@oxygen-agent/cli 1.936.1 → 1.982.3

package/node_modules/@oxygen/shared/dist/workspace-file-storage.js

@@ -5,6 +5,7 @@ import { OxygenError } from "./cli-result.js";
 import { resolveObjectStorageClient } from "./object-storage.js";
 export const WORKSPACE_VISUAL_SOURCE_MAX_BYTES = 1_500_000;
 export const WORKSPACE_VISUAL_BINARY_MAX_BYTES = 50 * 1024 * 1024;
+export const WORKSPACE_OPAQUE_FILE_MAX_BYTES = 100 * 1024 * 1024;
 /** Platform abuse guard shared by every plan, not a storage entitlement. */
 export const WORKSPACE_RETAINED_FILES_MAX_BYTES = 1024 * 1024 * 1024;
 const STORAGE_TIMEOUT_MS = 60_000;
@@ -57,16 +58,26 @@ export function assertWorkspaceVisualBinary(bytes, mimeType) {
 export function workspaceFileSha256(bytes) {
     return createHash("sha256").update(bytes).digest("hex");
 }
+/** Opaque vault attachments are downloaded as bytes, never rendered as active content. */
+export function assertWorkspaceStoredFile(bytes, mimeType) {
+    if (mimeType === "application/octet-stream") {
+        if (bytes.byteLength > WORKSPACE_OPAQUE_FILE_MAX_BYTES)
+            throw new OxygenError("workspace_file_too_large", "File exceeds 100 MiB.");
+        return;
+    }
+    assertWorkspaceVisualBinary(bytes, mimeType);
+}
 export async function readWorkspaceFileObject(input) {
     input.signal?.throwIfAborted();
     assertWorkspaceFileObjectKey(input);
-    if (!Number.isSafeInteger(input.sizeBytes) || input.sizeBytes < 1 || input.sizeBytes > WORKSPACE_VISUAL_BINARY_MAX_BYTES || !/^[a-f0-9]{64}$/.test(input.sha256)) {
+    const maximumBytes = input.mimeType === "application/octet-stream" ? WORKSPACE_OPAQUE_FILE_MAX_BYTES : WORKSPACE_VISUAL_BINARY_MAX_BYTES;
+    if (!Number.isSafeInteger(input.sizeBytes) || input.sizeBytes < (input.mimeType === "application/octet-stream" ? 0 : 1) || input.sizeBytes > maximumBytes || !/^[a-f0-9]{64}$/.test(input.sha256)) {
         throw new OxygenError("workspace_file_integrity_failed", "File metadata failed integrity validation.");
     }
     const { client, bucket } = resolveObjectStorageClient();
     const signal = input.signal ? AbortSignal.any([input.signal, AbortSignal.timeout(STORAGE_TIMEOUT_MS)]) : AbortSignal.timeout(STORAGE_TIMEOUT_MS);
     const result = await client.send(new GetObjectCommand({
-        Bucket: bucket, Key: input.storageKey, Range: `bytes=0-${input.sizeBytes}`,
+        Bucket: bucket, Key: input.storageKey, ...(input.sizeBytes > 0 ? { Range: `bytes=0-${input.sizeBytes}` } : {}),
     }), { abortSignal: signal });
     const body = result.Body;
     if (!body)
@@ -93,7 +104,7 @@ export async function readWorkspaceFileObject(input) {
         if (size !== input.sizeBytes || workspaceFileSha256(bytes) !== input.sha256 || result.ContentType?.split(";", 1)[0]?.trim().toLowerCase() !== input.mimeType) {
             throw new OxygenError("workspace_file_integrity_failed", "Stored file failed size, format or digest verification.");
         }
-        assertWorkspaceVisualBinary(bytes, input.mimeType);
+        assertWorkspaceStoredFile(bytes, input.mimeType);
         return bytes;
     }
     finally {
@@ -104,7 +115,7 @@ export async function readWorkspaceFileObject(input) {
 /** Immutable PUT followed by bounded readback. A matching existing object is a safe retry. */
 export async function putWorkspaceFileObject(input) {
     input.signal?.throwIfAborted();
-    assertWorkspaceVisualBinary(input.bytes, input.mimeType);
+    assertWorkspaceStoredFile(input.bytes, input.mimeType);
     const storageKey = buildWorkspaceFileObjectKey(input);
     const bytes = Buffer.from(input.bytes);
     const sha256 = workspaceFileSha256(bytes);

package/node_modules/@oxygen/shared/package.json

@@ -6,6 +6,11 @@
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
   "exports": {
+    "./knowledge-vault-markdown": {
+      "types": "./dist/knowledge-vault-markdown.d.ts",
+      "import": "./dist/knowledge-vault-markdown.js",
+      "default": "./dist/knowledge-vault-markdown.js"
+    },
     "./vercel-sandbox-fetch": {
       "types": "./dist/vercel-sandbox-fetch.d.ts",
       "import": "./dist/vercel-sandbox-fetch.js",
@@ -31,6 +36,11 @@
       "import": "./dist/import-limits.js",
       "default": "./dist/import-limits.js"
     },
+    "./inbox-avatar-url": {
+      "types": "./dist/inbox-avatar-url.d.ts",
+      "import": "./dist/inbox-avatar-url.js",
+      "default": "./dist/inbox-avatar-url.js"
+    },
     "./image-sniff": {
       "types": "./dist/image-sniff.d.ts",
       "import": "./dist/image-sniff.js",
@@ -136,6 +146,11 @@
       "import": "./dist/knowledge-constants.js",
       "default": "./dist/knowledge-constants.js"
     },
+    "./knowledge-bases": {
+      "types": "./dist/knowledge-bases.d.ts",
+      "import": "./dist/knowledge-bases.js",
+      "default": "./dist/knowledge-bases.js"
+    },
     "./workflow-status-change": {
       "types": "./dist/workflow-status-change.d.ts",
       "import": "./dist/workflow-status-change.js",

package/node_modules/@oxygen/workflows/dist/graph/lint.js

@@ -232,6 +232,15 @@ value, add, scope, options) {
     }
     return sound;
 }
+/**
+ * The character the graph host puts between a node id and its loop iteration
+ * path when it mints a node execution's persisted `step_id`
+ * (`${nodeId}#${iterationPath.join(".")}` — apps/worker
+ * workflow-graph-processor.ts `stepKey`). Declared here rather than imported so
+ * the linter stays a leaf of the worker, and pinned against the real producer
+ * by the `invalid_node_id_character` test.
+ */
+const ITERATION_STEP_ID_SEPARATOR = "#";
 function lintNodeIdentity(node, path, seenIds, add) {
     let sound = true;
     if (!isNonEmptyString(node.id)) {
@@ -246,6 +255,19 @@ function lintNodeIdentity(node, path, seenIds, add) {
         add(`${path}.id`, "reserved_node_id", `Node id '${node.id}' is reserved (it collides with a JavaScript object key and would be dropped from node outputs). Choose another id.`);
         sound = false;
     }
+    else if (node.id.includes(ITERATION_STEP_ID_SEPARATOR)) {
+        // `#` is not a style rule — it is the runtime's own separator. A node
+        // execution's persisted identity is `<node id>#<iteration path>`
+        // (apps/worker workflow-graph-processor.ts `stepKey`, kept byte-identical to
+        // tenant-db's `step_id` convention), so a node literally named `a#1` shares a
+        // step_id with the second iteration of a loop body named `a`. The collision
+        // is silent and destructive: whichever row exists first is replayed as the
+        // other's completed output, so one of the two never runs and the run still
+        // reports success. Rejecting the character at authoring time is the only
+        // place this can be caught cheaply.
+        add(`${path}.id`, "invalid_node_id_character", `Node id '${node.id}' must not contain '${ITERATION_STEP_ID_SEPARATOR}' (it is reserved for loop iteration step ids, so '${node.id}' would collide with an iteration of another node). Choose another id.`);
+        sound = false;
+    }
     else if (seenIds.has(node.id)) {
         add(`${path}.id`, "duplicate_node_id", `Node id '${node.id}' is duplicated.`);
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oxygen-agent/cli",
-  "version": "1.936.1",
+  "version": "1.982.3",
   "private": false,
   "license": "UNLICENSED",
   "type": "module",
@@ -43,6 +43,7 @@
     "esbuild": "0.27.7",
     "read-excel-file": "6.0.3",
     "typescript": "6.0.3",
+    "yaml": "2.9.0",
     "@oxygen/formula": "0.0.0",
     "@oxygen/recipe-sdk": "0.0.0",
     "@oxygen/shared": "0.0.0",