@automagik/omni 2.260617.1 → 2.260617.2

package/dist/index.js

@@ -124971,7 +124971,7 @@ import { fileURLToPath } from "url";
 // package.json
 var package_default = {
   name: "@automagik/omni",
-  version: "2.260617.1",
+  version: "2.260617.2",
   description: "LLM-optimized CLI for Omni",
   type: "module",
   bin: {

package/dist/server/index.js

@@ -225245,7 +225245,7 @@ var init_sentry_scrub = __esm(() => {
 var require_package7 = __commonJS((exports, module) => {
   module.exports = {
     name: "@omni/api",
-    version: "2.260617.1",
+    version: "2.260617.2",
     type: "module",
     exports: {
       ".": {
@@ -285014,18 +285014,23 @@ function readBodyTargets(body) {
     chatId: str(b3.chatId)
   };
 }
-function extractLockTargets(method, rawPath, body) {
+function readHeaderTargets(c) {
+  const norm = (v2) => v2 && v2.length > 0 ? v2 : null;
+  return {
+    instance: norm(c.req.header("x-omni-instance")),
+    chat: norm(c.req.header("x-omni-chat"))
+  };
+}
+function extractLockTargets(method, rawPath, body, headers) {
   const cleanPath2 = normalizePath2(rawPath);
   const { instanceId, to, chatId } = readBodyTargets(body);
-  let instance4 = instanceId;
-  let chat = chatId;
-  let recipient = null;
   const pathInstance = PATH_INSTANCE_PREFIXES.map((p2) => firstPathSegment(cleanPath2, p2)).find((v2) => v2 != null) ?? null;
   const pathChat = PATH_CHAT_PREFIXES.map((p2) => firstPathSegment(cleanPath2, p2)).find((v2) => v2 != null) ?? null;
-  if (!instance4 && pathInstance)
-    instance4 = pathInstance;
-  if (!chat && pathChat)
-    chat = pathChat;
+  const headerInstance = headers?.instance && headers.instance.length > 0 ? headers.instance : null;
+  const headerChat = headers?.chat && headers.chat.length > 0 ? headers.chat : null;
+  const instance4 = pathInstance ?? headerInstance ?? instanceId;
+  let chat = pathChat ?? headerChat ?? chatId;
+  let recipient = null;
   if (isOutboundSendRoute(cleanPath2)) {
     recipient = to;
     if (!chat)
@@ -285135,7 +285140,7 @@ var init_scope_enforcer = __esm(() => {
       }
     }
     const body = await safeReadJsonBody(c);
-    const targets = extractLockTargets(method, path2, body);
+    const targets = extractLockTargets(method, path2, body, readHeaderTargets(c));
     const instanceResult = enforceInstanceAllowlist(apiKey, targets.instance);
     if (!instanceResult.allowed) {
       log59.warn(`DENIED: key=${apiKey.id} route=${method} ${path2} lock=instanceAllowlist attempted=${instanceResult.attempted}`);
@@ -285194,7 +285199,7 @@ var init_require_signed_instance = __esm(() => {
     const method = c.req.method.toUpperCase();
     const path2 = c.req.path;
     const body = await safeReadJsonBody2(c);
-    const targets = extractLockTargets(method, path2, body);
+    const targets = extractLockTargets(method, path2, body, readHeaderTargets(c));
     if (!targets.instance) {
       return next();
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@automagik/omni",
-  "version": "2.260617.1",
+  "version": "2.260617.2",
   "description": "LLM-optimized CLI for Omni",
   "type": "module",
   "bin": {