imbi-api 2.40.0__tar.gz → 2.41.0__tar.gz

{imbi_api-2.40.0 → imbi_api-2.41.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: imbi-api
-Version: 2.40.0
+Version: 2.41.0
 Summary: Imbi is a DevOps Service Management Platform designed to provide an efficient way to manage a large environment that contains many services and applications.
 Author-email: Alex Campbell <alexc@aweber.com>, Dave Shawley <daves@aweber.com>, "Gavin M. Roy" <gavinr@aweber.com>
 License-Expression: BSD-3-Clause
@@ -19,8 +19,8 @@ Requires-Dist: cyclonedx-python-lib<12,>=11.7
 Requires-Dist: fastapi
 Requires-Dist: filetype
 Requires-Dist: httpx<1,>=0.28.1
-Requires-Dist: imbi-common[databases,llm,mcp,sentry,server]==2.40.0
-Requires-Dist: imbi-plugin-github==2.40.0
+Requires-Dist: imbi-common[databases,llm,mcp,sentry,server]==2.41.0
+Requires-Dist: imbi-plugin-github==2.41.0
 Requires-Dist: jinja2
 Requires-Dist: jsonpatch>=1.33
 Requires-Dist: limits<6,>=5

{imbi_api-2.40.0 → imbi_api-2.41.0}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "imbi-api"
-version = "2.40.0"
+version = "2.41.0"
 description = "Imbi is a DevOps Service Management Platform designed to provide an efficient way to manage a large environment that contains many services and applications."
 readme = "README.md"
 requires-python = ">=3.14"
@@ -28,8 +28,8 @@ dependencies = [
   "fastapi",
   "filetype",
   "httpx>=0.28.1,<1",
-  "imbi-common[databases,llm,mcp,sentry,server]==2.40.0",
-  "imbi-plugin-github==2.40.0",
+  "imbi-common[databases,llm,mcp,sentry,server]==2.41.0",
+  "imbi-plugin-github==2.41.0",
   "jinja2",
   "jsonpatch>=1.33",
   "limits>=5,<6",

{imbi_api-2.40.0 → imbi_api-2.41.0}/src/imbi/api/endpoints/agents.py

@@ -839,7 +839,9 @@ async def _check_platform(
         422: A secret reference does not parse, a new GitHub App
             binding is not an enabled ``github_app`` binding of the
             org, the settings widen the organization's agent
-            platform configuration, or a plugin cannot be pinned.
+            platform configuration, a plugin cannot be pinned, or a
+            new egress destination is unknown, global, or not for
+            the org.
 
     """
     try:
@@ -864,6 +866,7 @@ async def _check_platform(
             raise _unprocessable(
                 f'Secret binding {binding!r} or its provider is disabled'
             )
+    await _check_egress(store, org_id, settings, current)
     _version, config = await platform.load(store, org_id)
     problems = platform.widenings(config, settings)
     if problems:
@@ -883,6 +886,41 @@ async def _check_platform(
     return settings.model_copy(update={'plugins': plugins})
 
 
+async def _check_egress(
+    store: harness.HarnessStore,
+    org_id: str,
+    settings: models.AgentSettings,
+    current: models.AgentSettings | None,
+) -> None:
+    """Check the egress destinations that ``settings`` adds.
+
+    A destination that the agent has already keeps passing, so a
+    later change to it does not block an unrelated save.
+
+    Raises:
+        422: A new destination is not live, is global (every chain
+            has it), or is not for the organization.
+
+    """
+    added = set(settings.egress_destinations) - set(
+        current.egress_destinations if current else []
+    )
+    if not added:
+        return
+    rows = {row['slug']: row for row in await store.egress_destinations()}
+    problems: list[str] = []
+    for slug in sorted(added):
+        row = rows.get(slug)
+        if row is None:
+            problems.append(f'{slug!r} not found')
+        elif row['is_global']:
+            problems.append(f'{slug!r} is global')
+        elif row['organization_ids'] and org_id not in row['organization_ids']:
+            problems.append(f'{slug!r} is not for this organization')
+    if problems:
+        raise _unprocessable('Egress destinations: ' + '; '.join(problems))
+
+
 def _version_conflict_detail(n: int) -> str:
     return (
         f'Version {n} of this agent was saved by another request; '