ids", "support_fields", "thread_created_at", "thread_updated_at", "automation_mode", "customer_content_retained"];
+export declare const PLAIN_SUPPORT_INBOUND_EVENT_TYPES: readonly ["thread.chat_received", "thread.email_received", "thread.slack_message_received", "thread.ms_teams_message_received", "thread.discord_message_received"];
+export type PlainSupportInboundEventType = (typeof PLAIN_SUPPORT_INBOUND_EVENT_TYPES)[number];
+export declare const PLAIN_SUPPORT_CHANNELS: readonly ["chat", "email", "slack", "ms_teams", "discord"];
+export type PlainSupportChannel = (typeof PLAIN_SUPPORT_CHANNELS)[number];
+/**
+ * Metadata-only contract persisted in OXYGEN's Workflow event/run ledger.
+ *
+ * Plain remains the canonical and only customer-content store. Never add message
+ * text, Thread title/preview/description, customer identity, email, or attachment
+ * contents to this payload. A human or a separately governed support Agent reads
+ * that content from the canonical Plain Thread when it actually needs it.
+ */
+export type PlainSupportMessageReceivedPayload = {
+    event_id: string;
+    event_type: PlainSupportInboundEventType;
+    occurred_at: string;
+    workspace_id: string;
+    webhook_target_id: string;
+    webhook_target_version: typeof PLAIN_SUPPORT_WEBHOOK_VERSION;
+    thread_id: string;
+    thread_ref: string;
+    timeline_entry_id: string;
+    channel: PlainSupportChannel;
+    status: "TODO" | "SNOOZED" | "DONE";
+    priority: number;
+    tenant_external_id: string | null;
+    has_assignee: boolean;
+    assignee_kind: "user" | "machine_user" | "system" | null;
+    label_external_ids: string[];
+    support_fields: Record<string, string>;
+    thread_created_at: string;
+    thread_updated_at: string;
+    automation_mode: "observe";
+    customer_content_retained: false;
+};
+export declare function isPlainSupportInboundEventType(value: string): value is PlainSupportInboundEventType;

package/node_modules/@oxygen/shared/dist/plain-support-events.js

@@ -0,0 +1,43 @@
+export const PLAIN_SUPPORT_WORKFLOW_EVENT_SOURCE = "plain_support";
+export const PLAIN_SUPPORT_MESSAGE_RECEIVED_EVENT = "message_received";
+export const PLAIN_SUPPORT_WEBHOOK_VERSION = "2026-02-11";
+export const PLAIN_SUPPORT_MESSAGE_RECEIVED_PAYLOAD_FIELDS = [
+    "event_id",
+    "event_type",
+    "occurred_at",
+    "workspace_id",
+    "webhook_target_id",
+    "webhook_target_version",
+    "thread_id",
+    "thread_ref",
+    "timeline_entry_id",
+    "channel",
+    "status",
+    "priority",
+    "tenant_external_id",
+    "has_assignee",
+    "assignee_kind",
+    "label_external_ids",
+    "support_fields",
+    "thread_created_at",
+    "thread_updated_at",
+    "automation_mode",
+    "customer_content_retained",
+];
+export const PLAIN_SUPPORT_INBOUND_EVENT_TYPES = [
+    "thread.chat_received",
+    "thread.email_received",
+    "thread.slack_message_received",
+    "thread.ms_teams_message_received",
+    "thread.discord_message_received",
+];
+export const PLAIN_SUPPORT_CHANNELS = [
+    "chat",
+    "email",
+    "slack",
+    "ms_teams",
+    "discord",
+];
+export function isPlainSupportInboundEventType(value) {
+    return PLAIN_SUPPORT_INBOUND_EVENT_TYPES.includes(value);
+}

package/node_modules/@oxygen/shared/dist/redaction.js

@@ -36,6 +36,10 @@ const BEARER_TOKEN_PATTERN = /\bBearer\s+(?!tokens?(?![\w.~+/=-]))[\w.~+/=-]+/gi
 // missing" diagnostics (its actual value is an `sk-…` string, already covered).
 const DB_URL_PATTERN = /(?:postgres(?:ql)?|mysql|mongodb(?:\+srv)?|rediss?|amqps?):\/\/[^\s"'<>()]+/gi;
 const SK_TOKEN_PATTERN = /sk-[A-Za-z0-9_-]{20,}/g;
+// PostHog personal (`phx_`) and project (`phc_`) keys can be echoed inside a
+// provider hostname-validation error. They are secrets regardless of which
+// ordinary string field carried them, so scrub both credential families.
+const POSTHOG_TOKEN_PATTERN = /\bph[xc]_[A-Za-z0-9_-]{6,}/g;
 const MAX_LOG_STRING_LENGTH = 8_000;
 const MAX_TELEMETRY_STRING_LENGTH = 500;
 const MAX_ARRAY_LENGTH = 20;
@@ -151,7 +155,8 @@ export function redactSecretsInString(value) {
     return value
         .replace(BEARER_TOKEN_PATTERN, "Bearer[REDACTED]")
         .replace(DB_URL_PATTERN, "[REDACTED_DB_URL]")
-        .replace(SK_TOKEN_PATTERN, "[REDACTED_SK]");
+        .replace(SK_TOKEN_PATTERN, "[REDACTED_SK]")
+        .replace(POSTHOG_TOKEN_PATTERN, "[REDACTED_POSTHOG_KEY]");
 }
 function truncateString(value, maxLength) {
     return value.length > maxLength ? `${value.slice(0, maxLength)}...` : value;

package/node_modules/@oxygen/shared/dist/user-capability-routing.d.ts

@@ -0,0 +1,2 @@
+import { type CapabilityRouteMatch } from "./capability-discovery.js";
+export declare function inferUserCapabilityRoute(query: string): CapabilityRouteMatch | null;

package/node_modules/@oxygen/shared/dist/user-capability-routing.js

@@ -0,0 +1,23 @@
+import { getCapabilityRouteMatch, inferCapabilityRoute, } from "./capability-discovery.js";
+// Provider brands are intentionally not duplicated into the static capability
+// catalog. A short "connect <provider>" query would otherwise match Tables via
+// its relationship-oriented "connect" term. Correct that narrow ambiguity at
+// the user-facing boundary while preserving table joins and channel-specific
+// connection routes.
+export function inferUserCapabilityRoute(query) {
+    const route = inferCapabilityRoute(query);
+    if (route?.card.id !== "tables" || !isSimpleProviderConnectionIntent(query)) {
+        return route;
+    }
+    return getCapabilityRouteMatch("connected-integrations") ?? route;
+}
+function isSimpleProviderConnectionIntent(query) {
+    const normalized = query.toLowerCase().replace(/[_-]+/g, " ").replace(/\s+/g, " ").trim();
+    if (/\b(table|tables|row|rows|column|columns|dataset|join|relationship|relate)\b/.test(normalized)) {
+        return false;
+    }
+    if (/\b(integration|provider|oauth|byok|api key|connected account)\b/.test(normalized)) {
+        return /\b(connect|reconnect|disconnect)\b/.test(normalized);
+    }
+    return /\b(?:connect|reconnect|disconnect)\s+(?:(?:my|our|the)\s+)?(?!(?:this|that|them|us|me)\b)[a-z0-9][a-z0-9.]*\s*$/.test(normalized);
+}

package/node_modules/@oxygen/shared/dist/version.d.ts

@@ -1,3 +1,3 @@
-export declare const OXYGEN_VERSION = "1.720.7";
+export declare const OXYGEN_VERSION = "1.739.0";
 export declare const OXYGEN_MINIMUM_CLI_VERSION = "1.181.0";
 export declare const MANAGED_INBOX_MINIMUM_CLI_VERSION = "1.326.2";

package/node_modules/@oxygen/shared/dist/version.js

@@ -1,4 +1,4 @@
-export const OXYGEN_VERSION = "1.720.7";
+export const OXYGEN_VERSION = "1.739.0";
 // The GLOBAL CLI compatibility floor: the oldest CLI allowed to call any
 // operational route. Raising it hard-rejects every older CLI from the entire
 // product, so it obeys one law, enforced by scripts/ci/cli-min-version-gate.mjs:

package/node_modules/@oxygen/shared/dist/webhook-headers.d.ts

@@ -0,0 +1,10 @@
+/** Prevent one attacker-controlled audit value from bloating every delivery. */
+export declare const WEBHOOK_AUDIT_HEADER_VALUE_MAX_CHARS = 4096;
+/**
+ * Return only non-secret webhook audit headers, normalized to lower-case keys.
+ *
+ * `blockedHeaderNames` remains useful to callers documenting a provider's
+ * authentication headers, even though an auth header is omitted by default
+ * unless it is explicitly part of the allowlist above.
+ */
+export declare function sanitizeWebhookHeaderRecord(headers: Record<string, unknown> | null | undefined, blockedHeaderNames?: readonly string[]): Record<string, string>;

package/node_modules/@oxygen/shared/dist/webhook-headers.js

@@ -0,0 +1,48 @@
+/**
+ * Webhook headers that are useful for delivery correlation and payload parsing.
+ *
+ * Inbound requests also carry platform and authentication material (for example
+ * Vercel OIDC assertions, proxy signatures, cookies, and provider signatures).
+ * A denylist will always lag those providers, so persisted webhook audit data is
+ * intentionally an allowlist. Signature verification still receives the raw
+ * Headers object before this sanitizer runs.
+ */
+const WEBHOOK_AUDIT_HEADER_NAMES = new Set([
+    "accept",
+    "content-length",
+    "content-type",
+    "idempotency-key",
+    "user-agent",
+    "webhook-id",
+    "webhook-timestamp",
+    "x-correlation-id",
+    "x-event-id",
+    "x-event-type",
+    "x-idempotency-key",
+    "x-oxygen-delivery-id",
+    "x-request-id",
+    "x-webhook-event",
+    "x-webhook-id",
+]);
+/** Prevent one attacker-controlled audit value from bloating every delivery. */
+export const WEBHOOK_AUDIT_HEADER_VALUE_MAX_CHARS = 4_096;
+/**
+ * Return only non-secret webhook audit headers, normalized to lower-case keys.
+ *
+ * `blockedHeaderNames` remains useful to callers documenting a provider's
+ * authentication headers, even though an auth header is omitted by default
+ * unless it is explicitly part of the allowlist above.
+ */
+export function sanitizeWebhookHeaderRecord(headers, blockedHeaderNames = []) {
+    const blocked = new Set(blockedHeaderNames.map((name) => name.trim().toLowerCase()));
+    const sanitized = {};
+    for (const [rawName, rawValue] of Object.entries(headers ?? {})) {
+        const name = rawName.trim().toLowerCase();
+        if (!WEBHOOK_AUDIT_HEADER_NAMES.has(name) || blocked.has(name))
+            continue;
+        if (typeof rawValue !== "string")
+            continue;
+        sanitized[name] = rawValue.slice(0, WEBHOOK_AUDIT_HEADER_VALUE_MAX_CHARS);
+    }
+    return sanitized;
+}

package/node_modules/@oxygen/shared/dist/workspace-event-catalog.d.ts

@@ -1,3 +1,20 @@
+import { CRM_SIGNAL_WORKFLOW_EVENT_DEFINITIONS } from "./crm-reply-events.js";
+export declare const WORKSPACE_EVENT_PRODUCER_READINESS_REQUIREMENTS: readonly ["always", "notetaker_enabled"];
+export type WorkspaceEventProducerReadinessRequirement = (typeof WORKSPACE_EVENT_PRODUCER_READINESS_REQUIREMENTS)[number];
+export type CrmSignalWorkflowEvent = (typeof CRM_SIGNAL_WORKFLOW_EVENT_DEFINITIONS)[number]["event"];
+export type WorkspaceEventProducerId = "sequencer.contact_activity" | "sequencer.enrollment_terminal" | "crm.activity_created" | `crm.${CrmSignalWorkflowEvent}` | "notetaker.meeting_completed" | "plain_support.message_received";
+export type WorkspaceEventProducerDefinition = {
+    /** Stable producer identity used by typed internal dispatchers. */
+    id: WorkspaceEventProducerId;
+    source: string;
+    event: string;
+    /** Where the durable payload is recovered or deduplicated. */
+    delivery: "durable_ledger" | "transactional_outbox" | "direct_durable_write";
+    /** Human-readable idempotency contract surfaced to authors and operators. */
+    idempotency: string;
+    readiness: WorkspaceEventProducerReadinessRequirement;
+    payloadFields: readonly string[];
+};
 export type WorkspaceEventCatalogFilter = {
     path: string;
     op: "eq";
@@ -6,6 +23,7 @@ export type WorkspaceEventCatalogFilter = {
 export type WorkspaceEventCatalogEntry = {
     /** Stable catalog identity; independent of the underlying source/event pair. */
     id: string;
+    producerId: string;
     source: string;
     event: string;
     group: string;
@@ -14,7 +32,19 @@ export type WorkspaceEventCatalogEntry = {
     filters?: readonly WorkspaceEventCatalogFilter[];
     payloadFields: readonly string[];
 };
-export declare const WORKSPACE_EVENT_CATALOG_VERSION = 1;
+export declare const WORKSPACE_EVENT_CATALOG_VERSION = 2;
+/**
+ * Every app-native event producer that is safe to bind to a durable Workflow.
+ * Catalog presets below may fan one producer into many filtered choices, but a
+ * producer exists exactly once and is the authority for source/event identity.
+ */
+export declare const WORKSPACE_EVENT_PRODUCERS: readonly WorkspaceEventProducerDefinition[];
+export declare function getWorkspaceEventProducer(producerId: string): WorkspaceEventProducerDefinition | undefined;
+export declare function crmSignalWorkflowEventProducerId(event: CrmSignalWorkflowEvent): `crm.${CrmSignalWorkflowEvent}`;
+export declare function findWorkspaceEventProducer(input: {
+    source: string;
+    event: string;
+}): WorkspaceEventProducerDefinition | undefined;
 /**
  * Every app-native workspace event that has a durable or explicitly callable
  * producer. Integration-specific subscriptions are merged in at request time.

package/node_modules/@oxygen/shared/dist/workspace-event-catalog.js

@@ -2,7 +2,13 @@ import { CRM_ACTIVITY_CREATED_EVENT, CRM_ACTIVITY_EVENT_DEFINITIONS, } from "./c
 import { CRM_SIGNAL_WORKFLOW_EVENT_DEFINITIONS, CRM_WORKFLOW_EVENT_SOURCE, } from "./crm-reply-events.js";
 import { SEQUENCE_CONTACT_ACTIVITY_EVENT, SEQUENCE_CRM_EVENT_DEFINITIONS, SEQUENCE_WORKFLOW_EVENT_SOURCE, } from "./sequence-crm-events.js";
 import { SEQUENCE_ENROLLMENT_TERMINAL_EVENT, SEQUENCE_TERMINAL_EVENT_SOURCE, SEQUENCE_TERMINAL_STATUSES, } from "./sequence-terminal-events.js";
-export const WORKSPACE_EVENT_CATALOG_VERSION = 1;
+import { NOTETAKER_MEETING_COMPLETED_EVENT, NOTETAKER_MEETING_COMPLETED_PAYLOAD_FIELDS, NOTETAKER_WORKFLOW_EVENT_SOURCE, } from "./notetaker-events.js";
+import { PLAIN_SUPPORT_MESSAGE_RECEIVED_EVENT, PLAIN_SUPPORT_MESSAGE_RECEIVED_PAYLOAD_FIELDS, PLAIN_SUPPORT_WORKFLOW_EVENT_SOURCE, } from "./plain-support-events.js";
+export const WORKSPACE_EVENT_PRODUCER_READINESS_REQUIREMENTS = [
+    "always",
+    "notetaker_enabled",
+];
+export const WORKSPACE_EVENT_CATALOG_VERSION = 2;
 const sequenceActivityFields = [
     "event",
     "occurred_at",
@@ -49,6 +55,78 @@ const crmActivityFields = [
     "metadata",
     "links",
 ];
+const crmSignalProducerDefinitions = CRM_SIGNAL_WORKFLOW_EVENT_DEFINITIONS.map((definition) => ({
+    id: `crm.${definition.event}`,
+    source: CRM_WORKFLOW_EVENT_SOURCE,
+    event: definition.event,
+    delivery: "direct_durable_write",
+    idempotency: "Provider or conversation event identity is persisted before workflow fan-out.",
+    readiness: "always",
+    payloadFields: definition.payloadFields,
+}));
+/**
+ * Every app-native event producer that is safe to bind to a durable Workflow.
+ * Catalog presets below may fan one producer into many filtered choices, but a
+ * producer exists exactly once and is the authority for source/event identity.
+ */
+export const WORKSPACE_EVENT_PRODUCERS = [
+    {
+        id: "sequencer.contact_activity",
+        source: SEQUENCE_WORKFLOW_EVENT_SOURCE,
+        event: SEQUENCE_CONTACT_ACTIVITY_EVENT,
+        delivery: "durable_ledger",
+        idempotency: "The Sequencer activity ledger identity deduplicates repeated bridge scans.",
+        readiness: "always",
+        payloadFields: sequenceActivityFields,
+    },
+    {
+        id: "sequencer.enrollment_terminal",
+        source: SEQUENCE_TERMINAL_EVENT_SOURCE,
+        event: SEQUENCE_ENROLLMENT_TERMINAL_EVENT,
+        delivery: "transactional_outbox",
+        idempotency: "The append-only terminal outbox and enrollment outcome form one stable event identity.",
+        readiness: "always",
+        payloadFields: sequenceTerminalFields,
+    },
+    {
+        id: "crm.activity_created",
+        source: CRM_WORKFLOW_EVENT_SOURCE,
+        event: CRM_ACTIVITY_CREATED_EVENT,
+        delivery: "durable_ledger",
+        idempotency: "The CRM activity id is the durable workflow-event identity.",
+        readiness: "always",
+        payloadFields: crmActivityFields,
+    },
+    ...crmSignalProducerDefinitions,
+    {
+        id: "notetaker.meeting_completed",
+        source: NOTETAKER_WORKFLOW_EVENT_SOURCE,
+        event: NOTETAKER_MEETING_COMPLETED_EVENT,
+        delivery: "direct_durable_write",
+        idempotency: "The Notetaker session and provider completion identities deduplicate completion delivery.",
+        readiness: "notetaker_enabled",
+        payloadFields: NOTETAKER_MEETING_COMPLETED_PAYLOAD_FIELDS,
+    },
+    {
+        id: "plain_support.message_received",
+        source: PLAIN_SUPPORT_WORKFLOW_EVENT_SOURCE,
+        event: PLAIN_SUPPORT_MESSAGE_RECEIVED_EVENT,
+        delivery: "direct_durable_write",
+        idempotency: "The verified Plain event id deduplicates metadata-only support delivery.",
+        readiness: "always",
+        payloadFields: PLAIN_SUPPORT_MESSAGE_RECEIVED_PAYLOAD_FIELDS,
+    },
+];
+const workspaceEventProducersById = new Map(WORKSPACE_EVENT_PRODUCERS.map((producer) => [producer.id, producer]));
+export function getWorkspaceEventProducer(producerId) {
+    return workspaceEventProducersById.get(producerId);
+}
+export function crmSignalWorkflowEventProducerId(event) {
+    return `crm.${event}`;
+}
+export function findWorkspaceEventProducer(input) {
+    return WORKSPACE_EVENT_PRODUCERS.find((producer) => producer.source === input.source && producer.event === input.event);
+}
 function sequenceActivityDescription(key, label) {
     if (key === "email_bounced") {
         return "An outreach sequence enrollment reported an email bounce. Use the CRM timeline preset instead for any bounce activity logged on a CRM record.";
@@ -70,6 +148,7 @@ function crmActivityDescription(key, label) {
 const sequenceActivityEntries = [
     {
         id: "sequencer.contact_activity.any",
+        producerId: "sequencer.contact_activity",
         source: SEQUENCE_WORKFLOW_EVENT_SOURCE,
         event: SEQUENCE_CONTACT_ACTIVITY_EVENT,
         group: "Sequencer · All activity",
@@ -79,6 +158,7 @@ const sequenceActivityEntries = [
     },
     ...SEQUENCE_CRM_EVENT_DEFINITIONS.map((definition) => ({
         id: `sequencer.contact_activity.${definition.key}`,
+        producerId: "sequencer.contact_activity",
         source: SEQUENCE_WORKFLOW_EVENT_SOURCE,
         event: SEQUENCE_CONTACT_ACTIVITY_EVENT,
         group: `Sequencer · ${definition.group}`,
@@ -91,6 +171,7 @@ const sequenceActivityEntries = [
 const sequenceTerminalEntries = [
     {
         id: "sequencer.enrollment_terminal.any",
+        producerId: "sequencer.enrollment_terminal",
         source: SEQUENCE_TERMINAL_EVENT_SOURCE,
         event: SEQUENCE_ENROLLMENT_TERMINAL_EVENT,
         group: "Sequencer · Journey status",
@@ -100,6 +181,7 @@ const sequenceTerminalEntries = [
     },
     ...SEQUENCE_TERMINAL_STATUSES.map((status) => ({
         id: `sequencer.enrollment_terminal.${status}`,
+        producerId: "sequencer.enrollment_terminal",
         source: SEQUENCE_TERMINAL_EVENT_SOURCE,
         event: SEQUENCE_ENROLLMENT_TERMINAL_EVENT,
         group: "Sequencer · Journey status",
@@ -112,6 +194,7 @@ const sequenceTerminalEntries = [
 const crmActivityEntries = [
     {
         id: "crm.activity_created.any",
+        producerId: "crm.activity_created",
         source: CRM_WORKFLOW_EVENT_SOURCE,
         event: CRM_ACTIVITY_CREATED_EVENT,
         group: "CRM · All timeline activity",
@@ -121,6 +204,7 @@ const crmActivityEntries = [
     },
     ...CRM_ACTIVITY_EVENT_DEFINITIONS.map((definition) => ({
         id: `crm.activity_created.${definition.key}`,
+        producerId: "crm.activity_created",
         source: CRM_WORKFLOW_EVENT_SOURCE,
         event: CRM_ACTIVITY_CREATED_EVENT,
         group: `CRM · ${definition.group}`,
@@ -132,6 +216,7 @@ const crmActivityEntries = [
 ];
 const crmSignalEntries = CRM_SIGNAL_WORKFLOW_EVENT_DEFINITIONS.map((definition) => ({
     id: `crm.${definition.event}`,
+    producerId: `crm.${definition.event}`,
     source: CRM_WORKFLOW_EVENT_SOURCE,
     event: definition.event,
     group: `CRM · ${definition.group}`,
@@ -139,6 +224,30 @@ const crmSignalEntries = CRM_SIGNAL_WORKFLOW_EVENT_DEFINITIONS.map((definition)
     description: definition.description,
     payloadFields: definition.payloadFields,
 }));
+const plainSupportEntries = [
+    {
+        id: "plain_support.message_received",
+        producerId: "plain_support.message_received",
+        source: PLAIN_SUPPORT_WORKFLOW_EVENT_SOURCE,
+        event: PLAIN_SUPPORT_MESSAGE_RECEIVED_EVENT,
+        group: "Support · Plain",
+        label: "Customer message received",
+        description: "A customer sent a Chat, email, Slack, Microsoft Teams, or Discord message into a canonical Plain Thread. The event contains routing metadata only; customer content remains in Plain.",
+        payloadFields: PLAIN_SUPPORT_MESSAGE_RECEIVED_PAYLOAD_FIELDS,
+    },
+];
+const notetakerEntries = [
+    {
+        id: "notetaker.meeting_completed",
+        producerId: "notetaker.meeting_completed",
+        source: NOTETAKER_WORKFLOW_EVENT_SOURCE,
+        event: NOTETAKER_MEETING_COMPLETED_EVENT,
+        group: "Meeting Notetaker",
+        label: "Meeting completed",
+        description: "A Meeting Notetaker session finished processing and its transcript and meeting note are ready.",
+        payloadFields: NOTETAKER_MEETING_COMPLETED_PAYLOAD_FIELDS,
+    },
+];
 /**
  * Every app-native workspace event that has a durable or explicitly callable
  * producer. Integration-specific subscriptions are merged in at request time.
@@ -148,4 +257,6 @@ export const WORKSPACE_EVENT_CATALOG = [
     ...sequenceTerminalEntries,
     ...crmActivityEntries,
     ...crmSignalEntries,
+    ...plainSupportEntries,
+    ...notetakerEntries,
 ];

package/node_modules/@oxygen/workflows/dist/graph/expression.js

@@ -279,11 +279,13 @@ function resolveTokensDeep(value, scope, depth = 0) {
         return value.map((entry) => resolveTokensDeep(entry, scope, depth + 1));
     }
     if (isStructured(value)) {
-        const out = {};
-        for (const [key, entry] of Object.entries(value)) {
-            out[key] = resolveTokensDeep(entry, scope, depth + 1);
-        }
-        return out;
+        // Object.fromEntries defines own data properties even for `__proto__`.
+        // Assigning onto `{}` would mutate the clone's prototype and silently lose
+        // a valid JSON key before strict Code-input serialization can inspect it.
+        return Object.fromEntries(Object.entries(value).map(([key, entry]) => [
+            key,
+            resolveTokensDeep(entry, scope, depth + 1),
+        ]));
     }
     return value;
 }

package/node_modules/@oxygen/workflows/dist/graph/lint.d.ts

@@ -1,4 +1,13 @@
 import { type WorkflowLintResult, type WorkflowManifestValidationOptions } from "../index.js";
+import type { WorkflowCodeV1 } from "./types.js";
 import { type WorkflowGraphManifest } from "./types.js";
 export declare function lintWorkflowGraphManifest(value: unknown, options?: WorkflowManifestValidationOptions): WorkflowLintResult;
 export declare function assertWorkflowGraphManifest(value: unknown, options?: WorkflowManifestValidationOptions): asserts value is WorkflowGraphManifest;
+/**
+ * Validate one nested oxygen-js-v1 envelope without requiring its surrounding
+ * graph. Runtime entry points call this again immediately before sandbox
+ * creation; ref syntax is checked here, while graph node reachability remains a
+ * manifest-lint concern.
+ */
+export declare function lintWorkflowCodeV1Contract(value: unknown): WorkflowLintResult;
+export declare function assertWorkflowCodeV1Contract(value: unknown): asserts value is WorkflowCodeV1;