@oxygen-agent/cli 1.987.20 → 1.1003.12

package/node_modules/@oxygen/shared/dist/spend-safety.d.ts

@@ -20,19 +20,19 @@ export declare const AUTONOMOUS_WORKFLOW_TRIGGER_TYPES: ReadonlySet<string>;
  * Per-run managed-credit ceiling for a LIVE workflow run fired by an autonomous
  * trigger when neither run metadata nor the manifest declares `max_credits`.
  */
-export declare const DEFAULT_TRIGGER_RUN_CREDIT_CEILING: Record<PlanTier, number | null>;
+export declare const DEFAULT_TRIGGER_RUN_CREDIT_CEILING: Record<SpendSafetyPlanTier, number | null>;
 /**
  * Per-delivery credit ceiling stamped onto a standing/webhook table auto-run
  * batch when the armed configuration carries no explicit `max_credits`.
  */
-export declare const DEFAULT_AUTO_RUN_BATCH_CREDIT_CEILING: Record<PlanTier, number | null>;
+export declare const DEFAULT_AUTO_RUN_BATCH_CREDIT_CEILING: Record<SpendSafetyPlanTier, number | null>;
 /**
  * Row ceiling for a BYOK AI-column run whose caller gave no explicit row bound
  * (no limit, no row_ids, selection "all"). BYOK bills the customer's own
  * provider account, so a credit ceiling is meaningless — row count is the
  * enforceable unit. An explicit limit (up to the 500k platform row cap) wins.
  */
-export declare const DEFAULT_BYOK_COLUMN_RUN_MAX_ROWS: Record<PlanTier, number | null>;
+export declare const DEFAULT_BYOK_COLUMN_RUN_MAX_ROWS: Record<SpendSafetyPlanTier, number | null>;
 /**
  * Default per-provider DAILY call cap for BYOK provider traffic (the customer's
  * own key). Short-window pacing defaults already exist in provider-fetch; this
@@ -40,7 +40,7 @@ export declare const DEFAULT_BYOK_COLUMN_RUN_MAX_ROWS: Record<PlanTier, number |
  * with the self-serve override surface live. A workspace
  * provider_rate_limit_policies row with windowSeconds=86400 overrides it.
  */
-export declare const DEFAULT_BYOK_PROVIDER_DAILY_CALL_CAP: Record<PlanTier, number | null>;
+export declare const DEFAULT_BYOK_PROVIDER_DAILY_CALL_CAP: Record<SpendSafetyPlanTier, number | null>;
 export declare const BYOK_PROVIDER_DAILY_WINDOW_SECONDS: number;
 export declare const BYOK_PROVIDER_DAILY_CAP_ENFORCEMENT_ENV = "OXYGEN_BYOK_DAILY_CAPS";
 export type ByokProviderDailyCapEnforcementMode = "observe_only" | "enforced";
@@ -105,10 +105,14 @@ export type OrgDailySpendGuard = {
  * decision is made, so enforcement and the read surfaces cannot drift apart.
  */
 export declare function resolveOrgDailySpendGuard(monthlyCredits: number | null | undefined): OrgDailySpendGuard | null;
-export declare function resolveDefaultTriggerRunCreditCeiling(tier: PlanTier): number | null;
-export declare function resolveDefaultAutoRunBatchCreditCeiling(tier: PlanTier): number | null;
-export declare function resolveDefaultByokColumnRunMaxRows(tier: PlanTier): number | null;
-export declare function resolveDefaultByokProviderDailyCallCap(tier: PlanTier): number | null;
+/** Credits carry 3 decimals everywhere (control-DB numeric(18,3)). */
+export declare function roundCredits(value: number): number;
+/** Credit estimates that present to 2 decimals (cent-grained customer copy). */
+export declare function roundCreditsToCents(value: number): number;
+export declare function resolveDefaultTriggerRunCreditCeiling(tier: SpendSafetyPlanTier): number | null;
+export declare function resolveDefaultAutoRunBatchCreditCeiling(tier: SpendSafetyPlanTier): number | null;
+export declare function resolveDefaultByokColumnRunMaxRows(tier: SpendSafetyPlanTier): number | null;
+export declare function resolveDefaultByokProviderDailyCallCap(tier: SpendSafetyPlanTier): number | null;
 /**
  * The plan tiers the spend-safety default tables above are keyed by. `limitsTier`
  * collapses "enterprise" onto the "scale" enforcement rung, but these tables carry
@@ -119,5 +123,13 @@ export declare function resolveDefaultByokProviderDailyCallCap(tier: PlanTier):
  * `oxygen limits` report, the org-facing provider-limits API, and the BYOK
  * daily-cap enforcement resolver — they must agree on which column an org reads.
  */
-export declare const SPEND_SAFETY_PLAN_TIERS: readonly PlanTier[];
-export declare function resolveSpendSafetyPlanTier(planTier: string | null, limitsTier: LimitsTier): PlanTier;
+/**
+ * The tiers these tables are keyed by. `oxygen` is deliberately ABSENT: its six
+ * rungs span four enforcement rungs, so an Oxygen plan must fall through to its
+ * limitsTier (the price band) rather than read one shared column. Adding an
+ * "oxygen" column here would silently give a $1,999 workspace the same ceiling
+ * as a $49 one.
+ */
+export type SpendSafetyPlanTier = Exclude<PlanTier, "oxygen">;
+export declare const SPEND_SAFETY_PLAN_TIERS: readonly SpendSafetyPlanTier[];
+export declare function resolveSpendSafetyPlanTier(planTier: string | null, limitsTier: LimitsTier): SpendSafetyPlanTier;

package/node_modules/@oxygen/shared/dist/spend-safety.js

@@ -9,11 +9,11 @@ export const AUTONOMOUS_WORKFLOW_TRIGGER_TYPES = new Set([
  * trigger when neither run metadata nor the manifest declares `max_credits`.
  */
 export const DEFAULT_TRIGGER_RUN_CREDIT_CEILING = {
-    free: 500,
-    starter: 5_000,
-    pro: 10_000,
-    team: 25_000,
-    scale: 250_000,
+    free: 50,
+    starter: 500,
+    pro: 1_000,
+    team: 2_500,
+    scale: 25_000,
     enterprise: null,
 };
 /**
@@ -21,11 +21,11 @@ export const DEFAULT_TRIGGER_RUN_CREDIT_CEILING = {
  * batch when the armed configuration carries no explicit `max_credits`.
  */
 export const DEFAULT_AUTO_RUN_BATCH_CREDIT_CEILING = {
-    free: 500,
-    starter: 5_000,
-    pro: 10_000,
-    team: 25_000,
-    scale: 250_000,
+    free: 50,
+    starter: 500,
+    pro: 1_000,
+    team: 2_500,
+    scale: 25_000,
     enterprise: null,
 };
 /**
@@ -129,9 +129,13 @@ export function resolveOrgDailySpendGuard(monthlyCredits) {
     };
 }
 /** Credits carry 3 decimals everywhere (control-DB numeric(18,3)). */
-function roundCredits(value) {
+export function roundCredits(value) {
     return Math.round(value * 1000) / 1000;
 }
+/** Credit estimates that present to 2 decimals (cent-grained customer copy). */
+export function roundCreditsToCents(value) {
+    return Math.round((value + Number.EPSILON) * 100) / 100;
+}
 export function resolveDefaultTriggerRunCreditCeiling(tier) {
     return DEFAULT_TRIGGER_RUN_CREDIT_CEILING[tier];
 }
@@ -144,16 +148,6 @@ export function resolveDefaultByokColumnRunMaxRows(tier) {
 export function resolveDefaultByokProviderDailyCallCap(tier) {
     return DEFAULT_BYOK_PROVIDER_DAILY_CALL_CAP[tier];
 }
-/**
- * The plan tiers the spend-safety default tables above are keyed by. `limitsTier`
- * collapses "enterprise" onto the "scale" enforcement rung, but these tables carry
- * a distinct "enterprise" column (null = runs on custom limits) — so prefer the
- * raw plan_tier whenever it is itself a table key, and fall back to the limits rung
- * (always a valid PlanTier key) when plan_tier is absent or an unknown/legacy
- * string (e.g. a Stripe price nickname). Single source of truth for the
- * `oxygen limits` report, the org-facing provider-limits API, and the BYOK
- * daily-cap enforcement resolver — they must agree on which column an org reads.
- */
 export const SPEND_SAFETY_PLAN_TIERS = [
     "free",
     "starter",

package/node_modules/@oxygen/shared/dist/sql-rows.d.ts

@@ -0,0 +1 @@
+export declare function executeRows<T>(value: unknown): T[];

package/node_modules/@oxygen/shared/dist/sql-rows.js

@@ -0,0 +1,3 @@
+export function executeRows(value) {
+    return (value.rows ?? value);
+}

package/node_modules/@oxygen/shared/dist/telemetry.js

@@ -1,4 +1,5 @@
 import { SpanStatusCode, metrics, trace, } from "@opentelemetry/api";
+import { deployEnvTelemetryEnvironment, deployPlatformAttribute } from "./deploy-env.js";
 import { errorId } from "./log.js";
 import { normalizeTelemetryAttributes } from "./redaction.js";
 import { redactSqlParameters, sqlErrorTelemetryAttributes } from "./sql-error.js";
@@ -73,7 +74,14 @@ export function commonTelemetryAttributes(attributes) {
     const pick = (workerKeys, webKeys) => pickEnvBySurface(workerProcess, workerKeys, webKeys);
     return {
         "oxygen.version": OXYGEN_VERSION,
-        "deployment.environment": pick(["FLY_ENVIRONMENT", "NODE_ENV"], ["VERCEL_ENV", "NODE_ENV"]),
+        // Which infrastructure this process runs on, so a self-hosted span is
+        // never mistaken for a managed one while both targets are live.
+        "oxygen.platform": deployPlatformAttribute(),
+        // OXYGEN_DEPLOY_ENV is consulted first and is the only signal a self-hosted
+        // box has: it carries neither FLY_ENVIRONMENT nor VERCEL_ENV, so without
+        // this the whole fleet would report its NODE_ENV and collapse prod, shadow
+        // and dev into one bucket. Unset leaves the managed chain untouched.
+        "deployment.environment": deployEnvTelemetryEnvironment() ?? pick(["FLY_ENVIRONMENT", "NODE_ENV"], ["VERCEL_ENV", "NODE_ENV"]),
         // deployment.sha stays the deploy artifact id: the Fly registry image ref on
         // the worker (release cross-reference), VERCEL_GIT_COMMIT_SHA on the web. The
         // worker's image ref is NOT a git commit, so deployment.git_sha carries the

package/node_modules/@oxygen/shared/dist/type-guards.d.ts

@@ -13,3 +13,25 @@
  * `Record<string, unknown>`. Rejects `null`, arrays, and every primitive.
  */
 export declare function isRecord(value: unknown): value is Record<string, unknown>;
+/**
+ * `value` as a `Record<string, unknown>` when it is a non-null, non-array
+ * object, else null.
+ */
+export declare function asRecordOrNull(value: unknown): Record<string, unknown> | null;
+/** Alias of {@link asRecordOrNull} for call sites that spell it `asRecord`. */
+export declare const asRecord: typeof asRecordOrNull;
+/**
+ * `value` as a `Record<string, unknown>`, falling back to an empty object.
+ * Deliberately masks "absent" and "present but wrong shape" the same way its
+ * call sites always have — use {@link asRecordOrNull} when that matters.
+ */
+export declare function asRecordOrEmpty(value: unknown): Record<string, unknown>;
+/** Finite number, else null. Does not parse numeric strings. */
+export declare function readFiniteNumber(value: unknown): number | null;
+/** Trimmed non-empty string, else null. */
+export declare function readTrimmedString(value: unknown): string | null;
+/**
+ * Trimmed non-empty string, else null — additionally coercing a number to its
+ * string form. Distinct from {@link readTrimmedString}, which rejects numbers.
+ */
+export declare function readCoercedString(value: unknown): string | null;

package/node_modules/@oxygen/shared/dist/type-guards.js

@@ -15,3 +15,38 @@
 export function isRecord(value) {
     return typeof value === "object" && value !== null && !Array.isArray(value);
 }
+/**
+ * `value` as a `Record<string, unknown>` when it is a non-null, non-array
+ * object, else null.
+ */
+export function asRecordOrNull(value) {
+    return isRecord(value) ? value : null;
+}
+/** Alias of {@link asRecordOrNull} for call sites that spell it `asRecord`. */
+export const asRecord = asRecordOrNull;
+/**
+ * `value` as a `Record<string, unknown>`, falling back to an empty object.
+ * Deliberately masks "absent" and "present but wrong shape" the same way its
+ * call sites always have — use {@link asRecordOrNull} when that matters.
+ */
+export function asRecordOrEmpty(value) {
+    return isRecord(value) ? value : {};
+}
+/** Finite number, else null. Does not parse numeric strings. */
+export function readFiniteNumber(value) {
+    return typeof value === "number" && Number.isFinite(value) ? value : null;
+}
+/** Trimmed non-empty string, else null. */
+export function readTrimmedString(value) {
+    return typeof value === "string" && value.trim() ? value.trim() : null;
+}
+/**
+ * Trimmed non-empty string, else null — additionally coercing a number to its
+ * string form. Distinct from {@link readTrimmedString}, which rejects numbers.
+ */
+export function readCoercedString(value) {
+    if (typeof value !== "string" && typeof value !== "number")
+        return null;
+    const trimmed = String(value).trim();
+    return trimmed ? trimmed : null;
+}

package/node_modules/@oxygen/shared/dist/value-readers.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Canonical readers that coerce an `unknown` value (or a field of an untyped
+ * record) into a string/number, used across every OXYGEN package.
+ */
+/** Trimmed non-empty string, else null. */
+export declare function readString(value: unknown): string | null;
+/** The first key in `keys` whose value is a non-empty string, trimmed. */
+export declare function readFirstString(source: Record<string, unknown>, keys: string[]): string | null;
+/** The first key in `keys` on `record` holding a non-empty string, trimmed. */
+export declare function readStringField(record: Record<string, unknown>, keys: string[]): string | null;
+/** Walk a dot-separated path through nested records; undefined when it breaks. */
+export declare function readByPath(value: unknown, path: string): unknown;
+/** Trimmed non-empty string, else null. */
+export declare function readStringValue(value: unknown): string | null;
+/**
+ * Non-empty string returned VERBATIM: emptiness is tested on the trimmed form
+ * but the original value is returned, so stored values keep their whitespace.
+ */
+export declare function readStringValueUntrimmed(value: unknown): string | null;
+/** Finite number, else null. Does not parse numeric strings. */
+export declare function readNumberValue(value: unknown): number | null;

package/node_modules/@oxygen/shared/dist/value-readers.js

@@ -0,0 +1,59 @@
+/**
+ * Canonical readers that coerce an `unknown` value (or a field of an untyped
+ * record) into a string/number, used across every OXYGEN package.
+ */
+import { isRecord } from "./type-guards.js";
+/** Trimmed non-empty string, else null. */
+export function readString(value) {
+    return typeof value === "string" && value.trim() ? value.trim() : null;
+}
+/** The first key in `keys` whose value is a non-empty string, trimmed. */
+export function readFirstString(source, keys) {
+    for (const key of keys) {
+        const value = source[key];
+        if (typeof value !== "string")
+            continue;
+        const trimmed = value.trim();
+        if (trimmed)
+            return trimmed;
+    }
+    return null;
+}
+/** The first key in `keys` on `record` holding a non-empty string, trimmed. */
+export function readStringField(record, keys) {
+    for (const key of keys) {
+        const value = record[key];
+        if (typeof value === "string" && value.trim())
+            return value.trim();
+    }
+    return null;
+}
+/** Walk a dot-separated path through nested records; undefined when it breaks. */
+export function readByPath(value, path) {
+    if (!path)
+        return value;
+    let current = value;
+    for (const segment of path.split(".")) {
+        if (!segment)
+            continue;
+        if (!isRecord(current))
+            return undefined;
+        current = current[segment];
+    }
+    return current;
+}
+/** Trimmed non-empty string, else null. */
+export function readStringValue(value) {
+    return typeof value === "string" && value.trim() ? value.trim() : null;
+}
+/**
+ * Non-empty string returned VERBATIM: emptiness is tested on the trimmed form
+ * but the original value is returned, so stored values keep their whitespace.
+ */
+export function readStringValueUntrimmed(value) {
+    return typeof value === "string" && value.trim() ? value : null;
+}
+/** Finite number, else null. Does not parse numeric strings. */
+export function readNumberValue(value) {
+    return typeof value === "number" && Number.isFinite(value) ? value : null;
+}

package/node_modules/@oxygen/shared/dist/version.js

@@ -1,6 +1,6 @@
 // Release metadata is a string API: a new version must not change the exported
 // declaration type and invalidate every dependent package's compiler state.
-export const OXYGEN_VERSION = "1.987.20";
+export const OXYGEN_VERSION = "1.1003.12";
 // The GLOBAL CLI compatibility floor: the oldest CLI allowed to call any
 // operational route. Raising it hard-rejects every older CLI from the entire
 // product, so it obeys one law, enforced by scripts/ci/cli-min-version-gate.mjs:

package/node_modules/@oxygen/shared/package.json

@@ -96,6 +96,16 @@
       "import": "./dist/person-name.js",
       "default": "./dist/person-name.js"
     },
+    "./linkedin-countries": {
+      "types": "./dist/linkedin-countries.d.ts",
+      "import": "./dist/linkedin-countries.js",
+      "default": "./dist/linkedin-countries.js"
+    },
+    "./freemail-domains": {
+      "types": "./dist/freemail-domains.d.ts",
+      "import": "./dist/freemail-domains.js",
+      "default": "./dist/freemail-domains.js"
+    },
     "./select-options": {
       "types": "./dist/select-options.d.ts",
       "import": "./dist/select-options.js",
@@ -121,6 +131,21 @@
       "import": "./dist/cli-result.js",
       "default": "./dist/cli-result.js"
     },
+    "./type-guards": {
+      "types": "./dist/type-guards.d.ts",
+      "import": "./dist/type-guards.js",
+      "default": "./dist/type-guards.js"
+    },
+    "./value-readers": {
+      "types": "./dist/value-readers.d.ts",
+      "import": "./dist/value-readers.js",
+      "default": "./dist/value-readers.js"
+    },
+    "./timing": {
+      "types": "./dist/timing.d.ts",
+      "import": "./dist/timing.js",
+      "default": "./dist/timing.js"
+    },
     "./custom-http-safety": {
       "types": "./dist/custom-http-safety.d.ts",
       "import": "./dist/custom-http-safety.js",
@@ -225,6 +250,31 @@
       "types": "./dist/workspace-file-storage.d.ts",
       "import": "./dist/workspace-file-storage.js",
       "default": "./dist/workspace-file-storage.js"
+    },
+    "./company-enrichment-fields": {
+      "types": "./dist/company-enrichment-fields.d.ts",
+      "import": "./dist/company-enrichment-fields.js",
+      "default": "./dist/company-enrichment-fields.js"
+    },
+    "./*": {
+      "types": "./dist/*.d.ts",
+      "import": "./dist/*.js",
+      "default": "./dist/*.js"
+    },
+    "./enrichment-intents": {
+      "types": "./dist/enrichment-intents.d.ts",
+      "import": "./dist/enrichment-intents.js",
+      "default": "./dist/enrichment-intents.js"
+    },
+    "./log": {
+      "types": "./dist/log.d.ts",
+      "import": "./dist/log.js",
+      "default": "./dist/log.js"
+    },
+    "./linkedin-sequences": {
+      "types": "./dist/linkedin-sequences.d.ts",
+      "import": "./dist/linkedin-sequences.js",
+      "default": "./dist/linkedin-sequences.js"
     }
   },
   "dependencies": {}

package/node_modules/@oxygen/workflows/dist/graph/expression.js

@@ -13,7 +13,7 @@
 //   - Reading is prototype-safe. Path segments are matched against own properties
 //     only, and the segments that reach JavaScript object internals
 //     (__proto__ / constructor / prototype) are rejected outright.
-import { analyzeFormulaDependencies, evaluateFormulaInScope, formulaExpressionError, } from "@oxygen/formula";
+import { analyzeFormulaDependencies, evaluateFormulaInScope, formulaExpressionError, isRecord, } from "@oxygen/formula";
 /** A deterministic authoring/data error; retrying the same revision cannot repair it. */
 export class WorkflowValueCoercionError extends Error {
     coercion;
@@ -587,7 +587,7 @@ function lookupFormulaIdentifier(scope, identifier) {
     if (BLOCKED_PATH_SEGMENTS.has(identifier))
         return { found: false };
     const input = scope.trigger?.input;
-    if (isPlainObject(input) && Object.prototype.hasOwnProperty.call(input, identifier)) {
+    if (isRecord(input) && Object.prototype.hasOwnProperty.call(input, identifier)) {
         return { found: true, value: input[identifier] };
     }
     const node = readSegment(scope.steps, identifier);
@@ -627,9 +627,6 @@ function isCoalescibleWorkflowFormulaPath(scope, identifier) {
     }
     return false;
 }
-function isPlainObject(value) {
-    return typeof value === "object" && value !== null && !Array.isArray(value);
-}
 // ---------------------------------------------------------------------------
 // Conditions
 // ---------------------------------------------------------------------------

package/node_modules/@oxygen/workflows/dist/graph/params.js

@@ -28,7 +28,7 @@ export const ANY_OF_REQUIREMENTS = {
  * Empty means ready.
  */
 export function missingToolParams(input) {
-    const { toolId, fields, params, closed } = input;
+    const { toolId, fields, params } = input;
     const label = (name) => fields.find((field) => field.name === name)?.title ?? name;
     // An unknown key suppresses the missing-required report, because a misspelled
     // name is simultaneously an unknown key AND the reason a required field looks

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oxygen-agent/cli",
-  "version": "1.987.20",
+  "version": "1.1003.12",
   "private": false,
   "license": "UNLICENSED",
   "type": "module",
@@ -32,7 +32,7 @@
     "README.md"
   ],
   "dependencies": {
-    "@aws-sdk/client-s3": "3.1050.0",
+    "@aws-sdk/client-s3": "3.1136.0",
     "@aws-sdk/s3-request-presigner": "3.1050.0",
     "@langfuse/core": "^5.11.0",
     "@langfuse/otel": "^5.11.0",