@stigmer/server 3.15.3-dev.20260914121148 → 3.16.0

package/src/authorization/__tests__/fixtures/fga/default-instance-inheritance.fga.yaml

@@ -0,0 +1,271 @@
+# Pinned copy of stigmer-cloud backend/services/stigmer-server/fga/tests/default-instance-inheritance.fga.yaml
+# at commit b87dd1170 (the OpenFGA store test the cloud runs against its live model).
+# The body below is byte-identical to the source; the cloud re-runs the LIVE
+# file against this evaluator at the re-pin, so a stale copy is caught there.
+# Store tests for default-instance structural inheritance (default_of).
+#
+# A blueprint's system-managed default instance carries a single
+#   instance#default_of@<blueprint>:<id>
+# tuple and inherits the blueprint's ENTIRE viewer set through
+# `viewer from default_of` — org members, public users (allow_public), and
+# platform users (identity_provider#platform_user). No enum-derived
+# visibility tuples are ever written on default instances, so their access
+# can never drift from the template's.
+#
+# Run with:
+#   fga model test --tests default-instance-inheritance.fga.yaml
+#
+# Scenario: "planton" is a platform org owning identity_provider:idp1 which
+# manages customer org "acme". Planton authors agents/workflows at every
+# visibility level; each has a default instance linked via default_of.
+# Alice (acme member) reaches default instances of platform-shared
+# blueprints; planton members reach default instances of org-visible ones;
+# everyone reaches default instances of public ones; personal instances
+# never leak.
+name: default-instance-inheritance
+model_file: ../model/fga.mod
+
+tuples:
+  # --- Platform tenancy: idp1 is owned by planton and manages acme ---
+  - user: organization:planton
+    relation: organization
+    object: identity_provider:idp1
+  - user: organization:acme
+    relation: managed_org
+    object: identity_provider:idp1
+
+  # --- Org memberships ---
+  - user: identity_account:swarup
+    relation: owner
+    object: organization:planton
+  - user: identity_account:priya
+    relation: member
+    object: organization:planton
+  - user: identity_account:veda
+    relation: viewer
+    object: organization:planton
+  - user: identity_account:alice
+    relation: member
+    object: organization:acme
+  - user: identity_account:mallory
+    relation: member
+    object: organization:outsider
+
+  # --- Platform-shared agent + its default instance ---
+  # PLATFORM carries the org floor tuple too (viewer@org#viewer — the org's
+  # full read audience), exactly as VisibilityTupleReconciler writes it.
+  - user: organization:planton
+    relation: organization
+    object: agent:sara
+  - user: identity_account:swarup
+    relation: owner
+    object: agent:sara
+  - user: identity_provider:idp1#platform_user
+    relation: platform_viewer
+    object: agent:sara
+  - user: organization:planton#viewer
+    relation: viewer
+    object: agent:sara
+  - user: organization:planton
+    relation: organization
+    object: agent_instance:sara-default
+  - user: agent:sara
+    relation: agent
+    object: agent_instance:sara-default
+  - user: identity_account:swarup
+    relation: owner
+    object: agent_instance:sara-default
+  - user: agent:sara
+    relation: default_of
+    object: agent_instance:sara-default
+
+  # --- Alice's personal instance of the shared agent (NO default_of) ---
+  - user: organization:acme
+    relation: organization
+    object: agent_instance:alice-personal
+  - user: agent:sara
+    relation: agent
+    object: agent_instance:alice-personal
+  - user: identity_account:alice
+    relation: owner
+    object: agent_instance:alice-personal
+
+  # --- Org-visible agent + its default instance ---
+  # ORG visibility is an explicit viewer tuple (viewer@org#viewer) — the
+  # unconditional `viewer from organization` grant is gone (private is real).
+  - user: organization:planton
+    relation: organization
+    object: agent:internal-bot
+  - user: identity_account:swarup
+    relation: owner
+    object: agent:internal-bot
+  - user: organization:planton#viewer
+    relation: viewer
+    object: agent:internal-bot
+  - user: organization:planton
+    relation: organization
+    object: agent_instance:internal-default
+  - user: agent:internal-bot
+    relation: agent
+    object: agent_instance:internal-default
+  - user: identity_account:swarup
+    relation: owner
+    object: agent_instance:internal-default
+  - user: agent:internal-bot
+    relation: default_of
+    object: agent_instance:internal-default
+
+  # --- Public agent + its default instance ---
+  # PUBLIC carries the org floor tuple too (viewer@org#viewer).
+  - user: organization:planton
+    relation: organization
+    object: agent:public-bot
+  - user: identity_account:swarup
+    relation: owner
+    object: agent:public-bot
+  - user: identity_account:*
+    relation: viewer
+    object: agent:public-bot
+    condition:
+      name: allow_public
+  - user: organization:planton#viewer
+    relation: viewer
+    object: agent:public-bot
+  - user: organization:planton
+    relation: organization
+    object: agent_instance:public-bot-default
+  - user: agent:public-bot
+    relation: agent
+    object: agent_instance:public-bot-default
+  - user: identity_account:swarup
+    relation: owner
+    object: agent_instance:public-bot-default
+  - user: agent:public-bot
+    relation: default_of
+    object: agent_instance:public-bot-default
+
+  # --- Platform-shared workflow + its default instance ---
+  - user: organization:planton
+    relation: organization
+    object: workflow:onboarding
+  - user: identity_account:swarup
+    relation: owner
+    object: workflow:onboarding
+  - user: identity_provider:idp1#platform_user
+    relation: platform_viewer
+    object: workflow:onboarding
+  - user: organization:planton#viewer
+    relation: viewer
+    object: workflow:onboarding
+  - user: organization:planton
+    relation: organization
+    object: workflow_instance:onboarding-default
+  - user: workflow:onboarding
+    relation: workflow
+    object: workflow_instance:onboarding-default
+  - user: identity_account:swarup
+    relation: owner
+    object: workflow_instance:onboarding-default
+  - user: workflow:onboarding
+    relation: default_of
+    object: workflow_instance:onboarding-default
+
+tests:
+  - name: managed-org member reaches the default instance of a platform-shared agent
+    check:
+      - user: identity_account:alice
+        object: agent_instance:sara-default
+        context:
+          allow: false
+        assertions:
+          can_view: true
+          can_execute: true
+          can_edit: false
+          can_delete: false
+
+  - name: outsiders get nothing from the default_of link
+    check:
+      - user: identity_account:mallory
+        object: agent_instance:sara-default
+        context:
+          allow: false
+        assertions:
+          can_view: false
+          can_execute: false
+
+  - name: personal instances never leak through the parent agent
+    check:
+      # Swarup owns the agent itself, but alice's personal instance has no
+      # default_of tuple — only she (its owner) can reach it.
+      - user: identity_account:swarup
+        object: agent_instance:alice-personal
+        context:
+          allow: false
+        assertions:
+          can_view: false
+      - user: identity_account:alice
+        object: agent_instance:alice-personal
+        context:
+          allow: false
+        assertions:
+          can_view: true
+          can_edit: true
+
+  - name: org members reach the default instance of an org-visible agent
+    check:
+      - user: identity_account:priya
+        object: agent_instance:internal-default
+        context:
+          allow: false
+        assertions:
+          can_view: true
+          can_execute: true
+          can_edit: false
+      # cloud#257: the default_of chain reaches org viewer-role users too —
+      # the viewer-shaped org tuple on the parent agent is the org's full
+      # read audience, and the default instance inherits it structurally.
+      - user: identity_account:veda
+        object: agent_instance:internal-default
+        context:
+          allow: false
+        assertions:
+          can_view: true
+          can_edit: false
+      # Managed-org membership grants nothing on non-platform-shared agents.
+      - user: identity_account:alice
+        object: agent_instance:internal-default
+        context:
+          allow: false
+        assertions:
+          can_view: false
+
+  - name: everyone reaches the default instance of a public agent
+    check:
+      - user: identity_account:mallory
+        object: agent_instance:public-bot-default
+        context:
+          allow: true
+        assertions:
+          can_view: true
+
+  - name: managed-org member reaches the default instance of a platform-shared workflow
+    check:
+      - user: identity_account:alice
+        object: workflow_instance:onboarding-default
+        context:
+          allow: false
+        assertions:
+          can_view: true
+          can_execute: true
+          can_edit: false
+
+  - name: list managed-org member's viewable agent instances resolves the default_of chain
+    list_objects:
+      - user: identity_account:alice
+        type: agent_instance
+        context:
+          allow: false
+        assertions:
+          can_view:
+            - agent_instance:sara-default
+            - agent_instance:alice-personal

package/src/authorization/__tests__/fixtures/fga/memory-subject-only.fga.yaml

@@ -0,0 +1,72 @@
+# Pinned copy of stigmer-cloud backend/services/stigmer-server/fga/tests/memory-subject-only.fga.yaml
+# at commit b87dd1170 (the OpenFGA store test the cloud runs against its live model).
+# The body below is byte-identical to the source; the cloud re-runs the LIVE
+# file against this evaluator at the re-pin, so a stale copy is caught there.
+# Memory is subject-only (DD-004 as ratified): the identity account the
+# memory is ABOUT is its only principal. These tests pin the platform's
+# strictest model — org membership grants nothing, org ADMINSHIP grants
+# nothing (admins govern the memory_enabled switch, never the content),
+# and nothing is grantable.
+
+name: memory-subject-only
+model_file: ../model/fga.mod
+
+tuples:
+  # Org membership and adminship — proving both grant nothing on memories.
+  - user: identity_account:alice
+    relation: member
+    object: organization:acme
+  - user: identity_account:mallory
+    relation: member
+    object: organization:acme
+  - user: identity_account:ana
+    relation: admin
+    object: organization:acme
+
+  # Alice's memory (the config-driven create tuples: org + subject).
+  - user: organization:acme
+    relation: organization
+    object: memory:mem-alice-terse
+  - user: identity_account:alice
+    relation: subject
+    object: memory:mem-alice-terse
+
+tests:
+  - name: the subject has full control over their own memory
+    check:
+      - user: identity_account:alice
+        object: memory:mem-alice-terse
+        assertions:
+          can_view: true
+          can_edit: true
+          can_delete: true
+
+  - name: a fellow org member sees and touches nothing
+    check:
+      - user: identity_account:mallory
+        object: memory:mem-alice-terse
+        assertions:
+          can_view: false
+          can_edit: false
+          can_delete: false
+
+  - name: an org ADMIN sees and touches nothing — the setting, never the entries
+    check:
+      - user: identity_account:ana
+        object: memory:mem-alice-terse
+        assertions:
+          can_view: false
+          can_edit: false
+          can_delete: false
+
+  - name: list-objects returns only the subject's own records
+    list_objects:
+      - user: identity_account:alice
+        type: memory
+        assertions:
+          can_view:
+            - memory:mem-alice-terse
+      - user: identity_account:mallory
+        type: memory
+        assertions:
+          can_view: []

package/src/authorization/__tests__/fixtures/fga/org-admin-owner-inheritance.fga.yaml

@@ -0,0 +1,328 @@
+# Pinned copy of stigmer-cloud backend/services/stigmer-server/fga/tests/org-admin-owner-inheritance.fga.yaml
+# at commit 2ec420161 (the OpenFGA store test the cloud runs against its live model).
+# The body below is byte-identical to the source; the cloud re-runs the LIVE
+# file against this evaluator at the re-pin, so a stale copy is caught there.
+# Store tests for org-admin owner inheritance (T08).
+#
+# Blueprint kinds — agent, agent_share, agent_channel, channel_app,
+# schedule, skill, workflow, project — compose org admins into `owner`:
+#
+#   define owner: [identity_account] or admin from organization
+#
+# This is the GitHub-org-admin model (precedent: mcp_server, iam_policy,
+# invitation): every org asset has an operator of last resort, so
+# machine-provisioned and ex-employee resources stay manageable. Because
+# owner feeds viewer (and can_execute on agents), admins also see, list,
+# and run PRIVATE blueprints — a deliberate, accepted trade recorded in the
+# T08 design decision.
+#
+# The four personal/secret kinds — agent_instance, environment, session,
+# workflow_instance — deliberately do NOT inherit. Their fixtures below
+# carry the organization tuple, so these tests would fail loudly if
+# inheritance were ever wrongly added to them.
+#
+# Run with:
+#   fga model test --tests org-admin-owner-inheritance.fga.yaml
+#
+# Scenario: org "acme" has org owner root, org admin ana, and plain member
+# dave. carol (a plain member) created one PRIVATE resource of each
+# inherited kind, plus one of each excluded kind. zara is an admin of the
+# unrelated org "other".
+name: org-admin-owner-inheritance
+model_file: ../model/fga.mod
+
+tuples:
+  # --- Org roles ---
+  - user: identity_account:root
+    relation: owner
+    object: organization:acme
+  - user: identity_account:ana
+    relation: admin
+    object: organization:acme
+  - user: identity_account:dave
+    relation: member
+    object: organization:acme
+  - user: identity_account:carol
+    relation: member
+    object: organization:acme
+  - user: identity_account:zara
+    relation: admin
+    object: organization:other
+
+  # --- carol's PRIVATE blueprints (creation tuples only) ---
+  - user: organization:acme
+    relation: organization
+    object: agent:carols-bot
+  - user: identity_account:carol
+    relation: owner
+    object: agent:carols-bot
+  - user: organization:acme
+    relation: organization
+    object: agent_share:carols-bot-share
+  - user: identity_account:carol
+    relation: owner
+    object: agent_share:carols-bot-share
+  - user: organization:acme
+    relation: organization
+    object: agent_channel:carols-bot-slack
+  - user: identity_account:carol
+    relation: owner
+    object: agent_channel:carols-bot-slack
+  - user: organization:acme
+    relation: organization
+    object: channel_app:carols-slack-app
+  - user: identity_account:carol
+    relation: owner
+    object: channel_app:carols-slack-app
+  - user: organization:acme
+    relation: organization
+    object: schedule:carols-reminders
+  - user: identity_account:carol
+    relation: owner
+    object: schedule:carols-reminders
+  - user: organization:acme
+    relation: organization
+    object: skill:carols-notes
+  - user: identity_account:carol
+    relation: owner
+    object: skill:carols-notes
+  - user: organization:acme
+    relation: organization
+    object: workflow:carols-flow
+  - user: identity_account:carol
+    relation: owner
+    object: workflow:carols-flow
+  - user: organization:acme
+    relation: organization
+    object: project:carols-project
+  - user: identity_account:carol
+    relation: owner
+    object: project:carols-project
+
+  # --- carol's personal resources (organization tuple present, so a
+  #     wrongly-added inheritance WOULD resolve — these must stay denied) ---
+  - user: organization:acme
+    relation: organization
+    object: agent_instance:carols-instance
+  - user: agent:carols-bot
+    relation: agent
+    object: agent_instance:carols-instance
+  - user: identity_account:carol
+    relation: owner
+    object: agent_instance:carols-instance
+  - user: organization:acme
+    relation: organization
+    object: environment:carols-secrets
+  - user: identity_account:carol
+    relation: owner
+    object: environment:carols-secrets
+  - user: identity_account:carol
+    relation: creator
+    object: environment:carols-secrets
+  - user: organization:acme
+    relation: organization
+    object: session:carols-chat
+  - user: identity_account:carol
+    relation: owner
+    object: session:carols-chat
+
+tests:
+  - name: org admin inherits full management of every blueprint kind
+    check:
+      - user: identity_account:ana
+        object: agent:carols-bot
+        context:
+          allow: false
+        assertions:
+          can_view: true
+          can_edit: true
+          can_delete: true
+          can_grant_access: true
+          can_execute: true
+      - user: identity_account:ana
+        object: agent_share:carols-bot-share
+        assertions:
+          can_view: true
+          can_edit: true
+          can_delete: true
+          can_grant_access: true
+      - user: identity_account:ana
+        object: agent_channel:carols-bot-slack
+        assertions:
+          can_view: true
+          can_edit: true
+          can_delete: true
+          can_grant_access: true
+      - user: identity_account:ana
+        object: channel_app:carols-slack-app
+        assertions:
+          can_view: true
+          can_edit: true
+          can_delete: true
+          can_grant_access: true
+      - user: identity_account:ana
+        object: schedule:carols-reminders
+        assertions:
+          can_view: true
+          can_edit: true
+          can_delete: true
+          can_grant_access: true
+      - user: identity_account:ana
+        object: skill:carols-notes
+        context:
+          allow: false
+        assertions:
+          can_view: true
+          can_edit: true
+          can_delete: true
+          can_grant_access: true
+      - user: identity_account:ana
+        object: workflow:carols-flow
+        context:
+          allow: false
+        assertions:
+          can_view: true
+          can_edit: true
+          can_delete: true
+          can_grant_access: true
+      - user: identity_account:ana
+        object: project:carols-project
+        assertions:
+          can_view: true
+          can_edit: true
+          can_delete: true
+          can_grant_access: true
+
+  - name: org owner inherits through the admin hierarchy
+    check:
+      - user: identity_account:root
+        object: agent:carols-bot
+        context:
+          allow: false
+        assertions:
+          can_edit: true
+          can_delete: true
+          can_grant_access: true
+      - user: identity_account:root
+        object: agent_share:carols-bot-share
+        assertions:
+          can_edit: true
+          can_delete: true
+      - user: identity_account:root
+        object: agent_channel:carols-bot-slack
+        assertions:
+          can_edit: true
+          can_delete: true
+
+  - name: plain org member still has nothing on private blueprints
+    check:
+      - user: identity_account:dave
+        object: agent:carols-bot
+        context:
+          allow: false
+        assertions:
+          can_view: false
+          can_edit: false
+          can_delete: false
+          can_grant_access: false
+      - user: identity_account:dave
+        object: agent_share:carols-bot-share
+        assertions:
+          can_view: false
+          can_edit: false
+      - user: identity_account:dave
+        object: agent_channel:carols-bot-slack
+        assertions:
+          can_view: false
+          can_edit: false
+      - user: identity_account:dave
+        object: channel_app:carols-slack-app
+        assertions:
+          can_view: false
+          can_edit: false
+      - user: identity_account:dave
+        object: schedule:carols-reminders
+        assertions:
+          can_view: false
+          can_edit: false
+
+  - name: admin of an unrelated org has nothing
+    check:
+      - user: identity_account:zara
+        object: agent:carols-bot
+        context:
+          allow: false
+        assertions:
+          can_view: false
+          can_edit: false
+          can_delete: false
+      - user: identity_account:zara
+        object: project:carols-project
+        assertions:
+          can_view: false
+          can_edit: false
+
+  - name: personal kinds stay admin-excluded (privacy invariant)
+    check:
+      - user: identity_account:ana
+        object: agent_instance:carols-instance
+        context:
+          allow: false
+        assertions:
+          can_view: false
+          can_edit: false
+          can_delete: false
+      - user: identity_account:ana
+        object: environment:carols-secrets
+        assertions:
+          can_view: false
+          can_edit: false
+          can_delete: false
+          can_read_secrets: false
+      - user: identity_account:ana
+        object: session:carols-chat
+        assertions:
+          can_view: false
+          can_edit: false
+          can_delete: false
+      # The org OWNER is admin-and-above — the exclusion must hold for
+      # them too.
+      - user: identity_account:root
+        object: environment:carols-secrets
+        assertions:
+          can_view: false
+          can_read_secrets: false
+
+  - name: creator keeps everything (inheritance adds, never subtracts)
+    check:
+      - user: identity_account:carol
+        object: agent:carols-bot
+        context:
+          allow: false
+        assertions:
+          can_view: true
+          can_edit: true
+          can_delete: true
+          can_grant_access: true
+
+  - name: admin's listable resources include private blueprints, never personal kinds
+    list_objects:
+      - user: identity_account:ana
+        type: agent
+        context:
+          allow: false
+        assertions:
+          can_view:
+            - agent:carols-bot
+          can_edit:
+            - agent:carols-bot
+      - user: identity_account:ana
+        type: agent_instance
+        context:
+          allow: false
+        assertions:
+          can_view: []
+      - user: identity_account:ana
+        type: session
+        assertions:
+          can_view: []