feat(cli): remote mode — drive a remote OmniRoute with scoped access tokens (#4256)

Remote mode: drive a remote OmniRoute via scoped CLI access tokens (read⊂write⊂admin). Includes the check:db-rules allowlist fix (535a5b673). Live VPS end-to-end (password→token→remote command) is a documented follow-up. Integrated into release/v3.8.29.
This commit is contained in:
Diego Rodrigues de Sa e Souza
2026-06-19 02:57:48 -03:00
committed by GitHub
parent a1a9f373bc
commit a83409e8a1
35 changed files with 2332 additions and 24 deletions

View File

@@ -39,6 +39,7 @@ const HANDLERS_DIR = path.join(cwd, "open-sse/handlers");
// sem investigação — pode ser reserva de schema ou F2 pendente
export const INTENTIONALLY_INTERNAL = new Set([
"_rowTypes", // type-only: 5 importers internos em db/ (AgentBridge/Inspector row types)
"accessTokens", // intentionally-internal: 4 rotas /api/cli/* (connect, whoami, tokens, tokens/[id]) + server/authz/accessTokenAuth.ts via import direto "@/lib/db/accessTokens" (Rule #2)
"cleanup", // intentionally-internal: 3 API routes (purge-quota-snapshots, purge-call-logs, purge-detailed-logs)
"cliToolState", // intentionally-internal: 14+ API routes em /api/cli-tools/*-settings
"comboForecast", // intentionally-internal: src/lib/usage/comboForecast.ts