@oxygen-agent/cli 1.982.3 → 1.987.20

package/node_modules/@oxygen/shared/dist/knowledge-bootstrap.js

@@ -52,6 +52,7 @@
  * Professional person evidence remains actor-scoped; ICP/offers are hypotheses.
  * The provider sub-cap covers every external research leg, including fallbacks.
  */
+import { normalizeLinkedinProfileUrl } from "./linkedin-url.js";
 /** Hard ceiling on managed credits ONE workspace bootstrap may spend, all phases. */
 export const KNOWLEDGE_BOOTSTRAP_MAX_CREDITS = 300;
 /**
@@ -72,6 +73,19 @@ export const KNOWLEDGE_BOOTSTRAP_SYNTHESIS_TIER = "medium";
  * it is a quality/latency knob, and the credit ceilings above remain the money guard.
  */
 export const KNOWLEDGE_BOOTSTRAP_MAX_PAGES_READ = 5;
+/**
+ * Per-call provider abort budget for every paid leg of the pass (LinkedIn company,
+ * person search/profile, page search, page read), in milliseconds.
+ *
+ * The platform default is 120 s, sized for a durable column run. This pass runs
+ * inside the worker's tenant-maintenance tick under a 300 s step deadline, so two
+ * hung LinkedIn calls at the default (measured 2026-09-15/16: the managed vendor
+ * accepted connections and never answered) consumed the whole budget before the
+ * page reads and the synthesis got a turn. 45 s keeps the worst case — five legs,
+ * every one hanging — inside the step, and a healthy vendor answers in well under
+ * it. This bounds latency only; the credit ceilings above remain the money guard.
+ */
+export const KNOWLEDGE_BOOTSTRAP_PROVIDER_TIMEOUT_MS = 45_000;
 /** Fleet-wide kill switch, matching OXYGEN_KNOWLEDGE_RETRIEVAL/AUTO_SOURCES_DISABLED. */
 export const KNOWLEDGE_BOOTSTRAP_DISABLED_ENV_VAR = "OXYGEN_KNOWLEDGE_BOOTSTRAP_DISABLED";
 /**
@@ -158,14 +172,22 @@ export function readKnowledgeBootstrapConsent(metadata) {
         return null;
     if (!Number.isFinite(Date.parse(grantedAt)))
         return null;
+    const scope = record.scope === "company_and_creator" ? "company_and_creator" : undefined;
+    const grantedBy = typeof record.granted_by_clerk_user_id === "string" && record.granted_by_clerk_user_id.length > 0
+        ? record.granted_by_clerk_user_id
+        : null;
+    // A person hint is valid only as part of the creator-scoped grant. Otherwise a
+    // stale metadata value could be mistaken for an organization-wide profile hint.
+    const creatorLinkedinUrl = scope && grantedBy && typeof record.creator_linkedin_url === "string"
+        ? normalizeLinkedinProfileUrl(record.creator_linkedin_url)?.dispatchUrl ?? null
+        : null;
     return {
         granted_at: grantedAt,
-        ...(record.scope === "company_and_creator" ? { scope: "company_and_creator" } : {}),
+        ...(scope ? { scope } : {}),
         ...(typeof record.domain === "string" ? { domain: record.domain } : {}),
+        ...(creatorLinkedinUrl ? { creator_linkedin_url: creatorLinkedinUrl } : {}),
         source: typeof record.source === "string" && record.source.length > 0 ? record.source : null,
-        granted_by_clerk_user_id: typeof record.granted_by_clerk_user_id === "string" && record.granted_by_clerk_user_id.length > 0
-            ? record.granted_by_clerk_user_id
-            : null,
+        granted_by_clerk_user_id: grantedBy,
     };
 }
 /**

package/node_modules/@oxygen/shared/dist/langfuse.d.ts

@@ -38,6 +38,8 @@ export type LlmSpanBody = {
     userId?: string | null;
 };
 export type LlmGenerationBody = LlmSpanBody & {
+    /** Persist this physical id when a later annotation must target this attempt. */
+    observationId?: string;
     model?: string | null;
     modelParameters?: Record<string, unknown>;
     completionStartTime?: Date | null;
@@ -63,9 +65,11 @@ export type LlmEventBody = {
  * because that variant requires a *string* value. Widening later stays additive.
  */
 export type LlmScoreBody = {
-    /** Deterministic id upserts; omit for a new score each call. */
+    /** Retry-safe scores need the same id, name AND timestamp on every attempt. */
     id?: string;
     traceId: string;
+    observationId?: string;
+    timestamp?: Date;
     name: string;
     value: number;
     dataType?: "BOOLEAN" | "NUMERIC";
@@ -103,6 +107,13 @@ export type LlmTracingClient = {
  */
 export declare function isLlmTracingEnabled(env?: EnvMap): boolean;
 export declare function resolveLlmTracingEnvironment(env?: EnvMap): string;
+/**
+ * The private Langfuse provider must identify its own runtime rather than
+ * inherit the process-wide OTel resource. Fly identity wins because it is
+ * injected per machine and cannot drift; a local CLI/test process is neither
+ * the web app nor the worker.
+ */
+export declare function resolveLlmTracingServiceName(env?: EnvMap): string;
 /**
  * Deterministic Langfuse trace id for an external seed (copilot turn id, agent
  * run id, AI-column run id).

package/node_modules/@oxygen/shared/dist/langfuse.js

@@ -32,7 +32,7 @@
 //   * Trace-level input/output is deprecated in v5. Overall IO goes on the ROOT
 //     observation instead; setTraceIO()/setActiveTraceIO() are deliberately not
 //     used here.
-import { createHash, randomBytes } from "node:crypto";
+import { createHash, randomBytes, randomUUID } from "node:crypto";
 import { OXYGEN_VERSION } from "./version.js";
 import { prepareLlmPayload } from "./llm-payload.js";
 import { log } from "./log.js";
@@ -83,6 +83,23 @@ export function resolveLlmTracingEnvironment(env = process.env) {
         return flyEnv === "production" ? "production" : "development";
     return "development";
 }
+/**
+ * The private Langfuse provider must identify its own runtime rather than
+ * inherit the process-wide OTel resource. Fly identity wins because it is
+ * injected per machine and cannot drift; a local CLI/test process is neither
+ * the web app nor the worker.
+ */
+export function resolveLlmTracingServiceName(env = process.env) {
+    const flyApp = env.FLY_APP_NAME?.trim() || env.FLY_APP?.trim();
+    if (flyApp)
+        return flyApp.includes("-dev") ? "oxygen-worker-dev" : "oxygen-worker";
+    const flyEnvironment = env.FLY_ENVIRONMENT?.trim().toLowerCase();
+    if (flyEnvironment)
+        return flyEnvironment === "production" ? "oxygen-worker" : "oxygen-worker-dev";
+    if (env.VERCEL?.trim() || env.VERCEL_ENV?.trim())
+        return "oxygen-web";
+    return "oxygen-local";
+}
 /**
  * Deterministic Langfuse trace id for an external seed (copilot turn id, agent
  * run id, AI-column run id).
@@ -140,8 +157,9 @@ function createOtelEmitter(env, warn) {
     const init = () => {
         handle ??= (async () => {
             try {
-                const [{ LangfuseSpanProcessor }, { BasicTracerProvider, AlwaysOnSampler }, tracing, otel, core] = await Promise.all([
+                const [{ LangfuseSpanProcessor }, { BasicTracerProvider, AlwaysOnSampler }, { resourceFromAttributes }, tracing, otel, core] = await Promise.all([
                     import("@langfuse/otel"), import("@opentelemetry/sdk-trace-base"),
+                    import("@opentelemetry/resources"),
                     import("@langfuse/tracing"), import("@opentelemetry/api"), import("@langfuse/core"),
                 ]);
                 const processor = new LangfuseSpanProcessor({
@@ -160,6 +178,11 @@ function createOtelEmitter(env, warn) {
                 });
                 let identity;
                 const provider = new BasicTracerProvider({
+                    // This provider is deliberately isolated from the application's
+                    // global OTel pipeline, so it also needs its own explicit resource.
+                    // Never trust OTEL_SERVICE_NAME here: a cross-environment Doppler
+                    // value must not relabel prompt-bearing Langfuse observations.
+                    resource: resourceFromAttributes({ "service.name": resolveLlmTracingServiceName(env) }),
                     spanProcessors: [{
                             onStart: (span) => {
                                 // Directly pass the private parent claim to the processor. A
@@ -266,7 +289,7 @@ function createApiScorer(env, warn) {
                     username: env.LANGFUSE_PUBLIC_KEY,
                     password: env.LANGFUSE_SECRET_KEY,
                 });
-                return client.scores;
+                return client;
             }
             catch (error) {
                 warn(error, { stage: "score_init" });
@@ -281,15 +304,31 @@ function createApiScorer(env, warn) {
                 const api = await init();
                 if (!api)
                     return false;
-                await api.create(compact({
-                    id: body.id,
+                const payload = {
+                    ...(body.id ? { id: body.id } : {}),
                     traceId: body.traceId,
+                    ...(body.observationId ? { observationId: body.observationId } : {}),
                     name: body.name,
                     value: body.value,
-                    dataType: body.dataType,
-                    comment: typeof body.comment === "string" ? boundComment(body.comment) : undefined,
+                    ...(body.dataType ? { dataType: body.dataType } : {}),
+                    ...(typeof body.comment === "string" ? { comment: boundComment(body.comment) } : {}),
                     environment: resolveLlmTracingEnvironment(env),
-                }));
+                };
+                const requestOptions = { timeoutInSeconds: 5, maxRetries: 0 };
+                if (body.timestamp) {
+                    // POST /scores cannot carry a timestamp. Score ingestion remains
+                    // supported in v4 (unlike trace/observation ingestion) and preserves
+                    // the date component of the score's deduplication identity.
+                    if (!body.id || !Number.isFinite(body.timestamp.getTime()))
+                        return false;
+                    const eventId = randomUUID();
+                    const result = await api.ingestion.batch({ batch: [{
+                                type: "score-create", id: eventId, timestamp: body.timestamp.toISOString(), body: payload,
+                            }] }, requestOptions);
+                    // A 207 is transport success even if the event was rejected.
+                    return result.errors.length === 0 && result.successes.some((event) => event.id === eventId && event.status >= 200 && event.status < 300);
+                }
+                await api.scores.create(payload, requestOptions);
                 return true;
             }
             catch (error) {
@@ -398,6 +437,7 @@ export function createLlmTracingClient(env = process.env, options) {
         emitter.emit({
             kind,
             traceSeed: body.traceId,
+            ...(body.observationId ? { observationId: body.observationId } : {}),
             name: body.name,
             attributes: compact({
                 input: body.input,

package/node_modules/@oxygen/shared/dist/research-output-contract.d.ts

@@ -14,6 +14,34 @@ export declare function deriveResearchOutputContract(prompt: string, options: {
     evidenceRequired: boolean;
 }): ResearchOutputContract | null;
 export declare function buildResearchOutputSchema(contract: ResearchOutputContract | null): Record<string, unknown>;
+/**
+ * Whether a found answer MUST cite evidence. Shared by the write-path normalizer
+ * (which bakes it into the derived research contract), the runner (which
+ * validates the model output against it) and the output-field reader, so none
+ * of them can disagree.
+ *
+ * Explicit "strict" always requires it. A FETCH column requires it by default —
+ * the evidence is the one page the customer pointed at, so an answer that cites
+ * nothing answered from memory — unless the author chose "estimate".
+ */
+export declare function researchEvidenceRequired(webSearch: unknown): boolean;
+/**
+ * True for a model-facing schema in the research envelope shape — the derived
+ * contract, the legacy broad schema, or a catalog template's typed answer
+ * envelope — as opposed to a hand-authored schema that replaces the envelope
+ * entirely. The output-field reader rewrites only the former into the stored
+ * cell shape (`sources` in, `citations` out); the latter is used verbatim.
+ */
+export declare function isResearchEnvelopeSchema(schema: unknown): boolean;
+/**
+ * The model-facing schema for a research column whose ANSWER is a typed object
+ * (a catalog template such as a pricing summary): the same
+ * `{answer, found, confidence, citations}` envelope the derived contract uses,
+ * with `answer` replaced by the template's own object schema. The runner still
+ * resolves `citations` to real sources on the way to the cell, so a typed
+ * extraction cannot cite a page that was never fetched either.
+ */
+export declare function buildResearchOutputSchemaForAnswer(answerSchema: Record<string, unknown>): Record<string, unknown>;
 /**
  * The schema of the research cell as it is actually STORED — which is not the
  * schema the model answers in.
@@ -27,7 +55,11 @@ export declare function buildResearchOutputSchema(contract: ResearchOutputContra
  * `buildResearchOutputSchema` would offer `citations`, which no cell has, and
  * hide `sources`, which every cell does.
  */
-export declare function buildResearchCellSchema(contract: ResearchOutputContract | null): Record<string, unknown>;
+export declare function buildResearchCellSchema(contract: ResearchOutputContract | null, 
+/** A column's own model-facing schema (a catalog template's typed answer
+ * envelope). When given it replaces the derived one, so the cell shape of a
+ * typed extraction exposes `answer.plan_count`, not a string answer. */
+modelSchemaOverride?: Record<string, unknown> | null): Record<string, unknown>;
 /**
  * Is this research column's output schema OWNED BY THE SERVER, i.e. re-derived
  * from the prompt rather than authored by hand?

package/node_modules/@oxygen/shared/dist/research-output-contract.js

@@ -88,6 +88,64 @@ export function buildResearchOutputSchema(contract) {
         required: ["answer", "found", "confidence", "citations"],
     };
 }
+/**
+ * Whether a found answer MUST cite evidence. Shared by the write-path normalizer
+ * (which bakes it into the derived research contract), the runner (which
+ * validates the model output against it) and the output-field reader, so none
+ * of them can disagree.
+ *
+ * Explicit "strict" always requires it. A FETCH column requires it by default —
+ * the evidence is the one page the customer pointed at, so an answer that cites
+ * nothing answered from memory — unless the author chose "estimate".
+ */
+export function researchEvidenceRequired(webSearch) {
+    if (!isObject(webSearch))
+        return false;
+    if (webSearch.evidenceMode === "strict")
+        return true;
+    if (webSearch.evidenceMode === "estimate")
+        return false;
+    return webSearch.source === "fetch";
+}
+/**
+ * True for a model-facing schema in the research envelope shape — the derived
+ * contract, the legacy broad schema, or a catalog template's typed answer
+ * envelope — as opposed to a hand-authored schema that replaces the envelope
+ * entirely. The output-field reader rewrites only the former into the stored
+ * cell shape (`sources` in, `citations` out); the latter is used verbatim.
+ */
+export function isResearchEnvelopeSchema(schema) {
+    if (!isObject(schema) || schema.type !== "object")
+        return false;
+    const properties = isObject(schema.properties) ? schema.properties : null;
+    if (!properties)
+        return false;
+    return ["answer", "found", "confidence", "citations"].every((key) => isObject(properties[key]));
+}
+/**
+ * The model-facing schema for a research column whose ANSWER is a typed object
+ * (a catalog template such as a pricing summary): the same
+ * `{answer, found, confidence, citations}` envelope the derived contract uses,
+ * with `answer` replaced by the template's own object schema. The runner still
+ * resolves `citations` to real sources on the way to the cell, so a typed
+ * extraction cannot cite a page that was never fetched either.
+ */
+export function buildResearchOutputSchemaForAnswer(answerSchema) {
+    const envelope = buildResearchOutputSchema(null);
+    const properties = isObject(envelope.properties) ? { ...envelope.properties } : {};
+    return {
+        ...envelope,
+        properties: {
+            ...properties,
+            answer: {
+                ...answerSchema,
+                description: typeof answerSchema.description === "string"
+                    ? answerSchema.description
+                    : "The typed answer read from the evidence; unsupported fields are null or empty.",
+            },
+        },
+    };
+}
 /**
  * The schema of the research cell as it is actually STORED — which is not the
  * schema the model answers in.
@@ -101,8 +159,12 @@ export function buildResearchOutputSchema(contract) {
  * `buildResearchOutputSchema` would offer `citations`, which no cell has, and
  * hide `sources`, which every cell does.
  */
-export function buildResearchCellSchema(contract) {
-    const modelSchema = buildResearchOutputSchema(contract);
+export function buildResearchCellSchema(contract, 
+/** A column's own model-facing schema (a catalog template's typed answer
+ * envelope). When given it replaces the derived one, so the cell shape of a
+ * typed extraction exposes `answer.plan_count`, not a string answer. */
+modelSchemaOverride) {
+    const modelSchema = modelSchemaOverride ?? buildResearchOutputSchema(contract);
     const properties = isObject(modelSchema.properties) ? { ...modelSchema.properties } : {};
     delete properties.citations;
     return {

package/node_modules/@oxygen/shared/dist/sequence-crm-events.d.ts

@@ -287,5 +287,5 @@ export declare const SEQUENCE_HUBSPOT_EVENT_SYNC_TEMPLATE_ID = "sequencer-hubspo
 export declare const SEQUENCE_WORKFLOW_EVENT_SOURCE = "sequencer";
 export declare const SEQUENCE_CONTACT_ACTIVITY_EVENT = "contact_activity";
 export declare const SEQUENCE_HUBSPOT_LINKEDIN_IDENTITY_PROPERTY = "oxygen_linkedin_url";
-export declare const DEFAULT_SEQUENCE_HUBSPOT_EVENT_MAPPINGS: Readonly<Record<"email_sent" | "meeting_booked" | "email_bounced" | "linkedin_profile_visited" | "linkedin_connection_sent" | "linkedin_connection_accepted" | "linkedin_message_sent" | "linkedin_inmail_sent" | "linkedin_reply_received" | "linkedin_followed" | "linkedin_post_liked" | "linkedin_post_commented" | "linkedin_connection_withdrawn" | "email_campaign_enrolled" | "email_campaign_moved" | "email_campaign_stopped" | "email_opened" | "email_clicked" | "email_reply_received" | "email_unsubscribed" | "email_spam_complaint" | "whatsapp_message_sent" | "whatsapp_reply_received" | "call_task_created" | "call_connected" | "call_no_answer" | "call_voicemail" | "crm_task_created", string>>;
+export declare const DEFAULT_SEQUENCE_HUBSPOT_EVENT_MAPPINGS: Readonly<Record<"call_connected" | "call_no_answer" | "call_task_created" | "call_voicemail" | "crm_task_created" | "email_bounced" | "email_campaign_enrolled" | "email_campaign_moved" | "email_campaign_stopped" | "email_clicked" | "email_opened" | "email_reply_received" | "email_sent" | "email_spam_complaint" | "email_unsubscribed" | "linkedin_connection_accepted" | "linkedin_connection_sent" | "linkedin_connection_withdrawn" | "linkedin_followed" | "linkedin_inmail_sent" | "linkedin_message_sent" | "linkedin_post_commented" | "linkedin_post_liked" | "linkedin_profile_visited" | "linkedin_reply_received" | "meeting_booked" | "whatsapp_message_sent" | "whatsapp_reply_received", string>>;
 export declare function isSequenceCrmEventKey(value: unknown): value is SequenceCrmEventKey;

package/node_modules/@oxygen/shared/dist/sequence-hubspot-sync.d.ts

@@ -17,7 +17,7 @@ export declare const HUBSPOT_DEFAULT_LEAD_STATUS_PROPERTY = "hs_lead_status";
 export declare const DEFAULT_HUBSPOT_SEQUENCE_TIMELINE_EVENTS: readonly ["email_sent", "email_reply_received", "email_bounced", "linkedin_message_sent", "linkedin_inmail_sent", "linkedin_reply_received"];
 /** Events for which the HubSpot adapter has a first-class activity object. */
 export declare const HUBSPOT_SEQUENCE_TIMELINE_EVENT_KEYS: readonly ["email_sent", "email_reply_received", "email_bounced", "linkedin_message_sent", "linkedin_inmail_sent", "linkedin_reply_received"];
-export declare const HUBSPOT_CLASSIFIED_REPLY_TIMELINE_EVENTS: Set<"email_sent" | "meeting_booked" | "email_bounced" | "linkedin_profile_visited" | "linkedin_connection_sent" | "linkedin_connection_accepted" | "linkedin_message_sent" | "linkedin_inmail_sent" | "linkedin_reply_received" | "linkedin_followed" | "linkedin_post_liked" | "linkedin_post_commented" | "linkedin_connection_withdrawn" | "email_campaign_enrolled" | "email_campaign_moved" | "email_campaign_stopped" | "email_opened" | "email_clicked" | "email_reply_received" | "email_unsubscribed" | "email_spam_complaint" | "whatsapp_message_sent" | "whatsapp_reply_received" | "call_task_created" | "call_connected" | "call_no_answer" | "call_voicemail" | "crm_task_created">;
+export declare const HUBSPOT_CLASSIFIED_REPLY_TIMELINE_EVENTS: Set<"call_connected" | "call_no_answer" | "call_task_created" | "call_voicemail" | "crm_task_created" | "email_bounced" | "email_campaign_enrolled" | "email_campaign_moved" | "email_campaign_stopped" | "email_clicked" | "email_opened" | "email_reply_received" | "email_sent" | "email_spam_complaint" | "email_unsubscribed" | "linkedin_connection_accepted" | "linkedin_connection_sent" | "linkedin_connection_withdrawn" | "linkedin_followed" | "linkedin_inmail_sent" | "linkedin_message_sent" | "linkedin_post_commented" | "linkedin_post_liked" | "linkedin_profile_visited" | "linkedin_reply_received" | "meeting_booked" | "whatsapp_message_sent" | "whatsapp_reply_received">;
 export type HubSpotSequenceSyncConfig = {
     /** Optional latest-occurrence snapshots on HubSpot contact properties. */
     mappings: Record<SequenceCrmEventKey, string>;

package/node_modules/@oxygen/shared/dist/sequences.d.ts

@@ -919,9 +919,28 @@ export type SequenceLintIssue = {
     path: string;
     message: string;
 };
+/**
+ * A non-blocking fact about how a definition was normalized that its author must
+ * be told, as opposed to an issue that rejects it. Today exactly one:
+ * `email_reply_rewritten`. The retired kind is accepted and rewritten into a
+ * subject-less `email_send`, and a caller that only reads the stored definition
+ * back sees a different `kind` than it wrote with nothing in the response to
+ * explain it — reported as a silent coercion by a customer (Plain T-163).
+ */
+export type SequenceDefinitionNotice = {
+    path: string;
+    code: "email_reply_rewritten";
+    message: string;
+};
 export type ValidateSequenceOptions = {
     /** When provided, every channel-bearing step must use one of these channels. */
     allowedChannels?: SequenceChannel[];
+    /**
+     * Sink for non-blocking normalization notices (see SequenceDefinitionNotice).
+     * Validation never throws for these; a caller that wants to surface them to
+     * the author passes an array and reads it back after the call.
+     */
+    notices?: SequenceDefinitionNotice[];
     /**
      * Whether this sequence has NATIVE open/click tracking enabled (a verified
      * tracking domain + EMAIL_TRACKING_SECRET, so the dispatcher injects a pixel +
@@ -980,6 +999,13 @@ export declare function sequenceStepsMissingCopy(steps: readonly SequenceStep[])
  */
 export declare function validateSequenceDefinition(input: unknown, options?: ValidateSequenceOptions): SequenceDefinition;
 /** Non-throwing variant for lint surfaces. */
+/**
+ * The non-blocking notices normalizing this definition would raise, for a
+ * response `warnings` array. Never throws: an invalid definition yields whatever
+ * notices were collected before validation gave up (the caller's own validate
+ * call reports the failure), so this is safe to run beside a persist.
+ */
+export declare function sequenceDefinitionNotices(input: unknown, options?: Omit<ValidateSequenceOptions, "notices">): SequenceDefinitionNotice[];
 export declare function lintSequenceDefinition(input: unknown, options?: ValidateSequenceOptions): SequenceLintIssue[];
 /** Total base delay in milliseconds a wait step introduces (no jitter). */
 export declare function sequenceWaitStepDelayMs(step: SequenceWaitStep): number;

package/node_modules/@oxygen/shared/dist/sequences.js

@@ -1176,6 +1176,22 @@ export function validateSequenceDefinition(input, options = {}) {
     return { steps: normalized };
 }
 /** Non-throwing variant for lint surfaces. */
+/**
+ * The non-blocking notices normalizing this definition would raise, for a
+ * response `warnings` array. Never throws: an invalid definition yields whatever
+ * notices were collected before validation gave up (the caller's own validate
+ * call reports the failure), so this is safe to run beside a persist.
+ */
+export function sequenceDefinitionNotices(input, options = {}) {
+    const notices = [];
+    try {
+        validateSequenceDefinition(input, { ...options, notices });
+    }
+    catch {
+        // Reported by the caller's own validation; the notices gathered so far stand.
+    }
+    return notices;
+}
 export function lintSequenceDefinition(input, options = {}) {
     try {
         validateSequenceDefinition(input, options);
@@ -1378,6 +1394,14 @@ raw, index, options, issues) {
             const cc = optionalEmailList(raw.cc, `${path}.cc`, issues);
             const bcc = optionalEmailList(raw.bcc, `${path}.bcc`, issues);
             const sendWindow = normalizeSendWindow(raw.send_window, `${path}.send_window`, issues);
+            // Say so. The rewrite is deliberate compatibility, but a definition read back
+            // with a different `kind` than was written, and nothing in the response to
+            // explain it, reads as data loss to the author.
+            options.notices?.push({
+                path: `${path}.kind`,
+                code: "email_reply_rewritten",
+                message: `step '${id}': kind 'email_reply' is retired and was stored as 'email_send' with no subject_template — the threaded follow-up. It goes out as "Re: <the previous email's subject>" inside the lead's previous thread; give it a subject_template of its own to start a new email instead.`,
+            });
             return {
                 id, channel: "email", kind: "email_send", body_template: body ?? "",
                 ...(bodyHtml !== undefined ? { body_html_template: bodyHtml } : {}),

package/node_modules/@oxygen/shared/dist/version.js

@@ -1,6 +1,6 @@
 // Release metadata is a string API: a new version must not change the exported
 // declaration type and invalidate every dependent package's compiler state.
-export const OXYGEN_VERSION = "1.982.3";
+export const OXYGEN_VERSION = "1.987.20";
 // The GLOBAL CLI compatibility floor: the oldest CLI allowed to call any
 // operational route. Raising it hard-rejects every older CLI from the entire
 // product, so it obeys one law, enforced by scripts/ci/cli-min-version-gate.mjs:

package/node_modules/@oxygen/shared/package.json

@@ -176,6 +176,16 @@
       "import": "./dist/copilot-journeys.js",
       "default": "./dist/copilot-journeys.js"
     },
+    "./copilot-playbooks": {
+      "types": "./dist/copilot-playbooks.d.ts",
+      "import": "./dist/copilot-playbooks.js",
+      "default": "./dist/copilot-playbooks.js"
+    },
+    "./copilot-skills": {
+      "types": "./dist/copilot-skills.d.ts",
+      "import": "./dist/copilot-skills.js",
+      "default": "./dist/copilot-skills.js"
+    },
     "./hosted-ai": {
       "types": "./dist/hosted-ai.d.ts",
       "import": "./dist/hosted-ai.js",

package/node_modules/@oxygen/workflows/dist/graph/manifest-schema.d.ts

@@ -22,11 +22,10 @@ export declare const workflowCodeV1Schema: {
             readonly type: "object";
             readonly maxProperties: 100;
             readonly additionalProperties: {
+                readonly type: "object";
+                readonly required: readonly ["type"];
                 readonly description: "One explicit oxygen-js-v1 input binding. Knowledge context refs are excluded in Code v1; bind trigger, step, loop, literal, template, or formula data explicitly.";
                 readonly properties: {
-                    readonly type: {
-                        readonly enum: readonly ["literal", "template", "ref", "formula"];
-                    };
                     readonly value: {
                         readonly description: "literal: used verbatim. template: interpolated string, e.g. 'Hi {{ steps.find.output.first_name }}'.";
                     };
@@ -46,9 +45,10 @@ export declare const workflowCodeV1Schema: {
                         readonly type: "string";
                         readonly description: "context_asset: the Knowledge-layer asset id.";
                     };
+                    readonly type: {
+                        readonly enum: readonly ["literal", "template", "ref", "formula"];
+                    };
                 };
-                readonly type: "object";
-                readonly required: readonly ["type"];
             };
             readonly default: {};
         };
@@ -680,11 +680,10 @@ export declare const workflowGraphManifestSchema: {
                                 readonly type: "object";
                                 readonly maxProperties: 100;
                                 readonly additionalProperties: {
+                                    readonly type: "object";
+                                    readonly required: readonly ["type"];
                                     readonly description: "One explicit oxygen-js-v1 input binding. Knowledge context refs are excluded in Code v1; bind trigger, step, loop, literal, template, or formula data explicitly.";
                                     readonly properties: {
-                                        readonly type: {
-                                            readonly enum: readonly ["literal", "template", "ref", "formula"];
-                                        };
                                         readonly value: {
                                             readonly description: "literal: used verbatim. template: interpolated string, e.g. 'Hi {{ steps.find.output.first_name }}'.";
                                         };
@@ -704,9 +703,10 @@ export declare const workflowGraphManifestSchema: {
                                             readonly type: "string";
                                             readonly description: "context_asset: the Knowledge-layer asset id.";
                                         };
+                                        readonly type: {
+                                            readonly enum: readonly ["literal", "template", "ref", "formula"];
+                                        };
                                     };
-                                    readonly type: "object";
-                                    readonly required: readonly ["type"];
                                 };
                                 readonly default: {};
                             };
@@ -1470,11 +1470,10 @@ export declare const portableWorkflowDefinitionSchema: {
                                         readonly type: "object";
                                         readonly maxProperties: 100;
                                         readonly additionalProperties: {
+                                            readonly type: "object";
+                                            readonly required: readonly ["type"];
                                             readonly description: "One explicit oxygen-js-v1 input binding. Knowledge context refs are excluded in Code v1; bind trigger, step, loop, literal, template, or formula data explicitly.";
                                             readonly properties: {
-                                                readonly type: {
-                                                    readonly enum: readonly ["literal", "template", "ref", "formula"];
-                                                };
                                                 readonly value: {
                                                     readonly description: "literal: used verbatim. template: interpolated string, e.g. 'Hi {{ steps.find.output.first_name }}'.";
                                                 };
@@ -1494,9 +1493,10 @@ export declare const portableWorkflowDefinitionSchema: {
                                                     readonly type: "string";
                                                     readonly description: "context_asset: the Knowledge-layer asset id.";
                                                 };
+                                                readonly type: {
+                                                    readonly enum: readonly ["literal", "template", "ref", "formula"];
+                                                };
                                             };
-                                            readonly type: "object";
-                                            readonly required: readonly ["type"];
                                         };
                                         readonly default: {};
                                     };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oxygen-agent/cli",
-  "version": "1.982.3",
+  "version": "1.987.20",
   "private": false,
   "license": "UNLICENSED",
   "type": "module",
@@ -38,18 +38,21 @@
     "@langfuse/otel": "^5.11.0",
     "@langfuse/tracing": "^5.11.0",
     "@opentelemetry/api": "1.9.1",
+    "@opentelemetry/resources": "2.10.0",
     "@opentelemetry/sdk-trace-base": "2.10.0",
     "commander": "14.0.3",
     "esbuild": "0.27.7",
     "read-excel-file": "6.0.3",
-    "typescript": "6.0.3",
+    "typescript": "npm:@typescript/typescript6@6.0.2",
     "yaml": "2.9.0",
+    "@oxygen/cli-ugc": "0.0.0",
     "@oxygen/formula": "0.0.0",
     "@oxygen/recipe-sdk": "0.0.0",
     "@oxygen/shared": "0.0.0",
     "@oxygen/workflows": "0.0.0"
   },
   "bundledDependencies": [
+    "@oxygen/cli-ugc",
     "@oxygen/formula",
     "@oxygen/recipe-sdk",
     "@oxygen/shared",