@oxygen-agent/cli 1.1013.61 → 1.1013.73

package/README.md

@@ -34,4 +34,4 @@ oxygen update
 
 For product documentation, visit https://oxygen-agent.com/docs. For support, visit https://oxygen-agent.com.
 
-Version: 1.1013.61
+Version: 1.1013.73

package/dist/index.js

@@ -21092,10 +21092,20 @@ async function uploadCopilotAttachment(sessionId, filePath) {
     }
     const controller = new AbortController();
     const timer = setTimeout(() => controller.abort(), 300_000);
+    // Content-Type is bound into the storage signature. Older tickets omit the
+    // SDK's binary default; newer tickets supply every required upload header.
+    const uploadHeaders = { "content-type": "application/octet-stream" };
+    if (isRecord(upload.headers)) {
+        for (const [name, value] of Object.entries(upload.headers)) {
+            if (typeof value === "string")
+                uploadHeaders[name] = value;
+        }
+    }
     let putResponse;
     try {
         putResponse = await fetch(uploadUrl, {
             method: "PUT",
+            headers: uploadHeaders,
             body: new Uint8Array(fileBuffer),
             signal: controller.signal,
         });

package/node_modules/@oxygen/shared/dist/hosted-ai.d.ts

@@ -224,8 +224,10 @@ export declare function redactManagedModelIds<T>(value: T, options?: {
  */
 export declare function hostedAiDefaultModels(useCase: HostedAiUseCase): Record<HostedAiLevel, string>;
 /**
- * Whether the hosted copilot is enabled for this environment. FAIL CLOSED: only
- * the exact strings "1" or "true" (case-insensitive, trimmed) enable it;
- * anything else — unset, "", "0", "false" — leaves it off.
+ * Staff dev experiment: only the authoritative selfhost-dev deployment and an
+ * explicit enable flag can run Copilot. NODE_ENV and request hosts cannot open
+ * it; production and shadow remain closed even with an enabled flag.
  */
 export declare function isCopilotEnabled(env?: Record<string, string | undefined>): boolean;
+/** Historical cost reconciliation may settle receipts without running Copilot. */
+export declare function isCopilotAccountingEnabled(env?: Record<string, string | undefined>): boolean;

package/node_modules/@oxygen/shared/dist/hosted-ai.js

@@ -579,11 +579,17 @@ export function hostedAiDefaultModels(useCase) {
     };
 }
 /**
- * Whether the hosted copilot is enabled for this environment. FAIL CLOSED: only
- * the exact strings "1" or "true" (case-insensitive, trimmed) enable it;
- * anything else — unset, "", "0", "false" — leaves it off.
+ * Staff dev experiment: only the authoritative selfhost-dev deployment and an
+ * explicit enable flag can run Copilot. NODE_ENV and request hosts cannot open
+ * it; production and shadow remain closed even with an enabled flag.
  */
 export function isCopilotEnabled(env = process.env) {
+    if (env.OXYGEN_DEPLOY_ENV?.trim().toLowerCase() !== "selfhost-dev")
+        return false;
+    return isCopilotAccountingEnabled(env);
+}
+/** Historical cost reconciliation may settle receipts without running Copilot. */
+export function isCopilotAccountingEnabled(env = process.env) {
     const raw = env.OXYGEN_COPILOT_ENABLED;
     if (typeof raw !== "string")
         return false;

package/node_modules/@oxygen/shared/dist/staff.d.ts

@@ -0,0 +1,2 @@
+/** Staff authorization uses configured email domains, never a workspace role. */
+export declare function isStaffEmail(email: string | null | undefined, env?: Record<string, string | undefined>): boolean;

package/node_modules/@oxygen/shared/dist/staff.js

@@ -0,0 +1,12 @@
+/** Staff authorization uses configured email domains, never a workspace role. */
+export function isStaffEmail(email, env = process.env) {
+    if (!email)
+        return false;
+    const at = email.lastIndexOf("@");
+    if (at <= 0)
+        return false;
+    const domain = email.slice(at + 1).toLowerCase();
+    return (env.OXYGEN_STAFF_EMAIL_DOMAINS ?? "")
+        .split(",")
+        .some((entry) => entry.trim().toLowerCase() === domain && domain.length > 0);
+}

package/node_modules/@oxygen/shared/dist/version.generated.d.ts

@@ -1 +1 @@
-export declare const OXYGEN_BUILD_VERSION = "1.1013.61";
+export declare const OXYGEN_BUILD_VERSION = "1.1013.73";

package/node_modules/@oxygen/shared/dist/version.generated.js

@@ -1,2 +1,2 @@
 // GENERATED by scripts/ci/version-stamp.mjs from VERSION + git history. Do not edit; do not commit.
-export const OXYGEN_BUILD_VERSION = "1.1013.61";
+export const OXYGEN_BUILD_VERSION = "1.1013.73";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oxygen-agent/cli",
-  "version": "1.1013.61",
+  "version": "1.1013.73",
   "private": false,
   "license": "UNLICENSED",
   "type": "module",