@oxygen-agent/cli 1.575.19 → 1.610.7

package/node_modules/@oxygen/shared/dist/cli-result.js

@@ -26,8 +26,8 @@ export class OxygenError extends Error {
 //   0 ok · 1 unclassified error · 2 usage / input validation · 3 auth or CLI
 //   compatibility (not_authenticated, cli_update_required) · 4 not found ·
 //   5 provider / server failure · 6 rate limit (details.retry_after_seconds
-//   says how long to wait) · 7 approval / spend gate (re-run with --approved
-//   --max-credits <n>) · 8 timeout.
+//   says how long to wait) · 7 approval / spend gate / subscription recovery
+//   (follow error.details.next_step) · 8 timeout.
 export const CLI_EXIT_CODE_TABLE = {
     0: "ok",
     1: "unclassified error",
@@ -36,7 +36,7 @@ export const CLI_EXIT_CODE_TABLE = {
     4: "not found",
     5: "provider or server failure",
     6: "rate limited (wait details.retry_after_seconds, then retry)",
-    7: "approval / spend gate (re-run with --approved --max-credits <n>)",
+    7: "approval / spend gate / subscription recovery (follow error.details.next_step)",
     8: "timeout",
 };
 export function exitCodeForErrorCode(code) {
@@ -56,6 +56,7 @@ export function exitCodeForErrorCode(code) {
         case "insufficient_credits":
         case "workspace_credit_cap_exceeded":
         case "byok_requires_paid_plan":
+        case "subscription_access_required":
             return 7;
         case "network_timeout":
             return 8;

package/node_modules/@oxygen/shared/dist/file-import.js

@@ -66,8 +66,9 @@ export function parseRowsText(text, format) {
     if (format === "jsonl") {
         return normalizeRowObjects(text
             .split(/\r?\n/)
-            .filter((line) => line.trim())
-            .map((line) => JSON.parse(line)));
+            .map((line, index) => ({ line, lineNumber: index + 1 }))
+            .filter(({ line }) => line.trim())
+            .map(({ line, lineNumber }) => parseJsonImportLine(line, lineNumber)));
     }
     return parseCsvRows(text);
 }
@@ -162,12 +163,26 @@ function normalizeXlsxImportCell(value) {
     return String(value);
 }
 function parseJsonArray(text) {
-    const parsed = JSON.parse(text);
+    let parsed;
+    try {
+        parsed = JSON.parse(text);
+    }
+    catch {
+        throw new OxygenError("invalid_json", "Import file must contain valid JSON. Input contents are omitted from this error.", { exitCode: 1 });
+    }
     if (!Array.isArray(parsed)) {
         throw new OxygenError("invalid_json", "Expected a JSON array.", { exitCode: 1 });
     }
     return parsed;
 }
+function parseJsonImportLine(line, lineNumber) {
+    try {
+        return JSON.parse(line);
+    }
+    catch {
+        throw new OxygenError("invalid_jsonl", `Import file contains invalid JSON on line ${lineNumber}. Input contents are omitted from this error.`, { exitCode: 1 });
+    }
+}
 function normalizeRowObjects(rows) {
     return rows.map((row) => normalizeRowObject(row));
 }
@@ -182,6 +197,7 @@ function parseCsvRows(text) {
     const [header, ...rows] = records;
     if (!header || header.length === 0)
         return [];
+    assertUniqueCsvHeaders(header);
     return rows
         .filter((row) => row.some((cell) => cell.trim()))
         .map((row) => Object.fromEntries(header.map((key, index) => [key, normalizeCsvImportCell(row[index])])));
@@ -209,6 +225,8 @@ function* iterateCsvRowBatches(text, batchSize) {
         if (ready)
             yield ready;
     }
+    if (state.inQuotes)
+        throw unterminatedCsvError();
     if (state.field || state.record.length > 0) {
         const ready = appendCsvRecordToBatch(state, finishCsvRecord(state), batchSize);
         if (ready)
@@ -249,6 +267,8 @@ async function* iterateCsvRowStreamBatches(chunks, batchSize) {
         if (ready.batch)
             yield ready.batch;
     }
+    if (state.inQuotes)
+        throw unterminatedCsvError();
     if (state.field || state.record.length > 0) {
         const ready = appendCsvRecordToBatch(state, finishCsvRecord(state), batchSize);
         if (ready)
@@ -313,8 +333,10 @@ function finishCsvRecord(state) {
 }
 function appendCsvRecordToBatch(state, record, batchSize) {
     const row = csvRecordToRow(record, state.header);
-    if (state.header === null)
+    if (state.header === null) {
+        assertUniqueCsvHeaders(record);
         state.header = record;
+    }
     if (row)
         state.batch.push(row);
     if (state.batch.length < batchSize)
@@ -333,22 +355,27 @@ function csvRecordToRow(record, header) {
 function* iterateJsonlRowBatches(text, batchSize) {
     let batch = [];
     let lineStart = 0;
+    let lineNumber = 1;
     for (let index = 0; index < text.length; index += 1) {
         if (text.charAt(index) !== "\n")
             continue;
         const line = text.slice(lineStart, index).replace(/\r$/, "").trim();
         lineStart = index + 1;
+        if (line) {
+            batch.push(normalizeRowObject(parseJsonImportLine(line, lineNumber)));
+        }
+        lineNumber += 1;
         if (!line)
             continue;
-        batch.push(normalizeRowObject(JSON.parse(line)));
         if (batch.length >= batchSize) {
             yield batch;
             batch = [];
         }
     }
     const trailingLine = text.slice(lineStart).replace(/\r$/, "").trim();
-    if (trailingLine)
-        batch.push(normalizeRowObject(JSON.parse(trailingLine)));
+    if (trailingLine) {
+        batch.push(normalizeRowObject(parseJsonImportLine(trailingLine, lineNumber)));
+    }
     if (batch.length > 0)
         yield batch;
 }
@@ -356,14 +383,17 @@ async function* iterateJsonlRowStreamBatches(chunks, batchSize) {
     const decoder = new TextDecoder();
     let pending = "";
     let batch = [];
+    let lineNumber = 1;
     for await (const chunk of chunks) {
         pending += decoder.decode(toUint8Array(chunk), { stream: true });
         let newline = pending.indexOf("\n");
         while (newline >= 0) {
             const line = pending.slice(0, newline).replace(/\r$/, "").trim();
             pending = pending.slice(newline + 1);
-            if (line)
-                batch.push(normalizeRowObject(JSON.parse(line)));
+            if (line) {
+                batch.push(normalizeRowObject(parseJsonImportLine(line, lineNumber)));
+            }
+            lineNumber += 1;
             if (batch.length >= batchSize) {
                 yield batch;
                 batch = [];
@@ -372,8 +402,9 @@ async function* iterateJsonlRowStreamBatches(chunks, batchSize) {
         }
     }
     const tail = (pending + decoder.decode()).replace(/\r$/, "").trim();
-    if (tail)
-        batch.push(normalizeRowObject(JSON.parse(tail)));
+    if (tail) {
+        batch.push(normalizeRowObject(parseJsonImportLine(tail, lineNumber)));
+    }
     if (batch.length > 0)
         yield batch;
 }
@@ -459,12 +490,28 @@ function parseCsvRecords(text) {
             field += char;
         }
     }
+    if (inQuotes) {
+        throw unterminatedCsvError();
+    }
     if (field || record.length > 0) {
         record.push(field);
         records.push(record);
     }
     return records;
 }
+function unterminatedCsvError() {
+    return new OxygenError("invalid_csv", "CSV contains an unterminated quoted field.", { exitCode: 1 });
+}
+function assertUniqueCsvHeaders(header) {
+    const seen = new Set();
+    for (const value of header) {
+        const normalized = value.normalize("NFKC").trim().toLowerCase();
+        if (!normalized || seen.has(normalized)) {
+            throw new OxygenError("invalid_csv", "CSV headers must be non-empty and unique (case-insensitive).", { exitCode: 1 });
+        }
+        seen.add(normalized);
+    }
+}
 function makeUniqueImportKey(label, taken) {
     return makeUniqueIdentifier(label, taken, {
         exhaustedMessage: "Unable to create a unique column key.",

package/node_modules/@oxygen/shared/dist/index.d.ts

@@ -4,6 +4,7 @@ export { WORKFLOW_STATUS_CHANGE_METADATA_KEY, type WorkflowStatusChange, type Wo
 export * from "./billing.js";
 export * from "./billing-anchors.js";
 export * from "./budget-scopes.js";
+export * from "./capability-discovery.js";
 export * from "./plan-limits.js";
 export * from "./spend-safety.js";
 export * from "./cell-format.js";
@@ -35,6 +36,7 @@ export * from "./networks.js";
 export * from "./recipes.js";
 export * from "./sequence-template.js";
 export * from "./sequence-crm-events.js";
+export * from "./sequence-terminal-events.js";
 export * from "./call-outcomes.js";
 export * from "./dial-guardrail-overrides.js";
 export * from "./sequences.js";

package/node_modules/@oxygen/shared/dist/index.js

@@ -4,6 +4,7 @@ export { WORKFLOW_STATUS_CHANGE_METADATA_KEY, describeWorkflowStatusChange, form
 export * from "./billing.js";
 export * from "./billing-anchors.js";
 export * from "./budget-scopes.js";
+export * from "./capability-discovery.js";
 export * from "./plan-limits.js";
 export * from "./spend-safety.js";
 export * from "./cell-format.js";
@@ -35,6 +36,7 @@ export * from "./networks.js";
 export * from "./recipes.js";
 export * from "./sequence-template.js";
 export * from "./sequence-crm-events.js";
+export * from "./sequence-terminal-events.js";
 export * from "./call-outcomes.js";
 export * from "./dial-guardrail-overrides.js";
 export * from "./sequences.js";

package/node_modules/@oxygen/shared/dist/pricing-sheet.d.ts

@@ -142,7 +142,7 @@ export declare const ENRICHMENT_CREDITS: {
     readonly company_enrich_typical: 99;
     readonly web_search: 5;
     readonly page_scrape: 40;
-    readonly linkedin_profile_scrape: 10;
+    readonly linkedin_profile_scrape: 25.5;
 };
 /** Editable calculator default: blended credits per fully-enriched row. */
 export declare const ENRICHMENT_CREDITS_PER_ROW_TYPICAL = 100;

package/node_modules/@oxygen/shared/dist/pricing-sheet.js

@@ -134,7 +134,7 @@ export const ENRICHMENT_CREDITS = {
     company_enrich_typical: 99,
     web_search: 5, // Serper
     page_scrape: 40, // Firecrawl (wedge price)
-    linkedin_profile_scrape: 10, // HarvestAPI, per result
+    linkedin_profile_scrape: 25.5, // HarvestAPI Basic full-profile job, exactly 5x COGS
 };
 /** Editable calculator default: blended credits per fully-enriched row. */
 export const ENRICHMENT_CREDITS_PER_ROW_TYPICAL = 100;

package/node_modules/@oxygen/shared/dist/recipes.d.ts

@@ -9,7 +9,7 @@ export declare const RECIPE_STATUSES: readonly ["draft", "beta", "stable", "depr
 export type RecipeStatus = typeof RECIPE_STATUSES[number];
 export declare const RECIPE_BENCHMARK_BASES: readonly ["estimate", "observed"];
 export type RecipeBenchmarkBasis = typeof RECIPE_BENCHMARK_BASES[number];
-export declare const RECIPE_PRIMITIVES: readonly ["knowledge-graph", "recipes", "records", "tables", "messages", "posts", "signals", "dashboards", "ads", "sequences", "publishing", "workflows", "observability"];
+export declare const RECIPE_PRIMITIVES: readonly ["knowledge-graph", "recipes", "records", "tables", "messages", "posts", "signals", "dashboards", "ads", "tags", "sequences", "publishing", "workflows", "agents", "observability"];
 export type RecipePrimitive = typeof RECIPE_PRIMITIVES[number];
 export declare const RECIPE_PREREQUISITE_KINDS: readonly ["sender", "mailbox", "domain", "integration", "knowledge", "asset", "plan", "data"];
 export type RecipePrerequisiteKind = typeof RECIPE_PREREQUISITE_KINDS[number];

package/node_modules/@oxygen/shared/dist/recipes.js

@@ -37,8 +37,8 @@ export const RECIPE_STATUSES = ["draft", "beta", "stable", "deprecated"];
 // Oxygen cohort data (with provenance). Estimates are the launch posture;
 // observed values replace them as real usage accrues.
 export const RECIPE_BENCHMARK_BASES = ["estimate", "observed"];
-// The thirteen product primitives a recipe may exercise (five-layer model,
-// ADR 0006/0008). Control surfaces and External integrations are not
+// The fifteen product primitives a recipe may exercise (five-layer model,
+// ADR 0006/0008/0011/0012). Control surfaces and External integrations are not
 // primitives and never appear here.
 export const RECIPE_PRIMITIVES = [
     "knowledge-graph",
@@ -50,9 +50,11 @@ export const RECIPE_PRIMITIVES = [
     "signals",
     "dashboards",
     "ads",
+    "tags",
     "sequences",
     "publishing",
     "workflows",
+    "agents",
     "observability",
 ];
 export const RECIPE_PREREQUISITE_KINDS = [

package/node_modules/@oxygen/shared/dist/sequence-terminal-events.d.ts

@@ -0,0 +1,47 @@
+/**
+ * Workflow-event contract emitted when one sequence enrollment becomes terminal.
+ *
+ * A terminal outcome (reply, bounce, failure, timeout) is not necessarily a
+ * literal node in the sequence graph. `endpoint_*` is therefore nullable and is
+ * populated only when the runtime reaches a visible graph endpoint: the trunk
+ * end, a branch-arm end, or an explicit stop step.
+ */
+export declare const SEQUENCE_TERMINAL_EVENT_SOURCE = "sequencer";
+export declare const SEQUENCE_ENROLLMENT_TERMINAL_EVENT = "enrollment_terminal";
+export declare const SEQUENCE_TERMINAL_STATUSES: readonly ["completed", "replied", "stopped", "failed", "excluded"];
+export type SequenceTerminalStatus = (typeof SEQUENCE_TERMINAL_STATUSES)[number];
+export declare const SEQUENCE_TERMINAL_ENDPOINT_KINDS: readonly ["end", "branch_end", "stop"];
+export type SequenceTerminalEndpointKind = (typeof SEQUENCE_TERMINAL_ENDPOINT_KINDS)[number];
+export type SequenceTerminalBranchArm = "then" | "else";
+export type SequenceTerminalEndpoint = {
+    id: string;
+    kind: SequenceTerminalEndpointKind;
+    stepId: string | null;
+    branchId: string | null;
+    branchArm: SequenceTerminalBranchArm | null;
+};
+export type SequenceEnrollmentTerminalPayload = {
+    occurred_at: string;
+    sequence_id: string;
+    enrollment_id: string;
+    status: SequenceTerminalStatus;
+    reason: string | null;
+    endpoint_id: string | null;
+    endpoint_kind: SequenceTerminalEndpointKind | null;
+    step_id: string | null;
+    branch_id: string | null;
+    branch_arm: SequenceTerminalBranchArm | null;
+    lead_name: string | null;
+    email: string | null;
+    linkedin_url: string | null;
+};
+export declare function sequenceEndEndpoint(): SequenceTerminalEndpoint;
+export declare function sequenceBranchEndEndpoint(branchId: string, branchArm: SequenceTerminalBranchArm): SequenceTerminalEndpoint;
+export declare function sequenceStopEndpoint(stepId: string): SequenceTerminalEndpoint;
+export declare function readSequenceTerminalEndpoint(value: unknown): SequenceTerminalEndpoint | null;
+export declare function sequenceTerminalEventIdempotencyKey(input: {
+    enrollmentId: string;
+    status: SequenceTerminalStatus;
+    endpointId?: string | null;
+    reason?: string | null;
+}): string;

package/node_modules/@oxygen/shared/dist/sequence-terminal-events.js

@@ -0,0 +1,70 @@
+/**
+ * Workflow-event contract emitted when one sequence enrollment becomes terminal.
+ *
+ * A terminal outcome (reply, bounce, failure, timeout) is not necessarily a
+ * literal node in the sequence graph. `endpoint_*` is therefore nullable and is
+ * populated only when the runtime reaches a visible graph endpoint: the trunk
+ * end, a branch-arm end, or an explicit stop step.
+ */
+export const SEQUENCE_TERMINAL_EVENT_SOURCE = "sequencer";
+export const SEQUENCE_ENROLLMENT_TERMINAL_EVENT = "enrollment_terminal";
+export const SEQUENCE_TERMINAL_STATUSES = [
+    "completed",
+    "replied",
+    "stopped",
+    "failed",
+    "excluded",
+];
+export const SEQUENCE_TERMINAL_ENDPOINT_KINDS = ["end", "branch_end", "stop"];
+export function sequenceEndEndpoint() {
+    return {
+        id: "end",
+        kind: "end",
+        stepId: null,
+        branchId: null,
+        branchArm: null,
+    };
+}
+export function sequenceBranchEndEndpoint(branchId, branchArm) {
+    return {
+        id: `end:${branchId}:${branchArm}`,
+        kind: "branch_end",
+        stepId: null,
+        branchId,
+        branchArm,
+    };
+}
+export function sequenceStopEndpoint(stepId) {
+    return {
+        id: stepId,
+        kind: "stop",
+        stepId,
+        branchId: null,
+        branchArm: null,
+    };
+}
+export function readSequenceTerminalEndpoint(value) {
+    if (!value || typeof value !== "object" || Array.isArray(value))
+        return null;
+    const row = value;
+    const id = typeof row.id === "string" ? row.id.trim() : "";
+    const kind = row.kind;
+    if (!id || !SEQUENCE_TERMINAL_ENDPOINT_KINDS.includes(kind))
+        return null;
+    const branchArm = row.branchArm === "then" || row.branchArm === "else" ? row.branchArm : null;
+    return {
+        id,
+        kind: kind,
+        stepId: typeof row.stepId === "string" && row.stepId.trim() ? row.stepId.trim() : null,
+        branchId: typeof row.branchId === "string" && row.branchId.trim() ? row.branchId.trim() : null,
+        branchArm,
+    };
+}
+export function sequenceTerminalEventIdempotencyKey(input) {
+    return [
+        "sequence-terminal",
+        input.enrollmentId,
+        input.status,
+        input.endpointId ?? input.reason ?? "terminal",
+    ].join(":");
+}

package/node_modules/@oxygen/shared/dist/version.d.ts

@@ -1,3 +1,3 @@
-export declare const OXYGEN_VERSION = "1.575.19";
+export declare const OXYGEN_VERSION = "1.610.7";
 export declare const OXYGEN_MINIMUM_CLI_VERSION = "1.181.0";
 export declare const MANAGED_INBOX_MINIMUM_CLI_VERSION = "1.326.2";

package/node_modules/@oxygen/shared/dist/version.js

@@ -1,4 +1,4 @@
-export const OXYGEN_VERSION = "1.575.19";
+export const OXYGEN_VERSION = "1.610.7";
 // The GLOBAL CLI compatibility floor: the oldest CLI allowed to call any
 // operational route. Raising it hard-rejects every older CLI from the entire
 // product, so it obeys one law, enforced by scripts/ci/cli-min-version-gate.mjs:

package/node_modules/@oxygen/workflows/dist/graph/lint.js

@@ -335,6 +335,9 @@ function lintToolNode(node, path, add, options) {
     if (node.mode !== undefined && (typeof node.mode !== "string" || !STEP_MODES.has(node.mode))) {
         add(`${path}.mode`, "invalid_step_mode", "Node mode is invalid.");
     }
+    if (node.connection_id !== undefined && !isNonEmptyString(node.connection_id)) {
+        add(`${path}.connection_id`, "invalid_connection_id", "Tool node connection_id must be a non-empty string.");
+    }
     validateOptionalMaxCredits(node.max_credits, `${path}.max_credits`, add);
     validateValueRefRecord(node.params, `${path}.params`, add);
 }

package/node_modules/@oxygen/workflows/dist/graph/manifest-schema.d.ts

@@ -108,6 +108,11 @@ export declare const workflowGraphManifestSchema: {
                     readonly mode: {
                         readonly enum: readonly ["dry_run", "live", "smoke_test"];
                     };
+                    readonly connection_id: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                        readonly description: "tool nodes: optional active organization connection id to pin for execution.";
+                    };
                     readonly max_credits: {
                         readonly type: "number";
                         readonly exclusiveMinimum: 0;

package/node_modules/@oxygen/workflows/dist/graph/manifest-schema.js

@@ -111,6 +111,11 @@ const nodeSchema = {
             description: "tool nodes: must equal the tool's canonical effect.",
         },
         mode: { enum: ["dry_run", "live", "smoke_test"] },
+        connection_id: {
+            type: "string",
+            minLength: 1,
+            description: "tool nodes: optional active organization connection id to pin for execution.",
+        },
         max_credits: { type: "number", exclusiveMinimum: 0, description: "Per-node managed-credit ceiling." },
         params: {
             type: "object",

package/node_modules/@oxygen/workflows/dist/graph/types.d.ts

@@ -139,6 +139,8 @@ export type WorkflowGraphNode =
     tool: string;
     effect: WorkflowStepEffect;
     mode?: WorkflowMode;
+    /** Pin this invocation to one active organization integration connection. */
+    connection_id?: string;
     /** Per-node managed-credit ceiling, same semantics as v1 tool steps. */
     max_credits?: number;
     params: Record<string, WorkflowValueRef>;

package/node_modules/@oxygen/workflows/dist/index.d.ts

@@ -74,6 +74,8 @@ export type WorkflowToolStepManifest = {
     tool: string;
     effect: WorkflowStepEffect;
     mode?: WorkflowMode;
+    /** Pin this invocation to one active organization integration connection. */
+    connection_id?: string;
     payload_source: string;
     max_credits?: number;
 };
@@ -249,6 +251,7 @@ export type WorkflowToolStepDefinition = {
     tool: string;
     effect?: WorkflowStepEffect;
     mode?: WorkflowMode;
+    connectionId?: string;
     maxCredits?: number;
     payload: WorkflowFunction;
 };
@@ -341,6 +344,7 @@ export declare function toolStep(input: {
     tool: string;
     effect?: WorkflowStepEffect;
     mode?: WorkflowMode;
+    connectionId?: string;
     maxCredits?: number;
     payload: WorkflowFunction;
 }): WorkflowToolStepDefinition;

package/node_modules/@oxygen/workflows/dist/index.js

@@ -166,6 +166,7 @@ export function toolStep(input) {
         tool: input.tool,
         ...(input.effect ? { effect: input.effect } : {}),
         ...(input.mode ? { mode: input.mode } : {}),
+        ...(input.connectionId !== undefined ? { connectionId: input.connectionId } : {}),
         ...(input.maxCredits != null ? { maxCredits: input.maxCredits } : {}),
         payload: input.payload,
     };
@@ -260,6 +261,7 @@ definition, options = {}) {
                 tool: step.tool,
                 effect: step.effect ?? "external_read",
                 ...(step.mode ? { mode: step.mode } : {}),
+                ...(step.connectionId !== undefined ? { connection_id: step.connectionId } : {}),
                 ...(step.maxCredits != null ? { max_credits: step.maxCredits } : {}),
                 payload_source: serializeWorkflowFunction(step.payload, `steps.${step.id}.payload`),
             };
@@ -440,6 +442,9 @@ value, options = {}) {
                     && step.mode !== "smoke_test") {
                     add(`${path}.mode`, "invalid_step_mode", "Step mode is invalid.");
                 }
+                if (step.connection_id !== undefined && !isNonEmptyString(step.connection_id)) {
+                    add(`${path}.connection_id`, "invalid_connection_id", "Tool step connection_id must be a non-empty string.");
+                }
                 validateOptionalMaxCredits(step.max_credits, `${path}.max_credits`, add);
                 return;
             }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oxygen-agent/cli",
-  "version": "1.575.19",
+  "version": "1.610.7",
   "private": false,
   "license": "UNLICENSED",
   "type": "module",