@sellable/mcp 0.1.471 → 0.1.473

package/dist/tools/prompts.js

@@ -373,7 +373,7 @@ export function getPostFindLeadsScoutRegistry() {
             codex: 'After confirm_lead_list copies source rows and the initial campaign-table execution slice exists, ask the filter-choice question immediately. Do not spawn anything before that question. After the answer, launch only Message Drafting. The filter-choice answer is the post-import user gate for this single worker; do not ask another question about starting it in step-wise or YOLO mode. The registry lookup is not a launch: after get_post_find_leads_scout_registry, immediately invoke Task/spawn_agent or the host background-agent mechanism before loading filter-leads.md, before saving rubrics, and before treating skip-filters as ready for message review. Both choices route through this kickoff; do not let filters_skipped jump straight from filter-choice to message-generation. If filters are chosen, the parent stays on Filter Rules and drafts/saves rubrics with MCP tools while Message Drafting runs in the background. If filters are skipped, move to Messages/message review only after Message Drafting has started or is ready; update_campaign(currentStep=messages) is not proof of launch. If the named Message Drafting custom agent is unavailable, spawn a generic gpt-5.5 xhigh Message Drafting background agent with the same lean campaign/table basis. When the background worker starts, persist workerDetails.messageDraftBuilder with statusSource "branch", status "branch-running", runId, startedAt, updatedAt, basisToken when known, and basis containing campaignId, selectedLeadListId, workflowTableId, filterChoice, and reviewBatchRowHash or reviewBatchRowIds; workerStatuses.messageDraftBuilder may be "running" as a simple badge only. Never put rich proof under workerStatuses and never use workerStatuses.messageDrafting. If no background-agent tool is callable, start the same full message branch inline before filter drafting or before skip-filter message review, record workerDetails.messageDraftBuilder with statusSource "parent-thread-fallback" and status "fallback-active", and require the same live context, prompt, assets, and validation gate before message review; do not wait until filters are saved and then call the registry.',
             claude: "After confirm_lead_list copies source rows and the initial campaign-table execution slice exists, ask the filter-choice question immediately. Do not invoke any Task/Agent before that question. After the answer, invoke only Message Drafting. If filters are chosen, parent drafts/saves rubrics with MCP tools while Message Drafting runs, asks filter approval, then joins Message Drafting. If filters are skipped, invoke only Message Drafting and move to Messages/message review.",
             parentThreadRule: 'Named agents are optional acceleration, but message drafting is not optional. The only normal background worker is Message Drafting. The filter-choice answer is the campaign-scoped go-ahead for this single post-import worker; do not ask another question to start it in step-wise or YOLO mode. If a named agent is unavailable, use a generic gpt-5.5 xhigh Message Drafting background agent. source work and filter work stay in the parent thread with MCP tools. If post-find-leads-message-scout is available, run it as the background Message Draft Builder after the filter-choice answer. The registry lookup is not a launch: get_post_find_leads_scout_registry only identifies the worker, and Message Drafting counts as started only after Task/spawn_agent or the host background-agent tool is invoked, or after the parent begins the same full message branch inline because no background-agent tool is callable. This launch must happen before loading filter-leads.md, save_rubrics, filter approval, or skip-filter message review; currentStep=messages is not proof of launch. If post-find-leads-message-scout is absent, do not customer-surface install status. Do not silently treat message drafting as started; the main thread must either launch the background worker or execute the same message branch from CampaignOffer state, selected source state, workflowTableId, and initial campaign-table execution slice rows. For a spawned worker, record workerDetails.messageDraftBuilder with statusSource branch / status branch-running, runId, startedAt, updatedAt, and basis containing campaignId, selectedLeadListId, workflowTableId, filterChoice, and reviewBatchRowHash or reviewBatchRowIds. workerStatuses.messageDraftBuilder is optional simple badge text only ("running", "ready", "blocked", "idle"); never put runId/statusSource/basis under workerStatuses and never use workerStatuses.messageDrafting. If no background-agent tool is callable, start that same full message branch inline before filter drafting or before skip-filter message review, record workerDetails.messageDraftBuilder with statusSource parent-thread-fallback / status fallback-active then ready, and require the same live context, prompt, assets, and validation gate before message review; do not report that as a background worker failure. If neither branch nor inline fallback can run, return blocked/retry-needed; do not wait until filters are saved and then call the registry. The Message Drafting handoff must be lean. Do not paste copied row counts, brief hashes, review-batch hashes, full reviewBatchRowIds, broad row data, or local debug artifacts into the spawn prompt. Local markdown/json files are not normal-path inputs. The filter-choice question is the first post-import user gate; do not load post-lead registries or filter references before it. Message drafting starts after the filter-choice answer, must load get_subskill_prompt({ subskillName: "generate-messages" }), and must load every required message asset named by generate-messages Mode 0 through get_subskill_asset before drafting. Reference Asset Loading means loading the required pre-draft reference pack before drafting; return blocked/retry-needed if required assets cannot be loaded; load ai-tells.md because it is never optional. The branch or parent-thread fallback loads the full generate-messages prompt and every referenced asset through get_subskill_asset. After generating/revising the candidate and before returning ready, must load get_subskill_prompt({ subskillName: "create-campaign-v2-validation" }) as the final internal validation gate, must read live campaign table state through scoped MCP/product tools, and must reject mismatched selectedLeadListId/workflowTableId/campaign/workspace input. Do not block when filters were chosen but leadScoringRubrics are not yet visible in the branch read; the parent owns save_rubrics and filter approval in parallel, so Message Drafting should return status ready with basisStatus usable_initial when campaign/list/table identity and the non-empty execution slice match. Do not use any alternate, local-artifact, or examples-only message prompt. User copy feedback, message QA, or rewrite requests before approve-message must be routed back to Message Drafting with the current recommendation, lean campaign/table basis, and latest user text; the parent must not rewrite or QA the template from memory and must not call update_campaign_brief before approve-message. The worker validates internally and returns only templateRecommendation, tokenFillRules, renderedGoodSample, status, approveOrReviseRecommendation, validationStatus, outputAt, outputHash, and blocked/retry detail. Do not render renderedFallbackSample, risk notes, or a qaReceipt on the normal happy path. On the filter path, save_rubrics keeps the browser on Filter Rules after save_rubrics so the user can approve the saved criteria; after saved-filter approval, move to Filter Leads with currentStep=apply-icp-rubric whether Message Drafting is ready or still running. Wait there for message approval. Enrichment, filtering, Generate Message cells, sender setup, sequence attach, and launch wait for template approval on the Use Template path. On the skip path, move to Messages/message review after Message Drafting has started or is ready and wait for message approval before enrichment or Settings. Do not render message review from checklist or shortcut instructions; message review requires a messageDraftRecommendation whose basis proves the generate-messages prompt, required message assets, and validation gate ran for the current campaign/table execution slice. Do not automatically rerun Message Drafting after filters/enrichment finish; show the initial draft by default and offer an enriched rewrite only with explicit user opt-in. Handoff and recommendation output are Markdown with labeled fields, not raw JSON.',
-            prepareMessagesRule: `Default create-campaign stays on the existing reviewBatchLimit:15 first campaign-table execution slice. For plain post-mint fill/load/refill requests, load get_subskill_prompt({ subskillName: "refill-sends-workflow" }), then call resolve_campaign_fill_route({ intent:"plain" }), list_senders, and get_campaign_refill_state for enough candidate campaigns to identify the campaign that most recently had scheduler-owned sends for the relevant sender set before any mutation. Route outcomes are route:"evergreen_horizon", route:"active_campaigns", and route:"ask_create"; if a plain managed-waterfall route has archived/completed skipped slots or does not cover the named sender set, immediately refetch with resolve_campaign_fill_route({ intent:"active" }) and inspect current dashboard-active ACTIVE/PAUSED campaign-backed sequence campaigns before declaring a sender blocked; stay in the same campaignOfferId/campaignId context after minting. Plain fill is not an alias for fill_campaign_horizon or campaign creation. fill_campaign_horizon is evergreen-only and is not the generic regular-campaign fill path. Campaign creation is allowed only after route:"ask_create" and explicit user selection; it is never the default response to plain fill. Treat "fill up/load sends" as capacity-fill preparation, and treat "refill senders", "fill senders", "max out senders", and "load everyone up" as sender-scoped capacity-fill preparation. For sender-scoped requests with no named senders, --yolo means all eligible healthy senders enrolled in active campaign-backed sequence campaigns in the active workspace; without --yolo, ask which eligible enrolled senders to refill before choosing campaigns or mutating. In non-yolo interactive Codex or Claude Code sessions, post the full sender/campaign/action approval packet in normal chat as Markdown first, then ask request_user_input/AskUserQuestion with exactly Accept and Decline and a compact body that refers back to the posted packet; do not duplicate the campaign table or full operator packet inside the structured question. The chat packet must show workspace, sender scope, a campaign-by-campaign table, exact ids/caps/dates, side effects, forbidden actions, and stop condition before mutation. Default --yolo target is the scheduler-forward 48-hour target window: sender-local send days whose configured sending windows overlap the rolling target window, skipping no-send-hour days. For campaign-scoped fill/refill, select the best recent-send campaign and calculate the bounded gap from healthy sender daily capacity minus projected coverage (actual sent plus future scheduler-owned scheduled sends) and ready-to-schedule rows, then prepare only that gap. For sender-scoped fill/refill, calculate the bounded gap per eligible sender across active enrolled campaigns, counting actual sent coverage, future scheduled rows, and ready-to-schedule rows across those campaigns, then choose the best same-sender campaign to fill each sender gap: prefer recent/future scheduler-owned sends for that sender, then strongest recent result evidence, then source health. Maintain a target-window saturation ledger per selected sender with selected send days, gross capacity, actual sent counts, future scheduler-owned scheduled counts, projected coverage, ready-to-schedule buffer, remaining projected gap, paid-InMail threshold feasibility, and the next MCP primitive. Do not stop after filling only one sender when the request was sender-scoped. In --yolo, continue through every safe selected sender/campaign action covered by the rendered packet, reread after each terminal apply/prep/start result, recompute the target-window saturation ledger, and keep going until projected coverage (sent + scheduled) fills the scheduler-forward target window or a concrete non-scheduler blocker is proven. Ready-to-schedule rows are buffer, not completion; if ready covers the projected gap but scheduled cells do not, report loaded, awaiting scheduler and run a persistent read-only scheduler wait/reread loop and keep the run open while awaiting_scheduler_after_ready_buffer is the only remaining state. Paid-InMail threshold changes and connection-campaign creation are explicit continuation options, never --yolo side effects. When no safe in-packet action remains return concrete continuation options with campaign names, exact ids, and which options require a new approval packet; do not return final completion for scheduler wait unless Christian explicitly asks for status or stops the run. Use the refill workflow to decide whether to enrich/prep more rows in that same recent-send/best-result campaign, add/import more rows to that same campaign/source path, use a different existing campaign only when the selected same-sender lane is blocked/exhausted/already loaded while the sender still has a gap, or ask what to create. Do not create warm-post-engager side campaigns. Surface sender-health blockers and paid-InMail threshold blockers separately from prepared/approved/scheduled counts. User-facing refill decisions must be campaign-name-first and sender-name-first, with ids as proof/execution targets only. For already-running regular campaigns that need Signal Discovery source replenishment, use the guarded currentStep clear with clearCurrentStepIfMatches:"running", campaign-scoped provider prompt/search/select, and import_leads with the existing sourceLeadListId when a newly approved selected-post scrape would otherwise return reusedExistingSourceList. Before prep, inspect get_campaign_refill_state.preparationFrontier. If hasLaterPreparedIsland:true or earliestUnpreparedRow exists before later successful enrichment, use rowSelector:{type:"needsEnrichment"} with columnRole:"enrich" in table-position order or start_campaign_message_preparation adaptive defaults; do not use the UI Jump anchor or needsGeneratedMessage as the refill cursor. After confirm_lead_list copies rows into an existing table, avoid fixed maxRowsToCheck:100; if confirm_lead_list returns USER_ADDED_ROWS_LIMIT_EXCEEDED, create a bounded same-source split from selectedLeadListId with get_rows_minimal/load_csv_linkedin_leads, confirm that smaller source list into the same campaign, and inspect reviewBatch only as diagnostics unless the approved packet explicitly prioritizes the just-copied split and earlier needsEnrichment rows are exhausted, dependency-blocked, or excluded. For approval diagnostics use rowSelector:{type:"needsApproval"} after current generated messages exist; mutating Approved cells still requires approvalMode:approve and exact bounded approval. Do not interpret checkedRows as enriched rows; it is only the table cursor. Prepared, approved, and ready_to_schedule rows are intermediate states; never call them scheduled unless a re-read proves scheduler-owned scheduled cells with non-null scheduledFor contribute to projected coverage, and never call them complete unless a final re-read proves projected coverage fills the scheduler-forward target window. Before source import, prep, approval, or selected paused campaign start, require exact visible approval or --yolo packet auto-accept and a fresh get_campaign_refill_state reread; stop if freshness.stateHash or exact ids changed. For "approve X messages", use approvalMode:approve only when explicitly requested. For "schedule X sends" or "fill sender sends", approve only when explicitly requested, then re-read campaign/table scheduled counts; if projected coverage does not fill the horizon, keep polling when ready buffer covers the gap and report only interim prepared/approved/ready - awaiting scheduler status if Christian asks. Do not call start_campaign as part of fill/schedule horizon. start_campaign is allowed in refill only for exact selected PAUSED, dashboard-active, campaign-backed sequence targets named in the bounded packet, and the packet must state that starting can let the product scheduler schedule/send approved eligible sequence actions. Never start unrelated, archived, completed, draft, direct, or non-selected campaigns, never broad approve-all, and never use direct scheduler writes. campaignId is CampaignOffer.id. If the user asks to stop preparation, the target is wrong, or status shows the wrong campaign/table, use cancel_campaign_message_preparation only for the exact active job. Low-level selectors are diagnostics and recovery only for this lane.`,
+            prepareMessagesRule: `Default create-campaign stays on the existing reviewBatchLimit:15 first campaign-table execution slice. For plain post-mint fill/load/refill requests, load get_subskill_prompt({ subskillName: "refill-sends-workflow" }), then call resolve_campaign_fill_route({ intent:"plain" }), list_senders, and get_campaign_refill_state for enough candidate campaigns to identify the campaign that most recently had scheduler-owned sends for the relevant sender set before any mutation. Route outcomes are route:"evergreen_horizon", route:"active_campaigns", and route:"ask_create"; if a plain managed-waterfall route has archived/completed skipped slots or does not cover the named sender set, immediately refetch with resolve_campaign_fill_route({ intent:"active" }) and inspect current dashboard-active ACTIVE/PAUSED campaign-backed sequence campaigns before declaring a sender blocked; stay in the same campaignOfferId/campaignId context after minting. Plain fill is not an alias for fill_campaign_horizon or campaign creation. fill_campaign_horizon is evergreen-only and is not the generic regular-campaign fill path. Campaign creation is allowed only after route:"ask_create" and explicit user selection; it is never the default response to plain fill. Treat "fill up/load sends" as capacity-fill preparation, and treat "refill senders", "fill senders", "max out senders", and "load everyone up" as sender-scoped capacity-fill preparation. For sender-scoped requests with no named senders, --yolo means all eligible healthy senders enrolled in active campaign-backed sequence campaigns in the active workspace; without --yolo, ask which eligible enrolled senders to refill before choosing campaigns or mutating. In non-yolo interactive Codex or Claude Code sessions, post the full sender/campaign/action approval packet in normal chat as Markdown first, then ask request_user_input/AskUserQuestion with exactly Accept and Decline and a compact body that refers back to the posted packet; do not duplicate the campaign table or full operator packet inside the structured question. The chat packet must show workspace, sender scope, a campaign-by-campaign table, exact ids/caps/dates, side effects, forbidden actions, and stop condition before mutation. Default --yolo target is the scheduler-forward 48-hour target window: sender-local send days whose configured sending windows overlap the rolling target window, skipping no-send-hour days. For campaign-scoped fill/refill, select the best recent-send campaign and calculate the bounded gap from healthy sender daily capacity minus projected coverage (actual sent plus future scheduler-owned scheduled sends) and ready-to-schedule rows, then prepare only that gap. For sender-scoped fill/refill, calculate the bounded gap per eligible sender across active enrolled campaigns, counting actual sent coverage, future scheduled rows, and ready-to-schedule rows across those campaigns, then choose the best same-sender campaign to fill each sender gap: prefer recent/future scheduler-owned sends for that sender, then strongest recent result evidence, then source health. Maintain a target-window saturation ledger per selected sender with selected send days, gross capacity, actual sent counts, future scheduler-owned scheduled counts, projected coverage, ready-to-schedule buffer, remaining projected gap, paid-InMail threshold feasibility, and the next MCP primitive. The structured packet lives in target.senderRefillPlans[] with target.eligibleSenderLedger, campaignRanking.options, sourcePlan, nextActions, manualAlternates, and target.globalActionQueue; preserve Need to prepare, Goal, Already sent, Scheduled, Ready and waiting to be scheduled, and Still need labels. In --yolo, execute exactly one globally ranked primitive from target.globalActionQueue[0], then rerun get_refill_target_plan before choosing another action. Maintain a run-local refreshedPaidInmailSenderIds set and refresh each selected paid-InMail sender at most once before falling back to an existing connection lane or manual continuation. Do not stop after filling only one sender when the request was sender-scoped. In --yolo, continue through every safe selected sender/campaign action covered by the rendered packet, reread after each terminal apply/prep/start result, recompute the target-window saturation ledger, and keep going until projected coverage (sent + scheduled) fills the scheduler-forward target window or a concrete non-scheduler blocker is proven. Ready-to-schedule rows are buffer, not completion; if ready covers the projected gap but scheduled cells do not, report loaded, awaiting scheduler and run a persistent read-only scheduler wait/reread loop and keep the run open while awaiting_scheduler_after_ready_buffer is the only remaining state. Paid-InMail threshold changes and connection-campaign creation are explicit continuation options, never --yolo side effects. When no safe in-packet action remains return concrete continuation options with campaign names, exact ids, and which options require a new approval packet; do not return final completion for scheduler wait unless Christian explicitly asks for status or stops the run. Use the refill workflow to decide whether to enrich/prep more rows in that same recent-send/best-result campaign, add/import more rows to that same campaign/source path, use a different existing campaign only when the selected same-sender lane is blocked/exhausted/already loaded while the sender still has a gap, or ask what to create. Do not create warm-post-engager side campaigns. Surface sender-health blockers and paid-InMail threshold blockers separately from prepared/approved/scheduled counts. User-facing refill decisions must be campaign-name-first and sender-name-first, with ids as proof/execution targets only. Trust schedulerGate.sendable and scheduler blockers over raw unipileAccountStatus labels alone. For long-running prep use compact prep status checks, reread target plans after prep or cancel, avoid huge parallel target-plan reads when output is large, and if prepared/ready rows grow but sender-level projected coverage does not move after one bounded settle loop, pivot to compact prep status or a scheduler-proven lane instead of waiting on campaign-level ready counts. For already-running regular campaigns that need Signal Discovery source replenishment, use the guarded currentStep clear with clearCurrentStepIfMatches:"running", campaign-scoped provider prompt/search/select, and import_leads with the existing sourceLeadListId when a newly approved selected-post scrape would otherwise return reusedExistingSourceList. Before prep, inspect get_campaign_refill_state.preparationFrontier. If hasLaterPreparedIsland:true or earliestUnpreparedRow exists before later successful enrichment, use rowSelector:{type:"needsEnrichment"} with columnRole:"enrich" in table-position order or start_campaign_message_preparation adaptive defaults; do not use the UI Jump anchor or needsGeneratedMessage as the refill cursor. After confirm_lead_list copies rows into an existing table, avoid fixed maxRowsToCheck:100; if confirm_lead_list returns USER_ADDED_ROWS_LIMIT_EXCEEDED, create a bounded same-source split from selectedLeadListId with get_rows_minimal/load_csv_linkedin_leads, confirm that smaller source list into the same campaign, and inspect reviewBatch only as diagnostics unless the approved packet explicitly prioritizes the just-copied split and earlier needsEnrichment rows are exhausted, dependency-blocked, or excluded. For approval diagnostics use rowSelector:{type:"needsApproval"} after current generated messages exist; mutating Approved cells still requires approvalMode:approve and exact bounded approval. Do not interpret checkedRows as enriched rows; it is only the table cursor. Prepared, approved, and ready_to_schedule rows are intermediate states; never call them scheduled unless a re-read proves scheduler-owned scheduled cells with non-null scheduledFor contribute to projected coverage, and never call them complete unless a final re-read proves projected coverage fills the scheduler-forward target window. Before source import, prep, approval, or selected paused campaign start, require exact visible approval or --yolo packet auto-accept and a fresh get_campaign_refill_state reread; stop if freshness.stateHash or exact ids changed. For "approve X messages", use approvalMode:approve only when explicitly requested. For "schedule X sends" or "fill sender sends", approve only when explicitly requested, then re-read campaign/table scheduled counts; if projected coverage does not fill the horizon, keep polling when ready buffer covers the gap and report only interim prepared/approved/ready - awaiting scheduler status if Christian asks. Do not call start_campaign as part of fill/schedule horizon. start_campaign is allowed in refill only for exact selected PAUSED, dashboard-active, campaign-backed sequence targets named in the bounded packet, and the packet must state that starting can let the product scheduler schedule/send approved eligible sequence actions. Never start unrelated, archived, completed, draft, direct, or non-selected campaigns, never broad approve-all, and never use direct scheduler writes. campaignId is CampaignOffer.id. If the user asks to stop preparation, the target is wrong, or status shows the wrong campaign/table, use cancel_campaign_message_preparation only for the exact active job. Low-level selectors are diagnostics and recovery only for this lane.`,
         },
     };
 }

package/dist/tools/refill-sends.js

@@ -192,7 +192,9 @@ export function refillSendsCommand(input = {}) {
                     : horizonSendDays === null
                         ? ""
                         : `, horizonSendDays: ${horizonSendDays}`}, approvalMode: "${approvalMode}" }) before any import, prep, approval, start, or schedule-affecting action.`,
-            "If get_refill_target_plan returns status complete, report eligible sender ledger, gross target, selected days, sent count, scheduled count, projected count, campaign ids, targetShapeRevision, and no-op proof without asking for approval.",
+            "Render target.eligibleSenderLedger and target.senderRefillPlans before mutation. Preserve the coverage labels Need to prepare, Goal, Already sent, Scheduled, Ready and waiting to be scheduled, and Still need.",
+            "Use target.globalActionQueue as the only cross-sender yolo queue: execute only target.globalActionQueue[0], one globally ranked primitive, then rerun get_refill_target_plan before choosing another action.",
+            "If get_refill_target_plan returns status complete, report eligible sender ledger, target.senderRefillPlans, gross target, selected days, sent count, scheduled count, projected count, campaign ids, targetShapeRevision, and no-op proof without asking for approval.",
             "Refill target lanes are only connection invites (send_invite) or paid InMails (send_inmail_closed). Do not count send_dm or send_inmail_open as horizon target capacity; they may exist in sequences, but the planner must pick the refill lane from the most recent active campaign-backed send evidence for each sender.",
             "If remainingReadyOrProjectedGap is 0 but remainingProjectedGap is positive, run only a persistent read-only scheduler wait/reread loop; do not ask for prep/import/approval and do not close out while scheduler pickup is the only remaining state.",
             `Resolve route with resolve_campaign_fill_route({ intent: "${intent}"${input.campaignId ? `, campaignId: "${input.campaignId}"` : ""}${input.tableId ? `, tableId: "${input.tableId}"` : ""} }).`,
@@ -209,12 +211,13 @@ export function refillSendsCommand(input = {}) {
             "Treat current dashboard-active PAUSED campaign-backed sequence campaigns as start-eligible candidates: read refill state before deciding whether to prep, approve, start, or skip.",
             "Fresh reread get_campaign_refill_state immediately before any import, prep, approval, or horizon-fill mutation.",
             "Maintain a target-window saturation ledger per selected sender from get_refill_target_plan: selected days, gross capacity, actual sent counts, future scheduler-owned scheduled counts, projected counts, ready-to-schedule buffer, remaining projected gap, paid InMail threshold feasibility, targetShapeRevision, stateRevision, and next MCP primitive.",
+            "Maintain a run-local refreshedPaidInmailSenderIds set. When get_refill_target_plan returns refresh_paid_inmail_credits candidates for selected paid-InMail lanes, refresh each exact sender at most once for this refill run, then rerun get_refill_target_plan before any prep/import/approval/start action.",
             "If paid InMail feasibility is below threshold, stale, or missing, report the exact sender/campaign/table/column threshold action or connection fallback; --yolo must not lower paid InMail thresholds or create campaigns.",
             "In --yolo or after one Accept, continue through every safe selected sender/campaign action covered by the rendered target packet; sent/scheduled-count progress changes stateRevision and should continue while targetShapeRevision is stable.",
             "Do not complete a fill/schedule request until a final get_refill_target_plan or refill-state reread proves projected coverage (sent + scheduled) fills the scheduler-forward target window. Treat awaiting_scheduler_after_ready_buffer as loaded, awaiting scheduler when ready buffer covers the gap; do not import/prep more rows in that state, and keep polling unless Christian stops/statuses the run or a concrete non-scheduler blocker such as paid_inmail_below_threshold appears.",
         ],
         approvalContract: yolo
-            ? "Auto-accept only the rendered bounded refill target packet after get_refill_target_plan and fresh reread. Continue through every safe apply/prep/start action inside that packet, including start_campaign only for exact selected PAUSED campaign-backed sequence refill targets named in the packet. After each action, rerun get_refill_target_plan; keep going while targetShapeRevision is stable and projected coverage (sent + scheduled) progresses toward the target, even though stateRevision changes. Ready-to-schedule rows are buffer, not completion. If ready buffer covers the projected gap, use only persistent read-only scheduler wait/reread and keep the run open until projected coverage fills or Christian stops/statuses it. Stop immediately if targetShapeRevision changes because sender set, route, ids, caps, dates, blockers, action class, paid InMail threshold feasibility, or side-effect class drifts. --yolo does not authorize lowering paid InMail thresholds or creating connection campaigns."
+            ? "Auto-accept only the rendered bounded refill target packet after get_refill_target_plan and fresh reread. Execute one globally ranked primitive from target.globalActionQueue at a time, then rerun get_refill_target_plan before taking another action. Continue through every safe apply/prep/start action inside that packet, including start_campaign only for exact selected PAUSED campaign-backed sequence refill targets named in the packet. After each action, rerun get_refill_target_plan; keep going while targetShapeRevision is stable and projected coverage (sent + scheduled) progresses toward the target, even though stateRevision changes. Ready-to-schedule rows are buffer, not completion. If ready buffer covers the projected gap, use only persistent read-only scheduler wait/reread and keep the run open until projected coverage fills or Christian stops/statuses it. Stop immediately if targetShapeRevision changes because sender set, route, ids, caps, dates, blockers, action class, paid InMail threshold feasibility, or side-effect class drifts. --yolo does not authorize lowering paid InMail thresholds or creating connection campaigns."
             : hasSenderSelectors
                 ? "Before mutation, post the full bounded refill packet in normal chat as Markdown, including workspace, sender scope, campaign table, exact ids, caps/dates, gross target, sent count, scheduled count, projected count, ready buffer, remaining projected gap, paid InMail threshold feasibility, targetShapeRevision/stateRevision, side effects, forbidden actions, and stop condition. Then ask the final Accept/Decline structured approval question with a compact body that refers back to the posted packet instead of duplicating it. Only ask when get_refill_target_plan reports a positive remaining projected/ready gap. If target is complete by projected coverage, no-op without approval. If ready buffer covers the projected gap, run only persistent read-only scheduler wait/reread and keep the run open until projected coverage fills or Christian stops/statuses it. Threshold changes and campaign creation need separate explicit approval."
                 : "Ask which eligible enrolled senders to refill first, then, before mutation, post the full bounded refill packet in normal chat as Markdown and ask the final Accept/Decline structured approval question with a compact body that refers back to the posted packet.",

package/dist/tools/refill-target-plan.js

@@ -4,6 +4,33 @@ const REFILL_TARGET_ACTION_TYPES = [
     "send_inmail_closed",
 ];
 const REFILL_TARGET_ACTION_SET = new Set(REFILL_TARGET_ACTION_TYPES);
+const SAFE_PACKET_ACTION_TYPES = new Set([
+    "prepare_messages",
+    "approve_messages",
+    "start_paused_campaign",
+    "wait_for_scheduler",
+    "refresh_paid_inmail_credits",
+    "lower_paid_inmail_threshold",
+    "switch_to_connection_lane",
+    "create_connection_campaign",
+]);
+const MANUAL_ONLY_PACKET_ACTION_TYPES = new Set([
+    "lower_paid_inmail_threshold",
+    "switch_to_connection_lane",
+    "create_connection_campaign",
+]);
+const SOURCE_PLAN_STATES = new Set([
+    "not_needed",
+    "use_existing_rows",
+    "needs_signal_selection",
+    "needs_signal_import",
+    "waiting_for_import",
+    "needs_confirm",
+    "source_shortfall",
+    "provider_exhausted",
+    "provider_missing",
+    "blocked",
+]);
 async function postRefillTargetPlan(body) {
     const api = getApi();
     return api.post("/api/v3/mcp/refill-target-plan", body);
@@ -24,6 +51,17 @@ function actionTypesFrom(value) {
 function numberValue(value) {
     return typeof value === "number" && Number.isFinite(value) ? value : 0;
 }
+function stringValue(value) {
+    return typeof value === "string" ? value : undefined;
+}
+function booleanValue(value) {
+    return typeof value === "boolean" ? value : undefined;
+}
+function stringArray(value) {
+    if (!Array.isArray(value))
+        return [];
+    return value.filter((item) => typeof item === "string");
+}
 function evidenceLatestMs(evidence) {
     const latestAt = evidence.latestAt;
     if (typeof latestAt !== "string")
@@ -72,9 +110,14 @@ function sanitizeCounts(counts, selectedKeys) {
 }
 function sanitizeActionCandidates(candidates, selectedKeys, status, remainingReadyOrProjectedGap, remainingProjectedGap) {
     const filtered = Array.isArray(candidates)
-        ? candidates.filter((item) => {
+        ? candidates
+            .filter((item) => {
             if (!isRecord(item))
                 return false;
+            if (typeof item.type !== "string" ||
+                !SAFE_PACKET_ACTION_TYPES.has(item.type)) {
+                return false;
+            }
             const actionType = item.actionType;
             if (actionType === undefined)
                 return item.type === "wait_for_scheduler";
@@ -82,6 +125,7 @@ function sanitizeActionCandidates(candidates, selectedKeys, status, remainingRea
             const key = senderActionKey(item.senderId, allowed);
             return Boolean(key && selectedKeys.has(key));
         })
+            .map(sanitizeActionCandidate)
         : [];
     if (status === "awaiting_scheduler_after_ready_buffer" &&
         remainingProjectedGap > 0 &&
@@ -94,6 +138,344 @@ function sanitizeActionCandidates(candidates, selectedKeys, status, remainingRea
     }
     return filtered;
 }
+function sanitizeActionCandidate(candidate) {
+    return {
+        type: candidate.type,
+        senderId: stringValue(candidate.senderId),
+        senderName: stringValue(candidate.senderName),
+        actionType: stringValue(candidate.actionType),
+        campaignId: stringValue(candidate.campaignId),
+        campaignName: stringValue(candidate.campaignName),
+        tableId: stringValue(candidate.tableId),
+        tableName: stringValue(candidate.tableName) ?? null,
+        columnId: stringValue(candidate.columnId) ?? null,
+        targetRows: typeof candidate.targetRows === "number" ? candidate.targetRows : undefined,
+        columnRole: stringValue(candidate.columnRole),
+        rowSelector: sanitizeRowSelector(candidate.rowSelector),
+        actionKey: stringValue(candidate.actionKey),
+        rereadAfter: candidate.rereadAfter === "get_refill_target_plan"
+            ? "get_refill_target_plan"
+            : undefined,
+        reason: stringValue(candidate.reason),
+    };
+}
+function sanitizeRowSelector(value) {
+    if (!isRecord(value) || typeof value.type !== "string")
+        return undefined;
+    if (![
+        "needsApproval",
+        "needsEnrichment",
+        "needsGeneratedMessage",
+        "staleGeneratedMessages",
+        "reviewBatch",
+        "rowIds",
+    ].includes(value.type)) {
+        return undefined;
+    }
+    return {
+        type: value.type,
+        ...(typeof value.limit === "number" ? { limit: value.limit } : {}),
+        ...(Array.isArray(value.rowIds) ? { rowIds: stringArray(value.rowIds) } : {}),
+    };
+}
+function sanitizeToolInput(value) {
+    if (!isRecord(value))
+        return {};
+    return {
+        senderId: stringValue(value.senderId),
+        campaignId: stringValue(value.campaignId),
+        tableId: stringValue(value.tableId),
+        columnId: stringValue(value.columnId) ?? null,
+        targetPreparedMessages: typeof value.targetPreparedMessages === "number"
+            ? value.targetPreparedMessages
+            : undefined,
+        approvalMode: value.approvalMode === "approve" || value.approvalMode === "mark_ready"
+            ? value.approvalMode
+            : undefined,
+        columnRole: stringValue(value.columnRole),
+        rowSelector: sanitizeRowSelector(value.rowSelector),
+        oldThreshold: typeof value.oldThreshold === "number" ? value.oldThreshold : undefined,
+        suggestedThreshold: typeof value.suggestedThreshold === "number"
+            ? value.suggestedThreshold
+            : undefined,
+        availableCredits: typeof value.availableCredits === "number"
+            ? value.availableCredits
+            : undefined,
+        threshold: typeof value.threshold === "number" ? value.threshold : undefined,
+    };
+}
+function sanitizePacketIds(value) {
+    if (!isRecord(value))
+        return {};
+    return {
+        senderId: stringValue(value.senderId),
+        campaignId: stringValue(value.campaignId),
+        tableId: stringValue(value.tableId),
+        columnId: stringValue(value.columnId) ?? null,
+    };
+}
+function sanitizeStructuredAction(action, selectedBySender, mode, rank) {
+    if (!isRecord(action) || typeof action.type !== "string")
+        return null;
+    if (!SAFE_PACKET_ACTION_TYPES.has(action.type))
+        return null;
+    if (mode === "next" && MANUAL_ONLY_PACKET_ACTION_TYPES.has(action.type)) {
+        return null;
+    }
+    const ids = sanitizePacketIds(action.ids);
+    const senderId = stringValue(ids.senderId);
+    if (senderId && !selectedBySender.has(senderId))
+        return null;
+    if (!senderId && action.type !== "wait_for_scheduler")
+        return null;
+    const yoloEligible = mode === "manual" || MANUAL_ONLY_PACKET_ACTION_TYPES.has(action.type)
+        ? false
+        : action.yoloEligible !== false;
+    return {
+        rank,
+        type: action.type,
+        toolName: stringValue(action.toolName) ?? null,
+        sideEffectClass: stringValue(action.sideEffectClass),
+        ids,
+        toolInput: sanitizeToolInput(action.toolInput),
+        inputSummary: stringValue(action.inputSummary) ?? "",
+        reason: stringValue(action.reason) ?? "",
+        prerequisites: stringArray(action.prerequisites),
+        rereadAfter: action.rereadAfter === "get_refill_target_plan"
+            ? "get_refill_target_plan"
+            : null,
+        stopCondition: stringValue(action.stopCondition) ?? "",
+        yoloEligible,
+    };
+}
+function sanitizeLedgerBlockers(value) {
+    if (!Array.isArray(value))
+        return [];
+    return value
+        .filter((blocker) => isRecord(blocker))
+        .filter((blocker) => !blocker.actionType || allowedActionType(blocker.actionType))
+        .map((blocker) => ({
+        code: stringValue(blocker.code) ?? "blocked",
+        detail: stringValue(blocker.detail),
+        actionType: stringValue(blocker.actionType),
+        campaignId: stringValue(blocker.campaignId),
+        tableId: stringValue(blocker.tableId),
+        message: stringValue(blocker.message),
+    }));
+}
+function sanitizeEligibleSenderLedger(value, selectedBySender) {
+    if (!Array.isArray(value))
+        return [];
+    return value
+        .filter((row) => {
+        if (!isRecord(row) || typeof row.senderId !== "string")
+            return false;
+        return selectedBySender.has(row.senderId);
+    })
+        .map((row) => {
+        const selectedLane = selectedBySender.get(row.senderId);
+        const eligibleActionTypes = actionTypesFrom(row.eligibleActionTypes).filter((actionType) => actionType === selectedLane);
+        return {
+            senderId: row.senderId,
+            senderName: stringValue(row.senderName) ?? "",
+            connected: row.connected === true,
+            salesNavConnected: booleanValue(row.salesNavConnected) ?? false,
+            status: stringValue(row.status) ?? "eligible",
+            eligibleActionTypes,
+            attachedCampaignIds: stringArray(row.attachedCampaignIds),
+            blockers: sanitizeLedgerBlockers(row.blockers),
+        };
+    });
+}
+function sanitizeCampaignRanking(value) {
+    if (!isRecord(value)) {
+        return {
+            selectedCampaignId: null,
+            selectedTableId: null,
+            selectedCampaignName: null,
+            selectedTableName: null,
+            options: [],
+        };
+    }
+    const options = Array.isArray(value.options)
+        ? value.options
+            .filter((option) => isRecord(option))
+            .map((option) => ({
+            rank: numberValue(option.rank),
+            campaignId: stringValue(option.campaignId) ?? "",
+            campaignName: stringValue(option.campaignName) ?? "",
+            tableId: stringValue(option.tableId) ?? "",
+            tableName: stringValue(option.tableName) ?? null,
+            campaignStatus: stringValue(option.campaignStatus) ?? null,
+            supportsSelectedLane: option.supportsSelectedLane === true,
+            rankSignals: stringArray(option.rankSignals),
+            rankReason: stringValue(option.rankReason) ?? "",
+            blockers: sanitizeLedgerBlockers(option.blockers),
+        }))
+        : [];
+    return {
+        selectedCampaignId: stringValue(value.selectedCampaignId) ?? null,
+        selectedTableId: stringValue(value.selectedTableId) ?? null,
+        selectedCampaignName: stringValue(value.selectedCampaignName) ?? null,
+        selectedTableName: stringValue(value.selectedTableName) ?? null,
+        options,
+    };
+}
+function sanitizeSourcePlan(value) {
+    if (!isRecord(value) || typeof value.state !== "string") {
+        return { state: "not_needed" };
+    }
+    return {
+        state: SOURCE_PLAN_STATES.has(value.state) ? value.state : "blocked",
+        reason: stringValue(value.reason),
+        campaignId: stringValue(value.campaignId),
+        tableId: stringValue(value.tableId),
+        remainingRowsNeeded: typeof value.remainingRowsNeeded === "number"
+            ? value.remainingRowsNeeded
+            : undefined,
+    };
+}
+function sanitizePaidInmail(value) {
+    if (!isRecord(value))
+        return null;
+    return {
+        status: stringValue(value.status) ?? "missing_credit_facts",
+        reason: stringValue(value.reason) ?? "",
+        checkedAt: stringValue(value.checkedAt) ?? null,
+        balance: typeof value.balance === "number" ? value.balance : null,
+        sentSince: numberValue(value.sentSince),
+        availableCredits: numberValue(value.availableCredits),
+        threshold: numberValue(value.threshold),
+        campaignId: stringValue(value.campaignId) ?? null,
+        campaignName: stringValue(value.campaignName) ?? null,
+        tableId: stringValue(value.tableId) ?? null,
+        tableName: stringValue(value.tableName) ?? null,
+        columnId: stringValue(value.columnId) ?? null,
+        suggestedThreshold: typeof value.suggestedThreshold === "number"
+            ? value.suggestedThreshold
+            : null,
+    };
+}
+function sanitizeStructuredSenderPlans(value, selectedBySender) {
+    if (!Array.isArray(value))
+        return [];
+    return value
+        .filter((plan) => {
+        if (!isRecord(plan) || typeof plan.senderId !== "string")
+            return false;
+        const selectedLane = allowedActionType(plan.selectedLane);
+        return Boolean(selectedLane && selectedBySender.get(plan.senderId) === selectedLane);
+    })
+        .map((plan) => {
+        const nextActions = Array.isArray(plan.nextActions)
+            ? plan.nextActions
+                .map((action, index) => sanitizeStructuredAction(action, selectedBySender, "next", index + 1))
+                .filter((action) => Boolean(action))
+            : [];
+        const manualAlternates = Array.isArray(plan.manualAlternates)
+            ? plan.manualAlternates
+                .map((action, index) => sanitizeStructuredAction(action, selectedBySender, "manual", index + 1))
+                .filter((action) => Boolean(action))
+            : [];
+        return {
+            senderId: plan.senderId,
+            senderName: stringValue(plan.senderName) ?? "",
+            status: stringValue(plan.status) ?? "needs_refill",
+            selectedLane: allowedActionType(plan.selectedLane),
+            horizon: isRecord(plan.horizon)
+                ? {
+                    selectedDays: Array.isArray(plan.horizon.selectedDays)
+                        ? plan.horizon.selectedDays
+                        : [],
+                    grossTarget: numberValue(plan.horizon.grossTarget),
+                    schedulerFillableSlots: typeof plan.horizon.schedulerFillableSlots === "number"
+                        ? plan.horizon.schedulerFillableSlots
+                        : null,
+                    schedulerFillableSlotsKnown: plan.horizon.schedulerFillableSlotsKnown === true,
+                    capacityConfidence: stringValue(plan.horizon.capacityConfidence) ?? "unknown",
+                    schedulerCapacityMode: stringValue(plan.horizon.schedulerCapacityMode),
+                }
+                : {},
+            coverage: isRecord(plan.coverage)
+                ? {
+                    goal: numberValue(plan.coverage.goal),
+                    alreadySent: numberValue(plan.coverage.alreadySent),
+                    scheduled: numberValue(plan.coverage.scheduled),
+                    readyAndWaitingToBeScheduled: numberValue(plan.coverage.readyAndWaitingToBeScheduled),
+                    stillNeed: numberValue(plan.coverage.stillNeed),
+                    needToPrepare: numberValue(plan.coverage.needToPrepare),
+                    coveredTotal: typeof plan.coverage.coveredTotal === "number"
+                        ? plan.coverage.coveredTotal
+                        : undefined,
+                }
+                : {},
+            coverageDisplay: stringArray(plan.coverageDisplay),
+            campaignRanking: sanitizeCampaignRanking(plan.campaignRanking),
+            paidInmail: sanitizePaidInmail(plan.paidInmail),
+            sourcePlan: sanitizeSourcePlan(plan.sourcePlan),
+            nextActions,
+            manualAlternates,
+            ...(isRecord(plan.emptyState)
+                ? {
+                    emptyState: {
+                        code: stringValue(plan.emptyState.code) ?? "blocked",
+                        reason: stringValue(plan.emptyState.reason) ?? "",
+                        blockerCodes: stringArray(plan.emptyState.blockerCodes),
+                    },
+                }
+                : {}),
+        };
+    });
+}
+function buildSanitizedGlobalActionQueue(senderRefillPlans) {
+    return senderRefillPlans
+        .flatMap((plan) => Array.isArray(plan.nextActions) ? plan.nextActions.slice(0, 1) : [])
+        .filter((action) => isRecord(action))
+        .map((action, index) => ({
+        ...action,
+        rank: index + 1,
+    }));
+}
+function emptyUnsupportedResult(result) {
+    if (!isRecord(result) || !isRecord(result.target))
+        return result;
+    return {
+        ...result,
+        status: "blocked",
+        request: isRecord(result.request)
+            ? { ...result.request, actionTypes: [] }
+            : result.request,
+        target: {
+            ...result.target,
+            actionSelections: [],
+            selectedDays: [],
+            senderPlans: [],
+            eligibleSenderLedger: [],
+            senderRefillPlans: [],
+            globalActionQueue: [],
+            grossTarget: 0,
+            sent: 0,
+            scheduled: 0,
+            projected: 0,
+            readyBuffer: 0,
+            remainingScheduledGap: 0,
+            remainingProjectedGap: 0,
+            remainingReadyOrProjectedGap: 0,
+            remainingReadyOrScheduledGap: 0,
+        },
+        coverage: isRecord(result.coverage)
+            ? {
+                ...result.coverage,
+                sentCounts: [],
+                scheduledCounts: [],
+                readyCounts: [],
+            }
+            : result.coverage,
+        actionCandidates: [],
+        blockers: [],
+        mcpSanitizedRefillLanes: true,
+    };
+}
 function sanitizeBlockers(blockers, selectedKeys) {
     if (!Array.isArray(blockers))
         return [];
@@ -157,7 +539,7 @@ function sanitizeRefillTargetPlanResult(result) {
     const selectedKeys = new Set([...selectedBySender.entries()].map(([senderId, actionType]) => `${senderId}:${actionType}`));
     const actionTypes = [...new Set(selectedBySender.values())];
     if (selectedKeys.size === 0)
-        return result;
+        return emptyUnsupportedResult(result);
     const senderPlans = rawSenderPlans.filter((plan) => isRecord(plan) &&
         selectedKeys.has(`${String(plan.senderId)}:${String(plan.actionType)}`));
     const selectedDays = Array.isArray(target.selectedDays)
@@ -188,13 +570,18 @@ function sanitizeRefillTargetPlanResult(result) {
     const remainingProjectedGap = senderPlans.reduce((sum, plan) => sum + numberValue(plan.remainingProjectedGap), 0);
     const remainingReadyOrProjectedGap = senderPlans.reduce((sum, plan) => sum + numberValue(plan.remainingReadyOrProjectedGap), 0);
     const blockers = sanitizeBlockers(result.blockers, selectedKeys);
-    const status = blockers.some((blocker) => ["sender_disconnected", "sender_sales_nav_disconnected"].includes(String(blocker.code))) || grossTarget <= 0
+    const eligibleSenderLedger = sanitizeEligibleSenderLedger(target.eligibleSenderLedger, selectedBySender);
+    const senderRefillPlans = sanitizeStructuredSenderPlans(target.senderRefillPlans, selectedBySender);
+    const globalActionQueue = buildSanitizedGlobalActionQueue(senderRefillPlans);
+    const status = blockers.some((blocker) => ["sender_disconnected", "sender_sales_nav_disconnected"].includes(String(blocker.code)))
         ? "blocked"
         : remainingProjectedGap === 0
             ? "complete"
-            : remainingReadyOrProjectedGap === 0
-                ? "awaiting_scheduler_after_ready_buffer"
-                : "needs_refill";
+            : grossTarget <= 0
+                ? "blocked"
+                : remainingReadyOrProjectedGap === 0
+                    ? "awaiting_scheduler_after_ready_buffer"
+                    : "needs_refill";
     return {
         ...result,
         status,
@@ -206,6 +593,9 @@ function sanitizeRefillTargetPlanResult(result) {
             actionSelections,
             selectedDays,
             senderPlans,
+            eligibleSenderLedger,
+            senderRefillPlans,
+            globalActionQueue,
             grossTarget,
             sent,
             scheduled,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sellable/mcp",
-  "version": "0.1.471",
+  "version": "0.1.473",
   "type": "module",
   "description": "Sellable MCP server for Claude Code and Codex campaign workflows",
   "main": "dist/index.js",

package/skills/refill-sends/SKILL.md

@@ -143,6 +143,39 @@ two lanes to fill. If a stale target plan selects `send_dm` or
 `send_inmail_open`, stop and re-plan with the current planner before mutation.
 Short form: trust the target plan's inferred lane only when it is a
 connection-invite or paid-InMail refill lane.
+
+Structured planner packet:
+
+- `target.eligibleSenderLedger` is the public sender eligibility ledger.
+- `target.senderRefillPlans[]` is the canonical sender-level packet; read and
+  display it before mutation.
+- Each sender packet includes `campaignRanking.options`, `sourcePlan`,
+  `nextActions`, and `manualAlternates`.
+- Preserve these coverage labels exactly: `Need to prepare`, `Goal`,
+  `Already sent`, `Scheduled`, `Ready and waiting to be scheduled`, and
+  `Still need`.
+- `target.globalActionQueue` is the only cross-sender yolo execution queue.
+  Execute exactly one globally ranked primitive from
+  `target.globalActionQueue[0]`, then rerun `get_refill_target_plan` before
+  choosing another action.
+- `manualAlternates` are not yolo actions. Threshold lowering and campaign
+  creation are manual continuations only.
+
+Run-local paid-credit guard: maintain a `refreshedPaidInmailSenderIds` set for
+the current command call. Refresh each selected sender at most once per refill
+command call, then rerun `get_refill_target_plan`. If fresh facts are still
+below threshold, below-threshold paid-InMail facts fall back to an existing
+connection lane or a manual continuation.
+
+Compact refill lessons: sender-level target plan is final truth; trust
+`schedulerGate.sendable` and scheduler gate blockers, not raw
+`unipileAccountStatus` labels alone; use compact prep status checks for
+long-running jobs; reread target plans after prep or cancel; treat ready rows as
+intermediate; avoid huge parallel target-plan reads when output is large. If a
+campaign produces prepared/ready rows but sender-level projected coverage does
+not move after one bounded settle loop, pivot to compact prep status or a
+scheduler-proven lane. Do not keep waiting on campaign-level ready counts.
+
 For exact-date requests, pass `targetDate` to `get_refill_target_plan`. If you
 need raw proof, call the read-only `get_scheduler_fill_capacity` query for the
 same sender/action/date; it tells the MCP how many cells the product scheduler
@@ -160,10 +193,11 @@ state, not a close-out condition.
 If paid InMail credit facts are stale or missing and the target plan returns a
 `refresh_paid_inmail_credits` action candidate, include the exact sender id,
 campaign/table/column proof, expected sender-credit-cache writes, and rerun plan
-step in the bounded packet. After `refresh_paid_inmail_credits`, rerun
-`get_refill_target_plan` before any prep/import/approval/start action. If paid
-InMail is below threshold after a fresh credit read, report the exact
-campaign/table/column threshold action or connection fallback; `--yolo` does not lower paid-InMail thresholds or create campaigns.
+step in the bounded packet. In `--yolo`, refresh each exact selected sender at
+most once for the current refill run, then rerun `get_refill_target_plan` before
+any prep/import/approval/start action. If paid InMail is below threshold after a
+fresh credit read, report the exact campaign/table/column threshold action or
+connection fallback; `--yolo` does not lower paid-InMail thresholds or create campaigns.
 
 If the plain route's managed waterfall targets are stale, for example skipped
 targets show archived/completed shared slots or the returned targets do not cover
@@ -219,7 +253,7 @@ apply/prep/start result, reread state, settle processing when needed, and move t
 the next selected sender or start-eligible same-packet campaign instead of
 stopping after the first partial result. If no in-packet safe action remains,
 return concrete continuation options with campaign names, exact ids, which option
-is already covered by the current packet, and which option needs a new approval
+is still covered by the current packet, and which option needs a new approval
 packet.
 
 For `--yolo` fill/schedule requests, completion means projected saturation

package/skills/refill-sends-workflow/SKILL.md

@@ -89,6 +89,36 @@ in-progress wait state, not a reason to mark the goal complete or blocked.
    mutation.
    Short form: trust the target plan's inferred lane only when it is a
    connection-invite or paid-InMail refill lane.
+   Structured planner packet:
+   - `target.eligibleSenderLedger` is the public sender eligibility ledger.
+   - `target.senderRefillPlans[]` is the canonical sender-level packet; read and
+     display it before mutation.
+   - Each sender packet includes `campaignRanking.options`, `sourcePlan`,
+     `nextActions`, and `manualAlternates`.
+   - Preserve these coverage labels exactly: `Need to prepare`, `Goal`,
+     `Already sent`, `Scheduled`, `Ready and waiting to be scheduled`, and
+     `Still need`.
+   - `target.globalActionQueue` is the only cross-sender yolo execution queue.
+     execute exactly one globally ranked primitive from
+     `target.globalActionQueue[0]`, then rerun `get_refill_target_plan` before
+     choosing another action.
+   - `nextActions[0]` is the current sender's smallest safe primitive.
+   - `manualAlternates` are not yolo actions. Threshold lowering and campaign
+     creation are manual continuations only.
+   Run-local paid-credit guard: maintain a `refreshedPaidInmailSenderIds` set
+   for the current command call. refresh each selected sender at most once per
+   refill command call, then rerun `get_refill_target_plan`. If fresh facts are
+   still below threshold, below-threshold paid-InMail facts fall back to an
+   existing connection lane or a manual continuation.
+   Compact refill lessons: sender-level target plan is final truth; trust
+   `schedulerGate.sendable` and scheduler gate blockers, not raw
+   `unipileAccountStatus` labels alone; use compact prep status checks for
+   long-running jobs; reread target plans after prep or cancel; treat ready rows
+   as intermediate; avoid huge parallel target-plan reads when output is large.
+   If a campaign produces prepared/ready rows but sender-level projected
+   coverage does not move after one bounded settle loop, pivot to compact prep
+   status or a scheduler-proven lane. Do not keep waiting on campaign-level
+   ready counts.
    For exact-date requests, pass `targetDate` to `get_refill_target_plan`.
    When you need raw diagnostic proof, call `get_scheduler_fill_capacity` for
    the same exact sender/action/date. That query is read-only and tells the MCP
@@ -109,10 +139,11 @@ in-progress wait state, not a reason to mark the goal complete or blocked.
    If paid InMail credit facts are stale or missing and the target plan returns a
    `refresh_paid_inmail_credits` action candidate, include the exact sender id,
    campaign/table/column proof, expected sender-credit-cache write, and rerun plan
-   step in the bounded packet. After `refresh_paid_inmail_credits`, rerun
-   `get_refill_target_plan` before any prep/import/approval/start action. If paid
-   InMail is below threshold after a fresh credit read, report the exact
-   campaign/table/column threshold action or connection fallback; `--yolo` does not lower paid-InMail thresholds or create campaigns.
+   step in the bounded packet. In `--yolo`, refresh each exact selected sender at
+   most once for the current refill run, then rerun `get_refill_target_plan` before
+   any prep/import/approval/start action. If paid InMail is below threshold after a
+   fresh credit read, report the exact campaign/table/column threshold action or
+   connection fallback; `--yolo` does not lower paid-InMail thresholds or create campaigns.
 2. Call `resolve_campaign_fill_route`. Use `intent:"plain"` for generic
    fill/load language, `intent:"active"` only when the user explicitly narrowed
    to active regular campaigns or when the plain route has stale managed