@oxygen-agent/cli 1.987.20 → 1.1010.1

package/node_modules/@oxygen/shared/dist/telemetry.d.ts

@@ -3,6 +3,17 @@ export type WithTelemetrySpanOptions = {
     isTransient?: (error: unknown) => boolean;
 };
 export declare function withTelemetrySpan<T>(tracerName: string, name: string, attributes: TelemetryAttributes | undefined, fn: () => Promise<T>, options?: WithTelemetrySpanOptions): Promise<T>;
+/**
+ * The active global span's trace id: the join key into SigNoz/Axiom traces.
+ * Null when no valid span is active (a BullMQ job outside any span, a test).
+ */
+export declare function activeTelemetryTraceId(): string | null;
+/**
+ * Run `fn` inside a new span only when no span is active, so work that already
+ * sits under a request/cycle span keeps that trace and uncorrelated background
+ * work (BullMQ jobs) still gets one trace id to cross-link from Langfuse.
+ */
+export declare function withTelemetrySpanIfNone<T>(tracerName: string, name: string, attributes: TelemetryAttributes | undefined, fn: () => Promise<T>): Promise<T>;
 export declare function setActiveTelemetryAttributes(attributes: TelemetryAttributes): void;
 export declare function markActiveTelemetryError(message: string, attributes?: TelemetryAttributes): void;
 export declare function recordTelemetryCounter(name: string, value?: number, attributes?: TelemetryAttributes): void;

package/node_modules/@oxygen/shared/dist/telemetry.js

@@ -1,4 +1,5 @@
-import { SpanStatusCode, metrics, trace, } from "@opentelemetry/api";
+import { SpanStatusCode, isSpanContextValid, metrics, trace, } from "@opentelemetry/api";
+import { deployEnvTelemetryEnvironment, deployPlatformAttribute } from "./deploy-env.js";
 import { errorId } from "./log.js";
 import { normalizeTelemetryAttributes } from "./redaction.js";
 import { redactSqlParameters, sqlErrorTelemetryAttributes } from "./sql-error.js";
@@ -38,6 +39,24 @@ export async function withTelemetrySpan(tracerName, name, attributes, fn, option
         }
     });
 }
+/**
+ * The active global span's trace id: the join key into SigNoz/Axiom traces.
+ * Null when no valid span is active (a BullMQ job outside any span, a test).
+ */
+export function activeTelemetryTraceId() {
+    const spanContext = trace.getActiveSpan()?.spanContext();
+    return spanContext && isSpanContextValid(spanContext) ? spanContext.traceId : null;
+}
+/**
+ * Run `fn` inside a new span only when no span is active, so work that already
+ * sits under a request/cycle span keeps that trace and uncorrelated background
+ * work (BullMQ jobs) still gets one trace id to cross-link from Langfuse.
+ */
+export async function withTelemetrySpanIfNone(tracerName, name, attributes, fn) {
+    if (activeTelemetryTraceId())
+        return await fn();
+    return await withTelemetrySpan(tracerName, name, attributes, fn);
+}
 export function setActiveTelemetryAttributes(attributes) {
     const span = trace.getActiveSpan();
     if (!span)
@@ -73,7 +92,14 @@ export function commonTelemetryAttributes(attributes) {
     const pick = (workerKeys, webKeys) => pickEnvBySurface(workerProcess, workerKeys, webKeys);
     return {
         "oxygen.version": OXYGEN_VERSION,
-        "deployment.environment": pick(["FLY_ENVIRONMENT", "NODE_ENV"], ["VERCEL_ENV", "NODE_ENV"]),
+        // Which infrastructure this process runs on, so a self-hosted span is
+        // never mistaken for a managed one while both targets are live.
+        "oxygen.platform": deployPlatformAttribute(),
+        // OXYGEN_DEPLOY_ENV is consulted first and is the only signal a self-hosted
+        // box has: it carries neither FLY_ENVIRONMENT nor VERCEL_ENV, so without
+        // this the whole fleet would report its NODE_ENV and collapse prod, shadow
+        // and dev into one bucket. Unset leaves the managed chain untouched.
+        "deployment.environment": deployEnvTelemetryEnvironment() ?? pick(["FLY_ENVIRONMENT", "NODE_ENV"], ["VERCEL_ENV", "NODE_ENV"]),
         // deployment.sha stays the deploy artifact id: the Fly registry image ref on
         // the worker (release cross-reference), VERCEL_GIT_COMMIT_SHA on the web. The
         // worker's image ref is NOT a git commit, so deployment.git_sha carries the

package/node_modules/@oxygen/shared/dist/type-guards.d.ts

@@ -13,3 +13,25 @@
  * `Record<string, unknown>`. Rejects `null`, arrays, and every primitive.
  */
 export declare function isRecord(value: unknown): value is Record<string, unknown>;
+/**
+ * `value` as a `Record<string, unknown>` when it is a non-null, non-array
+ * object, else null.
+ */
+export declare function asRecordOrNull(value: unknown): Record<string, unknown> | null;
+/** Alias of {@link asRecordOrNull} for call sites that spell it `asRecord`. */
+export declare const asRecord: typeof asRecordOrNull;
+/**
+ * `value` as a `Record<string, unknown>`, falling back to an empty object.
+ * Deliberately masks "absent" and "present but wrong shape" the same way its
+ * call sites always have — use {@link asRecordOrNull} when that matters.
+ */
+export declare function asRecordOrEmpty(value: unknown): Record<string, unknown>;
+/** Finite number, else null. Does not parse numeric strings. */
+export declare function readFiniteNumber(value: unknown): number | null;
+/** Trimmed non-empty string, else null. */
+export declare function readTrimmedString(value: unknown): string | null;
+/**
+ * Trimmed non-empty string, else null — additionally coercing a number to its
+ * string form. Distinct from {@link readTrimmedString}, which rejects numbers.
+ */
+export declare function readCoercedString(value: unknown): string | null;

package/node_modules/@oxygen/shared/dist/type-guards.js

@@ -15,3 +15,38 @@
 export function isRecord(value) {
     return typeof value === "object" && value !== null && !Array.isArray(value);
 }
+/**
+ * `value` as a `Record<string, unknown>` when it is a non-null, non-array
+ * object, else null.
+ */
+export function asRecordOrNull(value) {
+    return isRecord(value) ? value : null;
+}
+/** Alias of {@link asRecordOrNull} for call sites that spell it `asRecord`. */
+export const asRecord = asRecordOrNull;
+/**
+ * `value` as a `Record<string, unknown>`, falling back to an empty object.
+ * Deliberately masks "absent" and "present but wrong shape" the same way its
+ * call sites always have — use {@link asRecordOrNull} when that matters.
+ */
+export function asRecordOrEmpty(value) {
+    return isRecord(value) ? value : {};
+}
+/** Finite number, else null. Does not parse numeric strings. */
+export function readFiniteNumber(value) {
+    return typeof value === "number" && Number.isFinite(value) ? value : null;
+}
+/** Trimmed non-empty string, else null. */
+export function readTrimmedString(value) {
+    return typeof value === "string" && value.trim() ? value.trim() : null;
+}
+/**
+ * Trimmed non-empty string, else null — additionally coercing a number to its
+ * string form. Distinct from {@link readTrimmedString}, which rejects numbers.
+ */
+export function readCoercedString(value) {
+    if (typeof value !== "string" && typeof value !== "number")
+        return null;
+    const trimmed = String(value).trim();
+    return trimmed ? trimmed : null;
+}

package/node_modules/@oxygen/shared/dist/ugc.d.ts

@@ -1,5 +1,20 @@
 /** UGC is a Publishing capability. These are projections, never a second Posts store. */
 export type UgcApprovalMode = "creator" | "delegated";
+/** Per calendar week or month, or `total`: N posts over the program's lifetime. */
+export type UgcPostingTargetPeriod = "week" | "month" | "total";
+export type UgcPostingTarget = {
+    count: number;
+    period: UgcPostingTargetPeriod;
+};
+export declare const UGC_POSTING_TARGET_MAX = 100;
+export declare const UGC_POSTING_TARGET_PERIODS: readonly ["week", "month", "total"];
+/** The operator-written creator brief is short by design (Philipp, 2026-09-23). */
+export declare const UGC_PROGRAM_BRIEF_MAX_CHARS = 1200;
+/** The program's target as its API shape, or null when none is set. */
+export declare function ugcPostingTarget(program: {
+    postingTargetCount?: number | null | undefined;
+    postingTargetPeriod?: UgcPostingTargetPeriod | null | undefined;
+}): UgcPostingTarget | null;
 export type UgcProgram = {
     id: string;
     name: string;
@@ -10,20 +25,17 @@ export type UgcProgram = {
     peerEngagementEnabled?: boolean;
     peerEngagementVersion?: number;
     peerEngagementEffectiveAt?: Date | null;
+    /** The product's icon, found from its site at create; null for older programs. */
+    iconUrl?: string | null;
+    /** Short operator-written creator brief; drafts are grounded in it. */
+    brief?: string | null;
+    /** Posts each creator is expected to publish per period; both null when unset. */
+    postingTargetCount?: number | null;
+    postingTargetPeriod?: UgcPostingTargetPeriod | null;
     status: "active" | "archived";
     createdAt: Date;
     updatedAt: Date;
 };
-export type UgcBrief = {
-    id: string;
-    programId: string;
-    title: string;
-    prompt: string;
-    questions: string[];
-    cycle: string | null;
-    createdAt: Date;
-    updatedAt: Date;
-};
 export type UgcPostProjection = {
     /** Public author identity from the exact participation, never a private profile corpus. */
     authorLinkedinUrl?: string;
@@ -84,7 +96,6 @@ export type UgcPostLink = {
     masterOrgId: string;
     brandApprovalRequired: boolean;
     sourcePostId: string;
-    briefId: string | null;
     attribution: Record<string, unknown>;
     projection: UgcPostProjection;
     sourceRevision: string;

package/node_modules/@oxygen/shared/dist/ugc.js

@@ -1,2 +1,12 @@
+export const UGC_POSTING_TARGET_MAX = 100;
+export const UGC_POSTING_TARGET_PERIODS = ["week", "month", "total"];
+/** The operator-written creator brief is short by design (Philipp, 2026-09-23). */
+export const UGC_PROGRAM_BRIEF_MAX_CHARS = 1200;
+/** The program's target as its API shape, or null when none is set. */
+export function ugcPostingTarget(program) {
+    return program.postingTargetCount && program.postingTargetPeriod
+        ? { count: program.postingTargetCount, period: program.postingTargetPeriod }
+        : null;
+}
 export const UGC_MONTHLY_CREATOR_CREDITS = 10_000;
 export const UGC_SPONSORED_LINKEDIN_SEATS = 1;

package/node_modules/@oxygen/shared/dist/value-readers.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Canonical readers that coerce an `unknown` value (or a field of an untyped
+ * record) into a string/number, used across every OXYGEN package.
+ */
+/** Trimmed non-empty string, else null. */
+export declare function readString(value: unknown): string | null;
+/** The first key in `keys` whose value is a non-empty string, trimmed. */
+export declare function readFirstString(source: Record<string, unknown>, keys: string[]): string | null;
+/** The first key in `keys` on `record` holding a non-empty string, trimmed. */
+export declare function readStringField(record: Record<string, unknown>, keys: string[]): string | null;
+/** Walk a dot-separated path through nested records; undefined when it breaks. */
+export declare function readByPath(value: unknown, path: string): unknown;
+/** Trimmed non-empty string, else null. */
+export declare function readStringValue(value: unknown): string | null;
+/**
+ * Non-empty string returned VERBATIM: emptiness is tested on the trimmed form
+ * but the original value is returned, so stored values keep their whitespace.
+ */
+export declare function readStringValueUntrimmed(value: unknown): string | null;
+/** Finite number, else null. Does not parse numeric strings. */
+export declare function readNumberValue(value: unknown): number | null;

package/node_modules/@oxygen/shared/dist/value-readers.js

@@ -0,0 +1,59 @@
+/**
+ * Canonical readers that coerce an `unknown` value (or a field of an untyped
+ * record) into a string/number, used across every OXYGEN package.
+ */
+import { isRecord } from "./type-guards.js";
+/** Trimmed non-empty string, else null. */
+export function readString(value) {
+    return typeof value === "string" && value.trim() ? value.trim() : null;
+}
+/** The first key in `keys` whose value is a non-empty string, trimmed. */
+export function readFirstString(source, keys) {
+    for (const key of keys) {
+        const value = source[key];
+        if (typeof value !== "string")
+            continue;
+        const trimmed = value.trim();
+        if (trimmed)
+            return trimmed;
+    }
+    return null;
+}
+/** The first key in `keys` on `record` holding a non-empty string, trimmed. */
+export function readStringField(record, keys) {
+    for (const key of keys) {
+        const value = record[key];
+        if (typeof value === "string" && value.trim())
+            return value.trim();
+    }
+    return null;
+}
+/** Walk a dot-separated path through nested records; undefined when it breaks. */
+export function readByPath(value, path) {
+    if (!path)
+        return value;
+    let current = value;
+    for (const segment of path.split(".")) {
+        if (!segment)
+            continue;
+        if (!isRecord(current))
+            return undefined;
+        current = current[segment];
+    }
+    return current;
+}
+/** Trimmed non-empty string, else null. */
+export function readStringValue(value) {
+    return typeof value === "string" && value.trim() ? value.trim() : null;
+}
+/**
+ * Non-empty string returned VERBATIM: emptiness is tested on the trimmed form
+ * but the original value is returned, so stored values keep their whitespace.
+ */
+export function readStringValueUntrimmed(value) {
+    return typeof value === "string" && value.trim() ? value : null;
+}
+/** Finite number, else null. Does not parse numeric strings. */
+export function readNumberValue(value) {
+    return typeof value === "number" && Number.isFinite(value) ? value : null;
+}

package/node_modules/@oxygen/shared/dist/version.generated.d.ts

@@ -0,0 +1 @@
+export declare const OXYGEN_BUILD_VERSION = "1.1010.1";

package/node_modules/@oxygen/shared/dist/version.generated.js

@@ -0,0 +1,2 @@
+// GENERATED by scripts/ci/version-stamp.mjs from VERSION + git history. Do not edit; do not commit.
+export const OXYGEN_BUILD_VERSION = "1.1010.1";

package/node_modules/@oxygen/shared/dist/version.js

@@ -1,6 +1,13 @@
+import { OXYGEN_BUILD_VERSION } from "./version.generated.js";
 // Release metadata is a string API: a new version must not change the exported
 // declaration type and invalidate every dependent package's compiler state.
-export const OXYGEN_VERSION = "1.987.20";
+//
+// The value is DERIVED, never pinned per commit: the repo-root `VERSION` file
+// holds the series (`1.<minor>`) and the patch is the distance from the commit
+// that last touched it. scripts/ci/version-stamp.mjs writes
+// ./version.generated.ts (gitignored) at build, test and publish time. Change
+// the series by editing VERSION; there is nothing to bump here.
+export const OXYGEN_VERSION = OXYGEN_BUILD_VERSION;
 // The GLOBAL CLI compatibility floor: the oldest CLI allowed to call any
 // operational route. Raising it hard-rejects every older CLI from the entire
 // product, so it obeys one law, enforced by scripts/ci/cli-min-version-gate.mjs:

package/node_modules/@oxygen/shared/dist/workspace-event-catalog.js

@@ -3,7 +3,6 @@ import { CRM_SIGNAL_WORKFLOW_EVENT_DEFINITIONS, CRM_WORKFLOW_EVENT_SOURCE, } fro
 import { SEQUENCE_CONTACT_ACTIVITY_EVENT, SEQUENCE_CRM_EVENT_DEFINITIONS, SEQUENCE_WORKFLOW_EVENT_SOURCE, } from "./sequence-crm-events.js";
 import { SEQUENCE_ENROLLMENT_TERMINAL_EVENT, SEQUENCE_TERMINAL_EVENT_SOURCE, SEQUENCE_TERMINAL_STATUSES, } from "./sequence-terminal-events.js";
 import { NOTETAKER_MEETING_COMPLETED_EVENT, NOTETAKER_MEETING_COMPLETED_PAYLOAD_FIELDS, NOTETAKER_WORKFLOW_EVENT_SOURCE, } from "./notetaker-events.js";
-import { PLAIN_SUPPORT_MESSAGE_RECEIVED_EVENT, PLAIN_SUPPORT_MESSAGE_RECEIVED_PAYLOAD_FIELDS, PLAIN_SUPPORT_WORKFLOW_EVENT_SOURCE, } from "./plain-support-events.js";
 export const WORKSPACE_EVENT_PRODUCER_READINESS_REQUIREMENTS = [
     "always",
     "notetaker_enabled",
@@ -107,15 +106,6 @@ export const WORKSPACE_EVENT_PRODUCERS = [
         readiness: "notetaker_enabled",
         payloadFields: NOTETAKER_MEETING_COMPLETED_PAYLOAD_FIELDS,
     },
-    {
-        id: "plain_support.message_received",
-        source: PLAIN_SUPPORT_WORKFLOW_EVENT_SOURCE,
-        event: PLAIN_SUPPORT_MESSAGE_RECEIVED_EVENT,
-        delivery: "direct_durable_write",
-        idempotency: "The verified Plain event id deduplicates metadata-only support delivery.",
-        readiness: "always",
-        payloadFields: PLAIN_SUPPORT_MESSAGE_RECEIVED_PAYLOAD_FIELDS,
-    },
 ];
 const workspaceEventProducersById = new Map(WORKSPACE_EVENT_PRODUCERS.map((producer) => [producer.id, producer]));
 export function getWorkspaceEventProducer(producerId) {
@@ -224,18 +214,6 @@ const crmSignalEntries = CRM_SIGNAL_WORKFLOW_EVENT_DEFINITIONS.map((definition)
     description: definition.description,
     payloadFields: definition.payloadFields,
 }));
-const plainSupportEntries = [
-    {
-        id: "plain_support.message_received",
-        producerId: "plain_support.message_received",
-        source: PLAIN_SUPPORT_WORKFLOW_EVENT_SOURCE,
-        event: PLAIN_SUPPORT_MESSAGE_RECEIVED_EVENT,
-        group: "Support · Plain",
-        label: "Customer message received",
-        description: "A customer sent a Chat, email, Slack, Microsoft Teams, or Discord message into a canonical Plain Thread. The event contains routing metadata only; customer content remains in Plain.",
-        payloadFields: PLAIN_SUPPORT_MESSAGE_RECEIVED_PAYLOAD_FIELDS,
-    },
-];
 const notetakerEntries = [
     {
         id: "notetaker.meeting_completed",
@@ -257,6 +235,5 @@ export const WORKSPACE_EVENT_CATALOG = [
     ...sequenceTerminalEntries,
     ...crmActivityEntries,
     ...crmSignalEntries,
-    ...plainSupportEntries,
     ...notetakerEntries,
 ];

package/node_modules/@oxygen/shared/dist/workspace-file-storage.d.ts

@@ -32,6 +32,35 @@ export declare function readWorkspaceFileObject(input: {
     mimeType: WorkspaceStoredFileMimeType;
     signal?: AbortSignal;
 }): Promise<Uint8Array>;
+/** How long a presigned workspace-file upload stays valid. Long enough for 100 MiB on a slow link. */
+export declare const WORKSPACE_FILE_UPLOAD_PRESIGN_SECONDS = 900;
+/**
+ * A presigned PUT for an opaque workspace file whose bytes never pass through
+ * the API.
+ *
+ * The base64-in-JSON path is bounded by the JSON body ceiling (2,000,000
+ * bytes, so ~1.5 MB of file) and, on managed production, by the platform's
+ * request-body limit — while the store itself allows 100 MiB. The browser and
+ * the CLI PUT the bytes straight to object storage instead; the caller declares
+ * the size and digest up front (the reservation needs both), and completion
+ * runs readWorkspaceFileObject, the same verified readback every stored file
+ * gets, so an upload that does not match what was declared is never finalized.
+ *
+ * `content-type` is signed (the SDK's default is to leave it unsigned) so the
+ * stored object's type is the opaque one this store expects; `content-length`
+ * is signed by the presigner from ContentLength.
+ */
+export declare function presignWorkspaceFileUpload(input: {
+    organizationId: string;
+    fileId: string;
+    fileName: string;
+    sizeBytes: number;
+}): Promise<{
+    uploadUrl: string;
+    storageKey: string;
+    expiresInSeconds: number;
+    contentType: WorkspaceStoredFileMimeType;
+}>;
 /** Immutable PUT followed by bounded readback. A matching existing object is a safe retry. */
 export declare function putWorkspaceFileObject(input: {
     organizationId: string;

package/node_modules/@oxygen/shared/dist/workspace-file-storage.js

@@ -1,6 +1,7 @@
 import { Buffer } from "node:buffer";
 import { createHash } from "node:crypto";
 import { GetObjectCommand, PutObjectCommand } from "@aws-sdk/client-s3";
+import { getSignedUrl } from "@aws-sdk/s3-request-presigner";
 import { OxygenError } from "./cli-result.js";
 import { resolveObjectStorageClient } from "./object-storage.js";
 export const WORKSPACE_VISUAL_SOURCE_MAX_BYTES = 1_500_000;
@@ -112,6 +113,36 @@ export async function readWorkspaceFileObject(input) {
         stream.destroy?.();
     }
 }
+/** How long a presigned workspace-file upload stays valid. Long enough for 100 MiB on a slow link. */
+export const WORKSPACE_FILE_UPLOAD_PRESIGN_SECONDS = 900;
+/**
+ * A presigned PUT for an opaque workspace file whose bytes never pass through
+ * the API.
+ *
+ * The base64-in-JSON path is bounded by the JSON body ceiling (2,000,000
+ * bytes, so ~1.5 MB of file) and, on managed production, by the platform's
+ * request-body limit — while the store itself allows 100 MiB. The browser and
+ * the CLI PUT the bytes straight to object storage instead; the caller declares
+ * the size and digest up front (the reservation needs both), and completion
+ * runs readWorkspaceFileObject, the same verified readback every stored file
+ * gets, so an upload that does not match what was declared is never finalized.
+ *
+ * `content-type` is signed (the SDK's default is to leave it unsigned) so the
+ * stored object's type is the opaque one this store expects; `content-length`
+ * is signed by the presigner from ContentLength.
+ */
+export async function presignWorkspaceFileUpload(input) {
+    if (!Number.isSafeInteger(input.sizeBytes) || input.sizeBytes < 0 || input.sizeBytes > WORKSPACE_OPAQUE_FILE_MAX_BYTES) {
+        throw new OxygenError("workspace_file_too_large", "File exceeds 100 MiB.");
+    }
+    const storageKey = buildWorkspaceFileObjectKey(input);
+    const { client, bucket } = resolveObjectStorageClient();
+    const contentType = "application/octet-stream";
+    const uploadUrl = await getSignedUrl(client, new PutObjectCommand({
+        Bucket: bucket, Key: storageKey, ContentLength: input.sizeBytes, ContentType: contentType,
+    }), { expiresIn: WORKSPACE_FILE_UPLOAD_PRESIGN_SECONDS, signableHeaders: new Set(["content-type"]) });
+    return { uploadUrl, storageKey, expiresInSeconds: WORKSPACE_FILE_UPLOAD_PRESIGN_SECONDS, contentType };
+}
 /** Immutable PUT followed by bounded readback. A matching existing object is a safe retry. */
 export async function putWorkspaceFileObject(input) {
     input.signal?.throwIfAborted();

package/node_modules/@oxygen/shared/package.json

@@ -96,6 +96,16 @@
       "import": "./dist/person-name.js",
       "default": "./dist/person-name.js"
     },
+    "./linkedin-countries": {
+      "types": "./dist/linkedin-countries.d.ts",
+      "import": "./dist/linkedin-countries.js",
+      "default": "./dist/linkedin-countries.js"
+    },
+    "./freemail-domains": {
+      "types": "./dist/freemail-domains.d.ts",
+      "import": "./dist/freemail-domains.js",
+      "default": "./dist/freemail-domains.js"
+    },
     "./select-options": {
       "types": "./dist/select-options.d.ts",
       "import": "./dist/select-options.js",
@@ -121,6 +131,21 @@
       "import": "./dist/cli-result.js",
       "default": "./dist/cli-result.js"
     },
+    "./type-guards": {
+      "types": "./dist/type-guards.d.ts",
+      "import": "./dist/type-guards.js",
+      "default": "./dist/type-guards.js"
+    },
+    "./value-readers": {
+      "types": "./dist/value-readers.d.ts",
+      "import": "./dist/value-readers.js",
+      "default": "./dist/value-readers.js"
+    },
+    "./timing": {
+      "types": "./dist/timing.d.ts",
+      "import": "./dist/timing.js",
+      "default": "./dist/timing.js"
+    },
     "./custom-http-safety": {
       "types": "./dist/custom-http-safety.d.ts",
       "import": "./dist/custom-http-safety.js",
@@ -141,6 +166,11 @@
       "import": "./dist/signup-lead-webhook.js",
       "default": "./dist/signup-lead-webhook.js"
     },
+    "./signup-lead-payload": {
+      "types": "./dist/signup-lead-payload.d.ts",
+      "import": "./dist/signup-lead-payload.js",
+      "default": "./dist/signup-lead-payload.js"
+    },
     "./knowledge-constants": {
       "types": "./dist/knowledge-constants.d.ts",
       "import": "./dist/knowledge-constants.js",
@@ -225,6 +255,35 @@
       "types": "./dist/workspace-file-storage.d.ts",
       "import": "./dist/workspace-file-storage.js",
       "default": "./dist/workspace-file-storage.js"
+    },
+    "./company-enrichment-fields": {
+      "types": "./dist/company-enrichment-fields.d.ts",
+      "import": "./dist/company-enrichment-fields.js",
+      "default": "./dist/company-enrichment-fields.js"
+    },
+    "./*": {
+      "types": "./dist/*.d.ts",
+      "import": "./dist/*.js",
+      "default": "./dist/*.js"
+    },
+    "./enrichment-intents": {
+      "types": "./dist/enrichment-intents.d.ts",
+      "import": "./dist/enrichment-intents.js",
+      "default": "./dist/enrichment-intents.js"
+    },
+    "./log": {
+      "types": "./dist/log.d.ts",
+      "import": "./dist/log.js",
+      "default": "./dist/log.js"
+    },
+    "./linkedin-sequences": {
+      "types": "./dist/linkedin-sequences.d.ts",
+      "import": "./dist/linkedin-sequences.js",
+      "default": "./dist/linkedin-sequences.js"
+    },
+    "./provider-balance-signal": {
+      "types": "./dist/provider-balance-signal.d.ts",
+      "import": "./dist/provider-balance-signal.js"
     }
   },
   "dependencies": {}

package/node_modules/@oxygen/workflows/dist/graph/expression.js

@@ -13,7 +13,7 @@
 //   - Reading is prototype-safe. Path segments are matched against own properties
 //     only, and the segments that reach JavaScript object internals
 //     (__proto__ / constructor / prototype) are rejected outright.
-import { analyzeFormulaDependencies, evaluateFormulaInScope, formulaExpressionError, } from "@oxygen/formula";
+import { analyzeFormulaDependencies, evaluateFormulaInScope, formulaExpressionError, isRecord, } from "@oxygen/formula";
 /** A deterministic authoring/data error; retrying the same revision cannot repair it. */
 export class WorkflowValueCoercionError extends Error {
     coercion;
@@ -587,7 +587,7 @@ function lookupFormulaIdentifier(scope, identifier) {
     if (BLOCKED_PATH_SEGMENTS.has(identifier))
         return { found: false };
     const input = scope.trigger?.input;
-    if (isPlainObject(input) && Object.prototype.hasOwnProperty.call(input, identifier)) {
+    if (isRecord(input) && Object.prototype.hasOwnProperty.call(input, identifier)) {
         return { found: true, value: input[identifier] };
     }
     const node = readSegment(scope.steps, identifier);
@@ -627,9 +627,6 @@ function isCoalescibleWorkflowFormulaPath(scope, identifier) {
     }
     return false;
 }
-function isPlainObject(value) {
-    return typeof value === "object" && value !== null && !Array.isArray(value);
-}
 // ---------------------------------------------------------------------------
 // Conditions
 // ---------------------------------------------------------------------------

package/node_modules/@oxygen/workflows/dist/graph/params.js

@@ -28,7 +28,7 @@ export const ANY_OF_REQUIREMENTS = {
  * Empty means ready.
  */
 export function missingToolParams(input) {
-    const { toolId, fields, params, closed } = input;
+    const { toolId, fields, params } = input;
     const label = (name) => fields.find((field) => field.name === name)?.title ?? name;
     // An unknown key suppresses the missing-required report, because a misspelled
     // name is simultaneously an unknown key AND the reason a required field looks

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oxygen-agent/cli",
-  "version": "1.987.20",
+  "version": "1.1010.1",
   "private": false,
   "license": "UNLICENSED",
   "type": "module",
@@ -32,12 +32,13 @@
     "README.md"
   ],
   "dependencies": {
-    "@aws-sdk/client-s3": "3.1050.0",
+    "@aws-sdk/client-s3": "3.1136.0",
     "@aws-sdk/s3-request-presigner": "3.1050.0",
     "@langfuse/core": "^5.11.0",
     "@langfuse/otel": "^5.11.0",
     "@langfuse/tracing": "^5.11.0",
     "@opentelemetry/api": "1.9.1",
+    "@opentelemetry/otlp-transformer": "0.221.0",
     "@opentelemetry/resources": "2.10.0",
     "@opentelemetry/sdk-trace-base": "2.10.0",
     "commander": "14.0.3",