@oxygen-agent/cli 1.284.3 → 1.285.53

package/README.md

@@ -34,4 +34,4 @@ oxygen update
 
 For product documentation, visit https://oxygen-agent.com/docs. For support, visit https://oxygen-agent.com.
 
-Version: 1.284.3
+Version: 1.285.53

package/dist/browser-login.js

@@ -2,6 +2,7 @@ import { execFileSync } from "node:child_process";
 import { randomBytes, timingSafeEqual } from "node:crypto";
 import { createServer } from "node:http";
 import { OxygenError } from "@oxygen/shared";
+import { readErrorMessage } from "./util.js";
 const CALLBACK_HOST = "127.0.0.1";
 const CALLBACK_PATH = "/cli/login/callback";
 const MAX_CALLBACK_BODY_BYTES = 32_000;
@@ -175,6 +176,3 @@ function closeServer(server) {
         });
     });
 }
-function readErrorMessage(error) {
-    return error instanceof Error ? error.message : "unknown error";
-}

package/dist/credentials.d.ts

@@ -21,7 +21,7 @@ export type StoredCredentials = {
 export type CredentialProfile = StoredCredentials & {
     name: string;
 };
-export type CredentialProfilesState = {
+type CredentialProfilesState = {
     activeProfile: string | null;
     profiles: CredentialProfile[];
 };
@@ -46,7 +46,6 @@ export type ProfileResolution = {
     exists: boolean;
 };
 export declare function resolveActiveProfile(env?: NodeJS.ProcessEnv): Promise<ProfileResolution>;
-export declare function findProfileNameByOrganizationId(organizationId: string, env?: NodeJS.ProcessEnv): Promise<string | null>;
 export declare function pickProfileNameForIdentity(organizationId: string, candidateSeed: string, env?: NodeJS.ProcessEnv): Promise<{
     name: string;
     renamed: boolean;
@@ -58,3 +57,4 @@ export declare function pickProfileNameForUserSession(userId: string, candidateS
 export declare function switchCredentialProfile(profile: string, env?: NodeJS.ProcessEnv): Promise<CredentialProfile>;
 export declare function updateActiveOrganizationForProfile(profile: string, organization: StoredOrganization, env?: NodeJS.ProcessEnv): Promise<CredentialProfile>;
 export declare function normalizeApiUrl(value: string): string;
+export {};

package/dist/credentials.js

@@ -43,17 +43,7 @@ export async function loadCredentials(env = process.env) {
     return parseStoredCredentialsObject(document);
 }
 export async function saveCredentials(credentials, env = process.env, options = {}) {
-    const normalized = {
-        token: credentials.token,
-        apiUrl: normalizeApiUrl(credentials.apiUrl),
-    };
-    if (credentials.authKind)
-        normalized.authKind = credentials.authKind;
-    if (credentials.activeOrganization !== undefined) {
-        normalized.activeOrganization = credentials.activeOrganization;
-    }
-    if (credentials.identity)
-        normalized.identity = credentials.identity;
+    const normalized = normalizeStoredCredentialsRecord(credentials);
     const existing = await readSystemCredentialDocument(env);
     const profile = normalizeProfileName(options.profile ?? readEnvProfile(env) ?? existing?.activeProfile ?? DEFAULT_PROFILE_NAME);
     const profiles = existing ? readProfiles(existing) : {};
@@ -153,26 +143,12 @@ export async function resolveActiveProfile(env = process.env) {
             : "default";
     return { name: candidate, source, credentials, exists: Boolean(credentials) };
 }
-export async function findProfileNameByOrganizationId(organizationId, env = process.env) {
-    const document = await readSystemCredentialDocument(env);
-    if (!document)
-        return null;
-    const profiles = readProfiles(document);
-    for (const [name, credentials] of Object.entries(profiles)) {
-        if (credentials.identity?.organization?.id === organizationId)
-            return name;
-        if (credentials.activeOrganization?.id === organizationId)
-            return name;
-    }
-    return null;
-}
-export async function pickProfileNameForIdentity(organizationId, candidateSeed, env = process.env) {
+async function pickProfileName(matches, candidateSeed, env) {
     const document = await readSystemCredentialDocument(env);
     const profiles = document ? readProfiles(document) : {};
-    const existingForOrg = Object.entries(profiles).find(([, credentials]) => credentials.identity?.organization?.id === organizationId ||
-        credentials.activeOrganization?.id === organizationId);
-    if (existingForOrg)
-        return { name: existingForOrg[0], renamed: false };
+    const existing = Object.entries(profiles).find(([, credentials]) => matches(credentials));
+    if (existing)
+        return { name: existing[0], renamed: false };
     const base = normalizeProfileName(candidateSeed);
     if (!profiles[base])
         return { name: base, renamed: false };
@@ -186,25 +162,13 @@ export async function pickProfileNameForIdentity(organizationId, candidateSeed,
         exitCode: 1,
     });
 }
+export async function pickProfileNameForIdentity(organizationId, candidateSeed, env = process.env) {
+    return pickProfileName((credentials) => credentials.identity?.organization?.id === organizationId ||
+        credentials.activeOrganization?.id === organizationId, candidateSeed, env);
+}
 export async function pickProfileNameForUserSession(userId, candidateSeed, env = process.env) {
-    const document = await readSystemCredentialDocument(env);
-    const profiles = document ? readProfiles(document) : {};
-    const existingForUser = Object.entries(profiles).find(([, credentials]) => credentials.authKind === "user_session" &&
-        credentials.identity?.user.id === userId);
-    if (existingForUser)
-        return { name: existingForUser[0], renamed: false };
-    const base = normalizeProfileName(candidateSeed);
-    if (!profiles[base])
-        return { name: base, renamed: false };
-    for (let suffix = 2; suffix < 1000; suffix++) {
-        const next = `${base}-${suffix}`;
-        if (!profiles[next])
-            return { name: next, renamed: true };
-    }
-    throw new OxygenError("profile_collision", "Unable to derive a unique CLI profile name.", {
-        details: { base },
-        exitCode: 1,
-    });
+    return pickProfileName((credentials) => credentials.authKind === "user_session" &&
+        credentials.identity?.user.id === userId, candidateSeed, env);
 }
 export async function switchCredentialProfile(profile, env = process.env) {
     const document = await readSystemCredentialDocument(env);
@@ -696,22 +660,25 @@ function parseStoredOrganization(value) {
         : null;
     return { id, slug, name };
 }
+function normalizeStoredCredentialsRecord(credentials) {
+    const normalized = {
+        token: credentials.token,
+        apiUrl: normalizeApiUrl(credentials.apiUrl),
+    };
+    if (credentials.authKind)
+        normalized.authKind = credentials.authKind;
+    if (credentials.activeOrganization !== undefined) {
+        normalized.activeOrganization = credentials.activeOrganization;
+    }
+    if (credentials.identity)
+        normalized.identity = credentials.identity;
+    return normalized;
+}
 function readProfiles(document) {
     const profiles = {};
     const rawProfiles = document.profiles ?? {};
     for (const [name, credentials] of Object.entries(rawProfiles)) {
-        const normalized = {
-            token: credentials.token,
-            apiUrl: normalizeApiUrl(credentials.apiUrl),
-        };
-        if (credentials.authKind)
-            normalized.authKind = credentials.authKind;
-        if (credentials.activeOrganization !== undefined) {
-            normalized.activeOrganization = credentials.activeOrganization;
-        }
-        if (credentials.identity)
-            normalized.identity = credentials.identity;
-        profiles[normalizeProfileName(name)] = normalized;
+        profiles[normalizeProfileName(name)] = normalizeStoredCredentialsRecord(credentials);
     }
     if (Object.keys(profiles).length === 0) {
         const defaultCredentials = parseStoredCredentialsObject(document);

package/dist/http-client.js

@@ -1,10 +1,9 @@
 import { OXYGEN_VERSION, OxygenError, isCliResult, isVersionGreater, readEnvelopeCompatibility, vercelProtectionBypassHeaders, withRetryAfterDetails, } from "@oxygen/shared";
 import { randomUUID } from "node:crypto";
 import { defaultApiUrl, loadCredentials } from "./credentials.js";
-import { resolveCliUpdateGuidance } from "./runtime.js";
+import { isProdApiUrl, resolveCliUpdateGuidance } from "./runtime.js";
 const DEFAULT_REQUEST_TIMEOUT_MS = 120_000;
 const CLI_COMPATIBILITY_CHECK_TIMEOUT_MS = 5_000;
-const PROD_API_HOSTNAME = "oxygen-agent.com";
 const cliCompatibilityCheckKeys = new Set();
 export async function requestOxygen(// skipcq: JS-R1005
 path, options = {}) {
@@ -175,14 +174,6 @@ function warnIfCliIsOlderThanApi(serverVersion, apiUrl) {
     process.stderr.write(`[${guidance.binaryName}] CLI version ${OXYGEN_VERSION} is older than Oxygen API version ${serverVersion}. `
         + `${guidance.warningInstruction}\n`);
 }
-function isProdApiUrl(apiUrl) {
-    try {
-        return new URL(apiUrl).hostname === PROD_API_HOSTNAME;
-    }
-    catch {
-        return false;
-    }
-}
 function assertCliMeetsMinimumApiVersion(compatibility, options, apiUrl) {
     if (options.enforceMinimumCliVersion === false)
         return;

package/dist/index.js

@@ -24,6 +24,7 @@ import { addSessionOutput, addSessionStatus, getSessionUsage, startSession, upda
 import { doctorAgentSkills, installAgentSkills, listAgentSkills, runAutomaticSkillsInstall, } from "./skills.js";
 import { resolveCliBinaryName } from "./runtime.js";
 import { updateCli } from "./update.js";
+import { isRecord, readErrorMessage, readOption } from "./util.js";
 function buildFindBody(capability, options) {
     const body = { capability };
     const set = (key, value) => {
@@ -795,13 +796,24 @@ function readPublishingPostText(options, required) {
     if (inlineText && textFile) {
         throw new OxygenError("conflicting_flags", "Pass either --text or --text-file, not both.", { exitCode: 1 });
     }
-    const text = textFile ? readFileSync(resolve(textFile), "utf8").trimEnd() : inlineText;
+    const text = textFile ? readPublishingTextFile(textFile) : inlineText;
     if (text?.trim())
         return text;
     if (!required)
         return null;
     throw new OxygenError("invalid_request", "Pass --text or --text-file.", { exitCode: 1 });
 }
+// Read --text-file, sanitizing the OS error so a missing/unreadable file reports
+// only the basename the user passed — never the resolved absolute filesystem path
+// Node's ENOENT would otherwise leak into the CLI error output.
+function readPublishingTextFile(textFile) {
+    try {
+        return readFileSync(resolve(textFile), "utf8").trimEnd();
+    }
+    catch {
+        throw new OxygenError("text_file_unreadable", `Couldn't read --text-file '${basename(textFile)}'. Check the path exists and is readable.`, { exitCode: 1 });
+    }
+}
 function buildCrmRelationshipUpsertBody(object, rowId, options) {
     return {
         object,
@@ -5727,6 +5739,23 @@ export function createProgram() {
         .option("--json", "Print a JSON envelope.")
         .action(async (id, options) => {
         await handleAsyncAction("senders health", options, () => requestOxygen(`/api/cli/senders/${encodeURIComponent(id)}/health`));
+    }))
+        .addCommand(new Command("inmail-balance")
+        .description("Show remaining LinkedIn InMail credits for a sender (Premium / Sales Navigator / Recruiter each hold a separate pool). Run before enrolling an `inmail` sequencer step so a campaign does not stall on an account with zero credits. Read-only — not billed. <id> defaults to the org's primary sender.")
+        .argument("[id]", "Sender account id, connection id, or Unipile account id. Defaults to the org's primary sender.")
+        .option("--service <service>", "Narrow to one credit pool: classic | sales_navigator | recruiter. Defaults to every subscribed service.")
+        .option("--json", "Print a JSON envelope.")
+        .action(async (id, options) => {
+        await handleAsyncAction("senders inmail-balance", options, () => {
+            const query = new URLSearchParams();
+            if (id)
+                query.set("account", id);
+            const service = readOption(options.service);
+            if (service)
+                query.set("service", service);
+            const suffix = query.toString();
+            return requestOxygen(`/api/cli/linkedin/inmail-balance${suffix ? `?${suffix}` : ""}`);
+        });
     }))
         .addCommand(new Command("sync")
         .description("Refresh LinkedIn account state (status, profile) from Unipile. Pass --connection-id to sync one account, or omit it to sync all.")
@@ -6267,7 +6296,7 @@ export function createProgram() {
         .action(async (options) => {
         await handleAsyncAction("linkedin invitations withdraw", options, () => {
             const ids = (options.ids ?? "").split(",").map((id) => id.trim()).filter(Boolean);
-            const olderThan = readPositiveInteger(options.olderThan);
+            const olderThan = readPositiveInt(options.olderThan);
             const account = readOption(options.account);
             return requestOxygen("/api/cli/linkedin/connections/invite/withdraw", {
                 method: "POST",
@@ -6288,7 +6317,7 @@ export function createProgram() {
         .action(async (options) => {
         await handleAsyncAction("linkedin invitations list", options, () => {
             const account = readOption(options.account);
-            const limit = readPositiveInteger(options.limit);
+            const limit = readPositiveInt(options.limit);
             const params = new URLSearchParams();
             if (account)
                 params.set("account", account);
@@ -6990,7 +7019,7 @@ export function createProgram() {
             const senders = readCsvOption(options.senders);
             const email = readCampaignEmailBinding(options);
             const maxCredits = readPositiveNumber(options.maxCredits);
-            const maxLiveSends = readPositiveInteger(options.maxLiveSends);
+            const maxLiveSends = readPositiveInt(options.maxLiveSends);
             const settings = readSequenceSettings(options);
             return requestOxygen("/api/cli/sequences", {
                 method: "POST",
@@ -7057,7 +7086,7 @@ export function createProgram() {
             const maxCredits = readPositiveNumber(options.maxCredits);
             if (maxCredits !== undefined)
                 body.max_credits = maxCredits;
-            const maxLiveSends = readPositiveInteger(options.maxLiveSends);
+            const maxLiveSends = readPositiveInt(options.maxLiveSends);
             if (maxLiveSends !== undefined)
                 body.max_live_sends = maxLiveSends;
             const settings = readSequenceSettings(options);
@@ -7130,7 +7159,7 @@ export function createProgram() {
         .action(async (sequence, options) => {
         await handleAsyncAction("sequences start", options, () => {
             const maxCredits = readPositiveNumber(options.maxCredits);
-            const maxLiveSends = readPositiveInteger(options.maxLiveSends);
+            const maxLiveSends = readPositiveInt(options.maxLiveSends);
             return requestOxygen(`/api/cli/sequences/${encodeURIComponent(sequence)}/start`, {
                 method: "POST",
                 body: {
@@ -7561,10 +7590,10 @@ export function createProgram() {
                     body: { ramp_config: null },
                 });
             }
-            const startPerDay = readPositiveInteger(options.startPerDay);
-            const increaseEveryDays = readPositiveInteger(options.increaseEveryDays);
-            const step = readPositiveInteger(options.step);
-            const cap = readPositiveInteger(options.cap);
+            const startPerDay = readPositiveInt(options.startPerDay);
+            const increaseEveryDays = readPositiveInt(options.increaseEveryDays);
+            const step = readPositiveInt(options.step);
+            const cap = readPositiveInt(options.cap);
             if (startPerDay === undefined || increaseEveryDays === undefined || step === undefined || cap === undefined) {
                 throw new Error("Provide --start-per-day, --increase-every-days, --step, and --cap (or --clear to remove the override).");
             }
@@ -9245,7 +9274,7 @@ function readCompaniesSearchPlanBody(options) {
 }
 function readCompaniesSearchRunBody(options) {
     const prompt = options.prompt ? readFileIfPresent(options.prompt) : null;
-    const plan = options.planJson ? readCompanySearchPlanJson(options.planJson) : null;
+    const plan = options.planJson ? readSearchPlanJson(options.planJson) : null;
     if (!prompt && !plan) {
         throw new OxygenError("invalid_request", "Pass --prompt or --plan-json.", { exitCode: 1 });
     }
@@ -9396,7 +9425,7 @@ function assertNotPeopleSearchKind(kind) {
         });
     }
 }
-function readCompanySearchPlanJson(value) {
+function readSearchPlanJson(value) {
     const parsed = parseJsonObject(readFileIfPresent(value));
     const data = parsed.data;
     return data && typeof data === "object" && !Array.isArray(data)
@@ -9418,7 +9447,7 @@ function readPeopleSearchPlanBody(options) {
 }
 function readPeopleSearchRunBody(options) {
     const prompt = options.prompt ? readFileIfPresent(options.prompt) : null;
-    const plan = options.planJson ? readPeopleSearchPlanJson(options.planJson) : null;
+    const plan = options.planJson ? readSearchPlanJson(options.planJson) : null;
     if (!prompt && !plan) {
         throw new OxygenError("invalid_request", "Pass --prompt or --plan-json.", { exitCode: 1 });
     }
@@ -9504,13 +9533,6 @@ function readPeopleSearchFilters(options) {
     }
     return Object.keys(filters).length > 0 ? filters : null;
 }
-function readPeopleSearchPlanJson(value) {
-    const parsed = parseJsonObject(readFileIfPresent(value));
-    const data = parsed.data;
-    return data && typeof data === "object" && !Array.isArray(data)
-        ? data
-        : parsed;
-}
 function readCompaniesEnrichBody(table, options) {
     const body = { table };
     const fields = readCsvOption(options.missingFields);
@@ -10907,9 +10929,6 @@ function readRecord(value, key) {
     const entry = value[key];
     return isRecord(entry) ? entry : null;
 }
-function isRecord(value) {
-    return Boolean(value) && typeof value === "object" && !Array.isArray(value);
-}
 function tableWebUrl(tableIdOrSlug) {
     return `https://oxygen-agent.com/tables/${encodeURIComponent(tableIdOrSlug)}`;
 }
@@ -11706,9 +11725,6 @@ function createCliLoginUrl(apiUrl) {
     url.searchParams.set("source", "oxygen_cli");
     return url.toString();
 }
-function readErrorMessage(error) {
-    return error instanceof Error ? error.message : "unknown error";
-}
 function startOxygenSpinner(message) {
     if (!output.isTTY) {
         output.write(`${message}...\n`);
@@ -12378,9 +12394,6 @@ function ansi(enabled) {
         yellow: wrap(33, 39),
     };
 }
-function readOption(value) {
-    return value?.trim() ? value.trim() : null;
-}
 // Commander collector for a repeatable option (e.g. --attach <url> --attach <url>):
 // accumulates each value into an array.
 function collectRepeatable(value, previous) {
@@ -13470,19 +13483,6 @@ function readNonNegativeInt(value) {
     }
     return parsed;
 }
-function readPositiveInteger(value) {
-    const trimmed = value?.trim();
-    if (!trimmed)
-        return undefined;
-    const parsed = Number(trimmed);
-    if (!Number.isInteger(parsed) || parsed <= 0) {
-        throw new OxygenError("invalid_number", "Expected a positive integer.", {
-            details: { value },
-            exitCode: 1,
-        });
-    }
-    return parsed;
-}
 // Folds the sequence-level email send controls (--max-emails-per-mailbox-per-day,
 // --send-window-file) into a partial `settings` object. Returns undefined when
 // neither flag is set so the field is omitted from the request body entirely.
@@ -13491,7 +13491,7 @@ function readPositiveInteger(value) {
 // preserves other settings the server already holds, e.g. dispatch_mode/schedule.
 function readSequenceSettings(options) {
     const settings = {};
-    const maxPerMailbox = readPositiveInteger(options.maxEmailsPerMailboxPerDay);
+    const maxPerMailbox = readPositiveInt(options.maxEmailsPerMailboxPerDay);
     if (maxPerMailbox !== undefined) {
         settings.max_emails_per_mailbox_per_day = maxPerMailbox;
     }
@@ -13512,10 +13512,10 @@ function readSequenceSettings(options) {
     if (options.stopOnBounce === false) {
         settings.stop_on_bounce = false;
     }
-    const maxEmailsPerDay = readPositiveInteger(options.maxEmailsPerDay);
+    const maxEmailsPerDay = readPositiveInt(options.maxEmailsPerDay);
     if (maxEmailsPerDay !== undefined)
         settings.max_emails_per_day = maxEmailsPerDay;
-    const maxNewEnrollmentsPerDay = readPositiveInteger(options.maxNewEnrollmentsPerDay);
+    const maxNewEnrollmentsPerDay = readPositiveInt(options.maxNewEnrollmentsPerDay);
     if (maxNewEnrollmentsPerDay !== undefined)
         settings.max_new_enrollments_per_day = maxNewEnrollmentsPerDay;
     const prioritization = readOption(options.sequencePrioritization);

package/dist/knowledge-mirror.d.ts

@@ -1,5 +1,3 @@
-export declare const MIRROR_LOCK_STALE_MS: number;
-export declare const MIRROR_SLUG_PATTERN: RegExp;
 export declare const GENERATED_MIRROR_FILE_HEADER = "<!-- generated by oxygen knowledge sync \u2014 local edits are overwritten -->";
 export type MirrorPageRecord = {
     id: string;
@@ -16,7 +14,7 @@ export type MirrorState = {
     last_sync_at: string | null;
     pages: Record<string, MirrorPageRecord>;
 };
-export type MirrorIndexPage = {
+type MirrorIndexPage = {
     slug: string;
     title?: string | null;
     type?: string | null;
@@ -26,7 +24,7 @@ export type MirrorIndexPage = {
     canonical?: boolean;
     degree?: number;
 };
-export type MirrorIndexSnapshot = {
+type MirrorIndexSnapshot = {
     pages: MirrorIndexPage[];
     counts?: {
         total?: number;
@@ -34,7 +32,7 @@ export type MirrorIndexSnapshot = {
         byStatus?: Record<string, number>;
     };
 };
-export type MirrorLogEntry = {
+type MirrorLogEntry = {
     seq?: string;
     event?: string;
     slug?: string | null;
@@ -49,14 +47,12 @@ export declare function resolveMirrorDir(input: {
     apiHost: string;
     orgId: string;
 }): string;
-export declare function mirrorSidecarDir(dir: string): string;
 export declare function mirrorManifestPath(dir: string): string;
 export declare function mirrorLockPath(dir: string): string;
 export declare function mirrorConflictsDir(dir: string): string;
 export declare function pageFilePath(dir: string, slug: string): string;
 /** Cheap "does a mirror exist here" check for post-write staleness hooks. */
 export declare function mirrorExists(dir: string): boolean;
-export declare function assertSafeMirrorSlug(slug: string): void;
 export declare function emptyMirrorState(input: {
     apiHost: string;
     orgId: string;
@@ -126,3 +122,4 @@ export declare function purgeMirror(dir: string): void;
 export declare function resetMirrorForFullResync(dir: string): {
     quarantined: number;
 };
+export {};

package/dist/knowledge-mirror.js

@@ -22,10 +22,10 @@ const MIRROR_MANIFEST_FILENAME = "manifest.json";
 const MIRROR_LOCK_FILENAME = "lock";
 const MIRROR_CONFLICTS_DIRNAME = "conflicts";
 const MIRROR_SLUG_MAX_LENGTH = 200;
-export const MIRROR_LOCK_STALE_MS = 10 * 60 * 1000;
+const MIRROR_LOCK_STALE_MS = 10 * 60 * 1000;
 // Server page slugs are lowercase alphanumerics/dashes; anything else (path
 // separators, dots, uppercase) is rejected before it can touch the filesystem.
-export const MIRROR_SLUG_PATTERN = /^[a-z0-9][a-z0-9-]*$/;
+const MIRROR_SLUG_PATTERN = /^[a-z0-9][a-z0-9-]*$/;
 export const GENERATED_MIRROR_FILE_HEADER = "<!-- generated by oxygen knowledge sync — local edits are overwritten -->";
 // ── Paths ───────────────────────────────────────────────────────────────────────
 /** Same resolution as the credential/session stores: OXYGEN_CONFIG_DIR wins. */
@@ -38,7 +38,7 @@ export function resolveDefaultConfigDir(env = process.env) {
 export function resolveMirrorDir(input) {
     return join(input.configDir, "knowledge", safePathSegment(input.apiHost, "API host"), safePathSegment(input.orgId, "organization id"));
 }
-export function mirrorSidecarDir(dir) {
+function mirrorSidecarDir(dir) {
     return join(dir, MIRROR_SIDECAR_DIRNAME);
 }
 export function mirrorManifestPath(dir) {
@@ -68,7 +68,7 @@ function safePathSegment(value, label) {
     }
     return cleaned;
 }
-export function assertSafeMirrorSlug(slug) {
+function assertSafeMirrorSlug(slug) {
     if (slug.length > MIRROR_SLUG_MAX_LENGTH || !MIRROR_SLUG_PATTERN.test(slug)) {
         throw new OxygenError("invalid_slug", "Mirror page slugs must be lowercase alphanumerics and dashes.", {
             details: { slug },

package/dist/local-custom-http-column.js

@@ -2,6 +2,7 @@ import { Buffer } from "node:buffer";
 import { OxygenError } from "@oxygen/shared";
 import { CustomHttpUrlSafetyError, assertCustomHttpPublicUrlSyntax, assertCustomHttpResolvedHostAllowed, } from "@oxygen/shared/custom-http-safety";
 import { requestOxygen } from "./http-client.js";
+import { isRecord } from "./util.js";
 const LOCAL_CUSTOM_HTTP_TIMEOUT_MS = 10_000;
 const LOCAL_CUSTOM_HTTP_MAX_RESPONSE_BYTES = 1_000_000;
 export async function runLocalCustomHttpColumn(table, columnKeyOrId, options) {
@@ -769,6 +770,3 @@ function isNonEmptyLocalValue(value) {
         return Object.keys(value).length > 0;
     return true;
 }
-function isRecord(value) {
-    return Boolean(value) && typeof value === "object" && !Array.isArray(value);
-}

package/dist/runtime.d.ts

@@ -12,4 +12,5 @@ export type CliUpdateGuidance = {
 };
 export declare function resolveCliBinaryName(env?: NodeJS.ProcessEnv, argv?: readonly string[]): typeof DEV_CLI_BINARY | typeof PROD_CLI_BINARY;
 export declare function resolveCliUpdateGuidance(apiUrl: string | undefined, env?: NodeJS.ProcessEnv, argv?: readonly string[]): CliUpdateGuidance;
+export declare function isProdApiUrl(apiUrl: string): boolean;
 export {};

package/dist/runtime.js

@@ -46,7 +46,7 @@ function normalizeBinaryName(value) {
         return PROD_CLI_BINARY;
     return null;
 }
-function isProdApiUrl(apiUrl) {
+export function isProdApiUrl(apiUrl) {
     try {
         return new URL(apiUrl).hostname === PROD_API_HOSTNAME;
     }

package/dist/skills.js

@@ -5,6 +5,7 @@ import { join, resolve } from "node:path";
 import { OxygenError, toFailure } from "@oxygen/shared";
 import { defaultApiUrl, loadCredentials, normalizeApiUrl } from "./credentials.js";
 import { requestOxygen } from "./http-client.js";
+import { isRecord, readOption } from "./util.js";
 import { resolveCmdShimInvocation } from "./windows-shim.js";
 const DEFAULT_SKILL_AGENTS = ["codex", "claude-code", "cursor"];
 const SKILL_INDEX_PATH = "/.well-known/skills/index.json";
@@ -444,9 +445,3 @@ function readWords(value) {
         .map((entry) => entry.trim())
         .filter(Boolean);
 }
-function readOption(value) {
-    return value?.trim() ? value.trim() : null;
-}
-function isRecord(value) {
-    return Boolean(value) && typeof value === "object" && !Array.isArray(value);
-}

package/dist/update.d.ts

@@ -13,7 +13,7 @@ export type UpdateOptions = {
     package?: string;
     dryRun?: boolean;
 };
-export type UpdateResult = {
+type UpdateResult = {
     current_version: string;
     package: string;
     command: string;
@@ -28,7 +28,6 @@ export declare function updateCli(options: UpdateOptions, runtime?: {
     spawnSync?: SpawnSyncLike;
     execFileSync?: ExecFileSyncLike;
 } & SkillsSourceRuntime): Promise<UpdateResult>;
-export declare function detectCliInstallPrefix(modulePath?: string): string | null;
 export declare function detectCliInstallPrefixFromPath(modulePath: string): string | null;
 export declare function resolveNpmExecutables(platform?: NodeJS.Platform): string[];
 export {};

package/dist/update.js

@@ -2,6 +2,7 @@ import { spawnSync } from "node:child_process";
 import { fileURLToPath } from "node:url";
 import { OXYGEN_VERSION, OxygenError } from "@oxygen/shared";
 import { runAutomaticSkillsInstall, skippedAutomaticSkillsInstall, } from "./skills.js";
+import { readOption } from "./util.js";
 import { quoteWindowsCmdArg } from "./windows-shim.js";
 const DEFAULT_CLI_PACKAGE_SPEC = "@oxygen-agent/cli@latest";
 // skipcq: JS-R1005 — handles platform/install-mode/dry-run combinations end-to-end
@@ -76,7 +77,7 @@ export async function updateCli(options, runtime = {}) {
         exitCode: 1,
     });
 }
-export function detectCliInstallPrefix(modulePath = fileURLToPath(import.meta.url)) {
+function detectCliInstallPrefix(modulePath = fileURLToPath(import.meta.url)) {
     return detectCliInstallPrefixFromPath(modulePath);
 }
 export function detectCliInstallPrefixFromPath(modulePath) {
@@ -99,9 +100,6 @@ export function detectCliInstallPrefixFromPath(modulePath) {
 export function resolveNpmExecutables(platform = process.platform) {
     return platform === "win32" ? ["cmd.exe"] : ["npm"];
 }
-function readOption(value) {
-    return typeof value === "string" && value.trim() ? value.trim() : null;
-}
 function isMissingExecutableError(error) {
     return error.code === "ENOENT";
 }

package/dist/util.d.ts

@@ -0,0 +1,3 @@
+export declare function readOption(value: string | undefined): string | null;
+export declare function isRecord(value: unknown): value is Record<string, unknown>;
+export declare function readErrorMessage(error: unknown): string;

package/dist/util.js

@@ -0,0 +1,9 @@
+export function readOption(value) {
+    return typeof value === "string" && value.trim() ? value.trim() : null;
+}
+export function isRecord(value) {
+    return Boolean(value) && typeof value === "object" && !Array.isArray(value);
+}
+export function readErrorMessage(error) {
+    return error instanceof Error ? error.message : "unknown error";
+}

package/node_modules/@oxygen/shared/dist/email-tracking-token.d.ts

@@ -1,3 +1,4 @@
+import { type EnvLike } from "./signed-token.js";
 /**
  * Signed token for native open/click tracking on cold email. The dispatcher MINTS
  * the token at send time (one per tracked action) and bakes it into a tracking
@@ -37,7 +38,6 @@ export type EmailTrackingTokenPayload = {
     /** Issued-at (epoch ms), recorded as provenance. */
     iat: number;
 };
-type EnvLike = Record<string, string | undefined>;
 /** SHA-256 hex of a destination URL — the value bound into a click token's `uh`. */
 export declare function hashTrackingUrl(url: string): string;
 /**
@@ -79,4 +79,3 @@ export declare function buildOpenPixelUrl(token: string, baseUrl: string): strin
  * in the `u` query param (the route recomputes its hash against the token's `uh`).
  */
 export declare function buildClickTrackingUrl(token: string, destinationUrl: string, baseUrl: string): string;
-export {};

package/node_modules/@oxygen/shared/dist/email-tracking-token.js

@@ -1,7 +1,5 @@
-import { createHash, createHmac, timingSafeEqual } from "node:crypto";
-function base64urlEncode(value) {
-    return Buffer.from(value, "utf8").toString("base64url");
-}
+import { createHash, timingSafeEqual } from "node:crypto";
+import { resolveAppBaseUrl, signPayload, splitAndVerifyToken } from "./signed-token.js";
 /** SHA-256 hex of a destination URL — the value bound into a click token's `uh`. */
 export function hashTrackingUrl(url) {
     return createHash("sha256").update(url, "utf8").digest("hex");
@@ -11,21 +9,7 @@ export function hashTrackingUrl(url) {
  * computed over the encoded body, so any tamper invalidates the signature.
  */
 export function signEmailTrackingToken(payload, secret) {
-    const body = base64urlEncode(JSON.stringify(payload));
-    const signature = createHmac("sha256", secret).update(body).digest("base64url");
-    return `${body}.${signature}`;
-}
-/** Constant-time HMAC-SHA256 check; false on any error (bad base64, length mismatch). */
-function verifySignature(body, providedSig, secret) {
-    const expected = createHmac("sha256", secret).update(body).digest();
-    let provided;
-    try {
-        provided = Buffer.from(providedSig, "base64url");
-    }
-    catch {
-        return false;
-    }
-    return provided.length === expected.length && timingSafeEqual(provided, expected);
+    return signPayload(payload, secret);
 }
 /** Decode + validate the base64url body; typed payload or null on any problem. */
 function parseTokenPayload(body) {
@@ -71,14 +55,8 @@ function parseTokenPayload(body) {
  * null -> benign gif / plain redirect with no recording.
  */
 export function verifyEmailTrackingToken(token, secret) {
-    if (typeof token !== "string" || typeof secret !== "string" || !secret)
-        return null;
-    const dot = token.indexOf(".");
-    if (dot <= 0 || dot === token.length - 1)
-        return null;
-    const body = token.slice(0, dot);
-    const providedSig = token.slice(dot + 1);
-    if (!verifySignature(body, providedSig, secret))
+    const body = splitAndVerifyToken(token, secret);
+    if (body === null)
         return null;
     return parseTokenPayload(body);
 }
@@ -114,8 +92,7 @@ export function emailTrackingSigningSecret(env = process.env) {
  * fallback the token routes are always reachable at.)
  */
 export function emailTrackingAppBaseUrl(env = process.env) {
-    const raw = (env.NEXT_PUBLIC_APP_URL || env.OXYGEN_APP_URL || "https://oxygen-agent.com").trim();
-    return raw.replace(/\/+$/, "");
+    return resolveAppBaseUrl(env);
 }
 /** The open-pixel URL for a signed token: `<base>/api/t/o/<token>`. */
 export function buildOpenPixelUrl(token, baseUrl) {

package/node_modules/@oxygen/shared/dist/email-unsubscribe-token.d.ts

@@ -1,3 +1,4 @@
+import { type EnvLike } from "./signed-token.js";
 /**
  * Signed token for the RFC 8058 one-click List-Unsubscribe link on native cold
  * email. The worker MINTS the token at send time and bakes the URL into the
@@ -28,7 +29,6 @@ export type UnsubscribeTokenPayload = {
     /** Issued-at (epoch ms), recorded as provenance. */
     iat: number;
 };
-type EnvLike = Record<string, string | undefined>;
 /**
  * Sign a payload into `<base64url(json)>.<base64url(hmac-sha256)>`. The HMAC is
  * computed over the encoded body, so any tamper to the payload invalidates the
@@ -59,4 +59,3 @@ export declare function oxygenAppBaseUrl(env?: EnvLike): string;
  * re-checks it against the token), token in the `token` query param.
  */
 export declare function buildUnsubscribeUrl(orgId: string, token: string, baseUrl: string): string;
-export {};

package/node_modules/@oxygen/shared/dist/email-unsubscribe-token.js

@@ -1,7 +1,4 @@
-import { createHmac, timingSafeEqual } from "node:crypto";
-function base64urlEncode(value) {
-    return Buffer.from(value, "utf8").toString("base64url");
-}
+import { resolveAppBaseUrl, signPayload, splitAndVerifyToken } from "./signed-token.js";
 /**
  * Sign a payload into `<base64url(json)>.<base64url(hmac-sha256)>`. The HMAC is
  * computed over the encoded body, so any tamper to the payload invalidates the
@@ -10,22 +7,7 @@ function base64urlEncode(value) {
  */
 export function signUnsubscribeToken(payload, secret) {
     const normalized = { ...payload, email: payload.email.trim().toLowerCase() };
-    const body = base64urlEncode(JSON.stringify(normalized));
-    const signature = createHmac("sha256", secret).update(body).digest("base64url");
-    return `${body}.${signature}`;
-}
-/** Constant-time HMAC-SHA256 check; false on any error (bad base64, length mismatch). */
-function verifySignature(body, providedSig, secret) {
-    const expected = createHmac("sha256", secret).update(body).digest();
-    let provided;
-    try {
-        provided = Buffer.from(providedSig, "base64url");
-    }
-    catch {
-        return false;
-    }
-    // Equal-length guard before timingSafeEqual (it throws on length mismatch).
-    return provided.length === expected.length && timingSafeEqual(provided, expected);
+    return signPayload(normalized, secret);
 }
 /** Decode and validate the base64url body; returns typed payload or null on any problem. */
 function parseTokenPayload(body) {
@@ -62,14 +44,8 @@ function parseTokenPayload(body) {
  * secret, tampered body, replayed garbage). Pure: the route maps null -> 401.
  */
 export function verifyUnsubscribeToken(token, secret) {
-    if (typeof token !== "string" || typeof secret !== "string" || !secret)
-        return null;
-    const dot = token.indexOf(".");
-    if (dot <= 0 || dot === token.length - 1)
-        return null;
-    const body = token.slice(0, dot);
-    const providedSig = token.slice(dot + 1);
-    if (!verifySignature(body, providedSig, secret))
+    const body = splitAndVerifyToken(token, secret);
+    if (body === null)
         return null;
     return parseTokenPayload(body);
 }
@@ -87,8 +63,7 @@ export function unsubscribeSigningSecret(env = process.env) {
  * stripped. Prefers NEXT_PUBLIC_APP_URL, then OXYGEN_APP_URL, then the prod host.
  */
 export function oxygenAppBaseUrl(env = process.env) {
-    const raw = (env.NEXT_PUBLIC_APP_URL || env.OXYGEN_APP_URL || "https://oxygen-agent.com").trim();
-    return raw.replace(/\/+$/, "");
+    return resolveAppBaseUrl(env);
 }
 /**
  * The canonical one-click unsubscribe URL: org id in the path (the route

package/node_modules/@oxygen/shared/dist/object-storage.js

@@ -8,6 +8,12 @@ import { OxygenError } from "./cli-result.js";
 // it. Configured against Hetzner Object Storage (S3-compatible) via the
 // OXYGEN_IMPORT_S3_* env vars; works with any S3-compatible endpoint.
 const PRESIGN_EXPIRY_SECONDS = 900;
+// The Fly worker publishes tenants serially, so a hung S3 GET on one tenant's
+// publishing media would stall every other tenant's publishing tick. Bound the
+// media download the same way the native-provider fetches are bounded
+// (AbortSignal.timeout); 120s matches the worker's other media-transfer budgets
+// and is generous for the bounded image/short-video assets publishing uploads.
+const PUBLISHING_MEDIA_DOWNLOAD_TIMEOUT_MS = 120_000;
 function readImportStorageConfig() {
     const endpoint = process.env.OXYGEN_IMPORT_S3_ENDPOINT?.trim();
     const bucket = process.env.OXYGEN_IMPORT_S3_BUCKET?.trim();
@@ -138,7 +144,7 @@ export async function openImportObjectStream(input) {
 }
 export async function openPublishingMediaObjectStream(input) {
     const { client, config } = resolveClient();
-    const result = await client.send(new GetObjectCommand({ Bucket: config.bucket, Key: input.storageKey }));
+    const result = await client.send(new GetObjectCommand({ Bucket: config.bucket, Key: input.storageKey }), { abortSignal: AbortSignal.timeout(PUBLISHING_MEDIA_DOWNLOAD_TIMEOUT_MS) });
     const body = result.Body;
     if (!body) {
         throw new OxygenError("publishing_media_object_missing", "Publishing media object had no body.", {

package/node_modules/@oxygen/shared/dist/signed-token.d.ts

@@ -0,0 +1,23 @@
+/**
+ * HMAC-signed-token core shared by the email tracking + unsubscribe tokens:
+ * `<base64url(json)>.<base64url(hmac-sha256)>` minting/verification plus the
+ * public app base-URL resolver. Internal to @oxygen/shared (not exported from
+ * the package index); each token module owns its payload shape + parsing.
+ */
+export type EnvLike = Record<string, string | undefined>;
+/**
+ * Sign a payload into `<base64url(json)>.<base64url(hmac-sha256)>`. The HMAC is
+ * computed over the encoded body, so any tamper invalidates the signature.
+ */
+export declare function signPayload(payload: unknown, secret: string): string;
+/**
+ * Split a `<body>.<signature>` token at the first dot and verify the signature
+ * (constant-time). Returns the still-encoded body on a valid signature; null on
+ * ANY problem (bad shape, blank/wrong secret, tampered body).
+ */
+export declare function splitAndVerifyToken(token: string, secret: string): string | null;
+/**
+ * The public app base URL, trailing slash stripped. Prefers NEXT_PUBLIC_APP_URL,
+ * then OXYGEN_APP_URL, then the prod host.
+ */
+export declare function resolveAppBaseUrl(env?: EnvLike): string;

package/node_modules/@oxygen/shared/dist/signed-token.js

@@ -0,0 +1,51 @@
+import { createHmac, timingSafeEqual } from "node:crypto";
+function base64urlEncode(value) {
+    return Buffer.from(value, "utf8").toString("base64url");
+}
+/**
+ * Sign a payload into `<base64url(json)>.<base64url(hmac-sha256)>`. The HMAC is
+ * computed over the encoded body, so any tamper invalidates the signature.
+ */
+export function signPayload(payload, secret) {
+    const body = base64urlEncode(JSON.stringify(payload));
+    const signature = createHmac("sha256", secret).update(body).digest("base64url");
+    return `${body}.${signature}`;
+}
+/** Constant-time HMAC-SHA256 check; false on any error (bad base64, length mismatch). */
+function verifySignature(body, providedSig, secret) {
+    const expected = createHmac("sha256", secret).update(body).digest();
+    let provided;
+    try {
+        provided = Buffer.from(providedSig, "base64url");
+    }
+    catch {
+        return false;
+    }
+    // Equal-length guard before timingSafeEqual (it throws on length mismatch).
+    return provided.length === expected.length && timingSafeEqual(provided, expected);
+}
+/**
+ * Split a `<body>.<signature>` token at the first dot and verify the signature
+ * (constant-time). Returns the still-encoded body on a valid signature; null on
+ * ANY problem (bad shape, blank/wrong secret, tampered body).
+ */
+export function splitAndVerifyToken(token, secret) {
+    if (typeof token !== "string" || typeof secret !== "string" || !secret)
+        return null;
+    const dot = token.indexOf(".");
+    if (dot <= 0 || dot === token.length - 1)
+        return null;
+    const body = token.slice(0, dot);
+    const providedSig = token.slice(dot + 1);
+    if (!verifySignature(body, providedSig, secret))
+        return null;
+    return body;
+}
+/**
+ * The public app base URL, trailing slash stripped. Prefers NEXT_PUBLIC_APP_URL,
+ * then OXYGEN_APP_URL, then the prod host.
+ */
+export function resolveAppBaseUrl(env = process.env) {
+    const raw = (env.NEXT_PUBLIC_APP_URL || env.OXYGEN_APP_URL || "https://oxygen-agent.com").trim();
+    return raw.replace(/\/+$/, "");
+}

package/node_modules/@oxygen/shared/dist/version.d.ts

@@ -1,2 +1,2 @@
-export declare const OXYGEN_VERSION = "1.284.3";
+export declare const OXYGEN_VERSION = "1.285.53";
 export declare const OXYGEN_MINIMUM_CLI_VERSION = "1.181.0";

package/node_modules/@oxygen/shared/dist/version.js

@@ -1,4 +1,4 @@
-export const OXYGEN_VERSION = "1.284.3";
+export const OXYGEN_VERSION = "1.285.53";
 // Bump this only when deployed CLI/API contracts require a newer CLI.
 // 1.181.0: paid table action runs and background columns run require
 // approved=true in addition to max_credits; older CLIs cannot send the flag.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oxygen-agent/cli",
-  "version": "1.284.3",
+  "version": "1.285.53",
   "private": false,
   "license": "UNLICENSED",
   "type": "module",