@agent-native/creative-context 0.1.0 → 0.3.0

package/src/server/generation-artifact-access.spec.ts

@@ -0,0 +1,104 @@
+import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
+
+const mocks = vi.hoisted(() => ({
+  assertAccess: vi.fn(),
+  getRequestUserEmail: vi.fn(),
+  getRequestOrgId: vi.fn(),
+}));
+
+vi.mock("@agent-native/core/sharing", () => ({
+  assertAccess: mocks.assertAccess,
+}));
+
+vi.mock("@agent-native/core/server/request-context", () => ({
+  getRequestUserEmail: mocks.getRequestUserEmail,
+  getRequestOrgId: mocks.getRequestOrgId,
+}));
+
+import {
+  assertGenerationArtifactAccessProof,
+  createGenerationArtifactAccessCapability,
+  verifyGenerationArtifactAccessCapability,
+} from "./generation-artifact-access.js";
+
+const originalKey = process.env.CREATIVE_CONTEXT_A2A_KEY;
+const identity = {
+  appId: "slides",
+  artifactType: "deck",
+  artifactId: "deck-1",
+};
+
+describe("generation artifact access capabilities", () => {
+  beforeEach(() => {
+    vi.clearAllMocks();
+    process.env.CREATIVE_CONTEXT_A2A_KEY = "test-capability-signing-key";
+    mocks.getRequestUserEmail.mockReturnValue("alice@example.test");
+    mocks.getRequestOrgId.mockReturnValue("org-1");
+    mocks.assertAccess.mockResolvedValue({ role: "editor" });
+  });
+
+  afterEach(() => {
+    if (originalKey === undefined) delete process.env.CREATIVE_CONTEXT_A2A_KEY;
+    else process.env.CREATIVE_CONTEXT_A2A_KEY = originalKey;
+  });
+
+  it("mints a short-lived capability only after host artifact access succeeds", async () => {
+    const token = await createGenerationArtifactAccessCapability(
+      identity,
+      { resourceType: "deck", resourceId: "deck-1" },
+      "record",
+    );
+    expect(mocks.assertAccess).toHaveBeenCalledWith(
+      "deck",
+      "deck-1",
+      "editor",
+      undefined,
+      { skipResourceBody: true },
+    );
+
+    const proof = await verifyGenerationArtifactAccessCapability(
+      token,
+      identity,
+      "record",
+    );
+    expect(() =>
+      assertGenerationArtifactAccessProof(identity, proof, "editor"),
+    ).not.toThrow();
+  });
+
+  it("binds the capability to caller, artifact identity, and operation", async () => {
+    const token = await createGenerationArtifactAccessCapability(
+      identity,
+      { resourceType: "deck", resourceId: "deck-1" },
+      "read",
+    );
+
+    await expect(
+      verifyGenerationArtifactAccessCapability(
+        token,
+        { ...identity, artifactId: "guessed-deck" },
+        "read",
+      ),
+    ).rejects.toThrow(/invalid generation artifact access capability/i);
+    await expect(
+      verifyGenerationArtifactAccessCapability(token, identity, "record"),
+    ).rejects.toThrow(/invalid generation artifact access capability/i);
+    mocks.getRequestUserEmail.mockReturnValue("mallory@example.test");
+    await expect(
+      verifyGenerationArtifactAccessCapability(token, identity, "read"),
+    ).rejects.toThrow(/invalid generation artifact access capability/i);
+  });
+
+  it("rejects forged capability bytes", async () => {
+    const token = await createGenerationArtifactAccessCapability(
+      identity,
+      { resourceType: "deck", resourceId: "deck-1" },
+      "read",
+    );
+    const forged = `${token.slice(0, -1)}${token.endsWith("a") ? "b" : "a"}`;
+
+    await expect(
+      verifyGenerationArtifactAccessCapability(forged, identity, "read"),
+    ).rejects.toThrow(/invalid generation artifact access capability/i);
+  });
+});

package/src/server/generation-context-a2a.spec.ts

@@ -10,12 +10,18 @@ const mocks = vi.hoisted(() => ({
   getLocal: vi.fn(),
   hasA2A: vi.fn(),
   callA2A: vi.fn(),
+  getRequestOrgId: vi.fn(),
+  createArtifactCapability: vi.fn(),
 }));
 
 vi.mock("@agent-native/core/application-state", () => ({
   readAppState: mocks.readAppState,
 }));
 
+vi.mock("@agent-native/core/server/request-context", () => ({
+  getRequestOrgId: mocks.getRequestOrgId,
+}));
+
 vi.mock("../store/index.js", () => ({
   getContextPack: mocks.getContextPack,
   getCreativeContextItem: mocks.getCreativeContextItem,
@@ -43,6 +49,11 @@ vi.mock("./isolated-a2a.js", () => ({
   })),
 }));
 
+vi.mock("./generation-artifact-access.js", () => ({
+  assertGenerationArtifactAccess: vi.fn(),
+  createGenerationArtifactAccessCapability: mocks.createArtifactCapability,
+}));
+
 import {
   getGenerationCreativeContext,
   recordGenerationCreativeContext,
@@ -62,6 +73,10 @@ describe("generation context isolated A2A routing", () => {
     vi.clearAllMocks();
     mocks.readAppState.mockResolvedValue({ contextMode: "auto" });
     mocks.hasA2A.mockReturnValue(true);
+    mocks.getRequestOrgId.mockReturnValue("org-1");
+    mocks.createArtifactCapability.mockImplementation(
+      async (_identity, _target, operation) => `cap-${operation}`,
+    );
     mocks.callA2A.mockResolvedValue(emptyRemoteContext);
   });
 
@@ -104,12 +119,15 @@ describe("generation context isolated A2A routing", () => {
         artifactType: "deck",
         artifactId: "deck-1",
       },
-      accessScope: "owner",
+      artifactAccessCapability: "cap-read",
     });
     expect(mocks.callA2A).toHaveBeenNthCalledWith(
       4,
       "record",
-      expect.objectContaining({ artifactId: "deck-1" }),
+      expect.objectContaining({
+        artifactId: "deck-1",
+        artifactAccessCapability: "cap-record",
+      }),
     );
     expect(mocks.recordLocal).not.toHaveBeenCalled();
     expect(mocks.getLocal).not.toHaveBeenCalled();

package/src/server/generation-context.ts

@@ -14,18 +14,18 @@ import type {
   CreativeContextElementProvenance,
   CreativeContextReuseLabel,
 } from "../types.js";
-import {
-  callIsolatedCreativeContextA2A,
-  hasIsolatedCreativeContextA2A,
-  isolatedResolvePayload,
-  type IsolatedRecordPayload,
-} from "./isolated-a2a.js";
 import {
   assertGenerationArtifactAccess,
   createGenerationArtifactAccessCapability,
   type GenerationArtifactAccessTarget,
   type GenerationArtifactIdentity,
 } from "./generation-artifact-access.js";
+import {
+  callIsolatedCreativeContextA2A,
+  hasIsolatedCreativeContextA2A,
+  isolatedResolvePayload,
+  type IsolatedRecordPayload,
+} from "./isolated-a2a.js";
 import { performCreativeContextSearch } from "./retrieval.js";
 import {
   sanitizeUntrustedReference,

package/src/server/isolated-a2a.spec.ts

@@ -141,7 +141,6 @@ describe("isolated Creative Context A2A", () => {
             artifactType: "deck",
             artifactId: "deck-1",
           },
-          accessScope: "owner",
         },
         {
           callAgent: vi.fn(async () => {
@@ -154,6 +153,27 @@ describe("isolated Creative Context A2A", () => {
     );
   });
 
+  it("rejects the retired caller-selectable collaborative read scope", () => {
+    const requestToken = Buffer.from(
+      JSON.stringify({
+        protocol: "creative-context-a2a-v1",
+        requestId: "87f466ae-32f4-4d0f-9de7-96f955e69f7b",
+        operation: "read",
+        payload: {
+          identity: {
+            appId: "slides",
+            artifactType: "deck",
+            artifactId: "guessed-deck",
+          },
+          accessScope: "artifact-access-asserted",
+        },
+      }),
+      "utf8",
+    ).toString("base64url");
+
+    expect(() => decodeCreativeContextA2ARequest(requestToken)).toThrow();
+  });
+
   it("fails closed when the isolated URL has no signing secret", async () => {
     delete process.env.CREATIVE_CONTEXT_A2A_KEY;
     delete process.env.A2A_SECRET;