@oxygen-agent/cli 1.377.3 → 1.591.1

package/node_modules/@oxygen/shared/dist/object-storage.js

@@ -65,9 +65,16 @@ export function buildPublishingMediaObjectKey(input) {
     const safeName = sanitizeFileName(input.fileName) || "media";
     return `publishing-media/${input.organizationId}/${randomUUID()}/${safeName}`;
 }
+export function buildCopilotAttachmentObjectKey(input) {
+    const safeName = sanitizeFileName(input.fileName) || "attachment";
+    return `copilot/${input.organizationId}/${randomUUID()}/${safeName}`;
+}
 export function isImportObjectKeyForOrganization(key, organizationId) {
     return key.startsWith(`imports/${organizationId}/`);
 }
+export function isCopilotAttachmentObjectKeyForOrganization(key, organizationId) {
+    return key.startsWith(`copilot/${organizationId}/`);
+}
 export function isPublishingMediaObjectKeyForOrganization(key, organizationId) {
     return key.startsWith(`publishing-media/${organizationId}/`);
 }
@@ -115,6 +122,60 @@ export async function presignPublishingMediaUpload(input) {
         expiresInSeconds: PRESIGN_EXPIRY_SECONDS,
     };
 }
+export async function presignCopilotAttachmentUpload(input) {
+    const { client, config } = resolveClient();
+    const storageKey = buildCopilotAttachmentObjectKey({
+        organizationId: input.organizationId,
+        fileName: input.fileName ?? null,
+    });
+    const command = new PutObjectCommand({
+        Bucket: config.bucket,
+        Key: storageKey,
+        ContentLength: input.contentLength,
+        ...(input.contentType ? { ContentType: input.contentType } : {}),
+    });
+    const uploadUrl = await getSignedUrl(client, command, { expiresIn: PRESIGN_EXPIRY_SECONDS });
+    return {
+        uploadUrl,
+        bucket: config.bucket,
+        storageKey,
+        contentLength: input.contentLength,
+        provider: "s3",
+        expiresInSeconds: PRESIGN_EXPIRY_SECONDS,
+    };
+}
+/**
+ * Read an uploaded attachment back into memory. Bounded by `maxBytes` because
+ * the callers are a CSV header sniff and a text extraction, neither of which
+ * needs the whole object — and a 400MB upload must not become a 400MB buffer in
+ * a Vercel handler.
+ */
+export async function readCopilotAttachmentObject(input) {
+    const { client, config } = resolveClient();
+    const result = await client.send(new GetObjectCommand({
+        Bucket: config.bucket,
+        Key: input.storageKey,
+        // Ask for one byte past the cap so a full read is distinguishable from a
+        // file that happens to be exactly maxBytes long.
+        Range: `bytes=0-${input.maxBytes}`,
+    }));
+    const raw = await result.Body?.transformToByteArray();
+    const body = raw ?? new Uint8Array();
+    const truncated = body.byteLength > input.maxBytes;
+    return {
+        body: truncated ? body.subarray(0, input.maxBytes) : body,
+        contentType: typeof result.ContentType === "string" ? result.ContentType : null,
+        truncated,
+    };
+}
+export async function getCopilotAttachmentObjectMetadata(input) {
+    const { client, config } = resolveClient();
+    const result = await client.send(new HeadObjectCommand({ Bucket: config.bucket, Key: input.storageKey }));
+    return {
+        contentLength: typeof result.ContentLength === "number" ? result.ContentLength : null,
+        contentType: typeof result.ContentType === "string" ? result.ContentType : null,
+    };
+}
 export async function getImportObjectMetadata(input) {
     const { client, config } = resolveClient();
     const result = await client.send(new HeadObjectCommand({ Bucket: config.bucket, Key: input.storageKey }));

package/node_modules/@oxygen/shared/dist/plan-limits.d.ts

@@ -0,0 +1,636 @@
+/**
+ * The five enforcement rungs of the per-plan limits ladder. Every PlanTier maps
+ * onto exactly one rung: "free" doubles as the unentitled fallback (no live
+ * plan, churned, expired trial, missing org), "enterprise" shares the "scale"
+ * rung, and a trialing org gets its subscription tier's rung — the card on file
+ * plus the trial credit pool are the spend bound, not the rate limits.
+ *
+ * Credits are the billing meter; these limits are abuse/runaway guards. They
+ * are sized so legitimate interactive use never hits them and scale with plan
+ * price so worst-case burn stays proportional to what the org pays.
+ */
+export type LimitsTier = "free" | "starter" | "pro" | "team" | "scale";
+export declare const LIMITS_TIER_ORDER: readonly LimitsTier[];
+/** An org-scope budget window: `limit` consumable units per `windowSeconds`. */
+export type OrgWindowLimit = {
+    limit: number;
+    windowSeconds: number;
+};
+/** Request bucket (per api-key / web-user scope) + org-scope unit budget. */
+export type UnitPolicyLimits = {
+    requestsPerMinute: number;
+    orgUnits: OrgWindowLimit;
+};
+/** Request-count-only policy: per-scope burst + org-scope request budget. */
+export type RequestPolicyLimits = {
+    requestsPerMinute: number;
+    orgRequests: OrgWindowLimit;
+};
+export type PlanLimits = {
+    cli: {
+        global: {
+            keyRequestsPerMinute: number;
+            orgRequestsPerMinute: number;
+        };
+        tenantRead: UnitPolicyLimits;
+        tenantWrite: UnitPolicyLimits;
+        bulkImport: RequestPolicyLimits;
+        aiLive: RequestPolicyLimits;
+        toolLive: RequestPolicyLimits;
+        toolDryRun: RequestPolicyLimits;
+        tenantSchema: RequestPolicyLimits;
+        maxWriteRowsPerRequest: number;
+    };
+    web: {
+        tenantRead: UnitPolicyLimits;
+        tenantWrite: UnitPolicyLimits;
+        columnRun: UnitPolicyLimits;
+        import: RequestPolicyLimits;
+    };
+    import: {
+        maxRowsPerFile: number;
+        maxFileBytes: number;
+        maxDirectCsvBodyBytes: number;
+    };
+    agents: {
+        maxTotalCredits: number;
+        maxInferenceCredits: number;
+        maxUpstreamCostUsd: number;
+        maxUpstreamCostUsdByok: number;
+    };
+    copilot: {
+        maxSessionBudgetCredits: number;
+        defaultPerTurnCreditCeiling: number;
+    };
+    signals: {
+        maxEvents: number;
+        maxWindowDays: number;
+    };
+    tableActions: {
+        maxActionsPerRun: number;
+    };
+};
+/**
+ * The per-rung limit matrix. `ai_live` deliberately equals `tool_live` at every
+ * rung — one "live actions" mental model; the per-call cost asymmetry between
+ * AI and tool calls is priced in credits, not throttled here.
+ */
+export declare const PLAN_LIMITS: {
+    readonly free: {
+        readonly cli: {
+            readonly global: {
+                readonly keyRequestsPerMinute: 120;
+                readonly orgRequestsPerMinute: 600;
+            };
+            readonly tenantRead: {
+                readonly requestsPerMinute: 60;
+                readonly orgUnits: {
+                    readonly limit: 500000;
+                    readonly windowSeconds: number;
+                };
+            };
+            readonly tenantWrite: {
+                readonly requestsPerMinute: 30;
+                readonly orgUnits: {
+                    readonly limit: 100000;
+                    readonly windowSeconds: number;
+                };
+            };
+            readonly bulkImport: {
+                readonly requestsPerMinute: 10;
+                readonly orgRequests: {
+                    readonly limit: 100;
+                    readonly windowSeconds: number;
+                };
+            };
+            readonly aiLive: {
+                readonly requestsPerMinute: 20;
+                readonly orgRequests: {
+                    readonly limit: 100;
+                    readonly windowSeconds: number;
+                };
+            };
+            readonly toolLive: {
+                readonly requestsPerMinute: 20;
+                readonly orgRequests: {
+                    readonly limit: 100;
+                    readonly windowSeconds: number;
+                };
+            };
+            readonly toolDryRun: {
+                readonly requestsPerMinute: 60;
+                readonly orgRequests: {
+                    readonly limit: 500;
+                    readonly windowSeconds: number;
+                };
+            };
+            readonly tenantSchema: {
+                readonly requestsPerMinute: 20;
+                readonly orgRequests: {
+                    readonly limit: 100;
+                    readonly windowSeconds: number;
+                };
+            };
+            readonly maxWriteRowsPerRequest: 5000;
+        };
+        readonly web: {
+            readonly tenantRead: {
+                readonly requestsPerMinute: 120;
+                readonly orgUnits: {
+                    readonly limit: 1000000;
+                    readonly windowSeconds: number;
+                };
+            };
+            readonly tenantWrite: {
+                readonly requestsPerMinute: 60;
+                readonly orgUnits: {
+                    readonly limit: 500000;
+                    readonly windowSeconds: number;
+                };
+            };
+            readonly columnRun: {
+                readonly requestsPerMinute: 30;
+                readonly orgUnits: {
+                    readonly limit: 2000;
+                    readonly windowSeconds: number;
+                };
+            };
+            readonly import: {
+                readonly requestsPerMinute: 10;
+                readonly orgRequests: {
+                    readonly limit: 100;
+                    readonly windowSeconds: number;
+                };
+            };
+        };
+        readonly import: {
+            readonly maxRowsPerFile: 50000;
+            readonly maxFileBytes: number;
+            readonly maxDirectCsvBodyBytes: 10000000;
+        };
+        readonly agents: {
+            readonly maxTotalCredits: 10000;
+            readonly maxInferenceCredits: 5000;
+            readonly maxUpstreamCostUsd: 10;
+            readonly maxUpstreamCostUsdByok: 10;
+        };
+        readonly copilot: {
+            readonly maxSessionBudgetCredits: 5000;
+            readonly defaultPerTurnCreditCeiling: 1500;
+        };
+        readonly signals: {
+            readonly maxEvents: 100;
+            readonly maxWindowDays: 30;
+        };
+        readonly tableActions: {
+            readonly maxActionsPerRun: 10;
+        };
+    };
+    readonly starter: {
+        readonly cli: {
+            readonly global: {
+                readonly keyRequestsPerMinute: 240;
+                readonly orgRequestsPerMinute: 600;
+            };
+            readonly tenantRead: {
+                readonly requestsPerMinute: 120;
+                readonly orgUnits: {
+                    readonly limit: 25000000;
+                    readonly windowSeconds: number;
+                };
+            };
+            readonly tenantWrite: {
+                readonly requestsPerMinute: 120;
+                readonly orgUnits: {
+                    readonly limit: 5000000;
+                    readonly windowSeconds: number;
+                };
+            };
+            readonly bulkImport: {
+                readonly requestsPerMinute: 30;
+                readonly orgRequests: {
+                    readonly limit: 500;
+                    readonly windowSeconds: number;
+                };
+            };
+            readonly aiLive: {
+                readonly requestsPerMinute: 60;
+                readonly orgRequests: {
+                    readonly limit: 5000;
+                    readonly windowSeconds: number;
+                };
+            };
+            readonly toolLive: {
+                readonly requestsPerMinute: 60;
+                readonly orgRequests: {
+                    readonly limit: 5000;
+                    readonly windowSeconds: number;
+                };
+            };
+            readonly toolDryRun: {
+                readonly requestsPerMinute: 120;
+                readonly orgRequests: {
+                    readonly limit: 2000;
+                    readonly windowSeconds: number;
+                };
+            };
+            readonly tenantSchema: {
+                readonly requestsPerMinute: 60;
+                readonly orgRequests: {
+                    readonly limit: 600;
+                    readonly windowSeconds: number;
+                };
+            };
+            readonly maxWriteRowsPerRequest: 50000;
+        };
+        readonly web: {
+            readonly tenantRead: {
+                readonly requestsPerMinute: 300;
+                readonly orgUnits: {
+                    readonly limit: 20000000;
+                    readonly windowSeconds: number;
+                };
+            };
+            readonly tenantWrite: {
+                readonly requestsPerMinute: 180;
+                readonly orgUnits: {
+                    readonly limit: 10000000;
+                    readonly windowSeconds: number;
+                };
+            };
+            readonly columnRun: {
+                readonly requestsPerMinute: 120;
+                readonly orgUnits: {
+                    readonly limit: 500000;
+                    readonly windowSeconds: number;
+                };
+            };
+            readonly import: {
+                readonly requestsPerMinute: 30;
+                readonly orgRequests: {
+                    readonly limit: 500;
+                    readonly windowSeconds: number;
+                };
+            };
+        };
+        readonly import: {
+            readonly maxRowsPerFile: 1000000;
+            readonly maxFileBytes: number;
+            readonly maxDirectCsvBodyBytes: 10000000;
+        };
+        readonly agents: {
+            readonly maxTotalCredits: 10000;
+            readonly maxInferenceCredits: 5000;
+            readonly maxUpstreamCostUsd: 10;
+            readonly maxUpstreamCostUsdByok: 250;
+        };
+        readonly copilot: {
+            readonly maxSessionBudgetCredits: 5000;
+            readonly defaultPerTurnCreditCeiling: 1500;
+        };
+        readonly signals: {
+            readonly maxEvents: 200;
+            readonly maxWindowDays: 90;
+        };
+        readonly tableActions: {
+            readonly maxActionsPerRun: 25;
+        };
+    };
+    readonly pro: {
+        readonly cli: {
+            readonly global: {
+                readonly keyRequestsPerMinute: 240;
+                readonly orgRequestsPerMinute: 1200;
+            };
+            readonly tenantRead: {
+                readonly requestsPerMinute: 240;
+                readonly orgUnits: {
+                    readonly limit: 50000000;
+                    readonly windowSeconds: number;
+                };
+            };
+            readonly tenantWrite: {
+                readonly requestsPerMinute: 240;
+                readonly orgUnits: {
+                    readonly limit: 10000000;
+                    readonly windowSeconds: number;
+                };
+            };
+            readonly bulkImport: {
+                readonly requestsPerMinute: 60;
+                readonly orgRequests: {
+                    readonly limit: 1000;
+                    readonly windowSeconds: number;
+                };
+            };
+            readonly aiLive: {
+                readonly requestsPerMinute: 120;
+                readonly orgRequests: {
+                    readonly limit: 12000;
+                    readonly windowSeconds: number;
+                };
+            };
+            readonly toolLive: {
+                readonly requestsPerMinute: 120;
+                readonly orgRequests: {
+                    readonly limit: 12000;
+                    readonly windowSeconds: number;
+                };
+            };
+            readonly toolDryRun: {
+                readonly requestsPerMinute: 120;
+                readonly orgRequests: {
+                    readonly limit: 2000;
+                    readonly windowSeconds: number;
+                };
+            };
+            readonly tenantSchema: {
+                readonly requestsPerMinute: 60;
+                readonly orgRequests: {
+                    readonly limit: 600;
+                    readonly windowSeconds: number;
+                };
+            };
+            readonly maxWriteRowsPerRequest: 50000;
+        };
+        readonly web: {
+            readonly tenantRead: {
+                readonly requestsPerMinute: 600;
+                readonly orgUnits: {
+                    readonly limit: 40000000;
+                    readonly windowSeconds: number;
+                };
+            };
+            readonly tenantWrite: {
+                readonly requestsPerMinute: 360;
+                readonly orgUnits: {
+                    readonly limit: 20000000;
+                    readonly windowSeconds: number;
+                };
+            };
+            readonly columnRun: {
+                readonly requestsPerMinute: 240;
+                readonly orgUnits: {
+                    readonly limit: 1000000;
+                    readonly windowSeconds: number;
+                };
+            };
+            readonly import: {
+                readonly requestsPerMinute: 60;
+                readonly orgRequests: {
+                    readonly limit: 1000;
+                    readonly windowSeconds: number;
+                };
+            };
+        };
+        readonly import: {
+            readonly maxRowsPerFile: 1000000;
+            readonly maxFileBytes: number;
+            readonly maxDirectCsvBodyBytes: 10000000;
+        };
+        readonly agents: {
+            readonly maxTotalCredits: 25000;
+            readonly maxInferenceCredits: 12500;
+            readonly maxUpstreamCostUsd: 25;
+            readonly maxUpstreamCostUsdByok: 250;
+        };
+        readonly copilot: {
+            readonly maxSessionBudgetCredits: 10000;
+            readonly defaultPerTurnCreditCeiling: 2500;
+        };
+        readonly signals: {
+            readonly maxEvents: 200;
+            readonly maxWindowDays: 180;
+        };
+        readonly tableActions: {
+            readonly maxActionsPerRun: 25;
+        };
+    };
+    readonly team: {
+        readonly cli: {
+            readonly global: {
+                readonly keyRequestsPerMinute: 240;
+                readonly orgRequestsPerMinute: 2400;
+            };
+            readonly tenantRead: {
+                readonly requestsPerMinute: 480;
+                readonly orgUnits: {
+                    readonly limit: 100000000;
+                    readonly windowSeconds: number;
+                };
+            };
+            readonly tenantWrite: {
+                readonly requestsPerMinute: 480;
+                readonly orgUnits: {
+                    readonly limit: 25000000;
+                    readonly windowSeconds: number;
+                };
+            };
+            readonly bulkImport: {
+                readonly requestsPerMinute: 120;
+                readonly orgRequests: {
+                    readonly limit: 2000;
+                    readonly windowSeconds: number;
+                };
+            };
+            readonly aiLive: {
+                readonly requestsPerMinute: 240;
+                readonly orgRequests: {
+                    readonly limit: 30000;
+                    readonly windowSeconds: number;
+                };
+            };
+            readonly toolLive: {
+                readonly requestsPerMinute: 240;
+                readonly orgRequests: {
+                    readonly limit: 30000;
+                    readonly windowSeconds: number;
+                };
+            };
+            readonly toolDryRun: {
+                readonly requestsPerMinute: 120;
+                readonly orgRequests: {
+                    readonly limit: 2000;
+                    readonly windowSeconds: number;
+                };
+            };
+            readonly tenantSchema: {
+                readonly requestsPerMinute: 60;
+                readonly orgRequests: {
+                    readonly limit: 600;
+                    readonly windowSeconds: number;
+                };
+            };
+            readonly maxWriteRowsPerRequest: 50000;
+        };
+        readonly web: {
+            readonly tenantRead: {
+                readonly requestsPerMinute: 1200;
+                readonly orgUnits: {
+                    readonly limit: 100000000;
+                    readonly windowSeconds: number;
+                };
+            };
+            readonly tenantWrite: {
+                readonly requestsPerMinute: 720;
+                readonly orgUnits: {
+                    readonly limit: 50000000;
+                    readonly windowSeconds: number;
+                };
+            };
+            readonly columnRun: {
+                readonly requestsPerMinute: 480;
+                readonly orgUnits: {
+                    readonly limit: 2500000;
+                    readonly windowSeconds: number;
+                };
+            };
+            readonly import: {
+                readonly requestsPerMinute: 120;
+                readonly orgRequests: {
+                    readonly limit: 2000;
+                    readonly windowSeconds: number;
+                };
+            };
+        };
+        readonly import: {
+            readonly maxRowsPerFile: 1000000;
+            readonly maxFileBytes: number;
+            readonly maxDirectCsvBodyBytes: 10000000;
+        };
+        readonly agents: {
+            readonly maxTotalCredits: 50000;
+            readonly maxInferenceCredits: 25000;
+            readonly maxUpstreamCostUsd: 50;
+            readonly maxUpstreamCostUsdByok: 250;
+        };
+        readonly copilot: {
+            readonly maxSessionBudgetCredits: 20000;
+            readonly defaultPerTurnCreditCeiling: 5000;
+        };
+        readonly signals: {
+            readonly maxEvents: 200;
+            readonly maxWindowDays: 365;
+        };
+        readonly tableActions: {
+            readonly maxActionsPerRun: 25;
+        };
+    };
+    readonly scale: {
+        readonly cli: {
+            readonly global: {
+                readonly keyRequestsPerMinute: 240;
+                readonly orgRequestsPerMinute: 6000;
+            };
+            readonly tenantRead: {
+                readonly requestsPerMinute: 1000;
+                readonly orgUnits: {
+                    readonly limit: 500000000;
+                    readonly windowSeconds: number;
+                };
+            };
+            readonly tenantWrite: {
+                readonly requestsPerMinute: 1000;
+                readonly orgUnits: {
+                    readonly limit: 100000000;
+                    readonly windowSeconds: number;
+                };
+            };
+            readonly bulkImport: {
+                readonly requestsPerMinute: 240;
+                readonly orgRequests: {
+                    readonly limit: 5000;
+                    readonly windowSeconds: number;
+                };
+            };
+            readonly aiLive: {
+                readonly requestsPerMinute: 600;
+                readonly orgRequests: {
+                    readonly limit: 100000;
+                    readonly windowSeconds: number;
+                };
+            };
+            readonly toolLive: {
+                readonly requestsPerMinute: 600;
+                readonly orgRequests: {
+                    readonly limit: 100000;
+                    readonly windowSeconds: number;
+                };
+            };
+            readonly toolDryRun: {
+                readonly requestsPerMinute: 120;
+                readonly orgRequests: {
+                    readonly limit: 2000;
+                    readonly windowSeconds: number;
+                };
+            };
+            readonly tenantSchema: {
+                readonly requestsPerMinute: 60;
+                readonly orgRequests: {
+                    readonly limit: 600;
+                    readonly windowSeconds: number;
+                };
+            };
+            readonly maxWriteRowsPerRequest: 50000;
+        };
+        readonly web: {
+            readonly tenantRead: {
+                readonly requestsPerMinute: 2000;
+                readonly orgUnits: {
+                    readonly limit: 400000000;
+                    readonly windowSeconds: number;
+                };
+            };
+            readonly tenantWrite: {
+                readonly requestsPerMinute: 1500;
+                readonly orgUnits: {
+                    readonly limit: 200000000;
+                    readonly windowSeconds: number;
+                };
+            };
+            readonly columnRun: {
+                readonly requestsPerMinute: 1000;
+                readonly orgUnits: {
+                    readonly limit: 10000000;
+                    readonly windowSeconds: number;
+                };
+            };
+            readonly import: {
+                readonly requestsPerMinute: 240;
+                readonly orgRequests: {
+                    readonly limit: 5000;
+                    readonly windowSeconds: number;
+                };
+            };
+        };
+        readonly import: {
+            readonly maxRowsPerFile: 1000000;
+            readonly maxFileBytes: number;
+            readonly maxDirectCsvBodyBytes: 10000000;
+        };
+        readonly agents: {
+            readonly maxTotalCredits: 100000;
+            readonly maxInferenceCredits: 50000;
+            readonly maxUpstreamCostUsd: 100;
+            readonly maxUpstreamCostUsdByok: 250;
+        };
+        readonly copilot: {
+            readonly maxSessionBudgetCredits: 50000;
+            readonly defaultPerTurnCreditCeiling: 10000;
+        };
+        readonly signals: {
+            readonly maxEvents: 200;
+            readonly maxWindowDays: 365;
+        };
+        readonly tableActions: {
+            readonly maxActionsPerRun: 25;
+        };
+    };
+};
+/**
+ * Map a raw plan-tier string (subscription `tier`, metadata tier, legacy plan
+ * key like `growth_250`) onto its enforcement rung. Unknown/absent tiers land
+ * on the unentitled "free" rung; enterprise shares "scale".
+ */
+export declare function limitsTierForPlanTier(tier: string | null | undefined): LimitsTier;
+export declare function planLimitsForTier(tier: LimitsTier): PlanLimits;