@stigmer/server 3.27.2 → 3.28.0

package/src/authorization/__tests__/fixtures/fga/channel-participation.fga.yaml

@@ -1,201 +0,0 @@
-# Pinned copy of stigmer-cloud backend/services/stigmer-server/fga/tests/channel-participation.fga.yaml
-# at commit b87dd1170 (the OpenFGA store test the cloud runs against its live model).
-# The body below is byte-identical to the source; the cloud re-runs the LIVE
-# file against this evaluator at the re-pin, so a stale copy is caught there.
-# Store tests for conversation participation on agent channels (the
-# `participant` relation and `can_participate` permission,
-# channel-conversations DD-010).
-#
-# The model change under test, in one line each:
-#   participant: [identity_account] or owner   (owner participates free)
-#   viewer:      [identity_account] or participant   (widened from `or owner`)
-#   can_participate: participant               (the reply/takeover bar)
-#
-# The invariants this suite pins:
-#   1. Read and speak are DIFFERENT powers: a granted viewer can see
-#      conversations but cannot participate (the DD-010 rejected
-#      alternative "widen viewer alone" stays rejected).
-#   2. Participation is NOT configuration: a participant can never
-#      edit/delete/grant on the channel.
-#   3. The viewer widening is behavior-preserving for existing grants:
-#      owner ⊆ participant ⊆ viewer, so every pre-DD-010 owner/admin
-#      read keeps working (asserted below, byte-identical semantics).
-#   4. Conversation READ rides the existing session.can_view composition
-#      (`viewer from channel`) unchanged, still read-only — participants
-#      inherit view on channel sessions but never
-#      can_create_execution_in (DD-012's read-only-by-construction).
-#   5. The personal-session invariant is untouched: a participant sees
-#      nothing of anyone's console sessions.
-#
-# Run with:
-#   fga model test --tests channel-participation.fga.yaml
-#
-# Scenario: org "acme" has admin alice, member bob (who connected the
-# WhatsApp channel and owns it), member trina (an ISC trainer granted
-# participant — the DD-010 launch persona), member carol (granted plain
-# viewer), and member dave (no relation to the channel). "rival" is
-# another org whose admin eve must see nothing. The channel session is
-# owned by acme's system-channel account; bob also has a personal
-# console session to prove invariant 5.
-name: channel-participation
-model_file: ../model/fga.mod
-
-tuples:
-  # --- Org roles ---
-  - user: identity_account:alice
-    relation: admin
-    object: organization:acme
-  - user: identity_account:bob
-    relation: member
-    object: organization:acme
-  - user: identity_account:trina
-    relation: member
-    object: organization:acme
-  - user: identity_account:carol
-    relation: member
-    object: organization:acme
-  - user: identity_account:dave
-    relation: member
-    object: organization:acme
-  - user: identity_account:eve
-    relation: admin
-    object: organization:rival
-
-  # --- The AgentChannel (tuples written on create: org link + creator owner) ---
-  - user: organization:acme
-    relation: organization
-    object: agent_channel:wa-line
-  - user: identity_account:bob
-    relation: owner
-    object: agent_channel:wa-line
-
-  # --- The DD-010 grants (IamPolicy-written: participant vs plain viewer) ---
-  - user: identity_account:trina
-    relation: participant
-    object: agent_channel:wa-line
-  - user: identity_account:carol
-    relation: viewer
-    object: agent_channel:wa-line
-
-  # --- A channel session (owned by the org's system-channel account) ---
-  - user: organization:acme
-    relation: organization
-    object: session:member-chat
-  - user: identity_account:sys-channel-acme
-    relation: owner
-    object: session:member-chat
-  # The structural link written by ChannelSessionLinkStep:
-  - user: agent_channel:wa-line
-    relation: channel
-    object: session:member-chat
-
-  # --- Bob's personal console session (invariant 5's control subject) ---
-  - user: organization:acme
-    relation: organization
-    object: session:bobs-chat
-  - user: identity_account:bob
-    relation: owner
-    object: session:bobs-chat
-
-tests:
-  - name: a granted participant may read and speak but never configure
-    check:
-      - user: identity_account:trina
-        object: agent_channel:wa-line
-        assertions:
-          can_view: true
-          can_participate: true
-          can_edit: false
-          can_delete: false
-          can_grant_access: false
-          can_view_access: true
-
-  - name: a granted viewer may read but never speak — read and speak are different powers
-    check:
-      - user: identity_account:carol
-        object: agent_channel:wa-line
-        assertions:
-          can_view: true
-          can_participate: false
-          can_edit: false
-
-  - name: the channel owner participates without an explicit tuple
-    check:
-      - user: identity_account:bob
-        object: agent_channel:wa-line
-        assertions:
-          can_view: true
-          can_participate: true
-          can_edit: true
-          can_delete: true
-          can_grant_access: true
-
-  - name: an org admin participates through owner inheritance, no tuple needed
-    check:
-      - user: identity_account:alice
-        object: agent_channel:wa-line
-        assertions:
-          can_view: true
-          can_participate: true
-          can_edit: true
-
-  - name: a plain org member has no access of any kind
-    check:
-      - user: identity_account:dave
-        object: agent_channel:wa-line
-        assertions:
-          can_view: false
-          can_participate: false
-          can_edit: false
-          can_delete: false
-          can_grant_access: false
-          can_view_access: false
-
-  - name: a foreign org admin has no access of any kind
-    check:
-      - user: identity_account:eve
-        object: agent_channel:wa-line
-        assertions:
-          can_view: false
-          can_participate: false
-          can_edit: false
-
-  - name: participants inherit channel-session read through the existing composition, read-only
-    check:
-      - user: identity_account:trina
-        object: session:member-chat
-        assertions:
-          can_view: true
-          can_create_execution_in: false
-          can_edit: false
-          can_delete: false
-          can_grant_access: false
-
-  - name: the personal-session invariant is untouched — a participant sees no console sessions
-    check:
-      - user: identity_account:trina
-        object: session:bobs-chat
-        assertions:
-          can_view: false
-          can_create_execution_in: false
-
-  - name: list viewable and participable channels resolve per grant (drives listConversations)
-    list_objects:
-      - user: identity_account:trina
-        type: agent_channel
-        assertions:
-          can_view:
-            - agent_channel:wa-line
-          can_participate:
-            - agent_channel:wa-line
-      - user: identity_account:carol
-        type: agent_channel
-        assertions:
-          can_view:
-            - agent_channel:wa-line
-          can_participate: []
-      - user: identity_account:dave
-        type: agent_channel
-        assertions:
-          can_view: []
-          can_participate: []

package/src/authorization/__tests__/fixtures/fga/channel-session-visibility.fga.yaml

@@ -1,187 +0,0 @@
-# Pinned copy of stigmer-cloud backend/services/stigmer-server/fga/tests/channel-session-visibility.fga.yaml
-# at commit b87dd1170 (the OpenFGA store test the cloud runs against its live model).
-# The body below is byte-identical to the source; the cloud re-runs the LIVE
-# file against this evaluator at the re-pin, so a stale copy is caught there.
-# Store tests for channel-session read-only observability (the session
-# `channel` structural link).
-#
-# A session created by the channel runtime carries a single
-#   session#channel@agent_channel:<id>
-# tuple and inherits the channel's viewer set (connector owner + org admins
-# via `admin from organization` on agent_channel) into can_view ONLY —
-# `viewer from channel` is composed into session.can_view, deliberately NOT
-# into session.viewer, so channel observers never gain
-# can_create_execution_in / can_edit / can_delete / can_grant_access.
-# Executions follow through agent_execution's
-# `can_view: viewer or can_view from session`.
-#
-# The personal-session invariant is untouched: console sessions never carry
-# a channel tuple, so `viewer from channel` resolves to nothing for them
-# (pinned below and by session-personal-resource.fga.yaml).
-#
-# Run with:
-#   fga model test --tests channel-session-visibility.fga.yaml
-#
-# Scenario: org "acme" has admin alice, member bob (who connected the Slack
-# channel and owns it), and member carol (no relation to the channel).
-# "rival" is another org whose admin eve must see nothing. The channel
-# session is owned by acme's system-channel account; bob also has a normal
-# personal console session to prove the invariant.
-name: channel-session-visibility
-model_file: ../model/fga.mod
-
-tuples:
-  # --- Org roles ---
-  - user: identity_account:alice
-    relation: admin
-    object: organization:acme
-  - user: identity_account:bob
-    relation: member
-    object: organization:acme
-  - user: identity_account:carol
-    relation: member
-    object: organization:acme
-  - user: identity_account:eve
-    relation: admin
-    object: organization:rival
-
-  # --- The AgentChannel (tuples written on create: org link + creator owner) ---
-  - user: organization:acme
-    relation: organization
-    object: agent_channel:slack-conn
-  - user: identity_account:bob
-    relation: owner
-    object: agent_channel:slack-conn
-
-  # --- The channel session (owned by the org's system-channel account) ---
-  - user: organization:acme
-    relation: organization
-    object: session:channel-chat
-  - user: identity_account:sys-channel-acme
-    relation: owner
-    object: session:channel-chat
-  # The structural link written by ChannelSessionLinkStep:
-  - user: agent_channel:slack-conn
-    relation: channel
-    object: session:channel-chat
-
-  # --- An execution inside the channel session ---
-  - user: session:channel-chat
-    relation: session
-    object: agent_execution:channel-run-1
-
-  # --- bob's ordinary personal console session (NO channel tuple) ---
-  - user: organization:acme
-    relation: organization
-    object: session:bobs-chat
-  - user: identity_account:bob
-    relation: owner
-    object: session:bobs-chat
-  - user: session:bobs-chat
-    relation: session
-    object: agent_execution:bobs-run-1
-
-tests:
-  - name: channel connector can view the conversation but only view it
-    check:
-      - user: identity_account:bob
-        object: session:channel-chat
-        assertions:
-          can_view: true
-          can_create_execution_in: false
-          can_edit: false
-          can_delete: false
-          can_grant_access: false
-          can_view_access: false
-
-  - name: org admin inherits view through the channel, read-only
-    check:
-      - user: identity_account:alice
-        object: session:channel-chat
-        assertions:
-          can_view: true
-          can_create_execution_in: false
-          can_edit: false
-          can_delete: false
-          can_grant_access: false
-
-  - name: plain org member without channel access sees nothing
-    check:
-      - user: identity_account:carol
-        object: session:channel-chat
-        assertions:
-          can_view: false
-          can_create_execution_in: false
-
-  - name: another org's admin sees nothing
-    check:
-      - user: identity_account:eve
-        object: session:channel-chat
-        assertions:
-          can_view: false
-
-  - name: the system-channel account keeps full session ownership
-    check:
-      - user: identity_account:sys-channel-acme
-        object: session:channel-chat
-        assertions:
-          can_view: true
-          can_create_execution_in: true
-          can_edit: true
-          can_delete: true
-
-  - name: executions inherit read-only channel observability
-    check:
-      - user: identity_account:bob
-        object: agent_execution:channel-run-1
-        assertions:
-          can_view: true
-          can_edit: false
-      - user: identity_account:alice
-        object: agent_execution:channel-run-1
-        assertions:
-          can_view: true
-          can_edit: false
-      - user: identity_account:carol
-        object: agent_execution:channel-run-1
-        assertions:
-          can_view: false
-
-  - name: personal-session invariant is untouched by the channel model
-    check:
-      # Admin still has no path into a console session (no channel tuple).
-      - user: identity_account:alice
-        object: session:bobs-chat
-        assertions:
-          can_view: false
-          can_edit: false
-          can_delete: false
-      - user: identity_account:alice
-        object: agent_execution:bobs-run-1
-        assertions:
-          can_view: false
-      # And the owner's own access is unchanged.
-      - user: identity_account:bob
-        object: session:bobs-chat
-        assertions:
-          can_view: true
-          can_edit: true
-          can_create_execution_in: true
-
-  - name: list viewable sessions resolves the channel chain (drives listByChannel)
-    list_objects:
-      - user: identity_account:alice
-        type: session
-        assertions:
-          can_view:
-            - session:channel-chat
-      - user: identity_account:bob
-        type: session
-        assertions:
-          can_view:
-            - session:channel-chat
-            - session:bobs-chat
-      - user: identity_account:carol
-        type: session
-        assertions:
-          can_view: []

package/src/authorization/__tests__/fixtures/fga/default-instance-inheritance.fga.yaml

@@ -1,214 +0,0 @@
-# Pinned copy of stigmer-cloud backend/services/stigmer-server/fga/tests/default-instance-inheritance.fga.yaml
-# as changed by stigmer-cloud#765 (the OpenFGA store test the cloud runs against its live model).
-# The body below is byte-identical to the source; the cloud re-runs the LIVE
-# file against this evaluator at the re-pin, so a stale copy is caught there.
-# Store tests for default-instance structural inheritance (default_of).
-#
-# A blueprint's system-managed default instance carries a single
-#   instance#default_of@<blueprint>:<id>
-# tuple and inherits the blueprint's ENTIRE viewer set through
-# `viewer from default_of` — org members and platform users
-# (identity_provider#platform_user). No enum-derived
-# visibility tuples are ever written on default instances, so their access
-# can never drift from the template's.
-#
-# Run with:
-#   fga model test --tests default-instance-inheritance.fga.yaml
-#
-# Scenario: "planton" is a platform org owning identity_provider:idp1 which
-# manages customer org "acme". Planton authors agents/workflows at every
-# visibility level; each has a default instance linked via default_of.
-# Alice (acme member) reaches default instances of platform-shared
-# blueprints; planton members reach default instances of org-visible ones;
-# personal instances never leak.
-name: default-instance-inheritance
-model_file: ../model/fga.mod
-
-tuples:
-  # --- Platform tenancy: idp1 is owned by planton and manages acme ---
-  - user: organization:planton
-    relation: organization
-    object: identity_provider:idp1
-  - user: organization:acme
-    relation: managed_org
-    object: identity_provider:idp1
-
-  # --- Org memberships ---
-  - user: identity_account:swarup
-    relation: owner
-    object: organization:planton
-  - user: identity_account:priya
-    relation: member
-    object: organization:planton
-  - user: identity_account:veda
-    relation: viewer
-    object: organization:planton
-  - user: identity_account:alice
-    relation: member
-    object: organization:acme
-  - user: identity_account:mallory
-    relation: member
-    object: organization:outsider
-
-  # --- Platform-shared agent + its default instance ---
-  # PLATFORM carries the org floor tuple too (viewer@org#viewer — the org's
-  # full read audience), exactly as VisibilityTupleReconciler writes it.
-  - user: organization:planton
-    relation: organization
-    object: agent:sara
-  - user: identity_account:swarup
-    relation: owner
-    object: agent:sara
-  - user: identity_provider:idp1#platform_user
-    relation: platform_viewer
-    object: agent:sara
-  - user: organization:planton#viewer
-    relation: viewer
-    object: agent:sara
-  - user: organization:planton
-    relation: organization
-    object: agent_instance:sara-default
-  - user: agent:sara
-    relation: agent
-    object: agent_instance:sara-default
-  - user: identity_account:swarup
-    relation: owner
-    object: agent_instance:sara-default
-  - user: agent:sara
-    relation: default_of
-    object: agent_instance:sara-default
-
-  # --- Alice's personal instance of the shared agent (NO default_of) ---
-  - user: organization:acme
-    relation: organization
-    object: agent_instance:alice-personal
-  - user: agent:sara
-    relation: agent
-    object: agent_instance:alice-personal
-  - user: identity_account:alice
-    relation: owner
-    object: agent_instance:alice-personal
-
-  # --- Org-visible agent + its default instance ---
-  # ORG visibility is an explicit viewer tuple (viewer@org#viewer) — the
-  # unconditional `viewer from organization` grant is gone (private is real).
-  - user: organization:planton
-    relation: organization
-    object: agent:internal-bot
-  - user: identity_account:swarup
-    relation: owner
-    object: agent:internal-bot
-  - user: organization:planton#viewer
-    relation: viewer
-    object: agent:internal-bot
-  - user: organization:planton
-    relation: organization
-    object: agent_instance:internal-default
-  - user: agent:internal-bot
-    relation: agent
-    object: agent_instance:internal-default
-  - user: identity_account:swarup
-    relation: owner
-    object: agent_instance:internal-default
-  - user: agent:internal-bot
-    relation: default_of
-    object: agent_instance:internal-default
-
-  # --- Platform-shared workflow + its default instance ---
-  - user: organization:planton
-    relation: organization
-    object: workflow:onboarding
-  - user: identity_account:swarup
-    relation: owner
-    object: workflow:onboarding
-  - user: identity_provider:idp1#platform_user
-    relation: platform_viewer
-    object: workflow:onboarding
-  - user: organization:planton#viewer
-    relation: viewer
-    object: workflow:onboarding
-  - user: organization:planton
-    relation: organization
-    object: workflow_instance:onboarding-default
-  - user: workflow:onboarding
-    relation: workflow
-    object: workflow_instance:onboarding-default
-  - user: identity_account:swarup
-    relation: owner
-    object: workflow_instance:onboarding-default
-  - user: workflow:onboarding
-    relation: default_of
-    object: workflow_instance:onboarding-default
-
-tests:
-  - name: managed-org member reaches the default instance of a platform-shared agent
-    check:
-      - user: identity_account:alice
-        object: agent_instance:sara-default
-        assertions:
-          can_view: true
-          can_execute: true
-          can_edit: false
-          can_delete: false
-
-  - name: outsiders get nothing from the default_of link
-    check:
-      - user: identity_account:mallory
-        object: agent_instance:sara-default
-        assertions:
-          can_view: false
-          can_execute: false
-
-  - name: personal instances never leak through the parent agent
-    check:
-      # Swarup owns the agent itself, but alice's personal instance has no
-      # default_of tuple — only she (its owner) can reach it.
-      - user: identity_account:swarup
-        object: agent_instance:alice-personal
-        assertions:
-          can_view: false
-      - user: identity_account:alice
-        object: agent_instance:alice-personal
-        assertions:
-          can_view: true
-          can_edit: true
-
-  - name: org members reach the default instance of an org-visible agent
-    check:
-      - user: identity_account:priya
-        object: agent_instance:internal-default
-        assertions:
-          can_view: true
-          can_execute: true
-          can_edit: false
-      # cloud#257: the default_of chain reaches org viewer-role users too —
-      # the viewer-shaped org tuple on the parent agent is the org's full
-      # read audience, and the default instance inherits it structurally.
-      - user: identity_account:veda
-        object: agent_instance:internal-default
-        assertions:
-          can_view: true
-          can_edit: false
-      # Managed-org membership grants nothing on non-platform-shared agents.
-      - user: identity_account:alice
-        object: agent_instance:internal-default
-        assertions:
-          can_view: false
-
-  - name: managed-org member reaches the default instance of a platform-shared workflow
-    check:
-      - user: identity_account:alice
-        object: workflow_instance:onboarding-default
-        assertions:
-          can_view: true
-          can_execute: true
-          can_edit: false
-
-  - name: list managed-org member's viewable agent instances resolves the default_of chain
-    list_objects:
-      - user: identity_account:alice
-        type: agent_instance
-        assertions:
-          can_view:
-            - agent_instance:sara-default
-            - agent_instance:alice-personal