@stigmer/server 3.27.1 → 3.28.0

package/src/authorization/__tests__/fixtures/fga/org-admin-owner-inheritance.fga.yaml

@@ -1,308 +0,0 @@
-# Pinned copy of stigmer-cloud backend/services/stigmer-server/fga/tests/org-admin-owner-inheritance.fga.yaml
-# as changed by stigmer-cloud#765 (the OpenFGA store test the cloud runs against its live model).
-# The body below is byte-identical to the source; the cloud re-runs the LIVE
-# file against this evaluator at the re-pin, so a stale copy is caught there.
-# Store tests for org-admin owner inheritance (T08).
-#
-# Blueprint kinds — agent, agent_share, agent_channel, channel_app,
-# schedule, skill, workflow, plugin — compose org admins into `owner`:
-#
-#   define owner: [identity_account] or admin from organization
-#
-# This is the GitHub-org-admin model (precedent: mcp_server, iam_policy,
-# invitation): every org asset has an operator of last resort, so
-# machine-provisioned and ex-employee resources stay manageable. Because
-# owner feeds viewer (and can_execute on agents), admins also see, list,
-# and run PRIVATE blueprints — a deliberate, accepted trade recorded in the
-# T08 design decision.
-#
-# The four personal/secret kinds — agent_instance, environment, session,
-# workflow_instance — deliberately do NOT inherit. Their fixtures below
-# carry the organization tuple, so these tests would fail loudly if
-# inheritance were ever wrongly added to them.
-#
-# Run with:
-#   fga model test --tests org-admin-owner-inheritance.fga.yaml
-#
-# Scenario: org "acme" has org owner root, org admin ana, and plain member
-# dave. carol (a plain member) created one PRIVATE resource of each
-# inherited kind, plus one of each excluded kind. zara is an admin of the
-# unrelated org "other".
-name: org-admin-owner-inheritance
-model_file: ../model/fga.mod
-
-tuples:
-  # --- Org roles ---
-  - user: identity_account:root
-    relation: owner
-    object: organization:acme
-  - user: identity_account:ana
-    relation: admin
-    object: organization:acme
-  - user: identity_account:dave
-    relation: member
-    object: organization:acme
-  - user: identity_account:carol
-    relation: member
-    object: organization:acme
-  - user: identity_account:zara
-    relation: admin
-    object: organization:other
-
-  # --- carol's PRIVATE blueprints (creation tuples only) ---
-  - user: organization:acme
-    relation: organization
-    object: agent:carols-bot
-  - user: identity_account:carol
-    relation: owner
-    object: agent:carols-bot
-  - user: organization:acme
-    relation: organization
-    object: agent_share:carols-bot-share
-  - user: identity_account:carol
-    relation: owner
-    object: agent_share:carols-bot-share
-  - user: organization:acme
-    relation: organization
-    object: agent_channel:carols-bot-slack
-  - user: identity_account:carol
-    relation: owner
-    object: agent_channel:carols-bot-slack
-  - user: organization:acme
-    relation: organization
-    object: channel_app:carols-slack-app
-  - user: identity_account:carol
-    relation: owner
-    object: channel_app:carols-slack-app
-  - user: organization:acme
-    relation: organization
-    object: schedule:carols-reminders
-  - user: identity_account:carol
-    relation: owner
-    object: schedule:carols-reminders
-  - user: organization:acme
-    relation: organization
-    object: skill:carols-notes
-  - user: identity_account:carol
-    relation: owner
-    object: skill:carols-notes
-  - user: organization:acme
-    relation: organization
-    object: workflow:carols-flow
-  - user: identity_account:carol
-    relation: owner
-    object: workflow:carols-flow
-  - user: organization:acme
-    relation: organization
-    object: plugin:carols-plugin
-  - user: identity_account:carol
-    relation: owner
-    object: plugin:carols-plugin
-
-  # --- carol's personal resources (organization tuple present, so a
-  #     wrongly-added inheritance WOULD resolve — these must stay denied) ---
-  - user: organization:acme
-    relation: organization
-    object: agent_instance:carols-instance
-  - user: agent:carols-bot
-    relation: agent
-    object: agent_instance:carols-instance
-  - user: identity_account:carol
-    relation: owner
-    object: agent_instance:carols-instance
-  - user: organization:acme
-    relation: organization
-    object: environment:carols-secrets
-  - user: identity_account:carol
-    relation: owner
-    object: environment:carols-secrets
-  - user: identity_account:carol
-    relation: creator
-    object: environment:carols-secrets
-  - user: organization:acme
-    relation: organization
-    object: session:carols-chat
-  - user: identity_account:carol
-    relation: owner
-    object: session:carols-chat
-
-tests:
-  - name: org admin inherits full management of every blueprint kind
-    check:
-      - user: identity_account:ana
-        object: agent:carols-bot
-        assertions:
-          can_view: true
-          can_edit: true
-          can_delete: true
-          can_grant_access: true
-          can_execute: true
-      - user: identity_account:ana
-        object: agent_share:carols-bot-share
-        assertions:
-          can_view: true
-          can_edit: true
-          can_delete: true
-          can_grant_access: true
-      - user: identity_account:ana
-        object: agent_channel:carols-bot-slack
-        assertions:
-          can_view: true
-          can_edit: true
-          can_delete: true
-          can_grant_access: true
-      - user: identity_account:ana
-        object: channel_app:carols-slack-app
-        assertions:
-          can_view: true
-          can_edit: true
-          can_delete: true
-          can_grant_access: true
-      - user: identity_account:ana
-        object: schedule:carols-reminders
-        assertions:
-          can_view: true
-          can_edit: true
-          can_delete: true
-          can_grant_access: true
-      - user: identity_account:ana
-        object: skill:carols-notes
-        assertions:
-          can_view: true
-          can_edit: true
-          can_delete: true
-          can_grant_access: true
-      - user: identity_account:ana
-        object: workflow:carols-flow
-        assertions:
-          can_view: true
-          can_edit: true
-          can_delete: true
-          can_grant_access: true
-      - user: identity_account:ana
-        object: plugin:carols-plugin
-        assertions:
-          can_view: true
-          can_edit: true
-          can_delete: true
-          can_grant_access: true
-
-  - name: org owner inherits through the admin hierarchy
-    check:
-      - user: identity_account:root
-        object: agent:carols-bot
-        assertions:
-          can_edit: true
-          can_delete: true
-          can_grant_access: true
-      - user: identity_account:root
-        object: agent_share:carols-bot-share
-        assertions:
-          can_edit: true
-          can_delete: true
-      - user: identity_account:root
-        object: agent_channel:carols-bot-slack
-        assertions:
-          can_edit: true
-          can_delete: true
-
-  - name: plain org member still has nothing on private blueprints
-    check:
-      - user: identity_account:dave
-        object: agent:carols-bot
-        assertions:
-          can_view: false
-          can_edit: false
-          can_delete: false
-          can_grant_access: false
-      - user: identity_account:dave
-        object: agent_share:carols-bot-share
-        assertions:
-          can_view: false
-          can_edit: false
-      - user: identity_account:dave
-        object: agent_channel:carols-bot-slack
-        assertions:
-          can_view: false
-          can_edit: false
-      - user: identity_account:dave
-        object: channel_app:carols-slack-app
-        assertions:
-          can_view: false
-          can_edit: false
-      - user: identity_account:dave
-        object: schedule:carols-reminders
-        assertions:
-          can_view: false
-          can_edit: false
-
-  - name: admin of an unrelated org has nothing
-    check:
-      - user: identity_account:zara
-        object: agent:carols-bot
-        assertions:
-          can_view: false
-          can_edit: false
-          can_delete: false
-      - user: identity_account:zara
-        object: plugin:carols-plugin
-        assertions:
-          can_view: false
-          can_edit: false
-
-  - name: personal kinds stay admin-excluded (privacy invariant)
-    check:
-      - user: identity_account:ana
-        object: agent_instance:carols-instance
-        assertions:
-          can_view: false
-          can_edit: false
-          can_delete: false
-      - user: identity_account:ana
-        object: environment:carols-secrets
-        assertions:
-          can_view: false
-          can_edit: false
-          can_delete: false
-          can_read_secrets: false
-      - user: identity_account:ana
-        object: session:carols-chat
-        assertions:
-          can_view: false
-          can_edit: false
-          can_delete: false
-      # The org OWNER is admin-and-above — the exclusion must hold for
-      # them too.
-      - user: identity_account:root
-        object: environment:carols-secrets
-        assertions:
-          can_view: false
-          can_read_secrets: false
-
-  - name: creator keeps everything (inheritance adds, never subtracts)
-    check:
-      - user: identity_account:carol
-        object: agent:carols-bot
-        assertions:
-          can_view: true
-          can_edit: true
-          can_delete: true
-          can_grant_access: true
-
-  - name: admin's listable resources include private blueprints, never personal kinds
-    list_objects:
-      - user: identity_account:ana
-        type: agent
-        assertions:
-          can_view:
-            - agent:carols-bot
-          can_edit:
-            - agent:carols-bot
-      - user: identity_account:ana
-        type: agent_instance
-        assertions:
-          can_view: []
-      - user: identity_account:ana
-        type: session
-        assertions:
-          can_view: []

package/src/authorization/__tests__/fixtures/fga/org-shared-environment.fga.yaml

@@ -1,144 +0,0 @@
-# Pinned copy of stigmer-cloud backend/services/stigmer-server/fga/tests/org-shared-environment.fga.yaml
-# at commit b87dd1170 (the OpenFGA store test the cloud runs against its live model).
-# The body below is byte-identical to the source; the cloud re-runs the LIVE
-# file against this evaluator at the re-pin, so a stale copy is caught there.
-# Store tests for org-shared environments (T06).
-#
-# Environments are personal resources with opt-in org sharing. Setting
-# visibility_org writes one tuple (viewer@organization:<org>#viewer — the
-# org's full read audience, cloud#257) that grants everyone in the org
-# REDACTED view only. The creator-only secret-reveal
-# invariant holds at every level: can_read_secrets never widens with
-# sharing. Runtime resolution for executions is app-level (server-side
-# policy on metadata.visibility), deliberately NOT modeled here — no FGA
-# relation could allow a member's execution to use a secret while denying
-# the same member's reveal.
-#
-# Run with:
-#   fga model test --tests org-shared-environment.fga.yaml
-#
-# Scenario: org "acme" has creator carol, plain member dave, read-only
-# viewer vera, and an explicit viewer grant for frank on the private
-# environment; mallory belongs to an unrelated org. Carol owns a PRIVATE environment and an
-# ORG-shared environment.
-name: org-shared-environment
-model_file: ../model/fga.mod
-
-tuples:
-  # --- Org memberships ---
-  - user: identity_account:carol
-    relation: member
-    object: organization:acme
-  - user: identity_account:dave
-    relation: member
-    object: organization:acme
-  - user: identity_account:frank
-    relation: member
-    object: organization:acme
-  - user: identity_account:vera
-    relation: viewer
-    object: organization:acme
-  - user: identity_account:mallory
-    relation: member
-    object: organization:outsider
-
-  # --- PRIVATE environment (creation tuples only) ---
-  - user: organization:acme
-    relation: organization
-    object: environment:private-creds
-  - user: identity_account:carol
-    relation: owner
-    object: environment:private-creds
-  - user: identity_account:carol
-    relation: creator
-    object: environment:private-creds
-  # Explicit viewer grant to frank (redacted view, no secret reveal).
-  - user: identity_account:frank
-    relation: viewer
-    object: environment:private-creds
-
-  # --- ORG-shared environment (creation tuples + the org viewer tuple) ---
-  - user: organization:acme
-    relation: organization
-    object: environment:team-creds
-  - user: identity_account:carol
-    relation: owner
-    object: environment:team-creds
-  - user: identity_account:carol
-    relation: creator
-    object: environment:team-creds
-  - user: organization:acme#viewer
-    relation: viewer
-    object: environment:team-creds
-
-tests:
-  - name: private-environment-invisible-to-org-members
-    check:
-      - user: identity_account:dave
-        object: environment:private-creds
-        assertions:
-          can_view: false
-          can_edit: false
-          can_read_secrets: false
-
-  - name: explicit-viewer-grant-is-redacted-view-only
-    check:
-      - user: identity_account:frank
-        object: environment:private-creds
-        assertions:
-          can_view: true
-          can_edit: false
-          can_read_secrets: false
-
-  - name: org-sharing-grants-members-redacted-view-only
-    check:
-      - user: identity_account:dave
-        object: environment:team-creds
-        assertions:
-          can_view: true
-          can_edit: false
-          can_delete: false
-          can_grant_access: false
-          # THE invariant: org sharing never widens secret reveal.
-          can_read_secrets: false
-
-  - name: org-sharing-reaches-read-only-viewers-redacted-too
-    check:
-      # cloud#257: the org viewer role is read-only by definition — an
-      # org-shared environment is readable (REDACTED) to vera, secrets never.
-      - user: identity_account:vera
-        object: environment:team-creds
-        assertions:
-          can_view: true
-          can_edit: false
-          can_read_secrets: false
-      - user: identity_account:vera
-        object: environment:private-creds
-        assertions:
-          can_view: false
-
-  - name: creator-keeps-full-access-on-shared-environment
-    check:
-      - user: identity_account:carol
-        object: environment:team-creds
-        assertions:
-          can_view: true
-          can_edit: true
-          can_delete: true
-          can_read_secrets: true
-
-  - name: org-sharing-does-not-leak-across-orgs
-    check:
-      - user: identity_account:mallory
-        object: environment:team-creds
-        assertions:
-          can_view: false
-          can_read_secrets: false
-
-  - name: org-members-can-list-shared-environments-only
-    list_objects:
-      - user: identity_account:dave
-        type: environment
-        assertions:
-          can_view:
-            - environment:team-creds

package/src/authorization/__tests__/fixtures/fga/platform-visibility.fga.yaml

@@ -1,199 +0,0 @@
-# Pinned copy of stigmer-cloud backend/services/stigmer-server/fga/tests/platform-visibility.fga.yaml
-# as changed by stigmer-cloud#765 (the OpenFGA store test the cloud runs against its live model).
-# The body below is byte-identical to the source; the cloud re-runs the LIVE
-# file against this evaluator at the re-pin, so a stale copy is caught there.
-# Store tests for platform visibility (visibility_platform).
-#
-# Verifies the userset chain end-to-end against the authorization model:
-#
-#   blueprint#platform_viewer -> identity_provider#platform_user
-#     -> member from managed_org -> organization#member
-#
-# Run with:
-#   fga model test --tests platform-visibility.fga.yaml
-#
-# Scenario: "planton" is a platform org owning identity_provider:idp1, which
-# manages two customer orgs (acme, beta). Blueprints owned by planton and
-# shared with visibility_platform must be viewable/executable by acme and
-# beta members, invisible to members of an unrelated org, and never editable
-# by managed-org members.
-name: platform-visibility
-model_file: ../model/fga.mod
-
-tuples:
-  # --- Platform tenancy: idp1 is owned by planton and manages acme + beta ---
-  - user: organization:planton
-    relation: organization
-    object: identity_provider:idp1
-  - user: organization:acme
-    relation: managed_org
-    object: identity_provider:idp1
-  - user: organization:beta
-    relation: managed_org
-    object: identity_provider:idp1
-
-  # --- Org memberships ---
-  - user: identity_account:swarup
-    relation: owner
-    object: organization:planton
-  - user: identity_account:priya
-    relation: member
-    object: organization:planton
-  - user: identity_account:veda
-    relation: viewer
-    object: organization:planton
-  - user: identity_account:alice
-    relation: member
-    object: organization:acme
-  - user: identity_account:bob
-    relation: member
-    object: organization:beta
-  - user: identity_account:mallory
-    relation: member
-    object: organization:outsider
-
-  # --- Platform-shared agent (visibility_platform) owned by planton ---
-  # PLATFORM carries the org floor tuple too (viewer@org#viewer — the org's
-  # full read audience, cloud#257), exactly as VisibilityTupleReconciler
-  # writes it, so everyone in the platform org keeps access.
-  - user: organization:planton
-    relation: organization
-    object: agent:sara
-  - user: identity_account:swarup
-    relation: owner
-    object: agent:sara
-  - user: identity_provider:idp1#platform_user
-    relation: platform_viewer
-    object: agent:sara
-  - user: organization:planton#viewer
-    relation: viewer
-    object: agent:sara
-
-  # --- Private agent owned by planton (no platform_viewer tuple) ---
-  - user: organization:planton
-    relation: organization
-    object: agent:internal-bot
-  - user: identity_account:swarup
-    relation: owner
-    object: agent:internal-bot
-
-  # --- Platform-shared blueprints of the other three kinds ---
-  - user: organization:planton
-    relation: organization
-    object: skill:research
-  - user: identity_provider:idp1#platform_user
-    relation: platform_viewer
-    object: skill:research
-  - user: organization:planton
-    relation: organization
-    object: workflow:onboarding
-  - user: identity_provider:idp1#platform_user
-    relation: platform_viewer
-    object: workflow:onboarding
-  - user: organization:planton
-    relation: organization
-    object: mcp_server:github
-  - user: identity_provider:idp1#platform_user
-    relation: platform_viewer
-    object: mcp_server:github
-
-tests:
-  - name: managed-org members can view and execute a platform-shared agent
-    check:
-      - user: identity_account:alice
-        object: agent:sara
-        assertions:
-          can_view: true
-          can_execute: true
-          can_create_instance: true
-          can_edit: false
-          can_delete: false
-      - user: identity_account:bob
-        object: agent:sara
-        assertions:
-          can_view: true
-          can_execute: true
-
-  - name: outsiders and unrelated orgs get nothing from platform visibility
-    check:
-      - user: identity_account:mallory
-        object: agent:sara
-        assertions:
-          can_view: false
-          can_execute: false
-          can_create_instance: false
-
-  - name: platform org's own members keep access via the org floor tuple
-    check:
-      - user: identity_account:priya
-        object: agent:sara
-        assertions:
-          can_view: true
-          can_execute: true
-          can_edit: false
-      # cloud#257: the viewer-shaped org floor reaches the platform org's own
-      # read-only viewers too. (Managed-org audiences are deliberately
-      # narrower: platform_user resolves member-from-managed_org.)
-      - user: identity_account:veda
-        object: agent:sara
-        assertions:
-          can_view: true
-          can_edit: false
-
-  - name: platform visibility does not leak the platform org's private agents
-    check:
-      - user: identity_account:alice
-        object: agent:internal-bot
-        assertions:
-          can_view: false
-          can_execute: false
-      # Private is real: even the platform org's own members see nothing
-      # without an explicit visibility tuple.
-      - user: identity_account:priya
-        object: agent:internal-bot
-        assertions:
-          can_view: false
-          can_execute: false
-
-  - name: platform-shared skill is usable by managed-org members
-    check:
-      - user: identity_account:alice
-        object: skill:research
-        assertions:
-          can_view: true
-          can_use: true
-          can_edit: false
-
-  - name: platform-shared workflow is viewable and executable by managed-org members
-    check:
-      - user: identity_account:alice
-        object: workflow:onboarding
-        assertions:
-          can_view: true
-          can_execute: true
-
-  - name: platform-shared mcp_server is usable by managed-org members
-    check:
-      - user: identity_account:alice
-        object: mcp_server:github
-        assertions:
-          can_view: true
-          can_use: true
-          can_connect: true
-
-  - name: platform owner retains full control of shared blueprints
-    check:
-      - user: identity_account:swarup
-        object: agent:sara
-        assertions:
-          can_view: true
-          can_edit: true
-          can_delete: true
-
-  - name: list managed-org member's viewable agents includes only the shared one
-    list_objects:
-      - user: identity_account:alice
-        type: agent
-        assertions:
-          can_view:
-            - agent:sara

package/src/authorization/__tests__/fixtures/fga/provider-standing-viewer.fga.yaml

@@ -1,40 +0,0 @@
-# Pinned copy of stigmer-cloud backend/services/stigmer-server/fga/tests/provider-standing-viewer.fga.yaml
-# at commit b87dd1170 (the OpenFGA store test the cloud runs against its live model).
-# The body below is byte-identical to the source; the cloud re-runs the LIVE
-# file against this evaluator at the re-pin, so a stale copy is caught there.
-# Store tests for the provider-standing view permission (cloud#447).
-#
-# can_view_provider_standing gates the read-only operator console view of
-# platform provider standing (the canary-probe verdicts the cloud#370
-# probe records). It derives from the platform operator role — provider
-# account health is platform-internal, so ordinary tenants (even org
-# owners) never see it, regardless of what they own.
-#
-# Run with:
-#   fga model test --tests provider-standing-viewer.fga.yaml
-name: provider-standing-viewer
-model_file: ../model/fga.mod
-
-tuples:
-  # A platform operator.
-  - user: identity_account:opal
-    relation: operator
-    object: platform:stigmer
-
-  # A tenant org owner — owns everything in their org, nothing on the
-  # platform.
-  - user: identity_account:mallory
-    relation: owner
-    object: organization:acme
-
-tests:
-  - name: operator may view provider standing, tenants may not
-    check:
-      - user: identity_account:opal
-        object: platform:stigmer
-        assertions:
-          can_view_provider_standing: true
-      - user: identity_account:mallory
-        object: platform:stigmer
-        assertions:
-          can_view_provider_standing: false