@creatornader/agent-bridge 0.3.1 → 0.5.0

package/sql/migrations/016_native_dr_fence.sql

@@ -146,23 +146,36 @@ begin
     where event.member_role=session_user and event.control_role in ('operator','auditor')
     order by event.control_role,event.sequence desc
   ), direct_membership as (
-    select granted.rolname control_role,membership.admin_option,
-      coalesce((to_jsonb(membership)->>'inherit_option')::boolean,true) inherit_option,
-      coalesce((to_jsonb(membership)->>'set_option')::boolean,true) set_option
+    select granted.rolname control_role,
+      bool_or(membership.admin_option) admin_option,
+      bool_or(coalesce((to_jsonb(membership)->>'inherit_option')::boolean,true)) inherit_option,
+      bool_or(coalesce((to_jsonb(membership)->>'set_option')::boolean,true)) set_option,
+      bool_and(case when member.rolname=schema_owner then
+        (membership.grantor=10 and membership.admin_option
+          and coalesce((to_jsonb(membership)->>'inherit_option')::boolean,true)
+            =coalesce((to_jsonb(membership)->>'set_option')::boolean,true))
+        or (membership.grantor=member.oid
+          and coalesce((to_jsonb(membership)->>'inherit_option')::boolean,true)
+          and coalesce((to_jsonb(membership)->>'set_option')::boolean,true))
+      else membership.grantor=(select oid from pg_catalog.pg_roles where rolname=schema_owner)
+        and not membership.admin_option
+        and coalesce((to_jsonb(membership)->>'inherit_option')::boolean,true)
+        and coalesce((to_jsonb(membership)->>'set_option')::boolean,true) end) grants_valid
     from pg_catalog.pg_auth_members membership
     join pg_catalog.pg_roles granted on granted.oid=membership.roleid
     join pg_catalog.pg_roles member on member.oid=membership.member
     where member.rolname=session_user and granted.rolname in (operator_role,auditor_role)
+    group by granted.rolname
   )
   select
     coalesce(bool_or(membership.control_role=operator_role
-      and membership.inherit_option and membership.set_option and (
+      and membership.inherit_option and membership.set_option and membership.grants_valid and (
         (session_user=schema_owner and membership.admin_option)
         or (latest.control_role='operator' and latest.action='register'
           and not membership.admin_option)
       )),false),
     coalesce(bool_or(membership.control_role=auditor_role
-      and membership.inherit_option and membership.set_option and (
+      and membership.inherit_option and membership.set_option and membership.grants_valid and (
         (session_user=schema_owner and membership.admin_option)
         or (latest.control_role='auditor' and latest.action='register'
           and not membership.admin_option)
@@ -379,16 +392,27 @@ begin
     select event.action from agent_bridge.archive_membership_events event
     where event.member_role=session_user order by event.sequence desc limit 1
   ), direct_membership as (
-    select membership.admin_option,
-      coalesce((to_jsonb(membership)->>'inherit_option')::boolean,true) inherit_option,
-      coalesce((to_jsonb(membership)->>'set_option')::boolean,true) set_option
+    select bool_or(membership.admin_option) admin_option,
+      bool_or(coalesce((to_jsonb(membership)->>'inherit_option')::boolean,true)) inherit_option,
+      bool_or(coalesce((to_jsonb(membership)->>'set_option')::boolean,true)) set_option,
+      bool_and(case when member.rolname=schema_owner then
+        (membership.grantor=10 and membership.admin_option
+          and coalesce((to_jsonb(membership)->>'inherit_option')::boolean,true)
+            =coalesce((to_jsonb(membership)->>'set_option')::boolean,true))
+        or (membership.grantor=member.oid
+          and coalesce((to_jsonb(membership)->>'inherit_option')::boolean,true)
+          and coalesce((to_jsonb(membership)->>'set_option')::boolean,true))
+      else membership.grantor=(select oid from pg_catalog.pg_roles where rolname=schema_owner)
+        and not membership.admin_option
+        and coalesce((to_jsonb(membership)->>'inherit_option')::boolean,true)
+        and coalesce((to_jsonb(membership)->>'set_option')::boolean,true) end) grants_valid
     from pg_catalog.pg_auth_members membership
     join pg_catalog.pg_roles granted on granted.oid=membership.roleid
     join pg_catalog.pg_roles member on member.oid=membership.member
     where member.rolname=session_user and granted.rolname=archive_role
   )
   select coalesce(bool_or(
-    membership.inherit_option and membership.set_option and (
+    membership.inherit_option and membership.set_option and membership.grants_valid and (
       (session_user=schema_owner and membership.admin_option)
       or (latest.action='register' and not membership.admin_option)
     )
@@ -596,14 +620,15 @@ returns text language sql stable set search_path = '' as $$
     )
     union all
     select 'membership',granted.rolname||'->'||member.rolname,
-      membership.admin_option::text||':'||
-      coalesce(to_jsonb(membership)->>'inherit_option','true')||':'||
-      coalesce(to_jsonb(membership)->>'set_option','true')
+      bool_or(membership.admin_option)::text||':'||
+      bool_or(coalesce((to_jsonb(membership)->>'inherit_option')::boolean,true))::text||':'||
+      bool_or(coalesce((to_jsonb(membership)->>'set_option')::boolean,true))::text
     from pg_catalog.pg_auth_members membership
     join pg_catalog.pg_roles granted on granted.oid=membership.roleid
     join pg_catalog.pg_roles member on member.oid=membership.member
     where member.rolname in (select role_name from control_roles)
       or granted.rolname=(select owner_role from names)
+    group by granted.rolname,member.rolname
     union all
     select 'relation_acl',relation.oid::regclass::text,
       pg_catalog.pg_get_userbyid(privilege.grantor)||':'||
@@ -692,14 +717,15 @@ returns text language sql stable set search_path = '' as $$
     )
     union all
     select 'owner_membership',granted.rolname||'->'||member.rolname,
-      membership.admin_option::text||':'||
-      coalesce(to_jsonb(membership)->>'inherit_option','true')||':'||
-      coalesce(to_jsonb(membership)->>'set_option','true')
+      bool_or(membership.admin_option)::text||':'||
+      bool_or(coalesce((to_jsonb(membership)->>'inherit_option')::boolean,true))::text||':'||
+      bool_or(coalesce((to_jsonb(membership)->>'set_option')::boolean,true))::text
     from pg_catalog.pg_auth_members membership
     join pg_catalog.pg_roles granted on granted.oid=membership.roleid
     join pg_catalog.pg_roles member on member.oid=membership.member
     where granted.rolname=(select archive_role from names)
       and member.oid=(select schema_owner from names)
+    group by granted.rolname,member.rolname
     union all
     select 'relation_acl',relation.oid::regclass::text,
       pg_catalog.pg_get_userbyid(privilege.grantor)||':'||
@@ -764,10 +790,12 @@ do $ownership$
 declare
   owner_role text := 'agent_bridge_control_owner_'||substr(md5(current_database()),1,16);
 begin
+  execute format('grant create on schema agent_bridge to %I',owner_role);
   execute format(
     'alter function agent_bridge.owner_control_attestation_definition() owner to %I',
     owner_role
   );
+  execute format('revoke create on schema agent_bridge from %I',owner_role);
 end
 $ownership$;
 
@@ -783,17 +811,35 @@ returns boolean language sql stable security definer set search_path = '' as $$
   ), active_registry as (
     select member_role from latest_registry where action='register'
   ), expected_memberships as (
-    select names.archive_role granted_role,names.schema_owner member_role,true admin_option from names
-    union all select names.archive_role,registry.member_role,false from active_registry registry cross join names
-  ), actual_memberships as (
+    select names.archive_role granted_role,names.schema_owner member_role,
+      true admin_option,true inherit_option,true set_option from names
+    union all select names.archive_role,registry.member_role,false,true,true
+      from active_registry registry cross join names
+  ), raw_memberships as (
     select granted.rolname::name granted_role,member.rolname::name member_role,
       membership.admin_option,
       coalesce((to_jsonb(membership)->>'inherit_option')::boolean,true) inherit_option,
-      coalesce((to_jsonb(membership)->>'set_option')::boolean,true) set_option
+      coalesce((to_jsonb(membership)->>'set_option')::boolean,true) set_option,
+      membership.grantor,member.oid member_oid
     from pg_catalog.pg_auth_members membership
     join pg_catalog.pg_roles granted on granted.oid=membership.roleid
     join pg_catalog.pg_roles member on member.oid=membership.member
     where granted.rolname=(select archive_role from names)
+  ), actual_memberships as (
+    select membership.granted_role,membership.member_role,
+      bool_or(membership.admin_option) admin_option,
+      bool_or(membership.inherit_option) inherit_option,
+      bool_or(membership.set_option) set_option,
+      bool_and(case when membership.member_role=names.schema_owner then
+        (membership.grantor=10 and membership.admin_option
+          and membership.inherit_option=membership.set_option)
+        or (membership.grantor=membership.member_oid
+          and membership.inherit_option and membership.set_option)
+      else membership.grantor=(select oid from pg_catalog.pg_roles where rolname=names.schema_owner)
+        and not membership.admin_option
+        and membership.inherit_option and membership.set_option end) grants_valid
+    from raw_memberships membership cross join names
+    group by membership.granted_role,membership.member_role
   )
   select current_setting('server_version_num')::integer/10000=any(array[15,16,17,18])
     and exists(select 1 from pg_catalog.pg_roles role,names where role.rolname=names.archive_role
@@ -804,14 +850,14 @@ returns boolean language sql stable security definer set search_path = '' as $$
     ) from agent_bridge.portable_archive_attestations attestation
       where attestation.name='portable-archive-v3')
     and not exists(
-      (select granted_role,member_role,admin_option from actual_memberships
-       except select granted_role,member_role,admin_option from expected_memberships)
+      (select granted_role,member_role,admin_option,inherit_option,set_option from actual_memberships
+       except select granted_role,member_role,admin_option,inherit_option,set_option from expected_memberships)
       union all
-      (select granted_role,member_role,admin_option from expected_memberships
-       except select granted_role,member_role,admin_option from actual_memberships)
+      (select granted_role,member_role,admin_option,inherit_option,set_option from expected_memberships
+       except select granted_role,member_role,admin_option,inherit_option,set_option from actual_memberships)
     )
     and not exists(select 1 from actual_memberships membership
-      where not membership.inherit_option or not membership.set_option)
+      where not membership.grants_valid)
     and not exists(select 1 from active_registry registry
       left join pg_catalog.pg_roles role on role.rolname=registry.member_role
       where role.oid is null or not role.rolcanlogin or role.rolsuper or role.rolcreaterole
@@ -901,24 +947,41 @@ returns boolean language sql stable security definer set search_path = '' as $$
   ), active_registry as (
     select member_role,control_role from latest_registry where action='register'
   ), expected_memberships as (
-    select names.owner_role granted_role,names.schema_owner member_role,true admin_option from names
-    union all select names.operator_role,names.schema_owner,true from names
-    union all select names.auditor_role,names.schema_owner,true from names
+    select names.owner_role granted_role,names.schema_owner member_role,
+      true admin_option,true inherit_option,true set_option from names
+    union all select names.operator_role,names.schema_owner,true,true,true from names
+    union all select names.auditor_role,names.schema_owner,true,true,true from names
     union all
     select case registry.control_role when 'operator' then names.operator_role
-      else names.auditor_role end,registry.member_role,false
+      else names.auditor_role end,registry.member_role,false,true,true
     from active_registry registry cross join names
-  ), actual_memberships as (
+  ), raw_memberships as (
     select granted.rolname::name granted_role,member.rolname::name member_role,
       membership.admin_option,
       coalesce((to_jsonb(membership)->>'inherit_option')::boolean,true) inherit_option,
-      coalesce((to_jsonb(membership)->>'set_option')::boolean,true) set_option
+      coalesce((to_jsonb(membership)->>'set_option')::boolean,true) set_option,
+      membership.grantor,member.oid member_oid
     from pg_catalog.pg_auth_members membership
     join pg_catalog.pg_roles granted on granted.oid=membership.roleid
     join pg_catalog.pg_roles member on member.oid=membership.member
     where granted.rolname in (
       (select owner_role from names),(select operator_role from names),(select auditor_role from names)
     )
+  ), actual_memberships as (
+    select membership.granted_role,membership.member_role,
+      bool_or(membership.admin_option) admin_option,
+      bool_or(membership.inherit_option) inherit_option,
+      bool_or(membership.set_option) set_option,
+      bool_and(case when membership.member_role=names.schema_owner then
+        (membership.grantor=10 and membership.admin_option
+          and membership.inherit_option=membership.set_option)
+        or (membership.grantor=membership.member_oid
+          and membership.inherit_option and membership.set_option)
+      else membership.grantor=(select oid from pg_catalog.pg_roles where rolname=names.schema_owner)
+        and not membership.admin_option
+        and membership.inherit_option and membership.set_option end) grants_valid
+    from raw_memberships membership cross join names
+    group by membership.granted_role,membership.member_role
   ), authority_closure as (
     select control_role.granted_role,candidate.rolname::name member_role
     from names
@@ -937,14 +1000,14 @@ returns boolean language sql stable security definer set search_path = '' as $$
     ) from agent_bridge.owner_control_attestations attestation
       where attestation.name='owner-control-v4')
     and not exists (
-      (select granted_role,member_role,admin_option from actual_memberships
-       except select granted_role,member_role,admin_option from expected_memberships)
+      (select granted_role,member_role,admin_option,inherit_option,set_option from actual_memberships
+       except select granted_role,member_role,admin_option,inherit_option,set_option from expected_memberships)
       union all
-      (select granted_role,member_role,admin_option from expected_memberships
-       except select granted_role,member_role,admin_option from actual_memberships)
+      (select granted_role,member_role,admin_option,inherit_option,set_option from expected_memberships
+       except select granted_role,member_role,admin_option,inherit_option,set_option from actual_memberships)
     )
     and not exists (select 1 from actual_memberships membership
-      where not membership.inherit_option or not membership.set_option)
+      where not membership.grants_valid)
     and not exists (
       select 1 from active_registry registry
       left join pg_catalog.pg_roles role_record on role_record.rolname=registry.member_role
@@ -981,8 +1044,12 @@ returns boolean language sql stable security definer set search_path = '' as $$
     )
 $$;
 
+select set_config(
+  'role','agent_bridge_control_owner_'||substr(md5(current_database()),1,16),false
+);
 insert into agent_bridge.owner_control_attestations(name,catalog_definition)
 values('owner-control-v4',agent_bridge.owner_control_attestation_definition());
+reset role;
 
 insert into agent_bridge.portable_archive_attestations(name,catalog_definition)
 values('portable-archive-v3',agent_bridge.portable_archive_attestation_definition());

package/sql/migrations/017_gateway_authority_binding.sql

@@ -0,0 +1,99 @@
+begin;
+
+select pg_advisory_xact_lock(1646705660);
+
+create table agent_bridge.gateway_authority (
+  singleton boolean not null default true,
+  authority_id uuid not null default gen_random_uuid(),
+  constraint gateway_authority_singleton primary key (singleton),
+  constraint gateway_authority_singleton_true check (singleton),
+  constraint gateway_authority_id_unique unique (authority_id)
+);
+
+insert into agent_bridge.gateway_authority(singleton) values (true);
+
+create function agent_bridge.reject_gateway_authority_mutation()
+returns trigger
+language plpgsql set search_path = '' as $$
+begin
+  raise exception 'gateway authority is immutable';
+end
+$$;
+
+create trigger gateway_authority_immutable
+before update or delete or truncate on agent_bridge.gateway_authority
+for each statement execute function agent_bridge.reject_gateway_authority_mutation();
+
+create function agent_bridge.gateway_authority_ready()
+returns boolean
+language sql stable security definer set search_path = '' as $$
+  select count(*)=1 and bool_and(singleton and authority_id is not null)
+  from agent_bridge.gateway_authority
+$$;
+
+create function agent_bridge.open_request_authority_bound(
+  requested_credential_id uuid,
+  credential_hash text,
+  requested_request_id uuid
+) returns table(
+  gateway_authority_id uuid,
+  credential_id uuid,
+  workspace_id text,
+  principal text,
+  scopes text[]
+)
+language plpgsql volatile security definer set search_path = '' as $$
+declare
+  bound_gateway_authority_id uuid;
+  authority_credential_id uuid;
+  authority_workspace_id text;
+  authority_principal text;
+  authority_scopes text[];
+begin
+  select authority_id into strict bound_gateway_authority_id
+  from agent_bridge.gateway_authority
+  where singleton;
+
+  select authority.credential_id,authority.workspace_id,authority.principal,authority.scopes
+    into authority_credential_id,authority_workspace_id,authority_principal,authority_scopes
+  from agent_bridge.open_request_authority(
+    requested_credential_id,credential_hash,requested_request_id
+  ) authority;
+
+  if not found then return; end if;
+
+  gateway_authority_id := bound_gateway_authority_id;
+  credential_id := authority_credential_id;
+  workspace_id := authority_workspace_id;
+  principal := authority_principal;
+  scopes := authority_scopes;
+  return next;
+end
+$$;
+
+revoke all on agent_bridge.gateway_authority from public;
+revoke all on function agent_bridge.reject_gateway_authority_mutation() from public;
+revoke all on function agent_bridge.gateway_authority_ready() from public;
+revoke all on function agent_bridge.open_request_authority_bound(uuid,text,uuid) from public;
+
+do $roles$
+declare
+  runtime_role text := 'agent_bridge_runtime_' || substr(md5(current_database()),1,16);
+  role_name text;
+begin
+  foreach role_name in array array[runtime_role,'anon','authenticated'] loop
+    if exists (select 1 from pg_roles where rolname=role_name) then
+      execute format('revoke all on agent_bridge.gateway_authority from %I',role_name);
+      execute format('revoke all on function agent_bridge.gateway_authority_ready() from %I',role_name);
+      execute format('revoke all on function agent_bridge.open_request_authority_bound(uuid,text,uuid) from %I',role_name);
+    end if;
+  end loop;
+  execute format('grant execute on function agent_bridge.gateway_authority_ready() to %I',runtime_role);
+  execute format('grant execute on function agent_bridge.open_request_authority_bound(uuid,text,uuid) to %I',runtime_role);
+end
+$roles$;
+
+insert into agent_bridge.schema_migrations(version,name,checksum)
+values (17,'gateway_authority_binding','__AGENT_BRIDGE_MIGRATION_CHECKSUM__');
+
+commit;