@automagik/omni 2.260429.2 → 2.260429.4

package/db/drizzle/0032_genie_hosts.sql

@@ -0,0 +1,32 @@
+-- Per-host fingerprint trust foundation (omni-host-fingerprint-trust wish, Group 1).
+--
+-- Stores ed25519 public keys for genie installations that talk to this omni
+-- server. Populated by `POST /api/v2/trust/handshake` (driven by
+-- `genie omni handshake`). Read by the verification middleware (Group 4) on
+-- every signed request, and by `omni trust list/get/update/revoke`.
+--
+-- This is the FOUNDATION migration: the table just stores data. Signing,
+-- verification, and per-host scope enforcement land in subsequent groups
+-- of the same wish. The bearer-token auth model stays untouched and
+-- backward-compatible until operators opt into per-instance enforcement.
+--
+-- Idempotency invariant: pubkey is UNIQUE — re-registering the same key
+-- returns the existing host_id rather than creating duplicates. Rotation
+-- (Group 2) revokes + re-registers with a new pubkey, never mutates in
+-- place.
+
+CREATE TABLE IF NOT EXISTS "genie_hosts" (
+    "id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
+    "pubkey" varchar(64) NOT NULL UNIQUE,
+    "hostname" varchar(255) NOT NULL,
+    "capabilities" jsonb DEFAULT '{}'::jsonb NOT NULL,
+    "scopes" text[] DEFAULT ARRAY['*']::text[] NOT NULL,
+    "last_seen_at" timestamp,
+    "revoked_at" timestamp,
+    "created_at" timestamp DEFAULT now() NOT NULL,
+    "updated_at" timestamp DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE INDEX IF NOT EXISTS "genie_hosts_pubkey_idx" ON "genie_hosts" ("pubkey");
+--> statement-breakpoint
+CREATE INDEX IF NOT EXISTS "genie_hosts_active_idx" ON "genie_hosts" ("revoked_at");

package/db/drizzle/meta/_journal.json

@@ -225,6 +225,13 @@
       "when": 1777400000000,
       "tag": "0031_reconcile_gupshup_columns",
       "breakpoints": true
+    },
+    {
+      "idx": 32,
+      "version": "7",
+      "when": 1777500000000,
+      "tag": "0032_genie_hosts",
+      "breakpoints": true
     }
   ]
 }

package/dist/index.js

@@ -58576,6 +58576,7 @@ __export(exports_schema, {
   handoffLogs: () => handoffLogs,
   globalSettingsRelations: () => globalSettingsRelations,
   globalSettings: () => globalSettings,
+  genieHosts: () => genieHosts,
   followUpDisarmReasons: () => followUpDisarmReasons,
   eventTypes: () => eventTypes,
   eventPayloads: () => eventPayloads,
@@ -58631,7 +58632,7 @@ __export(exports_schema, {
   accessRules: () => accessRules,
   accessModes: () => accessModes
 });
-var channelTypes, agentTypes, agentSystems, agentEntityTypes, debounceMode, splitDelayMode, replyFilterMode, agentSessionStrategies, ruleTypes, accessModes, settingValueTypes, apiKeyStatuses, apiKeyProfiles, eventTypes, contentTypes, chatTypes, messageSources, messageTypes, messageStatuses, deliveryStatuses, jobStatuses, providerSchemas, agentProviders, agents, agentRoutes, agentSessions, apiKeys, apiKeyAuditLogs, apiKeysRelations, apiKeyAuditLogsRelations, instances, persons, platformIdentities, conversations, chats, chatParticipants, omniGroups, messages, omniEvents, handoffLogs, accessRules, globalSettings, settingChangeHistory, batchJobs, syncJobTypes, syncJobs, mediaContent, chatIdMappings, pluginStorage, agentProvidersRelations, agentsRelations, instancesRelations, syncJobsRelations, personsRelations, platformIdentitiesRelations, conversationsRelations, chatsRelations, chatParticipantsRelations, messagesRelations, omniEventsRelations, accessRulesRelations, globalSettingsRelations, settingChangeHistoryRelations, batchJobsRelations, mediaContentRelations, chatIdMappingsRelations, deadLetterStatuses, deadLetterEvents, payloadStorageConfig, payloadStages, eventPayloads, webhookSources, conditionOperators, actionTypes, automationDebounceModes, automations2, automationLogStatuses, automationLogs, consumerOffsets, automationsRelations, automationLogsRelations, triggerLogs, triggerLogsRelations, agentRoutesRelations, agentTaskStatuses, agentTasks, agentTasksRelations, turnStatuses, turnActions, turns, turnsRelations, followUpDisarmReasons, chatFollowUpState, chatFollowUpStateRelations, processedEvents;
+var channelTypes, agentTypes, agentSystems, agentEntityTypes, debounceMode, splitDelayMode, replyFilterMode, agentSessionStrategies, ruleTypes, accessModes, settingValueTypes, apiKeyStatuses, apiKeyProfiles, eventTypes, contentTypes, chatTypes, messageSources, messageTypes, messageStatuses, deliveryStatuses, jobStatuses, providerSchemas, agentProviders, agents, agentRoutes, agentSessions, apiKeys, apiKeyAuditLogs, apiKeysRelations, apiKeyAuditLogsRelations, instances, persons, platformIdentities, conversations, chats, chatParticipants, omniGroups, messages, omniEvents, handoffLogs, accessRules, globalSettings, settingChangeHistory, batchJobs, syncJobTypes, syncJobs, mediaContent, chatIdMappings, pluginStorage, agentProvidersRelations, agentsRelations, instancesRelations, syncJobsRelations, personsRelations, platformIdentitiesRelations, conversationsRelations, chatsRelations, chatParticipantsRelations, messagesRelations, omniEventsRelations, accessRulesRelations, globalSettingsRelations, settingChangeHistoryRelations, batchJobsRelations, mediaContentRelations, chatIdMappingsRelations, deadLetterStatuses, deadLetterEvents, payloadStorageConfig, payloadStages, eventPayloads, webhookSources, conditionOperators, actionTypes, automationDebounceModes, automations2, automationLogStatuses, automationLogs, consumerOffsets, automationsRelations, automationLogsRelations, triggerLogs, triggerLogsRelations, agentRoutesRelations, agentTaskStatuses, agentTasks, agentTasksRelations, turnStatuses, turnActions, turns, turnsRelations, followUpDisarmReasons, chatFollowUpState, chatFollowUpStateRelations, processedEvents, genieHosts;
 var init_schema2 = __esm(() => {
   init_events();
   init_drizzle_orm();
@@ -59935,6 +59936,20 @@ var init_schema2 = __esm(() => {
     pk: primaryKey({ columns: [table3.eventId, table3.handler], name: "processed_events_pk" }),
     processedAtIdx: index("processed_events_processed_at_idx").on(table3.processedAt)
   }));
+  genieHosts = pgTable("genie_hosts", {
+    id: uuid("id").primaryKey().defaultRandom(),
+    pubkey: varchar("pubkey", { length: 64 }).notNull().unique(),
+    hostname: varchar("hostname", { length: 255 }).notNull(),
+    capabilities: jsonb("capabilities").notNull().default(sql`'{}'::jsonb`),
+    scopes: text("scopes").array().notNull().default(sql`ARRAY['*']::text[]`),
+    lastSeenAt: timestamp("last_seen_at"),
+    revokedAt: timestamp("revoked_at"),
+    createdAt: timestamp("created_at").notNull().defaultNow(),
+    updatedAt: timestamp("updated_at").notNull().defaultNow()
+  }, (table3) => ({
+    pubkeyUq: index("genie_hosts_pubkey_idx").on(table3.pubkey),
+    activeIdx: index("genie_hosts_active_idx").on(table3.revokedAt)
+  }));
 });
 
 // ../../node_modules/.bun/postgres@3.4.8/node_modules/postgres/src/query.js
@@ -113938,7 +113953,7 @@ import { fileURLToPath } from "url";
 // package.json
 var package_default = {
   name: "@automagik/omni",
-  version: "2.260429.2",
+  version: "2.260429.4",
   description: "LLM-optimized CLI for Omni",
   type: "module",
   bin: {