@oxygen-agent/cli 1.917.5 → 1.922.14

package/README.md

@@ -34,4 +34,4 @@ oxygen update
 
 For product documentation, visit https://oxygen-agent.com/docs. For support, visit https://oxygen-agent.com.
 
-Version: 1.917.5
+Version: 1.922.14

package/dist/command-manifest.js

@@ -75,6 +75,13 @@ const MUTATING_VERBS = new Set([
     "unbind", "unsubscribe", "update", "upload", "upsert", "use", "warm-send", "warmup",
     "withdraw", "write",
 ]);
+// Exact commands that must not inherit a read-only discovery label. Warmup
+// status persists state and can pause the provider; reconnect replaces its
+// connection and can restart provider history. Other status commands are reads.
+const MUTATING_COMMANDS = new Set([
+    "mailboxes warmup status",
+    "mailboxes warmup reconnect",
+]);
 // `--approved` usually identifies a paid or externally mutating execution
 // mode, but a small number of destructive local operations are explicitly
 // zero-credit. Keep those exceptions exact so discovery never invents spend.
@@ -274,7 +281,9 @@ function toManifestEntry(command, path) {
                 (path[0] === "copilot" &&
                     (leafVerb === "send" || leafVerb === "approve"))),
         mutates: !READ_ONLY_COMMANDS.has(commandName)
-            && (MUTATING_VERBS.has(leafVerb) || MUTATING_VERBS.has(verbPrefix)),
+            && (MUTATING_COMMANDS.has(commandName)
+                || MUTATING_VERBS.has(leafVerb)
+                || MUTATING_VERBS.has(verbPrefix)),
         preview_by_default: flagStrings.some((flags) => flags.includes("--live")) ||
             PREVIEW_BY_DEFAULT_COMMANDS.has(commandName),
         json_supported: flagStrings.some((flags) => flags.includes("--json")),

package/dist/index.js

@@ -416,6 +416,11 @@ function emitSuccess(command, data, options) {
 async function handleAsyncAction(command, options, action) {
     try {
         const data = await action();
+        // BEFORE the envelope, deliberately: an unpaid renewal or a recurring shortfall is the
+        // reason the customer ran the command, and a warning printed after 150 lines of JSON
+        // has already scrolled away. stdout stays the clean machine-readable envelope — the
+        // same stdout/stderr split writeDryRunNotice and writeCreditsReceipt use.
+        writeBillingNotices(command, data);
         emitSuccess(command, data, options);
         writeDryRunNotice(data);
         writeAvatarWarning(data);
@@ -479,6 +484,57 @@ function writeAvatarWarning(data) {
     if (typeof warning === "string" && warning.trim())
         process.stderr.write(`${warning}\n`);
 }
+// The human half of the unpaid-renewal surfaces: `billing balance` warnings, the
+// `billing allowance` past_due segment, and the billing state of each managed domain in
+// `domains list`. All three are already in the JSON envelope (and stay there for --json);
+// these lines exist because none of them is legible at a glance in a payload, and the one
+// customer this shipped for could read every number in the product and still not learn
+// that 139,000 credits of renewals had failed.
+function writeBillingNotices(command, data) {
+    const payload = asPayloadRecord(data);
+    if (!payload)
+        return;
+    if (command === "billing balance") {
+        for (const warning of readWarningMessages(payload))
+            process.stderr.write(`! ${warning}\n`);
+        return;
+    }
+    if (command === "billing allowance") {
+        const unpaid = asPayloadRecord(payload.renewals_past_due);
+        if (!unpaid)
+            return;
+        const count = typeof unpaid.count === "number" ? unpaid.count : 0;
+        const credits = typeof unpaid.credits_required === "number" ? unpaid.credits_required : 0;
+        // Said explicitly because it is the one number in this command that is NOT part of the
+        // pool: it is money the biller could not take, so it is not in total_credits.
+        process.stderr.write(`! renewals unpaid: ${count} item${count === 1 ? "" : "s"}, ${credits.toLocaleString("en-US")} credits — not included in total_credits. Run \`oxygen billing balance\` for the top-up amount.\n`);
+        return;
+    }
+    if (command === "domains list") {
+        const managed = Array.isArray(payload.managed_domains) ? payload.managed_domains : [];
+        const unpaid = managed
+            .map((row) => asPayloadRecord(row))
+            .filter((row) => row?.internal_billing_status === "past_due")
+            .map((row) => (typeof row.domain === "string" ? row.domain : "unknown"));
+        if (unpaid.length === 0)
+            return;
+        // The vendor keeps these live, so their `status` still reads `active` — which is
+        // exactly why naming them is worth a line.
+        process.stderr.write(`! renewal unpaid on ${unpaid.length} managed domain${unpaid.length === 1 ? "" : "s"}: ${unpaid.join(", ")} (see internal_billing_status)\n`);
+    }
+}
+function readWarningMessages(payload) {
+    if (!Array.isArray(payload.warnings))
+        return [];
+    return payload.warnings
+        .map((warning) => asPayloadRecord(warning)?.message)
+        .filter((message) => typeof message === "string" && message.trim().length > 0);
+}
+function asPayloadRecord(value) {
+    return value && typeof value === "object" && !Array.isArray(value)
+        ? value
+        : null;
+}
 // Paid envelopes (push 3 legibility) carry a `credits` block: quote on
 // dry_run, receipt on live, remaining balance on both. Mirror it as one
 // stderr line so spend stays visible in a terminal without polluting the
@@ -5495,7 +5551,7 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         .option("--on <column>", "Pin one table's column by name or key. Oxygen must still find a compatible column on the other table: generic text needs a strongly similar label, while domains, emails, LinkedIn URLs, and external IDs pair by semantic role.")
         .option("--approved", "Queue the bulk link after inspecting the preview; then wait with `oxygen table-runs wait <run_id>`.")
         .option("--create-missing", "Also create target rows for unmatched source keys (CRM records when filling an existing CRM relationship). Free.")
-        .option("--max-concurrency <n>", "Maximum concurrent row items for the run. Defaults to 50; native --create-missing runs serialize target-row creation safely.")
+        .option("--max-concurrency <n>", "Maximum concurrent row items for the run (1-250). Defaults to 250; native --create-missing runs serialize target-row creation safely.")
         .option("--undo <run_id>", "Undo a previous link run, archiving only the links that run created.")
         .option("--relation <slug>", "Row form: relation slug defined on the source table, such as client.")
         .option("--target-row-id <row_id>", "Row form: target row id in the related table.")
@@ -5582,7 +5638,7 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         .option("--row-id <id...>", "Promote only these row ids. Defaults to every bound row.")
         .option("--dry-run", "Preview per-field would_fill/would_overwrite/conflicts without writing (the default when --approved is absent).")
         .option("--approved", "Confirm the truth write onto CRM records after inspecting the preview.")
-        .option("--max-concurrency <n>", "Maximum concurrent row items for the run. Defaults to 50.")
+        .option("--max-concurrency <n>", "Maximum concurrent row items for the run (1-250). Defaults to 50.")
         .option("--json", "Print a JSON envelope.")
         .action(async (table, options) => {
         if (options.dryRun && options.approved) {
@@ -7528,8 +7584,9 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         .option("--connection-id <connection_id>", "Optional provider integration connection id.")
         .option("--background", "Create a durable background run for a free deterministic column. Paid AI/tool/enrichment/custom-HTTP server runs are always backgrounded.")
         .option("--approved", "Confirm a paid durable run, or a bind create-mode run (onNoMatch=create), after inspecting a dry run or preview.")
+        .option("--approved-effect-unknown", "With --row-id, allow rerunning a cell whose previous external write was dispatched but never confirmed. Verify the destination first: this can apply the same external effect twice.")
         .option("--max-credits <n>", "Maximum managed model/provider/web-grounding credits to reserve. BYOK covers the model call only; managed grounding still needs this ceiling.")
-        .option("--max-concurrency <n>", "Maximum concurrent row items for a background run. Defaults to 250 for AI columns and 50 otherwise.")
+        .option("--max-concurrency <n>", "Maximum concurrent row items for a background run (1-250). Defaults to 250 for AI columns and 50 otherwise (160 for Firecrawl scrape columns).")
         .option("--local", "Run a custom HTTP column in this CLI process so env-var secrets stay local.")
         .option("--local-concurrency <n>", "Maximum concurrent custom HTTP requests for --local. Defaults to 3.")
         .option("--dry-run", "Preview resolved model, credit estimate, run-condition posture, and — for an AI column — the prompt rendered with one real row's values, without spending any credits.")
@@ -7594,6 +7651,7 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
                 ...(readOption(options.connectionId) ? { connection_id: readOption(options.connectionId) } : {}),
                 ...(options.background ? { background: true } : {}),
                 ...(options.approved ? { approved: true } : {}),
+                ...(options.approvedEffectUnknown ? { approved_effect_unknown: true } : {}),
                 ...(maxCredits !== undefined ? { max_credits: maxCredits } : {}),
                 ...(maxConcurrency ? { max_concurrency: maxConcurrency } : {}),
                 ...(options.dryRun ? { dry_run: true } : {}),
@@ -7962,7 +8020,7 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         .command("table-runs")
         .description("Durable background table action run commands.")
         .addCommand(new Command("create")
-        .description("Create a durable background run for table tool-column actions.")
+        .description("Create a durable background run for table tool-column actions. Large runs are accepted immediately and their rows are prepared in the background (execution_status 'planning'); follow with `table-runs wait <run_id>`.")
         .argument("<table>", "Table id or slug.")
         .option("--column <column>", "Column id or key for a single tool-column action.")
         .option("--actions-json <json>", "JSON array of actions, each with type tool_column and column.")
@@ -7975,7 +8033,7 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         .option("--connection-id <connection_id>", "Optional provider integration connection id.")
         .option("--approved", "Confirm the paid table action run after inspecting a dry run or preview.")
         .option("--max-credits <n>", "Maximum managed/provider credits to reserve for this run.")
-        .option("--max-concurrency <n>", "Maximum concurrent row items for this run.")
+        .option("--max-concurrency <n>", "Maximum concurrent row items for this run (1-250). Defaults to 50 (160 for Firecrawl scrape columns).")
         .option("--metadata-json <json>", "Optional metadata object to attach to the run.")
         .option("--then-json <json>", "JSON array of sequential follow-up steps. Each step runs after the previous terminates with completed or completed_with_errors. Paid steps require selection and max_credits. Shape: [{actions:[{type:'tool_column',column}],selection,force,max_concurrency,max_credits,metadata,run_on_failure}].")
         .option("--json", "Print a JSON envelope.")
@@ -8080,6 +8138,24 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
             method: "POST",
             body: {},
         }));
+    }))
+        .addCommand(new Command("effect-unknown")
+        .description("List the items of a run whose external write was dispatched but never confirmed. Oxygen will not retry them on its own: verify each destination, then record what you found with `oxygen cells resolve`.")
+        .argument("<run_id>", "Table action run UUID.")
+        .option("--include-resolved", "Also list items whose outcome a human has already recorded.")
+        .option("--limit <n>", "Maximum items to return. Defaults to 200.")
+        .option("--json", "Print a JSON envelope.")
+        .action(async (runId, options) => {
+        await handleAsyncAction("table-runs effect-unknown", options, () => {
+            const query = new URLSearchParams();
+            const limit = readPositiveInt(options.limit);
+            if (limit)
+                query.set("limit", String(limit));
+            if (options.includeResolved)
+                query.set("include_resolved", "true");
+            const suffix = query.toString() ? `?${query.toString()}` : "";
+            return requestOxygen(`/api/cli/table-action-runs/${encodeURIComponent(runId)}/effect-unknown${suffix}`);
+        });
     }))
         .addCommand(new Command("retry-failed")
         .description("Requeue failed items for a durable table action run. Items with an unconfirmed external effect stay blocked until their destination is verified and explicitly approved.")
@@ -8680,7 +8756,7 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         }));
     }))
         .addCommand(new Command("balance")
-        .description("Show the current plan, subscription entitlement, and managed credit balance: available and reserved credits, FIXED credits committed to recurring per-resource charges, and the FLEXIBLE free-to-spend remainder. After failed-payment grace expires, mutations stop while read/export and billing recovery remain available. Recovery: https://oxygen-agent.com/billing. Policy: https://oxygen-agent.com/docs/safety/billing.")
+        .description("Show the current plan, subscription entitlement, and managed credit balance: available and reserved credits, FIXED credits committed to recurring per-resource charges, and the FLEXIBLE free-to-spend remainder. `renewals_past_due` lists infrastructure renewals (managed-inbox domains, warm-ups) OXYGEN could NOT charge this month, what they cost, and the exact top-up that clears them — nothing is cancelled and billing retries automatically after a top-up. `warnings` also flags a recurring_shortfall when your connected infrastructure costs more per month than the plan grants. After failed-payment grace expires, mutations stop while read/export and billing recovery remain available. Recovery: https://oxygen-agent.com/billing. Policy: https://oxygen-agent.com/docs/safety/billing.")
         .option("--json", "Print a JSON envelope.")
         .action(async (options) => {
         await handleAsyncAction("billing balance", options, () => requestOxygen("/api/cli/billing/balance"));
@@ -8692,13 +8768,13 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         await handleAsyncAction("billing commitments", options, () => requestOxygen("/api/cli/billing/commitments"));
     }))
         .addCommand(new Command("seats")
-        .description("Show sending capacity per channel: how many seats are purchased, how many are grandfathered, how many senders are connected, and how many are left. Sending seats are what let you CONNECT a sender — a LinkedIn account, WhatsApp number, phone number, or email mailbox — and they are billed in dollars on their own subscription, separate from your plan and separate from credits. You do not need a plan to buy seats. A grandfathered value of null means unlimited for that channel. Email mailbox allocation is not counted here because mailboxes are tenant-scoped. Read-only, 0 Oxygen credits.")
+        .description("Show sending capacity per channel: how many seats are purchased, how many are grandfathered, how many senders are connected, and how many are left. Sending seats are what let you CONNECT a sender — a LinkedIn account, WhatsApp number, phone number, or email mailbox — and they are billed in dollars on their own subscription, separate from your plan and separate from credits. You do not need a plan to buy seats. A grandfathered value of null means unlimited for that channel. Email mailbox allocation is read from this workspace's own database; when it cannot be read, the email seat's allocated/available/can_connect read null and `email_sender_allocation` is `tenant_unavailable`. Read-only, 0 Oxygen credits.")
         .option("--json", "Print a JSON envelope.")
         .action(async (options) => {
         await handleAsyncAction("billing seats", options, () => requestOxygen("/api/cli/billing/seats"));
     })
         .addCommand(new Command("set")
-        .description("Set how many sending seats of one channel this workspace holds. The quantity is ABSOLUTE, not a delta: `--quantity 3` means you end up with three, so a retried command cannot buy extra. Increasing charges the card pro rata immediately; decreasing credits you pro rata. Reducing below the number of senders you have connected is REFUSED and names how many to disconnect first, because an orphaned sender is one you keep paying a provider for while Oxygen has stopped honouring it. Charges real money.")
+        .description("Set how many sending seats of one channel this workspace holds. The quantity is ABSOLUTE, not a delta: `--quantity 3` means you end up with three, so a retried command cannot buy extra. Increasing charges the card pro rata immediately; decreasing credits you pro rata. Reducing below the number of senders you have connected is REFUSED and names how many to disconnect first, because an orphaned sender is one you keep paying a provider for while Oxygen has stopped honouring it. An email_sender reduction is refused with `seat_allocation_unavailable` (503) while the workspace's mailbox count cannot be read; retry it in a moment. Charges real money.")
         .requiredOption("--seat-key <kind>", "linkedin, whatsapp, phone_number, or email_sender.")
         .requiredOption("--quantity <n>", "Total seats to hold for this channel, 0 or more.")
         .option("--json", "Print a JSON envelope.")
@@ -8718,7 +8794,7 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         await handleAsyncAction("billing invoices", options, () => requestOxygen("/api/cli/billing/invoices"));
     }))
         .addCommand(new Command("allowance")
-        .description("Show this billing cycle's credit pool as one breakdown: fixed spend, flexible spend, credits committed to the next renewal, and what is free to spend — the numbers behind the bar on the credit-usage page. The parts always sum to the total. fixed_spent_credits is what has ALREADY been charged this cycle, NOT your monthly run-rate — for the forward figure billed at the next renewal see `billing commitments`, which is normally much larger. reserved_credits is in-flight spend already carved out of free_to_spend_credits, so treat free_to_spend as the ceiling and free_to_spend minus reserved as what is genuinely uncommitted. Every segment carries region=fixed|flexible. Read-only, 0 Oxygen credits.")
+        .description("Show this billing cycle's credit pool as one breakdown: fixed spend, flexible spend, credits committed to the next renewal, and what is free to spend — the numbers behind the bar on the credit-usage page. The parts always sum to the total, with ONE deliberate exception: `renewals_past_due` (and its region=past_due segment) reports renewals that FAILED to charge, which is money not taken and therefore outside total_credits. fixed_spent_credits is what has ALREADY been charged this cycle, NOT your monthly run-rate — for the forward figure billed at the next renewal see `billing commitments`, which is normally much larger. reserved_credits is in-flight spend already carved out of free_to_spend_credits, so treat free_to_spend as the ceiling and free_to_spend minus reserved as what is genuinely uncommitted. Every segment carries region=fixed|flexible. Read-only, 0 Oxygen credits.")
         .option("--json", "Print a JSON envelope.")
         .action(async (options) => {
         await handleAsyncAction("billing allowance", options, () => requestOxygen("/api/cli/billing/allowance"));
@@ -9155,6 +9231,12 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
             const suffix = params.toString() ? `?${params.toString()}` : "";
             return requestOxygen(`/api/cli/admin/costs${suffix}`);
         });
+    }))
+        .addCommand(new Command("primary-providers")
+        .description("Board of the PRIMARY managed external data providers (enrichment, people/company search, web search, scraping, signals, AI-column web grounding, LLM inference): per provider health probe, 7d traffic, balance, 30d/7d COGS, rate policy, spend ceilings, breaker, and posture, plus the platform runaway guards. Read-only — never calls a provider. Staff only.")
+        .option("--json", "Print a JSON envelope.")
+        .action(async (options) => {
+        await handleAsyncAction("admin primary-providers", options, () => requestOxygen("/api/cli/admin/primary-providers"));
     }))
         .addCommand(new Command("spend")
         .description("Global managed-provider spend limiter: burn, ceilings, breakers. Staff only.")
@@ -9373,7 +9455,7 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         // the MCP tool enums. The API rejects any other value with
         // invalid_request so a typo fails loudly.
         .option("--type <type>", "Filter by operation or provider_request.")
-        .option("--source <source>", "Filter by cli, web, mcp, or provider.")
+        .option("--source <source>", "Filter by cli, web, mcp, workflow, or provider.")
         .option("--trace-id <trace_id>", "Filter by trace id.")
         .option("--run-id <run_id>", "Filter by workspace run id.")
         .option("--limit <n>", "Maximum events to return. Defaults to 50.")
@@ -9971,6 +10053,48 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
                 },
             });
         });
+    }))
+        .addCommand(new Command("resolve")
+        .description("Record what a human verified about a cell whose external write was dispatched but never confirmed. It records the outcome only; it never calls the provider again. Use not_applied when the write provably did not land (the cell becomes rerunnable) or applied when it did.")
+        .argument("<table>", "Table id or slug.")
+        .argument("<row_id>", "Workspace row UUID.")
+        .argument("<column>", "Column id or key.")
+        .requiredOption("--outcome <outcome>", "applied (the external write landed) or not_applied (it never did).")
+        .option("--note <text>", "Short note about how the destination was verified.")
+        .option("--value <json>", "JSON value read off the destination, recorded into the cell. Only valid with --outcome applied.")
+        .option("--json", "Print a JSON envelope.")
+        .action(async (table, rowId, column, options) => {
+        const outcome = readOption(options.outcome);
+        if (outcome !== "applied" && outcome !== "not_applied") {
+            throw new OxygenError("invalid_effect_resolution_outcome", "--outcome must be applied or not_applied.", { exitCode: 1 });
+        }
+        const rawValue = readOption(options.value);
+        if (rawValue !== null && outcome !== "applied") {
+            throw new OxygenError("invalid_effect_resolution_value", "--value is only valid with --outcome applied; a not-applied effect wrote nothing.", { exitCode: 1 });
+        }
+        // Parsed locally so a malformed --value fails with a clear message
+        // instead of being posted as a JSON string the server would then
+        // faithfully write into the cell.
+        let value;
+        if (rawValue !== null) {
+            try {
+                value = JSON.parse(rawValue);
+            }
+            catch {
+                throw new OxygenError("invalid_json", `--value must be valid JSON. Quote a string as '"text"'.`, { exitCode: 1 });
+            }
+        }
+        await handleAsyncAction("cells resolve", options, () => requestOxygen("/api/cli/tables/cells/resolve", {
+            method: "POST",
+            body: {
+                table,
+                row_id: rowId,
+                column,
+                outcome,
+                ...(readOption(options.note) ? { note: readOption(options.note) } : {}),
+                ...(rawValue !== null ? { value } : {}),
+            },
+        }));
     }))
         .addCommand(new Command("history")
         .description("Show cell change history.")
@@ -10308,7 +10432,7 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         .option("--selection-json <json>", "Full row selection object for server-side row selection.")
         .option("--only-missing", "Queue rows missing the capability's normalized output when no explicit selection is passed.")
         .option("--force", "Re-run rows with an existing target enrichment value.")
-        .option("--max-concurrency <n>", "Maximum concurrent row items for this enrichment run. Defaults to 20.")
+        .option("--max-concurrency <n>", "Maximum concurrent row items for this enrichment run (1-250). Defaults to 20.")
         .option("--json", "Print a JSON envelope.")
         .option("--approved", "Approve THIS run after inspecting `enrich-column preview` (free). Paid enrichment runs fail with approval_required (exit 7) without it.")
         .action(async (table, options) => {
@@ -12832,7 +12956,7 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         await handleAsyncAction("sequences get", options, () => requestOxygen(`/api/cli/sequences/${encodeURIComponent(sequence)}`));
     }))
         .addCommand(new Command("enroll")
-        .description("Enroll leads into a sequence. Enrolling spends no credits and sends nothing — dispatch only happens at `sequences start`. --from-table enrolls every not-yet-enrolled row of the sequence's bound source table (up to 500 per run; the response's from_table.has_more says whether to run again) — for a LinkedIn sequence the profile URL is read from the bound table's URL column, no pre-resolved provider ids needed. --leads-file enrolls an explicit JSON list { leads: [...] }: for an email/WhatsApp sequence a lead identified only by an email (row_values.email) or phone (row_values.phone) is auto-filed as a row in the sequence's leads table (auto-creating and binding one if there is none), deduped by email/phone, so no table has to exist first (the table is returned as leads_table with a web_url); a LinkedIn lead needs a lead_provider_id, a lead_profile_url, or a table_row_id whose row carries a LinkedIn URL. A CRM-only lead needs a stable table_row_id or lead_provider_id in addition to mapped row_values; a HubSpot contact id used in crm_task associations identifies the destination record, not the Oxygen enrollment. When the sequence is bound to a source table, a lead's table_row_id auto-snapshots that row's columns (incl. AI/tool outputs) into row_values for {{column}} copy — explicit row_values win. Idempotent per table row (and per email/phone for auto-filed leads). The org do-not-contact list is always enforced; --exclude-contacted and --suppress-list add further opt-in skips (reported under skipped_by_reason). Leads already owned by a sender account (from an earlier real send) are routed back to that same account; a lead owned by a sender NOT on this sequence is skipped (bound_to_other_sender) unless --ignore-sender-bindings.")
+        .description("Enroll leads into a sequence. Enrolling spends no credits and sends nothing — dispatch only happens at `sequences start`. --from-table enrolls every not-yet-enrolled row of the sequence's bound source table (up to 500 per run; the response's from_table.has_more says whether to run again) — for a LinkedIn sequence the profile is read from the bound table's URL column, where a full /in/ URL and a bare public handle carrying a hyphen or digit (ada-lovelace) both work, so no pre-resolved provider ids are needed; each handle Oxygen canonicalized is echoed in linkedin_handles_canonicalized (value + url) to check before start, and every row that still cannot be resolved is named in unresolved_linkedin_lead_details (row, value, reason) rather than only counted in unresolved_linkedin_leads. --leads-file enrolls an explicit JSON list { leads: [...] }: for an email/WhatsApp sequence a lead identified only by an email (row_values.email) or phone (row_values.phone) is auto-filed as a row in the sequence's leads table (auto-creating and binding one if there is none), deduped by email/phone, so no table has to exist first (the table is returned as leads_table with a web_url); a LinkedIn lead needs a lead_provider_id, a lead_profile_url (a /in/ URL or a bare public handle with a hyphen or digit), or a table_row_id whose row carries one of those. A CRM-only lead needs a stable table_row_id or lead_provider_id in addition to mapped row_values; a HubSpot contact id used in crm_task associations identifies the destination record, not the Oxygen enrollment. When the sequence is bound to a source table, a lead's table_row_id auto-snapshots that row's columns (incl. AI/tool outputs) into row_values for {{column}} copy — explicit row_values win. Idempotent per table row (and per email/phone for auto-filed leads). The org do-not-contact list is always enforced; --exclude-contacted and --suppress-list add further opt-in skips (reported under skipped_by_reason). Leads already owned by a sender account (from an earlier real send) are routed back to that same account; a lead owned by a sender NOT on this sequence is skipped (bound_to_other_sender) unless --ignore-sender-bindings.")
         .argument("<sequence>", "Sequence id or slug.")
         .option("--leads-file <path>", "Path to a JSON file: { \"leads\": [{ row_values: { email }, lead_name }] } for cold email; { lead_provider_id, lead_name, table_row_id, row_values } for LinkedIn/existing rows; CRM-only leads require table_row_id or a stable lead_provider_id alongside mapped row_values. A CRM association object id is not the enrollment identity. Exactly one of --leads-file or --from-table.")
         .option("--from-table", "Enroll every not-yet-enrolled row of the sequence's bound source table (up to 500 per run; re-run to continue). Exactly one of --leads-file or --from-table.")
@@ -13972,6 +14096,37 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
                 },
             });
         });
+    }))
+        .addCommand(new Command("exit")
+        .description("Leave OXYGEN with a managed domain INTACT: stop every OXYGEN renewal for it (inboxes, warm-up, inbox placement) at the end of the period already paid for, keep the domain, mailboxes, DNS, warm-up state and data exactly as they are, and record a handoff request. Nothing is cancelled, disconnected, or released — for that use `managed-inboxes cancel`. WITHOUT --approved prints the plan: each renewal line with the date it stops, what stays, and the vendor-carry note (OXYGEN keeps paying the inbox vendor for these mailboxes after that date until a human completes the handoff or you cancel). To record it, re-run with --approved AND --confirm <domain> echoing the domain exactly. The Google Workspace / registrar handoff itself is coordinated by a human with the vendor — this command records the request, it does not perform the transfer. --revoke resumes renewals on a domain whose exit was requested. Free, 0 Oxygen credits; re-running on an already-exited domain changes nothing (effect_outcome no_change).")
+        .argument("[domain]", "The managed domain to stop renewing. May also be passed as --domain.")
+        .option("--domain <domain>", "The managed inbox domain (alternative to the positional argument).")
+        .option("--contact <email>", "Who the human handoff should be coordinated with (recorded on the request).")
+        .option("--note <text>", "Free-text context for the handoff, e.g. where the mailboxes are moving.")
+        .option("--revoke", "Undo a recorded exit: renewals resume on the next cycle. Still needs --approved --confirm.")
+        .option("--approved", "Actually record the exit (or the revoke); otherwise the plan is printed.")
+        .option("--confirm <domain>", "Type the domain again to confirm. Required with --approved.")
+        .option("--json", "Print a JSON envelope.")
+        .action(async (domainArg, options) => {
+        await handleAsyncAction("managed-inboxes exit", options, () => {
+            const domain = requireDomainArg(domainArg, options.domain);
+            const confirm = readOption(options.confirm);
+            const contact = readOption(options.contact);
+            const note = readOption(options.note);
+            return requestOxygen("/api/cli/managed-inboxes/exit", {
+                method: "POST",
+                body: {
+                    domain,
+                    ...(contact ? { contact } : {}),
+                    ...(note ? { note } : {}),
+                    ...(options.revoke ? { revoke: true } : {}),
+                    ...(options.approved ? { approved: true } : {}),
+                    // Sent verbatim, never defaulted to `domain` — same rule as cancel: the
+                    // echo only means something if a human (or an agent) typed it a second time.
+                    ...(confirm ? { confirm_domain: confirm } : {}),
+                },
+            });
+        });
     }))
         .addCommand(new Command("upload-avatar")
         .description("Host a one-off mailbox profile picture and print the URL to pass as profile_picture_url in --mailboxes JSON. For a reusable sender identity used by FUTURE --sender <id> orders, prefer `oxygen senders profiles set-photo <id> --file <path>` instead. The inbox vendor FETCHES the hosted URL when it provisions the mailbox, often long after the order, so it must be public and permanent. Uploads a PNG, JPEG, or WebP (max 8MB), then normalizes it to a metadata-free 400x400 PNG at a matching .png URL. This only hosts the image: it does not update a sender, place an order, call the inbox provider, or charge credits.")
@@ -14757,15 +14912,15 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
         }));
     })));
     program.addCommand(new Command("deliverability")
-        .description("External email deliverability: fleet reputation health and DIRECTIONAL inbox-placement (spam) tests via EmailGuard or Zapmail. This group creates one-off placement probes; for continuous EmailGuard account monitoring use `oxygen mailboxes emailguard connect`. Placement tests are approval-gated paid runs (managed bills Oxygen credits; BYOK = 0 Oxygen credits — Zapmail BYOK bills your Zapmail wallet ~$2/test); fail closed with 409 when no health provider is connected.")
+        .description("External email deliverability: fleet reputation health and DIRECTIONAL inbox-placement (spam) tests via EmailGuard, Zapmail, or an explicitly configured SendKit dev canary. This group creates one-off placement probes; for continuous EmailGuard account monitoring use `oxygen mailboxes emailguard connect`. Placement tests are approval-gated paid runs (managed bills Oxygen credits; BYOK = 0 Oxygen credits — Zapmail BYOK bills your Zapmail wallet ~$2/test). SendKit is never auto-selected or generally available: it is a 0-credit, one-test canary for the configured eligible connected sender only.")
         .addCommand(new Command("placement-test")
         .description("Directional inbox-placement (spam) tests: create, separately approve EmailGuard's exact seed send, then poll results.")
         .addCommand(new Command("run")
-        .description("Create a placement test for one sending mailbox. Without --approved this returns a cost PREVIEW. EmailGuard creation returns exact seeds + phrase but sends nothing; next run `placement-test send <id>` to preview and approve that external email. Zapmail owns its probe delivery and completes async (2-24h).")
+        .description("Create a placement test for one sending mailbox. Without --approved this returns a cost PREVIEW. EmailGuard creation returns exact seeds + phrase but sends nothing; next run `placement-test send <id>` to preview and approve that external email. Zapmail owns its probe delivery and completes async (2-24h). SendKit requires explicit --provider sendkit plus --subject and --body, and is available only for the configured dev canary with an eligible connected sender. Its approval creates AND sends one probe with no separate send step: preview first, then re-run the same mailbox, provider, subject, and body with --approved --max-credits 0 --plan <plan_hash>.")
         .argument("<mailbox>", "Sending mailbox address to test (e.g. ada@send.acme.com).")
-        .option("--provider <provider>", "Health provider: emailguard or zapmail. Omit to auto-resolve — EmailGuard is the default for every mailbox; Zapmail is used only for Zapmail-hosted mailboxes when EmailGuard is not connected.")
-        .option("--subject <subject>", "Optional subject for the seed message (zapmail ignores it beyond labeling the test).")
-        .option("--body <text>", "Optional plain-text body for the seed message (ignored by zapmail).")
+        .addOption(new Option("--provider <provider>", "Health provider: emailguard, zapmail, or sendkit. Omit to auto-resolve EmailGuard/Zapmail. SendKit is never auto-selected and requires the configured dev canary sender.").choices(["emailguard", "zapmail", "sendkit"]))
+        .option("--subject <subject>", "Seed-message subject. Required with --provider sendkit; Zapmail ignores it beyond labeling the test.")
+        .option("--body <text>", "Plain-text seed-message body. Required with --provider sendkit; ignored by Zapmail.")
         .option("--approved", "Actually run the test (otherwise a preview is returned).")
         .option("--max-credits <n>", "Credit cap the caller accepts (must be >= credits_required for managed runs).")
         .option("--plan <hash>", "plan_hash from a fresh create preview (required with --approved).")
@@ -14833,7 +14988,7 @@ fixed scan; watermark_cursor starts a later bounded replay. Consumers must retai
     program.addCommand(new Command("domains")
         .description("Cold-email domain management on the org's own Cloudflare account (BYOK): sync zones, inspect age/warmup/DNS health, check availability and pricing, and buy domains. Purchases bill your Cloudflare payment method, never Oxygen credits.")
         .addCommand(new Command("list")
-        .description("List the org's cached Cloudflare domains with cold-email metadata (age, mailboxes, warmup, sending volume, DNS health). Each row's `dns` object explains the status (ok, issues, not checked, check failed, partial check, no zone) with a reason and fix path; `managed_domains` lists InboxKit-managed bundle domains (vendor-registered + vendor-DNS'd — manage via `managed-inboxes`). Reads the cache only — run `domains sync` to refresh.")
+        .description("List the org's cached Cloudflare domains with cold-email metadata (age, mailboxes, warmup, sending volume, DNS health). Each row's `dns` object explains the status (ok, issues, not checked, check failed, partial check, no zone) with a reason and fix path; `managed_domains` lists InboxKit-managed bundle domains (vendor-registered + vendor-DNS'd — manage via `managed-inboxes`), each carrying `internal_billing_status` (ok|past_due) and `last_billed_cycle_key` — a domain the vendor keeps live can still be one OXYGEN could not renew. Reads the cache only — run `domains sync` to refresh.")
         .option("--status <status>", "Filter by zone status: unknown, initializing, pending, active, moved, or deleted.")
         .option("--registrar <registrar>", "Filter by registrar name.")
         .option("--q <text>", "Filter by domain substring.")

package/node_modules/@oxygen/shared/dist/billing.d.ts

@@ -33,6 +33,23 @@ export declare const CREDIT_TOPUP_MAX_CREDITS = 1000000;
 export declare const CREDIT_TOPUP_STEP_CREDITS = 1000;
 export declare const CREDIT_TOPUP_DEFAULT_CREDITS = 20000;
 export declare function isValidCreditTopupCredits(credits: number): boolean;
+/**
+ * A shortfall expressed as an amount `oxygen billing topup` will actually SELL:
+ * rounded up onto the 1,000-credit step and clamped into the purchasable
+ * [8,000 .. 1,000,000] band. A next_action (or an alert email) naming a number the
+ * top-up route refuses with `invalid_topup_amount` is not a next action, it is a
+ * second dead end during the incident it exists to end.
+ *
+ * Both clamps are honest, not cosmetic: below the floor the customer buys the
+ * smallest pack (more than the debt — purchased credits never expire), and above
+ * the ceiling they buy the largest single checkout and top up again. Callers carry
+ * the raw shortfall alongside so either gap stays visible rather than implied.
+ *
+ * Shared rather than re-derived per surface: `billing balance` and the renewal
+ * failure alert quote this number to the same customer about the same debt, and a
+ * second rounding formula is how two customer-facing figures drift apart.
+ */
+export declare function creditTopupAmountForShortfall(credits: number): number;
 export declare function creditTopupUsdCents(credits: number): number | null;
 export declare const AUTOMATION_ACTION_CREDITS = 0.01;
 /** Kinds of resource that carry a fixed monthly credit commitment. */

package/node_modules/@oxygen/shared/dist/billing.js

@@ -35,6 +35,26 @@ export function isValidCreditTopupCredits(credits) {
         && credits <= CREDIT_TOPUP_MAX_CREDITS
         && credits % CREDIT_TOPUP_STEP_CREDITS === 0;
 }
+/**
+ * A shortfall expressed as an amount `oxygen billing topup` will actually SELL:
+ * rounded up onto the 1,000-credit step and clamped into the purchasable
+ * [8,000 .. 1,000,000] band. A next_action (or an alert email) naming a number the
+ * top-up route refuses with `invalid_topup_amount` is not a next action, it is a
+ * second dead end during the incident it exists to end.
+ *
+ * Both clamps are honest, not cosmetic: below the floor the customer buys the
+ * smallest pack (more than the debt — purchased credits never expire), and above
+ * the ceiling they buy the largest single checkout and top up again. Callers carry
+ * the raw shortfall alongside so either gap stays visible rather than implied.
+ *
+ * Shared rather than re-derived per surface: `billing balance` and the renewal
+ * failure alert quote this number to the same customer about the same debt, and a
+ * second rounding formula is how two customer-facing figures drift apart.
+ */
+export function creditTopupAmountForShortfall(credits) {
+    const stepped = Math.ceil(credits / CREDIT_TOPUP_STEP_CREDITS) * CREDIT_TOPUP_STEP_CREDITS;
+    return Math.min(CREDIT_TOPUP_MAX_CREDITS, Math.max(CREDIT_TOPUP_MIN_CREDITS, stepped));
+}
 export function creditTopupUsdCents(credits) {
     if (!isValidCreditTopupCredits(credits))
         return null;

package/node_modules/@oxygen/shared/dist/capability-discovery.js

@@ -201,7 +201,7 @@ export const OXYGEN_CAPABILITY_ROUTES = [
         gatewayTools: ["oxygen_tables_create", "oxygen_columns_add", "oxygen_enrich_column_preview", "oxygen_tables_link_bulk"],
         gatewayCommands: ["tables create", "columns add", "enrich-column preview", "tables link"],
         skills: ["oxygen-gtm", "oxygen-table-tidy", "oxygen-diagnostics", "oxygen-clay-migration"],
-        endpointSections: ["action-columns", "callables", "columns", "company-enrichment", "enrich-column", "enrichment", "projects", "table-action-runs", "table-ingestion-runs", "tables"],
+        endpointSections: ["action-columns", "callables", "columns", "company-enrichment", "enrich-column", "enrichment", "projects", "table-action-items", "table-action-runs", "table-ingestion-runs", "tables"],
         // "link"/"join"/"connect"/"relate" route here for `tables link`. Added after a
         // blind user eval asked for exactly "link two tables" and was routed to
         // `tables create` / `columns add` / `enrich-column preview` — none of which

package/node_modules/@oxygen/shared/dist/copilot-plan.d.ts

@@ -151,6 +151,13 @@ export type ProjectCopilotPlanInput = {
  * would be worse than one that stays away.
  */
 export declare function projectCopilotPlan(input: ProjectCopilotPlanInput): CopilotPlanProjection | null;
+/**
+ * "<capability>: <gist>" for a failed call. The gist is the summary cut at its
+ * first sentence or clause boundary and then hard-capped, so a schema dump or a
+ * multi-sentence explanation cannot become the title; a summary that is only
+ * the capability's own name, or empty, leaves the bare name.
+ */
+export declare function failedToolSubstepTitle(capability: string, summary: string): string;
 /**
  * How long, in words. One owner, because there were three and all three were wrong.
  *

package/node_modules/@oxygen/shared/dist/copilot-plan.js

@@ -396,13 +396,22 @@ function attributeToolCalls(events, planEvents, tracked, clockMs) {
         if (!target)
             continue;
         const rollup = rollups.get(callId);
+        const failed = payload.ok === false;
         target.toolSubsteps.push({
             id: callId,
             // `summary` is the tool_call_finished remap the Copilot host writes; it is a
             // line ("63 columns"), which is what a substep wants. Fall back to the
             // capability name rather than to a serialized result.
-            title: readText(payload.summary) || capability,
-            status: payload.ok === false ? "blocked" : "done",
+            //
+            // A FAILED call's summary is the error message, which is prose about the
+            // failure rather than a name for the step -- a sub-agent's "did not finish
+            // (FAILED): This sub-agent run reached its ceiling of 4 model calls."
+            // became the substep's whole title. The rail needs what failed and the
+            // gist of why, bounded, with the red mark carrying the status.
+            title: failed
+                ? failedToolSubstepTitle(capability, readText(payload.summary))
+                : readText(payload.summary) || capability,
+            status: failed ? "blocked" : "done",
             source: "tool",
             durationMs: started ? toMs(event.created_at) - started.startedMs : null,
             startedAt: started ? new Date(started.startedMs).toISOString() : null,
@@ -423,6 +432,25 @@ function attributeToolCalls(events, planEvents, tracked, clockMs) {
         });
     }
 }
+/** How much of a failure's reason a substep title carries before it stops being a label. */
+const FAILED_SUBSTEP_REASON_CHARS = 90;
+/**
+ * "<capability>: <gist>" for a failed call. The gist is the summary cut at its
+ * first sentence or clause boundary and then hard-capped, so a schema dump or a
+ * multi-sentence explanation cannot become the title; a summary that is only
+ * the capability's own name, or empty, leaves the bare name.
+ */
+export function failedToolSubstepTitle(capability, summary) {
+    const trimmed = summary.trim();
+    if (!trimmed || trimmed === capability)
+        return capability;
+    const boundary = trimmed.search(/[.:;](\s|$)|\n/);
+    let gist = boundary > 0 ? trimmed.slice(0, boundary) : trimmed;
+    if (gist.length > FAILED_SUBSTEP_REASON_CHARS) {
+        gist = `${gist.slice(0, FAILED_SUBSTEP_REASON_CHARS - 1).trimEnd()}…`;
+    }
+    return `${capability}: ${gist}`;
+}
 /**
  * Model-declared substeps first, then the observed calls.
  *

package/node_modules/@oxygen/shared/dist/linkedin-url.d.ts

@@ -25,6 +25,28 @@ export type LinkedinUrlNormalization = {
     dispatchUrl: string;
 } | null;
 export declare function normalizeLinkedinProfileUrl(raw: string | null | undefined): LinkedinUrlNormalization;
+/**
+ * Canonicalize any LinkedIn PROFILE REFERENCE a customer might put in a cell:
+ * a full `/in/` URL, a scheme-less `linkedin.com/in/…`, or a BARE public handle
+ * (`peter-neumann-b25a6717b`, `christopherueink1`) that people-search exports
+ * and manual research routinely produce. Purely lexical — no provider call.
+ *
+ * The rule, in order:
+ *   1. Anything `normalizeLinkedinProfileUrl` accepts wins (URL forms).
+ *   2. A URL-shaped value it rejected (company page, Sales Navigator, a
+ *      non-LinkedIn host) stays rejected — never guessed at.
+ *   3. An `ACo…`/`ACw…` member provider id is NOT a handle. It returns null
+ *      because this function's contract is "give me a profile URL"; a caller
+ *      that accepts member ids must recognize them itself and pass them through
+ *      as an id. Fabricating `/in/ACoAA…` would address nobody.
+ *   4. What is left is a handle only if it matches the public-identifier charset
+ *      AND contains a letter AND contains a hyphen or digit AND is not a
+ *      placeholder token. Everything else returns null.
+ *
+ * A canonicalized handle is dispatchable the same way a URL is: send-time
+ * resolution (`users_get`) turns `/in/<handle>` into the real member id.
+ */
+export declare function canonicalizeLinkedinProfileReference(raw: string | null | undefined): LinkedinUrlNormalization;
 /**
  * Extract the addressable activity id from a LinkedIn post URL. Returns null for
  * a bare id (already addressable — pass it through), and null for a linkedin.com

package/node_modules/@oxygen/shared/dist/linkedin-url.js

@@ -65,6 +65,110 @@ export function normalizeLinkedinProfileUrl(raw) {
         dispatchUrl: `https://www.linkedin.com/in/${decoded}`,
     };
 }
+// A LinkedIn member PROVIDER id (Unipile `ACoAA…` / `ACwAA…`) is base64url of a
+// member URN, not a public identifier — rewriting one into `/in/<id>` would send
+// a nonexistent profile URL to the provider. Guard the whole PREFIX rather than a
+// length-qualified shape: a short or truncated id (`ACo123`) would otherwise slip
+// through and be dispatched as if it were a handle. LinkedIn mints public slugs
+// lowercase, so `acoustics-lab` is a real handle; the guard only fires on a
+// leading uppercase `AC`, and it tolerates the third letter being upper-cased
+// too (`ACOAA…`, the shape a spreadsheet UPPER() or a CRM export produces), so
+// such an id is named as unrecognized at enrollment instead of dying at send.
+const LINKEDIN_MEMBER_ID_PREFIX_RE = /^AC[OoWw]/;
+// LinkedIn's public identifier ("vanity slug") charset: letters, digits and
+// hyphens only, 3–100 characters, never leading with a hyphen. Deliberately
+// NARROWER than "any non-URL string" — no `.`, `@`, `_`, `:`, `/` or whitespace
+// — so an email (`someone@example.com`), a bare domain (`example.com`), and a
+// free-text research placeholder can never be mistaken for a handle and turned
+// into a dispatchable profile URL. Unicode letters/digits are allowed because
+// `normalizeLinkedinProfileUrl` already percent-decodes non-ASCII slugs.
+const LINKEDIN_PUBLIC_HANDLE_RE = /^[\p{L}\p{N}][\p{L}\p{N}-]{2,99}$/u;
+/**
+ * A bare handle is only accepted when it carries a hyphen or a digit — the
+ * `firstname-lastname-hash` / `name1` shapes LinkedIn actually mints and people
+ * search actually exports.
+ *
+ * THIS IS THE STRANGER-DISPATCH GUARD. Without it, every single plain word in a
+ * mis-mapped column becomes a dispatchable profile: `alexander`, `Schmidt`,
+ * `acme`, `microsoft`, `unknown`, `pending` all resolve to a REAL LinkedIn
+ * member who has nothing to do with the row, and outreach goes to a stranger
+ * under the customer's own account. A wrongly-skipped row is recoverable and is
+ * reported by name; a message to the wrong human is not. The cost is that a real
+ * separator-free vanity handle (`satyanadella`) must be supplied as a full URL —
+ * which the per-row `unrecognized_linkedin_identifier` detail tells the customer.
+ */
+const LINKEDIN_HANDLE_REQUIRES_SEPARATOR_OR_DIGIT = /[-\p{N}]/u;
+/** A handle must still contain a letter, so a phone number (`4915112345678`) is not one. */
+const LINKEDIN_HANDLE_REQUIRES_LETTER = /\p{L}/u;
+/**
+ * Values that pass the shape tests but are obviously a spreadsheet's way of
+ * saying "no value". They are compared case-insensitively against the whole
+ * trimmed cell WITH ITS HYPHENS REMOVED, so the hyphenated spellings that would
+ * otherwise satisfy the separator rule (`n-a`, `not-found`, `no-linkedin`,
+ * `url-to-confirm`) are caught by the same list as their plain forms.
+ */
+const LINKEDIN_HANDLE_PLACEHOLDER_TOKENS = new Set([
+    "none", "null", "nil", "undefined", "unknown", "missing", "pending", "tbd",
+    "todo", "error", "failed", "true", "false", "empty", "blank", "test", "na",
+    "notfound", "nolinkedin", "notonlinkedin", "noprofile", "nourl", "notavailable",
+    "notapplicable", "unavailable", "urltoconfirm", "tobeconfirmed", "toconfirm",
+    "placeholder", "sample", "example", "dummy", "unresolved",
+]);
+function isLinkedinHandlePlaceholder(value) {
+    return LINKEDIN_HANDLE_PLACEHOLDER_TOKENS.has(value.toLowerCase().replace(/-/g, ""));
+}
+/**
+ * Canonicalize any LinkedIn PROFILE REFERENCE a customer might put in a cell:
+ * a full `/in/` URL, a scheme-less `linkedin.com/in/…`, or a BARE public handle
+ * (`peter-neumann-b25a6717b`, `christopherueink1`) that people-search exports
+ * and manual research routinely produce. Purely lexical — no provider call.
+ *
+ * The rule, in order:
+ *   1. Anything `normalizeLinkedinProfileUrl` accepts wins (URL forms).
+ *   2. A URL-shaped value it rejected (company page, Sales Navigator, a
+ *      non-LinkedIn host) stays rejected — never guessed at.
+ *   3. An `ACo…`/`ACw…` member provider id is NOT a handle. It returns null
+ *      because this function's contract is "give me a profile URL"; a caller
+ *      that accepts member ids must recognize them itself and pass them through
+ *      as an id. Fabricating `/in/ACoAA…` would address nobody.
+ *   4. What is left is a handle only if it matches the public-identifier charset
+ *      AND contains a letter AND contains a hyphen or digit AND is not a
+ *      placeholder token. Everything else returns null.
+ *
+ * A canonicalized handle is dispatchable the same way a URL is: send-time
+ * resolution (`users_get`) turns `/in/<handle>` into the real member id.
+ */
+export function canonicalizeLinkedinProfileReference(raw) {
+    const fromUrl = normalizeLinkedinProfileUrl(raw);
+    if (fromUrl)
+        return fromUrl;
+    if (typeof raw !== "string")
+        return null;
+    const trimmed = raw.trim();
+    if (!trimmed)
+        return null;
+    // A URL we could not reduce to a profile is a rejection, not a handle.
+    if (looksLikeUrlIdentifier(trimmed))
+        return null;
+    if (LINKEDIN_MEMBER_ID_PREFIX_RE.test(trimmed))
+        return null;
+    if (!LINKEDIN_PUBLIC_HANDLE_RE.test(trimmed))
+        return null;
+    if (!LINKEDIN_HANDLE_REQUIRES_LETTER.test(trimmed))
+        return null;
+    if (!LINKEDIN_HANDLE_REQUIRES_SEPARATOR_OR_DIGIT.test(trimmed))
+        return null;
+    if (isLinkedinHandlePlaceholder(trimmed))
+        return null;
+    const handle = trimmed.toLowerCase();
+    return {
+        normalized: `https://www.linkedin.com/in/${handle}`,
+        handle,
+        // dispatchHandle keeps the original case, exactly as the URL path does.
+        dispatchHandle: trimmed,
+        dispatchUrl: `https://www.linkedin.com/in/${trimmed}`,
+    };
+}
 // A LinkedIn post URL carries the numeric activity id we address the post by:
 //   /posts/{slug}-activity-{19 digits}-{4 chars}
 //   /feed/update/urn:li:activity:{19 digits}

package/node_modules/@oxygen/shared/dist/provider-funding-errors.d.ts

@@ -40,5 +40,19 @@ export declare function isProviderFundingErrorCode(code: string | null | undefin
  * would otherwise read as retryable.
  */
 export declare function isProviderRateLimitErrorCode(code: string | null | undefined): boolean;
-/** The customer-facing next step for a funding refusal, by credential ownership. */
-export declare function providerFundingNextStep(credentialMode: "managed" | "byok" | null | undefined): string;
+/**
+ * True when the credential the provider refused belongs to the CUSTOMER rather
+ * than to Oxygen's managed pool.
+ *
+ * The two halves of a 402 need opposite copy and opposite promises. Oxygen's own
+ * dry account is our outage: the breaker benches the provider, the row is
+ * preserved, and the work resumes once ops funds it. A customer-owned account is
+ * theirs to top up: nothing resumes, nobody is alerted, and telling them to wait
+ * is how one workspace re-ran the same column every few hours for nine days.
+ *
+ * The producers spell customer ownership four ways (`byok` for an explicit
+ * bring-your-own key, `user_oauth` / `user_api_key` / `user_connection` for a
+ * connected account) — every one of them is the customer's money, so the
+ * predicate is "not managed", not "equals byok".
+ */
+export declare function isCustomerOwnedCredentialMode(credentialMode: string | null | undefined): boolean;

package/node_modules/@oxygen/shared/dist/provider-funding-errors.js

@@ -69,13 +69,23 @@ export function isProviderRateLimitErrorCode(code) {
         return false;
     return /rate|limit|429|capacity_deferred/i.test(code);
 }
-/** The customer-facing next step for a funding refusal, by credential ownership. */
-export function providerFundingNextStep(credentialMode) {
-    if (credentialMode === "byok") {
-        return "Top up or upgrade the provider account behind your connected key, then retry. Waiting will not clear this.";
-    }
-    if (credentialMode === "managed") {
-        return "This is OXYGEN's managed provider account, not your credit balance — contact support. Waiting will not clear this; route the run to another provider in the meantime.";
-    }
-    return "Check the provider account's balance and plan entitlement, then retry. Waiting will not clear this.";
+/**
+ * True when the credential the provider refused belongs to the CUSTOMER rather
+ * than to Oxygen's managed pool.
+ *
+ * The two halves of a 402 need opposite copy and opposite promises. Oxygen's own
+ * dry account is our outage: the breaker benches the provider, the row is
+ * preserved, and the work resumes once ops funds it. A customer-owned account is
+ * theirs to top up: nothing resumes, nobody is alerted, and telling them to wait
+ * is how one workspace re-ran the same column every few hours for nine days.
+ *
+ * The producers spell customer ownership four ways (`byok` for an explicit
+ * bring-your-own key, `user_oauth` / `user_api_key` / `user_connection` for a
+ * connected account) — every one of them is the customer's money, so the
+ * predicate is "not managed", not "equals byok".
+ */
+export function isCustomerOwnedCredentialMode(credentialMode) {
+    if (!credentialMode)
+        return false;
+    return credentialMode.trim().toLowerCase() !== "managed";
 }

package/node_modules/@oxygen/shared/dist/table-limits.d.ts

@@ -1,2 +1,20 @@
 export declare const MAX_TABLE_ACTION_RUN_ROWS = 500000;
 export declare const MAX_WORKSPACE_ROW_DELETE_ROWS = 50000;
+/**
+ * Platform ceiling for a table action run's `max_concurrency` (T-27).
+ *
+ * The API used to accept 1..1000 and silently throttle anything the worker could
+ * not serve (the August incident: a customer set 200-250 and watched it behave
+ * nothing like the number they chose). This is the honest upper bound: 250, the
+ * highest per-run in-flight ceiling ANY lane genuinely serves — the set-wise
+ * link_batch lane (LINK_BATCH_ROWS = 250 in the worker scheduler). No run type is
+ * validated below its real cap.
+ *
+ * It is deliberately NOT the external-tool provider feeder cap
+ * (EXTERNAL_TOOL_RUN_FEEDER_CAP = 160, an independent constant in the worker):
+ * an external_tool run is accepted up to this ceiling and the worker bounds it at
+ * 160 in-flight, and the create envelope reports that lower effective ceiling
+ * honestly (max_concurrency_platform_ceiling / max_concurrency_provider_ceiling)
+ * rather than under-serving link runs to make one flat number "true".
+ */
+export declare const MAX_TABLE_ACTION_RUN_MAX_CONCURRENCY = 250;

package/node_modules/@oxygen/shared/dist/table-limits.js

@@ -2,3 +2,21 @@
 // surface that resolves a symbolic row selection before invoking it.
 export const MAX_TABLE_ACTION_RUN_ROWS = 500_000;
 export const MAX_WORKSPACE_ROW_DELETE_ROWS = 50_000;
+/**
+ * Platform ceiling for a table action run's `max_concurrency` (T-27).
+ *
+ * The API used to accept 1..1000 and silently throttle anything the worker could
+ * not serve (the August incident: a customer set 200-250 and watched it behave
+ * nothing like the number they chose). This is the honest upper bound: 250, the
+ * highest per-run in-flight ceiling ANY lane genuinely serves — the set-wise
+ * link_batch lane (LINK_BATCH_ROWS = 250 in the worker scheduler). No run type is
+ * validated below its real cap.
+ *
+ * It is deliberately NOT the external-tool provider feeder cap
+ * (EXTERNAL_TOOL_RUN_FEEDER_CAP = 160, an independent constant in the worker):
+ * an external_tool run is accepted up to this ceiling and the worker bounds it at
+ * 160 in-flight, and the create envelope reports that lower effective ceiling
+ * honestly (max_concurrency_platform_ceiling / max_concurrency_provider_ceiling)
+ * rather than under-serving link runs to make one flat number "true".
+ */
+export const MAX_TABLE_ACTION_RUN_MAX_CONCURRENCY = 250;

package/node_modules/@oxygen/shared/dist/version.d.ts

@@ -1,4 +1,4 @@
-export declare const OXYGEN_VERSION = "1.917.5";
+export declare const OXYGEN_VERSION = "1.922.14";
 export declare const OXYGEN_MINIMUM_CLI_VERSION = "1.181.0";
 export declare const MANAGED_INBOX_MINIMUM_CLI_VERSION = "1.326.2";
 export declare const SUPPORT_AGENT_REPLY_MINIMUM_CLI_VERSION = "1.747.0";

package/node_modules/@oxygen/shared/dist/version.js

@@ -1,4 +1,4 @@
-export const OXYGEN_VERSION = "1.917.5";
+export const OXYGEN_VERSION = "1.922.14";
 // The GLOBAL CLI compatibility floor: the oldest CLI allowed to call any
 // operational route. Raising it hard-rejects every older CLI from the entire
 // product, so it obeys one law, enforced by scripts/ci/cli-min-version-gate.mjs:

package/node_modules/@oxygen/shared/package.json

@@ -96,6 +96,11 @@
       "import": "./dist/dnc-identities.js",
       "default": "./dist/dnc-identities.js"
     },
+    "./provider-funding-errors": {
+      "types": "./dist/provider-funding-errors.d.ts",
+      "import": "./dist/provider-funding-errors.js",
+      "default": "./dist/provider-funding-errors.js"
+    },
     "./cli-result": {
       "types": "./dist/cli-result.d.ts",
       "import": "./dist/cli-result.js",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oxygen-agent/cli",
-  "version": "1.917.5",
+  "version": "1.922.14",
   "private": false,
   "license": "UNLICENSED",
   "type": "module",