@oxygen-agent/cli 1.936.1 → 1.982.3

package/node_modules/@oxygen/recipe-sdk/dist/index.d.ts

@@ -7,6 +7,8 @@ export type RecipeToolRunOptions = {
     optional?: boolean;
     /** Pin this call to one provider account for every replay/scheduled run. */
     connectionId?: string;
+    /** Pin the credential rail instead of automatically selecting a connected key. */
+    credentialMode?: "managed" | "user_api_key" | "user_oauth";
 };
 export type RecipeToolApi = {
     run: <T = unknown>(toolId: string, payload?: Record<string, unknown>, options?: RecipeToolRunOptions) => Promise<T>;

package/node_modules/@oxygen/shared/dist/byok-connect.d.ts

@@ -4,10 +4,10 @@
  *
  * WHY THIS EXISTS. `native_provider.execution.supports_byok` says a TOOL can run on
  * a customer's own key. It does not say the customer has any way to give us one.
- * Those are two different facts, and 10 of the 42 byok-capable native providers
+ * Those are two different facts, and 9 of the 42 byok-capable native providers
  * have the first without the second:
  *
- *   apify builtwith dropleads lusha openwebninja parallel peopledatalabs
+ *   apify builtwith dropleads lusha openwebninja peopledatalabs
  *   rocketreach theirstack wiza
  *
  * For those, `oxygen integrations connect <id> --api-key` does not reach
@@ -17,11 +17,16 @@
  * tool is native generic-REST and `shouldRouteStaticToolThroughComposio` is false, so
  * `resolveOptionalApiKeyCredentials` finds nothing and the call falls back to the
  * MANAGED key — the very key that was out of credits. The command appears to work,
- * changes nothing, and the customer is back where they started with no error.
+ * changes nothing, and the customer is back where they started with no error. The
+ * connect route now refuses each of those nine with a typed `byok_connect_unavailable`
+ * rather than a silent Composio "success"; they stay OFF this list until one gains a
+ * real native connect form.
  *
- * That is precisely the failure Plain T-104 would have hit: `parallel.search` was one
- * of the refused tools, and a refusal message that told Mentcape to connect their own
- * Parallel key would have sent them down a path that silently does nothing.
+ * That is precisely the failure Plain T-104 hit: `parallel.search` was one of the
+ * refused tools, and a refusal message that told Mentcape to connect their own Parallel
+ * key would once have sent them down a path that silently does nothing. Parallel now has
+ * a native api-key connect (catalog.ts) and IS on this list, so that message is finally
+ * true for it — the nine above are the ones it must still never name.
  *
  * So a message may only offer BYOK when BOTH halves hold, and this list is the second
  * half. It lives in @oxygen/shared because the two sides that need it cannot see each

package/node_modules/@oxygen/shared/dist/byok-connect.js

@@ -4,10 +4,10 @@
  *
  * WHY THIS EXISTS. `native_provider.execution.supports_byok` says a TOOL can run on
  * a customer's own key. It does not say the customer has any way to give us one.
- * Those are two different facts, and 10 of the 42 byok-capable native providers
+ * Those are two different facts, and 9 of the 42 byok-capable native providers
  * have the first without the second:
  *
- *   apify builtwith dropleads lusha openwebninja parallel peopledatalabs
+ *   apify builtwith dropleads lusha openwebninja peopledatalabs
  *   rocketreach theirstack wiza
  *
  * For those, `oxygen integrations connect <id> --api-key` does not reach
@@ -17,11 +17,16 @@
  * tool is native generic-REST and `shouldRouteStaticToolThroughComposio` is false, so
  * `resolveOptionalApiKeyCredentials` finds nothing and the call falls back to the
  * MANAGED key — the very key that was out of credits. The command appears to work,
- * changes nothing, and the customer is back where they started with no error.
+ * changes nothing, and the customer is back where they started with no error. The
+ * connect route now refuses each of those nine with a typed `byok_connect_unavailable`
+ * rather than a silent Composio "success"; they stay OFF this list until one gains a
+ * real native connect form.
  *
- * That is precisely the failure Plain T-104 would have hit: `parallel.search` was one
- * of the refused tools, and a refusal message that told Mentcape to connect their own
- * Parallel key would have sent them down a path that silently does nothing.
+ * That is precisely the failure Plain T-104 hit: `parallel.search` was one of the
+ * refused tools, and a refusal message that told Mentcape to connect their own Parallel
+ * key would once have sent them down a path that silently does nothing. Parallel now has
+ * a native api-key connect (catalog.ts) and IS on this list, so that message is finally
+ * true for it — the nine above are the ones it must still never name.
  *
  * So a message may only offer BYOK when BOTH halves hold, and this list is the second
  * half. It lives in @oxygen/shared because the two sides that need it cannot see each
@@ -64,6 +69,9 @@ export const NATIVE_API_KEY_CONNECT_INTEGRATION_IDS = new Set([
     // rest — so the native runner does find the key.
     "moltsets",
     "ocean",
+    // Native api-key connect added in catalog.ts (2026-09-10): connect writes an
+    // integration_secrets api_key row the native parallel.* runner reads. T-104.
+    "parallel",
     "predictleads",
     "prospeo",
     "scalelist",

package/node_modules/@oxygen/shared/dist/capability-discovery.d.ts

@@ -23,6 +23,12 @@ export type CapabilityRouteMatch = {
     card: CapabilityRouteCard;
     recommendedTools: string[];
     recommendedCommands: string[];
+    /**
+     * The one exact invocation for asks whose answer is a single command with a
+     * specific flag the help text alone did not teach. Present only when the
+     * intent is that narrow; `recommendedCommands[0]` is the same command.
+     */
+    exactCommand?: string;
 };
 export type PrimitiveRouteMatch = CapabilityRouteMatch & {
     card: PrimitiveRouteCard;
@@ -34,3 +40,5 @@ export declare function getCapabilityRouteMatch(id: string): CapabilityRouteMatc
 export declare function inferCapabilityRoute(query: string): CapabilityRouteMatch | null;
 export declare function inferPrimitiveRoute(query: string): PrimitiveRouteMatch | null;
 export declare function serializeCapabilityRoute(route: CapabilityRouteMatch | null): Record<string, unknown> | null;
+/** The exact `companies search plan` invocation for the url_recovery intent. */
+export declare const COMPANY_URL_RECOVERY_COMMAND = "oxygen companies search plan --prompt \"Find the websites for these companies: <company names>\" --source-intent url_recovery";

package/node_modules/@oxygen/shared/dist/capability-discovery.js

@@ -56,11 +56,11 @@ export const OXYGEN_CAPABILITY_ROUTES = [
         primitive: null,
         owns: "First-run setup and interactive Workspace Copilot sessions over the shared primitive contracts.",
         notFor: "Recurring deterministic automation or standing adaptive jobs; use Workflows or Agents.",
-        execution: "Resolve factual onboarding state, then let the user choose a Recipe, Blueprint, or their own outcome before starting a hosted Copilot session.",
+        execution: "Use existing onboarding context to understand the user goal and GTM bottleneck, recommend a useful next improvement, and guide its native implementation when selected.",
         posture: "mixed",
         gatewayTools: ["oxygen_whoami", "oxygen_recipes_list", "oxygen_blueprints_list", "oxygen_context_resolve", "oxygen_copilot_start"],
-        gatewayCommands: ["whoami", "recipes list", "blueprints list", "context resolve", "copilot start"],
-        skills: ["oxygen-quickstart", "oxygen-gtm"],
+        gatewayCommands: ["whoami", "context resolve", "recipes list", "blueprints list", "copilot start"],
+        skills: ["oxygen-onboarding", "oxygen-quickstart", "oxygen-gtm"],
         // `activation` remains an exact legacy API family for saved clients, but it
         // has no recommended gateway and is not an intent term or first-touch path.
         endpointSections: ["activation", "copilot", "home"],
@@ -68,7 +68,7 @@ export const OXYGEN_CAPABILITY_ROUTES = [
         // users say ("next step of this workflow run"), and a 6-point multi-word hit
         // would drag those queries here. The terms kept are the ones only a founder
         // asking where they are in setup actually types.
-        intentTerms: ["onboard", "onboarding", "first run", "first day", "setup oxygen", "copilot", "assistant", "guided", "where am i", "next step in setup", "what do i do next"],
+        intentTerms: ["onboard", "onboarding", "first run", "first day", "setup oxygen", "copilot", "assistant", "guided", "where am i", "next step in setup", "what do i do next", "gtm consultant", "gtm planning", "improve our gtm operation"],
     },
     {
         id: "billing-and-budgets",
@@ -82,7 +82,7 @@ export const OXYGEN_CAPABILITY_ROUTES = [
         gatewayCommands: ["billing balance", "billing usage", "budget list"],
         skills: ["oxygen-gtm", "oxygen-diagnostics"],
         endpointSections: ["billing", "budget", "limits"],
-        intentTerms: ["billing", "credits", "credit balance", "usage", "spend", "cost", "budget", "subscription", "invoice", "cancel plan"],
+        intentTerms: ["billing", "credits", "credit balance", "usage", "spend", "cost", "budget", "subscription", "invoice", "cancel plan", "change plan", "upgrade", "downgrade"],
     },
     {
         id: "support-and-feedback",
@@ -174,7 +174,7 @@ export const OXYGEN_CAPABILITY_ROUTES = [
         gatewayCommands: ["knowledge search", "knowledge index", "knowledge page get"],
         skills: ["oxygen-knowledge"],
         endpointSections: ["context", "knowledge"],
-        intentTerms: ["knowledge", "wiki", "context", "icp", "positioning", "offer", "rubric", "brand", "voice", "company profile"],
+        intentTerms: ["knowledge", "wiki", "context", "icp", "ideal customer", "positioning", "offer", "rubric", "brand", "voice", "company profile", "github", "obsidian", "vault", "repository sync", "markdown import"],
     },
     {
         id: "recipes",
@@ -182,13 +182,13 @@ export const OXYGEN_CAPABILITY_ROUTES = [
         primitive: "recipes",
         owns: "Versioned advisory playbooks that teach when and why to run proven GTM motions through native primitives.",
         notFor: "A hidden runtime, mandatory bundle, or replacement for hosted Workflows.",
-        execution: "Browse or install the Recipe; optional Blueprints scaffold infrastructure while native primitives execute.",
+        execution: "Browse the Recipe, apply its kit (ordered Blueprint stages, one approval, 0 credits, workflows disabled), then run the play through native primitives.",
         posture: "workspace_write",
         gatewayTools: ["oxygen_recipes_list", "oxygen_recipes_get"],
-        gatewayCommands: ["recipes list", "recipes show", "recipes install"],
-        skills: ["oxygen-recipes"],
+        gatewayCommands: ["recipes list", "recipes show", "recipes apply", "recipes install"],
+        skills: ["oxygen-recipes", "oxygen-playbooks"],
         endpointSections: ["blueprints", "recipes", "templates"],
-        intentTerms: ["recipe", "playbook", "proven play", "activation play", "setup play", "journey", "day 1", "day 7", "day 30", "blueprint", "template", "what should i do"],
+        intentTerms: ["recipe", "playbook", "proven play", "activation play", "setup play", "journey", "day 1", "day 7", "day 30", "blueprint", "template", "what should i do", "inbound led outbound", "engagers into a sequence", "warm outbound from my posts", "whole motion", "end to end motion", "kit"],
     },
     {
         id: "records",
@@ -210,18 +210,18 @@ export const OXYGEN_CAPABILITY_ROUTES = [
         primitive: "tables",
         owns: "Typed working datasets, rows, formulas, AI/tool/waterfall columns, reusable Functions with isolated drafts and published versions, cell state, projects, and run provenance.",
         notFor: "Canonical CRM truth, message cadence, or an off-platform spreadsheet runtime.",
-        execution: "Create and run work in hosted OXYGEN Tables; validate a small sample before bounded paid runs.",
+        execution: "Create and run work in hosted OXYGEN Tables; validate a small sample before bounded paid runs. For standard person or company enrichment, `columns add <table> --preset person_enrich|company_enrich` (MCP oxygen_columns_add with preset) adds the maintained bundle in one call before any hand-built tool column.",
         posture: "mixed",
         gatewayTools: ["oxygen_tables_create", "oxygen_columns_add", "oxygen_enrich_column_preview", "oxygen_tables_link_bulk", "oxygen_callables_manage"],
         gatewayCommands: ["tables create", "columns add", "enrich-column preview", "tables link", "functions list", "functions draft"],
-        skills: ["oxygen-gtm", "oxygen-table-tidy", "oxygen-diagnostics", "oxygen-clay-migration"],
-        endpointSections: ["action-columns", "callables", "functions", "columns", "company-enrichment", "enrich-column", "enrichment", "projects", "table-action-items", "table-action-runs", "table-ingestion-runs", "tables"],
+        skills: ["oxygen-gtm", "oxygen-table-tidy", "oxygen-diagnostics", "oxygen-clay-migration", "oxygen-linkedin-marketing"],
+        endpointSections: ["action-columns", "callables", "functions", "columns", "company-enrichment", "enrich-column", "enrichment", "projects", "supabase", "table-action-items", "table-action-runs", "table-ingestion-runs", "tables"],
         // "link"/"join"/"connect"/"relate" route here for `tables link`. Added after a
         // blind user eval asked for exactly "link two tables" and was routed to
         // `tables create` / `columns add` / `enrich-column preview` — none of which
         // do it. The agent only found the right command by grepping the raw 25k-line
         // command manifest, which is not a discovery path a customer has.
-        intentTerms: ["table", "rows", "column", "columns", "dataset", "csv", "import", "enrich", "enrichment", "waterfall", "score", "formula", "ai column", "lookup", "link", "link tables", "join", "connect", "relate", "relationship", "function", "functions", "reusable function", "function draft", "function version", "callable"],
+        intentTerms: ["table", "spreadsheet", "rows", "column", "columns", "dataset", "csv", "import", "enrich", "enrichment", "waterfall", "score", "formula", "ai column", "lookup", "link", "link tables", "join", "connect", "relate", "relationship", "function", "functions", "reusable function", "function draft", "function version", "callable"],
     },
     {
         id: "messages",
@@ -324,7 +324,7 @@ export const OXYGEN_CAPABILITY_ROUTES = [
         // to workspace-access — "identity" matched the AUTH sense. The nouns a user
         // reaches for when naming a sending identity or the dialing pool have to land
         // on the group that actually owns `senders profiles` and `voice numbers`.
-        intentTerms: ["sequence", "campaign", "cadence", "enroll", "outreach", "linkedin message", "linkedin dm", "nurture", "follow up", "sender rotation", "stop on reply", "sender identity", "sending identity", "sender profile", "phone number", "dialing", "dialer"],
+        intentTerms: ["sequence", "campaign", "cadence", "enroll", "outreach", "linkedin message", "linkedin dm", "nurture", "follow up", "sender rotation", "stop on reply", "sender identity", "sending identity", "sender profile", "phone number", "dialing", "dialer", "call", "cold call"],
     },
     {
         id: "publishing",
@@ -335,10 +335,13 @@ export const OXYGEN_CAPABILITY_ROUTES = [
         execution: "Create and schedule on OXYGEN; explicit approval releases the hosted publisher.",
         posture: "external_write",
         gatewayTools: ["oxygen_publishing_posts_create", "oxygen_publishing_posts_list", "oxygen_publishing_posts_approve", "oxygen_ugc_get"],
-        gatewayCommands: ["publishing posts create", "publishing posts list", "publishing posts approve", "ugc programs list"],
+        gatewayCommands: ["publishing posts create", "publishing posts list", "publishing posts approve", "ugc programs list", "ugc programs duplicate", "ugc programs archive"],
         skills: ["oxygen-linkedin-marketing", "oxygen-ugc"],
         endpointSections: ["publishing", "ugc"],
-        intentTerms: ["publish", "publishing", "schedule post", "content calendar", "posting calendar", "approve post", "social publishing", "ugc", "creator program", "user generated content", "creator voice", "sponsored creator"],
+        // "remove program" / "delete program" landed on route: null in a blind eval
+        // (2026-09-10); a program is a UGC noun here, and its lifecycle verbs must
+        // resolve to the group that owns `ugc programs archive|delete|duplicate`.
+        intentTerms: ["publish", "publishing", "schedule post", "content calendar", "posting calendar", "approve post", "social publishing", "ugc", "creator program", "user generated content", "creator voice", "sponsored creator", "ugc program", "archive program", "delete program", "remove program", "duplicate program", "copy program"],
     },
     {
         id: "workflows",
@@ -523,6 +526,7 @@ export function inferCapabilityRoute(query) {
         card,
         recommendedTools: recommendations.tools,
         recommendedCommands: recommendations.commands,
+        ...(recommendations.exactCommand ? { exactCommand: recommendations.exactCommand } : {}),
     };
 }
 export function inferPrimitiveRoute(query) {
@@ -546,6 +550,7 @@ export function serializeCapabilityRoute(route) {
         endpoint_sections: route.card.endpointSections,
         recommended_commands: route.recommendedCommands,
         recommended_tools: route.recommendedTools,
+        ...(route.exactCommand ? { exact_command: route.exactCommand } : {}),
         hydrate: {
             cli: "oxygen commands get <exact-command> --json",
             mcp: "oxygen_capabilities_schema",
@@ -555,9 +560,21 @@ export function serializeCapabilityRoute(route) {
 function normalizeIntent(query) {
     return query.toLowerCase().replace(/[_-]+/g, " ").replace(/\s+/g, " ").trim();
 }
+function isLinkedInProfileWatcherIntent(query) {
+    return /\blinkedin\b/.test(query)
+        && /\bprofiles?\b/.test(query)
+        && /\b(watcher|watch|watching|monitor|monitoring|daily|every day|recurring)\b/.test(query)
+        && (/\b(engagers?|engaging|engagement|reactions?|comments?|posts?)\b/.test(query) || /\bprofile watcher\b/.test(query))
+        && !isNetNewLinkedInInitiation(query);
+}
 function explicitCapabilityIntent(query) {
     if (/\b(infographic|graphic designer|render html|carousel pages|visual design|gtm flow image)\b/.test(query))
         return ROUTE_BY_ID.get("visual-rendering") ?? null;
+    // A whole-motion ask ("set up inbound-led outbound for my posts") is a
+    // Recipe kit + playbook, not the connected-LinkedIn signals card that the
+    // "my LinkedIn … engagers" rule below would otherwise claim. Resolve it first.
+    if (isInboundLedOutboundIntent(query))
+        return ROUTE_BY_PRIMITIVE.get("recipes") ?? null;
     // A unified sender profile is an owned Sequence identity, even when the ask
     // names every attached channel (LinkedIn + WhatsApp + email). Resolve this
     // before public LinkedIn research, whose generic "profile" wording would
@@ -574,6 +591,8 @@ function explicitCapabilityIntent(query) {
     if (isMailboxOnboardingIntent(query)) {
         return ROUTE_BY_ID.get("sending-infrastructure") ?? null;
     }
+    if (isLinkedInProfileWatcherIntent(query))
+        return ROUTE_BY_PRIMITIVE.get("tables") ?? null;
     if (isHostedWorkflowIntent(query))
         return ROUTE_BY_PRIMITIVE.get("workflows") ?? null;
     if (isOwnedPostCommentIntent(query))
@@ -612,6 +631,17 @@ function explicitCapabilityIntent(query) {
     if (/\b(my|our|own)\b.{0,40}\blinkedin\b.{0,40}\b(post )?engagers?\b/.test(query)) {
         return ROUTE_BY_PRIMITIVE.get("signals") ?? null;
     }
+    // Grading addresses a row ALREADY holds — "verify these emails", "which are
+    // safe to send", "catch-all or valid" — is Tables work (the Email verification
+    // column: `columns add --capability verify_email`, previewed and run through
+    // `enrich-column`), with `verify email` as the one-shot twin. Without this
+    // rule the bare word "email" scored the Messages card, and a 2026-09-10 blind
+    // user asking "verify email deliverability safe to send" was routed to
+    // `email send`. Sits after the mailbox rules above so warm-up and sender
+    // deliverability keep their owner, and after the scheduling rule so "every
+    // Monday verify new signups" still lands on Workflows.
+    if (isEmailVerificationIntent(query))
+        return ROUTE_BY_PRIMITIVE.get("tables") ?? null;
     if (/\b(recipe|playbook|proven play|what should i do)\b/.test(query)) {
         return ROUTE_BY_PRIMITIVE.get("recipes") ?? null;
     }
@@ -643,9 +673,23 @@ function explicitCapabilityIntent(query) {
         || /\b(day\s*\d+|days?\s+\d|multi[ -]step|rotate senders?|sender rotation|stop on reply|until (?:they )?reply)\b/.test(query)) {
         return ROUTE_BY_PRIMITIVE.get("sequences") ?? null;
     }
+    // Existing reply handling is Messages even without a channel name. Keep this
+    // after the explicit cadence/enrollment rules so reply-stop programs retain
+    // Sequences. The onboarding baseline phrased this as "follow up on replies".
+    if (/\b(follow up|triage|answer|handle)\b.{0,40}\breplies\b/.test(query)) {
+        return ROUTE_BY_PRIMITIVE.get("messages") ?? null;
+    }
     if (/\b(reply|respond)\b.{0,30}\b(conversation|thread|email|linkedin|whatsapp|dm)\b/.test(query)) {
         return ROUTE_BY_PRIMITIVE.get("messages") ?? null;
     }
+    // Resolving websites / domains / LinkedIn pages for company NAMES the user
+    // already holds is the companies-search `url_recovery` intent, not a fresh
+    // sourcing search and not an enrichment column. A 2026-09-11 blind user
+    // asking "get company website URL from company name" got NO route here
+    // (null), never discovered `companies search plan`, and priced the whole
+    // company_enrich preset instead.
+    if (isCompanyUrlRecoveryIntent(query))
+        return ROUTE_BY_ID.get("sourcing-and-provider-tools") ?? null;
     if (/\b(find emails?|find phones?|find companies|find people|source (?:leads?|a list|companies|people)|build (?:me )?a list|tam|prospect)\b/.test(query)) {
         return ROUTE_BY_ID.get("sourcing-and-provider-tools") ?? null;
     }
@@ -654,16 +698,43 @@ function explicitCapabilityIntent(query) {
     }
     return null;
 }
+/**
+ * Does `term` occur in `query` starting on a word boundary?
+ *
+ * A plain `query.includes(term)` is what sent "enrich these le**ad**s" and
+ * "build me a spre**ad**sheet" to the competitor-ad-intelligence card, and
+ * "our i**deal** customer" to CRM Records: a short term matches inside any
+ * longer word that happens to contain its letters, and nothing else scores, so
+ * the wrong card wins outright rather than narrowly.
+ *
+ * Only the START of the match is anchored, deliberately. Requiring a boundary at
+ * BOTH ends looks stricter and is wrong here, because the cards do not list
+ * their own plurals consistently — `sequence`, `workflow`, `table`, `agent` and
+ * `campaign` have no plural term beside them — so whole-word matching silently
+ * stops routing "sequences", "workflows" and "tables", which are the phrasings
+ * people actually type. Anchoring the head keeps every plural and inflection
+ * working while refusing the mid-word accidents, and it is the same
+ * word-boundary treatment v1.915.0 applied to the Tables guard this scorer sits
+ * behind.
+ */
+function matchesIntentTerm(query, term) {
+    for (let at = query.indexOf(term); at >= 0; at = query.indexOf(term, at + 1)) {
+        const preceding = at === 0 ? "" : query[at - 1] ?? "";
+        if (!/[a-z0-9]/.test(preceding))
+            return true;
+    }
+    return false;
+}
 function highestScoringRoute(query) {
     let best = null;
     for (const card of OXYGEN_CAPABILITY_ROUTES) {
         let score = 0;
         for (const term of card.intentTerms) {
-            if (query.includes(term))
+            if (matchesIntentTerm(query, term))
                 score += term.includes(" ") ? 6 : 2;
         }
         for (const term of card.negativeTerms ?? []) {
-            if (query.includes(term))
+            if (matchesIntentTerm(query, term))
                 score -= term.includes(" ") ? 8 : 3;
         }
         if (score > (best?.score ?? 0))
@@ -671,7 +742,16 @@ function highestScoringRoute(query) {
     }
     return best?.card ?? null;
 }
+/** The exact `companies search plan` invocation for the url_recovery intent. */
+export const COMPANY_URL_RECOVERY_COMMAND = 'oxygen companies search plan --prompt "Find the websites for these companies: <company names>" --source-intent url_recovery';
 function recommendationsFor(card, query) {
+    if (card.id === "sourcing-and-provider-tools" && isCompanyUrlRecoveryIntent(query)) {
+        return {
+            tools: ["oxygen_companies_search_plan", "oxygen_companies_search_run"],
+            commands: ["companies search plan", "companies search run"],
+            exactCommand: COMPANY_URL_RECOVERY_COMMAND,
+        };
+    }
     if (card.id === "connected-linkedin" && isMutualLinkedInConnectionsIntent(query)) {
         return {
             tools: ["oxygen_tools_get", "oxygen_tools_run_live", "oxygen_senders_list"],
@@ -752,12 +832,27 @@ function recommendationsFor(card, query) {
         };
     }
     if (card.primitive === "tables") {
+        if (isLinkedInProfileWatcherIntent(query)) {
+            return {
+                tools: ["oxygen_tables_watcher"],
+                commands: ["tables watcher preview", "tables watcher create", "tables watcher get", "tables watcher update", "tables watcher pause", "tables watcher resume"],
+            };
+        }
         if (/\b(table )?(action )?runs?\b/.test(query)) {
             return {
                 tools: ["oxygen_table_runs_get", "oxygen_table_runs_items", "oxygen_table_runs_wait", "oxygen_table_runs_retry_failed"],
                 commands: ["table-runs get", "table-runs items", "table-runs wait", "table-runs retry-failed"],
             };
         }
+        if (isEmailVerificationIntent(query)) {
+            // Define-without-running first (0 credits), then the free preview that
+            // prices it, then the approved run, then the one-shot for a handful of
+            // addresses that never needed a table.
+            return {
+                tools: ["oxygen_columns_add", "oxygen_enrich_column_preview", "oxygen_enrich_column_run", "oxygen_verify_email"],
+                commands: ["columns add", "enrich-column preview", "enrich-column run", "verify email"],
+            };
+        }
         if (/\b(waterfall|enrich|enrichment|work email|mobile phone)\b/.test(query)) {
             return {
                 tools: ["oxygen_enrich_column_preview", "oxygen_columns_add", "oxygen_enrich_column_run", "oxygen_table_runs_get"],
@@ -889,7 +984,7 @@ function recommendationsFor(card, query) {
     if (card.primitive === "signals" && /\blinkedin\b.{0,40}\bengagers?\b/.test(query)) {
         return {
             tools: ["oxygen_engagement_list_engagers", "oxygen_signals_list", "oxygen_signals_leads_today"],
-            commands: ["engagement list", "signals list", "signals leads-today"],
+            commands: ["engagement engagers", "signals list", "signals leads-today"],
         };
     }
     if (card.id === "connected-whatsapp" && /\b(account|connect|limits?|sync)\b/.test(query)) {
@@ -900,6 +995,35 @@ function recommendationsFor(card, query) {
     }
     return { tools: [...card.gatewayTools], commands: [...card.gatewayCommands] };
 }
+// An email-VERIFICATION ask names a grading verb next to the addresses, or the
+// addresses next to a grade. "check my emails" is deliberately not matched
+// (that is an inbox), and bare "deliverability" is left to the sending rail —
+// only "are these emails deliverable" counts. Bare "bounce" describes an
+// observed delivery failure too; require predictive wording or "bounce risk".
+function isEmailVerificationIntent(query) {
+    const gradeThenAddress = /\b(verif(?:y|ied|ication)|validat(?:e|ed|ion)|grade|scrub|clean)\b.{0,40}\b(e ?mails?|email addresses|addresses)\b/;
+    const addressThenGrade = /\b(e ?mails?|addresses)\b.{0,40}\b(verif(?:y|ied|ication)|validat(?:e|ed|ion)|valid|invalid|deliverable|(?:will|would|might) bounce|bounce risk|risky|safe to (?:send|email)|catch ?all|accept ?all)\b/;
+    return gradeThenAddress.test(query) || addressThenGrade.test(query);
+}
+// "get company website URL from company name", "find the websites for this
+// list of company names", "recover domains for company names" — a URL-ish
+// noun, a company noun, a recovery verb, and the hint that the input is NAMES
+// or a LIST (or that URLs are MISSING). Every leg is required so a sourcing
+// ask ("find companies with a website in Germany") keeps its owner. LinkedIn
+// page recovery is deliberately left to the LinkedIn rules above it, which
+// already resolve company pages through the public-research catalog.
+function isCompanyUrlRecoveryIntent(query) {
+    const urlNoun = /\b(websites?|web ?sites?|website urls?|domains?|urls?|homepages?)\b/;
+    const companyNoun = /\b(compan(?:y|ies)|accounts?|organi[sz]ations?|brands?|vendors?)\b/;
+    const recover = /\b(recover|resolve|look ?up|lookup|missing|get|find|fill(?: in)?|add)\b/;
+    const fromNames = /\b(names?|list|missing|these|those)\b/;
+    // An email / phone / contact ask that merely MENTIONS domains is enrichment,
+    // and a column / table ask is a Tables ask — both keep their owners.
+    const otherOwner = /\b(e-?mails?|phones?|mobiles?|numbers?|contacts?|people|persons?|columns?|tables?|enrich\w*|verif\w*)\b/;
+    return urlNoun.test(query) && companyNoun.test(query) && recover.test(query) && fromNames.test(query)
+        && !/\b(scrape|engagers?|comments?|reactions?|posts?)\b/.test(query)
+        && !otherOwner.test(query);
+}
 function isInboxAvatarIntent(query) {
     return /\b(avatar|profile (?:picture|photo)|headshot|hosted (?:picture|image)|mailbox (?:picture|photo))\b/.test(query);
 }
@@ -926,6 +1050,14 @@ function isMailboxDeleteIntent(query) {
     const scopedDetach = /\b(remove|disconnect)\b.{0,48}\b(mailbox(?:es)?|inbox(?:es)?|sender accounts?|email accounts?)\b.{0,24}\b(?:from|in|on)\b.{0,24}\b(sequence|campaign|cadence|sender profile)\b/.test(query);
     return mailboxScope && removal && !scopedDetach;
 }
+// The composed inbound-led outbound motion: engagers → ICP gate → capped
+// sequence → CRM. Hyphens are already normalised to spaces by the caller.
+function isInboundLedOutboundIntent(query) {
+    return /\binbound led outbound\b/.test(query)
+        || /\bengagers?\b.{0,40}\b(into|to) (a |my )?(sequence|pipeline)\b/.test(query)
+        || /\bwarm outbound\b.{0,40}\b(posts?|engagement)\b/.test(query)
+        || /\b(whole|end to end|complete) (gtm )?motion\b/.test(query);
+}
 function isNetNewLinkedInInitiation(query) {
     const mentionsLinkedIn = /\blinkedin\b|\bdm\b/.test(query);
     const startsConversation = /\b(send|message|dm|contact|reach out|initiate|start)\b/.test(query)

package/node_modules/@oxygen/shared/dist/copilot-errors.js

@@ -21,6 +21,9 @@ const WORKER_STEP_TIMEOUT_MESSAGE = /\bWorker step '[^']+' exceeded \d+ms deadli
 export function customerFacingCopilotError(input) {
     const code = input.code ?? null;
     const message = input.message ?? null;
+    if (code === "agent_response_incomplete") {
+        return { code, message: "I stopped before completing the requested work. Completed actions are saved; ask me to continue." };
+    }
     const isTimeout = code === "worker_step_timeout" ||
         code === COPILOT_TURN_TIMEOUT_CODE ||
         code === COPILOT_TURN_DEADLINE_EXCEEDED_CODE ||

package/node_modules/@oxygen/shared/dist/copilot-journeys.d.ts

@@ -8,6 +8,24 @@ export type CopilotJourney = {
     seedMessage: string;
 };
 export declare const LINKEDIN_NETWORK_COPILOT_JOURNEY_SLUG = "inbound-led-outbound";
-export declare const COPILOT_JOURNEYS: readonly CopilotJourney[];
+export declare const COPILOT_JOURNEYS: readonly [{
+    readonly slug: "inbound-led-outbound";
+    readonly title: "Inbound-led outbound";
+    readonly description: "Turn the people who engage with your LinkedIn posts into a capped, evidence-gated warm sequence with replies routed to your CRM.";
+    readonly recipeSlugs: readonly ["inbound-led-outbound", "linkedin-network-first-motion", "founder-posting-system", "reply-to-meeting"];
+    readonly seedMessage: "I chose the inbound-led-outbound recipe. Help me set up inbound-led outbound for my LinkedIn posts: watch who engages with them every day, assess each person against my ICP, hand me the strong fits, put the possible fits into a draft LinkedIn sequence on a schedule, move replies into my CRM, and write what we learn back into my knowledge wiki. Inspect the workspace first, follow the recipe, and resume from durable evidence instead of starting over. Do not connect an account, enroll anyone, send anything, or spend credits without asking me first.";
+}, {
+    readonly slug: "email-infra-setup";
+    readonly title: "Outbound infrastructure";
+    readonly description: "Domains, inboxes, warmup, sender posture — reviewed and approved before anything is bought or sent.";
+    readonly recipeSlugs: readonly ["email-infra-setup"];
+    readonly seedMessage: "Inspect my current sending setup (domains, inboxes, warmup, senders, caps, deliverability) and propose what's missing for a safe cold-email motion. Show quotes and costs — do not buy or change anything without my approval.";
+}, {
+    readonly slug: "tam-sourcing";
+    readonly title: "Map your market";
+    readonly description: "Source and segment your addressable market from your ICP, starting with a bounded sample.";
+    readonly recipeSlugs: readonly ["icp-to-account-map", "outbound-pilot-50"];
+    readonly seedMessage: "Help me map my total addressable market from my ICP. Ground it in my company profile and website, source a bounded sample first, and show me coverage and credit estimates before expanding.";
+}];
 export type CopilotJourneySlug = (typeof COPILOT_JOURNEYS)[number]["slug"];
 export declare function getCopilotJourney(slug: string): CopilotJourney | null;

package/node_modules/@oxygen/shared/dist/copilot-journeys.generated.d.ts

@@ -0,0 +1,19 @@
+export declare const COPILOT_JOURNEYS_GENERATED: readonly [{
+    readonly slug: "inbound-led-outbound";
+    readonly title: "Inbound-led outbound";
+    readonly description: "Turn the people who engage with your LinkedIn posts into a capped, evidence-gated warm sequence with replies routed to your CRM.";
+    readonly recipeSlugs: readonly ["inbound-led-outbound", "linkedin-network-first-motion", "founder-posting-system", "reply-to-meeting"];
+    readonly seedMessage: "I chose the inbound-led-outbound recipe. Help me set up inbound-led outbound for my LinkedIn posts: watch who engages with them every day, assess each person against my ICP, hand me the strong fits, put the possible fits into a draft LinkedIn sequence on a schedule, move replies into my CRM, and write what we learn back into my knowledge wiki. Inspect the workspace first, follow the recipe, and resume from durable evidence instead of starting over. Do not connect an account, enroll anyone, send anything, or spend credits without asking me first.";
+}, {
+    readonly slug: "email-infra-setup";
+    readonly title: "Outbound infrastructure";
+    readonly description: "Domains, inboxes, warmup, sender posture — reviewed and approved before anything is bought or sent.";
+    readonly recipeSlugs: readonly ["email-infra-setup"];
+    readonly seedMessage: "Inspect my current sending setup (domains, inboxes, warmup, senders, caps, deliverability) and propose what's missing for a safe cold-email motion. Show quotes and costs — do not buy or change anything without my approval.";
+}, {
+    readonly slug: "tam-sourcing";
+    readonly title: "Map your market";
+    readonly description: "Source and segment your addressable market from your ICP, starting with a bounded sample.";
+    readonly recipeSlugs: readonly ["icp-to-account-map", "outbound-pilot-50"];
+    readonly seedMessage: "Help me map my total addressable market from my ICP. Ground it in my company profile and website, source a bounded sample first, and show me coverage and credit estimates before expanding.";
+}];

package/node_modules/@oxygen/shared/dist/copilot-journeys.generated.js

@@ -0,0 +1,26 @@
+// GENERATED by apps/web/scripts/generate-copilot-journeys.ts from the recipe
+// catalog (`journey:` blocks in apps/web/src/agent-skills/oxygen-recipes/recipes).
+// Do not edit by hand — run `npm run skills:metadata -w @oxygen/web`.
+export const COPILOT_JOURNEYS_GENERATED = [
+    {
+        slug: "inbound-led-outbound",
+        title: "Inbound-led outbound",
+        description: "Turn the people who engage with your LinkedIn posts into a capped, evidence-gated warm sequence with replies routed to your CRM.",
+        recipeSlugs: ["inbound-led-outbound", "linkedin-network-first-motion", "founder-posting-system", "reply-to-meeting"],
+        seedMessage: "I chose the inbound-led-outbound recipe. Help me set up inbound-led outbound for my LinkedIn posts: watch who engages with them every day, assess each person against my ICP, hand me the strong fits, put the possible fits into a draft LinkedIn sequence on a schedule, move replies into my CRM, and write what we learn back into my knowledge wiki. Inspect the workspace first, follow the recipe, and resume from durable evidence instead of starting over. Do not connect an account, enroll anyone, send anything, or spend credits without asking me first.",
+    },
+    {
+        slug: "email-infra-setup",
+        title: "Outbound infrastructure",
+        description: "Domains, inboxes, warmup, sender posture — reviewed and approved before anything is bought or sent.",
+        recipeSlugs: ["email-infra-setup"],
+        seedMessage: "Inspect my current sending setup (domains, inboxes, warmup, senders, caps, deliverability) and propose what's missing for a safe cold-email motion. Show quotes and costs — do not buy or change anything without my approval.",
+    },
+    {
+        slug: "tam-sourcing",
+        title: "Map your market",
+        description: "Source and segment your addressable market from your ICP, starting with a bounded sample.",
+        recipeSlugs: ["icp-to-account-map", "outbound-pilot-50"],
+        seedMessage: "Help me map my total addressable market from my ICP. Ground it in my company profile and website, source a bounded sample first, and show me coverage and credit estimates before expanding.",
+    },
+];

package/node_modules/@oxygen/shared/dist/copilot-journeys.js

@@ -1,47 +1,14 @@
-// Workspace Copilot guided journeys (ADR 0013 §11). One canonical copy shared by
-// the runtime (system-prompt grounding on the named recipes) and the web journey
-// cards (seeding a session's first message) — the data is pure and client-safe.
-// Each journey is a thin descriptor over EXISTING advisory catalog Recipes:
-// journeys add no runtime behavior, and every guardrail (never enroll/send/buy/
-// change DNS without approval) rides those recipes' own approval gates.
+import { COPILOT_JOURNEYS_GENERATED } from "./copilot-journeys.generated.js";
 // Stable slug for sessions deliberately launched from the matching Recipe.
 // It is never a default: first-touch surfaces stay outcome-neutral.
 export const LINKEDIN_NETWORK_COPILOT_JOURNEY_SLUG = "inbound-led-outbound";
-export const COPILOT_JOURNEYS = [
-    {
-        slug: LINKEDIN_NETWORK_COPILOT_JOURNEY_SLUG,
-        title: "Inbound-led outbound",
-        description: "Work the LinkedIn network you already have — connections and post engagers — as a capped warm motion.",
-        // The network-first play leads: connections and post engagers are the two
-        // sources a founder actually has on day 1, and profile viewers (the old lead)
-        // are a thin, anonymity-capped sample by comparison. Posting is second because
-        // it CREATES the engager stream this play captures, and replies close the loop.
-        recipeSlugs: [
-            "linkedin-network-first-motion",
-            "founder-posting-system",
-            "reply-to-meeting",
-        ],
-        // Deliberately free of steps, commands, table names, and caps: encoding
-        // mechanics here would fork a second, unversioned copy of the play that no
-        // catalog gate can lint (ADR 0013 §11 — a journey is a thin pointer at
-        // advisory recipes, never a hardcoded kit).
-        seedMessage: "I chose the linkedin-network-first-motion recipe. Help me turn the LinkedIn network I already have — my connections and the people who engage with my posts — into a small, safe, approval-gated outreach motion. Inspect the relevant workspace primitives, follow the recipe, and resume from durable evidence instead of starting over. Do not connect an account, enroll anyone, send anything, or spend credits without asking me first.",
-    },
-    {
-        slug: "tam-sourcing",
-        title: "Map your market",
-        description: "Source and segment your addressable market from your ICP, starting with a bounded sample.",
-        recipeSlugs: ["icp-to-account-map", "outbound-pilot-50"],
-        seedMessage: "Help me map my total addressable market from my ICP. Ground it in my company profile and website, source a bounded sample first, and show me coverage and credit estimates before expanding.",
-    },
-    {
-        slug: "email-infra-setup",
-        title: "Outbound infrastructure",
-        description: "Domains, inboxes, warmup, sender posture — reviewed and approved before anything is bought or sent.",
-        recipeSlugs: ["email-infra-setup"],
-        seedMessage: "Inspect my current sending setup (domains, inboxes, warmup, senders, caps, deliverability) and propose what's missing for a safe cold-email motion. Show quotes and costs — do not buy or change anything without my approval.",
-    },
-];
+// Derived from the recipe catalog (ADR 0025): every recipe carrying a
+// `journey:` block leads one journey. The list is generated into
+// ./copilot-journeys.generated.ts by apps/web/scripts/generate-copilot-journeys.ts
+// (run through `npm run skills:metadata -w @oxygen/web`) and gated against the
+// catalog by apps/web/src/lib/recipes/copilot-journeys.test.ts, because this
+// package cannot read the markdown the catalog is served from.
+export const COPILOT_JOURNEYS = COPILOT_JOURNEYS_GENERATED;
 export function getCopilotJourney(slug) {
     return COPILOT_JOURNEYS.find((journey) => journey.slug === slug) ?? null;
 }