@automagik/omni 2.260902.1 → 2.260902.2

package/dist/commands/send.d.ts

@@ -7,5 +7,10 @@
  * etc.
  */
 import { Command } from 'commander';
+import { z } from 'zod';
 export declare function createSendCommand(): Command;
+/** Test-only surface — not part of the CLI contract. */
+export declare const __testables: {
+    sentBySchema: z.ZodEnum<["agent", "user"]>;
+};
 //# sourceMappingURL=send.d.ts.map

package/dist/commands/send.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"send.d.ts","sourceRoot":"","sources":["../../src/commands/send.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAMH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AA4dpC,wBAAgB,iBAAiB,IAAI,OAAO,CAiG3C"}
+{"version":3,"file":"send.d.ts","sourceRoot":"","sources":["../../src/commands/send.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAMH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AA6dxB,wBAAgB,iBAAiB,IAAI,OAAO,CAiG3C;AAED,wDAAwD;AACxD,eAAO,MAAM,WAAW;;CAAmB,CAAC"}

package/dist/commands/webhooks.d.ts

@@ -32,11 +32,19 @@ declare function buildSignatureConfig(options: {
     signatureHeader?: string;
     signaturePrefix?: string;
 }): WebhookSignatureConfigBody | undefined;
+/**
+ * Create-only pairing: the API rejects a `signatureConfig` without a secret
+ * and a secret without a config (CreateWebhookSourceSchema). Fail here, before
+ * the request, the same way the secret bounds do. Update is deliberately not
+ * covered — a secret-only update rotates the secret against the stored config.
+ */
+declare function assertPairedSignatureOnCreate(signatureConfig: WebhookSignatureConfigBody | undefined, signatureSecret: string | undefined): void;
 export declare function createWebhooksCommand(): Command;
 /** Test-only surface — not part of the CLI contract. */
 export declare const __testables: {
     resolveSignatureSecret: typeof resolveSignatureSecret;
     buildSignatureConfig: typeof buildSignatureConfig;
+    assertPairedSignatureOnCreate: typeof assertPairedSignatureOnCreate;
 };
 export {};
 //# sourceMappingURL=webhooks.d.ts.map

package/dist/commands/webhooks.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"webhooks.d.ts","sourceRoot":"","sources":["../../src/commands/webhooks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,WAAW,CAAC;AAC5D,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAapC,UAAU,sBAAsB;IAC9B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,oBAAoB,CAAC,EAAE,OAAO,CAAC;CAChC;AAcD;;;;;GAKG;AACH,iBAAe,sBAAsB,CACnC,OAAO,EAAE,sBAAsB,EAC/B,SAAS,GAAE,MAAM,OAAO,CAAC,MAAM,CAAuB,GACrD,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAqC7B;AAED,6FAA6F;AAC7F,iBAAS,oBAAoB,CAAC,OAAO,EAAE;IACrC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B,GAAG,0BAA0B,GAAG,SAAS,CAczC;AAED,wBAAgB,qBAAqB,IAAI,OAAO,CA0P/C;AAED,wDAAwD;AACxD,eAAO,MAAM,WAAW;;;CAAmD,CAAC"}
+{"version":3,"file":"webhooks.d.ts","sourceRoot":"","sources":["../../src/commands/webhooks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,WAAW,CAAC;AAC5D,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAapC,UAAU,sBAAsB;IAC9B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,oBAAoB,CAAC,EAAE,OAAO,CAAC;CAChC;AAcD;;;;;GAKG;AACH,iBAAe,sBAAsB,CACnC,OAAO,EAAE,sBAAsB,EAC/B,SAAS,GAAE,MAAM,OAAO,CAAC,MAAM,CAAuB,GACrD,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAqC7B;AAED,6FAA6F;AAC7F,iBAAS,oBAAoB,CAAC,OAAO,EAAE;IACrC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B,GAAG,0BAA0B,GAAG,SAAS,CAczC;AAED;;;;;GAKG;AACH,iBAAS,6BAA6B,CACpC,eAAe,EAAE,0BAA0B,GAAG,SAAS,EACvD,eAAe,EAAE,MAAM,GAAG,SAAS,GAClC,IAAI,CAQN;AAED,wBAAgB,qBAAqB,IAAI,OAAO,CA2P/C;AAED,wDAAwD;AACxD,eAAO,MAAM,WAAW;;;;CAAkF,CAAC"}

package/dist/index.js

@@ -128289,7 +128289,7 @@ import { fileURLToPath } from "url";
 // package.json
 var package_default = {
   name: "@automagik/omni",
-  version: "2.260902.1",
+  version: "2.260902.2",
   description: "LLM-optimized CLI for Omni",
   type: "module",
   bin: {
@@ -140103,6 +140103,7 @@ function createSeeCommand() {
 import { existsSync as existsSync17, readFileSync as readFileSync14 } from "fs";
 import { basename as basename5, extname as extname5 } from "path";
 init_source();
+init_zod();
 init_config();
 init_output();
 init_output();
@@ -140127,15 +140128,15 @@ function parseLoadingMessages(value) {
   const messages3 = value?.split(",").map((item) => item.trim()).filter(Boolean);
   return messages3?.length ? messages3 : undefined;
 }
-var SENT_BY_VALUES = ["agent", "user"];
+var sentBySchema = exports_external.enum(["agent", "user"]);
 function resolveSentBy(value) {
   if (value === undefined)
     return;
-  const sentBy = SENT_BY_VALUES.find((v4) => v4 === value);
-  if (!sentBy) {
-    error(`Invalid --sent-by: ${value}`, { validValues: SENT_BY_VALUES });
+  const parsed = sentBySchema.safeParse(value);
+  if (!parsed.success) {
+    error(`Invalid --sent-by: ${value}`, { validValues: sentBySchema.options });
   }
-  return sentBy;
+  return parsed.data;
 }
 var messageSenders = {
   async text(client, instanceId, options3) {
@@ -142670,6 +142671,14 @@ function buildSignatureConfig(options3) {
   }
   return { algorithm, header: signatureHeader, prefix: signaturePrefix };
 }
+function assertPairedSignatureOnCreate(signatureConfig, signatureSecret) {
+  if (signatureConfig === undefined === (signatureSecret === undefined))
+    return;
+  if (signatureConfig === undefined) {
+    throw new Error(`a signature secret (${SECRET_SOURCE_FLAGS}) requires --signature-algorithm and --signature-header`);
+  }
+  throw new Error(`--signature-algorithm and --signature-header require a signature secret (${SECRET_SOURCE_FLAGS})`);
+}
 function createWebhooksCommand() {
   const webhooks = new Command("webhooks").description("Manage webhook sources");
   webhooks.command("list").description("List webhook sources").option("--enabled", "Show only enabled sources").option("--disabled", "Show only disabled sources").action(async (options3) => {
@@ -142719,6 +142728,7 @@ function createWebhooksCommand() {
       }
       const signatureConfig = buildSignatureConfig(options3);
       const signatureSecret = await resolveSignatureSecret(options3);
+      assertPairedSignatureOnCreate(signatureConfig, signatureSecret);
       const source = await client.webhooks.createSource({
         name: options3.name,
         description: options3.description,

package/dist/sdk/types.generated.d.ts

@@ -970,7 +970,7 @@ export interface paths {
         put?: never;
         /**
          * Receive webhook
-         * @description Receive webhook from external system. Creates a custom event.
+         * @description Receive webhook from external system. Creates a custom event. An empty body is accepted as an empty payload; a non-empty body that is not a JSON object (malformed, array, scalar) is rejected.
          */
         post: operations["receiveWebhook"];
         delete?: never;
@@ -990,7 +990,7 @@ export interface paths {
         put?: never;
         /**
          * Public webhook ingress
-         * @description Auth-exempt receiver for third-party webhook senders. Requires the source to have a signature configuration; the request is verified against it (HMAC over the raw body, or token match) before any event is published. Unknown, disabled, unconfigured, or badly signed requests all return the same 401.
+         * @description Auth-exempt receiver for third-party webhook senders. Requires the source to have a signature configuration; the request is verified against it (HMAC over the raw body, or token match) before any event is published. Unknown, disabled, unconfigured, or badly signed requests all return the same 401. A non-empty body that is not a JSON object (malformed, array, scalar) is rejected with 400.
          */
         post: operations["receiveWebhookIngress"];
         delete?: never;
@@ -10653,6 +10653,27 @@ export interface operations {
                     };
                 };
             };
+            /** @description Body is not a JSON object */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        error: {
+                            /**
+                             * @description Error code
+                             * @example NOT_FOUND
+                             */
+                            code: string;
+                            /** @description Human-readable error message */
+                            message: string;
+                            /** @description Additional error details */
+                            details?: unknown;
+                        };
+                    };
+                };
+            };
         };
     };
     receiveWebhookIngress: {
@@ -10691,6 +10712,27 @@ export interface operations {
                     };
                 };
             };
+            /** @description Body is not a JSON object */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        error: {
+                            /**
+                             * @description Error code
+                             * @example NOT_FOUND
+                             */
+                            code: string;
+                            /** @description Human-readable error message */
+                            message: string;
+                            /** @description Additional error details */
+                            details?: unknown;
+                        };
+                    };
+                };
+            };
             /** @description Verification failed */
             401: {
                 headers: {