@oxygen-agent/cli 1.987.20 → 1.1010.1

package/node_modules/@oxygen/shared/dist/capability-discovery.js

@@ -1,3 +1,4 @@
+import { findEnrichmentIntentByAlias } from "./enrichment-intents.js";
 import { RECIPE_PRIMITIVES } from "./recipes.js";
 // One compact semantic index covers every top-level /api/cli endpoint section.
 // It is navigation, never execution: live schemas, prices, readiness, and
@@ -194,15 +195,18 @@ export const OXYGEN_CAPABILITY_ROUTES = [
         id: "records",
         layer: "Data",
         primitive: "records",
-        owns: "Canonical companies, people, deals, identities, relationships, activities, merges, and CRM sync state.",
+        owns: "Canonical companies, people, deals, identities, relationships, activities, notes, tasks (reminders), files, merges, and CRM sync state.",
         notFor: "Disposable sourcing, enrichment, or scoring work; use Tables before promotion.",
-        execution: "Operate the hosted native CRM and preserve field/relationship provenance.",
+        execution: "Operate the hosted native CRM and preserve field/relationship provenance. Importing FROM a connected CRM lands here via `crm sync import <provider> --object contacts|companies`, which pulls the whole object and has no list/segment filter. To import ONE HubSpot saved list or ONE Pipedrive saved filter into a new table the user can filter and enrich — optionally suppressing a do-not-contact list/filter first — use `tables hubspot import` or `tables pipedrive import` instead. Open work across the workspace is one read: `crm tasks list`.",
         posture: "workspace_write",
         gatewayTools: ["oxygen_crm_record_search", "oxygen_crm_record_get"],
-        gatewayCommands: ["crm search", "crm get", "crm describe"],
+        gatewayCommands: ["crm search", "crm get", "crm describe", "crm tasks list", "crm notes list"],
         skills: ["oxygen-gtm"],
         endpointSections: ["crm"],
-        intentTerms: ["record", "records", "crm", "company record", "contact", "person record", "deal", "timeline", "merge", "relationship"],
+        // "reminder"/"to-do"/"open tasks" routed to workspace-access before these
+        // terms existed (blind acceptance, 2026-09-22): the customer's phrasing for
+        // the Tasks read has to land on the primitive that owns it.
+        intentTerms: ["record", "records", "crm", "company record", "contact", "person record", "deal", "timeline", "merge", "relationship", "note", "notes", "task", "tasks", "reminder", "reminders", "to-do", "open tasks", "follow-up", "attachment", "files on a record"],
     },
     {
         id: "tables",
@@ -210,10 +214,10 @@ export const OXYGEN_CAPABILITY_ROUTES = [
         primitive: "tables",
         owns: "Typed working datasets, rows, formulas, AI/tool/waterfall columns, reusable Functions with isolated drafts and published versions, cell state, projects, and run provenance.",
         notFor: "Canonical CRM truth, message cadence, or an off-platform spreadsheet runtime.",
-        execution: "Create and run work in hosted OXYGEN Tables; validate a small sample before bounded paid runs. For standard person or company enrichment, `columns add <table> --preset person_enrich|company_enrich` (MCP oxygen_columns_add with preset) adds the maintained bundle in one call before any hand-built tool column. Person questions over that bundle's profile payload (skill set, grad school, location, job fit, current company) and person appearance research (events, keynotes, podcasts, GitHub profile) are `columns catalog --category people` templates, added with `columns add <table> --prompt-key <key> --input <name>=<column>`. For a company fact OXYGEN already knows how to research (founders, parent company, funding, cloud provider, offers demos, industry, NAICS, HQ, LinkedIn/Crunchbase page lookups) or a page extraction, `columns catalog` lists the ready-made template and `columns add <table> --prompt-key <key> --input <name>=<column>` (MCP oxygen_columns_add with prompt_key) adds it with no prompt to write.",
+        execution: "Create and run work in hosted OXYGEN Tables; validate a small sample before bounded paid runs. To see what a table's own columns can be enriched with and what each costs per row before adding anything, run `tools search --for-table <table>` (MCP oxygen_tools_search with for_table): free, it returns priced suggestions with the exact add command. For standard person or company enrichment, `columns add <table> --preset person_enrich|company_enrich` (MCP oxygen_columns_add with preset) adds the maintained bundle in one call before any hand-built tool column. Person questions over that bundle's profile payload (skill set, grad school, location, job fit, current company) and person appearance research (events, keynotes, podcasts, GitHub profile) are `columns catalog --category people` templates, added with `columns add <table> --prompt-key <key> --input <name>=<column>`. For a company fact OXYGEN already knows how to research (founders, parent company, funding, cloud provider, offers demos, industry, NAICS, HQ, LinkedIn/Crunchbase page lookups) or a page extraction, `columns catalog` lists the ready-made template and `columns add <table> --prompt-key <key> --input <name>=<column>` (MCP oxygen_columns_add with prompt_key) adds it with no prompt to write.",
         posture: "mixed",
-        gatewayTools: ["oxygen_tables_create", "oxygen_columns_add", "oxygen_columns_catalog", "oxygen_enrich_column_preview", "oxygen_tables_link_bulk", "oxygen_callables_manage"],
-        gatewayCommands: ["tables create", "columns add", "columns catalog", "enrich-column preview", "tables link", "functions list", "functions draft"],
+        gatewayTools: ["oxygen_tables_create", "oxygen_tools_search", "oxygen_columns_add", "oxygen_columns_catalog", "oxygen_enrich_column_preview", "oxygen_tables_link_bulk", "oxygen_callables_manage"],
+        gatewayCommands: ["tables create", "tools search", "columns add", "columns catalog", "enrich-column preview", "tables link", "functions list", "functions draft"],
         skills: ["oxygen-gtm", "oxygen-table-tidy", "oxygen-diagnostics", "oxygen-clay-migration", "oxygen-linkedin-marketing"],
         endpointSections: ["action-columns", "callables", "functions", "columns", "company-enrichment", "enrich-column", "enrichment", "projects", "supabase", "table-action-items", "table-action-runs", "table-ingestion-runs", "tables"],
         // "link"/"join"/"connect"/"relate" route here for `tables link`. Added after a
@@ -221,12 +225,19 @@ export const OXYGEN_CAPABILITY_ROUTES = [
         // `tables create` / `columns add` / `enrich-column preview` — none of which
         // do it. The agent only found the right command by grepping the raw 25k-line
         // command manifest, which is not a discovery path a customer has.
+        // "hubspot list" / "saved segment" / "list import" route here for
+        // `tables hubspot import`. Added after the 2026-09-21 blind ACCEPTANCE run:
+        // the capability shipped that same day, the agent searched "import hubspot
+        // contacts", was routed to `records`, read `crm sync import --help`, found
+        // no --list flag, and reported segment-scoped import as a MISSING native
+        // capability. The records execution text now names the table lane too,
+        // because that is where this phrasing legitimately lands.
         // "founders" / "parent company" / "cloud provider" / "company research" route
         // here for `columns catalog`. Added after the 2026-09-16 blind baseline asked
         // `capabilities search "founders of a company"` and got `route: null` with a
         // generic sourcing pointer, then hand-wrote four research prompts for
         // questions the template catalog now answers by key.
-        intentTerms: ["table", "spreadsheet", "rows", "column", "columns", "dataset", "csv", "import", "enrich", "enrichment", "waterfall", "score", "formula", "ai column", "lookup", "link", "link tables", "join", "connect", "relate", "relationship", "function", "functions", "reusable function", "function draft", "function version", "callable", "column template", "skill set", "grad school", "podcast appearance", "keynote", "github profile", "job fit", "founders", "parent company", "subsidiaries", "cloud provider", "company research", "research question", "research column", "web research", "template catalog", "ready-made", "offers demos", "naics"],
+        intentTerms: ["table", "spreadsheet", "rows", "column", "columns", "dataset", "csv", "import", "hubspot list", "hubspot segment", "pipedrive filter", "pipedrive", "saved list", "saved segment", "saved filter", "crm segment", "list import", "segment import", "filter import", "import a segment", "import a list", "import a filter", "enrich", "enrichment", "waterfall", "score", "formula", "ai column", "lookup", "link", "link tables", "join", "connect", "relate", "relationship", "function", "functions", "reusable function", "function draft", "function version", "callable", "column template", "skill set", "grad school", "podcast appearance", "keynote", "github profile", "job fit", "founders", "parent company", "subsidiaries", "cloud provider", "company research", "research question", "research column", "web research", "template catalog", "ready-made", "offers demos", "naics", "cost per row", "price per row", "what can i enrich", "enrichment cost", "credits per row"],
     },
     {
         id: "messages",
@@ -274,15 +285,26 @@ export const OXYGEN_CAPABILITY_ROUTES = [
         id: "dashboards",
         layer: "Data",
         primitive: "dashboards",
-        owns: "Curated funnel, channel, spend, and needs-action reporting over native state.",
-        notFor: "Arbitrary BI modeling or a separate analytics store.",
-        execution: "Compute hosted curated views over Records, Messages, Signals, Sequences, and runs.",
-        posture: "read_only",
-        gatewayTools: ["oxygen_dashboard_summary"],
-        gatewayCommands: ["dashboards summary"],
+        owns: "The curated funnel, channel, spend and needs-action reporting, PLUS the workspace's own saved dashboards: named pages of chart / view / iframe / rich-text / code / live-source widgets over tables and CRM objects.",
+        notFor: "Arbitrary BI modeling or a separate analytics store. Outreach volume and replies are not chartable yet — group a table or a CRM object, or read the curated funnel with `dashboards summary`.",
+        execution: "Compute hosted curated views over Records, Messages, Signals, Sequences and runs; store and serve user-defined dashboards from ox_dashboards.",
+        // Was `read_only` until v1.1002.0, which is when a workspace could first SAVE a
+        // dashboard. A blind user eval (2026-09-21) caught the drift the expensive way:
+        // the agent asked this router for "dashboard", was told read_only and
+        // "not for BI modeling", and only found the eight mutating commands by
+        // separately searching the command index. This record is step 4 of the CLI's
+        // own quickstart, so a stale posture here routes users away from what shipped.
+        // `mixed`, not workspace_write: this capability now spans a read (summary,
+        // widget data), a workspace write (dashboards, tabs, widgets) AND one
+        // external-reach spending call (a live_source refresh calls its bound
+        // provider). "read_write" is not a member of CapabilityPosture -- inventing
+        // it is what broke the shared build on the first attempt.
+        posture: "mixed",
+        gatewayTools: ["oxygen_dashboard_summary", "oxygen_dashboards_list", "oxygen_dashboards_create", "oxygen_dashboards_widget_kinds", "oxygen_dashboards_widget_add", "oxygen_dashboards_widget_data"],
+        gatewayCommands: ["dashboards summary", "dashboards list", "dashboards create", "dashboards widgets kinds", "dashboards widgets add", "dashboards widgets data"],
         skills: ["oxygen-gtm"],
         endpointSections: ["dashboards"],
-        intentTerms: ["dashboard", "report", "reporting", "funnel", "metrics", "kpi", "performance", "pipeline summary"],
+        intentTerms: ["dashboard", "report", "reporting", "funnel", "metrics", "kpi", "performance", "pipeline summary", "save", "saved dashboard", "custom dashboard", "widget", "chart", "weekly report", "monday", "come back to"],
     },
     {
         id: "ads",
@@ -318,10 +340,15 @@ export const OXYGEN_CAPABILITY_ROUTES = [
         primitive: "sequences",
         owns: "Net-new LinkedIn outreach plus versioned multichannel programs, cadence, enrollment, sender limits, suppression, reply-stop, and dispatch.",
         notFor: "A reply in an existing conversation or a direct one-off email; use Messages. Not for general deterministic automation.",
-        execution: "Use the one-step gateway for new LinkedIn initiation or create/enroll/start a hosted campaign with bounded send authority.",
+        // The external-campaign sentence exists because a 2026-09-16 blind user asked
+        // to "push table rows to smartlead campaign", landed here, read the native
+        // email track's "Only 'instantly' is supported" and concluded Smartlead was
+        // unreachable. The governed path for a campaign the customer already runs
+        // elsewhere is `sequences push-external`; it is not a Sequence.
+        execution: "Use the one-step gateway for new LinkedIn initiation or create/enroll/start a hosted campaign with bounded send authority. To push table rows into an existing Smartlead, Instantly, lemlist or HeyReach campaign you already run, use `sequences push-external` (dry_run preview, then --approved); the native email track of a Sequence stays Instantly-bound.",
         posture: "external_write",
-        gatewayTools: ["oxygen_sequences_send", "oxygen_sequences_create", "oxygen_sequences_enroll", "oxygen_sequences_start", "oxygen_sequences_list"],
-        gatewayCommands: ["sequences send", "sequences create", "sequences enroll", "sequences start", "sequences list"],
+        gatewayTools: ["oxygen_sequences_send", "oxygen_sequences_create", "oxygen_sequences_enroll", "oxygen_sequences_start", "oxygen_sequences_list", "oxygen_sequences_push_external"],
+        gatewayCommands: ["sequences send", "sequences create", "sequences enroll", "sequences start", "sequences list", "sequences push-external"],
         skills: ["oxygen-sequencer"],
         endpointSections: ["senders", "sequencer", "sequences", "spintax", "suppressions", "voice"],
         // "sender identity", "sender profile" and "phone number" are here because a
@@ -329,7 +356,7 @@ export const OXYGEN_CAPABILITY_ROUTES = [
         // to workspace-access — "identity" matched the AUTH sense. The nouns a user
         // reaches for when naming a sending identity or the dialing pool have to land
         // on the group that actually owns `senders profiles` and `voice numbers`.
-        intentTerms: ["sequence", "campaign", "cadence", "enroll", "outreach", "linkedin message", "linkedin dm", "nurture", "follow up", "sender rotation", "stop on reply", "sender identity", "sending identity", "sender profile", "phone number", "dialing", "dialer", "call", "cold call"],
+        intentTerms: ["sequence", "campaign", "cadence", "enroll", "outreach", "linkedin message", "linkedin dm", "nurture", "follow up", "sender rotation", "stop on reply", "sender identity", "sending identity", "sender profile", "phone number", "dialing", "dialer", "call", "cold call", "smartlead", "instantly", "lemlist", "heyreach", "external sequencer", "push to campaign", "push rows to campaign", "add leads to campaign"],
     },
     {
         id: "publishing",
@@ -346,7 +373,7 @@ export const OXYGEN_CAPABILITY_ROUTES = [
         // "remove program" / "delete program" landed on route: null in a blind eval
         // (2026-09-10); a program is a UGC noun here, and its lifecycle verbs must
         // resolve to the group that owns `ugc programs archive|delete|duplicate`.
-        intentTerms: ["publish", "publishing", "schedule post", "content calendar", "posting calendar", "approve post", "social publishing", "ugc", "creator program", "user generated content", "creator voice", "sponsored creator", "ugc program", "archive program", "delete program", "remove program", "duplicate program", "copy program"],
+        intentTerms: ["publish", "publishing", "schedule post", "content calendar", "posting calendar", "approve post", "social publishing", "video cover", "video thumbnail", "cover image", "post preview", "ugc", "creator program", "user generated content", "creator voice", "sponsored creator", "ugc program", "archive program", "delete program", "remove program", "duplicate program", "copy program"],
     },
     {
         id: "workflows",
@@ -402,7 +429,7 @@ export const OXYGEN_CAPABILITY_ROUTES = [
         gatewayCommands: ["search plan", "sourcing plan", "find company", "tools search"],
         skills: ["oxygen-gtm"],
         endpointSections: ["companies", "find", "lead-sourcing", "people", "search", "sourcing", "tools", "verify"],
-        intentTerms: ["find companies", "find people", "source leads", "build a list", "tam", "prospect", "provider", "tool catalog", "find email", "find phone"],
+        intentTerms: ["find companies", "find people", "source leads", "build a list", "tam", "prospect", "provider", "tool catalog", "find email", "find phone", "local businesses", "local business", "google maps", "storefronts"],
     },
     {
         id: "linkedin-public-research",
@@ -470,15 +497,15 @@ export const OXYGEN_CAPABILITY_ROUTES = [
         id: "connected-linkedin",
         layer: "External",
         primitive: null,
-        owns: "The workspace LinkedIn account network/private data, relationship context such as mutual connections, and connected-account writes used by Signals, Messages, Sequences, and Publishing.",
+        owns: "The workspace LinkedIn account network/private data — everyone you are connected to and everyone who follows you, captured into one self-refreshing 'LinkedIn Network' table — relationship context such as mutual connections, and connected-account writes used by Signals, Messages, Sequences, and Publishing.",
         notFor: "Ordinary public or third-party LinkedIn research; use the cookieless native scraper.",
-        execution: "For mutual/shared connection counts, resolve the connected account with `oxygen senders list --json`, inspect `oxygen tools get linkedin.users_get --json`, then run `oxygen tools run linkedin.users_get --input-json '{\"identifier\":\"<profile-url>\",\"account_id\":\"<connected-account-id>\",\"notify\":false}' --mode live --json`. This read is non-notifying and no-bill. An unavailable count is explicit and never means zero; retrying the same account/profile pair is not expected to reveal a provider-hidden count. Otherwise use the owning primitive gateway; the connected account provides identity and transport, not a competing product runtime.",
+        execution: "To put your own network in a table — connections and followers, one row per person with a Relationship column, kept current in the background — run `oxygen linkedin network setup --json` (add --account <ref> for one account; `oxygen linkedin network status` reports the pace and each account's state, `oxygen linkedin network pause` switches it off). Open connection requests — received and sent, on every connected account, in one table that marks each one accepted or no_longer_pending when it disappears — are `oxygen linkedin invitations setup --json` (`status` and `pause` beside it). Profile viewers are the same per account: `oxygen viewers import --account <ref>` switches one on, `oxygen viewers pause --account <ref>` off, and `oxygen viewers status` lists every account's state and `viewed_account` (whose profile each person viewed). `oxygen viewers enrichment --on` enriches each NEW viewer's full profile automatically at the per-person price `viewers status` quotes (existing viewers never). It is free, read-only on the account, and paced under its own daily read budget. For mutual/shared connection counts, resolve the connected account with `oxygen senders list --json`, inspect `oxygen tools get linkedin.users_get --json`, then run `oxygen tools run linkedin.users_get --input-json '{\"identifier\":\"<profile-url>\",\"account_id\":\"<connected-account-id>\",\"notify\":false}' --mode live --json`. This read is non-notifying and no-bill. An unavailable count is explicit and never means zero; retrying the same account/profile pair is not expected to reveal a provider-hidden count. Otherwise use the owning primitive gateway; the connected account provides identity and transport, not a competing product runtime.",
         posture: "mixed",
-        gatewayTools: ["oxygen_senders_list", "oxygen_linkedin_connections_import", "oxygen_inbox_list"],
-        gatewayCommands: ["senders list", "connections import", "inbox list"],
+        gatewayTools: ["oxygen_linkedin_network_setup", "oxygen_linkedin_invitations_setup", "oxygen_senders_list", "oxygen_linkedin_connections_import", "oxygen_inbox_list"],
+        gatewayCommands: ["linkedin network setup", "linkedin invitations setup", "senders list", "connections import", "inbox list"],
         skills: ["oxygen-linkedin-marketing", "oxygen-sequencer", "oxygen-unibox"],
         endpointSections: ["linkedin"],
-        intentTerms: ["my linkedin", "our linkedin", "own linkedin", "connected linkedin", "connections", "mutual connections", "shared connections", "connections in common", "followers", "profile viewers", "sales navigator", "recruiter", "linkedin inbox"],
+        intentTerms: ["my linkedin", "our linkedin", "own linkedin", "connected linkedin", "connections", "mutual connections", "shared connections", "connections in common", "followers", "my network", "whole network", "linkedin network", "connections and followers", "profile viewers", "sales navigator", "recruiter", "linkedin inbox"],
     },
     {
         id: "connected-whatsapp",
@@ -498,6 +525,8 @@ export const OXYGEN_CAPABILITY_ROUTES = [
 export const OXYGEN_PRIMITIVE_ROUTES = OXYGEN_CAPABILITY_ROUTES
     .filter((card) => card.primitive !== null);
 const ROUTE_BY_ID = new Map(OXYGEN_CAPABILITY_ROUTES.map((card) => [card.id, card]));
+/** Cards a catalogue row may decorate: the data surfaces, never sequences/posts/billing. */
+const CATALOGUE_CARD_IDS = new Set(["tables", "sourcing-and-provider-tools", "signals"]);
 const ROUTE_BY_PRIMITIVE = new Map(OXYGEN_PRIMITIVE_ROUTES.map((card) => [card.primitive, card]));
 const NORMALIZED_PRIMITIVES = [...RECIPE_PRIMITIVES].sort();
 const NORMALIZED_ROUTE_PRIMITIVES = OXYGEN_PRIMITIVE_ROUTES.map((card) => card.primitive).sort();
@@ -523,15 +552,62 @@ export function inferCapabilityRoute(query) {
     if (!normalized)
         return null;
     const explicit = explicitCapabilityIntent(normalized);
-    const card = explicit ?? highestScoringRoute(normalized);
+    const catalogRow = findEnrichmentIntentByAlias(normalized);
+    // Card scoring stays the owner of routing; the catalogue only breaks a
+    // no-match tie ("get the funding round for these accounts" names no card
+    // term) and decorates the data cards it belongs to.
+    const card = explicit ?? highestScoringRoute(normalized) ?? (catalogRow ? cardForCatalogueIntent(catalogRow) : null);
     if (!card)
         return null;
     const recommendations = recommendationsFor(card, normalized);
+    // The card's own recommendations are a pinned contract (tool order, no
+    // exact command on plain enrichment asks); the catalogue path travels
+    // beside them in `catalogIntent`, never inside them.
+    const catalogue = catalogRow && CATALOGUE_CARD_IDS.has(card.id) ? catalogueRecommendations(catalogRow, card) : null;
     return {
         card,
         recommendedTools: recommendations.tools,
         recommendedCommands: recommendations.commands,
         ...(recommendations.exactCommand ? { exactCommand: recommendations.exactCommand } : {}),
+        ...(catalogue && catalogRow
+            ? { catalogIntent: { id: catalogRow.id, label: catalogRow.label, status: catalogRow.status, group: catalogRow.group, tools: catalogue.tools, commands: catalogue.commands, exactCommand: catalogue.exactCommand } }
+            : {}),
+    };
+}
+/**
+ * A data-type ask ("tech stack", "decision makers at each account", "funding
+ * events") owns its card by taxonomy group: person/contact/company rows are
+ * Tables columns, decision-maker rows are the sourcing tools, signal rows are
+ * the signals card when one exists.
+ */
+function cardForCatalogueIntent(row) {
+    if (row.group === "decision_maker")
+        return ROUTE_BY_ID.get("sourcing-and-provider-tools") ?? null;
+    if (row.group === "signal")
+        return ROUTE_BY_ID.get("signals") ?? ROUTE_BY_PRIMITIVE.get("signals") ?? null;
+    return ROUTE_BY_PRIMITIVE.get("tables") ?? null;
+}
+function catalogueRecommendations(row, card) {
+    const exactCommand = `oxygen enrichment catalog --intent ${row.id}`;
+    if (row.group === "decision_maker" || card.id === "sourcing-and-provider-tools") {
+        return {
+            tools: ["oxygen_enrichment_catalog", "oxygen_people_search_plan", "oxygen_people_search_run"],
+            commands: ["enrichment catalog", "people search plan", "people search run"],
+            exactCommand,
+        };
+    }
+    if (row.group === "signal") {
+        return {
+            tools: ["oxygen_enrichment_catalog", "oxygen_signals_search_plan", "oxygen_signals_search_run"],
+            commands: ["enrichment catalog", "signals search plan", "signals search run"],
+            exactCommand,
+        };
+    }
+    const find = row.surfaces.find ? [`oxygen_${row.surfaces.find.replace(/[\s-]+/g, "_")}`] : [];
+    return {
+        tools: ["oxygen_enrichment_catalog", "oxygen_columns_add", "oxygen_enrich_column_preview", ...find],
+        commands: ["enrichment catalog", "columns add", "enrich-column preview", ...(row.surfaces.find ? [row.surfaces.find] : [])],
+        exactCommand,
     };
 }
 export function inferPrimitiveRoute(query) {
@@ -556,6 +632,9 @@ export function serializeCapabilityRoute(route) {
         recommended_commands: route.recommendedCommands,
         recommended_tools: route.recommendedTools,
         ...(route.exactCommand ? { exact_command: route.exactCommand } : {}),
+        ...(route.catalogIntent
+            ? { catalog_intent: { id: route.catalogIntent.id, label: route.catalogIntent.label, status: route.catalogIntent.status, group: route.catalogIntent.group, tools: route.catalogIntent.tools, commands: route.catalogIntent.commands, exact_command: route.catalogIntent.exactCommand } }
+            : {}),
         hydrate: {
             cli: "oxygen commands get <exact-command> --json",
             mcp: "oxygen_capabilities_schema",
@@ -565,6 +644,23 @@ export function serializeCapabilityRoute(route) {
 function normalizeIntent(query) {
     return query.toLowerCase().replace(/[_-]+/g, " ").replace(/\s+/g, " ").trim();
 }
+/**
+ * "LinkedIn posts about X" / "posts mentioning Y" / "monitor LinkedIn posts by
+ * keyword" is keyword post search, a Signals source with all-of / any-of /
+ * exclude rules. A blind user eval (2026-09-23) asked exactly this and was
+ * routed to Workflows, never learning `signals search --family linkedin_posts`
+ * exists. Posts FROM named profiles stay with the Profile Watcher, and the
+ * workspace's own posts stay with Posts. The free preview leads: it shows real
+ * posts, with the AI filter applied, before a table exists.
+ */
+const LINKEDIN_KEYWORD_POST_COMMAND = 'oxygen signals search preview --family linkedin_posts --keywords "<any of>" --all-keywords "<all of>" --exclude-keywords "<none of>" --ai-filter "<posts to keep>" --json';
+function isLinkedInKeywordPostIntent(query) {
+    return /\blinkedin\b/.test(query)
+        && /\b(posts?|posting)\b/.test(query)
+        && /\b(keywords?|about|mention\w*|topics?|niche|talk\w* about|viral|trending)\b/.test(query)
+        && !/\bprofiles?\b/.test(query)
+        && !/\b(my|our) (own )?posts?\b/.test(query);
+}
 function isLinkedInProfileWatcherIntent(query) {
     return /\blinkedin\b/.test(query)
         && /\bprofiles?\b/.test(query)
@@ -572,9 +668,62 @@ function isLinkedInProfileWatcherIntent(query) {
         && (/\b(engagers?|engaging|engagement|reactions?|comments?|posts?)\b/.test(query) || /\bprofile watcher\b/.test(query))
         && !isNetNewLinkedInInitiation(query);
 }
+/**
+ * "My LinkedIn connections and followers as a table" is the connected account's
+ * own network, not a Tables question. Without this the phrase "into a table"
+ * routed a blind user to the generic Tables card, which never names
+ * `linkedin network setup` (blind eval, 2026-09-22).
+ */
+function isOwnLinkedInNetworkIntent(query) {
+    if (!/\blinkedin\b/.test(query))
+        return false;
+    if (/\b(mutual|shared|in common|public|third party|cookieless|post engagers?)\b/.test(query))
+        return false;
+    const ownNetwork = /\b(my|our|own|whole|entire|existing) (linkedin )?(network|connections|followers)\b/.test(query)
+        || /\b(everyone|everybody|people) (i am|i'm|we are|we're) connected (to|with)\b/.test(query)
+        || /\blinkedin network\b/.test(query);
+    const bothHalves = /\bconnections?\b/.test(query) && /\bfollowers?\b/.test(query);
+    return (ownNetwork || bothHalves) && !isNetNewLinkedInInitiation(query);
+}
+export const COMPANY_PAGE_FOLLOWERS_COMMAND = "oxygen tables followers check --company <linkedin company page URL> --records <n> --json";
+/**
+ * "The people who follow HubSpot on LinkedIn" / "a competitor's followers" is a
+ * vendor order of a company page's audience (`tables followers`), not the
+ * workspace's own network and not a signal. The Signals card claims the bare
+ * word "follower", so without this a blind user (2026-09-24) got only
+ * `signals *` from `commands search "company followers"` and priced the order
+ * through raw `tools run` instead. The own-network ask stays with its owner.
+ */
+function isCompanyPageFollowersIntent(query) {
+    const followers = /\bfollowers?\b/.test(query) || /\b(who|that) follows?\b/.test(query);
+    if (!followers || isOwnLinkedInNetworkIntent(query))
+        return false;
+    if (/\bfollows? (me|us)\b/.test(query) || /\b(my|our) (own )?(linkedin )?followers\b/.test(query))
+        return false;
+    return /\b(compan(y|ies)|competitors?|pages?|brands?|organi[sz]ations?)\b/.test(query)
+        || (/\blinkedin\b/.test(query) && /\bfollows? (?!me\b|us\b)[a-z0-9]/.test(query));
+}
+/**
+ * Open connection requests on the workspace's own accounts are the connected
+ * account's data. A blind user searching "pending LinkedIn connection requests"
+ * was routed nowhere near `linkedin invitations` (blind eval, 2026-09-24).
+ */
+function isOpenLinkedInRequestsIntent(query) {
+    if (!/\blinkedin\b/.test(query))
+        return false;
+    // Sending requests to leads is Sequences, not this table.
+    if (/\b(send|sending|enroll|sequence|campaign|outreach|cadence)\b/.test(query))
+        return false;
+    return /\b(connection|invitation|invite|connect) requests?\b/.test(query)
+        || /\b(pending|open|unanswered|outstanding|received|sent) (linkedin )?(invitations?|invites?)\b/.test(query);
+}
 function explicitCapabilityIntent(query) {
     if (/\b(infographic|graphic designer|render html|carousel pages|visual design|gtm flow image)\b/.test(query))
         return ROUTE_BY_ID.get("visual-rendering") ?? null;
+    if (isOwnLinkedInNetworkIntent(query) || isOpenLinkedInRequestsIntent(query))
+        return ROUTE_BY_ID.get("connected-linkedin") ?? null;
+    if (isCompanyPageFollowersIntent(query))
+        return ROUTE_BY_PRIMITIVE.get("tables") ?? null;
     // A whole-motion ask ("set up inbound-led outbound for my posts") is a
     // Recipe kit + playbook, not the connected-LinkedIn signals card that the
     // "my LinkedIn … engagers" rule below would otherwise claim. Resolve it first.
@@ -598,6 +747,21 @@ function explicitCapabilityIntent(query) {
     }
     if (isLinkedInProfileWatcherIntent(query))
         return ROUTE_BY_PRIMITIVE.get("tables") ?? null;
+    // Profile viewers exist only as a connected account's data, and their capture
+    // owns its own on/off, pause and automatic enrichment. "Automatically enrich
+    // new profile viewers" reads as workflow language, but a hand-built workflow is
+    // the wrong answer when `viewers enrichment --on` is the switch (2026-09-23
+    // enrichment baseline).
+    if (/\bprofile viewers?\b/.test(query))
+        return ROUTE_BY_ID.get("connected-linkedin") ?? null;
+    if (isLinkedInKeywordPostIntent(query))
+        return ROUTE_BY_ID.get("signals") ?? null;
+    // Ahead of the workflow rule, whose "retry" would claim it. Why a post failed and how to get it out is Publishing's attempt ledger and
+    // unlock path: the 2026-09-25 stuck-post baseline sent "publishing failed post
+    // retry outcome uncertain" to Workflows and "why did my LinkedIn post fail to
+    // publish" to the connected-account catalog.
+    if (isFailedPostIntent(query))
+        return ROUTE_BY_PRIMITIVE.get("publishing") ?? null;
     if (isHostedWorkflowIntent(query))
         return ROUTE_BY_PRIMITIVE.get("workflows") ?? null;
     if (isOwnedPostCommentIntent(query))
@@ -619,6 +783,17 @@ function explicitCapabilityIntent(query) {
     if (isMutualLinkedInConnectionsIntent(query)) {
         return ROUTE_BY_ID.get("connected-linkedin") ?? null;
     }
+    // Authoring a post's video cover or previewing a draft is Publishing work even
+    // when the ask says "LinkedIn post"; the public-read rule below otherwise sent
+    // "choose video cover frame for linkedin post" to the paid cookieless research
+    // catalog (blind acceptance run, 2026-09-24).
+    if (isPostCoverOrPreviewIntent(query))
+        return ROUTE_BY_PRIMITIVE.get("publishing") ?? null;
+    // An X thread, poll, alt text or reply control is how an X post is authored, not
+    // a conversation thread (Messages): the 2026-09-25 X-formats baseline routed
+    // "thread" to Messages and "X poll post" nowhere.
+    if (isXPostFormatIntent(query))
+        return ROUTE_BY_PRIMITIVE.get("publishing") ?? null;
     // A deferred acquisition motion starts with the public-data owner. This keeps
     // "find/qualify now, contact later" from skipping straight to the final write
     // step; the recommendation still hands the eventual initiation to Sequences.
@@ -647,6 +822,10 @@ function explicitCapabilityIntent(query) {
     // Monday verify new signups" still lands on Workflows.
     if (isEmailVerificationIntent(query))
         return ROUTE_BY_PRIMITIVE.get("tables") ?? null;
+    // "verify these phone numbers" is a verification column on a table, not a
+    // dialer action; without this the sequences card's call terms win.
+    if (/\b(verify|validate|check)\b[^.]{0,40}\b(phone|mobile)\b/.test(query))
+        return ROUTE_BY_PRIMITIVE.get("tables") ?? null;
     if (/\b(recipe|playbook|proven play|what should i do)\b/.test(query)) {
         return ROUTE_BY_PRIMITIVE.get("recipes") ?? null;
     }
@@ -655,6 +834,13 @@ function explicitCapabilityIntent(query) {
     }
     if (/\b(message )?reviews?\b/.test(query))
         return ROUTE_BY_PRIMITIVE.get("messages") ?? null;
+    // Sorting each row into categories ("classify companies by industry with
+    // confidence", "label every row as agency, SaaS or other") is a Tables
+    // column, not a workspace Tag. Before this rule the 2026-09-25 blind baseline
+    // got `route: null` for "classify companies by industry with confidence",
+    // and the "label" wording fell to the Tags card below.
+    if (isRowClassificationIntent(query))
+        return ROUTE_BY_PRIMITIVE.get("tables") ?? null;
     if (/\b(tag|tags|label|labels)\b/.test(query))
         return ROUTE_BY_PRIMITIVE.get("tags") ?? null;
     if (/\b(disposable|working)\b.{0,30}\b(list|dataset|table)\b|\b(prospect|sourcing) table\b/.test(query)) {
@@ -695,6 +881,12 @@ function explicitCapabilityIntent(query) {
     // company_enrich preset instead.
     if (isCompanyUrlRecoveryIntent(query))
         return ROUTE_BY_ID.get("sourcing-and-provider-tools") ?? null;
+    // A category-plus-place ask ("dental practices in Austin", "local businesses",
+    // "scrape Google Maps") is the companies-search `local` intent. A 2026-09-21
+    // blind user typing "find local businesses like dental practices in a city"
+    // got NO route and fell back to browsing every command group's --help.
+    if (isLocalBusinessIntent(query))
+        return ROUTE_BY_ID.get("sourcing-and-provider-tools") ?? null;
     if (/\b(find emails?|find phones?|find companies|find people|source (?:leads?|a list|companies|people)|build (?:me )?a list|tam|prospect)\b/.test(query)) {
         return ROUTE_BY_ID.get("sourcing-and-provider-tools") ?? null;
     }
@@ -749,6 +941,17 @@ function highestScoringRoute(query) {
 }
 /** The exact `companies search plan` invocation for the url_recovery intent. */
 export const COMPANY_URL_RECOVERY_COMMAND = 'oxygen companies search plan --prompt "Find the websites for these companies: <company names>" --source-intent url_recovery';
+/** The free native preview for Google Maps businesses; import follows its reviewed quote. */
+export const LOCAL_BUSINESS_SCRAPE_COMMAND = `oxygen companies search preview --source google_maps --filters-json '{"q":"<category> in <city, region>"}'`;
+/**
+ * Storefronts and service businesses by category and place — the Scrape Google
+ * Maps Businesses table source. Named business categories are the everyday
+ * phrasing ("dentists in Austin"), so a short list of them is matched beside the
+ * generic words; "near me" and "in/around <place>" carry the same meaning.
+ */
+function isLocalBusinessIntent(query) {
+    return /\b(local business(?:es)?|google maps|maps listings?|storefronts?|near me|(?:dental|medical|law|veterinary) (?:practices?|offices?|clinics?)|dentists?|restaurants?|cafes?|coffee shops?|gyms?|salons?|plumbers?|electricians?|contractors?|hvac|auto repair|real estate agents?|businesses (?:in|near|around) [a-z])\b/.test(query);
+}
 function recommendationsFor(card, query) {
     if (card.id === "sourcing-and-provider-tools" && isCompanyUrlRecoveryIntent(query)) {
         return {
@@ -757,6 +960,20 @@ function recommendationsFor(card, query) {
             exactCommand: COMPANY_URL_RECOVERY_COMMAND,
         };
     }
+    if (card.primitive === "tables" && isCompanyPageFollowersIntent(query)) {
+        return {
+            tools: ["oxygen_tables_followers", "oxygen_tables_sources"],
+            commands: ["tables followers check", "tables followers order", "tables sources"],
+            exactCommand: COMPANY_PAGE_FOLLOWERS_COMMAND,
+        };
+    }
+    if (card.id === "sourcing-and-provider-tools" && isLocalBusinessIntent(query)) {
+        return {
+            tools: ["oxygen_companies_search_preview", "oxygen_companies_search_run"],
+            commands: ["companies search filters", "companies search preview", "companies search run"],
+            exactCommand: LOCAL_BUSINESS_SCRAPE_COMMAND,
+        };
+    }
     if (card.id === "connected-linkedin" && isMutualLinkedInConnectionsIntent(query)) {
         return {
             tools: ["oxygen_tools_get", "oxygen_tools_run_live", "oxygen_senders_list"],
@@ -843,6 +1060,17 @@ function recommendationsFor(card, query) {
                 commands: ["tables watcher preview", "tables watcher create", "tables watcher get", "tables watcher update", "tables watcher pause", "tables watcher resume"],
             };
         }
+        if (isRowClassificationIntent(query)) {
+            // The classification list (free) names the template production has and,
+            // where the deployment runs it, the native Classify column; any other
+            // scheme is a prompt column (free to add). The run's dry run prices it,
+            // and the labelled rows are filtered natively with `tables query`.
+            return {
+                tools: ["oxygen_columns_catalog", "oxygen_columns_add", "oxygen_columns_run", "oxygen_tables_query"],
+                commands: ["columns catalog", "columns add", "columns run", "tables query"],
+                exactCommand: ROW_CLASSIFICATION_COMMAND,
+            };
+        }
         if (isCompanyResearchQuestionIntent(query)) {
             // A fact the template catalog already answers by key: list the keys first
             // (free), add the column by key (free), then price and run it. Ahead of
@@ -996,6 +1224,13 @@ function recommendationsFor(card, query) {
             };
         }
     }
+    if (card.primitive === "signals" && isLinkedInKeywordPostIntent(query)) {
+        return {
+            tools: ["oxygen_signals_search_preview", "oxygen_signals_search_run"],
+            commands: ["signals search preview", "signals search run"],
+            exactCommand: LINKEDIN_KEYWORD_POST_COMMAND,
+        };
+    }
     if (card.primitive === "signals" && /\blinkedin\b.{0,40}\bengagers?\b/.test(query)) {
         return {
             tools: ["oxygen_engagement_list_engagers", "oxygen_signals_list", "oxygen_signals_leads_today"],
@@ -1020,6 +1255,36 @@ function isEmailVerificationIntent(query) {
     const addressThenGrade = /\b(e ?mails?|addresses)\b.{0,40}\b(verif(?:y|ied|ication)|validat(?:e|ed|ion)|valid|invalid|deliverable|(?:will|would|might) bounce|bounce risk|risky|safe to (?:send|email)|catch ?all|accept ?all)\b/;
     return gradeThenAddress.test(query) || addressThenGrade.test(query);
 }
+/**
+ * The free list of classification columns. Production answers it with its one
+ * classification template (B2B or B2C); a deployment that runs the native
+ * Classify column lists that entry here too. Any other scheme is an AI prompt
+ * column through `columns add`, which the route recommends next.
+ */
+export const ROW_CLASSIFICATION_COMMAND = "oxygen columns catalog --family classification";
+/** Nouns another primitive owns: a classify ask that names one keeps that owner. */
+const ROW_CLASSIFICATION_OTHER_OWNER = /\b(inbox|repl(?:y|ies)|conversations?|threads?|messages?|dms?|e-?mails?|bounces?|signals?|visitors?|workflows?|deals?|crm|records?|icp|knowledge|wiki|pages?|ads|dashboards?|metrics?|agents?|runs)\b/;
+/** What one table row is: the noun a per-row classification is about. */
+const ROW_CLASSIFICATION_ROW_NOUN = /\b(rows?|columns?|tables?|compan(?:y|ies)|accounts?|leads?|contacts?|domains?|people|persons?)\b/;
+/**
+ * Put every row of a table into one of a few buckets: classify or categorize
+ * rows, companies, accounts, leads, contacts, domains or people (or anything
+ * "with confidence"), "label every row as …", or a yes/no question asked per
+ * row. The verb alone is not enough: "classify my records", "categorize my
+ * workflows" or "classify leads into ICP tiers" name the primitive that owns
+ * them, and conversation triage ("classify my inbox replies") keeps Messages.
+ * A bare "tag these contacts" stays with Tags.
+ */
+function isRowClassificationIntent(query) {
+    if (ROW_CLASSIFICATION_OTHER_OWNER.test(query))
+        return false;
+    const classifyVerb = /\b(classif(?:y|ies|ied|ying|ication)|categori[sz](?:e|es|ed|ing|ation))\b/.test(query);
+    return (classifyVerb && (ROW_CLASSIFICATION_ROW_NOUN.test(query) || /\bconfidence\b/.test(query)))
+        || /\blabel(?:s|led|ed|ling|ing)?\b.{0,40}\b(?:each|every|all|per)\s+(?:rows?|compan(?:y|ies)|accounts?|leads?|contacts?|domains?)\b/.test(query)
+        || /\blabel(?:s|led|ed|ling|ing)?\b.{0,80}\bconfidence\b/.test(query)
+        || /\byes(?: or |\/)no\b.{0,60}\b(?:each|every|per)\s+(?:rows?|compan(?:y|ies)|accounts?|leads?|contacts?)\b/.test(query)
+        || /\b(?:each|every|per)\s+(?:rows?|compan(?:y|ies)|accounts?|leads?|contacts?)\b.{0,60}\byes(?: or |\/)no\b/.test(query);
+}
 // "get company website URL from company name", "find the websites for this
 // list of company names", "recover domains for company names" — a URL-ish
 // noun, a company noun, a recovery verb, and the hint that the input is NAMES
@@ -1104,6 +1369,24 @@ function isSecondPartyDecisionIntent(query) {
         && !/\b(linkedin|public|published|post|posts|publishing)\b/.test(query);
     return decisionLanguage || clientDecision || internalThread;
 }
+/** An X (Twitter) post format: thread, poll, alt text, who-can-reply, quote, photo tags. */
+function isXPostFormatIntent(query) {
+    return /\b(x|twitter|tweets?)\b/.test(query)
+        && /\b(thread|poll|alt text|image descriptions?|reply settings?|who can reply|quote|photo tags?|tag (?:people|someone|accounts?) in)\b/.test(query);
+}
+/** A post's video cover (thumbnail) or a preview of a post being authored. Competitor ad creative stays with Ads. */
+function isFailedPostIntent(query) {
+    if (/\b(ads?|competitors?|runs?|workflows?|sequences?|tables?|comments?)\b/.test(query))
+        return false;
+    return /\b(posts?|tweets?)\b/.test(query)
+        && /\b(fail(s|ed|ing|ure)?|stuck|locked|uncertain|refused|rejected|retry|reschedul\w*)\b/.test(query);
+}
+function isPostCoverOrPreviewIntent(query) {
+    if (/\b(ads?|competitors?)\b/.test(query))
+        return false;
+    return (/\b(cover|thumbnail)\b/.test(query) && /\b(post|video|draft)\b/.test(query))
+        || /\bpreview\b.{0,40}\b(post|draft)\b/.test(query);
+}
 function isOwnedPostCommentIntent(query) {
     if (!/\bcomments?\b/.test(query) || !/\b(linkedin|posts?|publishing)\b/.test(query))
         return false;
@@ -1131,7 +1414,7 @@ function isPublicLinkedInRead(query) {
         return false;
     const disclaimsConnectedAccount = /\b(without|no|not using|does not require)\b.{0,24}\bconnected(?: linkedin)? account\b/.test(query);
     const connectedOwnership = !disclaimsConnectedAccount
-        && /\b(my|our|own|owned|connected|connections|followers|inbox|messages|recruiter|sales\s*navigator|salesnav|unipile|viewers)\b/.test(query);
+        && /\b(my|our|own|owned|connected|connections|followers|inbox|messages|recruiter|sales\s*navigator|salesnav|unipile|viewers?)\b/.test(query);
     if (connectedOwnership)
         return false;
     return /\b(comments?|companies|company|competitor|cookieless|engagers?|harvest|posts?|profiles?|public|reactions?|reactors?|scrape|scraper|search|third[ -]party)\b/.test(query);

package/node_modules/@oxygen/shared/dist/cli-http-error.d.ts

@@ -0,0 +1,8 @@
+import { OxygenError } from "./cli-result.js";
+export declare class CliHttpError extends OxygenError {
+    readonly status: number;
+    constructor(status: number, code: string, message: string, options?: {
+        details?: unknown;
+        exitCode?: number;
+    });
+}

package/node_modules/@oxygen/shared/dist/cli-http-error.js

@@ -0,0 +1,8 @@
+import { OxygenError } from "./cli-result.js";
+export class CliHttpError extends OxygenError {
+    status;
+    constructor(status, code, message, options = {}) {
+        super(code, message, options);
+        this.status = status;
+    }
+}

package/node_modules/@oxygen/shared/dist/cli-result.js

@@ -51,6 +51,7 @@ export function exitCodeForErrorCode(code) {
         case "max_credits_required":
         case "approval_required":
         case "effect_unknown_approval_required":
+        case "amplification_risk_acknowledgement_required":
         case "spend_cap_required":
         case "spend_cap_too_low":
         case "insufficient_credits":