@oxygen-agent/cli 1.948.1 → 1.982.3

package/node_modules/@oxygen/shared/dist/capability-discovery.js

@@ -56,11 +56,11 @@ export const OXYGEN_CAPABILITY_ROUTES = [
         primitive: null,
         owns: "First-run setup and interactive Workspace Copilot sessions over the shared primitive contracts.",
         notFor: "Recurring deterministic automation or standing adaptive jobs; use Workflows or Agents.",
-        execution: "Resolve factual onboarding state, then let the user choose a Recipe, Blueprint, or their own outcome before starting a hosted Copilot session.",
+        execution: "Use existing onboarding context to understand the user goal and GTM bottleneck, recommend a useful next improvement, and guide its native implementation when selected.",
         posture: "mixed",
         gatewayTools: ["oxygen_whoami", "oxygen_recipes_list", "oxygen_blueprints_list", "oxygen_context_resolve", "oxygen_copilot_start"],
-        gatewayCommands: ["whoami", "recipes list", "blueprints list", "context resolve", "copilot start"],
-        skills: ["oxygen-quickstart", "oxygen-gtm"],
+        gatewayCommands: ["whoami", "context resolve", "recipes list", "blueprints list", "copilot start"],
+        skills: ["oxygen-onboarding", "oxygen-quickstart", "oxygen-gtm"],
         // `activation` remains an exact legacy API family for saved clients, but it
         // has no recommended gateway and is not an intent term or first-touch path.
         endpointSections: ["activation", "copilot", "home"],
@@ -68,7 +68,7 @@ export const OXYGEN_CAPABILITY_ROUTES = [
         // users say ("next step of this workflow run"), and a 6-point multi-word hit
         // would drag those queries here. The terms kept are the ones only a founder
         // asking where they are in setup actually types.
-        intentTerms: ["onboard", "onboarding", "first run", "first day", "setup oxygen", "copilot", "assistant", "guided", "where am i", "next step in setup", "what do i do next"],
+        intentTerms: ["onboard", "onboarding", "first run", "first day", "setup oxygen", "copilot", "assistant", "guided", "where am i", "next step in setup", "what do i do next", "gtm consultant", "gtm planning", "improve our gtm operation"],
     },
     {
         id: "billing-and-budgets",
@@ -82,7 +82,7 @@ export const OXYGEN_CAPABILITY_ROUTES = [
         gatewayCommands: ["billing balance", "billing usage", "budget list"],
         skills: ["oxygen-gtm", "oxygen-diagnostics"],
         endpointSections: ["billing", "budget", "limits"],
-        intentTerms: ["billing", "credits", "credit balance", "usage", "spend", "cost", "budget", "subscription", "invoice", "cancel plan"],
+        intentTerms: ["billing", "credits", "credit balance", "usage", "spend", "cost", "budget", "subscription", "invoice", "cancel plan", "change plan", "upgrade", "downgrade"],
     },
     {
         id: "support-and-feedback",
@@ -174,7 +174,7 @@ export const OXYGEN_CAPABILITY_ROUTES = [
         gatewayCommands: ["knowledge search", "knowledge index", "knowledge page get"],
         skills: ["oxygen-knowledge"],
         endpointSections: ["context", "knowledge"],
-        intentTerms: ["knowledge", "wiki", "context", "icp", "positioning", "offer", "rubric", "brand", "voice", "company profile"],
+        intentTerms: ["knowledge", "wiki", "context", "icp", "ideal customer", "positioning", "offer", "rubric", "brand", "voice", "company profile", "github", "obsidian", "vault", "repository sync", "markdown import"],
     },
     {
         id: "recipes",
@@ -182,13 +182,13 @@ export const OXYGEN_CAPABILITY_ROUTES = [
         primitive: "recipes",
         owns: "Versioned advisory playbooks that teach when and why to run proven GTM motions through native primitives.",
         notFor: "A hidden runtime, mandatory bundle, or replacement for hosted Workflows.",
-        execution: "Browse or install the Recipe; optional Blueprints scaffold infrastructure while native primitives execute.",
+        execution: "Browse the Recipe, apply its kit (ordered Blueprint stages, one approval, 0 credits, workflows disabled), then run the play through native primitives.",
         posture: "workspace_write",
         gatewayTools: ["oxygen_recipes_list", "oxygen_recipes_get"],
-        gatewayCommands: ["recipes list", "recipes show", "recipes install"],
-        skills: ["oxygen-recipes"],
+        gatewayCommands: ["recipes list", "recipes show", "recipes apply", "recipes install"],
+        skills: ["oxygen-recipes", "oxygen-playbooks"],
         endpointSections: ["blueprints", "recipes", "templates"],
-        intentTerms: ["recipe", "playbook", "proven play", "activation play", "setup play", "journey", "day 1", "day 7", "day 30", "blueprint", "template", "what should i do"],
+        intentTerms: ["recipe", "playbook", "proven play", "activation play", "setup play", "journey", "day 1", "day 7", "day 30", "blueprint", "template", "what should i do", "inbound led outbound", "engagers into a sequence", "warm outbound from my posts", "whole motion", "end to end motion", "kit"],
     },
     {
         id: "records",
@@ -215,13 +215,13 @@ export const OXYGEN_CAPABILITY_ROUTES = [
         gatewayTools: ["oxygen_tables_create", "oxygen_columns_add", "oxygen_enrich_column_preview", "oxygen_tables_link_bulk", "oxygen_callables_manage"],
         gatewayCommands: ["tables create", "columns add", "enrich-column preview", "tables link", "functions list", "functions draft"],
         skills: ["oxygen-gtm", "oxygen-table-tidy", "oxygen-diagnostics", "oxygen-clay-migration", "oxygen-linkedin-marketing"],
-        endpointSections: ["action-columns", "callables", "functions", "columns", "company-enrichment", "enrich-column", "enrichment", "projects", "table-action-items", "table-action-runs", "table-ingestion-runs", "tables"],
+        endpointSections: ["action-columns", "callables", "functions", "columns", "company-enrichment", "enrich-column", "enrichment", "projects", "supabase", "table-action-items", "table-action-runs", "table-ingestion-runs", "tables"],
         // "link"/"join"/"connect"/"relate" route here for `tables link`. Added after a
         // blind user eval asked for exactly "link two tables" and was routed to
         // `tables create` / `columns add` / `enrich-column preview` — none of which
         // do it. The agent only found the right command by grepping the raw 25k-line
         // command manifest, which is not a discovery path a customer has.
-        intentTerms: ["table", "rows", "column", "columns", "dataset", "csv", "import", "enrich", "enrichment", "waterfall", "score", "formula", "ai column", "lookup", "link", "link tables", "join", "connect", "relate", "relationship", "function", "functions", "reusable function", "function draft", "function version", "callable"],
+        intentTerms: ["table", "spreadsheet", "rows", "column", "columns", "dataset", "csv", "import", "enrich", "enrichment", "waterfall", "score", "formula", "ai column", "lookup", "link", "link tables", "join", "connect", "relate", "relationship", "function", "functions", "reusable function", "function draft", "function version", "callable"],
     },
     {
         id: "messages",
@@ -324,7 +324,7 @@ export const OXYGEN_CAPABILITY_ROUTES = [
         // to workspace-access — "identity" matched the AUTH sense. The nouns a user
         // reaches for when naming a sending identity or the dialing pool have to land
         // on the group that actually owns `senders profiles` and `voice numbers`.
-        intentTerms: ["sequence", "campaign", "cadence", "enroll", "outreach", "linkedin message", "linkedin dm", "nurture", "follow up", "sender rotation", "stop on reply", "sender identity", "sending identity", "sender profile", "phone number", "dialing", "dialer"],
+        intentTerms: ["sequence", "campaign", "cadence", "enroll", "outreach", "linkedin message", "linkedin dm", "nurture", "follow up", "sender rotation", "stop on reply", "sender identity", "sending identity", "sender profile", "phone number", "dialing", "dialer", "call", "cold call"],
     },
     {
         id: "publishing",
@@ -526,6 +526,7 @@ export function inferCapabilityRoute(query) {
         card,
         recommendedTools: recommendations.tools,
         recommendedCommands: recommendations.commands,
+        ...(recommendations.exactCommand ? { exactCommand: recommendations.exactCommand } : {}),
     };
 }
 export function inferPrimitiveRoute(query) {
@@ -549,6 +550,7 @@ export function serializeCapabilityRoute(route) {
         endpoint_sections: route.card.endpointSections,
         recommended_commands: route.recommendedCommands,
         recommended_tools: route.recommendedTools,
+        ...(route.exactCommand ? { exact_command: route.exactCommand } : {}),
         hydrate: {
             cli: "oxygen commands get <exact-command> --json",
             mcp: "oxygen_capabilities_schema",
@@ -568,6 +570,11 @@ function isLinkedInProfileWatcherIntent(query) {
 function explicitCapabilityIntent(query) {
     if (/\b(infographic|graphic designer|render html|carousel pages|visual design|gtm flow image)\b/.test(query))
         return ROUTE_BY_ID.get("visual-rendering") ?? null;
+    // A whole-motion ask ("set up inbound-led outbound for my posts") is a
+    // Recipe kit + playbook, not the connected-LinkedIn signals card that the
+    // "my LinkedIn … engagers" rule below would otherwise claim. Resolve it first.
+    if (isInboundLedOutboundIntent(query))
+        return ROUTE_BY_PRIMITIVE.get("recipes") ?? null;
     // A unified sender profile is an owned Sequence identity, even when the ask
     // names every attached channel (LinkedIn + WhatsApp + email). Resolve this
     // before public LinkedIn research, whose generic "profile" wording would
@@ -666,9 +673,23 @@ function explicitCapabilityIntent(query) {
         || /\b(day\s*\d+|days?\s+\d|multi[ -]step|rotate senders?|sender rotation|stop on reply|until (?:they )?reply)\b/.test(query)) {
         return ROUTE_BY_PRIMITIVE.get("sequences") ?? null;
     }
+    // Existing reply handling is Messages even without a channel name. Keep this
+    // after the explicit cadence/enrollment rules so reply-stop programs retain
+    // Sequences. The onboarding baseline phrased this as "follow up on replies".
+    if (/\b(follow up|triage|answer|handle)\b.{0,40}\breplies\b/.test(query)) {
+        return ROUTE_BY_PRIMITIVE.get("messages") ?? null;
+    }
     if (/\b(reply|respond)\b.{0,30}\b(conversation|thread|email|linkedin|whatsapp|dm)\b/.test(query)) {
         return ROUTE_BY_PRIMITIVE.get("messages") ?? null;
     }
+    // Resolving websites / domains / LinkedIn pages for company NAMES the user
+    // already holds is the companies-search `url_recovery` intent, not a fresh
+    // sourcing search and not an enrichment column. A 2026-09-11 blind user
+    // asking "get company website URL from company name" got NO route here
+    // (null), never discovered `companies search plan`, and priced the whole
+    // company_enrich preset instead.
+    if (isCompanyUrlRecoveryIntent(query))
+        return ROUTE_BY_ID.get("sourcing-and-provider-tools") ?? null;
     if (/\b(find emails?|find phones?|find companies|find people|source (?:leads?|a list|companies|people)|build (?:me )?a list|tam|prospect)\b/.test(query)) {
         return ROUTE_BY_ID.get("sourcing-and-provider-tools") ?? null;
     }
@@ -677,16 +698,43 @@ function explicitCapabilityIntent(query) {
     }
     return null;
 }
+/**
+ * Does `term` occur in `query` starting on a word boundary?
+ *
+ * A plain `query.includes(term)` is what sent "enrich these le**ad**s" and
+ * "build me a spre**ad**sheet" to the competitor-ad-intelligence card, and
+ * "our i**deal** customer" to CRM Records: a short term matches inside any
+ * longer word that happens to contain its letters, and nothing else scores, so
+ * the wrong card wins outright rather than narrowly.
+ *
+ * Only the START of the match is anchored, deliberately. Requiring a boundary at
+ * BOTH ends looks stricter and is wrong here, because the cards do not list
+ * their own plurals consistently — `sequence`, `workflow`, `table`, `agent` and
+ * `campaign` have no plural term beside them — so whole-word matching silently
+ * stops routing "sequences", "workflows" and "tables", which are the phrasings
+ * people actually type. Anchoring the head keeps every plural and inflection
+ * working while refusing the mid-word accidents, and it is the same
+ * word-boundary treatment v1.915.0 applied to the Tables guard this scorer sits
+ * behind.
+ */
+function matchesIntentTerm(query, term) {
+    for (let at = query.indexOf(term); at >= 0; at = query.indexOf(term, at + 1)) {
+        const preceding = at === 0 ? "" : query[at - 1] ?? "";
+        if (!/[a-z0-9]/.test(preceding))
+            return true;
+    }
+    return false;
+}
 function highestScoringRoute(query) {
     let best = null;
     for (const card of OXYGEN_CAPABILITY_ROUTES) {
         let score = 0;
         for (const term of card.intentTerms) {
-            if (query.includes(term))
+            if (matchesIntentTerm(query, term))
                 score += term.includes(" ") ? 6 : 2;
         }
         for (const term of card.negativeTerms ?? []) {
-            if (query.includes(term))
+            if (matchesIntentTerm(query, term))
                 score -= term.includes(" ") ? 8 : 3;
         }
         if (score > (best?.score ?? 0))
@@ -694,7 +742,16 @@ function highestScoringRoute(query) {
     }
     return best?.card ?? null;
 }
+/** The exact `companies search plan` invocation for the url_recovery intent. */
+export const COMPANY_URL_RECOVERY_COMMAND = 'oxygen companies search plan --prompt "Find the websites for these companies: <company names>" --source-intent url_recovery';
 function recommendationsFor(card, query) {
+    if (card.id === "sourcing-and-provider-tools" && isCompanyUrlRecoveryIntent(query)) {
+        return {
+            tools: ["oxygen_companies_search_plan", "oxygen_companies_search_run"],
+            commands: ["companies search plan", "companies search run"],
+            exactCommand: COMPANY_URL_RECOVERY_COMMAND,
+        };
+    }
     if (card.id === "connected-linkedin" && isMutualLinkedInConnectionsIntent(query)) {
         return {
             tools: ["oxygen_tools_get", "oxygen_tools_run_live", "oxygen_senders_list"],
@@ -948,6 +1005,25 @@ function isEmailVerificationIntent(query) {
     const addressThenGrade = /\b(e ?mails?|addresses)\b.{0,40}\b(verif(?:y|ied|ication)|validat(?:e|ed|ion)|valid|invalid|deliverable|(?:will|would|might) bounce|bounce risk|risky|safe to (?:send|email)|catch ?all|accept ?all)\b/;
     return gradeThenAddress.test(query) || addressThenGrade.test(query);
 }
+// "get company website URL from company name", "find the websites for this
+// list of company names", "recover domains for company names" — a URL-ish
+// noun, a company noun, a recovery verb, and the hint that the input is NAMES
+// or a LIST (or that URLs are MISSING). Every leg is required so a sourcing
+// ask ("find companies with a website in Germany") keeps its owner. LinkedIn
+// page recovery is deliberately left to the LinkedIn rules above it, which
+// already resolve company pages through the public-research catalog.
+function isCompanyUrlRecoveryIntent(query) {
+    const urlNoun = /\b(websites?|web ?sites?|website urls?|domains?|urls?|homepages?)\b/;
+    const companyNoun = /\b(compan(?:y|ies)|accounts?|organi[sz]ations?|brands?|vendors?)\b/;
+    const recover = /\b(recover|resolve|look ?up|lookup|missing|get|find|fill(?: in)?|add)\b/;
+    const fromNames = /\b(names?|list|missing|these|those)\b/;
+    // An email / phone / contact ask that merely MENTIONS domains is enrichment,
+    // and a column / table ask is a Tables ask — both keep their owners.
+    const otherOwner = /\b(e-?mails?|phones?|mobiles?|numbers?|contacts?|people|persons?|columns?|tables?|enrich\w*|verif\w*)\b/;
+    return urlNoun.test(query) && companyNoun.test(query) && recover.test(query) && fromNames.test(query)
+        && !/\b(scrape|engagers?|comments?|reactions?|posts?)\b/.test(query)
+        && !otherOwner.test(query);
+}
 function isInboxAvatarIntent(query) {
     return /\b(avatar|profile (?:picture|photo)|headshot|hosted (?:picture|image)|mailbox (?:picture|photo))\b/.test(query);
 }
@@ -974,6 +1050,14 @@ function isMailboxDeleteIntent(query) {
     const scopedDetach = /\b(remove|disconnect)\b.{0,48}\b(mailbox(?:es)?|inbox(?:es)?|sender accounts?|email accounts?)\b.{0,24}\b(?:from|in|on)\b.{0,24}\b(sequence|campaign|cadence|sender profile)\b/.test(query);
     return mailboxScope && removal && !scopedDetach;
 }
+// The composed inbound-led outbound motion: engagers → ICP gate → capped
+// sequence → CRM. Hyphens are already normalised to spaces by the caller.
+function isInboundLedOutboundIntent(query) {
+    return /\binbound led outbound\b/.test(query)
+        || /\bengagers?\b.{0,40}\b(into|to) (a |my )?(sequence|pipeline)\b/.test(query)
+        || /\bwarm outbound\b.{0,40}\b(posts?|engagement)\b/.test(query)
+        || /\b(whole|end to end|complete) (gtm )?motion\b/.test(query);
+}
 function isNetNewLinkedInInitiation(query) {
     const mentionsLinkedIn = /\blinkedin\b|\bdm\b/.test(query);
     const startsConversation = /\b(send|message|dm|contact|reach out|initiate|start)\b/.test(query)

package/node_modules/@oxygen/shared/dist/copilot-errors.js

@@ -21,6 +21,9 @@ const WORKER_STEP_TIMEOUT_MESSAGE = /\bWorker step '[^']+' exceeded \d+ms deadli
 export function customerFacingCopilotError(input) {
     const code = input.code ?? null;
     const message = input.message ?? null;
+    if (code === "agent_response_incomplete") {
+        return { code, message: "I stopped before completing the requested work. Completed actions are saved; ask me to continue." };
+    }
     const isTimeout = code === "worker_step_timeout" ||
         code === COPILOT_TURN_TIMEOUT_CODE ||
         code === COPILOT_TURN_DEADLINE_EXCEEDED_CODE ||

package/node_modules/@oxygen/shared/dist/copilot-journeys.d.ts

@@ -8,6 +8,24 @@ export type CopilotJourney = {
     seedMessage: string;
 };
 export declare const LINKEDIN_NETWORK_COPILOT_JOURNEY_SLUG = "inbound-led-outbound";
-export declare const COPILOT_JOURNEYS: readonly CopilotJourney[];
+export declare const COPILOT_JOURNEYS: readonly [{
+    readonly slug: "inbound-led-outbound";
+    readonly title: "Inbound-led outbound";
+    readonly description: "Turn the people who engage with your LinkedIn posts into a capped, evidence-gated warm sequence with replies routed to your CRM.";
+    readonly recipeSlugs: readonly ["inbound-led-outbound", "linkedin-network-first-motion", "founder-posting-system", "reply-to-meeting"];
+    readonly seedMessage: "I chose the inbound-led-outbound recipe. Help me set up inbound-led outbound for my LinkedIn posts: watch who engages with them every day, assess each person against my ICP, hand me the strong fits, put the possible fits into a draft LinkedIn sequence on a schedule, move replies into my CRM, and write what we learn back into my knowledge wiki. Inspect the workspace first, follow the recipe, and resume from durable evidence instead of starting over. Do not connect an account, enroll anyone, send anything, or spend credits without asking me first.";
+}, {
+    readonly slug: "email-infra-setup";
+    readonly title: "Outbound infrastructure";
+    readonly description: "Domains, inboxes, warmup, sender posture — reviewed and approved before anything is bought or sent.";
+    readonly recipeSlugs: readonly ["email-infra-setup"];
+    readonly seedMessage: "Inspect my current sending setup (domains, inboxes, warmup, senders, caps, deliverability) and propose what's missing for a safe cold-email motion. Show quotes and costs — do not buy or change anything without my approval.";
+}, {
+    readonly slug: "tam-sourcing";
+    readonly title: "Map your market";
+    readonly description: "Source and segment your addressable market from your ICP, starting with a bounded sample.";
+    readonly recipeSlugs: readonly ["icp-to-account-map", "outbound-pilot-50"];
+    readonly seedMessage: "Help me map my total addressable market from my ICP. Ground it in my company profile and website, source a bounded sample first, and show me coverage and credit estimates before expanding.";
+}];
 export type CopilotJourneySlug = (typeof COPILOT_JOURNEYS)[number]["slug"];
 export declare function getCopilotJourney(slug: string): CopilotJourney | null;

package/node_modules/@oxygen/shared/dist/copilot-journeys.generated.d.ts

@@ -0,0 +1,19 @@
+export declare const COPILOT_JOURNEYS_GENERATED: readonly [{
+    readonly slug: "inbound-led-outbound";
+    readonly title: "Inbound-led outbound";
+    readonly description: "Turn the people who engage with your LinkedIn posts into a capped, evidence-gated warm sequence with replies routed to your CRM.";
+    readonly recipeSlugs: readonly ["inbound-led-outbound", "linkedin-network-first-motion", "founder-posting-system", "reply-to-meeting"];
+    readonly seedMessage: "I chose the inbound-led-outbound recipe. Help me set up inbound-led outbound for my LinkedIn posts: watch who engages with them every day, assess each person against my ICP, hand me the strong fits, put the possible fits into a draft LinkedIn sequence on a schedule, move replies into my CRM, and write what we learn back into my knowledge wiki. Inspect the workspace first, follow the recipe, and resume from durable evidence instead of starting over. Do not connect an account, enroll anyone, send anything, or spend credits without asking me first.";
+}, {
+    readonly slug: "email-infra-setup";
+    readonly title: "Outbound infrastructure";
+    readonly description: "Domains, inboxes, warmup, sender posture — reviewed and approved before anything is bought or sent.";
+    readonly recipeSlugs: readonly ["email-infra-setup"];
+    readonly seedMessage: "Inspect my current sending setup (domains, inboxes, warmup, senders, caps, deliverability) and propose what's missing for a safe cold-email motion. Show quotes and costs — do not buy or change anything without my approval.";
+}, {
+    readonly slug: "tam-sourcing";
+    readonly title: "Map your market";
+    readonly description: "Source and segment your addressable market from your ICP, starting with a bounded sample.";
+    readonly recipeSlugs: readonly ["icp-to-account-map", "outbound-pilot-50"];
+    readonly seedMessage: "Help me map my total addressable market from my ICP. Ground it in my company profile and website, source a bounded sample first, and show me coverage and credit estimates before expanding.";
+}];

package/node_modules/@oxygen/shared/dist/copilot-journeys.generated.js

@@ -0,0 +1,26 @@
+// GENERATED by apps/web/scripts/generate-copilot-journeys.ts from the recipe
+// catalog (`journey:` blocks in apps/web/src/agent-skills/oxygen-recipes/recipes).
+// Do not edit by hand — run `npm run skills:metadata -w @oxygen/web`.
+export const COPILOT_JOURNEYS_GENERATED = [
+    {
+        slug: "inbound-led-outbound",
+        title: "Inbound-led outbound",
+        description: "Turn the people who engage with your LinkedIn posts into a capped, evidence-gated warm sequence with replies routed to your CRM.",
+        recipeSlugs: ["inbound-led-outbound", "linkedin-network-first-motion", "founder-posting-system", "reply-to-meeting"],
+        seedMessage: "I chose the inbound-led-outbound recipe. Help me set up inbound-led outbound for my LinkedIn posts: watch who engages with them every day, assess each person against my ICP, hand me the strong fits, put the possible fits into a draft LinkedIn sequence on a schedule, move replies into my CRM, and write what we learn back into my knowledge wiki. Inspect the workspace first, follow the recipe, and resume from durable evidence instead of starting over. Do not connect an account, enroll anyone, send anything, or spend credits without asking me first.",
+    },
+    {
+        slug: "email-infra-setup",
+        title: "Outbound infrastructure",
+        description: "Domains, inboxes, warmup, sender posture — reviewed and approved before anything is bought or sent.",
+        recipeSlugs: ["email-infra-setup"],
+        seedMessage: "Inspect my current sending setup (domains, inboxes, warmup, senders, caps, deliverability) and propose what's missing for a safe cold-email motion. Show quotes and costs — do not buy or change anything without my approval.",
+    },
+    {
+        slug: "tam-sourcing",
+        title: "Map your market",
+        description: "Source and segment your addressable market from your ICP, starting with a bounded sample.",
+        recipeSlugs: ["icp-to-account-map", "outbound-pilot-50"],
+        seedMessage: "Help me map my total addressable market from my ICP. Ground it in my company profile and website, source a bounded sample first, and show me coverage and credit estimates before expanding.",
+    },
+];

package/node_modules/@oxygen/shared/dist/copilot-journeys.js

@@ -1,47 +1,14 @@
-// Workspace Copilot guided journeys (ADR 0013 §11). One canonical copy shared by
-// the runtime (system-prompt grounding on the named recipes) and the web journey
-// cards (seeding a session's first message) — the data is pure and client-safe.
-// Each journey is a thin descriptor over EXISTING advisory catalog Recipes:
-// journeys add no runtime behavior, and every guardrail (never enroll/send/buy/
-// change DNS without approval) rides those recipes' own approval gates.
+import { COPILOT_JOURNEYS_GENERATED } from "./copilot-journeys.generated.js";
 // Stable slug for sessions deliberately launched from the matching Recipe.
 // It is never a default: first-touch surfaces stay outcome-neutral.
 export const LINKEDIN_NETWORK_COPILOT_JOURNEY_SLUG = "inbound-led-outbound";
-export const COPILOT_JOURNEYS = [
-    {
-        slug: LINKEDIN_NETWORK_COPILOT_JOURNEY_SLUG,
-        title: "Inbound-led outbound",
-        description: "Work the LinkedIn network you already have — connections and post engagers — as a capped warm motion.",
-        // The network-first play leads: connections and post engagers are the two
-        // sources a founder actually has on day 1, and profile viewers (the old lead)
-        // are a thin, anonymity-capped sample by comparison. Posting is second because
-        // it CREATES the engager stream this play captures, and replies close the loop.
-        recipeSlugs: [
-            "linkedin-network-first-motion",
-            "founder-posting-system",
-            "reply-to-meeting",
-        ],
-        // Deliberately free of steps, commands, table names, and caps: encoding
-        // mechanics here would fork a second, unversioned copy of the play that no
-        // catalog gate can lint (ADR 0013 §11 — a journey is a thin pointer at
-        // advisory recipes, never a hardcoded kit).
-        seedMessage: "I chose the linkedin-network-first-motion recipe. Help me turn the LinkedIn network I already have — my connections and the people who engage with my posts — into a small, safe, approval-gated outreach motion. Inspect the relevant workspace primitives, follow the recipe, and resume from durable evidence instead of starting over. Do not connect an account, enroll anyone, send anything, or spend credits without asking me first.",
-    },
-    {
-        slug: "tam-sourcing",
-        title: "Map your market",
-        description: "Source and segment your addressable market from your ICP, starting with a bounded sample.",
-        recipeSlugs: ["icp-to-account-map", "outbound-pilot-50"],
-        seedMessage: "Help me map my total addressable market from my ICP. Ground it in my company profile and website, source a bounded sample first, and show me coverage and credit estimates before expanding.",
-    },
-    {
-        slug: "email-infra-setup",
-        title: "Outbound infrastructure",
-        description: "Domains, inboxes, warmup, sender posture — reviewed and approved before anything is bought or sent.",
-        recipeSlugs: ["email-infra-setup"],
-        seedMessage: "Inspect my current sending setup (domains, inboxes, warmup, senders, caps, deliverability) and propose what's missing for a safe cold-email motion. Show quotes and costs — do not buy or change anything without my approval.",
-    },
-];
+// Derived from the recipe catalog (ADR 0025): every recipe carrying a
+// `journey:` block leads one journey. The list is generated into
+// ./copilot-journeys.generated.ts by apps/web/scripts/generate-copilot-journeys.ts
+// (run through `npm run skills:metadata -w @oxygen/web`) and gated against the
+// catalog by apps/web/src/lib/recipes/copilot-journeys.test.ts, because this
+// package cannot read the markdown the catalog is served from.
+export const COPILOT_JOURNEYS = COPILOT_JOURNEYS_GENERATED;
 export function getCopilotJourney(slug) {
     return COPILOT_JOURNEYS.find((journey) => journey.slug === slug) ?? null;
 }

package/node_modules/@oxygen/shared/dist/inbox-avatar-url.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Where a hosted inbox-avatar URL may be minted, and how.
+ *
+ * An avatar URL is handed to an external inbox vendor that fetches it server-side,
+ * later, possibly more than once — and Oxygen stores nothing about that hand-off
+ * afterwards, so a bad URL cannot be found again or reissued. A URL minted on a
+ * preview deployment would be baked into a vendor's mailbox record and die when
+ * that deployment does; one minted on localhost never resolves at all. So the
+ * origin is an allowlist, not "whatever host served this request", and the SAME
+ * allowlist binds every minter: the web request path (which prefers the inbound
+ * host) and the worker's LinkedIn-photo backfill (which only has the configured
+ * app URL). Two allowlists would drift, and the drift would ship as a mailbox
+ * photo that resolves from one deployment and 404s from the other.
+ */
+export declare const INBOX_AVATAR_ORIGIN_HOSTS: ReadonlySet<string>;
+/**
+ * The first candidate that is an https URL on an allowed host, normalized to
+ * `protocol//host`, or null when none qualifies. Returning null rather than a
+ * best-effort URL is the point: on localhost the only honest answer is "not from
+ * here", and an `http://localhost` URL would sail through this function only to
+ * be rejected by an https-only check one step later and much harder to read.
+ */
+export declare function resolveInboxAvatarOrigin(candidates: readonly (string | null | undefined)[]): string | null;
+/**
+ * The public, permanent URL for a stored inbox avatar on an already-resolved
+ * origin — or null when there is no origin, or the key is not an inbox avatar.
+ */
+export declare function inboxAvatarPublicUrlForOrigin(origin: string | null, storageKey: string): string | null;

package/node_modules/@oxygen/shared/dist/inbox-avatar-url.js

@@ -0,0 +1,57 @@
+/**
+ * Where a hosted inbox-avatar URL may be minted, and how.
+ *
+ * An avatar URL is handed to an external inbox vendor that fetches it server-side,
+ * later, possibly more than once — and Oxygen stores nothing about that hand-off
+ * afterwards, so a bad URL cannot be found again or reissued. A URL minted on a
+ * preview deployment would be baked into a vendor's mailbox record and die when
+ * that deployment does; one minted on localhost never resolves at all. So the
+ * origin is an allowlist, not "whatever host served this request", and the SAME
+ * allowlist binds every minter: the web request path (which prefers the inbound
+ * host) and the worker's LinkedIn-photo backfill (which only has the configured
+ * app URL). Two allowlists would drift, and the drift would ship as a mailbox
+ * photo that resolves from one deployment and 404s from the other.
+ */
+export const INBOX_AVATAR_ORIGIN_HOSTS = new Set([
+    "oxygen-agent.com",
+    "www.oxygen-agent.com",
+    "dev.oxygen-agent.com",
+]);
+const INBOX_AVATAR_KEY_PREFIX = "inbox-avatars/";
+/**
+ * The first candidate that is an https URL on an allowed host, normalized to
+ * `protocol//host`, or null when none qualifies. Returning null rather than a
+ * best-effort URL is the point: on localhost the only honest answer is "not from
+ * here", and an `http://localhost` URL would sail through this function only to
+ * be rejected by an https-only check one step later and much harder to read.
+ */
+export function resolveInboxAvatarOrigin(candidates) {
+    for (const candidate of candidates) {
+        if (!candidate)
+            continue;
+        try {
+            const url = new URL(candidate);
+            if (url.protocol === "https:" && INBOX_AVATAR_ORIGIN_HOSTS.has(url.host)) {
+                return `${url.protocol}//${url.host}`;
+            }
+        }
+        catch {
+            // Not a URL at all — try the next candidate.
+        }
+    }
+    return null;
+}
+/**
+ * The public, permanent URL for a stored inbox avatar on an already-resolved
+ * origin — or null when there is no origin, or the key is not an inbox avatar.
+ */
+export function inboxAvatarPublicUrlForOrigin(origin, storageKey) {
+    if (!origin || !storageKey.startsWith(INBOX_AVATAR_KEY_PREFIX))
+        return null;
+    const path = storageKey
+        .slice(INBOX_AVATAR_KEY_PREFIX.length)
+        .split("/")
+        .map((segment) => encodeURIComponent(segment))
+        .join("/");
+    return `${origin}/api/inbox-avatars/${path}`;
+}

package/node_modules/@oxygen/shared/dist/index.d.ts

@@ -47,6 +47,7 @@ export * from "./knowledge-constants.js";
 export * from "./knowledge-bootstrap.js";
 export * from "./knowledge-links.js";
 export * from "./knowledge-markdown.js";
+export * from "./knowledge-vault-markdown.js";
 export * from "./knowledge-seed-content.js";
 export * from "./langfuse.js";
 export * from "./llm-usage.js";
@@ -119,3 +120,6 @@ export declare function isVersionGreater(a: string, b: string): boolean;
 /** True when `a` is a strictly lesser semantic version than `b`. */
 export declare function isVersionLess(a: string, b: string): boolean;
 export * from "./ugc.js";
+export * from "./ugc-amplification-identity.js";
+export * from "./knowledge-repository.js";
+export * from "./knowledge-bases.js";

package/node_modules/@oxygen/shared/dist/index.js

@@ -47,6 +47,7 @@ export * from "./knowledge-constants.js";
 export * from "./knowledge-bootstrap.js";
 export * from "./knowledge-links.js";
 export * from "./knowledge-markdown.js";
+export * from "./knowledge-vault-markdown.js";
 export * from "./knowledge-seed-content.js";
 export * from "./langfuse.js";
 export * from "./llm-usage.js";
@@ -155,3 +156,6 @@ export function isVersionLess(a, b) {
     return compareSemver(a, b) < 0;
 }
 export * from "./ugc.js";
+export * from "./ugc-amplification-identity.js";
+export * from "./knowledge-repository.js";
+export * from "./knowledge-bases.js";

package/node_modules/@oxygen/shared/dist/knowledge-bases.d.ts

@@ -0,0 +1,74 @@
+export type KnowledgeBaseViewType = "table" | "cards" | "kanban";
+export type KnowledgeBaseFilter = string | {
+    and?: KnowledgeBaseFilter[];
+    or?: KnowledgeBaseFilter[];
+    not?: KnowledgeBaseFilter[];
+};
+export type KnowledgeBaseIssue = {
+    code: "invalid_base" | "unsupported_filter" | "unsupported_view" | "invalid_view";
+    message: string;
+    expression?: string;
+    view?: string;
+};
+export type KnowledgeBaseProperty = {
+    displayName?: string;
+    raw: Record<string, unknown>;
+};
+export type KnowledgeBaseView = {
+    type: string;
+    name: string;
+    groupBy?: {
+        property: string;
+        direction: "ASC" | "DESC";
+    };
+    order: string[];
+    boardColumns: string[];
+    cardTitleProperty?: string;
+    sort: Array<{
+        property: string;
+        direction: "ASC" | "DESC";
+    }>;
+    filters?: KnowledgeBaseFilter;
+    columnColors: Record<string, string>;
+    wipLimits: Record<string, number>;
+    raw: Record<string, unknown>;
+};
+export type KnowledgeBaseDefinition = {
+    path: string;
+    name: string;
+    filters?: KnowledgeBaseFilter;
+    properties: Record<string, KnowledgeBaseProperty>;
+    views: KnowledgeBaseView[];
+    raw: Record<string, unknown>;
+};
+export type KnowledgeBaseFile = {
+    id: string;
+    path: string;
+    body?: string;
+    properties: Record<string, unknown>;
+    revision: number;
+};
+export type KnowledgeBaseParseResult = {
+    definition: KnowledgeBaseDefinition | null;
+    issues: KnowledgeBaseIssue[];
+};
+export type KnowledgeBaseEvaluation = {
+    files: KnowledgeBaseFile[];
+    issues: KnowledgeBaseIssue[];
+};
+export type KnowledgeBaseGroup = {
+    key: string;
+    title: string;
+    files: KnowledgeBaseFile[];
+};
+export declare function parseKnowledgeBase(path: string, source: string): KnowledgeBaseParseResult;
+export declare function knowledgeBasePropertyKey(property: string): string;
+export declare function knowledgeBasePropertyValue(file: KnowledgeBaseFile, property: string): unknown;
+export declare function knowledgeBasePropertyText(file: KnowledgeBaseFile, property: string): string;
+export declare function evaluateKnowledgeBaseView(definition: KnowledgeBaseDefinition, view: KnowledgeBaseView, files: readonly KnowledgeBaseFile[]): KnowledgeBaseEvaluation;
+export declare function knowledgeBaseGroups(view: KnowledgeBaseView, files: readonly KnowledgeBaseFile[], configuredColumns?: readonly string[]): KnowledgeBaseGroup[];
+export declare function knowledgeBaseDisplayName(definition: KnowledgeBaseDefinition, property: string): string;
+export declare function knowledgeBaseCardTitle(file: KnowledgeBaseFile, view: KnowledgeBaseView): string;
+export declare function parseBaseBoardColumnOrder(value: unknown): Record<string, string[]>;
+/** Resolve Base Board's `<folder>::<view>::<property>` lane order, with view-name shorthand for API callers. */
+export declare function resolveBaseBoardColumnOrder(definition: KnowledgeBaseDefinition, view: KnowledgeBaseView, configured: Readonly<Record<string, readonly string[]>>): string[];