@stigmer/server 3.27.2 → 3.29.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (227) hide show
  1. package/README.md +2 -0
  2. package/dist/authorization/authorizer.d.ts +3 -3
  3. package/dist/authorization/authorizer.js +3 -3
  4. package/dist/authorization/derived-tuples.js +6 -1
  5. package/dist/authorization/derived-tuples.js.map +1 -1
  6. package/dist/authorization/evaluator.d.ts +9 -10
  7. package/dist/authorization/evaluator.d.ts.map +1 -1
  8. package/dist/authorization/evaluator.js.map +1 -1
  9. package/dist/authorization/list-read-scope.d.ts.map +1 -1
  10. package/dist/authorization/list-read-scope.js +29 -18
  11. package/dist/authorization/list-read-scope.js.map +1 -1
  12. package/dist/authorization/model/bindings.d.ts +41 -0
  13. package/dist/authorization/model/bindings.d.ts.map +1 -0
  14. package/dist/authorization/model/bindings.js +89 -0
  15. package/dist/authorization/model/bindings.js.map +1 -0
  16. package/dist/authorization/model/data/authorization-model.json +3141 -0
  17. package/dist/authorization/model/default-of.d.ts +2 -2
  18. package/dist/authorization/model/execution-viewer.d.ts +3 -0
  19. package/dist/authorization/model/execution-viewer.d.ts.map +1 -0
  20. package/dist/authorization/model/execution-viewer.js +50 -0
  21. package/dist/authorization/model/execution-viewer.js.map +1 -0
  22. package/dist/authorization/model/index.d.ts +33 -21
  23. package/dist/authorization/model/index.d.ts.map +1 -1
  24. package/dist/authorization/model/index.js +74 -52
  25. package/dist/authorization/model/index.js.map +1 -1
  26. package/dist/authorization/model/openfga-json.d.ts +18 -0
  27. package/dist/authorization/model/openfga-json.d.ts.map +1 -0
  28. package/dist/authorization/model/openfga-json.js +266 -0
  29. package/dist/authorization/model/openfga-json.js.map +1 -0
  30. package/dist/authorization/model/rewrite.d.ts +39 -67
  31. package/dist/authorization/model/rewrite.d.ts.map +1 -1
  32. package/dist/authorization/model/rewrite.js +1 -117
  33. package/dist/authorization/model/rewrite.js.map +1 -1
  34. package/dist/authorization/strict-json.d.ts +20 -0
  35. package/dist/authorization/strict-json.d.ts.map +1 -0
  36. package/dist/authorization/strict-json.js +45 -0
  37. package/dist/authorization/strict-json.js.map +1 -0
  38. package/dist/boot/compose.d.ts.map +1 -1
  39. package/dist/boot/compose.js +9 -7
  40. package/dist/boot/compose.js.map +1 -1
  41. package/dist/domain/workflowexecution/list-index.d.ts +1 -1
  42. package/dist/extensions/list-read-scope.d.ts +20 -3
  43. package/dist/extensions/list-read-scope.d.ts.map +1 -1
  44. package/dist/extensions/list-read-scope.js +20 -1
  45. package/dist/extensions/list-read-scope.js.map +1 -1
  46. package/dist/index.d.ts +7 -8
  47. package/dist/index.d.ts.map +1 -1
  48. package/dist/index.js +15 -5
  49. package/dist/index.js.map +1 -1
  50. package/package.json +7 -6
  51. package/src/authorization/README.md +41 -34
  52. package/src/authorization/__tests__/authorizer.test.ts +5 -14
  53. package/src/authorization/__tests__/derived-tuples.test.ts +29 -27
  54. package/src/authorization/__tests__/evaluator.test.ts +53 -160
  55. package/src/authorization/__tests__/facts.test.ts +5 -11
  56. package/src/authorization/__tests__/list-read-scope.measure.test.ts +12 -20
  57. package/src/authorization/__tests__/list-read-scope.test.ts +15 -14
  58. package/src/authorization/__tests__/organization-directory.test.ts +2 -2
  59. package/src/authorization/__tests__/store-test-kit.ts +246 -0
  60. package/src/authorization/__tests__/store-tests.test.ts +92 -223
  61. package/src/authorization/__tests__/support.ts +30 -2
  62. package/src/authorization/__tests__/throwaway-model.ts +75 -0
  63. package/src/authorization/__tests__/wire-permissions.test.ts +141 -107
  64. package/src/authorization/authorizer.ts +3 -3
  65. package/src/authorization/derived-tuples.ts +7 -2
  66. package/src/authorization/evaluator.ts +8 -10
  67. package/src/authorization/list-read-scope.ts +37 -22
  68. package/src/authorization/model/__tests__/openfga-json.test.ts +353 -0
  69. package/src/authorization/model/__tests__/registry.test.ts +345 -277
  70. package/src/authorization/model/bindings.ts +131 -0
  71. package/src/authorization/model/data/authorization-model.json +3141 -0
  72. package/src/authorization/model/default-of.ts +2 -2
  73. package/src/authorization/model/execution-viewer.ts +56 -0
  74. package/src/authorization/model/index.ts +81 -72
  75. package/src/authorization/model/openfga-json.ts +310 -0
  76. package/src/authorization/model/rewrite.ts +39 -188
  77. package/src/authorization/strict-json.ts +52 -0
  78. package/src/boot/compose.ts +9 -7
  79. package/src/extensions/__tests__/built-in-authorization-composed.test.ts +3 -6
  80. package/src/extensions/list-read-scope.ts +32 -4
  81. package/src/index.ts +15 -44
  82. package/dist/authorization/model/agent.d.ts +0 -2
  83. package/dist/authorization/model/agent.d.ts.map +0 -1
  84. package/dist/authorization/model/agent.js +0 -43
  85. package/dist/authorization/model/agent.js.map +0 -1
  86. package/dist/authorization/model/agent_channel.d.ts +0 -2
  87. package/dist/authorization/model/agent_channel.d.ts.map +0 -1
  88. package/dist/authorization/model/agent_channel.js +0 -39
  89. package/dist/authorization/model/agent_channel.js.map +0 -1
  90. package/dist/authorization/model/agent_execution.d.ts +0 -2
  91. package/dist/authorization/model/agent_execution.d.ts.map +0 -1
  92. package/dist/authorization/model/agent_execution.js +0 -25
  93. package/dist/authorization/model/agent_execution.js.map +0 -1
  94. package/dist/authorization/model/agent_instance.d.ts +0 -2
  95. package/dist/authorization/model/agent_instance.d.ts.map +0 -1
  96. package/dist/authorization/model/agent_instance.js +0 -48
  97. package/dist/authorization/model/agent_instance.js.map +0 -1
  98. package/dist/authorization/model/agent_share.d.ts +0 -2
  99. package/dist/authorization/model/agent_share.d.ts.map +0 -1
  100. package/dist/authorization/model/agent_share.js +0 -29
  101. package/dist/authorization/model/agent_share.js.map +0 -1
  102. package/dist/authorization/model/api_key.d.ts +0 -2
  103. package/dist/authorization/model/api_key.d.ts.map +0 -1
  104. package/dist/authorization/model/api_key.js +0 -27
  105. package/dist/authorization/model/api_key.js.map +0 -1
  106. package/dist/authorization/model/artifact.d.ts +0 -2
  107. package/dist/authorization/model/artifact.d.ts.map +0 -1
  108. package/dist/authorization/model/artifact.js +0 -27
  109. package/dist/authorization/model/artifact.js.map +0 -1
  110. package/dist/authorization/model/channel_app.d.ts +0 -2
  111. package/dist/authorization/model/channel_app.d.ts.map +0 -1
  112. package/dist/authorization/model/channel_app.js +0 -28
  113. package/dist/authorization/model/channel_app.js.map +0 -1
  114. package/dist/authorization/model/environment.d.ts +0 -2
  115. package/dist/authorization/model/environment.d.ts.map +0 -1
  116. package/dist/authorization/model/environment.js +0 -33
  117. package/dist/authorization/model/environment.js.map +0 -1
  118. package/dist/authorization/model/execution_context.d.ts +0 -2
  119. package/dist/authorization/model/execution_context.d.ts.map +0 -1
  120. package/dist/authorization/model/execution_context.js +0 -19
  121. package/dist/authorization/model/execution_context.js.map +0 -1
  122. package/dist/authorization/model/iam_policy.d.ts +0 -2
  123. package/dist/authorization/model/iam_policy.d.ts.map +0 -1
  124. package/dist/authorization/model/iam_policy.js +0 -31
  125. package/dist/authorization/model/iam_policy.js.map +0 -1
  126. package/dist/authorization/model/identity_account.d.ts +0 -2
  127. package/dist/authorization/model/identity_account.d.ts.map +0 -1
  128. package/dist/authorization/model/identity_account.js +0 -25
  129. package/dist/authorization/model/identity_account.js.map +0 -1
  130. package/dist/authorization/model/mcp_server.d.ts +0 -2
  131. package/dist/authorization/model/mcp_server.d.ts.map +0 -1
  132. package/dist/authorization/model/mcp_server.js +0 -38
  133. package/dist/authorization/model/mcp_server.js.map +0 -1
  134. package/dist/authorization/model/memory.d.ts +0 -2
  135. package/dist/authorization/model/memory.d.ts.map +0 -1
  136. package/dist/authorization/model/memory.js +0 -26
  137. package/dist/authorization/model/memory.js.map +0 -1
  138. package/dist/authorization/model/oauth_app.d.ts +0 -2
  139. package/dist/authorization/model/oauth_app.d.ts.map +0 -1
  140. package/dist/authorization/model/oauth_app.js +0 -31
  141. package/dist/authorization/model/oauth_app.js.map +0 -1
  142. package/dist/authorization/model/organization.d.ts +0 -2
  143. package/dist/authorization/model/organization.d.ts.map +0 -1
  144. package/dist/authorization/model/organization.js +0 -58
  145. package/dist/authorization/model/organization.js.map +0 -1
  146. package/dist/authorization/model/platform_client.d.ts +0 -2
  147. package/dist/authorization/model/platform_client.d.ts.map +0 -1
  148. package/dist/authorization/model/platform_client.js +0 -31
  149. package/dist/authorization/model/platform_client.js.map +0 -1
  150. package/dist/authorization/model/plugin.d.ts +0 -2
  151. package/dist/authorization/model/plugin.d.ts.map +0 -1
  152. package/dist/authorization/model/plugin.js +0 -45
  153. package/dist/authorization/model/plugin.js.map +0 -1
  154. package/dist/authorization/model/schedule.d.ts +0 -2
  155. package/dist/authorization/model/schedule.d.ts.map +0 -1
  156. package/dist/authorization/model/schedule.js +0 -34
  157. package/dist/authorization/model/schedule.js.map +0 -1
  158. package/dist/authorization/model/session.d.ts +0 -2
  159. package/dist/authorization/model/session.d.ts.map +0 -1
  160. package/dist/authorization/model/session.js +0 -38
  161. package/dist/authorization/model/session.js.map +0 -1
  162. package/dist/authorization/model/skill.d.ts +0 -2
  163. package/dist/authorization/model/skill.d.ts.map +0 -1
  164. package/dist/authorization/model/skill.js +0 -39
  165. package/dist/authorization/model/skill.js.map +0 -1
  166. package/dist/authorization/model/workflow.d.ts +0 -2
  167. package/dist/authorization/model/workflow.d.ts.map +0 -1
  168. package/dist/authorization/model/workflow.js +0 -39
  169. package/dist/authorization/model/workflow.js.map +0 -1
  170. package/dist/authorization/model/workflow_execution.d.ts +0 -2
  171. package/dist/authorization/model/workflow_execution.d.ts.map +0 -1
  172. package/dist/authorization/model/workflow_execution.js +0 -33
  173. package/dist/authorization/model/workflow_execution.js.map +0 -1
  174. package/dist/authorization/model/workflow_instance.d.ts +0 -2
  175. package/dist/authorization/model/workflow_instance.d.ts.map +0 -1
  176. package/dist/authorization/model/workflow_instance.js +0 -96
  177. package/dist/authorization/model/workflow_instance.js.map +0 -1
  178. package/dist/authorization/store-test-kit.d.ts +0 -62
  179. package/dist/authorization/store-test-kit.d.ts.map +0 -1
  180. package/dist/authorization/store-test-kit.js +0 -265
  181. package/dist/authorization/store-test-kit.js.map +0 -1
  182. package/src/authorization/__tests__/enterprise-model.ts +0 -59
  183. package/src/authorization/__tests__/fixtures/fga/agent-channel-owner.fga.yaml +0 -112
  184. package/src/authorization/__tests__/fixtures/fga/agent-instance-creation.fga.yaml +0 -177
  185. package/src/authorization/__tests__/fixtures/fga/agent-share-owner.fga.yaml +0 -109
  186. package/src/authorization/__tests__/fixtures/fga/artifact-org-and-owner.fga.yaml +0 -128
  187. package/src/authorization/__tests__/fixtures/fga/blueprint-private-visibility.fga.yaml +0 -318
  188. package/src/authorization/__tests__/fixtures/fga/channel-app-owner.fga.yaml +0 -125
  189. package/src/authorization/__tests__/fixtures/fga/channel-participation.fga.yaml +0 -201
  190. package/src/authorization/__tests__/fixtures/fga/channel-session-visibility.fga.yaml +0 -187
  191. package/src/authorization/__tests__/fixtures/fga/default-instance-inheritance.fga.yaml +0 -214
  192. package/src/authorization/__tests__/fixtures/fga/mcp-server-authoring.fga.yaml +0 -129
  193. package/src/authorization/__tests__/fixtures/fga/memory-subject-only.fga.yaml +0 -72
  194. package/src/authorization/__tests__/fixtures/fga/org-admin-owner-inheritance.fga.yaml +0 -308
  195. package/src/authorization/__tests__/fixtures/fga/org-shared-environment.fga.yaml +0 -144
  196. package/src/authorization/__tests__/fixtures/fga/platform-visibility.fga.yaml +0 -199
  197. package/src/authorization/__tests__/fixtures/fga/provider-standing-viewer.fga.yaml +0 -40
  198. package/src/authorization/__tests__/fixtures/fga/reserved-label-writer.fga.yaml +0 -41
  199. package/src/authorization/__tests__/fixtures/fga/schedule-owner.fga.yaml +0 -113
  200. package/src/authorization/__tests__/fixtures/fga/schedule-session-visibility.fga.yaml +0 -214
  201. package/src/authorization/__tests__/fixtures/fga/session-personal-resource.fga.yaml +0 -117
  202. package/src/authorization/__tests__/fixtures/fga/workflow-execution-sharing.fga.yaml +0 -190
  203. package/src/authorization/model/agent.ts +0 -64
  204. package/src/authorization/model/agent_channel.ts +0 -57
  205. package/src/authorization/model/agent_execution.ts +0 -33
  206. package/src/authorization/model/agent_instance.ts +0 -66
  207. package/src/authorization/model/agent_share.ts +0 -40
  208. package/src/authorization/model/api_key.ts +0 -28
  209. package/src/authorization/model/artifact.ts +0 -38
  210. package/src/authorization/model/channel_app.ts +0 -39
  211. package/src/authorization/model/environment.ts +0 -48
  212. package/src/authorization/model/execution_context.ts +0 -20
  213. package/src/authorization/model/iam_policy.ts +0 -42
  214. package/src/authorization/model/identity_account.ts +0 -26
  215. package/src/authorization/model/mcp_server.ts +0 -59
  216. package/src/authorization/model/memory.ts +0 -27
  217. package/src/authorization/model/oauth_app.ts +0 -43
  218. package/src/authorization/model/organization.ts +0 -59
  219. package/src/authorization/model/platform_client.ts +0 -43
  220. package/src/authorization/model/plugin.ts +0 -66
  221. package/src/authorization/model/schedule.ts +0 -49
  222. package/src/authorization/model/session.ts +0 -50
  223. package/src/authorization/model/skill.ts +0 -60
  224. package/src/authorization/model/workflow.ts +0 -60
  225. package/src/authorization/model/workflow_execution.ts +0 -46
  226. package/src/authorization/model/workflow_instance.ts +0 -125
  227. package/src/authorization/store-test-kit.ts +0 -395
@@ -0,0 +1,3141 @@
1
+ {
2
+ "schema_version": "1.2",
3
+ "type_definitions": [
4
+ {
5
+ "metadata": {
6
+ "module": "stigmer",
7
+ "relations": {
8
+ "can_bootstrap_iam": {},
9
+ "can_execute_billing_ops": {},
10
+ "can_grant_access": {},
11
+ "can_impersonate": {},
12
+ "can_issue_license": {},
13
+ "can_manage_credits": {},
14
+ "can_manage_cursor_accounts": {},
15
+ "can_manage_identity_accounts": {},
16
+ "can_manage_model_pricing": {},
17
+ "can_update_usage": {},
18
+ "can_view_access": {},
19
+ "can_view_provider_standing": {},
20
+ "can_write_reserved_labels": {},
21
+ "credit_issuer": {
22
+ "directly_related_user_types": [
23
+ {
24
+ "type": "identity_account"
25
+ }
26
+ ]
27
+ },
28
+ "operator": {
29
+ "directly_related_user_types": [
30
+ {
31
+ "type": "identity_account"
32
+ }
33
+ ]
34
+ }
35
+ },
36
+ "source_info": {
37
+ "file": "platform.fga"
38
+ }
39
+ },
40
+ "relations": {
41
+ "can_bootstrap_iam": {
42
+ "computedUserset": {
43
+ "relation": "operator"
44
+ }
45
+ },
46
+ "can_execute_billing_ops": {
47
+ "computedUserset": {
48
+ "relation": "operator"
49
+ }
50
+ },
51
+ "can_grant_access": {
52
+ "computedUserset": {
53
+ "relation": "operator"
54
+ }
55
+ },
56
+ "can_impersonate": {
57
+ "computedUserset": {
58
+ "relation": "operator"
59
+ }
60
+ },
61
+ "can_issue_license": {
62
+ "computedUserset": {
63
+ "relation": "operator"
64
+ }
65
+ },
66
+ "can_manage_credits": {
67
+ "union": {
68
+ "child": [
69
+ {
70
+ "computedUserset": {
71
+ "relation": "operator"
72
+ }
73
+ },
74
+ {
75
+ "computedUserset": {
76
+ "relation": "credit_issuer"
77
+ }
78
+ }
79
+ ]
80
+ }
81
+ },
82
+ "can_manage_cursor_accounts": {
83
+ "computedUserset": {
84
+ "relation": "operator"
85
+ }
86
+ },
87
+ "can_manage_identity_accounts": {
88
+ "computedUserset": {
89
+ "relation": "operator"
90
+ }
91
+ },
92
+ "can_manage_model_pricing": {
93
+ "computedUserset": {
94
+ "relation": "operator"
95
+ }
96
+ },
97
+ "can_update_usage": {
98
+ "computedUserset": {
99
+ "relation": "operator"
100
+ }
101
+ },
102
+ "can_view_access": {
103
+ "computedUserset": {
104
+ "relation": "operator"
105
+ }
106
+ },
107
+ "can_view_provider_standing": {
108
+ "computedUserset": {
109
+ "relation": "operator"
110
+ }
111
+ },
112
+ "can_write_reserved_labels": {
113
+ "computedUserset": {
114
+ "relation": "operator"
115
+ }
116
+ },
117
+ "credit_issuer": {
118
+ "this": {}
119
+ },
120
+ "operator": {
121
+ "this": {}
122
+ }
123
+ },
124
+ "type": "platform"
125
+ },
126
+ {
127
+ "metadata": {
128
+ "module": "iam",
129
+ "relations": {
130
+ "can_delete": {},
131
+ "can_edit": {},
132
+ "can_grant_access": {},
133
+ "can_view": {},
134
+ "can_view_access": {},
135
+ "owner": {
136
+ "directly_related_user_types": [
137
+ {
138
+ "type": "identity_account"
139
+ }
140
+ ]
141
+ }
142
+ },
143
+ "source_info": {
144
+ "file": "iam/identity_account.fga"
145
+ }
146
+ },
147
+ "relations": {
148
+ "can_delete": {
149
+ "computedUserset": {
150
+ "relation": "owner"
151
+ }
152
+ },
153
+ "can_edit": {
154
+ "computedUserset": {
155
+ "relation": "owner"
156
+ }
157
+ },
158
+ "can_grant_access": {
159
+ "computedUserset": {
160
+ "relation": "owner"
161
+ }
162
+ },
163
+ "can_view": {
164
+ "computedUserset": {
165
+ "relation": "owner"
166
+ }
167
+ },
168
+ "can_view_access": {
169
+ "computedUserset": {
170
+ "relation": "owner"
171
+ }
172
+ },
173
+ "owner": {
174
+ "this": {}
175
+ }
176
+ },
177
+ "type": "identity_account"
178
+ },
179
+ {
180
+ "metadata": {
181
+ "module": "iam",
182
+ "relations": {
183
+ "can_delete": {},
184
+ "can_edit": {},
185
+ "can_grant_access": {},
186
+ "can_view": {},
187
+ "can_view_access": {},
188
+ "managed_org": {
189
+ "directly_related_user_types": [
190
+ {
191
+ "type": "organization"
192
+ }
193
+ ]
194
+ },
195
+ "organization": {
196
+ "directly_related_user_types": [
197
+ {
198
+ "type": "organization"
199
+ }
200
+ ]
201
+ },
202
+ "owner": {
203
+ "directly_related_user_types": [
204
+ {
205
+ "type": "identity_account"
206
+ }
207
+ ]
208
+ },
209
+ "platform_user": {},
210
+ "viewer": {
211
+ "directly_related_user_types": [
212
+ {
213
+ "type": "identity_account"
214
+ }
215
+ ]
216
+ }
217
+ },
218
+ "source_info": {
219
+ "file": "iam/identity_provider.fga"
220
+ }
221
+ },
222
+ "relations": {
223
+ "can_delete": {
224
+ "computedUserset": {
225
+ "relation": "owner"
226
+ }
227
+ },
228
+ "can_edit": {
229
+ "computedUserset": {
230
+ "relation": "owner"
231
+ }
232
+ },
233
+ "can_grant_access": {
234
+ "computedUserset": {
235
+ "relation": "owner"
236
+ }
237
+ },
238
+ "can_view": {
239
+ "computedUserset": {
240
+ "relation": "viewer"
241
+ }
242
+ },
243
+ "can_view_access": {
244
+ "computedUserset": {
245
+ "relation": "viewer"
246
+ }
247
+ },
248
+ "managed_org": {
249
+ "this": {}
250
+ },
251
+ "organization": {
252
+ "this": {}
253
+ },
254
+ "owner": {
255
+ "union": {
256
+ "child": [
257
+ {
258
+ "this": {}
259
+ },
260
+ {
261
+ "tupleToUserset": {
262
+ "computedUserset": {
263
+ "relation": "admin"
264
+ },
265
+ "tupleset": {
266
+ "relation": "organization"
267
+ }
268
+ }
269
+ }
270
+ ]
271
+ }
272
+ },
273
+ "platform_user": {
274
+ "tupleToUserset": {
275
+ "computedUserset": {
276
+ "relation": "member"
277
+ },
278
+ "tupleset": {
279
+ "relation": "managed_org"
280
+ }
281
+ }
282
+ },
283
+ "viewer": {
284
+ "union": {
285
+ "child": [
286
+ {
287
+ "this": {}
288
+ },
289
+ {
290
+ "computedUserset": {
291
+ "relation": "owner"
292
+ }
293
+ }
294
+ ]
295
+ }
296
+ }
297
+ },
298
+ "type": "identity_provider"
299
+ },
300
+ {
301
+ "metadata": {
302
+ "module": "iam",
303
+ "relations": {
304
+ "can_delete": {},
305
+ "can_edit": {},
306
+ "can_grant_access": {},
307
+ "can_view": {},
308
+ "can_view_access": {},
309
+ "organization": {
310
+ "directly_related_user_types": [
311
+ {
312
+ "type": "organization"
313
+ }
314
+ ]
315
+ },
316
+ "owner": {
317
+ "directly_related_user_types": [
318
+ {
319
+ "type": "identity_account"
320
+ }
321
+ ]
322
+ },
323
+ "viewer": {}
324
+ },
325
+ "source_info": {
326
+ "file": "iam/iam_policy.fga"
327
+ }
328
+ },
329
+ "relations": {
330
+ "can_delete": {
331
+ "computedUserset": {
332
+ "relation": "owner"
333
+ }
334
+ },
335
+ "can_edit": {
336
+ "computedUserset": {
337
+ "relation": "owner"
338
+ }
339
+ },
340
+ "can_grant_access": {
341
+ "computedUserset": {
342
+ "relation": "owner"
343
+ }
344
+ },
345
+ "can_view": {
346
+ "computedUserset": {
347
+ "relation": "viewer"
348
+ }
349
+ },
350
+ "can_view_access": {
351
+ "computedUserset": {
352
+ "relation": "viewer"
353
+ }
354
+ },
355
+ "organization": {
356
+ "this": {}
357
+ },
358
+ "owner": {
359
+ "union": {
360
+ "child": [
361
+ {
362
+ "this": {}
363
+ },
364
+ {
365
+ "tupleToUserset": {
366
+ "computedUserset": {
367
+ "relation": "admin"
368
+ },
369
+ "tupleset": {
370
+ "relation": "organization"
371
+ }
372
+ }
373
+ }
374
+ ]
375
+ }
376
+ },
377
+ "viewer": {
378
+ "tupleToUserset": {
379
+ "computedUserset": {
380
+ "relation": "admin"
381
+ },
382
+ "tupleset": {
383
+ "relation": "organization"
384
+ }
385
+ }
386
+ }
387
+ },
388
+ "type": "iam_policy"
389
+ },
390
+ {
391
+ "metadata": {
392
+ "module": "iam",
393
+ "relations": {
394
+ "can_delete": {},
395
+ "can_edit": {},
396
+ "can_grant_access": {},
397
+ "can_revoke": {},
398
+ "can_rotate": {},
399
+ "can_use": {},
400
+ "can_view": {},
401
+ "can_view_access": {},
402
+ "owner": {
403
+ "directly_related_user_types": [
404
+ {
405
+ "type": "identity_account"
406
+ }
407
+ ]
408
+ }
409
+ },
410
+ "source_info": {
411
+ "file": "iam/api_key.fga"
412
+ }
413
+ },
414
+ "relations": {
415
+ "can_delete": {
416
+ "computedUserset": {
417
+ "relation": "owner"
418
+ }
419
+ },
420
+ "can_edit": {
421
+ "computedUserset": {
422
+ "relation": "owner"
423
+ }
424
+ },
425
+ "can_grant_access": {
426
+ "computedUserset": {
427
+ "relation": "owner"
428
+ }
429
+ },
430
+ "can_revoke": {
431
+ "computedUserset": {
432
+ "relation": "owner"
433
+ }
434
+ },
435
+ "can_rotate": {
436
+ "computedUserset": {
437
+ "relation": "owner"
438
+ }
439
+ },
440
+ "can_use": {
441
+ "computedUserset": {
442
+ "relation": "owner"
443
+ }
444
+ },
445
+ "can_view": {
446
+ "computedUserset": {
447
+ "relation": "owner"
448
+ }
449
+ },
450
+ "can_view_access": {
451
+ "computedUserset": {
452
+ "relation": "owner"
453
+ }
454
+ },
455
+ "owner": {
456
+ "this": {}
457
+ }
458
+ },
459
+ "type": "api_key"
460
+ },
461
+ {
462
+ "metadata": {
463
+ "module": "iam",
464
+ "relations": {
465
+ "can_delete": {},
466
+ "can_edit": {},
467
+ "can_grant_access": {},
468
+ "can_view": {},
469
+ "can_view_access": {},
470
+ "organization": {
471
+ "directly_related_user_types": [
472
+ {
473
+ "type": "organization"
474
+ }
475
+ ]
476
+ },
477
+ "owner": {
478
+ "directly_related_user_types": [
479
+ {
480
+ "type": "identity_account"
481
+ }
482
+ ]
483
+ },
484
+ "viewer": {
485
+ "directly_related_user_types": [
486
+ {
487
+ "type": "identity_account"
488
+ }
489
+ ]
490
+ }
491
+ },
492
+ "source_info": {
493
+ "file": "iam/oauth_app.fga"
494
+ }
495
+ },
496
+ "relations": {
497
+ "can_delete": {
498
+ "computedUserset": {
499
+ "relation": "owner"
500
+ }
501
+ },
502
+ "can_edit": {
503
+ "computedUserset": {
504
+ "relation": "owner"
505
+ }
506
+ },
507
+ "can_grant_access": {
508
+ "computedUserset": {
509
+ "relation": "owner"
510
+ }
511
+ },
512
+ "can_view": {
513
+ "computedUserset": {
514
+ "relation": "viewer"
515
+ }
516
+ },
517
+ "can_view_access": {
518
+ "computedUserset": {
519
+ "relation": "viewer"
520
+ }
521
+ },
522
+ "organization": {
523
+ "this": {}
524
+ },
525
+ "owner": {
526
+ "this": {}
527
+ },
528
+ "viewer": {
529
+ "union": {
530
+ "child": [
531
+ {
532
+ "this": {}
533
+ },
534
+ {
535
+ "computedUserset": {
536
+ "relation": "owner"
537
+ }
538
+ },
539
+ {
540
+ "tupleToUserset": {
541
+ "computedUserset": {
542
+ "relation": "admin"
543
+ },
544
+ "tupleset": {
545
+ "relation": "organization"
546
+ }
547
+ }
548
+ }
549
+ ]
550
+ }
551
+ }
552
+ },
553
+ "type": "oauth_app"
554
+ },
555
+ {
556
+ "metadata": {
557
+ "module": "iam",
558
+ "relations": {
559
+ "can_delete": {},
560
+ "can_edit": {},
561
+ "can_grant_access": {},
562
+ "can_view": {},
563
+ "can_view_access": {},
564
+ "organization": {
565
+ "directly_related_user_types": [
566
+ {
567
+ "type": "organization"
568
+ }
569
+ ]
570
+ },
571
+ "owner": {
572
+ "directly_related_user_types": [
573
+ {
574
+ "type": "identity_account"
575
+ }
576
+ ]
577
+ },
578
+ "viewer": {
579
+ "directly_related_user_types": [
580
+ {
581
+ "type": "identity_account"
582
+ }
583
+ ]
584
+ }
585
+ },
586
+ "source_info": {
587
+ "file": "iam/platform_client.fga"
588
+ }
589
+ },
590
+ "relations": {
591
+ "can_delete": {
592
+ "computedUserset": {
593
+ "relation": "owner"
594
+ }
595
+ },
596
+ "can_edit": {
597
+ "computedUserset": {
598
+ "relation": "owner"
599
+ }
600
+ },
601
+ "can_grant_access": {
602
+ "computedUserset": {
603
+ "relation": "owner"
604
+ }
605
+ },
606
+ "can_view": {
607
+ "computedUserset": {
608
+ "relation": "viewer"
609
+ }
610
+ },
611
+ "can_view_access": {
612
+ "computedUserset": {
613
+ "relation": "viewer"
614
+ }
615
+ },
616
+ "organization": {
617
+ "this": {}
618
+ },
619
+ "owner": {
620
+ "this": {}
621
+ },
622
+ "viewer": {
623
+ "union": {
624
+ "child": [
625
+ {
626
+ "this": {}
627
+ },
628
+ {
629
+ "computedUserset": {
630
+ "relation": "owner"
631
+ }
632
+ },
633
+ {
634
+ "tupleToUserset": {
635
+ "computedUserset": {
636
+ "relation": "admin"
637
+ },
638
+ "tupleset": {
639
+ "relation": "organization"
640
+ }
641
+ }
642
+ }
643
+ ]
644
+ }
645
+ }
646
+ },
647
+ "type": "platform_client"
648
+ },
649
+ {
650
+ "metadata": {
651
+ "module": "iam",
652
+ "relations": {
653
+ "can_delete": {},
654
+ "can_edit": {},
655
+ "can_view": {},
656
+ "organization": {
657
+ "directly_related_user_types": [
658
+ {
659
+ "type": "organization"
660
+ }
661
+ ]
662
+ },
663
+ "owner": {
664
+ "directly_related_user_types": [
665
+ {
666
+ "type": "identity_account"
667
+ }
668
+ ]
669
+ },
670
+ "viewer": {}
671
+ },
672
+ "source_info": {
673
+ "file": "iam/invitation.fga"
674
+ }
675
+ },
676
+ "relations": {
677
+ "can_delete": {
678
+ "computedUserset": {
679
+ "relation": "owner"
680
+ }
681
+ },
682
+ "can_edit": {
683
+ "computedUserset": {
684
+ "relation": "owner"
685
+ }
686
+ },
687
+ "can_view": {
688
+ "computedUserset": {
689
+ "relation": "viewer"
690
+ }
691
+ },
692
+ "organization": {
693
+ "this": {}
694
+ },
695
+ "owner": {
696
+ "union": {
697
+ "child": [
698
+ {
699
+ "this": {}
700
+ },
701
+ {
702
+ "tupleToUserset": {
703
+ "computedUserset": {
704
+ "relation": "admin"
705
+ },
706
+ "tupleset": {
707
+ "relation": "organization"
708
+ }
709
+ }
710
+ }
711
+ ]
712
+ }
713
+ },
714
+ "viewer": {
715
+ "tupleToUserset": {
716
+ "computedUserset": {
717
+ "relation": "admin"
718
+ },
719
+ "tupleset": {
720
+ "relation": "organization"
721
+ }
722
+ }
723
+ }
724
+ },
725
+ "type": "invitation"
726
+ },
727
+ {
728
+ "metadata": {
729
+ "module": "iam",
730
+ "relations": {
731
+ "can_delete": {},
732
+ "can_edit": {},
733
+ "can_grant_access": {},
734
+ "can_view": {},
735
+ "can_view_access": {},
736
+ "member": {
737
+ "directly_related_user_types": [
738
+ {
739
+ "type": "identity_account"
740
+ }
741
+ ]
742
+ },
743
+ "organization": {
744
+ "directly_related_user_types": [
745
+ {
746
+ "type": "organization"
747
+ }
748
+ ]
749
+ },
750
+ "viewer": {}
751
+ },
752
+ "source_info": {
753
+ "file": "iam/team.fga"
754
+ }
755
+ },
756
+ "relations": {
757
+ "can_delete": {
758
+ "tupleToUserset": {
759
+ "computedUserset": {
760
+ "relation": "admin"
761
+ },
762
+ "tupleset": {
763
+ "relation": "organization"
764
+ }
765
+ }
766
+ },
767
+ "can_edit": {
768
+ "tupleToUserset": {
769
+ "computedUserset": {
770
+ "relation": "admin"
771
+ },
772
+ "tupleset": {
773
+ "relation": "organization"
774
+ }
775
+ }
776
+ },
777
+ "can_grant_access": {
778
+ "tupleToUserset": {
779
+ "computedUserset": {
780
+ "relation": "admin"
781
+ },
782
+ "tupleset": {
783
+ "relation": "organization"
784
+ }
785
+ }
786
+ },
787
+ "can_view": {
788
+ "computedUserset": {
789
+ "relation": "viewer"
790
+ }
791
+ },
792
+ "can_view_access": {
793
+ "computedUserset": {
794
+ "relation": "viewer"
795
+ }
796
+ },
797
+ "member": {
798
+ "intersection": {
799
+ "child": [
800
+ {
801
+ "this": {}
802
+ },
803
+ {
804
+ "tupleToUserset": {
805
+ "computedUserset": {
806
+ "relation": "viewer"
807
+ },
808
+ "tupleset": {
809
+ "relation": "organization"
810
+ }
811
+ }
812
+ }
813
+ ]
814
+ }
815
+ },
816
+ "organization": {
817
+ "this": {}
818
+ },
819
+ "viewer": {
820
+ "tupleToUserset": {
821
+ "computedUserset": {
822
+ "relation": "viewer"
823
+ },
824
+ "tupleset": {
825
+ "relation": "organization"
826
+ }
827
+ }
828
+ }
829
+ },
830
+ "type": "team"
831
+ },
832
+ {
833
+ "metadata": {
834
+ "module": "tenancy",
835
+ "relations": {
836
+ "admin": {
837
+ "directly_related_user_types": [
838
+ {
839
+ "type": "identity_account"
840
+ }
841
+ ]
842
+ },
843
+ "can_assign_roles": {},
844
+ "can_create_agent": {},
845
+ "can_create_agent_instance": {},
846
+ "can_create_agent_share": {},
847
+ "can_create_channel_app": {},
848
+ "can_create_environment": {},
849
+ "can_create_execution_in": {},
850
+ "can_create_identity_account": {},
851
+ "can_create_idp": {},
852
+ "can_create_mcp_server": {},
853
+ "can_create_oauth_app": {},
854
+ "can_create_platform_client": {},
855
+ "can_create_plugin": {},
856
+ "can_create_session": {},
857
+ "can_create_skill": {},
858
+ "can_create_team": {},
859
+ "can_create_workflow": {},
860
+ "can_delete": {},
861
+ "can_edit": {},
862
+ "can_grant_access": {},
863
+ "can_manage_billing": {},
864
+ "can_manage_members": {},
865
+ "can_view": {},
866
+ "can_view_access": {},
867
+ "can_view_billing": {},
868
+ "guest": {
869
+ "directly_related_user_types": [
870
+ {
871
+ "type": "identity_account"
872
+ }
873
+ ]
874
+ },
875
+ "member": {
876
+ "directly_related_user_types": [
877
+ {
878
+ "type": "identity_account"
879
+ }
880
+ ]
881
+ },
882
+ "owner": {
883
+ "directly_related_user_types": [
884
+ {
885
+ "type": "identity_account"
886
+ }
887
+ ]
888
+ },
889
+ "viewer": {
890
+ "directly_related_user_types": [
891
+ {
892
+ "type": "identity_account"
893
+ }
894
+ ]
895
+ }
896
+ },
897
+ "source_info": {
898
+ "file": "tenancy/organization.fga"
899
+ }
900
+ },
901
+ "relations": {
902
+ "admin": {
903
+ "union": {
904
+ "child": [
905
+ {
906
+ "this": {}
907
+ },
908
+ {
909
+ "computedUserset": {
910
+ "relation": "owner"
911
+ }
912
+ }
913
+ ]
914
+ }
915
+ },
916
+ "can_assign_roles": {
917
+ "computedUserset": {
918
+ "relation": "owner"
919
+ }
920
+ },
921
+ "can_create_agent": {
922
+ "computedUserset": {
923
+ "relation": "admin"
924
+ }
925
+ },
926
+ "can_create_agent_instance": {
927
+ "computedUserset": {
928
+ "relation": "member"
929
+ }
930
+ },
931
+ "can_create_agent_share": {
932
+ "computedUserset": {
933
+ "relation": "admin"
934
+ }
935
+ },
936
+ "can_create_channel_app": {
937
+ "computedUserset": {
938
+ "relation": "admin"
939
+ }
940
+ },
941
+ "can_create_environment": {
942
+ "computedUserset": {
943
+ "relation": "member"
944
+ }
945
+ },
946
+ "can_create_execution_in": {
947
+ "union": {
948
+ "child": [
949
+ {
950
+ "computedUserset": {
951
+ "relation": "member"
952
+ }
953
+ },
954
+ {
955
+ "computedUserset": {
956
+ "relation": "guest"
957
+ }
958
+ }
959
+ ]
960
+ }
961
+ },
962
+ "can_create_identity_account": {
963
+ "computedUserset": {
964
+ "relation": "admin"
965
+ }
966
+ },
967
+ "can_create_idp": {
968
+ "computedUserset": {
969
+ "relation": "admin"
970
+ }
971
+ },
972
+ "can_create_mcp_server": {
973
+ "computedUserset": {
974
+ "relation": "admin"
975
+ }
976
+ },
977
+ "can_create_oauth_app": {
978
+ "computedUserset": {
979
+ "relation": "admin"
980
+ }
981
+ },
982
+ "can_create_platform_client": {
983
+ "computedUserset": {
984
+ "relation": "admin"
985
+ }
986
+ },
987
+ "can_create_plugin": {
988
+ "computedUserset": {
989
+ "relation": "admin"
990
+ }
991
+ },
992
+ "can_create_session": {
993
+ "union": {
994
+ "child": [
995
+ {
996
+ "computedUserset": {
997
+ "relation": "member"
998
+ }
999
+ },
1000
+ {
1001
+ "computedUserset": {
1002
+ "relation": "guest"
1003
+ }
1004
+ }
1005
+ ]
1006
+ }
1007
+ },
1008
+ "can_create_skill": {
1009
+ "computedUserset": {
1010
+ "relation": "admin"
1011
+ }
1012
+ },
1013
+ "can_create_team": {
1014
+ "computedUserset": {
1015
+ "relation": "admin"
1016
+ }
1017
+ },
1018
+ "can_create_workflow": {
1019
+ "computedUserset": {
1020
+ "relation": "admin"
1021
+ }
1022
+ },
1023
+ "can_delete": {
1024
+ "computedUserset": {
1025
+ "relation": "owner"
1026
+ }
1027
+ },
1028
+ "can_edit": {
1029
+ "computedUserset": {
1030
+ "relation": "admin"
1031
+ }
1032
+ },
1033
+ "can_grant_access": {
1034
+ "computedUserset": {
1035
+ "relation": "admin"
1036
+ }
1037
+ },
1038
+ "can_manage_billing": {
1039
+ "computedUserset": {
1040
+ "relation": "admin"
1041
+ }
1042
+ },
1043
+ "can_manage_members": {
1044
+ "computedUserset": {
1045
+ "relation": "admin"
1046
+ }
1047
+ },
1048
+ "can_view": {
1049
+ "computedUserset": {
1050
+ "relation": "viewer"
1051
+ }
1052
+ },
1053
+ "can_view_access": {
1054
+ "computedUserset": {
1055
+ "relation": "viewer"
1056
+ }
1057
+ },
1058
+ "can_view_billing": {
1059
+ "computedUserset": {
1060
+ "relation": "viewer"
1061
+ }
1062
+ },
1063
+ "guest": {
1064
+ "this": {}
1065
+ },
1066
+ "member": {
1067
+ "union": {
1068
+ "child": [
1069
+ {
1070
+ "this": {}
1071
+ },
1072
+ {
1073
+ "computedUserset": {
1074
+ "relation": "admin"
1075
+ }
1076
+ }
1077
+ ]
1078
+ }
1079
+ },
1080
+ "owner": {
1081
+ "this": {}
1082
+ },
1083
+ "viewer": {
1084
+ "union": {
1085
+ "child": [
1086
+ {
1087
+ "this": {}
1088
+ },
1089
+ {
1090
+ "computedUserset": {
1091
+ "relation": "member"
1092
+ }
1093
+ }
1094
+ ]
1095
+ }
1096
+ }
1097
+ },
1098
+ "type": "organization"
1099
+ },
1100
+ {
1101
+ "metadata": {
1102
+ "module": "agentic",
1103
+ "relations": {
1104
+ "can_clone": {},
1105
+ "can_create_instance": {},
1106
+ "can_delete": {},
1107
+ "can_edit": {},
1108
+ "can_execute": {},
1109
+ "can_grant_access": {},
1110
+ "can_view": {},
1111
+ "can_view_access": {},
1112
+ "organization": {
1113
+ "directly_related_user_types": [
1114
+ {
1115
+ "type": "organization"
1116
+ }
1117
+ ]
1118
+ },
1119
+ "owner": {
1120
+ "directly_related_user_types": [
1121
+ {
1122
+ "type": "identity_account"
1123
+ }
1124
+ ]
1125
+ },
1126
+ "platform_viewer": {
1127
+ "directly_related_user_types": [
1128
+ {
1129
+ "relation": "platform_user",
1130
+ "type": "identity_provider"
1131
+ }
1132
+ ]
1133
+ },
1134
+ "viewer": {
1135
+ "directly_related_user_types": [
1136
+ {
1137
+ "type": "identity_account"
1138
+ },
1139
+ {
1140
+ "relation": "member",
1141
+ "type": "organization"
1142
+ },
1143
+ {
1144
+ "relation": "viewer",
1145
+ "type": "organization"
1146
+ },
1147
+ {
1148
+ "relation": "member",
1149
+ "type": "team"
1150
+ }
1151
+ ]
1152
+ }
1153
+ },
1154
+ "source_info": {
1155
+ "file": "agentic/agent.fga"
1156
+ }
1157
+ },
1158
+ "relations": {
1159
+ "can_clone": {
1160
+ "computedUserset": {
1161
+ "relation": "viewer"
1162
+ }
1163
+ },
1164
+ "can_create_instance": {
1165
+ "computedUserset": {
1166
+ "relation": "can_execute"
1167
+ }
1168
+ },
1169
+ "can_delete": {
1170
+ "computedUserset": {
1171
+ "relation": "owner"
1172
+ }
1173
+ },
1174
+ "can_edit": {
1175
+ "computedUserset": {
1176
+ "relation": "owner"
1177
+ }
1178
+ },
1179
+ "can_execute": {
1180
+ "computedUserset": {
1181
+ "relation": "viewer"
1182
+ }
1183
+ },
1184
+ "can_grant_access": {
1185
+ "computedUserset": {
1186
+ "relation": "owner"
1187
+ }
1188
+ },
1189
+ "can_view": {
1190
+ "computedUserset": {
1191
+ "relation": "viewer"
1192
+ }
1193
+ },
1194
+ "can_view_access": {
1195
+ "computedUserset": {
1196
+ "relation": "viewer"
1197
+ }
1198
+ },
1199
+ "organization": {
1200
+ "this": {}
1201
+ },
1202
+ "owner": {
1203
+ "union": {
1204
+ "child": [
1205
+ {
1206
+ "this": {}
1207
+ },
1208
+ {
1209
+ "tupleToUserset": {
1210
+ "computedUserset": {
1211
+ "relation": "admin"
1212
+ },
1213
+ "tupleset": {
1214
+ "relation": "organization"
1215
+ }
1216
+ }
1217
+ }
1218
+ ]
1219
+ }
1220
+ },
1221
+ "platform_viewer": {
1222
+ "this": {}
1223
+ },
1224
+ "viewer": {
1225
+ "union": {
1226
+ "child": [
1227
+ {
1228
+ "this": {}
1229
+ },
1230
+ {
1231
+ "computedUserset": {
1232
+ "relation": "owner"
1233
+ }
1234
+ },
1235
+ {
1236
+ "computedUserset": {
1237
+ "relation": "platform_viewer"
1238
+ }
1239
+ }
1240
+ ]
1241
+ }
1242
+ }
1243
+ },
1244
+ "type": "agent"
1245
+ },
1246
+ {
1247
+ "metadata": {
1248
+ "module": "agentic",
1249
+ "relations": {
1250
+ "can_delete": {},
1251
+ "can_edit": {},
1252
+ "can_grant_access": {},
1253
+ "can_participate": {},
1254
+ "can_view": {},
1255
+ "can_view_access": {},
1256
+ "organization": {
1257
+ "directly_related_user_types": [
1258
+ {
1259
+ "type": "organization"
1260
+ }
1261
+ ]
1262
+ },
1263
+ "owner": {
1264
+ "directly_related_user_types": [
1265
+ {
1266
+ "type": "identity_account"
1267
+ }
1268
+ ]
1269
+ },
1270
+ "participant": {
1271
+ "directly_related_user_types": [
1272
+ {
1273
+ "type": "identity_account"
1274
+ },
1275
+ {
1276
+ "relation": "member",
1277
+ "type": "team"
1278
+ }
1279
+ ]
1280
+ },
1281
+ "viewer": {
1282
+ "directly_related_user_types": [
1283
+ {
1284
+ "type": "identity_account"
1285
+ },
1286
+ {
1287
+ "relation": "member",
1288
+ "type": "team"
1289
+ }
1290
+ ]
1291
+ }
1292
+ },
1293
+ "source_info": {
1294
+ "file": "agentic/agent_channel.fga"
1295
+ }
1296
+ },
1297
+ "relations": {
1298
+ "can_delete": {
1299
+ "computedUserset": {
1300
+ "relation": "owner"
1301
+ }
1302
+ },
1303
+ "can_edit": {
1304
+ "computedUserset": {
1305
+ "relation": "owner"
1306
+ }
1307
+ },
1308
+ "can_grant_access": {
1309
+ "computedUserset": {
1310
+ "relation": "owner"
1311
+ }
1312
+ },
1313
+ "can_participate": {
1314
+ "computedUserset": {
1315
+ "relation": "participant"
1316
+ }
1317
+ },
1318
+ "can_view": {
1319
+ "computedUserset": {
1320
+ "relation": "viewer"
1321
+ }
1322
+ },
1323
+ "can_view_access": {
1324
+ "computedUserset": {
1325
+ "relation": "viewer"
1326
+ }
1327
+ },
1328
+ "organization": {
1329
+ "this": {}
1330
+ },
1331
+ "owner": {
1332
+ "union": {
1333
+ "child": [
1334
+ {
1335
+ "this": {}
1336
+ },
1337
+ {
1338
+ "tupleToUserset": {
1339
+ "computedUserset": {
1340
+ "relation": "admin"
1341
+ },
1342
+ "tupleset": {
1343
+ "relation": "organization"
1344
+ }
1345
+ }
1346
+ }
1347
+ ]
1348
+ }
1349
+ },
1350
+ "participant": {
1351
+ "union": {
1352
+ "child": [
1353
+ {
1354
+ "this": {}
1355
+ },
1356
+ {
1357
+ "computedUserset": {
1358
+ "relation": "owner"
1359
+ }
1360
+ }
1361
+ ]
1362
+ }
1363
+ },
1364
+ "viewer": {
1365
+ "union": {
1366
+ "child": [
1367
+ {
1368
+ "this": {}
1369
+ },
1370
+ {
1371
+ "computedUserset": {
1372
+ "relation": "participant"
1373
+ }
1374
+ }
1375
+ ]
1376
+ }
1377
+ }
1378
+ },
1379
+ "type": "agent_channel"
1380
+ },
1381
+ {
1382
+ "metadata": {
1383
+ "module": "agentic",
1384
+ "relations": {
1385
+ "can_delete": {},
1386
+ "can_edit": {},
1387
+ "can_grant_access": {},
1388
+ "can_view": {},
1389
+ "can_view_access": {},
1390
+ "organization": {
1391
+ "directly_related_user_types": [
1392
+ {
1393
+ "type": "organization"
1394
+ }
1395
+ ]
1396
+ },
1397
+ "owner": {
1398
+ "directly_related_user_types": [
1399
+ {
1400
+ "type": "identity_account"
1401
+ }
1402
+ ]
1403
+ },
1404
+ "viewer": {
1405
+ "directly_related_user_types": [
1406
+ {
1407
+ "type": "identity_account"
1408
+ }
1409
+ ]
1410
+ }
1411
+ },
1412
+ "source_info": {
1413
+ "file": "agentic/agent_share.fga"
1414
+ }
1415
+ },
1416
+ "relations": {
1417
+ "can_delete": {
1418
+ "computedUserset": {
1419
+ "relation": "owner"
1420
+ }
1421
+ },
1422
+ "can_edit": {
1423
+ "computedUserset": {
1424
+ "relation": "owner"
1425
+ }
1426
+ },
1427
+ "can_grant_access": {
1428
+ "computedUserset": {
1429
+ "relation": "owner"
1430
+ }
1431
+ },
1432
+ "can_view": {
1433
+ "computedUserset": {
1434
+ "relation": "viewer"
1435
+ }
1436
+ },
1437
+ "can_view_access": {
1438
+ "computedUserset": {
1439
+ "relation": "viewer"
1440
+ }
1441
+ },
1442
+ "organization": {
1443
+ "this": {}
1444
+ },
1445
+ "owner": {
1446
+ "union": {
1447
+ "child": [
1448
+ {
1449
+ "this": {}
1450
+ },
1451
+ {
1452
+ "tupleToUserset": {
1453
+ "computedUserset": {
1454
+ "relation": "admin"
1455
+ },
1456
+ "tupleset": {
1457
+ "relation": "organization"
1458
+ }
1459
+ }
1460
+ }
1461
+ ]
1462
+ }
1463
+ },
1464
+ "viewer": {
1465
+ "union": {
1466
+ "child": [
1467
+ {
1468
+ "this": {}
1469
+ },
1470
+ {
1471
+ "computedUserset": {
1472
+ "relation": "owner"
1473
+ }
1474
+ }
1475
+ ]
1476
+ }
1477
+ }
1478
+ },
1479
+ "type": "agent_share"
1480
+ },
1481
+ {
1482
+ "metadata": {
1483
+ "module": "agentic",
1484
+ "relations": {
1485
+ "can_delete": {},
1486
+ "can_edit": {},
1487
+ "can_grant_access": {},
1488
+ "can_view": {},
1489
+ "can_view_access": {},
1490
+ "organization": {
1491
+ "directly_related_user_types": [
1492
+ {
1493
+ "type": "organization"
1494
+ }
1495
+ ]
1496
+ },
1497
+ "owner": {
1498
+ "directly_related_user_types": [
1499
+ {
1500
+ "type": "identity_account"
1501
+ }
1502
+ ]
1503
+ },
1504
+ "viewer": {
1505
+ "directly_related_user_types": [
1506
+ {
1507
+ "type": "identity_account"
1508
+ }
1509
+ ]
1510
+ }
1511
+ },
1512
+ "source_info": {
1513
+ "file": "agentic/channel_app.fga"
1514
+ }
1515
+ },
1516
+ "relations": {
1517
+ "can_delete": {
1518
+ "computedUserset": {
1519
+ "relation": "owner"
1520
+ }
1521
+ },
1522
+ "can_edit": {
1523
+ "computedUserset": {
1524
+ "relation": "owner"
1525
+ }
1526
+ },
1527
+ "can_grant_access": {
1528
+ "computedUserset": {
1529
+ "relation": "owner"
1530
+ }
1531
+ },
1532
+ "can_view": {
1533
+ "computedUserset": {
1534
+ "relation": "viewer"
1535
+ }
1536
+ },
1537
+ "can_view_access": {
1538
+ "computedUserset": {
1539
+ "relation": "viewer"
1540
+ }
1541
+ },
1542
+ "organization": {
1543
+ "this": {}
1544
+ },
1545
+ "owner": {
1546
+ "union": {
1547
+ "child": [
1548
+ {
1549
+ "this": {}
1550
+ },
1551
+ {
1552
+ "tupleToUserset": {
1553
+ "computedUserset": {
1554
+ "relation": "admin"
1555
+ },
1556
+ "tupleset": {
1557
+ "relation": "organization"
1558
+ }
1559
+ }
1560
+ }
1561
+ ]
1562
+ }
1563
+ },
1564
+ "viewer": {
1565
+ "union": {
1566
+ "child": [
1567
+ {
1568
+ "this": {}
1569
+ },
1570
+ {
1571
+ "computedUserset": {
1572
+ "relation": "owner"
1573
+ }
1574
+ }
1575
+ ]
1576
+ }
1577
+ }
1578
+ },
1579
+ "type": "channel_app"
1580
+ },
1581
+ {
1582
+ "metadata": {
1583
+ "module": "agentic",
1584
+ "relations": {
1585
+ "agent": {
1586
+ "directly_related_user_types": [
1587
+ {
1588
+ "type": "agent"
1589
+ }
1590
+ ]
1591
+ },
1592
+ "can_delete": {},
1593
+ "can_edit": {},
1594
+ "can_execute": {},
1595
+ "can_grant_access": {},
1596
+ "can_view": {},
1597
+ "can_view_access": {},
1598
+ "default_of": {
1599
+ "directly_related_user_types": [
1600
+ {
1601
+ "type": "agent"
1602
+ }
1603
+ ]
1604
+ },
1605
+ "organization": {
1606
+ "directly_related_user_types": [
1607
+ {
1608
+ "type": "organization"
1609
+ }
1610
+ ]
1611
+ },
1612
+ "owner": {
1613
+ "directly_related_user_types": [
1614
+ {
1615
+ "type": "identity_account"
1616
+ }
1617
+ ]
1618
+ },
1619
+ "viewer": {
1620
+ "directly_related_user_types": [
1621
+ {
1622
+ "type": "identity_account"
1623
+ },
1624
+ {
1625
+ "relation": "member",
1626
+ "type": "organization"
1627
+ },
1628
+ {
1629
+ "relation": "viewer",
1630
+ "type": "organization"
1631
+ },
1632
+ {
1633
+ "relation": "member",
1634
+ "type": "team"
1635
+ }
1636
+ ]
1637
+ }
1638
+ },
1639
+ "source_info": {
1640
+ "file": "agentic/agent_instance.fga"
1641
+ }
1642
+ },
1643
+ "relations": {
1644
+ "agent": {
1645
+ "this": {}
1646
+ },
1647
+ "can_delete": {
1648
+ "computedUserset": {
1649
+ "relation": "owner"
1650
+ }
1651
+ },
1652
+ "can_edit": {
1653
+ "computedUserset": {
1654
+ "relation": "owner"
1655
+ }
1656
+ },
1657
+ "can_execute": {
1658
+ "computedUserset": {
1659
+ "relation": "can_view"
1660
+ }
1661
+ },
1662
+ "can_grant_access": {
1663
+ "computedUserset": {
1664
+ "relation": "owner"
1665
+ }
1666
+ },
1667
+ "can_view": {
1668
+ "computedUserset": {
1669
+ "relation": "viewer"
1670
+ }
1671
+ },
1672
+ "can_view_access": {
1673
+ "computedUserset": {
1674
+ "relation": "viewer"
1675
+ }
1676
+ },
1677
+ "default_of": {
1678
+ "this": {}
1679
+ },
1680
+ "organization": {
1681
+ "this": {}
1682
+ },
1683
+ "owner": {
1684
+ "this": {}
1685
+ },
1686
+ "viewer": {
1687
+ "union": {
1688
+ "child": [
1689
+ {
1690
+ "this": {}
1691
+ },
1692
+ {
1693
+ "computedUserset": {
1694
+ "relation": "owner"
1695
+ }
1696
+ },
1697
+ {
1698
+ "tupleToUserset": {
1699
+ "computedUserset": {
1700
+ "relation": "viewer"
1701
+ },
1702
+ "tupleset": {
1703
+ "relation": "default_of"
1704
+ }
1705
+ }
1706
+ }
1707
+ ]
1708
+ }
1709
+ }
1710
+ },
1711
+ "type": "agent_instance"
1712
+ },
1713
+ {
1714
+ "metadata": {
1715
+ "module": "agentic",
1716
+ "relations": {
1717
+ "can_edit": {},
1718
+ "can_view": {},
1719
+ "owner": {},
1720
+ "session": {
1721
+ "directly_related_user_types": [
1722
+ {
1723
+ "type": "session"
1724
+ }
1725
+ ]
1726
+ },
1727
+ "viewer": {}
1728
+ },
1729
+ "source_info": {
1730
+ "file": "agentic/agent_execution.fga"
1731
+ }
1732
+ },
1733
+ "relations": {
1734
+ "can_edit": {
1735
+ "computedUserset": {
1736
+ "relation": "owner"
1737
+ }
1738
+ },
1739
+ "can_view": {
1740
+ "union": {
1741
+ "child": [
1742
+ {
1743
+ "computedUserset": {
1744
+ "relation": "viewer"
1745
+ }
1746
+ },
1747
+ {
1748
+ "tupleToUserset": {
1749
+ "computedUserset": {
1750
+ "relation": "can_view"
1751
+ },
1752
+ "tupleset": {
1753
+ "relation": "session"
1754
+ }
1755
+ }
1756
+ }
1757
+ ]
1758
+ }
1759
+ },
1760
+ "owner": {
1761
+ "tupleToUserset": {
1762
+ "computedUserset": {
1763
+ "relation": "owner"
1764
+ },
1765
+ "tupleset": {
1766
+ "relation": "session"
1767
+ }
1768
+ }
1769
+ },
1770
+ "session": {
1771
+ "this": {}
1772
+ },
1773
+ "viewer": {
1774
+ "union": {
1775
+ "child": [
1776
+ {
1777
+ "tupleToUserset": {
1778
+ "computedUserset": {
1779
+ "relation": "viewer"
1780
+ },
1781
+ "tupleset": {
1782
+ "relation": "session"
1783
+ }
1784
+ }
1785
+ },
1786
+ {
1787
+ "computedUserset": {
1788
+ "relation": "owner"
1789
+ }
1790
+ }
1791
+ ]
1792
+ }
1793
+ }
1794
+ },
1795
+ "type": "agent_execution"
1796
+ },
1797
+ {
1798
+ "metadata": {
1799
+ "module": "agentic",
1800
+ "relations": {
1801
+ "can_edit": {},
1802
+ "can_view": {},
1803
+ "organization": {
1804
+ "directly_related_user_types": [
1805
+ {
1806
+ "type": "organization"
1807
+ }
1808
+ ]
1809
+ },
1810
+ "owner": {
1811
+ "directly_related_user_types": [
1812
+ {
1813
+ "type": "identity_account"
1814
+ }
1815
+ ]
1816
+ },
1817
+ "viewer": {
1818
+ "directly_related_user_types": [
1819
+ {
1820
+ "type": "identity_account"
1821
+ }
1822
+ ]
1823
+ }
1824
+ },
1825
+ "source_info": {
1826
+ "file": "agentic/artifact.fga"
1827
+ }
1828
+ },
1829
+ "relations": {
1830
+ "can_edit": {
1831
+ "tupleToUserset": {
1832
+ "computedUserset": {
1833
+ "relation": "admin"
1834
+ },
1835
+ "tupleset": {
1836
+ "relation": "organization"
1837
+ }
1838
+ }
1839
+ },
1840
+ "can_view": {
1841
+ "union": {
1842
+ "child": [
1843
+ {
1844
+ "computedUserset": {
1845
+ "relation": "owner"
1846
+ }
1847
+ },
1848
+ {
1849
+ "computedUserset": {
1850
+ "relation": "viewer"
1851
+ }
1852
+ }
1853
+ ]
1854
+ }
1855
+ },
1856
+ "organization": {
1857
+ "this": {}
1858
+ },
1859
+ "owner": {
1860
+ "this": {}
1861
+ },
1862
+ "viewer": {
1863
+ "union": {
1864
+ "child": [
1865
+ {
1866
+ "this": {}
1867
+ },
1868
+ {
1869
+ "tupleToUserset": {
1870
+ "computedUserset": {
1871
+ "relation": "viewer"
1872
+ },
1873
+ "tupleset": {
1874
+ "relation": "organization"
1875
+ }
1876
+ }
1877
+ }
1878
+ ]
1879
+ }
1880
+ }
1881
+ },
1882
+ "type": "artifact"
1883
+ },
1884
+ {
1885
+ "metadata": {
1886
+ "module": "agentic",
1887
+ "relations": {
1888
+ "can_delete": {},
1889
+ "can_edit": {},
1890
+ "can_grant_access": {},
1891
+ "can_read_secrets": {},
1892
+ "can_view": {},
1893
+ "can_view_access": {},
1894
+ "creator": {
1895
+ "directly_related_user_types": [
1896
+ {
1897
+ "type": "identity_account"
1898
+ }
1899
+ ]
1900
+ },
1901
+ "organization": {
1902
+ "directly_related_user_types": [
1903
+ {
1904
+ "type": "organization"
1905
+ }
1906
+ ]
1907
+ },
1908
+ "owner": {
1909
+ "directly_related_user_types": [
1910
+ {
1911
+ "type": "identity_account"
1912
+ }
1913
+ ]
1914
+ },
1915
+ "viewer": {
1916
+ "directly_related_user_types": [
1917
+ {
1918
+ "type": "identity_account"
1919
+ },
1920
+ {
1921
+ "relation": "member",
1922
+ "type": "organization"
1923
+ },
1924
+ {
1925
+ "relation": "viewer",
1926
+ "type": "organization"
1927
+ }
1928
+ ]
1929
+ }
1930
+ },
1931
+ "source_info": {
1932
+ "file": "agentic/environment.fga"
1933
+ }
1934
+ },
1935
+ "relations": {
1936
+ "can_delete": {
1937
+ "computedUserset": {
1938
+ "relation": "owner"
1939
+ }
1940
+ },
1941
+ "can_edit": {
1942
+ "computedUserset": {
1943
+ "relation": "owner"
1944
+ }
1945
+ },
1946
+ "can_grant_access": {
1947
+ "computedUserset": {
1948
+ "relation": "owner"
1949
+ }
1950
+ },
1951
+ "can_read_secrets": {
1952
+ "computedUserset": {
1953
+ "relation": "creator"
1954
+ }
1955
+ },
1956
+ "can_view": {
1957
+ "computedUserset": {
1958
+ "relation": "viewer"
1959
+ }
1960
+ },
1961
+ "can_view_access": {
1962
+ "computedUserset": {
1963
+ "relation": "viewer"
1964
+ }
1965
+ },
1966
+ "creator": {
1967
+ "this": {}
1968
+ },
1969
+ "organization": {
1970
+ "this": {}
1971
+ },
1972
+ "owner": {
1973
+ "this": {}
1974
+ },
1975
+ "viewer": {
1976
+ "union": {
1977
+ "child": [
1978
+ {
1979
+ "this": {}
1980
+ },
1981
+ {
1982
+ "computedUserset": {
1983
+ "relation": "owner"
1984
+ }
1985
+ }
1986
+ ]
1987
+ }
1988
+ }
1989
+ },
1990
+ "type": "environment"
1991
+ },
1992
+ {
1993
+ "metadata": {
1994
+ "module": "agentic",
1995
+ "relations": {
1996
+ "can_edit": {},
1997
+ "can_view": {},
1998
+ "owner": {
1999
+ "directly_related_user_types": [
2000
+ {
2001
+ "type": "identity_account"
2002
+ }
2003
+ ]
2004
+ }
2005
+ },
2006
+ "source_info": {
2007
+ "file": "agentic/execution_context.fga"
2008
+ }
2009
+ },
2010
+ "relations": {
2011
+ "can_edit": {
2012
+ "computedUserset": {
2013
+ "relation": "owner"
2014
+ }
2015
+ },
2016
+ "can_view": {
2017
+ "computedUserset": {
2018
+ "relation": "owner"
2019
+ }
2020
+ },
2021
+ "owner": {
2022
+ "this": {}
2023
+ }
2024
+ },
2025
+ "type": "execution_context"
2026
+ },
2027
+ {
2028
+ "metadata": {
2029
+ "module": "agentic",
2030
+ "relations": {
2031
+ "can_clone": {},
2032
+ "can_connect": {},
2033
+ "can_delete": {},
2034
+ "can_edit": {},
2035
+ "can_grant_access": {},
2036
+ "can_use": {},
2037
+ "can_view": {},
2038
+ "can_view_access": {},
2039
+ "organization": {
2040
+ "directly_related_user_types": [
2041
+ {
2042
+ "type": "organization"
2043
+ }
2044
+ ]
2045
+ },
2046
+ "owner": {
2047
+ "directly_related_user_types": [
2048
+ {
2049
+ "type": "identity_account"
2050
+ }
2051
+ ]
2052
+ },
2053
+ "platform_viewer": {
2054
+ "directly_related_user_types": [
2055
+ {
2056
+ "relation": "platform_user",
2057
+ "type": "identity_provider"
2058
+ }
2059
+ ]
2060
+ },
2061
+ "viewer": {
2062
+ "directly_related_user_types": [
2063
+ {
2064
+ "type": "identity_account"
2065
+ },
2066
+ {
2067
+ "relation": "member",
2068
+ "type": "organization"
2069
+ },
2070
+ {
2071
+ "relation": "viewer",
2072
+ "type": "organization"
2073
+ },
2074
+ {
2075
+ "relation": "member",
2076
+ "type": "team"
2077
+ }
2078
+ ]
2079
+ }
2080
+ },
2081
+ "source_info": {
2082
+ "file": "agentic/mcp_server.fga"
2083
+ }
2084
+ },
2085
+ "relations": {
2086
+ "can_clone": {
2087
+ "computedUserset": {
2088
+ "relation": "viewer"
2089
+ }
2090
+ },
2091
+ "can_connect": {
2092
+ "computedUserset": {
2093
+ "relation": "viewer"
2094
+ }
2095
+ },
2096
+ "can_delete": {
2097
+ "computedUserset": {
2098
+ "relation": "owner"
2099
+ }
2100
+ },
2101
+ "can_edit": {
2102
+ "computedUserset": {
2103
+ "relation": "owner"
2104
+ }
2105
+ },
2106
+ "can_grant_access": {
2107
+ "computedUserset": {
2108
+ "relation": "owner"
2109
+ }
2110
+ },
2111
+ "can_use": {
2112
+ "computedUserset": {
2113
+ "relation": "viewer"
2114
+ }
2115
+ },
2116
+ "can_view": {
2117
+ "computedUserset": {
2118
+ "relation": "viewer"
2119
+ }
2120
+ },
2121
+ "can_view_access": {
2122
+ "computedUserset": {
2123
+ "relation": "viewer"
2124
+ }
2125
+ },
2126
+ "organization": {
2127
+ "this": {}
2128
+ },
2129
+ "owner": {
2130
+ "union": {
2131
+ "child": [
2132
+ {
2133
+ "this": {}
2134
+ },
2135
+ {
2136
+ "tupleToUserset": {
2137
+ "computedUserset": {
2138
+ "relation": "admin"
2139
+ },
2140
+ "tupleset": {
2141
+ "relation": "organization"
2142
+ }
2143
+ }
2144
+ }
2145
+ ]
2146
+ }
2147
+ },
2148
+ "platform_viewer": {
2149
+ "this": {}
2150
+ },
2151
+ "viewer": {
2152
+ "union": {
2153
+ "child": [
2154
+ {
2155
+ "this": {}
2156
+ },
2157
+ {
2158
+ "computedUserset": {
2159
+ "relation": "owner"
2160
+ }
2161
+ },
2162
+ {
2163
+ "computedUserset": {
2164
+ "relation": "platform_viewer"
2165
+ }
2166
+ }
2167
+ ]
2168
+ }
2169
+ }
2170
+ },
2171
+ "type": "mcp_server"
2172
+ },
2173
+ {
2174
+ "metadata": {
2175
+ "module": "agentic",
2176
+ "relations": {
2177
+ "can_delete": {},
2178
+ "can_edit": {},
2179
+ "can_view": {},
2180
+ "organization": {
2181
+ "directly_related_user_types": [
2182
+ {
2183
+ "type": "organization"
2184
+ }
2185
+ ]
2186
+ },
2187
+ "subject": {
2188
+ "directly_related_user_types": [
2189
+ {
2190
+ "type": "identity_account"
2191
+ }
2192
+ ]
2193
+ }
2194
+ },
2195
+ "source_info": {
2196
+ "file": "agentic/memory.fga"
2197
+ }
2198
+ },
2199
+ "relations": {
2200
+ "can_delete": {
2201
+ "computedUserset": {
2202
+ "relation": "subject"
2203
+ }
2204
+ },
2205
+ "can_edit": {
2206
+ "computedUserset": {
2207
+ "relation": "subject"
2208
+ }
2209
+ },
2210
+ "can_view": {
2211
+ "computedUserset": {
2212
+ "relation": "subject"
2213
+ }
2214
+ },
2215
+ "organization": {
2216
+ "this": {}
2217
+ },
2218
+ "subject": {
2219
+ "this": {}
2220
+ }
2221
+ },
2222
+ "type": "memory"
2223
+ },
2224
+ {
2225
+ "metadata": {
2226
+ "module": "agentic",
2227
+ "relations": {
2228
+ "can_delete": {},
2229
+ "can_edit": {},
2230
+ "can_grant_access": {},
2231
+ "can_use": {},
2232
+ "can_view": {},
2233
+ "can_view_access": {},
2234
+ "organization": {
2235
+ "directly_related_user_types": [
2236
+ {
2237
+ "type": "organization"
2238
+ }
2239
+ ]
2240
+ },
2241
+ "owner": {
2242
+ "directly_related_user_types": [
2243
+ {
2244
+ "type": "identity_account"
2245
+ }
2246
+ ]
2247
+ },
2248
+ "platform_viewer": {
2249
+ "directly_related_user_types": [
2250
+ {
2251
+ "relation": "platform_user",
2252
+ "type": "identity_provider"
2253
+ }
2254
+ ]
2255
+ },
2256
+ "viewer": {
2257
+ "directly_related_user_types": [
2258
+ {
2259
+ "type": "identity_account"
2260
+ },
2261
+ {
2262
+ "relation": "member",
2263
+ "type": "organization"
2264
+ },
2265
+ {
2266
+ "relation": "viewer",
2267
+ "type": "organization"
2268
+ },
2269
+ {
2270
+ "relation": "member",
2271
+ "type": "team"
2272
+ }
2273
+ ]
2274
+ }
2275
+ },
2276
+ "source_info": {
2277
+ "file": "agentic/plugin.fga"
2278
+ }
2279
+ },
2280
+ "relations": {
2281
+ "can_delete": {
2282
+ "computedUserset": {
2283
+ "relation": "owner"
2284
+ }
2285
+ },
2286
+ "can_edit": {
2287
+ "computedUserset": {
2288
+ "relation": "owner"
2289
+ }
2290
+ },
2291
+ "can_grant_access": {
2292
+ "computedUserset": {
2293
+ "relation": "owner"
2294
+ }
2295
+ },
2296
+ "can_use": {
2297
+ "computedUserset": {
2298
+ "relation": "viewer"
2299
+ }
2300
+ },
2301
+ "can_view": {
2302
+ "computedUserset": {
2303
+ "relation": "viewer"
2304
+ }
2305
+ },
2306
+ "can_view_access": {
2307
+ "computedUserset": {
2308
+ "relation": "viewer"
2309
+ }
2310
+ },
2311
+ "organization": {
2312
+ "this": {}
2313
+ },
2314
+ "owner": {
2315
+ "union": {
2316
+ "child": [
2317
+ {
2318
+ "this": {}
2319
+ },
2320
+ {
2321
+ "tupleToUserset": {
2322
+ "computedUserset": {
2323
+ "relation": "admin"
2324
+ },
2325
+ "tupleset": {
2326
+ "relation": "organization"
2327
+ }
2328
+ }
2329
+ }
2330
+ ]
2331
+ }
2332
+ },
2333
+ "platform_viewer": {
2334
+ "this": {}
2335
+ },
2336
+ "viewer": {
2337
+ "union": {
2338
+ "child": [
2339
+ {
2340
+ "this": {}
2341
+ },
2342
+ {
2343
+ "computedUserset": {
2344
+ "relation": "owner"
2345
+ }
2346
+ },
2347
+ {
2348
+ "computedUserset": {
2349
+ "relation": "platform_viewer"
2350
+ }
2351
+ }
2352
+ ]
2353
+ }
2354
+ }
2355
+ },
2356
+ "type": "plugin"
2357
+ },
2358
+ {
2359
+ "metadata": {
2360
+ "module": "agentic",
2361
+ "relations": {
2362
+ "can_delete": {},
2363
+ "can_edit": {},
2364
+ "can_grant_access": {},
2365
+ "can_view": {},
2366
+ "can_view_access": {},
2367
+ "organization": {
2368
+ "directly_related_user_types": [
2369
+ {
2370
+ "type": "organization"
2371
+ }
2372
+ ]
2373
+ },
2374
+ "owner": {
2375
+ "directly_related_user_types": [
2376
+ {
2377
+ "type": "identity_account"
2378
+ }
2379
+ ]
2380
+ },
2381
+ "viewer": {
2382
+ "directly_related_user_types": [
2383
+ {
2384
+ "type": "identity_account"
2385
+ },
2386
+ {
2387
+ "relation": "member",
2388
+ "type": "team"
2389
+ }
2390
+ ]
2391
+ }
2392
+ },
2393
+ "source_info": {
2394
+ "file": "agentic/schedule.fga"
2395
+ }
2396
+ },
2397
+ "relations": {
2398
+ "can_delete": {
2399
+ "computedUserset": {
2400
+ "relation": "owner"
2401
+ }
2402
+ },
2403
+ "can_edit": {
2404
+ "computedUserset": {
2405
+ "relation": "owner"
2406
+ }
2407
+ },
2408
+ "can_grant_access": {
2409
+ "computedUserset": {
2410
+ "relation": "owner"
2411
+ }
2412
+ },
2413
+ "can_view": {
2414
+ "computedUserset": {
2415
+ "relation": "viewer"
2416
+ }
2417
+ },
2418
+ "can_view_access": {
2419
+ "computedUserset": {
2420
+ "relation": "viewer"
2421
+ }
2422
+ },
2423
+ "organization": {
2424
+ "this": {}
2425
+ },
2426
+ "owner": {
2427
+ "union": {
2428
+ "child": [
2429
+ {
2430
+ "this": {}
2431
+ },
2432
+ {
2433
+ "tupleToUserset": {
2434
+ "computedUserset": {
2435
+ "relation": "admin"
2436
+ },
2437
+ "tupleset": {
2438
+ "relation": "organization"
2439
+ }
2440
+ }
2441
+ }
2442
+ ]
2443
+ }
2444
+ },
2445
+ "viewer": {
2446
+ "union": {
2447
+ "child": [
2448
+ {
2449
+ "this": {}
2450
+ },
2451
+ {
2452
+ "computedUserset": {
2453
+ "relation": "owner"
2454
+ }
2455
+ }
2456
+ ]
2457
+ }
2458
+ }
2459
+ },
2460
+ "type": "schedule"
2461
+ },
2462
+ {
2463
+ "metadata": {
2464
+ "module": "agentic",
2465
+ "relations": {
2466
+ "agent_instance": {
2467
+ "directly_related_user_types": [
2468
+ {
2469
+ "type": "agent_instance"
2470
+ }
2471
+ ]
2472
+ },
2473
+ "can_create_execution_in": {},
2474
+ "can_delete": {},
2475
+ "can_edit": {},
2476
+ "can_grant_access": {},
2477
+ "can_view": {},
2478
+ "can_view_access": {},
2479
+ "channel": {
2480
+ "directly_related_user_types": [
2481
+ {
2482
+ "type": "agent_channel"
2483
+ }
2484
+ ]
2485
+ },
2486
+ "organization": {
2487
+ "directly_related_user_types": [
2488
+ {
2489
+ "type": "organization"
2490
+ }
2491
+ ]
2492
+ },
2493
+ "owner": {
2494
+ "directly_related_user_types": [
2495
+ {
2496
+ "type": "identity_account"
2497
+ }
2498
+ ]
2499
+ },
2500
+ "schedule": {
2501
+ "directly_related_user_types": [
2502
+ {
2503
+ "type": "schedule"
2504
+ }
2505
+ ]
2506
+ },
2507
+ "viewer": {
2508
+ "directly_related_user_types": [
2509
+ {
2510
+ "type": "identity_account"
2511
+ }
2512
+ ]
2513
+ }
2514
+ },
2515
+ "source_info": {
2516
+ "file": "agentic/session.fga"
2517
+ }
2518
+ },
2519
+ "relations": {
2520
+ "agent_instance": {
2521
+ "this": {}
2522
+ },
2523
+ "can_create_execution_in": {
2524
+ "computedUserset": {
2525
+ "relation": "viewer"
2526
+ }
2527
+ },
2528
+ "can_delete": {
2529
+ "computedUserset": {
2530
+ "relation": "owner"
2531
+ }
2532
+ },
2533
+ "can_edit": {
2534
+ "computedUserset": {
2535
+ "relation": "owner"
2536
+ }
2537
+ },
2538
+ "can_grant_access": {
2539
+ "computedUserset": {
2540
+ "relation": "owner"
2541
+ }
2542
+ },
2543
+ "can_view": {
2544
+ "union": {
2545
+ "child": [
2546
+ {
2547
+ "computedUserset": {
2548
+ "relation": "viewer"
2549
+ }
2550
+ },
2551
+ {
2552
+ "tupleToUserset": {
2553
+ "computedUserset": {
2554
+ "relation": "viewer"
2555
+ },
2556
+ "tupleset": {
2557
+ "relation": "channel"
2558
+ }
2559
+ }
2560
+ },
2561
+ {
2562
+ "tupleToUserset": {
2563
+ "computedUserset": {
2564
+ "relation": "viewer"
2565
+ },
2566
+ "tupleset": {
2567
+ "relation": "schedule"
2568
+ }
2569
+ }
2570
+ }
2571
+ ]
2572
+ }
2573
+ },
2574
+ "can_view_access": {
2575
+ "computedUserset": {
2576
+ "relation": "viewer"
2577
+ }
2578
+ },
2579
+ "channel": {
2580
+ "this": {}
2581
+ },
2582
+ "organization": {
2583
+ "this": {}
2584
+ },
2585
+ "owner": {
2586
+ "this": {}
2587
+ },
2588
+ "schedule": {
2589
+ "this": {}
2590
+ },
2591
+ "viewer": {
2592
+ "union": {
2593
+ "child": [
2594
+ {
2595
+ "this": {}
2596
+ },
2597
+ {
2598
+ "computedUserset": {
2599
+ "relation": "owner"
2600
+ }
2601
+ }
2602
+ ]
2603
+ }
2604
+ }
2605
+ },
2606
+ "type": "session"
2607
+ },
2608
+ {
2609
+ "metadata": {
2610
+ "module": "agentic",
2611
+ "relations": {
2612
+ "can_clone": {},
2613
+ "can_delete": {},
2614
+ "can_edit": {},
2615
+ "can_grant_access": {},
2616
+ "can_use": {},
2617
+ "can_view": {},
2618
+ "can_view_access": {},
2619
+ "organization": {
2620
+ "directly_related_user_types": [
2621
+ {
2622
+ "type": "organization"
2623
+ }
2624
+ ]
2625
+ },
2626
+ "owner": {
2627
+ "directly_related_user_types": [
2628
+ {
2629
+ "type": "identity_account"
2630
+ }
2631
+ ]
2632
+ },
2633
+ "platform_viewer": {
2634
+ "directly_related_user_types": [
2635
+ {
2636
+ "relation": "platform_user",
2637
+ "type": "identity_provider"
2638
+ }
2639
+ ]
2640
+ },
2641
+ "viewer": {
2642
+ "directly_related_user_types": [
2643
+ {
2644
+ "type": "identity_account"
2645
+ },
2646
+ {
2647
+ "relation": "member",
2648
+ "type": "organization"
2649
+ },
2650
+ {
2651
+ "relation": "viewer",
2652
+ "type": "organization"
2653
+ },
2654
+ {
2655
+ "relation": "member",
2656
+ "type": "team"
2657
+ }
2658
+ ]
2659
+ }
2660
+ },
2661
+ "source_info": {
2662
+ "file": "agentic/skill.fga"
2663
+ }
2664
+ },
2665
+ "relations": {
2666
+ "can_clone": {
2667
+ "computedUserset": {
2668
+ "relation": "viewer"
2669
+ }
2670
+ },
2671
+ "can_delete": {
2672
+ "computedUserset": {
2673
+ "relation": "owner"
2674
+ }
2675
+ },
2676
+ "can_edit": {
2677
+ "computedUserset": {
2678
+ "relation": "owner"
2679
+ }
2680
+ },
2681
+ "can_grant_access": {
2682
+ "computedUserset": {
2683
+ "relation": "owner"
2684
+ }
2685
+ },
2686
+ "can_use": {
2687
+ "computedUserset": {
2688
+ "relation": "viewer"
2689
+ }
2690
+ },
2691
+ "can_view": {
2692
+ "computedUserset": {
2693
+ "relation": "viewer"
2694
+ }
2695
+ },
2696
+ "can_view_access": {
2697
+ "computedUserset": {
2698
+ "relation": "viewer"
2699
+ }
2700
+ },
2701
+ "organization": {
2702
+ "this": {}
2703
+ },
2704
+ "owner": {
2705
+ "union": {
2706
+ "child": [
2707
+ {
2708
+ "this": {}
2709
+ },
2710
+ {
2711
+ "tupleToUserset": {
2712
+ "computedUserset": {
2713
+ "relation": "admin"
2714
+ },
2715
+ "tupleset": {
2716
+ "relation": "organization"
2717
+ }
2718
+ }
2719
+ }
2720
+ ]
2721
+ }
2722
+ },
2723
+ "platform_viewer": {
2724
+ "this": {}
2725
+ },
2726
+ "viewer": {
2727
+ "union": {
2728
+ "child": [
2729
+ {
2730
+ "this": {}
2731
+ },
2732
+ {
2733
+ "computedUserset": {
2734
+ "relation": "owner"
2735
+ }
2736
+ },
2737
+ {
2738
+ "computedUserset": {
2739
+ "relation": "platform_viewer"
2740
+ }
2741
+ }
2742
+ ]
2743
+ }
2744
+ }
2745
+ },
2746
+ "type": "skill"
2747
+ },
2748
+ {
2749
+ "metadata": {
2750
+ "module": "agentic",
2751
+ "relations": {
2752
+ "can_clone": {},
2753
+ "can_delete": {},
2754
+ "can_edit": {},
2755
+ "can_execute": {},
2756
+ "can_grant_access": {},
2757
+ "can_view": {},
2758
+ "can_view_access": {},
2759
+ "organization": {
2760
+ "directly_related_user_types": [
2761
+ {
2762
+ "type": "organization"
2763
+ }
2764
+ ]
2765
+ },
2766
+ "owner": {
2767
+ "directly_related_user_types": [
2768
+ {
2769
+ "type": "identity_account"
2770
+ }
2771
+ ]
2772
+ },
2773
+ "platform_viewer": {
2774
+ "directly_related_user_types": [
2775
+ {
2776
+ "relation": "platform_user",
2777
+ "type": "identity_provider"
2778
+ }
2779
+ ]
2780
+ },
2781
+ "viewer": {
2782
+ "directly_related_user_types": [
2783
+ {
2784
+ "type": "identity_account"
2785
+ },
2786
+ {
2787
+ "relation": "member",
2788
+ "type": "organization"
2789
+ },
2790
+ {
2791
+ "relation": "viewer",
2792
+ "type": "organization"
2793
+ },
2794
+ {
2795
+ "relation": "member",
2796
+ "type": "team"
2797
+ }
2798
+ ]
2799
+ }
2800
+ },
2801
+ "source_info": {
2802
+ "file": "agentic/workflow.fga"
2803
+ }
2804
+ },
2805
+ "relations": {
2806
+ "can_clone": {
2807
+ "computedUserset": {
2808
+ "relation": "viewer"
2809
+ }
2810
+ },
2811
+ "can_delete": {
2812
+ "computedUserset": {
2813
+ "relation": "owner"
2814
+ }
2815
+ },
2816
+ "can_edit": {
2817
+ "computedUserset": {
2818
+ "relation": "owner"
2819
+ }
2820
+ },
2821
+ "can_execute": {
2822
+ "computedUserset": {
2823
+ "relation": "viewer"
2824
+ }
2825
+ },
2826
+ "can_grant_access": {
2827
+ "computedUserset": {
2828
+ "relation": "owner"
2829
+ }
2830
+ },
2831
+ "can_view": {
2832
+ "computedUserset": {
2833
+ "relation": "viewer"
2834
+ }
2835
+ },
2836
+ "can_view_access": {
2837
+ "computedUserset": {
2838
+ "relation": "viewer"
2839
+ }
2840
+ },
2841
+ "organization": {
2842
+ "this": {}
2843
+ },
2844
+ "owner": {
2845
+ "union": {
2846
+ "child": [
2847
+ {
2848
+ "this": {}
2849
+ },
2850
+ {
2851
+ "tupleToUserset": {
2852
+ "computedUserset": {
2853
+ "relation": "admin"
2854
+ },
2855
+ "tupleset": {
2856
+ "relation": "organization"
2857
+ }
2858
+ }
2859
+ }
2860
+ ]
2861
+ }
2862
+ },
2863
+ "platform_viewer": {
2864
+ "this": {}
2865
+ },
2866
+ "viewer": {
2867
+ "union": {
2868
+ "child": [
2869
+ {
2870
+ "this": {}
2871
+ },
2872
+ {
2873
+ "computedUserset": {
2874
+ "relation": "owner"
2875
+ }
2876
+ },
2877
+ {
2878
+ "computedUserset": {
2879
+ "relation": "platform_viewer"
2880
+ }
2881
+ }
2882
+ ]
2883
+ }
2884
+ }
2885
+ },
2886
+ "type": "workflow"
2887
+ },
2888
+ {
2889
+ "metadata": {
2890
+ "module": "agentic",
2891
+ "relations": {
2892
+ "can_delete": {},
2893
+ "can_edit": {},
2894
+ "can_execute": {},
2895
+ "can_grant_access": {},
2896
+ "can_view": {},
2897
+ "can_view_access": {},
2898
+ "default_of": {
2899
+ "directly_related_user_types": [
2900
+ {
2901
+ "type": "workflow"
2902
+ }
2903
+ ]
2904
+ },
2905
+ "execution_viewer": {
2906
+ "directly_related_user_types": [
2907
+ {
2908
+ "type": "identity_account"
2909
+ },
2910
+ {
2911
+ "relation": "member",
2912
+ "type": "organization"
2913
+ },
2914
+ {
2915
+ "relation": "viewer",
2916
+ "type": "organization"
2917
+ }
2918
+ ]
2919
+ },
2920
+ "organization": {
2921
+ "directly_related_user_types": [
2922
+ {
2923
+ "type": "organization"
2924
+ }
2925
+ ]
2926
+ },
2927
+ "owner": {
2928
+ "directly_related_user_types": [
2929
+ {
2930
+ "type": "identity_account"
2931
+ }
2932
+ ]
2933
+ },
2934
+ "viewer": {
2935
+ "directly_related_user_types": [
2936
+ {
2937
+ "type": "identity_account"
2938
+ },
2939
+ {
2940
+ "relation": "member",
2941
+ "type": "organization"
2942
+ },
2943
+ {
2944
+ "relation": "viewer",
2945
+ "type": "organization"
2946
+ },
2947
+ {
2948
+ "relation": "member",
2949
+ "type": "team"
2950
+ }
2951
+ ]
2952
+ },
2953
+ "workflow": {
2954
+ "directly_related_user_types": [
2955
+ {
2956
+ "type": "workflow"
2957
+ }
2958
+ ]
2959
+ }
2960
+ },
2961
+ "source_info": {
2962
+ "file": "agentic/workflow_instance.fga"
2963
+ }
2964
+ },
2965
+ "relations": {
2966
+ "can_delete": {
2967
+ "computedUserset": {
2968
+ "relation": "owner"
2969
+ }
2970
+ },
2971
+ "can_edit": {
2972
+ "computedUserset": {
2973
+ "relation": "owner"
2974
+ }
2975
+ },
2976
+ "can_execute": {
2977
+ "computedUserset": {
2978
+ "relation": "can_view"
2979
+ }
2980
+ },
2981
+ "can_grant_access": {
2982
+ "computedUserset": {
2983
+ "relation": "owner"
2984
+ }
2985
+ },
2986
+ "can_view": {
2987
+ "computedUserset": {
2988
+ "relation": "viewer"
2989
+ }
2990
+ },
2991
+ "can_view_access": {
2992
+ "computedUserset": {
2993
+ "relation": "viewer"
2994
+ }
2995
+ },
2996
+ "default_of": {
2997
+ "this": {}
2998
+ },
2999
+ "execution_viewer": {
3000
+ "this": {}
3001
+ },
3002
+ "organization": {
3003
+ "this": {}
3004
+ },
3005
+ "owner": {
3006
+ "this": {}
3007
+ },
3008
+ "viewer": {
3009
+ "union": {
3010
+ "child": [
3011
+ {
3012
+ "this": {}
3013
+ },
3014
+ {
3015
+ "computedUserset": {
3016
+ "relation": "owner"
3017
+ }
3018
+ },
3019
+ {
3020
+ "tupleToUserset": {
3021
+ "computedUserset": {
3022
+ "relation": "viewer"
3023
+ },
3024
+ "tupleset": {
3025
+ "relation": "default_of"
3026
+ }
3027
+ }
3028
+ }
3029
+ ]
3030
+ }
3031
+ },
3032
+ "workflow": {
3033
+ "this": {}
3034
+ }
3035
+ },
3036
+ "type": "workflow_instance"
3037
+ },
3038
+ {
3039
+ "metadata": {
3040
+ "module": "agentic",
3041
+ "relations": {
3042
+ "can_edit": {},
3043
+ "can_grant_access": {},
3044
+ "can_view": {},
3045
+ "can_view_access": {},
3046
+ "organization": {
3047
+ "directly_related_user_types": [
3048
+ {
3049
+ "type": "organization"
3050
+ }
3051
+ ]
3052
+ },
3053
+ "owner": {
3054
+ "directly_related_user_types": [
3055
+ {
3056
+ "type": "identity_account"
3057
+ }
3058
+ ]
3059
+ },
3060
+ "viewer": {
3061
+ "directly_related_user_types": [
3062
+ {
3063
+ "type": "identity_account"
3064
+ },
3065
+ {
3066
+ "relation": "member",
3067
+ "type": "team"
3068
+ }
3069
+ ]
3070
+ },
3071
+ "workflow_instance": {
3072
+ "directly_related_user_types": [
3073
+ {
3074
+ "type": "workflow_instance"
3075
+ }
3076
+ ]
3077
+ }
3078
+ },
3079
+ "source_info": {
3080
+ "file": "agentic/workflow_execution.fga"
3081
+ }
3082
+ },
3083
+ "relations": {
3084
+ "can_edit": {
3085
+ "computedUserset": {
3086
+ "relation": "owner"
3087
+ }
3088
+ },
3089
+ "can_grant_access": {
3090
+ "computedUserset": {
3091
+ "relation": "owner"
3092
+ }
3093
+ },
3094
+ "can_view": {
3095
+ "computedUserset": {
3096
+ "relation": "viewer"
3097
+ }
3098
+ },
3099
+ "can_view_access": {
3100
+ "computedUserset": {
3101
+ "relation": "viewer"
3102
+ }
3103
+ },
3104
+ "organization": {
3105
+ "this": {}
3106
+ },
3107
+ "owner": {
3108
+ "this": {}
3109
+ },
3110
+ "viewer": {
3111
+ "union": {
3112
+ "child": [
3113
+ {
3114
+ "this": {}
3115
+ },
3116
+ {
3117
+ "computedUserset": {
3118
+ "relation": "owner"
3119
+ }
3120
+ },
3121
+ {
3122
+ "tupleToUserset": {
3123
+ "computedUserset": {
3124
+ "relation": "execution_viewer"
3125
+ },
3126
+ "tupleset": {
3127
+ "relation": "workflow_instance"
3128
+ }
3129
+ }
3130
+ }
3131
+ ]
3132
+ }
3133
+ },
3134
+ "workflow_instance": {
3135
+ "this": {}
3136
+ }
3137
+ },
3138
+ "type": "workflow_execution"
3139
+ }
3140
+ ]
3141
+ }