@oxygen-agent/cli 1.750.4 → 1.782.1

package/node_modules/@oxygen/shared/dist/billing.d.ts

@@ -111,102 +111,142 @@ export type CreditTopupPackId = CreditTopupPack["id"];
 export declare function resolveCreditTopupPack(id: string | null | undefined): CreditTopupPack | null;
 export declare const TRIAL_PERIOD_DAYS = 7;
 export declare const TRIAL_CREDIT_GRANT = 20000;
+/**
+ * Free-tier entry (founder-ratified 2026-08-16, grant shape settled 2026-08-17).
+ *
+ * Two ONE-TIME grants and no monthly trickle. The free tier's *surface* is
+ * unmetered — CRM, Tables, Workflows, Knowledge, Agents, Copilot, Sequence
+ * authoring cost nothing marginal, so they are not rationed — and credits meter
+ * only real per-call spend. That is why `BASE_PRICING_PLANS.free` still carries
+ * `monthlyCredits: 0` and `rolloverCap: null`: 0 is the ANSWER (no monthly
+ * allowance exists), not a missing value, and null still means "never claw back
+ * a leftover balance".
+ *
+ * The split exists for a specific reason. Granting only on CLI/MCP activation
+ * would ship a Workspace Copilot with no funds for exactly the users who chose
+ * the in-product path — the default Copilot session budget is 5,000 credits, so
+ * the signup grant is precisely one session. The activation half is the pull
+ * toward the agent-native surface, and rewards the same action the Company KPI
+ * scorecard already counts as activation.
+ *
+ * Ceiling is therefore 10,000 credits ($10) per billing-owner organization,
+ * ever. Neither grant is minted for a churned or downgraded workspace, and no
+ * other path re-mints either one — not downgrade, churn, re-subscribe, or
+ * billing-owner re-link. Top-ups stay purchasable on free, which is what keeps
+ * the metered surface open-ended rather than capped at the grant.
+ */
+export declare const FREE_SIGNUP_GRANT_CREDITS = 5000;
+export declare const FREE_ACTIVATION_GRANT_CREDITS = 5000;
+export declare const FREE_TIER_GRANTS_ENABLED_ENV_VAR = "OXYGEN_FREE_TIER_GRANTS_ENABLED";
+/**
+ * Fail-closed rollout switch for the free-tier grants, matching the staged
+ * pattern used by CREDIT_COMMITMENTS_ENABLED.
+ *
+ * UNSET MEANS OFF, which is the opposite of the InboxKit-style kill switches and
+ * is deliberate: this flag mints credits. Until the rest of the free tier ships
+ * — the capability-scoped entitlement of OXP-10.3 and the card-less signup of
+ * OXP-10.4 — an armed grant would fund workspaces that still hit the binary
+ * subscription wall, which is money spent on an experience that does not work
+ * yet. It also means the grant cannot fire for the existing organization
+ * population before the cutover posture is decided.
+ */
+export declare function freeTierGrantsEnabled(env?: Record<string, string | undefined>): boolean;
 export declare const WALKTHROUGH_COMPLETION_BONUS_CREDITS = 1000;
 export declare const WALKTHROUGH_SCRAPE_MAX_CREDITS = 2000;
 export declare const BASE_PRICING_PLANS: {
     readonly free: {
-        readonly tier: "free";
-        readonly name: "Free";
-        readonly monthlyPriceCents: 0;
-        readonly monthlyCredits: 0;
-        readonly weeklyCreditsLimit: null;
-        readonly rolloverCap: null;
         readonly monthlyAutomationActions: null;
         readonly automationOverageCentsPerMillion: null;
         readonly automationOverageEnabledDefault: false;
-        readonly byokEnabled: false;
-        readonly description: "No active plan. Start a 7-day trial on a self-serve plan to use OXYGEN — existing credit balances remain spendable.";
-        readonly ctaLabel: "Start trial";
-        readonly features: readonly ["Existing credits stay spendable", "Read access to your workspace"];
+        readonly description: "Your CRM, tables, and workflows — free forever. Credits pay for enrichment and AI; connecting a sender, publishing, managed email infrastructure, and your own provider keys need a plan.";
+        readonly ctaLabel: "Upgrade";
+        readonly features: readonly ["CRM, Tables, Workflows, and Knowledge — unmetered", "Sequences: author, preview, and enroll", "Agents and Workspace Copilot", "Credits for enrichment and AI, topped up any time"];
+        readonly monthlyPriceCents: number | null;
+        readonly monthlyCredits: number | null;
+        readonly weeklyCreditsLimit: number | null;
+        readonly rolloverCap: number | null;
+        readonly byokEnabled: boolean;
+        readonly tier: "free";
+        readonly name: "Free";
     };
     readonly starter: {
-        readonly tier: "starter";
-        readonly name: "Starter";
-        readonly monthlyPriceCents: 9900;
-        readonly monthlyCredits: 99000;
-        readonly weeklyCreditsLimit: null;
-        readonly rolloverCap: 99000;
         readonly monthlyAutomationActions: null;
         readonly automationOverageCentsPerMillion: null;
         readonly automationOverageEnabledDefault: false;
-        readonly byokEnabled: true;
         readonly description: "For founders running focused managed enrichment and AI columns.";
         readonly ctaLabel: "Choose Starter";
         readonly features: readonly ["99,000 credits every month", "All integrations", "Workflows", "Bring your own keys", "Standard support"];
+        readonly monthlyPriceCents: number | null;
+        readonly monthlyCredits: number | null;
+        readonly weeklyCreditsLimit: number | null;
+        readonly rolloverCap: number | null;
+        readonly byokEnabled: boolean;
+        readonly tier: "starter";
+        readonly name: "Starter";
     };
     readonly pro: {
-        readonly tier: "pro";
-        readonly name: "Pro";
-        readonly monthlyPriceCents: 24900;
-        readonly monthlyCredits: 249000;
-        readonly weeklyCreditsLimit: null;
-        readonly rolloverCap: 249000;
         readonly monthlyAutomationActions: null;
         readonly automationOverageCentsPerMillion: null;
         readonly automationOverageEnabledDefault: false;
-        readonly byokEnabled: true;
         readonly description: "For recurring GTM enrichment and AI-column workflows on managed credits.";
         readonly badge: "Most popular";
         readonly highlighted: true;
         readonly ctaLabel: "Choose Pro";
         readonly features: readonly ["249,000 credits every month", "All integrations", "Workflows", "Bring your own keys", "Standard support"];
+        readonly monthlyPriceCents: number | null;
+        readonly monthlyCredits: number | null;
+        readonly weeklyCreditsLimit: number | null;
+        readonly rolloverCap: number | null;
+        readonly byokEnabled: boolean;
+        readonly tier: "pro";
+        readonly name: "Pro";
     };
     readonly team: {
-        readonly tier: "team";
-        readonly name: "Team";
-        readonly monthlyPriceCents: 74900;
-        readonly monthlyCredits: 749000;
-        readonly weeklyCreditsLimit: null;
-        readonly rolloverCap: 749000;
         readonly monthlyAutomationActions: null;
         readonly automationOverageCentsPerMillion: null;
         readonly automationOverageEnabledDefault: false;
-        readonly byokEnabled: true;
         readonly description: "For small GTM teams and agencies running shared workflows with their own AI keys.";
         readonly ctaLabel: "Choose Team";
         readonly features: readonly ["749,000 credits every month", "All integrations", "Workflows", "Bring your own keys", "Premium support"];
+        readonly monthlyPriceCents: number | null;
+        readonly monthlyCredits: number | null;
+        readonly weeklyCreditsLimit: number | null;
+        readonly rolloverCap: number | null;
+        readonly byokEnabled: boolean;
+        readonly tier: "team";
+        readonly name: "Team";
     };
     readonly scale: {
-        readonly tier: "scale";
-        readonly name: "Scale";
-        readonly monthlyPriceCents: null;
-        readonly monthlyCredits: 10000000;
-        readonly weeklyCreditsLimit: null;
-        readonly rolloverCap: 10000000;
         readonly monthlyAutomationActions: null;
         readonly automationOverageCentsPerMillion: null;
         readonly automationOverageEnabledDefault: false;
-        readonly byokEnabled: true;
         readonly description: "For high-volume GTM teams that need custom limits and rollout support.";
         readonly ctaLabel: "Contact sales";
         readonly contactHref: "https://cal.com/tim-scheuer-mxbib9/45";
         readonly features: readonly ["10,000,000+ managed credits / month", "Workflows", "Phone number enrichment on managed credits", "Custom provider routing and BYOK policies", "Dedicated onboarding"];
+        readonly monthlyPriceCents: number | null;
+        readonly monthlyCredits: number | null;
+        readonly weeklyCreditsLimit: number | null;
+        readonly rolloverCap: number | null;
+        readonly byokEnabled: boolean;
+        readonly tier: "scale";
+        readonly name: "Scale";
     };
     readonly enterprise: {
-        readonly tier: "enterprise";
-        readonly name: "Enterprise";
-        readonly monthlyPriceCents: null;
-        readonly monthlyCredits: null;
-        readonly weeklyCreditsLimit: null;
-        readonly rolloverCap: null;
         readonly monthlyAutomationActions: null;
         readonly automationOverageCentsPerMillion: null;
         readonly automationOverageEnabledDefault: false;
-        readonly byokEnabled: true;
         readonly description: "Custom procurement, invoicing, limits, and rollout support.";
         readonly ctaLabel: "Talk to us";
         readonly contactHref: "https://cal.com/tim-scheuer-mxbib9/45";
         readonly features: readonly ["Everything in Team", "Custom usage limits", "Volume pricing", "Custom invoicing and billing", "Dedicated support"];
+        readonly monthlyPriceCents: number | null;
+        readonly monthlyCredits: number | null;
+        readonly weeklyCreditsLimit: number | null;
+        readonly rolloverCap: number | null;
+        readonly byokEnabled: boolean;
+        readonly tier: "enterprise";
+        readonly name: "Enterprise";
     };
 };
 export declare const PUBLIC_PLAN_ORDER: readonly PlanTier[];
@@ -217,7 +257,7 @@ export type ActiveSubscriptionStatus = (typeof ACTIVE_SUBSCRIPTION_STATUSES)[num
 export declare const BILLING_VISIBLE_SUBSCRIPTION_STATUSES: readonly ["active", "trialing", "past_due", "unpaid", "paused", "incomplete"];
 export type BillingVisibleSubscriptionStatus = (typeof BILLING_VISIBLE_SUBSCRIPTION_STATUSES)[number];
 export declare const PAST_DUE_GRACE_DAYS = 7;
-export type SubscriptionEntitlementReason = "active" | "trialing" | "past_due_grace" | "past_due_grace_expired" | "missing_past_due_period_start" | "trial_expired" | "missing_trial_end" | "unpaid" | "paused" | "incomplete" | "canceled" | "incomplete_expired" | "missing_subscription";
+export type SubscriptionEntitlementReason = "active" | "trialing" | "past_due_grace" | "past_due_grace_expired" | "missing_past_due_period_start" | "trial_expired" | "missing_trial_end" | "unpaid" | "paused" | "incomplete" | "canceled" | "incomplete_expired" | "missing_subscription" | "free_tier";
 export type SubscriptionEntitlement = {
     entitled: boolean;
     reason: SubscriptionEntitlementReason;
@@ -229,6 +269,8 @@ export declare function resolveSubscriptionEntitlement(input: {
     currentPeriodEnd?: Date | null;
     trialEnd?: Date | null;
     now?: Date;
+    /** Overrides the env switch. Injected by tests; production reads the flag. */
+    freeTierEntitled?: boolean;
 }): SubscriptionEntitlement;
 export type ResolvedPricingPlan = PricingPlanDefinition;
 export declare function resolveBasePricingPlan(tier: string | null | undefined): ResolvedPricingPlan | null;

package/node_modules/@oxygen/shared/dist/billing.js

@@ -1,3 +1,5 @@
+import { AUTOMATION_ACTION_CREDITS as SNAPSHOT_AUTOMATION_ACTION_CREDITS, CREDITS_PER_USD as SNAPSHOT_CREDITS_PER_USD, PRICING_PLAN_SNAPSHOT, TOPUP_USD_CENTS_PER_1K_CREDITS as SNAPSHOT_TOPUP_USD_CENTS_PER_1K_CREDITS, } from "./pricing-snapshot.generated.js";
+import { freeTierEntitlementEnabled } from "./plan-capabilities.js";
 export const WEEKLY_USAGE_WINDOW_DAYS = 7;
 export const BILLING_CURRENCIES = ["usd"];
 export const DEFAULT_BILLING_CURRENCY = "usd";
@@ -7,8 +9,13 @@ export const CONTACT_SALES_URL = "https://cal.com/tim-scheuer-mxbib9/45";
 // exactly 1,000 credits — while on-demand top-up packs price the same credit
 // at $1.25 per 1,000, making subscription credits exactly 20% cheaper than
 // credits bought on demand.
-export const CREDITS_PER_USD = 1_000;
-export const TOPUP_USD_CENTS_PER_1K_CREDITS = 125;
+//
+// Sourced from the generated snapshot rather than declared here: this pair was
+// previously written down in seven production modules, and if any two ever
+// disagreed every markup-derived price would be silently wrong by the ratio.
+// Change them in packages/control-db/src/pricing/seed.ts.
+export const CREDITS_PER_USD = SNAPSHOT_CREDITS_PER_USD;
+export const TOPUP_USD_CENTS_PER_1K_CREDITS = SNAPSHOT_TOPUP_USD_CENTS_PER_1K_CREDITS;
 // On-demand purchases start at the original fixed packs' $10 floor and run up
 // to a $1,250 ceiling, in any 1,000-credit increment. The ceiling is a
 // single-checkout guard rail, not a spend cap: a workspace that needs more
@@ -31,7 +38,8 @@ export function creditTopupUsdCents(credits) {
 // Workflow/automation actions (steps, tool calls, row writes, retries) draw
 // from the same credit pool at a flat capacity-guard rate — the old separate
 // monthly action allowance + USD overage meter economy is retired (2026-07-14).
-export const AUTOMATION_ACTION_CREDITS = 0.01;
+// Seed key: charge.automation.action.
+export const AUTOMATION_ACTION_CREDITS = SNAPSHOT_AUTOMATION_ACTION_CREDITS;
 // ---------------------------------------------------------------------------
 // FIXED (committed) credit commitments — recurring per-resource monthly charges
 // ---------------------------------------------------------------------------
@@ -152,6 +160,52 @@ export function resolveCreditTopupPack(id) {
 // whichever comes first. Starter remains the signup default.
 export const TRIAL_PERIOD_DAYS = 7;
 export const TRIAL_CREDIT_GRANT = 20_000;
+/**
+ * Free-tier entry (founder-ratified 2026-08-16, grant shape settled 2026-08-17).
+ *
+ * Two ONE-TIME grants and no monthly trickle. The free tier's *surface* is
+ * unmetered — CRM, Tables, Workflows, Knowledge, Agents, Copilot, Sequence
+ * authoring cost nothing marginal, so they are not rationed — and credits meter
+ * only real per-call spend. That is why `BASE_PRICING_PLANS.free` still carries
+ * `monthlyCredits: 0` and `rolloverCap: null`: 0 is the ANSWER (no monthly
+ * allowance exists), not a missing value, and null still means "never claw back
+ * a leftover balance".
+ *
+ * The split exists for a specific reason. Granting only on CLI/MCP activation
+ * would ship a Workspace Copilot with no funds for exactly the users who chose
+ * the in-product path — the default Copilot session budget is 5,000 credits, so
+ * the signup grant is precisely one session. The activation half is the pull
+ * toward the agent-native surface, and rewards the same action the Company KPI
+ * scorecard already counts as activation.
+ *
+ * Ceiling is therefore 10,000 credits ($10) per billing-owner organization,
+ * ever. Neither grant is minted for a churned or downgraded workspace, and no
+ * other path re-mints either one — not downgrade, churn, re-subscribe, or
+ * billing-owner re-link. Top-ups stay purchasable on free, which is what keeps
+ * the metered surface open-ended rather than capped at the grant.
+ */
+export const FREE_SIGNUP_GRANT_CREDITS = 5_000;
+export const FREE_ACTIVATION_GRANT_CREDITS = 5_000;
+export const FREE_TIER_GRANTS_ENABLED_ENV_VAR = "OXYGEN_FREE_TIER_GRANTS_ENABLED";
+/**
+ * Fail-closed rollout switch for the free-tier grants, matching the staged
+ * pattern used by CREDIT_COMMITMENTS_ENABLED.
+ *
+ * UNSET MEANS OFF, which is the opposite of the InboxKit-style kill switches and
+ * is deliberate: this flag mints credits. Until the rest of the free tier ships
+ * — the capability-scoped entitlement of OXP-10.3 and the card-less signup of
+ * OXP-10.4 — an armed grant would fund workspaces that still hit the binary
+ * subscription wall, which is money spent on an experience that does not work
+ * yet. It also means the grant cannot fire for the existing organization
+ * population before the cutover posture is decided.
+ */
+export function freeTierGrantsEnabled(env = process.env) {
+    const raw = env[FREE_TIER_GRANTS_ENABLED_ENV_VAR];
+    if (!raw)
+        return false;
+    const normalized = raw.trim().toLowerCase();
+    return normalized === "1" || normalized === "true" || normalized === "yes" || normalized === "on";
+}
 // Onboarding walkthrough (2026-07-21): completing the in-product walkthrough
 // grants a one-off bonus (idempotent per billing owner), and the walkthrough's
 // "start scraping engagers" step may spend at most this many credits on the
@@ -159,41 +213,70 @@ export const TRIAL_CREDIT_GRANT = 20_000;
 // is free connected-account reads).
 export const WALKTHROUGH_COMPLETION_BONUS_CREDITS = 1_000;
 export const WALKTHROUGH_SCRAPE_MAX_CREDITS = 2_000;
+/**
+ * The five NUMERIC fields of a plan, read from the generated pricing snapshot.
+ *
+ * Prices live in packages/control-db/src/pricing/seed.ts; the marketing copy
+ * (name, description, ctaLabel, features) stays here, because a feature bullet
+ * is not a price and does not belong in a pricing table. Split that way, a plan
+ * re-price is one edit in the seed and this file does not move at all.
+ *
+ * Sync on purpose: this catalog is a module-level constant that has to exist
+ * before any request does. Async callers that want a staff override applied
+ * should read loadPricingBook() instead.
+ */
+function planPricing(planKey) {
+    const row = PRICING_PLAN_SNAPSHOT.find((plan) => plan.planKey === planKey);
+    if (!row)
+        throw new Error(`pricing snapshot has no plan "${planKey}"`);
+    return {
+        monthlyPriceCents: row.monthlyPriceCents,
+        monthlyCredits: row.monthlyCredits,
+        weeklyCreditsLimit: row.weeklyCreditsLimit,
+        rolloverCap: row.rolloverCap,
+        byokEnabled: row.byokEnabled,
+    };
+}
 export const BASE_PRICING_PLANS = {
-    // Fully retired as a distribution surface (2026-07-22; entry is the
-    // card-required self-serve trial). The tier survives only as the unentitled
-    // fallback for churned / never-subscribed orgs: zero monthly credits means
-    // ensureCurrentPlanCreditGrant short-circuits — no monthly minting AND no
-    // rollover-cap claw-back of leftover balances, which stay spendable.
+    // The ENTRY tier since 2026-08-16, superseding the 2026-07-22 retirement that
+    // left this as the unentitled fallback for churned / never-subscribed orgs.
+    //
+    // `free` now serves TWO populations and deliberately does not distinguish
+    // them here: a newly signed-up workspace and a voluntarily churned one get the
+    // same capability set. Only the grants differ — a newcomer draws
+    // FREE_SIGNUP_GRANT_CREDITS (and FREE_ACTIVATION_GRANT_CREDITS on first
+    // CLI/MCP activation), a returner draws neither and keeps whatever balance it
+    // already had. Anything branching on `plan.tier === "free"` must be read under
+    // BOTH meanings: code written when this could only mean "churned org that can
+    // spend nothing" now also applies to a funded newcomer.
+    //
+    // The seeded numbers are unchanged and load-bearing: monthlyCredits 0 is the
+    // ANSWER (there is no monthly allowance — ensureCurrentPlanCreditGrant
+    // short-circuits, and the grants are one-time), and rolloverCap null rather
+    // than 0 is what stops a churned customer's leftover balance being clawed back.
     free: {
         tier: "free",
         name: "Free",
-        monthlyPriceCents: 0,
-        monthlyCredits: 0,
-        weeklyCreditsLimit: null,
-        rolloverCap: null,
+        ...planPricing("free"),
         monthlyAutomationActions: null,
         automationOverageCentsPerMillion: null,
         automationOverageEnabledDefault: false,
-        byokEnabled: false,
-        description: "No active plan. Start a 7-day trial on a self-serve plan to use OXYGEN — existing credit balances remain spendable.",
-        ctaLabel: "Start trial",
+        description: "Your CRM, tables, and workflows — free forever. Credits pay for enrichment and AI; connecting a sender, publishing, managed email infrastructure, and your own provider keys need a plan.",
+        ctaLabel: "Upgrade",
         features: [
-            "Existing credits stay spendable",
-            "Read access to your workspace",
+            "CRM, Tables, Workflows, and Knowledge — unmetered",
+            "Sequences: author, preview, and enroll",
+            "Agents and Workspace Copilot",
+            "Credits for enrichment and AI, topped up any time",
         ],
     },
     starter: {
         tier: "starter",
         name: "Starter",
-        monthlyPriceCents: 9_900,
-        monthlyCredits: 99_000,
-        weeklyCreditsLimit: null,
-        rolloverCap: 99_000,
+        ...planPricing("starter"),
         monthlyAutomationActions: null,
         automationOverageCentsPerMillion: null,
         automationOverageEnabledDefault: false,
-        byokEnabled: true,
         description: "For founders running focused managed enrichment and AI columns.",
         ctaLabel: "Choose Starter",
         features: [
@@ -207,14 +290,10 @@ export const BASE_PRICING_PLANS = {
     pro: {
         tier: "pro",
         name: "Pro",
-        monthlyPriceCents: 24_900,
-        monthlyCredits: 249_000,
-        weeklyCreditsLimit: null,
-        rolloverCap: 249_000,
+        ...planPricing("pro"),
         monthlyAutomationActions: null,
         automationOverageCentsPerMillion: null,
         automationOverageEnabledDefault: false,
-        byokEnabled: true,
         description: "For recurring GTM enrichment and AI-column workflows on managed credits.",
         badge: "Most popular",
         highlighted: true,
@@ -230,14 +309,10 @@ export const BASE_PRICING_PLANS = {
     team: {
         tier: "team",
         name: "Team",
-        monthlyPriceCents: 74_900,
-        monthlyCredits: 749_000,
-        weeklyCreditsLimit: null,
-        rolloverCap: 749_000,
+        ...planPricing("team"),
         monthlyAutomationActions: null,
         automationOverageCentsPerMillion: null,
         automationOverageEnabledDefault: false,
-        byokEnabled: true,
         description: "For small GTM teams and agencies running shared workflows with their own AI keys.",
         ctaLabel: "Choose Team",
         features: [
@@ -251,14 +326,10 @@ export const BASE_PRICING_PLANS = {
     scale: {
         tier: "scale",
         name: "Scale",
-        monthlyPriceCents: null,
-        monthlyCredits: 10_000_000,
-        weeklyCreditsLimit: null,
-        rolloverCap: 10_000_000,
+        ...planPricing("scale"),
         monthlyAutomationActions: null,
         automationOverageCentsPerMillion: null,
         automationOverageEnabledDefault: false,
-        byokEnabled: true,
         description: "For high-volume GTM teams that need custom limits and rollout support.",
         ctaLabel: "Contact sales",
         contactHref: CONTACT_SALES_URL,
@@ -273,14 +344,10 @@ export const BASE_PRICING_PLANS = {
     enterprise: {
         tier: "enterprise",
         name: "Enterprise",
-        monthlyPriceCents: null,
-        monthlyCredits: null,
-        weeklyCreditsLimit: null,
-        rolloverCap: null,
+        ...planPricing("enterprise"),
         monthlyAutomationActions: null,
         automationOverageCentsPerMillion: null,
         automationOverageEnabledDefault: false,
-        byokEnabled: true,
         description: "Custom procurement, invoicing, limits, and rollout support.",
         ctaLabel: "Talk to us",
         contactHref: CONTACT_SALES_URL,
@@ -322,6 +389,23 @@ export const PAST_DUE_GRACE_DAYS = 7;
 export function resolveSubscriptionEntitlement(input) {
     const now = input.now ?? new Date();
     if (!input.status) {
+        // A workspace that has NEVER subscribed is a free workspace, and free is a
+        // real entitled tier once free-tier entry is armed (founder, 2026-08-16).
+        // This is the switch that makes `assertSubscriptionExecutionAccess` stop
+        // being the interesting gate and hands the decision to the capability
+        // resolver instead.
+        //
+        // Scoped deliberately to "no subscription row at all". A `canceled` status
+        // is NOT included, even though OXP-10.1.6 puts a voluntarily churned
+        // workspace on this same free tier: Stripe also lands a FAILED-PAYMENT
+        // customer in `canceled` after its recovery attempts are exhausted, and the
+        // ratified 2026-08-02 lifecycle suspends execution and freezes credits for
+        // exactly that case. Status alone cannot tell the two apart, so treating
+        // `canceled` as free here would silently reverse the failed-payment freeze.
+        // Churned-to-free needs that distinction built first.
+        if (input.freeTierEntitled ?? freeTierEntitlementEnabled()) {
+            return { entitled: true, reason: "free_tier", graceEndsAt: null };
+        }
         return { entitled: false, reason: "missing_subscription", graceEndsAt: null };
     }
     if (input.status === "active") {
@@ -362,70 +446,46 @@ const LEGACY_PRICING_PLAN_OVERRIDES = {
     launch_50: {
         ...BASE_PRICING_PLANS.starter,
         name: "Legacy Launch",
-        monthlyPriceCents: 5_000,
-        monthlyCredits: 200_000,
-        weeklyCreditsLimit: 200_000,
-        rolloverCap: 200_000,
+        ...planPricing("launch_50"),
         description: "Legacy Launch plan.",
     },
     starter_50: {
         ...BASE_PRICING_PLANS.starter,
         name: "Legacy Starter",
-        monthlyPriceCents: 5_000,
-        monthlyCredits: 200_000,
-        weeklyCreditsLimit: 200_000,
-        rolloverCap: 200_000,
+        ...planPricing("starter_50"),
         description: "Legacy Starter plan.",
     },
     pro_149: {
         ...BASE_PRICING_PLANS.pro,
         name: "Legacy Pro",
-        monthlyPriceCents: 14_900,
-        monthlyCredits: 1_000_000,
-        weeklyCreditsLimit: 1_000_000,
-        rolloverCap: 1_000_000,
+        ...planPricing("pro_149"),
         description: "Legacy Pro plan.",
     },
     team_399: {
         ...BASE_PRICING_PLANS.team,
         name: "Legacy Team",
-        monthlyPriceCents: 39_900,
-        monthlyCredits: 3_000_000,
-        weeklyCreditsLimit: 3_000_000,
-        rolloverCap: 3_000_000,
+        ...planPricing("team_399"),
         description: "Legacy Team plan.",
     },
     growth_250: {
         ...BASE_PRICING_PLANS.pro,
-        monthlyPriceCents: 25_000,
-        monthlyCredits: 250_000,
-        weeklyCreditsLimit: 100_000,
-        rolloverCap: 250_000,
+        ...planPricing("growth_250"),
         description: "Legacy Growth plan.",
     },
     scale_750: {
         ...BASE_PRICING_PLANS.team,
         name: "Legacy Scale",
-        monthlyPriceCents: 75_000,
-        monthlyCredits: 750_000,
-        weeklyCreditsLimit: 300_000,
-        rolloverCap: 750_000,
+        ...planPricing("scale_750"),
         description: "Legacy Scale plan.",
     },
     starter_legacy: {
         ...BASE_PRICING_PLANS.starter,
-        monthlyPriceCents: null,
-        monthlyCredits: 200_000,
-        weeklyCreditsLimit: BASE_PRICING_PLANS.starter.weeklyCreditsLimit,
-        rolloverCap: 200_000,
+        ...planPricing("starter_legacy"),
         description: "Legacy Starter plan.",
     },
     scale_legacy: {
         ...BASE_PRICING_PLANS.scale,
-        monthlyPriceCents: null,
-        monthlyCredits: 1_200_000,
-        weeklyCreditsLimit: BASE_PRICING_PLANS.scale.weeklyCreditsLimit,
-        rolloverCap: 2_400_000,
+        ...planPricing("scale_legacy"),
         description: "Legacy Scale plan.",
     },
 };

package/node_modules/@oxygen/shared/dist/capability-discovery.js

@@ -39,11 +39,19 @@ export const OXYGEN_CAPABILITY_ROUTES = [
         notFor: "Recurring deterministic automation or standing adaptive jobs; use Workflows or Agents.",
         execution: "Start onboarding or a hosted Copilot session; every resulting action still uses its native primitive gate.",
         posture: "mixed",
-        gatewayTools: ["oxygen_whoami", "oxygen_context_resolve", "oxygen_copilot_start"],
-        gatewayCommands: ["whoami", "context resolve", "copilot start"],
+        gatewayTools: ["oxygen_whoami", "oxygen_activation_state", "oxygen_context_resolve", "oxygen_copilot_start"],
+        gatewayCommands: ["whoami", "activation state", "context resolve", "copilot start"],
         skills: ["oxygen-quickstart", "oxygen-gtm"],
-        endpointSections: ["copilot", "home"],
-        intentTerms: ["onboard", "onboarding", "first run", "first day", "setup oxygen", "copilot", "assistant", "guided"],
+        // `activation` carries the prescribed-play step state and the one next step. It
+        // belongs here rather than under a primitive because "where am I in setup" is a
+        // Control question — and without the section on this card, the Copilot's very
+        // first tool call routes past the only read that answers it.
+        endpointSections: ["activation", "copilot", "home"],
+        // "next step" alone is deliberately absent: it is a phrase every primitive's
+        // users say ("next step of this workflow run"), and a 6-point multi-word hit
+        // would drag those queries here. The terms kept are the ones only a founder
+        // asking where they are in setup actually types.
+        intentTerms: ["onboard", "onboarding", "first run", "first day", "setup oxygen", "copilot", "assistant", "guided", "activation", "where am i", "next step in setup", "what do i do next"],
     },
     {
         id: "billing-and-budgets",

package/node_modules/@oxygen/shared/dist/cli-result.js

@@ -57,6 +57,7 @@ export function exitCodeForErrorCode(code) {
         case "workspace_credit_cap_exceeded":
         case "byok_requires_paid_plan":
         case "subscription_access_required":
+        case "upgrade_required":
             return 7;
         case "network_timeout":
             return 8;

package/node_modules/@oxygen/shared/dist/copilot-journeys.d.ts

@@ -7,6 +7,14 @@ export type CopilotJourney = {
     /** The first user message a journey card seeds into a new session. */
     seedMessage: string;
 };
+/**
+ * The one journey a workspace with no play yet is pointed at. Exported as a named
+ * constant because every consumer that needs "the prescribed play" must key on the
+ * slug: the array is display-ordered, and `COPILOT_JOURNEYS[0]` would silently
+ * re-designate a different journey the first time someone reorders the cards.
+ * `home/suggestions.tsx` keys its glyphs the same way, for the same reason.
+ */
+export declare const PRESCRIBED_COPILOT_JOURNEY_SLUG = "inbound-led-outbound";
 export declare const COPILOT_JOURNEYS: readonly CopilotJourney[];
 export type CopilotJourneySlug = (typeof COPILOT_JOURNEYS)[number]["slug"];
 export declare function getCopilotJourney(slug: string): CopilotJourney | null;

package/node_modules/@oxygen/shared/dist/copilot-journeys.js

@@ -4,17 +4,35 @@
 // Each journey is a thin descriptor over EXISTING advisory catalog Recipes:
 // journeys add no runtime behavior, and every guardrail (never enroll/send/buy/
 // change DNS without approval) rides those recipes' own approval gates.
+/**
+ * The one journey a workspace with no play yet is pointed at. Exported as a named
+ * constant because every consumer that needs "the prescribed play" must key on the
+ * slug: the array is display-ordered, and `COPILOT_JOURNEYS[0]` would silently
+ * re-designate a different journey the first time someone reorders the cards.
+ * `home/suggestions.tsx` keys its glyphs the same way, for the same reason.
+ */
+export const PRESCRIBED_COPILOT_JOURNEY_SLUG = "inbound-led-outbound";
 export const COPILOT_JOURNEYS = [
     {
-        slug: "inbound-led-outbound",
+        slug: PRESCRIBED_COPILOT_JOURNEY_SLUG,
         title: "Inbound-led outbound",
-        description: "Turn LinkedIn engagement, profile views, and replies into a segmented outreach motion.",
+        description: "Work the LinkedIn network you already have — connections and post engagers — as a capped warm motion.",
+        // The network-first play leads: connections and post engagers are the two
+        // sources a founder actually has on day 1, and profile viewers (the old lead)
+        // are a thin, anonymity-capped sample by comparison. Posting is second because
+        // it CREATES the engager stream this play captures, and replies close the loop.
         recipeSlugs: [
-            "profile-viewer-outreach",
-            "daily-warm-lead-queue",
+            "linkedin-network-first-motion",
+            "founder-posting-system",
             "reply-to-meeting",
         ],
-        seedMessage: "Help me turn my recent LinkedIn engagement (profile views, post reactions, replies) into a safe, segmented outreach motion. Start by showing me what signals and connected identities I have.",
+        // Deliberately free of steps, commands, table names, and caps: encoding
+        // mechanics here would fork a second, unversioned copy of the play that no
+        // catalog gate can lint (ADR 0013 §11 — a journey is a thin pointer at
+        // advisory recipes, never a hardcoded kit). The activation-state instruction
+        // is the one piece of procedure that belongs here rather than in the recipe:
+        // it is about where THIS workspace already stands, which the catalog cannot know.
+        seedMessage: "I want to turn the LinkedIn network I already have — my connections and the people who engage with my posts — into a small, safe, approval-gated outreach motion. First read my workspace's current activation state and tell me where I already am, then resume from there instead of starting over. Follow the linkedin-network-first-motion recipe for the play itself. Do not connect an account, enroll anyone, send anything, or spend credits without asking me first.",
     },
     {
         slug: "tam-sourcing",