@automagik/omni 2.260908.6 → 2.260908.8

package/dist/index.js

@@ -34426,7 +34426,14 @@ var init_events = __esm(() => {
 });
 
 // ../core/src/schemas/agent-manifest.ts
-var EVENT_TYPE_TOKEN_PATTERN, ManifestEventTypeSchema, ManifestAcceptsEntrySchema, ManifestPublishesEntrySchema, AgentEventManifestSchema;
+function checkPublishAllowed(manifest, eventType) {
+  const publishes = manifest?.publishes;
+  if (!Array.isArray(publishes)) {
+    return true;
+  }
+  return publishes.some((entry) => entry?.event === eventType);
+}
+var EVENT_TYPE_TOKEN_PATTERN, ManifestEventTypeSchema, ManifestAcceptsEntrySchema, ManifestPublishesEntrySchema, AgentEventManifestSchema, PUBLISH_NOT_DECLARED = "publish_not_declared";
 var init_agent_manifest = __esm(() => {
   init_zod();
   init_types2();
@@ -40928,14 +40935,14 @@ async function releaseEmissionClaim(deps, claimedEventId, eventType) {
     });
   });
 }
-async function enforceEmitEventSchema(deps, eventType, payload, trustedTenantId) {
+async function enforceEmitEventGates(deps, eventType, payload, trustedTenantId, emitterAgentId) {
   if (!deps.validateEmitEvent)
     return null;
-  const verdict = await deps.validateEmitEvent(eventType, payload, trustedTenantId);
+  const verdict = await deps.validateEmitEvent(eventType, payload, trustedTenantId, emitterAgentId);
   if (verdict.valid)
     return null;
   const detail = verdict.errors?.length ? `: ${verdict.errors.join("; ")}` : "";
-  logger2.warn("Emit event refused by schema registry", { eventType, errors: verdict.errors });
+  logger2.warn("Emit event refused by emission gate", { eventType, emitterAgentId, errors: verdict.errors });
   return `${verdict.reason ?? SCHEMA_VALIDATION_FAILED}${detail}`;
 }
 async function prepareEmitEvent(config2, context, deps, trustedTenantId, actionIndex, provenance) {
@@ -40949,9 +40956,9 @@ async function prepareEmitEvent(config2, context, deps, trustedTenantId, actionI
     payload = context.payload;
   }
   const eventType = substituteTemplate(config2.eventType, context);
-  const schemaError = await enforceEmitEventSchema(deps, eventType, payload, trustedTenantId);
-  if (schemaError !== null) {
-    return { error: schemaError };
+  const gateError = await enforceEmitEventGates(deps, eventType, payload, trustedTenantId, context.automation?.managedByAgentId ?? null);
+  if (gateError !== null) {
+    return { error: gateError };
   }
   const correlationId = context.event?.metadata.correlationId ?? context.payload.correlationId ?? undefined;
   const causationId = context.event?.id ?? provenance?.parentEventId;
@@ -41695,7 +41702,7 @@ class AutomationEngine {
     const instanceId = event.metadata.instanceId ?? "global";
     const context = createTemplateContext(event.payload, {
       event: { id: event.id, type: event.type, timestamp: event.timestamp, metadata: event.metadata },
-      automation: { id: automation.id }
+      automation: { id: automation.id, managedByAgentId: automation.managedByAgentId ?? null }
     });
     await this.queueExecution(automation, event, context, instanceId);
   }
@@ -41733,7 +41740,7 @@ class AutomationEngine {
           timestamp: syntheticEvent.timestamp,
           metadata: syntheticEvent.metadata
         },
-        automation: { id: automation.id }
+        automation: { id: automation.id, managedByAgentId: automation.managedByAgentId ?? null }
       });
       await this.queueExecution(automation, syntheticEvent, context, instanceId);
     };
@@ -70677,6 +70684,7 @@ __export(exports_src, {
   classifyEnvelope: () => classifyEnvelope,
   checkSessionReset: () => checkSessionReset,
   checkSchemaCompatibility: () => checkSchemaCompatibility,
+  checkPublishAllowed: () => checkPublishAllowed,
   channelSupportsTypingIndicator: () => channelSupportsTypingIndicator,
   channelHasMessagingWindow: () => channelHasMessagingWindow,
   canonicalizeIpv4: () => canonicalizeIpv4,
@@ -70741,6 +70749,7 @@ __export(exports_src, {
   PersonWithIdentitiesSchema: () => PersonWithIdentitiesSchema,
   PersonSchema: () => PersonSchema,
   PaginationSchema: () => PaginationSchema,
+  PUBLISH_NOT_DECLARED: () => PUBLISH_NOT_DECLARED,
   PROVIDER_SCHEMAS: () => PROVIDER_SCHEMAS,
   PAYLOAD_STAGES: () => PAYLOAD_STAGES,
   OutgoingMessageSchema: () => OutgoingMessageSchema,
@@ -136684,7 +136693,7 @@ import { fileURLToPath } from "url";
 // package.json
 var package_default = {
   name: "@automagik/omni",
-  version: "2.260908.6",
+  version: "2.260908.8",
   repository: {
     type: "git",
     url: "git+https://github.com/automagik-dev/omni.git",

package/dist/server/index.js

@@ -31330,7 +31330,14 @@ var init_events = __esm(() => {
 });
 
 // ../core/src/schemas/agent-manifest.ts
-var EVENT_TYPE_TOKEN_PATTERN, ManifestEventTypeSchema, ManifestAcceptsEntrySchema, ManifestPublishesEntrySchema, AgentEventManifestSchema;
+function checkPublishAllowed(manifest, eventType) {
+  const publishes = manifest?.publishes;
+  if (!Array.isArray(publishes)) {
+    return true;
+  }
+  return publishes.some((entry) => entry?.event === eventType);
+}
+var EVENT_TYPE_TOKEN_PATTERN, ManifestEventTypeSchema, ManifestAcceptsEntrySchema, ManifestPublishesEntrySchema, AgentEventManifestSchema, PUBLISH_NOT_DECLARED = "publish_not_declared";
 var init_agent_manifest = __esm(() => {
   init_zod();
   init_types2();
@@ -37832,14 +37839,14 @@ async function releaseEmissionClaim(deps, claimedEventId, eventType) {
     });
   });
 }
-async function enforceEmitEventSchema(deps, eventType, payload, trustedTenantId) {
+async function enforceEmitEventGates(deps, eventType, payload, trustedTenantId, emitterAgentId) {
   if (!deps.validateEmitEvent)
     return null;
-  const verdict = await deps.validateEmitEvent(eventType, payload, trustedTenantId);
+  const verdict = await deps.validateEmitEvent(eventType, payload, trustedTenantId, emitterAgentId);
   if (verdict.valid)
     return null;
   const detail = verdict.errors?.length ? `: ${verdict.errors.join("; ")}` : "";
-  logger2.warn("Emit event refused by schema registry", { eventType, errors: verdict.errors });
+  logger2.warn("Emit event refused by emission gate", { eventType, emitterAgentId, errors: verdict.errors });
   return `${verdict.reason ?? SCHEMA_VALIDATION_FAILED}${detail}`;
 }
 async function prepareEmitEvent(config2, context2, deps, trustedTenantId, actionIndex, provenance) {
@@ -37853,9 +37860,9 @@ async function prepareEmitEvent(config2, context2, deps, trustedTenantId, action
     payload = context2.payload;
   }
   const eventType = substituteTemplate(config2.eventType, context2);
-  const schemaError = await enforceEmitEventSchema(deps, eventType, payload, trustedTenantId);
-  if (schemaError !== null) {
-    return { error: schemaError };
+  const gateError = await enforceEmitEventGates(deps, eventType, payload, trustedTenantId, context2.automation?.managedByAgentId ?? null);
+  if (gateError !== null) {
+    return { error: gateError };
   }
   const correlationId = context2.event?.metadata.correlationId ?? context2.payload.correlationId ?? undefined;
   const causationId = context2.event?.id ?? provenance?.parentEventId;
@@ -38599,7 +38606,7 @@ class AutomationEngine {
     const instanceId = event.metadata.instanceId ?? "global";
     const context2 = createTemplateContext(event.payload, {
       event: { id: event.id, type: event.type, timestamp: event.timestamp, metadata: event.metadata },
-      automation: { id: automation.id }
+      automation: { id: automation.id, managedByAgentId: automation.managedByAgentId ?? null }
     });
     await this.queueExecution(automation, event, context2, instanceId);
   }
@@ -38637,7 +38644,7 @@ class AutomationEngine {
           timestamp: syntheticEvent.timestamp,
           metadata: syntheticEvent.metadata
         },
-        automation: { id: automation.id }
+        automation: { id: automation.id, managedByAgentId: automation.managedByAgentId ?? null }
       });
       await this.queueExecution(automation, syntheticEvent, context2, instanceId);
     };
@@ -44211,6 +44218,7 @@ __export(exports_src, {
   classifyEnvelope: () => classifyEnvelope,
   checkSessionReset: () => checkSessionReset,
   checkSchemaCompatibility: () => checkSchemaCompatibility,
+  checkPublishAllowed: () => checkPublishAllowed,
   channelSupportsTypingIndicator: () => channelSupportsTypingIndicator,
   channelHasMessagingWindow: () => channelHasMessagingWindow,
   canonicalizeIpv4: () => canonicalizeIpv4,
@@ -44275,6 +44283,7 @@ __export(exports_src, {
   PersonWithIdentitiesSchema: () => PersonWithIdentitiesSchema,
   PersonSchema: () => PersonSchema,
   PaginationSchema: () => PaginationSchema,
+  PUBLISH_NOT_DECLARED: () => PUBLISH_NOT_DECLARED,
   PROVIDER_SCHEMAS: () => PROVIDER_SCHEMAS,
   PAYLOAD_STAGES: () => PAYLOAD_STAGES,
   OutgoingMessageSchema: () => OutgoingMessageSchema,
@@ -251103,7 +251112,7 @@ var init_sentry_scrub = __esm(() => {
 var require_package7 = __commonJS((exports, module) => {
   module.exports = {
     name: "@omni/api",
-    version: "2.260908.6",
+    version: "2.260908.8",
     private: true,
     type: "module",
     exports: {
@@ -387956,6 +387965,30 @@ async function resolveCallAgentChatIds(services, db3, ctx, trustedTenantId) {
     return { chatId: ctx.chatId, senderId: ctx.senderId };
   }
 }
+async function deadLetterRefusedEmission(services, db3, trustedTenantId, input) {
+  try {
+    await runTenantWorkDb(db3, trustedTenantId, () => services.deadLetters.createSchemaValidationFailure({
+      eventId: generateId(),
+      eventType: input.eventType,
+      subject: input.eventType,
+      payload: input.payload,
+      errors: input.errors,
+      reason: input.reason
+    }));
+  } catch (error3) {
+    log130.error("Failed to dead-letter refused emit_event payload", {
+      eventType: input.eventType,
+      error: error3 instanceof Error ? error3.message : String(error3)
+    });
+  }
+}
+async function refusePublishNotDeclared(db3, trustedTenantId, emitterAgentId, eventType) {
+  const [row] = await runTenantWorkDb(db3, trustedTenantId, () => scopedHandle(db3).select({ eventManifest: agents.eventManifest }).from(agents).where(eq(agents.id, emitterAgentId)).limit(1));
+  if (checkPublishAllowed(row?.eventManifest ?? null, eventType)) {
+    return null;
+  }
+  return [`event type '${eventType}' is not declared in the publishes manifest of agent ${emitterAgentId}`];
+}
 function buildAutomationEngineDeps(services, db3, options = {}) {
   const resolvePlugin = options.resolvePlugin ?? getPlugin;
   return {
@@ -388057,7 +388090,23 @@ function buildAutomationEngineDeps(services, db3, options = {}) {
     releaseEmittedEventClaim: async (eventId) => {
       await scopedHandle(db3).delete(omniEvents).where(eq(omniEvents.id, eventId));
     },
-    validateEmitEvent: async (eventType, payload, trustedTenantId = null) => {
+    validateEmitEvent: async (eventType, payload, trustedTenantId = null, emitterAgentId = null) => {
+      if (emitterAgentId) {
+        const refusal = await refusePublishNotDeclared(db3, trustedTenantId, emitterAgentId, eventType);
+        if (refusal) {
+          log130.warn("emit_event refused: type not declared in the agent publishes manifest", {
+            eventType,
+            emitterAgentId
+          });
+          await deadLetterRefusedEmission(services, db3, trustedTenantId, {
+            eventType,
+            payload,
+            errors: refusal,
+            reason: PUBLISH_NOT_DECLARED
+          });
+          return { valid: false, errors: refusal, reason: PUBLISH_NOT_DECLARED };
+        }
+      }
       const verdict = await runTenantWorkDb(db3, trustedTenantId, () => services.eventSchemas.validate(eventType, payload));
       const strictEmit = process.env.OMNI_STRICT_EMIT_EVENT_SCHEMAS === "true";
       const refusedUnregistered = strictEmit && !verdict.registered;
@@ -388066,21 +388115,7 @@ function buildAutomationEngineDeps(services, db3, options = {}) {
       }
       const errors4 = refusedUnregistered ? [`no enabled schema is registered for event type '${eventType}'`] : verdict.errors;
       const reason2 = refusedUnregistered ? SCHEMA_NOT_REGISTERED : undefined;
-      try {
-        await runTenantWorkDb(db3, trustedTenantId, () => services.deadLetters.createSchemaValidationFailure({
-          eventId: generateId(),
-          eventType,
-          subject: eventType,
-          payload,
-          errors: errors4,
-          reason: reason2
-        }));
-      } catch (error3) {
-        log130.error("Failed to dead-letter refused emit_event payload", {
-          eventType,
-          error: error3 instanceof Error ? error3.message : String(error3)
-        });
-      }
+      await deadLetterRefusedEmission(services, db3, trustedTenantId, { eventType, payload, errors: errors4, reason: reason2 });
       return { valid: false, errors: errors4, reason: reason2 };
     }
   };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@automagik/omni",
-  "version": "2.260908.6",
+  "version": "2.260908.8",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/automagik-dev/omni.git",