@stigmer/server 3.27.1 → 3.28.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (245) hide show
  1. package/README.md +2 -0
  2. package/dist/authorization/authorizer.d.ts +7 -5
  3. package/dist/authorization/authorizer.d.ts.map +1 -1
  4. package/dist/authorization/authorizer.js +7 -5
  5. package/dist/authorization/authorizer.js.map +1 -1
  6. package/dist/authorization/derived-tuples.d.ts +3 -1
  7. package/dist/authorization/derived-tuples.d.ts.map +1 -1
  8. package/dist/authorization/derived-tuples.js +52 -2
  9. package/dist/authorization/derived-tuples.js.map +1 -1
  10. package/dist/authorization/evaluator.d.ts +9 -10
  11. package/dist/authorization/evaluator.d.ts.map +1 -1
  12. package/dist/authorization/evaluator.js.map +1 -1
  13. package/dist/authorization/list-read-scope.d.ts.map +1 -1
  14. package/dist/authorization/list-read-scope.js +29 -18
  15. package/dist/authorization/list-read-scope.js.map +1 -1
  16. package/dist/authorization/model/bindings.d.ts +41 -0
  17. package/dist/authorization/model/bindings.d.ts.map +1 -0
  18. package/dist/authorization/model/bindings.js +89 -0
  19. package/dist/authorization/model/bindings.js.map +1 -0
  20. package/dist/authorization/model/data/authorization-model.json +3114 -0
  21. package/dist/authorization/model/default-of.d.ts +2 -2
  22. package/dist/authorization/model/execution-viewer.d.ts +3 -0
  23. package/dist/authorization/model/execution-viewer.d.ts.map +1 -0
  24. package/dist/authorization/model/execution-viewer.js +50 -0
  25. package/dist/authorization/model/execution-viewer.js.map +1 -0
  26. package/dist/authorization/model/index.d.ts +33 -21
  27. package/dist/authorization/model/index.d.ts.map +1 -1
  28. package/dist/authorization/model/index.js +74 -52
  29. package/dist/authorization/model/index.js.map +1 -1
  30. package/dist/authorization/model/openfga-json.d.ts +18 -0
  31. package/dist/authorization/model/openfga-json.d.ts.map +1 -0
  32. package/dist/authorization/model/openfga-json.js +266 -0
  33. package/dist/authorization/model/openfga-json.js.map +1 -0
  34. package/dist/authorization/model/rewrite.d.ts +39 -67
  35. package/dist/authorization/model/rewrite.d.ts.map +1 -1
  36. package/dist/authorization/model/rewrite.js +1 -117
  37. package/dist/authorization/model/rewrite.js.map +1 -1
  38. package/dist/authorization/strict-json.d.ts +20 -0
  39. package/dist/authorization/strict-json.d.ts.map +1 -0
  40. package/dist/authorization/strict-json.js +45 -0
  41. package/dist/authorization/strict-json.js.map +1 -0
  42. package/dist/boot/compose.d.ts.map +1 -1
  43. package/dist/boot/compose.js +9 -7
  44. package/dist/boot/compose.js.map +1 -1
  45. package/dist/boot/list-indexes.d.ts.map +1 -1
  46. package/dist/boot/list-indexes.js +6 -0
  47. package/dist/boot/list-indexes.js.map +1 -1
  48. package/dist/domain/iampolicy/list-index.d.ts +2 -0
  49. package/dist/domain/iampolicy/list-index.d.ts.map +1 -0
  50. package/dist/domain/iampolicy/list-index.js +32 -0
  51. package/dist/domain/iampolicy/list-index.js.map +1 -0
  52. package/dist/domain/iampolicy/resource-store.d.ts.map +1 -1
  53. package/dist/domain/iampolicy/resource-store.js +24 -11
  54. package/dist/domain/iampolicy/resource-store.js.map +1 -1
  55. package/dist/domain/workflowexecution/list-index.d.ts +1 -1
  56. package/dist/extensions/list-read-scope.d.ts +20 -3
  57. package/dist/extensions/list-read-scope.d.ts.map +1 -1
  58. package/dist/extensions/list-read-scope.js +22 -2
  59. package/dist/extensions/list-read-scope.js.map +1 -1
  60. package/dist/index.d.ts +8 -8
  61. package/dist/index.d.ts.map +1 -1
  62. package/dist/index.js +20 -5
  63. package/dist/index.js.map +1 -1
  64. package/package.json +7 -6
  65. package/src/authorization/README.md +48 -39
  66. package/src/authorization/__tests__/authorizer.test.ts +5 -14
  67. package/src/authorization/__tests__/derived-tuples.test.ts +192 -17
  68. package/src/authorization/__tests__/evaluator.test.ts +53 -160
  69. package/src/authorization/__tests__/facts.test.ts +5 -11
  70. package/src/authorization/__tests__/list-read-scope.measure.test.ts +424 -62
  71. package/src/authorization/__tests__/list-read-scope.test.ts +15 -14
  72. package/src/authorization/__tests__/organization-directory.test.ts +2 -2
  73. package/src/authorization/__tests__/store-test-kit.ts +246 -0
  74. package/src/authorization/__tests__/store-tests.test.ts +91 -223
  75. package/src/authorization/__tests__/support.ts +30 -2
  76. package/src/authorization/__tests__/throwaway-model.ts +75 -0
  77. package/src/authorization/__tests__/wire-permissions.test.ts +141 -107
  78. package/src/authorization/authorizer.ts +7 -5
  79. package/src/authorization/derived-tuples.ts +105 -16
  80. package/src/authorization/evaluator.ts +8 -10
  81. package/src/authorization/list-read-scope.ts +37 -22
  82. package/src/authorization/model/__tests__/openfga-json.test.ts +353 -0
  83. package/src/authorization/model/__tests__/registry.test.ts +102 -276
  84. package/src/authorization/model/bindings.ts +131 -0
  85. package/src/authorization/model/data/authorization-model.json +3114 -0
  86. package/src/authorization/model/default-of.ts +2 -2
  87. package/src/authorization/model/execution-viewer.ts +56 -0
  88. package/src/authorization/model/index.ts +81 -72
  89. package/src/authorization/model/openfga-json.ts +310 -0
  90. package/src/authorization/model/rewrite.ts +39 -188
  91. package/src/authorization/strict-json.ts +52 -0
  92. package/src/boot/__tests__/list-indexes.test.ts +4 -0
  93. package/src/boot/compose.ts +9 -7
  94. package/src/boot/list-indexes.ts +6 -0
  95. package/src/domain/iampolicy/__tests__/resource-store.test.ts +65 -5
  96. package/src/domain/iampolicy/list-index.ts +33 -0
  97. package/src/domain/iampolicy/resource-store.ts +24 -11
  98. package/src/extensions/__tests__/built-in-authorization-composed.test.ts +3 -6
  99. package/src/extensions/list-read-scope.ts +32 -4
  100. package/src/index.ts +20 -44
  101. package/dist/authorization/model/agent.d.ts +0 -2
  102. package/dist/authorization/model/agent.d.ts.map +0 -1
  103. package/dist/authorization/model/agent.js +0 -43
  104. package/dist/authorization/model/agent.js.map +0 -1
  105. package/dist/authorization/model/agent_channel.d.ts +0 -2
  106. package/dist/authorization/model/agent_channel.d.ts.map +0 -1
  107. package/dist/authorization/model/agent_channel.js +0 -39
  108. package/dist/authorization/model/agent_channel.js.map +0 -1
  109. package/dist/authorization/model/agent_execution.d.ts +0 -2
  110. package/dist/authorization/model/agent_execution.d.ts.map +0 -1
  111. package/dist/authorization/model/agent_execution.js +0 -25
  112. package/dist/authorization/model/agent_execution.js.map +0 -1
  113. package/dist/authorization/model/agent_instance.d.ts +0 -2
  114. package/dist/authorization/model/agent_instance.d.ts.map +0 -1
  115. package/dist/authorization/model/agent_instance.js +0 -48
  116. package/dist/authorization/model/agent_instance.js.map +0 -1
  117. package/dist/authorization/model/agent_share.d.ts +0 -2
  118. package/dist/authorization/model/agent_share.d.ts.map +0 -1
  119. package/dist/authorization/model/agent_share.js +0 -29
  120. package/dist/authorization/model/agent_share.js.map +0 -1
  121. package/dist/authorization/model/api_key.d.ts +0 -2
  122. package/dist/authorization/model/api_key.d.ts.map +0 -1
  123. package/dist/authorization/model/api_key.js +0 -27
  124. package/dist/authorization/model/api_key.js.map +0 -1
  125. package/dist/authorization/model/artifact.d.ts +0 -2
  126. package/dist/authorization/model/artifact.d.ts.map +0 -1
  127. package/dist/authorization/model/artifact.js +0 -27
  128. package/dist/authorization/model/artifact.js.map +0 -1
  129. package/dist/authorization/model/channel_app.d.ts +0 -2
  130. package/dist/authorization/model/channel_app.d.ts.map +0 -1
  131. package/dist/authorization/model/channel_app.js +0 -28
  132. package/dist/authorization/model/channel_app.js.map +0 -1
  133. package/dist/authorization/model/environment.d.ts +0 -2
  134. package/dist/authorization/model/environment.d.ts.map +0 -1
  135. package/dist/authorization/model/environment.js +0 -33
  136. package/dist/authorization/model/environment.js.map +0 -1
  137. package/dist/authorization/model/execution_context.d.ts +0 -2
  138. package/dist/authorization/model/execution_context.d.ts.map +0 -1
  139. package/dist/authorization/model/execution_context.js +0 -19
  140. package/dist/authorization/model/execution_context.js.map +0 -1
  141. package/dist/authorization/model/iam_policy.d.ts +0 -2
  142. package/dist/authorization/model/iam_policy.d.ts.map +0 -1
  143. package/dist/authorization/model/iam_policy.js +0 -31
  144. package/dist/authorization/model/iam_policy.js.map +0 -1
  145. package/dist/authorization/model/identity_account.d.ts +0 -2
  146. package/dist/authorization/model/identity_account.d.ts.map +0 -1
  147. package/dist/authorization/model/identity_account.js +0 -25
  148. package/dist/authorization/model/identity_account.js.map +0 -1
  149. package/dist/authorization/model/mcp_server.d.ts +0 -2
  150. package/dist/authorization/model/mcp_server.d.ts.map +0 -1
  151. package/dist/authorization/model/mcp_server.js +0 -38
  152. package/dist/authorization/model/mcp_server.js.map +0 -1
  153. package/dist/authorization/model/memory.d.ts +0 -2
  154. package/dist/authorization/model/memory.d.ts.map +0 -1
  155. package/dist/authorization/model/memory.js +0 -26
  156. package/dist/authorization/model/memory.js.map +0 -1
  157. package/dist/authorization/model/oauth_app.d.ts +0 -2
  158. package/dist/authorization/model/oauth_app.d.ts.map +0 -1
  159. package/dist/authorization/model/oauth_app.js +0 -31
  160. package/dist/authorization/model/oauth_app.js.map +0 -1
  161. package/dist/authorization/model/organization.d.ts +0 -2
  162. package/dist/authorization/model/organization.d.ts.map +0 -1
  163. package/dist/authorization/model/organization.js +0 -58
  164. package/dist/authorization/model/organization.js.map +0 -1
  165. package/dist/authorization/model/platform_client.d.ts +0 -2
  166. package/dist/authorization/model/platform_client.d.ts.map +0 -1
  167. package/dist/authorization/model/platform_client.js +0 -31
  168. package/dist/authorization/model/platform_client.js.map +0 -1
  169. package/dist/authorization/model/plugin.d.ts +0 -2
  170. package/dist/authorization/model/plugin.d.ts.map +0 -1
  171. package/dist/authorization/model/plugin.js +0 -45
  172. package/dist/authorization/model/plugin.js.map +0 -1
  173. package/dist/authorization/model/schedule.d.ts +0 -2
  174. package/dist/authorization/model/schedule.d.ts.map +0 -1
  175. package/dist/authorization/model/schedule.js +0 -34
  176. package/dist/authorization/model/schedule.js.map +0 -1
  177. package/dist/authorization/model/session.d.ts +0 -2
  178. package/dist/authorization/model/session.d.ts.map +0 -1
  179. package/dist/authorization/model/session.js +0 -38
  180. package/dist/authorization/model/session.js.map +0 -1
  181. package/dist/authorization/model/skill.d.ts +0 -2
  182. package/dist/authorization/model/skill.d.ts.map +0 -1
  183. package/dist/authorization/model/skill.js +0 -39
  184. package/dist/authorization/model/skill.js.map +0 -1
  185. package/dist/authorization/model/workflow.d.ts +0 -2
  186. package/dist/authorization/model/workflow.d.ts.map +0 -1
  187. package/dist/authorization/model/workflow.js +0 -39
  188. package/dist/authorization/model/workflow.js.map +0 -1
  189. package/dist/authorization/model/workflow_execution.d.ts +0 -2
  190. package/dist/authorization/model/workflow_execution.d.ts.map +0 -1
  191. package/dist/authorization/model/workflow_execution.js +0 -33
  192. package/dist/authorization/model/workflow_execution.js.map +0 -1
  193. package/dist/authorization/model/workflow_instance.d.ts +0 -2
  194. package/dist/authorization/model/workflow_instance.d.ts.map +0 -1
  195. package/dist/authorization/model/workflow_instance.js +0 -96
  196. package/dist/authorization/model/workflow_instance.js.map +0 -1
  197. package/dist/authorization/store-test-kit.d.ts +0 -62
  198. package/dist/authorization/store-test-kit.d.ts.map +0 -1
  199. package/dist/authorization/store-test-kit.js +0 -265
  200. package/dist/authorization/store-test-kit.js.map +0 -1
  201. package/src/authorization/__tests__/fixtures/fga/agent-channel-owner.fga.yaml +0 -112
  202. package/src/authorization/__tests__/fixtures/fga/agent-instance-creation.fga.yaml +0 -177
  203. package/src/authorization/__tests__/fixtures/fga/agent-share-owner.fga.yaml +0 -109
  204. package/src/authorization/__tests__/fixtures/fga/artifact-org-and-owner.fga.yaml +0 -128
  205. package/src/authorization/__tests__/fixtures/fga/blueprint-private-visibility.fga.yaml +0 -318
  206. package/src/authorization/__tests__/fixtures/fga/channel-app-owner.fga.yaml +0 -125
  207. package/src/authorization/__tests__/fixtures/fga/channel-participation.fga.yaml +0 -201
  208. package/src/authorization/__tests__/fixtures/fga/channel-session-visibility.fga.yaml +0 -187
  209. package/src/authorization/__tests__/fixtures/fga/default-instance-inheritance.fga.yaml +0 -214
  210. package/src/authorization/__tests__/fixtures/fga/mcp-server-authoring.fga.yaml +0 -129
  211. package/src/authorization/__tests__/fixtures/fga/memory-subject-only.fga.yaml +0 -72
  212. package/src/authorization/__tests__/fixtures/fga/org-admin-owner-inheritance.fga.yaml +0 -308
  213. package/src/authorization/__tests__/fixtures/fga/org-shared-environment.fga.yaml +0 -144
  214. package/src/authorization/__tests__/fixtures/fga/platform-visibility.fga.yaml +0 -199
  215. package/src/authorization/__tests__/fixtures/fga/provider-standing-viewer.fga.yaml +0 -40
  216. package/src/authorization/__tests__/fixtures/fga/reserved-label-writer.fga.yaml +0 -41
  217. package/src/authorization/__tests__/fixtures/fga/schedule-owner.fga.yaml +0 -113
  218. package/src/authorization/__tests__/fixtures/fga/schedule-session-visibility.fga.yaml +0 -214
  219. package/src/authorization/__tests__/fixtures/fga/session-personal-resource.fga.yaml +0 -117
  220. package/src/authorization/__tests__/fixtures/fga/workflow-execution-sharing.fga.yaml +0 -190
  221. package/src/authorization/model/agent.ts +0 -64
  222. package/src/authorization/model/agent_channel.ts +0 -57
  223. package/src/authorization/model/agent_execution.ts +0 -33
  224. package/src/authorization/model/agent_instance.ts +0 -66
  225. package/src/authorization/model/agent_share.ts +0 -40
  226. package/src/authorization/model/api_key.ts +0 -28
  227. package/src/authorization/model/artifact.ts +0 -38
  228. package/src/authorization/model/channel_app.ts +0 -39
  229. package/src/authorization/model/environment.ts +0 -48
  230. package/src/authorization/model/execution_context.ts +0 -20
  231. package/src/authorization/model/iam_policy.ts +0 -42
  232. package/src/authorization/model/identity_account.ts +0 -26
  233. package/src/authorization/model/mcp_server.ts +0 -59
  234. package/src/authorization/model/memory.ts +0 -27
  235. package/src/authorization/model/oauth_app.ts +0 -43
  236. package/src/authorization/model/organization.ts +0 -59
  237. package/src/authorization/model/platform_client.ts +0 -43
  238. package/src/authorization/model/plugin.ts +0 -66
  239. package/src/authorization/model/schedule.ts +0 -49
  240. package/src/authorization/model/session.ts +0 -50
  241. package/src/authorization/model/skill.ts +0 -60
  242. package/src/authorization/model/workflow.ts +0 -60
  243. package/src/authorization/model/workflow_execution.ts +0 -46
  244. package/src/authorization/model/workflow_instance.ts +0 -125
  245. package/src/authorization/store-test-kit.ts +0 -395
@@ -0,0 +1,3114 @@
1
+ {
2
+ "schema_version": "1.2",
3
+ "type_definitions": [
4
+ {
5
+ "metadata": {
6
+ "module": "stigmer",
7
+ "relations": {
8
+ "can_bootstrap_iam": {},
9
+ "can_execute_billing_ops": {},
10
+ "can_grant_access": {},
11
+ "can_impersonate": {},
12
+ "can_issue_license": {},
13
+ "can_manage_cursor_accounts": {},
14
+ "can_manage_identity_accounts": {},
15
+ "can_manage_model_pricing": {},
16
+ "can_update_usage": {},
17
+ "can_view_access": {},
18
+ "can_view_provider_standing": {},
19
+ "can_write_reserved_labels": {},
20
+ "operator": {
21
+ "directly_related_user_types": [
22
+ {
23
+ "type": "identity_account"
24
+ }
25
+ ]
26
+ }
27
+ },
28
+ "source_info": {
29
+ "file": "platform.fga"
30
+ }
31
+ },
32
+ "relations": {
33
+ "can_bootstrap_iam": {
34
+ "computedUserset": {
35
+ "relation": "operator"
36
+ }
37
+ },
38
+ "can_execute_billing_ops": {
39
+ "computedUserset": {
40
+ "relation": "operator"
41
+ }
42
+ },
43
+ "can_grant_access": {
44
+ "computedUserset": {
45
+ "relation": "operator"
46
+ }
47
+ },
48
+ "can_impersonate": {
49
+ "computedUserset": {
50
+ "relation": "operator"
51
+ }
52
+ },
53
+ "can_issue_license": {
54
+ "computedUserset": {
55
+ "relation": "operator"
56
+ }
57
+ },
58
+ "can_manage_cursor_accounts": {
59
+ "computedUserset": {
60
+ "relation": "operator"
61
+ }
62
+ },
63
+ "can_manage_identity_accounts": {
64
+ "computedUserset": {
65
+ "relation": "operator"
66
+ }
67
+ },
68
+ "can_manage_model_pricing": {
69
+ "computedUserset": {
70
+ "relation": "operator"
71
+ }
72
+ },
73
+ "can_update_usage": {
74
+ "computedUserset": {
75
+ "relation": "operator"
76
+ }
77
+ },
78
+ "can_view_access": {
79
+ "computedUserset": {
80
+ "relation": "operator"
81
+ }
82
+ },
83
+ "can_view_provider_standing": {
84
+ "computedUserset": {
85
+ "relation": "operator"
86
+ }
87
+ },
88
+ "can_write_reserved_labels": {
89
+ "computedUserset": {
90
+ "relation": "operator"
91
+ }
92
+ },
93
+ "operator": {
94
+ "this": {}
95
+ }
96
+ },
97
+ "type": "platform"
98
+ },
99
+ {
100
+ "metadata": {
101
+ "module": "iam",
102
+ "relations": {
103
+ "can_delete": {},
104
+ "can_edit": {},
105
+ "can_grant_access": {},
106
+ "can_view": {},
107
+ "can_view_access": {},
108
+ "owner": {
109
+ "directly_related_user_types": [
110
+ {
111
+ "type": "identity_account"
112
+ }
113
+ ]
114
+ }
115
+ },
116
+ "source_info": {
117
+ "file": "iam/identity_account.fga"
118
+ }
119
+ },
120
+ "relations": {
121
+ "can_delete": {
122
+ "computedUserset": {
123
+ "relation": "owner"
124
+ }
125
+ },
126
+ "can_edit": {
127
+ "computedUserset": {
128
+ "relation": "owner"
129
+ }
130
+ },
131
+ "can_grant_access": {
132
+ "computedUserset": {
133
+ "relation": "owner"
134
+ }
135
+ },
136
+ "can_view": {
137
+ "computedUserset": {
138
+ "relation": "owner"
139
+ }
140
+ },
141
+ "can_view_access": {
142
+ "computedUserset": {
143
+ "relation": "owner"
144
+ }
145
+ },
146
+ "owner": {
147
+ "this": {}
148
+ }
149
+ },
150
+ "type": "identity_account"
151
+ },
152
+ {
153
+ "metadata": {
154
+ "module": "iam",
155
+ "relations": {
156
+ "can_delete": {},
157
+ "can_edit": {},
158
+ "can_grant_access": {},
159
+ "can_view": {},
160
+ "can_view_access": {},
161
+ "managed_org": {
162
+ "directly_related_user_types": [
163
+ {
164
+ "type": "organization"
165
+ }
166
+ ]
167
+ },
168
+ "organization": {
169
+ "directly_related_user_types": [
170
+ {
171
+ "type": "organization"
172
+ }
173
+ ]
174
+ },
175
+ "owner": {
176
+ "directly_related_user_types": [
177
+ {
178
+ "type": "identity_account"
179
+ }
180
+ ]
181
+ },
182
+ "platform_user": {},
183
+ "viewer": {
184
+ "directly_related_user_types": [
185
+ {
186
+ "type": "identity_account"
187
+ }
188
+ ]
189
+ }
190
+ },
191
+ "source_info": {
192
+ "file": "iam/identity_provider.fga"
193
+ }
194
+ },
195
+ "relations": {
196
+ "can_delete": {
197
+ "computedUserset": {
198
+ "relation": "owner"
199
+ }
200
+ },
201
+ "can_edit": {
202
+ "computedUserset": {
203
+ "relation": "owner"
204
+ }
205
+ },
206
+ "can_grant_access": {
207
+ "computedUserset": {
208
+ "relation": "owner"
209
+ }
210
+ },
211
+ "can_view": {
212
+ "computedUserset": {
213
+ "relation": "viewer"
214
+ }
215
+ },
216
+ "can_view_access": {
217
+ "computedUserset": {
218
+ "relation": "viewer"
219
+ }
220
+ },
221
+ "managed_org": {
222
+ "this": {}
223
+ },
224
+ "organization": {
225
+ "this": {}
226
+ },
227
+ "owner": {
228
+ "union": {
229
+ "child": [
230
+ {
231
+ "this": {}
232
+ },
233
+ {
234
+ "tupleToUserset": {
235
+ "computedUserset": {
236
+ "relation": "admin"
237
+ },
238
+ "tupleset": {
239
+ "relation": "organization"
240
+ }
241
+ }
242
+ }
243
+ ]
244
+ }
245
+ },
246
+ "platform_user": {
247
+ "tupleToUserset": {
248
+ "computedUserset": {
249
+ "relation": "member"
250
+ },
251
+ "tupleset": {
252
+ "relation": "managed_org"
253
+ }
254
+ }
255
+ },
256
+ "viewer": {
257
+ "union": {
258
+ "child": [
259
+ {
260
+ "this": {}
261
+ },
262
+ {
263
+ "computedUserset": {
264
+ "relation": "owner"
265
+ }
266
+ }
267
+ ]
268
+ }
269
+ }
270
+ },
271
+ "type": "identity_provider"
272
+ },
273
+ {
274
+ "metadata": {
275
+ "module": "iam",
276
+ "relations": {
277
+ "can_delete": {},
278
+ "can_edit": {},
279
+ "can_grant_access": {},
280
+ "can_view": {},
281
+ "can_view_access": {},
282
+ "organization": {
283
+ "directly_related_user_types": [
284
+ {
285
+ "type": "organization"
286
+ }
287
+ ]
288
+ },
289
+ "owner": {
290
+ "directly_related_user_types": [
291
+ {
292
+ "type": "identity_account"
293
+ }
294
+ ]
295
+ },
296
+ "viewer": {}
297
+ },
298
+ "source_info": {
299
+ "file": "iam/iam_policy.fga"
300
+ }
301
+ },
302
+ "relations": {
303
+ "can_delete": {
304
+ "computedUserset": {
305
+ "relation": "owner"
306
+ }
307
+ },
308
+ "can_edit": {
309
+ "computedUserset": {
310
+ "relation": "owner"
311
+ }
312
+ },
313
+ "can_grant_access": {
314
+ "computedUserset": {
315
+ "relation": "owner"
316
+ }
317
+ },
318
+ "can_view": {
319
+ "computedUserset": {
320
+ "relation": "viewer"
321
+ }
322
+ },
323
+ "can_view_access": {
324
+ "computedUserset": {
325
+ "relation": "viewer"
326
+ }
327
+ },
328
+ "organization": {
329
+ "this": {}
330
+ },
331
+ "owner": {
332
+ "union": {
333
+ "child": [
334
+ {
335
+ "this": {}
336
+ },
337
+ {
338
+ "tupleToUserset": {
339
+ "computedUserset": {
340
+ "relation": "admin"
341
+ },
342
+ "tupleset": {
343
+ "relation": "organization"
344
+ }
345
+ }
346
+ }
347
+ ]
348
+ }
349
+ },
350
+ "viewer": {
351
+ "tupleToUserset": {
352
+ "computedUserset": {
353
+ "relation": "admin"
354
+ },
355
+ "tupleset": {
356
+ "relation": "organization"
357
+ }
358
+ }
359
+ }
360
+ },
361
+ "type": "iam_policy"
362
+ },
363
+ {
364
+ "metadata": {
365
+ "module": "iam",
366
+ "relations": {
367
+ "can_delete": {},
368
+ "can_edit": {},
369
+ "can_grant_access": {},
370
+ "can_revoke": {},
371
+ "can_rotate": {},
372
+ "can_use": {},
373
+ "can_view": {},
374
+ "can_view_access": {},
375
+ "owner": {
376
+ "directly_related_user_types": [
377
+ {
378
+ "type": "identity_account"
379
+ }
380
+ ]
381
+ }
382
+ },
383
+ "source_info": {
384
+ "file": "iam/api_key.fga"
385
+ }
386
+ },
387
+ "relations": {
388
+ "can_delete": {
389
+ "computedUserset": {
390
+ "relation": "owner"
391
+ }
392
+ },
393
+ "can_edit": {
394
+ "computedUserset": {
395
+ "relation": "owner"
396
+ }
397
+ },
398
+ "can_grant_access": {
399
+ "computedUserset": {
400
+ "relation": "owner"
401
+ }
402
+ },
403
+ "can_revoke": {
404
+ "computedUserset": {
405
+ "relation": "owner"
406
+ }
407
+ },
408
+ "can_rotate": {
409
+ "computedUserset": {
410
+ "relation": "owner"
411
+ }
412
+ },
413
+ "can_use": {
414
+ "computedUserset": {
415
+ "relation": "owner"
416
+ }
417
+ },
418
+ "can_view": {
419
+ "computedUserset": {
420
+ "relation": "owner"
421
+ }
422
+ },
423
+ "can_view_access": {
424
+ "computedUserset": {
425
+ "relation": "owner"
426
+ }
427
+ },
428
+ "owner": {
429
+ "this": {}
430
+ }
431
+ },
432
+ "type": "api_key"
433
+ },
434
+ {
435
+ "metadata": {
436
+ "module": "iam",
437
+ "relations": {
438
+ "can_delete": {},
439
+ "can_edit": {},
440
+ "can_grant_access": {},
441
+ "can_view": {},
442
+ "can_view_access": {},
443
+ "organization": {
444
+ "directly_related_user_types": [
445
+ {
446
+ "type": "organization"
447
+ }
448
+ ]
449
+ },
450
+ "owner": {
451
+ "directly_related_user_types": [
452
+ {
453
+ "type": "identity_account"
454
+ }
455
+ ]
456
+ },
457
+ "viewer": {
458
+ "directly_related_user_types": [
459
+ {
460
+ "type": "identity_account"
461
+ }
462
+ ]
463
+ }
464
+ },
465
+ "source_info": {
466
+ "file": "iam/oauth_app.fga"
467
+ }
468
+ },
469
+ "relations": {
470
+ "can_delete": {
471
+ "computedUserset": {
472
+ "relation": "owner"
473
+ }
474
+ },
475
+ "can_edit": {
476
+ "computedUserset": {
477
+ "relation": "owner"
478
+ }
479
+ },
480
+ "can_grant_access": {
481
+ "computedUserset": {
482
+ "relation": "owner"
483
+ }
484
+ },
485
+ "can_view": {
486
+ "computedUserset": {
487
+ "relation": "viewer"
488
+ }
489
+ },
490
+ "can_view_access": {
491
+ "computedUserset": {
492
+ "relation": "viewer"
493
+ }
494
+ },
495
+ "organization": {
496
+ "this": {}
497
+ },
498
+ "owner": {
499
+ "this": {}
500
+ },
501
+ "viewer": {
502
+ "union": {
503
+ "child": [
504
+ {
505
+ "this": {}
506
+ },
507
+ {
508
+ "computedUserset": {
509
+ "relation": "owner"
510
+ }
511
+ },
512
+ {
513
+ "tupleToUserset": {
514
+ "computedUserset": {
515
+ "relation": "admin"
516
+ },
517
+ "tupleset": {
518
+ "relation": "organization"
519
+ }
520
+ }
521
+ }
522
+ ]
523
+ }
524
+ }
525
+ },
526
+ "type": "oauth_app"
527
+ },
528
+ {
529
+ "metadata": {
530
+ "module": "iam",
531
+ "relations": {
532
+ "can_delete": {},
533
+ "can_edit": {},
534
+ "can_grant_access": {},
535
+ "can_view": {},
536
+ "can_view_access": {},
537
+ "organization": {
538
+ "directly_related_user_types": [
539
+ {
540
+ "type": "organization"
541
+ }
542
+ ]
543
+ },
544
+ "owner": {
545
+ "directly_related_user_types": [
546
+ {
547
+ "type": "identity_account"
548
+ }
549
+ ]
550
+ },
551
+ "viewer": {
552
+ "directly_related_user_types": [
553
+ {
554
+ "type": "identity_account"
555
+ }
556
+ ]
557
+ }
558
+ },
559
+ "source_info": {
560
+ "file": "iam/platform_client.fga"
561
+ }
562
+ },
563
+ "relations": {
564
+ "can_delete": {
565
+ "computedUserset": {
566
+ "relation": "owner"
567
+ }
568
+ },
569
+ "can_edit": {
570
+ "computedUserset": {
571
+ "relation": "owner"
572
+ }
573
+ },
574
+ "can_grant_access": {
575
+ "computedUserset": {
576
+ "relation": "owner"
577
+ }
578
+ },
579
+ "can_view": {
580
+ "computedUserset": {
581
+ "relation": "viewer"
582
+ }
583
+ },
584
+ "can_view_access": {
585
+ "computedUserset": {
586
+ "relation": "viewer"
587
+ }
588
+ },
589
+ "organization": {
590
+ "this": {}
591
+ },
592
+ "owner": {
593
+ "this": {}
594
+ },
595
+ "viewer": {
596
+ "union": {
597
+ "child": [
598
+ {
599
+ "this": {}
600
+ },
601
+ {
602
+ "computedUserset": {
603
+ "relation": "owner"
604
+ }
605
+ },
606
+ {
607
+ "tupleToUserset": {
608
+ "computedUserset": {
609
+ "relation": "admin"
610
+ },
611
+ "tupleset": {
612
+ "relation": "organization"
613
+ }
614
+ }
615
+ }
616
+ ]
617
+ }
618
+ }
619
+ },
620
+ "type": "platform_client"
621
+ },
622
+ {
623
+ "metadata": {
624
+ "module": "iam",
625
+ "relations": {
626
+ "can_delete": {},
627
+ "can_edit": {},
628
+ "can_view": {},
629
+ "organization": {
630
+ "directly_related_user_types": [
631
+ {
632
+ "type": "organization"
633
+ }
634
+ ]
635
+ },
636
+ "owner": {
637
+ "directly_related_user_types": [
638
+ {
639
+ "type": "identity_account"
640
+ }
641
+ ]
642
+ },
643
+ "viewer": {}
644
+ },
645
+ "source_info": {
646
+ "file": "iam/invitation.fga"
647
+ }
648
+ },
649
+ "relations": {
650
+ "can_delete": {
651
+ "computedUserset": {
652
+ "relation": "owner"
653
+ }
654
+ },
655
+ "can_edit": {
656
+ "computedUserset": {
657
+ "relation": "owner"
658
+ }
659
+ },
660
+ "can_view": {
661
+ "computedUserset": {
662
+ "relation": "viewer"
663
+ }
664
+ },
665
+ "organization": {
666
+ "this": {}
667
+ },
668
+ "owner": {
669
+ "union": {
670
+ "child": [
671
+ {
672
+ "this": {}
673
+ },
674
+ {
675
+ "tupleToUserset": {
676
+ "computedUserset": {
677
+ "relation": "admin"
678
+ },
679
+ "tupleset": {
680
+ "relation": "organization"
681
+ }
682
+ }
683
+ }
684
+ ]
685
+ }
686
+ },
687
+ "viewer": {
688
+ "tupleToUserset": {
689
+ "computedUserset": {
690
+ "relation": "admin"
691
+ },
692
+ "tupleset": {
693
+ "relation": "organization"
694
+ }
695
+ }
696
+ }
697
+ },
698
+ "type": "invitation"
699
+ },
700
+ {
701
+ "metadata": {
702
+ "module": "iam",
703
+ "relations": {
704
+ "can_delete": {},
705
+ "can_edit": {},
706
+ "can_grant_access": {},
707
+ "can_view": {},
708
+ "can_view_access": {},
709
+ "member": {
710
+ "directly_related_user_types": [
711
+ {
712
+ "type": "identity_account"
713
+ }
714
+ ]
715
+ },
716
+ "organization": {
717
+ "directly_related_user_types": [
718
+ {
719
+ "type": "organization"
720
+ }
721
+ ]
722
+ },
723
+ "viewer": {}
724
+ },
725
+ "source_info": {
726
+ "file": "iam/team.fga"
727
+ }
728
+ },
729
+ "relations": {
730
+ "can_delete": {
731
+ "tupleToUserset": {
732
+ "computedUserset": {
733
+ "relation": "admin"
734
+ },
735
+ "tupleset": {
736
+ "relation": "organization"
737
+ }
738
+ }
739
+ },
740
+ "can_edit": {
741
+ "tupleToUserset": {
742
+ "computedUserset": {
743
+ "relation": "admin"
744
+ },
745
+ "tupleset": {
746
+ "relation": "organization"
747
+ }
748
+ }
749
+ },
750
+ "can_grant_access": {
751
+ "tupleToUserset": {
752
+ "computedUserset": {
753
+ "relation": "admin"
754
+ },
755
+ "tupleset": {
756
+ "relation": "organization"
757
+ }
758
+ }
759
+ },
760
+ "can_view": {
761
+ "computedUserset": {
762
+ "relation": "viewer"
763
+ }
764
+ },
765
+ "can_view_access": {
766
+ "computedUserset": {
767
+ "relation": "viewer"
768
+ }
769
+ },
770
+ "member": {
771
+ "intersection": {
772
+ "child": [
773
+ {
774
+ "this": {}
775
+ },
776
+ {
777
+ "tupleToUserset": {
778
+ "computedUserset": {
779
+ "relation": "viewer"
780
+ },
781
+ "tupleset": {
782
+ "relation": "organization"
783
+ }
784
+ }
785
+ }
786
+ ]
787
+ }
788
+ },
789
+ "organization": {
790
+ "this": {}
791
+ },
792
+ "viewer": {
793
+ "tupleToUserset": {
794
+ "computedUserset": {
795
+ "relation": "viewer"
796
+ },
797
+ "tupleset": {
798
+ "relation": "organization"
799
+ }
800
+ }
801
+ }
802
+ },
803
+ "type": "team"
804
+ },
805
+ {
806
+ "metadata": {
807
+ "module": "tenancy",
808
+ "relations": {
809
+ "admin": {
810
+ "directly_related_user_types": [
811
+ {
812
+ "type": "identity_account"
813
+ }
814
+ ]
815
+ },
816
+ "can_assign_roles": {},
817
+ "can_create_agent": {},
818
+ "can_create_agent_instance": {},
819
+ "can_create_agent_share": {},
820
+ "can_create_channel_app": {},
821
+ "can_create_environment": {},
822
+ "can_create_execution_in": {},
823
+ "can_create_identity_account": {},
824
+ "can_create_idp": {},
825
+ "can_create_mcp_server": {},
826
+ "can_create_oauth_app": {},
827
+ "can_create_platform_client": {},
828
+ "can_create_plugin": {},
829
+ "can_create_session": {},
830
+ "can_create_skill": {},
831
+ "can_create_team": {},
832
+ "can_create_workflow": {},
833
+ "can_delete": {},
834
+ "can_edit": {},
835
+ "can_grant_access": {},
836
+ "can_manage_billing": {},
837
+ "can_manage_members": {},
838
+ "can_view": {},
839
+ "can_view_access": {},
840
+ "can_view_billing": {},
841
+ "guest": {
842
+ "directly_related_user_types": [
843
+ {
844
+ "type": "identity_account"
845
+ }
846
+ ]
847
+ },
848
+ "member": {
849
+ "directly_related_user_types": [
850
+ {
851
+ "type": "identity_account"
852
+ }
853
+ ]
854
+ },
855
+ "owner": {
856
+ "directly_related_user_types": [
857
+ {
858
+ "type": "identity_account"
859
+ }
860
+ ]
861
+ },
862
+ "viewer": {
863
+ "directly_related_user_types": [
864
+ {
865
+ "type": "identity_account"
866
+ }
867
+ ]
868
+ }
869
+ },
870
+ "source_info": {
871
+ "file": "tenancy/organization.fga"
872
+ }
873
+ },
874
+ "relations": {
875
+ "admin": {
876
+ "union": {
877
+ "child": [
878
+ {
879
+ "this": {}
880
+ },
881
+ {
882
+ "computedUserset": {
883
+ "relation": "owner"
884
+ }
885
+ }
886
+ ]
887
+ }
888
+ },
889
+ "can_assign_roles": {
890
+ "computedUserset": {
891
+ "relation": "owner"
892
+ }
893
+ },
894
+ "can_create_agent": {
895
+ "computedUserset": {
896
+ "relation": "admin"
897
+ }
898
+ },
899
+ "can_create_agent_instance": {
900
+ "computedUserset": {
901
+ "relation": "member"
902
+ }
903
+ },
904
+ "can_create_agent_share": {
905
+ "computedUserset": {
906
+ "relation": "admin"
907
+ }
908
+ },
909
+ "can_create_channel_app": {
910
+ "computedUserset": {
911
+ "relation": "admin"
912
+ }
913
+ },
914
+ "can_create_environment": {
915
+ "computedUserset": {
916
+ "relation": "member"
917
+ }
918
+ },
919
+ "can_create_execution_in": {
920
+ "union": {
921
+ "child": [
922
+ {
923
+ "computedUserset": {
924
+ "relation": "member"
925
+ }
926
+ },
927
+ {
928
+ "computedUserset": {
929
+ "relation": "guest"
930
+ }
931
+ }
932
+ ]
933
+ }
934
+ },
935
+ "can_create_identity_account": {
936
+ "computedUserset": {
937
+ "relation": "admin"
938
+ }
939
+ },
940
+ "can_create_idp": {
941
+ "computedUserset": {
942
+ "relation": "admin"
943
+ }
944
+ },
945
+ "can_create_mcp_server": {
946
+ "computedUserset": {
947
+ "relation": "admin"
948
+ }
949
+ },
950
+ "can_create_oauth_app": {
951
+ "computedUserset": {
952
+ "relation": "admin"
953
+ }
954
+ },
955
+ "can_create_platform_client": {
956
+ "computedUserset": {
957
+ "relation": "admin"
958
+ }
959
+ },
960
+ "can_create_plugin": {
961
+ "computedUserset": {
962
+ "relation": "admin"
963
+ }
964
+ },
965
+ "can_create_session": {
966
+ "union": {
967
+ "child": [
968
+ {
969
+ "computedUserset": {
970
+ "relation": "member"
971
+ }
972
+ },
973
+ {
974
+ "computedUserset": {
975
+ "relation": "guest"
976
+ }
977
+ }
978
+ ]
979
+ }
980
+ },
981
+ "can_create_skill": {
982
+ "computedUserset": {
983
+ "relation": "admin"
984
+ }
985
+ },
986
+ "can_create_team": {
987
+ "computedUserset": {
988
+ "relation": "admin"
989
+ }
990
+ },
991
+ "can_create_workflow": {
992
+ "computedUserset": {
993
+ "relation": "admin"
994
+ }
995
+ },
996
+ "can_delete": {
997
+ "computedUserset": {
998
+ "relation": "owner"
999
+ }
1000
+ },
1001
+ "can_edit": {
1002
+ "computedUserset": {
1003
+ "relation": "admin"
1004
+ }
1005
+ },
1006
+ "can_grant_access": {
1007
+ "computedUserset": {
1008
+ "relation": "admin"
1009
+ }
1010
+ },
1011
+ "can_manage_billing": {
1012
+ "computedUserset": {
1013
+ "relation": "admin"
1014
+ }
1015
+ },
1016
+ "can_manage_members": {
1017
+ "computedUserset": {
1018
+ "relation": "admin"
1019
+ }
1020
+ },
1021
+ "can_view": {
1022
+ "computedUserset": {
1023
+ "relation": "viewer"
1024
+ }
1025
+ },
1026
+ "can_view_access": {
1027
+ "computedUserset": {
1028
+ "relation": "viewer"
1029
+ }
1030
+ },
1031
+ "can_view_billing": {
1032
+ "computedUserset": {
1033
+ "relation": "viewer"
1034
+ }
1035
+ },
1036
+ "guest": {
1037
+ "this": {}
1038
+ },
1039
+ "member": {
1040
+ "union": {
1041
+ "child": [
1042
+ {
1043
+ "this": {}
1044
+ },
1045
+ {
1046
+ "computedUserset": {
1047
+ "relation": "admin"
1048
+ }
1049
+ }
1050
+ ]
1051
+ }
1052
+ },
1053
+ "owner": {
1054
+ "this": {}
1055
+ },
1056
+ "viewer": {
1057
+ "union": {
1058
+ "child": [
1059
+ {
1060
+ "this": {}
1061
+ },
1062
+ {
1063
+ "computedUserset": {
1064
+ "relation": "member"
1065
+ }
1066
+ }
1067
+ ]
1068
+ }
1069
+ }
1070
+ },
1071
+ "type": "organization"
1072
+ },
1073
+ {
1074
+ "metadata": {
1075
+ "module": "agentic",
1076
+ "relations": {
1077
+ "can_clone": {},
1078
+ "can_create_instance": {},
1079
+ "can_delete": {},
1080
+ "can_edit": {},
1081
+ "can_execute": {},
1082
+ "can_grant_access": {},
1083
+ "can_view": {},
1084
+ "can_view_access": {},
1085
+ "organization": {
1086
+ "directly_related_user_types": [
1087
+ {
1088
+ "type": "organization"
1089
+ }
1090
+ ]
1091
+ },
1092
+ "owner": {
1093
+ "directly_related_user_types": [
1094
+ {
1095
+ "type": "identity_account"
1096
+ }
1097
+ ]
1098
+ },
1099
+ "platform_viewer": {
1100
+ "directly_related_user_types": [
1101
+ {
1102
+ "relation": "platform_user",
1103
+ "type": "identity_provider"
1104
+ }
1105
+ ]
1106
+ },
1107
+ "viewer": {
1108
+ "directly_related_user_types": [
1109
+ {
1110
+ "type": "identity_account"
1111
+ },
1112
+ {
1113
+ "relation": "member",
1114
+ "type": "organization"
1115
+ },
1116
+ {
1117
+ "relation": "viewer",
1118
+ "type": "organization"
1119
+ },
1120
+ {
1121
+ "relation": "member",
1122
+ "type": "team"
1123
+ }
1124
+ ]
1125
+ }
1126
+ },
1127
+ "source_info": {
1128
+ "file": "agentic/agent.fga"
1129
+ }
1130
+ },
1131
+ "relations": {
1132
+ "can_clone": {
1133
+ "computedUserset": {
1134
+ "relation": "viewer"
1135
+ }
1136
+ },
1137
+ "can_create_instance": {
1138
+ "computedUserset": {
1139
+ "relation": "can_execute"
1140
+ }
1141
+ },
1142
+ "can_delete": {
1143
+ "computedUserset": {
1144
+ "relation": "owner"
1145
+ }
1146
+ },
1147
+ "can_edit": {
1148
+ "computedUserset": {
1149
+ "relation": "owner"
1150
+ }
1151
+ },
1152
+ "can_execute": {
1153
+ "computedUserset": {
1154
+ "relation": "viewer"
1155
+ }
1156
+ },
1157
+ "can_grant_access": {
1158
+ "computedUserset": {
1159
+ "relation": "owner"
1160
+ }
1161
+ },
1162
+ "can_view": {
1163
+ "computedUserset": {
1164
+ "relation": "viewer"
1165
+ }
1166
+ },
1167
+ "can_view_access": {
1168
+ "computedUserset": {
1169
+ "relation": "viewer"
1170
+ }
1171
+ },
1172
+ "organization": {
1173
+ "this": {}
1174
+ },
1175
+ "owner": {
1176
+ "union": {
1177
+ "child": [
1178
+ {
1179
+ "this": {}
1180
+ },
1181
+ {
1182
+ "tupleToUserset": {
1183
+ "computedUserset": {
1184
+ "relation": "admin"
1185
+ },
1186
+ "tupleset": {
1187
+ "relation": "organization"
1188
+ }
1189
+ }
1190
+ }
1191
+ ]
1192
+ }
1193
+ },
1194
+ "platform_viewer": {
1195
+ "this": {}
1196
+ },
1197
+ "viewer": {
1198
+ "union": {
1199
+ "child": [
1200
+ {
1201
+ "this": {}
1202
+ },
1203
+ {
1204
+ "computedUserset": {
1205
+ "relation": "owner"
1206
+ }
1207
+ },
1208
+ {
1209
+ "computedUserset": {
1210
+ "relation": "platform_viewer"
1211
+ }
1212
+ }
1213
+ ]
1214
+ }
1215
+ }
1216
+ },
1217
+ "type": "agent"
1218
+ },
1219
+ {
1220
+ "metadata": {
1221
+ "module": "agentic",
1222
+ "relations": {
1223
+ "can_delete": {},
1224
+ "can_edit": {},
1225
+ "can_grant_access": {},
1226
+ "can_participate": {},
1227
+ "can_view": {},
1228
+ "can_view_access": {},
1229
+ "organization": {
1230
+ "directly_related_user_types": [
1231
+ {
1232
+ "type": "organization"
1233
+ }
1234
+ ]
1235
+ },
1236
+ "owner": {
1237
+ "directly_related_user_types": [
1238
+ {
1239
+ "type": "identity_account"
1240
+ }
1241
+ ]
1242
+ },
1243
+ "participant": {
1244
+ "directly_related_user_types": [
1245
+ {
1246
+ "type": "identity_account"
1247
+ },
1248
+ {
1249
+ "relation": "member",
1250
+ "type": "team"
1251
+ }
1252
+ ]
1253
+ },
1254
+ "viewer": {
1255
+ "directly_related_user_types": [
1256
+ {
1257
+ "type": "identity_account"
1258
+ },
1259
+ {
1260
+ "relation": "member",
1261
+ "type": "team"
1262
+ }
1263
+ ]
1264
+ }
1265
+ },
1266
+ "source_info": {
1267
+ "file": "agentic/agent_channel.fga"
1268
+ }
1269
+ },
1270
+ "relations": {
1271
+ "can_delete": {
1272
+ "computedUserset": {
1273
+ "relation": "owner"
1274
+ }
1275
+ },
1276
+ "can_edit": {
1277
+ "computedUserset": {
1278
+ "relation": "owner"
1279
+ }
1280
+ },
1281
+ "can_grant_access": {
1282
+ "computedUserset": {
1283
+ "relation": "owner"
1284
+ }
1285
+ },
1286
+ "can_participate": {
1287
+ "computedUserset": {
1288
+ "relation": "participant"
1289
+ }
1290
+ },
1291
+ "can_view": {
1292
+ "computedUserset": {
1293
+ "relation": "viewer"
1294
+ }
1295
+ },
1296
+ "can_view_access": {
1297
+ "computedUserset": {
1298
+ "relation": "viewer"
1299
+ }
1300
+ },
1301
+ "organization": {
1302
+ "this": {}
1303
+ },
1304
+ "owner": {
1305
+ "union": {
1306
+ "child": [
1307
+ {
1308
+ "this": {}
1309
+ },
1310
+ {
1311
+ "tupleToUserset": {
1312
+ "computedUserset": {
1313
+ "relation": "admin"
1314
+ },
1315
+ "tupleset": {
1316
+ "relation": "organization"
1317
+ }
1318
+ }
1319
+ }
1320
+ ]
1321
+ }
1322
+ },
1323
+ "participant": {
1324
+ "union": {
1325
+ "child": [
1326
+ {
1327
+ "this": {}
1328
+ },
1329
+ {
1330
+ "computedUserset": {
1331
+ "relation": "owner"
1332
+ }
1333
+ }
1334
+ ]
1335
+ }
1336
+ },
1337
+ "viewer": {
1338
+ "union": {
1339
+ "child": [
1340
+ {
1341
+ "this": {}
1342
+ },
1343
+ {
1344
+ "computedUserset": {
1345
+ "relation": "participant"
1346
+ }
1347
+ }
1348
+ ]
1349
+ }
1350
+ }
1351
+ },
1352
+ "type": "agent_channel"
1353
+ },
1354
+ {
1355
+ "metadata": {
1356
+ "module": "agentic",
1357
+ "relations": {
1358
+ "can_delete": {},
1359
+ "can_edit": {},
1360
+ "can_grant_access": {},
1361
+ "can_view": {},
1362
+ "can_view_access": {},
1363
+ "organization": {
1364
+ "directly_related_user_types": [
1365
+ {
1366
+ "type": "organization"
1367
+ }
1368
+ ]
1369
+ },
1370
+ "owner": {
1371
+ "directly_related_user_types": [
1372
+ {
1373
+ "type": "identity_account"
1374
+ }
1375
+ ]
1376
+ },
1377
+ "viewer": {
1378
+ "directly_related_user_types": [
1379
+ {
1380
+ "type": "identity_account"
1381
+ }
1382
+ ]
1383
+ }
1384
+ },
1385
+ "source_info": {
1386
+ "file": "agentic/agent_share.fga"
1387
+ }
1388
+ },
1389
+ "relations": {
1390
+ "can_delete": {
1391
+ "computedUserset": {
1392
+ "relation": "owner"
1393
+ }
1394
+ },
1395
+ "can_edit": {
1396
+ "computedUserset": {
1397
+ "relation": "owner"
1398
+ }
1399
+ },
1400
+ "can_grant_access": {
1401
+ "computedUserset": {
1402
+ "relation": "owner"
1403
+ }
1404
+ },
1405
+ "can_view": {
1406
+ "computedUserset": {
1407
+ "relation": "viewer"
1408
+ }
1409
+ },
1410
+ "can_view_access": {
1411
+ "computedUserset": {
1412
+ "relation": "viewer"
1413
+ }
1414
+ },
1415
+ "organization": {
1416
+ "this": {}
1417
+ },
1418
+ "owner": {
1419
+ "union": {
1420
+ "child": [
1421
+ {
1422
+ "this": {}
1423
+ },
1424
+ {
1425
+ "tupleToUserset": {
1426
+ "computedUserset": {
1427
+ "relation": "admin"
1428
+ },
1429
+ "tupleset": {
1430
+ "relation": "organization"
1431
+ }
1432
+ }
1433
+ }
1434
+ ]
1435
+ }
1436
+ },
1437
+ "viewer": {
1438
+ "union": {
1439
+ "child": [
1440
+ {
1441
+ "this": {}
1442
+ },
1443
+ {
1444
+ "computedUserset": {
1445
+ "relation": "owner"
1446
+ }
1447
+ }
1448
+ ]
1449
+ }
1450
+ }
1451
+ },
1452
+ "type": "agent_share"
1453
+ },
1454
+ {
1455
+ "metadata": {
1456
+ "module": "agentic",
1457
+ "relations": {
1458
+ "can_delete": {},
1459
+ "can_edit": {},
1460
+ "can_grant_access": {},
1461
+ "can_view": {},
1462
+ "can_view_access": {},
1463
+ "organization": {
1464
+ "directly_related_user_types": [
1465
+ {
1466
+ "type": "organization"
1467
+ }
1468
+ ]
1469
+ },
1470
+ "owner": {
1471
+ "directly_related_user_types": [
1472
+ {
1473
+ "type": "identity_account"
1474
+ }
1475
+ ]
1476
+ },
1477
+ "viewer": {
1478
+ "directly_related_user_types": [
1479
+ {
1480
+ "type": "identity_account"
1481
+ }
1482
+ ]
1483
+ }
1484
+ },
1485
+ "source_info": {
1486
+ "file": "agentic/channel_app.fga"
1487
+ }
1488
+ },
1489
+ "relations": {
1490
+ "can_delete": {
1491
+ "computedUserset": {
1492
+ "relation": "owner"
1493
+ }
1494
+ },
1495
+ "can_edit": {
1496
+ "computedUserset": {
1497
+ "relation": "owner"
1498
+ }
1499
+ },
1500
+ "can_grant_access": {
1501
+ "computedUserset": {
1502
+ "relation": "owner"
1503
+ }
1504
+ },
1505
+ "can_view": {
1506
+ "computedUserset": {
1507
+ "relation": "viewer"
1508
+ }
1509
+ },
1510
+ "can_view_access": {
1511
+ "computedUserset": {
1512
+ "relation": "viewer"
1513
+ }
1514
+ },
1515
+ "organization": {
1516
+ "this": {}
1517
+ },
1518
+ "owner": {
1519
+ "union": {
1520
+ "child": [
1521
+ {
1522
+ "this": {}
1523
+ },
1524
+ {
1525
+ "tupleToUserset": {
1526
+ "computedUserset": {
1527
+ "relation": "admin"
1528
+ },
1529
+ "tupleset": {
1530
+ "relation": "organization"
1531
+ }
1532
+ }
1533
+ }
1534
+ ]
1535
+ }
1536
+ },
1537
+ "viewer": {
1538
+ "union": {
1539
+ "child": [
1540
+ {
1541
+ "this": {}
1542
+ },
1543
+ {
1544
+ "computedUserset": {
1545
+ "relation": "owner"
1546
+ }
1547
+ }
1548
+ ]
1549
+ }
1550
+ }
1551
+ },
1552
+ "type": "channel_app"
1553
+ },
1554
+ {
1555
+ "metadata": {
1556
+ "module": "agentic",
1557
+ "relations": {
1558
+ "agent": {
1559
+ "directly_related_user_types": [
1560
+ {
1561
+ "type": "agent"
1562
+ }
1563
+ ]
1564
+ },
1565
+ "can_delete": {},
1566
+ "can_edit": {},
1567
+ "can_execute": {},
1568
+ "can_grant_access": {},
1569
+ "can_view": {},
1570
+ "can_view_access": {},
1571
+ "default_of": {
1572
+ "directly_related_user_types": [
1573
+ {
1574
+ "type": "agent"
1575
+ }
1576
+ ]
1577
+ },
1578
+ "organization": {
1579
+ "directly_related_user_types": [
1580
+ {
1581
+ "type": "organization"
1582
+ }
1583
+ ]
1584
+ },
1585
+ "owner": {
1586
+ "directly_related_user_types": [
1587
+ {
1588
+ "type": "identity_account"
1589
+ }
1590
+ ]
1591
+ },
1592
+ "viewer": {
1593
+ "directly_related_user_types": [
1594
+ {
1595
+ "type": "identity_account"
1596
+ },
1597
+ {
1598
+ "relation": "member",
1599
+ "type": "organization"
1600
+ },
1601
+ {
1602
+ "relation": "viewer",
1603
+ "type": "organization"
1604
+ },
1605
+ {
1606
+ "relation": "member",
1607
+ "type": "team"
1608
+ }
1609
+ ]
1610
+ }
1611
+ },
1612
+ "source_info": {
1613
+ "file": "agentic/agent_instance.fga"
1614
+ }
1615
+ },
1616
+ "relations": {
1617
+ "agent": {
1618
+ "this": {}
1619
+ },
1620
+ "can_delete": {
1621
+ "computedUserset": {
1622
+ "relation": "owner"
1623
+ }
1624
+ },
1625
+ "can_edit": {
1626
+ "computedUserset": {
1627
+ "relation": "owner"
1628
+ }
1629
+ },
1630
+ "can_execute": {
1631
+ "computedUserset": {
1632
+ "relation": "can_view"
1633
+ }
1634
+ },
1635
+ "can_grant_access": {
1636
+ "computedUserset": {
1637
+ "relation": "owner"
1638
+ }
1639
+ },
1640
+ "can_view": {
1641
+ "computedUserset": {
1642
+ "relation": "viewer"
1643
+ }
1644
+ },
1645
+ "can_view_access": {
1646
+ "computedUserset": {
1647
+ "relation": "viewer"
1648
+ }
1649
+ },
1650
+ "default_of": {
1651
+ "this": {}
1652
+ },
1653
+ "organization": {
1654
+ "this": {}
1655
+ },
1656
+ "owner": {
1657
+ "this": {}
1658
+ },
1659
+ "viewer": {
1660
+ "union": {
1661
+ "child": [
1662
+ {
1663
+ "this": {}
1664
+ },
1665
+ {
1666
+ "computedUserset": {
1667
+ "relation": "owner"
1668
+ }
1669
+ },
1670
+ {
1671
+ "tupleToUserset": {
1672
+ "computedUserset": {
1673
+ "relation": "viewer"
1674
+ },
1675
+ "tupleset": {
1676
+ "relation": "default_of"
1677
+ }
1678
+ }
1679
+ }
1680
+ ]
1681
+ }
1682
+ }
1683
+ },
1684
+ "type": "agent_instance"
1685
+ },
1686
+ {
1687
+ "metadata": {
1688
+ "module": "agentic",
1689
+ "relations": {
1690
+ "can_edit": {},
1691
+ "can_view": {},
1692
+ "owner": {},
1693
+ "session": {
1694
+ "directly_related_user_types": [
1695
+ {
1696
+ "type": "session"
1697
+ }
1698
+ ]
1699
+ },
1700
+ "viewer": {}
1701
+ },
1702
+ "source_info": {
1703
+ "file": "agentic/agent_execution.fga"
1704
+ }
1705
+ },
1706
+ "relations": {
1707
+ "can_edit": {
1708
+ "computedUserset": {
1709
+ "relation": "owner"
1710
+ }
1711
+ },
1712
+ "can_view": {
1713
+ "union": {
1714
+ "child": [
1715
+ {
1716
+ "computedUserset": {
1717
+ "relation": "viewer"
1718
+ }
1719
+ },
1720
+ {
1721
+ "tupleToUserset": {
1722
+ "computedUserset": {
1723
+ "relation": "can_view"
1724
+ },
1725
+ "tupleset": {
1726
+ "relation": "session"
1727
+ }
1728
+ }
1729
+ }
1730
+ ]
1731
+ }
1732
+ },
1733
+ "owner": {
1734
+ "tupleToUserset": {
1735
+ "computedUserset": {
1736
+ "relation": "owner"
1737
+ },
1738
+ "tupleset": {
1739
+ "relation": "session"
1740
+ }
1741
+ }
1742
+ },
1743
+ "session": {
1744
+ "this": {}
1745
+ },
1746
+ "viewer": {
1747
+ "union": {
1748
+ "child": [
1749
+ {
1750
+ "tupleToUserset": {
1751
+ "computedUserset": {
1752
+ "relation": "viewer"
1753
+ },
1754
+ "tupleset": {
1755
+ "relation": "session"
1756
+ }
1757
+ }
1758
+ },
1759
+ {
1760
+ "computedUserset": {
1761
+ "relation": "owner"
1762
+ }
1763
+ }
1764
+ ]
1765
+ }
1766
+ }
1767
+ },
1768
+ "type": "agent_execution"
1769
+ },
1770
+ {
1771
+ "metadata": {
1772
+ "module": "agentic",
1773
+ "relations": {
1774
+ "can_edit": {},
1775
+ "can_view": {},
1776
+ "organization": {
1777
+ "directly_related_user_types": [
1778
+ {
1779
+ "type": "organization"
1780
+ }
1781
+ ]
1782
+ },
1783
+ "owner": {
1784
+ "directly_related_user_types": [
1785
+ {
1786
+ "type": "identity_account"
1787
+ }
1788
+ ]
1789
+ },
1790
+ "viewer": {
1791
+ "directly_related_user_types": [
1792
+ {
1793
+ "type": "identity_account"
1794
+ }
1795
+ ]
1796
+ }
1797
+ },
1798
+ "source_info": {
1799
+ "file": "agentic/artifact.fga"
1800
+ }
1801
+ },
1802
+ "relations": {
1803
+ "can_edit": {
1804
+ "tupleToUserset": {
1805
+ "computedUserset": {
1806
+ "relation": "admin"
1807
+ },
1808
+ "tupleset": {
1809
+ "relation": "organization"
1810
+ }
1811
+ }
1812
+ },
1813
+ "can_view": {
1814
+ "union": {
1815
+ "child": [
1816
+ {
1817
+ "computedUserset": {
1818
+ "relation": "owner"
1819
+ }
1820
+ },
1821
+ {
1822
+ "computedUserset": {
1823
+ "relation": "viewer"
1824
+ }
1825
+ }
1826
+ ]
1827
+ }
1828
+ },
1829
+ "organization": {
1830
+ "this": {}
1831
+ },
1832
+ "owner": {
1833
+ "this": {}
1834
+ },
1835
+ "viewer": {
1836
+ "union": {
1837
+ "child": [
1838
+ {
1839
+ "this": {}
1840
+ },
1841
+ {
1842
+ "tupleToUserset": {
1843
+ "computedUserset": {
1844
+ "relation": "viewer"
1845
+ },
1846
+ "tupleset": {
1847
+ "relation": "organization"
1848
+ }
1849
+ }
1850
+ }
1851
+ ]
1852
+ }
1853
+ }
1854
+ },
1855
+ "type": "artifact"
1856
+ },
1857
+ {
1858
+ "metadata": {
1859
+ "module": "agentic",
1860
+ "relations": {
1861
+ "can_delete": {},
1862
+ "can_edit": {},
1863
+ "can_grant_access": {},
1864
+ "can_read_secrets": {},
1865
+ "can_view": {},
1866
+ "can_view_access": {},
1867
+ "creator": {
1868
+ "directly_related_user_types": [
1869
+ {
1870
+ "type": "identity_account"
1871
+ }
1872
+ ]
1873
+ },
1874
+ "organization": {
1875
+ "directly_related_user_types": [
1876
+ {
1877
+ "type": "organization"
1878
+ }
1879
+ ]
1880
+ },
1881
+ "owner": {
1882
+ "directly_related_user_types": [
1883
+ {
1884
+ "type": "identity_account"
1885
+ }
1886
+ ]
1887
+ },
1888
+ "viewer": {
1889
+ "directly_related_user_types": [
1890
+ {
1891
+ "type": "identity_account"
1892
+ },
1893
+ {
1894
+ "relation": "member",
1895
+ "type": "organization"
1896
+ },
1897
+ {
1898
+ "relation": "viewer",
1899
+ "type": "organization"
1900
+ }
1901
+ ]
1902
+ }
1903
+ },
1904
+ "source_info": {
1905
+ "file": "agentic/environment.fga"
1906
+ }
1907
+ },
1908
+ "relations": {
1909
+ "can_delete": {
1910
+ "computedUserset": {
1911
+ "relation": "owner"
1912
+ }
1913
+ },
1914
+ "can_edit": {
1915
+ "computedUserset": {
1916
+ "relation": "owner"
1917
+ }
1918
+ },
1919
+ "can_grant_access": {
1920
+ "computedUserset": {
1921
+ "relation": "owner"
1922
+ }
1923
+ },
1924
+ "can_read_secrets": {
1925
+ "computedUserset": {
1926
+ "relation": "creator"
1927
+ }
1928
+ },
1929
+ "can_view": {
1930
+ "computedUserset": {
1931
+ "relation": "viewer"
1932
+ }
1933
+ },
1934
+ "can_view_access": {
1935
+ "computedUserset": {
1936
+ "relation": "viewer"
1937
+ }
1938
+ },
1939
+ "creator": {
1940
+ "this": {}
1941
+ },
1942
+ "organization": {
1943
+ "this": {}
1944
+ },
1945
+ "owner": {
1946
+ "this": {}
1947
+ },
1948
+ "viewer": {
1949
+ "union": {
1950
+ "child": [
1951
+ {
1952
+ "this": {}
1953
+ },
1954
+ {
1955
+ "computedUserset": {
1956
+ "relation": "owner"
1957
+ }
1958
+ }
1959
+ ]
1960
+ }
1961
+ }
1962
+ },
1963
+ "type": "environment"
1964
+ },
1965
+ {
1966
+ "metadata": {
1967
+ "module": "agentic",
1968
+ "relations": {
1969
+ "can_edit": {},
1970
+ "can_view": {},
1971
+ "owner": {
1972
+ "directly_related_user_types": [
1973
+ {
1974
+ "type": "identity_account"
1975
+ }
1976
+ ]
1977
+ }
1978
+ },
1979
+ "source_info": {
1980
+ "file": "agentic/execution_context.fga"
1981
+ }
1982
+ },
1983
+ "relations": {
1984
+ "can_edit": {
1985
+ "computedUserset": {
1986
+ "relation": "owner"
1987
+ }
1988
+ },
1989
+ "can_view": {
1990
+ "computedUserset": {
1991
+ "relation": "owner"
1992
+ }
1993
+ },
1994
+ "owner": {
1995
+ "this": {}
1996
+ }
1997
+ },
1998
+ "type": "execution_context"
1999
+ },
2000
+ {
2001
+ "metadata": {
2002
+ "module": "agentic",
2003
+ "relations": {
2004
+ "can_clone": {},
2005
+ "can_connect": {},
2006
+ "can_delete": {},
2007
+ "can_edit": {},
2008
+ "can_grant_access": {},
2009
+ "can_use": {},
2010
+ "can_view": {},
2011
+ "can_view_access": {},
2012
+ "organization": {
2013
+ "directly_related_user_types": [
2014
+ {
2015
+ "type": "organization"
2016
+ }
2017
+ ]
2018
+ },
2019
+ "owner": {
2020
+ "directly_related_user_types": [
2021
+ {
2022
+ "type": "identity_account"
2023
+ }
2024
+ ]
2025
+ },
2026
+ "platform_viewer": {
2027
+ "directly_related_user_types": [
2028
+ {
2029
+ "relation": "platform_user",
2030
+ "type": "identity_provider"
2031
+ }
2032
+ ]
2033
+ },
2034
+ "viewer": {
2035
+ "directly_related_user_types": [
2036
+ {
2037
+ "type": "identity_account"
2038
+ },
2039
+ {
2040
+ "relation": "member",
2041
+ "type": "organization"
2042
+ },
2043
+ {
2044
+ "relation": "viewer",
2045
+ "type": "organization"
2046
+ },
2047
+ {
2048
+ "relation": "member",
2049
+ "type": "team"
2050
+ }
2051
+ ]
2052
+ }
2053
+ },
2054
+ "source_info": {
2055
+ "file": "agentic/mcp_server.fga"
2056
+ }
2057
+ },
2058
+ "relations": {
2059
+ "can_clone": {
2060
+ "computedUserset": {
2061
+ "relation": "viewer"
2062
+ }
2063
+ },
2064
+ "can_connect": {
2065
+ "computedUserset": {
2066
+ "relation": "viewer"
2067
+ }
2068
+ },
2069
+ "can_delete": {
2070
+ "computedUserset": {
2071
+ "relation": "owner"
2072
+ }
2073
+ },
2074
+ "can_edit": {
2075
+ "computedUserset": {
2076
+ "relation": "owner"
2077
+ }
2078
+ },
2079
+ "can_grant_access": {
2080
+ "computedUserset": {
2081
+ "relation": "owner"
2082
+ }
2083
+ },
2084
+ "can_use": {
2085
+ "computedUserset": {
2086
+ "relation": "viewer"
2087
+ }
2088
+ },
2089
+ "can_view": {
2090
+ "computedUserset": {
2091
+ "relation": "viewer"
2092
+ }
2093
+ },
2094
+ "can_view_access": {
2095
+ "computedUserset": {
2096
+ "relation": "viewer"
2097
+ }
2098
+ },
2099
+ "organization": {
2100
+ "this": {}
2101
+ },
2102
+ "owner": {
2103
+ "union": {
2104
+ "child": [
2105
+ {
2106
+ "this": {}
2107
+ },
2108
+ {
2109
+ "tupleToUserset": {
2110
+ "computedUserset": {
2111
+ "relation": "admin"
2112
+ },
2113
+ "tupleset": {
2114
+ "relation": "organization"
2115
+ }
2116
+ }
2117
+ }
2118
+ ]
2119
+ }
2120
+ },
2121
+ "platform_viewer": {
2122
+ "this": {}
2123
+ },
2124
+ "viewer": {
2125
+ "union": {
2126
+ "child": [
2127
+ {
2128
+ "this": {}
2129
+ },
2130
+ {
2131
+ "computedUserset": {
2132
+ "relation": "owner"
2133
+ }
2134
+ },
2135
+ {
2136
+ "computedUserset": {
2137
+ "relation": "platform_viewer"
2138
+ }
2139
+ }
2140
+ ]
2141
+ }
2142
+ }
2143
+ },
2144
+ "type": "mcp_server"
2145
+ },
2146
+ {
2147
+ "metadata": {
2148
+ "module": "agentic",
2149
+ "relations": {
2150
+ "can_delete": {},
2151
+ "can_edit": {},
2152
+ "can_view": {},
2153
+ "organization": {
2154
+ "directly_related_user_types": [
2155
+ {
2156
+ "type": "organization"
2157
+ }
2158
+ ]
2159
+ },
2160
+ "subject": {
2161
+ "directly_related_user_types": [
2162
+ {
2163
+ "type": "identity_account"
2164
+ }
2165
+ ]
2166
+ }
2167
+ },
2168
+ "source_info": {
2169
+ "file": "agentic/memory.fga"
2170
+ }
2171
+ },
2172
+ "relations": {
2173
+ "can_delete": {
2174
+ "computedUserset": {
2175
+ "relation": "subject"
2176
+ }
2177
+ },
2178
+ "can_edit": {
2179
+ "computedUserset": {
2180
+ "relation": "subject"
2181
+ }
2182
+ },
2183
+ "can_view": {
2184
+ "computedUserset": {
2185
+ "relation": "subject"
2186
+ }
2187
+ },
2188
+ "organization": {
2189
+ "this": {}
2190
+ },
2191
+ "subject": {
2192
+ "this": {}
2193
+ }
2194
+ },
2195
+ "type": "memory"
2196
+ },
2197
+ {
2198
+ "metadata": {
2199
+ "module": "agentic",
2200
+ "relations": {
2201
+ "can_delete": {},
2202
+ "can_edit": {},
2203
+ "can_grant_access": {},
2204
+ "can_use": {},
2205
+ "can_view": {},
2206
+ "can_view_access": {},
2207
+ "organization": {
2208
+ "directly_related_user_types": [
2209
+ {
2210
+ "type": "organization"
2211
+ }
2212
+ ]
2213
+ },
2214
+ "owner": {
2215
+ "directly_related_user_types": [
2216
+ {
2217
+ "type": "identity_account"
2218
+ }
2219
+ ]
2220
+ },
2221
+ "platform_viewer": {
2222
+ "directly_related_user_types": [
2223
+ {
2224
+ "relation": "platform_user",
2225
+ "type": "identity_provider"
2226
+ }
2227
+ ]
2228
+ },
2229
+ "viewer": {
2230
+ "directly_related_user_types": [
2231
+ {
2232
+ "type": "identity_account"
2233
+ },
2234
+ {
2235
+ "relation": "member",
2236
+ "type": "organization"
2237
+ },
2238
+ {
2239
+ "relation": "viewer",
2240
+ "type": "organization"
2241
+ },
2242
+ {
2243
+ "relation": "member",
2244
+ "type": "team"
2245
+ }
2246
+ ]
2247
+ }
2248
+ },
2249
+ "source_info": {
2250
+ "file": "agentic/plugin.fga"
2251
+ }
2252
+ },
2253
+ "relations": {
2254
+ "can_delete": {
2255
+ "computedUserset": {
2256
+ "relation": "owner"
2257
+ }
2258
+ },
2259
+ "can_edit": {
2260
+ "computedUserset": {
2261
+ "relation": "owner"
2262
+ }
2263
+ },
2264
+ "can_grant_access": {
2265
+ "computedUserset": {
2266
+ "relation": "owner"
2267
+ }
2268
+ },
2269
+ "can_use": {
2270
+ "computedUserset": {
2271
+ "relation": "viewer"
2272
+ }
2273
+ },
2274
+ "can_view": {
2275
+ "computedUserset": {
2276
+ "relation": "viewer"
2277
+ }
2278
+ },
2279
+ "can_view_access": {
2280
+ "computedUserset": {
2281
+ "relation": "viewer"
2282
+ }
2283
+ },
2284
+ "organization": {
2285
+ "this": {}
2286
+ },
2287
+ "owner": {
2288
+ "union": {
2289
+ "child": [
2290
+ {
2291
+ "this": {}
2292
+ },
2293
+ {
2294
+ "tupleToUserset": {
2295
+ "computedUserset": {
2296
+ "relation": "admin"
2297
+ },
2298
+ "tupleset": {
2299
+ "relation": "organization"
2300
+ }
2301
+ }
2302
+ }
2303
+ ]
2304
+ }
2305
+ },
2306
+ "platform_viewer": {
2307
+ "this": {}
2308
+ },
2309
+ "viewer": {
2310
+ "union": {
2311
+ "child": [
2312
+ {
2313
+ "this": {}
2314
+ },
2315
+ {
2316
+ "computedUserset": {
2317
+ "relation": "owner"
2318
+ }
2319
+ },
2320
+ {
2321
+ "computedUserset": {
2322
+ "relation": "platform_viewer"
2323
+ }
2324
+ }
2325
+ ]
2326
+ }
2327
+ }
2328
+ },
2329
+ "type": "plugin"
2330
+ },
2331
+ {
2332
+ "metadata": {
2333
+ "module": "agentic",
2334
+ "relations": {
2335
+ "can_delete": {},
2336
+ "can_edit": {},
2337
+ "can_grant_access": {},
2338
+ "can_view": {},
2339
+ "can_view_access": {},
2340
+ "organization": {
2341
+ "directly_related_user_types": [
2342
+ {
2343
+ "type": "organization"
2344
+ }
2345
+ ]
2346
+ },
2347
+ "owner": {
2348
+ "directly_related_user_types": [
2349
+ {
2350
+ "type": "identity_account"
2351
+ }
2352
+ ]
2353
+ },
2354
+ "viewer": {
2355
+ "directly_related_user_types": [
2356
+ {
2357
+ "type": "identity_account"
2358
+ },
2359
+ {
2360
+ "relation": "member",
2361
+ "type": "team"
2362
+ }
2363
+ ]
2364
+ }
2365
+ },
2366
+ "source_info": {
2367
+ "file": "agentic/schedule.fga"
2368
+ }
2369
+ },
2370
+ "relations": {
2371
+ "can_delete": {
2372
+ "computedUserset": {
2373
+ "relation": "owner"
2374
+ }
2375
+ },
2376
+ "can_edit": {
2377
+ "computedUserset": {
2378
+ "relation": "owner"
2379
+ }
2380
+ },
2381
+ "can_grant_access": {
2382
+ "computedUserset": {
2383
+ "relation": "owner"
2384
+ }
2385
+ },
2386
+ "can_view": {
2387
+ "computedUserset": {
2388
+ "relation": "viewer"
2389
+ }
2390
+ },
2391
+ "can_view_access": {
2392
+ "computedUserset": {
2393
+ "relation": "viewer"
2394
+ }
2395
+ },
2396
+ "organization": {
2397
+ "this": {}
2398
+ },
2399
+ "owner": {
2400
+ "union": {
2401
+ "child": [
2402
+ {
2403
+ "this": {}
2404
+ },
2405
+ {
2406
+ "tupleToUserset": {
2407
+ "computedUserset": {
2408
+ "relation": "admin"
2409
+ },
2410
+ "tupleset": {
2411
+ "relation": "organization"
2412
+ }
2413
+ }
2414
+ }
2415
+ ]
2416
+ }
2417
+ },
2418
+ "viewer": {
2419
+ "union": {
2420
+ "child": [
2421
+ {
2422
+ "this": {}
2423
+ },
2424
+ {
2425
+ "computedUserset": {
2426
+ "relation": "owner"
2427
+ }
2428
+ }
2429
+ ]
2430
+ }
2431
+ }
2432
+ },
2433
+ "type": "schedule"
2434
+ },
2435
+ {
2436
+ "metadata": {
2437
+ "module": "agentic",
2438
+ "relations": {
2439
+ "agent_instance": {
2440
+ "directly_related_user_types": [
2441
+ {
2442
+ "type": "agent_instance"
2443
+ }
2444
+ ]
2445
+ },
2446
+ "can_create_execution_in": {},
2447
+ "can_delete": {},
2448
+ "can_edit": {},
2449
+ "can_grant_access": {},
2450
+ "can_view": {},
2451
+ "can_view_access": {},
2452
+ "channel": {
2453
+ "directly_related_user_types": [
2454
+ {
2455
+ "type": "agent_channel"
2456
+ }
2457
+ ]
2458
+ },
2459
+ "organization": {
2460
+ "directly_related_user_types": [
2461
+ {
2462
+ "type": "organization"
2463
+ }
2464
+ ]
2465
+ },
2466
+ "owner": {
2467
+ "directly_related_user_types": [
2468
+ {
2469
+ "type": "identity_account"
2470
+ }
2471
+ ]
2472
+ },
2473
+ "schedule": {
2474
+ "directly_related_user_types": [
2475
+ {
2476
+ "type": "schedule"
2477
+ }
2478
+ ]
2479
+ },
2480
+ "viewer": {
2481
+ "directly_related_user_types": [
2482
+ {
2483
+ "type": "identity_account"
2484
+ }
2485
+ ]
2486
+ }
2487
+ },
2488
+ "source_info": {
2489
+ "file": "agentic/session.fga"
2490
+ }
2491
+ },
2492
+ "relations": {
2493
+ "agent_instance": {
2494
+ "this": {}
2495
+ },
2496
+ "can_create_execution_in": {
2497
+ "computedUserset": {
2498
+ "relation": "viewer"
2499
+ }
2500
+ },
2501
+ "can_delete": {
2502
+ "computedUserset": {
2503
+ "relation": "owner"
2504
+ }
2505
+ },
2506
+ "can_edit": {
2507
+ "computedUserset": {
2508
+ "relation": "owner"
2509
+ }
2510
+ },
2511
+ "can_grant_access": {
2512
+ "computedUserset": {
2513
+ "relation": "owner"
2514
+ }
2515
+ },
2516
+ "can_view": {
2517
+ "union": {
2518
+ "child": [
2519
+ {
2520
+ "computedUserset": {
2521
+ "relation": "viewer"
2522
+ }
2523
+ },
2524
+ {
2525
+ "tupleToUserset": {
2526
+ "computedUserset": {
2527
+ "relation": "viewer"
2528
+ },
2529
+ "tupleset": {
2530
+ "relation": "channel"
2531
+ }
2532
+ }
2533
+ },
2534
+ {
2535
+ "tupleToUserset": {
2536
+ "computedUserset": {
2537
+ "relation": "viewer"
2538
+ },
2539
+ "tupleset": {
2540
+ "relation": "schedule"
2541
+ }
2542
+ }
2543
+ }
2544
+ ]
2545
+ }
2546
+ },
2547
+ "can_view_access": {
2548
+ "computedUserset": {
2549
+ "relation": "viewer"
2550
+ }
2551
+ },
2552
+ "channel": {
2553
+ "this": {}
2554
+ },
2555
+ "organization": {
2556
+ "this": {}
2557
+ },
2558
+ "owner": {
2559
+ "this": {}
2560
+ },
2561
+ "schedule": {
2562
+ "this": {}
2563
+ },
2564
+ "viewer": {
2565
+ "union": {
2566
+ "child": [
2567
+ {
2568
+ "this": {}
2569
+ },
2570
+ {
2571
+ "computedUserset": {
2572
+ "relation": "owner"
2573
+ }
2574
+ }
2575
+ ]
2576
+ }
2577
+ }
2578
+ },
2579
+ "type": "session"
2580
+ },
2581
+ {
2582
+ "metadata": {
2583
+ "module": "agentic",
2584
+ "relations": {
2585
+ "can_clone": {},
2586
+ "can_delete": {},
2587
+ "can_edit": {},
2588
+ "can_grant_access": {},
2589
+ "can_use": {},
2590
+ "can_view": {},
2591
+ "can_view_access": {},
2592
+ "organization": {
2593
+ "directly_related_user_types": [
2594
+ {
2595
+ "type": "organization"
2596
+ }
2597
+ ]
2598
+ },
2599
+ "owner": {
2600
+ "directly_related_user_types": [
2601
+ {
2602
+ "type": "identity_account"
2603
+ }
2604
+ ]
2605
+ },
2606
+ "platform_viewer": {
2607
+ "directly_related_user_types": [
2608
+ {
2609
+ "relation": "platform_user",
2610
+ "type": "identity_provider"
2611
+ }
2612
+ ]
2613
+ },
2614
+ "viewer": {
2615
+ "directly_related_user_types": [
2616
+ {
2617
+ "type": "identity_account"
2618
+ },
2619
+ {
2620
+ "relation": "member",
2621
+ "type": "organization"
2622
+ },
2623
+ {
2624
+ "relation": "viewer",
2625
+ "type": "organization"
2626
+ },
2627
+ {
2628
+ "relation": "member",
2629
+ "type": "team"
2630
+ }
2631
+ ]
2632
+ }
2633
+ },
2634
+ "source_info": {
2635
+ "file": "agentic/skill.fga"
2636
+ }
2637
+ },
2638
+ "relations": {
2639
+ "can_clone": {
2640
+ "computedUserset": {
2641
+ "relation": "viewer"
2642
+ }
2643
+ },
2644
+ "can_delete": {
2645
+ "computedUserset": {
2646
+ "relation": "owner"
2647
+ }
2648
+ },
2649
+ "can_edit": {
2650
+ "computedUserset": {
2651
+ "relation": "owner"
2652
+ }
2653
+ },
2654
+ "can_grant_access": {
2655
+ "computedUserset": {
2656
+ "relation": "owner"
2657
+ }
2658
+ },
2659
+ "can_use": {
2660
+ "computedUserset": {
2661
+ "relation": "viewer"
2662
+ }
2663
+ },
2664
+ "can_view": {
2665
+ "computedUserset": {
2666
+ "relation": "viewer"
2667
+ }
2668
+ },
2669
+ "can_view_access": {
2670
+ "computedUserset": {
2671
+ "relation": "viewer"
2672
+ }
2673
+ },
2674
+ "organization": {
2675
+ "this": {}
2676
+ },
2677
+ "owner": {
2678
+ "union": {
2679
+ "child": [
2680
+ {
2681
+ "this": {}
2682
+ },
2683
+ {
2684
+ "tupleToUserset": {
2685
+ "computedUserset": {
2686
+ "relation": "admin"
2687
+ },
2688
+ "tupleset": {
2689
+ "relation": "organization"
2690
+ }
2691
+ }
2692
+ }
2693
+ ]
2694
+ }
2695
+ },
2696
+ "platform_viewer": {
2697
+ "this": {}
2698
+ },
2699
+ "viewer": {
2700
+ "union": {
2701
+ "child": [
2702
+ {
2703
+ "this": {}
2704
+ },
2705
+ {
2706
+ "computedUserset": {
2707
+ "relation": "owner"
2708
+ }
2709
+ },
2710
+ {
2711
+ "computedUserset": {
2712
+ "relation": "platform_viewer"
2713
+ }
2714
+ }
2715
+ ]
2716
+ }
2717
+ }
2718
+ },
2719
+ "type": "skill"
2720
+ },
2721
+ {
2722
+ "metadata": {
2723
+ "module": "agentic",
2724
+ "relations": {
2725
+ "can_clone": {},
2726
+ "can_delete": {},
2727
+ "can_edit": {},
2728
+ "can_execute": {},
2729
+ "can_grant_access": {},
2730
+ "can_view": {},
2731
+ "can_view_access": {},
2732
+ "organization": {
2733
+ "directly_related_user_types": [
2734
+ {
2735
+ "type": "organization"
2736
+ }
2737
+ ]
2738
+ },
2739
+ "owner": {
2740
+ "directly_related_user_types": [
2741
+ {
2742
+ "type": "identity_account"
2743
+ }
2744
+ ]
2745
+ },
2746
+ "platform_viewer": {
2747
+ "directly_related_user_types": [
2748
+ {
2749
+ "relation": "platform_user",
2750
+ "type": "identity_provider"
2751
+ }
2752
+ ]
2753
+ },
2754
+ "viewer": {
2755
+ "directly_related_user_types": [
2756
+ {
2757
+ "type": "identity_account"
2758
+ },
2759
+ {
2760
+ "relation": "member",
2761
+ "type": "organization"
2762
+ },
2763
+ {
2764
+ "relation": "viewer",
2765
+ "type": "organization"
2766
+ },
2767
+ {
2768
+ "relation": "member",
2769
+ "type": "team"
2770
+ }
2771
+ ]
2772
+ }
2773
+ },
2774
+ "source_info": {
2775
+ "file": "agentic/workflow.fga"
2776
+ }
2777
+ },
2778
+ "relations": {
2779
+ "can_clone": {
2780
+ "computedUserset": {
2781
+ "relation": "viewer"
2782
+ }
2783
+ },
2784
+ "can_delete": {
2785
+ "computedUserset": {
2786
+ "relation": "owner"
2787
+ }
2788
+ },
2789
+ "can_edit": {
2790
+ "computedUserset": {
2791
+ "relation": "owner"
2792
+ }
2793
+ },
2794
+ "can_execute": {
2795
+ "computedUserset": {
2796
+ "relation": "viewer"
2797
+ }
2798
+ },
2799
+ "can_grant_access": {
2800
+ "computedUserset": {
2801
+ "relation": "owner"
2802
+ }
2803
+ },
2804
+ "can_view": {
2805
+ "computedUserset": {
2806
+ "relation": "viewer"
2807
+ }
2808
+ },
2809
+ "can_view_access": {
2810
+ "computedUserset": {
2811
+ "relation": "viewer"
2812
+ }
2813
+ },
2814
+ "organization": {
2815
+ "this": {}
2816
+ },
2817
+ "owner": {
2818
+ "union": {
2819
+ "child": [
2820
+ {
2821
+ "this": {}
2822
+ },
2823
+ {
2824
+ "tupleToUserset": {
2825
+ "computedUserset": {
2826
+ "relation": "admin"
2827
+ },
2828
+ "tupleset": {
2829
+ "relation": "organization"
2830
+ }
2831
+ }
2832
+ }
2833
+ ]
2834
+ }
2835
+ },
2836
+ "platform_viewer": {
2837
+ "this": {}
2838
+ },
2839
+ "viewer": {
2840
+ "union": {
2841
+ "child": [
2842
+ {
2843
+ "this": {}
2844
+ },
2845
+ {
2846
+ "computedUserset": {
2847
+ "relation": "owner"
2848
+ }
2849
+ },
2850
+ {
2851
+ "computedUserset": {
2852
+ "relation": "platform_viewer"
2853
+ }
2854
+ }
2855
+ ]
2856
+ }
2857
+ }
2858
+ },
2859
+ "type": "workflow"
2860
+ },
2861
+ {
2862
+ "metadata": {
2863
+ "module": "agentic",
2864
+ "relations": {
2865
+ "can_delete": {},
2866
+ "can_edit": {},
2867
+ "can_execute": {},
2868
+ "can_grant_access": {},
2869
+ "can_view": {},
2870
+ "can_view_access": {},
2871
+ "default_of": {
2872
+ "directly_related_user_types": [
2873
+ {
2874
+ "type": "workflow"
2875
+ }
2876
+ ]
2877
+ },
2878
+ "execution_viewer": {
2879
+ "directly_related_user_types": [
2880
+ {
2881
+ "type": "identity_account"
2882
+ },
2883
+ {
2884
+ "relation": "member",
2885
+ "type": "organization"
2886
+ },
2887
+ {
2888
+ "relation": "viewer",
2889
+ "type": "organization"
2890
+ }
2891
+ ]
2892
+ },
2893
+ "organization": {
2894
+ "directly_related_user_types": [
2895
+ {
2896
+ "type": "organization"
2897
+ }
2898
+ ]
2899
+ },
2900
+ "owner": {
2901
+ "directly_related_user_types": [
2902
+ {
2903
+ "type": "identity_account"
2904
+ }
2905
+ ]
2906
+ },
2907
+ "viewer": {
2908
+ "directly_related_user_types": [
2909
+ {
2910
+ "type": "identity_account"
2911
+ },
2912
+ {
2913
+ "relation": "member",
2914
+ "type": "organization"
2915
+ },
2916
+ {
2917
+ "relation": "viewer",
2918
+ "type": "organization"
2919
+ },
2920
+ {
2921
+ "relation": "member",
2922
+ "type": "team"
2923
+ }
2924
+ ]
2925
+ },
2926
+ "workflow": {
2927
+ "directly_related_user_types": [
2928
+ {
2929
+ "type": "workflow"
2930
+ }
2931
+ ]
2932
+ }
2933
+ },
2934
+ "source_info": {
2935
+ "file": "agentic/workflow_instance.fga"
2936
+ }
2937
+ },
2938
+ "relations": {
2939
+ "can_delete": {
2940
+ "computedUserset": {
2941
+ "relation": "owner"
2942
+ }
2943
+ },
2944
+ "can_edit": {
2945
+ "computedUserset": {
2946
+ "relation": "owner"
2947
+ }
2948
+ },
2949
+ "can_execute": {
2950
+ "computedUserset": {
2951
+ "relation": "can_view"
2952
+ }
2953
+ },
2954
+ "can_grant_access": {
2955
+ "computedUserset": {
2956
+ "relation": "owner"
2957
+ }
2958
+ },
2959
+ "can_view": {
2960
+ "computedUserset": {
2961
+ "relation": "viewer"
2962
+ }
2963
+ },
2964
+ "can_view_access": {
2965
+ "computedUserset": {
2966
+ "relation": "viewer"
2967
+ }
2968
+ },
2969
+ "default_of": {
2970
+ "this": {}
2971
+ },
2972
+ "execution_viewer": {
2973
+ "this": {}
2974
+ },
2975
+ "organization": {
2976
+ "this": {}
2977
+ },
2978
+ "owner": {
2979
+ "this": {}
2980
+ },
2981
+ "viewer": {
2982
+ "union": {
2983
+ "child": [
2984
+ {
2985
+ "this": {}
2986
+ },
2987
+ {
2988
+ "computedUserset": {
2989
+ "relation": "owner"
2990
+ }
2991
+ },
2992
+ {
2993
+ "tupleToUserset": {
2994
+ "computedUserset": {
2995
+ "relation": "viewer"
2996
+ },
2997
+ "tupleset": {
2998
+ "relation": "default_of"
2999
+ }
3000
+ }
3001
+ }
3002
+ ]
3003
+ }
3004
+ },
3005
+ "workflow": {
3006
+ "this": {}
3007
+ }
3008
+ },
3009
+ "type": "workflow_instance"
3010
+ },
3011
+ {
3012
+ "metadata": {
3013
+ "module": "agentic",
3014
+ "relations": {
3015
+ "can_edit": {},
3016
+ "can_grant_access": {},
3017
+ "can_view": {},
3018
+ "can_view_access": {},
3019
+ "organization": {
3020
+ "directly_related_user_types": [
3021
+ {
3022
+ "type": "organization"
3023
+ }
3024
+ ]
3025
+ },
3026
+ "owner": {
3027
+ "directly_related_user_types": [
3028
+ {
3029
+ "type": "identity_account"
3030
+ }
3031
+ ]
3032
+ },
3033
+ "viewer": {
3034
+ "directly_related_user_types": [
3035
+ {
3036
+ "type": "identity_account"
3037
+ },
3038
+ {
3039
+ "relation": "member",
3040
+ "type": "team"
3041
+ }
3042
+ ]
3043
+ },
3044
+ "workflow_instance": {
3045
+ "directly_related_user_types": [
3046
+ {
3047
+ "type": "workflow_instance"
3048
+ }
3049
+ ]
3050
+ }
3051
+ },
3052
+ "source_info": {
3053
+ "file": "agentic/workflow_execution.fga"
3054
+ }
3055
+ },
3056
+ "relations": {
3057
+ "can_edit": {
3058
+ "computedUserset": {
3059
+ "relation": "owner"
3060
+ }
3061
+ },
3062
+ "can_grant_access": {
3063
+ "computedUserset": {
3064
+ "relation": "owner"
3065
+ }
3066
+ },
3067
+ "can_view": {
3068
+ "computedUserset": {
3069
+ "relation": "viewer"
3070
+ }
3071
+ },
3072
+ "can_view_access": {
3073
+ "computedUserset": {
3074
+ "relation": "viewer"
3075
+ }
3076
+ },
3077
+ "organization": {
3078
+ "this": {}
3079
+ },
3080
+ "owner": {
3081
+ "this": {}
3082
+ },
3083
+ "viewer": {
3084
+ "union": {
3085
+ "child": [
3086
+ {
3087
+ "this": {}
3088
+ },
3089
+ {
3090
+ "computedUserset": {
3091
+ "relation": "owner"
3092
+ }
3093
+ },
3094
+ {
3095
+ "tupleToUserset": {
3096
+ "computedUserset": {
3097
+ "relation": "execution_viewer"
3098
+ },
3099
+ "tupleset": {
3100
+ "relation": "workflow_instance"
3101
+ }
3102
+ }
3103
+ }
3104
+ ]
3105
+ }
3106
+ },
3107
+ "workflow_instance": {
3108
+ "this": {}
3109
+ }
3110
+ },
3111
+ "type": "workflow_execution"
3112
+ }
3113
+ ]
3114
+ }