@stigmer/server 3.27.1 → 3.28.0

package/src/authorization/model/organization.ts

@@ -1,59 +0,0 @@
-/**
- * Transcript of fga/model/tenancy/organization.fga — the root of the
- * model: no parent, the four roles as a ladder (`owner ⊂ admin ⊂ member
- * ⊂ viewer`, each `[identity_account] or <the rung above>`), and every
- * `can_create_*` an organization gates.
- *
- * In open source the `[identity_account]` tuples of this type ARE the
- * IamPolicy rows: 2b's role lifecycle writes the creator's `owner` row and
- * the grant path writes every other role, so the tuple source reads them
- * from the IamPolicyStore and the derivation writes no owner tuple for
- * this kind (derived-tuples.ts). `guest` is the cloud's anonymous
- * share-link visitor; no open-source lane mints one (claim check C5), so
- * the relation resolves to nothing and `can_create_session: member or
- * guest` is `member` here — the transcript still carries the line.
- * `can_create_team` is carried the same way: open source serves no Team
- * kind, so nothing here asks it.
- */
-import { ApiResourceKind } from "@stigmer/protos/ai/stigmer/commons/apiresource/apiresourcekind/api_resource_kind_pb";
-import { OrganizationSchema } from "@stigmer/protos/ai/stigmer/tenancy/organization/v1/api_pb";
-
-import { computed, declareKind, direct, objectOf, union } from "./rewrite.js";
-
-export const organizationDeclaration = declareKind({
-  kind: ApiResourceKind.organization,
-  schema: OrganizationSchema,
-  source: "fga/model/tenancy/organization.fga",
-  relations: [
-    ["owner", direct(objectOf("identity_account"))],
-    ["admin", union(direct(objectOf("identity_account")), computed("owner"))],
-    ["member", union(direct(objectOf("identity_account")), computed("admin"))],
-    ["viewer", union(direct(objectOf("identity_account")), computed("member"))],
-    ["guest", direct(objectOf("identity_account"))],
-    ["can_view", computed("viewer")],
-    ["can_edit", computed("admin")],
-    ["can_delete", computed("owner")],
-    ["can_manage_members", computed("admin")],
-    ["can_assign_roles", computed("owner")],
-    ["can_create_agent", computed("admin")],
-    ["can_create_workflow", computed("admin")],
-    ["can_create_session", union(computed("member"), computed("guest"))],
-    ["can_create_environment", computed("member")],
-    ["can_create_skill", computed("admin")],
-    ["can_create_plugin", computed("admin")],
-    ["can_create_mcp_server", computed("admin")],
-    ["can_create_idp", computed("admin")],
-    ["can_create_identity_account", computed("admin")],
-    ["can_create_oauth_app", computed("admin")],
-    ["can_create_platform_client", computed("admin")],
-    ["can_create_channel_app", computed("admin")],
-    ["can_create_execution_in", union(computed("member"), computed("guest"))],
-    ["can_create_agent_share", computed("admin")],
-    ["can_create_agent_instance", computed("member")],
-    ["can_create_team", computed("admin")],
-    ["can_grant_access", computed("admin")],
-    ["can_view_access", computed("viewer")],
-    ["can_view_billing", computed("viewer")],
-    ["can_manage_billing", computed("admin")],
-  ],
-});

package/src/authorization/model/platform_client.ts

@@ -1,43 +0,0 @@
-/**
- * Transcript of fga/model/iam/platform_client.fga — relation for relation
- * the oauth_app shape: organization-scoped, an `owner` with no admin arm
- * and a `viewer` that has one. A platform client holds credential material,
- * so the model is restricted: its creator (the owner) edits, deletes,
- * rotates and grants; the organization's admins may view it; ordinary
- * members have no access at all, which is why listByOrg narrows through
- * the list read scope. There is no public level.
- */
-import { ApiResourceKind } from "@stigmer/protos/ai/stigmer/commons/apiresource/apiresourcekind/api_resource_kind_pb";
-import { PlatformClientSchema } from "@stigmer/protos/ai/stigmer/iam/platformclient/v1/api_pb";
-
-import {
-  computed,
-  declareKind,
-  direct,
-  from,
-  objectOf,
-  union,
-} from "./rewrite.js";
-
-export const platformClientDeclaration = declareKind({
-  kind: ApiResourceKind.platform_client,
-  schema: PlatformClientSchema,
-  source: "fga/model/iam/platform_client.fga",
-  relations: [
-    ["organization", direct(objectOf("organization"))],
-    ["owner", direct(objectOf("identity_account"))],
-    [
-      "viewer",
-      union(
-        direct(objectOf("identity_account")),
-        computed("owner"),
-        from("admin", "organization"),
-      ),
-    ],
-    ["can_view", computed("viewer")],
-    ["can_edit", computed("owner")],
-    ["can_delete", computed("owner")],
-    ["can_grant_access", computed("owner")],
-    ["can_view_access", computed("viewer")],
-  ],
-});

package/src/authorization/model/plugin.ts

@@ -1,66 +0,0 @@
-/**
- * Transcript of fga/model/agentic/plugin.fga — the unit of install, shaped
- * exactly like a skill: an organization-owned blueprint whose owner is the
- * installer (and, through the organization, its admins), whose viewers are
- * the org's members and viewers and the platform viewer. Its verbs are the blueprint set: `can_view`, `can_edit`
- * (visibility), `can_delete` (uninstall), `can_grant_access`,
- * `can_view_access`; `can_use` is carried as the model's word for
- * "install from" though no wire permission names it yet. `team#member` on
- * `viewer` is the Enterprise team grant, which no open-source tuple ever
- * names.
- *
- * The members a plugin materialises are NOT reached through this type:
- * each is an ordinary skill, MCP server, agent or workflow with its own
- * tuples, written by its own chain as the installing caller.
- */
-import { PluginSchema } from "@stigmer/protos/ai/stigmer/agentic/plugin/v1/api_pb";
-import { ApiResourceKind } from "@stigmer/protos/ai/stigmer/commons/apiresource/apiresourcekind/api_resource_kind_pb";
-
-import {
-  computed,
-  declareKind,
-  direct,
-  from,
-  objectOf,
-  union,
-  usersetOf,
-} from "./rewrite.js";
-
-export const pluginDeclaration = declareKind({
-  kind: ApiResourceKind.plugin,
-  schema: PluginSchema,
-  source: "fga/model/agentic/plugin.fga",
-  relations: [
-    ["organization", direct(objectOf("organization"))],
-    [
-      "owner",
-      union(
-        direct(objectOf("identity_account")),
-        from("admin", "organization"),
-      ),
-    ],
-    [
-      "platform_viewer",
-      direct(usersetOf("identity_provider", "platform_user")),
-    ],
-    [
-      "viewer",
-      union(
-        direct(
-          objectOf("identity_account"),
-          usersetOf("organization", "member"),
-          usersetOf("organization", "viewer"),
-          usersetOf("team", "member"),
-        ),
-        computed("owner"),
-        computed("platform_viewer"),
-      ),
-    ],
-    ["can_view", computed("viewer")],
-    ["can_edit", computed("owner")],
-    ["can_delete", computed("owner")],
-    ["can_use", computed("viewer")],
-    ["can_grant_access", computed("owner")],
-    ["can_view_access", computed("viewer")],
-  ],
-});

package/src/authorization/model/schedule.ts

@@ -1,49 +0,0 @@
-/**
- * Transcript of fga/model/agentic/schedule.fga — a scheduled run's
- * definition, admin-owned like a blueprint and viewable by its owners and
- * explicit grantees. The sessions its fires create name it back through
- * `session#schedule`, a link the cloud writes and this edition does not
- * (session.ts); the schedule's own relations are unaffected. An explicit
- * grant may name an Enterprise team (`team#member`), which no open-source
- * tuple ever does.
- */
-import { ScheduleSchema } from "@stigmer/protos/ai/stigmer/agentic/schedule/v1/api_pb";
-import { ApiResourceKind } from "@stigmer/protos/ai/stigmer/commons/apiresource/apiresourcekind/api_resource_kind_pb";
-
-import {
-  computed,
-  declareKind,
-  direct,
-  from,
-  objectOf,
-  union,
-  usersetOf,
-} from "./rewrite.js";
-
-export const scheduleDeclaration = declareKind({
-  kind: ApiResourceKind.schedule,
-  schema: ScheduleSchema,
-  source: "fga/model/agentic/schedule.fga",
-  relations: [
-    ["organization", direct(objectOf("organization"))],
-    [
-      "owner",
-      union(
-        direct(objectOf("identity_account")),
-        from("admin", "organization"),
-      ),
-    ],
-    [
-      "viewer",
-      union(
-        direct(objectOf("identity_account"), usersetOf("team", "member")),
-        computed("owner"),
-      ),
-    ],
-    ["can_view", computed("viewer")],
-    ["can_edit", computed("owner")],
-    ["can_delete", computed("owner")],
-    ["can_grant_access", computed("owner")],
-    ["can_view_access", computed("viewer")],
-  ],
-});

package/src/authorization/model/session.ts

@@ -1,50 +0,0 @@
-/**
- * Transcript of fga/model/agentic/session.fga — a personal resource: the
- * owner and explicit grantees, and NO admin arm anywhere ("private
- * conversations that admins have no business accessing", the file's own
- * words). Three parent links beside the organization: `agent_instance`,
- * `channel` and `schedule`. None is a `kind_meta` fact — the cloud's
- * channel and schedule lanes write them — so on this edition the
- * derivation produces no such tuple and `viewer from channel` / `viewer
- * from schedule` resolve to nobody; the lines stand in the transcript
- * because they are the model's, and a scheduled run reaches its creator
- * through the fire caller's stamp on the session instead.
- */
-import { SessionSchema } from "@stigmer/protos/ai/stigmer/agentic/session/v1/api_pb";
-import { ApiResourceKind } from "@stigmer/protos/ai/stigmer/commons/apiresource/apiresourcekind/api_resource_kind_pb";
-
-import {
-  computed,
-  declareKind,
-  direct,
-  from,
-  objectOf,
-  union,
-} from "./rewrite.js";
-
-export const sessionDeclaration = declareKind({
-  kind: ApiResourceKind.session,
-  schema: SessionSchema,
-  source: "fga/model/agentic/session.fga",
-  relations: [
-    ["organization", direct(objectOf("organization"))],
-    ["agent_instance", direct(objectOf("agent_instance"))],
-    ["channel", direct(objectOf("agent_channel"))],
-    ["schedule", direct(objectOf("schedule"))],
-    ["owner", direct(objectOf("identity_account"))],
-    ["viewer", union(direct(objectOf("identity_account")), computed("owner"))],
-    [
-      "can_view",
-      union(
-        computed("viewer"),
-        from("viewer", "channel"),
-        from("viewer", "schedule"),
-      ),
-    ],
-    ["can_edit", computed("owner")],
-    ["can_delete", computed("owner")],
-    ["can_create_execution_in", computed("viewer")],
-    ["can_grant_access", computed("owner")],
-    ["can_view_access", computed("viewer")],
-  ],
-});

package/src/authorization/model/skill.ts

@@ -1,60 +0,0 @@
-/**
- * Transcript of fga/model/agentic/skill.fga — a blueprint whose verbs are
- * `can_use` and `can_clone` rather than `can_execute`. Only `can_view`,
- * `can_edit`, `can_delete`, `can_grant_access` and `can_view_access` are
- * in the wire's IamPermission vocabulary; the others are the model's and
- * are carried so the transcript is the file. `team#member` on `viewer` is
- * the Enterprise team grant, which no open-source tuple ever names.
- */
-import { SkillSchema } from "@stigmer/protos/ai/stigmer/agentic/skill/v1/api_pb";
-import { ApiResourceKind } from "@stigmer/protos/ai/stigmer/commons/apiresource/apiresourcekind/api_resource_kind_pb";
-
-import {
-  computed,
-  declareKind,
-  direct,
-  from,
-  objectOf,
-  union,
-  usersetOf,
-} from "./rewrite.js";
-
-export const skillDeclaration = declareKind({
-  kind: ApiResourceKind.skill,
-  schema: SkillSchema,
-  source: "fga/model/agentic/skill.fga",
-  relations: [
-    ["organization", direct(objectOf("organization"))],
-    [
-      "owner",
-      union(
-        direct(objectOf("identity_account")),
-        from("admin", "organization"),
-      ),
-    ],
-    [
-      "platform_viewer",
-      direct(usersetOf("identity_provider", "platform_user")),
-    ],
-    [
-      "viewer",
-      union(
-        direct(
-          objectOf("identity_account"),
-          usersetOf("organization", "member"),
-          usersetOf("organization", "viewer"),
-          usersetOf("team", "member"),
-        ),
-        computed("owner"),
-        computed("platform_viewer"),
-      ),
-    ],
-    ["can_view", computed("viewer")],
-    ["can_edit", computed("owner")],
-    ["can_delete", computed("owner")],
-    ["can_use", computed("viewer")],
-    ["can_clone", computed("viewer")],
-    ["can_grant_access", computed("owner")],
-    ["can_view_access", computed("viewer")],
-  ],
-});

package/src/authorization/model/workflow.ts

@@ -1,60 +0,0 @@
-/**
- * Transcript of fga/model/agentic/workflow.fga — the agent's shape
- * without `can_create_instance` (a workflow instance is created through
- * the workflow-instance lane, gated by the organization). Kept as its own
- * transcript, not a shared "blueprint" helper, so the file-by-file drift
- * compare sees exactly this file's lines. `team#member` on `viewer` is the
- * Enterprise team grant, which no open-source tuple ever names.
- */
-import { WorkflowSchema } from "@stigmer/protos/ai/stigmer/agentic/workflow/v1/api_pb";
-import { ApiResourceKind } from "@stigmer/protos/ai/stigmer/commons/apiresource/apiresourcekind/api_resource_kind_pb";
-
-import {
-  computed,
-  declareKind,
-  direct,
-  from,
-  objectOf,
-  union,
-  usersetOf,
-} from "./rewrite.js";
-
-export const workflowDeclaration = declareKind({
-  kind: ApiResourceKind.workflow,
-  schema: WorkflowSchema,
-  source: "fga/model/agentic/workflow.fga",
-  relations: [
-    ["organization", direct(objectOf("organization"))],
-    [
-      "owner",
-      union(
-        direct(objectOf("identity_account")),
-        from("admin", "organization"),
-      ),
-    ],
-    [
-      "platform_viewer",
-      direct(usersetOf("identity_provider", "platform_user")),
-    ],
-    [
-      "viewer",
-      union(
-        direct(
-          objectOf("identity_account"),
-          usersetOf("organization", "member"),
-          usersetOf("organization", "viewer"),
-          usersetOf("team", "member"),
-        ),
-        computed("owner"),
-        computed("platform_viewer"),
-      ),
-    ],
-    ["can_view", computed("viewer")],
-    ["can_edit", computed("owner")],
-    ["can_delete", computed("owner")],
-    ["can_execute", computed("viewer")],
-    ["can_clone", computed("viewer")],
-    ["can_grant_access", computed("owner")],
-    ["can_view_access", computed("viewer")],
-  ],
-});

package/src/authorization/model/workflow_execution.ts

@@ -1,46 +0,0 @@
-/**
- * Transcript of fga/model/agentic/workflow_execution.fga — a run with an
- * owner of its own (the person who triggered it; `kind_meta` attribution
- * DIRECT, unlike agent_execution's inherited owner) and two ways in for
- * others: an explicit per-run grant, or the instance's opt-in run
- * audience through `execution_viewer from workflow_instance`, standing on
- * the `workflow_instance` link the derivation writes from
- * `spec.workflow_instance_id`. No `can_delete`: run history outlives its
- * instance by design. The per-run grant may name an Enterprise team
- * (`team#member`), which no open-source tuple ever does.
- */
-import { WorkflowExecutionSchema } from "@stigmer/protos/ai/stigmer/agentic/workflowexecution/v1/api_pb";
-import { ApiResourceKind } from "@stigmer/protos/ai/stigmer/commons/apiresource/apiresourcekind/api_resource_kind_pb";
-
-import {
-  computed,
-  declareKind,
-  direct,
-  from,
-  objectOf,
-  union,
-  usersetOf,
-} from "./rewrite.js";
-
-export const workflowExecutionDeclaration = declareKind({
-  kind: ApiResourceKind.workflow_execution,
-  schema: WorkflowExecutionSchema,
-  source: "fga/model/agentic/workflow_execution.fga",
-  relations: [
-    ["organization", direct(objectOf("organization"))],
-    ["workflow_instance", direct(objectOf("workflow_instance"))],
-    ["owner", direct(objectOf("identity_account"))],
-    [
-      "viewer",
-      union(
-        direct(objectOf("identity_account"), usersetOf("team", "member")),
-        computed("owner"),
-        from("execution_viewer", "workflow_instance"),
-      ),
-    ],
-    ["can_view", computed("viewer")],
-    ["can_edit", computed("owner")],
-    ["can_grant_access", computed("owner")],
-    ["can_view_access", computed("viewer")],
-  ],
-});

package/src/authorization/model/workflow_instance.ts

@@ -1,125 +0,0 @@
-/**
- * Transcript of fga/model/agentic/workflow_instance.fga — the agent
- * instance's shape plus one relation of its own: `execution_viewer`, the
- * opt-in audience for the instance's RUN history, kept apart from
- * `viewer` so making an instance org-runnable never exposes other
- * people's run inputs and outputs. Consumed by workflow_execution through
- * `execution_viewer from workflow_instance`.
- *
- * `execution_viewer` is derived here from `spec.execution_visibility`
- * (the second rule `kind_meta` cannot express): `organization` derives
- * `#execution_viewer@organization:<org>#viewer` — the organization's full
- * read audience, the shape the file's comment names and the cloud's own
- * store test writes, with `#member` the legacy shape the line still
- * admits — and `private` or unset derives nothing, so each run stays its
- * triggerer's. The cloud has no writer for this tuple today; this
- * edition enforces the field as the contract states it.
- *
- * `team#member` on `viewer` is the Enterprise team grant, which no
- * open-source tuple ever names; `execution_viewer` is not a grantable role
- * and admits no team.
- */
-import { isMessage } from "@bufbuild/protobuf";
-
-import { WorkflowSchema } from "@stigmer/protos/ai/stigmer/agentic/workflow/v1/api_pb";
-import { WorkflowInstanceSchema } from "@stigmer/protos/ai/stigmer/agentic/workflowinstance/v1/api_pb";
-import { WorkflowExecutionVisibility } from "@stigmer/protos/ai/stigmer/agentic/workflowinstance/v1/spec_pb";
-import { ApiResourceKind } from "@stigmer/protos/ai/stigmer/commons/apiresource/apiresourcekind/api_resource_kind_pb";
-
-import { defaultOfBlueprint } from "./default-of.js";
-import type { DerivedRelation } from "./rewrite.js";
-import {
-  computed,
-  declareKind,
-  direct,
-  from,
-  objectOf,
-  union,
-  usersetOf,
-} from "./rewrite.js";
-
-const executionViewer: DerivedRelation = (object, row) => {
-  if (!isMessage(row, WorkflowInstanceSchema)) {
-    return Promise.resolve([]);
-  }
-  const level =
-    row.spec?.executionVisibility ?? WorkflowExecutionVisibility.unspecified;
-  switch (level) {
-    case WorkflowExecutionVisibility.organization: {
-      const org = row.metadata?.org ?? "";
-      return Promise.resolve(
-        org === ""
-          ? []
-          : [
-              {
-                object,
-                relation: "execution_viewer",
-                subject: {
-                  form: "userset",
-                  object: { type: "organization", id: org },
-                  relation: "viewer",
-                },
-              },
-            ],
-      );
-    }
-    case WorkflowExecutionVisibility.private:
-    case WorkflowExecutionVisibility.unspecified:
-      return Promise.resolve([]);
-    default: {
-      const exhaustive: never = level;
-      throw new Error(`unknown execution visibility: ${String(exhaustive)}`);
-    }
-  }
-};
-
-export const workflowInstanceDeclaration = declareKind({
-  kind: ApiResourceKind.workflow_instance,
-  schema: WorkflowInstanceSchema,
-  source: "fga/model/agentic/workflow_instance.fga",
-  relations: [
-    ["organization", direct(objectOf("organization"))],
-    ["workflow", direct(objectOf("workflow"))],
-    ["default_of", direct(objectOf("workflow"))],
-    ["owner", direct(objectOf("identity_account"))],
-    [
-      "viewer",
-      union(
-        direct(
-          objectOf("identity_account"),
-          usersetOf("organization", "member"),
-          usersetOf("organization", "viewer"),
-          usersetOf("team", "member"),
-        ),
-        computed("owner"),
-        from("viewer", "default_of"),
-      ),
-    ],
-    [
-      "execution_viewer",
-      direct(
-        objectOf("identity_account"),
-        usersetOf("organization", "member"),
-        usersetOf("organization", "viewer"),
-      ),
-    ],
-    ["can_view", computed("viewer")],
-    ["can_execute", computed("can_view")],
-    ["can_edit", computed("owner")],
-    ["can_delete", computed("owner")],
-    ["can_grant_access", computed("owner")],
-    ["can_view_access", computed("viewer")],
-  ],
-  derived: [
-    [
-      "default_of",
-      defaultOfBlueprint({
-        kind: ApiResourceKind.workflow,
-        schema: WorkflowSchema,
-        defaultInstanceIdOf: (workflow) =>
-          workflow.status?.defaultInstanceId ?? "",
-      }),
-    ],
-    ["execution_viewer", executionViewer],
-  ],
-});