@stigmer/server 3.27.2 → 3.28.0

package/src/authorization/__tests__/fixtures/fga/mcp-server-authoring.fga.yaml

@@ -1,129 +0,0 @@
-# Pinned copy of stigmer-cloud backend/services/stigmer-server/fga/tests/mcp-server-authoring.fga.yaml
-# as changed by stigmer-cloud#765 (the OpenFGA store test the cloud runs against its live model).
-# The body below is byte-identical to the source; the cloud re-runs the LIVE
-# file against this evaluator at the re-pin, so a stale copy is caught there.
-# Store tests for MCP-server authoring: an MCP server is an organization's
-# blueprint, so creating one takes the organization's admin bar
-# (can_create_mcp_server: admin), the bar agents, workflows and skills
-# already take. Until stigmer#1209 (v3.22.0) the create ran no check in
-# either edition and any member could author one; these pin the bar and
-# the story it leaves for members: an admin authors the server org-visible
-# and a member connects it (can_connect) with their own credentials, while
-# a private server stays the owner's and the admins'.
-#
-# Run: fga model test --tests mcp-server-authoring.fga.yaml
-
-name: mcp-server-authoring
-model_file: ../model/fga.mod
-
-tuples:
-  # Org acme: olivia owns it, oscar administers, dave is a plain member,
-  # vera a read-only viewer; mallory belongs to an unrelated org.
-  - user: identity_account:olivia
-    relation: owner
-    object: organization:acme
-  - user: identity_account:oscar
-    relation: admin
-    object: organization:acme
-  - user: identity_account:dave
-    relation: member
-    object: organization:acme
-  - user: identity_account:vera
-    relation: viewer
-    object: organization:acme
-  - user: identity_account:mallory
-    relation: member
-    object: organization:other
-
-  # An ORG-visible server oscar authored (the org viewer tuple the
-  # visibility writer emits).
-  - user: organization:acme
-    relation: organization
-    object: mcp_server:github
-  - user: identity_account:oscar
-    relation: owner
-    object: mcp_server:github
-  - user: organization:acme#viewer
-    relation: viewer
-    object: mcp_server:github
-
-  # A PRIVATE server oscar authored (no visibility tuple).
-  - user: organization:acme
-    relation: organization
-    object: mcp_server:vault
-  - user: identity_account:oscar
-    relation: owner
-    object: mcp_server:vault
-
-tests:
-  - name: authoring an MCP server is an admin act, the blueprint bar
-    check:
-      - user: identity_account:olivia
-        object: organization:acme
-        assertions:
-          can_create_mcp_server: true
-          can_create_agent: true
-      - user: identity_account:oscar
-        object: organization:acme
-        assertions:
-          can_create_mcp_server: true
-          can_create_agent: true
-
-  - name: a member, a viewer and an outsider cannot author one
-    check:
-      - user: identity_account:dave
-        object: organization:acme
-        assertions:
-          can_create_mcp_server: false
-      - user: identity_account:vera
-        object: organization:acme
-        assertions:
-          can_create_mcp_server: false
-      - user: identity_account:mallory
-        object: organization:acme
-        assertions:
-          can_create_mcp_server: false
-
-  - name: a member connects an admin-authored org-visible server with their own credentials
-    check:
-      - user: identity_account:dave
-        object: mcp_server:github
-        assertions:
-          can_view: true
-          can_connect: true
-          can_edit: false
-      - user: identity_account:vera
-        object: mcp_server:github
-        assertions:
-          can_view: true
-          can_connect: true
-          can_edit: false
-      - user: identity_account:mallory
-        object: mcp_server:github
-        assertions:
-          can_view: false
-          can_connect: false
-
-  - name: a private server stays with its author and the org admins
-    check:
-      - user: identity_account:oscar
-        object: mcp_server:vault
-        assertions:
-          can_view: true
-          can_connect: true
-          can_edit: true
-      - user: identity_account:olivia
-        object: mcp_server:vault
-        assertions:
-          can_view: true
-          can_edit: true
-      - user: identity_account:dave
-        object: mcp_server:vault
-        assertions:
-          can_view: false
-          can_connect: false
-      - user: identity_account:vera
-        object: mcp_server:vault
-        assertions:
-          can_view: false
-          can_connect: false

package/src/authorization/__tests__/fixtures/fga/memory-subject-only.fga.yaml

@@ -1,72 +0,0 @@
-# Pinned copy of stigmer-cloud backend/services/stigmer-server/fga/tests/memory-subject-only.fga.yaml
-# at commit b87dd1170 (the OpenFGA store test the cloud runs against its live model).
-# The body below is byte-identical to the source; the cloud re-runs the LIVE
-# file against this evaluator at the re-pin, so a stale copy is caught there.
-# Memory is subject-only (DD-004 as ratified): the identity account the
-# memory is ABOUT is its only principal. These tests pin the platform's
-# strictest model — org membership grants nothing, org ADMINSHIP grants
-# nothing (admins govern the memory_enabled switch, never the content),
-# and nothing is grantable.
-
-name: memory-subject-only
-model_file: ../model/fga.mod
-
-tuples:
-  # Org membership and adminship — proving both grant nothing on memories.
-  - user: identity_account:alice
-    relation: member
-    object: organization:acme
-  - user: identity_account:mallory
-    relation: member
-    object: organization:acme
-  - user: identity_account:ana
-    relation: admin
-    object: organization:acme
-
-  # Alice's memory (the config-driven create tuples: org + subject).
-  - user: organization:acme
-    relation: organization
-    object: memory:mem-alice-terse
-  - user: identity_account:alice
-    relation: subject
-    object: memory:mem-alice-terse
-
-tests:
-  - name: the subject has full control over their own memory
-    check:
-      - user: identity_account:alice
-        object: memory:mem-alice-terse
-        assertions:
-          can_view: true
-          can_edit: true
-          can_delete: true
-
-  - name: a fellow org member sees and touches nothing
-    check:
-      - user: identity_account:mallory
-        object: memory:mem-alice-terse
-        assertions:
-          can_view: false
-          can_edit: false
-          can_delete: false
-
-  - name: an org ADMIN sees and touches nothing — the setting, never the entries
-    check:
-      - user: identity_account:ana
-        object: memory:mem-alice-terse
-        assertions:
-          can_view: false
-          can_edit: false
-          can_delete: false
-
-  - name: list-objects returns only the subject's own records
-    list_objects:
-      - user: identity_account:alice
-        type: memory
-        assertions:
-          can_view:
-            - memory:mem-alice-terse
-      - user: identity_account:mallory
-        type: memory
-        assertions:
-          can_view: []

package/src/authorization/__tests__/fixtures/fga/org-admin-owner-inheritance.fga.yaml

@@ -1,308 +0,0 @@
-# Pinned copy of stigmer-cloud backend/services/stigmer-server/fga/tests/org-admin-owner-inheritance.fga.yaml
-# as changed by stigmer-cloud#765 (the OpenFGA store test the cloud runs against its live model).
-# The body below is byte-identical to the source; the cloud re-runs the LIVE
-# file against this evaluator at the re-pin, so a stale copy is caught there.
-# Store tests for org-admin owner inheritance (T08).
-#
-# Blueprint kinds — agent, agent_share, agent_channel, channel_app,
-# schedule, skill, workflow, plugin — compose org admins into `owner`:
-#
-#   define owner: [identity_account] or admin from organization
-#
-# This is the GitHub-org-admin model (precedent: mcp_server, iam_policy,
-# invitation): every org asset has an operator of last resort, so
-# machine-provisioned and ex-employee resources stay manageable. Because
-# owner feeds viewer (and can_execute on agents), admins also see, list,
-# and run PRIVATE blueprints — a deliberate, accepted trade recorded in the
-# T08 design decision.
-#
-# The four personal/secret kinds — agent_instance, environment, session,
-# workflow_instance — deliberately do NOT inherit. Their fixtures below
-# carry the organization tuple, so these tests would fail loudly if
-# inheritance were ever wrongly added to them.
-#
-# Run with:
-#   fga model test --tests org-admin-owner-inheritance.fga.yaml
-#
-# Scenario: org "acme" has org owner root, org admin ana, and plain member
-# dave. carol (a plain member) created one PRIVATE resource of each
-# inherited kind, plus one of each excluded kind. zara is an admin of the
-# unrelated org "other".
-name: org-admin-owner-inheritance
-model_file: ../model/fga.mod
-
-tuples:
-  # --- Org roles ---
-  - user: identity_account:root
-    relation: owner
-    object: organization:acme
-  - user: identity_account:ana
-    relation: admin
-    object: organization:acme
-  - user: identity_account:dave
-    relation: member
-    object: organization:acme
-  - user: identity_account:carol
-    relation: member
-    object: organization:acme
-  - user: identity_account:zara
-    relation: admin
-    object: organization:other
-
-  # --- carol's PRIVATE blueprints (creation tuples only) ---
-  - user: organization:acme
-    relation: organization
-    object: agent:carols-bot
-  - user: identity_account:carol
-    relation: owner
-    object: agent:carols-bot
-  - user: organization:acme
-    relation: organization
-    object: agent_share:carols-bot-share
-  - user: identity_account:carol
-    relation: owner
-    object: agent_share:carols-bot-share
-  - user: organization:acme
-    relation: organization
-    object: agent_channel:carols-bot-slack
-  - user: identity_account:carol
-    relation: owner
-    object: agent_channel:carols-bot-slack
-  - user: organization:acme
-    relation: organization
-    object: channel_app:carols-slack-app
-  - user: identity_account:carol
-    relation: owner
-    object: channel_app:carols-slack-app
-  - user: organization:acme
-    relation: organization
-    object: schedule:carols-reminders
-  - user: identity_account:carol
-    relation: owner
-    object: schedule:carols-reminders
-  - user: organization:acme
-    relation: organization
-    object: skill:carols-notes
-  - user: identity_account:carol
-    relation: owner
-    object: skill:carols-notes
-  - user: organization:acme
-    relation: organization
-    object: workflow:carols-flow
-  - user: identity_account:carol
-    relation: owner
-    object: workflow:carols-flow
-  - user: organization:acme
-    relation: organization
-    object: plugin:carols-plugin
-  - user: identity_account:carol
-    relation: owner
-    object: plugin:carols-plugin
-
-  # --- carol's personal resources (organization tuple present, so a
-  #     wrongly-added inheritance WOULD resolve — these must stay denied) ---
-  - user: organization:acme
-    relation: organization
-    object: agent_instance:carols-instance
-  - user: agent:carols-bot
-    relation: agent
-    object: agent_instance:carols-instance
-  - user: identity_account:carol
-    relation: owner
-    object: agent_instance:carols-instance
-  - user: organization:acme
-    relation: organization
-    object: environment:carols-secrets
-  - user: identity_account:carol
-    relation: owner
-    object: environment:carols-secrets
-  - user: identity_account:carol
-    relation: creator
-    object: environment:carols-secrets
-  - user: organization:acme
-    relation: organization
-    object: session:carols-chat
-  - user: identity_account:carol
-    relation: owner
-    object: session:carols-chat
-
-tests:
-  - name: org admin inherits full management of every blueprint kind
-    check:
-      - user: identity_account:ana
-        object: agent:carols-bot
-        assertions:
-          can_view: true
-          can_edit: true
-          can_delete: true
-          can_grant_access: true
-          can_execute: true
-      - user: identity_account:ana
-        object: agent_share:carols-bot-share
-        assertions:
-          can_view: true
-          can_edit: true
-          can_delete: true
-          can_grant_access: true
-      - user: identity_account:ana
-        object: agent_channel:carols-bot-slack
-        assertions:
-          can_view: true
-          can_edit: true
-          can_delete: true
-          can_grant_access: true
-      - user: identity_account:ana
-        object: channel_app:carols-slack-app
-        assertions:
-          can_view: true
-          can_edit: true
-          can_delete: true
-          can_grant_access: true
-      - user: identity_account:ana
-        object: schedule:carols-reminders
-        assertions:
-          can_view: true
-          can_edit: true
-          can_delete: true
-          can_grant_access: true
-      - user: identity_account:ana
-        object: skill:carols-notes
-        assertions:
-          can_view: true
-          can_edit: true
-          can_delete: true
-          can_grant_access: true
-      - user: identity_account:ana
-        object: workflow:carols-flow
-        assertions:
-          can_view: true
-          can_edit: true
-          can_delete: true
-          can_grant_access: true
-      - user: identity_account:ana
-        object: plugin:carols-plugin
-        assertions:
-          can_view: true
-          can_edit: true
-          can_delete: true
-          can_grant_access: true
-
-  - name: org owner inherits through the admin hierarchy
-    check:
-      - user: identity_account:root
-        object: agent:carols-bot
-        assertions:
-          can_edit: true
-          can_delete: true
-          can_grant_access: true
-      - user: identity_account:root
-        object: agent_share:carols-bot-share
-        assertions:
-          can_edit: true
-          can_delete: true
-      - user: identity_account:root
-        object: agent_channel:carols-bot-slack
-        assertions:
-          can_edit: true
-          can_delete: true
-
-  - name: plain org member still has nothing on private blueprints
-    check:
-      - user: identity_account:dave
-        object: agent:carols-bot
-        assertions:
-          can_view: false
-          can_edit: false
-          can_delete: false
-          can_grant_access: false
-      - user: identity_account:dave
-        object: agent_share:carols-bot-share
-        assertions:
-          can_view: false
-          can_edit: false
-      - user: identity_account:dave
-        object: agent_channel:carols-bot-slack
-        assertions:
-          can_view: false
-          can_edit: false
-      - user: identity_account:dave
-        object: channel_app:carols-slack-app
-        assertions:
-          can_view: false
-          can_edit: false
-      - user: identity_account:dave
-        object: schedule:carols-reminders
-        assertions:
-          can_view: false
-          can_edit: false
-
-  - name: admin of an unrelated org has nothing
-    check:
-      - user: identity_account:zara
-        object: agent:carols-bot
-        assertions:
-          can_view: false
-          can_edit: false
-          can_delete: false
-      - user: identity_account:zara
-        object: plugin:carols-plugin
-        assertions:
-          can_view: false
-          can_edit: false
-
-  - name: personal kinds stay admin-excluded (privacy invariant)
-    check:
-      - user: identity_account:ana
-        object: agent_instance:carols-instance
-        assertions:
-          can_view: false
-          can_edit: false
-          can_delete: false
-      - user: identity_account:ana
-        object: environment:carols-secrets
-        assertions:
-          can_view: false
-          can_edit: false
-          can_delete: false
-          can_read_secrets: false
-      - user: identity_account:ana
-        object: session:carols-chat
-        assertions:
-          can_view: false
-          can_edit: false
-          can_delete: false
-      # The org OWNER is admin-and-above — the exclusion must hold for
-      # them too.
-      - user: identity_account:root
-        object: environment:carols-secrets
-        assertions:
-          can_view: false
-          can_read_secrets: false
-
-  - name: creator keeps everything (inheritance adds, never subtracts)
-    check:
-      - user: identity_account:carol
-        object: agent:carols-bot
-        assertions:
-          can_view: true
-          can_edit: true
-          can_delete: true
-          can_grant_access: true
-
-  - name: admin's listable resources include private blueprints, never personal kinds
-    list_objects:
-      - user: identity_account:ana
-        type: agent
-        assertions:
-          can_view:
-            - agent:carols-bot
-          can_edit:
-            - agent:carols-bot
-      - user: identity_account:ana
-        type: agent_instance
-        assertions:
-          can_view: []
-      - user: identity_account:ana
-        type: session
-        assertions:
-          can_view: []

package/src/authorization/__tests__/fixtures/fga/org-shared-environment.fga.yaml

@@ -1,144 +0,0 @@
-# Pinned copy of stigmer-cloud backend/services/stigmer-server/fga/tests/org-shared-environment.fga.yaml
-# at commit b87dd1170 (the OpenFGA store test the cloud runs against its live model).
-# The body below is byte-identical to the source; the cloud re-runs the LIVE
-# file against this evaluator at the re-pin, so a stale copy is caught there.
-# Store tests for org-shared environments (T06).
-#
-# Environments are personal resources with opt-in org sharing. Setting
-# visibility_org writes one tuple (viewer@organization:<org>#viewer — the
-# org's full read audience, cloud#257) that grants everyone in the org
-# REDACTED view only. The creator-only secret-reveal
-# invariant holds at every level: can_read_secrets never widens with
-# sharing. Runtime resolution for executions is app-level (server-side
-# policy on metadata.visibility), deliberately NOT modeled here — no FGA
-# relation could allow a member's execution to use a secret while denying
-# the same member's reveal.
-#
-# Run with:
-#   fga model test --tests org-shared-environment.fga.yaml
-#
-# Scenario: org "acme" has creator carol, plain member dave, read-only
-# viewer vera, and an explicit viewer grant for frank on the private
-# environment; mallory belongs to an unrelated org. Carol owns a PRIVATE environment and an
-# ORG-shared environment.
-name: org-shared-environment
-model_file: ../model/fga.mod
-
-tuples:
-  # --- Org memberships ---
-  - user: identity_account:carol
-    relation: member
-    object: organization:acme
-  - user: identity_account:dave
-    relation: member
-    object: organization:acme
-  - user: identity_account:frank
-    relation: member
-    object: organization:acme
-  - user: identity_account:vera
-    relation: viewer
-    object: organization:acme
-  - user: identity_account:mallory
-    relation: member
-    object: organization:outsider
-
-  # --- PRIVATE environment (creation tuples only) ---
-  - user: organization:acme
-    relation: organization
-    object: environment:private-creds
-  - user: identity_account:carol
-    relation: owner
-    object: environment:private-creds
-  - user: identity_account:carol
-    relation: creator
-    object: environment:private-creds
-  # Explicit viewer grant to frank (redacted view, no secret reveal).
-  - user: identity_account:frank
-    relation: viewer
-    object: environment:private-creds
-
-  # --- ORG-shared environment (creation tuples + the org viewer tuple) ---
-  - user: organization:acme
-    relation: organization
-    object: environment:team-creds
-  - user: identity_account:carol
-    relation: owner
-    object: environment:team-creds
-  - user: identity_account:carol
-    relation: creator
-    object: environment:team-creds
-  - user: organization:acme#viewer
-    relation: viewer
-    object: environment:team-creds
-
-tests:
-  - name: private-environment-invisible-to-org-members
-    check:
-      - user: identity_account:dave
-        object: environment:private-creds
-        assertions:
-          can_view: false
-          can_edit: false
-          can_read_secrets: false
-
-  - name: explicit-viewer-grant-is-redacted-view-only
-    check:
-      - user: identity_account:frank
-        object: environment:private-creds
-        assertions:
-          can_view: true
-          can_edit: false
-          can_read_secrets: false
-
-  - name: org-sharing-grants-members-redacted-view-only
-    check:
-      - user: identity_account:dave
-        object: environment:team-creds
-        assertions:
-          can_view: true
-          can_edit: false
-          can_delete: false
-          can_grant_access: false
-          # THE invariant: org sharing never widens secret reveal.
-          can_read_secrets: false
-
-  - name: org-sharing-reaches-read-only-viewers-redacted-too
-    check:
-      # cloud#257: the org viewer role is read-only by definition — an
-      # org-shared environment is readable (REDACTED) to vera, secrets never.
-      - user: identity_account:vera
-        object: environment:team-creds
-        assertions:
-          can_view: true
-          can_edit: false
-          can_read_secrets: false
-      - user: identity_account:vera
-        object: environment:private-creds
-        assertions:
-          can_view: false
-
-  - name: creator-keeps-full-access-on-shared-environment
-    check:
-      - user: identity_account:carol
-        object: environment:team-creds
-        assertions:
-          can_view: true
-          can_edit: true
-          can_delete: true
-          can_read_secrets: true
-
-  - name: org-sharing-does-not-leak-across-orgs
-    check:
-      - user: identity_account:mallory
-        object: environment:team-creds
-        assertions:
-          can_view: false
-          can_read_secrets: false
-
-  - name: org-members-can-list-shared-environments-only
-    list_objects:
-      - user: identity_account:dave
-        type: environment
-        assertions:
-          can_view:
-            - environment:team-creds