omnimarket 0.3.1__tar.gz

omnimarket-0.3.1/.agents/plugins/marketplace.json

@@ -0,0 +1,20 @@
+{
+  "name": "omninode-tools",
+  "interface": {
+    "displayName": "OmniNode Tools"
+  },
+  "plugins": [
+    {
+      "name": "onex",
+      "source": {
+        "source": "local",
+        "path": "./plugins/onex"
+      },
+      "policy": {
+        "installation": "AVAILABLE",
+        "authentication": "ON_INSTALL"
+      },
+      "category": "Developer Tools"
+    }
+  ]
+}

omnimarket-0.3.1/.env.example

@@ -0,0 +1,223 @@
+# .env.example — omnimarket
+#
+# Generated by scripts/generate_env_example.py from the Settings model.
+# Do NOT hand-edit. Re-generate after adding or removing Settings fields:
+#
+#   uv run python scripts/generate_env_example.py
+#
+# All values are empty / false / 0 by default.
+# Enable a service by setting its ENABLE_* flag to true and filling
+# in the required fields documented below.
+
+# ======================================================================
+# Service enable flags
+# ======================================================================
+
+# Enable Kafka producer/consumer wiring. Defaults False for safety.
+# ENABLE_KAFKA=false
+
+# Enable embedding/memory service wiring. Defaults False.
+# ENABLE_MEMORY_SERVICE=false
+
+# Enable PostgreSQL connections. When True, either a *_DB_URL must be set or
+# all individual POSTGRES_* fields must be configured.
+# ENABLE_POSTGRES=false
+
+# Enable Qdrant connections. Defaults False for safety.
+# ENABLE_QDRANT=false
+
+# Enable Valkey/Redis connections. Defaults False for safety.
+# ENABLE_VALKEY=false
+
+# ======================================================================
+# Kafka / Redpanda
+# ======================================================================
+
+# Kafka broker addresses (comma-separated host:port pairs). REQUIRED when
+# ENABLE_KAFKA=true. No default to prevent silent localhost connections.
+# KAFKA_BOOTSTRAP_SERVERS=
+
+# Single-broker convenience alias for kafka_bootstrap_servers. When unset,
+# Settings reads kafka_bootstrap_servers.
+# KAFKA_BROKER=
+
+# Kafka consumer group ID for omnimarket consumers.
+# KAFKA_CONSUMER_GROUP=
+
+# Environment label (dev / staging / prod) for logging only. Not used for
+# topic prefixing.
+# KAFKA_ENVIRONMENT=
+
+# Redpanda admin API host. Used by node_baseline_capture probes. REQUIRED only
+# by probes that target Redpanda admin.
+# REDPANDA_ADMIN_HOST=
+
+# Redpanda admin API port (typically 9644).
+# REDPANDA_ADMIN_PORT=
+
+# ======================================================================
+# PostgreSQL
+# ======================================================================
+
+# Full PostgreSQL connection URL for the omnibase_infra database. When set,
+# takes precedence over individual POSTGRES_* fields. Format:
+# postgresql://user:password@host:port/dbname
+# OMNIBASE_INFRA_DB_URL=
+
+# Full PostgreSQL connection URL for the omnidash_analytics projection
+# database. When set, takes precedence over POSTGRES_* fields.
+# OMNIDASH_ANALYTICS_DB_URL=
+
+# PostgreSQL database name for omnimarket. REQUIRED when ENABLE_POSTGRES=true
+# and no full DSN is provided.
+# POSTGRES_DATABASE=
+
+# PostgreSQL host. REQUIRED when ENABLE_POSTGRES=true and no full DSN is
+# provided. No default to prevent silent localhost connections.
+# POSTGRES_HOST=
+
+# PostgreSQL password. REQUIRED when ENABLE_POSTGRES=true and no full DSN is
+# provided.
+# POSTGRES_PASSWORD=
+
+# PostgreSQL port. REQUIRED when ENABLE_POSTGRES=true and no full DSN is
+# provided. Standard port is 5432. 0 = unconfigured.
+# POSTGRES_PORT=
+
+# PostgreSQL username. REQUIRED when ENABLE_POSTGRES=true and no full DSN is
+# provided.
+# POSTGRES_USER=
+
+# ======================================================================
+# Qdrant (vector DB)
+# ======================================================================
+
+# Qdrant host. REQUIRED when ENABLE_QDRANT=true.
+# QDRANT_HOST=
+
+# Qdrant port. REQUIRED when ENABLE_QDRANT=true.
+# QDRANT_PORT=
+
+# ======================================================================
+# Valkey / Redis-compatible cache
+# ======================================================================
+
+# Valkey/Redis host. REQUIRED when ENABLE_VALKEY=true.
+# VALKEY_HOST=
+
+# Valkey/Redis port. REQUIRED when ENABLE_VALKEY=true.
+# VALKEY_PORT=
+
+# ======================================================================
+# LLM endpoints
+# ======================================================================
+
+# Model identifier for the fast/reasoning endpoint.
+# LLM_CODER_FAST_MODEL_ID=
+
+# Base URL for the fast/reasoning LLM endpoint.
+# LLM_CODER_FAST_URL=
+
+# Model identifier for the coder endpoint (passed verbatim to the
+# OpenAI-compatible API).
+# LLM_CODER_MODEL_ID=
+
+# Base URL for the primary coder LLM endpoint. Empty by default; set in env
+# when invoking coder-backed features.
+# LLM_CODER_URL=
+
+# Model identifier for the embedding endpoint.
+# LLM_EMBEDDING_MODEL_ID=
+
+# Base URL for the embedding endpoint.
+# LLM_EMBEDDING_URL=
+
+# GLM cloud API key.
+# LLM_GLM_API_KEY=
+
+# GLM cloud model identifier.
+# LLM_GLM_MODEL_NAME=
+
+# GLM cloud API base URL (e.g. https://api.z.ai).
+# LLM_GLM_URL=
+
+# Model identifier for the reasoner endpoint.
+# LLM_REASONER_MODEL_ID=
+
+# Base URL for the dedicated reasoner endpoint.
+# LLM_REASONER_URL=
+
+# ======================================================================
+# Cloud API keys
+# ======================================================================
+
+# Anthropic API key. Required only when an Anthropic-backed node is invoked.
+# ANTHROPIC_API_KEY=
+
+# Gemini API key (alias for google_api_key in some nodes).
+# GEMINI_API_KEY=
+
+# Google API key (Gemini, etc.).
+# GOOGLE_API_KEY=
+
+# OpenAI API key. Required only when an OpenAI-backed node is invoked.
+# OPENAI_API_KEY=
+
+# ======================================================================
+# GitHub / Linear
+# ======================================================================
+
+# Alternative GitHub PAT name used by some scripts.
+# GH_PAT=
+
+# GitHub Personal Access Token. Required only by skills that call the GitHub
+# REST/GraphQL API directly.
+# GITHUB_TOKEN=
+
+# Linear API key. Required only by skills/nodes that read or write Linear
+# tickets.
+# LINEAR_API_KEY=
+
+# ======================================================================
+# Memory service / embedding
+# ======================================================================
+
+# Embedding model URL used by code-embedding nodes. REQUIRED when
+# ENABLE_MEMORY_SERVICE=true.
+# EMBEDDING_MODEL_URL=
+
+# ======================================================================
+# ONEX runtime / emit daemon / infra targets
+# ======================================================================
+
+# Base URL for the omnidash API (used by skills that query projections). Empty
+# disables dashboard probes.
+# ONEX_DASHBOARD_API=
+
+# Alternative emit-daemon socket path used by some scripts.
+# ONEX_EMIT_DAEMON_SOCKET=
+
+# Path to the omniclaude emit daemon Unix socket. Read by hooks that publish
+# events. Empty disables daemon emission.
+# ONEX_EMIT_SOCKET_PATH=
+
+# Spool directory for buffered events.
+# ONEX_EMIT_SPOOL_DIR=
+
+# SSH target for infra hosts (used by deploy/redeploy nodes). No default —
+# must be explicitly set.
+# ONEX_INFRA_SSH_TARGET=
+
+# Override for ONEX state root. Falls back to ONEX_STATE_DIR raw env when
+# unset (bootstrap-only).
+# ONEX_STATE_ROOT=
+
+# Pattern-B runtime address (used by codex adapter).
+# ONEX_TARGET_RUNTIME_ADDRESS=
+
+# ======================================================================
+# Miscellaneous
+# ======================================================================
+
+# Slack bot token (used by notification nodes).
+# SLACK_BOT_TOKEN=

omnimarket-0.3.1/.github/workflows/auto-merge.yml

@@ -0,0 +1,96 @@
+# SPDX-FileCopyrightText: 2025 OmniNode.ai Inc.
+# SPDX-License-Identifier: MIT
+#
+# OMN-6571: Automatically enable auto-merge (squash) on every PR opened
+# by jonahgabriel. Ensures PRs do not sit idle in the merge queue waiting  # onex-allow-raw-env OMN-10580 reason="CI workflow scoped to repo owner actor; not a personal credential"
+# for manual enrollment.
+#
+# OMN-7786: Re-trigger on review and check_suite events so the workflow
+# re-attempts auto-merge after CodeRabbit review finishes and branch
+# protection gates clear. Silent continue-on-error removed; "already
+# enqueued" races are tolerated but real failures surface.
+name: Auto-Merge
+
+on:
+  pull_request:
+    types: [opened, reopened, ready_for_review]
+  pull_request_review:
+    types: [submitted, dismissed]
+  check_suite:
+    types: [completed]
+  workflow_dispatch:
+    inputs:
+      pr_number:
+        description: "PR number to enable auto-merge on"
+        required: true
+        type: string
+
+permissions:
+  contents: write
+  pull-requests: write
+
+jobs:
+  auto-merge:
+    name: Enable Auto-Merge
+    runs-on: ubuntu-latest
+    steps:
+      - name: Resolve PR and author
+        id: resolve
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GH_REPO: ${{ github.repository }}
+          EVENT_NAME: ${{ github.event_name }}
+          PR_FROM_PAYLOAD: ${{ github.event.pull_request.number }}
+          PR_FROM_DISPATCH: ${{ github.event.inputs.pr_number }}
+          CHECK_SUITE_PRS: ${{ toJson(github.event.check_suite.pull_requests) }}
+          PR_AUTHOR_FROM_PAYLOAD: ${{ github.event.pull_request.user.login }}
+        run: |
+          set -euo pipefail
+          case "$EVENT_NAME" in
+            pull_request|pull_request_review)
+              PR="$PR_FROM_PAYLOAD"
+              ACTOR="$PR_AUTHOR_FROM_PAYLOAD"
+              ;;
+            workflow_dispatch)
+              PR="$PR_FROM_DISPATCH"
+              ACTOR="$(gh pr view "$PR" --json author --jq '.author.login')"
+              ;;
+            check_suite)
+              PR="$(echo "$CHECK_SUITE_PRS" | jq -r 'if type == "array" and length > 0 then .[0].number else empty end')"
+              if [ -z "$PR" ]; then
+                echo "check_suite had no associated PRs; nothing to do"
+                echo "skip=true" >> "$GITHUB_OUTPUT"
+                exit 0
+              fi
+              ACTOR="$(gh pr view "$PR" --json author --jq '.author.login')"
+              ;;
+            *)
+              echo "unsupported event: $EVENT_NAME"
+              echo "skip=true" >> "$GITHUB_OUTPUT"
+              exit 0
+              ;;
+          esac
+          echo "pr=$PR" >> "$GITHUB_OUTPUT"
+          echo "actor=$ACTOR" >> "$GITHUB_OUTPUT"
+          echo "skip=false" >> "$GITHUB_OUTPUT"
+
+      - uses: actions/checkout@v4
+
+      - name: Enable auto-merge
+        if: steps.resolve.outputs.skip != 'true' && steps.resolve.outputs.actor == 'jonahgabriel'  # onex-allow-raw-env OMN-10580 reason="CI actor gate for repo owner; not a hardcoded credential"
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          PR: ${{ steps.resolve.outputs.pr }}
+          REPO: ${{ github.repository }}
+        run: |
+          set -euo pipefail
+          if output=$(gh pr merge "$PR" --repo "$REPO" --auto --squash 2>&1); then
+            echo "auto-merge enabled: $output"
+            exit 0
+          fi
+          if echo "$output" | grep -qiE "already enqueued|already queued|auto-merge already enabled"; then
+            echo "auto-merge not newly enabled (expected): $output"
+            exit 0
+          fi
+          echo "auto-merge failed: $output"
+          exit 1

omnimarket-0.3.1/.github/workflows/auto-tag-on-merge.yml

@@ -0,0 +1,19 @@
+# SPDX-FileCopyrightText: 2025 OmniNode.ai Inc.
+# SPDX-License-Identifier: MIT
+name: Auto-Tag on Merge
+
+on:
+  pull_request:
+    types: [closed]
+
+jobs:
+  auto-tag:
+    if: >-
+      github.event.pull_request.merged == true &&
+      (contains(github.event.pull_request.labels.*.name, 'release') ||
+       startsWith(github.event.pull_request.title, 'release:') ||
+       startsWith(github.event.pull_request.title, 'chore: release') ||
+       startsWith(github.event.pull_request.title, 'chore(release)'))
+    uses: OmniNode-ai/omnibase_core/.github/workflows/auto-tag-reusable.yml@83fc5cfa234acf375295f7850bae6848e21dc56c
+    permissions:
+      contents: write

omnimarket-0.3.1/.github/workflows/call-receipt-gate.yml

@@ -0,0 +1,26 @@
+# SPDX-FileCopyrightText: 2025 OmniNode.ai Inc.
+# SPDX-License-Identifier: MIT
+#
+# Caller workflow: invokes the reusable receipt-gate on every PR targeting main.
+#
+# Receipt-gate (omnibase_core) enforces "Enforcement by Receipt" (OMN-10412):
+# every PR must cite a Linear ticket whose dod_evidence items all have PASS
+# ModelDodReceipt artifacts in onex_change_control. Missing or failing receipts
+# block merge.
+#
+# Required-status-check name: `verify / verify`
+
+name: Receipt Gate
+
+on:
+  pull_request:
+    branches: [main]
+  merge_group:
+
+permissions:
+  contents: read
+  pull-requests: read
+
+jobs:
+  verify:
+    uses: OmniNode-ai/omnibase_core/.github/workflows/receipt-gate.yml@main

omnimarket-0.3.1/.github/workflows/call-reject-skip.yml

@@ -0,0 +1,28 @@
+# SPDX-FileCopyrightText: 2025 OmniNode.ai Inc.
+# SPDX-License-Identifier: MIT
+#
+# OMN-10422 (Wave 5): Caller — re-scan skip-gate bypass tokens at merge_group entry.
+#
+# Invokes the omniclaude-hosted reusable workflow on pull_request and merge_group.
+# On merge_group, the reusable workflow resolves the PR via head SHA and asserts
+# exactly-one-PR (invariant I10). Cache is not reused across events (invariant I9).
+#
+# Required-status-check name: `scan / reject-skip-gate-token`
+# Wire via: Settings → Branches → main → Require status checks → add the check name above.
+
+name: Reject skip-gate bypass tokens
+
+on:
+  pull_request:
+    types: [opened, edited, synchronize, reopened]
+    branches: [main]
+  merge_group:
+
+permissions:
+  contents: read
+  pull-requests: read
+
+jobs:
+  call-reject-skip-token:
+    uses: OmniNode-ai/omniclaude/.github/workflows/reject-deploy-gate-skip.yml@main
+    secrets: inherit