@oxygen-agent/cli 1.893.0 → 1.894.0

package/README.md

@@ -34,4 +34,4 @@ oxygen update
 
 For product documentation, visit https://oxygen-agent.com/docs. For support, visit https://oxygen-agent.com.
 
-Version: 1.893.0
+Version: 1.894.0

package/node_modules/@oxygen/shared/dist/sending-seats.d.ts

@@ -96,12 +96,35 @@ export declare const SENDING_SEAT_GATE_ENABLED_ENV_VAR = "OXYGEN_SENDING_SEAT_GA
 /**
  * Which seat kind a connect request consumes, by CLI path prefix.
  *
- * MAILBOXES ARE DELIBERATELY ABSENT. Email mailboxes live in the TENANT
- * database, so the control-plane grandfathering backfill cannot see them and did
- * not cover them. Enforcing a seat on mailbox connect today would refuse
- * customers who already have mailboxes attached — the precise failure this whole
- * grandfathering design exists to prevent. Add mailboxes here only once a
- * tenant-aware backfill has granted their legacy entitlements.
+ * ALL FOUR CHANNELS are mapped. Mailboxes were held back while grandfathering
+ * was backfill-only, because the backfill runs in the control plane and mailboxes
+ * live in each tenant's own database — gating them then would have refused
+ * customers who already had mailboxes attached. They are safe to include now
+ * that the gate grandfathers an organization's existing senders on FIRST CONTACT
+ * (see ensureLegacyEntitlementOnFirstContact), which needs no cross-tenant sweep
+ * and cannot miss a tenant.
  */
-export declare const SEAT_KIND_BY_CONNECT_PREFIX: ReadonlyArray<readonly [prefix: string, seatKey: SendingSeatKey]>;
-export declare function seatKindForConnectPath(pathname: string): SendingSeatKey | null;
+export type SeatConnectRoute = {
+    readonly path: string;
+    readonly seatKey: SendingSeatKey;
+    /**
+     * `prefix` also matches sub-paths, for flows that continue under the same
+     * route (an OAuth callback). `exact` matches only the route itself.
+     *
+     * The distinction is load-bearing. `/api/cli/voice/numbers` buys a number, but
+     * `/api/cli/voice/numbers/<id>` and `/<id>/tags` manage an EXISTING one — and
+     * gating those would refuse a customer at capacity from RELEASING a number,
+     * which is the one action that frees capacity. Prefix-matching everything was
+     * the first version of this and it had exactly that bug.
+     */
+    readonly match: "exact" | "prefix";
+};
+export declare const SEAT_CONNECT_ROUTES: readonly SeatConnectRoute[];
+/**
+ * Which seat a request consumes, or null.
+ *
+ * METHOD MATTERS: only a request that CREATES a sender consumes capacity.
+ * `GET /api/cli/voice/numbers` lists what you already own and must never be
+ * refused for want of a seat.
+ */
+export declare function seatKindForConnect(pathname: string, method: string): SendingSeatKey | null;

package/node_modules/@oxygen/shared/dist/sending-seats.js

@@ -137,24 +137,28 @@ export function sendingSeatGateEnabled(env = process.env) {
     return normalized === "1" || normalized === "true" || normalized === "yes" || normalized === "on";
 }
 export const SENDING_SEAT_GATE_ENABLED_ENV_VAR = "OXYGEN_SENDING_SEAT_GATE_ENABLED";
+export const SEAT_CONNECT_ROUTES = [
+    { path: "/api/cli/senders/connect", seatKey: "linkedin", match: "prefix" },
+    { path: "/api/cli/whatsapp/connect", seatKey: "whatsapp", match: "prefix" },
+    { path: "/api/cli/mailboxes/connect-oauth", seatKey: "email_sender", match: "prefix" },
+    { path: "/api/cli/voice/numbers", seatKey: "phone_number", match: "exact" },
+];
 /**
- * Which seat kind a connect request consumes, by CLI path prefix.
+ * Which seat a request consumes, or null.
  *
- * MAILBOXES ARE DELIBERATELY ABSENT. Email mailboxes live in the TENANT
- * database, so the control-plane grandfathering backfill cannot see them and did
- * not cover them. Enforcing a seat on mailbox connect today would refuse
- * customers who already have mailboxes attached — the precise failure this whole
- * grandfathering design exists to prevent. Add mailboxes here only once a
- * tenant-aware backfill has granted their legacy entitlements.
+ * METHOD MATTERS: only a request that CREATES a sender consumes capacity.
+ * `GET /api/cli/voice/numbers` lists what you already own and must never be
+ * refused for want of a seat.
  */
-export const SEAT_KIND_BY_CONNECT_PREFIX = [
-    ["/api/cli/senders/connect", "linkedin"],
-    ["/api/cli/whatsapp/connect", "whatsapp"],
-];
-export function seatKindForConnectPath(pathname) {
-    for (const [prefix, seatKey] of SEAT_KIND_BY_CONNECT_PREFIX) {
-        if (pathname === prefix || pathname.startsWith(`${prefix}/`))
-            return seatKey;
+export function seatKindForConnect(pathname, method) {
+    if (method.toUpperCase() !== "POST")
+        return null;
+    for (const route of SEAT_CONNECT_ROUTES) {
+        const hit = route.match === "exact"
+            ? pathname === route.path
+            : pathname === route.path || pathname.startsWith(`${route.path}/`);
+        if (hit)
+            return route.seatKey;
     }
     return null;
 }

package/node_modules/@oxygen/shared/dist/version.d.ts

@@ -1,4 +1,4 @@
-export declare const OXYGEN_VERSION = "1.893.0";
+export declare const OXYGEN_VERSION = "1.894.0";
 export declare const OXYGEN_MINIMUM_CLI_VERSION = "1.181.0";
 export declare const MANAGED_INBOX_MINIMUM_CLI_VERSION = "1.326.2";
 export declare const SUPPORT_AGENT_REPLY_MINIMUM_CLI_VERSION = "1.747.0";

package/node_modules/@oxygen/shared/dist/version.js

@@ -1,4 +1,4 @@
-export const OXYGEN_VERSION = "1.893.0";
+export const OXYGEN_VERSION = "1.894.0";
 // The GLOBAL CLI compatibility floor: the oldest CLI allowed to call any
 // operational route. Raising it hard-rejects every older CLI from the entire
 // product, so it obeys one law, enforced by scripts/ci/cli-min-version-gate.mjs:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oxygen-agent/cli",
-  "version": "1.893.0",
+  "version": "1.894.0",
   "private": false,
   "license": "UNLICENSED",
   "type": "module",