@oxygen-agent/cli 1.98.7 → 1.109.4

package/README.md

@@ -34,4 +34,4 @@ oxygen update
 
 For product documentation and support, visit https://oxygen-agent.com.
 
-Version: 1.98.7
+Version: 1.109.4

package/dist/credentials.js

@@ -283,8 +283,8 @@ function normalizeProfileName(value) {
             exitCode: 1,
         });
     }
-    if (!/^[A-Za-z0-9._-]+$/.test(profile)) {
-        throw new OxygenError("invalid_profile", "Profile names may only contain letters, numbers, dots, underscores, and dashes.", {
+    if (!/^[A-Za-z0-9._@+-]+$/.test(profile)) {
+        throw new OxygenError("invalid_profile", "Profile names may only contain letters, numbers, dots, underscores, dashes, plus signs, and @.", {
             details: { profile },
             exitCode: 1,
         });

package/dist/http-client.d.ts

@@ -5,6 +5,7 @@ type RequestOptions = {
     formData?: FormData;
     credentials?: StoredCredentials;
     requireAuth?: boolean;
+    enforceMinimumCliVersion?: boolean;
     timeoutMs?: number;
     traceId?: string;
     fetch?: typeof fetch;
@@ -12,4 +13,7 @@ type RequestOptions = {
 };
 export declare function requestOxygen<T>(// skipcq: JS-R1005
 path: string, options?: RequestOptions): Promise<T>;
+export declare function ensureFreshCliForApiUrl(apiUrl: string, options?: {
+    fetch?: typeof fetch;
+}): Promise<void>;
 export {};

package/dist/http-client.js

@@ -2,6 +2,9 @@ import { OXYGEN_VERSION, OxygenError } from "@oxygen/shared";
 import { randomUUID } from "node:crypto";
 import { defaultApiUrl, loadCredentials } from "./credentials.js";
 const DEFAULT_REQUEST_TIMEOUT_MS = 120_000;
+const CLI_COMPATIBILITY_CHECK_TIMEOUT_MS = 5_000;
+const PROD_API_HOSTNAME = "oxygen-agent.com";
+const cliCompatibilityCheckKeys = new Set();
 export async function requestOxygen(// skipcq: JS-R1005
 path, options = {}) {
     const credentials = options.credentials
@@ -12,6 +15,10 @@ path, options = {}) {
         });
     }
     const apiUrl = credentials?.apiUrl ?? defaultApiUrl();
+    const fetchImpl = options.fetch ?? fetch;
+    if (path !== "/api/health" && shouldCheckCliCompatibility(options)) {
+        await ensureFreshCliForApiUrl(apiUrl, { fetch: fetchImpl });
+    }
     const traceId = options.traceId ?? randomUUID();
     const headers = {
         Accept: "application/json",
@@ -34,7 +41,6 @@ path, options = {}) {
     let response;
     const timeoutMs = resolveRequestTimeoutMs(options.timeoutMs);
     const timeout = createTimeoutSignal(timeoutMs);
-    const fetchImpl = options.fetch ?? fetch;
     const requestInit = {
         method: options.method ?? "GET",
         headers,
@@ -70,18 +76,31 @@ path, options = {}) {
         timeout.cancel();
     }
     const envelope = await readEnvelope(response);
-    const serverVersion = readEnvelopeVersion(envelope);
-    warnIfCliIsOlderThanApi(serverVersion);
+    const compatibility = readEnvelopeCompatibility(envelope);
+    assertCliMeetsMinimumApiVersion(compatibility, options);
+    warnIfCliIsOlderThanApi(compatibility.version);
     if (!response.ok || !envelope.ok) {
         const failure = envelope;
         const responseTraceId = response.headers.get("x-oxygen-trace-id") ?? traceId;
         throw new OxygenError(failure.error.code, failure.error.message, {
-            details: withTraceDetails(failure.error.details, responseTraceId, serverVersion),
+            details: withTraceDetails(failure.error.details, responseTraceId, compatibility),
             exitCode: response.status >= 500 ? 1 : 1,
         });
     }
     return envelope.data;
 }
+export async function ensureFreshCliForApiUrl(apiUrl, options = {}) {
+    const checkKey = `${apiUrl}|${OXYGEN_VERSION}`;
+    if (cliCompatibilityCheckKeys.has(checkKey))
+        return;
+    const compatibility = await readHealthCompatibility(apiUrl, options.fetch ?? fetch);
+    if (!compatibility) {
+        return;
+    }
+    assertCliMeetsMinimumApiVersion(compatibility, {});
+    warnIfCliIsOlderThanApi(compatibility.version);
+    cliCompatibilityCheckKeys.add(checkKey);
+}
 function resolveSelectedOrganization(credentials, explicit) {
     const fromOption = explicit?.trim();
     if (fromOption)
@@ -93,6 +112,38 @@ function resolveSelectedOrganization(credentials, explicit) {
         ?? credentials?.activeOrganization?.id
         ?? null;
 }
+function shouldCheckCliCompatibility(options) {
+    if (options.enforceMinimumCliVersion === false)
+        return false;
+    // Tests and local callers often inject a fake fetch implementation for a
+    // single request. Skip the prod health preflight there; the response envelope
+    // still carries the compatibility metadata and is checked below.
+    if (options.fetch)
+        return false;
+    return true;
+}
+async function readHealthCompatibility(apiUrl, fetchImpl) {
+    if (!isProdApiUrl(apiUrl))
+        return null;
+    const timeout = createTimeoutSignal(CLI_COMPATIBILITY_CHECK_TIMEOUT_MS);
+    try {
+        const requestInit = {
+            method: "GET",
+            headers: { Accept: "application/json" },
+        };
+        if (timeout.signal)
+            requestInit.signal = timeout.signal;
+        const response = await fetchImpl(new URL("/api/health", apiUrl), requestInit);
+        const envelope = await readEnvelope(response);
+        return readEnvelopeCompatibility(envelope);
+    }
+    catch {
+        return null;
+    }
+    finally {
+        timeout.cancel();
+    }
+}
 const staleCliWarningVersions = new Set();
 function warnIfCliIsOlderThanApi(serverVersion) {
     if (!serverVersion || staleCliWarningVersions.has(serverVersion))
@@ -103,21 +154,56 @@ function warnIfCliIsOlderThanApi(serverVersion) {
     process.stderr.write(`[oxygen] CLI version ${OXYGEN_VERSION} is older than Oxygen API version ${serverVersion}. `
         + "Run `oxygen update` before using operational commands.\n");
 }
-function readEnvelopeVersion(envelope) {
+function isProdApiUrl(apiUrl) {
+    try {
+        return new URL(apiUrl).hostname === PROD_API_HOSTNAME;
+    }
+    catch {
+        return false;
+    }
+}
+function assertCliMeetsMinimumApiVersion(compatibility, options) {
+    if (options.enforceMinimumCliVersion === false)
+        return;
+    const minimumCliVersion = compatibility.minimumCliVersion;
+    if (!minimumCliVersion || !isVersionGreater(minimumCliVersion, OXYGEN_VERSION))
+        return;
+    throw new OxygenError("cli_update_required", "This Oxygen API requires a newer CLI. Run `oxygen update` before using this command.", {
+        details: {
+            client_version: OXYGEN_VERSION,
+            ...(compatibility.version ? { server_version: compatibility.version } : {}),
+            minimum_cli_version: minimumCliVersion,
+            cli_update_command: "oxygen update",
+        },
+        exitCode: 1,
+    });
+}
+function readEnvelopeCompatibility(envelope) {
     const meta = envelope.meta;
     if (!meta || typeof meta !== "object" || Array.isArray(meta))
-        return undefined;
-    const version = meta.version;
-    return typeof version === "string" ? version : undefined;
+        return {};
+    const record = meta;
+    const compatibility = {};
+    if (typeof record.version === "string")
+        compatibility.version = record.version;
+    if (typeof record.minimum_cli_version === "string") {
+        compatibility.minimumCliVersion = record.minimum_cli_version;
+    }
+    return compatibility;
 }
-function withTraceDetails(details, traceId, serverVersion) {
+function withTraceDetails(details, traceId, compatibility) {
+    const serverVersion = compatibility.version;
     const fields = {
         trace_id: traceId,
         client_version: OXYGEN_VERSION,
     };
     if (serverVersion)
         fields.server_version = serverVersion;
-    if (serverVersion && isVersionGreater(serverVersion, OXYGEN_VERSION)) {
+    if (compatibility.minimumCliVersion)
+        fields.minimum_cli_version = compatibility.minimumCliVersion;
+    if ((serverVersion && isVersionGreater(serverVersion, OXYGEN_VERSION))
+        || (compatibility.minimumCliVersion
+            && isVersionGreater(compatibility.minimumCliVersion, OXYGEN_VERSION))) {
         fields.cli_update_command = "oxygen update";
     }
     if (details && typeof details === "object" && !Array.isArray(details)) {

package/dist/index.js

@@ -15,7 +15,7 @@ import { assertRecipeBundleSafe, assertWorkflowManifest, buildRecipeManifest, co
 import { isRecipeDefinition } from "@oxygen/recipe-sdk";
 import { createBrowserLoginSession, openBrowser } from "./browser-login.js";
 import { clearCredentials, defaultApiUrl, listCredentialProfiles, normalizeApiUrl, pickProfileNameForIdentity, pickProfileNameForUserSession, resolveActiveProfile, saveCredentials, switchCredentialProfile, updateActiveOrganizationForProfile, } from "./credentials.js";
-import { requestOxygen } from "./http-client.js";
+import { ensureFreshCliForApiUrl, requestOxygen } from "./http-client.js";
 import { runLocalCustomHttpColumn } from "./local-custom-http-column.js";
 import { addSessionOutput, addSessionStatus, getSessionUsage, startSession, updateSessionStep, } from "./session.js";
 import { doctorAgentSkills, installAgentSkills, listAgentSkills, runAutomaticSkillsInstall, } from "./skills.js";
@@ -325,10 +325,11 @@ export function createProgram() {
         .option("--json", "Print a JSON envelope.")
         .action(async (options) => {
         await handleAsyncAction("status", options, async () => {
-            const server = await requestOxygen("/api/health", { requireAuth: false });
+            const server = await requestOxygen("/api/health", { requireAuth: false, enforceMinimumCliVersion: false });
             return {
                 client_version: OXYGEN_VERSION,
                 server_version: server.server_version,
+                minimum_cli_version: server.minimum_cli_version ?? null,
                 sha: server.sha,
                 region: server.region,
                 in_sync: server.server_version === OXYGEN_VERSION,
@@ -1348,7 +1349,7 @@ export function createProgram() {
         .option("--connection-id <connection_id>", "Optional provider integration connection id.")
         .option("--background", "Create a durable background table action run instead of executing synchronously.")
         .option("--max-credits <n>", "Maximum managed/provider credits to reserve for a background run.")
-        .option("--max-concurrency <n>", "Maximum concurrent row items for a background run. Defaults to 50.")
+        .option("--max-concurrency <n>", "Maximum concurrent row items for a background run. Defaults to 250 for AI columns and 50 otherwise.")
         .option("--local", "Run a custom HTTP column in this CLI process so env-var secrets stay local.")
         .option("--local-concurrency <n>", "Maximum concurrent custom HTTP requests for --local. Defaults to 3.")
         .option("--json", "Print a JSON envelope.")
@@ -4389,7 +4390,9 @@ async function resolveActiveProfileWithSource() {
 }
 async function handleWhoamiAction(options) {
     try {
-        const identity = await requestOxygen("/api/cli/whoami");
+        const identity = await requestOxygen("/api/cli/whoami", {
+            enforceMinimumCliVersion: false,
+        });
         const context = await resolveActiveProfileWithSource();
         if (context.resolution.exists) {
             const existingCredentials = context.resolution.credentials;
@@ -4777,6 +4780,7 @@ function resolveApiKeyExpiresAt(options) {
 }
 async function login(options) {
     const apiUrl = normalizeApiUrl(readOption(options.apiUrl) ?? defaultApiUrl());
+    await ensureFreshCliForApiUrl(apiUrl);
     const token = readOption(options.token) ?? await promptForToken({
         apiUrl,
         browser: options.browser !== false,
@@ -4821,9 +4825,11 @@ async function applyAuthToken(options) {
             exitCode: 1,
         });
     }
+    const apiUrl = normalizeApiUrl(readOption(options.apiUrl) ?? defaultApiUrl());
+    await ensureFreshCliForApiUrl(apiUrl);
     const credentials = {
         token,
-        apiUrl: normalizeApiUrl(readOption(options.apiUrl) ?? defaultApiUrl()),
+        apiUrl,
     };
     const loginIdentity = await resolveLoginIdentity(token, credentials.apiUrl);
     const explicitProfile = readOption(options.profile) ?? readEnvProfileName();
@@ -4875,7 +4881,9 @@ async function resolveLoginIdentity(token, apiUrl) {
     };
     if (token.startsWith("oxy_live_"))
         credentials.authKind = "org_api_key";
-    const identity = await requestOxygen("/api/cli/whoami", { credentials });
+    const identity = await requestOxygen("/api/cli/whoami", {
+        credentials,
+    });
     const activeOrganization = storedOrganizationFromOption(identity.organization);
     credentials.authKind = identity.authType === "user_session" ? "user_session" : "org_api_key";
     credentials.activeOrganization = activeOrganization;

package/node_modules/@oxygen/shared/dist/index.d.ts

@@ -1,4 +1,4 @@
-export { OXYGEN_VERSION } from "./version.js";
+export { OXYGEN_MINIMUM_CLI_VERSION, OXYGEN_VERSION } from "./version.js";
 export * from "./billing.js";
 export * from "./cell-format.js";
 export * from "./column-types.js";
@@ -12,6 +12,7 @@ export type JsonValue = string | number | boolean | null | JsonValue[] | {
 export type CliMeta = {
     command: string;
     version: string;
+    minimum_cli_version?: string;
 };
 export type CliSuccess<T> = {
     ok: true;
@@ -37,10 +38,10 @@ export declare class OxygenError extends Error {
         exitCode?: number;
     });
 }
-export declare function success<T>(command: string, data: T, version?: string): CliSuccess<T>;
+export declare function success<T>(command: string, data: T, version?: string, minimumCliVersion?: string): CliSuccess<T>;
 export declare function failure(command: string, error: {
     code: string;
     message: string;
     details?: unknown;
-}, version?: string): CliFailure;
+}, version?: string, minimumCliVersion?: string): CliFailure;
 export declare function toFailure(command: string, error: unknown, version?: string): CliFailure;

package/node_modules/@oxygen/shared/dist/index.js

@@ -1,5 +1,5 @@
-import { OXYGEN_VERSION } from "./version.js";
-export { OXYGEN_VERSION } from "./version.js";
+import { OXYGEN_MINIMUM_CLI_VERSION, OXYGEN_VERSION } from "./version.js";
+export { OXYGEN_MINIMUM_CLI_VERSION, OXYGEN_VERSION } from "./version.js";
 export * from "./billing.js";
 export * from "./cell-format.js";
 export * from "./column-types.js";
@@ -19,23 +19,25 @@ export class OxygenError extends Error {
         this.exitCode = options.exitCode ?? 1;
     }
 }
-export function success(command, data, version = OXYGEN_VERSION) {
+export function success(command, data, version = OXYGEN_VERSION, minimumCliVersion = OXYGEN_MINIMUM_CLI_VERSION) {
     return {
         ok: true,
         data,
         meta: {
             command,
-            version
+            version,
+            minimum_cli_version: minimumCliVersion,
         }
     };
 }
-export function failure(command, error, version = OXYGEN_VERSION) {
+export function failure(command, error, version = OXYGEN_VERSION, minimumCliVersion = OXYGEN_MINIMUM_CLI_VERSION) {
     return {
         ok: false,
         error,
         meta: {
             command,
-            version
+            version,
+            minimum_cli_version: minimumCliVersion,
         }
     };
 }

package/node_modules/@oxygen/shared/dist/version.d.ts

@@ -1 +1,2 @@
-export declare const OXYGEN_VERSION = "1.98.7";
+export declare const OXYGEN_VERSION = "1.109.4";
+export declare const OXYGEN_MINIMUM_CLI_VERSION = "1.0.0";

package/node_modules/@oxygen/shared/dist/version.js

@@ -1 +1,3 @@
-export const OXYGEN_VERSION = "1.98.7";
+export const OXYGEN_VERSION = "1.109.4";
+// Bump this only when deployed CLI/API contracts require a newer CLI.
+export const OXYGEN_MINIMUM_CLI_VERSION = "1.0.0";

package/node_modules/@oxygen/workflows/dist/index.d.ts

@@ -414,7 +414,7 @@ export declare const workflowTriggerSchema: {
     readonly additionalProperties: false;
     readonly properties: {
         readonly type: {
-            readonly enum: readonly ["api", "webhook", "cron"];
+            readonly enum: readonly ["api", "webhook", "cron", "event"];
         };
         readonly trigger_id: {
             readonly type: "string";
@@ -570,7 +570,7 @@ export declare function getWorkflowSchema(subject?: "apply" | "call" | "event" |
     readonly additionalProperties: false;
     readonly properties: {
         readonly type: {
-            readonly enum: readonly ["api", "webhook", "cron"];
+            readonly enum: readonly ["api", "webhook", "cron", "event"];
         };
         readonly trigger_id: {
             readonly type: "string";
@@ -711,7 +711,7 @@ export declare function getWorkflowSchema(subject?: "apply" | "call" | "event" |
             readonly additionalProperties: false;
             readonly properties: {
                 readonly type: {
-                    readonly enum: readonly ["api", "webhook", "cron"];
+                    readonly enum: readonly ["api", "webhook", "cron", "event"];
                 };
                 readonly trigger_id: {
                     readonly type: "string";

package/node_modules/@oxygen/workflows/dist/index.js

@@ -734,7 +734,7 @@ export const workflowTriggerSchema = {
     type: "object",
     additionalProperties: false,
     properties: {
-        type: { enum: ["api", "webhook", "cron"] },
+        type: { enum: ["api", "webhook", "cron", "event"] },
         trigger_id: { type: "string" },
         trigger_name: { type: ["string", "null"] },
         secret_required: { type: "boolean" },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oxygen-agent/cli",
-  "version": "1.98.7",
+  "version": "1.109.4",
   "private": false,
   "license": "UNLICENSED",
   "type": "module",