@stigmer/server 3.27.1 → 3.28.0

package/src/authorization/__tests__/fixtures/fga/channel-session-visibility.fga.yaml

@@ -1,187 +0,0 @@
-# Pinned copy of stigmer-cloud backend/services/stigmer-server/fga/tests/channel-session-visibility.fga.yaml
-# at commit b87dd1170 (the OpenFGA store test the cloud runs against its live model).
-# The body below is byte-identical to the source; the cloud re-runs the LIVE
-# file against this evaluator at the re-pin, so a stale copy is caught there.
-# Store tests for channel-session read-only observability (the session
-# `channel` structural link).
-#
-# A session created by the channel runtime carries a single
-#   session#channel@agent_channel:<id>
-# tuple and inherits the channel's viewer set (connector owner + org admins
-# via `admin from organization` on agent_channel) into can_view ONLY —
-# `viewer from channel` is composed into session.can_view, deliberately NOT
-# into session.viewer, so channel observers never gain
-# can_create_execution_in / can_edit / can_delete / can_grant_access.
-# Executions follow through agent_execution's
-# `can_view: viewer or can_view from session`.
-#
-# The personal-session invariant is untouched: console sessions never carry
-# a channel tuple, so `viewer from channel` resolves to nothing for them
-# (pinned below and by session-personal-resource.fga.yaml).
-#
-# Run with:
-#   fga model test --tests channel-session-visibility.fga.yaml
-#
-# Scenario: org "acme" has admin alice, member bob (who connected the Slack
-# channel and owns it), and member carol (no relation to the channel).
-# "rival" is another org whose admin eve must see nothing. The channel
-# session is owned by acme's system-channel account; bob also has a normal
-# personal console session to prove the invariant.
-name: channel-session-visibility
-model_file: ../model/fga.mod
-
-tuples:
-  # --- Org roles ---
-  - user: identity_account:alice
-    relation: admin
-    object: organization:acme
-  - user: identity_account:bob
-    relation: member
-    object: organization:acme
-  - user: identity_account:carol
-    relation: member
-    object: organization:acme
-  - user: identity_account:eve
-    relation: admin
-    object: organization:rival
-
-  # --- The AgentChannel (tuples written on create: org link + creator owner) ---
-  - user: organization:acme
-    relation: organization
-    object: agent_channel:slack-conn
-  - user: identity_account:bob
-    relation: owner
-    object: agent_channel:slack-conn
-
-  # --- The channel session (owned by the org's system-channel account) ---
-  - user: organization:acme
-    relation: organization
-    object: session:channel-chat
-  - user: identity_account:sys-channel-acme
-    relation: owner
-    object: session:channel-chat
-  # The structural link written by ChannelSessionLinkStep:
-  - user: agent_channel:slack-conn
-    relation: channel
-    object: session:channel-chat
-
-  # --- An execution inside the channel session ---
-  - user: session:channel-chat
-    relation: session
-    object: agent_execution:channel-run-1
-
-  # --- bob's ordinary personal console session (NO channel tuple) ---
-  - user: organization:acme
-    relation: organization
-    object: session:bobs-chat
-  - user: identity_account:bob
-    relation: owner
-    object: session:bobs-chat
-  - user: session:bobs-chat
-    relation: session
-    object: agent_execution:bobs-run-1
-
-tests:
-  - name: channel connector can view the conversation but only view it
-    check:
-      - user: identity_account:bob
-        object: session:channel-chat
-        assertions:
-          can_view: true
-          can_create_execution_in: false
-          can_edit: false
-          can_delete: false
-          can_grant_access: false
-          can_view_access: false
-
-  - name: org admin inherits view through the channel, read-only
-    check:
-      - user: identity_account:alice
-        object: session:channel-chat
-        assertions:
-          can_view: true
-          can_create_execution_in: false
-          can_edit: false
-          can_delete: false
-          can_grant_access: false
-
-  - name: plain org member without channel access sees nothing
-    check:
-      - user: identity_account:carol
-        object: session:channel-chat
-        assertions:
-          can_view: false
-          can_create_execution_in: false
-
-  - name: another org's admin sees nothing
-    check:
-      - user: identity_account:eve
-        object: session:channel-chat
-        assertions:
-          can_view: false
-
-  - name: the system-channel account keeps full session ownership
-    check:
-      - user: identity_account:sys-channel-acme
-        object: session:channel-chat
-        assertions:
-          can_view: true
-          can_create_execution_in: true
-          can_edit: true
-          can_delete: true
-
-  - name: executions inherit read-only channel observability
-    check:
-      - user: identity_account:bob
-        object: agent_execution:channel-run-1
-        assertions:
-          can_view: true
-          can_edit: false
-      - user: identity_account:alice
-        object: agent_execution:channel-run-1
-        assertions:
-          can_view: true
-          can_edit: false
-      - user: identity_account:carol
-        object: agent_execution:channel-run-1
-        assertions:
-          can_view: false
-
-  - name: personal-session invariant is untouched by the channel model
-    check:
-      # Admin still has no path into a console session (no channel tuple).
-      - user: identity_account:alice
-        object: session:bobs-chat
-        assertions:
-          can_view: false
-          can_edit: false
-          can_delete: false
-      - user: identity_account:alice
-        object: agent_execution:bobs-run-1
-        assertions:
-          can_view: false
-      # And the owner's own access is unchanged.
-      - user: identity_account:bob
-        object: session:bobs-chat
-        assertions:
-          can_view: true
-          can_edit: true
-          can_create_execution_in: true
-
-  - name: list viewable sessions resolves the channel chain (drives listByChannel)
-    list_objects:
-      - user: identity_account:alice
-        type: session
-        assertions:
-          can_view:
-            - session:channel-chat
-      - user: identity_account:bob
-        type: session
-        assertions:
-          can_view:
-            - session:channel-chat
-            - session:bobs-chat
-      - user: identity_account:carol
-        type: session
-        assertions:
-          can_view: []

package/src/authorization/__tests__/fixtures/fga/default-instance-inheritance.fga.yaml

@@ -1,214 +0,0 @@
-# Pinned copy of stigmer-cloud backend/services/stigmer-server/fga/tests/default-instance-inheritance.fga.yaml
-# as changed by stigmer-cloud#765 (the OpenFGA store test the cloud runs against its live model).
-# The body below is byte-identical to the source; the cloud re-runs the LIVE
-# file against this evaluator at the re-pin, so a stale copy is caught there.
-# Store tests for default-instance structural inheritance (default_of).
-#
-# A blueprint's system-managed default instance carries a single
-#   instance#default_of@<blueprint>:<id>
-# tuple and inherits the blueprint's ENTIRE viewer set through
-# `viewer from default_of` — org members and platform users
-# (identity_provider#platform_user). No enum-derived
-# visibility tuples are ever written on default instances, so their access
-# can never drift from the template's.
-#
-# Run with:
-#   fga model test --tests default-instance-inheritance.fga.yaml
-#
-# Scenario: "planton" is a platform org owning identity_provider:idp1 which
-# manages customer org "acme". Planton authors agents/workflows at every
-# visibility level; each has a default instance linked via default_of.
-# Alice (acme member) reaches default instances of platform-shared
-# blueprints; planton members reach default instances of org-visible ones;
-# personal instances never leak.
-name: default-instance-inheritance
-model_file: ../model/fga.mod
-
-tuples:
-  # --- Platform tenancy: idp1 is owned by planton and manages acme ---
-  - user: organization:planton
-    relation: organization
-    object: identity_provider:idp1
-  - user: organization:acme
-    relation: managed_org
-    object: identity_provider:idp1
-
-  # --- Org memberships ---
-  - user: identity_account:swarup
-    relation: owner
-    object: organization:planton
-  - user: identity_account:priya
-    relation: member
-    object: organization:planton
-  - user: identity_account:veda
-    relation: viewer
-    object: organization:planton
-  - user: identity_account:alice
-    relation: member
-    object: organization:acme
-  - user: identity_account:mallory
-    relation: member
-    object: organization:outsider
-
-  # --- Platform-shared agent + its default instance ---
-  # PLATFORM carries the org floor tuple too (viewer@org#viewer — the org's
-  # full read audience), exactly as VisibilityTupleReconciler writes it.
-  - user: organization:planton
-    relation: organization
-    object: agent:sara
-  - user: identity_account:swarup
-    relation: owner
-    object: agent:sara
-  - user: identity_provider:idp1#platform_user
-    relation: platform_viewer
-    object: agent:sara
-  - user: organization:planton#viewer
-    relation: viewer
-    object: agent:sara
-  - user: organization:planton
-    relation: organization
-    object: agent_instance:sara-default
-  - user: agent:sara
-    relation: agent
-    object: agent_instance:sara-default
-  - user: identity_account:swarup
-    relation: owner
-    object: agent_instance:sara-default
-  - user: agent:sara
-    relation: default_of
-    object: agent_instance:sara-default
-
-  # --- Alice's personal instance of the shared agent (NO default_of) ---
-  - user: organization:acme
-    relation: organization
-    object: agent_instance:alice-personal
-  - user: agent:sara
-    relation: agent
-    object: agent_instance:alice-personal
-  - user: identity_account:alice
-    relation: owner
-    object: agent_instance:alice-personal
-
-  # --- Org-visible agent + its default instance ---
-  # ORG visibility is an explicit viewer tuple (viewer@org#viewer) — the
-  # unconditional `viewer from organization` grant is gone (private is real).
-  - user: organization:planton
-    relation: organization
-    object: agent:internal-bot
-  - user: identity_account:swarup
-    relation: owner
-    object: agent:internal-bot
-  - user: organization:planton#viewer
-    relation: viewer
-    object: agent:internal-bot
-  - user: organization:planton
-    relation: organization
-    object: agent_instance:internal-default
-  - user: agent:internal-bot
-    relation: agent
-    object: agent_instance:internal-default
-  - user: identity_account:swarup
-    relation: owner
-    object: agent_instance:internal-default
-  - user: agent:internal-bot
-    relation: default_of
-    object: agent_instance:internal-default
-
-  # --- Platform-shared workflow + its default instance ---
-  - user: organization:planton
-    relation: organization
-    object: workflow:onboarding
-  - user: identity_account:swarup
-    relation: owner
-    object: workflow:onboarding
-  - user: identity_provider:idp1#platform_user
-    relation: platform_viewer
-    object: workflow:onboarding
-  - user: organization:planton#viewer
-    relation: viewer
-    object: workflow:onboarding
-  - user: organization:planton
-    relation: organization
-    object: workflow_instance:onboarding-default
-  - user: workflow:onboarding
-    relation: workflow
-    object: workflow_instance:onboarding-default
-  - user: identity_account:swarup
-    relation: owner
-    object: workflow_instance:onboarding-default
-  - user: workflow:onboarding
-    relation: default_of
-    object: workflow_instance:onboarding-default
-
-tests:
-  - name: managed-org member reaches the default instance of a platform-shared agent
-    check:
-      - user: identity_account:alice
-        object: agent_instance:sara-default
-        assertions:
-          can_view: true
-          can_execute: true
-          can_edit: false
-          can_delete: false
-
-  - name: outsiders get nothing from the default_of link
-    check:
-      - user: identity_account:mallory
-        object: agent_instance:sara-default
-        assertions:
-          can_view: false
-          can_execute: false
-
-  - name: personal instances never leak through the parent agent
-    check:
-      # Swarup owns the agent itself, but alice's personal instance has no
-      # default_of tuple — only she (its owner) can reach it.
-      - user: identity_account:swarup
-        object: agent_instance:alice-personal
-        assertions:
-          can_view: false
-      - user: identity_account:alice
-        object: agent_instance:alice-personal
-        assertions:
-          can_view: true
-          can_edit: true
-
-  - name: org members reach the default instance of an org-visible agent
-    check:
-      - user: identity_account:priya
-        object: agent_instance:internal-default
-        assertions:
-          can_view: true
-          can_execute: true
-          can_edit: false
-      # cloud#257: the default_of chain reaches org viewer-role users too —
-      # the viewer-shaped org tuple on the parent agent is the org's full
-      # read audience, and the default instance inherits it structurally.
-      - user: identity_account:veda
-        object: agent_instance:internal-default
-        assertions:
-          can_view: true
-          can_edit: false
-      # Managed-org membership grants nothing on non-platform-shared agents.
-      - user: identity_account:alice
-        object: agent_instance:internal-default
-        assertions:
-          can_view: false
-
-  - name: managed-org member reaches the default instance of a platform-shared workflow
-    check:
-      - user: identity_account:alice
-        object: workflow_instance:onboarding-default
-        assertions:
-          can_view: true
-          can_execute: true
-          can_edit: false
-
-  - name: list managed-org member's viewable agent instances resolves the default_of chain
-    list_objects:
-      - user: identity_account:alice
-        type: agent_instance
-        assertions:
-          can_view:
-            - agent_instance:sara-default
-            - agent_instance:alice-personal

package/src/authorization/__tests__/fixtures/fga/mcp-server-authoring.fga.yaml

@@ -1,129 +0,0 @@
-# Pinned copy of stigmer-cloud backend/services/stigmer-server/fga/tests/mcp-server-authoring.fga.yaml
-# as changed by stigmer-cloud#765 (the OpenFGA store test the cloud runs against its live model).
-# The body below is byte-identical to the source; the cloud re-runs the LIVE
-# file against this evaluator at the re-pin, so a stale copy is caught there.
-# Store tests for MCP-server authoring: an MCP server is an organization's
-# blueprint, so creating one takes the organization's admin bar
-# (can_create_mcp_server: admin), the bar agents, workflows and skills
-# already take. Until stigmer#1209 (v3.22.0) the create ran no check in
-# either edition and any member could author one; these pin the bar and
-# the story it leaves for members: an admin authors the server org-visible
-# and a member connects it (can_connect) with their own credentials, while
-# a private server stays the owner's and the admins'.
-#
-# Run: fga model test --tests mcp-server-authoring.fga.yaml
-
-name: mcp-server-authoring
-model_file: ../model/fga.mod
-
-tuples:
-  # Org acme: olivia owns it, oscar administers, dave is a plain member,
-  # vera a read-only viewer; mallory belongs to an unrelated org.
-  - user: identity_account:olivia
-    relation: owner
-    object: organization:acme
-  - user: identity_account:oscar
-    relation: admin
-    object: organization:acme
-  - user: identity_account:dave
-    relation: member
-    object: organization:acme
-  - user: identity_account:vera
-    relation: viewer
-    object: organization:acme
-  - user: identity_account:mallory
-    relation: member
-    object: organization:other
-
-  # An ORG-visible server oscar authored (the org viewer tuple the
-  # visibility writer emits).
-  - user: organization:acme
-    relation: organization
-    object: mcp_server:github
-  - user: identity_account:oscar
-    relation: owner
-    object: mcp_server:github
-  - user: organization:acme#viewer
-    relation: viewer
-    object: mcp_server:github
-
-  # A PRIVATE server oscar authored (no visibility tuple).
-  - user: organization:acme
-    relation: organization
-    object: mcp_server:vault
-  - user: identity_account:oscar
-    relation: owner
-    object: mcp_server:vault
-
-tests:
-  - name: authoring an MCP server is an admin act, the blueprint bar
-    check:
-      - user: identity_account:olivia
-        object: organization:acme
-        assertions:
-          can_create_mcp_server: true
-          can_create_agent: true
-      - user: identity_account:oscar
-        object: organization:acme
-        assertions:
-          can_create_mcp_server: true
-          can_create_agent: true
-
-  - name: a member, a viewer and an outsider cannot author one
-    check:
-      - user: identity_account:dave
-        object: organization:acme
-        assertions:
-          can_create_mcp_server: false
-      - user: identity_account:vera
-        object: organization:acme
-        assertions:
-          can_create_mcp_server: false
-      - user: identity_account:mallory
-        object: organization:acme
-        assertions:
-          can_create_mcp_server: false
-
-  - name: a member connects an admin-authored org-visible server with their own credentials
-    check:
-      - user: identity_account:dave
-        object: mcp_server:github
-        assertions:
-          can_view: true
-          can_connect: true
-          can_edit: false
-      - user: identity_account:vera
-        object: mcp_server:github
-        assertions:
-          can_view: true
-          can_connect: true
-          can_edit: false
-      - user: identity_account:mallory
-        object: mcp_server:github
-        assertions:
-          can_view: false
-          can_connect: false
-
-  - name: a private server stays with its author and the org admins
-    check:
-      - user: identity_account:oscar
-        object: mcp_server:vault
-        assertions:
-          can_view: true
-          can_connect: true
-          can_edit: true
-      - user: identity_account:olivia
-        object: mcp_server:vault
-        assertions:
-          can_view: true
-          can_edit: true
-      - user: identity_account:dave
-        object: mcp_server:vault
-        assertions:
-          can_view: false
-          can_connect: false
-      - user: identity_account:vera
-        object: mcp_server:vault
-        assertions:
-          can_view: false
-          can_connect: false

package/src/authorization/__tests__/fixtures/fga/memory-subject-only.fga.yaml

@@ -1,72 +0,0 @@
-# Pinned copy of stigmer-cloud backend/services/stigmer-server/fga/tests/memory-subject-only.fga.yaml
-# at commit b87dd1170 (the OpenFGA store test the cloud runs against its live model).
-# The body below is byte-identical to the source; the cloud re-runs the LIVE
-# file against this evaluator at the re-pin, so a stale copy is caught there.
-# Memory is subject-only (DD-004 as ratified): the identity account the
-# memory is ABOUT is its only principal. These tests pin the platform's
-# strictest model — org membership grants nothing, org ADMINSHIP grants
-# nothing (admins govern the memory_enabled switch, never the content),
-# and nothing is grantable.
-
-name: memory-subject-only
-model_file: ../model/fga.mod
-
-tuples:
-  # Org membership and adminship — proving both grant nothing on memories.
-  - user: identity_account:alice
-    relation: member
-    object: organization:acme
-  - user: identity_account:mallory
-    relation: member
-    object: organization:acme
-  - user: identity_account:ana
-    relation: admin
-    object: organization:acme
-
-  # Alice's memory (the config-driven create tuples: org + subject).
-  - user: organization:acme
-    relation: organization
-    object: memory:mem-alice-terse
-  - user: identity_account:alice
-    relation: subject
-    object: memory:mem-alice-terse
-
-tests:
-  - name: the subject has full control over their own memory
-    check:
-      - user: identity_account:alice
-        object: memory:mem-alice-terse
-        assertions:
-          can_view: true
-          can_edit: true
-          can_delete: true
-
-  - name: a fellow org member sees and touches nothing
-    check:
-      - user: identity_account:mallory
-        object: memory:mem-alice-terse
-        assertions:
-          can_view: false
-          can_edit: false
-          can_delete: false
-
-  - name: an org ADMIN sees and touches nothing — the setting, never the entries
-    check:
-      - user: identity_account:ana
-        object: memory:mem-alice-terse
-        assertions:
-          can_view: false
-          can_edit: false
-          can_delete: false
-
-  - name: list-objects returns only the subject's own records
-    list_objects:
-      - user: identity_account:alice
-        type: memory
-        assertions:
-          can_view:
-            - memory:mem-alice-terse
-      - user: identity_account:mallory
-        type: memory
-        assertions:
-          can_view: []