@automagik/omni 2.260908.8 → 2.260908.10

package/db/drizzle/0063_automation_manifest_provenance.sql

@@ -0,0 +1,32 @@
+-- Manifest-compilation provenance on automations (#986, RFC #925 G4b).
+--
+-- Adds `automations.managed_by_agent_id`: set when the row was COMPILED from
+-- `agents.event_manifest` by the manifest compiler
+-- (packages/api/src/services/manifest-compiler.ts); NULL = hand-made. The
+-- agent's manifest is the source of truth and `automations` becomes the
+-- compiled plan for these rows — the API rejects manual create/update/delete
+-- of a managed automation so the plan cannot drift silently.
+--
+-- The FK is ON DELETE CASCADE so a hard agent delete removes its compiled
+-- plan at the DB level (the service-level soft delete reconciles compiled
+-- rows away explicitly before that ever matters). NOT VALID mirrors the 0041
+-- precedent: no scan on deploy; every new write is checked.
+--
+-- Hand-written following the 0043/0044/0052 precedent (additive, idempotent).
+--
+-- NOTE: no explicit BEGIN/COMMIT — the boot migrator executes this file on a
+-- pooled postgres-js connection, which rejects raw transaction control.
+
+ALTER TABLE "automations" ADD COLUMN IF NOT EXISTS "managed_by_agent_id" uuid;
+--> statement-breakpoint
+DO $$
+BEGIN
+    IF NOT EXISTS (
+        SELECT 1 FROM pg_constraint
+        WHERE conname = 'automations_managed_by_agent_fk' AND conrelid = '"automations"'::regclass
+    ) THEN
+        ALTER TABLE "automations" ADD CONSTRAINT "automations_managed_by_agent_fk" FOREIGN KEY ("managed_by_agent_id") REFERENCES "agents" ("id") ON DELETE CASCADE NOT VALID;
+    END IF;
+END $$;
+--> statement-breakpoint
+CREATE INDEX IF NOT EXISTS "automations_managed_by_agent_idx" ON "automations" ("managed_by_agent_id");

package/db/drizzle/meta/_journal.json

@@ -442,6 +442,13 @@
       "when": 1786200000000,
       "tag": "0062_agent_event_manifest",
       "breakpoints": true
+    },
+    {
+      "idx": 63,
+      "version": "7",
+      "when": 1786300000000,
+      "tag": "0063_automation_manifest_provenance",
+      "breakpoints": true
     }
   ]
 }

package/dist/commands/agents.d.ts

@@ -29,6 +29,7 @@ declare function parseManifestSource(source: string, format: 'json' | 'yaml'): u
 declare function validateManifestDocument(raw: unknown): AgentEventManifest;
 /** Minimal agent shape the graph helpers need (matches SDK list output). */
 interface GraphAgentInput {
+    id: string;
     name: string;
     eventManifest?: {
         accepts?: {
@@ -44,12 +45,33 @@ interface GraphRow {
     agent: string;
     consumes: string;
     produces: string;
+    compiled: string;
 }
+/**
+ * Count compiled (manifest-managed) automations per owning agent (#986).
+ * Input is the SDK automations list; rows without `managedByAgentId` are
+ * hand-made and ignored.
+ */
+declare function countManagedAutomations(automations: Array<{
+    managedByAgentId?: string | null;
+}>): Map<string, number>;
+/**
+ * Render the declared-vs-materialized indicator for one agent:
+ *   - `-` when nothing is declared (nothing to compile),
+ *   - `unknown` when the automations list was unavailable,
+ *   - `materialized/declared` otherwise (e.g. `2/2`; `0/2` = declared but
+ *     not yet compiled — the manifest predates the G4b compiler).
+ */
+declare function formatCompiledIndicator(declared: number, materialized: number | undefined): string;
 /**
  * Build the producer/consumer table: one row per agent that declares at least
  * one accepts/publishes entry. Agents without a manifest are omitted.
+ *
+ * `managedCounts` (from `countManagedAutomations`, #986) drives the
+ * `compiled` column — declared vs materialized state; pass undefined when the
+ * automations list could not be fetched.
  */
-declare function buildGraphRows(agents: GraphAgentInput[]): GraphRow[];
+declare function buildGraphRows(agents: GraphAgentInput[], managedCounts?: Map<string, number>): GraphRow[];
 interface TypeGraphRow {
     agent: string;
     role: 'consumes' | 'produces';
@@ -67,6 +89,8 @@ export declare const __testables: {
     validateManifestDocument: typeof validateManifestDocument;
     buildGraphRows: typeof buildGraphRows;
     buildTypeRows: typeof buildTypeRows;
+    countManagedAutomations: typeof countManagedAutomations;
+    formatCompiledIndicator: typeof formatCompiledIndicator;
 };
 export declare function createAgentsCommand(): Command;
 export {};

package/dist/commands/agents.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agents.d.ts","sourceRoot":"","sources":["../../src/commands/agents.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAGH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAErD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAsJpC,8EAA8E;AAC9E,iBAAS,oBAAoB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAE/D;AAED;;;;GAIG;AACH,iBAAS,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAS7E;AAED;;;GAGG;AACH,iBAAS,wBAAwB,CAAC,GAAG,EAAE,OAAO,GAAG,kBAAkB,CASlE;AAED,4EAA4E;AAC5E,UAAU,eAAe;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,CAAC,EAAE;QACd,OAAO,CAAC,EAAE;YAAE,KAAK,EAAE,MAAM,CAAC;YAAC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;SAAE,EAAE,CAAC;QAChE,SAAS,CAAC,EAAE;YAAE,KAAK,EAAE,MAAM,CAAA;SAAE,EAAE,CAAC;KACjC,GAAG,IAAI,CAAC;CACV;AAED,UAAU,QAAQ;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAQD;;;GAGG;AACH,iBAAS,cAAc,CAAC,MAAM,EAAE,eAAe,EAAE,GAAG,QAAQ,EAAE,CAc7D;AAED,UAAU,YAAY;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,UAAU,GAAG,UAAU,CAAC;IAC9B,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;GAGG;AACH,iBAAS,aAAa,CAAC,MAAM,EAAE,eAAe,EAAE,EAAE,SAAS,EAAE,MAAM,GAAG,YAAY,EAAE,CAcnF;AAED,oCAAoC;AACpC,eAAO,MAAM,WAAW;;;;;;CAMvB,CAAC;AAEF,wBAAgB,mBAAmB,IAAI,OAAO,CA0Q7C"}
+{"version":3,"file":"agents.d.ts","sourceRoot":"","sources":["../../src/commands/agents.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAGH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAErD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAsJpC,8EAA8E;AAC9E,iBAAS,oBAAoB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAE/D;AAED;;;;GAIG;AACH,iBAAS,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAS7E;AAED;;;GAGG;AACH,iBAAS,wBAAwB,CAAC,GAAG,EAAE,OAAO,GAAG,kBAAkB,CASlE;AAED,4EAA4E;AAC5E,UAAU,eAAe;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,CAAC,EAAE;QACd,OAAO,CAAC,EAAE;YAAE,KAAK,EAAE,MAAM,CAAC;YAAC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;SAAE,EAAE,CAAC;QAChE,SAAS,CAAC,EAAE;YAAE,KAAK,EAAE,MAAM,CAAA;SAAE,EAAE,CAAC;KACjC,GAAG,IAAI,CAAC;CACV;AAED,UAAU,QAAQ;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;;GAIG;AACH,iBAAS,uBAAuB,CAAC,WAAW,EAAE,KAAK,CAAC;IAAE,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAQ9G;AAED;;;;;;GAMG;AACH,iBAAS,uBAAuB,CAAC,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAI3F;AAQD;;;;;;;GAOG;AACH,iBAAS,cAAc,CAAC,MAAM,EAAE,eAAe,EAAE,EAAE,aAAa,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,QAAQ,EAAE,CAelG;AAED,UAAU,YAAY;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,UAAU,GAAG,UAAU,CAAC;IAC9B,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;GAGG;AACH,iBAAS,aAAa,CAAC,MAAM,EAAE,eAAe,EAAE,EAAE,SAAS,EAAE,MAAM,GAAG,YAAY,EAAE,CAcnF;AAED,oCAAoC;AACpC,eAAO,MAAM,WAAW;;;;;;;;CAQvB,CAAC;AAEF,wBAAgB,mBAAmB,IAAI,OAAO,CAoR7C"}

package/dist/commands/automations.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"automations.d.ts","sourceRoot":"","sources":["../../src/commands/automations.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AA0FpC,wBAAgB,wBAAwB,IAAI,OAAO,CAwUlD"}
+{"version":3,"file":"automations.d.ts","sourceRoot":"","sources":["../../src/commands/automations.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AA0FpC,wBAAgB,wBAAwB,IAAI,OAAO,CA2UlD"}

package/dist/commands/webhooks.d.ts

@@ -12,7 +12,7 @@
  * shell history and `ps`), an environment variable (`--signature-secret-env`),
  * or stdin (`--signature-secret-stdin`, for `pass show ... | omni webhooks ...`).
  */
-import type { WebhookSignatureConfigBody } from '@omni/sdk';
+import type { WebhookEventTypeMappingBody, WebhookSignatureConfigBody } from '@omni/sdk';
 import { Command } from 'commander';
 interface SignatureSecretOptions {
     signatureSecret?: string;
@@ -32,6 +32,47 @@ declare function buildSignatureConfig(options: {
     signatureHeader?: string;
     signaturePrefix?: string;
 }): WebhookSignatureConfigBody | undefined;
+/**
+ * Parse `--event-type-mapping` — inline JSON, or `@path/to/file.json` (the
+ * repo's existing @file convention, cf. follow-up's JSON args) — and validate
+ * it against the API's mapping schema. Returns undefined when the flag was
+ * not given; throws (caught by the command's error path) BEFORE any request
+ * is sent on an unreadable file, invalid JSON, or a schema-invalid mapping.
+ */
+declare function resolveEventTypeMapping(raw: string | undefined): WebhookEventTypeMappingBody | undefined;
+interface UpdateSourceOptions extends SignatureSecretOptions {
+    name?: string;
+    description?: string;
+    enable?: boolean;
+    disable?: boolean;
+    signatureAlgorithm?: string;
+    signatureHeader?: string;
+    signaturePrefix?: string;
+    clearSignature?: boolean;
+    idempotencyKeyTemplate?: string;
+    strictSchemas?: boolean;
+    eventTypeMapping?: string;
+    clearEventTypeMapping?: boolean;
+    expectedInterval?: string;
+    clearCadence?: boolean;
+    windowSemantics?: string;
+    mutationPolicy?: string;
+}
+interface UpdateSourcePatch {
+    name?: string;
+    description?: string;
+    enabled?: boolean;
+    signatureConfig?: WebhookSignatureConfigBody | null;
+    signatureSecret?: string;
+    idempotencyKeyTemplate?: string;
+    strictSchemas?: boolean;
+    eventTypeMapping?: WebhookEventTypeMappingBody | null;
+    expectedIntervalSeconds?: number | null;
+    windowSemantics?: (typeof WINDOW_SEMANTICS)[number];
+    mutationPolicy?: (typeof MUTATION_POLICIES)[number];
+}
+/** Assemble the PATCH body from the update flags (only touched fields). */
+declare function buildUpdateSourcePatch(options: UpdateSourceOptions): Promise<UpdateSourcePatch>;
 /**
  * Create-only pairing: the API rejects a `signatureConfig` without a secret
  * and a secret without a config (CreateWebhookSourceSchema). Fail here, before
@@ -39,12 +80,16 @@ declare function buildSignatureConfig(options: {
  * covered — a secret-only update rotates the secret against the stored config.
  */
 declare function assertPairedSignatureOnCreate(signatureConfig: WebhookSignatureConfigBody | undefined, signatureSecret: string | undefined): void;
+declare const WINDOW_SEMANTICS: readonly ["future_only", "includes_in_progress"];
+declare const MUTATION_POLICIES: readonly ["same_id", "new_id"];
 export declare function createWebhooksCommand(): Command;
 /** Test-only surface — not part of the CLI contract. */
 export declare const __testables: {
     resolveSignatureSecret: typeof resolveSignatureSecret;
     buildSignatureConfig: typeof buildSignatureConfig;
     assertPairedSignatureOnCreate: typeof assertPairedSignatureOnCreate;
+    resolveEventTypeMapping: typeof resolveEventTypeMapping;
+    buildUpdateSourcePatch: typeof buildUpdateSourcePatch;
 };
 export {};
 //# sourceMappingURL=webhooks.d.ts.map

package/dist/commands/webhooks.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"webhooks.d.ts","sourceRoot":"","sources":["../../src/commands/webhooks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,WAAW,CAAC;AAC5D,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAapC,UAAU,sBAAsB;IAC9B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,oBAAoB,CAAC,EAAE,OAAO,CAAC;CAChC;AAcD;;;;;GAKG;AACH,iBAAe,sBAAsB,CACnC,OAAO,EAAE,sBAAsB,EAC/B,SAAS,GAAE,MAAM,OAAO,CAAC,MAAM,CAAuB,GACrD,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAqC7B;AAED,6FAA6F;AAC7F,iBAAS,oBAAoB,CAAC,OAAO,EAAE;IACrC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B,GAAG,0BAA0B,GAAG,SAAS,CAczC;AAuDD;;;;;GAKG;AACH,iBAAS,6BAA6B,CACpC,eAAe,EAAE,0BAA0B,GAAG,SAAS,EACvD,eAAe,EAAE,MAAM,GAAG,SAAS,GAClC,IAAI,CAQN;AA4DD,wBAAgB,qBAAqB,IAAI,OAAO,CA2R/C;AAED,wDAAwD;AACxD,eAAO,MAAM,WAAW;;;;CAAkF,CAAC"}
+{"version":3,"file":"webhooks.d.ts","sourceRoot":"","sources":["../../src/commands/webhooks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAGH,OAAO,KAAK,EAAE,2BAA2B,EAAE,0BAA0B,EAAE,MAAM,WAAW,CAAC;AACzF,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAapC,UAAU,sBAAsB;IAC9B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,oBAAoB,CAAC,EAAE,OAAO,CAAC;CAChC;AAcD;;;;;GAKG;AACH,iBAAe,sBAAsB,CACnC,OAAO,EAAE,sBAAsB,EAC/B,SAAS,GAAE,MAAM,OAAO,CAAC,MAAM,CAAuB,GACrD,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAqC7B;AAED,6FAA6F;AAC7F,iBAAS,oBAAoB,CAAC,OAAO,EAAE;IACrC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B,GAAG,0BAA0B,GAAG,SAAS,CAczC;AAoBD;;;;;;GAMG;AACH,iBAAS,uBAAuB,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,2BAA2B,GAAG,SAAS,CA0BjG;AAED,UAAU,mBAAoB,SAAQ,sBAAsB;IAC1D,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAGhC,aAAa,CAAC,EAAE,OAAO,CAAC;IAGxB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAEhC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,UAAU,iBAAiB;IACzB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,eAAe,CAAC,EAAE,0BAA0B,GAAG,IAAI,CAAC;IACpD,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,gBAAgB,CAAC,EAAE,2BAA2B,GAAG,IAAI,CAAC;IACtD,uBAAuB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxC,eAAe,CAAC,EAAE,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC;IACpD,cAAc,CAAC,EAAE,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC;CACrD;AAED,2EAA2E;AAC3E,iBAAe,sBAAsB,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAuB9F;AAED;;;;;GAKG;AACH,iBAAS,6BAA6B,CACpC,eAAe,EAAE,0BAA0B,GAAG,SAAS,EACvD,eAAe,EAAE,MAAM,GAAG,SAAS,GAClC,IAAI,CAQN;AAID,QAAA,MAAM,gBAAgB,kDAAmD,CAAC;AAC1E,QAAA,MAAM,iBAAiB,gCAAiC,CAAC;AAuDzD,wBAAgB,qBAAqB,IAAI,OAAO,CA4S/C;AAED,wDAAwD;AACxD,eAAO,MAAM,WAAW;;;;;;CAMvB,CAAC"}

package/dist/index.js

@@ -82709,6 +82709,7 @@ var init_schema2 = __esm(() => {
     enabled: boolean2("enabled").notNull().default(true),
     priority: integer("priority").notNull().default(0),
     transactionalEmissions: boolean2("transactional_emissions").notNull().default(false),
+    managedByAgentId: uuid("managed_by_agent_id").references(() => agents.id, { onDelete: "cascade" }),
     createdAt: timestamp("created_at", { withTimezone: true }).notNull().defaultNow(),
     updatedAt: timestamp("updated_at", { withTimezone: true }).notNull().defaultNow(),
     tenantId: uuid("tenant_id").references(() => tenants.id, { onDelete: "restrict" })
@@ -82718,7 +82719,8 @@ var init_schema2 = __esm(() => {
     nameIdx: index("automations_name_idx").on(table3.name),
     triggerIdx: index("automations_trigger_idx").on(table3.triggerEventType),
     enabledIdx: index("automations_enabled_idx").on(table3.enabled),
-    priorityIdx: index("automations_priority_idx").on(table3.priority)
+    priorityIdx: index("automations_priority_idx").on(table3.priority),
+    managedByAgentIdx: index("automations_managed_by_agent_idx").on(table3.managedByAgentId)
   }));
   automationLogStatuses = ["success", "failed", "skipped"];
   automationLogs = pgTable("automation_logs", {
@@ -136693,7 +136695,7 @@ import { fileURLToPath } from "url";
 // package.json
 var package_default = {
   name: "@automagik/omni",
-  version: "2.260908.8",
+  version: "2.260908.10",
   repository: {
     type: "git",
     url: "git+https://github.com/automagik-dev/omni.git",
@@ -137808,11 +137810,28 @@ ${issues}`);
   }
   return result.data;
 }
+function countManagedAutomations(automations2) {
+  const counts = new Map;
+  for (const automation of automations2) {
+    const agentId = automation.managedByAgentId;
+    if (!agentId)
+      continue;
+    counts.set(agentId, (counts.get(agentId) ?? 0) + 1);
+  }
+  return counts;
+}
+function formatCompiledIndicator(declared, materialized) {
+  if (declared === 0)
+    return "-";
+  if (materialized === undefined)
+    return "unknown";
+  return `${materialized}/${declared}`;
+}
 function formatAcceptsEntry(entry) {
   const filtered = entry.filter !== undefined && Object.keys(entry.filter).length > 0;
   return filtered ? `${entry.event} (filtered)` : entry.event;
 }
-function buildGraphRows(agents) {
+function buildGraphRows(agents, managedCounts) {
   const rows = [];
   for (const agent3 of agents) {
     const manifest = agent3.eventManifest;
@@ -137823,7 +137842,8 @@ function buildGraphRows(agents) {
     rows.push({
       agent: agent3.name,
       consumes: accepts.length > 0 ? accepts.map(formatAcceptsEntry).join(", ") : "-",
-      produces: publishes.length > 0 ? publishes.map((entry) => entry.event).join(", ") : "-"
+      produces: publishes.length > 0 ? publishes.map((entry) => entry.event).join(", ") : "-",
+      compiled: formatCompiledIndicator(accepts.length, managedCounts ? managedCounts.get(agent3.id) ?? 0 : undefined)
     });
   }
   return rows;
@@ -137991,7 +138011,13 @@ function createAgentsCommand() {
         list(rows2, { emptyMessage: `No agent declares ${options.type}.` });
         return;
       }
-      const rows = buildGraphRows(items);
+      let managedCounts;
+      try {
+        managedCounts = countManagedAutomations(await client.automations.list({}));
+      } catch {
+        managedCounts = undefined;
+      }
+      const rows = buildGraphRows(items, managedCounts);
       list(rows, { emptyMessage: "No agent declares an event manifest." });
     } catch (err2) {
       const message2 = err2 instanceof Error ? err2.message : "Unknown error";
@@ -138829,7 +138855,8 @@ function createAutomationsCommand() {
         name: a2.name,
         trigger: a2.triggerEventType,
         enabled: a2.enabled ? "yes" : "no",
-        priority: a2.priority
+        priority: a2.priority,
+        managed: a2.managedByAgentId ? "manifest" : "-"
       }));
       list(items, { emptyMessage: "No automations found." });
     } catch (err2) {
@@ -151728,6 +151755,7 @@ ${lines.join(`
 }
 
 // src/commands/webhooks.ts
+import { readFileSync as readFileSync18 } from "fs";
 init_zod();
 init_output();
 var SIGNATURE_ALGORITHMS = ["hmac-sha256", "hmac-sha1", "token-match"];
@@ -151797,6 +151825,43 @@ function buildSignatureConfig(options3) {
   }
   return { algorithm, header: signatureHeader, prefix: signaturePrefix };
 }
+var eventTypeMappingSchema = exports_external.discriminatedUnion("source", [
+  exports_external.object({
+    source: exports_external.literal("header"),
+    header: exports_external.string().min(1, "header must be 1-200 characters").max(200, "header must be 1-200 characters")
+  }),
+  exports_external.object({
+    source: exports_external.literal("body"),
+    path: exports_external.string().min(1, "path must be 1-200 characters").max(200, "path must be 1-200 characters")
+  })
+]);
+var EVENT_TYPE_MAPPING_HINT = 'expected {"source":"header","header":"X-GitHub-Event"} or {"source":"body","path":"event"}';
+function resolveEventTypeMapping(raw2) {
+  if (raw2 === undefined)
+    return;
+  let text3 = raw2;
+  if (raw2.startsWith("@")) {
+    const path = raw2.slice(1);
+    try {
+      text3 = readFileSync18(path, "utf-8");
+    } catch (err2) {
+      const reason = err2 instanceof Error ? err2.message : "Unknown error";
+      throw new Error(`Cannot read --event-type-mapping file '${path}': ${reason}`);
+    }
+  }
+  let parsed;
+  try {
+    parsed = JSON.parse(text3);
+  } catch {
+    throw new Error(`Invalid JSON for --event-type-mapping; ${EVENT_TYPE_MAPPING_HINT}`);
+  }
+  const result = eventTypeMappingSchema.safeParse(parsed);
+  if (!result.success) {
+    const reason = result.error.issues.map((issue) => issue.path.length > 0 ? `${issue.path.join(".")}: ${issue.message}` : issue.message).join("; ");
+    throw new Error(`Invalid --event-type-mapping: ${reason}; ${EVENT_TYPE_MAPPING_HINT}`);
+  }
+  return result.data;
+}
 async function buildUpdateSourcePatch(options3) {
   const updates = buildLifecycleUpdates(options3);
   if (options3.name)
@@ -151807,6 +151872,14 @@ async function buildUpdateSourcePatch(options3) {
     updates.idempotencyKeyTemplate = options3.idempotencyKeyTemplate;
   if (options3.strictSchemas !== undefined)
     updates.strictSchemas = options3.strictSchemas;
+  if (options3.clearEventTypeMapping && options3.eventTypeMapping !== undefined) {
+    throw new Error("Use only one of --event-type-mapping and --clear-event-type-mapping");
+  }
+  if (options3.clearEventTypeMapping)
+    updates.eventTypeMapping = null;
+  const eventTypeMapping = resolveEventTypeMapping(options3.eventTypeMapping);
+  if (eventTypeMapping !== undefined)
+    updates.eventTypeMapping = eventTypeMapping;
   if (options3.enable)
     updates.enabled = true;
   if (options3.disable)
@@ -151916,7 +151989,7 @@ function createWebhooksCommand() {
       error(`Failed to get webhook source: ${message2}`);
     }
   });
-  webhooks.command("create").description("Create a webhook source").requiredOption("--name <name>", "Webhook source name").option("--description <desc>", "Description").option("--disabled", "Create in disabled state").option("--headers <json>", `Expected headers as JSON (e.g., '{"X-Secret": true}')`).option("--signature-algorithm <alg>", "Signature verification: hmac-sha256, hmac-sha1, or token-match").option("--signature-header <name>", "Header carrying the signature/token (e.g., X-Hub-Signature-256)").option("--signature-prefix <prefix>", "Prefix before the hex digest (e.g., 'sha256=')").option("--signature-secret <secret>", "Shared secret for signature verification (write-only). Visible in shell history and process lists \u2014 prefer --signature-secret-env or --signature-secret-stdin").option("--signature-secret-env <VAR>", "Read the shared secret from environment variable VAR").option("--signature-secret-stdin", "Read the shared secret from stdin (trailing newline stripped)").option("--idempotency-key-template <template>", "Delivery-identity key template for redelivery dedup (#958). Placeholders: {source}, {sha256(body)}, " + "{headers.<name>}, {payload.<dot.path>}. Defaults to '{source}:{sha256(body)}'").option("--strict-schemas", "Refuse deliveries whose event type has no enabled registered schema (dead-lettered as " + "schema_not_registered, #1000). Recommended for new sources. Defaults to off").option("--expected-interval <seconds>", "Declared cadence: >=1 event or heartbeat per N seconds. Arms liveness supervision (#961)").option("--window-semantics <value>", `Declared window semantics: ${WINDOW_SEMANTICS.join(" or ")}`).option("--mutation-policy <value>", `Declared mutation re-emit policy: ${MUTATION_POLICIES.join(" or ")}`).action(async (options3) => {
+  webhooks.command("create").description("Create a webhook source").requiredOption("--name <name>", "Webhook source name").option("--description <desc>", "Description").option("--disabled", "Create in disabled state").option("--headers <json>", `Expected headers as JSON (e.g., '{"X-Secret": true}')`).option("--signature-algorithm <alg>", "Signature verification: hmac-sha256, hmac-sha1, or token-match").option("--signature-header <name>", "Header carrying the signature/token (e.g., X-Hub-Signature-256)").option("--signature-prefix <prefix>", "Prefix before the hex digest (e.g., 'sha256=')").option("--signature-secret <secret>", "Shared secret for signature verification (write-only). Visible in shell history and process lists \u2014 prefer --signature-secret-env or --signature-secret-stdin").option("--signature-secret-env <VAR>", "Read the shared secret from environment variable VAR").option("--signature-secret-stdin", "Read the shared secret from stdin (trailing newline stripped)").option("--idempotency-key-template <template>", "Delivery-identity key template for redelivery dedup (#958). Placeholders: {source}, {sha256(body)}, " + "{headers.<name>}, {payload.<dot.path>}. Defaults to '{source}:{sha256(body)}'").option("--strict-schemas", "Refuse deliveries whose event type has no enabled registered schema (dead-lettered as " + "schema_not_registered, #1000). Recommended for new sources. Defaults to off").option("--event-type-mapping <json>", "Semantic event-type extraction (#959): inline JSON or @path/to/file.json, e.g. " + `'{"source":"header","header":"X-GitHub-Event"}' or '{"source":"body","path":"event"}'. ` + "A mapped source emits custom.{source}.{event} instead of the collapsed custom.webhook.{source}").option("--expected-interval <seconds>", "Declared cadence: >=1 event or heartbeat per N seconds. Arms liveness supervision (#961)").option("--window-semantics <value>", `Declared window semantics: ${WINDOW_SEMANTICS.join(" or ")}`).option("--mutation-policy <value>", `Declared mutation re-emit policy: ${MUTATION_POLICIES.join(" or ")}`).action(async (options3) => {
     const client = getClient();
     try {
       let expectedHeaders;
@@ -151939,6 +152012,7 @@ function createWebhooksCommand() {
         signatureSecret,
         idempotencyKeyTemplate: options3.idempotencyKeyTemplate,
         strictSchemas: options3.strictSchemas,
+        eventTypeMapping: resolveEventTypeMapping(options3.eventTypeMapping),
         expectedIntervalSeconds: parseExpectedInterval(options3.expectedInterval),
         windowSemantics: parseWindowSemantics(options3.windowSemantics),
         mutationPolicy: parseMutationPolicy(options3.mutationPolicy)
@@ -151957,7 +152031,7 @@ function createWebhooksCommand() {
       error(`Failed to create webhook source: ${message2}`);
     }
   });
-  webhooks.command("update <id>").description("Update a webhook source").option("--name <name>", "New name").option("--description <desc>", "New description").option("--enable", "Enable the webhook").option("--disable", "Disable the webhook").option("--signature-algorithm <alg>", "Signature verification: hmac-sha256, hmac-sha1, or token-match").option("--signature-header <name>", "Header carrying the signature/token (e.g., X-Hub-Signature-256)").option("--signature-prefix <prefix>", "Prefix before the hex digest (e.g., 'sha256=')").option("--signature-secret <secret>", "Shared secret for signature verification (write-only). Visible in shell history and process lists \u2014 prefer --signature-secret-env or --signature-secret-stdin").option("--signature-secret-env <VAR>", "Read the shared secret from environment variable VAR").option("--signature-secret-stdin", "Read the shared secret from stdin (trailing newline stripped)").option("--clear-signature", "Remove the signature config and stored secret").option("--idempotency-key-template <template>", "Delivery-identity key template for redelivery dedup (#958). Placeholders: {source}, {sha256(body)}, " + "{headers.<name>}, {payload.<dot.path>}").option("--strict-schemas", "Refuse deliveries whose event type has no enabled registered schema (dead-lettered as " + "schema_not_registered, #1000)").option("--no-strict-schemas", "Return the source to opt-in pass-through for unregistered event types").option("--expected-interval <seconds>", "Declared cadence: >=1 event or heartbeat per N seconds. (Re)arms liveness supervision (#961)").option("--clear-cadence", "Remove the declared cadence (disarms liveness supervision)").option("--window-semantics <value>", `Declared window semantics: ${WINDOW_SEMANTICS.join(" or ")}`).option("--mutation-policy <value>", `Declared mutation re-emit policy: ${MUTATION_POLICIES.join(" or ")}`).action(async (id, options3) => {
+  webhooks.command("update <id>").description("Update a webhook source").option("--name <name>", "New name").option("--description <desc>", "New description").option("--enable", "Enable the webhook").option("--disable", "Disable the webhook").option("--signature-algorithm <alg>", "Signature verification: hmac-sha256, hmac-sha1, or token-match").option("--signature-header <name>", "Header carrying the signature/token (e.g., X-Hub-Signature-256)").option("--signature-prefix <prefix>", "Prefix before the hex digest (e.g., 'sha256=')").option("--signature-secret <secret>", "Shared secret for signature verification (write-only). Visible in shell history and process lists \u2014 prefer --signature-secret-env or --signature-secret-stdin").option("--signature-secret-env <VAR>", "Read the shared secret from environment variable VAR").option("--signature-secret-stdin", "Read the shared secret from stdin (trailing newline stripped)").option("--clear-signature", "Remove the signature config and stored secret").option("--idempotency-key-template <template>", "Delivery-identity key template for redelivery dedup (#958). Placeholders: {source}, {sha256(body)}, " + "{headers.<name>}, {payload.<dot.path>}").option("--strict-schemas", "Refuse deliveries whose event type has no enabled registered schema (dead-lettered as " + "schema_not_registered, #1000)").option("--no-strict-schemas", "Return the source to opt-in pass-through for unregistered event types").option("--event-type-mapping <json>", "Semantic event-type extraction (#959): inline JSON or @path/to/file.json, e.g. " + `'{"source":"header","header":"X-GitHub-Event"}' or '{"source":"body","path":"event"}'`).option("--clear-event-type-mapping", "Remove the mapping (deliveries fall back to the collapsed custom.webhook.{source} type)").option("--expected-interval <seconds>", "Declared cadence: >=1 event or heartbeat per N seconds. (Re)arms liveness supervision (#961)").option("--clear-cadence", "Remove the declared cadence (disarms liveness supervision)").option("--window-semantics <value>", `Declared window semantics: ${WINDOW_SEMANTICS.join(" or ")}`).option("--mutation-policy <value>", `Declared mutation re-emit policy: ${MUTATION_POLICIES.join(" or ")}`).action(async (id, options3) => {
     const resolvedId = await resolveWebhookId(id);
     const client = getClient();
     try {
@@ -152055,7 +152129,7 @@ init_config();
 init_output();
 
 // src/manifest-pin.ts
-import { existsSync as existsSync21, readFileSync as readFileSync18, renameSync as renameSync3, writeFileSync as writeFileSync12 } from "fs";
+import { existsSync as existsSync21, readFileSync as readFileSync19, renameSync as renameSync3, writeFileSync as writeFileSync12 } from "fs";
 import { homedir as homedir14 } from "os";
 import { join as join20 } from "path";
 var PACKAGE_NAME2 = "@automagik/omni";
@@ -152065,7 +152139,7 @@ function pinManifestEntry(manifestPath, exactVersion) {
     return false;
   let manifest;
   try {
-    manifest = JSON.parse(readFileSync18(manifestPath, "utf-8"));
+    manifest = JSON.parse(readFileSync19(manifestPath, "utf-8"));
   } catch {
     return false;
   }

package/dist/sdk/client.d.ts

@@ -645,6 +645,12 @@ export interface ListWebhookSourcesParams {
  * Derived from the generated OpenAPI component so it cannot drift from the API.
  */
 export type WebhookSignatureConfigBody = components['schemas']['WebhookSignatureConfig'];
+/**
+ * Semantic event-type extraction contract for a webhook source (#959/#984):
+ * header-source or body-source. Derived from the generated OpenAPI component
+ * so it cannot drift from the API.
+ */
+export type WebhookEventTypeMappingBody = components['schemas']['WebhookEventTypeMapping'];
 /**
  * Body for creating a webhook source.
  *
@@ -681,6 +687,13 @@ export interface CreateWebhookSourceBody {
      * passing through. Defaults to false server-side (opt-in pass-through).
      */
     strictSchemas?: boolean;
+    /**
+     * Semantic event-type extraction (#959/#984): a mapped source emits
+     * `custom.{source}.{event}` (event name read from a header or a body
+     * dot-path) instead of the collapsed `custom.webhook.{source}`. Null or
+     * absent keeps the collapsed type; null clears it on update.
+     */
+    eventTypeMapping?: WebhookEventTypeMappingBody | null;
     /** Defaults to true server-side */
     enabled?: boolean;
     /**