@automagik/omni 2.260731.2 → 2.260731.3

package/dist/runtime-env.d.ts

@@ -24,8 +24,13 @@
  *      when the stored value is the legacy 5432 default.
  *   4. Always include `OMNI_PACKAGES_DIR` (drift-fix between install.ts and
  *      restart.ts) and honor the dynamic `nodeEnv` / `logLevel` from config.
+ *   5. NEVER derive `OMNI_API_KEY` from the *active* server entry. The
+ *      multi-server registry (`config.servers`) lets an operator point the CLI
+ *      at a remote Omni API; the locally supervised process must keep using the
+ *      LOCAL (`default`) entry, so `cliConfig` must always come from
+ *      `loadLocalRuntimeConfig()` — which is also this module's default.
  */
-import type { Config, ServerConfig } from './config.js';
+import { type Config, type ServerConfig } from './config.js';
 /**
  * Environment object suitable for passing to `runPm2` as `envOverrides`
  * (and onward to the managed omni-api process).
@@ -120,6 +125,10 @@ export declare function resolveDatabaseUrl(serverConfig: ServerConfig): string;
  * `useCanonicalPgserve: false` triggers a one-shot warning surfaced by
  * `omni doctor --fix` (which rewrites the config). The env keys remain
  * in {@link RuntimeEnv} until a future major bumps the env contract.
+ *
+ * `cliConfig` defaults to {@link loadLocalRuntimeConfig} — the LOCAL
+ * (`default`) server entry — so the local process can never inherit a remote
+ * server's API key even if a caller forgets to pass one (see rule 5 above).
  */
-export declare function buildRuntimeEnv(serverConfig: ServerConfig, cliConfig: Config): RuntimeEnv;
+export declare function buildRuntimeEnv(serverConfig: ServerConfig, cliConfig?: Config): RuntimeEnv;
 //# sourceMappingURL=runtime-env.d.ts.map

package/dist/runtime-env.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runtime-env.d.ts","sourceRoot":"","sources":["../src/runtime-env.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAGH,OAAO,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AASxD;;;GAGG;AACH,MAAM,MAAM,UAAU,GAAG;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IAQrB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,gBAAgB,EAAE,MAAM,CAAC;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAQF;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,oBAAoB,OAAoB,CAAC;AAEtD,0EAA0E;AAC1E,OAAO,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAE/D;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,WAAW,GAAE,MAA6B,GAAG,MAAM,CAE3F;AAED;;;;;GAKG;AACH,wBAAgB,+BAA+B,IAAI,MAAM,CAKxD;AAED;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAAC,YAAY,EAAE,YAAY,GAAG,MAAM,CAMrE;AAgBD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,kBAAkB,CAAC,YAAY,EAAE,YAAY,GAAG,MAAM,CAiBrE;AAoBD;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,eAAe,CAAC,YAAY,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,GAAG,UAAU,CA2CzF"}
+{"version":3,"file":"runtime-env.d.ts","sourceRoot":"","sources":["../src/runtime-env.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAGH,OAAO,EAAE,KAAK,MAAM,EAAE,KAAK,YAAY,EAA0B,MAAM,aAAa,CAAC;AASrF;;;GAGG;AACH,MAAM,MAAM,UAAU,GAAG;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IAQrB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,gBAAgB,EAAE,MAAM,CAAC;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAQF;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,oBAAoB,OAAoB,CAAC;AAEtD,0EAA0E;AAC1E,OAAO,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAE/D;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,WAAW,GAAE,MAA6B,GAAG,MAAM,CAE3F;AAED;;;;;GAKG;AACH,wBAAgB,+BAA+B,IAAI,MAAM,CAKxD;AAED;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAAC,YAAY,EAAE,YAAY,GAAG,MAAM,CAMrE;AAgBD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,kBAAkB,CAAC,YAAY,EAAE,YAAY,GAAG,MAAM,CAiBrE;AAoBD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,eAAe,CAAC,YAAY,EAAE,YAAY,EAAE,SAAS,GAAE,MAAiC,GAAG,UAAU,CA2CpH"}

package/dist/server/index.js

@@ -241330,7 +241330,7 @@ var init_sentry_scrub = __esm(() => {
 var require_package7 = __commonJS((exports, module) => {
   module.exports = {
     name: "@omni/api",
-    version: "2.260731.2",
+    version: "2.260731.3",
     type: "module",
     exports: {
       ".": {
@@ -350216,6 +350216,13 @@ async function shouldProcessMessage3(agentRunner, accessService, chatsService, m
     log104.debug("Message from self, skipping", { instanceId: metadata.instanceId, from: payload.from });
     return null;
   }
+  if (payload.content?.type === "reaction") {
+    log104.debug("Skipping reaction dual-emit on message path (reaction.received owns dispatch)", {
+      instanceId: metadata.instanceId,
+      chatId: payload.chatId
+    });
+    return null;
+  }
   if (isTrashEmojiOnly(payload.content?.text)) {
     log104.debug("Skipping trash emoji message (session-cleaner handles this)", {
       instanceId: metadata.instanceId,

package/dist/signing.d.ts

@@ -23,11 +23,47 @@
  * See those files for the full spec.
  */
 import { type KeyObject } from 'node:crypto';
+/**
+ * One server this keypair is registered with, and the host id THAT server
+ * issued for it.
+ *
+ * The id is per-server: each omni instance mints its own row (its own UUID)
+ * when the pubkey is handshaken there. Carrying a single id across servers
+ * makes every request to the other servers 401 "unknown host", which is why
+ * bindings are (url, hostId) pairs rather than bare urls.
+ */
+export interface ServerBinding {
+    url: string;
+    hostId: string;
+}
 export interface OmniHostMetadata {
+    /**
+     * The host id issued by the FIRST server this keypair was registered with.
+     * Kept as the legacy/default id (older CLIs read only this field, and
+     * {@link loadSigningContext} still uses it); never overwritten by binding an
+     * additional server — only a `--rotate` handshake replaces it.
+     */
     hostId: string;
     pubkey: string;
     hostname: string;
     registeredAt: string;
+    /**
+     * Servers this keypair is registered with, each with the host id that server
+     * issued. URLs are normalized by {@link normalizeServerUrl}.
+     *
+     * A handshake registers the pubkey with ONE server; other servers in the
+     * registry have never seen it, so signing headers sent to them are at best
+     * ignored and at worst rejected. Requests therefore carry X-Genie-* headers
+     * only for bound servers — everything else goes bearer-only.
+     *
+     * Legacy shapes are coerced on load (see {@link loadHostMetadata}):
+     *   - ABSENT (host.json written before multi-server support) → bound to the
+     *     local `default` entry, the only server those installs could have
+     *     handshaken against, with the top-level `hostId`.
+     *   - `string[]` (written before per-server ids) → each url paired with the
+     *     top-level `hostId`.
+     */
+    boundServers?: ServerBinding[];
 }
 export interface SigningHeaders {
     'X-Genie-Host-Id': string;
@@ -65,11 +101,43 @@ export declare function signRequest(opts: {
     body: string;
     now?: Date;
 }): SigningHeaders;
+/**
+ * Canonical form of a server base URL for binding comparisons: trimmed, with
+ * trailing slashes removed. Deliberately conservative — host casing and port
+ * are left alone so `localhost` and `127.0.0.1` stay distinct entries.
+ */
+export declare function normalizeServerUrl(url: string): string;
+/**
+ * Read `~/.omni/keys/host.json`, or null when this CLI has never handshaken.
+ *
+ * Requires the private key to exist too: metadata without a key cannot sign,
+ * and treating that state as "handshook" would make every caller fail later
+ * with a confusing crypto error instead of falling back to bearer-only.
+ */
+export declare function loadHostMetadata(): OmniHostMetadata | null;
+/** Bindings of loaded metadata — always populated by {@link loadHostMetadata}. */
+export declare function boundServerBindings(meta: OmniHostMetadata): ServerBinding[];
+/** Base URLs of the servers this keypair is registered with. */
+export declare function boundServerUrls(meta: OmniHostMetadata): string[];
+/** The binding for `url`, or undefined when that server has never seen this key. */
+export declare function bindingForServer(meta: OmniHostMetadata, url: string): ServerBinding | undefined;
+/**
+ * Signing context for a specific target server, or null when requests to that
+ * server must go out unsigned (no keypair at all, or a keypair the target
+ * server has never seen).
+ *
+ * Uses the host id THAT server issued — not the top-level one, which belongs to
+ * whichever server was handshaken first.
+ */
+export declare function loadSigningContextForServer(url: string): SigningContext | null;
 /**
  * Load the operator's signing context from `~/.omni/keys/`. Returns null
  * when no keypair is present (the CLI then continues bearer-only — same
  * behavior as before this module existed).
  *
+ * Ignores server binding — callers that put headers on the wire should use
+ * {@link loadSigningContextForServer} instead.
+ *
  * Errors loading an existing keypair (file unreadable, malformed JSON,
  * etc.) bubble up — silently falling back to bearer would mask a key
  * file that was tampered with or partially written.

package/dist/signing.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"signing.d.ts","sourceRoot":"","sources":["../src/signing.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAE,KAAK,SAAS,EAAqE,MAAM,aAAa,CAAC;AAShH,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,cAAc;IAC7B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,mBAAmB,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,cAAc,CAAC;CACzE;AAOD,iBAAS,cAAc,IAAI,MAAM,CAEhC;AAED,iBAAS,aAAa,IAAI,MAAM,CAE/B;AAED,iBAAS,YAAY,IAAI,MAAM,CAE9B;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAG3G;AAED;;;;;;GAMG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,SAAS,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,IAAI,CAAC;CACZ,GAAG,cAAc,CASjB;AAED;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,IAAI,cAAc,GAAG,IAAI,CAa1D;AAED;;;;;;;GAOG;AACH,wBAAgB,uBAAuB,IAAI;IAAE,YAAY,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,SAAS,CAAA;CAAE,CA2BzF;AAED,0DAA0D;AAC1D,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,gBAAgB,GAAG,IAAI,CAM9D;AAED;;;GAGG;AACH,eAAO,MAAM,MAAM;;;;CAIlB,CAAC"}
+{"version":3,"file":"signing.d.ts","sourceRoot":"","sources":["../src/signing.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAE,KAAK,SAAS,EAAqE,MAAM,aAAa,CAAC;AAShH;;;;;;;;GAQG;AACH,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,gBAAgB;IAC/B;;;;;OAKG;IACH,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB;;;;;;;;;;;;;;;OAeG;IACH,YAAY,CAAC,EAAE,aAAa,EAAE,CAAC;CAChC;AAED,MAAM,WAAW,cAAc;IAC7B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,mBAAmB,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,cAAc,CAAC;CACzE;AAOD,iBAAS,cAAc,IAAI,MAAM,CAEhC;AAED,iBAAS,aAAa,IAAI,MAAM,CAE/B;AAED,iBAAS,YAAY,IAAI,MAAM,CAE9B;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAG3G;AAED;;;;;;GAMG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,SAAS,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,IAAI,CAAC;CACZ,GAAG,cAAc,CASjB;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAEtD;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,IAAI,gBAAgB,GAAG,IAAI,CAS1D;AAsBD,kFAAkF;AAClF,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,gBAAgB,GAAG,aAAa,EAAE,CAE3E;AAED,gEAAgE;AAChE,wBAAgB,eAAe,CAAC,IAAI,EAAE,gBAAgB,GAAG,MAAM,EAAE,CAEhE;AAED,oFAAoF;AACpF,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,gBAAgB,EAAE,GAAG,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS,CAG/F;AAED;;;;;;;GAOG;AACH,wBAAgB,2BAA2B,CAAC,GAAG,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI,CAU9E;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,kBAAkB,IAAI,cAAc,GAAG,IAAI,CAM1D;AAYD;;;;;;;GAOG;AACH,wBAAgB,uBAAuB,IAAI;IAAE,YAAY,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,SAAS,CAAA;CAAE,CA2BzF;AAED,0DAA0D;AAC1D,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,gBAAgB,GAAG,IAAI,CAM9D;AAED;;;GAGG;AACH,eAAO,MAAM,MAAM;;;;CAIlB,CAAC"}

package/dist/status.d.ts

@@ -6,10 +6,11 @@
 /**
  * Get inline status string for help display (synchronous).
  *
- * Returns config-based status:
- * - "configured (instance-name)" if API key and instance configured
- * - "configured (no default instance)" if API key but no instance
- * - "not configured" if no API key
+ * Returns config-based status, always naming the server entry it describes —
+ * with a registry of several servers, "configured" alone is ambiguous:
+ * - "server=prod, configured (instance-name)" if API key and instance configured
+ * - "server=prod, configured (no default instance)" if API key but no instance
+ * - "server=prod, not configured" if that entry has no API key
  *
  * Note: For live connection status, use `omni status` command.
  */
@@ -17,7 +18,7 @@ export declare function getInlineStatus(): string;
 /**
  * Get config summary for help footer.
  *
- * Returns: "instance=name, format=human" or similar
+ * Returns: "server=default, instance=name, format=human" or similar
  */
 export declare function getConfigSummary(): string;
 //# sourceMappingURL=status.d.ts.map

package/dist/status.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"status.d.ts","sourceRoot":"","sources":["../src/status.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAcH;;;;;;;;;GASG;AACH,wBAAgB,eAAe,IAAI,MAAM,CAaxC;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,IAAI,MAAM,CAWzC"}
+{"version":3,"file":"status.d.ts","sourceRoot":"","sources":["../src/status.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAcH;;;;;;;;;;GAUG;AACH,wBAAgB,eAAe,IAAI,MAAM,CAcxC;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,IAAI,MAAM,CAYzC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@automagik/omni",
-  "version": "2.260731.2",
+  "version": "2.260731.3",
   "description": "LLM-optimized CLI for Omni",
   "type": "module",
   "bin": {
@@ -50,7 +50,8 @@
     "pdf-parse": "^1.1.1",
     "postgres": "^3.4.5",
     "qrcode-terminal": "^0.12.0",
-    "sharp": "^0.34.5"
+    "sharp": "^0.34.5",
+    "zod": "^3.24.1"
   },
   "devDependencies": {
     "@omni/api": "workspace:*",