@oxygen-agent/cli 1.354.0 → 1.377.3

package/node_modules/@oxygen/shared/dist/linkedin-mentions.js

@@ -0,0 +1,157 @@
+/**
+ * Compile LinkedIn post text + stored mention state into Unipile's post
+ * contract: the outgoing text carries `{{i}}` placeholders and `mentions[i]`
+ * is `{ name, profile_id }`. Anything else (raw `@handle` text next to a
+ * mentions array, Oxygen mention-preview snapshots, unresolved handles) is
+ * NOT a tagged mention on LinkedIn — the provider either posts it literally
+ * or, worse, name-matches entries into the wrong span of text.
+ *
+ * Accepted inputs per entry (both arrays are optional):
+ * - Unipile-shaped: `{ name, profile_id }` (already the wire contract).
+ * - Oxygen preview-shaped (publishing mentions resolve output): uses
+ *   `displayName`/`providerId` (or snake_case), and is only eligible when
+ *   `status === "resolved"` and `semantics` is `"mention"` (links and plain
+ *   references stay as typed).
+ *
+ * Placement: an entry becomes a tagged mention only when its span can be
+ * anchored in the text — an existing `{{i}}` placeholder, the entry's `raw`
+ * occurrence, or `@name`/`@identifier`. Entries that cannot be anchored are
+ * dropped from the outgoing array so the provider can never guess a span.
+ */
+function isRecord(value) {
+    return Boolean(value) && typeof value === "object" && !Array.isArray(value);
+}
+function readString(record, ...keys) {
+    for (const key of keys) {
+        const value = record[key];
+        if (typeof value === "string" && value.trim())
+            return value.trim();
+    }
+    return null;
+}
+const PLACEHOLDER_RE = /\{\{(\d+)\}\}/g;
+function normalizeEntry(value) {
+    if (!isRecord(value))
+        return "invalid";
+    const status = readString(value, "status");
+    const semantics = readString(value, "semantics");
+    // Preview-shaped entries: only resolved, mention-semantics entries qualify.
+    // Links (full LinkedIn URLs) and plain references stay as typed text.
+    if (semantics === "link" || semantics === "plain")
+        return "skip";
+    if (status && status !== "resolved")
+        return "unresolved";
+    const name = readString(value, "name", "displayName", "display_name");
+    const profileId = readString(value, "profile_id", "providerId", "provider_id");
+    if (!name || !profileId)
+        return status || semantics ? "unresolved" : "invalid";
+    return {
+        name,
+        profileId,
+        raw: readString(value, "raw"),
+        identifier: readString(value, "identifier", "publicIdentifier", "public_identifier"),
+    };
+}
+/**
+ * True when the text already uses `{{i}}` placeholders that all resolve to a
+ * valid `{ name, profile_id }` entry — the caller pre-compiled the contract,
+ * so text and mentions pass through unchanged.
+ */
+function isPrecompiled(text, entries) {
+    const indexes = [...text.matchAll(PLACEHOLDER_RE)].map((match) => Number(match[1]));
+    if (indexes.length === 0)
+        return false;
+    return indexes.every((index) => {
+        const normalized = normalizeEntry(entries[index]);
+        return typeof normalized === "object";
+    });
+}
+export function compileLinkedInMentions(input) {
+    const explicit = Array.isArray(input.mentions) ? input.mentions : [];
+    const previews = Array.isArray(input.mentionPreviews) ? input.mentionPreviews : [];
+    if (isPrecompiled(input.text, explicit)) {
+        // Compact the array and renumber placeholders together: a non-object
+        // entry at an unreferenced index below a referenced one would otherwise
+        // shift later entries down while `{{i}}` numbers stay fixed, pointing a
+        // placeholder at the wrong (or missing) identity.
+        const mentions = [];
+        const remap = new Map();
+        explicit.forEach((value, oldIndex) => {
+            const entry = normalizeEntry(value);
+            if (typeof entry !== "object")
+                return;
+            remap.set(oldIndex, mentions.length);
+            mentions.push({ name: entry.name, profile_id: entry.profileId });
+        });
+        const text = input.text.replace(PLACEHOLDER_RE, (whole, digits) => {
+            const next = remap.get(Number(digits));
+            return next === undefined ? whole : `{{${next}}}`;
+        });
+        return { text, mentions, dropped: [] };
+    }
+    const dropped = [];
+    const placed = [];
+    let text = input.text;
+    const seenProfileIds = new Set();
+    for (const value of [...explicit, ...previews]) {
+        const entry = normalizeEntry(value);
+        if (entry === "skip")
+            continue;
+        if (entry === "invalid") {
+            dropped.push({ name: isRecord(value) ? readString(value, "name", "displayName", "display_name") : null, reason: "invalid" });
+            continue;
+        }
+        if (entry === "unresolved") {
+            dropped.push({ name: isRecord(value) ? readString(value, "name", "displayName", "display_name", "raw") : null, reason: "unresolved" });
+            continue;
+        }
+        if (seenProfileIds.has(entry.profileId))
+            continue;
+        const anchor = findAnchor(text, entry);
+        if (!anchor) {
+            dropped.push({ name: entry.name, reason: "not_in_text" });
+            continue;
+        }
+        const index = placed.length;
+        text = text.slice(0, anchor.start) + `{{${index}}}` + text.slice(anchor.end);
+        placed.push({ name: entry.name, profile_id: entry.profileId });
+        seenProfileIds.add(entry.profileId);
+    }
+    return { text, mentions: placed, dropped };
+}
+/**
+ * Find the span the mention replaces. Candidates are tried most-specific
+ * first: the exact raw capture from resolve time (`@handle`, URN, …), then
+ * `@identifier`, then `@name`. Bare names are never matched — replacing an
+ * un-prefixed word is how mentions end up covering the wrong text.
+ */
+function findAnchor(text, entry) {
+    const candidates = [
+        entry.raw,
+        entry.identifier ? `@${entry.identifier}` : null,
+        `@${entry.name}`,
+    ].filter((candidate) => Boolean(candidate && candidate.trim()));
+    const lowerText = text.toLowerCase();
+    for (const candidate of candidates) {
+        const lowerCandidate = candidate.toLowerCase();
+        // Reject matches that continue into more handle characters so `@acme`
+        // can never anchor inside `@acme-labs` — a partial span is exactly the
+        // wrong-mention rendering this compiler exists to prevent. A dot only
+        // continues the handle when an identifier character follows it
+        // (`@acme.io`); a sentence period (`@n8n. Next…`) is a boundary.
+        let from = 0;
+        while (from <= lowerText.length - lowerCandidate.length) {
+            const start = lowerText.indexOf(lowerCandidate, from);
+            if (start < 0)
+                break;
+            const end = start + candidate.length;
+            const next = text[end];
+            const continues = next !== undefined && (/[a-z0-9_-]/i.test(next)
+                || (next === "." && text[end + 1] !== undefined && /[a-z0-9_-]/i.test(text[end + 1])));
+            if (!continues)
+                return { start, end };
+            from = start + 1;
+        }
+    }
+    return null;
+}

package/node_modules/@oxygen/shared/dist/log.js

@@ -57,9 +57,21 @@ function reserveSurfaceDimension(merged, ctx) {
         surface: ctx.surface,
     };
 }
-let logSink = null;
+// The sink registration must live on globalThis, not in a module-local variable:
+// Next.js compiles instrumentation.ts and each route handler into separate
+// bundles, each with its OWN instance of this module. A module-local set by the
+// web log shipper (which starts in instrumentation) is invisible to route
+// handlers — exactly why only startup-context lines (the shipper beacon, the
+// framework console filter) ever shipped flat while 4k+ route-emitted
+// error/warn lines/day stayed drain-only (2026-07-21). globalThis is the one
+// object all bundle copies share; Symbol.for gives every copy the same slot.
+// Same trap + same fix as linkedin-quota's enforcer registration.
+const LOG_SINK_SLOT = Symbol.for("oxygen.log.sink");
 export function setLogSink(sink) {
-    logSink = sink;
+    globalThis[LOG_SINK_SLOT] = sink;
+}
+function getLogSink() {
+    return globalThis[LOG_SINK_SLOT] ?? null;
 }
 export function log(level, msg, fields) {
     const context = getLogContext();
@@ -89,6 +101,7 @@ export function log(level, msg, fields) {
     else {
         console.log(line);
     }
+    const logSink = getLogSink();
     if (!logSink)
         return;
     try {

package/node_modules/@oxygen/shared/dist/tags.d.ts

@@ -1,5 +1,5 @@
 /** Primitive kinds that participate in the workspace tag union today. */
-export declare const TAG_KINDS: readonly ["knowledge_page", "sequence", "table", "workflow", "recipe"];
+export declare const TAG_KINDS: readonly ["knowledge_page", "publishing_post", "sequence", "table", "workflow", "recipe", "conversation", "mailbox", "sender", "record"];
 export type TagKind = (typeof TAG_KINDS)[number];
 export declare function isTagKind(value: unknown): value is TagKind;
 /** Hard cap per tagged item — matches the wiki's long-standing limit. */

package/node_modules/@oxygen/shared/dist/tags.js

@@ -7,10 +7,15 @@
 /** Primitive kinds that participate in the workspace tag union today. */
 export const TAG_KINDS = [
     "knowledge_page",
+    "publishing_post",
     "sequence",
     "table",
     "workflow",
     "recipe",
+    "conversation",
+    "mailbox",
+    "sender",
+    "record",
 ];
 export function isTagKind(value) {
     return typeof value === "string" && TAG_KINDS.includes(value);

package/node_modules/@oxygen/shared/dist/version.d.ts

@@ -1,3 +1,3 @@
-export declare const OXYGEN_VERSION = "1.354.0";
+export declare const OXYGEN_VERSION = "1.377.3";
 export declare const OXYGEN_MINIMUM_CLI_VERSION = "1.181.0";
 export declare const MANAGED_INBOX_MINIMUM_CLI_VERSION = "1.326.2";

package/node_modules/@oxygen/shared/dist/version.js

@@ -1,4 +1,4 @@
-export const OXYGEN_VERSION = "1.354.0";
+export const OXYGEN_VERSION = "1.377.3";
 // The GLOBAL CLI compatibility floor: the oldest CLI allowed to call any
 // operational route. Raising it hard-rejects every older CLI from the entire
 // product, so it obeys one law, enforced by scripts/ci/cli-min-version-gate.mjs:

package/node_modules/@oxygen/shared/dist/workspace-agents.d.ts

@@ -1,11 +1,11 @@
-/** The three implemented Workspace Agent specialists, by stable slug. */
-export type WorkspaceAgentSlug = "inbox-reply-drafts" | "meeting-notetaker" | "knowledge-synthesis";
+/** The implemented general Workspace Agent and specialists (incl. the auto-tagger), by stable slug. */
+export type WorkspaceAgentSlug = "workspace" | "inbox-reply-drafts" | "meeting-notetaker" | "knowledge-synthesis" | "inbox-auto-tagger";
 /**
  * How the web layer builds a specialist's deep-link. A pure hint on the
  * descriptor (shared can't import the web URL helpers) that agent-registry
  * switches on to produce the actual `https://oxygen-agent.com/...` URL.
  */
-export type WorkspaceAgentDeepLinkKind = "inbox_reply_agent" | "notetaker" | "knowledge_agent";
+export type WorkspaceAgentDeepLinkKind = "workspace_agent" | "inbox_reply_agent" | "notetaker" | "knowledge_agent" | "inbox_auto_tagger";
 /** A pure, serializable descriptor for one Workspace Agent specialist. */
 export type WorkspaceAgentDescriptor = {
     /** Stable identifier used across CLI/MCP/API. Never derived from the title. */
@@ -54,12 +54,13 @@ export type WorkspaceAgentRunItem = {
     webUrl: string | null;
 };
 /**
- * The roster. Exactly three entries — one per implemented specialist. Order is
- * stable (it drives the default CLI/widget ordering). Adding a fourth entry is a
- * deliberate product decision that requires the specialist to actually ship first.
+ * The roster. The general Workspace Agent plus the implemented specialists
+ * (five entries). Order is stable (it drives the default CLI/widget ordering).
+ * Adding an entry is a deliberate product decision that requires the worker to
+ * actually ship first.
  */
 export declare const WORKSPACE_AGENT_ROSTER: readonly WorkspaceAgentDescriptor[];
-/** True when `value` is one of the three implemented specialist slugs. */
+/** True when `value` is one of the implemented specialist slugs. */
 export declare function isWorkspaceAgentSlug(value: unknown): value is WorkspaceAgentSlug;
 /** The descriptor for `slug`, or `undefined` when it is not a known specialist. */
 export declare function getWorkspaceAgentDescriptor(slug: string): WorkspaceAgentDescriptor | undefined;

package/node_modules/@oxygen/shared/dist/workspace-agents.js

@@ -1,11 +1,13 @@
 // The Agents primitive's roster (ADR 0011): the governed registry of OXYGEN's
-// built-in workspace agents. Still deliberately a *computed* registry — each
+// built-in workspace agents. The general Workspace Agent is backed by the
+// first-class ox_agents runtime; specialists remain computed from their owning
+// primitive stores. Each
 // entry is a product-defined agent that ships as an approval-gated, observable
 // behavior elsewhere in the product, surfaced under /agents and `oxygen agent`.
 // Agents are governed workspace workers: the runtime envelope (approval posture,
 // credit budgets, run observability) is platform-enforced, never agent-optional.
-// User-defined custom agents are ratified (ADR 0011) but arrive with the unified
-// runtime envelope in a later phase — until then there is no create/define verb,
+// User-defined custom agents are ratified (ADR 0011) but arrive after the unified
+// Workspace Agent runtime — until then there is no custom create/delete verb,
 // and there are never placeholder rows: the roster lists only agents that are
 // actually implemented today. CRM-hygiene, deliverability, and any other roadmap
 // agent stay OUT until they ship — the no-placeholder-surface rule.
@@ -15,11 +17,24 @@
 // (config read/write, run history, deep-links) lives in the web layer's
 // agent-registry, which composes these descriptors with the existing helpers.
 /**
- * The roster. Exactly three entries — one per implemented specialist. Order is
- * stable (it drives the default CLI/widget ordering). Adding a fourth entry is a
- * deliberate product decision that requires the specialist to actually ship first.
+ * The roster. The general Workspace Agent plus the implemented specialists
+ * (five entries). Order is stable (it drives the default CLI/widget ordering).
+ * Adding an entry is a deliberate product decision that requires the worker to
+ * actually ship first.
  */
 export const WORKSPACE_AGENT_ROSTER = [
+    {
+        slug: "workspace",
+        title: "Workspace Agent",
+        subtitle: "Runs organization-grounded goals through OXYGEN's governed capability catalog.",
+        description: "Takes a workspace goal, plans the work, and operates tables, CRM, context, workflows, sequences, files, and integrations as one durable Agent run.",
+        owningPrimitive: "Agents",
+        configCommand: "oxygen agent set workspace",
+        configApiPath: "/api/cli/agent/workspace",
+        mcpConfigTools: ["oxygen_agent_update", "oxygen_agent_run"],
+        approvalPosture: "Uses a versioned standing authorization with optional allow, ask, and deny rules; platform previews, caps, deny rules, and run provenance always apply.",
+        deepLinkKind: "workspace_agent",
+    },
     {
         slug: "inbox-reply-drafts",
         title: "AI Sales Agent",
@@ -56,8 +71,20 @@ export const WORKSPACE_AGENT_ROSTER = [
         approvalPosture: "Writes working knowledge pages as logged revisions; canonical and pinned pages still require proposal approval.",
         deepLinkKind: "knowledge_agent",
     },
+    {
+        slug: "inbox-auto-tagger",
+        title: "AI Inbox Tagger",
+        subtitle: "Auto-tags new inbound conversations from your tag allowlist.",
+        description: "Classifies every new inbound email, LinkedIn, and WhatsApp conversation against your workspace tag allowlist and applies the matching tags automatically.",
+        owningPrimitive: "Messages",
+        configCommand: "oxygen inbox auto-tagger",
+        configApiPath: "/api/cli/inbox/auto-tagger",
+        mcpConfigTools: ["oxygen_inbox_auto_tagger_get", "oxygen_inbox_auto_tagger_set"],
+        approvalPosture: "Auto-applies internal workspace tags only — additive, never re-adds a tag you removed, and needs no approval queue because tags never leave the workspace.",
+        deepLinkKind: "inbox_auto_tagger",
+    },
 ];
-/** True when `value` is one of the three implemented specialist slugs. */
+/** True when `value` is one of the implemented specialist slugs. */
 export function isWorkspaceAgentSlug(value) {
     return (typeof value === "string" &&
         WORKSPACE_AGENT_ROSTER.some((descriptor) => descriptor.slug === value));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oxygen-agent/cli",
-  "version": "1.354.0",
+  "version": "1.377.3",
   "private": false,
   "license": "UNLICENSED",
   "type": "module",
@@ -32,9 +32,12 @@
     "README.md"
   ],
   "dependencies": {
+    "@aws-sdk/client-s3": "3.1050.0",
+    "@aws-sdk/s3-request-presigner": "3.1050.0",
     "@opentelemetry/api": "1.9.1",
     "commander": "14.0.3",
     "esbuild": "0.27.7",
+    "langfuse": "3.38.20",
     "read-excel-file": "6.0.3",
     "typescript": "6.0.3",
     "@oxygen/shared": "0.0.0",