@oxygen-agent/cli 1.123.1 → 1.128.3

package/README.md

@@ -34,4 +34,4 @@ oxygen update
 
 For product documentation and support, visit https://oxygen-agent.com.
 
-Version: 1.123.1
+Version: 1.128.3

package/dist/index.js

@@ -212,6 +212,12 @@ export function createProgram() {
         .option("--json", "Print a JSON envelope.")
         .action(async (options) => {
         await handleAuthUseTokenAction(options);
+    }))
+        .addCommand(new Command("doctor")
+        .description("Diagnose the active Oxygen CLI credentials without printing token material.")
+        .option("--json", "Print a JSON envelope.")
+        .action(async (options) => {
+        await handleAuthDoctorAction(options);
     }));
     program
         .command("profiles")
@@ -434,6 +440,41 @@ export function createProgram() {
                 },
             });
         });
+    }))
+        .addCommand(new Command("repair-preview")
+        .description("Preview tenant database repair issues without mutating production state (staff only).")
+        .option("--limit <n>", "Maximum tenant and provisioning issues to inspect. Defaults to 100; hard cap is 500.")
+        .option("--json", "Print a JSON envelope.")
+        .action(async (options) => {
+        await handleAsyncAction("db repair-preview", options, () => {
+            const limit = readPositiveInt(options.limit);
+            const query = new URLSearchParams();
+            if (limit !== undefined)
+                query.set("limit", String(limit));
+            const suffix = query.toString() ? `?${query.toString()}` : "";
+            return requestOxygen(`/api/cli/db/repair-preview${suffix}`);
+        });
+    }))
+        .addCommand(new Command("reconcile")
+        .description("Inspect tenant database registry drift. Staff only; defaults to dry-run.")
+        .option("--dry-run", "Report drift without applying repairs. This is the default.")
+        .option("--apply", "Apply safe registry repairs. Requires --confirm.")
+        .option("--confirm", "Confirm --apply for safe registry repairs.")
+        .option("--json", "Print a JSON envelope.")
+        .action(async (options) => {
+        await handleAsyncAction("db reconcile", options, () => {
+            if (options.apply && !options.confirm) {
+                throw new OxygenError("confirmation_required", "Refusing to apply tenant database reconciliation without --confirm.", { exitCode: 1 });
+            }
+            return requestOxygen("/api/cli/db/reconcile", {
+                method: "POST",
+                body: {
+                    apply: Boolean(options.apply),
+                    dry_run: !options.apply,
+                    confirm: Boolean(options.confirm),
+                },
+            });
+        });
     }))
         .addCommand(new Command("cost-policy")
         .description("Show tenant database cost controls and reconciliation status.")
@@ -2014,7 +2055,7 @@ export function createProgram() {
         .description("Compile a company-search prompt into ordered provider routes without provider calls.")
         .requiredOption("--prompt <text-or-file>", "Company-search prompt, or a path to a prompt file.")
         .option("--target-count <n>", "Desired company count for routing and estimates.")
-        .option("--source-intent <intent>", "Override detected intent: structured, technology, hiring, local, known_source, web, or fallback.")
+        .option("--source-intent <intent>", "Override detected intent: sizing, structured, technology, hiring, local, known_source, concept, web, url, or fallback.")
         .option("--materialize-preview", "Create a preview table with route rows.")
         .option("--json", "Print a JSON envelope.")
         .action(async (options) => {
@@ -2035,6 +2076,7 @@ export function createProgram() {
         .option("--max-credits <n>", "Required credit ceiling for live runs.")
         .option("--target-count <n>", "Desired company count when planning from --prompt.")
         .option("--source-intent <intent>", "Override detected intent when planning from --prompt.")
+        .option("--preflight-complete", "Confirm required descriptor, count, enum, or provider-specific preflight checks before live mode.")
         .option("--approved", "Required for live runs after inspecting dry-run output.")
         .option("--json", "Print a JSON envelope.")
         .action(async (options) => {
@@ -2093,7 +2135,7 @@ export function createProgram() {
     }))
         .addCommand(new Command("failures")
         .description("List failed background action and ingestion items.")
-        .option("--queue <queue>", "all, actions, ingestions, or bullmq. Defaults to all.")
+        .option("--queue <queue>", "all, actions, ingestions, or postgres_jobs. Defaults to all. Legacy aliases: bullmq, redis, jobs.")
         .option("--limit <n>", "Maximum failed items per queue. Defaults to 25; server cap is 100.")
         .option("--json", "Print a JSON envelope.")
         .action(async (options) => {
@@ -2118,13 +2160,13 @@ export function createProgram() {
         }));
     }))
         .addCommand(new Command("run-once")
-        .description("Compatibility alias for worker repair; enqueues BullMQ repair work for the current organization.")
-        .option("--claim-limit <n>", "Compatibility option; ignored by the BullMQ worker.")
-        .option("--concurrency <n>", "Compatibility option; ignored by the BullMQ worker.")
-        .option("--enrichment-concurrency <n>", "Compatibility option; ignored by the BullMQ worker.")
-        .option("--lease-seconds <n>", "Compatibility option; ignored by the BullMQ worker.")
-        .option("--provider-timeout-ms <n>", "Compatibility option; ignored by the BullMQ worker.")
-        .option("--recipe-timeout-ms <n>", "Compatibility option; ignored by the BullMQ worker.")
+        .description("Compatibility alias for worker repair; repairs Postgres-backed worker state for the current organization.")
+        .option("--claim-limit <n>", "Compatibility option; ignored by the Postgres worker.")
+        .option("--concurrency <n>", "Compatibility option; ignored by the Postgres worker.")
+        .option("--enrichment-concurrency <n>", "Compatibility option; ignored by the Postgres worker.")
+        .option("--lease-seconds <n>", "Compatibility option; ignored by the Postgres worker.")
+        .option("--provider-timeout-ms <n>", "Compatibility option; ignored by the Postgres worker.")
+        .option("--recipe-timeout-ms <n>", "Compatibility option; ignored by the Postgres worker.")
         .option("--json", "Print a JSON envelope.")
         .action(async (options) => {
         const claimLimit = readPositiveInt(options.claimLimit);
@@ -2215,6 +2257,46 @@ export function createProgram() {
             return requestOxygen(`/api/cli/admin/costs${suffix}`);
         });
     }));
+    program
+        .command("signup-leads")
+        .description("Signup lead delivery queue commands.")
+        .addCommand(new Command("deliveries")
+        .description("Inspect and retry durable signup lead webhook deliveries.")
+        .addCommand(new Command("list")
+        .description("List signup lead webhook deliveries for the current organization.")
+        .option("--status <status>", "Filter by pending, running, succeeded, retrying, failed, or dead.")
+        .option("--limit <n>", "Maximum deliveries to return. Defaults to 50.")
+        .option("--json", "Print a JSON envelope.")
+        .action(async (options) => {
+        await handleAsyncAction("signup-leads deliveries list", options, () => {
+            const params = new URLSearchParams();
+            const status = readOption(options.status);
+            const limit = readPositiveInt(options.limit);
+            if (status)
+                params.set("status", status);
+            if (limit)
+                params.set("limit", String(limit));
+            const suffix = params.toString() ? `?${params.toString()}` : "";
+            return requestOxygen(`/api/cli/signup-leads/deliveries${suffix}`);
+        });
+    }))
+        .addCommand(new Command("get")
+        .description("Get one signup lead webhook delivery by delivery id or event id.")
+        .argument("<id>", "Delivery id or event id.")
+        .option("--json", "Print a JSON envelope.")
+        .action(async (id, options) => {
+        await handleAsyncAction("signup-leads deliveries get", options, () => requestOxygen(`/api/cli/signup-leads/deliveries?id=${encodeURIComponent(id)}`));
+    }))
+        .addCommand(new Command("retry")
+        .description("Retry one failed signup lead webhook delivery.")
+        .argument("<id>", "Delivery id or event id.")
+        .option("--json", "Print a JSON envelope.")
+        .action(async (id, options) => {
+        await handleAsyncAction("signup-leads deliveries retry", options, () => requestOxygen("/api/cli/signup-leads/deliveries", {
+            method: "POST",
+            body: { id },
+        }));
+    })));
     program
         .command("observability")
         .description("Redacted operation event commands for the current organization.")
@@ -2549,10 +2631,10 @@ export function createProgram() {
         .description("Preflight an enrichment column without provider calls or credit usage.")
         .argument("<table>", "Table id or slug.")
         .option("--source-column <column>", "Source column key or id. For mobile_phone this is the LinkedIn URL column.")
-        .option("--full-name-column <column>", "Column key or id containing the person's full name for work_email. Pair with company-domain/name for Prospeo, LeadMagic, Hunter, ContactOut, or BetterContact.")
+        .option("--full-name-column <column>", "Column key or id containing the person's full name for work_email. Pair with company-domain/name for Prospeo, RocketReach, LeadMagic, Hunter, Dropleads, ContactOut, BetterContact, or People Data Labs.")
         .option("--first-name-column <column>", "Column key or id containing the person's first name for work_email.")
         .option("--last-name-column <column>", "Column key or id containing the person's last name for work_email.")
-        .option("--linkedin-url-column <column>", "Column key or id containing the person's LinkedIn URL. Required by Blitz API and enough for Prospeo, Hunter, ContactOut, or BetterContact.")
+        .option("--linkedin-url-column <column>", "Column key or id containing the person's LinkedIn URL. Required by BlitzAPI and enough for RocketReach, Prospeo, Hunter, ContactOut, BetterContact, Crustdata, or People Data Labs.")
         .option("--email-column <column>", "Column key or id containing a known work email for providers that accept email as an identity fallback.")
         .option("--company-domain-column <column>", "Column key or id containing the company domain for work_email. Pair with full-name/first+last for name+company providers.")
         .option("--company-name-column <column>", "Column key or id containing the company name for work_email when no domain is available.")
@@ -2560,8 +2642,8 @@ export function createProgram() {
         .option("--capability <capability>", "Capability to enrich: mobile_phone or work_email. Defaults to mobile_phone.")
         .option("--target-column <column>", "Target enrichment column key. Defaults to the capability payload column.")
         .option("--on-existing-manual-column <mode>", "How to handle an existing manual target: error, write_if_empty, or create_enrichment_column.")
-        .option("--provider-order <providers>", "Comma-separated provider order. Overrides the default waterfall profile.")
-        .option("--email-waterfall-profile <profile>", "Work-email waterfall profile: auto, name_domain, linkedin_url, or first_last_domain.")
+        .option("--provider-order <providers>", "Comma-separated provider order. Overrides the default cost-aware waterfall profile.")
+        .option("--email-waterfall-profile <profile>", "Work-email waterfall profile: auto, name_domain, linkedin_url, or first_last_domain. Defaults prefer BlitzAPI/RocketReach/Prospeo where inputs fit.")
         .option("--email-pattern-validation <mode>", "Work-email pattern pre-step: leadmagic_valid_only or disabled.")
         .option("--verify-phone", "Validate found phone numbers with ClearoutPhone before returning them.")
         .option("--phone-verification-credential-mode <mode>", "ClearoutPhone credential mode for phone verification: managed or user_api_key.")
@@ -2581,10 +2663,10 @@ export function createProgram() {
         .description("Create or reuse an enrichment column and queue a background run.")
         .argument("<table>", "Table id or slug.")
         .option("--source-column <column>", "Source column key or id. For mobile_phone this is the LinkedIn URL column.")
-        .option("--full-name-column <column>", "Column key or id containing the person's full name for work_email. Pair with company-domain/name for Prospeo, LeadMagic, Hunter, ContactOut, or BetterContact.")
+        .option("--full-name-column <column>", "Column key or id containing the person's full name for work_email. Pair with company-domain/name for Prospeo, RocketReach, LeadMagic, Hunter, Dropleads, ContactOut, BetterContact, or People Data Labs.")
         .option("--first-name-column <column>", "Column key or id containing the person's first name for work_email.")
         .option("--last-name-column <column>", "Column key or id containing the person's last name for work_email.")
-        .option("--linkedin-url-column <column>", "Column key or id containing the person's LinkedIn URL. Required by Blitz API and enough for Prospeo, Hunter, ContactOut, or BetterContact.")
+        .option("--linkedin-url-column <column>", "Column key or id containing the person's LinkedIn URL. Required by BlitzAPI and enough for RocketReach, Prospeo, Hunter, ContactOut, BetterContact, Crustdata, or People Data Labs.")
         .option("--email-column <column>", "Column key or id containing a known work email for providers that accept email as an identity fallback.")
         .option("--company-domain-column <column>", "Column key or id containing the company domain for work_email. Pair with full-name/first+last for name+company providers.")
         .option("--company-name-column <column>", "Column key or id containing the company name for work_email when no domain is available.")
@@ -2593,8 +2675,8 @@ export function createProgram() {
         .option("--capability <capability>", "Capability to enrich: mobile_phone or work_email. Defaults to mobile_phone.")
         .option("--target-column <column>", "Target enrichment column key. Defaults to the capability payload column.")
         .option("--on-existing-manual-column <mode>", "How to handle an existing manual target: error, write_if_empty, or create_enrichment_column.")
-        .option("--provider-order <providers>", "Comma-separated provider order. Overrides the default waterfall profile.")
-        .option("--email-waterfall-profile <profile>", "Work-email waterfall profile: auto, name_domain, linkedin_url, or first_last_domain.")
+        .option("--provider-order <providers>", "Comma-separated provider order. Overrides the default cost-aware waterfall profile.")
+        .option("--email-waterfall-profile <profile>", "Work-email waterfall profile: auto, name_domain, linkedin_url, or first_last_domain. Defaults prefer BlitzAPI/RocketReach/Prospeo where inputs fit.")
         .option("--email-pattern-validation <mode>", "Work-email pattern pre-step: leadmagic_valid_only or disabled.")
         .option("--verify-phone", "Validate found phone numbers with ClearoutPhone before returning them.")
         .option("--phone-verification-credential-mode <mode>", "ClearoutPhone credential mode for phone verification: managed or user_api_key.")
@@ -2748,8 +2830,8 @@ export function createProgram() {
     }))
         .addCommand(new Command("connect")
         .description("Connect a Composio integration. OAuth toolkits return a redirect URL; API-key toolkits accept --api-key.")
-        .argument("<integration_id>", "Integration id, such as 'slack' or 'exa'.")
-        .option("--api-key <value>", "API key for Composio API-key toolkits (e.g. Exa, SerpAPI, Resend).")
+        .argument("<integration_id>", "Integration id, such as 'slack' or 'serpapi'.")
+        .option("--api-key <value>", "API key for Composio API-key toolkits (e.g. SerpAPI, Resend).")
         .option("--json", "Print a JSON envelope.")
         .action(async (integrationId, options) => {
         await handleAsyncAction("integrations connect", options, async () => {
@@ -3454,7 +3536,7 @@ runId, options) {
                     ...(queuedWithoutWorker
                         ? {
                             worker_status: "queued_no_worker",
-                            guidance: "No worker has claimed this workflow run. Check `oxygen worker queue-stats --json` for BullMQ and workflow queue health.",
+                            guidance: "No worker has claimed this workflow run. Check `oxygen worker queue-stats --json` for Postgres-backed worker queue health.",
                         }
                         : {}),
                 },
@@ -3652,6 +3734,7 @@ function readCompaniesSearchRunBody(options) {
         ...(targetCount !== undefined ? { target_count: targetCount } : {}),
         ...(options.sourceIntent ? { source_intent: options.sourceIntent } : {}),
         ...(options.approved ? { approved: true } : {}),
+        ...(options.preflightComplete ? { preflight_complete: true } : {}),
     };
 }
 function readCompanySearchPlanJson(value) {
@@ -4870,6 +4953,80 @@ async function handleAuthUseTokenAction(options) {
         process.exitCode = error instanceof OxygenError ? error.exitCode : 1;
     }
 }
+async function handleAuthDoctorAction(options) {
+    try {
+        const data = await runAuthDoctor();
+        if (options.json) {
+            writeJson(success("auth doctor", data));
+            return;
+        }
+        process.stdout.write(formatAuthDoctor(data));
+    }
+    catch (error) {
+        const failure = toFailure("auth doctor", error);
+        writeJson(failure);
+        process.exitCode = error instanceof OxygenError ? error.exitCode : 1;
+    }
+}
+async function runAuthDoctor() {
+    let context = null;
+    let profileError = null;
+    try {
+        context = await resolveActiveProfileWithSource();
+    }
+    catch (error) {
+        const failure = toFailure("profiles current", error);
+        profileError = {
+            code: failure.error.code,
+            message: failure.error.message,
+            ...(failure.error.details !== undefined ? { details: failure.error.details } : {}),
+        };
+    }
+    const credentials = context?.resolution.credentials ?? null;
+    const apiUrl = credentials?.apiUrl ?? defaultApiUrl();
+    const healthCredentials = credentials ?? { token: "", apiUrl };
+    const health = await runAuthDoctorCheck(() => requestOxygen("/api/health", {
+        credentials: healthCredentials,
+        requireAuth: false,
+        enforceMinimumCliVersion: false,
+    }));
+    const identity = credentials
+        ? await runAuthDoctorCheck(() => requestOxygen("/api/cli/whoami", {
+            credentials,
+            enforceMinimumCliVersion: false,
+        }))
+        : { ok: false, skipped: true, reason: "no_credentials" };
+    const cachedIdentity = credentials?.identity ?? null;
+    return {
+        profile: context?.resolution.exists ? context.resolution.name : null,
+        profile_source: context?.source ?? null,
+        stored: Boolean(context?.resolution.exists),
+        api_url: apiUrl,
+        auth_kind: credentials?.authKind ?? null,
+        token_fingerprint: credentials ? formatFingerprint(createCredentialFingerprint(credentials.token)) : null,
+        cached_organization: credentials?.activeOrganization ?? cachedIdentity?.organization ?? null,
+        cached_user: cachedIdentity?.user ?? null,
+        profile_error: profileError,
+        health,
+        identity,
+    };
+}
+async function runAuthDoctorCheck(fn) {
+    try {
+        return { ok: true, data: await fn() };
+    }
+    catch (error) {
+        const failure = toFailure("auth doctor", error);
+        return {
+            ok: false,
+            error: {
+                code: failure.error.code,
+                message: failure.error.message,
+                ...(failure.error.details !== undefined ? { details: failure.error.details } : {}),
+            },
+        };
+    }
+}
 async function handleOrgUseAction(organization, options, command) {
     try {
         const data = await requestOxygen("/api/cli/orgs/select", {
@@ -5560,6 +5717,40 @@ function formatProfilesList(data) {
     }
     return lines.join("\n");
 }
+function formatAuthDoctor(data) {
+    const styles = ansi(output.isTTY === true && !process.env.NO_COLOR);
+    const lines = [
+        "",
+        styles.bold("Oxygen Auth Doctor"),
+        "",
+        `  ${styles.dim("Profile")}       ${data.profile ?? "(none)"}${data.profile_source ? ` (${data.profile_source})` : ""}`,
+        `  ${styles.dim("API")}           ${data.api_url}`,
+        `  ${styles.dim("Stored")}        ${data.stored ? "yes" : "no"}`,
+    ];
+    if (data.auth_kind)
+        lines.push(`  ${styles.dim("Auth kind")}     ${data.auth_kind}`);
+    if (data.token_fingerprint)
+        lines.push(`  ${styles.dim("Fingerprint")}   ${data.token_fingerprint}`);
+    if (data.cached_organization) {
+        const org = data.cached_organization.slug ?? data.cached_organization.id;
+        lines.push(`  ${styles.dim("Cached org")}    ${data.cached_organization.name} (${org})`);
+    }
+    if (data.profile_error) {
+        lines.push(`  ${styles.dim("Profile error")} ${data.profile_error.code}: ${data.profile_error.message}`);
+    }
+    lines.push(`  ${styles.dim("Health")}        ${data.health.ok ? "ok" : `failed (${data.health.error.code})`}`);
+    if ("skipped" in data.identity) {
+        lines.push(`  ${styles.dim("Identity")}      skipped (${data.identity.reason})`);
+    }
+    else {
+        lines.push(`  ${styles.dim("Identity")}      ${data.identity.ok ? "ok" : `failed (${data.identity.error.code})`}`);
+        if (!data.identity.ok) {
+            lines.push(`  ${styles.dim("Identity error")} ${data.identity.error.message}`);
+        }
+    }
+    lines.push("");
+    return lines.join("\n");
+}
 function formatProfileOrgCell(profile) {
     if (!profile.organization)
         return "(unknown org — run `oxygen whoami` to refresh)";

package/node_modules/@oxygen/shared/dist/file-import.d.ts

@@ -20,6 +20,10 @@ export declare function iterateRowsFileBufferBatches(buffer: Buffer, format: Row
     sheet?: string;
     batchSize?: number;
 }): AsyncGenerator<Record<string, unknown>[]>;
+export declare function iterateRowsFileStreamBatches(chunks: AsyncIterable<Uint8Array | string>, format: RowsFileFormat, options?: {
+    sheet?: string;
+    batchSize?: number;
+}): AsyncGenerator<Record<string, unknown>[]>;
 export declare function parseRowsText(text: string, format: Exclude<RowsFileFormat, "xlsx">): Record<string, unknown>[];
 export declare function inferImportColumnLabels(rows: Record<string, unknown>[]): string[];
 export declare function normalizeRowsForNewTable(rows: Record<string, unknown>[]): NewTableImportRows;

package/node_modules/@oxygen/shared/dist/file-import.js

@@ -46,6 +46,20 @@ export async function* iterateRowsFileBufferBatches(buffer, format, options = {}
     const rows = await parseRowsFileBuffer(buffer, format, options.sheet ? { sheet: options.sheet } : {});
     yield* chunkRows(rows, batchSize);
 }
+export async function* iterateRowsFileStreamBatches(chunks, format, options = {}) {
+    const batchSize = normalizeBatchSize(options.batchSize);
+    if (format === "csv") {
+        yield* iterateCsvRowStreamBatches(chunks, batchSize);
+        return;
+    }
+    if (format === "jsonl") {
+        yield* iterateJsonlRowStreamBatches(chunks, batchSize);
+        return;
+    }
+    const buffer = await streamToLimitedBuffer(chunks, format);
+    const rows = await parseRowsFileBuffer(buffer, format, options.sheet ? { sheet: options.sheet } : {});
+    yield* chunkRows(rows, batchSize);
+}
 export function parseRowsText(text, format) {
     if (format === "json")
         return normalizeRowObjects(parseJsonArray(text));
@@ -208,6 +222,55 @@ function* iterateCsvRowBatches(text, batchSize) {
     if (state.batch.length > 0)
         yield state.batch;
 }
+async function* iterateCsvRowStreamBatches(chunks, batchSize) {
+    const decoder = new TextDecoder();
+    const state = {
+        header: null,
+        batch: [],
+        record: [],
+        field: "",
+        inQuotes: false,
+    };
+    let carry = "";
+    for await (const chunk of chunks) {
+        const combined = carry + decoder.decode(toUint8Array(chunk), { stream: true });
+        if (!combined)
+            continue;
+        const processUntil = Math.max(0, combined.length - 1);
+        for (let index = 0; index < processUntil; index += 1) {
+            const ready = applyCsvTextCharacter(state, combined, index, batchSize);
+            if (ready.skipNext)
+                index += 1;
+            if (ready.batch)
+                yield ready.batch;
+        }
+        carry = combined.charAt(combined.length - 1);
+    }
+    const tail = carry + decoder.decode();
+    for (let index = 0; index < tail.length; index += 1) {
+        const ready = applyCsvTextCharacter(state, tail, index, batchSize);
+        if (ready.skipNext)
+            index += 1;
+        if (ready.batch)
+            yield ready.batch;
+    }
+    if (state.field || state.record.length > 0) {
+        const ready = appendCsvRecordToBatch(state, finishCsvRecord(state), batchSize);
+        if (ready)
+            yield ready;
+    }
+    if (state.batch.length > 0)
+        yield state.batch;
+}
+function applyCsvTextCharacter(state, text, index, batchSize) {
+    const result = applyCsvCharacter(state, text.charAt(index), text.charAt(index + 1));
+    if (!result.recordComplete)
+        return { skipNext: result.skipNext, batch: null };
+    return {
+        skipNext: result.skipNext,
+        batch: appendCsvRecordToBatch(state, finishCsvRecord(state), batchSize),
+    };
+}
 function applyCsvCharacter(state, char, next) {
     return state.inQuotes
         ? applyQuotedCsvCharacter(state, char, next)
@@ -294,6 +357,53 @@ function* iterateJsonlRowBatches(text, batchSize) {
     if (batch.length > 0)
         yield batch;
 }
+async function* iterateJsonlRowStreamBatches(chunks, batchSize) {
+    const decoder = new TextDecoder();
+    let pending = "";
+    let batch = [];
+    for await (const chunk of chunks) {
+        pending += decoder.decode(toUint8Array(chunk), { stream: true });
+        let newline = pending.indexOf("\n");
+        while (newline >= 0) {
+            const line = pending.slice(0, newline).replace(/\r$/, "").trim();
+            pending = pending.slice(newline + 1);
+            if (line)
+                batch.push(normalizeRowObject(JSON.parse(line)));
+            if (batch.length >= batchSize) {
+                yield batch;
+                batch = [];
+            }
+            newline = pending.indexOf("\n");
+        }
+    }
+    const tail = (pending + decoder.decode()).replace(/\r$/, "").trim();
+    if (tail)
+        batch.push(normalizeRowObject(JSON.parse(tail)));
+    if (batch.length > 0)
+        yield batch;
+}
+async function streamToLimitedBuffer(chunks, format) {
+    const buffers = [];
+    let total = 0;
+    for await (const chunk of chunks) {
+        const buffer = Buffer.from(toUint8Array(chunk));
+        total += buffer.byteLength;
+        if (total > MAX_BUFFERED_IMPORT_PARSE_BYTES) {
+            throw new OxygenError("import_file_too_large_for_format", `${format.toUpperCase()} imports must be uploaded as CSV or JSONL for large files.`, {
+                details: {
+                    format,
+                    max_buffered_parse_bytes: MAX_BUFFERED_IMPORT_PARSE_BYTES,
+                },
+                exitCode: 1,
+            });
+        }
+        buffers.push(buffer);
+    }
+    return Buffer.concat(buffers);
+}
+function toUint8Array(chunk) {
+    return typeof chunk === "string" ? Buffer.from(chunk) : chunk;
+}
 function* chunkRows(rows, batchSize) {
     for (let index = 0; index < rows.length; index += batchSize) {
         yield rows.slice(index, index + batchSize);

package/node_modules/@oxygen/shared/dist/index.d.ts

@@ -5,6 +5,7 @@ export * from "./column-types.js";
 export * from "./credit-guidance.js";
 export * from "./log.js";
 export * from "./provider-request-outcomes.js";
+export * from "./signup-lead-deliveries.js";
 export * from "./telemetry.js";
 export type JsonValue = string | number | boolean | null | JsonValue[] | {
     [key: string]: JsonValue;

package/node_modules/@oxygen/shared/dist/index.js

@@ -6,6 +6,7 @@ export * from "./column-types.js";
 export * from "./credit-guidance.js";
 export * from "./log.js";
 export * from "./provider-request-outcomes.js";
+export * from "./signup-lead-deliveries.js";
 export * from "./telemetry.js";
 export class OxygenError extends Error {
     code;

package/node_modules/@oxygen/shared/dist/object-storage.d.ts

@@ -21,6 +21,14 @@ export declare function presignImportUpload(input: {
 export declare function downloadImportObject(input: {
     storageKey: string;
 }): Promise<Buffer>;
+export declare function getImportObjectMetadata(input: {
+    storageKey: string;
+}): Promise<{
+    contentLength: number | null;
+}>;
+export declare function openImportObjectStream(input: {
+    storageKey: string;
+}): Promise<NodeJS.ReadableStream>;
 export declare function deleteImportObject(input: {
     storageKey: string;
 }): Promise<void>;

package/node_modules/@oxygen/shared/dist/object-storage.js

@@ -1,5 +1,5 @@
 import { randomUUID } from "node:crypto";
-import { DeleteObjectCommand, GetObjectCommand, PutObjectCommand, S3Client, } from "@aws-sdk/client-s3";
+import { DeleteObjectCommand, GetObjectCommand, HeadObjectCommand, PutObjectCommand, S3Client, } from "@aws-sdk/client-s3";
 import { getSignedUrl } from "@aws-sdk/s3-request-presigner";
 import { OxygenError } from "./index.js";
 // S3-compatible object storage for large CSV/file imports. The CLI uploads the
@@ -96,6 +96,25 @@ export async function downloadImportObject(input) {
     }
     return streamToBuffer(body);
 }
+export async function getImportObjectMetadata(input) {
+    const { client, config } = resolveClient();
+    const result = await client.send(new HeadObjectCommand({ Bucket: config.bucket, Key: input.storageKey }));
+    return {
+        contentLength: typeof result.ContentLength === "number" ? result.ContentLength : null,
+    };
+}
+export async function openImportObjectStream(input) {
+    const { client, config } = resolveClient();
+    const result = await client.send(new GetObjectCommand({ Bucket: config.bucket, Key: input.storageKey }));
+    const body = result.Body;
+    if (!body) {
+        throw new OxygenError("import_object_missing", "Import object had no body.", {
+            details: { storage_key: input.storageKey },
+            exitCode: 1,
+        });
+    }
+    return body;
+}
 export async function deleteImportObject(input) {
     const { client, config } = resolveClient();
     await client.send(new DeleteObjectCommand({ Bucket: config.bucket, Key: input.storageKey }));

package/node_modules/@oxygen/shared/dist/signup-lead-deliveries.d.ts

@@ -0,0 +1 @@
+export declare const RESEND_ONBOARDING_DELIVERY_EVENT_TYPE = "resend.onboarding";

package/node_modules/@oxygen/shared/dist/signup-lead-deliveries.js

@@ -0,0 +1 @@
+export const RESEND_ONBOARDING_DELIVERY_EVENT_TYPE = "resend.onboarding";

package/node_modules/@oxygen/shared/dist/version.d.ts

@@ -1,2 +1,2 @@
-export declare const OXYGEN_VERSION = "1.123.1";
+export declare const OXYGEN_VERSION = "1.128.3";
 export declare const OXYGEN_MINIMUM_CLI_VERSION = "1.0.0";

package/node_modules/@oxygen/shared/dist/version.js

@@ -1,3 +1,3 @@
-export const OXYGEN_VERSION = "1.123.1";
+export const OXYGEN_VERSION = "1.128.3";
 // Bump this only when deployed CLI/API contracts require a newer CLI.
 export const OXYGEN_MINIMUM_CLI_VERSION = "1.0.0";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oxygen-agent/cli",
-  "version": "1.123.1",
+  "version": "1.128.3",
   "private": false,
   "license": "UNLICENSED",
   "type": "module",