@automagik/omni 2.260430.4 → 2.260430.5

package/dist/index.js

@@ -113981,7 +113981,7 @@ import { fileURLToPath } from "url";
 // package.json
 var package_default = {
   name: "@automagik/omni",
-  version: "2.260430.4",
+  version: "2.260430.5",
   description: "LLM-optimized CLI for Omni",
   type: "module",
   bin: {

package/dist/server/index.js

@@ -224556,7 +224556,7 @@ var init_sentry_scrub = __esm(() => {
 var require_package8 = __commonJS((exports, module) => {
   module.exports = {
     name: "@omni/api",
-    version: "2.260430.4",
+    version: "2.260430.5",
     type: "module",
     exports: {
       ".": {
@@ -241417,6 +241417,17 @@ var init_scope_enforcer = __esm(() => {
 });
 
 // ../api/src/middleware/require-signed-instance.ts
+function isUnlockOnlyBody(body) {
+  if (!body || typeof body !== "object" || Array.isArray(body))
+    return false;
+  const obj = body;
+  const keys = Object.keys(obj);
+  if (keys.length !== 1)
+    return false;
+  if (keys[0] !== "requireGenieSignature")
+    return false;
+  return obj.requireGenieSignature === false;
+}
 async function safeReadJsonBody2(c) {
   const method = c.req.method.toUpperCase();
   if (method === "GET" || method === "DELETE" || method === "HEAD" || method === "OPTIONS")
@@ -241462,6 +241473,13 @@ var init_require_signed_instance = __esm(() => {
     if (signedBy) {
       return next();
     }
+    if (method === "PATCH" && isUnlockOnlyBody(body)) {
+      log61.info("allowing unlock-only PATCH on require_genie_signature instance", {
+        instanceId: instance4.id,
+        apiKeyId: c.get("apiKey")?.id
+      });
+      return next();
+    }
     const apiKey = c.get("apiKey");
     log61.warn("rejecting unsigned request to require_genie_signature instance", {
       instanceId: instance4.id,
@@ -241472,7 +241490,7 @@ var init_require_signed_instance = __esm(() => {
     return c.json({
       error: {
         code: "GENIE_SIGNATURE_REQUIRED",
-        message: `Instance ${instance4.id} requires a verified X-Genie-Signature; bearer-only requests are rejected. Sign with \`genie omni handshake\` + per-request signing, or remove the requirement via \`omni instances update ${instance4.id} --no-require-genie-signature\`.`,
+        message: `Instance ${instance4.id} requires a verified X-Genie-Signature; bearer-only requests are rejected. Sign with \`genie omni handshake\` + per-request signing, or unlock with PATCH /api/v2/instances/${instance4.id} body {"requireGenieSignature": false} (always allowed via bearer to prevent operator lockout).`,
         instance: instance4.id
       }
     }, 401);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@automagik/omni",
-  "version": "2.260430.4",
+  "version": "2.260430.5",
   "description": "LLM-optimized CLI for Omni",
   "type": "module",
   "bin": {
@@ -50,15 +50,15 @@
     "qrcode-terminal": "^0.12.0"
   },
   "devDependencies": {
-    "@omni/api": "2.260430.3",
-    "@omni/channel-discord": "2.260430.3",
-    "@omni/channel-gupshup": "2.260430.3",
-    "@omni/channel-sdk": "2.260430.3",
-    "@omni/channel-slack": "2.260430.3",
-    "@omni/channel-telegram": "2.260430.3",
-    "@omni/channel-whatsapp": "2.260430.3",
-    "@omni/core": "2.260430.3",
-    "@omni/sdk": "2.260430.3",
+    "@omni/api": "2.260430.4",
+    "@omni/channel-discord": "2.260430.4",
+    "@omni/channel-gupshup": "2.260430.4",
+    "@omni/channel-sdk": "2.260430.4",
+    "@omni/channel-slack": "2.260430.4",
+    "@omni/channel-telegram": "2.260430.4",
+    "@omni/channel-whatsapp": "2.260430.4",
+    "@omni/core": "2.260430.4",
+    "@omni/sdk": "2.260430.4",
     "@types/node": "^22.10.3",
     "@types/qrcode-terminal": "^0.12.2",
     "typescript": "^5.7.3"