@oxygen-agent/cli 1.936.1 → 1.948.1

package/node_modules/@oxygen/shared/dist/version.js

@@ -1,4 +1,4 @@
-export const OXYGEN_VERSION = "1.936.1";
+export const OXYGEN_VERSION = "1.948.1";
 // The GLOBAL CLI compatibility floor: the oldest CLI allowed to call any
 // operational route. Raising it hard-rejects every older CLI from the entire
 // product, so it obeys one law, enforced by scripts/ci/cli-min-version-gate.mjs:

package/node_modules/@oxygen/workflows/dist/graph/lint.js

@@ -232,6 +232,15 @@ value, add, scope, options) {
     }
     return sound;
 }
+/**
+ * The character the graph host puts between a node id and its loop iteration
+ * path when it mints a node execution's persisted `step_id`
+ * (`${nodeId}#${iterationPath.join(".")}` — apps/worker
+ * workflow-graph-processor.ts `stepKey`). Declared here rather than imported so
+ * the linter stays a leaf of the worker, and pinned against the real producer
+ * by the `invalid_node_id_character` test.
+ */
+const ITERATION_STEP_ID_SEPARATOR = "#";
 function lintNodeIdentity(node, path, seenIds, add) {
     let sound = true;
     if (!isNonEmptyString(node.id)) {
@@ -246,6 +255,19 @@ function lintNodeIdentity(node, path, seenIds, add) {
         add(`${path}.id`, "reserved_node_id", `Node id '${node.id}' is reserved (it collides with a JavaScript object key and would be dropped from node outputs). Choose another id.`);
         sound = false;
     }
+    else if (node.id.includes(ITERATION_STEP_ID_SEPARATOR)) {
+        // `#` is not a style rule — it is the runtime's own separator. A node
+        // execution's persisted identity is `<node id>#<iteration path>`
+        // (apps/worker workflow-graph-processor.ts `stepKey`, kept byte-identical to
+        // tenant-db's `step_id` convention), so a node literally named `a#1` shares a
+        // step_id with the second iteration of a loop body named `a`. The collision
+        // is silent and destructive: whichever row exists first is replayed as the
+        // other's completed output, so one of the two never runs and the run still
+        // reports success. Rejecting the character at authoring time is the only
+        // place this can be caught cheaply.
+        add(`${path}.id`, "invalid_node_id_character", `Node id '${node.id}' must not contain '${ITERATION_STEP_ID_SEPARATOR}' (it is reserved for loop iteration step ids, so '${node.id}' would collide with an iteration of another node). Choose another id.`);
+        sound = false;
+    }
     else if (seenIds.has(node.id)) {
         add(`${path}.id`, "duplicate_node_id", `Node id '${node.id}' is duplicated.`);
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oxygen-agent/cli",
-  "version": "1.936.1",
+  "version": "1.948.1",
   "private": false,
   "license": "UNLICENSED",
   "type": "module",