@oxygen-agent/cli 1.1011.855 → 1.1011.1091

package/node_modules/@oxygen/shared/dist/table-filter-operators.js

@@ -0,0 +1,50 @@
+// Operators a filter-tree leaf (`tables query --filter-tree-json`, MCP
+// `filterTree`, saved views) accepts. The SQL builder in
+// packages/tenant-db/src/filters.ts, the CLI help and the MCP schema all read
+// this one list, so the operators a caller is told about are exactly the ones
+// the server accepts.
+export const FILTER_TREE_OPERATORS = [
+    "is",
+    "is_not",
+    "contains",
+    "not_contains",
+    "starts_with",
+    "ends_with",
+    "eq",
+    "neq",
+    "gt",
+    "gte",
+    "lt",
+    "lte",
+    "before",
+    "after",
+    "on_or_before",
+    "on_or_after",
+    "is_true",
+    "is_false",
+    "is_any_of",
+    "is_none_of",
+    "is_empty",
+    "is_not_empty",
+];
+// is_true/is_false compare without a cast, so only a boolean value accepts them.
+// Every other operator casts the stored value and works on any column.
+const BOOLEAN_ONLY_OPERATORS = new Set(["is_true", "is_false"]);
+/** The filter-tree operators a column whose SQL value has `dataType` accepts. */
+export function filterTreeOperatorsFor(dataType) {
+    if (dataType === "boolean")
+        return [...FILTER_TREE_OPERATORS];
+    return FILTER_TREE_OPERATORS.filter((operator) => !BOOLEAN_ONLY_OPERATORS.has(operator));
+}
+// The flat `--filter-json` dialect spells some operators differently. Callers
+// moving between the two dialects send these names to a filter tree.
+const FLAT_FILTER_OPERATOR_EQUIVALENTS = {
+    is_null: "is_empty",
+    is_not_null: "is_not_empty",
+    in: "is_any_of",
+    not_in: "is_none_of",
+};
+/** The filter-tree operator a rejected operator name most likely meant, if any. */
+export function filterTreeOperatorSuggestion(operator) {
+    return FLAT_FILTER_OPERATOR_EQUIVALENTS[operator.trim().toLowerCase()] ?? null;
+}

package/node_modules/@oxygen/shared/dist/telemetry.js

@@ -239,6 +239,10 @@ const METRIC_SAFE_ATTRIBUTE_KEYS = new Set([
     "queue.lane",
     "queue.role",
     "queue.state",
+    // oxygen.worker.queue.uncertain: the store path that quarantined a row
+    // (EXECUTION_UNCERTAIN_SOURCES in @oxygen/work-queue, or "unknown"). Never the
+    // kind's resource or effect key.
+    "queue.uncertain_source",
     "scope",
     "rail",
     "overall_status",

package/node_modules/@oxygen/shared/dist/version.d.ts

@@ -1,2 +1,2 @@
 export declare const OXYGEN_VERSION: string;
-export declare const OXYGEN_MINIMUM_CLI_VERSION = "1.906.0";
+export declare const OXYGEN_MINIMUM_CLI_VERSION = "1.917.5";

package/node_modules/@oxygen/shared/dist/version.generated.d.ts

@@ -1 +1 @@
-export declare const OXYGEN_BUILD_VERSION = "1.1011.855";
+export declare const OXYGEN_BUILD_VERSION = "1.1011.1091";

package/node_modules/@oxygen/shared/dist/version.generated.js

@@ -1,2 +1,2 @@
 // GENERATED by scripts/ci/version-stamp.mjs from VERSION + git history. Do not edit; do not commit.
-export const OXYGEN_BUILD_VERSION = "1.1011.855";
+export const OXYGEN_BUILD_VERSION = "1.1011.1091";

package/node_modules/@oxygen/shared/dist/version.js

@@ -49,4 +49,4 @@ export const OXYGEN_VERSION = OXYGEN_BUILD_VERSION;
 // Since 2026-09-28 the release-preparation step advances this literal to the
 // highest CLI version published on npm for at least 30 days. It never lowers
 // the floor. The source change lands on dev before the next production release.
-export const OXYGEN_MINIMUM_CLI_VERSION = "1.906.0";
+export const OXYGEN_MINIMUM_CLI_VERSION = "1.917.5";

package/node_modules/@oxygen/shared/dist/whatsapp-sender-limits.d.ts

@@ -0,0 +1,42 @@
+/**
+ * The WhatsApp sender-limit overlay: the keys a WhatsApp account accepts and
+ * their defaults and hard maximums. One owner for the quota enforcer
+ * (packages/integrations/src/whatsapp-quota.ts), the limits route, the MCP and
+ * CLI surfaces and the web form (OXP-11.3.19): the MCP tool once advertised a
+ * chats_reads_per_day key the route silently dropped and maxima (400 reads,
+ * 7200 s spacing, 3600 s jitter) the quota never allowed.
+ *
+ * Everything stays deliberately small: WhatsApp Web bans on volume.
+ */
+export declare const WHATSAPP_SENDER_LIMIT_KEYS: readonly ["messages_per_day", "likes_per_day", "messages_reads_per_day", "relations_reads_per_day", "total_actions_per_day", "total_reads_per_day", "min_action_spacing_seconds", "action_spacing_jitter_seconds"];
+export type WhatsAppSenderLimitKey = (typeof WHATSAPP_SENDER_LIMIT_KEYS)[number];
+export declare const WHATSAPP_SENDER_LIMIT_DEFAULTS: {
+    readonly messages_per_day: 20;
+    readonly likes_per_day: 20;
+    readonly messages_reads_per_day: 200;
+    readonly relations_reads_per_day: 40;
+    readonly total_actions_per_day: 40;
+    readonly total_reads_per_day: 240;
+    readonly min_action_spacing_seconds: 600;
+    readonly action_spacing_jitter_seconds: 300;
+};
+export declare const WHATSAPP_SENDER_LIMIT_MAXIMUMS: {
+    readonly messages_per_day: 40;
+    readonly likes_per_day: 40;
+    readonly messages_reads_per_day: 600;
+    readonly relations_reads_per_day: 100;
+    readonly total_actions_per_day: 80;
+    readonly total_reads_per_day: 700;
+    readonly min_action_spacing_seconds: 3600;
+    readonly action_spacing_jitter_seconds: 1800;
+};
+/** What each WhatsApp limit counts, for MCP and CLI help. */
+export declare const WHATSAPP_SENDER_LIMIT_NOTES: Record<WhatsAppSenderLimitKey, string>;
+/**
+ * The WhatsApp limits an account runs at: each stored override, floored and
+ * capped at its WhatsApp maximum, else the WhatsApp default. Read from the
+ * overrides alone: a sender's resolved `limits` start from the LinkedIn
+ * defaults (300 s spacing, 150 actions, 1000 reads a day), which a WhatsApp
+ * number must never inherit (OXP-11.3.21).
+ */
+export declare function resolveWhatsAppSenderLimits(overrides: Partial<Record<WhatsAppSenderLimitKey, unknown>> | null | undefined): Record<WhatsAppSenderLimitKey, number>;

package/node_modules/@oxygen/shared/dist/whatsapp-sender-limits.js

@@ -0,0 +1,68 @@
+/**
+ * The WhatsApp sender-limit overlay: the keys a WhatsApp account accepts and
+ * their defaults and hard maximums. One owner for the quota enforcer
+ * (packages/integrations/src/whatsapp-quota.ts), the limits route, the MCP and
+ * CLI surfaces and the web form (OXP-11.3.19): the MCP tool once advertised a
+ * chats_reads_per_day key the route silently dropped and maxima (400 reads,
+ * 7200 s spacing, 3600 s jitter) the quota never allowed.
+ *
+ * Everything stays deliberately small: WhatsApp Web bans on volume.
+ */
+export const WHATSAPP_SENDER_LIMIT_KEYS = [
+    "messages_per_day",
+    "likes_per_day",
+    "messages_reads_per_day",
+    "relations_reads_per_day",
+    "total_actions_per_day",
+    "total_reads_per_day",
+    "min_action_spacing_seconds",
+    "action_spacing_jitter_seconds",
+];
+export const WHATSAPP_SENDER_LIMIT_DEFAULTS = {
+    messages_per_day: 20,
+    likes_per_day: 20,
+    messages_reads_per_day: 200,
+    relations_reads_per_day: 40,
+    total_actions_per_day: 40,
+    total_reads_per_day: 240,
+    min_action_spacing_seconds: 600,
+    action_spacing_jitter_seconds: 300,
+};
+export const WHATSAPP_SENDER_LIMIT_MAXIMUMS = {
+    messages_per_day: 40,
+    likes_per_day: 40,
+    messages_reads_per_day: 600,
+    relations_reads_per_day: 100,
+    total_actions_per_day: 80,
+    total_reads_per_day: 700,
+    min_action_spacing_seconds: 3600,
+    action_spacing_jitter_seconds: 1800,
+};
+/** What each WhatsApp limit counts, for MCP and CLI help. */
+export const WHATSAPP_SENDER_LIMIT_NOTES = {
+    messages_per_day: "Daily WhatsApp messages across direct warm traffic and opted-in Sequence actions; the warm-up ceiling (5, 10, 15, 20 by account age) wins when lower.",
+    likes_per_day: "Daily reactions.",
+    messages_reads_per_day: "Chat and message-history reads.",
+    relations_reads_per_day: "Chat-list reads.",
+    total_actions_per_day: "All sends: messages, reactions and edits.",
+    total_reads_per_day: "All reads.",
+    min_action_spacing_seconds: "Minimum seconds between WhatsApp actions.",
+    action_spacing_jitter_seconds: "Random seconds added on top of the spacing floor.",
+};
+/**
+ * The WhatsApp limits an account runs at: each stored override, floored and
+ * capped at its WhatsApp maximum, else the WhatsApp default. Read from the
+ * overrides alone: a sender's resolved `limits` start from the LinkedIn
+ * defaults (300 s spacing, 150 actions, 1000 reads a day), which a WhatsApp
+ * number must never inherit (OXP-11.3.21).
+ */
+export function resolveWhatsAppSenderLimits(overrides) {
+    const limits = { ...WHATSAPP_SENDER_LIMIT_DEFAULTS };
+    for (const key of WHATSAPP_SENDER_LIMIT_KEYS) {
+        const value = overrides?.[key];
+        if (typeof value === "number" && Number.isFinite(value) && value >= 0) {
+            limits[key] = Math.min(Math.floor(value), WHATSAPP_SENDER_LIMIT_MAXIMUMS[key]);
+        }
+    }
+    return limits;
+}

package/node_modules/@oxygen/shared/dist/workflow-trigger-metadata.d.ts

@@ -1,2 +1,17 @@
 export declare const WORKFLOW_TRIGGER_AUTO_PAUSE_METADATA_KEYS: readonly ["consecutive_failure_count", "consecutive_capacity_failure_count", "last_failure_code", "last_failure_at", "auto_paused_at", "auto_pause_reason"];
 export declare function clearWorkflowTriggerAutoPauseMetadata(metadata: Record<string, unknown>): Record<string, unknown>;
+export type WorkflowAutomationPauseCode = "automation_actions_exceeded" | "insufficient_credits";
+export type TriggerAutomationPause = {
+    reason: string;
+    reasonCode?: WorkflowAutomationPauseCode | null;
+    blockedAt: string | null;
+    resumesAt: string | null;
+};
+/** Decode typed refusals and the two controlled messages written before codes were stored. */
+export declare function readWorkflowAutomationPauseCode(code: unknown, reason: unknown): WorkflowAutomationPauseCode | null;
+/** Customer copy never echoes arbitrary persisted error text or invents a credit refill date. */
+export declare function workflowAutomationPauseMessage(pause: {
+    reason?: unknown;
+    reasonCode?: unknown;
+    resumesAt?: unknown;
+}): string;

package/node_modules/@oxygen/shared/dist/workflow-trigger-metadata.js

@@ -13,3 +13,36 @@ const WORKFLOW_TRIGGER_AUTO_PAUSE_METADATA_KEY_SET = new Set(WORKFLOW_TRIGGER_AU
 export function clearWorkflowTriggerAutoPauseMetadata(metadata) {
     return Object.fromEntries(Object.entries(metadata).filter(([key]) => !WORKFLOW_TRIGGER_AUTO_PAUSE_METADATA_KEY_SET.has(key)));
 }
+/** Decode typed refusals and the two controlled messages written before codes were stored. */
+export function readWorkflowAutomationPauseCode(code, reason) {
+    // An older scheduler can replace the reason without replacing a newer
+    // worker's code. Only a controlled legacy reason may override that code.
+    const text = typeof reason === "string" ? reason.trim() : "";
+    if (text === "automation_actions_exceeded" || text === "This workspace has reached its monthly automation action limit.") {
+        return "automation_actions_exceeded";
+    }
+    if (text === "insufficient_credits" || text.startsWith("Not enough credits for this automation work (")) {
+        return "insufficient_credits";
+    }
+    if (code === "automation_actions_exceeded" || code === "insufficient_credits")
+        return code;
+    return null;
+}
+/** Customer copy never echoes arbitrary persisted error text or invents a credit refill date. */
+export function workflowAutomationPauseMessage(pause) {
+    const code = readWorkflowAutomationPauseCode(pause.reasonCode, pause.reason);
+    if (code === "insufficient_credits") {
+        return "Not enough credits for the next scheduled run. Add credits before the next scheduled attempt.";
+    }
+    if (code === "automation_actions_exceeded") {
+        const resume = typeof pause.resumesAt === "string" ? new Date(pause.resumesAt) : null;
+        if (resume && !Number.isNaN(resume.getTime())) {
+            const day = new Intl.DateTimeFormat("en-US", {
+                month: "short", day: "numeric", year: "numeric", timeZone: "UTC",
+            }).format(resume);
+            return `The monthly automation-action allowance is exhausted. Cron runs resume on ${day} when the window resets.`;
+        }
+        return "The monthly automation-action allowance is exhausted. Check billing before the next scheduled attempt.";
+    }
+    return "Automation admission was refused. Check billing before the next scheduled attempt.";
+}

package/node_modules/@oxygen/shared/package.json

@@ -11,11 +11,6 @@
       "import": "./dist/knowledge-vault-markdown.js",
       "default": "./dist/knowledge-vault-markdown.js"
     },
-    "./vercel-sandbox-fetch": {
-      "types": "./dist/vercel-sandbox-fetch.d.ts",
-      "import": "./dist/vercel-sandbox-fetch.js",
-      "default": "./dist/vercel-sandbox-fetch.js"
-    },
     ".": {
       "types": "./dist/index.d.ts",
       "import": "./dist/index.js",
@@ -291,6 +286,11 @@
       "types": "./dist/provider-balance-signal.d.ts",
       "import": "./dist/provider-balance-signal.js"
     },
+    "./attempt-provenance": {
+      "types": "./dist/attempt-provenance.d.ts",
+      "import": "./dist/attempt-provenance.js",
+      "default": "./dist/attempt-provenance.js"
+    },
     "./copilot-skills.generated": null
   },
   "dependencies": {}

package/node_modules/@oxygen/workflows/dist/index.d.ts

@@ -6,6 +6,7 @@ export type { CanonicalWorkflowToolEffect } from "./tool-effects.js";
 export * from "./graph/index.js";
 export * from "./graph/lint.js";
 export * from "./portable.js";
+export { RECIPE_TIMESTAMP_MILLIS_SOURCE } from "./recipe-timestamp.js";
 export declare const WORKFLOW_MANIFEST_VERSION = 1;
 export declare const WORKFLOW_COMPILER_VERSION = "oxygen-workflows-v1";
 export declare const DURABLE_RECIPE_COMPILER_VERSION = "oxygen-recipes-v2";

package/node_modules/@oxygen/workflows/dist/index.js

@@ -13,6 +13,7 @@ export * from "./event-dispatch.js";
 export * from "./graph/index.js";
 export * from "./graph/lint.js";
 export * from "./portable.js";
+export { RECIPE_TIMESTAMP_MILLIS_SOURCE } from "./recipe-timestamp.js";
 export const WORKFLOW_MANIFEST_VERSION = 1;
 export const WORKFLOW_COMPILER_VERSION = "oxygen-workflows-v1";
 export const DURABLE_RECIPE_COMPILER_VERSION = "oxygen-recipes-v2";

package/node_modules/@oxygen/workflows/dist/recipe-timestamp.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Recipe-source helpers that emitted template bundles embed verbatim.
+ *
+ * The durable recipe runtime removes `Date` from the sandbox's globals
+ * (`installRecipeGlobalGuards` in apps/worker/src/recipe-sandbox-runtime.ts)
+ * so a replayed run cannot read a different clock. A bundle that calls
+ * `Date.parse` therefore throws "Cannot read properties of undefined (reading
+ * 'parse')" on every live run: both HubSpot sequencer projection templates
+ * failed that way from the day they were armed. Timestamps inside a bundle are
+ * parsed here by arithmetic instead, and `ctx.now()` stays the only clock.
+ *
+ * `readTimestampMillis` accepts positive epoch milliseconds (number or digit
+ * string) and ISO-8601 dates / date-times. A date-time without a zone is read
+ * as UTC, which is what `Date.parse` gives in the UTC sandbox. Anything else
+ * returns null.
+ *
+ * It lives here rather than in apps/web because the worker's sandbox runner
+ * embeds the same source: a bundle compiled before this parser existed is
+ * frozen in its installed revision and still calls `Date.parse`, so the runner
+ * answers that one call with this parser instead of the host clock.
+ */
+export declare const RECIPE_TIMESTAMP_MILLIS_SOURCE: string;

package/node_modules/@oxygen/workflows/dist/recipe-timestamp.js

@@ -0,0 +1,72 @@
+/**
+ * Recipe-source helpers that emitted template bundles embed verbatim.
+ *
+ * The durable recipe runtime removes `Date` from the sandbox's globals
+ * (`installRecipeGlobalGuards` in apps/worker/src/recipe-sandbox-runtime.ts)
+ * so a replayed run cannot read a different clock. A bundle that calls
+ * `Date.parse` therefore throws "Cannot read properties of undefined (reading
+ * 'parse')" on every live run: both HubSpot sequencer projection templates
+ * failed that way from the day they were armed. Timestamps inside a bundle are
+ * parsed here by arithmetic instead, and `ctx.now()` stays the only clock.
+ *
+ * `readTimestampMillis` accepts positive epoch milliseconds (number or digit
+ * string) and ISO-8601 dates / date-times. A date-time without a zone is read
+ * as UTC, which is what `Date.parse` gives in the UTC sandbox. Anything else
+ * returns null.
+ *
+ * It lives here rather than in apps/web because the worker's sandbox runner
+ * embeds the same source: a bundle compiled before this parser existed is
+ * frozen in its installed revision and still calls `Date.parse`, so the runner
+ * answers that one call with this parser instead of the host clock.
+ */
+export const RECIPE_TIMESTAMP_MILLIS_SOURCE = String.raw `
+const RECIPE_ISO_TIMESTAMP = /^(\d{4})-(\d{2})-(\d{2})(?:[Tt ](\d{2}):(\d{2})(?::(\d{2})(?:[.,](\d+))?)?(?:\s*([Zz]|[+-]\d{2}(?::?\d{2})?))?)?$/;
+
+function recipeDaysInMonth(year, month) {
+  if (month === 2) return (year % 4 === 0 && year % 100 !== 0) || year % 400 === 0 ? 29 : 28;
+  return month === 4 || month === 6 || month === 9 || month === 11 ? 30 : 31;
+}
+
+function parseIsoTimestampMillis(text) {
+  const match = RECIPE_ISO_TIMESTAMP.exec(text);
+  if (!match) return null;
+  const year = Number(match[1]);
+  const month = Number(match[2]);
+  const day = Number(match[3]);
+  const hour = match[4] === undefined ? 0 : Number(match[4]);
+  const minute = match[5] === undefined ? 0 : Number(match[5]);
+  const second = match[6] === undefined ? 0 : Number(match[6]);
+  const millis = match[7] === undefined ? 0 : Number((match[7] + "00").slice(0, 3));
+  if (month < 1 || month > 12 || day < 1 || day > recipeDaysInMonth(year, month)) return null;
+  if (hour > 23 || minute > 59 || second > 59) return null;
+  let offsetMinutes = 0;
+  const zone = match[8];
+  if (zone && zone !== "Z" && zone !== "z") {
+    const digits = zone.slice(1).replace(":", "");
+    const zoneHours = Number(digits.slice(0, 2));
+    const zoneMinutes = digits.length > 2 ? Number(digits.slice(2)) : 0;
+    if (zoneHours > 23 || zoneMinutes > 59) return null;
+    offsetMinutes = (zone[0] === "-" ? -1 : 1) * (zoneHours * 60 + zoneMinutes);
+  }
+  // Days since 1970-01-01 in the proleptic Gregorian calendar
+  // (Howard Hinnant's days_from_civil).
+  const shiftedYear = month <= 2 ? year - 1 : year;
+  const era = Math.floor(shiftedYear / 400);
+  const yearOfEra = shiftedYear - era * 400;
+  const dayOfYear = Math.floor((153 * (month + (month > 2 ? -3 : 9)) + 2) / 5) + day - 1;
+  const dayOfEra = yearOfEra * 365 + Math.floor(yearOfEra / 4) - Math.floor(yearOfEra / 100) + dayOfYear;
+  const days = era * 146097 + dayOfEra - 719468;
+  return ((days * 24 + hour) * 60 + minute - offsetMinutes) * 60000 + second * 1000 + millis;
+}
+
+function readTimestampMillis(value) {
+  if (typeof value === "number" && Number.isFinite(value) && value > 0) return Math.trunc(value);
+  const candidate = typeof value === "string" ? value.trim() : "";
+  if (!candidate) return null;
+  if (/^\d+$/.test(candidate)) {
+    const numeric = Number(candidate);
+    return Number.isFinite(numeric) && numeric > 0 ? Math.trunc(numeric) : null;
+  }
+  return parseIsoTimestampMillis(candidate);
+}
+`.trim();

package/node_modules/@oxygen/workflows/dist/usage-estimate.js

@@ -1,7 +1,8 @@
 // Static automation usage estimation shared by the web workflow page and the
-// worker scheduler's admission gate. The unit is the workflow STEP: every step a
-// live run executes bills one (repricing 2026-09, decision 6.1) and rows written
-// inside a run are free (decision 6.2), so a row-writing step costs one step
+// worker scheduler's admission gate. The unit is the workflow STEP: every
+// billable node a live graph executes bills one (repricing 2026-09, decision
+// 6.1). Control nodes and rows written inside a run are free (decision 6.2),
+// so a row-writing step costs one step
 // however many rows it writes. The per-run count derived from a manifest is a
 // FLOOR, never a projection: recipe code emits one step per checkpoint (loops
 // multiply) and a retried attempt bills again. Surfaces present these numbers as
@@ -167,7 +168,8 @@ function estimateWorkflowGraphActionsFloor(graph) {
     }
     // Nested caps multiply, and two large ones overflow Number's exact range;
     // clamping keeps every downstream product (runs x floor) a finite number.
-    return Math.max(1, Math.min(floor, Number.MAX_SAFE_INTEGER));
+    // Free control-only graphs have no step charge, including in previews.
+    return Math.min(floor, Number.MAX_SAFE_INTEGER);
 }
 export function estimateWorkflowAutomationUsage(manifest, cron) {
     if (!isRecord(manifest))
@@ -320,7 +322,9 @@ export function assessCronCadenceViability(input) {
         return null;
     const actionsPerRunFloor = estimateWorkflowRunAutomationActionsFloor(input.manifest);
     const floorActionsPer30Days = scheduledRunsPer30Days * actionsPerRunFloor;
-    const runsAllowedPer30Days = Math.floor(includedActions / actionsPerRunFloor);
+    const runsAllowedPer30Days = actionsPerRunFloor === 0
+        ? MINUTES_PER_30_DAYS
+        : Math.floor(includedActions / actionsPerRunFloor);
     return {
         scheduledRunsPer30Days,
         actionsPerRunFloor,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oxygen-agent/cli",
-  "version": "1.1011.855",
+  "version": "1.1011.1091",
   "private": false,
   "license": "UNLICENSED",
   "type": "module",

package/node_modules/@oxygen/shared/dist/vercel-sandbox-fetch.d.ts

@@ -1,9 +0,0 @@
-/** The Sandbox SDK retries transport failures and 429/5xx responses even for
- * POSTs. Visual execution cannot replay an ambiguously accepted mutation.
- * The SDK recognizes AbortError as non-retryable; outcomeUnknown deliberately
- * distinguishes this transport fence from ordinary caller cancellation. */
-export declare class SandboxMutationOutcomeUnknownError extends Error {
-    readonly outcomeUnknown = true;
-    constructor(options?: ErrorOptions);
-}
-export declare function createSandboxNonReplayFetch(rawFetch?: typeof globalThis.fetch): typeof globalThis.fetch;

package/node_modules/@oxygen/shared/dist/vercel-sandbox-fetch.js

@@ -1,33 +0,0 @@
-/** The Sandbox SDK retries transport failures and 429/5xx responses even for
- * POSTs. Visual execution cannot replay an ambiguously accepted mutation.
- * The SDK recognizes AbortError as non-retryable; outcomeUnknown deliberately
- * distinguishes this transport fence from ordinary caller cancellation. */
-export class SandboxMutationOutcomeUnknownError extends Error {
-    outcomeUnknown = true;
-    constructor(options) {
-        super("Sandbox mutation acceptance requires reconciliation.", options);
-        this.name = "AbortError";
-    }
-}
-export function createSandboxNonReplayFetch(rawFetch = globalThis.fetch) {
-    return async (input, init) => {
-        const method = (init?.method ?? (input instanceof Request ? input.method : "GET")).toUpperCase();
-        if (["GET", "HEAD", "OPTIONS"].includes(method))
-            return rawFetch(input, init);
-        try {
-            // Redirects must not resubmit a mutation either. No request URL, body or
-            // authentication header is copied into the error or telemetry.
-            const response = await rawFetch(input, { ...init, redirect: "error" });
-            if (response.status === 429 || response.status >= 500) {
-                void response.body?.cancel().catch(() => { });
-                throw new SandboxMutationOutcomeUnknownError();
-            }
-            return response;
-        }
-        catch (error) {
-            if (error instanceof SandboxMutationOutcomeUnknownError)
-                throw error;
-            throw new SandboxMutationOutcomeUnknownError({ cause: error });
-        }
-    };
-}