@app-vitals/agent-admin 0.0.0-stage → 0.1.0

package/src/fixtures/k8s-cassette.json

@@ -0,0 +1,470 @@
+{
+  "createDeployment_success": {
+    "status": 201,
+    "body": {
+      "apiVersion": "apps/v1",
+      "kind": "Deployment",
+      "metadata": {
+        "name": "agent-abc",
+        "namespace": "shipwright",
+        "uid": "11111111-1111-1111-1111-111111111111",
+        "labels": { "app": "agent-abc" }
+      },
+      "spec": { "replicas": 1 },
+      "status": { "replicas": 0 }
+    }
+  },
+  "getDeployment_success": {
+    "status": 200,
+    "body": {
+      "apiVersion": "apps/v1",
+      "kind": "Deployment",
+      "metadata": {
+        "name": "agent-abc",
+        "namespace": "shipwright",
+        "uid": "11111111-1111-1111-1111-111111111111",
+        "labels": { "app": "agent-abc" }
+      },
+      "spec": { "replicas": 1 },
+      "status": { "replicas": 1, "readyReplicas": 1 }
+    }
+  },
+  "getDeployment_404": {
+    "status": 404,
+    "body": {
+      "apiVersion": "v1",
+      "kind": "Status",
+      "status": "Failure",
+      "message": "deployments.apps \"missing\" not found",
+      "reason": "NotFound",
+      "code": 404
+    }
+  },
+  "createDeployment_409": {
+    "status": 409,
+    "body": {
+      "apiVersion": "v1",
+      "kind": "Status",
+      "status": "Failure",
+      "message": "deployments.apps \"agent-abc\" already exists",
+      "reason": "AlreadyExists",
+      "code": 409
+    }
+  },
+  "createDeployment_403": {
+    "status": 403,
+    "body": {
+      "apiVersion": "v1",
+      "kind": "Status",
+      "status": "Failure",
+      "message": "deployments.apps is forbidden: User cannot create resource",
+      "reason": "Forbidden",
+      "code": 403
+    }
+  },
+  "getDeployment_401": {
+    "status": 401,
+    "body": {
+      "apiVersion": "v1",
+      "kind": "Status",
+      "status": "Failure",
+      "message": "Unauthorized",
+      "reason": "Unauthorized",
+      "code": 401
+    }
+  },
+  "getDeployment_502_html": {
+    "status": 502,
+    "body": "<html><head><title>502 Bad Gateway</title></head><body><h1>502 Bad Gateway</h1></body></html>"
+  },
+  "deleteDeployment_success": {
+    "status": 200,
+    "body": {
+      "apiVersion": "v1",
+      "kind": "Status",
+      "status": "Success",
+      "details": { "name": "agent-abc", "kind": "deployments" }
+    }
+  },
+  "createSecret_success": {
+    "status": 201,
+    "body": {
+      "apiVersion": "v1",
+      "kind": "Secret",
+      "type": "Opaque",
+      "metadata": {
+        "name": "agent-secret",
+        "namespace": "shipwright",
+        "uid": "22222222-2222-2222-2222-222222222222"
+      },
+      "data": { "TOKEN": "czNjcjN0" }
+    }
+  },
+  "createSecret_409": {
+    "status": 409,
+    "body": {
+      "apiVersion": "v1",
+      "kind": "Status",
+      "status": "Failure",
+      "message": "secrets \"agent-secret\" already exists",
+      "reason": "AlreadyExists",
+      "code": 409
+    }
+  },
+  "createSecret_403": {
+    "status": 403,
+    "body": {
+      "apiVersion": "v1",
+      "kind": "Status",
+      "status": "Failure",
+      "message": "secrets is forbidden: User cannot create resource",
+      "reason": "Forbidden",
+      "code": 403
+    }
+  },
+  "getSecret_success": {
+    "status": 200,
+    "body": {
+      "apiVersion": "v1",
+      "kind": "Secret",
+      "type": "Opaque",
+      "metadata": {
+        "name": "agent-secret",
+        "namespace": "shipwright",
+        "uid": "22222222-2222-2222-2222-222222222222"
+      },
+      "data": { "TOKEN": "czNjcjN0" }
+    }
+  },
+  "getSecret_404": {
+    "status": 404,
+    "body": {
+      "apiVersion": "v1",
+      "kind": "Status",
+      "status": "Failure",
+      "message": "secrets \"missing\" not found",
+      "reason": "NotFound",
+      "code": 404
+    }
+  },
+  "deleteSecret_success": {
+    "status": 200,
+    "body": {
+      "apiVersion": "v1",
+      "kind": "Status",
+      "status": "Success",
+      "details": { "name": "agent-secret", "kind": "secrets" }
+    }
+  },
+  "createPvc_success": {
+    "status": 201,
+    "body": {
+      "apiVersion": "v1",
+      "kind": "PersistentVolumeClaim",
+      "metadata": { "name": "agent-abc-home", "namespace": "shipwright" },
+      "spec": {
+        "accessModes": ["ReadWriteOnce"],
+        "resources": { "requests": { "storage": "40Gi" } }
+      },
+      "status": { "phase": "Pending" }
+    }
+  },
+  "getPvc_success": {
+    "status": 200,
+    "body": {
+      "apiVersion": "v1",
+      "kind": "PersistentVolumeClaim",
+      "metadata": { "name": "agent-abc-home", "namespace": "shipwright" },
+      "spec": {
+        "accessModes": ["ReadWriteOnce"],
+        "resources": { "requests": { "storage": "40Gi" } }
+      },
+      "status": { "phase": "Bound" }
+    }
+  },
+  "deletePvc_success": { "status": 200, "body": {} },
+  "createPvc_409": {
+    "status": 409,
+    "body": {
+      "message": "persistentvolumeclaims \"agent-abc-home\" already exists",
+      "reason": "AlreadyExists",
+      "code": 409
+    }
+  },
+  "getPvc_404": {
+    "status": 404,
+    "body": {
+      "message": "persistentvolumeclaims \"missing\" not found",
+      "reason": "NotFound",
+      "code": 404
+    }
+  },
+  "createServiceAccount_success": {
+    "status": 201,
+    "body": {
+      "apiVersion": "v1",
+      "kind": "ServiceAccount",
+      "metadata": { "name": "agent-abc", "namespace": "shipwright" }
+    }
+  },
+  "getServiceAccount_success": {
+    "status": 200,
+    "body": {
+      "apiVersion": "v1",
+      "kind": "ServiceAccount",
+      "metadata": { "name": "agent-abc", "namespace": "shipwright" }
+    }
+  },
+  "deleteServiceAccount_success": { "status": 200, "body": {} },
+  "createServiceAccount_409": {
+    "status": 409,
+    "body": {
+      "message": "serviceaccounts \"agent-abc\" already exists",
+      "reason": "AlreadyExists",
+      "code": 409
+    }
+  },
+  "getServiceAccount_404": {
+    "status": 404,
+    "body": {
+      "message": "serviceaccounts \"missing\" not found",
+      "reason": "NotFound",
+      "code": 404
+    }
+  },
+  "deleteServiceAccount_404": {
+    "status": 404,
+    "body": {
+      "message": "serviceaccounts \"missing\" not found",
+      "reason": "NotFound",
+      "code": 404
+    }
+  },
+  "listDeployments_success": {
+    "status": 200,
+    "body": {
+      "kind": "DeploymentList",
+      "apiVersion": "apps/v1",
+      "items": [
+        { "metadata": { "name": "agent-abc123" } },
+        { "metadata": { "name": "agent-def456" } }
+      ]
+    }
+  },
+  "listDeployments_empty": {
+    "status": 200,
+    "body": {
+      "kind": "DeploymentList",
+      "apiVersion": "apps/v1",
+      "items": []
+    }
+  },
+  "deploymentExists_true": {
+    "status": 200,
+    "body": {
+      "kind": "Deployment",
+      "apiVersion": "apps/v1",
+      "metadata": { "name": "agent-abc123", "namespace": "shipwright" }
+    }
+  },
+  "deploymentExists_false": {
+    "status": 404,
+    "body": {
+      "apiVersion": "v1",
+      "kind": "Status",
+      "status": "Failure",
+      "message": "deployments.apps \"agent-abc123\" not found",
+      "reason": "NotFound",
+      "code": 404
+    }
+  },
+  "listDeployments_policy": {
+    "status": 200,
+    "body": {
+      "kind": "DeploymentList",
+      "apiVersion": "apps/v1",
+      "items": [{ "metadata": { "name": "agent-abc" } }]
+    }
+  },
+  "getDeployment_policy": {
+    "status": 200,
+    "body": {
+      "apiVersion": "apps/v1",
+      "kind": "Deployment",
+      "metadata": {
+        "name": "agent-abc",
+        "namespace": "shipwright",
+        "labels": { "app.kubernetes.io/name": "shipwright-agent" }
+      },
+      "spec": {
+        "replicas": 1,
+        "strategy": { "type": "Recreate" },
+        "selector": { "matchLabels": { "app": "agent-abc" } },
+        "template": {
+          "metadata": {
+            "labels": { "app": "agent-abc" },
+            "annotations": {
+              "shipwright.dev/claude-policy-hash": "stale-hash"
+            }
+          },
+          "spec": {
+            "volumes": [
+              {
+                "name": "agent-home",
+                "persistentVolumeClaim": { "claimName": "agent-abc-home" }
+              },
+              {
+                "name": "claude-policy",
+                "configMap": {
+                  "name": "claude-policy-cm",
+                  "items": [
+                    {
+                      "key": "managed-settings.json",
+                      "path": "managed-settings.json"
+                    }
+                  ],
+                  "defaultMode": 292
+                }
+              }
+            ],
+            "containers": [
+              {
+                "name": "shipwright-agent",
+                "image": "ghcr.io/example/agent:stale",
+                "volumeMounts": [
+                  { "name": "agent-home", "mountPath": "/home/agent" },
+                  {
+                    "name": "claude-policy",
+                    "mountPath": "/etc/claude-code",
+                    "readOnly": true
+                  }
+                ]
+              }
+            ]
+          }
+        }
+      },
+      "status": { "replicas": 1, "readyReplicas": 1 }
+    }
+  },
+  "patchDeployment_policy_success": {
+    "status": 200,
+    "body": {
+      "apiVersion": "apps/v1",
+      "kind": "Deployment",
+      "metadata": { "name": "agent-abc", "namespace": "shipwright" }
+    }
+  },
+  "getDeployment_federation_absent": {
+    "status": 200,
+    "body": {
+      "apiVersion": "apps/v1",
+      "kind": "Deployment",
+      "metadata": {
+        "name": "agent-abc",
+        "namespace": "shipwright",
+        "labels": { "app.kubernetes.io/name": "shipwright-agent" }
+      },
+      "spec": {
+        "replicas": 1,
+        "strategy": { "type": "Recreate" },
+        "selector": { "matchLabels": { "app": "agent-abc" } },
+        "template": {
+          "metadata": { "labels": { "app": "agent-abc" } },
+          "spec": {
+            "volumes": [
+              {
+                "name": "agent-home",
+                "persistentVolumeClaim": { "claimName": "agent-abc-home" }
+              }
+            ],
+            "containers": [
+              {
+                "name": "shipwright-agent",
+                "image": "ghcr.io/example/agent:stale",
+                "env": [
+                  { "name": "SHIPWRIGHT_AGENT_ID", "value": "agent-abc" }
+                ],
+                "volumeMounts": [
+                  { "name": "agent-home", "mountPath": "/home/agent" }
+                ]
+              }
+            ]
+          }
+        }
+      },
+      "status": { "replicas": 1, "readyReplicas": 1 }
+    }
+  },
+  "getDeployment_federation_present": {
+    "status": 200,
+    "body": {
+      "apiVersion": "apps/v1",
+      "kind": "Deployment",
+      "metadata": {
+        "name": "agent-abc",
+        "namespace": "shipwright",
+        "labels": { "app.kubernetes.io/name": "shipwright-agent" }
+      },
+      "spec": {
+        "replicas": 1,
+        "strategy": { "type": "Recreate" },
+        "selector": { "matchLabels": { "app": "agent-abc" } },
+        "template": {
+          "metadata": { "labels": { "app": "agent-abc" } },
+          "spec": {
+            "serviceAccountName": "shipwright-agent",
+            "serviceAccount": "shipwright-agent",
+            "volumes": [
+              {
+                "name": "agent-home",
+                "persistentVolumeClaim": { "claimName": "agent-abc-home" }
+              },
+              {
+                "name": "anthropic-token",
+                "projected": {
+                  "sources": [
+                    {
+                      "serviceAccountToken": {
+                        "audience": "https://api.anthropic.com",
+                        "expirationSeconds": 600,
+                        "path": "token"
+                      }
+                    }
+                  ],
+                  "defaultMode": 420
+                }
+              }
+            ],
+            "containers": [
+              {
+                "name": "shipwright-agent",
+                "image": "ghcr.io/example/agent:stale",
+                "env": [
+                  { "name": "SHIPWRIGHT_AGENT_ID", "value": "agent-abc" },
+                  {
+                    "name": "ANTHROPIC_IDENTITY_TOKEN_FILE",
+                    "value": "/var/run/secrets/anthropic.com/token"
+                  },
+                  { "name": "ANTHROPIC_FEDERATION_RULE_ID", "value": "fdrl_1" },
+                  { "name": "ANTHROPIC_ORGANIZATION_ID", "value": "org-1" },
+                  { "name": "ANTHROPIC_SERVICE_ACCOUNT_ID", "value": "svac_1" },
+                  { "name": "ANTHROPIC_WORKSPACE_ID", "value": "wrkspc_1" }
+                ],
+                "volumeMounts": [
+                  { "name": "agent-home", "mountPath": "/home/agent" },
+                  {
+                    "name": "anthropic-token",
+                    "mountPath": "/var/run/secrets/anthropic.com",
+                    "readOnly": true
+                  }
+                ]
+              }
+            ]
+          }
+        }
+      },
+      "status": { "replicas": 1, "readyReplicas": 1 }
+    }
+  }
+}

package/src/fixtures/okta-auth-cassette.json

@@ -0,0 +1,36 @@
+{
+  "exchangeCode_success": {
+    "status": 200,
+    "body": {
+      "access_token": "okta.test-access-token",
+      "refresh_token": "okta.test-refresh-token",
+      "id_token": "okta.test-id-token-jwt",
+      "expires_in": 3600
+    }
+  },
+  "exchangeCode_success_no_optional_fields": {
+    "status": 200,
+    "body": {
+      "access_token": "okta.test-access-token-minimal",
+      "expires_in": 3600
+    }
+  },
+  "exchangeCode_400": {
+    "status": 400,
+    "body": "{\"error\":\"invalid_grant\",\"error_description\":\"The authorization code is invalid or has expired.\"}"
+  },
+  "getUserInfo_success": {
+    "status": 200,
+    "body": {
+      "sub": "00u1a2b3c4d5e6f7g8h9",
+      "email": "user@example.com",
+      "email_verified": true,
+      "name": "Test User",
+      "picture": "https://example.com/photo.jpg"
+    }
+  },
+  "getUserInfo_401": {
+    "status": 401,
+    "body": "{\"error\":\"invalid_token\"}"
+  }
+}

package/src/fixtures/slack-provision-cassette.json

@@ -0,0 +1,12 @@
+{
+  "createAppManifest": {
+    "appId": "A0123456789",
+    "oauthRedirectUrl": "https://slack.com/oauth/authorize?client_id=1234567890.9876543210&scope=channels:history,chat:write&redirect_uri=https%3A%2F%2Fexample.com%2Fadmin%2Fprovision%2Fcomplete&state=abc123",
+    "clientId": "1234567890.9876543210",
+    "clientSecret": "test-client-secret-value",
+    "signingSecret": "test-signing-secret-value"
+  },
+  "authTest": {
+    "userId": "U0AALR8M69X"
+  }
+}

package/src/fixtures/slack-provisioning-http-cassette.json

@@ -0,0 +1,98 @@
+{
+  "exchangeOAuthCode_success": {
+    "status": 200,
+    "body": { "ok": true, "access_token": "xoxb-test-bot-token" }
+  },
+  "exchangeOAuthCode_http_error": {
+    "status": 500,
+    "body": { "ok": false, "error": "internal_error" }
+  },
+  "exchangeOAuthCode_slack_error": {
+    "status": 200,
+    "body": { "ok": false, "error": "invalid_code" }
+  },
+  "exchangeOAuthCode_missing_access_token": {
+    "status": 200,
+    "body": { "ok": true }
+  },
+  "updateAppManifest_success": {
+    "status": 200,
+    "body": { "ok": true }
+  },
+  "updateAppManifest_http_error": {
+    "status": 500,
+    "body": { "ok": false, "error": "internal_error" }
+  },
+  "updateAppManifest_slack_error": {
+    "status": 200,
+    "body": { "ok": false, "error": "invalid_manifest" }
+  },
+  "createAppManifest_success": {
+    "status": 200,
+    "body": {
+      "ok": true,
+      "app_id": "A0123456789",
+      "oauth_authorize_url": "https://slack.com/oauth/authorize?client_id=123",
+      "credentials": {
+        "client_id": "123456789.987654321",
+        "client_secret": "test-client-secret",
+        "signing_secret": "test-signing-secret"
+      }
+    }
+  },
+  "createAppManifest_http_error": {
+    "status": 500,
+    "body": { "ok": false, "error": "internal_error" }
+  },
+  "createAppManifest_slack_error": {
+    "status": 200,
+    "body": { "ok": false, "error": "invalid_manifest" }
+  },
+  "createAppManifest_missing_app_id": {
+    "status": 200,
+    "body": {
+      "ok": true,
+      "credentials": {
+        "client_id": "123456789.987654321",
+        "client_secret": "test-client-secret",
+        "signing_secret": "test-signing-secret"
+      }
+    }
+  },
+  "createAppManifest_missing_credentials": {
+    "status": 200,
+    "body": {
+      "ok": true,
+      "app_id": "A0123456789",
+      "oauth_authorize_url": "https://slack.com/oauth/authorize?client_id=123"
+    }
+  },
+  "deleteApp_success": {
+    "status": 200,
+    "body": { "ok": true }
+  },
+  "deleteApp_http_error": {
+    "status": 500,
+    "body": { "ok": false, "error": "internal_error" }
+  },
+  "deleteApp_slack_error": {
+    "status": 200,
+    "body": { "ok": false, "error": "app_not_found" }
+  },
+  "authTest_success": {
+    "status": 200,
+    "body": { "ok": true, "user_id": "U0AALR8M69X", "team_id": "T0123456789" }
+  },
+  "authTest_http_error": {
+    "status": 500,
+    "body": { "ok": false, "error": "internal_error" }
+  },
+  "authTest_slack_error": {
+    "status": 200,
+    "body": { "ok": false, "error": "invalid_auth" }
+  },
+  "authTest_missing_user_id": {
+    "status": 200,
+    "body": { "ok": true, "team_id": "T0123456789" }
+  }
+}