@oxygen-agent/cli 1.226.15 → 1.233.8

package/node_modules/@oxygen/shared/dist/email-unsubscribe-token.js

@@ -0,0 +1,91 @@
+import { createHmac, timingSafeEqual } from "node:crypto";
+function base64urlEncode(value) {
+    return Buffer.from(value, "utf8").toString("base64url");
+}
+/**
+ * Sign a payload into `<base64url(json)>.<base64url(hmac-sha256)>`. The HMAC is
+ * computed over the encoded body, so any tamper to the payload invalidates the
+ * signature. Normalizes the email to the stored suppression form so the webhook
+ * write and the pre-send gate key on the identical string.
+ */
+export function signUnsubscribeToken(payload, secret) {
+    const normalized = { ...payload, email: payload.email.trim().toLowerCase() };
+    const body = base64urlEncode(JSON.stringify(normalized));
+    const signature = createHmac("sha256", secret).update(body).digest("base64url");
+    return `${body}.${signature}`;
+}
+/**
+ * Verify a token's signature (constant-time) and shape. Returns the payload only
+ * when the signature matches AND it is a well-formed v1 payload with a non-empty
+ * org + a plausible email; returns null on ANY problem (bad shape, wrong/blank
+ * secret, tampered body, replayed garbage). Pure: the route maps null -> 401.
+ */
+export function verifyUnsubscribeToken(token, secret) {
+    if (typeof token !== "string" || typeof secret !== "string" || !secret)
+        return null;
+    const dot = token.indexOf(".");
+    if (dot <= 0 || dot === token.length - 1)
+        return null;
+    const body = token.slice(0, dot);
+    const providedSig = token.slice(dot + 1);
+    const expected = createHmac("sha256", secret).update(body).digest();
+    let provided;
+    try {
+        provided = Buffer.from(providedSig, "base64url");
+    }
+    catch {
+        return null;
+    }
+    // Equal-length guard before timingSafeEqual (it throws on length mismatch).
+    if (provided.length !== expected.length || !timingSafeEqual(provided, expected))
+        return null;
+    let parsed;
+    try {
+        parsed = JSON.parse(Buffer.from(body, "base64url").toString("utf8"));
+    }
+    catch {
+        return null;
+    }
+    if (!parsed || typeof parsed !== "object")
+        return null;
+    const candidate = parsed;
+    if (candidate.v !== 1)
+        return null;
+    const org = typeof candidate.org === "string" ? candidate.org.trim() : "";
+    const email = typeof candidate.email === "string" ? candidate.email.trim().toLowerCase() : "";
+    if (!org || !email || !email.includes("@"))
+        return null;
+    return {
+        v: 1,
+        org,
+        email,
+        ...(typeof candidate.seq === "string" && candidate.seq ? { seq: candidate.seq } : {}),
+        ...(typeof candidate.enr === "string" && candidate.enr ? { enr: candidate.enr } : {}),
+        ...(typeof candidate.mbx === "string" && candidate.mbx ? { mbx: candidate.mbx } : {}),
+        iat: typeof candidate.iat === "number" && Number.isFinite(candidate.iat) ? candidate.iat : 0,
+    };
+}
+/**
+ * The HMAC signing secret for unsubscribe tokens, or null when unset. The send
+ * path treats null as "omit the header" (a send with no one-click link still
+ * delivers); the webhook route treats null as fail-closed (reject everything).
+ */
+export function unsubscribeSigningSecret(env = process.env) {
+    const secret = env.EMAIL_UNSUBSCRIBE_SECRET?.trim();
+    return secret ? secret : null;
+}
+/**
+ * The public app base URL the unsubscribe link points at, trailing slash
+ * stripped. Prefers NEXT_PUBLIC_APP_URL, then OXYGEN_APP_URL, then the prod host.
+ */
+export function oxygenAppBaseUrl(env = process.env) {
+    const raw = (env.NEXT_PUBLIC_APP_URL || env.OXYGEN_APP_URL || "https://oxygen-agent.com").trim();
+    return raw.replace(/\/+$/, "");
+}
+/**
+ * The canonical one-click unsubscribe URL: org id in the path (the route
+ * re-checks it against the token), token in the `token` query param.
+ */
+export function buildUnsubscribeUrl(orgId, token, baseUrl) {
+    return `${baseUrl}/api/webhooks/email/unsubscribe/${encodeURIComponent(orgId)}?token=${token}`;
+}

package/node_modules/@oxygen/shared/dist/index.d.ts

@@ -7,6 +7,7 @@ export * from "./cli-envelope.js";
 export * from "./cli-result.js";
 export * from "./column-types.js";
 export * from "./credit-guidance.js";
+export * from "./email-unsubscribe-token.js";
 export * from "./linkedin-post-url.js";
 export * from "./linkedin-sequences.js";
 export * from "./networks.js";

package/node_modules/@oxygen/shared/dist/index.js

@@ -7,6 +7,7 @@ export * from "./cli-envelope.js";
 export * from "./cli-result.js";
 export * from "./column-types.js";
 export * from "./credit-guidance.js";
+export * from "./email-unsubscribe-token.js";
 export * from "./linkedin-post-url.js";
 export * from "./linkedin-sequences.js";
 export * from "./networks.js";

package/node_modules/@oxygen/shared/dist/linkedin-post-url.js

@@ -1,4 +1,5 @@
 const LINKEDIN_HOST = "linkedin.com";
+const CANONICAL_LINKEDIN_HOST = `www.${LINKEDIN_HOST}`;
 const URL_LIKE_PATTERN = /^[a-z][a-z\d+.-]*:\/\//i;
 function normalizeHostname(hostname) {
     return hostname.toLowerCase().replace(/\.+$/, "");
@@ -19,6 +20,9 @@ function isLinkedInPostPath(pathname) {
     const path = safelyDecodePath(pathname).toLowerCase();
     return /^\/posts\/[^/]+\/?$/.test(path) || /^\/feed\/update\/urn:li:activity:[^/]+\/?$/.test(path);
 }
+function canonicalizePostPath(pathname) {
+    return pathname.replace(/\/+$/, "") || pathname;
+}
 export function isLinkedInPostUrlLike(value) {
     const trimmed = value.trim();
     return URL_LIKE_PATTERN.test(trimmed) || trimmed.toLowerCase().includes("linkedin.com");
@@ -42,7 +46,8 @@ export function normalizeLinkedInPostUrl(value) {
     if (!isLinkedInPostPath(url.pathname))
         return null;
     url.protocol = "https:";
-    url.hostname = hostname;
+    url.hostname = CANONICAL_LINKEDIN_HOST;
+    url.pathname = canonicalizePostPath(url.pathname);
     url.username = "";
     url.password = "";
     url.search = "";

package/node_modules/@oxygen/shared/dist/select-options.d.ts

@@ -15,6 +15,15 @@ export declare function isStatusSemantic(semanticType: string | null | undefined
  * transcripts all use this.
  */
 export declare function isMarkdownColumnSemantic(semanticType: string | null | undefined): boolean;
+/**
+ * `image` is a semantic over a `text` dataType holding an image URL (e.g. a
+ * LinkedIn profile picture): the grid renders the cell as a round avatar instead
+ * of a link, with initials/empty fallback. Storage stays text — no new dataType.
+ * `avatar`/`photo` are accepted as aliases so URLs landed by enrichment/CRM
+ * still render; the editor writes the canonical `IMAGE_COLUMN_SEMANTIC`.
+ */
+export declare const IMAGE_COLUMN_SEMANTIC = "image";
+export declare function isImageColumnSemantic(semanticType: string | null | undefined): boolean;
 export type SelectOption = {
     id: string;
     value: string;

package/node_modules/@oxygen/shared/dist/select-options.js

@@ -55,6 +55,17 @@ export function isStatusSemantic(semanticType) {
 export function isMarkdownColumnSemantic(semanticType) {
     return semanticType === "markdown";
 }
+/**
+ * `image` is a semantic over a `text` dataType holding an image URL (e.g. a
+ * LinkedIn profile picture): the grid renders the cell as a round avatar instead
+ * of a link, with initials/empty fallback. Storage stays text — no new dataType.
+ * `avatar`/`photo` are accepted as aliases so URLs landed by enrichment/CRM
+ * still render; the editor writes the canonical `IMAGE_COLUMN_SEMANTIC`.
+ */
+export const IMAGE_COLUMN_SEMANTIC = "image";
+export function isImageColumnSemantic(semanticType) {
+    return semanticType === "image" || semanticType === "avatar" || semanticType === "photo";
+}
 const MAX_OPTIONS = 200;
 // Normalize a raw options array (from a column `definition.options`, CLI/MCP, or
 // the editor) into canonical SelectOptions: dedupe by value, default colors,

package/node_modules/@oxygen/shared/dist/sequences.d.ts

@@ -48,6 +48,14 @@ export declare function isExternalSequenceSignal(value: string): value is Sequen
  * Single source of truth so the send path and the lookup path can't drift.
  */
 export declare const SEQUENCE_EMAIL_COLUMN_KEYS: readonly ["email", "email_address", "work_email", "primary_email", "Email"];
+/**
+ * Resolve an enrollment's recipient email from its row_values, taking the first
+ * present SEQUENCE_EMAIL_COLUMN_KEYS value that looks like an address. Single
+ * source of truth for both the send path (the dispatcher's `to`) and the
+ * complaint loop (the address a bounce/opt-out suppresses), so they can't drift.
+ * Returns the trimmed raw value (callers normalize/lowercase as needed) or null.
+ */
+export declare function recipientEmailFromRow(rowValues: Record<string, unknown> | null | undefined): string | null;
 /**
  * row_values keys an enrollment's phone number may live under, in
  * send-precedence order, for WhatsApp sends. The enroll path resolves the FIRST

package/node_modules/@oxygen/shared/dist/sequences.js

@@ -77,6 +77,21 @@ export function isExternalSequenceSignal(value) {
  * Single source of truth so the send path and the lookup path can't drift.
  */
 export const SEQUENCE_EMAIL_COLUMN_KEYS = ["email", "email_address", "work_email", "primary_email", "Email"];
+/**
+ * Resolve an enrollment's recipient email from its row_values, taking the first
+ * present SEQUENCE_EMAIL_COLUMN_KEYS value that looks like an address. Single
+ * source of truth for both the send path (the dispatcher's `to`) and the
+ * complaint loop (the address a bounce/opt-out suppresses), so they can't drift.
+ * Returns the trimmed raw value (callers normalize/lowercase as needed) or null.
+ */
+export function recipientEmailFromRow(rowValues) {
+    for (const key of SEQUENCE_EMAIL_COLUMN_KEYS) {
+        const value = rowValues?.[key];
+        if (typeof value === "string" && value.includes("@"))
+            return value.trim();
+    }
+    return null;
+}
 /**
  * row_values keys an enrollment's phone number may live under, in
  * send-precedence order, for WhatsApp sends. The enroll path resolves the FIRST

package/node_modules/@oxygen/shared/dist/version.d.ts

@@ -1,2 +1,2 @@
-export declare const OXYGEN_VERSION = "1.226.15";
+export declare const OXYGEN_VERSION = "1.233.8";
 export declare const OXYGEN_MINIMUM_CLI_VERSION = "1.181.0";

package/node_modules/@oxygen/shared/dist/version.js

@@ -1,4 +1,4 @@
-export const OXYGEN_VERSION = "1.226.15";
+export const OXYGEN_VERSION = "1.233.8";
 // Bump this only when deployed CLI/API contracts require a newer CLI.
 // 1.181.0: paid table action runs and background columns run require
 // approved=true in addition to max_credits; older CLIs cannot send the flag.

package/node_modules/@oxygen/workflows/dist/index.d.ts

@@ -44,6 +44,7 @@ export type WorkflowTriggerManifest = {
     type: "cron";
     cron: string;
     timezone?: string | null;
+    metadata?: Record<string, unknown>;
     status?: WorkflowStatus;
 } | {
     type: "event";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oxygen-agent/cli",
-  "version": "1.226.15",
+  "version": "1.233.8",
   "private": false,
   "license": "UNLICENSED",
   "type": "module",