@stigmer/server 3.27.1 → 3.28.0

package/src/authorization/__tests__/fixtures/fga/blueprint-private-visibility.fga.yaml

@@ -1,318 +0,0 @@
-# Pinned copy of stigmer-cloud backend/services/stigmer-server/fga/tests/blueprint-private-visibility.fga.yaml
-# as changed by stigmer-cloud#765 (the OpenFGA store test the cloud runs against its live model).
-# The body below is byte-identical to the source; the cloud re-runs the LIVE
-# file against this evaluator at the re-pin, so a stale copy is caught there.
-# Store tests for real blueprint privacy (Phase 3 of the visibility model).
-#
-# Blueprint viewer relations no longer include the unconditional
-# `viewer from organization` grant: a PRIVATE blueprint is invisible to the
-# rest of its own org. Every broader level is an explicit tuple written by
-# VisibilityTupleReconciler:
-#
-#   ORG       viewer@organization:<org>#viewer   (the org's FULL read audience —
-#             every role satisfies organization#viewer, including read-only
-#             viewers; pre-cloud#257 tuples carried #member, which excluded
-#             viewer-role users — still honored until backfilled, see the
-#             legacy-bot fixture)
-#   PLATFORM  platform_viewer@identity_provider:<idp>#platform_user  +  the ORG tuple
-#
-# Read vs spend: an org viewer-role user READS org-visible blueprints (and, at
-# the model level, satisfies can_execute — run-what-you-can-read), but every
-# spend path is gated in Java on the org-level can_create_session /
-# can_create_execution_in permissions, which require member-or-guest. The
-# vera assertions pin both halves of that contract.
-#
-# The ORG tuple rides along on PLATFORM (the "org floor") so a shared
-# blueprint stays listable in its own org.
-#
-# T08 exception: org ADMINS (and org owners, via the role hierarchy) are
-# composed into blueprint `owner` and therefore see, list, and manage
-# PRIVATE blueprints — the GitHub-org-admin model. "Private is real" now
-# means: invisible to plain members, never to org admins. Pinned by the
-# oscar (org admin) assertions below.
-#
-# Run with:
-#   fga model test --tests blueprint-private-visibility.fga.yaml
-#
-# Scenario: org "acme" has owner-creator carol, org admin oscar, plain
-# member dave, and read-only viewer vera (the role SSO auto-provisioning
-# grants by default); mallory belongs to an unrelated org. Carol authors one
-# blueprint of each kind at PRIVATE, plus an ORG agent and a legacy ORG
-# agent whose tuple still carries the pre-cloud#257 shape.
-name: blueprint-private-visibility
-model_file: ../model/fga.mod
-
-tuples:
-  # --- Org memberships ---
-  - user: identity_account:carol
-    relation: owner
-    object: organization:acme
-  - user: identity_account:oscar
-    relation: admin
-    object: organization:acme
-  - user: identity_account:dave
-    relation: member
-    object: organization:acme
-  - user: identity_account:vera
-    relation: viewer
-    object: organization:acme
-  - user: identity_account:mallory
-    relation: member
-    object: organization:outsider
-
-  # --- PRIVATE blueprints (no visibility tuples at all) ---
-  - user: organization:acme
-    relation: organization
-    object: agent:secret-bot
-  - user: identity_account:carol
-    relation: owner
-    object: agent:secret-bot
-  - user: organization:acme
-    relation: organization
-    object: skill:secret-notes
-  - user: identity_account:carol
-    relation: owner
-    object: skill:secret-notes
-  - user: organization:acme
-    relation: organization
-    object: workflow:secret-flow
-  - user: identity_account:carol
-    relation: owner
-    object: workflow:secret-flow
-  - user: organization:acme
-    relation: organization
-    object: mcp_server:secret-tools
-  - user: identity_account:carol
-    relation: owner
-    object: mcp_server:secret-tools
-
-  # --- ORG-visible agent (explicit org viewer tuple, cloud#257 shape) ---
-  - user: organization:acme
-    relation: organization
-    object: agent:team-bot
-  - user: identity_account:carol
-    relation: owner
-    object: agent:team-bot
-  - user: organization:acme#viewer
-    relation: viewer
-    object: agent:team-bot
-
-  # --- ORG-visible agent with the LEGACY pre-cloud#257 tuple shape ---
-  # Pins two transition facts until the boot backfill converges prod tuples:
-  # members must keep their access through the old shape, and viewer-role
-  # users are still refused by it (the cloud#257 defect, alive on legacy
-  # tuples only).
-  - user: organization:acme
-    relation: organization
-    object: agent:legacy-bot
-  - user: identity_account:carol
-    relation: owner
-    object: agent:legacy-bot
-  - user: organization:acme#member
-    relation: viewer
-    object: agent:legacy-bot
-
-  # --- PRIVATE agent with an explicit individual viewer grant ---
-  - user: organization:acme
-    relation: organization
-    object: agent:shared-secret
-  - user: identity_account:carol
-    relation: owner
-    object: agent:shared-secret
-  - user: identity_account:dave
-    relation: viewer
-    object: agent:shared-secret
-
-tests:
-  - name: private blueprints are invisible to fellow org members (all four kinds)
-    check:
-      - user: identity_account:dave
-        object: agent:secret-bot
-        assertions:
-          can_view: false
-          can_execute: false
-          can_create_instance: false
-          can_clone: false
-      - user: identity_account:dave
-        object: skill:secret-notes
-        assertions:
-          can_view: false
-          can_use: false
-      - user: identity_account:dave
-        object: workflow:secret-flow
-        assertions:
-          can_view: false
-          can_execute: false
-      - user: identity_account:dave
-        object: mcp_server:secret-tools
-        assertions:
-          can_view: false
-          can_use: false
-          can_connect: false
-
-  - name: org admin sees and manages private blueprints of every kind (T08)
-    check:
-      - user: identity_account:oscar
-        object: agent:secret-bot
-        assertions:
-          can_view: true
-          can_edit: true
-          can_delete: true
-          can_execute: true
-      - user: identity_account:oscar
-        object: skill:secret-notes
-        assertions:
-          can_view: true
-          can_edit: true
-      - user: identity_account:oscar
-        object: workflow:secret-flow
-        assertions:
-          can_view: true
-          can_edit: true
-      # mcp_server had admin inheritance before T08 — asserted here so all
-      # four private-blueprint kinds are pinned to the same rule.
-      - user: identity_account:oscar
-        object: mcp_server:secret-tools
-        assertions:
-          can_view: true
-          can_edit: true
-
-  - name: org admin's listable agents include private ones (T08)
-    list_objects:
-      - user: identity_account:oscar
-        type: agent
-        assertions:
-          can_view:
-            - agent:secret-bot
-            - agent:team-bot
-            - agent:legacy-bot
-            - agent:shared-secret
-
-  - name: owner retains full access to private blueprints
-    check:
-      - user: identity_account:carol
-        object: agent:secret-bot
-        assertions:
-          can_view: true
-          can_execute: true
-          can_create_instance: true
-          can_edit: true
-          can_delete: true
-      - user: identity_account:carol
-        object: workflow:secret-flow
-        assertions:
-          can_view: true
-          can_execute: true
-          can_edit: true
-
-  - name: org-visible agent is viewable and runnable by org members, not outsiders
-    check:
-      - user: identity_account:dave
-        object: agent:team-bot
-        assertions:
-          can_view: true
-          can_execute: true
-          can_create_instance: true
-          can_edit: false
-          can_delete: false
-      - user: identity_account:mallory
-        object: agent:team-bot
-        assertions:
-          can_view: false
-          can_execute: false
-
-  - name: explicit individual viewer grant on a private agent conveys view and run
-    check:
-      # Run-what-you-can-read: can_execute derives from viewer, so an
-      # explicit viewer grant is enough to run (matches the execution gate,
-      # which checks can_view).
-      - user: identity_account:dave
-        object: agent:shared-secret
-        assertions:
-          can_view: true
-          can_execute: true
-          can_edit: false
-
-  - name: org member's listable agents exclude private ones
-    list_objects:
-      - user: identity_account:dave
-        type: agent
-        assertions:
-          can_view:
-            - agent:team-bot
-            - agent:legacy-bot
-            - agent:shared-secret
-
-  - name: owner's listable agents include everything they authored
-    list_objects:
-      - user: identity_account:carol
-        type: agent
-        assertions:
-          can_view:
-            - agent:secret-bot
-            - agent:team-bot
-            - agent:legacy-bot
-            - agent:shared-secret
-
-  # ── cloud#257: the viewer-role cell (previously untested) ──────────────
-
-  - name: org viewer reads org-visible blueprints — the cloud#257 contract
-    check:
-      # View, clone and (model-level) execute all derive from viewer; the
-      # spend refusal is pinned separately on the org permissions below.
-      - user: identity_account:vera
-        object: agent:team-bot
-        assertions:
-          can_view: true
-          can_clone: true
-          can_execute: true
-          can_edit: false
-          can_delete: false
-      # Private stays private — the viewer role grants nothing beyond the
-      # explicit visibility tuples.
-      - user: identity_account:vera
-        object: agent:secret-bot
-        assertions:
-          can_view: false
-          can_execute: false
-
-  - name: org viewer holds no spend authority on the org (the cost gate)
-    check:
-      # Java execution lanes (session create, agent-execution create,
-      # workflow-execution create, EC create) all check these org-level
-      # permissions — this is why widening read to viewers exposes no cost.
-      - user: identity_account:vera
-        object: organization:acme
-        assertions:
-          can_view: true
-          can_create_session: false
-          can_create_execution_in: false
-      - user: identity_account:dave
-        object: organization:acme
-        assertions:
-          can_create_session: true
-          can_create_execution_in: true
-
-  - name: legacy member-shaped tuple keeps members but still excludes viewers (until backfilled)
-    check:
-      - user: identity_account:dave
-        object: agent:legacy-bot
-        assertions:
-          can_view: true
-          can_execute: true
-      # The original cloud#257 defect, pinned on the legacy shape: the org
-      # role hierarchy flows downward, so a viewer-role user never satisfies
-      # organization#member. The boot backfill converges these tuples.
-      - user: identity_account:vera
-        object: agent:legacy-bot
-        assertions:
-          can_view: false
-          can_execute: false
-
-  - name: org viewer's listable agents are exactly the viewer-shaped org-visible ones
-    list_objects:
-      - user: identity_account:vera
-        type: agent
-        assertions:
-          can_view:
-            - agent:team-bot

package/src/authorization/__tests__/fixtures/fga/channel-app-owner.fga.yaml

@@ -1,125 +0,0 @@
-# Pinned copy of stigmer-cloud backend/services/stigmer-server/fga/tests/channel-app-owner.fga.yaml
-# at commit b87dd1170 (the OpenFGA store test the cloud runs against its live model).
-# The body below is byte-identical to the source; the cloud re-runs the LIVE
-# file against this evaluator at the re-pin, so a stale copy is caught there.
-# Channel apps are owner-scoped provider credentials (T04 item 2, the
-# oauth_app RESTRICTED posture with T08 admin inheritance): the creator
-# owns the app; view/edit/delete require ownership or an explicit grant.
-# Plain org members get NO implicit access — the resource carries the
-# org's webhook signing secret and OAuth client secret.
-#
-# Org ADMINS inherit owner (T08): a credential holder needs an operator
-# of last resort more than any blueprint does — an ex-employee owner must
-# never strand secret rotation. The narrowness these tests pin: owner +
-# admins have control, granted viewers read, plain members have nothing,
-# and only admins can create.
-#
-# Run: fga model test --tests channel-app-owner.fga.yaml
-
-name: channel-app-owner
-model_file: ../model/fga.mod
-
-tuples:
-  # Org membership for both accounts — proving membership grants nothing.
-  # alice created the app while she was an admin and was later demoted to
-  # member (creation is admin-gated; the owner tuple survives demotion) —
-  # this keeps the direct-owner path distinct from admin inheritance.
-  - user: identity_account:alice
-    relation: member
-    object: organization:acme
-  - user: identity_account:mallory
-    relation: member
-    object: organization:acme
-
-  # Org admin — proving T08 inheritance reaches channel apps.
-  - user: identity_account:ana
-    relation: admin
-    object: organization:acme
-
-  # The channel app, created by alice (the config-driven create tuples).
-  - user: organization:acme
-    relation: organization
-    object: channel_app:acme-support-bot
-  - user: identity_account:alice
-    relation: owner
-    object: channel_app:acme-support-bot
-
-  # An explicit viewer grant to carol (not even an org member).
-  - user: identity_account:carol
-    relation: viewer
-    object: channel_app:acme-support-bot
-
-tests:
-  - name: owner has full control including grant management
-    check:
-      - user: identity_account:alice
-        object: channel_app:acme-support-bot
-        assertions:
-          can_view: true
-          can_edit: true
-          can_delete: true
-          can_grant_access: true
-          can_view_access: true
-
-  - name: explicitly granted viewer can read but not mutate
-    check:
-      - user: identity_account:carol
-        object: channel_app:acme-support-bot
-        assertions:
-          can_view: true
-          can_edit: false
-          can_delete: false
-          can_grant_access: false
-          can_view_access: true
-
-  - name: fellow org member has no implicit access
-    check:
-      - user: identity_account:mallory
-        object: channel_app:acme-support-bot
-        assertions:
-          can_view: false
-          can_edit: false
-          can_delete: false
-          can_grant_access: false
-          can_view_access: false
-
-  - name: org admin inherits channel app management (T08)
-    check:
-      - user: identity_account:ana
-        object: channel_app:acme-support-bot
-        assertions:
-          can_view: true
-          can_edit: true
-          can_delete: true
-          can_grant_access: true
-
-  - name: creation is admin-gated on the organization
-    check:
-      - user: identity_account:ana
-        object: organization:acme
-        assertions:
-          can_create_channel_app: true
-      - user: identity_account:mallory
-        object: organization:acme
-        assertions:
-          can_create_channel_app: false
-
-  - name: listing channel apps reflects ownership and grants, not membership
-    list_objects:
-      - user: identity_account:alice
-        type: channel_app
-        assertions:
-          can_view:
-            - channel_app:acme-support-bot
-          can_edit:
-            - channel_app:acme-support-bot
-      - user: identity_account:carol
-        type: channel_app
-        assertions:
-          can_view:
-            - channel_app:acme-support-bot
-          can_edit: []
-      - user: identity_account:mallory
-        type: channel_app
-        assertions:
-          can_view: []

package/src/authorization/__tests__/fixtures/fga/channel-participation.fga.yaml

@@ -1,201 +0,0 @@
-# Pinned copy of stigmer-cloud backend/services/stigmer-server/fga/tests/channel-participation.fga.yaml
-# at commit b87dd1170 (the OpenFGA store test the cloud runs against its live model).
-# The body below is byte-identical to the source; the cloud re-runs the LIVE
-# file against this evaluator at the re-pin, so a stale copy is caught there.
-# Store tests for conversation participation on agent channels (the
-# `participant` relation and `can_participate` permission,
-# channel-conversations DD-010).
-#
-# The model change under test, in one line each:
-#   participant: [identity_account] or owner   (owner participates free)
-#   viewer:      [identity_account] or participant   (widened from `or owner`)
-#   can_participate: participant               (the reply/takeover bar)
-#
-# The invariants this suite pins:
-#   1. Read and speak are DIFFERENT powers: a granted viewer can see
-#      conversations but cannot participate (the DD-010 rejected
-#      alternative "widen viewer alone" stays rejected).
-#   2. Participation is NOT configuration: a participant can never
-#      edit/delete/grant on the channel.
-#   3. The viewer widening is behavior-preserving for existing grants:
-#      owner ⊆ participant ⊆ viewer, so every pre-DD-010 owner/admin
-#      read keeps working (asserted below, byte-identical semantics).
-#   4. Conversation READ rides the existing session.can_view composition
-#      (`viewer from channel`) unchanged, still read-only — participants
-#      inherit view on channel sessions but never
-#      can_create_execution_in (DD-012's read-only-by-construction).
-#   5. The personal-session invariant is untouched: a participant sees
-#      nothing of anyone's console sessions.
-#
-# Run with:
-#   fga model test --tests channel-participation.fga.yaml
-#
-# Scenario: org "acme" has admin alice, member bob (who connected the
-# WhatsApp channel and owns it), member trina (an ISC trainer granted
-# participant — the DD-010 launch persona), member carol (granted plain
-# viewer), and member dave (no relation to the channel). "rival" is
-# another org whose admin eve must see nothing. The channel session is
-# owned by acme's system-channel account; bob also has a personal
-# console session to prove invariant 5.
-name: channel-participation
-model_file: ../model/fga.mod
-
-tuples:
-  # --- Org roles ---
-  - user: identity_account:alice
-    relation: admin
-    object: organization:acme
-  - user: identity_account:bob
-    relation: member
-    object: organization:acme
-  - user: identity_account:trina
-    relation: member
-    object: organization:acme
-  - user: identity_account:carol
-    relation: member
-    object: organization:acme
-  - user: identity_account:dave
-    relation: member
-    object: organization:acme
-  - user: identity_account:eve
-    relation: admin
-    object: organization:rival
-
-  # --- The AgentChannel (tuples written on create: org link + creator owner) ---
-  - user: organization:acme
-    relation: organization
-    object: agent_channel:wa-line
-  - user: identity_account:bob
-    relation: owner
-    object: agent_channel:wa-line
-
-  # --- The DD-010 grants (IamPolicy-written: participant vs plain viewer) ---
-  - user: identity_account:trina
-    relation: participant
-    object: agent_channel:wa-line
-  - user: identity_account:carol
-    relation: viewer
-    object: agent_channel:wa-line
-
-  # --- A channel session (owned by the org's system-channel account) ---
-  - user: organization:acme
-    relation: organization
-    object: session:member-chat
-  - user: identity_account:sys-channel-acme
-    relation: owner
-    object: session:member-chat
-  # The structural link written by ChannelSessionLinkStep:
-  - user: agent_channel:wa-line
-    relation: channel
-    object: session:member-chat
-
-  # --- Bob's personal console session (invariant 5's control subject) ---
-  - user: organization:acme
-    relation: organization
-    object: session:bobs-chat
-  - user: identity_account:bob
-    relation: owner
-    object: session:bobs-chat
-
-tests:
-  - name: a granted participant may read and speak but never configure
-    check:
-      - user: identity_account:trina
-        object: agent_channel:wa-line
-        assertions:
-          can_view: true
-          can_participate: true
-          can_edit: false
-          can_delete: false
-          can_grant_access: false
-          can_view_access: true
-
-  - name: a granted viewer may read but never speak — read and speak are different powers
-    check:
-      - user: identity_account:carol
-        object: agent_channel:wa-line
-        assertions:
-          can_view: true
-          can_participate: false
-          can_edit: false
-
-  - name: the channel owner participates without an explicit tuple
-    check:
-      - user: identity_account:bob
-        object: agent_channel:wa-line
-        assertions:
-          can_view: true
-          can_participate: true
-          can_edit: true
-          can_delete: true
-          can_grant_access: true
-
-  - name: an org admin participates through owner inheritance, no tuple needed
-    check:
-      - user: identity_account:alice
-        object: agent_channel:wa-line
-        assertions:
-          can_view: true
-          can_participate: true
-          can_edit: true
-
-  - name: a plain org member has no access of any kind
-    check:
-      - user: identity_account:dave
-        object: agent_channel:wa-line
-        assertions:
-          can_view: false
-          can_participate: false
-          can_edit: false
-          can_delete: false
-          can_grant_access: false
-          can_view_access: false
-
-  - name: a foreign org admin has no access of any kind
-    check:
-      - user: identity_account:eve
-        object: agent_channel:wa-line
-        assertions:
-          can_view: false
-          can_participate: false
-          can_edit: false
-
-  - name: participants inherit channel-session read through the existing composition, read-only
-    check:
-      - user: identity_account:trina
-        object: session:member-chat
-        assertions:
-          can_view: true
-          can_create_execution_in: false
-          can_edit: false
-          can_delete: false
-          can_grant_access: false
-
-  - name: the personal-session invariant is untouched — a participant sees no console sessions
-    check:
-      - user: identity_account:trina
-        object: session:bobs-chat
-        assertions:
-          can_view: false
-          can_create_execution_in: false
-
-  - name: list viewable and participable channels resolve per grant (drives listConversations)
-    list_objects:
-      - user: identity_account:trina
-        type: agent_channel
-        assertions:
-          can_view:
-            - agent_channel:wa-line
-          can_participate:
-            - agent_channel:wa-line
-      - user: identity_account:carol
-        type: agent_channel
-        assertions:
-          can_view:
-            - agent_channel:wa-line
-          can_participate: []
-      - user: identity_account:dave
-        type: agent_channel
-        assertions:
-          can_view: []
-          can_participate: []