@oxygen-agent/cli 1.1003.12 → 1.1010.644

package/node_modules/@oxygen/shared/dist/workspace-file-storage.d.ts

@@ -32,6 +32,35 @@ export declare function readWorkspaceFileObject(input: {
     mimeType: WorkspaceStoredFileMimeType;
     signal?: AbortSignal;
 }): Promise<Uint8Array>;
+/** How long a presigned workspace-file upload stays valid. Long enough for 100 MiB on a slow link. */
+export declare const WORKSPACE_FILE_UPLOAD_PRESIGN_SECONDS = 900;
+/**
+ * A presigned PUT for an opaque workspace file whose bytes never pass through
+ * the API.
+ *
+ * The base64-in-JSON path is bounded by the JSON body ceiling (2,000,000
+ * bytes, so ~1.5 MB of file) and, on managed production, by the platform's
+ * request-body limit — while the store itself allows 100 MiB. The browser and
+ * the CLI PUT the bytes straight to object storage instead; the caller declares
+ * the size and digest up front (the reservation needs both), and completion
+ * runs readWorkspaceFileObject, the same verified readback every stored file
+ * gets, so an upload that does not match what was declared is never finalized.
+ *
+ * `content-type` is signed (the SDK's default is to leave it unsigned) so the
+ * stored object's type is the opaque one this store expects; `content-length`
+ * is signed by the presigner from ContentLength.
+ */
+export declare function presignWorkspaceFileUpload(input: {
+    organizationId: string;
+    fileId: string;
+    fileName: string;
+    sizeBytes: number;
+}): Promise<{
+    uploadUrl: string;
+    storageKey: string;
+    expiresInSeconds: number;
+    contentType: WorkspaceStoredFileMimeType;
+}>;
 /** Immutable PUT followed by bounded readback. A matching existing object is a safe retry. */
 export declare function putWorkspaceFileObject(input: {
     organizationId: string;

package/node_modules/@oxygen/shared/dist/workspace-file-storage.js

@@ -1,6 +1,7 @@
 import { Buffer } from "node:buffer";
 import { createHash } from "node:crypto";
 import { GetObjectCommand, PutObjectCommand } from "@aws-sdk/client-s3";
+import { getSignedUrl } from "@aws-sdk/s3-request-presigner";
 import { OxygenError } from "./cli-result.js";
 import { resolveObjectStorageClient } from "./object-storage.js";
 export const WORKSPACE_VISUAL_SOURCE_MAX_BYTES = 1_500_000;
@@ -112,6 +113,36 @@ export async function readWorkspaceFileObject(input) {
         stream.destroy?.();
     }
 }
+/** How long a presigned workspace-file upload stays valid. Long enough for 100 MiB on a slow link. */
+export const WORKSPACE_FILE_UPLOAD_PRESIGN_SECONDS = 900;
+/**
+ * A presigned PUT for an opaque workspace file whose bytes never pass through
+ * the API.
+ *
+ * The base64-in-JSON path is bounded by the JSON body ceiling (2,000,000
+ * bytes, so ~1.5 MB of file) and, on managed production, by the platform's
+ * request-body limit — while the store itself allows 100 MiB. The browser and
+ * the CLI PUT the bytes straight to object storage instead; the caller declares
+ * the size and digest up front (the reservation needs both), and completion
+ * runs readWorkspaceFileObject, the same verified readback every stored file
+ * gets, so an upload that does not match what was declared is never finalized.
+ *
+ * `content-type` is signed (the SDK's default is to leave it unsigned) so the
+ * stored object's type is the opaque one this store expects; `content-length`
+ * is signed by the presigner from ContentLength.
+ */
+export async function presignWorkspaceFileUpload(input) {
+    if (!Number.isSafeInteger(input.sizeBytes) || input.sizeBytes < 0 || input.sizeBytes > WORKSPACE_OPAQUE_FILE_MAX_BYTES) {
+        throw new OxygenError("workspace_file_too_large", "File exceeds 100 MiB.");
+    }
+    const storageKey = buildWorkspaceFileObjectKey(input);
+    const { client, bucket } = resolveObjectStorageClient();
+    const contentType = "application/octet-stream";
+    const uploadUrl = await getSignedUrl(client, new PutObjectCommand({
+        Bucket: bucket, Key: storageKey, ContentLength: input.sizeBytes, ContentType: contentType,
+    }), { expiresIn: WORKSPACE_FILE_UPLOAD_PRESIGN_SECONDS, signableHeaders: new Set(["content-type"]) });
+    return { uploadUrl, storageKey, expiresInSeconds: WORKSPACE_FILE_UPLOAD_PRESIGN_SECONDS, contentType };
+}
 /** Immutable PUT followed by bounded readback. A matching existing object is a safe retry. */
 export async function putWorkspaceFileObject(input) {
     input.signal?.throwIfAborted();

package/node_modules/@oxygen/shared/package.json

@@ -166,6 +166,11 @@
       "import": "./dist/signup-lead-webhook.js",
       "default": "./dist/signup-lead-webhook.js"
     },
+    "./signup-lead-payload": {
+      "types": "./dist/signup-lead-payload.d.ts",
+      "import": "./dist/signup-lead-payload.js",
+      "default": "./dist/signup-lead-payload.js"
+    },
     "./knowledge-constants": {
       "types": "./dist/knowledge-constants.d.ts",
       "import": "./dist/knowledge-constants.js",
@@ -275,6 +280,10 @@
       "types": "./dist/linkedin-sequences.d.ts",
       "import": "./dist/linkedin-sequences.js",
       "default": "./dist/linkedin-sequences.js"
+    },
+    "./provider-balance-signal": {
+      "types": "./dist/provider-balance-signal.d.ts",
+      "import": "./dist/provider-balance-signal.js"
     }
   },
   "dependencies": {}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oxygen-agent/cli",
-  "version": "1.1003.12",
+  "version": "1.1010.644",
   "private": false,
   "license": "UNLICENSED",
   "type": "module",
@@ -38,6 +38,7 @@
     "@langfuse/otel": "^5.11.0",
     "@langfuse/tracing": "^5.11.0",
     "@opentelemetry/api": "1.9.1",
+    "@opentelemetry/otlp-transformer": "0.221.0",
     "@opentelemetry/resources": "2.10.0",
     "@opentelemetry/sdk-trace-base": "2.10.0",
     "commander": "14.0.3",