@automagik/omni 2.260731.3 → 2.260803.2

package/db/drizzle/0046_whatsapp_flow_keys.sql

@@ -0,0 +1,39 @@
+-- WhatsApp Flows data-endpoint encryption keys (whatsapp-flows feature).
+--
+-- One active RSA keypair per instance: the public key is registered with Meta
+-- (POST /{phone_number_id}/whatsapp_business_encryption) and the private key
+-- decrypts inbound flow data-exchange requests. `private_key_pem` is sealed
+-- at rest via sealCredentialField when tenancy + master key are configured
+-- (legacy plaintext otherwise — same codec as instance credential columns).
+-- Rotation replaces the row (unique on instance_id).
+--
+-- Tenancy derives via instance_id (the whatsapp_templates precedent) — no
+-- denormalized tenant_id column, so the table stays outside the RLS
+-- tenant-table manifest by construction.
+--
+-- Hand-written following the 0044/0045 precedent (snapshot drift keeps
+-- drizzle-kit generate interactive). Additive + idempotent statements.
+
+-- NOTE: no explicit BEGIN/COMMIT — the boot migrator executes this file on a
+-- pooled postgres-js connection, which rejects raw transaction control
+-- (UNSAFE_TRANSACTION).
+
+CREATE TABLE IF NOT EXISTS "whatsapp_flow_keys" (
+  "id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
+  "instance_id" uuid NOT NULL,
+  "private_key_pem" text NOT NULL,
+  "public_key_pem" text NOT NULL,
+  "uploaded_at" timestamp with time zone,
+  "created_at" timestamp with time zone DEFAULT now() NOT NULL,
+  "updated_at" timestamp with time zone DEFAULT now() NOT NULL
+);
+
+DO $$ BEGIN
+  ALTER TABLE "whatsapp_flow_keys"
+    ADD CONSTRAINT "whatsapp_flow_keys_instance_id_instances_id_fk"
+    FOREIGN KEY ("instance_id") REFERENCES "instances"("id") ON DELETE cascade;
+EXCEPTION WHEN duplicate_object THEN NULL;
+END $$;
+
+CREATE UNIQUE INDEX IF NOT EXISTS "idx_wa_flow_keys_instance"
+  ON "whatsapp_flow_keys" ("instance_id");

package/db/drizzle/meta/_journal.json

@@ -323,6 +323,13 @@
       "when": 1784500000000,
       "tag": "0045_agent_error_messages_list",
       "breakpoints": true
+    },
+    {
+      "idx": 46,
+      "version": "7",
+      "when": 1784600000000,
+      "tag": "0046_whatsapp_flow_keys",
+      "breakpoints": true
     }
   ]
 }

package/dist/index.js

@@ -12340,7 +12340,8 @@ var init_types3 = __esm(() => {
     "voice.user_joined_channel",
     "voice.user_left_channel",
     "template.status_changed",
-    "channel.alert"
+    "channel.alert",
+    "flow.data_exchange"
   ];
 });
 // ../core/src/events/envelope.ts
@@ -30386,6 +30387,9 @@ function getStreamForEventType(eventType) {
     presence: STREAM_NAMES.SYSTEM,
     chat: STREAM_NAMES.SYSTEM,
     follow_up: STREAM_NAMES.SYSTEM,
+    flow: STREAM_NAMES.SYSTEM,
+    template: STREAM_NAMES.SYSTEM,
+    channel: STREAM_NAMES.SYSTEM,
     agent: STREAM_NAMES.AGENT
   };
   return prefixToStream[prefix] ?? STREAM_NAMES.CUSTOM;
@@ -30525,11 +30529,21 @@ var init_streams = __esm(() => {
     },
     [STREAM_NAMES.SYSTEM]: {
       name: STREAM_NAMES.SYSTEM,
-      subjects: ["system.>", "sync.>", "batch-job.>", "presence.>", "chat.>", "follow_up.>"],
+      subjects: [
+        "system.>",
+        "sync.>",
+        "batch-job.>",
+        "presence.>",
+        "chat.>",
+        "follow_up.>",
+        "flow.>",
+        "template.>",
+        "channel.>"
+      ],
       max_age: daysToNs(7),
       storage: NATS_STORAGE_FILE,
       retention: NATS_RETENTION_LIMITS,
-      description: "Internal system events (dead_letter, replay, health, sync, batch-job, presence, chat, follow_up)"
+      description: "Internal system events (dead_letter, replay, health, sync, batch-job, presence, chat, follow_up, flow, template, channel)"
     },
     [STREAM_NAMES.AGENT]: {
       name: STREAM_NAMES.AGENT,
@@ -32332,8 +32346,14 @@ var init_message = __esm(() => {
       buttons: exports_external.array(exports_external.object({
         text: exports_external.string(),
         data: exports_external.string().optional(),
-        url: exports_external.string().url().optional()
+        url: exports_external.string().url().optional(),
+        description: exports_external.string().optional()
       })).optional(),
+      list: exports_external.object({
+        sectionTitle: exports_external.string().optional(),
+        buttonLabel: exports_external.string().optional(),
+        forceList: exports_external.boolean().optional()
+      }).optional(),
       poll: exports_external.object({
         question: exports_external.string(),
         options: exports_external.array(exports_external.string()).min(2),
@@ -32683,7 +32703,8 @@ var init_whatsapp_cloud = __esm(() => {
     screen: exports_external.string().optional(),
     data: exports_external.record(exports_external.string(), exports_external.unknown()).optional(),
     flowToken: exports_external.string().optional(),
-    draft: exports_external.boolean().optional()
+    draft: exports_external.boolean().optional(),
+    flowAction: exports_external.enum(["navigate", "data_exchange"]).optional()
   }).refine((v) => Boolean(v.flowId) !== Boolean(v.flowName), {
     message: "Provide exactly one of flowId or flowName",
     path: ["flowId"]
@@ -32704,6 +32725,179 @@ var init_whatsapp_cloud = __esm(() => {
   });
 });
 
+// ../core/src/schemas/whatsapp-flows.ts
+function addIssue(ctx, path, message) {
+  ctx.addIssue({ code: exports_external.ZodIssueCode.custom, path, message });
+}
+function checkScreenIdentity(flow, idSet, ctx) {
+  if (idSet.size !== flow.screens.length) {
+    addIssue(ctx, ["screens"], "screen ids must be unique");
+  }
+  if (!flow.screens.some((s) => s.terminal === true)) {
+    addIssue(ctx, ["screens"], "at least one screen must set terminal: true");
+  }
+}
+function checkRoutingModel(flow, idSet, ctx) {
+  for (const [from, targets] of Object.entries(flow.routing_model ?? {})) {
+    if (!idSet.has(from)) {
+      addIssue(ctx, ["routing_model", from], `routing_model references unknown screen '${from}'`);
+    }
+    for (const target of targets) {
+      if (!idSet.has(target)) {
+        addIssue(ctx, ["routing_model", from], `routing_model routes '${from}' to unknown screen '${target}'`);
+      }
+    }
+  }
+}
+function checkRichTextIsolation(screen, screenIdx, ctx) {
+  const children = screen.layout.children;
+  const hasRichText = children.some((c2) => c2.type === "RichText");
+  if (hasRichText && children.some((c2) => c2.type !== "RichText" && c2.type !== "Footer")) {
+    addIssue(ctx, ["screens", screenIdx, "layout", "children"], `screen '${screen.id}': RichText must be the only component on the screen (Footer excepted)`);
+  }
+}
+function checkNavigateTargets(node, path, screen, screenIdx, idSet, ctx) {
+  if (Array.isArray(node)) {
+    node.forEach((child, i) => checkNavigateTargets(child, [...path, i], screen, screenIdx, idSet, ctx));
+    return;
+  }
+  if (node === null || typeof node !== "object")
+    return;
+  const obj = node;
+  const action = obj["on-click-action"];
+  if (action?.name === "navigate") {
+    const next = action.next;
+    if (next?.type === "screen" && typeof next.name === "string" && !idSet.has(next.name)) {
+      addIssue(ctx, ["screens", screenIdx, ...path], `screen '${screen.id}': navigate targets unknown screen '${next.name}'`);
+    }
+  }
+  for (const [key, value] of Object.entries(obj)) {
+    if (typeof value === "object" && value !== null) {
+      checkNavigateTargets(value, [...path, key], screen, screenIdx, idSet, ctx);
+    }
+  }
+}
+function validateFlowJson(flowJson, opts = {}) {
+  let doc = flowJson;
+  if (typeof flowJson === "string") {
+    try {
+      doc = JSON.parse(flowJson);
+    } catch {
+      return { valid: false, issues: [{ path: "", message: "flowJson is not valid JSON" }] };
+    }
+  }
+  const parsed = FlowJsonSchema.safeParse(doc);
+  const issues = parsed.success ? [] : parsed.error.issues.map((issue) => ({ path: issue.path.join("."), message: issue.message }));
+  const hasDataApiVersion = typeof doc === "object" && doc !== null && "data_api_version" in doc;
+  if (opts.dynamic && !hasDataApiVersion) {
+    issues.push({
+      path: "data_api_version",
+      message: "dynamic (endpoint-backed) flows must set data_api_version: '3.0'"
+    });
+  }
+  if (!opts.dynamic && hasDataApiVersion) {
+    issues.push({
+      path: "data_api_version",
+      message: "data_api_version is set but the flow is not dynamic \u2014 without a registered endpoint_uri the flow fails on open ('an error occurred'). Remove it or create/update the flow with dynamic: true"
+    });
+  }
+  return { valid: issues.length === 0, issues };
+}
+var FlowActionSchema, dataSourceEntry, FlowComponentSchema, FlowScreenSchema, FlowJsonSchema;
+var init_whatsapp_flows = __esm(() => {
+  init_zod();
+  FlowActionSchema = exports_external.object({
+    name: exports_external.enum(["navigate", "complete", "data_exchange", "open_url", "update_data"]),
+    next: exports_external.object({
+      type: exports_external.enum(["screen", "plugin"]),
+      name: exports_external.string().min(1)
+    }).optional(),
+    payload: exports_external.record(exports_external.string(), exports_external.unknown()).optional(),
+    url: exports_external.string().optional()
+  }).passthrough();
+  dataSourceEntry = exports_external.object({
+    id: exports_external.string().min(1),
+    title: exports_external.string().min(1)
+  }).passthrough();
+  FlowComponentSchema = exports_external.lazy(() => exports_external.union([
+    exports_external.object({
+      type: exports_external.literal("RichText"),
+      text: exports_external.string().min(1)
+    }).passthrough(),
+    exports_external.object({
+      type: exports_external.literal("Image"),
+      src: exports_external.string().min(1),
+      height: exports_external.number().int().positive().optional()
+    }).passthrough(),
+    exports_external.object({
+      type: exports_external.literal("Footer"),
+      label: exports_external.string().min(1),
+      "on-click-action": FlowActionSchema
+    }).passthrough(),
+    exports_external.object({
+      type: exports_external.literal("Form"),
+      name: exports_external.string().min(1),
+      children: exports_external.array(FlowComponentSchema)
+    }).passthrough(),
+    exports_external.object({
+      type: exports_external.enum(["Dropdown", "RadioButtonsGroup", "CheckboxGroup", "ChipsSelector"]),
+      name: exports_external.string().min(1),
+      "data-source": exports_external.array(dataSourceEntry).min(1)
+    }).passthrough(),
+    exports_external.object({
+      type: exports_external.enum(["TextInput", "TextArea", "DatePicker", "OptIn"]),
+      name: exports_external.string().min(1)
+    }).passthrough(),
+    exports_external.object({
+      type: exports_external.enum(["TextHeading", "TextSubheading", "TextBody", "TextCaption"]),
+      text: exports_external.string().min(1)
+    }).passthrough(),
+    exports_external.object({ type: exports_external.string().min(1) }).passthrough().refine((c2) => ![
+      "RichText",
+      "Image",
+      "Footer",
+      "Form",
+      "Dropdown",
+      "RadioButtonsGroup",
+      "CheckboxGroup",
+      "ChipsSelector",
+      "TextInput",
+      "TextArea",
+      "DatePicker",
+      "OptIn",
+      "TextHeading",
+      "TextSubheading",
+      "TextBody",
+      "TextCaption"
+    ].includes(c2.type), { message: "known component failed its specific shape" })
+  ]));
+  FlowScreenSchema = exports_external.object({
+    id: exports_external.string().min(1),
+    title: exports_external.string().optional(),
+    terminal: exports_external.boolean().optional(),
+    data: exports_external.record(exports_external.string(), exports_external.unknown()).optional(),
+    refresh_on_back: exports_external.boolean().optional(),
+    layout: exports_external.object({
+      type: exports_external.literal("SingleColumnLayout"),
+      children: exports_external.array(FlowComponentSchema)
+    }).passthrough()
+  }).passthrough();
+  FlowJsonSchema = exports_external.object({
+    version: exports_external.string().min(1),
+    data_api_version: exports_external.literal("3.0").optional(),
+    routing_model: exports_external.record(exports_external.string(), exports_external.array(exports_external.string())).optional(),
+    screens: exports_external.array(FlowScreenSchema).min(1)
+  }).passthrough().superRefine((flow, ctx) => {
+    const idSet = new Set(flow.screens.map((s) => s.id));
+    checkScreenIdentity(flow, idSet, ctx);
+    checkRoutingModel(flow, idSet, ctx);
+    flow.screens.forEach((screen, screenIdx) => {
+      checkRichTextIsolation(screen, screenIdx, ctx);
+      checkNavigateTargets(screen.layout.children, ["layout", "children"], screen, screenIdx, idSet, ctx);
+    });
+  });
+});
+
 // ../core/src/schemas/hermes.ts
 var HermesContactSchema, HermesWebhookPayloadSchema;
 var init_hermes = __esm(() => {
@@ -32736,6 +32930,7 @@ var init_schemas = __esm(() => {
   init_message();
   init_person();
   init_whatsapp_cloud();
+  init_whatsapp_flows();
   init_hermes();
 });
 
@@ -67155,12 +67350,67 @@ var init_hooks = __esm(() => {
   init_executor();
 });
 
+// ../core/src/markdown-to-whatsapp.ts
+function replaceWithTokens(input, regex2, formatter2, tokenPrefix) {
+  const tokens = [];
+  const text = input.replace(regex2, (match, ...rest) => {
+    const token = `${tokenPrefix}${tokens.length}__`;
+    const execMatch = Object.assign([match], {
+      0: match,
+      index: 0,
+      input,
+      groups: undefined
+    });
+    for (let g11 = 0;g11 < rest.length - 2; g11++) {
+      execMatch[g11 + 1] = rest[g11];
+    }
+    tokens.push(formatter2(execMatch, tokens.length));
+    return token;
+  });
+  return { text, tokens };
+}
+function restoreTokens(input, tokens, tokenPrefix) {
+  let result = input;
+  for (let i6 = 0;i6 < tokens.length; i6 += 1) {
+    result = result.replace(`${tokenPrefix}${i6}__`, tokens[i6] ?? "");
+  }
+  return result;
+}
+function convertHeaders(input) {
+  return input.replace(/^(#{1,6})\s+(.+)$/gm, (_full, _hashes, content) => `**${content.trim()}**`);
+}
+function convertLinks(input) {
+  return input.replace(/\[([^\]]+)\]\((https?:\/\/[^\s)]+)\)/g, "$1: $2");
+}
+function convertEmphasis(input) {
+  const boldTokenPrefix = "__WA_BOLD_";
+  const tripleTokenPrefix = "__WA_TRIPLE_";
+  const triple = replaceWithTokens(input, /\*\*\*([^*\n]+?)\*\*\*/g, (match) => `*_${match[1]}_*`, tripleTokenPrefix);
+  const bold = replaceWithTokens(triple.text, /\*\*([^*\n]+?)\*\*/g, (match) => `*${match[1]}*`, boldTokenPrefix);
+  const converted = bold.text.replace(/~~~([\s\S]+?)~~~/g, "~$1~").replace(/~~([\s\S]+?)~~/g, "~$1~").replace(/(^|[^*])\*([^*\n]+?)\*(?!\*)/g, "$1_$2_");
+  const withBold = restoreTokens(converted, bold.tokens, boldTokenPrefix);
+  return restoreTokens(withBold, triple.tokens, tripleTokenPrefix);
+}
+function markdownToWhatsApp(markdown) {
+  const fenced = replaceWithTokens(markdown, /```([^\n`]*)\n([\s\S]*?)```/g, (match) => {
+    const code = match[2] ?? "";
+    return `\`\`\`
+${code}\`\`\``;
+  }, CODE_BLOCK_TOKEN_PREFIX);
+  const inline = replaceWithTokens(fenced.text, /`([^`\n]+?)`/g, (match) => `\`${match[1]}\``, INLINE_CODE_TOKEN_PREFIX);
+  const converted = convertEmphasis(convertLinks(convertHeaders(inline.text)));
+  const withInline = restoreTokens(converted, inline.tokens, INLINE_CODE_TOKEN_PREFIX);
+  return restoreTokens(withInline, fenced.tokens, CODE_BLOCK_TOKEN_PREFIX);
+}
+var CODE_BLOCK_TOKEN_PREFIX = "__WA_CODE_BLOCK_", INLINE_CODE_TOKEN_PREFIX = "__WA_INLINE_CODE_";
+
 // ../core/src/index.ts
 var exports_src = {};
 __export(exports_src, {
   wrapError: () => wrapError,
   withTiming: () => withTiming,
   validateReplayOptions: () => validateReplayOptions,
+  validateFlowJson: () => validateFlowJson,
   updateSystemMetrics: () => updateSystemMetrics,
   updateOpenClawWsState: () => updateOpenClawWsState,
   updateOpenClawCircuitBreaker: () => updateOpenClawCircuitBreaker,
@@ -67231,6 +67481,7 @@ __export(exports_src, {
   natsMessagesPublished: () => natsMessagesPublished,
   natsConnectionStatus: () => natsConnectionStatus,
   matchesPattern: () => matchesPattern,
+  markdownToWhatsApp: () => markdownToWhatsApp,
   isValidUuid: () => isValidUuid,
   isTenantSecretSealingEnabled: () => isTenantSecretSealingEnabled,
   isSystemEvent: () => isSystemEvent,
@@ -67450,6 +67701,10 @@ __export(exports_src, {
   GuildConfigAuditEntrySchema: () => GuildConfigAuditEntrySchema,
   FollowUpSequenceConfigSchema: () => FollowUpSequenceConfigSchema,
   FollowUpScheduleSchema: () => FollowUpScheduleSchema,
+  FlowScreenSchema: () => FlowScreenSchema,
+  FlowJsonSchema: () => FlowJsonSchema,
+  FlowComponentSchema: () => FlowComponentSchema,
+  FlowActionSchema: () => FlowActionSchema,
   FixedScheduleSchema: () => FixedScheduleSchema,
   ExponentialScheduleSchema: () => ExponentialScheduleSchema,
   EventValidationError: () => ValidationError,
@@ -72822,6 +73077,7 @@ var init_pg_core = __esm(() => {
 var exports_schema = {};
 __export(exports_schema, {
   whatsappTemplates: () => whatsappTemplates,
+  whatsappFlowKeys: () => whatsappFlowKeys,
   webhookSources: () => webhookSources,
   turnsRelations: () => turnsRelations,
   turns: () => turns,
@@ -72951,7 +73207,7 @@ __export(exports_schema, {
   accessRules: () => accessRules,
   accessModes: () => accessModes
 });
-var channelTypes, agentTypes, agentSystems, agentEntityTypes, debounceMode, splitDelayMode, supersedeMode, replyFilterMode, agentSessionStrategies, ruleTypes, accessModes, settingValueTypes, apiKeyStatuses, apiKeyProfiles, eventTypes, contentTypes, chatTypes, messageSources, messageTypes, messageStatuses, deliveryStatuses, jobStatuses, providerSchemas, agentProviders, agents, agentRoutes, agentSessions, apiKeys, apiKeyAuditLogs, apiKeysRelations, apiKeyAuditLogsRelations, instances, whatsappTemplates, persons, platformIdentities, conversations, chats, chatParticipants, omniGroups, messages2, omniEvents, handoffLogs, closeContactOutcomes, closeContactLogs, accessRules, globalSettings, settingChangeHistory, batchJobs, syncJobTypes, syncJobs, mediaContent, chatIdMappings, pluginStorage, agentProvidersRelations, agentsRelations, instancesRelations, syncJobsRelations, personsRelations, platformIdentitiesRelations, conversationsRelations, chatsRelations, chatParticipantsRelations, messagesRelations, omniEventsRelations, accessRulesRelations, globalSettingsRelations, settingChangeHistoryRelations, batchJobsRelations, mediaContentRelations, chatIdMappingsRelations, deadLetterStatuses, deadLetterEvents, payloadStorageConfig, payloadStages, eventPayloads, webhookSources, conditionOperators, actionTypes, automationDebounceModes, automations2, automationLogStatuses, automationLogs, consumerOffsets, automationsRelations, automationLogsRelations, triggerLogs, triggerLogsRelations, agentRoutesRelations, agentTaskStatuses, agentTasks, agentTasksRelations, turnStatuses, turnActions, turns, turnsRelations, followUpDisarmReasons, chatFollowUpState, chatFollowUpStateRelations, processedEvents, genieHosts, tenantStatuses, principalTypes, principalStatuses, tenantRoles, membershipStatuses, credentialClasses, authCredentialStatuses, platformApiKeyStatuses, tenants, principals, tenantMemberships, tenantRolePolicies, platformApiKeys, tenantKeyLineage, authCredentials, tenantAuditLogs, platformAuditLogs, platformProviderCatalog, tenantProviderConfig, platformSettings, tenantSettings, platformSettingChangeHistory, tenantSettingChangeHistory, platformPluginStorage, tenantPluginStorage, platformPayloadStorageConfig, tenantPayloadStorageOverrides, tenantMigrationLedger, tenantMigrationLedgerHistory;
+var channelTypes, agentTypes, agentSystems, agentEntityTypes, debounceMode, splitDelayMode, supersedeMode, replyFilterMode, agentSessionStrategies, ruleTypes, accessModes, settingValueTypes, apiKeyStatuses, apiKeyProfiles, eventTypes, contentTypes, chatTypes, messageSources, messageTypes, messageStatuses, deliveryStatuses, jobStatuses, providerSchemas, agentProviders, agents, agentRoutes, agentSessions, apiKeys, apiKeyAuditLogs, apiKeysRelations, apiKeyAuditLogsRelations, instances, whatsappTemplates, whatsappFlowKeys, persons, platformIdentities, conversations, chats, chatParticipants, omniGroups, messages2, omniEvents, handoffLogs, closeContactOutcomes, closeContactLogs, accessRules, globalSettings, settingChangeHistory, batchJobs, syncJobTypes, syncJobs, mediaContent, chatIdMappings, pluginStorage, agentProvidersRelations, agentsRelations, instancesRelations, syncJobsRelations, personsRelations, platformIdentitiesRelations, conversationsRelations, chatsRelations, chatParticipantsRelations, messagesRelations, omniEventsRelations, accessRulesRelations, globalSettingsRelations, settingChangeHistoryRelations, batchJobsRelations, mediaContentRelations, chatIdMappingsRelations, deadLetterStatuses, deadLetterEvents, payloadStorageConfig, payloadStages, eventPayloads, webhookSources, conditionOperators, actionTypes, automationDebounceModes, automations2, automationLogStatuses, automationLogs, consumerOffsets, automationsRelations, automationLogsRelations, triggerLogs, triggerLogsRelations, agentRoutesRelations, agentTaskStatuses, agentTasks, agentTasksRelations, turnStatuses, turnActions, turns, turnsRelations, followUpDisarmReasons, chatFollowUpState, chatFollowUpStateRelations, processedEvents, genieHosts, tenantStatuses, principalTypes, principalStatuses, tenantRoles, membershipStatuses, credentialClasses, authCredentialStatuses, platformApiKeyStatuses, tenants, principals, tenantMemberships, tenantRolePolicies, platformApiKeys, tenantKeyLineage, authCredentials, tenantAuditLogs, platformAuditLogs, platformProviderCatalog, tenantProviderConfig, platformSettings, tenantSettings, platformSettingChangeHistory, tenantSettingChangeHistory, platformPluginStorage, tenantPluginStorage, platformPayloadStorageConfig, tenantPayloadStorageOverrides, tenantMigrationLedger, tenantMigrationLedgerHistory;
 var init_schema2 = __esm(() => {
   init_events();
   init_types5();
@@ -73361,6 +73617,17 @@ var init_schema2 = __esm(() => {
     instanceNameLangUnique: uniqueIndex("idx_wa_tpl_instance_name_lang").on(t.instanceId, t.name, t.language),
     statusIdx: index("idx_wa_tpl_status").on(t.status)
   }));
+  whatsappFlowKeys = pgTable("whatsapp_flow_keys", {
+    id: uuid("id").primaryKey().defaultRandom(),
+    instanceId: uuid("instance_id").notNull().references(() => instances.id, { onDelete: "cascade" }),
+    privateKeyPem: text("private_key_pem").notNull(),
+    publicKeyPem: text("public_key_pem").notNull(),
+    uploadedAt: timestamp("uploaded_at", { withTimezone: true }),
+    createdAt: timestamp("created_at", { withTimezone: true }).notNull().defaultNow(),
+    updatedAt: timestamp("updated_at", { withTimezone: true }).notNull().defaultNow()
+  }, (t) => ({
+    instanceUnique: uniqueIndex("idx_wa_flow_keys_instance").on(t.instanceId)
+  }));
   persons = pgTable("persons", {
     id: uuid("id").primaryKey().defaultRandom(),
     displayName: varchar("display_name", { length: 255 }),
@@ -127882,7 +128149,7 @@ import { fileURLToPath } from "url";
 // package.json
 var package_default = {
   name: "@automagik/omni",
-  version: "2.260731.3",
+  version: "2.260803.2",
   description: "LLM-optimized CLI for Omni",
   type: "module",
   bin: {

package/dist/sdk/flow-builder.d.ts

@@ -0,0 +1,125 @@
+/**
+ * Fluent WhatsApp Flow JSON builder.
+ *
+ * Hand-authored (not generated): produces Meta Flow JSON v6.x for the
+ * whatsapp-flows routes (`POST /instances/{id}/whatsapp-flows` with the
+ * built `flowJson`). `build()` enforces the structural rules Meta reports
+ * late (or not at all) so mistakes fail at authoring time:
+ *
+ *   - RichText must be alone on its screen (Footer excepted)
+ *   - navigate targets must be declared screens
+ *   - at least one terminal screen
+ *   - `dynamic` flows get `data_api_version: '3.0'`; static flows must not
+ *     carry it (an endpoint-less data_api_version flow errors on open)
+ *
+ * The API re-validates server-side with the authoritative schema — this
+ * builder exists so you rarely get that far with an invalid document.
+ *
+ * @example
+ * ```typescript
+ * const { flowJson } = flow({ version: '6.3' })
+ *   .screen('INTRO', { title: 'Welcome' }, (s) => {
+ *     s.image(base64Png, { height: 240 });
+ *     s.heading('Hello!');
+ *     s.footerNavigate('Start', 'FORM');
+ *   })
+ *   .screen('FORM', { title: 'About you', terminal: true }, (s) => {
+ *     s.form('form', (f) => {
+ *       f.textInput('name', 'Your name', { required: true });
+ *       f.dropdown('channel', 'Favorite channel', [{ id: 'wa', title: 'WhatsApp' }]);
+ *       f.footerComplete('Submit', { name: '${form.name}', channel: '${form.channel}' });
+ *     });
+ *   })
+ *   .build();
+ * ```
+ */
+export type FlowComponent = Record<string, unknown>;
+export interface DataSourceItem {
+    id: string;
+    title: string;
+}
+export interface ScreenOptions {
+    title?: string;
+    terminal?: boolean;
+    /** Dynamic-flow screens: declared data contract for endpoint-provided values. */
+    data?: Record<string, unknown>;
+    /** Call the data endpoint with BACK when the user navigates back here. */
+    refreshOnBack?: boolean;
+}
+export interface FlowOptions {
+    /** Flow JSON version. Default '6.3'. */
+    version?: string;
+    /** Endpoint-backed flow: emits data_api_version '3.0'. Pair with the route's `dynamic: true`. */
+    dynamic?: boolean;
+}
+export declare class FlowBuilderError extends Error {
+    constructor(message: string);
+}
+interface InputOptions {
+    required?: boolean;
+    [key: string]: unknown;
+}
+/** Builds the component list of one Form. */
+export declare class FormBuilder {
+    readonly components: FlowComponent[];
+    private footerSet;
+    textInput(name: string, label: string, opts?: InputOptions & {
+        inputType?: string;
+    }): this;
+    textArea(name: string, label: string, opts?: InputOptions): this;
+    datePicker(name: string, label: string, opts?: InputOptions): this;
+    optIn(name: string, label: string, opts?: InputOptions): this;
+    dropdown(name: string, label: string, dataSource: DataSourceItem[], opts?: InputOptions): this;
+    radioButtons(name: string, label: string, dataSource: DataSourceItem[], opts?: InputOptions): this;
+    checkboxGroup(name: string, label: string, dataSource: DataSourceItem[], opts?: InputOptions): this;
+    /** Terminal submit: completes the flow, `payload` reaches the nfm_reply webhook. */
+    footerComplete(label: string, payload: Record<string, unknown>): this;
+    /** Submit this screen to the data endpoint (dynamic flows) — it decides what's next. */
+    footerDataExchange(label: string, payload?: Record<string, unknown>): this;
+    footerNavigate(label: string, nextScreen: string, payload?: Record<string, unknown>): this;
+    /** Escape hatch for components the builder doesn't model. */
+    raw(component: FlowComponent): this;
+    private footer;
+}
+export declare class ScreenBuilder {
+    readonly id: string;
+    readonly components: FlowComponent[];
+    constructor(id: string);
+    heading(text: string): this;
+    subheading(text: string): this;
+    body(text: string): this;
+    caption(text: string): this;
+    /**
+     * Markdown-ish rich text. Meta requires RichText to be ALONE on its screen
+     * (Footer excepted) and `text` to be a single string — both enforced at build.
+     */
+    richText(text: string): this;
+    /** `src` is base64-encoded image bytes (not a URL). */
+    image(src: string, opts?: {
+        height?: number;
+        scaleType?: 'cover' | 'contain';
+        altText?: string;
+    }): this;
+    form(name: string, define: (form: FormBuilder) => void): this;
+    footerNavigate(label: string, nextScreen: string, payload?: Record<string, unknown>): this;
+    footerComplete(label: string, payload: Record<string, unknown>): this;
+    footerDataExchange(label: string, payload?: Record<string, unknown>): this;
+    /** Escape hatch for components the builder doesn't model. */
+    raw(component: FlowComponent): this;
+}
+export declare class FlowBuilder {
+    private readonly options;
+    private readonly screens;
+    constructor(options?: FlowOptions);
+    screen(id: string, options: ScreenOptions, define: (screen: ScreenBuilder) => void): this;
+    screen(id: string, define: (screen: ScreenBuilder) => void): this;
+    /** Validate and produce the document + its stringified form for the API. */
+    build(): {
+        json: Record<string, unknown>;
+        flowJson: string;
+    };
+}
+/** Entry point: `flow().screen(...).build()`. */
+export declare function flow(options?: FlowOptions): FlowBuilder;
+export {};
+//# sourceMappingURL=flow-builder.d.ts.map

package/dist/sdk/flow-builder.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"flow-builder.d.ts","sourceRoot":"","sources":["../src/flow-builder.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAEH,MAAM,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAEpD,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,aAAa;IAC5B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,iFAAiF;IACjF,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,0EAA0E;IAC1E,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED,MAAM,WAAW,WAAW;IAC1B,wCAAwC;IACxC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,iGAAiG;IACjG,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,qBAAa,gBAAiB,SAAQ,KAAK;gBAC7B,OAAO,EAAE,MAAM;CAI5B;AAED,UAAU,YAAY;IACpB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,6CAA6C;AAC7C,qBAAa,WAAW;IACtB,QAAQ,CAAC,UAAU,EAAE,aAAa,EAAE,CAAM;IAC1C,OAAO,CAAC,SAAS,CAAS;IAE1B,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,GAAE,YAAY,GAAG;QAAE,SAAS,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,IAAI;IAM9F,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,GAAE,YAAiB,GAAG,IAAI;IAKpE,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,GAAE,YAAiB,GAAG,IAAI;IAKtE,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,GAAE,YAAiB,GAAG,IAAI;IAKjE,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,cAAc,EAAE,EAAE,IAAI,GAAE,YAAiB,GAAG,IAAI;IAKlG,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,cAAc,EAAE,EAAE,IAAI,GAAE,YAAiB,GAAG,IAAI;IAKtG,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,cAAc,EAAE,EAAE,IAAI,GAAE,YAAiB,GAAG,IAAI;IAKvG,oFAAoF;IACpF,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;IAKrE,wFAAwF;IACxF,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,GAAG,IAAI;IAK9E,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,GAAG,IAAI;IAK9F,6DAA6D;IAC7D,GAAG,CAAC,SAAS,EAAE,aAAa,GAAG,IAAI;IAKnC,OAAO,CAAC,MAAM;CAKf;AAED,qBAAa,aAAa;IAGZ,QAAQ,CAAC,EAAE,EAAE,MAAM;IAF/B,QAAQ,CAAC,UAAU,EAAE,aAAa,EAAE,CAAM;gBAErB,EAAE,EAAE,MAAM;IAE/B,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI;IAK3B,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI;IAK9B,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI;IAKxB,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI;IAK3B;;;OAGG;IACH,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI;IAK5B,uDAAuD;IACvD,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,GAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,IAAI;IAW3G,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,IAAI,EAAE,WAAW,KAAK,IAAI,GAAG,IAAI;IAO7D,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,GAAG,IAAI;IAS9F,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;IAKrE,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,GAAG,IAAI;IAK9E,6DAA6D;IAC7D,GAAG,CAAC,SAAS,EAAE,aAAa,GAAG,IAAI;CAIpC;AAQD,qBAAa,WAAW;IAGV,OAAO,CAAC,QAAQ,CAAC,OAAO;IAFpC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA0B;gBAErB,OAAO,GAAE,WAAgB;IAEtD,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC,MAAM,EAAE,aAAa,KAAK,IAAI,GAAG,IAAI;IACzF,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,MAAM,EAAE,aAAa,KAAK,IAAI,GAAG,IAAI;IAiBjE,4EAA4E;IAC5E,KAAK,IAAI;QAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE;CAsD7D;AAED,iDAAiD;AACjD,wBAAgB,IAAI,CAAC,OAAO,GAAE,WAAgB,GAAG,WAAW,CAE3D"}

package/dist/sdk/index.d.ts

@@ -27,5 +27,7 @@ export declare const VERSION = "0.0.1";
 export { createOmniClient, type OmniClient, type OmniClientConfig, } from './client';
 export type { Instance, Person, Event, AccessRule, Setting, Provider, HealthResponse, PaginationMeta, Channel, PaginatedResponse, ListInstancesParams, CreateInstanceBody, SendMessageBody, ListEventsParams, SearchPersonsParams, ListAccessRulesParams, CreateAccessRuleBody, ListSettingsParams, ListProvidersParams, NewAgentProvider, ProviderSchema, ProviderHealthResult, AgnoAgent, AgnoTeam, AgnoWorkflow, StartSyncBody, ListSyncsParams, SyncProfileResult, SyncJobCreated, SyncJobSummary, SyncJobStatus, AuthCredentialContext, AuthValidateResponse, A2ADiscoverableAgent, A2AJsonRpcResponse, Chat, ChatSettings, Message, ChatParticipant, ListChatsParams, CreateChatBody, UpdateChatBody, AddParticipantBody, ListChatMessagesParams, Automation, ListAutomationsParams, CreateAutomationBody, TestAutomationBody, ListAutomationLogsParams, DeadLetter, ListDeadLettersParams, ResolveDeadLetterBody, WebhookSource, ListWebhookSourcesParams, CreateWebhookSourceBody, TriggerEventBody, PayloadConfig, UpdatePayloadConfigBody, DeletePayloadsBody, ReplaySession, StartReplayBody, EventMetrics, EventAnalytics, LogEntry, ListLogsParams, SendMediaBody, SendReactionBody, SendStickerBody, SendContactBody, SendLocationBody, SendPollBody, SendEmbedBody, ConnectInstanceBody, RequestPairingCodeBody, ListContactsParams, ListGroupsParams, Contact, Group, UserProfile, SendPresenceBody, SendPresenceResult, MarkMessageReadBody, BatchMarkReadBody, MarkChatReadBody, MarkReadResult, BatchJobType, BatchJob, BatchJobStatus, BatchJobStatusResponse, ProcessableContentType, CreateBatchJobBody, ListBatchJobsParams, CostEstimate, ApiKeyRecord, ApiKeyStatus, CreateApiKeyBody, CreateApiKeyResult, UpdateApiKeyBody, RevokeApiKeyBody, ListApiKeysParams, } from './client';
 export { OmniApiError, OmniConfigError, type ApiErrorDetails } from './errors';
+export { flow, FlowBuilder, ScreenBuilder, FormBuilder, FlowBuilderError, } from './flow-builder';
+export type { FlowOptions, ScreenOptions, DataSourceItem, FlowComponent } from './flow-builder';
 export type { paths, components, operations } from './types.generated';
 //# sourceMappingURL=index.d.ts.map

package/dist/sdk/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,eAAO,MAAM,OAAO,UAAU,CAAC;AAG/B,OAAO,EACL,gBAAgB,EAChB,KAAK,UAAU,EACf,KAAK,gBAAgB,GACtB,MAAM,UAAU,CAAC;AAGlB,YAAY,EACV,QAAQ,EACR,MAAM,EACN,KAAK,EACL,UAAU,EACV,OAAO,EACP,QAAQ,EACR,cAAc,EACd,cAAc,EACd,OAAO,EACP,iBAAiB,EACjB,mBAAmB,EACnB,kBAAkB,EAClB,eAAe,EACf,gBAAgB,EAChB,mBAAmB,EACnB,qBAAqB,EACrB,oBAAoB,EACpB,kBAAkB,EAClB,mBAAmB,EACnB,gBAAgB,EAChB,cAAc,EACd,oBAAoB,EACpB,SAAS,EACT,QAAQ,EACR,YAAY,EAEZ,aAAa,EACb,eAAe,EACf,iBAAiB,EACjB,cAAc,EACd,cAAc,EACd,aAAa,EAEb,qBAAqB,EACrB,oBAAoB,EAEpB,oBAAoB,EACpB,kBAAkB,EAElB,IAAI,EACJ,YAAY,EACZ,OAAO,EACP,eAAe,EACf,eAAe,EACf,cAAc,EACd,cAAc,EACd,kBAAkB,EAClB,sBAAsB,EAEtB,UAAU,EACV,qBAAqB,EACrB,oBAAoB,EACpB,kBAAkB,EAClB,wBAAwB,EAExB,UAAU,EACV,qBAAqB,EACrB,qBAAqB,EAErB,aAAa,EACb,wBAAwB,EACxB,uBAAuB,EACvB,gBAAgB,EAEhB,aAAa,EACb,uBAAuB,EACvB,kBAAkB,EAElB,aAAa,EACb,eAAe,EACf,YAAY,EACZ,cAAc,EAEd,QAAQ,EACR,cAAc,EAEd,aAAa,EACb,gBAAgB,EAChB,eAAe,EACf,eAAe,EACf,gBAAgB,EAChB,YAAY,EACZ,aAAa,EAEb,mBAAmB,EACnB,sBAAsB,EACtB,kBAAkB,EAClB,gBAAgB,EAChB,OAAO,EACP,KAAK,EACL,WAAW,EAEX,gBAAgB,EAChB,kBAAkB,EAClB,mBAAmB,EACnB,iBAAiB,EACjB,gBAAgB,EAChB,cAAc,EAEd,YAAY,EACZ,QAAQ,EACR,cAAc,EACd,sBAAsB,EACtB,sBAAsB,EACtB,kBAAkB,EAClB,mBAAmB,EACnB,YAAY,EAEZ,YAAY,EACZ,YAAY,EACZ,gBAAgB,EAChB,kBAAkB,EAClB,gBAAgB,EAChB,gBAAgB,EAChB,iBAAiB,GAClB,MAAM,UAAU,CAAC;AAGlB,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,KAAK,eAAe,EAAE,MAAM,UAAU,CAAC;AAG/E,YAAY,EAAE,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,eAAO,MAAM,OAAO,UAAU,CAAC;AAG/B,OAAO,EACL,gBAAgB,EAChB,KAAK,UAAU,EACf,KAAK,gBAAgB,GACtB,MAAM,UAAU,CAAC;AAGlB,YAAY,EACV,QAAQ,EACR,MAAM,EACN,KAAK,EACL,UAAU,EACV,OAAO,EACP,QAAQ,EACR,cAAc,EACd,cAAc,EACd,OAAO,EACP,iBAAiB,EACjB,mBAAmB,EACnB,kBAAkB,EAClB,eAAe,EACf,gBAAgB,EAChB,mBAAmB,EACnB,qBAAqB,EACrB,oBAAoB,EACpB,kBAAkB,EAClB,mBAAmB,EACnB,gBAAgB,EAChB,cAAc,EACd,oBAAoB,EACpB,SAAS,EACT,QAAQ,EACR,YAAY,EAEZ,aAAa,EACb,eAAe,EACf,iBAAiB,EACjB,cAAc,EACd,cAAc,EACd,aAAa,EAEb,qBAAqB,EACrB,oBAAoB,EAEpB,oBAAoB,EACpB,kBAAkB,EAElB,IAAI,EACJ,YAAY,EACZ,OAAO,EACP,eAAe,EACf,eAAe,EACf,cAAc,EACd,cAAc,EACd,kBAAkB,EAClB,sBAAsB,EAEtB,UAAU,EACV,qBAAqB,EACrB,oBAAoB,EACpB,kBAAkB,EAClB,wBAAwB,EAExB,UAAU,EACV,qBAAqB,EACrB,qBAAqB,EAErB,aAAa,EACb,wBAAwB,EACxB,uBAAuB,EACvB,gBAAgB,EAEhB,aAAa,EACb,uBAAuB,EACvB,kBAAkB,EAElB,aAAa,EACb,eAAe,EACf,YAAY,EACZ,cAAc,EAEd,QAAQ,EACR,cAAc,EAEd,aAAa,EACb,gBAAgB,EAChB,eAAe,EACf,eAAe,EACf,gBAAgB,EAChB,YAAY,EACZ,aAAa,EAEb,mBAAmB,EACnB,sBAAsB,EACtB,kBAAkB,EAClB,gBAAgB,EAChB,OAAO,EACP,KAAK,EACL,WAAW,EAEX,gBAAgB,EAChB,kBAAkB,EAClB,mBAAmB,EACnB,iBAAiB,EACjB,gBAAgB,EAChB,cAAc,EAEd,YAAY,EACZ,QAAQ,EACR,cAAc,EACd,sBAAsB,EACtB,sBAAsB,EACtB,kBAAkB,EAClB,mBAAmB,EACnB,YAAY,EAEZ,YAAY,EACZ,YAAY,EACZ,gBAAgB,EAChB,kBAAkB,EAClB,gBAAgB,EAChB,gBAAgB,EAChB,iBAAiB,GAClB,MAAM,UAAU,CAAC;AAGlB,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,KAAK,eAAe,EAAE,MAAM,UAAU,CAAC;AAG/E,OAAO,EACL,IAAI,EACJ,WAAW,EACX,aAAa,EACb,WAAW,EACX,gBAAgB,GACjB,MAAM,gBAAgB,CAAC;AACxB,YAAY,EAAE,WAAW,EAAE,aAAa,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAGhG,YAAY,EAAE,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC"}