diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 5d33656e0..8b9aefd74 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -35,6 +35,16 @@ jobs: - run: bun run format:check - run: bun run lint - run: bun run typecheck + # `typecheck` is `bun run --filter '*' typecheck`, and each workspace's `tsc --noEmit` reads + # its own tsconfig, none of which includes a test tree. The suite is therefore the one part + # of this repository that no type-checker has ever read: bun erases types rather than + # checking them, so a test could pass an options object where a connection string belongs, + # or import a type from a path that does not exist and silently get `any`, and every check + # here stayed green. This reads `server/tests` under the server's own compiler options and + # fails on any error that is not in `server/tests/typecheck-baseline.txt` — the errors that + # were already there when the check was turned on. New ones are new defects. + - name: server/tests types (baselined) + run: bun run typecheck:tests - name: Desktop version tracks the release version run: bun desktop/scripts/desktop-version.ts check # The chart's default image tag is its appVersion, and a release must move both together. They @@ -349,9 +359,12 @@ jobs: # pinned by the desktop lockfile rather than the root one. - run: bun install --frozen-lockfile working-directory: desktop - # Not the db:migrate script: that one loads ../.env, which does not exist in CI. DATABASE_URL - # comes from the job env instead, which drizzle.config.ts already reads. - - run: bunx drizzle-kit migrate --config=drizzle.config.ts + # The same migrator a deployment runs, rather than `drizzle-kit migrate`: it is the one that + # refuses a database holding a stamp newer than the migrations it is about to walk past + # (server/src/db/migration-reach.ts), and a CI database that is ever reused rather than + # recreated is one of the places that can happen. Not the db:migrate script, which loads + # ../.env; that file does not exist in CI, and DATABASE_URL comes from the job env instead. + - run: bun scripts/migrate.ts working-directory: server # A passing job must include the expected test floor. Import-time failures can otherwise skip # files before their tests are registered. diff --git a/agent-mastra/bun.lock b/agent-mastra/bun.lock new file mode 100644 index 000000000..7d608334e --- /dev/null +++ b/agent-mastra/bun.lock @@ -0,0 +1,894 @@ +{ + "lockfileVersion": 2, + "configVersion": 1, + "workspaces": { + "": { + "name": "@openbot/agent-mastra", + "dependencies": { + "@ai-sdk/anthropic": "*", + "@ai-sdk/openai": "*", + "@mastra/core": "*", + "mastra": "*", + }, + }, + }, + "packages": { + "@a2a-js/sdk-v0_3": ["@a2a-js/sdk@0.3.14", "", { "dependencies": { "uuid": "^11.1.0" }, "peerDependencies": { "@bufbuild/protobuf": "^2.10.2", "@grpc/grpc-js": "^1.11.0", "express": "^4.21.2 || ^5.1.0" }, "optionalPeers": ["@bufbuild/protobuf", "@grpc/grpc-js", "express"] }, "sha512-F6Ew1AtPzCLhTn8h9yiqTe7DiDf6XVrSnq9V1YqSl9eWqPm6anMveTiKdCSb/76cW0YiJc24rNaUrVezFFHbqQ=="], + + "@a2a-js/sdk-v1": ["@a2a-js/sdk@1.0.1", "", { "dependencies": { "jose": "^6.2.3", "uuid": "^11.1.0" }, "peerDependencies": { "@bufbuild/protobuf": "^2.10.2", "@grpc/grpc-js": "^1.11.0", "express": "^4.21.2 || ^5.1.0" }, "optionalPeers": ["@bufbuild/protobuf", "@grpc/grpc-js", "express"] }, "sha512-CJQdh3Wzwo8qIx5UUkSJ7+7BEI16PB+MXMHHNSmx8JQsQed2HlQgvx1ENOiKUfYA3PlcEvxIwv14dBblhDuPmw=="], + + "@ai-sdk/anthropic": ["@ai-sdk/anthropic@4.0.75", "", { "dependencies": { "@ai-sdk/provider": "4.0.24", "@ai-sdk/provider-utils": "5.0.56" }, "peerDependencies": { "zod": "^3.25.76 || ^4.1.8" } }, "sha512-4cj+Wf12DnKUAQsQFkk3W5hU3KYP8bGBjdNsji3fmLm1txrgDBQF3urpgltsik8lfUTa6nkKQYOmPrQgPXKMFw=="], + + "@ai-sdk/openai": ["@ai-sdk/openai@4.0.87", "", { "dependencies": { "@ai-sdk/provider": "4.0.24", "@ai-sdk/provider-utils": "5.0.56" }, "peerDependencies": { "zod": "^3.25.76 || ^4.1.8" } }, "sha512-dfadBgux+npOoaPmIP3GGaHtGT6ZpYxBmBQK1TkIkjt/yuEtLxJ0Oklsrm88FTJrTW51qGfLSLeVP7bMUPeMCQ=="], + + "@ai-sdk/provider": ["@ai-sdk/provider@4.0.24", "", { "dependencies": { "json-schema": "^0.4.0" } }, "sha512-iztFqJTdxNN0ZzqZAAnVPMhRMaL1bfQFa3GIPAffWQ0+dP2FXIkyMD8kHeEI7EpB/C6TR45cqOkrS7YZZ1sATA=="], + + "@ai-sdk/provider-utils": ["@ai-sdk/provider-utils@5.0.56", "", { "dependencies": { "@ai-sdk/provider": "4.0.24", "@standard-schema/spec": "^1.1.0", "@workflow/serde": "4.1.0", "eventsource-parser": "^3.0.8", "undici": "^7.29.0" }, "peerDependencies": { "zod": "^3.25.76 || ^4.1.8" } }, "sha512-F7/U1YpVXEfSxRHbxScm0PVdr9lN6GaUWHnt8ws2UjuGeuxWHqCkV25dGpHAkpDHkuIXoC+aak/OqSylKSJmHw=="], + + "@ai-sdk/provider-utils-v6": ["@ai-sdk/provider-utils@4.0.40", "", { "dependencies": { "@ai-sdk/provider": "3.0.14", "@standard-schema/spec": "^1.1.0", "eventsource-parser": "^3.0.8" }, "peerDependencies": { "zod": "^3.25.76 || ^4.1.8" } }, "sha512-OL5IrpUm9Y8Dwy+w/vvFwPotS6m52O9W0op2oXgXdCROMJIBalBI0oro6OIBYkPxvm5Xg02GSkoQN25RlR0bnw=="], + + "@ai-sdk/provider-utils-v7": ["@ai-sdk/provider-utils@5.0.13", "", { "dependencies": { "@ai-sdk/provider": "4.0.4", "@standard-schema/spec": "^1.1.0", "@workflow/serde": "4.1.0", "eventsource-parser": "^3.0.8" }, "peerDependencies": { "zod": "^3.25.76 || ^4.1.8" } }, "sha512-fScDJMDnTbx32kLDQqp0MvPjvwkgiwvlBxlmIg7XW5PbS91LG6JjH3PQG+34oMFglqfpQA355e24OdGj5PPoDw=="], + + "@ai-sdk/provider-v5": ["@ai-sdk/provider@2.0.3", "", { "dependencies": { "json-schema": "^0.4.0" } }, "sha512-h88OPkavHTiN9tMn2l5awAznGB0lXzjcLhgR1/rvjB2zlLprsNxbM2tt6OJsHUxduLC3klq0/eqaSf6fX5XVww=="], + + "@ai-sdk/provider-v6": ["@ai-sdk/provider@3.0.14", "", { "dependencies": { "json-schema": "^0.4.0" } }, "sha512-5X1k57JBJ4H7H1QjX7CnJYAB1I19r/trVZTMcSms7/kLNZ8RaU4Nt2agcwZzv82Hfx6Q7/TOLU7agAKeFfc8cA=="], + + "@ai-sdk/provider-v7": ["@ai-sdk/provider@4.0.17", "", { "dependencies": { "json-schema": "^0.4.0" } }, "sha512-VYMBxIQdcHqbIf1j+YZlI9Ati6LZ4wJe0GGd4z4a5H/KxTggjeOiyaVYTnfF7LHZK5jMQ+rofmzz4QPqf++NUw=="], + + "@babel/code-frame": ["@babel/code-frame@8.0.6", "", { "dependencies": { "@babel/helper-validator-identifier": "^8.0.6", "js-tokens": "^10.0.0" } }, "sha512-uMHhvmDmwFiLuiozaoRYTZHqMFuu3fem/X9JY78lohAuLoh8LSGGC8JqUzo2cVuBsBxkjMZNk56CE7ock8Xxkw=="], + + "@babel/compat-data": ["@babel/compat-data@8.0.5", "", {}, "sha512-YLsYoQMvL8l8WrGpN3Zj7O1wK5LEBN+cQtux7BcuHyxIXve724XG+zuJ1n3U1cUweRtTzQOA4IHbuQw3N34SZw=="], + + "@babel/core": ["@babel/core@8.0.7", "", { "dependencies": { "@babel/code-frame": "^8.0.6", "@babel/generator": "^8.0.6", "@babel/helper-compilation-targets": "^8.0.7", "@babel/helpers": "^8.0.7", "@babel/parser": "^8.0.7", "@babel/template": "^8.0.0", "@babel/traverse": "^8.0.7", "@babel/types": "^8.0.6", "@types/gensync": "^1.0.5", "convert-source-map": "^2.0.0", "empathic": "^2.0.1", "gensync": "^1.0.0-beta.2", "import-meta-resolve": "^4.2.0", "json5": "^2.2.3", "obug": "^3.0.0", "verkit": "^0.5.0" } }, "sha512-ZIsZWBG6Y1oa+8fkQVp0xeCdjCHBkXFCCIWrmg9SvejVvfcVQgKKRmGrBDWfM7rilhvnRoEuaqa5dkK7KB3pHA=="], + + "@babel/generator": ["@babel/generator@8.0.6", "", { "dependencies": { "@babel/parser": "^8.0.6", "@babel/types": "^8.0.6", "@jridgewell/gen-mapping": "0.4.0-beta.0", "@jridgewell/trace-mapping": "^0.3.31", "@types/jsesc": "^2.5.0", "jsesc": "^3.0.2" } }, "sha512-/pcanjdRsonCexCuxgGD8fKnBLLzk2i9uM4kmcmGyyev2R5YDs+rafMYZ89RvaGY1mW8T7C5au0TyYaEeHBGng=="], + + "@babel/helper-annotate-as-pure": ["@babel/helper-annotate-as-pure@8.0.0", "", { "dependencies": { "@babel/types": "^8.0.0" } }, "sha512-NSpMkMsvvZqzThJ0p1B02cbtA2ObEyfBvq950bmNkyxsxvcxwhvvCB036rKhlEnuBBo30bOrk13u3FzlKSoRrw=="], + + "@babel/helper-compilation-targets": ["@babel/helper-compilation-targets@8.0.7", "", { "dependencies": { "@babel/compat-data": "^8.0.5", "@babel/helper-validator-option": "^8.0.0", "browserslist": "^4.24.0", "flru": "1.0.2", "verkit": "^0.5.0" } }, "sha512-ilAZCdOOlOVA7dQbaFNw2f/59p6GW33NxTopc3DvEE3efp3ZXTrGX/yZScaKw8/vd9bq31Ag0EcXiLw32bAgJg=="], + + "@babel/helper-create-class-features-plugin": ["@babel/helper-create-class-features-plugin@8.0.7", "", { "dependencies": { "@babel/helper-annotate-as-pure": "^8.0.0", "@babel/helper-member-expression-to-functions": "^8.0.5", "@babel/helper-optimise-call-expression": "^8.0.0", "@babel/helper-replace-supers": "^8.0.1", "@babel/helper-skip-transparent-expression-wrappers": "^8.0.0", "@babel/traverse": "^8.0.7", "verkit": "^0.5.0" }, "peerDependencies": { "@babel/core": "^8.0.0" } }, "sha512-7ug3KrOhNVPPxFFLTel0/pMzimKzU/vTlNJKVL/dKguCpmNJZjjibyFbWg+Qs8QHmiIZPNuZ2UNnDGdHWGEpOg=="], + + "@babel/helper-globals": ["@babel/helper-globals@8.0.6", "", {}, "sha512-OdnA/N52LhzFpeUuVz5YGuSWjc7TPHiFmVYZbPlSgExocO2GwbxVpSni9MVs5wwW+wZ4kPuwBEBN9pIPDYz1mA=="], + + "@babel/helper-member-expression-to-functions": ["@babel/helper-member-expression-to-functions@8.0.5", "", { "dependencies": { "@babel/traverse": "^8.0.5", "@babel/types": "^8.0.5" } }, "sha512-GLe05QD98BkNFTkjaqeqF9QSRoHLKrrB4tpoplyQuuPrQJ72rtmkM4wvqJLX/sjZPqkbK5MUYSsuUTqdJoOVjA=="], + + "@babel/helper-module-imports": ["@babel/helper-module-imports@8.0.0", "", { "dependencies": { "@babel/traverse": "^8.0.0", "@babel/types": "^8.0.0" } }, "sha512-NZ7mSS93o4ndX4KrbD7W8Sf3QT8Qe24PrnFyUcuOPDzK6faqDFKjY9RG7he7+I7FdiQ4llpnosFqzrXa+Vy3Ew=="], + + "@babel/helper-module-transforms": ["@babel/helper-module-transforms@8.0.6", "", { "dependencies": { "@babel/helper-module-imports": "^8.0.0", "@babel/helper-validator-identifier": "^8.0.6", "@babel/traverse": "^8.0.6" }, "peerDependencies": { "@babel/core": "^8.0.0" } }, "sha512-YUi+3X0cb0v97xKhuqkLdrwQtP6XXv1eVbhLRCFyMwG481UskbMQk4mjH7K/Jg3oJ1KLskvFwwq4kF/QnABkWQ=="], + + "@babel/helper-optimise-call-expression": ["@babel/helper-optimise-call-expression@8.0.0", "", { "dependencies": { "@babel/types": "^8.0.0" } }, "sha512-3W6satvtPuCUkUx63S2jMoW9EQNYkADgs1HTfufmL7gCmAulHMKupA/12WNz4A0GMMFn/YnWWwqOT9IZrJHQjg=="], + + "@babel/helper-plugin-utils": ["@babel/helper-plugin-utils@8.0.1", "", { "peerDependencies": { "@babel/core": "^8.0.0" } }, "sha512-3PKFgjTyPlhFhorfP+SjKQxLViIL++zWjFOO4hGriYU+Bsm983DxEM1JmDRJVWXV0O9npu+xXRqz7Pbd3mh70g=="], + + "@babel/helper-replace-supers": ["@babel/helper-replace-supers@8.0.1", "", { "dependencies": { "@babel/helper-member-expression-to-functions": "^8.0.0", "@babel/helper-optimise-call-expression": "^8.0.0", "@babel/traverse": "^8.0.0" }, "peerDependencies": { "@babel/core": "^8.0.0" } }, "sha512-B1SZADIcy3tmH8CmWvj4SHi/oAPom4UL3uknTc2QRNsPVLFk/sPnZvQL/8kj7Y5omvjMqie0vklvs6XM4OLW5Q=="], + + "@babel/helper-skip-transparent-expression-wrappers": ["@babel/helper-skip-transparent-expression-wrappers@8.0.0", "", { "dependencies": { "@babel/traverse": "^8.0.0", "@babel/types": "^8.0.0" } }, "sha512-xmCA9kP3IhySsqhzwIdWGlDN/1A4cCKNBO/uwZx/3YzmDoMePwno2Q5/Bq0q+tYaKbeF940YiKV/kaW8Mzvpjw=="], + + "@babel/helper-string-parser": ["@babel/helper-string-parser@8.0.6", "", {}, "sha512-+6HYEBnsDRZHJtUTAEfMQd0zMDqdFHS7C+5vAsEZqBUr3vEMWOWlHJ0Jz1gS8jJIlCvLsuA6ivmeoqzH936YcA=="], + + "@babel/helper-validator-identifier": ["@babel/helper-validator-identifier@8.0.6", "", {}, "sha512-HYx0YmuchRxRSpnjvcNffnPS8DCauKNmnumIuHG3jnQAVewRA7kfJGwF13ayEpSZs7s4R/oBH4eppuXcAQd5JQ=="], + + "@babel/helper-validator-option": ["@babel/helper-validator-option@8.0.0", "", {}, "sha512-U4Dybxh4WESWHt5XhBeExi4DrY0/DNK1aHpQbsrQXCUbFHuMweT0TpLEWKvaraV2Y6fS+ZXunsZ8zIuZIgvF2Q=="], + + "@babel/helpers": ["@babel/helpers@8.0.7", "", { "dependencies": { "@babel/template": "^8.0.0", "@babel/types": "^8.0.6" } }, "sha512-5dMj5kFwS2AY7Dt4PZp4px3c5ThMbbEa7tZfuHTncCGSFYq8uoA1ufDE1IS/lYpQedE+3+GQ3cPZUiplIu195w=="], + + "@babel/parser": ["@babel/parser@8.0.7", "", { "dependencies": { "@babel/types": "^8.0.6" }, "bin": "./bin/babel-parser.js" }, "sha512-UkDwEbPO1px2JQSrdh4qIgaH1JgG7GO/pFeJkpxhDxIETkT/QvGpnigXIw75ViHYPtIgKITmVUJqLjiO+JuWjA=="], + + "@babel/plugin-syntax-typescript": ["@babel/plugin-syntax-typescript@8.0.3", "", { "dependencies": { "@babel/helper-plugin-utils": "^8.0.1" }, "peerDependencies": { "@babel/core": "^8.0.0" } }, "sha512-jmTPwps7oSQSZaV1SxkQ3C12UWyufGysGc5OzDpZzvPAIX4mO7dJT3hoqkWVrSImvkcMiknir1iLN1SNV/CZzg=="], + + "@babel/plugin-transform-modules-commonjs": ["@babel/plugin-transform-modules-commonjs@8.0.1", "", { "dependencies": { "@babel/helper-module-transforms": "^8.0.1", "@babel/helper-plugin-utils": "^8.0.1" }, "peerDependencies": { "@babel/core": "^8.0.0" } }, "sha512-PMuzulWrrzFNmY3lXSk/tV9NRb7y0eZZLJY4UEo2TKszroxvUZHAPPi+T9FDyrQhod+TQA+t+8/QYaaMpiEuhA=="], + + "@babel/plugin-transform-typescript": ["@babel/plugin-transform-typescript@8.0.6", "", { "dependencies": { "@babel/helper-annotate-as-pure": "^8.0.0", "@babel/helper-create-class-features-plugin": "^8.0.6", "@babel/helper-plugin-utils": "^8.0.1", "@babel/helper-skip-transparent-expression-wrappers": "^8.0.0", "@babel/plugin-syntax-typescript": "^8.0.3" }, "peerDependencies": { "@babel/core": "^8.0.0" } }, "sha512-WF3yRlQtClzScvQbWct00ix63+w3DPiyU0WmCBU4YqK539n3VvJFElElpevoD8wfu6953CbiNoUZBi2B7/5jXw=="], + + "@babel/preset-typescript": ["@babel/preset-typescript@8.0.7", "", { "dependencies": { "@babel/helper-plugin-utils": "^8.0.1", "@babel/helper-validator-option": "^8.0.0", "@babel/plugin-transform-modules-commonjs": "^8.0.1", "@babel/plugin-transform-typescript": "^8.0.6" }, "peerDependencies": { "@babel/core": "^8.0.0" } }, "sha512-sUFLFphAG6YNjCnJpSKpyoNxkfyeM2KNuUjJJN0R6dZusMcK2V3Fg11MVHPFvb37AZeDNocc+xM748vdh9z82Q=="], + + "@babel/template": ["@babel/template@8.0.0", "", { "dependencies": { "@babel/code-frame": "^8.0.0", "@babel/parser": "^8.0.0", "@babel/types": "^8.0.0" } }, "sha512-eAD0QW/AlbamBbw0FeGiwasbCVPq5ncW0HNVyLP3B9czqLyh4gvw+5JTSNt6le9+ziAU7mqDZsKTHf3jTb4chQ=="], + + "@babel/traverse": ["@babel/traverse@8.0.7", "", { "dependencies": { "@babel/code-frame": "^8.0.6", "@babel/generator": "^8.0.6", "@babel/helper-globals": "^8.0.6", "@babel/parser": "^8.0.7", "@babel/template": "^8.0.0", "@babel/types": "^8.0.6", "obug": "^3.0.0" } }, "sha512-bVV0brinsTWgc6ptSIoQo3GbITtl0VZAqEUJbHHcyfDPEu+q/fEvlYEa+6H85HoK8IdksKBFtKJbJFZ6Kff+zg=="], + + "@babel/types": ["@babel/types@8.0.6", "", { "dependencies": { "@babel/helper-string-parser": "^8.0.6", "@babel/helper-validator-identifier": "^8.0.6" } }, "sha512-c+xgSWboV2pdwXP67BUWDVRHi2BO5Q3KwxyFVs7taVTY+fsK47/L51ZXQoV9rozHJDNHvJ4v4WEsI/IlxV2l2A=="], + + "@clack/core": ["@clack/core@1.5.1", "", { "dependencies": { "fast-wrap-ansi": "^0.2.0", "sisteransi": "^1.0.5" } }, "sha512-iHTrHA8MtVuLl2TfZySmcKv1qO2PoyC9Z7pfSDozEuV5vtY3/wcOPKJXlqJ5Oq2Cx5DDGQGAMVx6HZfRRoVEbQ=="], + + "@clack/prompts": ["@clack/prompts@1.8.1", "", { "dependencies": { "@clack/core": "1.5.1", "fast-string-width": "^3.0.2", "fast-wrap-ansi": "^0.2.0", "sisteransi": "^1.0.5" } }, "sha512-dlT1m5e/0yUL0kRNcQn7yGLVThkgbB0Ga/1AmfDDC/8ik6AIiSf2QLQO2zPYvefsHP0aFgxO93cVLCCfDp7kzQ=="], + + "@esbuild/aix-ppc64": ["@esbuild/aix-ppc64@0.28.2", "", { "os": "aix", "cpu": "ppc64" }, "sha512-XExcO+dvLKvVtNTibSTBej1NCAbaGhWn9Ww1ZPx80qsahhPFe/8jgWP0IchNe0F3HwkU7n8ejhH8bjonqht8mQ=="], + + "@esbuild/android-arm": ["@esbuild/android-arm@0.28.2", "", { "os": "android", "cpu": "arm" }, "sha512-kXXoiPVVGQcnIYGOeaovwOURpniDBpSq4A03qkQ+BMQqtGG6HYap3xne9C1O1yo4TR3qxlCX5IqqmX6fFo2Lqg=="], + + "@esbuild/android-arm64": ["@esbuild/android-arm64@0.28.2", "", { "os": "android", "cpu": "arm64" }, "sha512-5YfKeeI8qWfBZIX+u2xZC3Zlb3Os/gLS2sbEKM+I4ZOcsWmHS2WLysCcQZDAFRslDUU5Oiq44gf6PYN1vGwG5A=="], + + "@esbuild/android-x64": ["@esbuild/android-x64@0.28.2", "", { "os": "android", "cpu": "x64" }, "sha512-O387ite7SzUyCcy3JQX4P4bLtEA7bLLkx+esve5JHnyYfNTxcVpXZo9jhdB0lTKN44gztELTdU7nS8Nr16Fs1Q=="], + + "@esbuild/darwin-arm64": ["@esbuild/darwin-arm64@0.28.2", "", { "os": "darwin", "cpu": "arm64" }, "sha512-n4KqkOQrraxHJcgjM1RvwbigfQKIKJVpM7xp+KsxiyUSrRdIXnt73VhrPAx0fV44hgfmIVKjxMN9J1t5jySVkw=="], + + "@esbuild/darwin-x64": ["@esbuild/darwin-x64@0.28.2", "", { "os": "darwin", "cpu": "x64" }, "sha512-uq6suIWYP37qzGddBKPw5QEQPi6HiLGsO7UmkpfyaYNQ3D+rN6w6WfwH+nuqcGXWvawGwxOEroO4YGnFh95azw=="], + + "@esbuild/freebsd-arm64": ["@esbuild/freebsd-arm64@0.28.2", "", { "os": "freebsd", "cpu": "arm64" }, "sha512-n+I0BTSRIoy+d6RPKnEVwql5UwBJolytvY4mAOIEJorKlqgPII8ix6slVVrfZ5Tnj7glIZvloylbB/EJPMWEXw=="], + + "@esbuild/freebsd-x64": ["@esbuild/freebsd-x64@0.28.2", "", { "os": "freebsd", "cpu": "x64" }, "sha512-78XJTJkvPs0kz2w61301PJjXl4g7q3JqiYMZ/M/yVI73EHBrCRTgkhu9oqG7vPqq+a/yadEW8aD+agKlk5xrmg=="], + + "@esbuild/linux-arm": ["@esbuild/linux-arm@0.28.2", "", { "os": "linux", "cpu": "arm" }, "sha512-XlDnu2q5yoqems+xay6wSAcg9DDD7K9RLKZEBOMZm3ckNpJBvOX20tSfby8KfrrhINDyv9V2YVZKY/SpoGJI8w=="], + + "@esbuild/linux-arm64": ["@esbuild/linux-arm64@0.28.2", "", { "os": "linux", "cpu": "arm64" }, "sha512-pW4AC0P3it8c7do9MVM4p51FzHzdM/TZrerurgRcHJ2WTa1VQ1CIq18xncfpBJw4ojkiZZrKW2yIBWBP92j6Ug=="], + + "@esbuild/linux-ia32": ["@esbuild/linux-ia32@0.28.2", "", { "os": "linux", "cpu": "ia32" }, "sha512-CYbnj78HsIeA+DhgUKgFCfvNsTHFhMMrinUrMZpDXJXKN8T3XViTZ/+wtHeVxEWY8ewSzTFN+nRmSwO2tZaLUQ=="], + + "@esbuild/linux-loong64": ["@esbuild/linux-loong64@0.28.2", "", { "os": "linux", "cpu": "none" }, "sha512-buwkd8nsph4R+ajRvw0qM5Hja/TXQow3ptzWO2EbG/cqcIkHloRrdlBtQlshyYGTNFvfkfJ5tpPLVkY4DtsPfQ=="], + + "@esbuild/linux-mips64el": ["@esbuild/linux-mips64el@0.28.2", "", { "os": "linux", "cpu": "none" }, "sha512-ZVykbDyk7519VwiNb9Lcj9m8XM6v5V9uKPvrEMkkEedVewf+0itkhahp4HDpgERXhwLRpWFypsGbG/J8s0QjJA=="], + + "@esbuild/linux-ppc64": ["@esbuild/linux-ppc64@0.28.2", "", { "os": "linux", "cpu": "ppc64" }, "sha512-CAXl+Dtd9UUuJd8pKKdwh6MLm3MUMiqMPmhZ3tTSXPqfyQ3vDl6R5hZdZ/kYojK4ofXtdfSv1tFq8XzWx3heNQ=="], + + "@esbuild/linux-riscv64": ["@esbuild/linux-riscv64@0.28.2", "", { "os": "linux", "cpu": "none" }, "sha512-GeXCej4IQtU1B+QlDV8W/RRvbzI3O/Stss+/bCXv4lZls5WGRtu2a+3JkA3i4qIUlMXpcHebWpF8AkJhATowuA=="], + + "@esbuild/linux-s390x": ["@esbuild/linux-s390x@0.28.2", "", { "os": "linux", "cpu": "s390x" }, "sha512-3H1weTYZPxt/WOhByszQZybS9w5lKzUn1FDMsgEChbHWQwHYQQRfBxgCcZvPhjHfKyJjIievvMmEUawJrdY9Dg=="], + + "@esbuild/linux-x64": ["@esbuild/linux-x64@0.28.2", "", { "os": "linux", "cpu": "x64" }, "sha512-4xTZr1FUmSoQW4XIWmit3tzQrUTZM+N3P0XV8xROKYF50XfI7xeO90+1bZvNwxIufQ9hDQVRJH5YhgPVF8A/HQ=="], + + "@esbuild/netbsd-arm64": ["@esbuild/netbsd-arm64@0.28.2", "", { "os": "none", "cpu": "arm64" }, "sha512-sSATRjPeDBg3pdgHoQfoYBob11Kk1FGa9lui5RIHZCoCkJa9QKlvl3/vKz2usCmYYjs7ymJR/2Nnsqe+Hjt5nw=="], + + "@esbuild/netbsd-x64": ["@esbuild/netbsd-x64@0.28.2", "", { "os": "none", "cpu": "x64" }, "sha512-lqnzCV+mM0gIADaKihiCg6ifgfU2L3h5E33rNQBN1Y4MaVGnzryzmvvf7UHxprpQdE8hpqLolJ9Rl+SkIRDpyw=="], + + "@esbuild/openbsd-arm64": ["@esbuild/openbsd-arm64@0.28.2", "", { "os": "openbsd", "cpu": "arm64" }, "sha512-AL2qJILH7lNjrDmCQDvdxMfAUIv8KMNZOvrwAQ8i8//ntL9FflhOyMJ8OZSMBb8/AWXe3/5v5S20y3zCoZWKoQ=="], + + "@esbuild/openbsd-x64": ["@esbuild/openbsd-x64@0.28.2", "", { "os": "openbsd", "cpu": "x64" }, "sha512-QtiuPytchRyC4rwUKhexJdQKvDuZ6hWloi3igqPQNUJCS1/v9EiO3UTOXR6A3FoMo4fnAKbWJdqaIwhOzh8qEw=="], + + "@esbuild/openharmony-arm64": ["@esbuild/openharmony-arm64@0.28.2", "", { "os": "none", "cpu": "arm64" }, "sha512-WkhYDmpTjLvGlScA1rwjRUmhl4k8oXR3cIbtqWmELgU/dFeHHlEllxDvdWcNJV9rbzCexB5vz8gtNewWLgCT7Q=="], + + "@esbuild/sunos-x64": ["@esbuild/sunos-x64@0.28.2", "", { "os": "sunos", "cpu": "x64" }, "sha512-GPMSkTOtMnv2U2F8gxe4Io6qmVs+YKyp832Etqqxr0hFngmXQ3rzwytelm3GIn7T4VviRUlf3sOgBOiTdvaf7g=="], + + "@esbuild/win32-arm64": ["@esbuild/win32-arm64@0.28.2", "", { "os": "win32", "cpu": "arm64" }, "sha512-PIhhEkE9uPBleRBrQEJpUn7MBnibZzbGzYWPmY3x+YoVg/95zbjB4CxPPOQ8l5tYYM4mMaCthF8/1DIfBQQyWQ=="], + + "@esbuild/win32-ia32": ["@esbuild/win32-ia32@0.28.2", "", { "os": "win32", "cpu": "ia32" }, "sha512-YmJbfTlvU7Sdn9BB+4PRES4oB6pxgS37MAONj+hBr/cpXS1aBPKXxNnDbu+QCWPj0o9dgyxeq79g6c5P8KeuYA=="], + + "@esbuild/win32-x64": ["@esbuild/win32-x64@0.28.2", "", { "os": "win32", "cpu": "x64" }, "sha512-5ebpxr3nWMzrL/rnUI755Jkuee0bHL/Gq0WTF9lvcpv73wAp5eu8MfBUgWK9bhWvZjj7yX8etf/8tI8Ney695g=="], + + "@expo/devcert": ["@expo/devcert@1.2.2", "", { "dependencies": { "@expo/sudo-prompt": "^9.3.1", "debug": "^3.1.0" } }, "sha512-wz1YedXwdNbYqk/PRr34vixnuw1+l6uSwmPXUj649cot5iYNccb2zIOnK7Nonb1Pfd/dxAY6CvU6KM3uSdxC7A=="], + + "@expo/sudo-prompt": ["@expo/sudo-prompt@9.3.2", "", {}, "sha512-HHQigo3rQWKMDzYDLkubN5WQOYXJJE2eNqIQC2axC2iO3mHdwnIR7FgZVvHWtBwAdzBgAP0ECp8KqS8TiMKvgw=="], + + "@hono/node-server": ["@hono/node-server@1.19.17", "", { "peerDependencies": { "hono": "^4" } }, "sha512-dSneS5qhiauZWGDCeK4o695Xd9nUNjviSZCMQrj10eetr8Uln1ucn6bbphOM6UynAMMtNIzZNSpL9vnASJwrPQ=="], + + "@hono/node-ws": ["@hono/node-ws@1.3.1", "", { "dependencies": { "ws": "^8.17.0" }, "peerDependencies": { "@hono/node-server": "^1.19.11", "hono": "^4.6.0" } }, "sha512-vo/MwCnpJAVHBkGzWjCJ28wF45fYHAfbPZcH2rodZODHtch2GHA94KtMfusmVycTUtsLAsaNsHhtY6P8X3RQsA=="], + + "@hono/standard-validator": ["@hono/standard-validator@0.4.0", "", { "peerDependencies": { "@standard-schema/spec": "^1.0.0", "hono": ">=4.11.2" } }, "sha512-MxOm1asDh9j7c1D0KiWwppSbFgAQxTRO4YEhjMrJn3lF1BIcXenPdgjSGKDRfQmZdaTaMA8slQLETgVOKyJxFw=="], + + "@isaacs/ttlcache": ["@isaacs/ttlcache@2.1.5", "", {}, "sha512-VwGZqqjAWPICTmxUZnbpEfO60LhPWzquik+bmyXGY7pYRn6diEvCI5i6Ca+J6o2y4vS73HrpuMTo2dOvUevH8w=="], + + "@jridgewell/gen-mapping": ["@jridgewell/gen-mapping@0.4.0-beta.0", "", { "dependencies": { "@jridgewell/sourcemap-codec": "^1.6.0-beta.0", "@jridgewell/trace-mapping": "^0.3.24" } }, "sha512-JdGNkbE4GlNPYQhM0L95fBQr7ctLZJ276QXQLTad4t1oSdnnCI3fDq9DW3BqYAWv8Wc3+HS+4Gsii1oPMCfz1w=="], + + "@jridgewell/resolve-uri": ["@jridgewell/resolve-uri@3.1.2", "", {}, "sha512-bRISgCIjP20/tbWSPWMEi54QVPRZExkuD9lJL+UIxUKtwVJA8wW1Trb1jMs1RFXo1CBTNZ/5hpC9QvmKWdopKw=="], + + "@jridgewell/sourcemap-codec": ["@jridgewell/sourcemap-codec@1.6.0", "", {}, "sha512-T7jf+5zgsZHwNJ4lvQ7/aezbyk0nNX+zJVWpmHA7VYsEx7a7qr5Rg5IbtJFqkgze5Y2sruq1RUY8Q837Od7iFw=="], + + "@jridgewell/trace-mapping": ["@jridgewell/trace-mapping@0.3.31", "", { "dependencies": { "@jridgewell/resolve-uri": "^3.1.0", "@jridgewell/sourcemap-codec": "^1.4.14" } }, "sha512-zzNR+SdQSDJzc8joaeP8QQoCQr8NuYx2dIIytl1QeBEZHJ9uW6hebsrYgbz8hJwUQao3TWCMtmfV8Nu1twOLAw=="], + + "@lukeed/csprng": ["@lukeed/csprng@1.1.0", "", {}, "sha512-Z7C/xXCiGWsg0KuKsHTKJxbWhpI3Vs5GwLfOean7MGyVFGqdRgBbAjOCh6u4bbjPc/8MJ2pZmK/0DLdCbivLDA=="], + + "@lukeed/uuid": ["@lukeed/uuid@2.0.1", "", { "dependencies": { "@lukeed/csprng": "^1.1.0" } }, "sha512-qC72D4+CDdjGqJvkFMMEAtancHUQ7/d/tAiHf64z8MopFDmcrtbcJuerDtFceuAfQJ2pDSfCKCtbqoGBNnwg0w=="], + + "@mastra/core": ["@mastra/core@1.75.0", "", { "dependencies": { "@a2a-js/sdk-v0_3": "npm:@a2a-js/sdk@~0.3.14", "@a2a-js/sdk-v1": "npm:@a2a-js/sdk@~1.0.1", "@ai-sdk/provider-utils-v6": "npm:@ai-sdk/provider-utils@4.0.40", "@ai-sdk/provider-utils-v7": "npm:@ai-sdk/provider-utils@5.0.13", "@ai-sdk/provider-v5": "npm:@ai-sdk/provider@2.0.3", "@ai-sdk/provider-v6": "npm:@ai-sdk/provider@3.0.14", "@ai-sdk/provider-v7": "npm:@ai-sdk/provider@4.0.17", "@isaacs/ttlcache": "^2.1.5", "@lukeed/uuid": "^2.0.1", "@mastra/schema-compat": "1.3.13", "@standard-schema/spec": "^1.1.0", "chat": "^4.37.0", "croner": "^10.0.1", "dotenv": "^17.3.1", "execa": "^9.6.1", "fastq": "^1.20.1", "gray-matter": "^4.0.3", "hono": "^4.13.7", "hono-openapi": "^1.3.1", "ignore": "^7.0.5", "jpeg-js": "^0.4.4", "json-schema": "^0.4.0", "lru-cache": "^11.2.7", "p-map": "^7.0.4", "p-retry": "^7.1.1", "picomatch": "^4.0.3", "posthog-node": "^5.46.1", "re2js": "^2.8.6", "ws": "^8.21.3", "xxhash-wasm": "^1.1.0" }, "peerDependencies": { "zod": "^3.25.0 || ^4.0.0" } }, "sha512-1yw89tyha4HU1eO34IC5sYdSCbXuw8WCVf4+pqmNyRmoHp0ZcPzyberdsbq9O8CTHuxKZbf7cgsI2QNI2L3SRA=="], + + "@mastra/deployer": ["@mastra/deployer@1.75.0", "", { "dependencies": { "@babel/core": "^8.0.1", "@babel/preset-typescript": "^8.0.1", "@babel/traverse": "^8.0.4", "@hono/node-ws": "^1.3.0", "@mastra/server": "1.75.0", "@optimize-lodash/rollup-plugin": "^5.1.0", "@rollup/plugin-alias": "6.0.0", "@rollup/plugin-commonjs": "29.0.2", "@rollup/plugin-esm-shim": "0.1.8", "@rollup/plugin-json": "6.1.0", "@rollup/plugin-node-resolve": "16.0.3", "@rollup/plugin-virtual": "3.0.2", "@sindresorhus/slugify": "^2.2.1", "empathic": "^2.0.0", "esbuild": "^0.28.0", "find-up-simple": "^1.0.1", "find-workspaces": "^0.3.1", "fs-extra": "^11.3.5", "gray-matter": "^4.0.3", "hono": "^4.13.7", "local-pkg": "^1.1.2", "resolve.exports": "^2.0.3", "rollup": "^4.61.1", "rollup-plugin-esbuild": "^6.2.1", "strip-json-comments": "^5.0.3", "tinyglobby": "^0.2.17", "typescript-paths": "^1.5.2", "ws": "^8.21.3", "yaml": "^2.9.0" }, "peerDependencies": { "@mastra/core": ">=1.58.0-0 <2.0.0-0" } }, "sha512-6rJ11ZrYcDnt+WxkJMuZyAAUjrqrK/gDdv30+1tQBvtYcgHDfeuIW6IKbYfowU3C/EhqQtLPDAPlm4OlPQKKhQ=="], + + "@mastra/loggers": ["@mastra/loggers@1.3.5", "", { "dependencies": { "pino": "^10.3.1", "pino-pretty": "^13.1.3" }, "peerDependencies": { "@mastra/core": ">=1.0.0-0 <2.0.0-0" } }, "sha512-wGI2xle5VWAvRLXAbT2kzOlUovy5rRD89l0HoPNN12a2KU7QfLCX686KqCD0SrzVAzHENYHrgNm6Ek1lSSCkEg=="], + + "@mastra/schema-compat": ["@mastra/schema-compat@1.3.13", "", { "dependencies": { "json-schema-to-zod": "^2.7.0", "zod-from-json-schema": "^0.5.2" }, "peerDependencies": { "zod": "^3.25.0 || ^4.0.0" } }, "sha512-L3AkWcujcCC9qKYiGOxjRN0NrNMIxLAwn/ayjNlD3zhFSUBDI45LmlFxAYHLeAz315uogKb+9tZA/TjHnjb95w=="], + + "@mastra/server": ["@mastra/server@1.75.0", "", { "dependencies": { "hono": "^4.13.7" }, "peerDependencies": { "@mastra/core": ">=1.58.0-0 <2.0.0-0", "zod": "^3.25.0 || ^4.0.0" } }, "sha512-yFhGn8vfGjXCfVkJJOhh9psTk5PrI7nVyEjeFao0L+dOXD5smsZ+to5WqL7UpasIm02dBLQxmJ5IqNTuoZacdw=="], + + "@napi-rs/lzma-linux-x64-gnu": ["@napi-rs/lzma-linux-x64-gnu@1.5.1", "", { "os": "linux", "cpu": "x64" }, "sha512-oTXEIha4SsuXdTA4Iyskj0kpdx2yVXdhd75c2v3xGrHFfVMsbhTPZU/nMPL4sWKo4pBHm3aucLaqGlF696dTyQ=="], + + "@nodelib/fs.scandir": ["@nodelib/fs.scandir@2.1.5", "", { "dependencies": { "@nodelib/fs.stat": "2.0.5", "run-parallel": "^1.1.9" } }, "sha512-vq24Bq3ym5HEQm2NKCr3yXDwjc7vTsEThRDnkp2DK9p1uqLR+DHurm/NOTo0KG7HYHU7eppKZj3MyqYuMBf62g=="], + + "@nodelib/fs.stat": ["@nodelib/fs.stat@2.0.5", "", {}, "sha512-RkhPPp2zrqDAQA/2jNhnztcPAlv64XdhIp7a7454A5ovI7Bukxgt7MX7udwAu3zg1DcpPU0rz3VV1SeaqvY4+A=="], + + "@nodelib/fs.walk": ["@nodelib/fs.walk@1.2.8", "", { "dependencies": { "@nodelib/fs.scandir": "2.1.5", "fastq": "^1.6.0" } }, "sha512-oGB+UxlgWcgQkgwo8GcEGwemoTFt3FIO9ababBmaGwXIoBKZ+GTy0pP185beGg7Llih/NSHSV2XAs1lnznocSg=="], + + "@optimize-lodash/rollup-plugin": ["@optimize-lodash/rollup-plugin@5.1.0", "", { "dependencies": { "@optimize-lodash/transform": "3.0.6", "@rollup/pluginutils": "^5.1.0" }, "peerDependencies": { "rollup": ">= 4.x" } }, "sha512-dBQYGH8+n4Z/877e61PJteVZEc+U1wfRF6IhKqW0cABRIsqMxpWynyov6M6Sd4IUjru0dnh0EG55X86JO6WakQ=="], + + "@optimize-lodash/transform": ["@optimize-lodash/transform@3.0.6", "", { "dependencies": { "estree-walker": "^2.0.2", "magic-string": "~0.30.11" } }, "sha512-9+qMSaDpahC0+vX2ChM46/ls6a5Ankqs6RTLrHSaFpm7o1mFanP82e+jm9/0o5D660ueK8dWJGPCXQrBxBNNWA=="], + + "@pinojs/redact": ["@pinojs/redact@0.4.0", "", {}, "sha512-k2ENnmBugE/rzQfEcdWHcCY+/FM3VLzH9cYEsbdsoqrvzAKRhUZeRNhAZvB8OitQJ1TBed3yqWtdjzS6wJKBwg=="], + + "@posthog/core": ["@posthog/core@1.57.2", "", { "dependencies": { "@posthog/types": "^1.415.1" } }, "sha512-dfxeSjUvR+j4M7odvyf/KVdcKTZZ87u/l9swJtDt9vFkI2km3RhEveOkIHtFcZEQ1cllx7YaKJfdw6c8zfIEvg=="], + + "@posthog/types": ["@posthog/types@1.415.1", "", {}, "sha512-7Qs2wcqipl8KcFpIkIKE1Wcj1djX4dEB3cfq907HrNpKK7/xKh3U4N4bkOD6h9+8j3SxWWrj9JNpE8CZXsE35w=="], + + "@rollup/plugin-alias": ["@rollup/plugin-alias@6.0.0", "", { "peerDependencies": { "rollup": ">=4.0.0" }, "optionalPeers": ["rollup"] }, "sha512-tPCzJOtS7uuVZd+xPhoy5W4vThe6KWXNmsFCNktaAh5RTqcLiSfT4huPQIXkgJ6YCOjJHvecOAzQxLFhPxKr+g=="], + + "@rollup/plugin-commonjs": ["@rollup/plugin-commonjs@29.0.2", "", { "dependencies": { "@rollup/pluginutils": "^5.0.1", "commondir": "^1.0.1", "estree-walker": "^2.0.2", "fdir": "^6.2.0", "is-reference": "1.2.1", "magic-string": "^0.30.3", "picomatch": "^4.0.2" }, "peerDependencies": { "rollup": "^2.68.0||^3.0.0||^4.0.0" }, "optionalPeers": ["rollup"] }, "sha512-S/ggWH1LU7jTyi9DxZOKyxpVd4hF/OZ0JrEbeLjXk/DFXwRny0tjD2c992zOUYQobLrVkRVMDdmHP16HKP7GRg=="], + + "@rollup/plugin-esm-shim": ["@rollup/plugin-esm-shim@0.1.8", "", { "dependencies": { "magic-string": "^0.30.3", "mlly": "^1.7.4" }, "peerDependencies": { "rollup": "^2.0.0||^3.0.0||^4.0.0" }, "optionalPeers": ["rollup"] }, "sha512-xEU0b/BShgDDSPjidhJd4R74J9xZ9jLVtFWNGtsUXyEsdwwwB1a3XOAwwGaNIyUHD6EhxPO21JMfUmJWoMn7SA=="], + + "@rollup/plugin-json": ["@rollup/plugin-json@6.1.0", "", { "dependencies": { "@rollup/pluginutils": "^5.1.0" }, "peerDependencies": { "rollup": "^1.20.0||^2.0.0||^3.0.0||^4.0.0" }, "optionalPeers": ["rollup"] }, "sha512-EGI2te5ENk1coGeADSIwZ7G2Q8CJS2sF120T7jLw4xFw9n7wIOXHo+kIYRAoVpJAN+kmqZSoO3Fp4JtoNF4ReA=="], + + "@rollup/plugin-node-resolve": ["@rollup/plugin-node-resolve@16.0.3", "", { "dependencies": { "@rollup/pluginutils": "^5.0.1", "@types/resolve": "1.20.2", "deepmerge": "^4.2.2", "is-module": "^1.0.0", "resolve": "^1.22.1" }, "peerDependencies": { "rollup": "^2.78.0||^3.0.0||^4.0.0" }, "optionalPeers": ["rollup"] }, "sha512-lUYM3UBGuM93CnMPG1YocWu7X802BrNF3jW2zny5gQyLQgRFJhV1Sq0Zi74+dh/6NBx1DxFC4b4GXg9wUCG5Qg=="], + + "@rollup/plugin-virtual": ["@rollup/plugin-virtual@3.0.2", "", { "peerDependencies": { "rollup": "^1.20.0||^2.0.0||^3.0.0||^4.0.0" }, "optionalPeers": ["rollup"] }, "sha512-10monEYsBp3scM4/ND4LNH5Rxvh3e/cVeL3jWTgZ2SrQ+BmUoQcopVQvnaMcOnykb1VkxUFuDAN+0FnpTFRy2A=="], + + "@rollup/pluginutils": ["@rollup/pluginutils@5.4.0", "", { "dependencies": { "@types/estree": "^1.0.0", "estree-walker": "^2.0.2", "picomatch": "^4.0.2" }, "peerDependencies": { "rollup": "^1.20.0||^2.0.0||^3.0.0||^4.0.0" }, "optionalPeers": ["rollup"] }, "sha512-MfPp06CjRLfXQ3wY0R8vJDYBy/MvVcc9OulEfR0B8Iv9ko+GCNaRZ+EpJYFl27LhKsZK0o420sYCRHCjfCgeUg=="], + + "@rollup/rollup-android-arm-eabi": ["@rollup/rollup-android-arm-eabi@4.64.2", "", { "os": "android", "cpu": "arm" }, "sha512-gjNDUwMswogkw3fNqV00u54uZlgmInuw5EU/1TeqQ6K0bEagoGvqjPdKzy112lKyhe7PkGudZ/kSQHsc9qroIg=="], + + "@rollup/rollup-android-arm64": ["@rollup/rollup-android-arm64@4.64.2", "", { "os": "android", "cpu": "arm64" }, "sha512-YkAW8q7p5SCLSaGWaUkmsRnBEb3MGA1pB5nI/8k0lAK5fZsQKRBqkdR1h4UU9p8u3c7ZGdUF2Zcx7mK+E/pUKg=="], + + "@rollup/rollup-darwin-arm64": ["@rollup/rollup-darwin-arm64@4.64.2", "", { "os": "darwin", "cpu": "arm64" }, "sha512-hNmuIHv+LnrP/+q/44vsmIMWfoh7X2YXOp5FLtjGuvqN52VdtFpOpnshTc1k28tWv1wE/0D5gLjsozBUowEGbQ=="], + + "@rollup/rollup-darwin-x64": ["@rollup/rollup-darwin-x64@4.64.2", "", { "os": "darwin", "cpu": "x64" }, "sha512-B0t5CoxgF2KL7R5FHAsyN8yVEQCSIkh4XVs8MCDjuBLNjEa8l3zd5tVKaFMv53LfUtHs9p2rnqeavPTOunV+Ww=="], + + "@rollup/rollup-freebsd-arm64": ["@rollup/rollup-freebsd-arm64@4.64.2", "", { "os": "freebsd", "cpu": "arm64" }, "sha512-QQdYnfwrPmc1DoPlddjFvQPzUHFbStKXsHrG6EBYsWHhBVUCjsCRdcfGGXGAvhDpDtTzKK4vy1UrGFJ45rQaiw=="], + + "@rollup/rollup-freebsd-x64": ["@rollup/rollup-freebsd-x64@4.64.2", "", { "os": "freebsd", "cpu": "x64" }, "sha512-1xRxtGWif6BB58VSfMavi0Yfs2M4x6CtRp4o7ScY4W7AGlgvf6GSPKdDNdw7TX3tMiQwZY5W/mvyrOJTq/7AKA=="], + + "@rollup/rollup-linux-arm-gnueabihf": ["@rollup/rollup-linux-arm-gnueabihf@4.64.2", "", { "os": "linux", "cpu": "arm" }, "sha512-CXFLEt384BUwwOLR9DURWNHl1bQOVLd1ibOee+yKBJm/fZtvrSAOZ0JbxjAxszVMIovYMwFMS+oP+Q1aPcx8Eg=="], + + "@rollup/rollup-linux-arm-musleabihf": ["@rollup/rollup-linux-arm-musleabihf@4.64.2", "", { "os": "linux", "cpu": "arm" }, "sha512-T1dorY0WHm5mMNpMHFl5rYRZ02gLSZcr6J45r66tYb3S3R3DyIRGiGWVdLtF+zOQjratNJaObl9jYumueRiL1A=="], + + "@rollup/rollup-linux-arm64-gnu": ["@rollup/rollup-linux-arm64-gnu@4.64.2", "", { "os": "linux", "cpu": "arm64" }, "sha512-ia6bfaCIc0ldp6bvs9oEkFrJVJKNUMoiDF0+LBZsQAZg+vE0znXnzGqH+ew/FYswE30cruAWPTO3dPw7keaVkQ=="], + + "@rollup/rollup-linux-arm64-musl": ["@rollup/rollup-linux-arm64-musl@4.64.2", "", { "os": "linux", "cpu": "arm64" }, "sha512-mB/gwfBfXtT0EBpbSssqKCqMFuX8b21Zy2TGoIhehSJEssZ5ksybxymwp1BkEM5Nczh/AAxpmh5q+MkhtundGg=="], + + "@rollup/rollup-linux-loong64-gnu": ["@rollup/rollup-linux-loong64-gnu@4.64.2", "", { "os": "linux", "cpu": "none" }, "sha512-VPd0a+XlHoNRI9jIPRHww2UKhDkD6XjbtcKYXZijAnhJS1jLLbiNtVl6a5LyEfNN+eyiyWcJOZXPzBo69oTsew=="], + + "@rollup/rollup-linux-loong64-musl": ["@rollup/rollup-linux-loong64-musl@4.64.2", "", { "os": "linux", "cpu": "none" }, "sha512-10N1I6oBpERqzGtHKcCLrEpHlbXSBbMK9TURHvqgWbIFZuU3oJROxJ0H2nHfq96TVI0XJHQ9qzolJMFd2tz0LA=="], + + "@rollup/rollup-linux-ppc64-gnu": ["@rollup/rollup-linux-ppc64-gnu@4.64.2", "", { "os": "linux", "cpu": "ppc64" }, "sha512-dhJrLVZ3wNNhwCmy9/VTg6Pq6J8a8eZ0n15dVRlbSWcDb+8V/1mDfbnvis+vt8W6Pbxzv6gUbTEl4piOT3bbUQ=="], + + "@rollup/rollup-linux-ppc64-musl": ["@rollup/rollup-linux-ppc64-musl@4.64.2", "", { "os": "linux", "cpu": "ppc64" }, "sha512-tPd2QuwxkTxgju5eARyb3RdgBWWi/O9dn/NFH0VkvGbLzoQeXrH6qMABtW8IODb5lUeBzB3sy2U7qmI4MtQ72g=="], + + "@rollup/rollup-linux-riscv64-gnu": ["@rollup/rollup-linux-riscv64-gnu@4.64.2", "", { "os": "linux", "cpu": "none" }, "sha512-njtDdPvSQWI9CDhIPPxsiEMeHayCfu7wwcbSQ7c2kYPhGVviL+WGVhq6Jfj/b+VuhSTkFuQ0z4ZFbFjkWwBFmg=="], + + "@rollup/rollup-linux-riscv64-musl": ["@rollup/rollup-linux-riscv64-musl@4.64.2", "", { "os": "linux", "cpu": "none" }, "sha512-EbOBo3dqCj9ecEV9Z7zvulB6AieMP2ztnKQYGVOSN0pzIyOu+3JH2YJZnLmbPeVvfn6yP6Qi7NbBM27EzGbj2w=="], + + "@rollup/rollup-linux-s390x-gnu": ["@rollup/rollup-linux-s390x-gnu@4.64.2", "", { "os": "linux", "cpu": "s390x" }, "sha512-8wLt2Q5n4qmfiE2Gk8V6KNLSf+oJuBX7Kdw5joFDtnZIZvirS0hLzBc79OiJjV71oYDmBUZLNy6pDgvylo4qiQ=="], + + "@rollup/rollup-linux-x64-gnu": ["@rollup/rollup-linux-x64-gnu@4.64.2", "", { "os": "linux", "cpu": "x64" }, "sha512-aIChbkhC4d33bxkVP0LSi2/2lUSGRXE6k4Qa0G7tgpgTOK7kxHTixmx5qC3SKUJ6yUMznHBtQoWaG4QMqLUnhw=="], + + "@rollup/rollup-linux-x64-musl": ["@rollup/rollup-linux-x64-musl@4.64.2", "", { "os": "linux", "cpu": "x64" }, "sha512-gQ+TkVZRfjZVcl/UOAxxfWw+sHjzIXoieNwxEyJlD3tRBmBhR8ZDq11w+QEgQDcpslEB+fhN/OEpaTsDoIIHhQ=="], + + "@rollup/rollup-openbsd-x64": ["@rollup/rollup-openbsd-x64@4.64.2", "", { "os": "openbsd", "cpu": "x64" }, "sha512-sUaJpMKS2JBCvUk8fYimG7aMq2jHVT4kw/uVHxPolKLrMmkKy0KXirmZyZehdNpL7PffqAlPAWUELQcTiD8ChA=="], + + "@rollup/rollup-openharmony-arm64": ["@rollup/rollup-openharmony-arm64@4.64.2", "", { "os": "none", "cpu": "arm64" }, "sha512-j1RdJWb0CrlSuwt12OPjLucPlwfLtA/KMOKVvh5rXSJEtl/WDoIGR3CSykK/jLGTo9RqNfW5Ub6kY5Z5ccYl9w=="], + + "@rollup/rollup-win32-arm64-msvc": ["@rollup/rollup-win32-arm64-msvc@4.64.2", "", { "os": "win32", "cpu": "arm64" }, "sha512-i3r04aHCIY3eggTBLUp/4IxiBjDpAgQaK89Ue2nMJ2MKuIXX5JfoeZjHw+kPjGGNVDlhi8FT8xzuGMJZe3aehg=="], + + "@rollup/rollup-win32-ia32-msvc": ["@rollup/rollup-win32-ia32-msvc@4.64.2", "", { "os": "win32", "cpu": "ia32" }, "sha512-kCQ15h/uwNMGdN8gjXBZGf+aGE+ODzHfbi90/cAm4+Q89WoMiLODNoj8HoGZmYx87HPxfu5CBNPsZ+ZG4uIAoA=="], + + "@rollup/rollup-win32-x64-gnu": ["@rollup/rollup-win32-x64-gnu@4.64.2", "", { "os": "win32", "cpu": "x64" }, "sha512-yYAuySSs+0X2gSMJPw/Q4jHsHZHyMq1dpAE+XnN790Jg1WuReUAD/+j+e4vuDvS4PXJ4PA4NCzTR4OYtDf18/g=="], + + "@rollup/rollup-win32-x64-msvc": ["@rollup/rollup-win32-x64-msvc@4.64.2", "", { "os": "win32", "cpu": "x64" }, "sha512-JY1rQdWOJrKutORqKO1uzrHXV86jFiQzfLFKx2s8S1CjLXL9fC5LOIvk0q7Z7PXJvsByt+sdoE1Q2a9gBr4gLQ=="], + + "@sec-ant/readable-stream": ["@sec-ant/readable-stream@0.4.1", "", {}, "sha512-831qok9r2t8AlxLko40y2ebgSDhenenCatLVeW/uBtnHPyhHOvG0C7TvfgecV+wHzIm5KUICgzmVpWS+IMEAeg=="], + + "@sindresorhus/merge-streams": ["@sindresorhus/merge-streams@4.0.0", "", {}, "sha512-tlqY9xq5ukxTUZBmoOp+m61cqwQD5pHJtFY3Mn8CA8ps6yghLH/Hw8UPdqg4OLmFW3IFlcXnQNmo/dh8HzXYIQ=="], + + "@sindresorhus/slugify": ["@sindresorhus/slugify@2.2.1", "", { "dependencies": { "@sindresorhus/transliterate": "^1.0.0", "escape-string-regexp": "^5.0.0" } }, "sha512-MkngSCRZ8JdSOCHRaYd+D01XhvU3Hjy6MGl06zhOk614hp9EOAp5gIkBeQg7wtmxpitU6eAL4kdiRMcJa2dlrw=="], + + "@sindresorhus/transliterate": ["@sindresorhus/transliterate@1.6.0", "", { "dependencies": { "escape-string-regexp": "^5.0.0" } }, "sha512-doH1gimEu3A46VX6aVxpHTeHrytJAG6HgdxntYnCFiIFHEM/ZGpG8KiZGBChchjQmG0XFIBL552kBTjVcMZXwQ=="], + + "@standard-community/standard-json": ["@standard-community/standard-json@0.3.6", "", { "dependencies": { "quansync": "^0.2.11" }, "peerDependencies": { "@standard-schema/spec": "^1.0.0", "@types/json-schema": "^7.0.15", "@valibot/to-json-schema": "^1.3.0", "arktype": "^2.1.20", "effect": "^3.20.0", "sury": "^10.0.0", "typebox": "^1.0.17", "valibot": "^1.4.2", "zod": "^3.25.0 || ^4.0.0", "zod-to-json-schema": "^3.24.5" }, "optionalPeers": ["@valibot/to-json-schema", "arktype", "effect", "sury", "typebox", "valibot", "zod", "zod-to-json-schema"] }, "sha512-tuXKz1Ps4al0W4xhfwii7v4lskKtOv3QE7mcouRVThrBdOR6JzY4Vea3nsxcEnte84bOJvMvXGmOMWE3IBbHyA=="], + + "@standard-community/standard-openapi": ["@standard-community/standard-openapi@0.2.10", "", { "peerDependencies": { "@standard-community/standard-json": "^0.3.5", "@standard-schema/spec": "^1.0.0", "arktype": "^2.1.20", "effect": "^3.20.0", "openapi-types": "^12.1.3", "sury": "^10.0.0", "typebox": "^1.0.0", "valibot": "^1.4.2", "zod": "^3.25.0 || ^4.0.0", "zod-openapi": "^4" }, "optionalPeers": ["arktype", "effect", "sury", "typebox", "valibot", "zod", "zod-openapi"] }, "sha512-whaCN9eu5zv5gu6Kyeh5am/S3AyS1nqo57/wAxs/KPS7+94UhBUZmkIetmXzm22qIV0zMrHt3y+2VfjkbkYYTA=="], + + "@standard-schema/spec": ["@standard-schema/spec@1.1.0", "", {}, "sha512-l2aFy5jALhniG5HgqrD6jXLi/rUWrKvqN/qJx6yoJsgKhblVd+iqqU4RCXavm/jPityDo5TCvKMnpjKnOriy0w=="], + + "@types/debug": ["@types/debug@4.1.13", "", { "dependencies": { "@types/ms": "*" } }, "sha512-KSVgmQmzMwPlmtljOomayoR89W4FynCAi3E8PPs7vmDVPe84hT+vGPKkJfThkmXs0x0jAaa9U8uW8bbfyS2fWw=="], + + "@types/estree": ["@types/estree@1.0.9", "", {}, "sha512-GhdPgy1el4/ImP05X05Uw4cw2/M93BCUmnEvWZNStlCzEKME4Fkk+YpoA5OiHNQmoS7Cafb8Xa3Pya8m1Qrzeg=="], + + "@types/gensync": ["@types/gensync@1.0.5", "", {}, "sha512-MbsRCT7mTikHwKZ0X+LVUTLRrZZRLipTuXEO9qOYO+zmjMVk81axyClMROf6uoPD9MRVu46bx8zoR0Ad9q3NAg=="], + + "@types/jsesc": ["@types/jsesc@2.5.1", "", {}, "sha512-9VN+6yxLOPLOav+7PwjZbxiID2bVaeq0ED4qSQmdQTdjnXJSaCVKTR58t15oqH1H5t8Ng2ZX1SabJVoN9Q34bw=="], + + "@types/json-schema": ["@types/json-schema@7.0.15", "", {}, "sha512-5+fP8P8MFNC+AyZCDxrB2pkZFPGzqQWUzpSeuuVLvm8VMcorNYavBqoFcxK8bQz4Qsbn4oUEEem4wDLfcysGHA=="], + + "@types/mdast": ["@types/mdast@4.0.4", "", { "dependencies": { "@types/unist": "*" } }, "sha512-kGaNbPh1k7AFzgpud/gMdvIm5xuECykRR+JnWKQno9TAXVa6WIVCGTPvYGekIDL4uwCZQSYbUxNBSb1aUo79oA=="], + + "@types/ms": ["@types/ms@2.1.0", "", {}, "sha512-GsCCIZDE/p3i96vtEqx+7dBUGXrc7zeSK3wwPHIaRThS+9OhWIXRqzs4d6k1SVU8g91DrNRWxWUGhp5KXQb2VA=="], + + "@types/resolve": ["@types/resolve@1.20.2", "", {}, "sha512-60BCwRFOZCQhDncwQdxxeOEEkbc5dIMccYLwbxsS4TUNeVECQ/pBJ0j09mrHOl/JJvpRPGwO9SvE4nR2Nb/a4Q=="], + + "@types/unist": ["@types/unist@3.0.3", "", {}, "sha512-ko/gIFJRv177XgZsZcBwnqJN5x/Gien8qNOn0D5bQU/zAzVf9Zt3BlcUiLqhV9y4ARk0GbT3tnUiPNgnTXzc/Q=="], + + "@workflow/serde": ["@workflow/serde@4.1.0", "", {}, "sha512-pav4F2BoirECWR7Nf1TKt+2eETcBj7jj4cBefQ8VXQCA6NPkaKeLfj/zMgi+3zYV5ZIBT4GuUiphsj0/b9hPQQ=="], + + "abort-controller": ["abort-controller@3.0.0", "", { "dependencies": { "event-target-shim": "^5.0.0" } }, "sha512-h8lQ8tacZYnR3vNQTgibj+tODHI5/+l06Au2Pcriv/Gmet0eaj4TwWH41sO9wnHDiQsEj19q0drzdWdeAHtweg=="], + + "acorn": ["acorn@8.19.0", "", { "bin": { "acorn": "bin/acorn" } }, "sha512-oJlA3XiRm7Cyk6qFD2Jn8ak9B7jSy0qy00ADO3+8dpT0LSjFihQYv4C02LFCSYJV3Q37xYwwRy5m+IpIiUzqWw=="], + + "archiver": ["archiver@8.0.0", "", { "dependencies": { "async": "^3.2.4", "buffer-crc32": "^1.0.0", "is-stream": "^4.0.0", "lazystream": "^1.0.0", "normalize-path": "^3.0.0", "readable-stream": "^4.0.0", "readdir-glob": "^3.0.0", "tar-stream": "^3.0.0", "zip-stream": "^7.0.2" } }, "sha512-fV1orZfsnPn9BaSByR/qE67rJCLJEy2Ox5bq7nJh+jquWaNh6Sfec75kJ2T6PtdGUbPQlrVoSVCEOa5SdiTQ1g=="], + + "argparse": ["argparse@1.0.10", "", { "dependencies": { "sprintf-js": "~1.0.2" } }, "sha512-o5Roy6tNG4SL/FOkCAN6RzjiakZS25RLYFrcMttJqbdd8BWrnA+fGz57iN5Pb06pvBGvl5gQ0B48dJlslXvoTg=="], + + "async": ["async@3.2.6", "", {}, "sha512-htCUDlxyyCLMgaM3xXg0C0LW2xqfuQ6p05pCEIsXuyQ+a1koYKTuBMzRNwmybfLgvJDMd0r1LTn4+E0Ti6C2AA=="], + + "atomic-sleep": ["atomic-sleep@1.0.0", "", {}, "sha512-kNOjDqAh7px0XWNI+4QbzoiR/nTkHAWNud2uvnJquD1/x5a7EQZMJT0AczqK0Qn67oY/TTQ1LbUKajZpp3I9tQ=="], + + "b4a": ["b4a@1.9.0", "", { "peerDependencies": { "react-native-b4a": "*" }, "optionalPeers": ["react-native-b4a"] }, "sha512-dpfcF9fDNR6++cthXR67iyhgqWy9CBouAvIWhIntzBG6cvK/cnIPiZQjBwi/ZqjjBEDGfoNDtmB0kTjroOJ3pQ=="], + + "bail": ["bail@2.0.2", "", {}, "sha512-0xO6mYd7JB2YesxDKplafRpsiOzPt9V02ddPCLbY1xYGPOX24NTyN50qnUxgCPcSoYMhKpAuBTjQoRZCAkUDRw=="], + + "balanced-match": ["balanced-match@1.0.2", "", {}, "sha512-3oSeUO0TMV67hN1AmbXsK4yaqU7tjiHlbxRDZOpH0KW9+CeX4bRAaX0Anxt0tx2MrpRpWwQaPwIlISEJhYU5Pw=="], + + "bare-events": ["bare-events@2.9.2", "", { "peerDependencies": { "bare-abort-controller": "*" }, "optionalPeers": ["bare-abort-controller"] }, "sha512-AIPKioV7/Y/8KfZ3AAhjPJxLLbY49S64Ym5DakZlUg75qQiTgUq9hEJoEwa4eUezPUlXRy/i5NpsKvo9jgKmoA=="], + + "bare-fs": ["bare-fs@4.8.2", "", { "dependencies": { "bare-events": "^2.5.4", "bare-path": "^3.0.0", "bare-stream": "^2.6.4", "bare-url": "^2.2.2", "fast-fifo": "^1.3.2" }, "peerDependencies": { "bare-buffer": "*" }, "optionalPeers": ["bare-buffer"] }, "sha512-+ZI68KHMUvosXfKbg/UOHK0tbCdRnegbvPEdEcZ3Nd6TetieQsJPRXBRXPdLyy8+3VSEbPXtsumTpEtt78xv9w=="], + + "bare-path": ["bare-path@3.1.2", "", {}, "sha512-ZyKbsuuqK6Ag0K8pX6V5Txq6XeJRvY+wXucnFGRjiyVYP9YWDpIQugk/b+enRYrEYBJaqLzghRQpXPMR7341Nw=="], + + "bare-stream": ["bare-stream@2.13.4", "", { "dependencies": { "b4a": "^1.8.1", "streamx": "^2.25.0", "teex": "^1.0.1" }, "peerDependencies": { "bare-abort-controller": "*", "bare-buffer": "*", "bare-events": "*" }, "optionalPeers": ["bare-abort-controller", "bare-buffer", "bare-events"] }, "sha512-PcrQ8lVLbiJscNm1Kez+Yp4Gy4AHGcN1lzwjvf5NybWen7VvEgUfyfnXYJ2zNqWnzOfCb1Abq6lH8ti0syQszA=="], + + "bare-url": ["bare-url@2.5.4", "", { "dependencies": { "bare-path": "^3.0.0" } }, "sha512-Gxa7UVWBr0/edU1b+TJhn/AZvMQUj9OGspvYsaTYQrAbZA4BOTZGL3LiZxvD+CeMlDH4juwD84+eTAp/bLYW5g=="], + + "base64-js": ["base64-js@1.5.1", "", {}, "sha512-AKpaYlHn8t4SVbOHCy+b5+KKgvR4vrsD8vbvrbiQJps7fKDTkjkDry6ji0rUJjC0kzbNePLwzxq8iypo41qeWA=="], + + "baseline-browser-mapping": ["baseline-browser-mapping@2.11.27", "", { "bin": { "baseline-browser-mapping": "dist/cli.cjs" } }, "sha512-ElY12DaROGuan+lMmZ8Cvo/ZUbXPe7Enc/9VU/b1T3Kp4dwytRcNdR8DoSJN5SNJT/CuvcCA0DHDVmMOCePdRQ=="], + + "brace-expansion": ["brace-expansion@1.1.21", "", { "dependencies": { "balanced-match": "^1.0.0", "concat-map": "0.0.1" } }, "sha512-9zeA+KLZNNzglF2TPKRQEDyx6Yby7daAkuy8MiPzpXPsYDWi/DRM8jmwUDxokQjYqBpv5DgPiwD4h4ZZSy1Ujw=="], + + "braces": ["braces@3.0.3", "", { "dependencies": { "fill-range": "^7.1.1" } }, "sha512-yQbXgO/OSZVD2IsiLlro+7Hf6Q18EJrKSEsdoMzKePKXct3gvD8oLcOQdIzGupr5Fj+EDe8gO/lxc1BzfMpxvA=="], + + "browserslist": ["browserslist@4.29.3", "", { "dependencies": { "baseline-browser-mapping": "^2.11.26", "caniuse-lite": "^1.0.30001813", "electron-to-chromium": "^1.5.439", "node-releases": "^2.0.57", "update-browserslist-db": "^1.3.3" }, "bin": { "browserslist": "cli.js" } }, "sha512-1R4kiYKXGViqEN0CnoDrXc1StD9niAwu+j2dukWzrD4bJgsD4lDmEp0CRbc6E/vYJIfTHwPmwyaKtVSudICdPA=="], + + "buffer": ["buffer@6.0.3", "", { "dependencies": { "base64-js": "^1.3.1", "ieee754": "^1.2.1" } }, "sha512-FTiCpNxtwiZZHEZbcbTIcZjERVICn9yq/pDFkTl95/AxzD1naBctN7YO68riM/gLSDY7sdrMby8hofADYuuqOA=="], + + "buffer-crc32": ["buffer-crc32@1.0.0", "", {}, "sha512-Db1SbgBS/fg/392AblrMJk97KggmvYhr4pB5ZIMTWtaivCPMWLkmb7m21cJvpvgK+J3nsU2CmmixNBZx4vFj/w=="], + + "bytes": ["bytes@3.0.0", "", {}, "sha512-pMhOfFDPiv9t5jjIXkHosWmkSyQbvsgEVNkz0ERHbuLh2T/7j4Mqqpz523Fe8MVY89KC6Sh/QfS2sM+SjgFDcw=="], + + "caniuse-lite": ["caniuse-lite@1.0.30001815", "", {}, "sha512-uDybUEyfgbyJJ93J1vikTylBX31AkdVYeVPeffMQpf8XN7hSfr0oZOn4VFOIMNvtU5+rHvC5Udg2TgtJKHm23Q=="], + + "ccount": ["ccount@2.0.1", "", {}, "sha512-eyrF0jiFpY+3drT6383f1qhkbGsLSifNAjA61IUjZjmLCWjItY6LB9ft9YhoDgwfmclB2zhu51Lc7+95b8NRAg=="], + + "character-entities": ["character-entities@2.0.2", "", {}, "sha512-shx7oQ0Awen/BRIdkjkvz54PnEEI/EjwXDSIZp86/KKdbafHh1Df/RYGBhn4hbe2+uKC9FnT5UCEdyPz3ai9hQ=="], + + "chat": ["chat@4.41.1", "", { "dependencies": { "@workflow/serde": "4.1.0-beta.2", "mdast-util-to-string": "^4.0.0", "remark-gfm": "^4.0.0", "remark-parse": "^11.0.0", "remark-stringify": "^11.0.0", "remend": "^1.2.1", "unified": "^11.0.5" }, "peerDependencies": { "ai": "^6.0.182 || ^7.0.0", "workflow": "^5.0.0-beta.35", "zod": "^3.0.0 || ^4.0.0" }, "optionalPeers": ["ai", "workflow", "zod"] }, "sha512-+/LDcLoYLihf/9Kp5ymj2ylvm6q5vySQTMn0ZoeU0UWDfNVmCNc6OiADW8hwnejOLfevUs8lEpgotG9rmIxZvg=="], + + "colorette": ["colorette@2.0.20", "", {}, "sha512-IfEDxwoWIjkeXL1eXcDiow4UbKjhLdq6/EuSVR9GMN7KVH3r9gQ83e73hsz1Nd1T3ijd5xv1wcWRYO+D6kCI2w=="], + + "commander": ["commander@14.0.3", "", {}, "sha512-H+y0Jo/T1RZ9qPP4Eh1pkcQcLRglraJaSLoyOtHxu6AapkjWVCy2Sit1QQ4x3Dng8qDlSsZEet7g5Pq06MvTgw=="], + + "commondir": ["commondir@1.0.1", "", {}, "sha512-W9pAhw0ja1Edb5GVdIF1mjZw/ASI0AlShXM83UUGe2DVr5TdAPEA1OA8m/g8zWp9x6On7gqufY+FatDbC3MDQg=="], + + "compress-commons": ["compress-commons@7.0.1", "", { "dependencies": { "crc-32": "^1.2.0", "crc32-stream": "^7.0.1", "is-stream": "^4.0.0", "normalize-path": "^3.0.0", "readable-stream": "^4.0.0" } }, "sha512-g0S8KAD8qf4+V//pr3BfB1aBnARLXNz2Gx+jmHU0LEriUuoQUOPOulVquHKTJ8+EAIIO7fhseNDr9wK5Q9FKBQ=="], + + "concat-map": ["concat-map@0.0.1", "", {}, "sha512-/Srv4dswyQNBfohGpz9o6Yb3Gz3SrUDqBH5rTuhGR7ahtlbYKnVxw2bCFMRljaA7EXHaXZ8wsHdodFvbkhKmqg=="], + + "confbox": ["confbox@0.3.1", "", {}, "sha512-cKUSoKa8YxFZZSmraVi7onONx3amu77ngK3kGpsYHDH7drPwCRkQE1RYMPlLRrMtnciRj274XNRxcHxnKmDSnA=="], + + "content-disposition": ["content-disposition@0.5.2", "", {}, "sha512-kRGRZw3bLlFISDBgwTSA1TMBFN6J6GWDeubmDE3AF+3+yXL8hTWv8r5rkLbqYXY4RjPk/EzHnClI3zQf1cFmHA=="], + + "convert-source-map": ["convert-source-map@2.0.0", "", {}, "sha512-Kvp459HrV2FEJ1CAsi1Ku+MY3kasH19TFykTz2xWmMeq6bk2NU3XXvfJ+Q61m0xktWwt+1HSYf3JZsTms3aRJg=="], + + "core-util-is": ["core-util-is@1.0.3", "", {}, "sha512-ZQBvi1DcpJ4GDqanjucZ2Hj3wEO5pZDS89BWbkcrvdxksJorwUDDZamX9ldFkp9aw2lmBDLgkObEA4DWNJ9FYQ=="], + + "crc-32": ["crc-32@1.2.2", "", { "bin": { "crc32": "bin/crc32.njs" } }, "sha512-ROmzCKrTnOwybPcJApAA6WBWij23HVfGVNKqqrZpuyZOHqK2CwHSvpGuyt/UNNvaIjEd8X5IFGp4Mh+Ie1IHJQ=="], + + "crc32-stream": ["crc32-stream@7.0.1", "", { "dependencies": { "crc-32": "^1.2.0", "readable-stream": "^4.0.0" } }, "sha512-IBWsY8xznyQrcHn8h4bC8/4ErNke5elzgG8GcqF4RFPw6aHkWWRc7Tgw6upjaTX/CT/yQgqYENkxYsTYN+hW2g=="], + + "croner": ["croner@10.0.1", "", {}, "sha512-ixNtAJndqh173VQ4KodSdJEI6nuioBWI0V1ITNKhZZsO0pEMoDxz539T4FTTbSZ/xIOSuDnzxLVRqBVSvPNE2g=="], + + "cross-spawn": ["cross-spawn@7.0.6", "", { "dependencies": { "path-key": "^3.1.0", "shebang-command": "^2.0.0", "which": "^2.0.1" } }, "sha512-uV2QOWP2nWzsy2aMp8aRibhi9dlzF5Hgh5SHaB9OiTGEyDTiJJyx0uy51QXdyWbtAHNua4XJzUKca3OzKUd3vA=="], + + "dateformat": ["dateformat@4.6.3", "", {}, "sha512-2P0p0pFGzHS5EMnhdxQi7aJN+iMheud0UhG4dlE1DLAlvL8JHjJJTX/CSm4JXwV0Ka5nGk3zC5mcb5bUQUxxMA=="], + + "debug": ["debug@3.2.7", "", { "dependencies": { "ms": "^2.1.1" } }, "sha512-CFjzYYAi4ThfiQvizrFQevTTXHtnCqWfe7x1AhgEscTz6ZbLbfoLRLPugTQyBth6f8ZERVUSyWHFD/7Wu4t1XQ=="], + + "decode-named-character-reference": ["decode-named-character-reference@1.3.0", "", { "dependencies": { "character-entities": "^2.0.0" } }, "sha512-GtpQYB283KrPp6nRw50q3U9/VfOutZOe103qlN7BPP6Ad27xYnOIWv4lPzo8HCAL+mMZofJ9KEy30fq6MfaK6Q=="], + + "deepmerge": ["deepmerge@4.3.1", "", {}, "sha512-3sUqbMEc77XqpdNO7FRyRog+eW3ph+GYCbj+rK+uYyRMuwsVy0rMiVtPn+QJlKFvWP/1PYpapqYn0Me2knFn+A=="], + + "dequal": ["dequal@2.0.3", "", {}, "sha512-0je+qPKHEMohvfRTCEo3CrPG6cAzAYgmzKyxRiYSSDkS6eGJdyVJm7WaYA5ECaAD9wLB2T4EEeymA5aFVcYXCA=="], + + "devlop": ["devlop@1.1.0", "", { "dependencies": { "dequal": "^2.0.0" } }, "sha512-RWmIqhcFf1lRYBvNmr7qTNuyCt/7/ns2jbpp1+PalgE/rDQcBT0fioSMUpJ93irlUhC5hrg4cYqe6U+0ImW0rA=="], + + "dotenv": ["dotenv@17.4.2", "", {}, "sha512-nI4U3TottKAcAD9LLud4Cb7b2QztQMUEfHbvhTH09bqXTxnSie8WnjPALV/WMCrJZ6UV/qHJ6L03OqO3LcdYZw=="], + + "electron-to-chromium": ["electron-to-chromium@1.5.451", "", {}, "sha512-vUNKPrUzw8ByEMOxloq0a71iD/mPuPxVkbDm3G5YhnxTzOw/I6qAg2MUS0cYj/c267lWmw26yW4Vv7foxTxPLg=="], + + "empathic": ["empathic@2.1.0", "", {}, "sha512-AnfC1ATldl49/cvZdLPDjBfrRNwbDO05aibiOtzQu3qtlbJtomNLhF30HEtn/7iBz50dlMECqATo3fG0LrdEgw=="], + + "end-of-stream": ["end-of-stream@1.4.5", "", { "dependencies": { "once": "^1.4.0" } }, "sha512-ooEGc6HP26xXq/N+GCGOT0JKCLDGrq2bQUZrQ7gyrJiZANJ/8YDTxTpQBXGMn+WbIQXNVpyWymm7KYVICQnyOg=="], + + "es-errors": ["es-errors@1.3.0", "", {}, "sha512-Zf5H2Kxt2xjTvbJvP2ZWLEICxA6j+hAmMzIlypy4xcBg1vKVnx89Wy0GbS+kf5cwCVFFzdCFh2XSCFNULS6csw=="], + + "es-module-lexer": ["es-module-lexer@1.7.0", "", {}, "sha512-jEQoCwk8hyb2AZziIOLhDqpm5+2ww5uIE6lkO/6jcOCusfk6LhMHpXXfBLXTZ7Ydyt0j4VoUQv6uGNYbdW+kBA=="], + + "esbuild": ["esbuild@0.28.2", "", { "optionalDependencies": { "@esbuild/aix-ppc64": "0.28.2", "@esbuild/android-arm": "0.28.2", "@esbuild/android-arm64": "0.28.2", "@esbuild/android-x64": "0.28.2", "@esbuild/darwin-arm64": "0.28.2", "@esbuild/darwin-x64": "0.28.2", "@esbuild/freebsd-arm64": "0.28.2", "@esbuild/freebsd-x64": "0.28.2", "@esbuild/linux-arm": "0.28.2", "@esbuild/linux-arm64": "0.28.2", "@esbuild/linux-ia32": "0.28.2", "@esbuild/linux-loong64": "0.28.2", "@esbuild/linux-mips64el": "0.28.2", "@esbuild/linux-ppc64": "0.28.2", "@esbuild/linux-riscv64": "0.28.2", "@esbuild/linux-s390x": "0.28.2", "@esbuild/linux-x64": "0.28.2", "@esbuild/netbsd-arm64": "0.28.2", "@esbuild/netbsd-x64": "0.28.2", "@esbuild/openbsd-arm64": "0.28.2", "@esbuild/openbsd-x64": "0.28.2", "@esbuild/openharmony-arm64": "0.28.2", "@esbuild/sunos-x64": "0.28.2", "@esbuild/win32-arm64": "0.28.2", "@esbuild/win32-ia32": "0.28.2", "@esbuild/win32-x64": "0.28.2" }, "bin": { "esbuild": "bin/esbuild" } }, "sha512-HKVLS8dvII+xoKW9kmqxbRKrnWEXfJJr/FZhhJmiqIB0e053QNYFqOBouTMO/k5sID4MvCiUCvv8b9M4h32wIA=="], + + "escalade": ["escalade@3.2.0", "", {}, "sha512-WUj2qlxaQtO4g6Pq5c29GTcWGDyd8itL8zTlipgECz3JesAiiOKotd8JU6otB3PACgG6xkJUyVhboMS+bje/jA=="], + + "escape-string-regexp": ["escape-string-regexp@5.0.0", "", {}, "sha512-/veY75JbMK4j1yjvuUxuVsiS/hr/4iHs9FTT6cgTexxdE0Ly/glccBAkloH/DofkjRbZU3bnoj38mOmhkZ0lHw=="], + + "esprima": ["esprima@4.0.1", "", { "bin": { "esparse": "./bin/esparse.js", "esvalidate": "./bin/esvalidate.js" } }, "sha512-eGuFFw7Upda+g4p+QHvnW0RyTX/SVeJBDM/gCtMARO0cLuT2HcEKnTPvhjV6aGeqrCB/sbNop0Kszm0jsaWU4A=="], + + "estree-walker": ["estree-walker@2.0.2", "", {}, "sha512-Rfkk/Mp/DL7JVje3u18FxFujQlTNR2q6QfMSMB7AvCBx91NGj/ba3kCfza0f6dVDbw7YlRf/nDrn7pQrCCyQ/w=="], + + "event-target-shim": ["event-target-shim@5.0.1", "", {}, "sha512-i/2XbnSz/uxRCU6+NdVJgKWDTM427+MqYbkQzD321DuCQJUqOuJKIA0IM2+W2xtYHdKOmZ4dR6fExsd4SXL+WQ=="], + + "events": ["events@3.3.0", "", {}, "sha512-mQw+2fkQbALzQ7V0MY0IqdnXNOeTtP4r0lN9z7AAawCXgqea7bDii20AYrIBrFd/Hx0M2Ocz6S111CaFkUcb0Q=="], + + "events-universal": ["events-universal@1.0.1", "", { "dependencies": { "bare-events": "^2.7.0" } }, "sha512-LUd5euvbMLpwOF8m6ivPCbhQeSiYVNb8Vs0fQ8QjXo0JTkEHpz8pxdQf0gStltaPpw0Cca8b39KxvK9cfKRiAw=="], + + "eventsource-parser": ["eventsource-parser@3.1.1", "", {}, "sha512-EKN1vKAMcZ8MlYMpaNuxN6R9yakzH6uajHcHVTqWJzvu5pWw9DyhbP35HH8MVBQ+dZjAfDxk+A8NiR9KWaXiyQ=="], + + "execa": ["execa@9.6.1", "", { "dependencies": { "@sindresorhus/merge-streams": "^4.0.0", "cross-spawn": "^7.0.6", "figures": "^6.1.0", "get-stream": "^9.0.0", "human-signals": "^8.0.1", "is-plain-obj": "^4.1.0", "is-stream": "^4.0.1", "npm-run-path": "^6.0.0", "pretty-ms": "^9.2.0", "signal-exit": "^4.1.0", "strip-final-newline": "^4.0.0", "yoctocolors": "^2.1.1" } }, "sha512-9Be3ZoN4LmYR90tUoVu2te2BsbzHfhJyfEiAVfz7N5/zv+jduIfLrV2xdQXOHbaD6KgpGdO9PRPM1Y4Q9QkPkA=="], + + "exsolve": ["exsolve@1.1.3", "", {}, "sha512-kuzL9zherLQoqDeQaS55AiiIg1kb4KYXaSusTtgZTPlvKP2gGCI82LNmBNh5RjDVUXIcmgx+/Mx7vPwRzBbhJA=="], + + "extend": ["extend@3.0.2", "", {}, "sha512-fjquC59cD7CyW6urNXK0FBufkZcoiGG80wTuPujX590cB5Ttln20E2UB4S/WARVqhXffZl2LNgS+gQdPIIim/g=="], + + "extend-shallow": ["extend-shallow@2.0.1", "", { "dependencies": { "is-extendable": "^0.1.0" } }, "sha512-zCnTtlxNoAiDc3gqY2aYAWFx7XWWiasuF2K8Me5WbN8otHKTUKBwjPtNpRs/rbUZm7KxWAaNj7P1a/p52GbVug=="], + + "fast-copy": ["fast-copy@4.1.2", "", {}, "sha512-DUHggaYcouhy5I1LacDJ+JDSqGlumVJP2EAi5Nwt1pWPeLpSvIjkrY+x4fsoI1/+GlTyq+DM9zdgWCFSfqNODA=="], + + "fast-fifo": ["fast-fifo@1.3.2", "", {}, "sha512-/d9sfos4yxzpwkDkuN7k2SqFKtYNmCTzgfEpz82x34IM9/zc8KGxQoXg1liNC/izpRM/MBdt44Nmx41ZWqk+FQ=="], + + "fast-glob": ["fast-glob@3.3.3", "", { "dependencies": { "@nodelib/fs.stat": "^2.0.2", "@nodelib/fs.walk": "^1.2.3", "glob-parent": "^5.1.2", "merge2": "^1.3.0", "micromatch": "^4.0.8" } }, "sha512-7MptL8U0cqcFdzIzwOTHoilX9x5BrNqye7Z/LuC7kCMRio1EMSyqRK3BEAUD7sXRq4iT4AzTVuZdhgQ2TCvYLg=="], + + "fast-safe-stringify": ["fast-safe-stringify@2.1.1", "", {}, "sha512-W+KJc2dmILlPplD/H4K9l9LcAHAfPtP6BY84uVLXQ6Evcz9Lcg33Y2z1IVblT6xdY54PXYVHEv+0Wpq8Io6zkA=="], + + "fast-string-truncated-width": ["fast-string-truncated-width@3.0.3", "", {}, "sha512-0jjjIEL6+0jag3l2XWWizO64/aZVtpiGE3t0Zgqxv0DPuxiMjvB3M24fCyhZUO4KomJQPj3LTSUnDP3GpdwC0g=="], + + "fast-string-width": ["fast-string-width@3.0.2", "", { "dependencies": { "fast-string-truncated-width": "^3.0.2" } }, "sha512-gX8LrtNEI5hq8DVUfRQMbr5lpaS4nMIWV+7XEbXk2b8kiQIizgnlr12B4dA3ZEx3308ze0O4Q1R+cHts8kyUJg=="], + + "fast-wrap-ansi": ["fast-wrap-ansi@0.2.2", "", { "dependencies": { "fast-string-width": "^3.0.2" } }, "sha512-7F2Fl+TjRSenLqlU3UjSH0iyqopqoZIu7eZVpEirP2g1GtWa2G/ecEmBdgz31+Mxr+ELclgg6sokpSFIQiZ02Q=="], + + "fastq": ["fastq@1.20.3", "", { "dependencies": { "reusify": "^1.0.4" } }, "sha512-XKv5nnLs6nLF71NgiKJLIZFLkPyIEuOselLG7ujZnGrRfQK8HpvY+WqKhAJUAdLomwVHErVS4LfxFlPq0/FTAw=="], + + "fdir": ["fdir@6.5.0", "", { "peerDependencies": { "picomatch": "^3 || ^4" }, "optionalPeers": ["picomatch"] }, "sha512-tIbYtZbucOs0BRGqPJkshJUYdL+SDH7dVM8gjy+ERp3WAUjLEFJE+02kanyHtwjWOnwrKYBiwAmM0p4kLJAnXg=="], + + "figures": ["figures@6.1.0", "", { "dependencies": { "is-unicode-supported": "^2.0.0" } }, "sha512-d+l3qxjSesT4V7v2fh+QnmFnUWv9lSpjarhShNTgBOfA0ttejbQUAlHLitbjkoRiDulW0OPoQPYIGhIC8ohejg=="], + + "fill-range": ["fill-range@7.1.1", "", { "dependencies": { "to-regex-range": "^5.0.1" } }, "sha512-YsGpe3WHLK8ZYi4tWDg2Jy3ebRz2rXowDxnld4bkQB00cc/1Zw9AWnC0i9ztDJitivtQvaI9KaLyKrc+hBW0yg=="], + + "find-up-simple": ["find-up-simple@1.0.1", "", {}, "sha512-afd4O7zpqHeRyg4PfDQsXmlDe2PfdHtJt6Akt8jOWaApLOZk5JXs6VMR29lz03pRe9mpykrRCYIYxaJYcfpncQ=="], + + "find-workspaces": ["find-workspaces@0.3.1", "", { "dependencies": { "fast-glob": "^3.3.2", "pkg-types": "^1.0.3", "yaml": "^2.3.4" } }, "sha512-UDkGILGJSA1LN5Aa7McxCid4sqW3/e+UYsVwyxki3dDT0F8+ym0rAfnCkEfkL0rO7M+8/mvkim4t/s3IPHmg+w=="], + + "flru": ["flru@1.0.2", "", {}, "sha512-kWyh8ADvHBFz6ua5xYOPnUroZTT/bwWfrCeL0Wj1dzG4/YOmOcfJ99W8dOVyyynJN35rZ9aCOtHChqQovV7yog=="], + + "fs-extra": ["fs-extra@11.4.1", "", { "dependencies": { "graceful-fs": "^4.2.0", "jsonfile": "^6.0.1", "universalify": "^2.0.0" } }, "sha512-KYAb4c9BJQI6QqGKthV68OHe0badztdXJWKo0WtBA9IuCFPTKvE5ZdUBglP833aMjhaSPNO4A5j/EkzZtGlKjA=="], + + "fsevents": ["fsevents@2.3.3", "", { "os": "darwin" }, "sha512-5xoDfX+fL7faATnagmWPpbFtwh/R77WmMMqqHGS65C3vvB0YHrgF+B1YmZ3441tMj5n63k0212XNoJwzlhffQw=="], + + "function-bind": ["function-bind@1.1.2", "", {}, "sha512-7XHNxH7qX9xG5mIwxkhumTox/MIRNcOgDrxWsMt2pAr23WHp6MrRlN7FBSFpCpr+oVO0F744iUgR82nJMfG2SA=="], + + "gensync": ["gensync@1.0.0-beta.2", "", {}, "sha512-3hN7NaskYvMDLQY55gnW3NQ+mesEAepTqlg+VEbj7zzqEMBVNhzcGYYeqFo/TlYz6eQiFcp1HcsCZO+nGgS8zg=="], + + "get-port": ["get-port@7.2.0", "", {}, "sha512-afP4W205ONCuMoPBqcR6PSXnzX35KTcJygfJfcp+QY+uwm3p20p1YczWXhlICIzGMCxYBQcySEcOgsJcrkyobg=="], + + "get-stream": ["get-stream@9.0.1", "", { "dependencies": { "@sec-ant/readable-stream": "^0.4.1", "is-stream": "^4.0.1" } }, "sha512-kVCxPF3vQM/N0B1PmoqVUqgHP+EeVjmZSQn+1oCRPxd2P21P2F19lIgbR3HBosbB1PUhOAoctJnfEn2GbN2eZA=="], + + "get-tsconfig": ["get-tsconfig@4.14.3", "", { "dependencies": { "resolve-pkg-maps": "^1.0.0" } }, "sha512-++QEw4DIY7WGoukz+/+A/8dGYPT9l9yIadnmSgZ8Rjr3YVSVDipQSO9CdnJo9ePqFqUUqh+wk9uIaoiAwsiPkA=="], + + "glob-parent": ["glob-parent@5.1.2", "", { "dependencies": { "is-glob": "^4.0.1" } }, "sha512-AOIgSQCepiJYwP3ARnGx+5VnTu2HBYdzbGP45eLw1vr3zB3vZLeyed1sC9hnbcOc9/SrMyM5RPQrkGz4aS9Zow=="], + + "graceful-fs": ["graceful-fs@4.2.11", "", {}, "sha512-RbJ5/jmFcNNCcDV5o9eTnBLJ/HszWV0P73bc+Ff4nS/rJj+YaS6IGyiOL0VoBYX+l1Wrl3k63h/KrH+nhJ0XvQ=="], + + "gray-matter": ["gray-matter@4.0.3", "", { "dependencies": { "js-yaml": "^3.13.1", "kind-of": "^6.0.2", "section-matter": "^1.0.0", "strip-bom-string": "^1.0.0" } }, "sha512-5v6yZd4JK3eMI3FqqCouswVqwugaA9r4dNZB1wwcmrD02QkV5H0y7XBQW8QwQqEaZY1pM9aqORSORhJRdNK44Q=="], + + "hasown": ["hasown@2.0.4", "", { "dependencies": { "function-bind": "^1.1.2" } }, "sha512-T2UbfbBEF32wiepXIsMlTW9+dDYC6wMh/t/vYA4tuOMKqWz/n3vr1NFSxQiyP+zk2mXsoMA/i/7qV6LKut1t1A=="], + + "help-me": ["help-me@5.0.0", "", {}, "sha512-7xgomUX6ADmcYzFik0HzAxh/73YlKR9bmFzf51CZwR+b6YtzU2m0u49hQCqV6SvlqIqsaxovfwdvbnsw3b/zpg=="], + + "hono": ["hono@4.13.13", "", {}, "sha512-CQ46U0ZkAGmbT/4UxdzzGJpacP2IeKgY4a5/tOI9AABbpOMfK739wfDXmv1usCk+3RkKj1hQy4/fjhiwa2xlrA=="], + + "hono-openapi": ["hono-openapi@1.3.5", "", { "dependencies": { "@hono/standard-validator": "^0.4.0", "@standard-community/standard-json": "^0.3.5", "@standard-community/standard-openapi": "^0.2.9", "@standard-schema/spec": "^1.0.0", "@types/json-schema": "^7.0.15", "openapi-types": "^12.1.3" }, "peerDependencies": { "hono": "^4.11.2" } }, "sha512-t1YpXno9oXa6400xi9rX6i1jKB0496VvikcVKpN/UY3s7yDDQqeCgnKlDr3rfkqxGvykq3+bgX/64eCm7UnUMA=="], + + "human-signals": ["human-signals@8.0.1", "", {}, "sha512-eKCa6bwnJhvxj14kZk5NCPc6Hb6BdsU9DZcOnmQKSnO1VKrfV0zCvtttPZUsBvjmNDn8rpcJfpwSYnHBjc95MQ=="], + + "ieee754": ["ieee754@1.2.1", "", {}, "sha512-dcyqhDvX1C46lXZcVqCpK+FtMRQVdIMN6/Df5js2zouUsqG7I6sFxitIC+7KYK29KdXOLHdu9zL4sFnoVQnqaA=="], + + "ignore": ["ignore@7.0.12", "", {}, "sha512-/8UvqAPU9DGTI9k4mxtf49U37Isfwr8Uts96+SBHIkFxPJnHS0Ew4f00sM4Scd8V8EjM0jUNtVDdv1kPdt35lg=="], + + "import-meta-resolve": ["import-meta-resolve@4.2.0", "", {}, "sha512-Iqv2fzaTQN28s/FwZAoFq0ZSs/7hMAHJVX+w8PZl3cY19Pxk6jFFalxQoIfW2826i/fDLXv8IiEZRIT0lDuWcg=="], + + "inherits": ["inherits@2.0.4", "", {}, "sha512-k/vGaX4/Yla3WzyMCvTQOXYeIHvqOKtnqBduzTHpzpQZzAskKMhZ2K+EnBiSM9zGSoIFeMpXKxa4dYeZIQqewQ=="], + + "is-core-module": ["is-core-module@2.17.0", "", { "dependencies": { "hasown": "^2.0.4" } }, "sha512-J/vG0zBCbIKOQFfufSwyXdMrsohyJIUNkrnmo6WZGzoM7tr/lsbfW5b2BvisL6zsyMzK9UxV9L6c7AoFbyXHOA=="], + + "is-extendable": ["is-extendable@0.1.1", "", {}, "sha512-5BMULNob1vgFX6EjQw5izWDxrecWK9AM72rugNr0TFldMOi0fj6Jk+zeKIt0xGj4cEfQIJth4w3OKWOJ4f+AFw=="], + + "is-extglob": ["is-extglob@2.1.1", "", {}, "sha512-SbKbANkN603Vi4jEZv49LeVJMn4yGwsbzZworEoyEiutsN3nJYdbO36zfhGJ6QEDpOZIFkDtnq5JRxmvl3jsoQ=="], + + "is-glob": ["is-glob@4.0.3", "", { "dependencies": { "is-extglob": "^2.1.1" } }, "sha512-xelSayHH36ZgE7ZWhli7pW34hNbNl8Ojv5KVmkJD4hBdD3th8Tfk9vYasLM+mXWOZhFkgZfxhLSnrwRr4elSSg=="], + + "is-module": ["is-module@1.0.0", "", {}, "sha512-51ypPSPCoTEIN9dy5Oy+h4pShgJmPCygKfyRCISBI+JoWT/2oJvK8QPxmwv7b/p239jXrm9M1mlQbyKJ5A152g=="], + + "is-network-error": ["is-network-error@1.3.2", "", {}, "sha512-PhBY86zaxNZUuWP6h13Vu5oFe0XY6/UlKzQnYFELzGVHygP3MxmvTfYSG7GN3aIab/iWudSMgjSnG9Dq+nHrgA=="], + + "is-number": ["is-number@7.0.0", "", {}, "sha512-41Cifkg6e8TylSpdtTpeLVMqvSBEVzTttHvERD741+pnZ8ANv0004MRL43QKPDlK9cGvNp6NZWZUBlbGXYxxng=="], + + "is-plain-obj": ["is-plain-obj@4.1.0", "", {}, "sha512-+Pgi+vMuUNkJyExiMBt5IlFoMyKnr5zhJ4Uspz58WOhBF5QoIZkFyNHIbBAtHwzVAgk5RtndVNsDRN61/mmDqg=="], + + "is-reference": ["is-reference@1.2.1", "", { "dependencies": { "@types/estree": "*" } }, "sha512-U82MsXXiFIrjCK4otLT+o2NA2Cd2g5MLoOVXUZjIOhLurrRxpEXzI8O0KZHr3IjLvlAH1kTPYSuqer5T9ZVBKQ=="], + + "is-stream": ["is-stream@4.0.1", "", {}, "sha512-Dnz92NInDqYckGEUJv689RbRiTSEHCQ7wOVeALbkOz999YpqT46yMRIGtSNl2iCL1waAZSx40+h59NV/EwzV/A=="], + + "is-unicode-supported": ["is-unicode-supported@2.1.0", "", {}, "sha512-mE00Gnza5EEB3Ds0HfMyllZzbBrmLOX3vfWoj9A9PEnTfratQ/BcaJOuMhnkhjXvb2+FkY3VuHqtAGpTPmglFQ=="], + + "isarray": ["isarray@1.0.0", "", {}, "sha512-VLghIWNM6ELQzo7zwmcg0NmTVyWKYjvIeM83yjp0wRDTmUnrM678fQbcKBo6n2CJEF0szoG//ytg+TKla89ALQ=="], + + "isexe": ["isexe@2.0.0", "", {}, "sha512-RHxMLp9lnKHGHRng9QFhRCMbYAcVpn69smSGcq3f36xjgVVWThj4qqLbTLlq7Ssj8B+fIQ1EuCEGI2lKsyQeIw=="], + + "jose": ["jose@6.2.12", "", {}, "sha512-9NiFmJEex0sy2Dk58j2UGBSHgUs2ypF9eZSu4L6vjOX3Dp96Sw1F3uL+H+D1sx02jZZdzUT0HgvCy59CuvXcWw=="], + + "joycon": ["joycon@3.1.1", "", {}, "sha512-34wB/Y7MW7bzjKRjUKTa46I2Z7eV62Rkhva+KkopW7Qvv/OSWBqvkSY7vusOPrNuZcUG3tApvdVgNB8POj3SPw=="], + + "jpeg-js": ["jpeg-js@0.4.4", "", {}, "sha512-WZzeDOEtTOBK4Mdsar0IqEU5sMr3vSV2RqkAIzUEV2BHnUfKGyswWFPFwK5EeDo93K3FohSHbLAjj0s1Wzd+dg=="], + + "js-tokens": ["js-tokens@10.0.0", "", {}, "sha512-lM/UBzQmfJRo9ABXbPWemivdCW8V2G8FHaHdypQaIy523snUjog0W71ayWXTjiR+ixeMyVHN2XcpnTd/liPg/Q=="], + + "js-yaml": ["js-yaml@3.15.2", "", { "dependencies": { "argparse": "^1.0.7", "esprima": "^4.0.0" }, "bin": { "js-yaml": "bin/js-yaml.js" } }, "sha512-6EuL879VkRA+1Cz578mKMiKvjPNEuk6+r1JaFzoSWejZmtf7xWbIyw1e3KkxlkzTIt9Taw6JBhEppG7utc1P+w=="], + + "jsesc": ["jsesc@3.1.0", "", { "bin": { "jsesc": "bin/jsesc" } }, "sha512-/sM3dO2FOzXjKQhJuo0Q173wf2KOo8t4I8vHy6lF9poUp7bKT0/NHE8fPX23PwfhnykfqnC2xRxOnVw5XuGIaA=="], + + "json-schema": ["json-schema@0.4.0", "", {}, "sha512-es94M3nTIfsEPisRafak+HDLfHXnKBhV3vU5eqPcS3flIWqcxJWgXHXiey3YrpaNsanY5ei1VoYEbOzijuq9BA=="], + + "json-schema-to-zod": ["json-schema-to-zod@2.8.1", "", { "bin": { "json-schema-to-zod": "dist/cjs/cli.js" } }, "sha512-fRr1mHgZ7hboLKBUdR428gd9dIHUFGivUqOeiDcSmyXkNZCtB1uGaZLvsjZ4GaN5pwBIs+TGIOf6s+Rp5/R/zA=="], + + "json5": ["json5@2.2.3", "", { "bin": { "json5": "lib/cli.js" } }, "sha512-XmOWe7eyHYH14cLdVPoyg+GOH3rYX++KpzrylJwSW98t3Nk+U8XOl8FWKOgwtzdb8lXGf6zYwDUzeHMWfxasyg=="], + + "jsonfile": ["jsonfile@6.2.1", "", { "dependencies": { "universalify": "^2.0.0" }, "optionalDependencies": { "graceful-fs": "^4.1.6" } }, "sha512-zwOTdL3rFQ/lRdBnntKVOX6k5cKJwEc1HdilT71BWEu7J41gXIB2MRp+vxduPSwZJPWBxEzv4yH1wYLJGUHX4Q=="], + + "kind-of": ["kind-of@6.0.3", "", {}, "sha512-dcS1ul+9tmeD95T+x28/ehLgd9mENa3LsvDTtzm3vyBEO7RPptvAD+t44WVXaUjTBRcrpFeFlC8WCruUR456hw=="], + + "lazystream": ["lazystream@1.0.1", "", { "dependencies": { "readable-stream": "^2.0.5" } }, "sha512-b94GiNHQNy6JNTrt5w6zNyffMrNkXZb3KTkCZJb2V1xaEGCk093vkZ2jk3tpaeP33/OiXC+WvK9AxUebnf5nbw=="], + + "local-pkg": ["local-pkg@1.2.1", "", { "dependencies": { "mlly": "^1.7.4", "pkg-types": "^2.3.0", "quansync": "^0.2.11" } }, "sha512-++gUqRDEvcnN6Zhqrr+y/CkVEHhlrR96vZn3nZZPYzMcBUyBtTKzB9NadClFIsIVSsu+3i9tfk/erqy9kAmt7Q=="], + + "longest-streak": ["longest-streak@3.1.0", "", {}, "sha512-9Ri+o0JYgehTaVBBDoMqIl8GXtbWg711O3srftcHhZ0dqnETqLaoIK0x17fUw9rFSlK/0NlsKe0Ahhyl5pXE2g=="], + + "lru-cache": ["lru-cache@11.5.3", "", {}, "sha512-U4N8FgzmWxc8k1VH8Kr6lQg18U7Fjvby6wXHVRX/ZZ7IwWbRMgrRbP0Wrb5q5NVinryp4SQampHKdvtecItxUg=="], + + "magic-string": ["magic-string@0.30.21", "", { "dependencies": { "@jridgewell/sourcemap-codec": "^1.5.5" } }, "sha512-vd2F4YUyEXKGcLHoq+TEyCjxueSeHnFxyyjNp80yg0XV4vUhnDer/lvvlqM/arB5bXQN5K2/3oinyCRyx8T2CQ=="], + + "markdown-table": ["markdown-table@3.0.4", "", {}, "sha512-wiYz4+JrLyb/DqW2hkFJxP7Vd7JuTDm77fvbM8VfEQdmSMqcImWeeRbHwZjBjIFki/VaMK2BhFi7oUUZeM5bqw=="], + + "mastra": ["mastra@1.33.0", "", { "dependencies": { "@babel/parser": "^8.0.4", "@babel/types": "^8.0.4", "@clack/prompts": "^1.7.0", "@expo/devcert": "^1.2.1", "@mastra/deployer": "^1.75.0", "@mastra/loggers": "^1.3.5", "archiver": "^8.0.0", "commander": "^14.0.3", "dotenv": "^17.3.1", "execa": "^9.6.1", "fs-extra": "^11.3.5", "get-port": "^7.1.0", "local-pkg": "^1.1.2", "openapi-fetch": "^0.17.0", "picocolors": "^1.1.1", "posthog-node": "^5.46.1", "semver": "^7.7.4", "serve-handler": "^6.1.7", "strip-json-comments": "^5.0.3", "tinyglobby": "^0.2.17", "yocto-spinner": "^1.1.0" }, "peerDependencies": { "@mastra/core": ">=1.58.0-0 <2.0.0-0" }, "bin": { "mastra": "./dist/index.js" } }, "sha512-m1R3Y8vOfVLclqMCM0VzPsgG7EvYWpLNr9TmL6ZEN4eIKXvHX2tyvQUzKzalgaLD2MffhIl7NYtitT2AGDMIww=="], + + "mdast-util-find-and-replace": ["mdast-util-find-and-replace@3.0.3", "", { "dependencies": { "@types/mdast": "^4.0.0", "escape-string-regexp": "^5.0.0", "unist-util-is": "^6.0.0", "unist-util-visit-parents": "^6.0.0" } }, "sha512-xPgpDNl0/OXHsI7TlaIs22lWnH3KlpvZdXG1ET/m/YT2Hhdkx8lJV4kLphE6l9simyM4KPDFBwas08BgEob6Jw=="], + + "mdast-util-from-markdown": ["mdast-util-from-markdown@2.1.0", "", { "dependencies": { "@types/mdast": "^4.0.0", "@types/unist": "^3.0.0", "decode-named-character-reference": "^1.0.0", "devlop": "^1.0.0", "mdast-util-to-string": "^4.0.0", "micromark": "^4.0.0", "micromark-util-decode-numeric-character-reference": "^2.0.0", "micromark-util-decode-string": "^2.0.0", "micromark-util-normalize-identifier": "^2.0.0", "micromark-util-symbol": "^2.0.0", "micromark-util-types": "^2.0.0", "unist-util-stringify-position": "^4.0.0" } }, "sha512-KRLgmPaP2H1ul2bpoJkOS+9pAcDAAj9Nu1mqLnh8NLeJG5tlvj42TH80PIGBpROWlRXLk0lDrWNuZCFy/tsB4A=="], + + "mdast-util-gfm": ["mdast-util-gfm@3.1.0", "", { "dependencies": { "mdast-util-from-markdown": "^2.0.0", "mdast-util-gfm-autolink-literal": "^2.0.0", "mdast-util-gfm-footnote": "^2.0.0", "mdast-util-gfm-strikethrough": "^2.0.0", "mdast-util-gfm-table": "^2.0.0", "mdast-util-gfm-task-list-item": "^2.0.0", "mdast-util-to-markdown": "^2.0.0" } }, "sha512-0ulfdQOM3ysHhCJ1p06l0b0VKlhU0wuQs3thxZQagjcjPrlFRqY215uZGHHJan9GEAXd9MbfPjFJz+qMkVR6zQ=="], + + "mdast-util-gfm-autolink-literal": ["mdast-util-gfm-autolink-literal@2.0.1", "", { "dependencies": { "@types/mdast": "^4.0.0", "ccount": "^2.0.0", "devlop": "^1.0.0", "mdast-util-find-and-replace": "^3.0.0", "micromark-util-character": "^2.0.0" } }, "sha512-5HVP2MKaP6L+G6YaxPNjuL0BPrq9orG3TsrZ9YXbA3vDw/ACI4MEsnoDpn6ZNm7GnZgtAcONJyPhOP8tNJQavQ=="], + + "mdast-util-gfm-footnote": ["mdast-util-gfm-footnote@2.1.0", "", { "dependencies": { "@types/mdast": "^4.0.0", "devlop": "^1.1.0", "mdast-util-from-markdown": "^2.0.0", "mdast-util-to-markdown": "^2.0.0", "micromark-util-normalize-identifier": "^2.0.0" } }, "sha512-sqpDWlsHn7Ac9GNZQMeUzPQSMzR6Wv0WKRNvQRg0KqHh02fpTz69Qc1QSseNX29bhz1ROIyNyxExfawVKTm1GQ=="], + + "mdast-util-gfm-strikethrough": ["mdast-util-gfm-strikethrough@2.0.1", "", { "dependencies": { "@types/mdast": "^4.0.0", "mdast-util-from-markdown": "^2.0.0", "mdast-util-to-markdown": "^2.0.0" } }, "sha512-OuJHqvr455pwu2OaOrir7dbzqs4jlWKOtlu9L6GjcIjjQwNyw02VntQsr/Ek6/A13vgnXfUhBekWRUP1OkNivw=="], + + "mdast-util-gfm-table": ["mdast-util-gfm-table@2.0.0", "", { "dependencies": { "@types/mdast": "^4.0.0", "devlop": "^1.0.0", "markdown-table": "^3.0.0", "mdast-util-from-markdown": "^2.0.0", "mdast-util-to-markdown": "^2.0.0" } }, "sha512-78UEvebzz/rJIxLvE7ZtDd/vIQ0RHv+3Mh5DR96p7cS7HsBhYIICDBCu8csTNWNO6tBWfqXPWekRuj2FNOGOZg=="], + + "mdast-util-gfm-task-list-item": ["mdast-util-gfm-task-list-item@2.0.0", "", { "dependencies": { "@types/mdast": "^4.0.0", "devlop": "^1.0.0", "mdast-util-from-markdown": "^2.0.0", "mdast-util-to-markdown": "^2.0.0" } }, "sha512-IrtvNvjxC1o06taBAVJznEnkiHxLFTzgonUdy8hzFVeDun0uTjxxrRGVaNFqkU1wJR3RBPEfsxmU6jDWPofrTQ=="], + + "mdast-util-phrasing": ["mdast-util-phrasing@4.1.0", "", { "dependencies": { "@types/mdast": "^4.0.0", "unist-util-is": "^6.0.0" } }, "sha512-TqICwyvJJpBwvGAMZjj4J2n0X8QWp21b9l0o7eXyVJ25YNWYbJDVIyD1bZXE6WtV6RmKJVYmQAKWa0zWOABz2w=="], + + "mdast-util-to-markdown": ["mdast-util-to-markdown@2.2.0", "", { "dependencies": { "@types/mdast": "^4.0.0", "@types/unist": "^3.0.0", "longest-streak": "^3.0.0", "mdast-util-phrasing": "^4.0.0", "mdast-util-to-string": "^4.0.0", "micromark-util-character": "^2.0.0", "micromark-util-classify-character": "^2.0.0", "micromark-util-decode-string": "^2.0.0", "micromark-util-html-tag-name": "^2.0.0", "unist-util-visit": "^5.0.0", "zwitch": "^2.0.0" } }, "sha512-2Jn/ADrHFFyyniBMi0bncTbJqU78K3/TEYvzvwrWWzD9MYPUa/Gm4r3nOeKFQg/PDM5BsbDYdc8ackW4NTY6NA=="], + + "mdast-util-to-string": ["mdast-util-to-string@4.0.0", "", { "dependencies": { "@types/mdast": "^4.0.0" } }, "sha512-0H44vDimn51F0YwvxSJSm0eCDOJTRlmN0R1yBh4HLj9wiV1Dn0QoXGbvFAWj2hSItVTlCmBF1hqKlIyUBVFLPg=="], + + "merge2": ["merge2@1.4.1", "", {}, "sha512-8q7VEgMJW4J8tcfVPy8g09NcQwZdbwFEqhe/WZkoIzjn/3TGDwtOCYtXGxA3O8tPzpczCCDgv+P2P5y00ZJOOg=="], + + "micromark": ["micromark@4.0.3", "", { "dependencies": { "@types/debug": "^4.0.0", "debug": "^4.0.0", "decode-named-character-reference": "^1.0.0", "devlop": "^1.0.0", "micromark-core-commonmark": "^2.0.0", "micromark-factory-space": "^2.0.0", "micromark-util-character": "^2.0.0", "micromark-util-chunked": "^2.0.0", "micromark-util-combine-extensions": "^2.0.0", "micromark-util-decode-numeric-character-reference": "^2.0.0", "micromark-util-edit-map": "^1.0.0", "micromark-util-encode": "^2.0.0", "micromark-util-normalize-identifier": "^2.0.0", "micromark-util-resolve-all": "^2.0.0", "micromark-util-sanitize-uri": "^2.0.0", "micromark-util-subtokenize": "^2.0.0", "micromark-util-symbol": "^2.0.0", "micromark-util-types": "^2.0.0" } }, "sha512-oGYfQzHSG5dOMovQcJ3fyTmZlWAWpi0XA0sJwJs+i6OT88o1+Jtw/8z0CmdowSLxGhhFK89rQ/oXph/wN02PNw=="], + + "micromark-core-commonmark": ["micromark-core-commonmark@2.0.4", "", { "dependencies": { "decode-named-character-reference": "^1.0.0", "devlop": "^1.0.0", "micromark-factory-destination": "^2.0.0", "micromark-factory-label": "^2.0.0", "micromark-factory-space": "^2.1.0", "micromark-factory-title": "^2.0.0", "micromark-factory-whitespace": "^2.0.0", "micromark-util-character": "^2.0.0", "micromark-util-chunked": "^2.0.0", "micromark-util-classify-character": "^2.0.0", "micromark-util-edit-map": "^1.0.0", "micromark-util-html-tag-name": "^2.0.0", "micromark-util-normalize-identifier": "^2.0.0", "micromark-util-resolve-all": "^2.0.0", "micromark-util-subtokenize": "^2.0.0", "micromark-util-symbol": "^2.0.0", "micromark-util-types": "^2.0.3" } }, "sha512-wxEeE8v8XVvOrxn1TZj74qYhAtTQsSqufHVS3uNVyT1MupXxhyaHk8/9xDNPh9BmL77QNDgWTkZ3RsYHB2ry7w=="], + + "micromark-extension-gfm": ["micromark-extension-gfm@3.0.0", "", { "dependencies": { "micromark-extension-gfm-autolink-literal": "^2.0.0", "micromark-extension-gfm-footnote": "^2.0.0", "micromark-extension-gfm-strikethrough": "^2.0.0", "micromark-extension-gfm-table": "^2.0.0", "micromark-extension-gfm-tagfilter": "^2.0.0", "micromark-extension-gfm-task-list-item": "^2.0.0", "micromark-util-combine-extensions": "^2.0.0", "micromark-util-types": "^2.0.0" } }, "sha512-vsKArQsicm7t0z2GugkCKtZehqUm31oeGBV/KVSorWSy8ZlNAv7ytjFhvaryUiCUJYqs+NoE6AFhpQvBTM6Q4w=="], + + "micromark-extension-gfm-autolink-literal": ["micromark-extension-gfm-autolink-literal@2.1.0", "", { "dependencies": { "micromark-util-character": "^2.0.0", "micromark-util-sanitize-uri": "^2.0.0", "micromark-util-symbol": "^2.0.0", "micromark-util-types": "^2.0.0" } }, "sha512-oOg7knzhicgQ3t4QCjCWgTmfNhvQbDDnJeVu9v81r7NltNCVmhPy1fJRX27pISafdjL+SVc4d3l48Gb6pbRypw=="], + + "micromark-extension-gfm-footnote": ["micromark-extension-gfm-footnote@2.1.0", "", { "dependencies": { "devlop": "^1.0.0", "micromark-core-commonmark": "^2.0.0", "micromark-factory-space": "^2.0.0", "micromark-util-character": "^2.0.0", "micromark-util-normalize-identifier": "^2.0.0", "micromark-util-sanitize-uri": "^2.0.0", "micromark-util-symbol": "^2.0.0", "micromark-util-types": "^2.0.0" } }, "sha512-/yPhxI1ntnDNsiHtzLKYnE3vf9JZ6cAisqVDauhp4CEHxlb4uoOTxOCJ+9s51bIB8U1N1FJ1RXOKTIlD5B/gqw=="], + + "micromark-extension-gfm-strikethrough": ["micromark-extension-gfm-strikethrough@2.1.0", "", { "dependencies": { "devlop": "^1.0.0", "micromark-util-chunked": "^2.0.0", "micromark-util-classify-character": "^2.0.0", "micromark-util-resolve-all": "^2.0.0", "micromark-util-symbol": "^2.0.0", "micromark-util-types": "^2.0.0" } }, "sha512-ADVjpOOkjz1hhkZLlBiYA9cR2Anf8F4HqZUO6e5eDcPQd0Txw5fxLzzxnEkSkfnD0wziSGiv7sYhk/ktvbf1uw=="], + + "micromark-extension-gfm-table": ["micromark-extension-gfm-table@2.1.2", "", { "dependencies": { "devlop": "^1.0.0", "micromark-factory-space": "^2.0.0", "micromark-util-character": "^2.0.0", "micromark-util-symbol": "^2.0.0", "micromark-util-types": "^2.0.0" } }, "sha512-pRzm4kDTu0MjlmBkxmS9yYhw60nncfcEwu9NNdPFSQEFXS95ZKyIIyTSHu/o3ReBUrLKYEq+7YaXCRn/bPB4MA=="], + + "micromark-extension-gfm-tagfilter": ["micromark-extension-gfm-tagfilter@2.0.0", "", { "dependencies": { "micromark-util-types": "^2.0.0" } }, "sha512-xHlTOmuCSotIA8TW1mDIM6X2O1SiX5P9IuDtqGonFhEK0qgRI4yeC6vMxEV2dgyr2TiD+2PQ10o+cOhdVAcwfg=="], + + "micromark-extension-gfm-task-list-item": ["micromark-extension-gfm-task-list-item@2.1.0", "", { "dependencies": { "devlop": "^1.0.0", "micromark-factory-space": "^2.0.0", "micromark-util-character": "^2.0.0", "micromark-util-symbol": "^2.0.0", "micromark-util-types": "^2.0.0" } }, "sha512-qIBZhqxqI6fjLDYFTBIa4eivDMnP+OZqsNwmQ3xNLE4Cxwc+zfQEfbs6tzAo2Hjq+bh6q5F+Z8/cksrLFYWQQw=="], + + "micromark-factory-destination": ["micromark-factory-destination@2.0.1", "", { "dependencies": { "micromark-util-character": "^2.0.0", "micromark-util-symbol": "^2.0.0", "micromark-util-types": "^2.0.0" } }, "sha512-Xe6rDdJlkmbFRExpTOmRj9N3MaWmbAgdpSrBQvCFqhezUn4AHqJHbaEnfbVYYiexVSs//tqOdY/DxhjdCiJnIA=="], + + "micromark-factory-label": ["micromark-factory-label@2.0.1", "", { "dependencies": { "devlop": "^1.0.0", "micromark-util-character": "^2.0.0", "micromark-util-symbol": "^2.0.0", "micromark-util-types": "^2.0.0" } }, "sha512-VFMekyQExqIW7xIChcXn4ok29YE3rnuyveW3wZQWWqF4Nv9Wk5rgJ99KzPvHjkmPXF93FXIbBp6YdW3t71/7Vg=="], + + "micromark-factory-space": ["micromark-factory-space@2.1.0", "", { "dependencies": { "micromark-util-character": "^2.0.0", "micromark-util-types": "^2.0.0" } }, "sha512-fS8hnLIjnjvdQIj39Geug8wWsR0HrYZ43KShKxNfwT7t2LOHo/LbWZEzEaSOjwtjdCsjoE6syHhonEzW0zv0+Q=="], + + "micromark-factory-title": ["micromark-factory-title@2.0.1", "", { "dependencies": { "micromark-factory-space": "^2.0.0", "micromark-util-character": "^2.0.0", "micromark-util-symbol": "^2.0.0", "micromark-util-types": "^2.0.0" } }, "sha512-5bZ+3CjhAd9eChYTHsjy6TGxpOFSKgKKJPJxr293jTbfry2KDoWkhBb6TcPVB4NmzaPhMs1Frm9AZH7OD4Cjzw=="], + + "micromark-factory-whitespace": ["micromark-factory-whitespace@2.0.1", "", { "dependencies": { "micromark-factory-space": "^2.0.0", "micromark-util-character": "^2.0.0", "micromark-util-symbol": "^2.0.0", "micromark-util-types": "^2.0.0" } }, "sha512-Ob0nuZ3PKt/n0hORHyvoD9uZhr+Za8sFoP+OnMcnWK5lngSzALgQYKMr9RJVOWLqQYuyn6ulqGWSXdwf6F80lQ=="], + + "micromark-util-character": ["micromark-util-character@2.1.1", "", { "dependencies": { "micromark-util-symbol": "^2.0.0", "micromark-util-types": "^2.0.0" } }, "sha512-wv8tdUTJ3thSFFFJKtpYKOYiGP2+v96Hvk4Tu8KpCAsTMs6yi+nVmGh1syvSCsaxz45J6Jbw+9DD6g97+NV67Q=="], + + "micromark-util-chunked": ["micromark-util-chunked@2.0.1", "", { "dependencies": { "micromark-util-symbol": "^2.0.0" } }, "sha512-QUNFEOPELfmvv+4xiNg2sRYeS/P84pTW0TCgP5zc9FpXetHY0ab7SxKyAQCNCc1eK0459uoLI1y5oO5Vc1dbhA=="], + + "micromark-util-classify-character": ["micromark-util-classify-character@2.0.1", "", { "dependencies": { "micromark-util-character": "^2.0.0", "micromark-util-symbol": "^2.0.0", "micromark-util-types": "^2.0.0" } }, "sha512-K0kHzM6afW/MbeWYWLjoHQv1sgg2Q9EccHEDzSkxiP/EaagNzCm7T/WMKZ3rjMbvIpvBiZgwR3dKMygtA4mG1Q=="], + + "micromark-util-combine-extensions": ["micromark-util-combine-extensions@2.0.1", "", { "dependencies": { "micromark-util-chunked": "^2.0.0", "micromark-util-types": "^2.0.0" } }, "sha512-OnAnH8Ujmy59JcyZw8JSbK9cGpdVY44NKgSM7E9Eh7DiLS2E9RNQf0dONaGDzEG9yjEl5hcqeIsj4hfRkLH/Bg=="], + + "micromark-util-decode-numeric-character-reference": ["micromark-util-decode-numeric-character-reference@2.0.2", "", { "dependencies": { "micromark-util-symbol": "^2.0.0" } }, "sha512-ccUbYk6CwVdkmCQMyr64dXz42EfHGkPQlBj5p7YVGzq8I7CtjXZJrubAYezf7Rp+bjPseiROqe7G6foFd+lEuw=="], + + "micromark-util-decode-string": ["micromark-util-decode-string@2.0.1", "", { "dependencies": { "decode-named-character-reference": "^1.0.0", "micromark-util-character": "^2.0.0", "micromark-util-decode-numeric-character-reference": "^2.0.0", "micromark-util-symbol": "^2.0.0" } }, "sha512-nDV/77Fj6eH1ynwscYTOsbK7rR//Uj0bZXBwJZRfaLEJ1iGBR6kIfNmlNqaqJf649EP0F3NWNdeJi03elllNUQ=="], + + "micromark-util-edit-map": ["micromark-util-edit-map@1.0.0", "", { "dependencies": { "micromark-util-types": "^2.0.0" } }, "sha512-Pa2ljlsEL6sVwFaYeyrOLSYbQt73JvGbPOYFq+9AElXiSnfI5Q4465RRZ1sHv7lDjDOnGRDDaqPXqClqWK/q1Q=="], + + "micromark-util-encode": ["micromark-util-encode@2.0.1", "", {}, "sha512-c3cVx2y4KqUnwopcO9b/SCdo2O67LwJJ/UyqGfbigahfegL9myoEFoDYZgkT7f36T0bLrM9hZTAaAyH+PCAXjw=="], + + "micromark-util-html-tag-name": ["micromark-util-html-tag-name@2.0.1", "", {}, "sha512-2cNEiYDhCWKI+Gs9T0Tiysk136SnR13hhO8yW6BGNyhOC4qYFnwF1nKfD3HFAIXA5c45RrIG1ub11GiXeYd1xA=="], + + "micromark-util-normalize-identifier": ["micromark-util-normalize-identifier@2.0.1", "", { "dependencies": { "micromark-util-symbol": "^2.0.0" } }, "sha512-sxPqmo70LyARJs0w2UclACPUUEqltCkJ6PhKdMIDuJ3gSf/Q+/GIe3WKl0Ijb/GyH9lOpUkRAO2wp0GVkLvS9Q=="], + + "micromark-util-resolve-all": ["micromark-util-resolve-all@2.0.1", "", { "dependencies": { "micromark-util-types": "^2.0.0" } }, "sha512-VdQyxFWFT2/FGJgwQnJYbe1jjQoNTS4RjglmSjTUlpUMa95Htx9NHeYW4rGDJzbjvCsl9eLjMQwGeElsqmzcHg=="], + + "micromark-util-sanitize-uri": ["micromark-util-sanitize-uri@2.0.1", "", { "dependencies": { "micromark-util-character": "^2.0.0", "micromark-util-encode": "^2.0.0", "micromark-util-symbol": "^2.0.0" } }, "sha512-9N9IomZ/YuGGZZmQec1MbgxtlgougxTodVwDzzEouPKo3qFWvymFHWcnDi2vzV1ff6kas9ucW+o3yzJK9YB1AQ=="], + + "micromark-util-subtokenize": ["micromark-util-subtokenize@2.1.0", "", { "dependencies": { "devlop": "^1.0.0", "micromark-util-chunked": "^2.0.0", "micromark-util-symbol": "^2.0.0", "micromark-util-types": "^2.0.0" } }, "sha512-XQLu552iSctvnEcgXw6+Sx75GflAPNED1qx7eBJ+wydBb2KCbRZe+NwvIEEMM83uml1+2WSXpBAcp9IUCgCYWA=="], + + "micromark-util-symbol": ["micromark-util-symbol@2.0.1", "", {}, "sha512-vs5t8Apaud9N28kgCrRUdEed4UJ+wWNvicHLPxCa9ENlYuAY31M0ETy5y1vA33YoNPDFTghEbnh6efaE8h4x0Q=="], + + "micromark-util-types": ["micromark-util-types@2.0.3", "", {}, "sha512-oxB2Ik03hI0gv+VNn9tnh1t1YEe9MDPptViAEgfdf3YQHsn0pzGTgCdlSCJXcwhqm8phaEuM7zeEu3QQzVBrPg=="], + + "micromatch": ["micromatch@4.0.8", "", { "dependencies": { "braces": "^3.0.3", "picomatch": "^2.3.1" } }, "sha512-PXwfBhYu0hBCPw8Dn0E+WDYb7af3dSLVWKi3HGv84IdF4TyFoC0ysxFd0Goxw7nSv4T/PzEJQxsYsEiFCKo2BA=="], + + "mime-db": ["mime-db@1.33.0", "", {}, "sha512-BHJ/EKruNIqJf/QahvxwQZXKygOQ256myeN/Ew+THcAa5q+PjyTTMMeNQC4DZw5AwfvelsUrA6B67NKMqXDbzQ=="], + + "mime-types": ["mime-types@2.1.18", "", { "dependencies": { "mime-db": "~1.33.0" } }, "sha512-lc/aahn+t4/SWV/qcmumYjymLsWfN3ELhpmVuUFjgsORruuZPVSwAQryq+HHGvO/SI2KVX26bx+En+zhM8g8hQ=="], + + "minimatch": ["minimatch@3.1.5", "", { "dependencies": { "brace-expansion": "^1.1.7" } }, "sha512-VgjWUsnnT6n+NUk6eZq77zeFdpW2LWDzP6zFGrCbHXiYNul5Dzqk2HHQ5uFH2DNW5Xbp8+jVzaeNt94ssEEl4w=="], + + "minimist": ["minimist@1.2.8", "", {}, "sha512-2yyAR8qBkN3YuheJanUpWC5U3bb5osDywNB8RzDVlDwDHbocAJveqqj1u8+SVD7jkWT4yvsHCpWqqWqAxb0zCA=="], + + "mlly": ["mlly@1.8.2", "", { "dependencies": { "acorn": "^8.16.0", "pathe": "^2.0.3", "pkg-types": "^1.3.1", "ufo": "^1.6.3" } }, "sha512-d+ObxMQFmbt10sretNDytwt85VrbkhhUA/JBGm1MPaWJ65Cl4wOgLaB1NYvJSZ0Ef03MMEU/0xpPMXUIQ29UfA=="], + + "ms": ["ms@2.1.3", "", {}, "sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA=="], + + "node-releases": ["node-releases@2.0.57", "", {}, "sha512-kQK9LGGFiHtrWiNhZtA7Qbw17AQz+dmsEKODRIVTXA9+e5MS/2gZEBhYJt13GrAz5/IOZKddH/0Z3TP/Zgo+yw=="], + + "normalize-path": ["normalize-path@3.0.0", "", {}, "sha512-6eZs5Ls3WtCisHWp9S2GUy8dqkpGi4BVSz3GaqiE6ezub0512ESztXUwUB6C6IKbQkY2Pnb/mD4WYojCRwcwLA=="], + + "npm-run-path": ["npm-run-path@6.0.0", "", { "dependencies": { "path-key": "^4.0.0", "unicorn-magic": "^0.3.0" } }, "sha512-9qny7Z9DsQU8Ou39ERsPU4OZQlSTP47ShQzuKZ6PRXpYLtIFgl/DEBYEXKlvcEa+9tHVcK8CF81Y2V72qaZhWA=="], + + "obug": ["obug@3.0.0", "", {}, "sha512-5vvB5+W7ePv+p3uqxi+RcW1XAzLW0/hxt3/4X4Lc4qHudzOhmBiBwOY6DRob4WnanAEGvNcLjF+KNOufrUoEQw=="], + + "on-exit-leak-free": ["on-exit-leak-free@2.1.2", "", {}, "sha512-0eJJY6hXLGf1udHwfNftBqH+g73EU4B504nZeKpz1sYRKafAghwxEJunB2O7rDZkL4PGfsMVnTXZ2EjibbqcsA=="], + + "once": ["once@1.4.0", "", { "dependencies": { "wrappy": "1" } }, "sha512-lNaJgI+2Q5URQBkccEKHTQOPaXdUxnZZElQTZY0MFUAuaEqe1E+Nyvgdz/aIyNi6Z9MzO5dv1H8n58/GELp3+w=="], + + "openapi-fetch": ["openapi-fetch@0.17.0", "", { "dependencies": { "openapi-typescript-helpers": "^0.1.0" } }, "sha512-PsbZR1wAPcG91eEthKhN+Zn92FMHxv+/faECIwjXdxfTODGSGegYv0sc1Olz+HYPvKOuoXfp+0pA2XVt2cI0Ig=="], + + "openapi-types": ["openapi-types@12.1.3", "", {}, "sha512-N4YtSYJqghVu4iek2ZUvcN/0aqH1kRDuNqzcycDxhOUpg7GdvLa2F3DgS6yBNhInhv2r/6I0Flkn7CqL8+nIcw=="], + + "openapi-typescript-helpers": ["openapi-typescript-helpers@0.1.0", "", {}, "sha512-OKTGPthhivLw/fHz6c3OPtg72vi86qaMlqbJuVJ23qOvQ+53uw1n7HdmkJFibloF7QEjDrDkzJiOJuockM/ljw=="], + + "p-map": ["p-map@7.0.8", "", {}, "sha512-MitaVsCuCFIvOLLPIU7NnfrZvS9H9h7kwMUkDo+T2pEISaJD48IV9S8iIdXB7PsvvdxyYcsSTTrr90XKsbulNw=="], + + "p-retry": ["p-retry@7.1.1", "", { "dependencies": { "is-network-error": "^1.1.0" } }, "sha512-J5ApzjyRkkf601HpEeykoiCvzHQjWxPAHhyjFcEUP2SWq0+35NKh8TLhpLw+Dkq5TZBFvUM6UigdE9hIVYTl5w=="], + + "parse-ms": ["parse-ms@4.0.0", "", {}, "sha512-TXfryirbmq34y8QBwgqCVLi+8oA3oWx2eAnSn62ITyEhEYaWRlVZ2DvMM9eZbMs/RfxPu/PK/aBLyGj4IrqMHw=="], + + "path-is-inside": ["path-is-inside@1.0.2", "", {}, "sha512-DUWJr3+ULp4zXmol/SZkFf3JGsS9/SIv+Y3Rt93/UjPpDpklB5f1er4O3POIbUuUJ3FXgqte2Q7SrU6zAqwk8w=="], + + "path-key": ["path-key@3.1.1", "", {}, "sha512-ojmeN0qd+y0jszEtoY48r0Peq5dwMEkIlCOu6Q5f41lfkswXuKtYrhgoTpLnyIcHm24Uhqx+5Tqm2InSwLhE6Q=="], + + "path-parse": ["path-parse@1.0.7", "", {}, "sha512-LDJzPVEEEPR+y48z93A0Ed0yXb8pAByGWo/k5YYdYgpY2/2EsOsksJrq7lOHxryrVOn1ejG6oAp8ahvOIQD8sw=="], + + "path-to-regexp": ["path-to-regexp@3.3.0", "", {}, "sha512-qyCH421YQPS2WFDxDjftfc1ZR5WKQzVzqsp4n9M2kQhVOo/ByahFoUNJfl58kOcEGfQ//7weFTDhm+ss8Ecxgw=="], + + "pathe": ["pathe@2.0.3", "", {}, "sha512-WUjGcAqP1gQacoQe+OBJsFA7Ld4DyXuUIjZ5cc75cLHvJ7dtNsTugphxIADwspS+AraAUePCKrSVtPLFj/F88w=="], + + "picocolors": ["picocolors@1.1.1", "", {}, "sha512-xceH2snhtb5M9liqDsmEw56le376mTZkEX/jEb/RxNFyegNul7eNslCXP9FDj/Lcu0X8KEyMceP2ntpaHrDEVA=="], + + "picomatch": ["picomatch@4.0.7", "", {}, "sha512-qcJu88Q2IWqJsDD529JKMdwGm/dvInW4HvQnRwiH9JtihJvzGOscDtHE3x1pBKeUOTysQ8kVmLnJ2kJu7yhcGA=="], + + "pino": ["pino@10.4.0", "", { "dependencies": { "@pinojs/redact": "^0.4.0", "atomic-sleep": "^1.0.0", "on-exit-leak-free": "^2.1.0", "pino-abstract-transport": "^3.0.0", "pino-std-serializers": "^7.0.0", "process-warning": "^5.0.0", "quick-format-unescaped": "^4.0.3", "real-require": "^1.0.0", "safe-stable-stringify": "^2.3.1", "sonic-boom": "^4.0.1", "thread-stream": "^4.0.0" }, "bin": { "pino": "bin.js" } }, "sha512-bk1ZMTwG/Vymx+zPoa28MhNzucFvXJWp3csrSuxuHPSMeUettaCoQ5Jvg07mtC4JGNpcfTwz41oVCnNgBK9+vA=="], + + "pino-abstract-transport": ["pino-abstract-transport@3.0.0", "", { "dependencies": { "split2": "^4.0.0" } }, "sha512-wlfUczU+n7Hy/Ha5j9a/gZNy7We5+cXp8YL+X+PG8S0KXxw7n/JXA3c46Y0zQznIJ83URJiwy7Lh56WLokNuxg=="], + + "pino-pretty": ["pino-pretty@13.2.0", "", { "dependencies": { "colorette": "^2.0.7", "dateformat": "^4.6.3", "fast-copy": "^4.0.0", "fast-safe-stringify": "^2.1.1", "help-me": "^5.0.0", "joycon": "^3.1.1", "minimist": "^1.2.6", "on-exit-leak-free": "^2.1.2", "pino-abstract-transport": "^3.0.0", "pump": "^3.0.3", "secure-json-parse": "^4.1.0", "sonic-boom": "^5.0.0", "strip-json-comments": "^5.0.3" }, "bin": { "pino-pretty": "bin.js" } }, "sha512-jjghD1ML+Di/WxjJDz6j6Y4FT7hIXOlb8h27AyJ+ohtAXJXH4PS/xkv7si+RCCIW59HMgZsMKTDgzdr0RhuRrg=="], + + "pino-std-serializers": ["pino-std-serializers@7.1.0", "", {}, "sha512-BndPH67/JxGExRgiX1dX0w1FvZck5Wa4aal9198SrRhZjH3GxKQUKIBnYJTdj2HDN3UQAS06HlfcSbQj2OHmaw=="], + + "pkg-types": ["pkg-types@2.3.3", "", { "dependencies": { "confbox": "^0.3.1", "exsolve": "^1.1.1", "pathe": "^2.0.3" } }, "sha512-j/lCFdcppV0JxWpCEITdbDltBxPP6cHT+yNJ6Go2OgoSA9518X847X9z0p6LtA4Nc16+eQzCZjRrWanTGvHJ5w=="], + + "posthog-node": ["posthog-node@5.55.0", "", { "dependencies": { "@posthog/core": "^1.55.2" }, "peerDependencies": { "rxjs": "^7.0.0" }, "optionalPeers": ["rxjs"] }, "sha512-8dFtlDTqs0CKGZ8t4mUnk4NdShAgzru3B9D0MfM/NTBzlRyAjctivzWINLtMLRQxYjvgBohxy7RTwiQf4mPycQ=="], + + "pretty-ms": ["pretty-ms@9.3.1", "", { "dependencies": { "parse-ms": "^4.0.0" } }, "sha512-HzMy3Geq23nVALD/M2LliU+F+M+gVNsvkQWWqeBZ8HDiCgzo6YPJ/Omrmtq24EFrIsk0a3EkQGEd7bDOo+IhGA=="], + + "process": ["process@0.11.10", "", {}, "sha512-cdGef/drWFoydD1JsMzuFf8100nZl+GT+yacc2bEced5f9Rjk4z+WtFUTBu9PhOi9j/jfmBPu0mMEY4wIdAF8A=="], + + "process-nextick-args": ["process-nextick-args@2.0.1", "", {}, "sha512-3ouUOpQhtgrbOa17J7+uxOTpITYWaGP7/AhoR3+A+/1e9skrzelGi/dXzEYyvbxubEF6Wn2ypscTKiKJFFn1ag=="], + + "process-warning": ["process-warning@5.1.0", "", {}, "sha512-jQSaVHsPgtyw60e1rQ/A+/ArPEj/S8pS/vFnyGa/gYFXrKk/6RuDkoqVDQ5NI5MmS01698ltlAk0NoDBNLujRw=="], + + "pump": ["pump@3.0.4", "", { "dependencies": { "end-of-stream": "^1.1.0", "once": "^1.3.1" } }, "sha512-VS7sjc6KR7e1ukRFhQSY5LM2uBWAUPiOPa/A3mkKmiMwSmRFUITt0xuj+/lesgnCv+dPIEYlkzrcyXgquIHMcA=="], + + "quansync": ["quansync@0.2.11", "", {}, "sha512-AifT7QEbW9Nri4tAwR5M/uzpBuqfZf+zwaEM/QkzEjj7NBuFD2rBuy0K3dE+8wltbezDV7JMA0WfnCPYRSYbXA=="], + + "queue-microtask": ["queue-microtask@1.2.3", "", {}, "sha512-NuaNSa6flKT5JaSYQzJok04JzTL1CA6aGhv5rfLW3PgqA+M2ChpZQnAC8h8i4ZFkBS8X5RqkDBHA7r4hej3K9A=="], + + "quick-format-unescaped": ["quick-format-unescaped@4.0.4", "", {}, "sha512-tYC1Q1hgyRuHgloV/YXs2w15unPVh8qfu/qCTfhTYamaw7fyhumKa2yGpdSo87vY32rIclj+4fWYQXUMs9EHvg=="], + + "range-parser": ["range-parser@1.2.0", "", {}, "sha512-kA5WQoNVo4t9lNx2kQNFCxKeBl5IbbSNBl1M/tLkw9WCn+hxNBAW5Qh8gdhs63CJnhjJ2zQWFoqPJP2sK1AV5A=="], + + "re2js": ["re2js@2.8.6", "", {}, "sha512-xLgQil4kIUCrAzVk9fRSkxkFNwmygLFjVxXrLc65aE1F0+Zsb8rxumFBy4XKyvgMCTL6kilDq3EZ0piE2dP/Dg=="], + + "readable-stream": ["readable-stream@4.7.0", "", { "dependencies": { "abort-controller": "^3.0.0", "buffer": "^6.0.3", "events": "^3.3.0", "process": "^0.11.10", "string_decoder": "^1.3.0" } }, "sha512-oIGGmcpTLwPga8Bn6/Z75SVaH1z5dUut2ibSyAMVhmUggWpmDn2dapB0n7f8nwaSiRtepAsfJyfXIO5DCVAODg=="], + + "readdir-glob": ["readdir-glob@3.0.0", "", { "dependencies": { "minimatch": "^10.2.2" } }, "sha512-AhNB2KgKeVJr16nK9LLZbJNWnYoT23ZrumNKFDebHBdkC8KHSqWo871JAUhoWC/RtjEVdqNMFpM6qrwRbaUqpw=="], + + "real-require": ["real-require@1.0.0", "", {}, "sha512-P4nbQYQfePJxRSmY+v/KINxVucm4NF3p3s7pJveMTtom52FR4YGltUQLB8idDXwDDWW+eYrWDFbuzUnjoWHF7g=="], + + "remark-gfm": ["remark-gfm@4.0.1", "", { "dependencies": { "@types/mdast": "^4.0.0", "mdast-util-gfm": "^3.0.0", "micromark-extension-gfm": "^3.0.0", "remark-parse": "^11.0.0", "remark-stringify": "^11.0.0", "unified": "^11.0.0" } }, "sha512-1quofZ2RQ9EWdeN34S79+KExV1764+wCUGop5CPL1WGdD0ocPpu91lzPGbwWMECpEpd42kJGQwzRfyov9j4yNg=="], + + "remark-parse": ["remark-parse@11.0.0", "", { "dependencies": { "@types/mdast": "^4.0.0", "mdast-util-from-markdown": "^2.0.0", "micromark-util-types": "^2.0.0", "unified": "^11.0.0" } }, "sha512-FCxlKLNGknS5ba/1lmpYijMUzX2esxW5xQqjWxw2eHFfS2MSdaHVINFmhjo+qN1WhZhNimq0dZATN9pH0IDrpA=="], + + "remark-stringify": ["remark-stringify@11.0.0", "", { "dependencies": { "@types/mdast": "^4.0.0", "mdast-util-to-markdown": "^2.0.0", "unified": "^11.0.0" } }, "sha512-1OSmLd3awB/t8qdoEOMazZkNsfVTeY4fTsgzcQFdXNq8ToTN4ZGwrMnlda4K6smTFKD+GRV6O48i6Z4iKgPPpw=="], + + "remend": ["remend@1.4.0", "", {}, "sha512-mHiYhhwphs1IgIZmkToKLwJn0U99IjPXuutkA2acrNcG0vlEq2G4TGnd2eT0saIHwh2KjaCpvleHcsd5SAz96A=="], + + "resolve": ["resolve@1.22.13", "", { "dependencies": { "es-errors": "^1.3.0", "is-core-module": "^2.17.0", "path-parse": "^1.0.7", "supports-preserve-symlinks-flag": "^1.0.0" }, "bin": { "resolve": "bin/resolve" } }, "sha512-Dj/cW9zBV2aRj6XzCxuGIs3ESZKv02jixne3q6jFZYZ3/Tg09gHHviSMDL4kObh9pqSahdRHEnDoaP2gn8YLhA=="], + + "resolve-pkg-maps": ["resolve-pkg-maps@1.0.0", "", {}, "sha512-seS2Tj26TBVOC2NIc2rOe2y2ZO7efxITtLZcGSOnHHNOQ7CkiUBfw0Iw2ck6xkIhPwLhKNLS8BO+hEpngQlqzw=="], + + "resolve.exports": ["resolve.exports@2.0.3", "", {}, "sha512-OcXjMsGdhL4XnbShKpAcSqPMzQoYkYyhbEaeSko47MjRP9NfEQMhZkXL1DoFlt9LWQn4YttrdnV6X2OiyzBi+A=="], + + "reusify": ["reusify@1.1.0", "", {}, "sha512-g6QUff04oZpHs0eG5p83rFLhHeV00ug/Yf9nZM6fLeUrPguBTkTQOdpAWWspMh55TZfVQDPaN3NQJfbVRAxdIw=="], + + "rollup": ["rollup@4.64.2", "", { "dependencies": { "@types/estree": "1.0.9" }, "optionalDependencies": { "@napi-rs/lzma-linux-x64-gnu": "1.5.1", "@rollup/rollup-android-arm-eabi": "4.64.2", "@rollup/rollup-android-arm64": "4.64.2", "@rollup/rollup-darwin-arm64": "4.64.2", "@rollup/rollup-darwin-x64": "4.64.2", "@rollup/rollup-freebsd-arm64": "4.64.2", "@rollup/rollup-freebsd-x64": "4.64.2", "@rollup/rollup-linux-arm-gnueabihf": "4.64.2", "@rollup/rollup-linux-arm-musleabihf": "4.64.2", "@rollup/rollup-linux-arm64-gnu": "4.64.2", "@rollup/rollup-linux-arm64-musl": "4.64.2", "@rollup/rollup-linux-loong64-gnu": "4.64.2", "@rollup/rollup-linux-loong64-musl": "4.64.2", "@rollup/rollup-linux-ppc64-gnu": "4.64.2", "@rollup/rollup-linux-ppc64-musl": "4.64.2", "@rollup/rollup-linux-riscv64-gnu": "4.64.2", "@rollup/rollup-linux-riscv64-musl": "4.64.2", "@rollup/rollup-linux-s390x-gnu": "4.64.2", "@rollup/rollup-linux-x64-gnu": "4.64.2", "@rollup/rollup-linux-x64-musl": "4.64.2", "@rollup/rollup-openbsd-x64": "4.64.2", "@rollup/rollup-openharmony-arm64": "4.64.2", "@rollup/rollup-win32-arm64-msvc": "4.64.2", "@rollup/rollup-win32-ia32-msvc": "4.64.2", "@rollup/rollup-win32-x64-gnu": "4.64.2", "@rollup/rollup-win32-x64-msvc": "4.64.2", "fsevents": "~2.3.2" }, "bin": { "rollup": "dist/bin/rollup" } }, "sha512-RxXm0XVVV1hFI3dYe12ruaOgsYQ725lUcUWeMSQqkF9tTxVErY+fy2Ets6vWhItL9MZMSNZGbvZFc7rH/VHp2Q=="], + + "rollup-plugin-esbuild": ["rollup-plugin-esbuild@6.2.1", "", { "dependencies": { "debug": "^4.4.0", "es-module-lexer": "^1.6.0", "get-tsconfig": "^4.10.0", "unplugin-utils": "^0.2.4" }, "peerDependencies": { "esbuild": ">=0.18.0", "rollup": "^1.20.0 || ^2.0.0 || ^3.0.0 || ^4.0.0" } }, "sha512-jTNOMGoMRhs0JuueJrJqbW8tOwxumaWYq+V5i+PD+8ecSCVkuX27tGW7BXqDgoULQ55rO7IdNxPcnsWtshz3AA=="], + + "run-parallel": ["run-parallel@1.2.0", "", { "dependencies": { "queue-microtask": "^1.2.2" } }, "sha512-5l4VyZR86LZ/lDxZTR6jqL8AFE2S0IFLMP26AbjsLVADxHdhB/c0GUsH+y39UfCi3dzz8OlQuPmnaJOMoDHQBA=="], + + "safe-buffer": ["safe-buffer@5.1.2", "", {}, "sha512-Gd2UZBJDkXlY7GbJxfsE8/nvKkUEU1G38c1siN6QP6a9PT9MmHB8GnpscSmMJSoF8LOIrt8ud/wPtojys4G6+g=="], + + "safe-stable-stringify": ["safe-stable-stringify@2.5.0", "", {}, "sha512-b3rppTKm9T+PsVCBEOUR46GWI7fdOs00VKZ1+9c1EWDaDMvjQc6tUwuFyIprgGgTcWoVHSKrU8H31ZHA2e0RHA=="], + + "section-matter": ["section-matter@1.0.0", "", { "dependencies": { "extend-shallow": "^2.0.1", "kind-of": "^6.0.0" } }, "sha512-vfD3pmTzGpufjScBh50YHKzEu2lxBWhVEHsNGoEXmCmn2hKGfeNLYMzCJpe8cD7gqX7TJluOVpBkAequ6dgMmA=="], + + "secure-json-parse": ["secure-json-parse@4.1.0", "", {}, "sha512-l4KnYfEyqYJxDwlNVyRfO2E4NTHfMKAWdUuA8J0yve2Dz/E/PdBepY03RvyJpssIpRFwJoCD55wA+mEDs6ByWA=="], + + "semver": ["semver@7.8.5", "", { "bin": { "semver": "bin/semver.js" } }, "sha512-Y7/KDsb8LjooZpwaqGyulO6DQlksgCncchHGk+sZIY4SBvUocMBEFH5Ur1fI4dV+Jvl0w6cjvucaIi40puRioA=="], + + "serve-handler": ["serve-handler@6.1.7", "", { "dependencies": { "bytes": "3.0.0", "content-disposition": "0.5.2", "mime-types": "2.1.18", "minimatch": "3.1.5", "path-is-inside": "1.0.2", "path-to-regexp": "3.3.0", "range-parser": "1.2.0" } }, "sha512-CinAq1xWb0vR3twAv9evEU8cNWkXCb9kd5ePAHUKJBkOsUpR1wt/CvGdeca7vqumL1U5cSaeVQ6zZMxiJ3yWsg=="], + + "shebang-command": ["shebang-command@2.0.0", "", { "dependencies": { "shebang-regex": "^3.0.0" } }, "sha512-kHxr2zZpYtdmrN1qDjrrX/Z1rR1kG8Dx+gkpK1G4eXmvXswmcE1hTWBWYUzlraYw1/yZp6YuDY77YtvbN0dmDA=="], + + "shebang-regex": ["shebang-regex@3.0.0", "", {}, "sha512-7++dFhtcx3353uBaq8DDR4NuxBetBzC7ZQOhmTQInHEd6bSrXdiEyzCvG07Z44UYdLShWUyXt5M/yhz8ekcb1A=="], + + "signal-exit": ["signal-exit@4.1.0", "", {}, "sha512-bzyZ1e88w9O1iNJbKnOlvYTrWPDl46O1bG0D3XInv+9tkPrxrN8jUUTiFlDkkmKWgn1M6CfIA13SuGqOa9Korw=="], + + "sisteransi": ["sisteransi@1.0.5", "", {}, "sha512-bLGGlR1QxBcynn2d5YmDX4MGjlZvy2MRBDRNHLJ8VI6l6+9FUiyTFNJ0IveOSP0bcXgVDPRcfGqA0pjaqUpfVg=="], + + "sonic-boom": ["sonic-boom@4.2.1", "", { "dependencies": { "atomic-sleep": "^1.0.0" } }, "sha512-w6AxtubXa2wTXAUsZMMWERrsIRAdrK0Sc+FUytWvYAhBJLyuI4llrMIC1DtlNSdI99EI86KZum2MMq3EAZlF9Q=="], + + "split2": ["split2@4.2.0", "", {}, "sha512-UcjcJOWknrNkF6PLX83qcHM6KHgVKNkV62Y8a5uYDVv9ydGQVwAHMKqHdJje1VTWpljG0WYpCDhrCdAOYH4TWg=="], + + "sprintf-js": ["sprintf-js@1.0.3", "", {}, "sha512-D9cPgkvLlV3t3IzL0D0YLvGA9Ahk4PcvVwUbN0dSGr1aP0Nrt4AEnTUbuGvquEC0mA64Gqt1fzirlRs5ibXx8g=="], + + "streamx": ["streamx@2.28.1", "", { "dependencies": { "events-universal": "^1.0.0", "fast-fifo": "^1.3.2", "text-decoder": "^1.1.0" } }, "sha512-zEzXb0s5Cds7tqMH6rhZ05lcJydCWiQPEwiNngVqzsxCc962vLY4Uw+mW7od8kDH258k2Uz/JrOkdIAAhSh9VA=="], + + "string_decoder": ["string_decoder@1.3.0", "", { "dependencies": { "safe-buffer": "~5.2.0" } }, "sha512-hkRX8U1WjJFd8LsDJ2yQ/wWWxaopEsABU1XfkM8A+j0+85JAGppt16cr1Whg6KIbb4okU6Mql6BOj+uup/wKeA=="], + + "strip-bom-string": ["strip-bom-string@1.0.0", "", {}, "sha512-uCC2VHvQRYu+lMh4My/sFNmF2klFymLX1wHJeXnbEJERpV/ZsVuonzerjfrGpIGF7LBVa1O7i9kjiWvJiFck8g=="], + + "strip-final-newline": ["strip-final-newline@4.0.0", "", {}, "sha512-aulFJcD6YK8V1G7iRB5tigAP4TsHBZZrOV8pjV++zdUwmeV8uzbY7yn6h9MswN62adStNZFuCIx4haBnRuMDaw=="], + + "strip-json-comments": ["strip-json-comments@5.0.3", "", {}, "sha512-1tB5mhVo7U+ETBKNf92xT4hrQa3pm0MZ0PQvuDnWgAAGHDsfp4lPSpiS6psrSiet87wyGPh9ft6wmhOMQ0hDiw=="], + + "supports-preserve-symlinks-flag": ["supports-preserve-symlinks-flag@1.0.0", "", {}, "sha512-ot0WnXS9fgdkgIcePe6RHNk1WA8+muPa6cSjeR3V8K27q9BB1rTE3R1p7Hv0z1ZyAc8s6Vvv8DIyWf681MAt0w=="], + + "tar-stream": ["tar-stream@3.2.2", "", { "dependencies": { "b4a": "^1.9.0", "bare-fs": "^4.8.2", "fast-fifo": "^1.3.2", "streamx": "^2.28.1" } }, "sha512-+8NeqHRjQWH9nYlwo2gamAMImZCVzI4UoEgDpWorBt9OEfppiZn+uSkskzQKPWIZyji/C8fpWO7u69G0DX0tbg=="], + + "teex": ["teex@1.0.1", "", { "dependencies": { "streamx": "^2.12.5" } }, "sha512-eYE6iEI62Ni1H8oIa7KlDU6uQBtqr4Eajni3wX7rpfXD8ysFx8z0+dri+KWEPWpBsxXfxu58x/0jvTVT1ekOSg=="], + + "text-decoder": ["text-decoder@1.2.7", "", { "dependencies": { "b4a": "^1.6.4" } }, "sha512-vlLytXkeP4xvEq2otHeJfSQIRyWxo/oZGEbXrtEEF9Hnmrdly59sUbzZ/QgyWuLYHctCHxFF4tRQZNQ9k60ExQ=="], + + "thread-stream": ["thread-stream@4.2.0", "", { "dependencies": { "real-require": "^1.0.0" } }, "sha512-e2zZ96wSChazBsbENf/Pcm/4swHt2cEKQ92rhUjkL9GCKiTDJIaTBenjE/m9DXi0QBmTMDkFDdOomUy20A1tDQ=="], + + "tinyglobby": ["tinyglobby@0.2.17", "", { "dependencies": { "fdir": "^6.5.0", "picomatch": "^4.0.4" } }, "sha512-wXR/dYpcqKmfWpEdZjiKJOwCNFndD0DMnrW/cYjVGttEkBfVgcLFHoNrlj47mjOVic9yyNu65alsgF4NQyTa2g=="], + + "to-regex-range": ["to-regex-range@5.0.1", "", { "dependencies": { "is-number": "^7.0.0" } }, "sha512-65P7iz6X5yEr1cwcgvQxbbIw7Uk3gOy5dIdtZ4rDveLqhrdJP+Li/Hx6tyK0NEb+2GCyneCMJiGqrADCSNk8sQ=="], + + "trough": ["trough@2.2.0", "", {}, "sha512-tmMpK00BjZiUyVyvrBK7knerNgmgvcV/KLVyuma/SC+TQN167GrMRciANTz09+k3zW8L8t60jWO1GpfkZdjTaw=="], + + "typescript": ["typescript@6.0.3", "", { "bin": { "tsc": "bin/tsc", "tsserver": "bin/tsserver" } }, "sha512-y2TvuxSZPDyQakkFRPZHKFm+KKVqIisdg9/CZwm9ftvKXLP8NRWj38/ODjNbr43SsoXqNuAisEf1GdCxqWcdBw=="], + + "typescript-paths": ["typescript-paths@1.5.2", "", { "peerDependencies": { "typescript": "^4.7.2 || ^5 || ^6" } }, "sha512-s5iiRIWOSw80dBgPACm0asPQZHHQcbPz69f26eRq01dStusuD11idZ0NDcAbkj6WuUGcRwJediPOsrArIS92eg=="], + + "ufo": ["ufo@1.6.4", "", {}, "sha512-JFNbkD1Svwe0KvGi8GOeLcP4kAWQ609twvCdcHxq1oSL8svv39ZuSvajcD8B+5D0eL4+s1Is2D/O6KN3qcTeRA=="], + + "undici": ["undici@7.30.0", "", {}, "sha512-dkrQXeHSaoamnItlYbmzG0wFYrM0ZwDxCIg0A7aKjTyyhh9svRzCNFEzV+Vm05/yehjCzjDZ31KXfGEjYSztDQ=="], + + "unicorn-magic": ["unicorn-magic@0.3.0", "", {}, "sha512-+QBBXBCvifc56fsbuxZQ6Sic3wqqc3WWaqxs58gvJrcOuN83HGTCwz3oS5phzU9LthRNE9VrJCFCLUgHeeFnfA=="], + + "unified": ["unified@11.0.5", "", { "dependencies": { "@types/unist": "^3.0.0", "bail": "^2.0.0", "devlop": "^1.0.0", "extend": "^3.0.0", "is-plain-obj": "^4.0.0", "trough": "^2.0.0", "vfile": "^6.0.0" } }, "sha512-xKvGhPWw3k84Qjh8bI3ZeJjqnyadK+GEFtazSfZv/rKeTkTjOJho6mFqh2SM96iIcZokxiOpg78GazTSg8+KHA=="], + + "unist-util-is": ["unist-util-is@6.0.1", "", { "dependencies": { "@types/unist": "^3.0.0" } }, "sha512-LsiILbtBETkDz8I9p1dQ0uyRUWuaQzd/cuEeS1hoRSyW5E5XGmTzlwY1OrNzzakGowI9Dr/I8HVaw4hTtnxy8g=="], + + "unist-util-stringify-position": ["unist-util-stringify-position@4.0.0", "", { "dependencies": { "@types/unist": "^3.0.0" } }, "sha512-0ASV06AAoKCDkS2+xw5RXJywruurpbC4JZSm7nr7MOt1ojAzvyyaO+UxZf18j8FCF6kmzCZKcAgN/yu2gm2XgQ=="], + + "unist-util-visit": ["unist-util-visit@5.1.0", "", { "dependencies": { "@types/unist": "^3.0.0", "unist-util-is": "^6.0.0", "unist-util-visit-parents": "^6.0.0" } }, "sha512-m+vIdyeCOpdr/QeQCu2EzxX/ohgS8KbnPDgFni4dQsfSCtpz8UqDyY5GjRru8PDKuYn7Fq19j1CQ+nJSsGKOzg=="], + + "unist-util-visit-parents": ["unist-util-visit-parents@6.0.2", "", { "dependencies": { "@types/unist": "^3.0.0", "unist-util-is": "^6.0.0" } }, "sha512-goh1s1TBrqSqukSc8wrjwWhL0hiJxgA8m4kFxGlQ+8FYQ3C/m11FcTs4YYem7V664AhHVvgoQLk890Ssdsr2IQ=="], + + "universalify": ["universalify@2.0.1", "", {}, "sha512-gptHNQghINnc/vTGIk0SOFGFNXw7JVrlRUtConJRlvaw6DuX0wO5Jeko9sWrMBhh+PsYAZ7oXAiOnf/UKogyiw=="], + + "unplugin-utils": ["unplugin-utils@0.2.5", "", { "dependencies": { "pathe": "^2.0.3", "picomatch": "^4.0.3" } }, "sha512-gwXJnPRewT4rT7sBi/IvxKTjsms7jX7QIDLOClApuZwR49SXbrB1z2NLUZ+vDHyqCj/n58OzRRqaW+B8OZi8vg=="], + + "update-browserslist-db": ["update-browserslist-db@1.3.4", "", { "dependencies": { "escalade": "^3.2.0", "picocolors": "^1.1.1" }, "peerDependencies": { "browserslist": ">= 4.21.0" }, "bin": { "update-browserslist-db": "cli.js" } }, "sha512-t8wonIOdQyOjtPd2VktlBu6QjTVTks6v8bSi7kd0r2Vll8TK1JYDZtRRdbmCHOAMphkZgrzK+L+vXK4pyZ8t4A=="], + + "util-deprecate": ["util-deprecate@1.0.2", "", {}, "sha512-EPD5q1uXyFxJpCrLnCc1nHnq3gOa6DZBocAIiI2TaSCA7VCJ1UJDMagCzIkXNsUYfD1daK//LTEQ8xiIbrHtcw=="], + + "uuid": ["uuid@11.1.1", "", { "bin": { "uuid": "dist/esm/bin/uuid" } }, "sha512-vIYxrBCC/N/K+Js3qSN88go7kIfNPssr/hHCesKCQNAjmgvYS2oqr69kIufEG+O4+PfezOH4EbIeHCfFov8ZgQ=="], + + "verkit": ["verkit@0.5.0", "", {}, "sha512-u4J1hr6Y+C/hit34GwL3eIcUf3wngT8TlYUjK7tk0jxydKLAq3sYvifjdTDA6U3KCKRcQCQDGf/srjxfZF3l7g=="], + + "vfile": ["vfile@6.0.3", "", { "dependencies": { "@types/unist": "^3.0.0", "vfile-message": "^4.0.0" } }, "sha512-KzIbH/9tXat2u30jf+smMwFCsno4wHVdNmzFyL+T/L3UGqqk6JKfVqOFOZEpZSHADH1k40ab6NUIXZq422ov3Q=="], + + "vfile-message": ["vfile-message@4.0.3", "", { "dependencies": { "@types/unist": "^3.0.0", "unist-util-stringify-position": "^4.0.0" } }, "sha512-QTHzsGd1EhbZs4AsQ20JX1rC3cOlt/IWJruk893DfLRr57lcnOeMaWG4K0JrRta4mIJZKth2Au3mM3u03/JWKw=="], + + "which": ["which@2.0.2", "", { "dependencies": { "isexe": "^2.0.0" }, "bin": { "node-which": "./bin/node-which" } }, "sha512-BLI3Tl1TW3Pvl70l3yq3Y64i+awpwXqsGBYWkkqMtnbXgrMD+yj7rhW0kuEDxzJaYXGjEW5ogapKNMEKNMjibA=="], + + "wrappy": ["wrappy@1.0.2", "", {}, "sha512-l4Sp/DRseor9wL6EvV2+TuQn63dMkPjZ/sp9XkghTEbV9KlPS1xUsZ3u7/IQO4wxtcFB4bgpQPRcR3QCvezPcQ=="], + + "ws": ["ws@8.22.0", "", { "peerDependencies": { "bufferutil": "^4.0.1", "utf-8-validate": ">=5.0.2" }, "optionalPeers": ["bufferutil", "utf-8-validate"] }, "sha512-Ydggc987+RO0AnWtZ/7Wq9FtNvcrL1b/RO0ud9mWjUPgDrsAAwQSF51sm2hm1XofbU/4jkpGEsLFsZZxU+1DOg=="], + + "xxhash-wasm": ["xxhash-wasm@1.1.0", "", {}, "sha512-147y/6YNh+tlp6nd/2pWq38i9h6mz/EuQ6njIrmW8D1BS5nCqs0P6DG+m6zTGnNz5I+uhZ0SHxBs9BsPrwcKDA=="], + + "yaml": ["yaml@2.9.1", "", { "bin": { "yaml": "bin.mjs" } }, "sha512-3NxN8+78OdzbT7C/WjGsyfPAtJaN3FNDsWxv7Y7mcDsT/oOmgW8BpyQQFFBnvZE3j9Y2Sdz1ULFLezL7Eb2yFw=="], + + "yocto-spinner": ["yocto-spinner@1.2.2", "", { "dependencies": { "yoctocolors": "^2.1.1" } }, "sha512-DODGl1wJjA/s5pnJFKau9lIYHT81lnhob1i3e1TjxZRxEhWRKl74nTbWE6H5KlkViQQTo/Z29YFdxzTZAMY3ng=="], + + "yoctocolors": ["yoctocolors@2.2.0", "", {}, "sha512-xYqdZFUK/VYazNl/oCDYN+3WloWQwMfZxBoiNt6qNyk+xfOdi598muWE42rNZFp1kNOiqW936q5RhUdnpqElSg=="], + + "zip-stream": ["zip-stream@7.0.5", "", { "dependencies": { "compress-commons": "^7.0.0", "normalize-path": "^3.0.0", "readable-stream": "^4.0.0" } }, "sha512-dSvYKdvLsAHCDqPOhIwk/q5CvuWtTB3Dgpoe0uVEFjTzIOAmsQpprX25InCvrvJsirEbu1OHyy67n/kAj1Sw/w=="], + + "zod": ["zod@4.6.5", "", {}, "sha512-v5l/aFXZQeai4awLbOpSoHecE9UiMrnfx75tEXLjNonXVARxQ5mOeipTjROUchszUNCqnE+hqAMujRsRHsut2Q=="], + + "zod-from-json-schema": ["zod-from-json-schema@0.5.6", "", { "dependencies": { "zod": "^4.0.17" } }, "sha512-U33AJ7ZWS6y9XNSzMWcdy8hRAvZmWhTtpYJu0SXPT5AArbc9nq2ur7Magzmn5RF9KBV4b3FP0nCpmqqlfXlR9w=="], + + "zwitch": ["zwitch@2.0.4", "", {}, "sha512-bXE4cR/kVZhKZX/RjPEflHaKVhUVl85noU3v6b8apfQEc1x4A+zBxjZ4lN8LqGd6WZ3dl98pY4o717VFmoPp+A=="], + + "@ai-sdk/provider-utils-v6/@ai-sdk/provider": ["@ai-sdk/provider@3.0.14", "", { "dependencies": { "json-schema": "^0.4.0" } }, "sha512-5X1k57JBJ4H7H1QjX7CnJYAB1I19r/trVZTMcSms7/kLNZ8RaU4Nt2agcwZzv82Hfx6Q7/TOLU7agAKeFfc8cA=="], + + "@ai-sdk/provider-utils-v7/@ai-sdk/provider": ["@ai-sdk/provider@4.0.4", "", { "dependencies": { "json-schema": "^0.4.0" } }, "sha512-tbHKNLirllUNF3ZlkCsXnwab2ZV1Sl4b1H/Cp9ruCce15IBmskE8Gwkk0yo9xDWY+jho2of7lVXtwSsyrq7cwQ=="], + + "chat/@workflow/serde": ["@workflow/serde@4.1.0-beta.2", "", {}, "sha512-8kkeoQKLDaKXefjV5dbhBj2aErfKp1Mc4pb6tj8144cF+Em5SPbyMbyLCHp+BVrFfFVCBluCtMx+jjvaFVZGww=="], + + "find-workspaces/pkg-types": ["pkg-types@1.3.1", "", { "dependencies": { "confbox": "^0.1.8", "mlly": "^1.7.4", "pathe": "^2.0.1" } }, "sha512-/Jm5M4RvtBFVkKWRu2BLUTNP8/M2a+UwuAX+ae4770q1qVGtfjG+WTCupoZixokjmHiry8uI+dlY8KXYV5HVVQ=="], + + "lazystream/readable-stream": ["readable-stream@2.3.8", "", { "dependencies": { "core-util-is": "~1.0.0", "inherits": "~2.0.3", "isarray": "~1.0.0", "process-nextick-args": "~2.0.0", "safe-buffer": "~5.1.1", "string_decoder": "~1.1.1", "util-deprecate": "~1.0.1" } }, "sha512-8p0AUk4XODgIewSi0l8Epjs+EVnWiK7NoDIEGU0HhE7+ZyY8D1IMY7odu5lRrFXGg71L15KG8QrPmum45RTtdA=="], + + "micromark/debug": ["debug@4.4.3", "", { "dependencies": { "ms": "^2.1.3" }, "peerDependencies": { "supports-color": "*" }, "optionalPeers": ["supports-color"] }, "sha512-RGwwWnwQvkVfavKVt22FGLw+xYSdzARwm0ru6DhTVA3umU5hZc28V3kO4stgYryrTlLpuvgI9GiijltAjNbcqA=="], + + "micromatch/picomatch": ["picomatch@2.3.2", "", {}, "sha512-V7+vQEJ06Z+c5tSye8S+nHUfI51xoXIXjHQ99cQtKUkQqqO1kO/KCJUfZXuB47h/YBlDhah2H3hdUGXn8ie0oA=="], + + "mlly/pkg-types": ["pkg-types@1.3.1", "", { "dependencies": { "confbox": "^0.1.8", "mlly": "^1.7.4", "pathe": "^2.0.1" } }, "sha512-/Jm5M4RvtBFVkKWRu2BLUTNP8/M2a+UwuAX+ae4770q1qVGtfjG+WTCupoZixokjmHiry8uI+dlY8KXYV5HVVQ=="], + + "npm-run-path/path-key": ["path-key@4.0.0", "", {}, "sha512-haREypq7xkM7ErfgIyA0z+Bj4AGKlMSdlQE2jvJo6huWD1EdkKYV+G/T4nq0YEF2vgTT8kqMFKo1uHn950r4SQ=="], + + "pino-pretty/sonic-boom": ["sonic-boom@5.0.2", "", { "dependencies": { "atomic-sleep": "^1.0.0" } }, "sha512-/JEruzo6yhNVhsLblTRchgTQHIt7SsdJP0YyrfWaNKjIOQDfrdZv9gwYraYCAsmKV39/LAdV31FLL5NCDpoL/A=="], + + "readdir-glob/minimatch": ["minimatch@10.2.6", "", { "dependencies": { "brace-expansion": "^5.0.8" } }, "sha512-vpLQEs+VLCr1nU0BXS07maYoFwlDAH0gngQuuttxIwutDFEMHq2blX+8vpgxDdK3J1PwjCJiep77OitTZ4Ll1A=="], + + "rollup-plugin-esbuild/debug": ["debug@4.4.3", "", { "dependencies": { "ms": "^2.1.3" }, "peerDependencies": { "supports-color": "*" }, "optionalPeers": ["supports-color"] }, "sha512-RGwwWnwQvkVfavKVt22FGLw+xYSdzARwm0ru6DhTVA3umU5hZc28V3kO4stgYryrTlLpuvgI9GiijltAjNbcqA=="], + + "string_decoder/safe-buffer": ["safe-buffer@5.2.1", "", {}, "sha512-rp3So07KcdmmKbGvgaNxQSJr7bGVSVk5S9Eq1F+ppbRo70+YeaDxkw5Dd8NPN+GD6bjnYm2VuPuCXmpuYvmCXQ=="], + + "find-workspaces/pkg-types/confbox": ["confbox@0.1.8", "", {}, "sha512-RMtmw0iFkeR4YV+fUOSucriAQNb9g8zFR52MWCtl+cCZOFRNL6zeB395vPzFhEjjn4fMxXudmELnl/KF/WrK6w=="], + + "lazystream/readable-stream/string_decoder": ["string_decoder@1.1.1", "", { "dependencies": { "safe-buffer": "~5.1.0" } }, "sha512-n/ShnvDi6FHbbVfviro+WojiFzv+s8MPMHBczVePfUpDJLwoLT0ht1l4YwBCbi8pJAveEEdnkHyPyTP/mzRfwg=="], + + "mlly/pkg-types/confbox": ["confbox@0.1.8", "", {}, "sha512-RMtmw0iFkeR4YV+fUOSucriAQNb9g8zFR52MWCtl+cCZOFRNL6zeB395vPzFhEjjn4fMxXudmELnl/KF/WrK6w=="], + + "readdir-glob/minimatch/brace-expansion": ["brace-expansion@5.0.12", "", { "dependencies": { "balanced-match": "^4.0.2" } }, "sha512-YovQ3rzhaLMIrDjNDMkNS01tea93qhEhG5xy8f6+R0l+dw3Ki+5sCoIoI942iuLZTHWogWktgwVDhU09iNEimQ=="], + + "readdir-glob/minimatch/brace-expansion/balanced-match": ["balanced-match@4.0.4", "", {}, "sha512-BLrgEcRTwX2o6gGxGOCNyMvGSp35YofuYzw9h1IMTRmKqttAZZVU67bdb9Pr2vUHA8+j3i2tJfjO6C6+4myGTA=="], + } +} diff --git a/app/src/components/gallery/activity.tsx b/app/src/components/gallery/activity.tsx index e72d56731..1b10598e7 100644 --- a/app/src/components/gallery/activity.tsx +++ b/app/src/components/gallery/activity.tsx @@ -5,6 +5,7 @@ import { callComponentFunction } from "@/lib/components/queries"; import { useActiveBotId } from "@/lib/copilot/active-bot"; import { useConversation } from "@/lib/copilot/conversation"; import type { GalleryComponent } from "@/lib/copilot/gallery-registry"; +import { keyedLookup } from "@/lib/lookup"; import { GalleryFrame } from "./frame"; import { seriesColour } from "./palette"; @@ -33,11 +34,19 @@ export const ActivityReportProps = z.object({ type ActivityArgs = z.infer; -/** Which server-side function each report reads. Not the model's choice. */ -const FUNCTION_FOR: Record = { - activity: "botActivity", - refusals: "recentRefusals", -}; +/** + * Which server-side function each report reads. Not the model's choice. + * + * A Map, read through `keyedLookup`, because the key is a string somebody else chose: an object + * lookup answers `toString` or `constructor` with a member inherited from `Object.prototype`, + * which is truthy and so walks straight past the `functionName ?` guards below — handing a + * function to the grant check as the data function this component reads, and to + * `callComponentFunction` as a function name. + */ +const FUNCTION_FOR: ReadonlyMap = new Map([ + ["activity", "botActivity"], + ["refusals", "recentRefusals"], +]); type ActivityRow = { bot: string; actions: number }; type RefusalRow = { @@ -61,7 +70,7 @@ export function ActivityReportCard({ const conversation = useConversation(); const [state, setState] = useState({ status: "reading" }); - const functionName = report ? FUNCTION_FOR[report] : undefined; + const functionName = report ? keyedLookup(FUNCTION_FOR, report) : undefined; useEffect(() => { // Nothing to read until the arguments have finished streaming in. @@ -284,7 +293,9 @@ export const GALLERY: GalleryComponent[] = [ "The report is on screen for the person, filled with figures read from this deployment. You were not given the figures.", reads: (args) => { const report = typeof args.report === "string" ? args.report : undefined; - const functionName = report ? FUNCTION_FOR[report] : undefined; + const functionName = report + ? keyedLookup(FUNCTION_FOR, report) + : undefined; return functionName ? [functionName] : []; }, }, diff --git a/app/src/components/plugins/broker-directory.tsx b/app/src/components/plugins/broker-directory.tsx new file mode 100644 index 000000000..b791a5a81 --- /dev/null +++ b/app/src/components/plugins/broker-directory.tsx @@ -0,0 +1,251 @@ +import { IconPlug } from "@tabler/icons-react"; +import { useMutation, useQuery } from "@tanstack/react-query"; +import * as React from "react"; +import { + PageEmpty, + PageRows, + PageSection, + PageShell, +} from "@/components/layout/page-shell"; +import { Button } from "@/components/ui/button"; +import { Input } from "@/components/ui/input"; +import { + Item, + ItemActions, + ItemContent, + ItemDescription, + ItemMedia, + ItemTitle, +} from "@/components/ui/item"; +import { Separator } from "@/components/ui/separator"; +import { + consentBreadth, + coverageWarning, + matchingApps, +} from "@/lib/plugins/enablement-notes"; +import { + enableComposioAppMutationOptions, + invalidatePlugins, +} from "@/lib/plugins/mutations"; +import { + directoryReadFailure, + type PluginsProvider, + providerVocabulary, +} from "@/lib/plugins/provider-vocabulary"; +import { + type ComposioApp, + composioAppsQueryOptions, +} from "@/lib/plugins/queries"; +import { queryClient } from "@/query-client"; + +/** + * The active broker's directory, searched rather than listed. + * + * The catalogue on the previous screen is a reviewed handful, and every entry there is a decision + * somebody made about a vendor. This is a directory nobody here has reviewed, which is why it is a + * search field and not a list: the only sensible entry point into a directory that size is the name + * of the app you already came looking for. + * + * Adding one is account-wide, and it still reads nothing. Every app here is reached as whoever is + * asking, so a person's own connection is what makes their own mail or messages readable — which is + * made on their settings page, not here. + * + * A COMPONENT AND NOT A ROUTE, so both directory routes are the same screen rather than two that + * drift. A route file importing another route file is how that drift starts, so neither does. Every + * vendor word is read from {@link providerVocabulary}; nothing here spells a vendor, and nothing + * here branches on which one it is — a `provider === "composio"` test inside a screen is the same + * mistake wearing a conditional. + */ +export function BrokerDirectory({ provider }: { provider: PluginsProvider }) { + const { name, directoryLabel } = providerVocabulary(provider); + const [search, setSearch] = React.useState(""); + /* + * Debounced, as on People, and for a stronger reason: every distinct term is a cache key of its + * own and a request to the vendor, so typing a name un-debounced is a round trip per keystroke + * against somebody else's rate limit. + */ + const [query, setQuery] = React.useState(""); + React.useEffect(() => { + const timer = setTimeout(() => setQuery(search), 250); + return () => clearTimeout(timer); + }, [search]); + + const apps = useQuery(composioAppsQueryOptions(query, provider)); + /* + * WHAT A FAILED ADD SAID, KEPT WHERE A SECOND ADD CANNOT ERASE IT. + * + * ONE OBSERVER SERVES EVERY BUTTON, which is what `enable.variables` below is already written + * around — and the same fact makes `enable.error` unusable as the place a refusal lives. + * `MutationObserver.mutate` does `this.#currentMutation?.removeObserver(this)` and rebuilds, so + * `error`, `isPending` and `variables` describe ONLY the most recent press. An admin pressing Add + * on Slack and then, a beat later, on Gmail watched Slack's row revert from "Adding…" to "Add" + * with its request still in flight — and when Slack came back 409, or 503, or carrying the + * vendor's own sentence about a bad key, the banner never showed it, because `enable.error` was + * Gmail's and Gmail's was null. What was left was a row saying "Add" and no record of a failure. + * + * THE MUTATION-LEVEL `onError` STILL FIRES AFTER `removeObserver`, which is why this works and + * reading the observer does not. It is the shape the sibling grant screen already uses + * (`$key_.bots.$agentId.tsx`), arriving at the one screen that was reading the observer instead. + */ + const [enableError, setEnableError] = React.useState(null); + /* + * AND WHICH ROWS ARE IN FLIGHT, FOR THE SAME REASON AND OUT OF THE SAME HOOKS. + * + * `enable.isPending && enable.variables?.slug === entry.slug` is the observer again: it names the + * most recent press and no other, so pressing Add on a second app put the FIRST row back to "Add" + * with its request still open — an invitation to press it again, which asks the server to enable + * an app it is already enabling. A set of slugs is what survives the rebuild, added in `onMutate` + * and removed in `onSettled` so it drains on a refusal exactly as it does on a success. + */ + const [adding, setAdding] = React.useState>(new Set()); + const enable = useMutation({ + ...enableComposioAppMutationOptions(queryClient), + onMutate: (input: { slug: string }) => { + setEnableError(null); + setAdding((held) => new Set(held).add(input.slug)); + }, + onError: (thrown: Error) => setEnableError(thrown.message), + /* + * SPELLED OUT RATHER THAN INHERITED, because the spread above carries an `onSettled` of its own + * — `invalidatePlugins` — and a second one here replaces it rather than running beside it. The + * refetch is what turns the added row into "Added", so dropping it would leave the list claiming + * the app is still addable until something else invalidated. + */ + onSettled: (_data, _error, input) => { + setAdding((held) => { + const left = new Set(held); + left.delete(input.slug); + return left; + }); + return invalidatePlugins(queryClient); + }, + }); + const listed = matchingApps(apps.data?.apps ?? []); + + return ( + + + {enableError ? ( +

+ {enableError} +

+ ) : null} + + setSearch(event.target.value)} + placeholder="Search by app name" + value={search} + /> + + {/* Pending, error, empty, rows — pending first, so no sentence asserts anything mid-fetch. */} + {apps.isPending ? null : apps.error ? ( +

+ {/* + * The server's own sentence, as the enable failure above already does. A keyless + * deployment is refused with one naming the key's environment variable, and that name is + * the single thing an operator who reached this URL needs to read; the derived line + * stays as the fallback for a failure that arrived carrying no message of its own. + */} + {apps.error.message || directoryReadFailure(provider)} +

+ ) : listed.length === 0 ? ( + + {query + ? `Nothing in ${name}'s directory matches "${query}".` + : `${name} returned no apps.`} + + ) : ( + + {listed.map((entry, index) => { + // One mutation serves every row, so which rows are mid-request is tracked beside it + // rather than read off it. See `adding` above. + const isAdding = adding.has(entry.slug); + + return ( + + {/* The test id names the screen, not the vendor: this module draws whichever + broker is active, and the id is not user-visible. */} + + {/* The vendor's own mark where the broker supplies one, and a plug where it does + not, so a list of third parties still has a fixed left edge. */} + + {entry.logo ? ( + + ) : ( + + )} + + + {entry.name} + {entry.description} + {entry.enabled ? null : } + {entry.enabled ? null : } + + + {/* The size of the decision, stated before it is made: an app is not one + tool, and "167 actions" is what says so. */} + + {entry.actionCount} actions + + {/* + * An app this deployment already has says so rather than offering Add again. + * A second Add would ask the server to record a connector it already holds, + * and there is nothing on the row to suggest that would be harmless. + */} + {entry.enabled ? ( + + Added + + ) : ( + + )} + + + {index !== listed.length - 1 && } + + ); + })} + + )} + + + ); +} + +/** The warning on a row, shown before Add is pressed. Draws nothing when there is none. */ +export function CoverageNote({ app }: { app: ComposioApp }) { + const warning = coverageWarning(app); + if (!warning) return null; + return ( +

+ {warning} +

+ ); +} + +/** The breadth line on a row, shown before Add is pressed. Draws nothing when there is none. */ +export function BreadthNote({ app }: { app: ComposioApp }) { + const breadth = consentBreadth(app); + if (!breadth) return null; + return ( +

+ {breadth} +

+ ); +} diff --git a/app/src/components/plugins/brokered-account-row.tsx b/app/src/components/plugins/brokered-account-row.tsx index c5b4447db..e1e634743 100644 --- a/app/src/components/plugins/brokered-account-row.tsx +++ b/app/src/components/plugins/brokered-account-row.tsx @@ -17,6 +17,11 @@ import { ItemDescription, ItemTitle, } from "@/components/ui/item"; +import { + type PluginsProvider, + brokeredKeyMissing, + providerVocabulary, +} from "@/lib/plugins/provider-vocabulary"; import { type BrokerField, brokeredConnectionFieldsMutationOptions, @@ -165,6 +170,22 @@ export type BrokeredAccount = { * below can do anything but fail. */ configured: boolean; + /** + * Whether the broker grants ONE ACTION AT A TIME, which is whether a whole-app Connect exists. + * + * READ OFF THE DECLARED CAPABILITY AND NEVER OFF THE VENDOR'S NAME — the same rule, and the same + * server-computed field, the grant list is drawn on. `provider === "arcade"` would key the button + * on a different fact from the route behind it, and the two must not be able to disagree. + * + * THE ROW WITHHOLDS `Connect` WHERE THIS IS TRUE, AND NOTHING ELSE. A per-action broker has no + * whole-app consent to mint — the adapter refuses an authorization with no action on it — so the + * button could only ever reach the vendor's refusal, which is the state this closes: somebody + * pressed it, was told "an authorization needs the action it is for", and had no way to tell from + * the screen that the thing they wanted was the list underneath. `Disconnect` is NOT withheld: + * per-action authorizations still add up to one account at the vendor, and ending it is a real + * act this row is the only offer of. + */ + authorizesPerAction: boolean; /** See {@link BrokeredAccountKind}. Derived here so no branch below re-asks. */ kind: BrokeredAccountKind; /** Leave for the vendor's consent screen. */ @@ -271,6 +292,8 @@ export function useBrokeredAccount(input: { * from and never how an app connects. Null where the app is not brokered at all. */ authScheme: string | null; + /** See {@link BrokeredAccount.authorizesPerAction}. The server's computed capability, passed in. */ + authorizesPerAction: boolean; /** Which screen the vendor's callback puts somebody down on. */ returnTo: "settings" | "admin"; /** @@ -284,6 +307,7 @@ export function useBrokeredAccount(input: { const queryClient = useQueryClient(); const { authScheme, + authorizesPerAction, brokered, checkable, configured, @@ -611,6 +635,9 @@ export function useBrokeredAccount(input: { * offered or withheld for an instant, not a sentence anybody is told. */ checkable, + /* Passed straight through: it is the server's answer about the app, and nothing pressed here + can make a broker start or stop granting per action. */ + authorizesPerAction, recheck: () => { report(null); recheck.mutate(serverId); @@ -685,17 +712,20 @@ function accountSentence(input: { connectedDescription: string; disconnectedDescription: string; disconnectedReassurance: string | undefined; + provider: PluginsProvider; }): string { const { account, connectedDescription, disconnectedDescription, disconnectedReassurance, + provider, title, } = input; + const vendor = providerVocabulary(provider).name; if (!account.configured) { - return "Set COMPOSIO_API_KEY on this deployment. Without it there is no broker to reach, so this account can be neither connected nor ended from here. The app stays enabled and every grant on its tools still stands."; + return brokeredKeyMissing(provider); } if (account.kind === "no-auth") { @@ -735,7 +765,7 @@ function accountSentence(input: { * is worth a second press rather than a second connection. */ if (account.probe && !account.verified) { - return `A check against ${title} was made with your key and did not come back clean — that may be the key, and it may be ${title} itself. The account still stands at Composio, so press Re-check to try again, or disconnect it here and connect again with a fresh key.`; + return `A check against ${title} was made with your key and did not come back clean — that may be the key, and it may be ${title} itself. The account still stands at ${vendor}, so press Re-check to try again, or disconnect it here and connect again with a fresh key.`; } /* * NOTHING WAS SPENT ON IT, WHICH IS A FACT ABOUT THE CHECK AND ABOUT THE APP AT THE TIME. The @@ -775,7 +805,7 @@ function accountSentence(input: { * have live, so the row names the step this deployment cannot take for them. */ if (account.disconnected) { - return `Removed from Composio. Your key still works at ${title} — rotate it there if you meant to end its access.`; + return `Removed from ${vendor}. Your key still works at ${title} — rotate it there if you meant to end its access.`; } /* * NOT THE SCREEN'S OWN SENTENCE, which is written for the kind that leaves: one of the two says @@ -818,6 +848,7 @@ export function BrokeredAccountRow({ disconnectedReassurance, heading, notice, + provider, title, }: { account: BrokeredAccount; @@ -849,6 +880,13 @@ export function BrokeredAccountRow({ * that it is shared, say — which holds regardless of which of those two is showing. */ notice?: string; + /** + * Which broker's name the sentences that name one use. A NAME, never a key or a capability. + * + * Required, never defaulted: a default would say one broker's name on a deployment running the + * other, so every screen passes the provider it was told. + */ + provider: PluginsProvider; /** * The app's own name, for the sentences that name it. * @@ -896,6 +934,7 @@ export function BrokeredAccountRow({ connectedDescription, disconnectedDescription, disconnectedReassurance, + provider, title, })} @@ -981,6 +1020,23 @@ export function BrokeredAccountRow({ Disconnect + ) : account.authorizesPerAction ? ( + /* + * A value and nothing to press, the same layout the missing key draws above and for + * the same reason given there: a button that cannot work is worse than no button. + * + * NOT A DISABLED `Connect`. A greyed button says "not yet", and announces a step + * somebody is missing — but there is no later state in which a per-action broker + * grows a whole-app consent, so the step it names does not exist. What this person + * wants is the action list, and the sentence beside this row sends them to it. + * + * IT SAYS THE MECHANISM AND NOT A STATE. "Approved per action" is true before anybody + * has approved anything and stays true after all of it is approved; the account's own + * state is the branch above, which this one is reached only by failing. + */ + + Approved per action + ) : ( /* The arrow says this leaves OpenBot for the vendor's consent page. It does. */ +

+ + ); + } + + const all = grants.data ?? []; + if (couldNotRead(all, appNames)) { + const [only] = all; + return ( + + {/* Not an action: the entry's label is the toolkit's own name, which a person must not + see in their grant list as if it were one. */} +

+ Could not read what this account holds just now, so nothing is said + about it either way. + {only?.state === "unknown" ? ` ${only.reason}` : null}{" "} + +

+ + ); + } + + const term = search.trim().toLowerCase(); + const unauthorized = all + .filter((grant) => grant.state !== "authorized") + .sort( + (left, right) => + RANK[left.state] - RANK[right.state] || + left.action.localeCompare(right.action), + ); + /* With no search term the first unauthorized actions are drawn as well: an Authorize that only + appears once somebody guesses a substring is an Authorize nobody on a fresh account can reach, + and a fresh account is every first visit. Beyond those, the count below still stands. */ + const shown = + term.length > 0 + ? all.filter((grant) => grant.action.toLowerCase().includes(term)) + : [ + ...all.filter((grant) => grant.state === "authorized"), + ...unauthorized.slice(0, UNAUTHORIZED_SHOWN), + ]; + const hidden = + term.length > 0 ? 0 : Math.max(unauthorized.length - UNAUTHORIZED_SHOWN, 0); + const groups: GrantGroup[] = groupGrants(shown); + const consentActions = consentActionsFrom(all); + + return ( + + {notice ? ( +

+ {notice} +

+ ) : null} + setSearch(event.target.value)} + placeholder="Search actions" + type="search" + value={search} + /> + {groups.map((group) => ( +
+

+ {group.kind === "whole-app" + ? "Everything in this app, approved together" + : group.kind === "none" + ? "Asks for no permission of its own" + : `Needs ${group.scopes.join(", ")}`} +

+ + {group.grants.map((grant) => ( + + + {grant.action} + + {describe(grant, canAuthorize)} + + + + {grant.state === "needs-consent" && canAuthorize ? ( + + ) : null} + {grant.state === "unknown" ? ( + + ) : null} + + + ))} + +
+ ))} + {hidden > 0 ? ( +

+ {hidden} more {hidden === 1 ? "action" : "actions"} not yet + authorized. Search to find {hidden === 1 ? "it" : "one"}. +

+ ) : null} + {term.length > 0 && groups.length === 0 ? ( +

+ No action matches that search. +

+ ) : null} + {choosing !== null ? ( + setChoosing(null)} + onContinue={() => authorize.mutate({ serverId, action: choosing })} + sentence={consentCopy(choosing, consentActions).sentence} + /> + ) : null} + + ); +} + +/** + * What somebody reads immediately before being sent to a consent screen. The sentence is + * `consentCopy`'s and is rendered as it came, never reworded here. + */ +function ConsentNotice({ + action, + busy, + sentence, + onCancel, + onContinue, +}: { + action: string; + busy: boolean; + sentence: string; + onCancel: () => void; + onContinue: () => void; +}) { + return ( +
+

{sentence}

+
+ + +
+
+ ); +} + +function describe(grant: GrantState, canAuthorize: boolean): string { + switch (grant.state) { + case "authorized": + // Nobody authorized an action that needs no authorization, so the row does not say they did. + return grant.authorization === "not-required" + ? "Needs no authorization." + : "Authorized."; + case "needs-consent": + return canAuthorize + ? "Not authorized yet." + : "Not authorized yet. An administrator can authorize it."; + case "needs-operator": + return grant.missing.length > 0 + ? `Missing ${grant.missing.join(", ")}. An administrator sets it on this deployment; authorizing cannot fix it.` + : "A setting on this deployment is missing. An administrator sets it; authorizing cannot fix it."; + case "unknown": + return `Could not read this one just now. ${grant.reason}`; + } +} diff --git a/app/src/lib/auth/client.ts b/app/src/lib/auth/client.ts index ebf986663..6999904eb 100644 --- a/app/src/lib/auth/client.ts +++ b/app/src/lib/auth/client.ts @@ -36,11 +36,12 @@ export async function signInWith( callbackURL: string; }) => Promise = (input) => authClient.signIn.social(input as never) as Promise, + // Where the browser returns to. Defaults to the origin, which is what every caller without + // somewhere particular to resume has always got. Same origin as the app, so Better Auth's + // trusted-origin check treats it as it treated the bare origin. + callbackURL: string = window.location.origin, ) { - const result = await start({ - provider, - callbackURL: window.location.origin, - }); + const result = await start({ provider, callbackURL }); if (result.error) { // Naming the provider matters more with three buttons than it did with one: "Could not start @@ -72,8 +73,9 @@ export async function signInWithEmailDomain( signIn: { sso: (i: unknown) => Promise }; } ).signIn.sso(input), + callbackURL: string = window.location.origin, ) { - const result = await start({ email, callbackURL: window.location.origin }); + const result = await start({ email, callbackURL }); if (result.error) { throw new Error( diff --git a/app/src/lib/auth/resume.ts b/app/src/lib/auth/resume.ts new file mode 100644 index 000000000..47ce4b50b --- /dev/null +++ b/app/src/lib/auth/resume.ts @@ -0,0 +1,50 @@ +/** + * Where somebody goes once they are signed in, when they were sent to sign-in carrying a handle. + * + * This is the return half of the decision `signInUrlFor` makes on the way out (server/src/plugins/ + * routes.ts): the verifier sends a browser with no session here carrying its `flow_id`, and this is + * what lets signing back in as the same person pick that flow up where it was left. + * + * THE HANDLE IS A VALUE, NEVER A DESTINATION. `flow_id` arrives in a URL and is therefore somebody + * else's input. It is encoded into a path this code builds, on an origin this code was given. It is + * never used as a redirect target, never concatenated into one, and there is no `next=`: a return + * address somebody else gets a say in is an open redirect, and a handle that can only ever be a + * query value on this deployment's own verifier cannot be pointed anywhere else. + */ + +/** The route that resumes a flow. This deployment's own, on its own origin. */ +const VERIFIER_PATH = "/api/plugins/arcade/verify"; + +/** + * Longer than any handle the server issues, short enough that a crafted link cannot make the + * callback URL arbitrarily large. Over the cap the value is not truncated: a truncated handle is a + * different handle, so it is treated as no handle at all. + */ +const MAX_FLOW_ID_LENGTH = 256; + +function usable(flowId: string | undefined): flowId is string { + return ( + typeof flowId === "string" && + flowId.length > 0 && + flowId.length <= MAX_FLOW_ID_LENGTH + ); +} + +/** The verifier's path with the handle as a query value, or null when there is no usable handle. */ +export function verifierPathFor(flowId: string | undefined): string | null { + return usable(flowId) + ? `${VERIFIER_PATH}?flow_id=${encodeURIComponent(flowId)}` + : null; +} + +/** + * Where sign-in should send the browser back to: the verifier carrying the handle, or the origin + * itself when there is none. Pure, so the resume is pinned without a DOM, a router or Better Auth. + */ +export function resumeUrlFor( + origin: string, + flowId: string | undefined, +): string { + const path = verifierPathFor(flowId); + return path === null ? origin : `${origin}${path}`; +} diff --git a/app/src/lib/copilot/gallery-registry.ts b/app/src/lib/copilot/gallery-registry.ts index be999ea30..b5b1eefe6 100644 --- a/app/src/lib/copilot/gallery-registry.ts +++ b/app/src/lib/copilot/gallery-registry.ts @@ -1,5 +1,6 @@ import type { useFrontendTool } from "@copilotkit/react-core/v2"; import type { ReactElement } from "react"; +import { keyedLookup } from "@/lib/lookup"; /** * Discover gallery components from files that export `GALLERY`; deployment state owns publication, @@ -118,5 +119,5 @@ const BY_NAME: ReadonlyMap = new Map( * name arriving from the server is not a promise that anything here can draw it. */ export function galleryComponent(name: string): GalleryComponent | undefined { - return BY_NAME.get(name); + return keyedLookup(BY_NAME, name); } diff --git a/app/src/lib/lookup.ts b/app/src/lib/lookup.ts new file mode 100644 index 000000000..a5dfae680 --- /dev/null +++ b/app/src/lib/lookup.ts @@ -0,0 +1,35 @@ +// app/src/lib/lookup.ts +/** + * ONE home for "read a table by a key somebody else chose". + * + * WHY THIS EXISTS. A catalogue slug, a component name, a report id and a verifier's status code all + * arrive from outside this build, and every one of them was at some point used to index a plain + * object literal. An object literal indexed that way answers `toString`, `constructor`, `valueOf` + * and `__proto__` with a member inherited from `Object.prototype` — truthy, so it walks straight + * past the `?? fallback` and the `if (hit)` guard that were supposed to catch "not in the table", + * and hands the caller a Function where it expected a component, a sentence or a row. That crash + * was fixed once, in the connected-accounts page, with a `Map`; the fix was documented there and + * nowhere else, and the next table went back to an object literal. + * + * So the prototype-safe read is a named function rather than a habit: `keyedLookup(TABLE, key)` + * reads the same whichever page writes it, greps as one symbol, and has exactly one definition — + * `server/tests/sole-definition.test.ts` asserts that it does. + * + * A `Map` answers only with what was PUT IN IT. That is the whole mechanism; this function adds + * nothing to it but a name. Taking a `ReadonlyMap` is the point — passing an object literal is a + * type error, which is the only way a rule like this survives the next table. + */ + +/** + * The value stored at `key`, or `undefined` when the table holds no such key. + * + * Behaviourally identical to `map.get(key)`, deliberately: the callers below each keep their own + * `?? fallback`, because what a missing key should draw or say is the page's decision and not this + * function's. + */ +export function keyedLookup( + map: ReadonlyMap, + key: K, +): V | undefined { + return map.get(key); +} diff --git a/app/src/lib/plugins/enablement-notes.ts b/app/src/lib/plugins/enablement-notes.ts new file mode 100644 index 000000000..609f6724b --- /dev/null +++ b/app/src/lib/plugins/enablement-notes.ts @@ -0,0 +1,173 @@ +import type { ComposioApp } from "./queries"; + +/** + * What a directory row says about an app before anybody presses Add. + * + * Pure, and in a `.ts` file rather than beside the screen, so the three decisions a row rests on can + * be asserted without a DOM, a router and a query client — and so the screen that draws them is free + * to be a provider-blind component rather than a route. + */ + +/** + * The D8 coverage warning for an app, or null when there is nothing to say. + * + * Driven by `classifiedCount` against `actionCount` and nothing else. `classifiedCount: 0` is + * MEASURED, nothing classified, so it warns; `null` is NOT MEASURED (a Composio app) so it says + * nothing. Those are opposite sentences, and `?? 0` would collapse one into the other. + * + * The classification is measured server-side from the fetched listing and never re-derived here: + * never inferred from the `Api` suffix (Arcade's naming convention, not a contract — a guess wearing + * a measurement's clothes), and never from `classify()`'s verdict, which is TOTAL: its closed + * destructive-write verdict for absent metadata is byte-identical to its verdict for a genuinely + * destructive action, so counting "did classify return something" counts nothing. + * + * Phrased as what it will feel like, not as a percentage. + */ +export function coverageWarning( + app: Pick, +): string | null { + if (app.classifiedCount === null) return null; + if (app.actionCount > 0 && app.classifiedCount === 0) { + return "This provider has not said which of its actions only read, so every action is treated as a destructive write and every call will ask for approval."; + } + return null; +} + +/** + * The D32 consent-breadth line for an app, or null when there is nothing to say. + * + * Read off the counts the server measured from the same listing, never recomputed here. `null` is + * NOT MEASURED and draws nothing; a measured zero is a different sentence, so no count is ever + * defaulted with `?? 0`. + * + * An action with no scopes is not its own permission: the connection itself is the grant, so any + * approval covers it. That is why a mixed app says how many actions need no permission of their own, + * rather than letting one permission over two actions read as "one permission covering both". + * + * The wholly-unscoped case is SPLIT ON THE SINGULAR, where its siblings already were. One action is + * not "all 1 of them": the fixture's only no-permission toolkit has exactly one action, so the + * grammatical error was the sentence that shipped rather than an edge nobody reaches. The stilted + * "1 separate permission across 1 action" below is left alone — stilted is not wrong, and "all 1 of + * them" is a different thing. + * + * It states breadth and never confinement. Whether one approval stays inside the action that asked + * for it is the provider's property, measured per app, so nothing here promises it. + */ +export function consentBreadth( + app: Pick< + ComposioApp, + "actionCount" | "permissionCount" | "scopedActionCount" + >, +): string | null { + const { actionCount, permissionCount, scopedActionCount } = app; + if (permissionCount === null || scopedActionCount === null) return null; + if (actionCount <= 0) return null; + if (permissionCount === 0) { + return actionCount === 1 + ? "This app has a single action, and approving it approves the app." + : `Approving any action in this app approves all ${actionCount} of them.`; + } + const permissions = `${permissionCount} separate ${permissionCount === 1 ? "permission" : "permissions"}`; + const actions = `${actionCount} ${actionCount === 1 ? "action" : "actions"}`; + const base = `This app uses ${permissions} across ${actions}.`; + const unscoped = actionCount - scopedActionCount; + if (unscoped <= 0) return base; + return unscoped === 1 + ? `${base} A further 1 requests no permission of its own and becomes callable with any approval here.` + : `${base} A further ${unscoped} request no permission of their own and become callable with any approval here.`; +} + +/** + * The apps to draw, in the order to draw them. + * + * A function rather than a `.sort()` inside the map, so the two things a row is decided from — the + * order, and the marker saying an app is already here — can be asserted without a DOM, a router and + * a query client. See `tests/composio-picker.test.tsx`. + * + * A copy, because the array belongs to TanStack Query's cache and is the same object on every + * render; sorting it in place would rewrite what the cache holds. By name rather than by the + * vendor's own order, which is popularity — useful for a landing page, useless for finding the one + * app somebody typed half the name of. + */ +export function matchingApps(apps: ComposioApp[]): ComposioApp[] { + return [...apps].sort((left, right) => left.name.localeCompare(right.name)); +} + +/** + * One action of a provider's app, as far as consent is concerned: its name and the scopes it requests. + * + * A LIST OF THESE IS THE SET AN APPROVAL COVERS AND NOTHING WIDER — `consentActionsFrom` in + * `grants.ts` builds it through `coveredByApproval`, and an action needing no authorization is never + * in it. So the "N" in "approving this approves all N" below is `actions.length` because, and only + * because, every entry is something approving genuinely approves. + */ +export type ConsentAction = { name: string; scopes: readonly string[] }; + +export type ConsentCopy = { + /** The permissions the requested action asks the provider for. Empty when it asks for none. */ + scopes: string[]; + /** The OTHER actions whose scopes overlap those, computed by grouping on `scopes`. */ + alsoEnables: string[]; + /** What to say before redirecting somebody to the consent screen. */ + sentence: string; +}; + +/** + * What to say before sending somebody to a consent screen for `requested`. + * + * THE LIST IS GROUPED ON `scopes` AND NEVER WORDED BY HAND. What a person grants is an OAuth scope; + * the action is only how they chose which scope to be asked for. Two actions that request an + * identical scope set (`Gmail.ListEmails` and `Gmail.ListThreads`) are authorized together, so the + * copy names the permission and lists every other action requiring any of it. + * + * IT NEVER PROMISES THAT ONLY THE NAMED ACTION BECOMES USABLE. Whether a consent isolates is the + * provider's property, measured per app (Google isolated 11 of 30; GitHub 43 of 43), so an app with + * no scopes says it cannot separate permissions at all. Scope answers "may this deployment ever read + * your mail"; the tool grant answers "may this Bot call it", and no consent widens that. The last + * clause keeps the two apart. + */ +export function consentCopy( + requested: string, + actions: readonly ConsentAction[], +): ConsentCopy { + const asked = actions.find((action) => action.name === requested); + const scopes = asked ? [...new Set(asked.scopes)].sort() : []; + const grants = + "Which Bots may call an action is still set separately, and approving does not change it."; + if (!actions.some((action) => action.scopes.length > 0)) { + const all = actions.length; + return { + scopes, + alsoEnables: [], + sentence: + all === 1 + ? `This app cannot separate permissions; approving this approves its single action. ${grants}` + : `This app cannot separate permissions; approving this approves all ${all}. ${grants}`, + }; + } + if (scopes.length === 0) { + return { + scopes, + alsoEnables: [], + sentence: `${requested} requests no permission of its own; approving connects the account. ${grants}`, + }; + } + const alsoEnables = actions + .filter( + (action) => + action.name !== requested && + action.scopes.some((scope) => scopes.includes(scope)), + ) + .map((action) => action.name) + .sort(); + const permission = `${scopes.length === 1 ? "the permission" : "the permissions"} ${scopes.join(", ")}`; + const tail = + alsoEnables.length === 0 + ? "No other action requires it." + : `It also enables ${alsoEnables.length === 1 ? "this other action" : `these ${alsoEnables.length} other actions`} requiring it: ${alsoEnables.join(", ")}.`; + return { + scopes, + alsoEnables, + sentence: `Approving ${requested} asks the provider for ${permission}. ${tail} ${grants}`, + }; +} diff --git a/app/src/lib/plugins/grants.ts b/app/src/lib/plugins/grants.ts new file mode 100644 index 000000000..da331695c --- /dev/null +++ b/app/src/lib/plugins/grants.ts @@ -0,0 +1,213 @@ +import { mutationOptions, queryOptions } from "@tanstack/react-query"; +import { client } from "@/lib/client"; +import type { ConsentAction } from "./enablement-notes"; + +/** + * What one account holds at one app, action by action, as `GET /servers/:id/grants` answers it. + * + * The same four states the server's `GrantState` names. Declared here rather than imported because + * `app/` never imports from `server/`; the route's own docblock is the contract. + */ +export type GrantState = + | { + action: string; + state: "authorized"; + scopes: string[]; + /** + * `held`: this account holds an authorization for it. `not-required`: the provider publishes + * no authorization for it at all, so it is usable and no approval ever touches it. See + * {@link coveredByApproval}, the one place this is turned into what an approval covers. + */ + authorization: "held" | "not-required"; + } + | { action: string; state: "needs-consent"; scopes: string[] } + | { action: string; state: "needs-operator"; missing: string[] } + | { action: string; state: "unknown"; reason: string }; + +export const grantKeys = { + forServer: (serverId: string) => ["plugins", "grants", serverId] as const, +}; + +export function grantsQueryOptions(serverId: string, enabled: boolean) { + return queryOptions({ + queryKey: grantKeys.forServer(serverId), + enabled, + queryFn: async (): Promise => { + const response = await client( + `/api/plugins/servers/${encodeURIComponent(serverId)}/grants`, + { fallback: "What this account holds could not be read." }, + ); + const body: { actions?: unknown } = await response.json(); + return Array.isArray(body.actions) ? (body.actions as GrantState[]) : []; + }, + }); +} + +/** + * Begin authorizing ONE action. Answers the vendor's consent url, which the caller navigates to. + * + * `null` rather than `undefined` for the reason spelled out over `connectAccountMutationOptions`. + */ +export function authorizeActionMutationOptions( + returnTo: "settings" | "admin" = "settings", +) { + return mutationOptions({ + mutationFn: async (variables: { + serverId: string; + action: string; + }): Promise => { + const authorizationUrl = await client( + `/api/plugins/servers/${encodeURIComponent(variables.serverId)}/authorize?returnTo=${returnTo}`, + "authorizationUrl", + { + method: "POST", + body: { action: variables.action }, + fallback: "That action could not be authorized.", + }, + ); + return authorizationUrl ?? null; + }, + }); +} + +/** + * Whether this answer is the route's synthetic "could not read". + * + * WHEN `grantsFor` THROWS, THE ROUTE ANSWERS 200 WITH ONE `unknown` ENTRY WHOSE `action` IS THE + * TOOLKIT NAME: a throw yields no action names to enumerate, so that label is not an action and must + * never be drawn as one. Recognised as a sole `unknown` entry that is either the app's own name or + * not shaped like an action at all (an Arcade action is dotted, `Toolkit.Action`; a toolkit is not). + */ +export function couldNotRead( + grants: readonly GrantState[], + appNames: readonly string[], +): boolean { + if (grants.length !== 1) return false; + const [only] = grants; + if (only?.state !== "unknown") return false; + const label = only.action.toLowerCase(); + return ( + appNames.some((name) => name.toLowerCase() === label) || + !only.action.includes(".") + ); +} + +/** + * Whether approving at this app is what makes `grant` usable — THE ONE DEFINITION OF THE SET THE + * CONSENT COPY COUNTS. + * + * WHAT A PERSON CONSENTS TO IS THE AUTHORIZATION, so an action belongs here exactly when that + * authorization is what stands between it and being called: one somebody still has to approve + * (`needs-consent`), or one already approved and held (`authorized`, `held`). The "N" in "approving + * this approves all N" is the size of this set and of nothing else. + * + * AN ACTION THAT NEEDS NO AUTHORIZATION IS NOT IN IT. It is usable before anybody approves anything + * and stays usable if they refuse, so telling a person that approving "approves" it inflates what + * they are being asked to agree to by actions nothing ever withheld. That inflation is not + * hypothetical: when the server began reading an absent authorization block as `authorized` rather + * than `unknown`, every such action silently joined this count. So the decision is made HERE, on the + * field that says why an action is authorized, and never on `state` alone. + * + * `needs-operator` and `unknown` are not in it either: whether an approval would reach them cannot + * be read off the answer, so they are left out of the number rather than guessed into it. + */ +export function coveredByApproval( + grant: GrantState, +): grant is Extract { + if (grant.state === "needs-consent") return true; + return grant.state === "authorized" && grant.authorization === "held"; +} + +/** The actions the consent copy reasons about: exactly those {@link coveredByApproval} admits. */ +export function consentActionsFrom( + grants: readonly GrantState[], +): ConsentAction[] { + const actions: ConsentAction[] = []; + for (const grant of grants) { + if (coveredByApproval(grant)) { + actions.push({ name: grant.action, scopes: grant.scopes }); + } + } + return actions; +} + +export type GrantGroup = { + /** The permissions every action in the group requires; empty for the whole-app and no-permission groups. */ + scopes: string[]; + /** + * "whole-app" when no action in the app names a permission, holding every action one approval + * covers; "none" for actions that name none — always including those that need no authorization. + */ + kind: "scoped" | "whole-app" | "none"; + grants: GrantState[]; +}; + +function isNotRequired(grant: GrantState): boolean { + return grant.state === "authorized" && grant.authorization === "not-required"; +} + +function scopesOf(grant: GrantState): string[] { + return grant.state === "authorized" || grant.state === "needs-consent" + ? [...new Set(grant.scopes)].sort() + : []; +} + +/** The one state ordering: `groupGrants` sorts by it and `GrantList` picks its unauthorized tail by it. */ +export const RANK: Record = { + authorized: 0, + "needs-consent": 1, + "needs-operator": 2, + unknown: 3, +}; + +/** + * The grant list grouped by the permission each action requires, so what is drawn after a consent + * matches what the consent screen said. + * + * AN ALL-OR-NOTHING APP IS ONE GROUP CONTAINING EVERYTHING: when no action names a permission there + * is nothing to group on, and one group is the honest rendering rather than a degraded one. Names + * are compared exactly and never case-folded: Arcade's are case-sensitive. + */ +export function groupGrants(grants: readonly GrantState[]): GrantGroup[] { + const anyScoped = grants.some((grant) => scopesOf(grant).length > 0); + const ordered = [...grants].sort( + (left, right) => + RANK[left.state] - RANK[right.state] || + left.action.localeCompare(right.action), + ); + if (!anyScoped) { + // "Everything in this app, approved together" is a claim about what one approval covers, so an + // action that needs no authorization is drawn outside it — the same set the consent copy's + // count leaves out (see {@link coveredByApproval}), so the heading and the number agree. + const needsNone = ordered.filter(isNotRequired); + const together = ordered.filter((grant) => !isNotRequired(grant)); + const groups: GrantGroup[] = []; + if (together.length > 0) { + groups.push({ scopes: [], kind: "whole-app", grants: together }); + } + if (needsNone.length > 0) { + groups.push({ scopes: [], kind: "none", grants: needsNone }); + } + return groups; + } + const groups = new Map(); + for (const grant of ordered) { + const scopes = scopesOf(grant); + const key = scopes.join("\u0000"); + let group = groups.get(key); + if (!group) { + group = { + scopes, + kind: scopes.length > 0 ? "scoped" : "none", + grants: [], + }; + groups.set(key, group); + } + group.grants.push(grant); + } + return [...groups.values()].sort( + (left, right) => + Number(left.kind === "none") - Number(right.kind === "none") || + left.scopes.join(",").localeCompare(right.scopes.join(",")), + ); +} diff --git a/app/src/lib/plugins/provider-vocabulary.ts b/app/src/lib/plugins/provider-vocabulary.ts new file mode 100644 index 000000000..f5c340533 --- /dev/null +++ b/app/src/lib/plugins/provider-vocabulary.ts @@ -0,0 +1,246 @@ +import { type PluginsPage, pluginsProvider } from "./queries"; + +/** + * The words an admin Plugins screen uses for the ACTIVE broker, and nothing of the other's (spec D11). + * + * TWO DIFFERENT QUESTIONS, AND CONFLATING THEM IS THE TRAP. A screen that FILTERS by brokered-ness + * needs no provider name: one provider holds rows at a time (spec D3), so {@link brokeredProvenance} + * answers it from the row. A screen that NAMES a vendor cannot derive the name from a row that + * happens to exist — a deployment with the key set and no app enabled yet has no row at all — so it + * reads {@link pluginsProvider} and asks this module for the words. + * + * Pure functions, so the vocabulary is pinned without a DOM. Nothing here carries a key or a + * capability: the provider is a NAME. + */ +export type PluginsProvider = NonNullable; + +/** Whether a row came through a broker, whichever one. Filters; never names. */ +export function brokeredProvenance(provenance: string): boolean { + return provenance === "composio" || provenance === "arcade"; +} + +export type ProviderVocabulary = { + /** The vendor's display name. */ + name: string; + /** The directory entry's label, as the "More apps" row and the picker title say it. */ + directoryLabel: string; + /** The environment variable an operator sets to turn the broker on. */ + envVar: string; + /** + * The route path of the vendor's directory screen. + * + * A LITERAL UNION AND NEVER `string`, because that union is TanStack Router's generated route + * tree: a path that no route file answers stops compiling here rather than 404ing in somebody's + * browser. That is exactly how an earlier draft named a screen that did not exist, so a `as const` + * cast at the `` call site would be casting away the only check there is. + */ + directoryPath: "/admin/plugins/composio" | "/admin/plugins/arcade"; + /** + * What the "More apps" row says once the key is set. + * + * A FIELD rather than a `provider === "composio"` branch. Composio's sentence counts its + * directory ("a few hundred apps") and that count is Composio's, measured by nobody here; Arcade's + * says the same thing about reach without claiming a size this deployment has not counted. + */ + directoryDescription: string; +}; + +const VOCABULARY: Record = { + composio: { + name: "Composio", + directoryLabel: "Browse Composio", + envVar: "COMPOSIO_API_KEY", + directoryPath: "/admin/plugins/composio", + directoryDescription: + "A few hundred apps, reached as whoever is asking. Each person connects their own account.", + }, + arcade: { + name: "Arcade", + directoryLabel: "Browse Arcade", + envVar: "ARCADE_API_KEY", + directoryPath: "/admin/plugins/arcade", + directoryDescription: + "A directory this deployment has not reviewed, reached as whoever is asking. Each person connects their own account.", + }, +}; + +export function providerVocabulary( + provider: PluginsProvider, +): ProviderVocabulary { + return VOCABULARY[provider]; +} + +/** + * What a failed directory read says when the server sent no message of its own. + * + * ONE SENTENCE FOR BOTH THE QUERY AND THE SCREEN, so the two layers cannot drift: the query layer's + * fallback once spelled a vendor on its own and printed Composio's name on an Arcade deployment. + */ +export function directoryReadFailure(provider: PluginsProvider): string { + return `${VOCABULARY[provider].name}'s app directory could not be read.`; +} + +/** The "More apps" section's own sentence. */ +export function moreAppsSectionDescription(provider: PluginsProvider): string { + return `A directory this deployment has not reviewed, reached through ${VOCABULARY[provider].name}.`; +} + +/** + * The one row under "More apps". + * + * `linked` is whether the row goes anywhere. Both providers have a directory screen, so the row + * links exactly when the key is configured — and the function tests the configuration and never the + * vendor. An unconfigured row states its setting and links nowhere, because there is nowhere to go + * until the key is set. + */ +export type MoreAppsRow = { + title: string; + description: string; + linked: boolean; +}; + +export function moreAppsRow( + provider: PluginsProvider, + configured: boolean, +): MoreAppsRow { + const { name, directoryLabel, envVar, directoryDescription } = + VOCABULARY[provider]; + if (!configured) { + return { + title: name, + description: `Add your ${name} key to enable a catalogue of tools. Set ${envVar} on this deployment.`, + linked: false, + }; + } + return { + title: directoryLabel, + description: directoryDescription, + linked: true, + }; +} + +/** The Connection card's sentence for a brokered app. */ +export function brokeredConnectionDescription( + provider: PluginsProvider, +): string { + return `Reached through ${VOCABULARY[provider].name}, which holds each person's own account.`; +} + +/** The "How this is reached" row for a brokered app: its sentence and its badge. */ +export function brokeredReach(provider: PluginsProvider): { + description: string; + badge: string; +} { + const { name } = VOCABULARY[provider]; + return { + description: `This app is reached through ${name}, which holds the account. This deployment sends one key and the name of whoever is asking, so each person connects their own and a Bot sees only what that person can see. There is no token to paste.`, + badge: `Through ${name}`, + }; +} + +/** What disconnecting a brokered account does, said where the button is. */ +export function brokeredDisconnectNote(provider: PluginsProvider): string { + return `Disconnecting ends the account at ${VOCABULARY[provider].name}, not just here.`; +} + +/** + * The line under a brokered app's own page title on a person's connected-accounts screen. + * + * NOT {@link brokeredConnectionDescription}, which is the admin Connection card's sentence and says + * something different ("each person's own account"). This one speaks to the person reading their + * own page: the broker holds the account, so a Bot sees only what they can see. + */ +export function brokeredAccountPageDescription( + provider: PluginsProvider, +): string { + return `Reached through ${VOCABULARY[provider].name}, which holds the account, so a Bot sees only what you can see.`; +} + +/** What Connect does on a consent app, said before the press: where it goes first. */ +export function brokeredConsentTrip(provider: PluginsProvider): string { + return `Connecting takes you to ${VOCABULARY[provider].name} and then to the vendor to consent.`; +} + +/** + * What stands in for {@link brokeredConsentTrip} where the broker authorizes PER ACTION. + * + * NOT THE SAME SENTENCE WITH A WORD CHANGED, because it is not the same offer. The consent trip + * names a press and says where it goes; under a per-action broker there is no whole-app press to + * name — the row withholds Connect entirely — so this says where the act actually is instead. A + * person reading "Connecting takes you to…" beside no Connect button is being told about a button + * that is not there. + * + * `where` IS NOT DECORATION AND HAS NO DEFAULT. The two screens that draw this row do not both + * draw the action list: the settings screen has it directly underneath, and the admin setup page + * has none at all, so a single sentence saying "below" is a true direction on one screen and a + * wrong one on the other — pointing somebody at a list that is not on their page is the same + * failure as the Connect button this sentence replaces, one step further on. Each caller says + * which it is rather than being assumed into the commoner case. + */ +export function brokeredPerActionTrip( + provider: PluginsProvider, + where: "below" | "settings", +): string { + const stem = `${VOCABULARY[provider].name} approves one action at a time, so there is nothing to connect for the whole app.`; + return where === "below" + ? `${stem} Authorize the actions you want below.` + : `${stem} Authorize them from Connected accounts in Settings.`; +} + +/** What a person is told where the deployment has no key for the active broker. */ +export function brokeredKeyMissing(provider: PluginsProvider): string { + return `Set ${VOCABULARY[provider].envVar} on this deployment. Without it there is no broker to reach, so this account can be neither connected nor ended from here. The app stays enabled and every grant on its tools still stands.`; +} + +/** + * What a Disconnect would also end, said beside the Disconnect, from the server's computed answer. + * + * NULL WHEN THERE IS NOTHING TO SAY. An app with no siblings gets no warning block at all, not an + * empty one: a warning about apps that will not be touched teaches people to dismiss the one that + * matters. `unanswered` is a COUNT and never names, because an app that could not be asked about + * has no name this deployment could vouch for. + * + * It names the apps and promises nothing about confinement (D30): which other apps a consent covers + * is the provider's property, and this sentence reports what the server counted rather than what it + * hopes. + */ +export function disconnectSiblingsNotice(answer: { + siblings: readonly string[]; + unanswered: number; +}): string | null { + const { siblings, unanswered } = answer; + const parts: string[] = []; + if (siblings.length > 0) { + parts.push( + `Disconnecting also ends your access to ${joinNames(siblings)}, which ${siblings.length === 1 ? "shares" : "share"} this connection.`, + ); + } + if (unanswered > 0) { + parts.push( + siblings.length > 0 + ? `${unanswered} other ${unanswered === 1 ? "app" : "apps"} could not be checked and may be affected too.` + : `${unanswered} ${unanswered === 1 ? "app" : "apps"} on this connection could not be checked, so disconnecting may end ${unanswered === 1 ? "it" : "them"} too.`, + ); + } + return parts.length > 0 ? parts.join(" ") : null; +} + +function joinNames(names: readonly string[]): string { + if (names.length <= 2) return names.join(" and "); + return `${names.slice(0, -1).join(", ")} and ${names[names.length - 1]}`; +} + +/** + * Whether a directory route may answer on this deployment. + * + * `pending` until the page has said which provider this is: the default of `"composio"` is right for + * a label and wrong for a gate, because acting on it would fire a Composio request against an Arcade + * project in the moment before the answer arrives. + */ +export function directoryRouteDecision( + routeProvider: PluginsProvider, + page: PluginsPage | undefined, +): "pending" | "render" | "redirect" { + if (!page) return "pending"; + return pluginsProvider(page) === routeProvider ? "render" : "redirect"; +} diff --git a/app/src/lib/plugins/queries.ts b/app/src/lib/plugins/queries.ts index 05b215df9..ad69cd0db 100644 --- a/app/src/lib/plugins/queries.ts +++ b/app/src/lib/plugins/queries.ts @@ -1,5 +1,19 @@ import { queryOptions } from "@tanstack/react-query"; import { client } from "@/lib/client"; +// This import closes a cycle: `./provider-vocabulary` imports `pluginsProvider` from this file. +// It is safe for one reason, and the reason is the rule. Both live bindings that cross it — +// `directoryReadFailure` here, `pluginsProvider` there — are `export function` declarations, +// which are fully initialised during module instantiation, so neither can be caught in the +// temporal dead zone whichever module evaluates first; and both are only ever called from inside +// a function body (a `queryFn`, `directoryRouteDecision`), long after both modules have finished +// evaluating. Nothing may call across this import at module scope. A +// `const X = directoryReadFailure("...")` at the top level of this file would reach `VOCABULARY`, +// a lexical `const` in the other module, mid-evaluation: it throws under one evaluation order and +// not the other, so it can pass every test and still fail in a production bundle. +import { + directoryReadFailure, + type PluginsProvider, +} from "./provider-vocabulary"; /** * Re-exported, not re-declared. @@ -151,6 +165,23 @@ export type ComposioApp = { categories: string[]; /** The size of the decision, shown before enabling. */ actionCount: number; + /** + * How many of those actions the provider classified, how many distinct non-empty scope sets they + * ask for, and how many carry a scope at all — three more facts of the size-of-the-decision kind. + * + * REQUIRED AND NULLABLE, NEVER OPTIONAL, AND NOTHING HERE WRITES `?? 0`. `0` means measured and + * none, so the coverage warning fires; `null` means the provider does not publish it, so the page + * says nothing. An optional field makes those the same shape at the call site, and the natural + * `?? 0` fires a coverage warning on a Composio deployment — a false alarm at exactly the moment + * somebody is deciding whether to trust an app. + * + * An action with no scopes is not its own permission: it is covered by any approval at all, so it + * joins no group. `scopedActionCount` is what keeps `permissionCount: 1` over two actions from + * reading as one permission covering both. + */ + classifiedCount: number | null; + permissionCount: number | null; + scopedActionCount: number | null; enabled: boolean; }; @@ -183,8 +214,48 @@ export type PluginsPage = { * server. */ composioConfigured: boolean; + /** + * Whether this deployment's broker authorizes ONE ACTION AT A TIME. + * + * A DECLARED CAPABILITY, read with a presence test and never a vendor name. The server computes + * it from the very expression `/servers/:id/authorize` and the `/arcade/verify` return leg gate + * on, so a screen that draws the per-action grant list and the routes that serve its buttons + * cannot key on different facts. Gating on `provider === "arcade"` instead left a broker named + * arcade whose flow is absent drawing a list whose every Authorize press 503s. + * + * Required, like `composioConfigured` and unlike `provider`: a capability is a value the server + * declares, so the type does not offer "did not say" as a third answer. False on Composio, whose + * auth config fixes one state for a whole toolkit, so a Composio deployment is unchanged. + */ + authorizesPerAction: boolean; + /** + * Which vendor brokers this deployment's apps, as a NAME. Read it through {@link pluginsProvider}. + * + * A screen that FILTERS by brokered-ness needs no provider name: one provider holds rows at a + * time (spec D3), which is why `brokeredAccountsListedOn` is a predicate over `provenance`. A + * screen that NAMES a vendor ("Browse Composio", the `/admin/plugins/composio` route, + * `COMPOSIO_API_KEY`, "Reached through Composio") cannot derive that name from a row, and this + * field is the only thing that answers it. Separate from `composioConfigured`, which asks whether + * the directory can be browsed at all. + * + * A name, never a key and never a capability: nothing about the vendor key travels with it. + * Optional because a payload from an older server does not carry it. + */ + provider?: "composio" | "arcade"; }; +/** + * The provider a payload names, `"composio"` when the server did not say. + * + * So a Composio deployment renders byte-identically and a page served by an older server does not + * blank. Also `"composio"` before the page has loaded. + */ +export function pluginsProvider( + page: PluginsPage | undefined, +): "composio" | "arcade" { + return page?.provider ?? "composio"; +} + /** What one Bot holds, which is all the runtime needs to offer it. */ export type GrantedPlugins = { tools: { @@ -206,6 +277,7 @@ export const pluginKeys = { page: () => ["plugins", "page"] as const, forAgent: (agentId: string) => ["plugins", "for-agent", agentId] as const, connections: () => ["plugins", "connections"] as const, + siblings: (serverId: string) => ["plugins", "siblings", serverId] as const, composioApps: (query: string) => ["plugins", "composio", "apps", query] as const, }; @@ -358,6 +430,41 @@ export function connectionsQueryOptions() { }); } +/** + * What disconnecting this app would also end, as the server computed it. + * + * `siblings` are other apps' toolkit names (never this one) and `unanswered` is a COUNT of apps that + * could not be asked about. A deployment whose broker holds one account per app always answers + * empty. + */ +export type ConnectionSiblings = { siblings: string[]; unanswered: number }; + +export function connectionSiblingsQueryOptions(serverId: string) { + return queryOptions({ + queryKey: pluginKeys.siblings(serverId), + queryFn: async (): Promise => { + const response = await client( + `/api/plugins/servers/${encodeURIComponent(serverId)}/connection/siblings`, + { + fallback: "Which other apps share this connection could not be read.", + }, + ); + const body: Partial = await response.json(); + /* + * NARROWED RATHER THAN TRUSTED: an answer that is not this shape is read as "nothing to say", + * which draws no warning, rather than a throw that takes the whole page down for a sentence. + */ + return { + siblings: Array.isArray(body.siblings) ? body.siblings : [], + unanswered: + typeof body.unanswered === "number" && body.unanswered > 0 + ? body.unanswered + : 0, + }; + }, + }); +} + export function pluginsPageQueryOptions() { return queryOptions({ queryKey: pluginKeys.page(), @@ -371,18 +478,21 @@ export function pluginsPageQueryOptions() { } /** - * Composio's app directory, narrowed by a search term. + * The active broker's app directory, narrowed by a search term. * * The term goes to our own endpoint because the vendor's client drops a search parameter and * answers with an unfiltered page, so filtering has to happen somewhere that admits to doing it. */ -export function composioAppsQueryOptions(query: string) { +export function composioAppsQueryOptions( + query: string, + provider: PluginsProvider, +) { return queryOptions({ queryKey: pluginKeys.composioApps(query), queryFn: async (): Promise<{ apps: ComposioApp[] }> => { const response = await client( `/api/plugins/composio/apps?q=${encodeURIComponent(query)}`, - { fallback: "Composio's app directory could not be read." }, + { fallback: directoryReadFailure(provider) }, ); return response.json(); }, diff --git a/app/src/lib/search-text.ts b/app/src/lib/search-text.ts new file mode 100644 index 000000000..8de69c23f --- /dev/null +++ b/app/src/lib/search-text.ts @@ -0,0 +1,73 @@ +import { parseSearchWith } from "@tanstack/react-router"; + +/** + * Reading a search parameter that is TEXT, when the router has already decided it was something + * else. + * + * THE ROUTER JSON-PARSES EVERY SEARCH VALUE. `?connected=notion` stays the string it looks like + * only because `notion` is not valid JSON; `?flow_id=12345` arrives as the number 12345 and + * `?flow_id={"a":1}` as an object, because both of those are. Nothing in the URL said so — whether + * a value survives as text depends entirely on what characters the sender's id generator happened + * to emit, which is why a `typeof value === "string"` guard works for every handle in testing and + * silently drops a fraction of the real ones. + * + * SO NOTHING HERE GUARDS ON THE PARSED TYPE; it renders whatever came back to the text it was in + * the URL. There is no shape a sender can choose that falls through to "no parameter", so the + * wrong case is gone by construction rather than by a list of types to also accept — the same + * answer the notice table on the connected-accounts screen gives for keys off a URL. + */ + +/** + * The text a search value was in the URL, or undefined when the parameter was not there at all. + * + * Exact for everything `parseSearchText` lets through: a string is itself, a number is one it + * round-trips through (see below), and an object or array is re-rendered as the JSON it was parsed + * from. The empty string is a value, not an absence — a parameter present and empty is passed on as + * such, for whoever reads it to call unusable. + */ +export function searchText(value: unknown): string | undefined { + if (value === undefined) return undefined; + if (typeof value === "string") return value; + if (typeof value === "number" || typeof value === "boolean" || value === null) + return String(value); + /* + * An object or array can only have got here by having been JSON in the URL, so stringifying it is + * reading that JSON back. `JSON.stringify` answers undefined rather than text for values it + * cannot render; none of those can come out of `JSON.parse`, and the check is here so that a + * future parser which can is a missing parameter rather than the string "undefined". + */ + const text = JSON.stringify(value); + return typeof text === "string" ? text : undefined; +} + +/** + * That text under its key, or nothing — ready to spread into what `validateSearch` returns. + * + * The key is OMITTED rather than set to undefined, for the reason the routes using this give: + * present-but-undefined makes `search` a required prop on every Link to the route, which is a lot + * of ripple for a parameter only a callback sets. + */ +export function searchTextEntry( + key: Key, + value: unknown, +): Partial> { + const text = searchText(value); + return text === undefined ? {} : ({ [key]: text } as Record); +} + +/** + * The router's own parser, with the one case `searchText` could not have rendered back taken away. + * + * `JSON.parse` turns `12345678901234567890` into a double, and no amount of care downstream can + * recover the digits that rounding threw away — a handle like that would come back out of + * `searchText` as a DIFFERENT handle, which is worse than dropping it. So a number whose text form + * is not the text it was parsed from is left as that text, and every number that does reach a route + * is one `String` renders back exactly. `1e3` keeps its spelling for the same reason. + */ +export const parseSearchText: (searchStr: string) => Record = + parseSearchWith((value: string) => { + const parsed: unknown = JSON.parse(value); + return typeof parsed === "number" && String(parsed) !== value + ? value + : parsed; + }); diff --git a/app/src/routeTree.gen.ts b/app/src/routeTree.gen.ts index ca53f4c05..e4b110fc9 100644 --- a/app/src/routeTree.gen.ts +++ b/app/src/routeTree.gen.ts @@ -52,6 +52,7 @@ import { Route as AuthedAdminComponentsIndexRouteImport } from './routes/_authed import { Route as AuthedAdminComponentsNameRouteImport } from './routes/_authed/admin/components/$name' import { Route as AuthedAdminPluginsIndexRouteImport } from './routes/_authed/admin/plugins/index' import { Route as AuthedAdminPluginsKeyRouteImport } from './routes/_authed/admin/plugins/$key' +import { Route as AuthedAdminPluginsArcadeRouteImport } from './routes/_authed/admin/plugins/arcade' import { Route as AuthedAdminPluginsComposioRouteImport } from './routes/_authed/admin/plugins/composio' import { Route as AuthedSettingsComponentsGalleryIndexRouteImport } from './routes/_authed/settings/components-gallery/index' import { Route as AuthedSettingsComponentsGalleryNameRouteImport } from './routes/_authed/settings/components-gallery/$name' @@ -288,6 +289,12 @@ const AuthedAdminPluginsKeyRoute = AuthedAdminPluginsKeyRouteImport.update({ path: '/plugins/$key', getParentRoute: () => AuthedAdminRouteRoute, } as any) +const AuthedAdminPluginsArcadeRoute = + AuthedAdminPluginsArcadeRouteImport.update({ + id: '/plugins/arcade', + path: '/plugins/arcade', + getParentRoute: () => AuthedAdminRouteRoute, + } as any) const AuthedAdminPluginsComposioRoute = AuthedAdminPluginsComposioRouteImport.update({ id: '/plugins/composio', @@ -423,6 +430,7 @@ export interface FileRoutesByFullPath { '/group/new': typeof AuthedAppGroupNewRoute '/admin/components/$name': typeof AuthedAdminComponentsNameRoute '/admin/plugins/$key': typeof AuthedAdminPluginsKeyRoute + '/admin/plugins/arcade': typeof AuthedAdminPluginsArcadeRoute '/admin/plugins/composio': typeof AuthedAdminPluginsComposioRoute '/settings/components-gallery/$name': typeof AuthedSettingsComponentsGalleryNameRoute '/settings/connected-accounts/$key': typeof AuthedSettingsConnectedAccountsKeyRoute @@ -480,6 +488,7 @@ export interface FileRoutesByTo { '/group/new': typeof AuthedAppGroupNewRoute '/admin/components/$name': typeof AuthedAdminComponentsNameRoute '/admin/plugins/$key': typeof AuthedAdminPluginsKeyRoute + '/admin/plugins/arcade': typeof AuthedAdminPluginsArcadeRoute '/admin/plugins/composio': typeof AuthedAdminPluginsComposioRoute '/settings/components-gallery/$name': typeof AuthedSettingsComponentsGalleryNameRoute '/settings/connected-accounts/$key': typeof AuthedSettingsConnectedAccountsKeyRoute @@ -542,6 +551,7 @@ export interface FileRoutesById { '/_authed/_app/group/new': typeof AuthedAppGroupNewRoute '/_authed/admin/components/$name': typeof AuthedAdminComponentsNameRoute '/_authed/admin/plugins/$key': typeof AuthedAdminPluginsKeyRoute + '/_authed/admin/plugins/arcade': typeof AuthedAdminPluginsArcadeRoute '/_authed/admin/plugins/composio': typeof AuthedAdminPluginsComposioRoute '/_authed/settings/components-gallery/$name': typeof AuthedSettingsComponentsGalleryNameRoute '/_authed/settings/connected-accounts/$key': typeof AuthedSettingsConnectedAccountsKeyRoute @@ -603,6 +613,7 @@ export interface FileRouteTypes { | '/group/new' | '/admin/components/$name' | '/admin/plugins/$key' + | '/admin/plugins/arcade' | '/admin/plugins/composio' | '/settings/components-gallery/$name' | '/settings/connected-accounts/$key' @@ -660,6 +671,7 @@ export interface FileRouteTypes { | '/group/new' | '/admin/components/$name' | '/admin/plugins/$key' + | '/admin/plugins/arcade' | '/admin/plugins/composio' | '/settings/components-gallery/$name' | '/settings/connected-accounts/$key' @@ -721,6 +733,7 @@ export interface FileRouteTypes { | '/_authed/_app/group/new' | '/_authed/admin/components/$name' | '/_authed/admin/plugins/$key' + | '/_authed/admin/plugins/arcade' | '/_authed/admin/plugins/composio' | '/_authed/settings/components-gallery/$name' | '/_authed/settings/connected-accounts/$key' @@ -1051,6 +1064,13 @@ declare module '@tanstack/react-router' { preLoaderRoute: typeof AuthedAdminPluginsKeyRouteImport parentRoute: typeof AuthedAdminRouteRoute } + '/_authed/admin/plugins/arcade': { + id: '/_authed/admin/plugins/arcade' + path: '/plugins/arcade' + fullPath: '/admin/plugins/arcade' + preLoaderRoute: typeof AuthedAdminPluginsArcadeRouteImport + parentRoute: typeof AuthedAdminRouteRoute + } '/_authed/admin/plugins/composio': { id: '/_authed/admin/plugins/composio' path: '/plugins/composio' @@ -1181,6 +1201,7 @@ interface AuthedAdminRouteRouteChildren { AuthedAdminIndexRoute: typeof AuthedAdminIndexRoute AuthedAdminComponentsNameRoute: typeof AuthedAdminComponentsNameRoute AuthedAdminPluginsKeyRoute: typeof AuthedAdminPluginsKeyRoute + AuthedAdminPluginsArcadeRoute: typeof AuthedAdminPluginsArcadeRoute AuthedAdminPluginsComposioRoute: typeof AuthedAdminPluginsComposioRoute AuthedAdminComponentsIndexRoute: typeof AuthedAdminComponentsIndexRoute AuthedAdminPluginsIndexRoute: typeof AuthedAdminPluginsIndexRoute @@ -1203,6 +1224,7 @@ const AuthedAdminRouteRouteChildren: AuthedAdminRouteRouteChildren = { AuthedAdminIndexRoute: AuthedAdminIndexRoute, AuthedAdminComponentsNameRoute: AuthedAdminComponentsNameRoute, AuthedAdminPluginsKeyRoute: AuthedAdminPluginsKeyRoute, + AuthedAdminPluginsArcadeRoute: AuthedAdminPluginsArcadeRoute, AuthedAdminPluginsComposioRoute: AuthedAdminPluginsComposioRoute, AuthedAdminComponentsIndexRoute: AuthedAdminComponentsIndexRoute, AuthedAdminPluginsIndexRoute: AuthedAdminPluginsIndexRoute, diff --git a/app/src/router.tsx b/app/src/router.tsx index 4d7e914fe..acab7a7bc 100644 --- a/app/src/router.tsx +++ b/app/src/router.tsx @@ -1,10 +1,17 @@ import { createRouter } from "@tanstack/react-router"; +import { parseSearchText } from "./lib/search-text"; import type { RouterContext } from "./router-context"; import { routeTree } from "./routeTree.gen"; export const router = createRouter({ routeTree, context: {} as RouterContext, + /* + * The router's own search parsing, minus the numbers it cannot render back: see + * `parseSearchText`. Every route that reads a parameter as text reads it through `searchText`, + * which needs what arrives to be something that text can be recovered from. + */ + parseSearch: parseSearchText, }); declare module "@tanstack/react-router" { diff --git a/app/src/routes/_authed/_app/bot.tsx b/app/src/routes/_authed/_app/bot.tsx index 128eb0197..c64ff8263 100644 --- a/app/src/routes/_authed/_app/bot.tsx +++ b/app/src/routes/_authed/_app/bot.tsx @@ -17,13 +17,20 @@ import { tryClient } from "@/lib/client"; import { useActiveBot } from "@/lib/copilot/active-bot"; import { useBotThread } from "@/lib/copilot/bot-thread"; import { useStoppedTurn } from "@/lib/copilot/stopped-turn"; +import { searchTextEntry } from "@/lib/search-text"; export const Route = createFileRoute("/_authed/_app/bot")({ component: RouteComponent, + /* + * `?agent=` is read as text whatever the router parsed it into (`searchText`), because search + * values are JSON-parsed and a Bot id made of digits would otherwise arrive as a number and open + * this deployment's default Bot rather than the named one. `?watch=` is a flag and is read as the + * boolean it is parsed into: anything else is not the flag being set. + */ validateSearch: ( search: Record, ): { agent?: string; watch?: boolean } => ({ - ...(typeof search.agent === "string" ? { agent: search.agent } : {}), + ...searchTextEntry("agent", search.agent), ...(search.watch === true ? { watch: true } : {}), }), }); diff --git a/app/src/routes/_authed/_app/channel/new.tsx b/app/src/routes/_authed/_app/channel/new.tsx index c09181985..ed9bb14b4 100644 --- a/app/src/routes/_authed/_app/channel/new.tsx +++ b/app/src/routes/_authed/_app/channel/new.tsx @@ -30,6 +30,7 @@ import { } from "@/lib/agents/queries"; import { useStartChannel } from "@/lib/channels/start"; import { useSkillCommands } from "@/lib/plugins/skill-commands"; +import { searchTextEntry } from "@/lib/search-text"; import { newId } from "../../../../lib/new-id"; /** @@ -41,9 +42,13 @@ import { newId } from "../../../../lib/new-id"; const AGENT_NOT_FOUND = "Agent not found."; export const Route = createFileRoute("/_authed/_app/channel/new")({ - validateSearch: (search: Record): { agent?: string } => ({ - ...(typeof search.agent === "string" ? { agent: search.agent } : {}), - }), + /* + * The pending recipient's id, read as text whatever the router parsed it into (`searchText`): + * search values are JSON-parsed, so a Bot id made of digits would otherwise arrive as a number + * and the link would open an empty composer instead of the one it names. + */ + validateSearch: (search: Record): { agent?: string } => + searchTextEntry("agent", search.agent), component: RouteComponent, }); diff --git a/app/src/routes/_authed/admin/plugins/$key.tsx b/app/src/routes/_authed/admin/plugins/$key.tsx index 69cab47f2..a92eb4fb2 100644 --- a/app/src/routes/_authed/admin/plugins/$key.tsx +++ b/app/src/routes/_authed/admin/plugins/$key.tsx @@ -58,7 +58,15 @@ import { type PluginServer, personalConnections, pluginsPageQueryOptions, + pluginsProvider, } from "@/lib/plugins/queries"; +import { + brokeredConnectionDescription, + brokeredDisconnectNote, + brokeredPerActionTrip, + brokeredProvenance, + brokeredReach, +} from "@/lib/plugins/provider-vocabulary"; import { botSharedAppsQueryOptions, describeApproval, @@ -161,7 +169,7 @@ export function connectionKindFor( server: PluginServer | undefined, auth: CatalogueItem["auth"] | undefined, ): CatalogueItem["auth"] | "brokered" { - if (server?.provenance === "composio") return "brokered"; + if (server && brokeredProvenance(server.provenance)) return "brokered"; return auth ?? "deployment-bearer"; } @@ -202,6 +210,7 @@ function RouteComponent() { const { key } = useParams({ from: "/_authed/admin/plugins/$key" }); const queryClient = useQueryClient(); const plugins = useQuery(pluginsPageQueryOptions()); + const provider = pluginsProvider(plugins.data); /* * The administrator's OWN connections, not the deployment's. * @@ -379,8 +388,16 @@ function RouteComponent() { * `connectSelf` above stays: it is the `user-oauth` row's Connect, which is a different row with * no Disconnect beside it and nothing brokered to confirm. */ + /* + * THE SAME CAPABILITY THE SETTINGS SCREEN READS, and read here for the same reason: this page + * draws the brokered row too, so under a per-action broker it offered the one Connect that can + * never succeed. Off the declared capability and never off `provider === "arcade"` — see + * {@link BrokeredAccount.authorizesPerAction}. + */ + const perActionGrants = plugins.data?.authorizesPerAction ?? false; const brokeredAccount = useBrokeredAccount({ authScheme: server?.authScheme ?? null, + authorizesPerAction: perActionGrants, brokered: auth === "brokered", configured: plugins.data?.composioConfigured ?? false, recorded: shared ? (sharedConnection?.connected ?? false) : youConnected, @@ -577,7 +594,8 @@ function RouteComponent() { * nothing to connect at all — see `brokeredAccountsListedOn` — so there is no personal/ * shared choice to offer for it, and a row here could only open a dialog that refuses. */} - {server?.provenance === "composio" && + {server && + brokeredProvenance(server.provenance) && server.authScheme !== "NO_AUTH" ? ( <> @@ -630,7 +648,7 @@ function RouteComponent() { ? "Built into this deployment. There is no vendor to reach and no credential to hold — a call runs as whoever asked." : auth === "brokered" ? /* The row below says how, at length. This says whose account it is, which is the part that decides what an administrator has to do here — which is nothing. */ - "Reached through Composio, which holds each person's own account." + brokeredConnectionDescription(provider) : "What this deployment presents to the vendor. One credential, used for everybody." } title="Connection" @@ -690,16 +708,12 @@ function RouteComponent() { How this is reached - This app is reached through Composio, which holds the - account. This deployment sends one key and the name of - whoever is asking, so each person connects their own and a - Bot sees only what that person can see. There is no token to - paste. + {brokeredReach(provider).description} - Through Composio + {brokeredReach(provider).badge} @@ -809,9 +823,10 @@ function RouteComponent() { ) : ( @@ -820,14 +835,19 @@ function RouteComponent() { /* Said beside the button rather than after it: disconnecting ends the account at Composio, so what it undoes is not the row here but the grant on this person's mailbox, and connecting again is a fresh consent. */ - connectedDescription={`Connected, so a Bot granted these tools uses your ${title} as you. Disconnecting ends the account at Composio, not just here.`} - disconnectedDescription={`Connect your own account to try this connector. ${reassurance}`} + connectedDescription={`Connected, so a Bot granted these tools uses your ${title} as you. ${brokeredDisconnectNote(provider)}`} + disconnectedDescription={ + perActionGrants + ? `${brokeredPerActionTrip(provider, "settings")} ${reassurance}` + : `Connect your own account to try this connector. ${reassurance}` + } /* The half of the line above that is true whichever way this app connects. An app whose key somebody types gets a different first sentence from the row — pressing Connect opens a form rather than leaving for a consent screen — and an administrator still has to be told they are not the step that finishes the connector. */ disconnectedReassurance={reassurance} + provider={provider} title={title} /> )} diff --git a/app/src/routes/_authed/admin/plugins/arcade.tsx b/app/src/routes/_authed/admin/plugins/arcade.tsx new file mode 100644 index 000000000..4fd37bbf3 --- /dev/null +++ b/app/src/routes/_authed/admin/plugins/arcade.tsx @@ -0,0 +1,49 @@ +import { useQuery } from "@tanstack/react-query"; +import { createFileRoute, Navigate } from "@tanstack/react-router"; +import { BrokerDirectory } from "@/components/plugins/broker-directory"; +import { directoryRouteDecision } from "@/lib/plugins/provider-vocabulary"; +import { pluginsPageQueryOptions } from "@/lib/plugins/queries"; + +/** + * Arcade's directory, searched rather than listed. + * + * The mirror of the sibling directory route, and deliberately nothing more. The screen itself is + * `components/plugins/broker-directory.tsx`; the directory endpoint behind it is provider-blind and + * answers from whichever broker this deployment runs, so this route adds a guard and a provider name + * and no behaviour of its own. + * + * Until this existed the coverage warning and the consent-breadth line were drawn on no deployment + * anybody runs: they live on a directory row, the only directory route redirected away on an Arcade + * deployment, and Arcade is the only provider that publishes the counts they are computed from. + */ +export const Route = createFileRoute("/_authed/admin/plugins/arcade")({ + component: RouteComponent, +}); + +/** + * The route guard: this directory answers only on an Arcade deployment. + * + * A route answering for the wrong provider is how an enablement flow gets spent against the wrong + * project. Nothing is drawn, and so no directory request is made, until the page has said which + * provider this is. + */ +function RouteComponent() { + const plugins = useQuery(pluginsPageQueryOptions()); + /* + * `data` stays undefined PERMANENTLY on a failed read, not only while loading, so the gate below + * would answer "pending" forever and draw a blank page. A failure is said, and the directory is + * not drawn: it would fire a request against a provider nobody has confirmed. + */ + if (plugins.isError) { + return ( +

+ This deployment's plugin settings could not be read, so nothing was + shown. +

+ ); + } + const decision = directoryRouteDecision("arcade", plugins.data); + if (decision === "redirect") return ; + if (decision === "pending") return null; + return ; +} diff --git a/app/src/routes/_authed/admin/plugins/composio.tsx b/app/src/routes/_authed/admin/plugins/composio.tsx index 98248531c..4a738499e 100644 --- a/app/src/routes/_authed/admin/plugins/composio.tsx +++ b/app/src/routes/_authed/admin/plugins/composio.tsx @@ -1,43 +1,18 @@ -import { IconPlug } from "@tabler/icons-react"; -import { useMutation, useQuery } from "@tanstack/react-query"; -import { createFileRoute } from "@tanstack/react-router"; -import * as React from "react"; -import { - PageEmpty, - PageRows, - PageSection, - PageShell, -} from "@/components/layout/page-shell"; -import { Button } from "@/components/ui/button"; -import { Input } from "@/components/ui/input"; -import { - Item, - ItemActions, - ItemContent, - ItemDescription, - ItemMedia, - ItemTitle, -} from "@/components/ui/item"; -import { Separator } from "@/components/ui/separator"; -import { - enableComposioAppMutationOptions, - invalidatePlugins, -} from "@/lib/plugins/mutations"; -import { - type ComposioApp, - composioAppsQueryOptions, -} from "@/lib/plugins/queries"; -import { queryClient } from "@/query-client"; +import { useQuery } from "@tanstack/react-query"; +import { createFileRoute, Navigate } from "@tanstack/react-router"; +import { BrokerDirectory } from "@/components/plugins/broker-directory"; +import { directoryRouteDecision } from "@/lib/plugins/provider-vocabulary"; +import { pluginsPageQueryOptions } from "@/lib/plugins/queries"; /** * Composio's directory, searched rather than listed. * - * The catalogue on the previous screen is a reviewed handful, and every entry there is a decision - * somebody made about a vendor. This is a few hundred apps that nobody here has reviewed, which is - * why it is a search field and not a list: the only sensible entry point into a directory that size - * is the name of the app you already came looking for. + * The screen itself is `components/plugins/broker-directory.tsx`, which draws whichever broker is + * active and reads every vendor word from the vocabulary. This file is the guard and the delegation, + * and nothing else: the sibling route is its mirror, and a route file importing another route file + * is how two screens that should be one begin to drift. * - * Adding one is account-wide, and it still reads nothing. Every app here is reached as whoever is + * Adding an app is account-wide, and it still reads nothing. Every app here is reached as whoever is * asking, so a person's own connection is what makes their own mail or messages readable — which is * made on their settings page, not here. */ @@ -46,185 +21,29 @@ export const Route = createFileRoute("/_authed/admin/plugins/composio")({ }); /** - * The apps to draw, in the order to draw them. + * The route guard: this directory answers only on a Composio deployment. * - * A function rather than a `.sort()` inside the map, so the two things a row is decided from — the - * order, and the marker saying an app is already here — can be asserted without a DOM, a router and - * a query client. See `tests/composio-picker.test.tsx`. - * - * A copy, because the array belongs to TanStack Query's cache and is the same object on every - * render; sorting it in place would rewrite what the cache holds. By name rather than by the - * vendor's own order, which is popularity — useful for a landing page, useless for finding the one - * app somebody typed half the name of. + * A route answering for the wrong provider is how a Composio-shaped enablement flow gets spent + * against an Arcade project. Nothing is drawn, and so no directory request is made, until the page + * has said which provider this is. */ -export function matchingApps(apps: ComposioApp[]): ComposioApp[] { - return [...apps].sort((left, right) => left.name.localeCompare(right.name)); -} - function RouteComponent() { - const [search, setSearch] = React.useState(""); - /* - * Debounced, as on People, and for a stronger reason: every distinct term is a cache key of its - * own and a request to the vendor, so typing a name un-debounced is a round trip per keystroke - * against somebody else's rate limit. - */ - const [query, setQuery] = React.useState(""); - React.useEffect(() => { - const timer = setTimeout(() => setQuery(search), 250); - return () => clearTimeout(timer); - }, [search]); - - const apps = useQuery(composioAppsQueryOptions(query)); + const plugins = useQuery(pluginsPageQueryOptions()); /* - * WHAT A FAILED ADD SAID, KEPT WHERE A SECOND ADD CANNOT ERASE IT. - * - * ONE OBSERVER SERVES EVERY BUTTON, which is what `enable.variables` below is already written - * around — and the same fact makes `enable.error` unusable as the place a refusal lives. - * `MutationObserver.mutate` does `this.#currentMutation?.removeObserver(this)` and rebuilds, so - * `error`, `isPending` and `variables` describe ONLY the most recent press. An admin pressing Add - * on Slack and then, a beat later, on Gmail watched Slack's row revert from "Adding…" to "Add" - * with its request still in flight — and when Slack came back 409, or 503, or carrying Composio's - * own sentence about a bad key, the banner never showed it, because `enable.error` was Gmail's - * and Gmail's was null. What was left was a row saying "Add" and no record that anything failed. - * - * THE MUTATION-LEVEL `onError` STILL FIRES AFTER `removeObserver`, which is why this works and - * reading the observer does not. It is the shape the sibling grant screen already uses - * (`$key_.bots.$agentId.tsx`), arriving at the one screen that was reading the observer instead. + * `data` stays undefined PERMANENTLY on a failed read, not only while loading, so the gate below + * would answer "pending" forever and draw a blank page. A failure is said, and the directory is + * not drawn: it would fire a request against a provider nobody has confirmed. */ - const [enableError, setEnableError] = React.useState(null); - /* - * AND WHICH ROWS ARE IN FLIGHT, FOR THE SAME REASON AND OUT OF THE SAME HOOKS. - * - * `enable.isPending && enable.variables?.slug === entry.slug` is the observer again: it names the - * most recent press and no other, so pressing Add on a second app put the FIRST row back to "Add" - * with its request still open — an invitation to press it again, which asks the server to enable - * an app it is already enabling. A set of slugs is what survives the rebuild, added in `onMutate` - * and removed in `onSettled` so it drains on a refusal exactly as it does on a success. - */ - const [adding, setAdding] = React.useState>(new Set()); - const enable = useMutation({ - ...enableComposioAppMutationOptions(queryClient), - onMutate: (input: { slug: string }) => { - setEnableError(null); - setAdding((held) => new Set(held).add(input.slug)); - }, - onError: (thrown: Error) => setEnableError(thrown.message), - /* - * SPELLED OUT RATHER THAN INHERITED, because the spread above carries an `onSettled` of its own - * — `invalidatePlugins` — and a second one here replaces it rather than running beside it. The - * refetch is what turns the added row into "Added", so dropping it would leave the list claiming - * the app is still addable until something else invalidated. - */ - onSettled: (_data, _error, input) => { - setAdding((held) => { - const left = new Set(held); - left.delete(input.slug); - return left; - }); - return invalidatePlugins(queryClient); - }, - }); - const listed = matchingApps(apps.data?.apps ?? []); - - return ( - - - {enableError ? ( -

- {enableError} -

- ) : null} - - setSearch(event.target.value)} - placeholder="Search by app name" - value={search} - /> - - {/* Pending, error, empty, rows — pending first, so no sentence asserts anything mid-fetch. */} - {apps.isPending ? null : apps.error ? ( -

- {/* - * The server's own sentence, as the enable failure above already does. A keyless - * deployment is refused with one naming COMPOSIO_API_KEY, and that name is the single - * thing an operator who reached this URL needs to read; the hardcoded line stays as - * the fallback for a failure that arrived carrying no message of its own. - */} - {apps.error.message || - "Composio's app directory could not be read."} -

- ) : listed.length === 0 ? ( - - {query - ? `Nothing in Composio's directory matches "${query}".` - : "Composio returned no apps."} - - ) : ( - - {listed.map((entry, index) => { - // One mutation serves every row, so which rows are mid-request is tracked beside it - // rather than read off it. See `adding` above. - const isAdding = adding.has(entry.slug); - - return ( - - - {/* The vendor's own mark where Composio supplies one, and a plug where it does - not, so a list of third parties still has a fixed left edge. */} - - {entry.logo ? ( - - ) : ( - - )} - - - {entry.name} - {entry.description} - - - {/* The size of the decision, stated before it is made: an app is not one - tool, and "167 actions" is what says so. */} - - {entry.actionCount} actions - - {/* - * An app this deployment already has says so rather than offering Add again. - * A second Add would ask the server to record a connector it already holds, - * and there is nothing on the row to suggest that would be harmless. - */} - {entry.enabled ? ( - - Added - - ) : ( - - )} - - - {index !== listed.length - 1 && } - - ); - })} - - )} - - - ); + if (plugins.isError) { + return ( +

+ This deployment's plugin settings could not be read, so nothing was + shown. +

+ ); + } + const decision = directoryRouteDecision("composio", plugins.data); + if (decision === "redirect") return ; + if (decision === "pending") return null; + return ; } diff --git a/app/src/routes/_authed/admin/plugins/index.tsx b/app/src/routes/_authed/admin/plugins/index.tsx index b90b6994b..4a6b122e7 100644 --- a/app/src/routes/_authed/admin/plugins/index.tsx +++ b/app/src/routes/_authed/admin/plugins/index.tsx @@ -28,7 +28,13 @@ import { type PluginServer, personalConnections, pluginsPageQueryOptions, + pluginsProvider, } from "@/lib/plugins/queries"; +import { + moreAppsRow, + moreAppsSectionDescription, + providerVocabulary, +} from "@/lib/plugins/provider-vocabulary"; /** * What this deployment can reach, as one list per state. @@ -96,6 +102,12 @@ function summaryFor( function RouteComponent() { const plugins = useQuery(pluginsPageQueryOptions()); const connections = useQuery(connectionsQueryOptions()); + // A NAME for the "More apps" row, which cannot be read off a row that may not exist yet. + const provider = pluginsProvider(plugins.data); + const moreApps = moreAppsRow( + provider, + plugins.data?.composioConfigured ?? false, + ); /* * PERSONAL ONLY: a Shared app's connection is the deployment's standing account, not something @@ -241,7 +253,7 @@ function RouteComponent() { @@ -252,21 +264,25 @@ function RouteComponent() { * administrator with nothing to search for, and nothing to tell them the handful of * connectors above is not the whole story. */} - {plugins.data?.composioConfigured ? ( + {moreApps.linked ? ( } + data-testid="plugin-directory" + /* The ACTIVE provider's own directory. Read from the vocabulary rather than + written here: a hard-coded path is the lowercase spelling of a vendor name, + which is how this row pointed every Arcade deployment at a screen that + redirected it straight back. The field is a literal union over the generated + route tree, so a path no route answers does not compile. */ + render={ + + } size="sm" > - Browse Composio - - A few hundred apps, reached as whoever is asking. Each - person connects their own account. - + {moreApps.title} + {moreApps.description} @@ -275,16 +291,13 @@ function RouteComponent() { ) : ( /* No chevron and no link: the row goes nowhere, because there is nowhere to go until the key is set. */ - + - Composio - - Add your Composio key to enable a catalogue of tools. Set - COMPOSIO_API_KEY on this deployment. - + {moreApps.title} + {moreApps.description} )} diff --git a/app/src/routes/_authed/settings/connected-accounts/$key.tsx b/app/src/routes/_authed/settings/connected-accounts/$key.tsx index b507c54cc..ac2134884 100644 --- a/app/src/routes/_authed/settings/connected-accounts/$key.tsx +++ b/app/src/routes/_authed/settings/connected-accounts/$key.tsx @@ -1,7 +1,7 @@ import { IconArrowUpRight, IconChevronDown } from "@tabler/icons-react"; import { useMutation, useQuery } from "@tanstack/react-query"; -import { createFileRoute, useParams } from "@tanstack/react-router"; -import { useState } from "react"; +import { createFileRoute, useParams, useSearch } from "@tanstack/react-router"; +import { useEffect, useState } from "react"; import { PageEmpty, PageRows, @@ -12,6 +12,7 @@ import { BrokeredAccountRow, useBrokeredAccount, } from "@/components/plugins/brokered-account-row"; +import { GrantList } from "@/components/plugins/grant-list"; import { Button } from "@/components/ui/button"; import { DropdownMenu, @@ -27,13 +28,25 @@ import { ItemTitle, } from "@/components/ui/item"; import { Separator } from "@/components/ui/separator"; +import { currentUserQueryOptions } from "@/lib/auth/queries"; import { connectAccountMutationOptions } from "@/lib/plugins/mutations"; import { + brokeredAccountPageDescription, + brokeredConsentTrip, + brokeredDisconnectNote, + brokeredPerActionTrip, + brokeredProvenance, + disconnectSiblingsNotice, +} from "@/lib/plugins/provider-vocabulary"; +import { + connectionSiblingsQueryOptions, connectionsQueryOptions, type PluginServer, personalConnections, pluginsPageQueryOptions, + pluginsProvider, } from "@/lib/plugins/queries"; +import { searchTextEntry } from "@/lib/search-text"; /** * Whether this server is reached through Composio AS THIS PERSON. @@ -44,7 +57,38 @@ import { * pin the distinction without rendering the page. */ export function brokeredFor(server: PluginServer | undefined): boolean { - return server?.provenance === "composio" && server.accountMode !== "shared"; + /* + * A FILTER, so it asks whether the row came through a broker at all and needs no vendor name: one + * provider holds rows at a time (spec D3). Naming the vendor on this page is a different question + * and reads the active provider, below. + */ + return ( + server !== undefined && + brokeredProvenance(server.provenance) && + server.accountMode !== "shared" + ); +} + +/** The longest action name this page will repeat back. Real ones are far shorter. */ +const MAX_LANDED_ACTION = 200; + +/** + * The action the verifier's redirect says was just authorized, or null. + * + * A TRIMMED, BOUNDED NAME AND NOTHING ELSE: it is read off a query string, which anybody can write + * on this origin, so it is only ever drawn as a quoted name inside this page's own sentence and + * never as a sentence of its own. + */ +export function landedActionFrom(action: string | undefined): string | null { + const trimmed = (action ?? "").trim(); + return trimmed.length > 0 && trimmed.length <= MAX_LANDED_ACTION + ? trimmed + : null; +} + +/** What the landing says about the action somebody has just come back from authorizing. */ +export function landedActionNotice(action: string): string { + return `You just authorized ${action}.`; } /** @@ -57,12 +101,61 @@ export function brokeredFor(server: PluginServer | undefined): boolean { */ export const Route = createFileRoute( "/_authed/settings/connected-accounts/$key", -)({ component: RouteComponent }); +)({ + component: RouteComponent, + /* + * `?action=` is the verifier's redirect saying WHICH action the consent just completed was for, + * so the page can land on it rather than on the app. The key is omitted when absent rather than + * set to undefined, which would make `search` a required prop on every Link to this route. + * + * Read as text whatever the router parsed it into (`searchText`): an action name made of digits + * or shaped like JSON arrives as a number or an object, and a `typeof` guard would land the page + * on the app as though the verifier had never said which action it was. + */ + validateSearch: (search: Record): { action?: string } => + searchTextEntry("action", search.action), +}); function RouteComponent() { const { key } = useParams({ from: "/_authed/settings/connected-accounts/$key", }); + const { action } = useSearch({ + from: "/_authed/settings/connected-accounts/$key", + }); + /* + * `?action=` IS READ ONCE HERE AND DROPPED FROM THE URL BELOW, BUT IT FEEDS TWO THINGS. + * + * Its only sender is the per-action verifier's redirect (`server/src/plugins/routes.ts`), so it is + * a report of a consent that has just completed — news exactly once. Left in the address bar it is + * read again on every reload and back-navigation, and "You just authorized X" is redrawn about a + * consent that may be hours old. That is the omission `index.tsx` closed for its own three report + * parameters. + * + * It is NOT only the notice, though: the same value marks the matching row of the grant list with + * `data-landed`, and that list draws only once its own read answers — which can be well after the + * strip has landed. So the strip is safe only because BOTH readers draw from this snapshot, never + * from the live search: read live, the notice would vanish with the parameter and the grant list + * would come up with nothing marked. The mark is the same news as the notice, so it is right for + * both to outlive the URL for this visit and for both to be gone on a reload. + * + * KEYED ON THE APP, so a snapshot taken on one app's page is never repeated on another's should the + * router keep this component mounted across a change of `$key`. + */ + const [arrival] = useState(() => ({ + key, + landedAction: landedActionFrom(action), + })); + const navigate = Route.useNavigate(); + /* + * ONE NAVIGATE, the same shape as `index.tsx`'s: `search` replaces the whole object, so a strip is + * written as dropping its keys from what is there and keeping the rest, never as a rebuilt object. + * `action` is the only key this route accepts, so it is the only one dropped. + */ + useEffect(() => { + if (action === undefined) return; + navigate({ search: ({ action: _a, ...rest }) => rest, replace: true }); + }, [action, navigate]); const plugins = useQuery(pluginsPageQueryOptions()); const connections = useQuery(connectionsQueryOptions()); const [notice, setNotice] = useState(null); @@ -109,10 +202,51 @@ function RouteComponent() { * only thing here that knows. */ const brokered = brokeredFor(server); + /* + * THE VENDOR'S NAME, from the active provider and never from a row: a deployment with the key set + * and nothing enabled has no row, and a row cannot say which broker holds the account. + */ + const provider = pluginsProvider(plugins.data); + /* + * WHAT A DISCONNECT WOULD ALSO END, asked only while there is an account for it to end. The query + * is gated on the connection and its answer is read only through the same gate, so a cached answer + * from before a disconnect is never drawn beside "Connect". + */ + const siblings = useQuery({ + ...connectionSiblingsQueryOptions(key), + enabled: brokered && connection !== undefined, + }); + const siblingsNotice = + brokered && connection !== undefined && siblings.data + ? disconnectSiblingsNotice(siblings.data) + : null; + /* From the snapshot above and never from the live search, which is stripped. */ + const landedAction = arrival.key === key ? arrival.landedAction : null; + /* + * THE GRANT LIST IS DRAWN WHERE THE BROKER AUTHORIZES PER ACTION, read off the declared + * capability and never off the vendor's name. The server computes `authorizesPerAction` from the + * same expression `/servers/:id/authorize` behind the Authorize button gates on, so the list this + * screen draws and the route its buttons call cannot key on different facts. `provider === + * "arcade"` keyed on a different one: the day a broker named arcade is reached with that flow + * absent, this drew the list and every press 503'd. False on Composio — whose auth config fixes + * one state for the whole toolkit — so every Composio render is unchanged. + */ + const perActionGrants = plugins.data?.authorizesPerAction ?? false; + /* Who is asking only matters to a Shared app's Authorize, so it is not read for anything else. */ + const sharedHere = server?.accountMode === "shared"; + const me = useQuery({ + ...currentUserQueryOptions(), + enabled: perActionGrants && sharedHere, + }).data; + const isAdmin = me?.role === "admin"; + const appNames = [key, server?.title ?? key]; /* Everything the brokered row below reads and does. See `brokered-account-row.tsx`. */ const brokeredAccount = useBrokeredAccount({ authScheme: server?.authScheme ?? null, + /* The same capability the grant list below is drawn on, read once above and passed to both, so + the row's offer and the list's presence cannot come from different facts. */ + authorizesPerAction: perActionGrants, brokered, configured: plugins.data?.composioConfigured ?? false, recorded: connection !== undefined, @@ -218,6 +352,23 @@ function RouteComponent() { if (server?.accountMode === "shared") { return ( + {/* + * THE LANDING NOTICE BELONGS HERE TOO, because a Shared app's account is the deployment's + * and the verifier lands BOTH holders on this page. Without it the one flow whose Authorize + * is admin-only completed a consent at the vendor and came back to a screen that named + * nothing — the grant list's mark alone, several rows down a search box, is not the page + * saying what just happened. + */} + {landedAction ? ( +

+ {landedActionNotice(landedAction)} +

+ ) : null} + {/* One fact, so no heading and no actions: there is nothing here for this person to do. */} @@ -231,6 +382,17 @@ function RouteComponent() { + + {/* State is shown to everyone; minting a consent is the administrator's act. */} + {perActionGrants ? ( + + ) : null} ); } @@ -251,7 +413,7 @@ function RouteComponent() { return ( {notice ? ( @@ -260,6 +422,16 @@ function RouteComponent() {

) : null} + {landedAction ? ( +

+ {landedActionNotice(landedAction)} +

+ ) : null} + {/* One decision, so no heading: it would only repeat the row's own title. */} @@ -268,16 +440,28 @@ function RouteComponent() { /* Said beside the button rather than after it: disconnecting ends the account at Composio, so what it undoes is not the row here but the grant on your own mailbox, and connecting again is a fresh consent. */ - connectedDescription={`A Bot granted its tools reads your ${server.title} as you. Disconnecting ends the account at Composio, not just here.`} - disconnectedDescription={`${reassurance} Connecting takes you to Composio and then to the vendor to consent.`} + connectedDescription={`A Bot granted its tools reads your ${server.title} as you. ${brokeredDisconnectNote(provider)}`} + disconnectedDescription={`${reassurance} ${perActionGrants ? brokeredPerActionTrip(provider, "below") : brokeredConsentTrip(provider)}`} /* What is true either way. The trip to Composio is not — an app whose key somebody types never leaves this page — but which Bots can read this person's mail is the whole point of the screen and holds for both kinds. */ disconnectedReassurance={reassurance} + notice={siblingsNotice ?? undefined} + provider={provider} title={server.title} /> + + {perActionGrants ? ( + + ) : null} ); } diff --git a/app/src/routes/_authed/settings/connected-accounts/index.tsx b/app/src/routes/_authed/settings/connected-accounts/index.tsx index 9eaeea4d2..649dc812f 100644 --- a/app/src/routes/_authed/settings/connected-accounts/index.tsx +++ b/app/src/routes/_authed/settings/connected-accounts/index.tsx @@ -16,12 +16,12 @@ import { } from "@/components/layout/page-shell"; import { RowMark } from "@/components/layout/row-mark"; import { PluginLogo } from "@/components/plugins/plugin-logo"; +import { GithubSources } from "@/components/settings/github-sources"; import { LinkedAccountsSection } from "@/components/settings/linked-accounts"; import { linkedNotice, visibleLinkedNotice, } from "@/components/settings/linked-notice"; -import { GithubSources } from "@/components/settings/github-sources"; import { Button } from "@/components/ui/button"; import { InputGroup, @@ -36,12 +36,14 @@ import { ItemTitle, } from "@/components/ui/item"; import { linkedAccountsQueryOptions } from "@/lib/identity/queries"; +import { keyedLookup } from "@/lib/lookup"; import { connectionsQueryOptions, type PluginServer, personalConnections, pluginsPageQueryOptions, } from "@/lib/plugins/queries"; +import { searchTextEntry } from "@/lib/search-text"; import { clearTeamBotConsentsMutationOptions } from "@/lib/team-bots"; /** @@ -63,24 +65,126 @@ export const Route = createFileRoute("/_authed/settings/connected-accounts/")({ * * The key is omitted rather than set to undefined. Present-but-undefined makes `search` a required * prop on every Link to this route, which is a lot of ripple for a parameter only the callback sets. + * + * EACH IS READ AS TEXT WHATEVER THE ROUTER PARSED IT INTO (`searchText`): the router JSON-parses + * search values, so a server key or reason code that happens to be digits or JSON-shaped arrives + * as a number or an object, and a `typeof` guard would quietly turn the callback's report into + * no report at all. */ validateSearch: ( search: Record, - ): { connected?: string; linked?: string } => ({ - ...(typeof search.connected === "string" - ? { connected: search.connected } - : {}), - ...(typeof search.linked === "string" ? { linked: search.linked } : {}), + ): { connected?: string; authorized?: string; linked?: string } => ({ + ...searchTextEntry("connected", search.connected), + /* + * A CHANNEL OF ITS OWN, BESIDE `?connected=` AND NEVER FOLDED INTO IT. That one is the Composio + * OAuth callback's and carries a server key or `failed`; this one is the brokered per-action + * verifier's and carries a reason code. Two senders answering different questions on one + * parameter is how a notice comes to be drawn for the wrong thing. + */ + ...searchTextEntry("authorized", search.authorized), + ...searchTextEntry("linked", search.linked), }), }); +/** + * WHAT THE VERIFIER REFUSED, IN WORDS — AND THE WORDS LIVE HERE AND NOWHERE ELSE. + * + * THE SENTENCE NEVER TRAVELS IN THE URL. A message rendered from a query string is a message + * anybody can author on this deployment's own origin: a link could be sent around carrying whatever + * sentence its author liked, shown in this page's own voice under this deployment's own address. + * What travels is an opaque code the server chose from a closed set, and this map is the only place + * it becomes something a person reads — which is also what keeps one sentence from being maintained + * in two places that drift apart. + * + * AN UNRECOGNISED CODE DRAWS NOTHING, deliberately. A code this build does not know is either + * somebody probing the parameter or a deployment mid-upgrade, and a generic "something went wrong" + * for both would be a sentence that tells a person nothing and an invitation to keep trying. + * + * A MAP, NOT AN OBJECT, BECAUSE THE KEY COMES OUT OF A URL. An object literal inherits from + * `Object.prototype`, so an object lookup answers `toString`, `constructor` and `__proto__` with + * members nobody put here — none of them nullish, so no `?? null` turns them back into "draws + * nothing", and `Record` says they cannot happen so the compiler never asks. What + * reached the page was a function (an alert with nothing in it) or, for `__proto__`, an object, + * which React refuses to draw: "Objects are not valid as a React child" took the whole Connected + * accounts screen down for whoever opened the link. A `Map` holds only what was put in it, so the + * unrecognised code and the borrowed member are once again the same case, by construction rather + * than by a list of names to keep out. + */ +export const AUTHORIZATION_NOTICES: ReadonlyMap = new Map([ + [ + "no-broker", + "This deployment is not set up to connect apps, so nothing was recorded. Ask an administrator to set it up.", + ], + [ + "not-supported", + "This deployment's apps are connected once for the whole app, with the Connect button on the app's page; they are not authorized one action at a time.", + ], + [ + "missing-handle", + "That link is missing the part that says which authorization it finishes, so nothing was done. Start the authorization again from the app's page.", + ], + [ + "no-attempt", + "There is no authorization in progress for you to finish — it may have expired, or it may have been started by somebody else or in another session. Start it again from the app's page.", + ], + [ + "vendor-unavailable", + "The app's vendor did not answer when this deployment tried to finish that authorization, so nothing was recorded. Try the link again in a moment.", + ], + [ + "not-your-authorization", + "That link does not finish the authorization you have in progress, so nothing was recorded and it is still waiting. Finish it from the tab it was started in, or start it again from the app's page.", + ], + [ + "not-finished", + "That authorization has not finished yet, so nothing was recorded. Finish it at the app's vendor, then open the link again — it is still waiting.", + ], + [ + "authorization-failed", + "The app's vendor did not complete that authorization, so nothing was recorded. Start it again from the app's page.", + ], + [ + "context-changed", + "That app's account changed while the authorization was open, so nothing was recorded and anything granted for the old account was withdrawn. Start it again from the app's page.", + ], + [ + "not-recorded", + "This deployment could not record that authorization, so none of it was saved. Start it again from the app's page, and tell an administrator if it persists.", + ], +]); + +/** The sentence for a code the verifier sent back, or null for one this build does not know. */ +export function authorizationNoticeFor( + authorized: string | undefined, +): string | null { + return authorized + ? (keyedLookup(AUTHORIZATION_NOTICES, authorized) ?? null) + : null; +} + /** The same marks the admin connector list uses: these are the same vendors seen from your side. */ -const MARKS: Record> = { - "google-drive": IconBrandGoogleDrive, - notion: IconBrandNotion, -}; +const MARKS: ReadonlyMap< + string, + React.ComponentType<{ className?: string }> +> = new Map([ + ["google-drive", IconBrandGoogleDrive], + ["notion", IconBrandNotion], +]); + +/* A Map for the same reason the notices above are one: a lookup answers with what was put in it and + * nothing a plain object would have inherited, so a catalogue key called `toString` draws the + * fallback mark rather than handing React `Object.prototype.toString` to render as a component. + * The read goes through `keyedLookup` so the rule has one home rather than one comment per page; + * see `app/src/lib/lookup.ts`. The `?? IconPlug` stays here, because what a missing key draws is + * this page's decision. */ +const markFor = (key: string) => keyedLookup(MARKS, key) ?? IconPlug; -const markFor = (key: string) => MARKS[key] ?? IconPlug; +/** + * Whether a row came through a broker. A deployment only ever holds rows from one provider, so the + * page needs to recognise "brokered", not to know which broker. + */ +const isBrokered = (server: PluginServer): boolean => + server.provenance === "composio" || server.provenance === "arcade"; /** * The brokered apps this page lists, which is not every brokered row. @@ -94,7 +198,7 @@ export function brokeredAccountsListedOn( ): PluginServer[] { return servers.filter( (server) => - server.provenance === "composio" && + isBrokered(server) && server.authScheme !== "NO_AUTH" && server.accountMode !== "shared", ); @@ -105,8 +209,7 @@ export function sharedAccountsListedOn( servers: PluginServer[], ): PluginServer[] { return servers.filter( - (server) => - server.provenance === "composio" && server.accountMode === "shared", + (server) => isBrokered(server) && server.accountMode === "shared", ); } @@ -139,18 +242,51 @@ export function connectedAccountSections( } function RouteComponent() { - const { connected: outcome, linked } = Route.useSearch(); - /* Read once, then dropped from the URL, so a refresh does not repeat the news. */ - const [arrival] = React.useState(() => linkedNotice(linked)); + const { connected: outcome, authorized, linked } = Route.useSearch(); + /* + * ALL THREE READ ONCE HERE, AND ALL THREE DROPPED FROM THE URL BELOW — not just `?linked=`. + * + * Every parameter this screen accepts is a report of something that has already happened: the + * Composio callback's `?connected=`, the brokered verifier's `?authorized=` and the GitHub + * account-link callback's `?linked=`. A report is news exactly once. Left in the address bar it + * is read again on every reload and on every back-navigation, so a failure that is minutes old + * is redrawn as though it had just happened — somebody is told again that their account could + * not be connected, or that there is no authorization in progress, about an attempt they have + * since finished successfully. Only `?linked=` was ever cleaned, which is how the other two came + * to replay. + * + * THE SNAPSHOT IS WHAT THE PAGE DRAWS FROM, and it is why the strip can be unconditional. Read + * live off the search, the notice would vanish the instant the parameter did; held here, the + * sentence outlives the URL it arrived in. That is what `?linked=` was already doing, and the + * other two now do it for the same reason rather than by accident. + */ + const [arrival] = React.useState(() => ({ + outcome, + authorizationNotice: authorizationNoticeFor(authorized), + linked: linkedNotice(linked), + })); /* The same cached list the Linked accounts section reads, so a Disconnect there retracts a success here. */ const links = useQuery(linkedAccountsQueryOptions()); - const notice = visibleLinkedNotice(arrival, links.data); + const notice = visibleLinkedNotice(arrival.linked, links.data); const navigate = Route.useNavigate(); + /* + * ONE NAVIGATE FOR ALL THREE, never one per parameter. `search` replaces the whole object, so two + * effects each dropping their own key race: whichever lands second rebuilds from a snapshot taken + * before the first, and puts the key the first had just removed back. + */ React.useEffect(() => { - if (linked !== undefined) { - navigate({ search: ({ linked: _l, ...rest }) => rest, replace: true }); + if ( + outcome === undefined && + authorized === undefined && + linked === undefined + ) { + return; } - }, [linked, navigate]); + navigate({ + search: ({ connected: _c, authorized: _a, linked: _l, ...rest }) => rest, + replace: true, + }); + }, [outcome, authorized, linked, navigate]); const [search, setSearch] = React.useState(""); const plugins = useQuery(pluginsPageQueryOptions()); const connections = useQuery(connectionsQueryOptions()); @@ -255,7 +391,7 @@ function RouteComponent() { * came back to now reads "Connected", which is the same news told by the thing it is news * about. `?linked=` is different and says both outcomes, through `linkedNotice` below. */} - {outcome === "failed" ? ( + {arrival.outcome === "failed" ? (

That account could not be connected. Nothing was saved — try again.

@@ -271,6 +407,16 @@ function RouteComponent() {

) ) : null} + {/* + * The brokered per-action verifier's own channel. It lands here rather than on an app's page + * because three of its refusals have no app to name, and a notice that sometimes appears one + * level in and sometimes here would be a notice people learn to look for in two places. + */} + {arrival.authorizationNotice ? ( +

+ {arrival.authorizationNotice} +

+ ) : null} {/* * BOTH READS DECIDE THIS, AND ONLY ONE OF THEM USED TO. The waits were already paired here; * the errors were not — this branch tested `plugins.error` alone, so a `/api/plugins` that diff --git a/app/src/routes/sign.tsx b/app/src/routes/sign.tsx index 1d03a7afe..b83b2ec06 100644 --- a/app/src/routes/sign.tsx +++ b/app/src/routes/sign.tsx @@ -12,7 +12,9 @@ import { signInWith, signInWithEmailDomain, } from "@/lib/auth/client"; +import { resumeUrlFor, verifierPathFor } from "@/lib/auth/resume"; import { appConfig } from "@/lib/generated/application-config"; +import { searchTextEntry } from "@/lib/search-text"; import { type AuthProviderId, authProvidersQueryOptions, @@ -26,12 +28,43 @@ const ENTRANCE_STAGGER_SECONDS = 0.08; const ENTRANCE_OFFSET = "translateY(12px)"; export const Route = createFileRoute("/sign")({ - beforeLoad: async ({ context }) => { + /* + * `?flow_id=` is the handle a brokered authorization arrived with, sent here when its session had + * lapsed. It is a value to carry back, never a place to go: see `resumeUrlFor`. + * + * READ AS TEXT WHATEVER THE ROUTER PARSED IT INTO, which is what `searchText` is for: a handle + * made of digits arrives here as a number and a JSON-shaped one as an object, so a `typeof` + * guard would drop the correlation for whichever handles the vendor's generator happens to emit + * — working in testing and losing the return leg's binding in production. + * + * The key is omitted rather than set to undefined, for the reason the connected-accounts screen + * gives for `?connected=`: present-but-undefined makes `search` a required prop on every Link to + * this route, which is a lot of ripple for a parameter only the verifier sets. + */ + validateSearch: (search: Record): { flow_id?: string } => + searchTextEntry("flow_id", search.flow_id), + beforeLoad: async ({ context, search }) => { const user = await context.queryClient.ensureQueryData( currentUserQueryOptions(), ); if (user) { - throw redirect({ to: "/" }); + /* + * Signed in already, so the handle has nowhere to be lost between here and the verifier. + * + * `href` rather than `to` because the verifier is an API path, not a router route — and + * `reloadDocument` because of what follows from that. A redirect the router is left to + * handle is a navigation INSIDE the app: it resolves the href against the route tree, finds + * nothing (there is no route for `/api/…`, and there cannot be — the verifier is served by + * the server, not this build), and `__root.tsx` sends an address it does not know home. The + * person who was part-way through connecting an app would be dropped on the home screen with + * the authorization they started abandoned and nothing said about it, because no request for + * the verifier was ever made. `reloadDocument` makes this a document navigation, which is + * the only kind that leaves the app and therefore the only kind that arrives. + */ + const verifier = verifierPathFor(search.flow_id); + throw verifier + ? redirect({ href: verifier, reloadDocument: true }) + : redirect({ to: "/" }); } // Loaded here so the screen paints with its buttons rather than painting empty and then // growing them, which reads as "no providers" for exactly as long as the request takes. @@ -41,6 +74,7 @@ export const Route = createFileRoute("/sign")({ }); function SignScreen() { + const { flow_id: flowId } = Route.useSearch(); // Which provider is being opened, rather than whether one is: with three buttons, a single // boolean would put "Opening…" on all of them. const [opening, setOpening] = useState(null); @@ -61,7 +95,11 @@ function SignScreen() { setOpening("sso"); try { - await signInWithEmailDomain(email); + await signInWithEmailDomain( + email, + undefined, + resumeUrlFor(window.location.origin, flowId), + ); } catch (caughtError) { setError( caughtError instanceof Error @@ -77,7 +115,11 @@ function SignScreen() { setOpening(provider); try { - await signInWith(provider); + await signInWith( + provider, + undefined, + resumeUrlFor(window.location.origin, flowId), + ); } catch (caughtError) { setError( caughtError instanceof Error diff --git a/app/tests/admin-brokered-row-provider.test.tsx b/app/tests/admin-brokered-row-provider.test.tsx new file mode 100644 index 000000000..ab8bc2f30 --- /dev/null +++ b/app/tests/admin-brokered-row-provider.test.tsx @@ -0,0 +1,193 @@ +import { + afterAll, + afterEach, + beforeAll, + beforeEach, + expect, + test, +} from "bun:test"; +import { GlobalRegistrator } from "@happy-dom/global-registrator"; +import { QueryClient, QueryClientProvider } from "@tanstack/react-query"; +import { + createMemoryHistory, + createRootRoute, + createRoute, + createRouter, + Outlet, + RouterProvider, +} from "@tanstack/react-router"; +import { cleanup, render } from "@testing-library/react"; +import type { PluginServer, PluginsPage } from "@/lib/plugins/queries"; +import { Route as AdminPluginRoute } from "@/routes/_authed/admin/plugins/$key"; + +/** + * The admin app-detail page's brokered row, on each broker (spec D11). + * + * The row is drawn by `BrokeredAccountRow`, which is told the provider by its caller. + * The page already knows the provider, so it must tell the row — in both places it draws one (the + * personal row and the Shared-mode team row). Arcade is scanned over text AND markup; Composio's + * affected sentence is pinned as an exact string. + */ + +beforeAll(() => GlobalRegistrator.register()); +afterEach(cleanup); +afterAll(async () => { + await new Promise((resolve) => setTimeout(resolve, 50)); + await GlobalRegistrator.unregister(); +}); + +const APP = "gmail"; + +function captureRouteState(route: object): Record { + return { ...route, options: { ...(route as { options: object }).options } }; +} +function restoreRouteState( + route: object, + snapshot: Record, +): void { + for (const key of Object.keys(route)) { + if (!(key in snapshot)) { + delete (route as Record)[key]; + } + } + Object.assign(route, snapshot); +} +const pristine = captureRouteState(AdminPluginRoute); +let snapshot: Record; +beforeEach(() => { + snapshot = captureRouteState(pristine); +}); +afterEach(() => { + restoreRouteState(AdminPluginRoute, snapshot); +}); + +type Provider = "composio" | "arcade"; + +function server(provider: Provider, shared: boolean): PluginServer { + return { + authScheme: "OAUTH2", + id: APP, + title: "Gmail", + vendor: "Google", + url: provider === "arcade" ? "arcade://gmail" : "https://example.invalid", + summary: "Mail.", + docsUrl: "", + provenance: provider, + hasCredential: false, + toolsRefreshedAt: null, + lastError: null, + addedBy: null, + dynamicClient: false, + accountMode: shared ? "shared" : null, + sharedVendorConnected: false, + tools: [], + withdrawn: [], + }; +} + +function install(setup: { + provider: Provider; + shared: boolean; + configured: boolean; +}) { + const page: PluginsPage = { + catalogue: [], + servers: [server(setup.provider, setup.shared)], + skills: [], + botsMayCallBack: true, + redirectUri: null, + composioConfigured: setup.configured, + authorizesPerAction: setup.provider === "arcade", + provider: setup.provider, + }; + const json = (body: unknown, status = 200) => + new Response(JSON.stringify(body), { + headers: { "content-type": "application/json" }, + status, + }); + global.fetch = (async (input: RequestInfo | URL) => { + const path = String(input).split("?")[0] ?? ""; + if (path === "/api/plugins") return json(page); + if (path.startsWith("/api/plugins/connections")) + return json({ connections: [], redirectUri: null }); + if (path.startsWith("/api/agents")) return json([]); + return json({ error: "unexpected" }, 404); + }) as typeof fetch; +} + +function renderScreen() { + const rootRoute = createRootRoute({ component: Outlet }); + const authedRoute = createRoute({ + id: "/_authed", + getParentRoute: () => rootRoute, + component: Outlet, + }); + const adminRoute = createRoute({ + path: "/admin", + getParentRoute: () => authedRoute, + component: Outlet, + }); + const indexRoute = createRoute({ + path: "/plugins/", + getParentRoute: () => adminRoute, + component: () => null, + }); + const wired = ( + AdminPluginRoute as unknown as { + update: (options: unknown) => typeof AdminPluginRoute; + } + ).update({ + id: "/plugins/$key", + path: "/plugins/$key", + getParentRoute: () => adminRoute, + }); + const router = createRouter({ + routeTree: rootRoute.addChildren([ + authedRoute.addChildren([adminRoute.addChildren([indexRoute, wired])]), + ]), + history: createMemoryHistory({ initialEntries: [`/admin/plugins/${APP}`] }), + }); + return render( + + + , + ); +} + +/** Every string the page puts in front of anyone: its text AND its markup, attributes included. */ +function everythingRendered(view: ReturnType): string { + return `${view.container.textContent ?? ""}\n${view.container.innerHTML}`; +} + +/** Waits for the row only, whichever broker it names: the assertions below do the judging. */ +const WAIT_FOR_ROW = /^Set [A-Z]+_API_KEY on this deployment\./; + +const COMPOSIO_KEY_MISSING = + "Set COMPOSIO_API_KEY on this deployment. Without it there is no broker to reach, so this account can be neither connected nor ended from here. The app stays enabled and every grant on its tools still stands."; +const ARCADE_KEY_MISSING = + "Set ARCADE_API_KEY on this deployment. Without it there is no broker to reach, so this account can be neither connected nor ended from here. The app stays enabled and every grant on its tools still stands."; + +for (const shared of [false, true]) { + const row = shared ? "team row" : "personal row"; + + test(`on an Arcade deployment the admin page's brokered ${row} says nothing of Composio`, async () => { + install({ provider: "arcade", shared, configured: false }); + const view = renderScreen(); + await view.findByText(WAIT_FOR_ROW); + const rendered = everythingRendered(view); + expect(rendered).not.toMatch(/composio/i); + expect(rendered).not.toContain("COMPOSIO_API_KEY"); + expect(rendered).toContain(ARCADE_KEY_MISSING); + }); + + test(`on a Composio deployment the admin page's brokered ${row} renders its sentence verbatim`, async () => { + install({ provider: "composio", shared, configured: false }); + const view = renderScreen(); + await view.findByText(WAIT_FOR_ROW); + expect(view.container.textContent).toContain(COMPOSIO_KEY_MISSING); + }); +} diff --git a/app/tests/admin-plugins-vocabulary-wiring.test.ts b/app/tests/admin-plugins-vocabulary-wiring.test.ts new file mode 100644 index 000000000..f242a52ae --- /dev/null +++ b/app/tests/admin-plugins-vocabulary-wiring.test.ts @@ -0,0 +1,144 @@ +// app/tests/admin-plugins-vocabulary-wiring.test.ts +/** + * Guard: the admin plugins pages CALL the provider vocabulary; they do not + * re-hardcode a vendor name. + * + * WHY: arcade-admin-plugins.test.tsx pins every string the vocabulary + * functions return, but nothing pinned that `index.tsx` and `$key.tsx` actually + * call them. A guard on return values without one on call sites reads as + * coverage while protecting nothing: a later edit can paste "Composio" straight + * back into the JSX, every vocabulary test stays green, and an Arcade + * deployment shows a Composio-named screen (spec D11: screens show the ACTIVE + * provider only; this PR changes no Composio behaviour). It is the same + * argument the server-side vendor-name guard makes about catching one spelling + * of a mistake and not the other. + * + * Reads the route sources as TEXT (like arcade-no-browser-calls.test.ts) and + * imports nothing from them. Comments are stripped first, so docblocks may + * still explain the vendor. Then: + * 1. NO route file under the plugins directory contains a capitalised + * "Composio" NOR the all-caps "COMPOSIO" (string literal, JSX text or test + * id). `composio.tsx` USED to be exempt, on the argument that the route is + * Composio-gated by construction. The screen it held has moved to + * `components/plugins/broker-directory.tsx`, so the file holds no vendor + * literal and the exemption has no reason left — and an exemption kept + * after its reason has gone is an escape hatch waiting to be used a second + * time. + * The rule scans EVERY route file (`ALL_ROUTES`, enumerated from the + * directory), not a hand-kept list: an un-scanned sibling is the same + * escape hatch by omission, and `arcade.tsx` — the likeliest place for + * a pasted "Composio" — would have been one. + * 2. NO route file contains a hard-coded `/admin/plugins/composio` or + * `/admin/plugins/arcade` navigation target. THIS IS THE LOWERCASE + * SPELLING RULE (1) CANNOT SEE, and it is the one that stranded the + * enablement notes: `index.tsx` linked every deployment, Arcade ones + * included, at the Composio directory, which redirected them straight + * back — so two measured warnings rendered on no deployment that exists. + * The path belongs in `providerVocabulary().directoryPath`, whose literal + * union is checked against the generated route tree. Each file's own + * `createFileRoute("/_authed/admin/plugins/…")` id is not a navigation + * target and is excluded by the `_authed` prefix. + * 3. each vocabulary function appears in the file that should call it. + * + * If this goes red, route the string through provider-vocabulary.ts; do not + * loosen the guard. The scanned-count and file-length assertions stop it + * passing vacuously. + */ +import { expect, test } from "bun:test"; +import { readFileSync } from "node:fs"; +import { join } from "node:path"; +import { + logicalLines, + sourceFiles, + stripComments, +} from "../../server/tests/support/source-scan"; + +const DIR = join(import.meta.dir, "../src/routes/_authed/admin/plugins"); + +function load(name: string): string { + return stripComments(readFileSync(join(DIR, name), "utf8")); +} + +/** + * Every route file under the directory, so a new one is scanned the day it lands — and a new one + * in a SUBdirectory too, which a `readdirSync` of the top level would have walked straight past. + * Names are relative to `DIR`, so a top-level route still reads as `arcade.tsx`. + */ +const ALL_ROUTES = sourceFiles(DIR, [".tsx"]).map((p) => + p.slice(DIR.length + 1), +); + +const VOCAB_CALLERS: Record = { + "index.tsx": [ + "moreAppsRow", + "moreAppsSectionDescription", + "providerVocabulary", + ], + "$key.tsx": [ + "brokeredConnectionDescription", + "brokeredReach", + "brokeredDisconnectNote", + "brokeredProvenance", + ], + "composio.tsx": ["directoryRouteDecision"], + "arcade.tsx": ["directoryRouteDecision"], +}; + +// Self-extending, like rule 2: a hand-kept list is an un-scanned sibling waiting to happen, and +// the Arcade route is the likeliest place for a "Composio" literal to be pasted into. +const NO_VENDOR_LITERAL = ALL_ROUTES; + +test("the plugins routes carry no Composio literal", () => { + // Every route file in the directory is scanned (no exemptions; arcade.tsx and the $key_.* + // children included). The floor and the two named files keep the scan from passing on an + // empty or truncated list. + expect(NO_VENDOR_LITERAL.length).toBeGreaterThanOrEqual(6); + expect(NO_VENDOR_LITERAL).toContain("arcade.tsx"); + expect(NO_VENDOR_LITERAL).toContain("composio.tsx"); + const offenders: string[] = []; + for (const name of NO_VENDOR_LITERAL) { + const text = load(name); + expect(text.length).toBeGreaterThan(500); + for (const { line: at, text: line } of logicalLines(text)) { + // Capitalised AND all-caps. `COMPOSIO_API_KEY` is a user-visible string 1.8 moved + // into the vocabulary (`envVar`), rendered as "Set COMPOSIO_API_KEY on this + // deployment." — it must read ARCADE_API_KEY on an Arcade deployment, and an + // env-var name is exactly the string an editor inlines as a constant. NOT + // case-insensitive: `composioConfigured` and the `/_authed/admin/plugins/composio` + // route id are legitimate and must stay legal. + if (/Composio|COMPOSIO/.test(line)) + offenders.push(`${name}:${at}: ${line.trim()}`); + } + } + expect(offenders).toEqual([]); +}); + +test("no plugins route hard-codes a directory path", () => { + expect(ALL_ROUTES.length).toBeGreaterThanOrEqual(6); + expect(ALL_ROUTES).toContain("arcade.tsx"); + expect(ALL_ROUTES).toContain("composio.tsx"); + const offenders: string[] = []; + for (const name of ALL_ROUTES) { + const text = load(name); + expect(text.length).toBeGreaterThan(500); + for (const { line: at, text: line } of logicalLines(text)) { + // The route's own file id carries `_authed` and is not somewhere anybody navigates. + if (/(? { + expect(Object.keys(VOCAB_CALLERS).length).toBe(4); + const missing: string[] = []; + for (const [name, fns] of Object.entries(VOCAB_CALLERS)) { + const text = load(name); + for (const fn of fns) { + if (!new RegExp(`\\b${fn}\\(`).test(text)) + missing.push(`${name} -> ${fn}`); + } + } + expect(missing).toEqual([]); +}); diff --git a/app/tests/arcade-admin-plugins.test.tsx b/app/tests/arcade-admin-plugins.test.tsx new file mode 100644 index 000000000..8915e1a4e --- /dev/null +++ b/app/tests/arcade-admin-plugins.test.tsx @@ -0,0 +1,131 @@ +import { expect, test } from "bun:test"; +import { + brokeredConnectionDescription, + brokeredDisconnectNote, + brokeredProvenance, + brokeredReach, + directoryRouteDecision, + moreAppsRow, + moreAppsSectionDescription, + providerVocabulary, +} from "@/lib/plugins/provider-vocabulary"; +import type { PluginsPage } from "@/lib/plugins/queries"; + +/** + * The admin Plugins screens carry the ACTIVE provider's vocabulary only (spec D11). Everything here + * is a pure function, so nothing renders. + */ + +const page = (provider?: "composio" | "arcade") => + ({ provider }) as PluginsPage; + +test("an Arcade deployment names Arcade and carries nothing Composio-specific", () => { + const everything = JSON.stringify([ + providerVocabulary("arcade"), + moreAppsRow("arcade", true), + moreAppsRow("arcade", false), + moreAppsSectionDescription("arcade"), + brokeredConnectionDescription("arcade"), + brokeredReach("arcade"), + brokeredDisconnectNote("arcade"), + ]); + expect(everything).not.toMatch(/composio/i); + expect(providerVocabulary("arcade").envVar).toBe("ARCADE_API_KEY"); + expect(providerVocabulary("arcade").directoryPath).toBe( + "/admin/plugins/arcade", + ); + expect(brokeredProvenance("arcade")).toBe(true); +}); + +test("a Composio deployment keeps today's exact wording", () => { + expect(providerVocabulary("composio")).toEqual({ + name: "Composio", + directoryLabel: "Browse Composio", + envVar: "COMPOSIO_API_KEY", + directoryPath: "/admin/plugins/composio", + // Composio's configured-branch sentence, verbatim: it used to be a literal inside a + // `provider === "composio"` branch in `moreAppsRow`, and moving it here is what let that + // branch go. + directoryDescription: + "A few hundred apps, reached as whoever is asking. Each person connects their own account.", + }); + expect(moreAppsSectionDescription("composio")).toBe( + "A directory this deployment has not reviewed, reached through Composio.", + ); + expect(moreAppsRow("composio", true)).toEqual({ + title: "Browse Composio", + description: + "A few hundred apps, reached as whoever is asking. Each person connects their own account.", + linked: true, + }); + expect(moreAppsRow("composio", false)).toEqual({ + title: "Composio", + description: + "Add your Composio key to enable a catalogue of tools. Set COMPOSIO_API_KEY on this deployment.", + linked: false, + }); + expect(brokeredConnectionDescription("composio")).toBe( + "Reached through Composio, which holds each person's own account.", + ); + expect(brokeredReach("composio")).toEqual({ + description: + "This app is reached through Composio, which holds the account. This deployment sends one key and the name of whoever is asking, so each person connects their own and a Bot sees only what that person can see. There is no token to paste.", + badge: "Through Composio", + }); + expect(brokeredDisconnectNote("composio")).toBe( + "Disconnecting ends the account at Composio, not just here.", + ); +}); + +test("the vocabulary follows the provider rather than being hard-coded", () => { + expect(moreAppsRow("arcade", false).title).toBe("Arcade"); + expect(moreAppsRow("arcade", false).description).toContain("ARCADE_API_KEY"); + expect(brokeredReach("arcade").badge).toBe("Through Arcade"); + expect(brokeredDisconnectNote("arcade")).toContain("Arcade"); +}); + +/* + * THE ROW GOES SOMEWHERE ON BOTH DEPLOYMENTS. It used to link only on Composio, because only + * Composio had a directory screen — so on an Arcade deployment the one route that draws the D8 + * coverage warning and the D32 breadth line was unreachable, and two measured warnings rendered + * nowhere. `linked` now follows the configuration and never the vendor. + */ +test("a configured deployment links to its own directory, whichever provider it is", () => { + expect(moreAppsRow("arcade", true)).toEqual({ + title: "Browse Arcade", + // Arcade's own sentence: it claims no app count, because nobody here has counted Arcade's. + description: + "A directory this deployment has not reviewed, reached as whoever is asking. Each person connects their own account.", + linked: true, + }); + expect(moreAppsRow("composio", true).linked).toBe(true); + // And an unconfigured row still goes nowhere, because there is nowhere to go until the key is set. + expect(moreAppsRow("arcade", false).linked).toBe(false); + expect(moreAppsRow("composio", false).linked).toBe(false); +}); + +test("each provider's directory path is its own route", () => { + expect(providerVocabulary("composio").directoryPath).toBe( + "/admin/plugins/composio", + ); + expect(providerVocabulary("arcade").directoryPath).toBe( + "/admin/plugins/arcade", + ); +}); + +test("brokered-ness is read off the row and needs no provider", () => { + expect(brokeredProvenance("composio")).toBe(true); + expect(brokeredProvenance("arcade")).toBe(true); + expect(brokeredProvenance("custom")).toBe(false); + expect(brokeredProvenance("first-party")).toBe(false); +}); + +test("the Composio directory route does not answer on an Arcade deployment", () => { + expect(directoryRouteDecision("composio", page("arcade"))).toBe("redirect"); + expect(directoryRouteDecision("arcade", page("composio"))).toBe("redirect"); + expect(directoryRouteDecision("composio", page("composio"))).toBe("render"); + // An older server that did not say is Composio. + expect(directoryRouteDecision("composio", page(undefined))).toBe("render"); + // Not answering before the page says which provider this is. + expect(directoryRouteDecision("composio", undefined)).toBe("pending"); +}); diff --git a/app/tests/arcade-breadth.test.tsx b/app/tests/arcade-breadth.test.tsx new file mode 100644 index 000000000..da7a6b69e --- /dev/null +++ b/app/tests/arcade-breadth.test.tsx @@ -0,0 +1,148 @@ +import { expect, test } from "bun:test"; +import { renderToStaticMarkup } from "react-dom/server"; +import fixture from "../../server/tests/fixtures/arcade-catalogue.json"; +import type { ComposioApp } from "@/lib/plugins/queries"; +import { BreadthNote } from "@/components/plugins/broker-directory"; +import { consentBreadth } from "@/lib/plugins/enablement-notes"; + +/** + * The D32 consent-breadth line on the enablement screen. Derived from the three measured counts and + * nothing else; `null` is not-measured and draws nothing, which is the opposite of a measured zero. + */ + +type FixtureTool = { + toolkit: { name: string }; + requirements?: { authorization?: { oauth2?: { scopes?: string[] } } }; +}; + +/** The counts as the SERVER folds them (`listApps`): distinct non-empty sorted scope sets. */ +function fromFixture(toolkit: string): ComposioApp { + const tools = (Object.values(fixture.tools) as FixtureTool[]).filter( + (tool) => tool.toolkit.name === toolkit, + ); + const sets = tools + .map((tool) => tool.requirements?.authorization?.oauth2?.scopes ?? []) + .filter((scopes) => scopes.length > 0); + return app({ + name: toolkit, + actionCount: tools.length, + permissionCount: new Set(sets.map((s) => [...s].sort().join(" "))).size, + scopedActionCount: sets.length, + }); +} + +function app(overrides: Partial = {}): ComposioApp { + return { + slug: "app", + name: "App", + description: "", + logo: null, + categories: [], + actionCount: 1, + classifiedCount: null, + permissionCount: null, + scopedActionCount: null, + enabled: false, + ...overrides, + }; +} + +/* + * THE SINGULAR OF THE NO-PERMISSION CASE, which is the only branch that had none while its siblings + * all did. Apollo is the fixture's one `permissionCount: 0` toolkit and it has exactly one action, + * so the sentence that shipped read "approving any action in this app approves all 1 of them" — a + * grammatical error on the single shape a real catalogue actually produces. Pinned to the exact + * string, because `/approves/` is what let it through. + */ +test("Apollo (no permissions, one action) says the app is the action", () => { + const apollo = fromFixture("Apollo"); + expect([apollo.permissionCount, apollo.actionCount]).toEqual([0, 1]); + expect(consentBreadth(apollo)).toBe( + "This app has a single action, and approving it approves the app.", + ); +}); + +test("the plural wholly-unscoped case says all N of them", () => { + expect( + consentBreadth( + app({ actionCount: 43, permissionCount: 0, scopedActionCount: 0 }), + ), + ).toBe("Approving any action in this app approves all 43 of them."); +}); + +test("Asana and Attio are fully scoped: one permission across one action", () => { + for (const name of ["Asana", "Attio"]) { + const toolkit = fromFixture(name); + expect([ + toolkit.permissionCount, + toolkit.scopedActionCount, + toolkit.actionCount, + ]).toEqual([1, 1, 1]); + expect(consentBreadth(toolkit)).toBe( + "This app uses 1 separate permission across 1 action.", + ); + } +}); + +test("more than one permission, fully scoped", () => { + expect( + consentBreadth( + app({ actionCount: 30, permissionCount: 4, scopedActionCount: 30 }), + ), + ).toBe("This app uses 4 separate permissions across 30 actions."); +}); + +test("AirtableApi is the mixed shape: names the further K that need no permission", () => { + const airtable = fromFixture("AirtableApi"); + expect([ + airtable.permissionCount, + airtable.scopedActionCount, + airtable.actionCount, + ]).toEqual([1, 1, 2]); + expect(consentBreadth(airtable)).toBe( + "This app uses 1 separate permission across 2 actions. A further 1 requests no permission of its own and becomes callable with any approval here.", + ); +}); + +test("the mixed shape with several further actions", () => { + expect( + consentBreadth( + app({ actionCount: 10, permissionCount: 2, scopedActionCount: 6 }), + ), + ).toBe( + "This app uses 2 separate permissions across 10 actions. A further 4 request no permission of their own and become callable with any approval here.", + ); +}); + +test("any null count draws nothing, never a zero", () => { + const measured = { permissionCount: 2, scopedActionCount: 2, actionCount: 2 }; + for (const nulled of ["permissionCount", "scopedActionCount"] as const) { + const unmeasured = app({ ...measured, [nulled]: null }); + expect(consentBreadth(unmeasured)).toBeNull(); + expect(renderToStaticMarkup()).toBe(""); + } +}); + +test("it renders on the enablement step, before enabling", () => { + const html = renderToStaticMarkup( + , + ); + expect(html).toContain('data-testid="breadth-note"'); + expect(html).toContain("1 separate permission across 2 actions"); +}); + +test("no copy promises confinement", () => { + const shapes = [ + app({ actionCount: 1, permissionCount: 0, scopedActionCount: 0 }), + app({ actionCount: 3, permissionCount: 0, scopedActionCount: 0 }), + app({ actionCount: 3, permissionCount: 2, scopedActionCount: 3 }), + app({ actionCount: 3, permissionCount: 2, scopedActionCount: 1 }), + ]; + for (const shape of shapes) { + expect(consentBreadth(shape)).not.toMatch( + /confin|only (the|that|this)|just (the|that|this)|limited to|isolat|least.privilege|restricted to|nothing else/i, + ); + } +}); diff --git a/app/tests/arcade-consent-copy.test.tsx b/app/tests/arcade-consent-copy.test.tsx new file mode 100644 index 000000000..6d34395d5 --- /dev/null +++ b/app/tests/arcade-consent-copy.test.tsx @@ -0,0 +1,197 @@ +import { expect, test } from "bun:test"; +import fixture from "../../server/tests/fixtures/arcade-catalogue.json"; +import { + consentCopy, + type ConsentAction, +} from "@/lib/plugins/enablement-notes"; +import { + consentActionsFrom, + type GrantState, + groupGrants, +} from "@/lib/plugins/grants"; + +/** + * The copy shown before redirecting somebody to a consent screen (spec D30). The action list is + * DERIVED by grouping on `scopes`; the fixture is evidence and is never appended to, so shapes it + * does not carry (a shared scope across actions) are constructed inline. + */ + +type FixtureTool = { + qualified_name: string; + toolkit: { name: string }; + requirements?: { authorization?: { oauth2?: { scopes?: string[] } } }; +}; + +/** + * The fixture rows an approval covers, as `ConsentAction`s. A row publishing no authorization block + * (`Apollo`) is NOT one: nothing withholds it, so no approval approves it — the same line + * `coveredByApproval` draws over the grants answer. + */ +function fromFixture(toolkit: string): ConsentAction[] { + return (Object.values(fixture.tools) as FixtureTool[]) + .filter((tool) => tool.toolkit.name === toolkit) + .filter((tool) => tool.requirements?.authorization != null) + .map((tool) => ({ + name: tool.qualified_name, + scopes: tool.requirements?.authorization?.oauth2?.scopes ?? [], + })); +} + +const gmail: ConsentAction[] = [ + { name: "Gmail.ListEmails", scopes: ["gmail.readonly"] }, + { name: "Gmail.ListThreads", scopes: ["gmail.readonly"] }, + { name: "Gmail.GetThread", scopes: ["gmail.readonly"] }, + { name: "Gmail.SendEmail", scopes: ["gmail.send"] }, +]; + +test("scoped: names the permission and lists the actions grouped on that scope", () => { + const copy = consentCopy("Gmail.ListEmails", gmail); + expect(copy.scopes).toEqual(["gmail.readonly"]); + expect(copy.alsoEnables).toEqual(["Gmail.GetThread", "Gmail.ListThreads"]); + expect(copy.sentence).toContain("gmail.readonly"); + expect(copy.sentence).toContain("also enables"); + expect(copy.sentence).toContain("Gmail.GetThread, Gmail.ListThreads"); + expect(copy.sentence).not.toContain("Gmail.SendEmail"); + // The list follows the data: change a scope and the list changes with it. + const moved = gmail.map((a) => + a.name === "Gmail.GetThread" ? { ...a, scopes: ["gmail.modify"] } : a, + ); + expect(consentCopy("Gmail.ListEmails", moved).alsoEnables).toEqual([ + "Gmail.ListThreads", + ]); +}); + +test("scoped, from the fixture: a lone scope set lists no sibling", () => { + const asana = fromFixture("Asana"); + const copy = consentCopy(asana[0]!.name, asana); + expect(copy.scopes).toEqual(["default"]); + expect(copy.alsoEnables).toEqual([]); + expect(copy.sentence).toContain("No other action requires it."); +}); + +test("unscoped: all-or-nothing, with the count derived", () => { + // Apollo publishes no authorization at all, so there is nothing of it for an approval to cover. + expect(fromFixture("Apollo")).toEqual([]); + expect( + consentCopy("Github.Only", [{ name: "Github.Only", scopes: [] }]).sentence, + ).toContain("approving this approves its single action"); + const forty3 = Array.from({ length: 43 }, (_, i) => ({ + name: `Github.Action${i}`, + scopes: [], + })); + expect(consentCopy("Github.Action0", forty3).sentence).toContain( + "This app cannot separate permissions; approving this approves all 43.", + ); + expect(consentCopy("Github.Action0", forty3.slice(0, 7)).sentence).toContain( + "approves all 7.", + ); +}); + +test("an unscoped action in a scoped app is not worded as a permission", () => { + const airtable = fromFixture("AirtableApi"); + const bare = airtable.find((a) => a.scopes.length === 0)!; + const copy = consentCopy(bare.name, airtable); + expect(copy.scopes).toEqual([]); + expect(copy.sentence).toContain("requests no permission of its own"); +}); + +test("no copy promises confinement", () => { + const shapes = [ + consentCopy("Gmail.ListEmails", gmail), + consentCopy("Gmail.SendEmail", gmail), + consentCopy("Apollo.X", [{ name: "Apollo.X", scopes: [] }]), + consentCopy( + "G.A", + Array.from({ length: 43 }, (_, i) => ({ name: `G.A${i}`, scopes: [] })), + ), + consentCopy("Missing", gmail), + ]; + for (const shape of shapes) { + expect(shape.sentence).not.toMatch( + /confin|only (the|that|this)|just (the|that|this)|limited to|isolat|least.privilege|restricted to|nothing else/i, + ); + } +}); + +/** + * WHAT "N" MEANS in "approving this approves all N": the actions an approval genuinely covers — + * those still waiting on one and those whose authorization is held — and never an action that needs + * no authorization, which nothing withheld and no approval grants. + * + * Pinned against the COMPOSITION of the grants answer rather than a number: for every mix of + * covered and no-auth actions, N is the covered count read off the fixture by its `authorization` + * field, and adding no-auth actions never moves it. Counting the no-auth actions in — the drift the + * server's reading of an absent authorization block once caused silently — reddens every row with + * one or more of them. + */ +test("N counts what an approval covers, and no action that needs no authorization", () => { + for (const covered of [2, 3, 5]) { + for (const needsNone of [0, 1, 4]) { + const grants: GrantState[] = [ + ...Array.from( + { length: covered }, + (_, i): GrantState => + i % 2 === 0 + ? { + action: `Tk.Covered${i}`, + state: "needs-consent", + scopes: [], + } + : { + action: `Tk.Covered${i}`, + state: "authorized", + scopes: [], + authorization: "held", + }, + ), + ...Array.from( + { length: needsNone }, + (_, i): GrantState => ({ + action: `Tk.Free${i}`, + state: "authorized", + scopes: [], + authorization: "not-required", + }), + ), + { action: "Tk.Blocked", state: "needs-operator", missing: ["KEY"] }, + ]; + const expected = grants.filter( + (grant) => + grant.state === "needs-consent" || + (grant.state === "authorized" && grant.authorization === "held"), + ).length; + const actions = consentActionsFrom(grants); + expect(actions.map((action) => action.name).sort()).toEqual( + Array.from({ length: covered }, (_, i) => `Tk.Covered${i}`).sort(), + ); + expect(consentCopy("Tk.Covered0", actions).sentence).toContain( + `approving this approves all ${expected}.`, + ); + } + } +}); + +test("the whole-app group holds the same set the count does, and draws no-auth actions apart", () => { + const grants: GrantState[] = [ + { action: "Tk.A", state: "needs-consent", scopes: [] }, + { action: "Tk.B", state: "authorized", scopes: [], authorization: "held" }, + { + action: "Tk.Free", + state: "authorized", + scopes: [], + authorization: "not-required", + }, + ]; + const groups = groupGrants(grants); + const together = groups.find((group) => group.kind === "whole-app"); + expect(together?.grants.map((grant) => grant.action).sort()).toEqual( + consentActionsFrom(grants) + .map((action) => action.name) + .sort(), + ); + expect( + groups + .find((group) => group.kind === "none") + ?.grants.map((grant) => grant.action), + ).toEqual(["Tk.Free"]); +}); diff --git a/app/tests/arcade-coverage.test.tsx b/app/tests/arcade-coverage.test.tsx new file mode 100644 index 000000000..2bb809044 --- /dev/null +++ b/app/tests/arcade-coverage.test.tsx @@ -0,0 +1,96 @@ +import { expect, test } from "bun:test"; +import { renderToStaticMarkup } from "react-dom/server"; +import fixture from "../../server/tests/fixtures/arcade-catalogue.json"; +import type { ComposioApp } from "@/lib/plugins/queries"; +import { CoverageNote } from "@/components/plugins/broker-directory"; +import { coverageWarning } from "@/lib/plugins/enablement-notes"; + +/** + * The D8 coverage warning on the enablement screen. Driven by `classifiedCount` against + * `actionCount` and nothing else: `0` is measured-and-none (warn), `null` is not measured (silent). + */ + +type FixtureTool = { + toolkit: { name: string }; + metadata?: { behavior?: unknown }; +}; + +/** + * The counts for a toolkit as the SERVER would have measured them. The fixture is evidence of what + * Arcade returns; this folds it the way `listApps` does (a tool is classified when it carries + * behavior metadata), so the app under test is built from real tools, not a literal. + */ +function fromFixture(toolkit: string): ComposioApp { + const tools = (Object.values(fixture.tools) as FixtureTool[]).filter( + (tool) => tool.toolkit.name === toolkit, + ); + return app({ + slug: toolkit.toLowerCase(), + name: toolkit, + actionCount: tools.length, + classifiedCount: tools.filter((tool) => tool.metadata?.behavior).length, + }); +} + +function app(overrides: Partial & { slug: string }): ComposioApp { + return { + name: "App", + description: "", + logo: null, + categories: [], + actionCount: 1, + classifiedCount: null, + permissionCount: null, + scopedActionCount: null, + enabled: false, + ...overrides, + }; +} + +test("the curated toolkit Apollo (1/1 classified) shows no warning", () => { + const apollo = fromFixture("Apollo"); + expect([apollo.classifiedCount, apollo.actionCount]).toEqual([1, 1]); + expect(coverageWarning(apollo)).toBeNull(); + expect(renderToStaticMarkup()).toBe(""); +}); + +test("the generated toolkit AirtableApi (0/2 classified) renders the warning on its row", () => { + const airtable = fromFixture("AirtableApi"); + expect([airtable.classifiedCount, airtable.actionCount]).toEqual([0, 2]); + expect(coverageWarning(airtable)).toMatch(/destructive write/); + expect(renderToStaticMarkup()).toContain( + "approval", + ); + // Phrased as what it feels like, never as a percentage. + expect(coverageWarning(airtable)).not.toMatch(/%|\d/); +}); + +test("a 0-classified toolkit renamed WITHOUT the Api suffix still warns", () => { + const renamed = { ...fromFixture("AirtableApi"), name: "Airtable" }; + expect(coverageWarning(renamed)).not.toBeNull(); +}); + +test("a classified toolkit WITH the Api suffix does not warn", () => { + expect( + coverageWarning( + app({ + slug: "x", + name: "DatadogApi", + actionCount: 5, + classifiedCount: 5, + }), + ), + ).toBeNull(); +}); + +test("classifiedCount null draws nothing", () => { + const unmeasured = app({ slug: "s", name: "SlackApi", actionCount: 40 }); + expect(coverageWarning(unmeasured)).toBeNull(); + expect(renderToStaticMarkup()).toBe(""); +}); + +test("a measured zero over no actions is not a warning", () => { + expect( + coverageWarning(app({ slug: "e", actionCount: 0, classifiedCount: 0 })), + ).toBeNull(); +}); diff --git a/app/tests/arcade-directory-screen.test.tsx b/app/tests/arcade-directory-screen.test.tsx new file mode 100644 index 000000000..95f4a2006 --- /dev/null +++ b/app/tests/arcade-directory-screen.test.tsx @@ -0,0 +1,204 @@ +import { afterAll, afterEach, beforeAll, expect, test } from "bun:test"; +import { GlobalRegistrator } from "@happy-dom/global-registrator"; +import { QueryClient, QueryClientProvider } from "@tanstack/react-query"; +import { + createMemoryHistory, + createRootRoute, + createRoute, + createRouter, + Outlet, + RouterProvider, +} from "@tanstack/react-router"; +import { cleanup, render, waitFor } from "@testing-library/react"; +import fixture from "../../server/tests/fixtures/arcade-catalogue.json"; +import { Route as ArcadeRoute } from "@/routes/_authed/admin/plugins/arcade"; + +/** + * THE MEASURED LINES, ON A SCREEN SOMEBODY CAN REACH. + * + * The coverage warning and the consent-breadth line were computed, unit-tested and rendered by + * nothing: they live on the directory row, and the only directory route redirected away on every + * Arcade deployment while the only provider that publishes the counts is Arcade. A warning computed + * and never shown is the same as no warning, and a feature nobody can navigate to is not shipped. + * + * So this renders the ARCADE route against an Arcade payload and reads the two sentences out of the + * markup. Nothing here imports a pure function: a passing pure function is exactly what this defect + * already had. + * + * The app under test is `AirtableApi`, folded out of `server/tests/fixtures/arcade-catalogue.json` + * the way `listApps` folds it — 2 actions, 0 classified, 1 distinct scope set over 1 scoped action. + * The fixture is evidence of what Arcade returns and is read, never appended to. + */ + +beforeAll(() => GlobalRegistrator.register()); +afterEach(cleanup); +afterAll(() => GlobalRegistrator.unregister()); + +const originalFetch = global.fetch; +afterEach(() => { + global.fetch = originalFetch; +}); + +type FixtureTool = { + toolkit: { name: string }; + metadata?: { behavior?: unknown }; + requirements?: { authorization?: { oauth2?: { scopes?: string[] } } }; +}; + +/** `AirtableApi` as the SERVER measures it, out of the recorded catalogue. */ +function airtableFromFixture() { + const tools = (Object.values(fixture.tools) as FixtureTool[]).filter( + (tool) => tool.toolkit.name === "AirtableApi", + ); + const sets = tools + .map((tool) => tool.requirements?.authorization?.oauth2?.scopes ?? []) + .filter((scopes) => scopes.length > 0); + return { + slug: "airtableapi", + name: "AirtableApi", + description: "Airtable, generated.", + logo: null, + categories: [], + actionCount: tools.length, + classifiedCount: tools.filter((tool) => tool.metadata?.behavior).length, + permissionCount: new Set(sets.map((s) => [...s].sort().join(" "))).size, + scopedActionCount: sets.length, + enabled: false, + }; +} + +/* + * Capture and restore of the exported `Route` singleton, verbatim from + * `composio-route-plugins-error.test.tsx` and for the reason recorded there: `.update()` merges into + * the live object and nothing re-runs `init()` on a replay. + */ +const originalOptions = { ...ArcadeRoute.options }; +afterEach(() => { + Object.assign(ArcadeRoute.options, originalOptions); +}); + +function renderDirectory() { + const rootRoute = createRootRoute({ component: Outlet }); + const authedRoute = createRoute({ + id: "/_authed", + getParentRoute: () => rootRoute, + component: Outlet, + }); + const adminRoute = createRoute({ + path: "/admin", + getParentRoute: () => authedRoute, + component: Outlet, + }); + const pluginsRoute = createRoute({ + path: "/plugins/", + getParentRoute: () => adminRoute, + component: () =>

the plugins index

, + }); + const wired = ( + ArcadeRoute as unknown as { + update: (options: unknown) => typeof ArcadeRoute; + } + ).update({ + id: "/plugins/arcade", + path: "/plugins/arcade", + getParentRoute: () => adminRoute, + }); + const tree = rootRoute.addChildren([ + authedRoute.addChildren([adminRoute.addChildren([pluginsRoute, wired])]), + ]); + const router = createRouter({ + routeTree: tree, + history: createMemoryHistory({ initialEntries: ["/admin/plugins/arcade"] }), + }); + return render( + + + , + ); +} + +/** A stub answering the page read with `provider`, and the directory with one app. */ +function stubFetch(provider: string | undefined, apps: unknown[]) { + global.fetch = (async (input: RequestInfo | URL) => { + const path = String(input).split("?")[0] ?? ""; + const json = (body: unknown) => + new Response(JSON.stringify(body), { + status: 200, + headers: { "content-type": "application/json" }, + }); + if (path === "/api/plugins/composio/apps") return json({ apps }); + if (path === "/api/plugins") { + return json({ + catalogue: [], + servers: [], + skills: [], + botsMayCallBack: false, + redirectUri: null, + composioConfigured: true, + provider, + }); + } + return json({ connections: [] }); + }) as unknown as typeof fetch; +} + +test("the Arcade directory renders the coverage warning and the breadth line on a measured app", async () => { + stubFetch("arcade", [airtableFromFixture()]); + const view = renderDirectory(); + + const row = await view.findByTestId("directory-airtableapi"); + + // Not pending, not a redirect: the screen itself. + expect(view.queryByText("the plugins index")).toBeNull(); + expect(view.getByText("Browse Arcade")).toBeTruthy(); + + await waitFor(() => { + expect(row.textContent).toContain( + "This provider has not said which of its actions only read, so every action is treated as a destructive write and every call will ask for approval.", + ); + }); + expect(row.textContent).toContain( + "This app uses 1 separate permission across 2 actions. A further 1 requests no permission of its own and becomes callable with any approval here.", + ); +}); + +test("the Arcade directory redirects on a Composio deployment", async () => { + stubFetch("composio", []); + const view = renderDirectory(); + + await waitFor(() => { + expect(view.getByText("the plugins index")).toBeTruthy(); + }); + expect(view.queryByLabelText("Search Arcade apps")).toBeNull(); +}); + +test("the Arcade directory draws nothing until the page names a provider", async () => { + let release: () => void = () => undefined; + const held = new Promise((resolve) => { + release = resolve; + }); + global.fetch = (async (input: RequestInfo | URL) => { + if (String(input).split("?")[0] === "/api/plugins") await held; + return new Response(JSON.stringify({ apps: [] }), { + status: 200, + headers: { "content-type": "application/json" }, + }); + }) as unknown as typeof fetch; + + const view = renderDirectory(); + expect(view.queryByLabelText("Search Arcade apps")).toBeNull(); + expect(view.queryByText("the plugins index")).toBeNull(); + expect(view.queryByRole("alert")).toBeNull(); + release(); + // Drain what the release started. The deferred stub answers `{ apps: [] }`, which carries no + // `provider`, so `pluginsProvider` defaults to "composio" and this route redirects to the decoy. + // Awaiting that here is what keeps React's scheduled work INSIDE the test: released and then + // abandoned, the render lands after `cleanup` and after `GlobalRegistrator.unregister()` has + // removed `window`, and `scheduler`'s `window.event` throws into the runner — three passes and + // an exit code of 1, on the one file that proves wave 8's deliverable. + await view.findByText("the plugins index"); +}); diff --git a/app/tests/arcade-index.test.tsx b/app/tests/arcade-index.test.tsx new file mode 100644 index 000000000..d64cd7086 --- /dev/null +++ b/app/tests/arcade-index.test.tsx @@ -0,0 +1,63 @@ +import { expect, test } from "bun:test"; +import type { PluginServer } from "@/lib/plugins/queries"; +import { + brokeredAccountsListedOn, + sharedAccountsListedOn, +} from "@/routes/_authed/settings/connected-accounts/index"; + +/** + * The Connected accounts index lists brokered rows from either broker. A deployment holds rows from + * only one provider, so the browser needs no provider switch: it only needs to recognise "brokered". + */ + +function server(overrides: Partial & { id: string }) { + return { + title: "App", + summary: "", + vendor: "Arcade", + url: `arcade://${overrides.id}`, + provenance: "arcade", + authScheme: "OAUTH2", + tools: [], + ...overrides, + } as PluginServer; +} + +const ids = (rows: PluginServer[]) => rows.map((row) => row.id); + +test("Arcade rows are listed by both functions under the same rules", () => { + const rows = [ + server({ id: "arcade-gmail" }), + server({ id: "arcade-noauth", authScheme: "NO_AUTH" }), + server({ id: "arcade-team", accountMode: "shared" }), + ]; + expect(ids(brokeredAccountsListedOn(rows))).toEqual(["arcade-gmail"]); + expect(ids(sharedAccountsListedOn(rows))).toEqual(["arcade-team"]); +}); + +test("Composio rows are listed exactly as before", () => { + const rows = [ + server({ id: "composio-gmail", provenance: "composio" }), + server({ + id: "composio-noauth", + provenance: "composio", + authScheme: "NO_AUTH", + }), + server({ + id: "composio-team", + provenance: "composio", + accountMode: "shared", + }), + ]; + expect(ids(brokeredAccountsListedOn(rows))).toEqual(["composio-gmail"]); + expect(ids(sharedAccountsListedOn(rows))).toEqual(["composio-team"]); +}); + +test("a row of neither provenance is excluded by both", () => { + const rows = [ + server({ id: "custom-a", provenance: "custom" }), + server({ id: "custom-b", provenance: "custom", accountMode: "shared" }), + ]; + expect(brokeredAccountsListedOn(rows)).toEqual([]); + expect(sharedAccountsListedOn(rows)).toEqual([]); +}); diff --git a/app/tests/arcade-no-browser-calls.test.ts b/app/tests/arcade-no-browser-calls.test.ts new file mode 100644 index 000000000..c1f2df571 --- /dev/null +++ b/app/tests/arcade-no-browser-calls.test.ts @@ -0,0 +1,63 @@ +// app/tests/arcade-no-browser-calls.test.ts +/** + * Guard: no browser code under `app/src` ever dials Arcade. + * + * WHY: the vendor key never leaves the server and the browser never talks to + * Arcade (spec D25). The grant-status route exists precisely so a browser asks + * OpenBot rather than the vendor. A direct dial from `app/` would either need + * the deployment's key in the bundle or would leak which identities have flows + * outstanding. + * + * Flags any line that imports `@arcadeai/arcadejs` (static, dynamic `import(`, + * or `require(`), names an `arcade.dev` host, or names an Arcade API path. + * + * NOT AN OFFENCE: an `arcade://` url string. That is a brokered row's url, as + * the server hands it to the browser, and is not a network target. It is + * excluded explicitly below (and does not match the host pattern anyway); do + * not widen the host pattern to bare "arcade" or this guard starts crying wolf + * and gets weakened. + * + * EXPECTED GREEN. Unlike brokered-provenance.test.ts (committed RED as a + * checklist), no browser Arcade code exists, so this passes from the start. + * If it goes red, remove the offending browser code; do not loosen the guard. + * The scan-count assertion stops it passing vacuously against an empty walk. + */ +import { expect, test } from "bun:test"; +import { readFileSync } from "node:fs"; +import { join } from "node:path"; +import { + logicalLines, + sourceFiles, +} from "../../server/tests/support/source-scan"; + +const SRC_DIR = join(import.meta.dir, "../src"); + +const PATTERNS: RegExp[] = [ + /@arcadeai\/arcadejs/, + /\barcade\.dev\b/, + /\/v1\/tools\/execute/, + /\/v1\/tools\/authorize/, + /oauth\/confirm_user/, +]; + +// `arcade://` is a row url, not a dial. Blanked before matching. +const ROW_URL = /arcade:\/\/\S*/g; + +test("no browser code under app/src dials Arcade", () => { + // Enumeration and line-splitting come from the shared scanner, so the walk is recursive (a + // future `src//` is scanned the day it lands) and a dial prettier wrapped across two + // physical lines is one line to the patterns. Comments are deliberately NOT stripped: a + // docblock naming `arcade.dev` is still this guard's business. + const files = sourceFiles(SRC_DIR, [".ts", ".tsx"]); + expect(files.length).toBeGreaterThan(50); + const offenders: string[] = []; + for (const file of files) { + for (const { line, text } of logicalLines(readFileSync(file, "utf8"))) { + const scanned = text.replace(ROW_URL, ""); + if (PATTERNS.some((re) => re.test(scanned))) { + offenders.push(`${file.slice(SRC_DIR.length + 1)}:${line}`); + } + } + } + expect(offenders).toEqual([]); +}); diff --git a/app/tests/auth-client.test.ts b/app/tests/auth-client.test.ts index 86a7ede9a..2ae0bf7af 100644 --- a/app/tests/auth-client.test.ts +++ b/app/tests/auth-client.test.ts @@ -1,5 +1,9 @@ import { describe, expect, test } from "bun:test"; -import { providerName, signInWith } from "@/lib/auth/client"; +import { + providerName, + signInWith, + signInWithEmailDomain, +} from "@/lib/auth/client"; /* * A browser origin, which the sign-in call needs for its callback URL and this environment has no @@ -45,6 +49,32 @@ describe("signInWith", () => { expect(callbackURL).toBe("http://localhost:3010"); }); + /** + * A callbackURL that was asked for is the one that gets used. + * + * THE DEFAULT ABOVE IS NOT THE PROPERTY. Pinning only the no-argument case leaves the whole + * resume mechanism untested: a body that builds `window.location.origin` for itself and never + * reads its third parameter passes "sends the browser back where it started" exactly as this + * one does, and the brokered flow somebody was signing back in to resume ends at the home + * screen with the verifier never asked for. The URL asserted here is the shape + * `resumeUrlFor` produces, since that is the only caller that passes one. + */ + test("carries the callbackURL it was given, not the origin", async () => { + const resume = "http://localhost:3010/api/plugins/arcade/verify?flow_id=h1"; + let asked = ""; + + await signInWith( + "google", + async (input) => { + asked = input.callbackURL; + return {}; + }, + resume, + ); + + expect(asked).toBe(resume); + }); + test("throws what the client said when it refuses", async () => { const refuse = async () => ({ error: { message: "That provider is not configured." }, @@ -74,6 +104,83 @@ describe("signInWith", () => { }); }); +/** + * Starting sign-in through whichever identity provider covers an address. + * + * The SSO leg had no test of its own, and the screen test that drives it replaces this module, so + * everything below was unpinned: the address could have been dropped, the callbackURL discarded, + * the refusal swallowed. It is the same call as `signInWith` with a different first argument, and + * it carries the resume URL for the same reason — somebody whose session lapsed mid-authorization + * signs back in through their company's IdP and has to land on the verifier, not on the home + * screen. + */ +describe("signInWithEmailDomain", () => { + test("hands the address to the starter", async () => { + let asked = ""; + + await signInWithEmailDomain("someone@company.com", async (input) => { + asked = input.email; + return {}; + }); + + expect(asked).toBe("someone@company.com"); + }); + + test("sends the browser back where it started", async () => { + let callbackURL = ""; + + await signInWithEmailDomain("someone@company.com", async (input) => { + callbackURL = input.callbackURL; + return {}; + }); + + expect(callbackURL).toBe("http://localhost:3010"); + }); + + /** The resume half, for the reason given over the same test for `signInWith`. */ + test("carries the callbackURL it was given, not the origin", async () => { + const resume = "http://localhost:3010/api/plugins/arcade/verify?flow_id=h1"; + let asked = ""; + + await signInWithEmailDomain( + "someone@company.com", + async (input) => { + asked = input.callbackURL; + return {}; + }, + resume, + ); + + expect(asked).toBe(resume); + }); + + test("throws what the client said when it refuses", async () => { + const refuse = async () => ({ + error: { message: "That domain is registered to another tenant." }, + }); + + expect( + signInWithEmailDomain("someone@company.com", refuse), + ).rejects.toThrow("That domain is registered to another tenant."); + }); + + test("says no provider is registered when the client says nothing", async () => { + const refuse = async () => ({ error: {} }); + + expect( + signInWithEmailDomain("someone@company.com", refuse), + ).rejects.toThrow("No identity provider is registered for that address."); + }); + + test("resolves quietly when the redirect is under way", async () => { + expect( + signInWithEmailDomain("someone@company.com", async () => ({ + error: null, + })), + ).resolves.toBeUndefined(); + }); +}); + describe("providerName", () => { test("gives each provider the name people call it", () => { expect(providerName("google")).toBe("Google"); diff --git a/app/tests/bot-app-grants-screen.test.tsx b/app/tests/bot-app-grants-screen.test.tsx index 8fb4f3ac8..56f6b22b8 100644 --- a/app/tests/bot-app-grants-screen.test.tsx +++ b/app/tests/bot-app-grants-screen.test.tsx @@ -148,6 +148,7 @@ function pluginsPage(overrides: Partial = {}): PluginsPage { botsMayCallBack: true, redirectUri: null, composioConfigured: false, + authorizesPerAction: false, ...overrides, }; } diff --git a/app/tests/brokered-account-row.test.tsx b/app/tests/brokered-account-row.test.tsx index 1c1811fd8..97b95f558 100644 --- a/app/tests/brokered-account-row.test.tsx +++ b/app/tests/brokered-account-row.test.tsx @@ -195,6 +195,7 @@ function pluginsPage( botsMayCallBack: true, redirectUri: null, composioConfigured, + authorizesPerAction: false, }; } @@ -1168,6 +1169,7 @@ test("the row names the app rather than calling it the app", async () => { */ function accountState(overrides: Partial): BrokeredAccount { return { + authorizesPerAction: false, configured: true, connect: () => {}, connected: false, @@ -1215,6 +1217,7 @@ function renderRow(account: BrokeredAccount) { account={account} connectedDescription="A Bot granted its tools reads your Gmail as you." disconnectedDescription="No Bot can read this as you." + provider="composio" title="Gmail" />, ); @@ -1248,6 +1251,54 @@ test("both kinds say Connected, and the line beneath says how", () => { ).toBeTruthy(); }); +test("a per-action broker offers no whole-app Connect, and still offers Disconnect", () => { + /* + * THE DEFECT THIS CLOSES, FOUND BY PRESSING THE BUTTON AND NOT BY ANY TEST. Both screens drew + * this row unconditionally, so under Arcade a disconnected app offered Connect — and the adapter + * refuses an authorization carrying no action, so the press could only ever come back with + * "Arcade grants per action, so an authorization needs the action it is for and none was given." + * Every time, with no state in which it could succeed, and with the thing the person actually + * wanted sitting in the list underneath. + */ + const disconnected = renderRow( + accountState({ authorizesPerAction: true, kind: "consent" }), + ); + + expect(disconnected.queryByRole("button", { name: /Connect/ })).toBeNull(); + expect(disconnected.getByText("Approved per action")).toBeTruthy(); + + cleanup(); + + /* + * AND THE OTHER HALF OF THE ROW IS UNTOUCHED, which is the part worth guarding. Per-action + * authorizations still add up to ONE account at the vendor, `revoke` is a real act on it, and + * this row is the only place it is offered — so withholding Disconnect along with Connect would + * strand somebody holding a live connection with no way to end it. + */ + const connected = renderRow( + accountState({ + authorizesPerAction: true, + connected: true, + kind: "consent", + }), + ); + + expect(connected.getByText("Connected")).toBeTruthy(); + expect(connected.getByRole("button", { name: "Disconnect" })).toBeTruthy(); + expect(connected.queryByText("Approved per action")).toBeNull(); +}); + +test("a whole-app broker keeps its Connect", () => { + /* + * THE OTHER SIDE OF THE GATE, so the case above cannot pass by the row having lost Connect + * outright. Composio fixes one auth state for a whole toolkit, and one press is the whole story. + */ + const view = renderRow(accountState({ kind: "consent" })); + + expect(view.getByRole("button", { name: /Connect/ })).toBeTruthy(); + expect(view.queryByText("Approved per action")).toBeNull(); +}); + test("an app needing no account offers nothing to press", () => { const view = renderRow(accountState({ kind: "no-auth" })); @@ -2496,6 +2547,7 @@ function AccountProbe() { verifiedAt: null, probe: null, checkable: true, + authorizesPerAction: false, authScheme: "API_KEY", returnTo: "settings", report: () => {}, diff --git a/app/tests/composio-picker-add-error.test.tsx b/app/tests/composio-picker-add-error.test.tsx index 16b38f6f2..3eac88d81 100644 --- a/app/tests/composio-picker-add-error.test.tsx +++ b/app/tests/composio-picker-add-error.test.tsx @@ -176,8 +176,9 @@ test("an add that fails while a second one is pressed still says what went wrong const view = renderPicker(); // Both rows, in the order the screen sorts them: Gmail then Slack. - const slackRow = await view.findByTestId("composio-slack"); - const gmailRow = await view.findByTestId("composio-gmail"); + // `directory-…`, not `composio-…`: one provider-blind screen draws both brokers' directories. + const slackRow = await view.findByTestId("directory-slack"); + const gmailRow = await view.findByTestId("directory-gmail"); // The press that will fail, held open by the stub. await userEvent.click( diff --git a/app/tests/composio-picker.test.tsx b/app/tests/composio-picker.test.tsx index d61747b05..af85edd7b 100644 --- a/app/tests/composio-picker.test.tsx +++ b/app/tests/composio-picker.test.tsx @@ -1,6 +1,6 @@ import { expect, test } from "bun:test"; import type { ComposioApp } from "@/lib/plugins/queries"; -import { matchingApps } from "@/routes/_authed/admin/plugins/composio"; +import { matchingApps } from "@/lib/plugins/enablement-notes"; /** * What the Composio picker lists, decided without drawing anything. @@ -10,10 +10,10 @@ import { matchingApps } from "@/routes/_authed/admin/plugins/composio"; * decision actually rests on — whether the app is already here, and how much it brings with it — * arrive at the row intact. * - * A `.tsx` file because it imports a route module, which is JSX; the precedent is - * `agent-roster-error.test.tsx`. Nothing here renders, though — `matchingApps` is exported as a - * function rather than left inline in the map for exactly that reason, so the ordering and the - * already-added marker can be asserted without a DOM, a router or a query client. + * Nothing here renders — `matchingApps` is exported as a function rather than left inline in the + * map for exactly that reason, so the ordering and the already-added marker can be asserted without + * a DOM, a router or a query client. It now lives in `lib/plugins/enablement-notes.ts`, which is a + * plain `.ts` module for the same reason. */ /** A minimal but complete `ComposioApp`, overridable per case. */ @@ -24,6 +24,12 @@ function app(overrides: Partial & { slug: string }): ComposioApp { logo: null, categories: [], actionCount: 1, + // Required and nullable, never optional: a null is "not measured", which is a different fact + // from a zero's "measured, and none". A default here would have to pick one, so it picks the + // one a provider that publishes nothing actually answers with. + classifiedCount: null, + permissionCount: null, + scopedActionCount: null, enabled: false, ...overrides, }; diff --git a/app/tests/composio-route-plugins-error.test.tsx b/app/tests/composio-route-plugins-error.test.tsx new file mode 100644 index 000000000..410a9ab53 --- /dev/null +++ b/app/tests/composio-route-plugins-error.test.tsx @@ -0,0 +1,109 @@ +import { afterAll, afterEach, beforeAll, expect, test } from "bun:test"; +import { GlobalRegistrator } from "@happy-dom/global-registrator"; +import { QueryClient, QueryClientProvider } from "@tanstack/react-query"; +import { + createMemoryHistory, + createRootRoute, + createRoute, + createRouter, + Outlet, + RouterProvider, +} from "@tanstack/react-router"; +import { cleanup, render } from "@testing-library/react"; +import { Route as ComposioRoute } from "@/routes/_authed/admin/plugins/composio"; + +/** + * A FAILED `/api/plugins` READ SAYS SO, rather than drawing a blank page. + * + * The route holds back until the plugins page names the provider, and `useQuery` leaves `data` + * undefined permanently on an error, so without its own branch the gate answers "pending" forever. + * The directory must also stay undrawn: it would request apps from a provider nobody confirmed. + */ + +beforeAll(() => GlobalRegistrator.register()); +afterEach(cleanup); +afterAll(() => GlobalRegistrator.unregister()); + +const originalFetch = global.fetch; +afterEach(() => { + global.fetch = originalFetch; +}); + +const requested: string[] = []; + +/* + * Capture and restore of the exported `Route` singleton, verbatim from `agent-roster-error.test.tsx` + * and `brokered-account-row.test.tsx` and for the reason recorded there: `.update()` merges into the + * live object, `createRouter()` derives `_id`/`parentRoute` off it, and nothing re-runs `init()` on + * a replay — so a render here would otherwise leave the real router pointed at a decoy parent. + */ +const originalOptions = { ...ComposioRoute.options }; +afterEach(() => { + Object.assign(ComposioRoute.options, originalOptions); +}); + +function renderPicker() { + const rootRoute = createRootRoute({ component: Outlet }); + const authedRoute = createRoute({ + id: "/_authed", + getParentRoute: () => rootRoute, + component: Outlet, + }); + const adminRoute = createRoute({ + path: "/admin", + getParentRoute: () => authedRoute, + component: Outlet, + }); + const pluginsRoute = createRoute({ + path: "/plugins/", + getParentRoute: () => adminRoute, + component: () => null, + }); + const wired = ( + ComposioRoute as unknown as { + update: (options: unknown) => typeof ComposioRoute; + } + ).update({ + id: "/plugins/composio", + path: "/plugins/composio", + getParentRoute: () => adminRoute, + }); + const tree = rootRoute.addChildren([ + authedRoute.addChildren([adminRoute.addChildren([pluginsRoute, wired])]), + ]); + const router = createRouter({ + routeTree: tree, + history: createMemoryHistory({ + initialEntries: ["/admin/plugins/composio"], + }), + }); + return render( + + + , + ); +} + +test("a failed plugins read renders an alert and never asks for the directory", async () => { + requested.length = 0; + global.fetch = (async (input: RequestInfo | URL) => { + const path = String(input).split("?")[0] ?? ""; + requested.push(path); + return new Response(JSON.stringify({ error: "boom" }), { + status: 500, + headers: { "content-type": "application/json" }, + }); + }) as unknown as typeof fetch; + + const view = renderPicker(); + + const alert = await view.findByRole("alert"); + expect(alert.textContent).toContain("plugin settings could not be read"); + expect(view.queryByLabelText("Search Composio apps")).toBeNull(); + expect(requested).toContain("/api/plugins"); + expect(requested).not.toContain("/api/plugins/composio/apps"); +}); diff --git a/app/tests/connected-account-confirmation.test.tsx b/app/tests/connected-account-confirmation.test.tsx new file mode 100644 index 000000000..730f6fd18 --- /dev/null +++ b/app/tests/connected-account-confirmation.test.tsx @@ -0,0 +1,410 @@ +import { + afterAll, + afterEach, + beforeAll, + beforeEach, + expect, + test, +} from "bun:test"; +import { GlobalRegistrator } from "@happy-dom/global-registrator"; +import { QueryClient, QueryClientProvider } from "@tanstack/react-query"; +import { + createMemoryHistory, + createRootRoute, + createRoute, + createRouter, + Outlet, + RouterProvider, +} from "@tanstack/react-router"; +import { cleanup, render } from "@testing-library/react"; +import { + brokeredAccountPageDescription, + brokeredConsentTrip, + brokeredDisconnectNote, + brokeredKeyMissing, + disconnectSiblingsNotice, +} from "@/lib/plugins/provider-vocabulary"; +import type { PluginServer, PluginsPage } from "@/lib/plugins/queries"; +import { + landedActionFrom, + Route as ConnectedAccountRoute, +} from "@/routes/_authed/settings/connected-accounts/$key"; + +/** + * The page a person reads before deciding to grant or end access to a mailbox, on each broker. + * + * Three things are pinned, and the first two are RENDERED markup because a sentence computed and + * never drawn is not shipped: the sibling list names what a Disconnect would also end and draws + * NOTHING when there is none; an Arcade deployment's page never says Composio, in text or in + * attributes; and a Composio deployment's three vendor sentences are character-for-character what + * they were. The fourth is the landing parameter the verifier's redirect carries. + */ + +beforeAll(() => GlobalRegistrator.register()); +afterEach(cleanup); +afterAll(async () => { + // Let React's scheduler drain before the DOM globals it reads go away. + await new Promise((resolve) => setTimeout(resolve, 50)); + await GlobalRegistrator.unregister(); +}); + +const APP = "gmail"; + +function captureRouteState(route: object): Record { + return { ...route, options: { ...(route as { options: object }).options } }; +} +function restoreRouteState( + route: object, + snapshot: Record, +): void { + for (const key of Object.keys(route)) { + if (!(key in snapshot)) { + delete (route as Record)[key]; + } + } + Object.assign(route, snapshot); +} +const pristine = captureRouteState(ConnectedAccountRoute); +let snapshot: Record; +beforeEach(() => { + snapshot = captureRouteState(pristine); +}); +afterEach(() => { + restoreRouteState(ConnectedAccountRoute, snapshot); +}); + +type Provider = "composio" | "arcade"; + +function server(provider: Provider): PluginServer { + return { + authScheme: "OAUTH2", + id: APP, + title: "Gmail", + vendor: "Google", + url: provider === "arcade" ? "arcade://gmail" : "https://example.invalid", + summary: "Mail.", + docsUrl: "", + provenance: provider, + hasCredential: false, + toolsRefreshedAt: null, + lastError: null, + addedBy: null, + dynamicClient: false, + accountMode: null, + sharedVendorConnected: false, + tools: [], + withdrawn: [], + }; +} + +type Setup = { + provider: Provider; + connected: boolean; + configured?: boolean; + siblings?: { siblings: string[]; unanswered: number }; + /** Whether the siblings read answers 500. */ + siblingsFail?: boolean; + /** + * Whether the deployment's broker authorizes per action, the capability the grant list is gated + * on. Defaults to what the named provider's broker declares today, so a case that says nothing + * about it gets the deployment it has always meant; set it against the name to build the + * deployment where the two DISAGREE. + */ + authorizesPerAction?: boolean; +}; + +const siblingReads: string[] = []; + +function install(setup: Setup) { + siblingReads.length = 0; + const page: PluginsPage = { + catalogue: [], + servers: [server(setup.provider)], + skills: [], + botsMayCallBack: true, + redirectUri: null, + composioConfigured: setup.configured ?? true, + authorizesPerAction: + setup.authorizesPerAction ?? setup.provider === "arcade", + provider: setup.provider, + }; + const json = (body: unknown, status = 200) => + new Response(JSON.stringify(body), { + headers: { "content-type": "application/json" }, + status, + }); + global.fetch = (async (input: RequestInfo | URL) => { + const path = String(input).split("?")[0] ?? ""; + if (path === "/api/plugins") return json(page); + if (path.startsWith("/api/plugins/connections")) { + return json({ + connections: setup.connected + ? [ + { + serverId: APP, + scope: "", + connectedAt: "2026-09-10T00:00:00.000Z", + verified: true, + verifiedAt: null, + checkable: false, + }, + ] + : [], + redirectUri: null, + }); + } + if (path.endsWith("/connection/siblings")) { + siblingReads.push(path); + if (setup.siblingsFail) return json({ error: "no" }, 500); + return json(setup.siblings ?? { siblings: [], unanswered: 0 }); + } + if (path.endsWith("/connection/confirm")) + return json({ connected: setup.connected }); + return json({ error: "unexpected" }, 404); + }) as typeof fetch; +} + +function renderScreen(search = "") { + const rootRoute = createRootRoute({ component: Outlet }); + const authedRoute = createRoute({ + id: "/_authed", + getParentRoute: () => rootRoute, + component: Outlet, + }); + const settingsRoute = createRoute({ + path: "/settings", + getParentRoute: () => authedRoute, + component: Outlet, + }); + const indexRoute = createRoute({ + path: "/connected-accounts/", + getParentRoute: () => settingsRoute, + component: () => null, + }); + const wired = ( + ConnectedAccountRoute as unknown as { + update: (options: unknown) => typeof ConnectedAccountRoute; + } + ).update({ + id: "/connected-accounts/$key", + path: "/connected-accounts/$key", + getParentRoute: () => settingsRoute, + }); + const router = createRouter({ + routeTree: rootRoute.addChildren([ + authedRoute.addChildren([settingsRoute.addChildren([indexRoute, wired])]), + ]), + history: createMemoryHistory({ + initialEntries: [`/settings/connected-accounts/${APP}${search}`], + }), + }); + return render( + + + , + ); +} + +/** Every string the page puts in front of anyone: its text AND its markup, attributes included. */ +function everythingRendered(view: ReturnType): string { + return `${view.container.textContent ?? ""}\n${view.container.innerHTML}`; +} + +const COMPOSIO_PAGE = + "Reached through Composio, which holds the account, so a Bot sees only what you can see."; +const COMPOSIO_DISCONNECT_NOTE = + "Disconnecting ends the account at Composio, not just here."; +const COMPOSIO_CONSENT_TRIP = + "Connecting takes you to Composio and then to the vendor to consent."; + +// ---- 1 and 2: the sibling list, rendered ---- + +test("a connected app with siblings NAMES each of them in the confirmation", async () => { + install({ + provider: "arcade", + connected: true, + siblings: { siblings: ["googlecalendar", "googledocs"], unanswered: 0 }, + }); + const view = renderScreen(); + await view.findByText(/googlecalendar/); + const text = view.container.textContent ?? ""; + expect(text).toContain("googlecalendar"); + expect(text).toContain("googledocs"); + expect(text).toContain( + "Disconnecting also ends your access to googlecalendar and googledocs, which share this connection.", + ); + expect(text).not.toContain("gmail,"); +}); + +test("with no siblings NO sibling copy appears at all, not an empty block", async () => { + install({ + provider: "arcade", + connected: true, + siblings: { siblings: [], unanswered: 0 }, + }); + const view = renderScreen(); + await view.findByText("Disconnect"); + // The read has happened, and answered empty. + await new Promise((resolve) => setTimeout(resolve, 50)); + expect(siblingReads.length).toBeGreaterThan(0); + const text = view.container.textContent ?? ""; + expect(text).not.toContain("also ends"); + expect(text).not.toContain("could not be checked"); + expect(text).not.toContain("share this connection"); + // No second description under the row's own: the notice slot is not drawn. + const descriptions = view.container.querySelectorAll( + '[data-slot="item-description"]', + ); + expect(descriptions.length).toBe(1); +}); + +test("a Composio deployment always answers empty, so it draws no sibling copy either", async () => { + install({ provider: "composio", connected: true }); + const view = renderScreen(); + await view.findByText("Disconnect"); + await new Promise((resolve) => setTimeout(resolve, 50)); + expect(view.container.textContent).not.toContain("also ends"); +}); + +test("apps that could not be asked about are a count and never names", () => { + expect(disconnectSiblingsNotice({ siblings: [], unanswered: 0 })).toBeNull(); + expect(disconnectSiblingsNotice({ siblings: ["slack"], unanswered: 2 })).toBe( + "Disconnecting also ends your access to slack, which shares this connection. 2 other apps could not be checked and may be affected too.", + ); + expect(disconnectSiblingsNotice({ siblings: [], unanswered: 1 })).toBe( + "1 app on this connection could not be checked, so disconnecting may end it too.", + ); +}); + +test("the sibling list is not drawn once there is no account for a Disconnect to end", async () => { + install({ + provider: "arcade", + connected: false, + siblings: { siblings: ["googledocs"], unanswered: 0 }, + }); + const view = renderScreen(); + /* + * WAITED ON AS A RENDER SIGNAL AND NOT AS THE SUBJECT: this case is about the sibling list and + * the read behind it. It used to wait on "Connect", which this deployment no longer draws — + * Arcade authorizes per action, so the row withholds a whole-app Connect that could only reach + * the adapter's refusal. The row's disconnected state is what is being waited for either way. + */ + await view.findByText("Approved per action"); + expect(view.container.textContent).not.toContain("googledocs"); + expect(siblingReads.length).toBe(0); +}); + +// ---- 3: Arcade never says Composio ---- + +for (const connected of [true, false]) { + for (const configured of [true, false]) { + test(`on an Arcade deployment NO rendered string says Composio (connected=${connected}, configured=${configured})`, async () => { + install({ + provider: "arcade", + connected, + configured, + siblings: { siblings: ["googledocs"], unanswered: 1 }, + }); + const view = renderScreen("?action=Gmail.ListEmails"); + await view.findAllByText(/Arcade/); + if (connected && configured) await view.findByText(/googledocs/); + const rendered = everythingRendered(view); + expect(rendered).not.toMatch(/composio/i); + if (!configured) expect(rendered).toContain("ARCADE_API_KEY"); + }); + } +} + +test("on an Arcade deployment the three sentences name Arcade", () => { + expect(brokeredAccountPageDescription("arcade")).toBe( + "Reached through Arcade, which holds the account, so a Bot sees only what you can see.", + ); + expect(brokeredDisconnectNote("arcade")).toBe( + "Disconnecting ends the account at Arcade, not just here.", + ); + expect(brokeredConsentTrip("arcade")).toBe( + "Connecting takes you to Arcade and then to the vendor to consent.", + ); +}); + +// ---- 4: Composio is byte-identical ---- + +test("on Composio the three vendor sentences are exactly what they always were", () => { + expect(brokeredAccountPageDescription("composio")).toBe(COMPOSIO_PAGE); + expect(brokeredDisconnectNote("composio")).toBe(COMPOSIO_DISCONNECT_NOTE); + expect(brokeredConsentTrip("composio")).toBe(COMPOSIO_CONSENT_TRIP); + expect(brokeredKeyMissing("composio")).toBe( + "Set COMPOSIO_API_KEY on this deployment. Without it there is no broker to reach, so this account can be neither connected nor ended from here. The app stays enabled and every grant on its tools still stands.", + ); +}); + +test("a connected Composio page renders its sentences verbatim", async () => { + install({ provider: "composio", connected: true }); + const view = renderScreen(); + await view.findByText(/Disconnecting ends the account/); + const text = view.container.textContent ?? ""; + expect(text).toContain(COMPOSIO_PAGE); + expect(text).toContain( + `Connected through Gmail's consent screen. A Bot granted its tools reads your Gmail as you. ${COMPOSIO_DISCONNECT_NOTE}`, + ); +}); + +test("a disconnected Composio page renders its sentences verbatim", async () => { + install({ provider: "composio", connected: false }); + const view = renderScreen(); + await view.findByText(/Connecting takes you to/); + const text = view.container.textContent ?? ""; + expect(text).toContain(COMPOSIO_PAGE); + expect(text).toContain( + `No Bot can read this as you. ${COMPOSIO_CONSENT_TRIP}`, + ); +}); + +// ---- 5: the landing parameter ---- + +test("a redirect carrying an action marks that action", async () => { + install({ provider: "arcade", connected: true }); + const view = renderScreen("?action=Gmail.ListEmails"); + const marked = await view.findByRole("status"); + expect(marked.textContent).toBe("You just authorized Gmail.ListEmails."); + expect(marked.getAttribute("data-landed-action")).toBe("Gmail.ListEmails"); +}); + +test("a landing without an action behaves as it did", async () => { + install({ provider: "arcade", connected: true }); + const view = renderScreen(); + await view.findByText("Disconnect"); + expect(view.queryByRole("status")).toBeNull(); + expect(view.container.textContent).not.toContain("just authorized"); +}); + +test("validateSearch omits the key when absent and reads the action as text", () => { + const validate = ( + ConnectedAccountRoute as unknown as { + options: { validateSearch: (s: Record) => object }; + } + ).options.validateSearch; + expect(validate({})).toEqual({}); + expect("action" in validate({})).toBe(false); + expect(validate({ action: "Gmail.ListEmails" })).toEqual({ + action: "Gmail.ListEmails", + }); + /* + * The router JSON-parses search values, so an action name made of digits arrives as a number and + * a JSON-shaped one as an object. Both are still what the verifier put in the URL: the key is + * read as text (`searchText`) rather than dropped for having parsed into something else. + */ + expect(validate({ action: 5 })).toEqual({ action: "5" }); + expect(validate({ action: { a: 1 } })).toEqual({ action: '{"a":1}' }); +}); + +test("an empty or absurdly long action is not drawn", () => { + expect(landedActionFrom(undefined)).toBeNull(); + expect(landedActionFrom(" ")).toBeNull(); + expect(landedActionFrom("x".repeat(201))).toBeNull(); + expect(landedActionFrom(" Gmail.ListEmails ")).toBe("Gmail.ListEmails"); +}); diff --git a/app/tests/connected-account-grants.test.tsx b/app/tests/connected-account-grants.test.tsx new file mode 100644 index 000000000..77c5b7253 --- /dev/null +++ b/app/tests/connected-account-grants.test.tsx @@ -0,0 +1,777 @@ +import { + afterAll, + afterEach, + beforeAll, + beforeEach, + expect, + test, +} from "bun:test"; +import { GlobalRegistrator } from "@happy-dom/global-registrator"; +import { QueryClient, QueryClientProvider } from "@tanstack/react-query"; +import { + createMemoryHistory, + createRootRoute, + createRoute, + createRouter, + Outlet, + RouterProvider, +} from "@tanstack/react-router"; +import { cleanup, fireEvent, render, waitFor } from "@testing-library/react"; +import userEvent from "@testing-library/user-event"; +import { consentCopy } from "@/lib/plugins/enablement-notes"; +import type { GrantState } from "@/lib/plugins/grants"; +import type { PluginServer, PluginsPage } from "@/lib/plugins/queries"; +import { Route as ConnectedAccountRoute } from "@/routes/_authed/settings/connected-accounts/$key"; + +/** + * THE GRANT LIST on an app's own page, drawn by `GrantState`, grouped by permission, with the consent + * copy rendered before any redirect. + * + * Every assertion is on RENDERED markup: a sentence computed and never drawn is not shipped. + */ +/** + * (harness below is shared in shape with connected-account-confirmation.test.tsx) + * + * Three things are pinned, and the first two are RENDERED markup because a sentence computed and + * never drawn is not shipped: the sibling list names what a Disconnect would also end and draws + * NOTHING when there is none; an Arcade deployment's page never says Composio, in text or in + * attributes; and a Composio deployment's three vendor sentences are character-for-character what + * they were. The fourth is the landing parameter the verifier's redirect carries. + */ + +beforeAll(() => GlobalRegistrator.register()); +afterEach(cleanup); +afterAll(async () => { + // Let React's scheduler drain before the DOM globals it reads go away. + await new Promise((resolve) => setTimeout(resolve, 50)); + await GlobalRegistrator.unregister(); +}); + +const APP = "gmail"; + +function captureRouteState(route: object): Record { + return { ...route, options: { ...(route as { options: object }).options } }; +} +function restoreRouteState( + route: object, + snapshot: Record, +): void { + for (const key of Object.keys(route)) { + if (!(key in snapshot)) { + delete (route as Record)[key]; + } + } + Object.assign(route, snapshot); +} +const pristine = captureRouteState(ConnectedAccountRoute); +let snapshot: Record; +beforeEach(() => { + snapshot = captureRouteState(pristine); +}); +afterEach(() => { + restoreRouteState(ConnectedAccountRoute, snapshot); +}); + +type Provider = "composio" | "arcade"; + +function server( + provider: Provider, + accountMode: "shared" | null = null, +): PluginServer { + return { + authScheme: "OAUTH2", + id: APP, + title: "Gmail", + vendor: "Google", + url: provider === "arcade" ? "arcade://gmail" : "https://example.invalid", + summary: "Mail.", + docsUrl: "", + provenance: provider, + hasCredential: false, + toolsRefreshedAt: null, + lastError: null, + addedBy: null, + dynamicClient: false, + accountMode, + sharedVendorConnected: false, + tools: [], + withdrawn: [], + }; +} + +type Setup = { + provider: Provider; + connected: boolean; + configured?: boolean; + siblings?: { siblings: string[]; unanswered: number }; + /** Whether the siblings read answers 500. */ + siblingsFail?: boolean; + /** + * Whether the deployment's broker authorizes per action, the capability the grant list is gated + * on. Defaults to what the named provider's broker declares today, so a case that says nothing + * about it gets the deployment it has always meant; set it against the name to build the + * deployment where the two DISAGREE. + */ + authorizesPerAction?: boolean; + grants?: GrantState[]; + /** Whether the grants read answers 500. */ + accountMode?: "shared" | null; + role?: "admin" | "user"; +}; + +const authorizeCalls: string[] = []; + +const siblingReads: string[] = []; + +function install(setup: Setup) { + siblingReads.length = 0; + const page: PluginsPage = { + catalogue: [], + servers: [server(setup.provider, setup.accountMode ?? null)], + skills: [], + botsMayCallBack: true, + redirectUri: null, + composioConfigured: setup.configured ?? true, + authorizesPerAction: + setup.authorizesPerAction ?? setup.provider === "arcade", + provider: setup.provider, + }; + const json = (body: unknown, status = 200) => + new Response(JSON.stringify(body), { + headers: { "content-type": "application/json" }, + status, + }); + authorizeCalls.length = 0; + global.fetch = (async (input: RequestInfo | URL, init?: RequestInit) => { + const path = String(input).split("?")[0] ?? ""; + if (path.endsWith("/grants")) return json({ actions: setup.grants ?? [] }); + if (path.endsWith("/authorize")) { + authorizeCalls.push(String(init?.body)); + return json({ authorizationUrl: "https://vendor.invalid/consent" }); + } + if (path === "/api/me") + return json({ + user: { id: "u", role: setup.role ?? "user", email: "u@x.io" }, + }); + if (path === "/api/plugins") return json(page); + if (path.startsWith("/api/plugins/connections")) { + return json({ + connections: setup.connected + ? [ + { + serverId: APP, + scope: "", + connectedAt: "2026-09-10T00:00:00.000Z", + verified: true, + verifiedAt: null, + checkable: false, + }, + ] + : [], + redirectUri: null, + }); + } + if (path.endsWith("/connection/siblings")) { + siblingReads.push(path); + if (setup.siblingsFail) return json({ error: "no" }, 500); + return json(setup.siblings ?? { siblings: [], unanswered: 0 }); + } + if (path.endsWith("/connection/confirm")) + return json({ connected: setup.connected }); + return json({ error: "unexpected" }, 404); + }) as typeof fetch; +} + +function renderScreen(search = "") { + const rootRoute = createRootRoute({ component: Outlet }); + const authedRoute = createRoute({ + id: "/_authed", + getParentRoute: () => rootRoute, + component: Outlet, + }); + const settingsRoute = createRoute({ + path: "/settings", + getParentRoute: () => authedRoute, + component: Outlet, + }); + const indexRoute = createRoute({ + path: "/connected-accounts/", + getParentRoute: () => settingsRoute, + component: () => null, + }); + const wired = ( + ConnectedAccountRoute as unknown as { + update: (options: unknown) => typeof ConnectedAccountRoute; + } + ).update({ + id: "/connected-accounts/$key", + path: "/connected-accounts/$key", + getParentRoute: () => settingsRoute, + }); + const router = createRouter({ + routeTree: rootRoute.addChildren([ + authedRoute.addChildren([settingsRoute.addChildren([indexRoute, wired])]), + ]), + history: createMemoryHistory({ + initialEntries: [`/settings/connected-accounts/${APP}${search}`], + }), + }); + return render( + + + , + ); +} + +/** Every string the page puts in front of anyone: its text AND its markup, attributes included. */ +function everythingRendered(view: ReturnType): string { + return `${view.container.textContent ?? ""}\n${view.container.innerHTML}`; +} + +const GMAIL: GrantState[] = [ + { + action: "Gmail.ListEmails", + state: "authorized", + scopes: ["gmail.readonly"], + authorization: "held", + }, + { + action: "Gmail.ListThreads", + state: "authorized", + scopes: ["gmail.readonly"], + authorization: "held", + }, + { action: "Gmail.SendEmail", state: "needs-consent", scopes: ["gmail.send"] }, + { + action: "Gmail.Setup", + state: "needs-operator", + missing: ["GOOGLE_CLIENT_SECRET"], + }, + { action: "Gmail.Flaky", state: "unknown", reason: "Try again in a moment." }, +]; + +function row(view: ReturnType, action: string): HTMLElement { + const found = view.container.querySelector( + `[data-action="${action}"]`, + ); + if (!found) throw new Error(`no row for ${action}`); + return found; +} + +// ---- 0: reachable without typing anything ---- + +test("with no search term, Authorize for an unauthorized action is already on screen", async () => { + install({ provider: "arcade", connected: true, grants: GMAIL }); + const view = renderScreen(); + // Nothing is typed: this is the first visit, and the affordance must be here anyway. + await waitFor(() => row(view, "Gmail.SendEmail")); + expect( + [...row(view, "Gmail.SendEmail").querySelectorAll("button")].map( + (b) => b.textContent, + ), + ).toEqual(["Authorize"]); + expect(view.getByLabelText("Search actions")).toHaveProperty("value", ""); +}); + +// ---- 1: each action renders by its GrantState ---- + +test("Authorize appears for needs-consent and for nothing else", async () => { + install({ provider: "arcade", connected: true, grants: GMAIL }); + const view = renderScreen(); + await waitFor(() => row(view, "Gmail.SendEmail")); + const buttons = (action: string) => + [...row(view, action).querySelectorAll("button")].map((b) => b.textContent); + expect(buttons("Gmail.SendEmail")).toEqual(["Authorize"]); + expect(buttons("Gmail.ListEmails")).toEqual([]); + expect(buttons("Gmail.Setup")).toEqual([]); + expect(buttons("Gmail.Flaky")).not.toContain("Authorize"); +}); + +test("needs-operator names the missing secret, says an administrator sets it, and offers no Authorize", async () => { + install({ + provider: "arcade", + connected: true, + grants: [ + { + action: "Gmail.Setup", + state: "needs-operator", + missing: ["GOOGLE_CLIENT_SECRET"], + }, + ], + }); + const view = renderScreen(); + await waitFor(() => row(view, "Gmail.Setup")); + const text = row(view, "Gmail.Setup").textContent ?? ""; + expect(text).toContain("GOOGLE_CLIENT_SECRET"); + expect(text).toContain("An administrator sets it"); + expect(row(view, "Gmail.Setup").querySelector("button")).toBeNull(); + expect(view.queryByText("Authorize")).toBeNull(); +}); + +test("unknown offers Retry and never a speculative Authorize", async () => { + install({ + provider: "arcade", + connected: true, + grants: [ + { + action: "Gmail.Flaky", + state: "unknown", + reason: "Try again in a moment.", + }, + { + action: "Gmail.ListEmails", + state: "authorized", + scopes: ["gmail.readonly"], + authorization: "held", + }, + ], + }); + const view = renderScreen(); + await waitFor(() => row(view, "Gmail.Flaky")); + const labels = [...row(view, "Gmail.Flaky").querySelectorAll("button")].map( + (b) => b.textContent, + ); + expect(labels).toEqual(["Retry"]); + expect(view.queryByText("Authorize")).toBeNull(); +}); + +test("the route's synthetic toolkit-named unknown reads as could not read and never as an action", async () => { + install({ + provider: "arcade", + connected: true, + grants: [ + { + action: "Gmail", + state: "unknown", + reason: + "This deployment could not read what this account holds just now, so nothing is said about it either way. Try again in a moment.", + }, + ], + }); + const view = renderScreen(); + const notice = await view.findByRole("status"); + expect(notice.textContent?.toLowerCase()).toContain("could not read"); + expect(view.container.querySelector("[data-action]")).toBeNull(); + expect(view.container.querySelector('[data-action="Gmail"]')).toBeNull(); + expect( + [...view.container.querySelectorAll("button")].map((b) => b.textContent), + ).toContain("Retry"); +}); + +// ---- 2: grouped by permission ---- + +test("actions are grouped by the permission they require", async () => { + install({ provider: "arcade", connected: true, grants: GMAIL }); + const view = renderScreen(); + await waitFor(() => row(view, "Gmail.SendEmail")); + const group = (scope: string) => + view.container.querySelector(`[data-grant-group="${scope}"]`); + const readonly = group("gmail.readonly"); + expect( + readonly?.querySelector('[data-action="Gmail.ListEmails"]'), + ).not.toBeNull(); + expect( + readonly?.querySelector('[data-action="Gmail.ListThreads"]'), + ).not.toBeNull(); + expect(readonly?.querySelector('[data-action="Gmail.SendEmail"]')).toBeNull(); + expect( + group("gmail.send")?.querySelector('[data-action="Gmail.SendEmail"]'), + ).not.toBeNull(); +}); + +test("an all-or-nothing app renders as ONE group containing everything", async () => { + install({ + provider: "arcade", + connected: true, + grants: [ + { + action: "Github.A", + state: "authorized", + scopes: [], + authorization: "held", + }, + { action: "Github.B", state: "needs-consent", scopes: [] }, + { + action: "Github.C", + state: "authorized", + scopes: [], + authorization: "held", + }, + ], + }); + const view = renderScreen(); + await waitFor(() => row(view, "Github.B")); + const groups = view.container.querySelectorAll("[data-grant-group]"); + expect(groups.length).toBe(1); + expect(groups[0]?.querySelectorAll("[data-action]").length).toBe(3); + expect(groups[0]?.getAttribute("data-grant-group")).toBe("whole-app"); +}); + +// ---- 3: ordering ---- + +test("authorized actions are listed first, and the unauthorized ones follow with nothing typed", async () => { + install({ + provider: "arcade", + connected: true, + grants: [ + { action: "Github.B", state: "needs-consent", scopes: [] }, + { + action: "Github.C", + state: "authorized", + scopes: [], + authorization: "held", + }, + { + action: "Github.A", + state: "authorized", + scopes: [], + authorization: "held", + }, + { action: "Github.D", state: "unknown", reason: "Try again." }, + ], + }); + const view = renderScreen(); + await waitFor(() => row(view, "Github.B")); + expect( + [...view.container.querySelectorAll("[data-action]")].map((element) => + element.getAttribute("data-action"), + ), + ).toEqual(["Github.A", "Github.C", "Github.B", "Github.D"]); + expect(view.container.textContent).not.toContain( + "more actions not yet authorized", + ); +}); + +test("past the first ten unauthorized actions the rest wait behind the search", async () => { + const many: GrantState[] = [ + { + action: "Gmail.ListEmails", + state: "authorized", + scopes: ["gmail.readonly"], + authorization: "held", + }, + ...Array.from({ length: 12 }, (_, index): GrantState => { + const name = String.fromCharCode(97 + index); + return { + action: `Gmail.Send${name}`, + state: "needs-consent", + scopes: ["gmail.send"], + }; + }), + ]; + install({ provider: "arcade", connected: true, grants: many }); + const view = renderScreen(); + await view.findByText(/more actions not yet authorized/); + expect(row(view, "Gmail.ListEmails")).toBeTruthy(); + expect(row(view, "Gmail.Senda")).toBeTruthy(); + expect(row(view, "Gmail.Sendj")).toBeTruthy(); + expect( + view.container.querySelector('[data-action="Gmail.Sendk"]'), + ).toBeNull(); + expect( + view.container.querySelector('[data-action="Gmail.Sendl"]'), + ).toBeNull(); + expect(view.container.textContent).toContain( + "2 more actions not yet authorized", + ); + // The search still narrows to exactly what matches, and reaches the tail. + await userEvent.type(view.getByLabelText("Search actions"), "sendk"); + await waitFor(() => row(view, "Gmail.Sendk")); + expect( + view.container.querySelector('[data-action="Gmail.ListEmails"]'), + ).toBeNull(); + expect( + view.container.querySelector('[data-action="Gmail.Senda"]'), + ).toBeNull(); +}); + +test("with mixed unauthorized states past ten, the ten drawn are in state order: every consentable action first", async () => { + // Names sort the OTHER way round to the state ranking (unknown < operator < consent by name), so + // any reordering of the single RANK table changes which ten are drawn. + const mixed: GrantState[] = [ + ...Array.from( + { length: 4 }, + (_, index): GrantState => ({ + action: `Gmail.A${index}`, + state: "unknown", + reason: "Try again.", + }), + ), + ...Array.from( + { length: 3 }, + (_, index): GrantState => ({ + action: `Gmail.B${index}`, + state: "needs-operator", + missing: ["GOOGLE_CLIENT_SECRET"], + }), + ), + ...Array.from( + { length: 6 }, + (_, index): GrantState => ({ + action: `Gmail.C${index}`, + state: "needs-consent", + scopes: ["gmail.send"], + }), + ), + ]; + install({ provider: "arcade", connected: true, grants: mixed }); + const view = renderScreen(); + await view.findByText(/more actions not yet authorized/); + const drawn = [...view.container.querySelectorAll("[data-action]")] + .map((element) => element.getAttribute("data-action")) + .sort(); + expect(drawn).toEqual([ + "Gmail.A0", + "Gmail.B0", + "Gmail.B1", + "Gmail.B2", + "Gmail.C0", + "Gmail.C1", + "Gmail.C2", + "Gmail.C3", + "Gmail.C4", + "Gmail.C5", + ]); + expect(view.container.textContent).toContain( + "3 more actions not yet authorized", + ); +}); + +// ---- 4: Shared ---- + +test("a Shared app shows state to a member but Authorize only to an administrator", async () => { + install({ + provider: "arcade", + connected: false, + accountMode: "shared", + role: "user", + grants: GMAIL, + }); + const member = renderScreen(); + await waitFor(() => row(member, "Gmail.SendEmail")); + expect(row(member, "Gmail.ListEmails").textContent).toContain("Authorized"); + expect(member.queryByText("Authorize")).toBeNull(); + cleanup(); + + install({ + provider: "arcade", + connected: false, + accountMode: "shared", + role: "admin", + grants: GMAIL, + }); + const admin = renderScreen(); + await waitFor(() => row(admin, "Gmail.SendEmail")); + await waitFor(() => expect(admin.queryByText("Authorize")).not.toBeNull()); +}); + +/* + * THE SHARED APP'S LANDING, which is where a deployment-held consent now comes back to. + * + * The verifier used to send this holder to `/admin/plugins/:key`, a route with no `validateSearch` + * for `action`, no notice and no grant list — so the one flow whose Authorize is admin-only + * finished a consent at the vendor and landed on a screen that named nothing. Asserted on RENDERED + * markup for that reason: the destination mattering is exactly the claim. + */ +test("a Shared app landing from a consent names the action and marks its row", async () => { + install({ + provider: "arcade", + connected: false, + accountMode: "shared", + role: "admin", + grants: GMAIL, + }); + const view = renderScreen("?action=Gmail.ListEmails"); + + const notice = await view.findByRole("status"); + expect(notice.textContent).toBe("You just authorized Gmail.ListEmails."); + expect(notice.getAttribute("data-landed-action")).toBe("Gmail.ListEmails"); + + // And the row itself is the marked one, with no search typed to find it by. + await waitFor(() => row(view, "Gmail.ListEmails")); + expect(row(view, "Gmail.ListEmails").hasAttribute("data-landed")).toBe(true); + expect(row(view, "Gmail.SendEmail").hasAttribute("data-landed")).toBe(false); + // The Shared branch is the one drawing this, not the personal-account branch. + expect(view.container.textContent).toContain("Team account"); +}); + +test("a Shared app reached without an action says nothing about authorizing", async () => { + install({ + provider: "arcade", + connected: false, + accountMode: "shared", + role: "admin", + grants: GMAIL, + }); + const view = renderScreen(); + await waitFor(() => row(view, "Gmail.ListEmails")); + expect(view.queryByRole("status")).toBeNull(); + expect(view.container.textContent).not.toContain("just authorized"); +}); + +// ---- Part B: the consent copy is RENDERED before the redirect ---- + +test("pressing Authorize renders consentCopy's sentence and redirects nowhere yet", async () => { + install({ provider: "arcade", connected: true, grants: GMAIL }); + const view = renderScreen(); + await waitFor(() => row(view, "Gmail.SendEmail")); + fireEvent.click(view.getByText("Authorize")); + const expected = consentCopy("Gmail.SendEmail", [ + { name: "Gmail.ListEmails", scopes: ["gmail.readonly"] }, + { name: "Gmail.ListThreads", scopes: ["gmail.readonly"] }, + { name: "Gmail.SendEmail", scopes: ["gmail.send"] }, + ]).sentence; + const panel = await view.findByRole("group", { + name: /Before you authorize/, + }); + expect(panel.textContent).toContain(expected); + expect(panel.textContent).toContain( + "Approving Gmail.SendEmail asks the provider for the permission gmail.send.", + ); + // Nothing was minted by merely looking at the copy. + expect(authorizeCalls).toEqual([]); + fireEvent.click(view.getByText("Continue to consent")); + await waitFor(() => + expect(authorizeCalls).toEqual([ + JSON.stringify({ action: "Gmail.SendEmail" }), + ]), + ); +}); + +test("on screen, the N an approval approves leaves out every action that needs no authorization", async () => { + // An all-unscoped app where two actions wait on the approval, one is held, and three need none. + const grants: GrantState[] = [ + { action: "Tk.A", state: "needs-consent", scopes: [] }, + { action: "Tk.B", state: "needs-consent", scopes: [] }, + { action: "Tk.C", state: "authorized", scopes: [], authorization: "held" }, + ...["Tk.X", "Tk.Y", "Tk.Z"].map( + (action): GrantState => ({ + action, + state: "authorized", + scopes: [], + authorization: "not-required", + }), + ), + ]; + const covered = grants.filter( + (grant) => + grant.state === "needs-consent" || + (grant.state === "authorized" && grant.authorization === "held"), + ).length; + // The fixture only discriminates if counting everything would give a different number. + expect(covered).not.toBe(grants.length); + install({ provider: "arcade", connected: true, grants }); + const view = renderScreen(); + await waitFor(() => row(view, "Tk.A")); + fireEvent.click(row(view, "Tk.A").querySelector("button") as HTMLElement); + const panel = await view.findByRole("group", { + name: /Before you authorize/, + }); + expect(panel.textContent).toContain( + `approving this approves all ${covered}.`, + ); + expect(row(view, "Tk.X").textContent).toContain("Needs no authorization."); + const together = view.container.querySelector( + '[data-grant-group="whole-app"]', + ); + expect(together?.querySelectorAll("[data-action]").length).toBe(covered); +}); + +test("the consent copy never promises that only the named action becomes usable", async () => { + install({ + provider: "arcade", + connected: true, + grants: [ + { + action: "Github.CountStargazers", + state: "needs-consent", + scopes: ["repo"], + }, + { + action: "Github.CreateIssue", + state: "needs-consent", + scopes: ["repo"], + }, + ], + }); + const view = renderScreen(); + await userEvent.type(await view.findByLabelText("Search actions"), "Github."); + await waitFor(() => row(view, "Github.CountStargazers")); + fireEvent.click( + row(view, "Github.CountStargazers").querySelector("button") as HTMLElement, + ); + const panel = await view.findByRole("group", { + name: /Before you authorize/, + }); + expect(panel.textContent).toContain( + "It also enables this other action requiring it: Github.CreateIssue.", + ); + expect(panel.textContent?.toLowerCase()).not.toMatch( + /only (this|that|the named)|just this/, + ); +}); + +// ---- 12.1's rule, on the new markup ---- + +test("on Arcade the grant list says nothing of Composio, in text or attributes", async () => { + install({ + provider: "arcade", + connected: true, + grants: GMAIL, + siblings: { siblings: ["googledocs"], unanswered: 0 }, + }); + const view = renderScreen("?action=Gmail.ListEmails"); + await waitFor(() => row(view, "Gmail.SendEmail")); + fireEvent.click(view.getByText("Authorize")); + await view.findByRole("group", { name: /Before you authorize/ }); + expect(everythingRendered(view)).not.toMatch(/composio/i); +}); + +test("a Composio deployment draws no grant list and never reads the grants", async () => { + install({ provider: "composio", connected: true, grants: GMAIL }); + const view = renderScreen(); + await view.findByText("Disconnect"); + await new Promise((resolve) => setTimeout(resolve, 50)); + expect(view.container.querySelector("[data-action]")).toBeNull(); + expect(view.queryByLabelText("Search actions")).toBeNull(); +}); + +/* + * ---- the gate is the CAPABILITY, not the name ---- + * + * The case where the two DISAGREE, which is the whole reason the screen stopped comparing names: a + * deployment whose provider is named arcade but whose broker declares no per-action authorization + * flow. `/servers/:id/authorize` refuses such a deployment with 503, so a list drawn here would be + * a screenful of buttons that cannot work. The name says draw it; the capability says do not; the + * capability is what the route behind the buttons reads. + */ +test("a broker named arcade that authorizes no action draws no grant list", async () => { + install({ + provider: "arcade", + authorizesPerAction: false, + connected: true, + grants: GMAIL, + }); + const view = renderScreen(); + await view.findByText("Disconnect"); + await new Promise((resolve) => setTimeout(resolve, 50)); + expect(view.container.querySelector("[data-action]")).toBeNull(); + expect(view.queryByLabelText("Search actions")).toBeNull(); +}); + +/* And the mirror: the capability alone is enough, with no name read anywhere on the way. */ +test("a broker that authorizes per action draws the grant list", async () => { + install({ + provider: "arcade", + authorizesPerAction: true, + connected: true, + grants: GMAIL, + }); + const view = renderScreen(); + await waitFor(() => row(view, "Gmail.SendEmail")); + expect(view.getByLabelText("Search actions")).toBeTruthy(); +}); diff --git a/app/tests/connected-account-landing-param.test.tsx b/app/tests/connected-account-landing-param.test.tsx new file mode 100644 index 000000000..2d202ab1d --- /dev/null +++ b/app/tests/connected-account-landing-param.test.tsx @@ -0,0 +1,216 @@ +import { afterAll, afterEach, beforeAll, expect, test } from "bun:test"; +import { GlobalRegistrator } from "@happy-dom/global-registrator"; +import { QueryClient, QueryClientProvider } from "@tanstack/react-query"; +import { + createMemoryHistory, + createRootRoute, + createRoute, + createRouter, + Outlet, + RouterProvider, +} from "@tanstack/react-router"; +import { cleanup, render, waitFor } from "@testing-library/react"; +import type { GrantState } from "@/lib/plugins/grants"; +import type { PluginServer, PluginsPage } from "@/lib/plugins/queries"; +import { Route as ConnectedAccountRoute } from "@/routes/_authed/settings/connected-accounts/$key"; + +/** + * `?action=` IS DROPPED FROM THE URL AFTER ITS ONE READ, AND THE GRANT LIST STILL MARKS ITS ROW. + * + * The parameter's only sender is the per-action verifier's redirect, so it reports a consent that + * has just completed. Left in the address bar it is read again on every reload and back-navigation, + * and "You just authorized X" is redrawn about a consent that may be hours old. + * + * BOTH HALVES ARE PINNED, because the value feeds two readers: the landing notice and the grant + * list's `data-landed` mark. A strip that reads the value live would pass a URL-only assertion and + * leave the grant list with nothing marked; a mark that works off the URL would pass a mark-only + * assertion and replay forever. The grants read here is HELD until the URL has been stripped, so + * the list is drawn strictly after the parameter is gone — the order a slow vendor read produces in + * production, and the one in which a live read of `?action=` marks nothing. + */ + +beforeAll(() => GlobalRegistrator.register()); +afterEach(cleanup); +afterAll(async () => { + // Let React's scheduler drain before the DOM globals it reads go away. + await new Promise((resolve) => setTimeout(resolve, 50)); + await GlobalRegistrator.unregister(); +}); + +const APP = "gmail"; + +const GMAIL: GrantState[] = [ + { + action: "Gmail.ListEmails", + state: "authorized", + scopes: ["gmail.readonly"], + authorization: "held", + }, + { action: "Gmail.SendEmail", state: "needs-consent", scopes: ["gmail.send"] }, +]; + +function server(accountMode: "shared" | null): PluginServer { + return { + authScheme: "OAUTH2", + id: APP, + title: "Gmail", + vendor: "Google", + url: "arcade://gmail", + summary: "Mail.", + docsUrl: "", + provenance: "arcade", + hasCredential: false, + toolsRefreshedAt: null, + lastError: null, + addedBy: null, + dynamicClient: false, + accountMode, + sharedVendorConnected: false, + tools: [], + withdrawn: [], + }; +} + +/** Installs the API, with the grants read answering only once `release` is called. */ +function install(accountMode: "shared" | null) { + let release: () => void = () => {}; + const held = new Promise((resolve) => { + release = resolve; + }); + const page: PluginsPage = { + catalogue: [], + servers: [server(accountMode)], + skills: [], + botsMayCallBack: true, + redirectUri: null, + composioConfigured: true, + authorizesPerAction: true, + provider: "arcade", + }; + const json = (body: unknown, status = 200) => + new Response(JSON.stringify(body), { + headers: { "content-type": "application/json" }, + status, + }); + global.fetch = (async (input: RequestInfo | URL) => { + const path = String(input).split("?")[0] ?? ""; + if (path.endsWith("/grants")) { + await held; + return json({ actions: GMAIL }); + } + if (path === "/api/me") + return json({ user: { id: "u", role: "admin", email: "u@x.io" } }); + if (path === "/api/plugins") return json(page); + if (path.startsWith("/api/plugins/connections")) { + return json({ + connections: + accountMode === "shared" + ? [] + : [ + { + serverId: APP, + scope: "", + connectedAt: "2026-09-10T00:00:00.000Z", + verified: true, + verifiedAt: null, + checkable: false, + }, + ], + redirectUri: null, + }); + } + if (path.endsWith("/connection/siblings")) + return json({ siblings: [], unanswered: 0 }); + if (path.endsWith("/connection/confirm")) return json({ connected: true }); + return json({ error: "unexpected" }, 404); + }) as typeof fetch; + return { release: () => release() }; +} + +type TestRouter = { state: { location: { search: unknown } } }; + +function renderScreen(search: string) { + const rootRoute = createRootRoute({ component: Outlet }); + const authedRoute = createRoute({ + id: "/_authed", + getParentRoute: () => rootRoute, + component: Outlet, + }); + const settingsRoute = createRoute({ + path: "/settings", + getParentRoute: () => authedRoute, + component: Outlet, + }); + const indexRoute = createRoute({ + path: "/connected-accounts/", + getParentRoute: () => settingsRoute, + component: () => null, + }); + const wired = ( + ConnectedAccountRoute as unknown as { + update: (options: unknown) => typeof ConnectedAccountRoute; + } + ).update({ + id: "/connected-accounts/$key", + path: "/connected-accounts/$key", + getParentRoute: () => settingsRoute, + }); + const router = createRouter({ + routeTree: rootRoute.addChildren([ + authedRoute.addChildren([settingsRoute.addChildren([indexRoute, wired])]), + ]), + history: createMemoryHistory({ + initialEntries: [`/settings/connected-accounts/${APP}${search}`], + }), + }); + const view = render( + + + , + ); + return { view, router: router as unknown as TestRouter }; +} + +function rowOf(view: ReturnType, action: string) { + return view.container.querySelector(`[data-action="${action}"]`); +} + +for (const accountMode of [null, "shared"] as const) { + const which = accountMode === "shared" ? "a Shared app" : "a personal app"; + + test(`on ${which}, ?action= is dropped from the URL and its row is still marked`, async () => { + const api = install(accountMode); + const { view, router } = renderScreen("?action=Gmail.ListEmails"); + + // Half one: the parameter stops replaying — the URL no longer carries it. + await waitFor(() => expect(router.state.location.search).toEqual({})); + + // The notice survives the strip. + const notice = await view.findByRole("status"); + expect(notice.textContent).toBe("You just authorized Gmail.ListEmails."); + + // Half two: the grant list, drawn only now — after the strip — still marks the landed row. + api.release(); + await waitFor(() => expect(rowOf(view, "Gmail.ListEmails")).not.toBeNull()); + expect(rowOf(view, "Gmail.ListEmails")?.hasAttribute("data-landed")).toBe( + true, + ); + expect(rowOf(view, "Gmail.SendEmail")?.hasAttribute("data-landed")).toBe( + false, + ); + }); +} + +test("with no ?action= nothing is marked and nothing is said", async () => { + const api = install(null); + const { view, router } = renderScreen(""); + api.release(); + await waitFor(() => expect(rowOf(view, "Gmail.ListEmails")).not.toBeNull()); + expect(router.state.location.search).toEqual({}); + expect(view.container.querySelector("[data-landed]")).toBeNull(); + expect(view.container.textContent).not.toContain("just authorized"); +}); diff --git a/app/tests/connected-accounts-authorized-notice.test.tsx b/app/tests/connected-accounts-authorized-notice.test.tsx new file mode 100644 index 000000000..4eefdc289 --- /dev/null +++ b/app/tests/connected-accounts-authorized-notice.test.tsx @@ -0,0 +1,132 @@ +import { expect, test } from "bun:test"; +import { + AUTHORIZATION_NOTICES, + authorizationNoticeFor, + Route, +} from "@/routes/_authed/settings/connected-accounts/index"; + +/** + * The notice channel the brokered per-action verifier reports back on, decided without drawing + * anything. + * + * THE SENTENCE LIVES HERE AND THE URL CARRIES ONLY A CODE, which is the whole point of the channel. + * A message rendered from a query string is a message anybody can author on this deployment's own + * origin: a link could be passed around carrying whatever sentence its author liked, shown in this + * page's voice under this deployment's address. So the server chooses from a closed set of opaque + * codes and this map is the only place one becomes words — which is also what stops a sentence + * being maintained in two places that drift. + * + * A `.tsx` file because it imports a route module, which is JSX; the precedent is + * `connected-accounts-list.test.tsx`, which exports its own rule as a function for this reason. + */ + +/** + * THE SAME CLOSED SET THE SERVER HOLDS, asserted as a set here too. The server's own suite asserts + * `AUTHORIZATION_REFUSALS` against this same list, so a code added on one side without the other + * turns one of the two red: a new code with no sentence would otherwise draw nothing at all. + */ +test("every reason the verifier can send has a sentence here, and no others", () => { + expect([...AUTHORIZATION_NOTICES.keys()]).toEqual([ + "no-broker", + "not-supported", + "missing-handle", + "no-attempt", + "vendor-unavailable", + "not-your-authorization", + "not-finished", + "authorization-failed", + "context-changed", + "not-recorded", + ]); +}); + +test("each code reads as its own sentence, not as one generic apology", () => { + const sentences = [...AUTHORIZATION_NOTICES.values()]; + expect(new Set(sentences).size).toBe(sentences.length); + for (const sentence of sentences) { + // Long enough to say what happened and what to do about it, rather than an apology. + expect(sentence.length).toBeGreaterThan(60); + } +}); + +test("a code is turned into the words for it", () => { + expect(authorizationNoticeFor("no-attempt")).toBe( + AUTHORIZATION_NOTICES.get("no-attempt") as string, + ); +}); + +/** + * AND A CODE THIS BUILD DOES NOT KNOW DRAWS NOTHING, deliberately. Such a code is either somebody + * probing the parameter or a deployment mid-upgrade; a generic "something went wrong" for both + * would tell a person nothing and invite them to keep trying. + */ +test("an unrecognised or absent code draws nothing", () => { + expect(authorizationNoticeFor("something-somebody-made-up")).toBeNull(); + expect(authorizationNoticeFor("")).toBeNull(); + expect(authorizationNoticeFor(undefined)).toBeNull(); +}); + +/** The sentence never travels in the URL, so nothing in the map may be read out of one. */ +test("the notices are not reachable from the search parameter's own value", () => { + expect( + authorizationNoticeFor("That account could not be connected."), + ).toBeNull(); +}); + +/** + * AND A CODE BORROWED FROM `Object.prototype` DRAWS NOTHING EITHER, which is a different claim + * from the one above and was once false. + * + * `?authorized=toString` is not a code the verifier can send, but it is a member every plain + * object inherits. A lookup that walks the prototype chain answers it with a function — not + * nullish, so no `?? null` catches it — and the page then hands a function, or for `__proto__` an + * object, to React as the notice to draw: an empty red alert for `constructor`, and for `__proto__` + * "Objects are not valid as a React child", which takes the whole screen down. A crafted link on + * this deployment's own origin broke Connected accounts for whoever opened it. + */ +test.each([ + ["toString", "a function React draws as nothing it can read"], + ["constructor", "a function, drawn as an empty red alert"], + ["__proto__", "an object, which crashes the screen React draws it on"], + ["valueOf", "a function"], + ["hasOwnProperty", "a function"], +])( + "%s is a borrowed member, not a code, and draws nothing (%s)", + (borrowed) => { + expect(authorizationNoticeFor(borrowed)).toBeNull(); + }, +); + +/** The declared `string | null` holds for every value a URL can carry, not only the known codes. */ +test.each([ + "no-attempt", + "toString", + "constructor", + "__proto__", + "something-somebody-made-up", +])( + "what ?authorized=%s answers is a sentence or nothing, never a function or an object", + (value) => { + const notice = authorizationNoticeFor(value); + if (notice !== null) expect(typeof notice).toBe("string"); + }, +); + +/** + * AND THE CODE REACHES THAT LOOKUP AT ALL, whatever the router parsed the parameter into. + * + * Search values are JSON-parsed, so a reason code or server key made of digits arrives as a number + * and a JSON-shaped one as an object. All three parameters on this screen are read as text + * (`searchText`), so what the callback reported is what the screen decides on rather than silently + * nothing at all. + */ +test("every parameter on this screen is read as text, whatever it parsed into", () => { + const validate = Route.options.validateSearch as (s: unknown) => object; + expect( + validate({ connected: 12345, authorized: 678, linked: { a: 1 } }), + ).toEqual({ connected: "12345", authorized: "678", linked: '{"a":1}' }); + expect(validate({ authorized: "no-attempt" })).toEqual({ + authorized: "no-attempt", + }); + expect(validate({})).toEqual({}); +}); diff --git a/app/tests/connected-accounts-oneshot-params.test.tsx b/app/tests/connected-accounts-oneshot-params.test.tsx new file mode 100644 index 000000000..a3b28280e --- /dev/null +++ b/app/tests/connected-accounts-oneshot-params.test.tsx @@ -0,0 +1,133 @@ +import { afterAll, afterEach, beforeAll, expect, test } from "bun:test"; +import { GlobalRegistrator } from "@happy-dom/global-registrator"; +import { QueryClient, QueryClientProvider } from "@tanstack/react-query"; +import { + createMemoryHistory, + createRootRoute, + createRouter, + Outlet, + RouterProvider, +} from "@tanstack/react-router"; +import { cleanup, render, waitFor } from "@testing-library/react"; +import { identityKeys } from "@/lib/identity/queries"; +import { pluginKeys } from "@/lib/plugins/queries"; +import { Route } from "@/routes/_authed/settings/connected-accounts/index"; + +/** + * EVERY ONE-SHOT PARAMETER THIS SCREEN CONSUMES IS DROPPED FROM THE URL, NOT JUST `?linked=`. + * + * All three — `?connected=failed` from the Composio OAuth callback, `?authorized=` from the + * brokered per-action verifier, `?linked=` from the GitHub account-link callback — report something + * that has already happened: read once, and then over. A parameter left in the address bar is read + * again on every reload and on every back-navigation, so news that is minutes old is redrawn as + * though it had just happened — somebody is told again that their account could not be connected, + * or that there is no authorization in progress, about an attempt they have since finished. + * `?linked=` was stripped and the other two were not. + * + * THE NOTICE STILL HAS TO BE DRAWN, which is the other half of the claim and the reason the strip + * cannot be a bare navigate on mount: the screen reads each value once into state, draws the + * sentence from that, and only the URL is cleaned. A test asserting an empty URL alone would be + * satisfied by a screen that says nothing at all. + */ + +const PATH = "/settings/connected-accounts"; + +beforeAll(() => GlobalRegistrator.register()); +afterEach(cleanup); +afterAll(async () => { + // Let React's scheduler drain before the DOM globals it reads go away. + await new Promise((resolve) => setTimeout(resolve, 50)); + await GlobalRegistrator.unregister(); +}); + +type TestRouter = { state: { location: { search: unknown; href: string } } }; + +function renderScreen(search: string) { + const queryClient = new QueryClient({ + defaultOptions: { queries: { retry: false } }, + }); + // Seeded rather than fetched: this screen's data is not what is under test here. + queryClient.setQueryData(pluginKeys.page(), { servers: [], catalogue: [] }); + queryClient.setQueryData(pluginKeys.connections(), { connections: [] }); + queryClient.setQueryData(identityKeys.links(), []); + + const root = createRootRoute({ component: () => }); + const screen = Route.update({ + id: PATH, + path: PATH, + getParentRoute: () => root, + } as never); + // The route tree is assembled by hand, so its types cannot describe it. + const router = createRouter({ + routeTree: root.addChildren([screen]), + context: { queryClient }, + history: createMemoryHistory({ initialEntries: [`${PATH}${search}`] }), + } as never) as never; + const view = render( + + + , + ); + return { view, router: router as TestRouter }; +} + +/** What the address bar holds now, as the router sees it. */ +const searchOf = (router: TestRouter) => router.state.location.search; + +test("?connected=failed is said once and then dropped from the URL", async () => { + const { view, router } = renderScreen("?connected=failed"); + await view.findByText(/That account could not be connected/); + await waitFor(() => expect(searchOf(router)).toEqual({})); + // And the sentence survives the strip: the news is read once, not withdrawn. + expect( + view.queryByText(/That account could not be connected/), + ).not.toBeNull(); + expect(router.state.location.href).toBe(PATH); +}); + +test("?authorized= is said once and then dropped from the URL", async () => { + const { view, router } = renderScreen("?authorized=no-attempt"); + await view.findByText(/There is no authorization in progress/); + await waitFor(() => expect(searchOf(router)).toEqual({})); + expect( + view.queryByText(/There is no authorization in progress/), + ).not.toBeNull(); + expect(router.state.location.href).toBe(PATH); +}); + +/** The one that was already stripped, kept here so the three are pinned in one place. */ +test("?linked= is said once and then dropped from the URL", async () => { + const { view, router } = renderScreen("?linked=failed"); + await view.findByText(/Your GitHub account could not be linked/); + await waitFor(() => expect(searchOf(router)).toEqual({})); + expect( + view.queryByText(/Your GitHub account could not be linked/), + ).not.toBeNull(); +}); + +/** + * ALL THREE AT ONCE, because stripping them one at a time is the failure mode a per-parameter + * effect invites: each navigate replaces the whole search, so one that drops `connected` while + * rebuilding `authorized` leaves the second behind for ever. + */ +test("all three arriving together leave nothing behind", async () => { + const { view, router } = renderScreen( + "?connected=failed&authorized=no-attempt&linked=failed", + ); + await view.findByText(/That account could not be connected/); + await waitFor(() => expect(searchOf(router)).toEqual({})); + expect(router.state.location.href).toBe(PATH); + expect( + view.queryByText(/There is no authorization in progress/), + ).not.toBeNull(); + expect( + view.queryByText(/Your GitHub account could not be linked/), + ).not.toBeNull(); +}); + +/** Nothing to consume means nothing to clean up, and no navigation at all. */ +test("an arrival with no one-shot parameter is left exactly as it came", async () => { + const { router } = renderScreen(""); + await waitFor(() => expect(searchOf(router)).toEqual({})); + expect(router.state.location.href).toBe(PATH); +}); diff --git a/app/tests/directory-read-fallback.test.ts b/app/tests/directory-read-fallback.test.ts new file mode 100644 index 000000000..854bf4306 --- /dev/null +++ b/app/tests/directory-read-fallback.test.ts @@ -0,0 +1,32 @@ +import { afterEach, expect, test } from "bun:test"; +import { composioAppsQueryOptions } from "@/lib/plugins/queries"; + +const realFetch = globalThis.fetch; +afterEach(() => { + globalThis.fetch = realFetch; +}); + +/** Runs the directory query against a failure that carries no server message at all. */ +async function failureMessage(provider: "composio" | "arcade") { + globalThis.fetch = (async () => + new Response(null, { status: 500 })) as unknown as typeof fetch; + const options = composioAppsQueryOptions("", provider); + try { + await (options.queryFn as (ctx: unknown) => Promise)({}); + } catch (thrown) { + return (thrown as Error).message; + } + throw new Error("the query was expected to fail"); +} + +test("a Composio deployment's messageless directory failure is the existing sentence, unchanged", async () => { + expect(await failureMessage("composio")).toBe( + "Composio's app directory could not be read.", + ); +}); + +test("an Arcade deployment's messageless directory failure names Arcade and never Composio", async () => { + const message = await failureMessage("arcade"); + expect(message).toBe("Arcade's app directory could not be read."); + expect(message).not.toMatch(/composio/i); +}); diff --git a/app/tests/plugin-mutation-refresh.test.ts b/app/tests/plugin-mutation-refresh.test.ts index 67c21c427..3dd72fd7f 100644 --- a/app/tests/plugin-mutation-refresh.test.ts +++ b/app/tests/plugin-mutation-refresh.test.ts @@ -7,6 +7,7 @@ import { mutationOptions, QueryClient, } from "@tanstack/react-query"; +import { authorizeActionMutationOptions } from "../src/lib/plugins/grants"; import * as pluginMutations from "../src/lib/plugins/mutations"; import { accountModePreview, @@ -642,3 +643,27 @@ test("every id these writes interpolate into a URL goes through encodeURICompone expect(raw).toEqual([]); }); + +/** + * Where the vendor's callback puts somebody down is the caller's to say, and only the default was + * ever pinned. + * + * The roster above drives both consent starts with no argument, so `?returnTo=settings` is all any + * assertion in this file has ever seen. A body that ignored its parameter and wrote `settings` + * itself would pass every one of them — and the defect that hides is an administrator who presses + * Connect on the connector's admin page, finishes consent at the vendor, and is put down in their + * own personal settings: the round trip the inline row exists to remove. One call each, with the + * value the default cannot be confused with. + */ +test("the consent starts carry the screen they were started from", async () => { + expect( + await requestedBy(() => connectAccountMutationOptions("admin"), HOSTILE_ID), + ).toEqual([`/api/plugins/servers/${ENCODED_ID}/connect?returnTo=admin`]); + + expect( + await requestedBy(() => authorizeActionMutationOptions("admin"), { + serverId: HOSTILE_ID, + action: "GMAIL_SEND_EMAIL", + }), + ).toEqual([`/api/plugins/servers/${ENCODED_ID}/authorize?returnTo=admin`]); +}); diff --git a/app/tests/plugin-read-failure.test.tsx b/app/tests/plugin-read-failure.test.tsx index 4e88d3cae..9a9f062cd 100644 --- a/app/tests/plugin-read-failure.test.tsx +++ b/app/tests/plugin-read-failure.test.tsx @@ -84,6 +84,7 @@ function answeredWithout() { botsMayCallBack: true, redirectUri: null, composioConfigured: false, + authorizesPerAction: false, }; client.setQueryData(pluginKeys.page(), page); return client; diff --git a/app/tests/plugins-page-provider.test.ts b/app/tests/plugins-page-provider.test.ts new file mode 100644 index 000000000..ce5e344cb --- /dev/null +++ b/app/tests/plugins-page-provider.test.ts @@ -0,0 +1,26 @@ +import { expect, test } from "bun:test"; +import { type PluginsPage, pluginsProvider } from "@/lib/plugins/queries"; + +const page = (extra: Partial): PluginsPage => ({ + catalogue: [], + servers: [], + skills: [], + botsMayCallBack: false, + redirectUri: null, + composioConfigured: true, + authorizesPerAction: false, + ...extra, +}); + +test("a payload with no provider answers composio", () => { + expect(pluginsProvider(page({}))).toBe("composio"); +}); + +test("a payload that names a provider is believed", () => { + expect(pluginsProvider(page({ provider: "arcade" }))).toBe("arcade"); + expect(pluginsProvider(page({ provider: "composio" }))).toBe("composio"); +}); + +test("no page yet answers composio", () => { + expect(pluginsProvider(undefined)).toBe("composio"); +}); diff --git a/app/tests/search-text.test.ts b/app/tests/search-text.test.ts new file mode 100644 index 000000000..4a074078f --- /dev/null +++ b/app/tests/search-text.test.ts @@ -0,0 +1,96 @@ +// app/tests/search-text.test.ts +/** + * Search parameters that are TEXT survive the router's JSON parsing. + * + * The router JSON-parses every search value, so `?flow_id=12345` reaches a route as the number + * 12345 and `?flow_id={"a":1}` as an object. A route that guarded on `typeof value === "string"` + * dropped exactly those, which for the OAuth return leg's `flow_id` means the correlation handle + * vanishes for whichever ids the vendor's generator happens to emit: green in testing, and a return + * leg bound to nothing for a fraction of real ids in production. + * + * Two halves are pinned here. `searchText` renders whatever arrived back to the text it was, and + * `parseSearchText` takes away the one case it could not have rendered back exactly — a number too + * long to survive a double. The guard at the bottom keeps the `typeof` form from coming back. + */ +import { expect, test } from "bun:test"; +import { readFileSync } from "node:fs"; +import { join } from "node:path"; +import { + parseSearchText, + searchText, + searchTextEntry, +} from "@/lib/search-text"; +import { + logicalLines, + sourceFiles, +} from "../../server/tests/support/source-scan"; + +test("text is recovered from whatever the router parsed the value into", () => { + expect(searchText("abc")).toBe("abc"); + expect(searchText(12345)).toBe("12345"); + expect(searchText(true)).toBe("true"); + expect(searchText(null)).toBe("null"); + expect(searchText({ a: 1 })).toBe('{"a":1}'); + expect(searchText(["a"])).toBe('["a"]'); + // Present and empty is a value, not an absence; only an absent parameter is undefined. + expect(searchText("")).toBe(""); + expect(searchText(undefined)).toBeUndefined(); +}); + +test("the entry carries the key or omits it, never sets it to undefined", () => { + expect(searchTextEntry("flow_id", 12345)).toEqual({ flow_id: "12345" }); + expect(searchTextEntry("flow_id", undefined)).toEqual({}); + expect("flow_id" in searchTextEntry("flow_id", undefined)).toBe(false); +}); + +/* + * ROUND TRIP, which is the whole claim: what the verifier put in the URL is what a route reads. + * `parseSearchText` is the router's own parsing, so this is the real path a browser takes. + */ +test("a handle survives the URL whatever it is made of", () => { + const handles = [ + "fl_01HQ8Z", + "12345", + "0123", + "1e3", + "12345678901234567890", + '{"a":1}', + "true", + "null", + "a b&c/../d", + ]; + for (const handle of handles) { + const url = `?flow_id=${encodeURIComponent(handle)}`; + expect(searchText(parseSearchText(url).flow_id)).toBe(handle); + } +}); + +test("a parameter that is not there stays not there", () => { + expect(searchText(parseSearchText("?other=1").flow_id)).toBeUndefined(); +}); + +/** + * AND THE SHAPE THAT CAUSED IT DOES NOT COME BACK. A `typeof search.x === "string"` test in a + * route's `validateSearch` is the defect itself: it reads "keep it when it is text" and means "drop + * it whenever the sender's value happened to be valid JSON". Routes read text through `searchText`. + */ +const ROUTES_DIR = join(import.meta.dir, "../src/routes"); +const DROPPED_STRING = /typeof\s+search\??\.\w+\s*===\s*["']string["']/; + +test("no route reads a search parameter by guarding on its parsed type", () => { + // The walk and the line-splitting are the shared scanner's (server/tests/support): recursive, + // and LOGICAL lines — prettier wraps `typeof search.flowId ===` away from its `"string"`, and + // read one physical line at a time this guard would have reported green on the very shape it + // exists to catch. + const files = sourceFiles(ROUTES_DIR, [".ts", ".tsx"]); + expect(files.length).toBeGreaterThan(10); + const offenders: string[] = []; + for (const file of files) { + for (const { line, text } of logicalLines(readFileSync(file, "utf8"))) { + if (DROPPED_STRING.test(text)) { + offenders.push(`${file.slice(ROUTES_DIR.length + 1)}:${line}`); + } + } + } + expect(offenders).toEqual([]); +}); diff --git a/app/tests/shared-connected-accounts.test.tsx b/app/tests/shared-connected-accounts.test.tsx index 9e47756c5..f768afa3b 100644 --- a/app/tests/shared-connected-accounts.test.tsx +++ b/app/tests/shared-connected-accounts.test.tsx @@ -88,6 +88,7 @@ describe("Settings for a Shared app", () => { verifiedAt: null, probe: null, checkable: false, + authorizesPerAction: false, authScheme: "OAUTH2", returnTo: "settings", report: () => {}, diff --git a/app/tests/sign-resume.test.tsx b/app/tests/sign-resume.test.tsx new file mode 100644 index 000000000..beddf0411 --- /dev/null +++ b/app/tests/sign-resume.test.tsx @@ -0,0 +1,303 @@ +import { afterAll, afterEach, beforeAll, expect, mock, test } from "bun:test"; +import { GlobalRegistrator } from "@happy-dom/global-registrator"; +import { QueryClient, QueryClientProvider } from "@tanstack/react-query"; +import { + createMemoryHistory, + createRootRoute, + createRoute, + createRouter, + Navigate, + Outlet, + RouterProvider, +} from "@tanstack/react-router"; +import { cleanup, render, waitFor } from "@testing-library/react"; +import userEvent from "@testing-library/user-event"; +import { authKeys } from "@/lib/auth/queries"; +import { resumeUrlFor } from "@/lib/auth/resume"; + +/* + * The Better Auth client is replaced at the module boundary: its fetch is captured when it is built, + * so a test cannot intercept the request. What this pins is what the screen hands the starter. + */ +type SignInSpy = ( + provider: string, + start: unknown, + callbackURL?: string, +) => Promise; +type DomainSignInSpy = ( + email: string, + start: unknown, + callbackURL?: string, +) => Promise; +const realAuthClient = { ...(await import("@/lib/auth/client")) }; +let signInSpy: SignInSpy = async () => {}; +let domainSignInSpy: DomainSignInSpy = async () => {}; +/* + * BOTH LEGS ARE SPIED, AND NEITHER IS A NO-OP. Replacing the module is how the screen is tested at + * all, but a replacement nobody asserts against tests nothing: `signInWithEmailDomain` stood here + * as `async () => {}` while the SSO form's callbackURL went unpinned, so the screen could stop + * passing the resume URL and this file stayed green. What the module boundary cannot see — the + * real client dropping a callbackURL it was handed — is pinned in `auth-client.test.ts`, which + * drives the real functions through their injectable starter. The two together cover the handoff. + */ +mock.module("@/lib/auth/client", () => ({ + providerName: () => "Google", + signInWith: (...args: Parameters) => signInSpy(...args), + signInWithEmailDomain: (...args: Parameters) => + domainSignInSpy(...args), +})); +const { Route } = await import("@/routes/sign"); + +beforeAll(() => { + GlobalRegistrator.register(); + // happy-dom starts at about:blank, whose origin is "null": nothing to build a callback URL on. + ( + window as unknown as { happyDOM: { setURL(url: string): void } } + ).happyDOM.setURL("http://localhost:3010/"); +}); +afterEach(() => { + cleanup(); +}); +afterAll(() => { + // Module mocks are process-wide in bun: hand the real client back to whatever runs next. + mock.module("@/lib/auth/client", () => realAuthClient); + GlobalRegistrator.unregister(); +}); + +/* + * THE HANDLE IS A VALUE, NEVER A DESTINATION: it is encoded into a path this code builds on this + * origin, so what arrives in a URL cannot decide where the browser goes. + */ +test("resumeUrlFor puts an encoded handle on the verifier, and is the origin without one", () => { + expect(resumeUrlFor("https://app.example", "a b&c/../d")).toBe( + "https://app.example/api/plugins/arcade/verify?flow_id=a%20b%26c%2F..%2Fd", + ); + expect(resumeUrlFor("https://app.example", undefined)).toBe( + "https://app.example", + ); + expect(resumeUrlFor("https://app.example", "")).toBe("https://app.example"); + // A hostile handle stays a value on this origin. + const hostile = resumeUrlFor("https://app.example", "https://evil.test/"); + expect(new URL(hostile).origin).toBe("https://app.example"); + // Length-capped. + expect( + resumeUrlFor("https://app.example", "x".repeat(5000)).length, + ).toBeLessThan(600); +}); + +test("validateSearch keeps the handle whatever shape the router parsed it into", () => { + const validate = Route.options.validateSearch as (s: unknown) => object; + expect(validate({ flow_id: "abc" })).toEqual({ flow_id: "abc" }); + /* + * THE ROUTER JSON-PARSES SEARCH VALUES, so a handle the vendor happened to mint out of digits + * arrives as a number and a JSON-shaped one as an object. Both are still the text the verifier + * sent; dropping them is losing the correlation for whichever ids the generator happens to emit. + */ + expect(validate({ flow_id: 12345 })).toEqual({ flow_id: "12345" }); + expect(validate({ flow_id: { a: 1 } })).toEqual({ flow_id: '{"a":1}' }); + expect(validate({ flow_id: ["a"] })).toEqual({ flow_id: '["a"]' }); + expect(validate({ flow_id: true })).toEqual({ flow_id: "true" }); + expect("flow_id" in validate({})).toBe(false); +}); + +/** The whole return leg: what the verifier put in the URL is what sign-in carries back to it. */ +test("a numeric or JSON-shaped handle survives the round trip to the verifier", async () => { + const validate = Route.options.validateSearch as (s: unknown) => { + flow_id?: string; + }; + const numeric = await redirectFrom(validate({ flow_id: 12345 })); + expect(numeric.options.href).toBe("/api/plugins/arcade/verify?flow_id=12345"); + const shaped = await redirectFrom(validate({ flow_id: { a: 1 } })); + expect(shaped.options.href).toBe( + `/api/plugins/arcade/verify?flow_id=${encodeURIComponent('{"a":1}')}`, + ); +}); + +function signedInContext() { + const queryClient = new QueryClient(); + queryClient.setQueryData(authKeys.currentUser(), { id: "u1" }); + return { queryClient }; +} + +async function redirectFrom(search: { flow_id?: string }) { + const beforeLoad = Route.options.beforeLoad as (a: unknown) => Promise; + try { + await beforeLoad({ context: signedInContext(), search }); + } catch (thrown) { + return thrown as { options: { to?: string; href?: string } }; + } + throw new Error("expected a redirect"); +} + +test("a signed-in arrival with a handle goes to the verifier, without one to /", async () => { + const withHandle = await redirectFrom({ flow_id: "f 1" }); + expect(withHandle.options.href).toBe( + "/api/plugins/arcade/verify?flow_id=f%201", + ); + const without = await redirectFrom({}); + expect(without.options.to).toBe("/"); + expect(without.options.href).toBeUndefined(); +}); + +/** The sign screen on `/sign?flow_id=h1`, with whichever ways in the deployment offers. */ +function renderSignScreen(options: { + providers: string[]; + sso: boolean; + ssoRequired: boolean; +}) { + const queryClient = new QueryClient(); + queryClient.setQueryData(authKeys.providers(), options); + + queryClient.setQueryData(authKeys.currentUser(), null); + const root = createRootRoute(); + const sign = Route.update({ + id: "/sign", + path: "/sign", + getParentRoute: () => root, + } as never); + // The route tree is assembled by hand, so its types cannot describe it. + const router = createRouter({ + routeTree: root.addChildren([sign]), + context: { queryClient }, + history: createMemoryHistory({ initialEntries: ["/sign?flow_id=h1"] }), + } as never) as never; + const view = render( + + + , + ); + return { + view, + user: userEvent.setup({ document: view.container.ownerDocument }), + }; +} + +/** Where a press on this screen has to send the browser back to, with `?flow_id=h1` carried in. */ +const RESUME_URL = "/api/plugins/arcade/verify?flow_id=h1"; + +test("the sign-in starter gets the resume URL as its callbackURL", async () => { + const asked: string[] = []; + signInSpy = async (_provider, _start, callbackURL) => { + asked.push(callbackURL ?? ""); + }; + + const { view, user } = renderSignScreen({ + providers: ["google"], + sso: false, + ssoRequired: false, + }); + await user.click(await view.findByText(/Continue with Google/)); + await waitFor(() => expect(asked).toHaveLength(1)); + expect(asked[0]).toBe(`${window.location.origin}${RESUME_URL}`); +}); + +/** + * The company-account way in resumes too, and it was the leg nothing watched. + * + * A deployment whose people arrive through their own IdP has no provider buttons to press, so the + * form below them IS the sign-in for everybody there. Leaving its callbackURL unpinned meant the + * resume could be dropped for exactly those deployments and every test stayed green. + */ +test("the company-account form gets the resume URL as its callbackURL", async () => { + const asked: string[] = []; + domainSignInSpy = async (_email, _start, callbackURL) => { + asked.push(callbackURL ?? ""); + }; + + const { view, user } = renderSignScreen({ + providers: [], + sso: true, + ssoRequired: false, + }); + await user.type( + await view.findByPlaceholderText("you@company.com"), + "someone@company.com", + ); + await user.click(await view.findByText(/Continue with your company account/)); + await waitFor(() => expect(asked).toHaveLength(1)); + expect(asked[0]).toBe(`${window.location.origin}${RESUME_URL}`); +}); + +/* + * THE RETURN LEG HAS TO ACTUALLY ARRIVE. + * + * The verifier is an API path, not a route in this app's tree. A redirect the router is left to + * handle inside the app therefore matches nothing, and `__root.tsx`'s `notFoundComponent` sends an + * unknown address home — so somebody who was asked to sign in half-way through connecting an app + * signs in and lands on the home screen, with the authorization they started left behind and + * nothing said about it. Only a document navigation reaches the verifier at all, which is why this + * asserts on WHERE THE BROWSER ENDS UP rather than on the shape of the thrown redirect. + */ +test("a signed-in arrival with a handle lands on the verifier, not back on the home screen", async () => { + const queryClient = new QueryClient(); + queryClient.setQueryData(authKeys.currentUser(), { id: "u1" }); + queryClient.setQueryData(authKeys.providers(), { + providers: ["google"], + sso: false, + ssoRequired: false, + }); + + // Leaving the single-page app is an assignment to `window.location`; record it rather than ask + // happy-dom to fetch a path no server is listening on in this test. + const left: string[] = []; + const realLocation = window.location; + Object.defineProperty(window, "location", { + configurable: true, + value: { + origin: realLocation.origin, + get href() { + return left.at(-1) ?? `${realLocation.origin}/sign?flow_id=h1`; + }, + set href(url: string) { + left.push(url); + }, + replace: (url: string) => left.push(url), + assign: (url: string) => left.push(url), + }, + }); + + const root = createRootRoute({ + component: () => , + // Mirrors app/src/routes/__root.tsx: an address this build does not know goes home. + notFoundComponent: () => , + }); + const home = createRoute({ + getParentRoute: () => root, + path: "/", + component: () =>

home

, + }); + const sign = Route.update({ + id: "/sign", + path: "/sign", + getParentRoute: () => root, + } as never); + // The route tree is assembled by hand, so its types cannot describe it. + const router = createRouter({ + routeTree: root.addChildren([home, sign]), + context: { queryClient }, + history: createMemoryHistory({ initialEntries: ["/sign?flow_id=h1"] }), + } as never) as never; + + try { + render( + + + , + ); + // Where the browser is: the document it was sent to, or the in-app location when it was never + // sent anywhere. + const destination = () => + left.at(-1) ?? + (router as unknown as { state: { location: { href: string } } }).state + .location.href; + await waitFor(() => expect(destination()).not.toContain("/sign")); + expect(destination()).toBe("/api/plugins/arcade/verify?flow_id=h1"); + // And it got there by leaving the app, which is the only way the verifier is ever requested. + expect(left).toEqual(["/api/plugins/arcade/verify?flow_id=h1"]); + } finally { + Object.defineProperty(window, "location", { + configurable: true, + value: realLocation, + }); + } +}); diff --git a/app/tests/skills-read-failure.test.tsx b/app/tests/skills-read-failure.test.tsx index 4ea13347a..47d465eda 100644 --- a/app/tests/skills-read-failure.test.tsx +++ b/app/tests/skills-read-failure.test.tsx @@ -90,6 +90,7 @@ function answeredEmpty() { botsMayCallBack: true, redirectUri: null, composioConfigured: false, + authorizesPerAction: false, }; client.setQueryData(pluginKeys.page(), page); return client; diff --git a/biome.json b/biome.json index 686c6088e..df482e3e6 100644 --- a/biome.json +++ b/biome.json @@ -9,7 +9,8 @@ "!app/src/routeTree.gen.ts", "!desktop/src-tauri/gen", "!**/target", - "!server/drizzle" + "!server/drizzle", + "!server/tests/fixtures/arcade-catalogue.json" ] }, "formatter": { diff --git a/bun.lock b/bun.lock index c80a18591..d982d5df5 100644 --- a/bun.lock +++ b/bun.lock @@ -71,6 +71,7 @@ "@ag-ui/client": "1.0.1", "@ag-ui/core": "1.0.1", "@ag-ui/mastra": "1.1.6", + "@arcadeai/arcadejs": "2.4.1", "@better-auth/drizzle-adapter": "^1.7.1", "@better-auth/electron": "1.7.1", "@better-auth/expo": "1.7.1", @@ -197,6 +198,8 @@ "@antfu/install-pkg": ["@antfu/install-pkg@1.1.0", "", { "dependencies": { "package-manager-detector": "^1.3.0", "tinyexec": "^1.0.1" } }, "sha512-MGQsmw10ZyI+EJo45CdSER4zEb+p31LpDAFp2Z3gkSd1yqVZGi0Ebx++YTEMonJy4oChEMLsxZ64j8FH6sSqtQ=="], + "@arcadeai/arcadejs": ["@arcadeai/arcadejs@2.4.1", "", { "bin": { "arcadeai-arcadejs": "bin/cli" } }, "sha512-DLpvvDBvRNjzVmFYJ+upPrUJ8YRBoGWqPfzhuFp2+lh5Shxm0l9qLwe1Ah4pKvuCatU7TLOOTkFpICitTuuJeQ=="], + "@authenio/xml-encryption": ["@authenio/xml-encryption@2.0.2", "", { "dependencies": { "@xmldom/xmldom": "^0.8.6", "escape-html": "^1.0.3", "xpath": "0.0.32" } }, "sha512-cTlrKttbrRHEw3W+0/I609A2Matj5JQaRvfLtEIGZvlN0RaPi+3ANsMeqAyCAVlH/lUIW2tmtBlSMni74lcXeg=="], "@babel/code-frame": ["@babel/code-frame@7.29.7", "", { "dependencies": { "@babel/helper-validator-identifier": "^7.29.7", "js-tokens": "^4.0.0", "picocolors": "^1.1.1" } }, "sha512-Aup7aUOfpbAUg2ROOJN6Iw5f9DMBlzu0mIkm/malLQFN/YQgO48wCj0Kxa3sEHJvPVFg7siR+qRInwXd2qhQKw=="], diff --git a/docker-compose.yml b/docker-compose.yml index f59f104cd..a7c861443 100644 --- a/docker-compose.yml +++ b/docker-compose.yml @@ -59,7 +59,12 @@ services: # than relying on this variable. image: ${SERVER_IMAGE:-openbot-server:latest} pull_policy: ${IMAGE_PULL_POLICY:-build} - command: ["bun", "x", "drizzle-kit", "migrate", "--config=drizzle.config.ts"] + # The server's own migrator, which is what this image actually ships: `drizzle-kit` is a + # development dependency that `bun x` had to fetch at run time, and it is the one migrator that + # will skip a migration stamped below what the database has already recorded and still report + # success (see server/src/db/migration-reach.ts). The local stack is a developer's database and + # therefore one of the places that happens. + command: ["bun", "scripts/migrate.ts"] environment: DATABASE_URL: postgres://openbot:openbot@postgres:5432/openbot depends_on: diff --git a/docs/deployment.md b/docs/deployment.md index a695fa884..354547196 100644 --- a/docs/deployment.md +++ b/docs/deployment.md @@ -181,6 +181,26 @@ against an empty database. The script uses the migrator inside `drizzle-orm`, wh dependency, and keeps the same journal, so a database migrated by either is migrated. It is what this image's own start-up path and the Helm chart's migration Job both run. +**If a migration run refuses with "the migrator only runs migrations stamped after the newest one it +finds"**, this database has recorded a migration stamped later than one it is now being asked to +apply, and nothing has been applied. The migrator decides what to run by comparing journal +timestamps against the newest timestamp in `drizzle.__drizzle_migrations` and nothing else, so a +migration stamped below that mark would be walked past and the run reported as a success over the +tables it should have created. The refusal names every migration in that position. + +It happens when a database ran a branch's migrations before that branch was merged: merging renumbers +and restamps the branch's migrations to sit after the ones it merged in, and those merged-in +migrations are older than the stamp the database already holds. Development, preview and reused CI +databases are where it is met. + +Recreate the database from empty if it is disposable. If it is not, apply each named migration's SQL +by hand and record it, which leaves the high-water mark where it is and lets the next run proceed: + +```sql +insert into drizzle.__drizzle_migrations (hash, created_at) +values ('.sql>', ); +``` + ## Replicas The page snapshot a Bot resolves element references against lives in Postgres, so a second replica diff --git a/docs/development.md b/docs/development.md index f6da20edd..9598a23b1 100644 --- a/docs/development.md +++ b/docs/development.md @@ -104,6 +104,14 @@ registered in the journal, and it is the only migration anybody should be writin CI enforces two things about this: `drizzle-kit check` for collisions and gaps between migrations, and a generate-and-fail-if-dirty probe that refuses a schema change with no migration written for it. +**If `db:migrate` refuses with "the migrator only runs migrations stamped after the newest one it +finds"**, your database ran a branch's migrations before that branch was merged. Merging renumbers +the branch's migrations to sit after the ones it merged in, and those merged-in migrations are now +stamped older than what your database already recorded — so the migrator would skip them and report +success over the tables they should have created. Nothing is applied; the refusal names them. Drop +and recreate the database, which is almost always the right answer for a development one; see +[deployment.md](deployment.md) for how to repair one you have to keep. + **If `drizzle-kit migrate` hangs and then exits non-zero with no error**, the journal names a migration file that is not there. A rebase does this: `meta/_journal.json` is a checked-in file, so restoring it can reinstate entries for migrations that were renamed. `drizzle-kit check` reports diff --git a/docs/plugins/arcade.md b/docs/plugins/arcade.md new file mode 100644 index 000000000..f98a5d357 --- /dev/null +++ b/docs/plugins/arcade.md @@ -0,0 +1,302 @@ +# Arcade + +Arcade is a broker, the same kind of thing Composio is: it holds people's accounts at other apps — +Gmail, Google Calendar, GitHub, Asana and more — and publishes each app's actions as tools this +deployment can call on somebody's behalf. A Bot with a brokered action granted reaches the app **as +the person asking**, so two people asking the same question get the answers their own accounts can +see. Where Arcade differs from Composio is the part an operator has to set up: **an Arcade project +needs an OAuth app of your own for every provider, and one manual step in Arcade's dashboard.** This +page is about those, and about what to tell somebody when a connection looks wrong. + +Read [Composio](composio.md) first if you have not: what a broker is, what Personal and Shared mean, +the approval rules and the audit trail are the same here and are not repeated. + +Some things on this page are stated as **unproven**, and the last section lists them. Everything +else marked _measured_ was observed against a live Arcade project. + +## Who sets what, and where + +Setting it up takes three hands, and none of them can do another's: + +| Who | Does | Where | +| ---------------- | ------------------------------------------------------------ | ----------------------------------------------------------------- | +| Whoever deploys | Sets `ARCADE_API_KEY` | The deployment's environment. There is no screen for it | +| Whoever deploys | Sets `OPENBOT_BROKER_PROVIDER`, only where both keys are set | The deployment's environment | +| Whoever deploys | Registers an OAuth app per provider, and sets the verifier | Arcade's dashboard, below | +| An administrator | Enables an app and grants its actions to a Bot | `/admin/plugins/arcade`, then the app's own page, as for Composio | +| Each person | Connects their own account to that app | `/settings/connected-accounts` | + +The key is an environment variable and nothing else, as Composio's is. No administrator can turn +Arcade on from a page; `/admin/plugins/arcade` is where a key that is already set gets used. + +### Choosing the provider + +A deployment runs one broker at a time. `OPENBOT_BROKER_PROVIDER` takes `composio` or `arcade`, and +anything else stops the server at startup. + +**Where exactly one of the two keys is set and the variable is unset, that provider is the active +one, so no existing deployment has to set anything.** The variable matters only when both keys are +set. Setting both is legal and expected, because ending an account at the old vendor needs that +vendor's key. With both set, the variable has to say which one is live: both set and the variable +unset stops the server at startup rather than coming up with no broker at all. + +**Connections already made are still read as their own provider's while nothing is active.** A +deployment whose broker key has been withdrawn afterwards names the slice it reads from the +`brokered_connections` rows it actually holds, so an Arcade deployment does not have its Arcade +connections read as Composio ones, shown as absent, and left unrevokable. No broker is live in that +state, so nothing can be connected or revoked until a provider is named. Holding rows at BOTH +vendors with nothing active is refused rather than guessed at, which is the activation refusal from +the other side. (Both keys set with the variable unset does not reach this: that state is refused at +startup, above.) + +Three refusals protect this, and all three are deliberate: + +- **A named provider whose key is not set stops the server at startup.** An operator sees: _OPENBOT_BROKER_PROVIDER=arcade names a provider whose ARCADE_API_KEY is not set to a key. Set ARCADE_API_KEY to this deployment's key, or change or unset OPENBOT_BROKER_PROVIDER._ It does not fall back to a deployment with no broker, because that would send somebody looking for a broken vendor instead of at their own environment. A key that is empty or all whitespace — `ARCADE_API_KEY=` with nothing after it — is no key: that provider counts as unconfigured, and no client is ever built on an empty credential. +- **Both keys set with the variable unset stops the server at startup.** An operator sees: _COMPOSIO_API_KEY and ARCADE_API_KEY are both set and OPENBOT_BROKER_PROVIDER is unset, so no provider is active and nothing brokered would work. Set OPENBOT_BROKER_PROVIDER to composio or arcade to say which vendor is live, or unset the key of the vendor this deployment is not using._ Nobody wants that state on purpose — the deployment would hold two vendor keys and broker nothing — and wiring no broker silently would surface much later and far away, as brokered features that simply do not work. "Both set" counts only keys that hold something: two blank keys are no keys, and are reported as such rather than as two configured vendors. +- **Activating a provider is refused while the other one still holds connections.** It is keyed on connection rows, not on keys. The message names the provider being activated, how many connections still belong to the other, and tells the operator to keep both keys set and end those connections through the other provider's sunset flow first. Switching by editing the environment would leave accounts nobody can revoke. +- **Holding connections at BOTH providers while nothing is active stops the server at startup.** It is the refusal above seen from the other side: with no provider named there is nothing to read one vendor's rows as, and reading them as the other's is the failure this whole section exists to prevent. The message names both vendors and asks the operator to set `OPENBOT_BROKER_PROVIDER` and to end the other provider's connections through its own sunset flow. + +## Setting up the Arcade project + +### One Arcade project per deployment + +Create one Arcade project for each deployment, and do not share. The verifier URL (below) is a +setting of the **project**, and a staging deployment and a production deployment have different +addresses, so they cannot both be pointed at by one project's setting. A project shared between them +would have its verifier pointing at one and failing for the other. + +### An OAuth app of your own, per provider + +**Arcade's preconfigured providers cannot be used.** Register your own OAuth app at each provider +(Google, GitHub, and so on) and give its client id and secret to Arcade as that provider's +configuration. + +This was confirmed the hard way, and the reason matters because it is not a preference. A consent +link was minted for an arbitrary `user_id` against Arcade's default Google provider. It **failed at +verification** with _"the authorization process was not completed"_. The same consent minted for an +Arcade project member's own identity **completed**. Arcade's built-in verifier has to recognise the +end user as a member of the project, so it can only serve a `user_id` that is one. Per-person +connections in OpenBot are arbitrary ids by definition — nobody is made a member of your Arcade +project in order to connect their mailbox — so a default provider cannot serve them at all. + +Arcade's admin API can create the OAuth provider, so that part can be scripted. + +> **Decide about the agentic-client checkbox deliberately — unproven.** Google's console offers +> _"Use this client for an AI-powered agent"_ on an OAuth client. It is a self-declaration, and +> ticking it puts that client under a separate administrative-policy surface; Google's own advice is +> to register separate client ids for human workflows and agent workflows. Every brokered call +> OpenBot makes is agent-initiated, so this is a choice a deployer should make on purpose rather +> than leave at its default. **It was not exercised:** the client used for the measurements on this +> page was registered with the box left unticked, deliberately, to keep a policy variable out of the +> measurement. What ticking it changes in practice is therefore not known here. + +### The verifier URL is the one dashboard-only step + +**The verifier URL cannot be automated.** It is set by hand in the Arcade dashboard, on the project, +and there is no API that does it. It is the single manual step in setting Arcade up, and it is the +one that is easy to do wrongly, so it is stated here rather than left to be discovered. + +Set it to this deployment's verifier address, then switch the project to a custom verifier. The +address is this API's public origin — `OPENBOT_PUBLIC_URL`, which defaults to `BETTER_AUTH_URL` — +followed by the path, so paste: + +``` +/api/plugins/arcade/verify +``` + +It is the API's origin, not the browser app's, where the two differ. A browser that arrives there +is sent on to the connected-accounts page, with a reason beside it if the consent was refused. + +> **Do not save the custom-verifier setting without a URL.** It switches off the path that currently +> works and switches on nothing — and it presents as _this deployment's own code failing_: consents +> that used to complete stop completing, with nothing in this deployment's logs to explain it. It is +> the trap an operator will otherwise spend an afternoon on. If connections stop completing and +> nothing here changed, look at the project's verifier setting before anything in this deployment. + +## What an administrator does + +The shape is Composio's: enable an app, grant its actions to a Bot, and each person connects their +own account (or an administrator connects a Shared app's account). Two things are different and +worth reading before pressing **Add**. + +### Toolkits are curated or they are wrappers, and the difference is measured + +Every action carries a classification — whether it reads or writes, whether it is destructive — and +what OpenBot asks before running it depends on that classification. Arcade publishes it as +`metadata.behavior` on each tool, and toolkits fall into two groups: + +| Toolkit | Tools | With `metadata.behavior` | +| ----------- | ------------------ | -----------------------: | +| `Github` | 43 | 43 | +| `Asana` | 19 | 19 | +| `GithubApi` | 100 (the page cap) | **0** | + +Curated toolkits classify every tool. Generated API wrappers classify none. An action that is not +classified is treated as a **destructive write**, because an unlabelled action is not claiming to be +safe. So an administrator enabling an unclassified toolkit is warned **before** finishing that +**every call will ask for approval** — not because anything is wrong with the toolkit, but because +nothing in it can be told apart from a write that cannot be undone. Where a curated toolkit exists +for the app, enable that one. + +## Least privilege is not an Arcade property + +Do not tell anybody that Arcade gives least-privilege access. It is true for some providers and +false for others, and the same product is on both sides of the line. + +Arcade asks for consent per action. What that consent _covers_ depends on whether the provider +issues per-request scopes. Measured, through a completed consent, from a clean baseline: + +| Provider | Scopes per action | One read consent authorized | Isolation | +| ------------------------- | --------------------------------------------------- | --------------------------- | --------- | +| Google (`Gmail`) | `gmail.readonly` vs `gmail.send` vs `gmail.compose` | **11 of 30** | yes | +| GitHub (via a GitHub App) | **none, for any action** | **43 of 43** | no | + +The Google row has since been re-measured through this deployment's own code against the live API, +from a clean baseline and one real consent: before consenting, **0 of 30** scope-carrying `Gmail` +actions were authorized; after consenting to a single action (`Gmail.GetEmail`), **11 of 30** — and +**nothing outside the scopes that consent granted**. Per-action isolation on Google holds, measured +twice now and no longer resting on the throwaway harness that first found it. + +On Google, consenting to a read authorizes the reads that share its scope and nothing that sends. +On GitHub, consenting to `Github.CountStargazers` — **a read** — flipped all 43 actions to +authorized, **the writes and the destructive one included**, because a GitHub App's permissions are +fixed when the app is registered, and no request can ask for fewer. + +> **Least privilege is a property of (provider × how its OAuth app was registered), not of Arcade.** +> What OpenBot does is **measure which it is, per app, and say so before anybody grants anything.** + +So when somebody asks whether connecting an app "only lets it read", the answer is whatever that +app's measurement says, not what Arcade says in general. The pre-redirect consent copy names the +permission being asked for and lists the actions that share it, grouped on scopes. + +## Scope versus tool grant + +Two different questions are easily run together, and an operator will be asked both: + +- **Scope** answers _"may this deployment ever read your mail?"_ It is the provider's, it is given + when somebody consents, and it stays until it is withdrawn at the provider. +- **The tool grant** answers _"may **this Bot** call `ListThreads`?"_ It is an administrator's + decision, made per Bot, per action. + +**Only the second is OpenBot's to give and take instantly**, and no consent widens it. Somebody +consenting to a broad scope does not hand any Bot more actions; a Bot with no grant for an action +cannot call it however much the account allows. On a provider that cannot narrow scopes (GitHub +above), the tool grant is therefore the entire narrowing — the same position as Composio's. + +## `provider_id` means three different things + +An operator reading an Arcade dashboard, or an API response, or a refusal this deployment quotes, +will meet the field `provider_id` on three different objects — and it means something different on +each. _Measured_ against a live project: + +| Where you are reading it | What it is | Example | +| --------------------------------------------------- | ------------------------------------------------ | ------------------------------------ | +| A **tool** listing, `requirements.authorization` | the provider **type** — the vendor | `google` | +| A **user connection** row | the provider **instance** — a configuration | `google-openbot`, `cpk-poc` | +| An **auth provider** config | `id` is the instance, `provider_id` is the type | `id: arcade-google` of type `google` | + +The auth-provider config is the only bridge between the other two. Verbatim, from a live project: + +``` +{"id":"cpk-poc", "provider_id":"github", "type":"oauth2", "status":"active"} +{"id":"google-openbot", "provider_id":"google", "type":"oauth2", "status":"active"} +{"id":"arcade-google", "provider_id":"google", "type":"oauth2", "status":"active"} +``` + +A connection row carries **no vendor-type field at all**. Its full key set, verbatim: + +``` +id, provider_type, connection_id, connection_status, scopes, user_id, provider_id, +provider_description, provider_user_info +``` + +`provider_type` there is `"oauth2"` — the auth **scheme**, not the vendor. So the instance id is the +only thing on a connection that says which vendor it belongs to, and the only way from a tool's +`google` to a person's row is through the list of configured providers of type `google`. + +**This bit this deployment once.** A connection lookup compared a tool's type against a row's +instance — `"google"` against `"google-openbot"` — and so matched nothing on every real deployment, +Arcade's own default providers included, since those are named `arcade-google` and `arcade-github` +and never the bare type. It did not present as an error: a connection that existed read as +**not connected**, with no account name beside it. It is fixed, and it is written down here because +the same confusion is waiting for whoever next reads two Arcade objects side by side. **If a +connection you can see in Arcade's dashboard looks absent in OpenBot, check that the provider the +person connected under is one this project has configured** — a provider configuration deleted while +somebody's connection outlived it reads the same way, and deliberately so: OpenBot leaves a row it +cannot attribute alone rather than guess which vendor it belongs to. + +## Disconnecting one app may end another + +Arcade's connections are per **auth provider**, not per app, and the sharing is _measured_ rather +than inferred: on a live project the provider behind both `Gmail` and `GoogleCalendar` is the single +type `google` (`{"Gmail":["google"],"GoogleCalendar":["google"]}`), named after neither toolkit. One +Google connection serves them both, and **no narrower instrument exists** — there is nothing to +disconnect that ends only one of them. **Somebody disconnecting Gmail can end their Calendar**, in +production, today. + +So before somebody confirms a disconnect, OpenBot names the apps that genuinely share the +connection and would end with it. _Genuinely_ is exact: siblings are computed on the **pair (vendor +identity, auth provider)**. Two _Shared_ apps that both use Google do **not** share a connection, +because each Shared app has its own randomly minted identity at Arcade — disconnecting one does not +touch the other, and the confirmation does not claim it would. + +## Revoking at Arcade is not revoking at the provider + +Google's consent screen is reached with `include_granted_scopes=true`, so **grants accumulate on the +account**. Somebody who consents to a read and later to a write holds both at Google, as one grant. + +Disconnect deletes the Arcade connection. That ends **this deployment's** ability to act, and +OpenBot asks for the upstream withdrawal as well, but what the provider then does with the standing +grant happens out of sight. **Nobody should read Disconnect as "my Google account no longer trusts +this."** The person who wants that has to withdraw the grant at the provider itself, and an operator asked +about it should say so rather than reassure. + +## The Re-check path, and what an unverified row means + +Composio has a one-call probe, `askAction`, that verifies a key and which Re-check runs again. +**It is Composio's own. Arcade has no counterpart in this release.** + +What an operator sees on Arcade: + +- Pressing **Re-check** **refuses** rather than spending a call. It does not guess at a read to try. +- `probe_action` and `verified_at` are **not written** for an Arcade connection. +- A row therefore carries no "last checked" date. + +**Nobody should read an unverified row as a broken connection.** Per-action state on Arcade is not +cached here and compared later: it is read **live from Arcade** — whether the person has authorized +an action is asked of Arcade when the page is drawn, so the answer on screen is Arcade's current +one. A connection that works and has never been "checked" is the normal state, not a fault. + +## A consent coming back for the wrong person + +A consent that completes but belongs to a different identity than the attempt it is returning to is +refused, and nothing is written either way. **What Arcade answers in that case carries no reason**: +_measured_, confirming a return as the wrong user answers a generic `400`, `coordinator_error`, +message `"Bad request"`, with nothing in it that names an identity mismatch. + +So the refusal a person sees is the ordinary **vendor-unavailable** one, not a sentence about the +wrong account. That is a worse message and nothing more: the attempt row is left untouched, and +the returning authorization is in any case compared to the id this deployment minted, which is the +check that actually binds the return leg to the attempt. An operator shown a vendor-unavailable +refusal on a consent that seemed to complete should consider the wrong-account case among the +causes, because the vendor will not say. + +## What is unproven + +The measurements above were taken against a live Arcade project, most of them through this +deployment's own code. What remains unproven is listed here, and nothing else on the page is. + +- **The agentic-client checkbox was not exercised.** Google's _"Use this client for an AI-powered + agent"_ declaration was deliberately left unticked for the measurements, so that it was not a + variable in them. Its effect on consent, scopes or policy here is not known; see the deployer note + above. +- **The wording of Arcade's dashboard is not described here.** This page says to set the project's + verifier to the address above and does not name the dashboard's fields or screens, which were not + checked against it and may change. The address itself is this deployment's. + +## See also + +- [Composio](composio.md) — the other broker; Personal and Shared apps, approvals and audit work the + same way. +- [Architecture](../architecture.md) — where plugins, grants, policy and audit sit. +- [Configuration](../configuration.md) — the deployment's settings. diff --git a/package.json b/package.json index c4324173a..369144c19 100644 --- a/package.json +++ b/package.json @@ -20,11 +20,15 @@ "lint": "bunx biome lint --error-on-warnings .", "test": "bun test", "typecheck": "bun run --filter '*' typecheck", + "typecheck:tests": "bun scripts/typecheck-tests.ts", "test:ci": "bun scripts/test-ci.ts", + "test:server:sharded": "bun scripts/test-server-sharded.ts", + "test:mutations": "bun scripts/mutation-register.ts", "pretest": "bun run generate:app-config", "test:smoke": "OPENBOT_SMOKE=1 bun test tests/smoke", "test:live-screen": "OPENBOT_LIVE_SCREEN=1 bun test agent-computer/tests/live-screen.test.ts agent-computer/tests/browser-close-announcement.test.ts agent-computer/tests/reset-run.test.ts", "test:live-composio": "bun -e \"if (!process.env.COMPOSIO_API_KEY?.trim()) { console.error('COMPOSIO_API_KEY is empty or unset, so every case in this suite would skip and this command would still exit 0. Run it as COMPOSIO_API_KEY=... bun run test:live-composio.'); process.exit(1) }\" && OPENBOT_LIVE_COMPOSIO=1 bun test server/tests/composio-live.test.ts", + "test:live-arcade": "bun -e \"if (!process.env.ARCADE_API_KEY?.trim()) { console.error('ARCADE_API_KEY is empty or unset, so every case in this suite would skip and this command would still exit 0. Run it as ARCADE_API_KEY=... bun run test:live-arcade.'); process.exit(1) }\" && OPENBOT_LIVE_ARCADE=1 bun test server/tests/arcade-live.test.ts", "diagram": "bun scripts/architecture-diagram.ts", "composio:smoke": "bun scripts/composio-smoke.ts", "mock:knowledge": "bun scripts/mock-knowledge-mcp.ts" diff --git a/scripts/mutation-register-preload.ts b/scripts/mutation-register-preload.ts new file mode 100644 index 000000000..f98ac4658 --- /dev/null +++ b/scripts/mutation-register-preload.ts @@ -0,0 +1,35 @@ +// Applies ONE mutation-register entry to a module's source as bun imports it. See +// `scripts/mutation-register.ts`, which spawns `bun test --preload` with this file. +// +// IN MEMORY, NEVER ON DISK. The loader hands bun the rewritten source; the file itself is never +// opened for writing, so a crashed, timed-out or interrupted run leaves the tree exactly as it was. +// +// The mark file is how the runner tells "the suite caught the mutation" apart from "the suite never +// imported the mutated file": it is written only when the rewrite actually happened. + +import { plugin } from "bun"; +import { readFileSync, writeFileSync } from "node:fs"; +import { join } from "node:path"; +import { mutate, REGISTER, REPO_ROOT } from "./mutation-register"; + +const id = process.env.MUTATION_REGISTER_ENTRY; +const mark = process.env.MUTATION_REGISTER_MARK; +const entry = REGISTER.find((e) => e.id === id); +if (!entry || !mark) { + throw new Error( + `mutation-register-preload: no register entry named ${JSON.stringify(id)}, or no mark path. Run it through scripts/mutation-register.ts.`, + ); +} +const target = join(REPO_ROOT, entry.path); +const escaped = target.replace(/[.*+?^${}()|[\]\\]/g, "\\$&"); + +plugin({ + name: `mutation-register:${entry.id}`, + setup(build) { + build.onLoad({ filter: new RegExp(`^${escaped}$`) }, (args) => { + const contents = mutate(readFileSync(args.path, "utf8"), entry); + writeFileSync(mark, entry.id); + return { contents, loader: args.path.endsWith(".tsx") ? "tsx" : "ts" }; + }); + }, +}); diff --git a/scripts/mutation-register.test.ts b/scripts/mutation-register.test.ts new file mode 100644 index 000000000..3eeb0226c --- /dev/null +++ b/scripts/mutation-register.test.ts @@ -0,0 +1,94 @@ +// The register's STATIC half, cheap enough for every test run: every entry still finds the exact +// expression it guards, its mutant still parses, and its named suites exist. Running the mutants +// themselves is `bun run test:mutations` (scripts/mutation-register.ts) — that is the half that +// proves the suites go red, and it spawns one `bun test` per entry, so it is not run from here. +// +// Why bother with this half: an entry whose expression was refactored away fails `test:mutations` +// loudly, but only when somebody runs it. This makes the same drift fail the ordinary suite, on the +// change that caused it, while the person who moved the code still knows what it was. + +import { describe, expect, test } from "bun:test"; +import { existsSync, readFileSync } from "node:fs"; +import { join } from "node:path"; +import { + ANCHOR_WINDOW, + locate, + type MutationEntry, + mutate, + REGISTER, + REPO_ROOT, +} from "./mutation-register"; + +const transpilers = { + ts: new Bun.Transpiler({ loader: "ts" }), + tsx: new Bun.Transpiler({ loader: "tsx" }), +}; + +describe("every register entry", () => { + test("has a unique id", () => { + const ids = REGISTER.map((e) => e.id); + expect(ids.filter((id, i) => ids.indexOf(id) !== i)).toEqual([]); + }); + + for (const entry of REGISTER) { + test(`${entry.id}: locates its quoted expression, and its mutant parses`, () => { + const source = readFileSync(join(REPO_ROOT, entry.path), "utf8"); + expect(locate(source, entry)).not.toHaveProperty("error"); + const mutant = mutate(source, entry); + expect(mutant).not.toBe(source); + // A syntax error would make every named test "fail" without telling any distinction apart. + const transpiler = entry.path.endsWith(".tsx") + ? transpilers.tsx + : transpilers.ts; + expect(() => transpiler.transformSync(source)).not.toThrow(); + expect(() => transpiler.transformSync(mutant)).not.toThrow(); + }); + + test(`${entry.id}: names 1-3 test files that exist`, () => { + expect(entry.tests.length).toBeGreaterThanOrEqual(1); + expect(entry.tests.length).toBeLessThanOrEqual(3); + for (const file of entry.tests) { + expect(existsSync(join(REPO_ROOT, file))).toBe(true); + } + }); + } +}); + +describe("locate", () => { + const entry = (over: Partial): MutationEntry => ({ + id: "x", + kind: "identity", + path: "f.ts", + find: "a.vendorUserId", + replace: "a.userId", + tests: ["t.test.ts"], + why: "", + ...over, + }); + + test("refuses a bare expression that occurs twice, rather than picking one", () => { + const source = "f(a.vendorUserId);\ng(a.vendorUserId);"; + expect(locate(source, entry({}))).toHaveProperty("error"); + }); + + test("an anchor picks the occurrence after it", () => { + const source = "f(a.vendorUserId);\nfunction g() { h(a.vendorUserId); }"; + const found = locate(source, entry({ anchor: "function g() {" })); + expect(found).toEqual({ index: source.lastIndexOf("a.vendorUserId") }); + }); + + test("does not re-aim at a sibling past the window when the guarded line is deleted", () => { + // The guarded expression after `function g() {` is gone; the next occurrence belongs to `k`. + const source = `function g() { h(); }\n${" ".repeat(ANCHOR_WINDOW)}\nfunction k() { h(a.vendorUserId); }`; + expect(locate(source, entry({ anchor: "function g() {" }))).toHaveProperty( + "error", + ); + }); + + test("refuses an anchor that is not unique", () => { + const source = "function g() { a.vendorUserId }\nfunction g() {}"; + expect(locate(source, entry({ anchor: "function g() {" }))).toHaveProperty( + "error", + ); + }); +}); diff --git a/scripts/mutation-register.ts b/scripts/mutation-register.ts new file mode 100644 index 000000000..15283e31d --- /dev/null +++ b/scripts/mutation-register.ts @@ -0,0 +1,464 @@ +#!/usr/bin/env bun +// The mutation register: known defects, planted on purpose, that named suites MUST catch. +// +// WHY THIS EXISTS. The defect class this repo's review cycles found most often is not a wrong line; +// it is a suite that cannot tell two things apart that the code must keep apart — a local id and a +// vendor id, a folded and an unfolded status, an absent field and an unreadable one, a scoped query +// and an unscoped one, a call made and a call silently not made. A suite like that stays green when +// the distinction is broken, so nothing fails and nothing changes. Each review wave checked this by +// hand — "five planted identity defects passed 245/245" — and the check was never recorded, so the +// next fake or fixture could re-collapse the distinction without anyone noticing. This file is that +// hand check, written down, so it can be re-run by anyone at any time. +// +// WHAT A RUN DOES, per entry: +// 1. Locates the entry's quoted expression in the target file (see "KEYED BY QUOTED EXPRESSION"). +// 2. Runs the entry's test files UNMUTATED, once per distinct file set. They must pass: a mutant +// "caught" by a suite that was already red proves nothing. +// 3. Runs the same files with the mutation applied IN MEMORY by `mutation-register-preload.ts`, +// a bun loader plugin that rewrites the module's source as it is imported. The file on disk is +// never written, so a crash, a timeout or a Ctrl-C cannot leave the tree mutated. The preload +// leaves a mark when it actually rewrote the module; no mark means the named suites never +// imported the file, which is the register being wrong, and it fails as such. +// 4. A mutant is KILLED when the run reports at least one `(fail)` test. Only a failing TEST +// counts — an import error or a crash is not a suite telling the distinction apart. +// +// THE VERDICT, and what each failure means: +// - an entry with no `survivesUntil` whose mutant SURVIVES → a coverage hole. The named suite +// cannot see this distinction any more. Fix the suite, not the register. +// - an entry WITH `survivesUntil` whose mutant is KILLED → the debt is paid. Delete the +// `survivesUntil` field so the entry starts guarding. +// - an expression that cannot be located → the guarded code changed. Re-quote it deliberately. +// +// `survivesUntil` IS A RECORD OF DEBT, the same discipline as `server/tests/typecheck-baseline.txt`: +// every entry carrying it is a real defect the suite cannot see today, named by the finding that +// owns it. Removing one because the suite now catches the mutant is always correct. ADDING one to +// an entry that was guarding is not — that is a suite losing coverage, and this check exists to say +// so. A new entry may land with `survivesUntil` only when the hole it records is pre-existing and +// has a finding id. +// +// KEYED BY QUOTED EXPRESSION, NEVER BY `path:line`. A line-keyed list goes red when someone rewraps +// a comment three functions above the guarded code, and people learn to re-baseline it without +// reading (`assertion-shape.test.ts`'s ALLOW list collided in three consecutive waves for exactly +// this reason; `sole-definition.test.ts`, keyed by path and quoted expression, never has). An entry +// names the expression itself. When the expression appears more than once in its file, `anchor` +// names a second quoted expression that occurs EXACTLY ONCE, and the mutated expression is its first +// occurrence after the anchor, within {@link ANCHOR_WINDOW} characters — so deleting the guarded +// line cannot silently re-aim the mutation at a sibling further down the file. +// +// Usage: +// bun run test:mutations # run every entry; exit 1 on any failure above +// bun run test:mutations [ ...] # run only the named entries +// bun run test:mutations --list # print the register without running anything +// +// Suites that need a database read TEST_DATABASE_URL from the environment, as they always do. + +import { existsSync, mkdtempSync, readFileSync, rmSync } from "node:fs"; +import { tmpdir } from "node:os"; +import { dirname, join, resolve } from "node:path"; +import { fileURLToPath } from "node:url"; + +export const REPO_ROOT = resolve(dirname(fileURLToPath(import.meta.url)), ".."); + +/** How far past its anchor an expression may start and still be the one the entry means. */ +export const ANCHOR_WINDOW = 600; + +/** + * The five ways a distinction collapses. Every entry is one of them. `casing` covers every + * normalization of a vendor word before it is compared: case, padding, and which words the + * comparison accepts at all. + */ +export type DistinctionKind = + | "identity" + | "casing" + | "absent-vs-unreadable" + | "query-scope" + | "call-made"; + +export interface MutationEntry { + /** Stable name, used on the command line and in the report. */ + id: string; + kind: DistinctionKind; + /** Repo-relative path of the production file the mutation applies to. */ + path: string; + /** Optional quoted expression occurring exactly once, used to locate a non-unique `find`. */ + anchor?: string; + /** The exact quoted expression the mutation replaces. */ + find: string; + /** What it is replaced with. Must still parse: a syntax error is not a kill. */ + replace: string; + /** Repo-relative test files, 1-3, that must go red under the mutation. */ + tests: string[]; + /** Why this mutation matters, and the watched red it is based on. */ + why: string; + /** Finding id that owns a KNOWN hole: the mutant is expected to survive until it is fixed. */ + survivesUntil?: string; +} + +export const REGISTER: MutationEntry[] = [ + { + id: "composio-revoke-asks-under-local-id", + kind: "identity", + path: "server/src/plugins/composio-client/consent.ts", + anchor: "async revoke({ account, toolkit }): Promise {", + find: "const userId = account.vendorUserId;", + replace: "const userId = account.userId;", + tests: ["server/tests/composio-adapter.test.ts"], + why: "A8a: withdrawal must ask Composio under the vendor id. Passed 245/245 before A8a; 18 fail after.", + }, + { + id: "composio-is-connected-asks-under-local-id", + kind: "identity", + path: "server/src/plugins/composio-client/consent.ts", + anchor: "async isConnected({ account, toolkit }): Promise {", + find: "const userId = account.vendorUserId;", + replace: "const userId = account.userId;", + tests: ["server/tests/composio-adapter.test.ts"], + why: "A8a: the gate ./access asks before running an action must ask under the vendor id. 0 fail before A8a; 3 after.", + }, + { + id: "arcade-connection-status-unfolded", + kind: "casing", + // K2: every vendor status is folded in ONE place, `vendorStatusOf` in the transport, so the + // per-site expressions this entry and the next once quoted are gone. Both re-quote the shared + // fold; each still names the suites that must see it for ITS reader. + path: "server/src/plugins/arcade.ts", + find: 'return { kind: "text", text: value.trim().toLowerCase() };', + replace: 'return { kind: "text", text: value };', + tests: [ + "server/tests/arcade-adapter-connections.test.ts", + "server/tests/arcade-adapter-status.test.ts", + ], + why: "A vendor-side change of case or padding on connection_status must not change whether somebody is shown as connected.", + }, + { + id: "arcade-mint-status-unfolded", + kind: "casing", + path: "server/src/plugins/arcade.ts", + find: 'return { kind: "text", text: value.trim().toLowerCase() };', + replace: 'return { kind: "text", text: value };', + tests: ["server/tests/arcade-authorize-status-engine.test.ts"], + why: "D6: deleting the fold on the mint's own status was reported to leave arcade-authorize-status-engine green, because :118 asserts only BrokerRefusalError, which the allowlist yields anyway. K2 added padded/re-cased allowlist rows that are handed on only when folded.", + }, + { + id: "arcade-mint-not-started-dropped", + kind: "casing", + path: "server/src/plugins/arcade-adapter.ts", + find: 'const MINT_AWAITS_CONSENT_STATUSES = new Set(["not_started", "pending"]);', + replace: 'const MINT_AWAITS_CONSENT_STATUSES = new Set(["pending"]);', + tests: ["server/tests/arcade-authorize-status-engine.test.ts"], + why: "D6: not_started, half the allowlist, is untested — a mint that has not begun would be refused as if it were finished. K2 added the not_started rows.", + }, + { + id: "arcade-unreadable-authorization-read-as-none", + kind: "absent-vs-unreadable", + // K2 moved `authorizationRequirementOf` into the transport, which both readers import. + path: "server/src/plugins/arcade.ts", + anchor: + 'if (typeof authorization !== "object" || Array.isArray(authorization)) {', + find: 'kind: "unreadable",', + replace: 'kind: "none",', + tests: [ + "server/tests/arcade-adapter-status.test.ts", + "server/tests/arcade-auth-provider.test.ts", + "server/tests/arcade-adapter-connections.test.ts", + ], + why: "C2/C2b: an authorization block that cannot be read is not the vendor saying none — reading it as none silently drops the consent requirement.", + }, + { + id: "arcade-unreadable-scopes-read-as-none", + kind: "absent-vs-unreadable", + path: "server/src/plugins/arcade.ts", + find: 'return { kind: "unreadable", field: "scopes", shape: shapeOf(scopes) };', + replace: 'return { kind: "read", scopes: [] };', + tests: ["server/tests/arcade-vendor-read-contract.test.ts"], + why: "K2 (C2c): an unreadable oauth2 scopes value read as [] is 'the connection is the grant' on the gate, the catalogue and the grants screen at once.", + }, + { + id: "arcade-missing-token-status-read-as-held", + kind: "absent-vs-unreadable", + path: "server/src/plugins/arcade-adapter.ts", + find: 'if (tokenStatus.kind !== "text") {', + replace: + 'if (tokenStatus.kind !== "text") return [{ action, state: "authorized", scopes, authorization: "held" }]; if (false) {', + tests: ["server/tests/arcade-vendor-read-contract.test.ts"], + why: "K2 (A7c): a token_status the listing did not give read as a held grant marked every action of a configured provider authorized for everyone.", + }, + { + id: "arcade-unreadable-status-read-as-absent", + kind: "absent-vs-unreadable", + path: "server/src/plugins/arcade.ts", + find: 'return { kind: "unreadable", shape: shapeOf(value) };', + replace: 'return { kind: "absent" };', + tests: [ + "server/tests/arcade-vendor-read-contract.test.ts", + "server/tests/arcade-authorize-status-engine.test.ts", + ], + why: "K2 (A7b, L2-b): a present-but-unreadable vendor status read as silence makes a connection live and hands a mint's bearer url on as a redirect.", + }, + { + id: "arcade-auth-providers-skip-unreadable", + kind: "absent-vs-unreadable", + path: "server/src/plugins/arcade-adapter.ts", + find: "unreadable ??= { action, field: read.field, shape: read.shape };", + replace: "void action;", + tests: [ + "server/tests/arcade-adapter-connections.test.ts", + "server/tests/arcade-auth-provider.test.ts", + ], + why: "C2b: restoring the silent skip of an unreadable authorization in authProvidersNamedBy turned 3 refusals back into answers (35 pass / 3 fail).", + }, + { + id: "composio-account-listing-unscoped-by-person", + kind: "query-scope", + path: "server/src/plugins/composio-client/context.ts", + find: "userIds: [userId],", + replace: "", + tests: ["server/tests/composio-adapter.test.ts"], + why: "A8a: an account listing without its userIds filter reads everybody's accounts as this person's. 5 fail before A8a's honest fakes; 23 after.", + }, + { + id: "arcade-connection-listing-unscoped-by-person", + kind: "query-scope", + path: "server/src/plugins/arcade-adapter.ts", + anchor: "client.admin.userConnections.list({", + find: "user_id: vendorUserId,", + replace: "", + tests: [ + "server/tests/arcade-adapter-connections.test.ts", + "server/tests/arcade-adapter.test.ts", + ], + why: "A6b: the connection listing must be scoped to this person, or somebody else's connection answers isConnected and is what revoke deletes.", + }, + { + id: "disconnect-never-asks-the-vendor", + kind: "call-made", + path: "server/src/plugins/plugin-store/connections.ts", + find: "const ended = await broker.revoke({", + replace: + "const ended = await ((_skipped: unknown) => Promise.resolve(false))({", + tests: [ + "server/tests/arcade-disconnect-route.test.ts", + "server/tests/arcade-disconnect-cascade.test.ts", + ], + why: "C8c: a disconnect that never asks the vendor to withdraw leaves a live account behind a deleted local row.", + }, +]; + +/** Where in `source` the entry's expression starts, or a sentence saying why it cannot be found. */ +export function locate( + source: string, + entry: MutationEntry, +): { index: number } | { error: string } { + const count = (needle: string) => source.split(needle).length - 1; + if (entry.anchor === undefined) { + const n = count(entry.find); + if (n === 1) return { index: source.indexOf(entry.find) }; + return { + error: + n === 0 + ? `${entry.path} no longer contains ${JSON.stringify(entry.find)}. The guarded code changed; re-quote the entry deliberately.` + : `${entry.path} contains ${JSON.stringify(entry.find)} ${n} times. Give the entry an anchor that occurs exactly once.`, + }; + } + const anchors = count(entry.anchor); + if (anchors !== 1) { + return { + error: `${entry.path} contains the anchor ${JSON.stringify(entry.anchor)} ${anchors} times; it must occur exactly once.`, + }; + } + const after = source.indexOf(entry.anchor) + entry.anchor.length; + const index = source.indexOf(entry.find, after); + if (index === -1 || index - after > ANCHOR_WINDOW) { + return { + error: `${entry.path} has no ${JSON.stringify(entry.find)} within ${ANCHOR_WINDOW} characters after ${JSON.stringify(entry.anchor)}. The guarded code changed; re-quote the entry deliberately.`, + }; + } + return { index }; +} + +/** `source` with the entry's mutation applied. Throws when the expression cannot be located. */ +export function mutate(source: string, entry: MutationEntry): string { + const found = locate(source, entry); + if ("error" in found) throw new Error(found.error); + return ( + source.slice(0, found.index) + + entry.replace + + source.slice(found.index + entry.find.length) + ); +} + +interface Run { + exitCode: number; + failed: number; + failNames: string[]; + output: string; +} + +const RUN_TIMEOUT_MS = 300_000; + +function runTests(files: string[], env: Record): Run { + const preload = join(REPO_ROOT, "scripts", "mutation-register-preload.ts"); + const args = ["bun", "test"]; + if (env.MUTATION_REGISTER_ENTRY) args.push("--preload", preload); + const proc = Bun.spawnSync([...args, ...files], { + cwd: REPO_ROOT, + env: { ...process.env, ...env }, + stdout: "pipe", + stderr: "pipe", + timeout: RUN_TIMEOUT_MS, + }); + const output = `${proc.stdout.toString()}\n${proc.stderr.toString()}`; + const failNames = output + .split("\n") + .filter((line) => line.startsWith("(fail)")) + .map((line) => + line.replace(/^\(fail\)\s*/, "").replace(/\s*\[[^\]]*\]$/, ""), + ); + return { + exitCode: proc.exitCode ?? -1, + failed: failNames.length, + failNames, + output, + }; +} + +type Verdict = + | "killed" + | "survived" + | "not-reached" + | "unlocatable" + | "control-red"; + +interface Outcome { + entry: MutationEntry; + verdict: Verdict; + ok: boolean; + detail: string; +} + +function judge( + entry: MutationEntry, + verdict: Verdict, + detail: string, +): Outcome { + if (verdict === "killed") { + return entry.survivesUntil + ? { + entry, + verdict, + ok: false, + detail: `${detail}. STALE DEBT: the suite now catches this; delete survivesUntil "${entry.survivesUntil}".`, + } + : { entry, verdict, ok: true, detail }; + } + if (verdict === "survived" && entry.survivesUntil) { + return { + entry, + verdict, + ok: true, + detail: `known hole, owned by ${entry.survivesUntil}`, + }; + } + return { entry, verdict, ok: false, detail }; +} + +function main(argv: string[]): number { + if (argv.includes("--list")) { + for (const e of REGISTER) { + console.log( + `${e.id} [${e.kind}] ${e.path}${e.survivesUntil ? ` survivesUntil ${e.survivesUntil}` : ""}`, + ); + } + return 0; + } + const wanted = argv.filter((a) => !a.startsWith("--")); + const unknown = wanted.filter((id) => !REGISTER.some((e) => e.id === id)); + if (unknown.length > 0) { + console.error(`No register entry named ${unknown.join(", ")}.`); + return 1; + } + const entries = wanted.length + ? REGISTER.filter((e) => wanted.includes(e.id)) + : REGISTER; + + const controls = new Map(); + const outcomes: Outcome[] = []; + const markDir = mkdtempSync(join(tmpdir(), "mutation-register-")); + try { + for (const entry of entries) { + const target = join(REPO_ROOT, entry.path); + const before = readFileSync(target, "utf8"); + const found = locate(before, entry); + if ("error" in found) { + outcomes.push(judge(entry, "unlocatable", found.error)); + continue; + } + const key = [...entry.tests].sort().join(" "); + let control = controls.get(key); + if (!control) { + process.stdout.write(`control ${key} ... `); + control = runTests(entry.tests, {}); + controls.set(key, control); + console.log(control.exitCode === 0 ? "green" : "RED"); + } + if (control.exitCode !== 0) { + outcomes.push( + judge( + entry, + "control-red", + `the named suites fail WITHOUT the mutation (${control.failed} failing), so a kill would prove nothing:\n${control.failNames.join("\n")}`, + ), + ); + continue; + } + const mark = join(markDir, entry.id); + process.stdout.write(`mutant ${entry.id} ... `); + const run = runTests(entry.tests, { + MUTATION_REGISTER_ENTRY: entry.id, + MUTATION_REGISTER_MARK: mark, + }); + if (readFileSync(target, "utf8") !== before) { + // The preload never writes, so this is a bug in the register itself. Say so loudly. + throw new Error( + `${entry.path} changed on disk during the mutant run. Inspect it with git diff.`, + ); + } + let outcome: Outcome; + if (!existsSync(mark)) { + outcome = judge( + entry, + "not-reached", + `the named suites never imported ${entry.path}, so the mutation was never applied. Name a suite that exercises it.\n${run.output.slice(-2000)}`, + ); + } else if (run.failed > 0) { + outcome = judge(entry, "killed", `${run.failed} test(s) failed`); + } else { + outcome = judge( + entry, + "survived", + run.exitCode === 0 + ? "every named test still passes with the distinction broken: COVERAGE HOLE" + : `no test failed (exit ${run.exitCode}); a crash is not a kill:\n${run.output.slice(-2000)}`, + ); + } + console.log(outcome.verdict.toUpperCase()); + outcomes.push(outcome); + } + } finally { + rmSync(markDir, { recursive: true, force: true }); + } + + console.log(""); + for (const o of outcomes) { + console.log( + `${o.ok ? "ok " : "FAIL"} ${o.verdict.padEnd(11)} ${o.entry.id} — ${o.detail}`, + ); + } + const failures = outcomes.filter((o) => !o.ok).length; + console.log( + `\n${outcomes.length - failures} ok, ${failures} failing, of ${outcomes.length} entries.`, + ); + return failures === 0 ? 0 : 1; +} + +if (import.meta.main) process.exit(main(process.argv.slice(2))); diff --git a/scripts/test-server-sharded.ts b/scripts/test-server-sharded.ts new file mode 100644 index 000000000..81d5c3ecf --- /dev/null +++ b/scripts/test-server-sharded.ts @@ -0,0 +1,140 @@ +export {}; + +/** + * `server/tests` in shards, because the whole directory in one process no longer runs. + * + * Around a hundred of those files open a module-scope connection pool. PostgreSQL's default + * `max_connections` is 100, so a single `bun test server/tests` exhausts the server's connection + * slots during the import phase and dies with `sorry, too many clients already` BEFORE it reports + * anything. That is a harness ceiling, not a regression, and it is never a reason to change source. + * + * Shards keep the pools-per-process count under the ceiling. The suite is split into fixed-size + * groups of files and each group runs in its own `bun test` invocation, so each process opens its + * own pools and gives them back when it exits. + * + * Why this script exists at all, rather than a remembered shell incantation: a sharded sweep is the + * only thing that has ever caught a test file that went red and stayed red. A targeted run passes, + * `typecheck` passes (`server/tests` is outside `tsc`), a reviewer reads the diff and sees nothing, + * and the branch is red the whole time. The sweep belongs at every quality gate, and a check that + * has to be retyped from memory at every gate is a check that gets skipped. + * + * Two deliberate properties: + * + * - **Every shard's summary line is read, and the exit code comes from `bun test` itself.** Piping + * bun's output through `grep` or `tail` overwrites `$?` with the pipe's status, which is how a + * failing shard reports success. Each shard's stderr is captured and echoed VERBATIM so a failure + * message survives in full for diagnosis. + * - **A shard whose summary cannot be parsed fails the run.** A pass that cannot be counted is not + * a pass; an import-time throw takes its file's tests with it and reports no failure. + * + * Usage: `bun run test:server:sharded`, with `TEST_DATABASE_URL` set for the integration suites. + * `SHARD_SIZE` overrides the files-per-shard count. + */ + +const SHARD_SIZE = Number.parseInt(process.env.SHARD_SIZE ?? "55", 10); + +async function writeStderr(text: string) { + if (!text) return; + if (process.stderr.write(text)) return; + await new Promise((resolve) => process.stderr.once("drain", resolve)); +} + +if (!process.env.TEST_DATABASE_URL?.trim()) { + await writeStderr( + "TEST_DATABASE_URL is empty or unset. The integration suites would each fail to connect, which\n" + + "looks like a hundred broken tests rather than one missing variable. Run this as\n" + + "TEST_DATABASE_URL=postgres://openbot:openbot@localhost:5432/openbot_test bun run test:server:sharded\n", + ); + process.exit(1); +} + +const files = ( + await Array.fromAsync( + new Bun.Glob("server/tests/**/*.test.ts").scan({ cwd: process.cwd() }), + ) +).sort(); + +if (files.length === 0) { + await writeStderr( + "No test files matched server/tests/**/*.test.ts. Refusing to report a pass.\n", + ); + process.exit(1); +} + +const shards: string[][] = []; +for (let index = 0; index < files.length; index += SHARD_SIZE) { + shards.push(files.slice(index, index + SHARD_SIZE)); +} + +// `bun run generate:app-config` once, up front, rather than per shard: the `pretest` hook that +// normally produces it fires for `bun run test`, and these shards invoke `bun test` directly. +const config = Bun.spawn(["bun", "run", "generate:app-config"], { + stdout: "inherit", + stderr: "inherit", +}); +if ((await config.exited) !== 0) { + await writeStderr( + "\nCould not generate the application config, so route imports would fail.\n", + ); + process.exit(1); +} + +await writeStderr( + `\nRunning ${files.length} files in ${shards.length} shards of up to ${SHARD_SIZE}.\n`, +); + +let passed = 0; +let failed = 0; +let skipped = 0; +const unreadable: number[] = []; +const red: number[] = []; + +for (const [index, shard] of shards.entries()) { + await writeStderr( + `\n--- shard ${index + 1}/${shards.length} (${shard.length} files) ---\n`, + ); + + const proc = Bun.spawn(["bun", "test", ...shard], { + stdout: "inherit", + stderr: "pipe", + }); + + // Bun writes its summary to stderr, so it is captured to be parsed, then echoed unmodified. + const stderr = await new Response(proc.stderr).text(); + await writeStderr(stderr); + + // Read the status from the process, never from the text: a parse failure and a test failure are + // different outcomes and both have to be reported. + const exitStatus = await proc.exited; + if (exitStatus !== 0) red.push(index + 1); + + const passMatch = stderr.match(/(\d+) pass/); + const failMatch = stderr.match(/(\d+) fail/); + const skipMatch = stderr.match(/(\d+) skip/); + + if (!passMatch) { + unreadable.push(index + 1); + } else { + passed += Number.parseInt(passMatch[1] as string, 10); + failed += failMatch ? Number.parseInt(failMatch[1] as string, 10) : 0; + skipped += skipMatch ? Number.parseInt(skipMatch[1] as string, 10) : 0; + } +} + +await writeStderr( + `\n=== ${shards.length} shards: ${passed} pass / ${failed} fail / ${skipped} skip ===\n`, +); + +if (red.length > 0) { + await writeStderr(`Shards that exited non-zero: ${red.join(", ")}.\n`); + process.exitCode = 1; +} + +if (unreadable.length > 0) { + await writeStderr( + `Could not read a summary line from shard(s) ${unreadable.join(", ")}. Refusing to report a\n` + + "pass on a run that cannot be counted: the usual cause is a file that threw while being\n" + + "imported, which takes its tests with it and reports nothing.\n", + ); + process.exitCode = 1; +} diff --git a/scripts/typecheck-tests.ts b/scripts/typecheck-tests.ts new file mode 100644 index 000000000..4649ec853 --- /dev/null +++ b/scripts/typecheck-tests.ts @@ -0,0 +1,150 @@ +#!/usr/bin/env bun +// Type-check `server/tests` against a frozen baseline of the errors that were already there. +// +// WHY A BASELINE AND NOT A CLEAN GATE. `server/tsconfig.json` does not include `tests`, and the +// runner is bun, which erases types rather than checking them, so `bun run typecheck` reports CLEAN +// while real defects sit in the suite — broken `import type` paths that silently degrade a value to +// `any` (including in a shared helper, which voids its type guarantee for every file that uses it), +// stubs missing methods their interface requires, `number | undefined` passed where `number` is +// required. Turning the check on is one change; fixing what it finds is another, much larger one. +// Freezing the known set lets the check land green and start earning its keep immediately: a NEW +// error fails the build from today, and the existing ones get fixed on their own schedule. +// +// WHY THE PROJECT'S OWN CONFIG. The check runs `tsc -p server/tsconfig.tests.json`, which extends +// `server/tsconfig.json`. Checking these files with an ad-hoc `tsc file.ts` plus hand-written flags +// is unsound: it drags `src` in under options the project does not use and emits a flood of errors +// that are artefacts of the flags rather than defects. Any baseline produced that way is garbage. +// +// Usage: +// bun scripts/typecheck-tests.ts # check against the baseline; exit 1 on a new error +// bun scripts/typecheck-tests.ts --update # rewrite the baseline from the current output + +import { existsSync, readFileSync, writeFileSync } from "node:fs"; +import { dirname, join, resolve } from "node:path"; +import { fileURLToPath } from "node:url"; + +const repoRoot = resolve(dirname(fileURLToPath(import.meta.url)), ".."); +const project = join("server", "tsconfig.tests.json"); +const baselinePath = join( + repoRoot, + "server", + "tests", + "typecheck-baseline.txt", +); + +const header = [ + "# Frozen type errors in `server/tests`, as reported by", + "# bunx tsc --noEmit -p server/tsconfig.tests.json", + "# One line per error: :: error TS: . Column and the indented", + "# elaboration lines are dropped so the baseline does not churn on reformatting.", + "#", + "# This file is a RECORD OF DEBT, not a list of things that are fine. Every line is a real defect", + "# that the suite could not see because it was never type-checked. Fixing one and deleting its", + "# line is always correct. ADDING a line is not: a new error means code written today is wrong,", + "# and the gate exists to say so. Regenerate with `bun scripts/typecheck-tests.ts --update` only", + "# after a deliberate decision that the new entries are pre-existing debt being surfaced rather", + "# than debt being created.", + "#", + "# Sorted. Duplicates are significant: a repeated line means that many identical errors.", +]; + +// `path(line,col): error TScode: message` — the first line of a diagnostic. Elaborations are +// indented, so anchoring on a non-space first character drops them. +const DIAGNOSTIC = /^(\S[^(]*)\((\d+),\d+\): error (TS\d+): (.*)$/; + +function runTsc(): string { + const result = Bun.spawnSync({ + cmd: ["bunx", "tsc", "--noEmit", "--pretty", "false", "-p", project], + cwd: repoRoot, + stdout: "pipe", + stderr: "pipe", + }); + return `${result.stdout.toString()}${result.stderr.toString()}`; +} + +function parse(output: string): string[] { + const errors: string[] = []; + for (const raw of output.split("\n")) { + const match = DIAGNOSTIC.exec(raw.trimEnd()); + if (!match) continue; + const [, file, line, code, message] = match; + // tsc prints the project-relative path in the location, but absolute paths inside some + // messages (TS6142 names the resolved file). Strip the checkout prefix so the baseline is + // the same on a laptop, in a worktree and on CI. + const normalized = `${file}:${line}: error ${code}: ${message}`.replaceAll( + `${repoRoot}/`, + "", + ); + errors.push(normalized); + } + return errors.sort(); +} + +function readBaseline(): string[] { + if (!existsSync(baselinePath)) return []; + return readFileSync(baselinePath, "utf8") + .split("\n") + .filter((line) => line.trim() !== "" && !line.startsWith("#")) + .sort(); +} + +// Multiset difference: three identical errors in the baseline and four in the output is ONE new +// error, not zero. A set would swallow it. +function subtract(from: string[], remove: string[]): string[] { + const counts = new Map(); + for (const line of remove) counts.set(line, (counts.get(line) ?? 0) + 1); + const left: string[] = []; + for (const line of from) { + const n = counts.get(line) ?? 0; + if (n > 0) counts.set(line, n - 1); + else left.push(line); + } + return left; +} + +const output = runTsc(); +const actual = parse(output); + +// A tsc crash, a bad config or a missing dependency produces output with no parseable diagnostic +// and a non-empty body. Treat that as a failure rather than as "zero errors, all good" — a gate +// that goes green when its checker did not run is the defect this whole exercise exists to kill. +if (actual.length === 0 && output.trim() !== "") { + console.error("tsc produced output but no parseable diagnostics:\n"); + console.error(output); + process.exit(1); +} + +if (process.argv.includes("--update")) { + writeFileSync(baselinePath, `${[...header, ...actual].join("\n")}\n`); + console.log(`Wrote ${actual.length} baseline entries to ${baselinePath}`); + process.exit(0); +} + +const baseline = readBaseline(); +const added = subtract(actual, baseline); +const fixed = subtract(baseline, actual); + +if (fixed.length > 0) { + // Not a failure. Fixing an error must never break the build; it only makes the baseline stale. + console.log( + `${fixed.length} baselined error(s) no longer occur. Drop them from the baseline:`, + ); + for (const line of fixed) console.log(` - ${line}`); + console.log(""); +} + +if (added.length > 0) { + console.error( + `${added.length} NEW type error(s) in server/tests, not in the baseline:\n`, + ); + for (const line of added) console.error(` ${line}`); + console.error( + "\nFix them. Do not run --update to silence them: the baseline records debt that predates" + + "\nthe gate, and an error reported here was introduced after it.", + ); + process.exit(1); +} + +console.log( + `server/tests type-check clean against the baseline (${actual.length} known error(s)).`, +); diff --git a/server/drizzle/0057_arcade_provider.sql b/server/drizzle/0057_arcade_provider.sql new file mode 100644 index 000000000..99b312fa4 --- /dev/null +++ b/server/drizzle/0057_arcade_provider.sql @@ -0,0 +1,16 @@ +CREATE TABLE "pending_authorizations" ( + "actor_id" text PRIMARY KEY NOT NULL, + "server_id" text NOT NULL, + "action" text NOT NULL, + "holder" text NOT NULL, + "user_id" text, + "vendor_user_id" text NOT NULL, + "auth_id" text, + "created_at" timestamp with time zone DEFAULT now() NOT NULL, + "completed_at" timestamp with time zone, + "outcome" text +); +--> statement-breakpoint +ALTER TABLE "brokered_connections" DROP CONSTRAINT "brokered_connections_provider_check";--> statement-breakpoint +ALTER TABLE "pending_authorizations" ADD CONSTRAINT "pending_authorizations_server_id_mcp_servers_id_fk" FOREIGN KEY ("server_id") REFERENCES "public"."mcp_servers"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint +ALTER TABLE "brokered_connections" ADD CONSTRAINT "brokered_connections_provider_check" CHECK ("brokered_connections"."provider" IN ('composio', 'arcade')); \ No newline at end of file diff --git a/server/drizzle/0058_pending_authorization_checks.sql b/server/drizzle/0058_pending_authorization_checks.sql new file mode 100644 index 000000000..a940de2bd --- /dev/null +++ b/server/drizzle/0058_pending_authorization_checks.sql @@ -0,0 +1,2 @@ +ALTER TABLE "pending_authorizations" ADD CONSTRAINT "pending_authorizations_holder_check" CHECK (("pending_authorizations"."holder" = 'person' AND "pending_authorizations"."user_id" IS NOT NULL) OR ("pending_authorizations"."holder" = 'deployment' AND "pending_authorizations"."user_id" IS NULL));--> statement-breakpoint +ALTER TABLE "pending_authorizations" ADD CONSTRAINT "pending_authorizations_outcome_check" CHECK ("pending_authorizations"."outcome" IS NULL OR "pending_authorizations"."outcome" IN ('completed', 'failed', 'unreconciled', 'withdrawn')); \ No newline at end of file diff --git a/server/drizzle/0059_pending_authorization_completion_pair.sql b/server/drizzle/0059_pending_authorization_completion_pair.sql new file mode 100644 index 000000000..54e7e59d8 --- /dev/null +++ b/server/drizzle/0059_pending_authorization_completion_pair.sql @@ -0,0 +1 @@ +ALTER TABLE "pending_authorizations" ADD CONSTRAINT "pending_authorizations_completion_check" CHECK (("pending_authorizations"."completed_at" IS NULL) = ("pending_authorizations"."outcome" IS NULL)); \ No newline at end of file diff --git a/server/drizzle/0060_pending_authorization_person_keys.sql b/server/drizzle/0060_pending_authorization_person_keys.sql new file mode 100644 index 000000000..b13e24595 --- /dev/null +++ b/server/drizzle/0060_pending_authorization_person_keys.sql @@ -0,0 +1,23 @@ +-- `pending_authorizations.actor_id` and `.user_id` named `users.id` from the day 0057 created the +-- table and carried no key, so a deleted person left attempt rows pointing at nobody. Both get the +-- key here, both CASCADE: an attempt is in-flight working state with a fifteen-minute life, holding +-- no grant and no secret, and what a person authorized is recorded in `audit_events`, which is +-- keyless on purpose so the trail outlives them. RESTRICT would instead make somebody undeletable +-- while a browser of theirs sat mid-redirect. +-- +-- THE ORPHANS GO FIRST, because `ADD CONSTRAINT` is not conditional: on any deployment that has run +-- 0057 and since deleted a person, the statement below would stop dead on rows the column was never +-- able to refuse. They are deleted rather than repaired — there is nothing to repair a row to, and +-- nulling `user_id` would trip `pending_authorizations_holder_check` on a `person` attempt. Nothing +-- reads an attempt whose person is gone; the verifier finds attempts from a live session. +DELETE FROM "pending_authorizations" +WHERE NOT EXISTS (SELECT 1 FROM "users" WHERE "users"."id" = "pending_authorizations"."actor_id") + OR ("pending_authorizations"."user_id" IS NOT NULL + AND NOT EXISTS (SELECT 1 FROM "users" WHERE "users"."id" = "pending_authorizations"."user_id"));--> statement-breakpoint +ALTER TABLE "pending_authorizations" ADD CONSTRAINT "pending_authorizations_actor_id_users_id_fk" FOREIGN KEY ("actor_id") REFERENCES "public"."users"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint +ALTER TABLE "pending_authorizations" ADD CONSTRAINT "pending_authorizations_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."users"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint +-- A foreign key is not indexed on the referencing side, so until now deleting one `mcp_servers` row +-- made 0057's cascade scan this table, and so did every lookup by server. `user_id` gets one for +-- the same reason, now that it is a key too. +CREATE INDEX "pending_authorizations_server_idx" ON "pending_authorizations" USING btree ("server_id");--> statement-breakpoint +CREATE INDEX "pending_authorizations_user_idx" ON "pending_authorizations" USING btree ("user_id"); diff --git a/server/drizzle/0061_settle_brokered_account_mode.sql b/server/drizzle/0061_settle_brokered_account_mode.sql new file mode 100644 index 000000000..c22d4d725 --- /dev/null +++ b/server/drizzle/0061_settle_brokered_account_mode.sql @@ -0,0 +1,30 @@ +-- Every brokered app that HAS an account says whose, on the deployments where one already does not. +-- +-- `addBrokeredApp` settles `account_mode` on its INSERT and, from this change on, after its upsert +-- as well. Its CONFLICT arm never did, so an enable that landed on a row that was not brokered — +-- one added by hand, restored, or left by a build that spelled ids differently — converted it to a +-- brokered app and left this column null. `accountFor` refuses a call against such a row as +-- ambiguous ("does not say whether it is reached through each person's account or a shared one"), +-- so the app is enabled, listed, connectable and dead. +-- +-- THIS RUNS BECAUSE THE CODE FIX CANNOT REACH THOSE ROWS. An app that is already enabled cannot be +-- added again without being removed first — the Plugins page's Add is a switch, and switching it +-- off deletes the app and every connection on it — so "press Add again" is not a remedy an +-- administrator can perform, and the Plugins page offers no way to say Personal: it reads any +-- non-`shared` value as Personal already and shows only "Make shared". A fix in the writer alone +-- would leave every deployment that is already in this state in it forever. +-- +-- `personal` is what the insert writes for a new app and the conservative answer: each person +-- reaches their own account. `shared` would hand everybody one account nobody chose to share. +-- +-- ONLY ROWS WITH AN ACCOUNT TO HOLD, and `NO_AUTH` is the one scheme with none — `schemeKind`'s +-- `none`, the same set `mcp_servers.account_mode` is documented as null for. A null `auth_scheme` +-- is NOT in that set: it is `unreadable`, which `accountFor` treats as having an account, so such a +-- row is refused exactly as a recorded `OAUTH2` one is and needs the mode just as much. +-- +-- ONLY ROWS THAT SAY NOTHING. A deployment that chose Shared keeps it. +UPDATE "mcp_servers" + SET "account_mode" = 'personal' + WHERE "provenance" IN ('composio', 'arcade') + AND "account_mode" IS NULL + AND ("auth_scheme" IS NULL OR "auth_scheme" <> 'NO_AUTH'); diff --git a/server/drizzle/0062_pending_authorization_user_is_actor.sql b/server/drizzle/0062_pending_authorization_user_is_actor.sql new file mode 100644 index 000000000..a682698b6 --- /dev/null +++ b/server/drizzle/0062_pending_authorization_user_is_actor.sql @@ -0,0 +1,21 @@ +-- An attempt belongs to the person who started it, and only that person's deletion may take it. +-- +-- `0060` keyed both `actor_id` and `user_id` to `users` and cascaded both. `actor_id` is the row's +-- owner (the primary key, the session subject the verifier matches). `user_id` is whose account the +-- attempt is for, which for a `person` attempt is always the actor — `accountRefFor` answers a +-- Personal app with `{ userId: actorId }` and the only writer copies that — but nothing in the +-- database said so. A row naming two people therefore died with EITHER of them: deleting one person +-- destroyed an attempt a DIFFERENT person had started and was consenting through. +-- +-- So the equality becomes a CHECK, and `user_id` loses its own key and the index that served it. +-- Through the CHECK, `user_id` names a person exactly when `actor_id` does, and `actor_id`'s cascade +-- (B7's reasoning, unchanged) is the only one left that reaches this table from `users`. +-- +-- NO PURGE BEFORE THE CHECK, unlike 0060's orphans. Every row the application writes already holds +-- the equality, so a violating row was written by hand; deleting it would be the very loss this +-- migration exists to stop. If one exists, the ADD CONSTRAINT refuses and names the constraint, and +-- an operator decides what that row was. +ALTER TABLE "pending_authorizations" DROP CONSTRAINT "pending_authorizations_user_id_users_id_fk"; +--> statement-breakpoint +DROP INDEX "pending_authorizations_user_idx";--> statement-breakpoint +ALTER TABLE "pending_authorizations" ADD CONSTRAINT "pending_authorizations_user_is_actor_check" CHECK ("pending_authorizations"."user_id" IS NULL OR "pending_authorizations"."user_id" = "pending_authorizations"."actor_id"); diff --git a/server/drizzle/0063_mcp_tool_vendor_name.sql b/server/drizzle/0063_mcp_tool_vendor_name.sql new file mode 100644 index 000000000..eeaa02b1c --- /dev/null +++ b/server/drizzle/0063_mcp_tool_vendor_name.sql @@ -0,0 +1,36 @@ +-- An action's own name and the name a model may call it by are two facts, and `mcp_tools` held one. +-- +-- `name` is this deployment's identifier: half of the `/` ref a grant is written +-- against, and the half of `mcp____` a model is offered. The model API accepts a +-- tool name matching `^[a-zA-Z0-9_-]+$` and nothing else. +-- +-- Arcade's listing answers `qualified_name` — `Gmail.ListEmails` — and the dot is legal there and +-- illegal in a tool name. With one column that spelling went straight into the offered name, and +-- because a request carries every tool together, ONE granted Arcade action failed the WHOLE model +-- call with `Invalid 'tools[47].name'`. No Arcade action had ever been callable by any model. +-- +-- So the vendor's spelling gets its own column and `name` becomes offerable by construction. +-- +-- ADDED WITH A DEFAULT, BACKFILLED, THEN STRIPPED OF IT, rather than the bare `ADD COLUMN ... NOT +-- NULL` the generator writes. That form is only correct against an EMPTY table: every deployment +-- holding one recorded action would have the statement refused and the migration stop. The default +-- is scaffolding and not a value — Postgres cannot default a column to another column, so the empty +-- string stands only for the instant between the ADD and the UPDATE below, and `DROP DEFAULT` is +-- what keeps it from becoming the answer for some later insert that forgets this column. +-- +-- BACKFILLED TO `name`, WHICH IS CORRECT AND NOT A PLACEHOLDER. Every row that exists when this runs +-- was listed by Composio, an MCP server or the Drive REST transport, and all three publish names +-- that are already offerable — the only non-alphanumeric character in any tool name this +-- deployment has recorded is `_`. For those transports the two spellings are genuinely the same +-- string, which is what the backfill records. +-- +-- ARCADE ROWS ARE NOT MIGRATED, THEY ARE RE-LISTED. Their `name` has to LOSE the toolkit prefix, and +-- rewriting it here would leave every grant, skill ref and approval snapshot pointing at a ref that +-- no longer exists — a silent re-pointing of authorization records, which is the one thing a +-- migration must not do by inference. The listing is the authority on what an app publishes, so an +-- administrator presses Refresh and the rows are rebuilt from the vendor with both names recorded. +-- Nothing is lost that the vendor cannot answer again, and no Arcade grant was callable before this +-- commit anyway: there is no working state to preserve. +ALTER TABLE "mcp_tools" ADD COLUMN "vendor_name" text DEFAULT '' NOT NULL;--> statement-breakpoint +UPDATE "mcp_tools" SET "vendor_name" = "name";--> statement-breakpoint +ALTER TABLE "mcp_tools" ALTER COLUMN "vendor_name" DROP DEFAULT; diff --git a/server/drizzle/meta/0057_snapshot.json b/server/drizzle/meta/0057_snapshot.json new file mode 100644 index 000000000..be2d28b29 --- /dev/null +++ b/server/drizzle/meta/0057_snapshot.json @@ -0,0 +1,9951 @@ +{ + "id": "529de577-9b19-43d1-9885-dd32ddae9bd6", + "prevId": "1e95338a-aa54-4146-9f37-32111c369e75", + "version": "7", + "dialect": "postgresql", + "tables": { + "public.accounts": { + "name": "accounts", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "account_id": { + "name": "account_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "provider_id": { + "name": "provider_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "issuer": { + "name": "issuer", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "access_token": { + "name": "access_token", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "refresh_token": { + "name": "refresh_token", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "id_token": { + "name": "id_token", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "access_token_expires_at": { + "name": "access_token_expires_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "refresh_token_expires_at": { + "name": "refresh_token_expires_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "scope": { + "name": "scope", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "password": { + "name": "password", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "accounts_provider_account_idx": { + "name": "accounts_provider_account_idx", + "columns": [ + { + "expression": "provider_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "account_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "accounts_user_id_users_id_fk": { + "name": "accounts_user_id_users_id_fk", + "tableFrom": "accounts", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.agents": { + "name": "agents", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "name": { + "name": "name", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "type": { + "name": "type", + "type": "agent_type", + "typeSchema": "public", + "primaryKey": false, + "notNull": true + }, + "configuration": { + "name": "configuration", + "type": "jsonb", + "primaryKey": false, + "notNull": true + }, + "package_id": { + "name": "package_id", + "type": "uuid", + "primaryKey": false, + "notNull": false + }, + "override": { + "name": "override", + "type": "jsonb", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "agents_package_id_deployment_packages_id_fk": { + "name": "agents_package_id_deployment_packages_id_fk", + "tableFrom": "agents", + "tableTo": "deployment_packages", + "columnsFrom": [ + "package_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "set null", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.attachments": { + "name": "attachments", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "uuid", + "primaryKey": true, + "notNull": true, + "default": "gen_random_uuid()" + }, + "channel_id": { + "name": "channel_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "uploaded_by": { + "name": "uploaded_by", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "name": { + "name": "name", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "mime_type": { + "name": "mime_type", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "size_bytes": { + "name": "size_bytes", + "type": "integer", + "primaryKey": false, + "notNull": true + }, + "bytes": { + "name": "bytes", + "type": "bytea", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "attached_at": { + "name": "attached_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "upload_group": { + "name": "upload_group", + "type": "text", + "primaryKey": false, + "notNull": false + } + }, + "indexes": { + "attachments_channel_idx": { + "name": "attachments_channel_idx", + "columns": [ + { + "expression": "channel_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "attachments_uploaded_by_idx": { + "name": "attachments_uploaded_by_idx", + "columns": [ + { + "expression": "uploaded_by", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "attachments_upload_group_idx": { + "name": "attachments_upload_group_idx", + "columns": [ + { + "expression": "channel_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "uploaded_by", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "upload_group", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "where": "\"attachments\".\"attached_at\" is null", + "concurrently": false, + "method": "btree", + "with": {} + }, + "attachments_staged_idx": { + "name": "attachments_staged_idx", + "columns": [ + { + "expression": "created_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "where": "\"attachments\".\"attached_at\" is null", + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "attachments_channel_id_channels_id_fk": { + "name": "attachments_channel_id_channels_id_fk", + "tableFrom": "attachments", + "tableTo": "channels", + "columnsFrom": [ + "channel_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "attachments_uploaded_by_users_id_fk": { + "name": "attachments_uploaded_by_users_id_fk", + "tableFrom": "attachments", + "tableTo": "users", + "columnsFrom": [ + "uploaded_by" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.audit_events": { + "name": "audit_events", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "uuid", + "primaryKey": true, + "notNull": true, + "default": "gen_random_uuid()" + }, + "actor_user_id": { + "name": "actor_user_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "initiator_kind": { + "name": "initiator_kind", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'person'" + }, + "initiator_id": { + "name": "initiator_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "event_type": { + "name": "event_type", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "target_type": { + "name": "target_type", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "target_id": { + "name": "target_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "payload": { + "name": "payload", + "type": "jsonb", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "audit_events_created_at_idx": { + "name": "audit_events_created_at_idx", + "columns": [ + { + "expression": "created_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "audit_events_type_time_idx": { + "name": "audit_events_type_time_idx", + "columns": [ + { + "expression": "event_type", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "created_at", + "isExpression": false, + "asc": false, + "nulls": "last" + }, + { + "expression": "id", + "isExpression": false, + "asc": false, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "audit_events_actor_time_idx": { + "name": "audit_events_actor_time_idx", + "columns": [ + { + "expression": "actor_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "created_at", + "isExpression": false, + "asc": false, + "nulls": "last" + }, + { + "expression": "id", + "isExpression": false, + "asc": false, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "audit_events_target_time_idx": { + "name": "audit_events_target_time_idx", + "columns": [ + { + "expression": "target_type", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "target_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "created_at", + "isExpression": false, + "asc": false, + "nulls": "last" + }, + { + "expression": "id", + "isExpression": false, + "asc": false, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "audit_events_initiator_time_idx": { + "name": "audit_events_initiator_time_idx", + "columns": [ + { + "expression": "initiator_kind", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "created_at", + "isExpression": false, + "asc": false, + "nulls": "last" + }, + { + "expression": "id", + "isExpression": false, + "asc": false, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.channel_agents": { + "name": "channel_agents", + "schema": "", + "columns": { + "channel_id": { + "name": "channel_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "channel_agents_channel_id_channels_id_fk": { + "name": "channel_agents_channel_id_channels_id_fk", + "tableFrom": "channel_agents", + "tableTo": "channels", + "columnsFrom": [ + "channel_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "channel_agents_agent_id_agents_id_fk": { + "name": "channel_agents_agent_id_agents_id_fk", + "tableFrom": "channel_agents", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "channel_agents_channel_id_agent_id_pk": { + "name": "channel_agents_channel_id_agent_id_pk", + "columns": [ + "channel_id", + "agent_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.channel_memberships": { + "name": "channel_memberships", + "schema": "", + "columns": { + "channel_id": { + "name": "channel_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "pinned_at": { + "name": "pinned_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "last_read_at": { + "name": "last_read_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "channel_memberships_channel_id_channels_id_fk": { + "name": "channel_memberships_channel_id_channels_id_fk", + "tableFrom": "channel_memberships", + "tableTo": "channels", + "columnsFrom": [ + "channel_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "channel_memberships_user_id_users_id_fk": { + "name": "channel_memberships_user_id_users_id_fk", + "tableFrom": "channel_memberships", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "channel_memberships_channel_id_user_id_pk": { + "name": "channel_memberships_channel_id_user_id_pk", + "columns": [ + "channel_id", + "user_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.channels": { + "name": "channels", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "name": { + "name": "name", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "description": { + "name": "description", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "suggested_prompts": { + "name": "suggested_prompts", + "type": "text[]", + "primaryKey": false, + "notNull": true, + "default": "'{}'" + }, + "allowed_groups": { + "name": "allowed_groups", + "type": "text[]", + "primaryKey": false, + "notNull": true, + "default": "'{}'" + }, + "package_id": { + "name": "package_id", + "type": "uuid", + "primaryKey": false, + "notNull": false + }, + "override": { + "name": "override", + "type": "jsonb", + "primaryKey": false, + "notNull": false + }, + "summary": { + "name": "summary", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "summary_at": { + "name": "summary_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "last_message": { + "name": "last_message", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "last_message_source_id": { + "name": "last_message_source_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "last_message_at": { + "name": "last_message_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "last_message_agent_id": { + "name": "last_message_agent_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "deleted_at": { + "name": "deleted_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "channels_recent_activity_idx": { + "name": "channels_recent_activity_idx", + "columns": [ + { + "expression": "COALESCE(\"last_message_at\", \"created_at\") DESC", + "asc": true, + "isExpression": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "channels_awaiting_summary_idx": { + "name": "channels_awaiting_summary_idx", + "columns": [ + { + "expression": "id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "where": "\"channels\".\"summary\" is null and \"channels\".\"deleted_at\" is null", + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "channels_package_id_deployment_packages_id_fk": { + "name": "channels_package_id_deployment_packages_id_fk", + "tableFrom": "channels", + "tableTo": "deployment_packages", + "columnsFrom": [ + "package_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "set null", + "onUpdate": "no action" + }, + "channels_last_message_agent_id_agents_id_fk": { + "name": "channels_last_message_agent_id_agents_id_fk", + "tableFrom": "channels", + "tableTo": "agents", + "columnsFrom": [ + "last_message_agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "set null", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.credentials": { + "name": "credentials", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "uuid", + "primaryKey": true, + "notNull": true, + "default": "gen_random_uuid()" + }, + "kind": { + "name": "kind", + "type": "credential_kind", + "typeSchema": "public", + "primaryKey": false, + "notNull": true + }, + "provider": { + "name": "provider", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "encrypted_value": { + "name": "encrypted_value", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "key_id": { + "name": "key_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "metadata": { + "name": "metadata", + "type": "jsonb", + "primaryKey": false, + "notNull": true + }, + "revoked_at": { + "name": "revoked_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "credentials_active_key_idx": { + "name": "credentials_active_key_idx", + "columns": [ + { + "expression": "kind", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "provider", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "key_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "where": "\"credentials\".\"revoked_at\" IS NULL", + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.deployment_packages": { + "name": "deployment_packages", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "uuid", + "primaryKey": true, + "notNull": true, + "default": "gen_random_uuid()" + }, + "tenant_id": { + "name": "tenant_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "source_path": { + "name": "source_path", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "checksum": { + "name": "checksum", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "loaded_at": { + "name": "loaded_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": { + "deployment_packages_tenant_id_unique": { + "name": "deployment_packages_tenant_id_unique", + "nullsNotDistinct": false, + "columns": [ + "tenant_id" + ] + } + }, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.intelligence_channel_mappings": { + "name": "intelligence_channel_mappings", + "schema": "", + "columns": { + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "channel_id": { + "name": "channel_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "thread_id": { + "name": "thread_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "intelligence_channel_mappings_thread_idx": { + "name": "intelligence_channel_mappings_thread_idx", + "columns": [ + { + "expression": "thread_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "intelligence_channel_mappings_user_id_users_id_fk": { + "name": "intelligence_channel_mappings_user_id_users_id_fk", + "tableFrom": "intelligence_channel_mappings", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "intelligence_channel_mappings_channel_id_channels_id_fk": { + "name": "intelligence_channel_mappings_channel_id_channels_id_fk", + "tableFrom": "intelligence_channel_mappings", + "tableTo": "channels", + "columnsFrom": [ + "channel_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "intelligence_channel_mappings_user_id_channel_id_pk": { + "name": "intelligence_channel_mappings_user_id_channel_id_pk", + "columns": [ + "user_id", + "channel_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.revoked_access": { + "name": "revoked_access", + "schema": "", + "columns": { + "email": { + "name": "email", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "revoked_at": { + "name": "revoked_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "revoked_by": { + "name": "revoked_by", + "type": "text", + "primaryKey": false, + "notNull": true + } + }, + "indexes": {}, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.sessions": { + "name": "sessions", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "token": { + "name": "token", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "expires_at": { + "name": "expires_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + }, + "ip_address": { + "name": "ip_address", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "user_agent": { + "name": "user_agent", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "sessions_user_id_users_id_fk": { + "name": "sessions_user_id_users_id_fk", + "tableFrom": "sessions", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": { + "sessions_token_unique": { + "name": "sessions_token_unique", + "nullsNotDistinct": false, + "columns": [ + "token" + ] + } + }, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.sso_providers": { + "name": "sso_providers", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "issuer": { + "name": "issuer", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "oidc_config": { + "name": "oidc_config", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "saml_config": { + "name": "saml_config", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "provider_id": { + "name": "provider_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "organization_id": { + "name": "organization_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "domain": { + "name": "domain", + "type": "text", + "primaryKey": false, + "notNull": true + } + }, + "indexes": {}, + "foreignKeys": { + "sso_providers_user_id_users_id_fk": { + "name": "sso_providers_user_id_users_id_fk", + "tableFrom": "sso_providers", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "set null", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": { + "sso_providers_provider_id_unique": { + "name": "sso_providers_provider_id_unique", + "nullsNotDistinct": false, + "columns": [ + "provider_id" + ] + } + }, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.user_instructions": { + "name": "user_instructions", + "schema": "", + "columns": { + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "instructions": { + "name": "instructions", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "user_instructions_user_id_users_id_fk": { + "name": "user_instructions_user_id_users_id_fk", + "tableFrom": "user_instructions", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.user_roles": { + "name": "user_roles", + "schema": "", + "columns": { + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "role": { + "name": "role", + "type": "role", + "typeSchema": "public", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "user_roles_user_id_users_id_fk": { + "name": "user_roles_user_id_users_id_fk", + "tableFrom": "user_roles", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "user_roles_user_id_role_pk": { + "name": "user_roles_user_id_role_pk", + "columns": [ + "user_id", + "role" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.users": { + "name": "users", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "email": { + "name": "email", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "name": { + "name": "name", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "image": { + "name": "image", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "email_verified": { + "name": "email_verified", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": false + }, + "preferences": { + "name": "preferences", + "type": "jsonb", + "primaryKey": false, + "notNull": true, + "default": "'{}'::jsonb" + }, + "groups": { + "name": "groups", + "type": "text[]", + "primaryKey": false, + "notNull": true, + "default": "'{}'" + }, + "onboarding_step": { + "name": "onboarding_step", + "type": "integer", + "primaryKey": false, + "notNull": true, + "default": 0 + }, + "onboarding_completed_at": { + "name": "onboarding_completed_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "last_signed_in_at": { + "name": "last_signed_in_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": { + "users_email_unique": { + "name": "users_email_unique", + "nullsNotDistinct": false, + "columns": [ + "email" + ] + } + }, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.verifications": { + "name": "verifications", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "identifier": { + "name": "identifier", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "value": { + "name": "value", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "expires_at": { + "name": "expires_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.action_policy": { + "name": "action_policy", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "mode": { + "name": "mode", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "deny": { + "name": "deny", + "type": "text[]", + "primaryKey": false, + "notNull": true + }, + "allow": { + "name": "allow", + "type": "text[]", + "primaryKey": false, + "notNull": true + }, + "updated_by": { + "name": "updated_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.computer_page_frame": { + "name": "computer_page_frame", + "schema": "", + "columns": { + "computer_id": { + "name": "computer_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "tool_call_id": { + "name": "tool_call_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "url": { + "name": "url", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "title": { + "name": "title", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "frame": { + "name": "frame", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "captured_at": { + "name": "captured_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "computer_page_frame_captured_idx": { + "name": "computer_page_frame_captured_idx", + "columns": [ + { + "expression": "captured_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": {}, + "compositePrimaryKeys": { + "computer_page_frame_computer_id_tool_call_id_pk": { + "name": "computer_page_frame_computer_id_tool_call_id_pk", + "columns": [ + "computer_id", + "tool_call_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.computer_snapshot": { + "name": "computer_snapshot", + "schema": "", + "columns": { + "computer_id": { + "name": "computer_id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "snapshot_id": { + "name": "snapshot_id", + "type": "integer", + "primaryKey": false, + "notNull": true + }, + "url": { + "name": "url", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "elements": { + "name": "elements", + "type": "jsonb", + "primaryKey": false, + "notNull": true + }, + "taken_at": { + "name": "taken_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "session": { + "name": "session", + "type": "text", + "primaryKey": false, + "notNull": false + } + }, + "indexes": {}, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.agent_preferences": { + "name": "agent_preferences", + "schema": "", + "columns": { + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "hidden_at": { + "name": "hidden_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "pinned_at": { + "name": "pinned_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + } + }, + "indexes": {}, + "foreignKeys": { + "agent_preferences_user_id_users_id_fk": { + "name": "agent_preferences_user_id_users_id_fk", + "tableFrom": "agent_preferences", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "agent_preferences_agent_id_agents_id_fk": { + "name": "agent_preferences_agent_id_agents_id_fk", + "tableFrom": "agent_preferences", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "agent_preferences_user_id_agent_id_pk": { + "name": "agent_preferences_user_id_agent_id_pk", + "columns": [ + "user_id", + "agent_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.agent_profiles": { + "name": "agent_profiles", + "schema": "", + "columns": { + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "title": { + "name": "title", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "role_description": { + "name": "role_description", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "avatar_seed": { + "name": "avatar_seed", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "visibility": { + "name": "visibility", + "type": "agent_visibility", + "typeSchema": "public", + "primaryKey": false, + "notNull": true + }, + "callback_token_hash": { + "name": "callback_token_hash", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "callback_token_issued_at": { + "name": "callback_token_issued_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "deleted_at": { + "name": "deleted_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "agent_profiles_visibility_deleted_idx": { + "name": "agent_profiles_visibility_deleted_idx", + "columns": [ + { + "expression": "visibility", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "deleted_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "agent_profiles_agent_id_agents_id_fk": { + "name": "agent_profiles_agent_id_agents_id_fk", + "tableFrom": "agent_profiles", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "agent_profiles_owner_user_id_users_id_fk": { + "name": "agent_profiles_owner_user_id_users_id_fk", + "tableFrom": "agent_profiles", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "set null", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.routine_runs": { + "name": "routine_runs", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "routine_id": { + "name": "routine_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "started_at": { + "name": "started_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "finished_at": { + "name": "finished_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "status": { + "name": "status", + "type": "routine_run_status", + "typeSchema": "public", + "primaryKey": false, + "notNull": false + }, + "waiting": { + "name": "waiting", + "type": "jsonb", + "primaryKey": false, + "notNull": false + }, + "error": { + "name": "error", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "source": { + "name": "source", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'schedule'" + } + }, + "indexes": { + "routine_runs_by_routine_idx": { + "name": "routine_runs_by_routine_idx", + "columns": [ + { + "expression": "routine_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "started_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "routine_runs_routine_id_routines_id_fk": { + "name": "routine_runs_routine_id_routines_id_fk", + "tableFrom": "routine_runs", + "tableTo": "routines", + "columnsFrom": [ + "routine_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.routine_sweeps": { + "name": "routine_sweeps", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "swept_at": { + "name": "swept_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "owner": { + "name": "owner", + "type": "text", + "primaryKey": false, + "notNull": false + } + }, + "indexes": {}, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.routines": { + "name": "routines", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "channel_id": { + "name": "channel_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "instruction": { + "name": "instruction", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "cron": { + "name": "cron", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "timezone": { + "name": "timezone", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'UTC'" + }, + "enabled": { + "name": "enabled", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": true + }, + "next_run_at": { + "name": "next_run_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + }, + "last_run_at": { + "name": "last_run_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "enabled_at": { + "name": "enabled_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "routines_due_idx": { + "name": "routines_due_idx", + "columns": [ + { + "expression": "enabled", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "next_run_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "routines_by_owner_idx": { + "name": "routines_by_owner_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "enabled", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "routines_owner_user_id_users_id_fk": { + "name": "routines_owner_user_id_users_id_fk", + "tableFrom": "routines", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "routines_agent_id_agents_id_fk": { + "name": "routines_agent_id_agents_id_fk", + "tableFrom": "routines", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.component_exclusions": { + "name": "component_exclusions", + "schema": "", + "columns": { + "component_name": { + "name": "component_name", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "withheld_by": { + "name": "withheld_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "component_exclusions_component_name_components_name_fk": { + "name": "component_exclusions_component_name_components_name_fk", + "tableFrom": "component_exclusions", + "tableTo": "components", + "columnsFrom": [ + "component_name" + ], + "columnsTo": [ + "name" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "component_exclusions_agent_id_agents_id_fk": { + "name": "component_exclusions_agent_id_agents_id_fk", + "tableFrom": "component_exclusions", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "component_exclusions_component_name_agent_id_pk": { + "name": "component_exclusions_component_name_agent_id_pk", + "columns": [ + "component_name", + "agent_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.component_functions": { + "name": "component_functions", + "schema": "", + "columns": { + "component_name": { + "name": "component_name", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "function_name": { + "name": "function_name", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "granted_by": { + "name": "granted_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "component_functions_component_name_components_name_fk": { + "name": "component_functions_component_name_components_name_fk", + "tableFrom": "component_functions", + "tableTo": "components", + "columnsFrom": [ + "component_name" + ], + "columnsTo": [ + "name" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "component_functions_component_name_function_name_pk": { + "name": "component_functions_component_name_function_name_pk", + "columns": [ + "component_name", + "function_name" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.components": { + "name": "components", + "schema": "", + "columns": { + "name": { + "name": "name", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "title": { + "name": "title", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "kind": { + "name": "kind", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "draft_description": { + "name": "draft_description", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "published_description": { + "name": "published_description", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "published": { + "name": "published", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": false + }, + "published_at": { + "name": "published_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "updated_by": { + "name": "updated_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.brokered_connections": { + "name": "brokered_connections", + "schema": "", + "columns": { + "provider": { + "name": "provider", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "app": { + "name": "app", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "holder": { + "name": "holder", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "vendor_user_id": { + "name": "vendor_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "connected_by": { + "name": "connected_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "connected_at": { + "name": "connected_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "verified": { + "name": "verified", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": false + }, + "verified_at": { + "name": "verified_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "probe_action": { + "name": "probe_action", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "brokered_connections_person_idx": { + "name": "brokered_connections_person_idx", + "columns": [ + { + "expression": "provider", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "app", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "where": "\"brokered_connections\".\"holder\" = 'person'", + "concurrently": false, + "method": "btree", + "with": {} + }, + "brokered_connections_deployment_idx": { + "name": "brokered_connections_deployment_idx", + "columns": [ + { + "expression": "provider", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "app", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "where": "\"brokered_connections\".\"holder\" = 'deployment'", + "concurrently": false, + "method": "btree", + "with": {} + }, + "brokered_connections_user_idx": { + "name": "brokered_connections_user_idx", + "columns": [ + { + "expression": "user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "brokered_connections_holder_check": { + "name": "brokered_connections_holder_check", + "value": "(\"brokered_connections\".\"holder\" = 'person' AND \"brokered_connections\".\"user_id\" IS NOT NULL) OR (\"brokered_connections\".\"holder\" = 'deployment' AND \"brokered_connections\".\"user_id\" IS NULL)" + }, + "brokered_connections_provider_check": { + "name": "brokered_connections_provider_check", + "value": "\"brokered_connections\".\"provider\" IN ('composio', 'arcade')" + } + }, + "isRLSEnabled": false + }, + "public.composio_connections": { + "name": "composio_connections", + "schema": "", + "columns": { + "toolkit": { + "name": "toolkit", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "connected_at": { + "name": "connected_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "verified": { + "name": "verified", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": false + }, + "verified_at": { + "name": "verified_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "probe_action": { + "name": "probe_action", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "composio_connections_user_idx": { + "name": "composio_connections_user_idx", + "columns": [ + { + "expression": "user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": {}, + "compositePrimaryKeys": { + "composio_connections_toolkit_user_id_pk": { + "name": "composio_connections_toolkit_user_id_pk", + "columns": [ + "toolkit", + "user_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.mcp_servers": { + "name": "mcp_servers", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "title": { + "name": "title", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "logo": { + "name": "logo", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "vendor": { + "name": "vendor", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "url": { + "name": "url", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "provenance": { + "name": "provenance", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'first-party'" + }, + "credential_id": { + "name": "credential_id", + "type": "uuid", + "primaryKey": false, + "notNull": false + }, + "auth_scheme": { + "name": "auth_scheme", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "account_mode": { + "name": "account_mode", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "shared_vendor_user_id": { + "name": "shared_vendor_user_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "tools_refreshed_at": { + "name": "tools_refreshed_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "last_error": { + "name": "last_error", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "added_by": { + "name": "added_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "mcp_servers_credential_id_credentials_id_fk": { + "name": "mcp_servers_credential_id_credentials_id_fk", + "tableFrom": "mcp_servers", + "tableTo": "credentials", + "columnsFrom": [ + "credential_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "restrict", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "mcp_servers_account_mode_check": { + "name": "mcp_servers_account_mode_check", + "value": "\"mcp_servers\".\"account_mode\" IS NULL OR \"mcp_servers\".\"account_mode\" IN ('personal', 'shared')" + } + }, + "isRLSEnabled": false + }, + "public.mcp_tools": { + "name": "mcp_tools", + "schema": "", + "columns": { + "server_id": { + "name": "server_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "name": { + "name": "name", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "description": { + "name": "description", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "''" + }, + "input_schema": { + "name": "input_schema", + "type": "jsonb", + "primaryKey": false, + "notNull": true, + "default": "'{}'::jsonb" + }, + "effect": { + "name": "effect", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "destructive": { + "name": "destructive", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": false + }, + "version": { + "name": "version", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "mcp_tools_server_id_mcp_servers_id_fk": { + "name": "mcp_tools_server_id_mcp_servers_id_fk", + "tableFrom": "mcp_tools", + "tableTo": "mcp_servers", + "columnsFrom": [ + "server_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "mcp_tools_server_id_name_pk": { + "name": "mcp_tools_server_id_name_pk", + "columns": [ + "server_id", + "name" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.mcp_user_credentials": { + "name": "mcp_user_credentials", + "schema": "", + "columns": { + "server_id": { + "name": "server_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "credential_id": { + "name": "credential_id", + "type": "uuid", + "primaryKey": false, + "notNull": true + }, + "scope": { + "name": "scope", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "connected_at": { + "name": "connected_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "mcp_user_credentials_user_idx": { + "name": "mcp_user_credentials_user_idx", + "columns": [ + { + "expression": "user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "mcp_user_credentials_server_id_mcp_servers_id_fk": { + "name": "mcp_user_credentials_server_id_mcp_servers_id_fk", + "tableFrom": "mcp_user_credentials", + "tableTo": "mcp_servers", + "columnsFrom": [ + "server_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "mcp_user_credentials_user_id_users_id_fk": { + "name": "mcp_user_credentials_user_id_users_id_fk", + "tableFrom": "mcp_user_credentials", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "mcp_user_credentials_credential_id_credentials_id_fk": { + "name": "mcp_user_credentials_credential_id_credentials_id_fk", + "tableFrom": "mcp_user_credentials", + "tableTo": "credentials", + "columnsFrom": [ + "credential_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "no action", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "mcp_user_credentials_server_id_user_id_pk": { + "name": "mcp_user_credentials_server_id_user_id_pk", + "columns": [ + "server_id", + "user_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.pending_authorizations": { + "name": "pending_authorizations", + "schema": "", + "columns": { + "actor_id": { + "name": "actor_id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "server_id": { + "name": "server_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "action": { + "name": "action", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "holder": { + "name": "holder", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "vendor_user_id": { + "name": "vendor_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "auth_id": { + "name": "auth_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "completed_at": { + "name": "completed_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "outcome": { + "name": "outcome", + "type": "text", + "primaryKey": false, + "notNull": false + } + }, + "indexes": {}, + "foreignKeys": { + "pending_authorizations_server_id_mcp_servers_id_fk": { + "name": "pending_authorizations_server_id_mcp_servers_id_fk", + "tableFrom": "pending_authorizations", + "tableTo": "mcp_servers", + "columnsFrom": [ + "server_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.plugin_grants": { + "name": "plugin_grants", + "schema": "", + "columns": { + "kind": { + "name": "kind", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "ref": { + "name": "ref", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "granted_by": { + "name": "granted_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "plugin_grants_agent_idx": { + "name": "plugin_grants_agent_idx", + "columns": [ + { + "expression": "agent_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "plugin_grants_agent_id_agents_id_fk": { + "name": "plugin_grants_agent_id_agents_id_fk", + "tableFrom": "plugin_grants", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "plugin_grants_kind_ref_agent_id_pk": { + "name": "plugin_grants_kind_ref_agent_id_pk", + "columns": [ + "kind", + "ref", + "agent_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.sandboxed_components": { + "name": "sandboxed_components", + "schema": "", + "columns": { + "name": { + "name": "name", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "title": { + "name": "title", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "draft_description": { + "name": "draft_description", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "''" + }, + "draft_html": { + "name": "draft_html", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "''" + }, + "draft_css": { + "name": "draft_css", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "''" + }, + "draft_js_functions": { + "name": "draft_js_functions", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "''" + }, + "draft_argument_schema": { + "name": "draft_argument_schema", + "type": "jsonb", + "primaryKey": false, + "notNull": true, + "default": "'{}'::jsonb" + }, + "published_description": { + "name": "published_description", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "published_html": { + "name": "published_html", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "published_css": { + "name": "published_css", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "published_js_functions": { + "name": "published_js_functions", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "published_argument_schema": { + "name": "published_argument_schema", + "type": "jsonb", + "primaryKey": false, + "notNull": false + }, + "sample_arguments": { + "name": "sample_arguments", + "type": "jsonb", + "primaryKey": false, + "notNull": true, + "default": "'{}'::jsonb" + }, + "revision": { + "name": "revision", + "type": "integer", + "primaryKey": false, + "notNull": true, + "default": 0 + }, + "published": { + "name": "published", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": false + }, + "published_at": { + "name": "published_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "authored_by": { + "name": "authored_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.skill_tools": { + "name": "skill_tools", + "schema": "", + "columns": { + "skill_id": { + "name": "skill_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "ref": { + "name": "ref", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "declared_by": { + "name": "declared_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "skill_tools_ref_idx": { + "name": "skill_tools_ref_idx", + "columns": [ + { + "expression": "ref", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "skill_tools_skill_id_skills_id_fk": { + "name": "skill_tools_skill_id_skills_id_fk", + "tableFrom": "skill_tools", + "tableTo": "skills", + "columnsFrom": [ + "skill_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "skill_tools_skill_id_ref_pk": { + "name": "skill_tools_skill_id_ref_pk", + "columns": [ + "skill_id", + "ref" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.skills": { + "name": "skills", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "slug": { + "name": "slug", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "title": { + "name": "title", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "summary": { + "name": "summary", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "instructions": { + "name": "instructions", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "origin": { + "name": "origin", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'yours'" + }, + "installed_by": { + "name": "installed_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "skills_slug_key": { + "name": "skills_slug_key", + "columns": [ + { + "expression": "slug", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "concurrently": false, + "method": "btree", + "with": {} + }, + "skills_owner_idx": { + "name": "skills_owner_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "skills_owner_user_id_users_id_fk": { + "name": "skills_owner_user_id_users_id_fk", + "tableFrom": "skills", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.work_items": { + "name": "work_items", + "schema": "", + "columns": { + "kind": { + "name": "kind", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "key": { + "name": "key", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "run_at": { + "name": "run_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "claimed_by": { + "name": "claimed_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "lease_until": { + "name": "lease_until", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "attempts": { + "name": "attempts", + "type": "integer", + "primaryKey": false, + "notNull": true, + "default": 0 + }, + "finished_at": { + "name": "finished_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "last_error": { + "name": "last_error", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "payload": { + "name": "payload", + "type": "jsonb", + "primaryKey": false, + "notNull": true, + "default": "'{}'::jsonb" + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "work_items_claimable_idx": { + "name": "work_items_claimable_idx", + "columns": [ + { + "expression": "kind", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "run_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": {}, + "compositePrimaryKeys": { + "work_items_kind_key_pk": { + "name": "work_items_kind_key_pk", + "columns": [ + "kind", + "key" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.voice_sessions": { + "name": "voice_sessions", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "channel_id": { + "name": "channel_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "anchor_message_id": { + "name": "anchor_message_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "started_at": { + "name": "started_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + }, + "ended_at": { + "name": "ended_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + }, + "duration_seconds": { + "name": "duration_seconds", + "type": "integer", + "primaryKey": false, + "notNull": true + }, + "transcript": { + "name": "transcript", + "type": "jsonb", + "primaryKey": false, + "notNull": true + }, + "summary": { + "name": "summary", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "summary_status": { + "name": "summary_status", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'failed'" + } + }, + "indexes": { + "voice_sessions_channel_started_idx": { + "name": "voice_sessions_channel_started_idx", + "columns": [ + { + "expression": "channel_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "started_at", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "voice_sessions_channel_id_channels_id_fk": { + "name": "voice_sessions_channel_id_channels_id_fk", + "tableFrom": "voice_sessions", + "tableTo": "channels", + "columnsFrom": [ + "channel_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "voice_sessions_user_id_users_id_fk": { + "name": "voice_sessions_user_id_users_id_fk", + "tableFrom": "voice_sessions", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "voice_sessions_duration_check": { + "name": "voice_sessions_duration_check", + "value": "\"voice_sessions\".\"duration_seconds\" >= 0" + }, + "voice_sessions_summary_check": { + "name": "voice_sessions_summary_check", + "value": "(\"voice_sessions\".\"summary_status\" = 'ready' AND \"voice_sessions\".\"summary\" IS NOT NULL) OR (\"voice_sessions\".\"summary_status\" = 'failed' AND \"voice_sessions\".\"summary\" IS NULL)" + } + }, + "isRLSEnabled": false + }, + "public.learning_settings": { + "name": "learning_settings", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "settings": { + "name": "settings", + "type": "jsonb", + "primaryKey": false, + "notNull": true + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.learning_thread_bindings": { + "name": "learning_thread_bindings", + "schema": "", + "columns": { + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "thread_id": { + "name": "thread_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "container_id": { + "name": "container_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": {}, + "compositePrimaryKeys": { + "learning_thread_bindings_user_id_thread_id_pk": { + "name": "learning_thread_bindings_user_id_thread_id_pk", + "columns": [ + "user_id", + "thread_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.responsibilities": { + "name": "responsibilities", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "channel_id": { + "name": "channel_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "thread_id": { + "name": "thread_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "title": { + "name": "title", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "instruction": { + "name": "instruction", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "success_criteria": { + "name": "success_criteria", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "status": { + "name": "status", + "type": "responsibility_status", + "typeSchema": "public", + "primaryKey": false, + "notNull": true, + "default": "'active'" + }, + "progress": { + "name": "progress", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "''" + }, + "last_result": { + "name": "last_result", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "subscriptions": { + "name": "subscriptions", + "type": "jsonb", + "primaryKey": false, + "notNull": true, + "default": "'[]'::jsonb" + }, + "completed_at": { + "name": "completed_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "responsibilities_owner_status_idx": { + "name": "responsibilities_owner_status_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "status", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "responsibilities_owner_user_id_users_id_fk": { + "name": "responsibilities_owner_user_id_users_id_fk", + "tableFrom": "responsibilities", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "responsibilities_agent_id_agents_id_fk": { + "name": "responsibilities_agent_id_agents_id_fk", + "tableFrom": "responsibilities", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.responsibility_events": { + "name": "responsibility_events", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "source": { + "name": "source", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "external_id": { + "name": "external_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "type": { + "name": "type", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "payload": { + "name": "payload", + "type": "jsonb", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "responsibility_events_source_id_idx": { + "name": "responsibility_events_source_id_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "source", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "external_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "responsibility_events_owner_user_id_users_id_fk": { + "name": "responsibility_events_owner_user_id_users_id_fk", + "tableFrom": "responsibility_events", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.responsibility_runs": { + "name": "responsibility_runs", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "responsibility_id": { + "name": "responsibility_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "event_id": { + "name": "event_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "status": { + "name": "status", + "type": "responsibility_run_status", + "typeSchema": "public", + "primaryKey": false, + "notNull": true, + "default": "'queued'" + }, + "reply_text": { + "name": "reply_text", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "error": { + "name": "error", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "waiting": { + "name": "waiting", + "type": "jsonb", + "primaryKey": false, + "notNull": false + }, + "continuation": { + "name": "continuation", + "type": "jsonb", + "primaryKey": false, + "notNull": false + }, + "started_at": { + "name": "started_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "finished_at": { + "name": "finished_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "responsibility_runs_event_idx": { + "name": "responsibility_runs_event_idx", + "columns": [ + { + "expression": "responsibility_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "event_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "concurrently": false, + "method": "btree", + "with": {} + }, + "responsibility_runs_status_idx": { + "name": "responsibility_runs_status_idx", + "columns": [ + { + "expression": "status", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "created_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "responsibility_runs_responsibility_id_responsibilities_id_fk": { + "name": "responsibility_runs_responsibility_id_responsibilities_id_fk", + "tableFrom": "responsibility_runs", + "tableTo": "responsibilities", + "columnsFrom": [ + "responsibility_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "responsibility_runs_event_id_responsibility_events_id_fk": { + "name": "responsibility_runs_event_id_responsibility_events_id_fk", + "tableFrom": "responsibility_runs", + "tableTo": "responsibility_events", + "columnsFrom": [ + "event_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.responsibility_source_bindings": { + "name": "responsibility_source_bindings", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "source": { + "name": "source", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "repository": { + "name": "repository", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "credential_id": { + "name": "credential_id", + "type": "uuid", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "responsibility_source_bindings_owner_idx": { + "name": "responsibility_source_bindings_owner_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "responsibility_source_bindings_owner_user_id_users_id_fk": { + "name": "responsibility_source_bindings_owner_user_id_users_id_fk", + "tableFrom": "responsibility_source_bindings", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "responsibility_source_bindings_credential_id_credentials_id_fk": { + "name": "responsibility_source_bindings_credential_id_credentials_id_fk", + "tableFrom": "responsibility_source_bindings", + "tableTo": "credentials", + "columnsFrom": [ + "credential_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "no action", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.responsibility_triggers": { + "name": "responsibility_triggers", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "responsibility_id": { + "name": "responsibility_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "kind": { + "name": "kind", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "config": { + "name": "config", + "type": "jsonb", + "primaryKey": false, + "notNull": true + }, + "credential_id": { + "name": "credential_id", + "type": "uuid", + "primaryKey": false, + "notNull": false + }, + "enabled": { + "name": "enabled", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "responsibility_triggers_owner_idx": { + "name": "responsibility_triggers_owner_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "responsibility_triggers_responsibility_idx": { + "name": "responsibility_triggers_responsibility_idx", + "columns": [ + { + "expression": "responsibility_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "responsibility_triggers_kind_idx": { + "name": "responsibility_triggers_kind_idx", + "columns": [ + { + "expression": "kind", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "responsibility_triggers_owner_user_id_users_id_fk": { + "name": "responsibility_triggers_owner_user_id_users_id_fk", + "tableFrom": "responsibility_triggers", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "responsibility_triggers_responsibility_id_responsibilities_id_fk": { + "name": "responsibility_triggers_responsibility_id_responsibilities_id_fk", + "tableFrom": "responsibility_triggers", + "tableTo": "responsibilities", + "columnsFrom": [ + "responsibility_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "responsibility_triggers_credential_id_credentials_id_fk": { + "name": "responsibility_triggers_credential_id_credentials_id_fk", + "tableFrom": "responsibility_triggers", + "tableTo": "credentials", + "columnsFrom": [ + "credential_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "no action", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.approval_preferences": { + "name": "approval_preferences", + "schema": "", + "columns": { + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "enabled": { + "name": "enabled", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": false + }, + "auto_review": { + "name": "auto_review", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": false + }, + "host_commands": { + "name": "host_commands", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'ask'" + } + }, + "indexes": {}, + "foreignKeys": { + "approval_preferences_owner_user_id_users_id_fk": { + "name": "approval_preferences_owner_user_id_users_id_fk", + "tableFrom": "approval_preferences", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "approval_preferences_host_commands_check": { + "name": "approval_preferences_host_commands_check", + "value": "\"approval_preferences\".\"host_commands\" IN ('ask', 'allow', 'never')" + } + }, + "isRLSEnabled": false + }, + "public.approval_requests": { + "name": "approval_requests", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "run_id": { + "name": "run_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "tool_call_id": { + "name": "tool_call_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "action_digest": { + "name": "action_digest", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "action": { + "name": "action", + "type": "jsonb", + "primaryKey": false, + "notNull": true + }, + "status": { + "name": "status", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'pending'" + }, + "decision": { + "name": "decision", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "result": { + "name": "result", + "type": "jsonb", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "decided_at": { + "name": "decided_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "consumed_at": { + "name": "consumed_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "completed_at": { + "name": "completed_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + } + }, + "indexes": { + "approval_requests_action_idx": { + "name": "approval_requests_action_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "run_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "tool_call_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "concurrently": false, + "method": "btree", + "with": {} + }, + "approval_requests_inbox_idx": { + "name": "approval_requests_inbox_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "status", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "approval_requests_owner_user_id_users_id_fk": { + "name": "approval_requests_owner_user_id_users_id_fk", + "tableFrom": "approval_requests", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "approval_status_check": { + "name": "approval_status_check", + "value": "\"approval_requests\".\"status\" IN ('pending', 'approved', 'denied', 'consumed', 'completed')" + }, + "approval_decision_check": { + "name": "approval_decision_check", + "value": "\"approval_requests\".\"decision\" IN ('allow_once', 'allow_always', 'deny', 'handled')" + } + }, + "isRLSEnabled": false + }, + "public.approval_rules": { + "name": "approval_rules", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "bot_id": { + "name": "bot_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "tool_ref": { + "name": "tool_ref", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "effect": { + "name": "effect", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "scope": { + "name": "scope", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "behaviour": { + "name": "behaviour", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'allow'" + }, + "revoked_at": { + "name": "revoked_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "approval_rules_owner_idx": { + "name": "approval_rules_owner_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "approval_rules_owner_user_id_users_id_fk": { + "name": "approval_rules_owner_user_id_users_id_fk", + "tableFrom": "approval_rules", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "approval_rules_behaviour_check": { + "name": "approval_rules_behaviour_check", + "value": "\"approval_rules\".\"behaviour\" IN ('allow', 'pre_approved', 'ask', 'hand_off')" + } + }, + "isRLSEnabled": false + }, + "public.approval_team_rules": { + "name": "approval_team_rules", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "bot_id": { + "name": "bot_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "tool_ref": { + "name": "tool_ref", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "effect": { + "name": "effect", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "scope": { + "name": "scope", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "behaviour": { + "name": "behaviour", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "created_by": { + "name": "created_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "revoked_at": { + "name": "revoked_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "approval_team_rules_created_by_users_id_fk": { + "name": "approval_team_rules_created_by_users_id_fk", + "tableFrom": "approval_team_rules", + "tableTo": "users", + "columnsFrom": [ + "created_by" + ], + "columnsTo": [ + "id" + ], + "onDelete": "set null", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "approval_team_rules_behaviour_check": { + "name": "approval_team_rules_behaviour_check", + "value": "\"approval_team_rules\".\"behaviour\" IN ('allow', 'pre_approved', 'ask', 'hand_off')" + } + }, + "isRLSEnabled": false + }, + "public.approval_team_settings": { + "name": "approval_team_settings", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "enforce_auto_review": { + "name": "enforce_auto_review", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": false + }, + "custom_rules_enabled": { + "name": "custom_rules_enabled", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": true + }, + "host_commands_cap": { + "name": "host_commands_cap", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'allow'" + }, + "updated_by": { + "name": "updated_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "approval_team_settings_updated_by_users_id_fk": { + "name": "approval_team_settings_updated_by_users_id_fk", + "tableFrom": "approval_team_settings", + "tableTo": "users", + "columnsFrom": [ + "updated_by" + ], + "columnsTo": [ + "id" + ], + "onDelete": "set null", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "approval_team_settings_host_commands_cap_check": { + "name": "approval_team_settings_host_commands_cap_check", + "value": "\"approval_team_settings\".\"host_commands_cap\" IN ('ask', 'allow', 'never')" + } + }, + "isRLSEnabled": false + }, + "public.memory_sources": { + "name": "memory_sources", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "tool_ref": { + "name": "tool_ref", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "title": { + "name": "title", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "args": { + "name": "args", + "type": "jsonb", + "primaryKey": false, + "notNull": true, + "default": "'{}'::jsonb" + }, + "enabled": { + "name": "enabled", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": true + }, + "sync_status": { + "name": "sync_status", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'idle'" + }, + "sync_error": { + "name": "sync_error", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "last_sync_at": { + "name": "last_sync_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "next_sync_at": { + "name": "next_sync_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "memory_sources_owner_idx": { + "name": "memory_sources_owner_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "memory_sources_due_idx": { + "name": "memory_sources_due_idx", + "columns": [ + { + "expression": "enabled", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "next_sync_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "memory_sources_owner_user_id_users_id_fk": { + "name": "memory_sources_owner_user_id_users_id_fk", + "tableFrom": "memory_sources", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "memory_sources_agent_id_agents_id_fk": { + "name": "memory_sources_agent_id_agents_id_fk", + "tableFrom": "memory_sources", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.personal_memories": { + "name": "personal_memories", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "source_id": { + "name": "source_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "external_id": { + "name": "external_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "import_digest": { + "name": "import_digest", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "content": { + "name": "content", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "provenance": { + "name": "provenance", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "enabled": { + "name": "enabled", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": true + }, + "review_state": { + "name": "review_state", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'unreviewed'" + }, + "deleted_at": { + "name": "deleted_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "formed_by": { + "name": "formed_by", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'person'" + }, + "formed_by_agent_id": { + "name": "formed_by_agent_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "source_app": { + "name": "source_app", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "source_ref": { + "name": "source_ref", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "source_link": { + "name": "source_link", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "observed_at": { + "name": "observed_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "intelligence_memory_id": { + "name": "intelligence_memory_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "intelligence_digest": { + "name": "intelligence_digest", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "personal_memories_owner_idx": { + "name": "personal_memories_owner_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "enabled", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "personal_memories_intelligence_idx": { + "name": "personal_memories_intelligence_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "intelligence_memory_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "personal_memories_formed_idx": { + "name": "personal_memories_formed_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "formed_by_agent_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "personal_memories_import_idx": { + "name": "personal_memories_import_idx", + "columns": [ + { + "expression": "source_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "external_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "concurrently": false, + "method": "btree", + "with": {} + }, + "personal_memories_formed_digest_idx": { + "name": "personal_memories_formed_digest_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "import_digest", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "where": "\"personal_memories\".\"formed_by\" = 'bot'", + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "personal_memories_owner_user_id_users_id_fk": { + "name": "personal_memories_owner_user_id_users_id_fk", + "tableFrom": "personal_memories", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "personal_memories_source_id_memory_sources_id_fk": { + "name": "personal_memories_source_id_memory_sources_id_fk", + "tableFrom": "personal_memories", + "tableTo": "memory_sources", + "columnsFrom": [ + "source_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "personal_memories_formed_by_agent_id_agents_id_fk": { + "name": "personal_memories_formed_by_agent_id_agents_id_fk", + "tableFrom": "personal_memories", + "tableTo": "agents", + "columnsFrom": [ + "formed_by_agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.default_opt_outs": { + "name": "default_opt_outs", + "schema": "", + "columns": { + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "feature": { + "name": "feature", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "scope": { + "name": "scope", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "''" + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "default_opt_outs_owner_user_id_users_id_fk": { + "name": "default_opt_outs_owner_user_id_users_id_fk", + "tableFrom": "default_opt_outs", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "default_opt_outs_agent_id_agents_id_fk": { + "name": "default_opt_outs_agent_id_agents_id_fk", + "tableFrom": "default_opt_outs", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "default_opt_outs_owner_user_id_agent_id_feature_scope_pk": { + "name": "default_opt_outs_owner_user_id_agent_id_feature_scope_pk", + "columns": [ + "owner_user_id", + "agent_id", + "feature", + "scope" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "default_opt_outs_feature_check": { + "name": "default_opt_outs_feature_check", + "value": "\"default_opt_outs\".\"feature\" IN ('memory_source', 'proactive_research')" + } + }, + "isRLSEnabled": false + }, + "public.proactive_settings": { + "name": "proactive_settings", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "channel_id": { + "name": "channel_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "thread_id": { + "name": "thread_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "focus": { + "name": "focus", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "''" + }, + "enabled": { + "name": "enabled", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": true + }, + "interval_minutes": { + "name": "interval_minutes", + "type": "integer", + "primaryKey": false, + "notNull": true, + "default": 240 + }, + "next_run_at": { + "name": "next_run_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "last_run_at": { + "name": "last_run_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "last_status": { + "name": "last_status", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'idle'" + }, + "last_error": { + "name": "last_error", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "proactive_settings_owner_agent_idx": { + "name": "proactive_settings_owner_agent_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "agent_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "concurrently": false, + "method": "btree", + "with": {} + }, + "proactive_settings_due_idx": { + "name": "proactive_settings_due_idx", + "columns": [ + { + "expression": "enabled", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "next_run_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "proactive_settings_owner_user_id_users_id_fk": { + "name": "proactive_settings_owner_user_id_users_id_fk", + "tableFrom": "proactive_settings", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "proactive_settings_agent_id_agents_id_fk": { + "name": "proactive_settings_agent_id_agents_id_fk", + "tableFrom": "proactive_settings", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "proactive_settings_interval_check": { + "name": "proactive_settings_interval_check", + "value": "\"proactive_settings\".\"interval_minutes\" >= 60 AND \"proactive_settings\".\"interval_minutes\" <= 1440" + }, + "proactive_settings_status_check": { + "name": "proactive_settings_status_check", + "value": "\"proactive_settings\".\"last_status\" IN ('idle', 'running', 'succeeded', 'error')" + } + }, + "isRLSEnabled": false + }, + "public.proactive_suggestions": { + "name": "proactive_suggestions", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "setting_id": { + "name": "setting_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "run_id": { + "name": "run_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "title": { + "name": "title", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "detail": { + "name": "detail", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "source_app": { + "name": "source_app", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "source_ref": { + "name": "source_ref", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "source_link": { + "name": "source_link", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "status": { + "name": "status", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'open'" + }, + "delivered_at": { + "name": "delivered_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "resolved_at": { + "name": "resolved_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "proactive_suggestions_owner_idx": { + "name": "proactive_suggestions_owner_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "status", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "created_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "proactive_suggestions_run_idx": { + "name": "proactive_suggestions_run_idx", + "columns": [ + { + "expression": "run_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "proactive_suggestions_owner_user_id_users_id_fk": { + "name": "proactive_suggestions_owner_user_id_users_id_fk", + "tableFrom": "proactive_suggestions", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "proactive_suggestions_agent_id_agents_id_fk": { + "name": "proactive_suggestions_agent_id_agents_id_fk", + "tableFrom": "proactive_suggestions", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "proactive_suggestions_setting_id_proactive_settings_id_fk": { + "name": "proactive_suggestions_setting_id_proactive_settings_id_fk", + "tableFrom": "proactive_suggestions", + "tableTo": "proactive_settings", + "columnsFrom": [ + "setting_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "proactive_suggestions_status_check": { + "name": "proactive_suggestions_status_check", + "value": "\"proactive_suggestions\".\"status\" IN ('open', 'dismissed', 'started')" + } + }, + "isRLSEnabled": false + }, + "public.demonstrations": { + "name": "demonstrations", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "bot_id": { + "name": "bot_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "title": { + "name": "title", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "status": { + "name": "status", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'recording'" + }, + "actions": { + "name": "actions", + "type": "jsonb", + "primaryKey": false, + "notNull": true, + "default": "'[]'::jsonb" + }, + "draft": { + "name": "draft", + "type": "jsonb", + "primaryKey": false, + "notNull": false + }, + "skill_slug": { + "name": "skill_slug", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "finished_at": { + "name": "finished_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + } + }, + "indexes": { + "demonstrations_owner_idx": { + "name": "demonstrations_owner_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "created_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "demonstrations_active_bot_idx": { + "name": "demonstrations_active_bot_idx", + "columns": [ + { + "expression": "bot_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "where": "\"demonstrations\".\"status\" = 'recording'", + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "demonstrations_owner_user_id_users_id_fk": { + "name": "demonstrations_owner_user_id_users_id_fk", + "tableFrom": "demonstrations", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "demonstrations_bot_id_agents_id_fk": { + "name": "demonstrations_bot_id_agents_id_fk", + "tableFrom": "demonstrations", + "tableTo": "agents", + "columnsFrom": [ + "bot_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.delivery_bindings": { + "name": "delivery_bindings", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "channel_id": { + "name": "channel_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "thread_id": { + "name": "thread_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "transport": { + "name": "transport", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "identity": { + "name": "identity", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "realm": { + "name": "realm", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "address": { + "name": "address", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "mention_id": { + "name": "mention_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "enabled": { + "name": "enabled", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": true + }, + "opted_out_at": { + "name": "opted_out_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "delivery_binding_identity_idx": { + "name": "delivery_binding_identity_idx", + "columns": [ + { + "expression": "transport", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "realm", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "identity", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "concurrently": false, + "method": "btree", + "with": {} + }, + "delivery_bindings_owner_idx": { + "name": "delivery_bindings_owner_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "delivery_bindings_owner_user_id_users_id_fk": { + "name": "delivery_bindings_owner_user_id_users_id_fk", + "tableFrom": "delivery_bindings", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "delivery_bindings_channel_id_channels_id_fk": { + "name": "delivery_bindings_channel_id_channels_id_fk", + "tableFrom": "delivery_bindings", + "tableTo": "channels", + "columnsFrom": [ + "channel_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "delivery_bindings_agent_id_agents_id_fk": { + "name": "delivery_bindings_agent_id_agents_id_fk", + "tableFrom": "delivery_bindings", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.delivery_challenges": { + "name": "delivery_challenges", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "channel_id": { + "name": "channel_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "thread_id": { + "name": "thread_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "transport": { + "name": "transport", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "address": { + "name": "address", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "expires_at": { + "name": "expires_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + }, + "consumed_at": { + "name": "consumed_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "delivery_challenges_owner_user_id_users_id_fk": { + "name": "delivery_challenges_owner_user_id_users_id_fk", + "tableFrom": "delivery_challenges", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "delivery_challenges_channel_id_channels_id_fk": { + "name": "delivery_challenges_channel_id_channels_id_fk", + "tableFrom": "delivery_challenges", + "tableTo": "channels", + "columnsFrom": [ + "channel_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "delivery_challenges_agent_id_agents_id_fk": { + "name": "delivery_challenges_agent_id_agents_id_fk", + "tableFrom": "delivery_challenges", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.delivery_inbox": { + "name": "delivery_inbox", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "channel_id": { + "name": "channel_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "thread_id": { + "name": "thread_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "binding_id": { + "name": "binding_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "source": { + "name": "source", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "realm": { + "name": "realm", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "external_id": { + "name": "external_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "text": { + "name": "text", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "state": { + "name": "state", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'queued'" + }, + "error": { + "name": "error", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "delivery_inbox_dedupe_idx": { + "name": "delivery_inbox_dedupe_idx", + "columns": [ + { + "expression": "source", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "realm", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "external_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "concurrently": false, + "method": "btree", + "with": {} + }, + "delivery_inbox_owner_idx": { + "name": "delivery_inbox_owner_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "created_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "delivery_inbox_owner_user_id_users_id_fk": { + "name": "delivery_inbox_owner_user_id_users_id_fk", + "tableFrom": "delivery_inbox", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "delivery_inbox_channel_id_channels_id_fk": { + "name": "delivery_inbox_channel_id_channels_id_fk", + "tableFrom": "delivery_inbox", + "tableTo": "channels", + "columnsFrom": [ + "channel_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "delivery_inbox_agent_id_agents_id_fk": { + "name": "delivery_inbox_agent_id_agents_id_fk", + "tableFrom": "delivery_inbox", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.delivery_outbox": { + "name": "delivery_outbox", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "channel_id": { + "name": "channel_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "thread_id": { + "name": "thread_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "dedupe_key": { + "name": "dedupe_key", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "binding_id": { + "name": "binding_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "device_id": { + "name": "device_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "transport": { + "name": "transport", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "text": { + "name": "text", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "kind": { + "name": "kind", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "request_id": { + "name": "request_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "state": { + "name": "state", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'queued'" + }, + "provider_id": { + "name": "provider_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "error": { + "name": "error", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "delivery_outbox_owner_idx": { + "name": "delivery_outbox_owner_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "created_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "delivery_outbox_provider_idx": { + "name": "delivery_outbox_provider_idx", + "columns": [ + { + "expression": "transport", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "provider_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "delivery_outbox_owner_user_id_users_id_fk": { + "name": "delivery_outbox_owner_user_id_users_id_fk", + "tableFrom": "delivery_outbox", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "delivery_outbox_channel_id_channels_id_fk": { + "name": "delivery_outbox_channel_id_channels_id_fk", + "tableFrom": "delivery_outbox", + "tableTo": "channels", + "columnsFrom": [ + "channel_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "delivery_outbox_agent_id_agents_id_fk": { + "name": "delivery_outbox_agent_id_agents_id_fk", + "tableFrom": "delivery_outbox", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": { + "delivery_outbox_dedupe_key_unique": { + "name": "delivery_outbox_dedupe_key_unique", + "nullsNotDistinct": false, + "columns": [ + "dedupe_key" + ] + } + }, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.push_devices": { + "name": "push_devices", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "token": { + "name": "token", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "project_id": { + "name": "project_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "platform": { + "name": "platform", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "enabled": { + "name": "enabled", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "push_devices_owner_idx": { + "name": "push_devices_owner_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "push_devices_owner_user_id_users_id_fk": { + "name": "push_devices_owner_user_id_users_id_fk", + "tableFrom": "push_devices", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": { + "push_devices_token_unique": { + "name": "push_devices_token_unique", + "nullsNotDistinct": false, + "columns": [ + "token" + ] + } + }, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.group_bot_threads": { + "name": "group_bot_threads", + "schema": "", + "columns": { + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "channel_id": { + "name": "channel_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "thread_id": { + "name": "thread_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "group_bot_threads_thread_idx": { + "name": "group_bot_threads_thread_idx", + "columns": [ + { + "expression": "thread_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "group_bot_threads_owner_user_id_users_id_fk": { + "name": "group_bot_threads_owner_user_id_users_id_fk", + "tableFrom": "group_bot_threads", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "group_bot_threads_channel_id_channels_id_fk": { + "name": "group_bot_threads_channel_id_channels_id_fk", + "tableFrom": "group_bot_threads", + "tableTo": "channels", + "columnsFrom": [ + "channel_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "group_bot_threads_owner_user_id_channel_id_agent_id_pk": { + "name": "group_bot_threads_owner_user_id_channel_id_agent_id_pk", + "columns": [ + "owner_user_id", + "channel_id", + "agent_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.group_messages": { + "name": "group_messages", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "channel_id": { + "name": "channel_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "thread_id": { + "name": "thread_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "text": { + "name": "text", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "status": { + "name": "status", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'completed'" + }, + "details": { + "name": "details", + "type": "jsonb", + "primaryKey": false, + "notNull": true, + "default": "'{}'::jsonb" + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "group_messages_channel_idx": { + "name": "group_messages_channel_idx", + "columns": [ + { + "expression": "channel_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "created_at", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "group_messages_channel_id_channels_id_fk": { + "name": "group_messages_channel_id_channels_id_fk", + "tableFrom": "group_messages", + "tableTo": "channels", + "columnsFrom": [ + "channel_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "group_messages_owner_user_id_users_id_fk": { + "name": "group_messages_owner_user_id_users_id_fk", + "tableFrom": "group_messages", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "group_messages_status_check": { + "name": "group_messages_status_check", + "value": "\"group_messages\".\"status\" IN ('queued', 'running', 'waiting', 'completed', 'failed')" + } + }, + "isRLSEnabled": false + }, + "public.action_records": { + "name": "action_records", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "uuid", + "primaryKey": true, + "notNull": true, + "default": "gen_random_uuid()" + }, + "surface": { + "name": "surface", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "bot_id": { + "name": "bot_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "actor_user_id": { + "name": "actor_user_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "tool_name": { + "name": "tool_name", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "command": { + "name": "command", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "outcome": { + "name": "outcome", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "action_records_created_idx": { + "name": "action_records_created_idx", + "columns": [ + { + "expression": "created_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "action_records_bot_idx": { + "name": "action_records_bot_idx", + "columns": [ + { + "expression": "bot_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "created_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "action_records_surface_check": { + "name": "action_records_surface_check", + "value": "\"action_records\".\"surface\" IN ('cloud', 'local')" + } + }, + "isRLSEnabled": false + }, + "public.capability_settings": { + "name": "capability_settings", + "schema": "", + "columns": { + "scope_kind": { + "name": "scope_kind", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "scope_id": { + "name": "scope_id", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "''" + }, + "capability": { + "name": "capability", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "allowed": { + "name": "allowed", + "type": "boolean", + "primaryKey": false, + "notNull": true + }, + "updated_by": { + "name": "updated_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": {}, + "compositePrimaryKeys": { + "capability_settings_scope_kind_scope_id_capability_pk": { + "name": "capability_settings_scope_kind_scope_id_capability_pk", + "columns": [ + "scope_kind", + "scope_id", + "capability" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "capability_settings_scope_kind_check": { + "name": "capability_settings_scope_kind_check", + "value": "\"capability_settings\".\"scope_kind\" IN ('organization', 'role', 'group')" + } + }, + "isRLSEnabled": false + }, + "public.enterprise_settings": { + "name": "enterprise_settings", + "schema": "", + "columns": { + "key": { + "name": "key", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "value": { + "name": "value", + "type": "jsonb", + "primaryKey": false, + "notNull": true + }, + "updated_by": { + "name": "updated_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.model_usage": { + "name": "model_usage", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "uuid", + "primaryKey": true, + "notNull": true, + "default": "gen_random_uuid()" + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "thread_id": { + "name": "thread_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "run_id": { + "name": "run_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "model": { + "name": "model", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "source": { + "name": "source", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "allowed": { + "name": "allowed", + "type": "boolean", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "model_usage_created_idx": { + "name": "model_usage_created_idx", + "columns": [ + { + "expression": "created_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "model_usage_model_idx": { + "name": "model_usage_model_idx", + "columns": [ + { + "expression": "model", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "created_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "model_usage_source_check": { + "name": "model_usage_source_check", + "value": "\"model_usage\".\"source\" IN ('configured', 'observed', 'unknown')" + } + }, + "isRLSEnabled": false + }, + "public.network_policies": { + "name": "network_policies", + "schema": "", + "columns": { + "scope_kind": { + "name": "scope_kind", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "scope_id": { + "name": "scope_id", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "''" + }, + "mode": { + "name": "mode", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "rules": { + "name": "rules", + "type": "jsonb", + "primaryKey": false, + "notNull": true, + "default": "'{\"entries\":[]}'::jsonb" + }, + "locked": { + "name": "locked", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": false + }, + "updated_by": { + "name": "updated_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": {}, + "compositePrimaryKeys": { + "network_policies_scope_kind_scope_id_pk": { + "name": "network_policies_scope_kind_scope_id_pk", + "columns": [ + "scope_kind", + "scope_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "network_policies_scope_kind_check": { + "name": "network_policies_scope_kind_check", + "value": "\"network_policies\".\"scope_kind\" IN ('organization', 'group')" + }, + "network_policies_mode_check": { + "name": "network_policies_mode_check", + "value": "\"network_policies\".\"mode\" IN ('allow_all', 'defaults_plus_allowlist', 'allowlist_only')" + } + }, + "isRLSEnabled": false + }, + "public.scim_connection_bindings": { + "name": "scim_connection_bindings", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "connection_id": { + "name": "connection_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "connection_key": { + "name": "connection_key", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "provisioning_domain_id": { + "name": "provisioning_domain_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + }, + "decommissioned_at": { + "name": "decommissioned_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "decommission_status": { + "name": "decommission_status", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'active'" + }, + "decommission_cursor_user_id": { + "name": "decommission_cursor_user_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "decommission_reconciled_user_count": { + "name": "decommission_reconciled_user_count", + "type": "integer", + "primaryKey": false, + "notNull": true, + "default": 0 + }, + "decommission_batch_count": { + "name": "decommission_batch_count", + "type": "integer", + "primaryKey": false, + "notNull": true, + "default": 0 + }, + "decommission_revision": { + "name": "decommission_revision", + "type": "integer", + "primaryKey": false, + "notNull": true, + "default": 0 + }, + "decommission_completed_at": { + "name": "decommission_completed_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "decommission_lease_id": { + "name": "decommission_lease_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "decommission_lease_expires_at": { + "name": "decommission_lease_expires_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + } + }, + "indexes": { + "scim_connection_bindings_connection_idx": { + "name": "scim_connection_bindings_connection_idx", + "columns": [ + { + "expression": "connection_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": { + "scim_connection_bindings_connection_key_unique": { + "name": "scim_connection_bindings_connection_key_unique", + "nullsNotDistinct": false, + "columns": [ + "connection_key" + ] + } + }, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.scim_group_members": { + "name": "scim_group_members", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "connection_id": { + "name": "connection_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "group_id": { + "name": "group_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "scim_user_id": { + "name": "scim_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "membership_key": { + "name": "membership_key", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + } + }, + "indexes": { + "scim_group_members_connection_idx": { + "name": "scim_group_members_connection_idx", + "columns": [ + { + "expression": "connection_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "scim_group_members_group_idx": { + "name": "scim_group_members_group_idx", + "columns": [ + { + "expression": "group_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "scim_group_members_scim_user_idx": { + "name": "scim_group_members_scim_user_idx", + "columns": [ + { + "expression": "scim_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "scim_group_members_group_id_scim_groups_id_fk": { + "name": "scim_group_members_group_id_scim_groups_id_fk", + "tableFrom": "scim_group_members", + "tableTo": "scim_groups", + "columnsFrom": [ + "group_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "scim_group_members_scim_user_id_scim_users_id_fk": { + "name": "scim_group_members_scim_user_id_scim_users_id_fk", + "tableFrom": "scim_group_members", + "tableTo": "scim_users", + "columnsFrom": [ + "scim_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": { + "scim_group_members_membership_key_unique": { + "name": "scim_group_members_membership_key_unique", + "nullsNotDistinct": false, + "columns": [ + "membership_key" + ] + } + }, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.scim_groups": { + "name": "scim_groups", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "connection_id": { + "name": "connection_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "provisioning_domain_id": { + "name": "provisioning_domain_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "revision": { + "name": "revision", + "type": "integer", + "primaryKey": false, + "notNull": true, + "default": 0 + }, + "display_name": { + "name": "display_name", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "display_name_key": { + "name": "display_name_key", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "external_id": { + "name": "external_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "external_id_key": { + "name": "external_id_key", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "order_key": { + "name": "order_key", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + } + }, + "indexes": { + "scim_groups_connection_idx": { + "name": "scim_groups_connection_idx", + "columns": [ + { + "expression": "connection_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "scim_groups_domain_idx": { + "name": "scim_groups_domain_idx", + "columns": [ + { + "expression": "provisioning_domain_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": { + "scim_groups_display_name_key_unique": { + "name": "scim_groups_display_name_key_unique", + "nullsNotDistinct": false, + "columns": [ + "display_name_key" + ] + }, + "scim_groups_external_id_key_unique": { + "name": "scim_groups_external_id_key_unique", + "nullsNotDistinct": false, + "columns": [ + "external_id_key" + ] + }, + "scim_groups_order_key_unique": { + "name": "scim_groups_order_key_unique", + "nullsNotDistinct": false, + "columns": [ + "order_key" + ] + } + }, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.scim_identity_tombstones": { + "name": "scim_identity_tombstones", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "connection_id": { + "name": "connection_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "provisioning_domain_id": { + "name": "provisioning_domain_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "external_id": { + "name": "external_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "external_id_key": { + "name": "external_id_key", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "profile": { + "name": "profile", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "deleted_at": { + "name": "deleted_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + } + }, + "indexes": { + "scim_identity_tombstones_connection_idx": { + "name": "scim_identity_tombstones_connection_idx", + "columns": [ + { + "expression": "connection_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "scim_identity_tombstones_domain_idx": { + "name": "scim_identity_tombstones_domain_idx", + "columns": [ + { + "expression": "provisioning_domain_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "scim_identity_tombstones_user_idx": { + "name": "scim_identity_tombstones_user_idx", + "columns": [ + { + "expression": "user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "scim_identity_tombstones_user_id_users_id_fk": { + "name": "scim_identity_tombstones_user_id_users_id_fk", + "tableFrom": "scim_identity_tombstones", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": { + "scim_identity_tombstones_external_id_key_unique": { + "name": "scim_identity_tombstones_external_id_key_unique", + "nullsNotDistinct": false, + "columns": [ + "external_id_key" + ] + } + }, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.scim_projection_grants": { + "name": "scim_projection_grants", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "connection_id": { + "name": "connection_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "provisioning_domain_id": { + "name": "provisioning_domain_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "scim_user_id": { + "name": "scim_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "source_kind": { + "name": "source_kind", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "source_id": { + "name": "source_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "source_value": { + "name": "source_value", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "role": { + "name": "role", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "grant_key": { + "name": "grant_key", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + } + }, + "indexes": { + "scim_projection_grants_connection_idx": { + "name": "scim_projection_grants_connection_idx", + "columns": [ + { + "expression": "connection_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "scim_projection_grants_domain_idx": { + "name": "scim_projection_grants_domain_idx", + "columns": [ + { + "expression": "provisioning_domain_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "scim_projection_grants_scim_user_idx": { + "name": "scim_projection_grants_scim_user_idx", + "columns": [ + { + "expression": "scim_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "scim_projection_grants_user_idx": { + "name": "scim_projection_grants_user_idx", + "columns": [ + { + "expression": "user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "scim_projection_grants_scim_user_id_scim_users_id_fk": { + "name": "scim_projection_grants_scim_user_id_scim_users_id_fk", + "tableFrom": "scim_projection_grants", + "tableTo": "scim_users", + "columnsFrom": [ + "scim_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "scim_projection_grants_user_id_users_id_fk": { + "name": "scim_projection_grants_user_id_users_id_fk", + "tableFrom": "scim_projection_grants", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": { + "scim_projection_grants_grant_key_unique": { + "name": "scim_projection_grants_grant_key_unique", + "nullsNotDistinct": false, + "columns": [ + "grant_key" + ] + } + }, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.scim_subjects": { + "name": "scim_subjects", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "profile_source_id": { + "name": "profile_source_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "revision": { + "name": "revision", + "type": "integer", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + } + }, + "indexes": { + "scim_subjects_profile_source_idx": { + "name": "scim_subjects_profile_source_idx", + "columns": [ + { + "expression": "profile_source_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "scim_subjects_user_id_users_id_fk": { + "name": "scim_subjects_user_id_users_id_fk", + "tableFrom": "scim_subjects", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": { + "scim_subjects_user_id_unique": { + "name": "scim_subjects_user_id_unique", + "nullsNotDistinct": false, + "columns": [ + "user_id" + ] + } + }, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.scim_users": { + "name": "scim_users", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "connection_id": { + "name": "connection_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "provisioning_domain_id": { + "name": "provisioning_domain_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "connection_user_key": { + "name": "connection_user_key", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "user_name": { + "name": "user_name", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "user_name_key": { + "name": "user_name_key", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "primary_email": { + "name": "primary_email", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "work_email_value_index": { + "name": "work_email_value_index", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "email_value_index": { + "name": "email_value_index", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "display_name": { + "name": "display_name", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "formatted_name": { + "name": "formatted_name", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "given_name": { + "name": "given_name", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "family_name": { + "name": "family_name", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "serialized_emails": { + "name": "serialized_emails", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "serialized_attributes": { + "name": "serialized_attributes", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "external_id": { + "name": "external_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "external_id_key": { + "name": "external_id_key", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "active": { + "name": "active", + "type": "boolean", + "primaryKey": false, + "notNull": true + }, + "order_key": { + "name": "order_key", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + } + }, + "indexes": { + "scim_users_connection_idx": { + "name": "scim_users_connection_idx", + "columns": [ + { + "expression": "connection_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "scim_users_domain_idx": { + "name": "scim_users_domain_idx", + "columns": [ + { + "expression": "provisioning_domain_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "scim_users_user_idx": { + "name": "scim_users_user_idx", + "columns": [ + { + "expression": "user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "scim_users_user_id_users_id_fk": { + "name": "scim_users_user_id_users_id_fk", + "tableFrom": "scim_users", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": { + "scim_users_connection_user_key_unique": { + "name": "scim_users_connection_user_key_unique", + "nullsNotDistinct": false, + "columns": [ + "connection_user_key" + ] + }, + "scim_users_user_name_key_unique": { + "name": "scim_users_user_name_key_unique", + "nullsNotDistinct": false, + "columns": [ + "user_name_key" + ] + }, + "scim_users_external_id_key_unique": { + "name": "scim_users_external_id_key_unique", + "nullsNotDistinct": false, + "columns": [ + "external_id_key" + ] + }, + "scim_users_order_key_unique": { + "name": "scim_users_order_key_unique", + "nullsNotDistinct": false, + "columns": [ + "order_key" + ] + } + }, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.bot_lifecycle": { + "name": "bot_lifecycle", + "schema": "", + "columns": { + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "paused_at": { + "name": "paused_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "notify": { + "name": "notify", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'all'" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "bot_lifecycle_owner_user_id_users_id_fk": { + "name": "bot_lifecycle_owner_user_id_users_id_fk", + "tableFrom": "bot_lifecycle", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "bot_lifecycle_agent_id_agents_id_fk": { + "name": "bot_lifecycle_agent_id_agents_id_fk", + "tableFrom": "bot_lifecycle", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "bot_lifecycle_owner_user_id_agent_id_pk": { + "name": "bot_lifecycle_owner_user_id_agent_id_pk", + "columns": [ + "owner_user_id", + "agent_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.update_routing_preferences": { + "name": "update_routing_preferences", + "schema": "", + "columns": { + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "kind": { + "name": "kind", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "transports": { + "name": "transports", + "type": "text[]", + "primaryKey": false, + "notNull": true, + "default": "'{}'" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "update_routing_preferences_owner_user_id_users_id_fk": { + "name": "update_routing_preferences_owner_user_id_users_id_fk", + "tableFrom": "update_routing_preferences", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "update_routing_preferences_owner_user_id_kind_pk": { + "name": "update_routing_preferences_owner_user_id_kind_pk", + "columns": [ + "owner_user_id", + "kind" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.saved_logins": { + "name": "saved_logins", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "origin": { + "name": "origin", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "username": { + "name": "username", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "encrypted_password": { + "name": "encrypted_password", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "last_used_at": { + "name": "last_used_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + } + }, + "indexes": { + "saved_logins_owner_origin_username_idx": { + "name": "saved_logins_owner_origin_username_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "origin", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "username", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "concurrently": false, + "method": "btree", + "with": {} + }, + "saved_logins_owner_idx": { + "name": "saved_logins_owner_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "saved_logins_owner_user_id_users_id_fk": { + "name": "saved_logins_owner_user_id_users_id_fk", + "tableFrom": "saved_logins", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.sign_in_requests": { + "name": "sign_in_requests", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "bot_id": { + "name": "bot_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "origin": { + "name": "origin", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "reason": { + "name": "reason", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "status": { + "name": "status", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'pending'" + }, + "method": { + "name": "method", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "outcome": { + "name": "outcome", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "thread_id": { + "name": "thread_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "tool_call_id": { + "name": "tool_call_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "control_request_id": { + "name": "control_request_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "continuation": { + "name": "continuation", + "type": "jsonb", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "expires_at": { + "name": "expires_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + }, + "resolved_at": { + "name": "resolved_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "filling_until": { + "name": "filling_until", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + } + }, + "indexes": { + "sign_in_requests_owner_idx": { + "name": "sign_in_requests_owner_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "status", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "sign_in_requests_owner_user_id_users_id_fk": { + "name": "sign_in_requests_owner_user_id_users_id_fk", + "tableFrom": "sign_in_requests", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "sign_in_requests_status_check": { + "name": "sign_in_requests_status_check", + "value": "\"sign_in_requests\".\"status\" IN ('pending', 'filling', 'code_required', 'taken_over', 'signed_in', 'failed', 'cancelled', 'expired')" + }, + "sign_in_requests_method_check": { + "name": "sign_in_requests_method_check", + "value": "\"sign_in_requests\".\"method\" IS NULL OR \"sign_in_requests\".\"method\" IN ('typed', 'saved', 'takeover')" + } + }, + "isRLSEnabled": false + }, + "public.team_bot_assignments": { + "name": "team_bot_assignments", + "schema": "", + "columns": { + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "group_name": { + "name": "group_name", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "assigned_by": { + "name": "assigned_by", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "assigned_at": { + "name": "assigned_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "team_bot_assignments_agent_id_agents_id_fk": { + "name": "team_bot_assignments_agent_id_agents_id_fk", + "tableFrom": "team_bot_assignments", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "team_bot_assignments_assigned_by_users_id_fk": { + "name": "team_bot_assignments_assigned_by_users_id_fk", + "tableFrom": "team_bot_assignments", + "tableTo": "users", + "columnsFrom": [ + "assigned_by" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "team_bot_assignments_agent_id_group_name_pk": { + "name": "team_bot_assignments_agent_id_group_name_pk", + "columns": [ + "agent_id", + "group_name" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.team_bot_audience": { + "name": "team_bot_audience", + "schema": "", + "columns": { + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "kind": { + "name": "kind", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "value": { + "name": "value", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "team_bot_audience_agent_id_agents_id_fk": { + "name": "team_bot_audience_agent_id_agents_id_fk", + "tableFrom": "team_bot_audience", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "team_bot_audience_agent_id_kind_value_pk": { + "name": "team_bot_audience_agent_id_kind_value_pk", + "columns": [ + "agent_id", + "kind", + "value" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "team_bot_audience_kind_check": { + "name": "team_bot_audience_kind_check", + "value": "\"team_bot_audience\".\"kind\" IN ('user', 'group')" + } + }, + "isRLSEnabled": false + }, + "public.team_bot_consent_defaults": { + "name": "team_bot_consent_defaults", + "schema": "", + "columns": { + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "server_id": { + "name": "server_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "team_bot_consent_defaults_user_id_users_id_fk": { + "name": "team_bot_consent_defaults_user_id_users_id_fk", + "tableFrom": "team_bot_consent_defaults", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "team_bot_consent_defaults_user_id_server_id_pk": { + "name": "team_bot_consent_defaults_user_id_server_id_pk", + "columns": [ + "user_id", + "server_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.team_bot_consents": { + "name": "team_bot_consents", + "schema": "", + "columns": { + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "server_id": { + "name": "server_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "decision": { + "name": "decision", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "team_bot_consents_user_id_users_id_fk": { + "name": "team_bot_consents_user_id_users_id_fk", + "tableFrom": "team_bot_consents", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "team_bot_consents_agent_id_agents_id_fk": { + "name": "team_bot_consents_agent_id_agents_id_fk", + "tableFrom": "team_bot_consents", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "team_bot_consents_user_id_agent_id_server_id_pk": { + "name": "team_bot_consents_user_id_agent_id_server_id_pk", + "columns": [ + "user_id", + "agent_id", + "server_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "team_bot_consents_decision_check": { + "name": "team_bot_consents_decision_check", + "value": "\"team_bot_consents\".\"decision\" IN ('always', 'once')" + } + }, + "isRLSEnabled": false + }, + "public.team_bot_publications": { + "name": "team_bot_publications", + "schema": "", + "columns": { + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "published_by": { + "name": "published_by", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "audience": { + "name": "audience", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "published_at": { + "name": "published_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "team_bot_publications_agent_id_agents_id_fk": { + "name": "team_bot_publications_agent_id_agents_id_fk", + "tableFrom": "team_bot_publications", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "team_bot_publications_published_by_users_id_fk": { + "name": "team_bot_publications_published_by_users_id_fk", + "tableFrom": "team_bot_publications", + "tableTo": "users", + "columnsFrom": [ + "published_by" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "team_bot_publications_audience_check": { + "name": "team_bot_publications_audience_check", + "value": "\"team_bot_publications\".\"audience\" IN ('team', 'people')" + } + }, + "isRLSEnabled": false + }, + "public.shared_use_approval_members": { + "name": "shared_use_approval_members", + "schema": "", + "columns": { + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "server_id": { + "name": "server_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "kind": { + "name": "kind", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "value": { + "name": "value", + "type": "text", + "primaryKey": false, + "notNull": true + } + }, + "indexes": {}, + "foreignKeys": { + "shared_use_approval_members_approval_fk": { + "name": "shared_use_approval_members_approval_fk", + "tableFrom": "shared_use_approval_members", + "tableTo": "shared_use_approvals", + "columnsFrom": [ + "agent_id", + "server_id" + ], + "columnsTo": [ + "agent_id", + "server_id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "shared_use_approval_members_agent_id_server_id_kind_value_pk": { + "name": "shared_use_approval_members_agent_id_server_id_kind_value_pk", + "columns": [ + "agent_id", + "server_id", + "kind", + "value" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "shared_use_approval_members_kind_check": { + "name": "shared_use_approval_members_kind_check", + "value": "\"shared_use_approval_members\".\"kind\" IN ('user', 'group')" + } + }, + "isRLSEnabled": false + }, + "public.shared_use_approvals": { + "name": "shared_use_approvals", + "schema": "", + "columns": { + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "server_id": { + "name": "server_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "audience": { + "name": "audience", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "outside_input": { + "name": "outside_input", + "type": "boolean", + "primaryKey": false, + "notNull": true + }, + "approved_by": { + "name": "approved_by", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "approved_at": { + "name": "approved_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "shared_use_approvals_agent_id_agents_id_fk": { + "name": "shared_use_approvals_agent_id_agents_id_fk", + "tableFrom": "shared_use_approvals", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "shared_use_approvals_server_id_mcp_servers_id_fk": { + "name": "shared_use_approvals_server_id_mcp_servers_id_fk", + "tableFrom": "shared_use_approvals", + "tableTo": "mcp_servers", + "columnsFrom": [ + "server_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "shared_use_approvals_agent_id_server_id_pk": { + "name": "shared_use_approvals_agent_id_server_id_pk", + "columns": [ + "agent_id", + "server_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "shared_use_approvals_audience_check": { + "name": "shared_use_approvals_audience_check", + "value": "\"shared_use_approvals\".\"audience\" IN ('owner', 'people', 'team')" + } + }, + "isRLSEnabled": false + }, + "public.shared_use_requests": { + "name": "shared_use_requests", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "server_id": { + "name": "server_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "proposed_audience": { + "name": "proposed_audience", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "proposed_outside_input": { + "name": "proposed_outside_input", + "type": "boolean", + "primaryKey": false, + "notNull": true + }, + "proposed_members": { + "name": "proposed_members", + "type": "jsonb", + "primaryKey": false, + "notNull": true, + "default": "'[]'::jsonb" + }, + "reason": { + "name": "reason", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "requested_by": { + "name": "requested_by", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "status": { + "name": "status", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'pending'" + }, + "decided_by": { + "name": "decided_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "decided_at": { + "name": "decided_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "shared_use_requests_pending_idx": { + "name": "shared_use_requests_pending_idx", + "columns": [ + { + "expression": "agent_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "server_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "where": "\"shared_use_requests\".\"status\" = 'pending'", + "concurrently": false, + "method": "btree", + "with": {} + }, + "shared_use_requests_status_idx": { + "name": "shared_use_requests_status_idx", + "columns": [ + { + "expression": "status", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "shared_use_requests_agent_id_agents_id_fk": { + "name": "shared_use_requests_agent_id_agents_id_fk", + "tableFrom": "shared_use_requests", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "shared_use_requests_server_id_mcp_servers_id_fk": { + "name": "shared_use_requests_server_id_mcp_servers_id_fk", + "tableFrom": "shared_use_requests", + "tableTo": "mcp_servers", + "columnsFrom": [ + "server_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "shared_use_requests_audience_check": { + "name": "shared_use_requests_audience_check", + "value": "\"shared_use_requests\".\"proposed_audience\" IN ('owner', 'people', 'team')" + }, + "shared_use_requests_reason_check": { + "name": "shared_use_requests_reason_check", + "value": "\"shared_use_requests\".\"reason\" IN ('publish', 'trigger', 'grant', 'refused_call')" + }, + "shared_use_requests_status_check": { + "name": "shared_use_requests_status_check", + "value": "\"shared_use_requests\".\"status\" IN ('pending', 'approved', 'declined', 'superseded')" + } + }, + "isRLSEnabled": false + }, + "public.identity_link_challenges": { + "name": "identity_link_challenges", + "schema": "", + "columns": { + "token_hash": { + "name": "token_hash", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "provider": { + "name": "provider", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "expires_at": { + "name": "expires_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + } + }, + "indexes": { + "identity_link_challenges_expiry_idx": { + "name": "identity_link_challenges_expiry_idx", + "columns": [ + { + "expression": "expires_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "identity_link_challenges_user_provider_idx": { + "name": "identity_link_challenges_user_provider_idx", + "columns": [ + { + "expression": "user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "provider", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.identity_links": { + "name": "identity_links", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "provider": { + "name": "provider", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "realm": { + "name": "realm", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "subject": { + "name": "subject", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "handle": { + "name": "handle", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "verified_by": { + "name": "verified_by", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "credential_id": { + "name": "credential_id", + "type": "uuid", + "primaryKey": false, + "notNull": false + }, + "status": { + "name": "status", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'active'" + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "identity_links_identity_idx": { + "name": "identity_links_identity_idx", + "columns": [ + { + "expression": "provider", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "realm", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "subject", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "concurrently": false, + "method": "btree", + "with": {} + }, + "identity_links_user_realm_idx": { + "name": "identity_links_user_realm_idx", + "columns": [ + { + "expression": "user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "provider", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "realm", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "concurrently": false, + "method": "btree", + "with": {} + }, + "identity_links_credential_idx": { + "name": "identity_links_credential_idx", + "columns": [ + { + "expression": "credential_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "where": "\"identity_links\".\"credential_id\" IS NOT NULL", + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "identity_links_credential_id_credentials_id_fk": { + "name": "identity_links_credential_id_credentials_id_fk", + "tableFrom": "identity_links", + "tableTo": "credentials", + "columnsFrom": [ + "credential_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "no action", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "identity_links_verified_by_check": { + "name": "identity_links_verified_by_check", + "value": "\"identity_links\".\"verified_by\" IN ('challenge', 'oauth')" + }, + "identity_links_status_check": { + "name": "identity_links_status_check", + "value": "\"identity_links\".\"status\" IN ('active', 'needs_reconnect')" + } + }, + "isRLSEnabled": false + } + }, + "enums": { + "public.agent_type": { + "name": "agent_type", + "schema": "public", + "values": [ + "built_in", + "remote_ag_ui", + "remote_mastra" + ] + }, + "public.credential_kind": { + "name": "credential_kind", + "schema": "public", + "values": [ + "model", + "connector", + "agent", + "mcp", + "mcp_oauth_client", + "mcp_user_token" + ] + }, + "public.role": { + "name": "role", + "schema": "public", + "values": [ + "admin", + "user" + ] + }, + "public.agent_visibility": { + "name": "agent_visibility", + "schema": "public", + "values": [ + "public", + "private" + ] + }, + "public.routine_run_status": { + "name": "routine_run_status", + "schema": "public", + "values": [ + "succeeded", + "failed", + "skipped", + "waiting" + ] + }, + "public.responsibility_run_status": { + "name": "responsibility_run_status", + "schema": "public", + "values": [ + "queued", + "running", + "waiting", + "succeeded", + "failed", + "skipped" + ] + }, + "public.responsibility_status": { + "name": "responsibility_status", + "schema": "public", + "values": [ + "active", + "paused", + "completed" + ] + } + }, + "schemas": {}, + "sequences": {}, + "roles": {}, + "policies": {}, + "views": {}, + "_meta": { + "columns": {}, + "schemas": {}, + "tables": {} + } +} \ No newline at end of file diff --git a/server/drizzle/meta/0058_snapshot.json b/server/drizzle/meta/0058_snapshot.json new file mode 100644 index 000000000..41e065ff1 --- /dev/null +++ b/server/drizzle/meta/0058_snapshot.json @@ -0,0 +1,9960 @@ +{ + "id": "d7748e18-de30-4092-afcd-21350f0829a1", + "prevId": "529de577-9b19-43d1-9885-dd32ddae9bd6", + "version": "7", + "dialect": "postgresql", + "tables": { + "public.accounts": { + "name": "accounts", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "account_id": { + "name": "account_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "provider_id": { + "name": "provider_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "issuer": { + "name": "issuer", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "access_token": { + "name": "access_token", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "refresh_token": { + "name": "refresh_token", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "id_token": { + "name": "id_token", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "access_token_expires_at": { + "name": "access_token_expires_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "refresh_token_expires_at": { + "name": "refresh_token_expires_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "scope": { + "name": "scope", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "password": { + "name": "password", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "accounts_provider_account_idx": { + "name": "accounts_provider_account_idx", + "columns": [ + { + "expression": "provider_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "account_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "accounts_user_id_users_id_fk": { + "name": "accounts_user_id_users_id_fk", + "tableFrom": "accounts", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.agents": { + "name": "agents", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "name": { + "name": "name", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "type": { + "name": "type", + "type": "agent_type", + "typeSchema": "public", + "primaryKey": false, + "notNull": true + }, + "configuration": { + "name": "configuration", + "type": "jsonb", + "primaryKey": false, + "notNull": true + }, + "package_id": { + "name": "package_id", + "type": "uuid", + "primaryKey": false, + "notNull": false + }, + "override": { + "name": "override", + "type": "jsonb", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "agents_package_id_deployment_packages_id_fk": { + "name": "agents_package_id_deployment_packages_id_fk", + "tableFrom": "agents", + "tableTo": "deployment_packages", + "columnsFrom": [ + "package_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "set null", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.attachments": { + "name": "attachments", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "uuid", + "primaryKey": true, + "notNull": true, + "default": "gen_random_uuid()" + }, + "channel_id": { + "name": "channel_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "uploaded_by": { + "name": "uploaded_by", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "name": { + "name": "name", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "mime_type": { + "name": "mime_type", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "size_bytes": { + "name": "size_bytes", + "type": "integer", + "primaryKey": false, + "notNull": true + }, + "bytes": { + "name": "bytes", + "type": "bytea", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "attached_at": { + "name": "attached_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "upload_group": { + "name": "upload_group", + "type": "text", + "primaryKey": false, + "notNull": false + } + }, + "indexes": { + "attachments_channel_idx": { + "name": "attachments_channel_idx", + "columns": [ + { + "expression": "channel_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "attachments_uploaded_by_idx": { + "name": "attachments_uploaded_by_idx", + "columns": [ + { + "expression": "uploaded_by", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "attachments_upload_group_idx": { + "name": "attachments_upload_group_idx", + "columns": [ + { + "expression": "channel_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "uploaded_by", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "upload_group", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "where": "\"attachments\".\"attached_at\" is null", + "concurrently": false, + "method": "btree", + "with": {} + }, + "attachments_staged_idx": { + "name": "attachments_staged_idx", + "columns": [ + { + "expression": "created_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "where": "\"attachments\".\"attached_at\" is null", + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "attachments_channel_id_channels_id_fk": { + "name": "attachments_channel_id_channels_id_fk", + "tableFrom": "attachments", + "tableTo": "channels", + "columnsFrom": [ + "channel_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "attachments_uploaded_by_users_id_fk": { + "name": "attachments_uploaded_by_users_id_fk", + "tableFrom": "attachments", + "tableTo": "users", + "columnsFrom": [ + "uploaded_by" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.audit_events": { + "name": "audit_events", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "uuid", + "primaryKey": true, + "notNull": true, + "default": "gen_random_uuid()" + }, + "actor_user_id": { + "name": "actor_user_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "initiator_kind": { + "name": "initiator_kind", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'person'" + }, + "initiator_id": { + "name": "initiator_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "event_type": { + "name": "event_type", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "target_type": { + "name": "target_type", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "target_id": { + "name": "target_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "payload": { + "name": "payload", + "type": "jsonb", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "audit_events_created_at_idx": { + "name": "audit_events_created_at_idx", + "columns": [ + { + "expression": "created_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "audit_events_type_time_idx": { + "name": "audit_events_type_time_idx", + "columns": [ + { + "expression": "event_type", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "created_at", + "isExpression": false, + "asc": false, + "nulls": "last" + }, + { + "expression": "id", + "isExpression": false, + "asc": false, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "audit_events_actor_time_idx": { + "name": "audit_events_actor_time_idx", + "columns": [ + { + "expression": "actor_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "created_at", + "isExpression": false, + "asc": false, + "nulls": "last" + }, + { + "expression": "id", + "isExpression": false, + "asc": false, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "audit_events_target_time_idx": { + "name": "audit_events_target_time_idx", + "columns": [ + { + "expression": "target_type", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "target_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "created_at", + "isExpression": false, + "asc": false, + "nulls": "last" + }, + { + "expression": "id", + "isExpression": false, + "asc": false, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "audit_events_initiator_time_idx": { + "name": "audit_events_initiator_time_idx", + "columns": [ + { + "expression": "initiator_kind", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "created_at", + "isExpression": false, + "asc": false, + "nulls": "last" + }, + { + "expression": "id", + "isExpression": false, + "asc": false, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.channel_agents": { + "name": "channel_agents", + "schema": "", + "columns": { + "channel_id": { + "name": "channel_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "channel_agents_channel_id_channels_id_fk": { + "name": "channel_agents_channel_id_channels_id_fk", + "tableFrom": "channel_agents", + "tableTo": "channels", + "columnsFrom": [ + "channel_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "channel_agents_agent_id_agents_id_fk": { + "name": "channel_agents_agent_id_agents_id_fk", + "tableFrom": "channel_agents", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "channel_agents_channel_id_agent_id_pk": { + "name": "channel_agents_channel_id_agent_id_pk", + "columns": [ + "channel_id", + "agent_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.channel_memberships": { + "name": "channel_memberships", + "schema": "", + "columns": { + "channel_id": { + "name": "channel_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "pinned_at": { + "name": "pinned_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "last_read_at": { + "name": "last_read_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "channel_memberships_channel_id_channels_id_fk": { + "name": "channel_memberships_channel_id_channels_id_fk", + "tableFrom": "channel_memberships", + "tableTo": "channels", + "columnsFrom": [ + "channel_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "channel_memberships_user_id_users_id_fk": { + "name": "channel_memberships_user_id_users_id_fk", + "tableFrom": "channel_memberships", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "channel_memberships_channel_id_user_id_pk": { + "name": "channel_memberships_channel_id_user_id_pk", + "columns": [ + "channel_id", + "user_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.channels": { + "name": "channels", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "name": { + "name": "name", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "description": { + "name": "description", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "suggested_prompts": { + "name": "suggested_prompts", + "type": "text[]", + "primaryKey": false, + "notNull": true, + "default": "'{}'" + }, + "allowed_groups": { + "name": "allowed_groups", + "type": "text[]", + "primaryKey": false, + "notNull": true, + "default": "'{}'" + }, + "package_id": { + "name": "package_id", + "type": "uuid", + "primaryKey": false, + "notNull": false + }, + "override": { + "name": "override", + "type": "jsonb", + "primaryKey": false, + "notNull": false + }, + "summary": { + "name": "summary", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "summary_at": { + "name": "summary_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "last_message": { + "name": "last_message", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "last_message_source_id": { + "name": "last_message_source_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "last_message_at": { + "name": "last_message_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "last_message_agent_id": { + "name": "last_message_agent_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "deleted_at": { + "name": "deleted_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "channels_recent_activity_idx": { + "name": "channels_recent_activity_idx", + "columns": [ + { + "expression": "COALESCE(\"last_message_at\", \"created_at\") DESC", + "asc": true, + "isExpression": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "channels_awaiting_summary_idx": { + "name": "channels_awaiting_summary_idx", + "columns": [ + { + "expression": "id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "where": "\"channels\".\"summary\" is null and \"channels\".\"deleted_at\" is null", + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "channels_package_id_deployment_packages_id_fk": { + "name": "channels_package_id_deployment_packages_id_fk", + "tableFrom": "channels", + "tableTo": "deployment_packages", + "columnsFrom": [ + "package_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "set null", + "onUpdate": "no action" + }, + "channels_last_message_agent_id_agents_id_fk": { + "name": "channels_last_message_agent_id_agents_id_fk", + "tableFrom": "channels", + "tableTo": "agents", + "columnsFrom": [ + "last_message_agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "set null", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.credentials": { + "name": "credentials", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "uuid", + "primaryKey": true, + "notNull": true, + "default": "gen_random_uuid()" + }, + "kind": { + "name": "kind", + "type": "credential_kind", + "typeSchema": "public", + "primaryKey": false, + "notNull": true + }, + "provider": { + "name": "provider", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "encrypted_value": { + "name": "encrypted_value", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "key_id": { + "name": "key_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "metadata": { + "name": "metadata", + "type": "jsonb", + "primaryKey": false, + "notNull": true + }, + "revoked_at": { + "name": "revoked_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "credentials_active_key_idx": { + "name": "credentials_active_key_idx", + "columns": [ + { + "expression": "kind", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "provider", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "key_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "where": "\"credentials\".\"revoked_at\" IS NULL", + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.deployment_packages": { + "name": "deployment_packages", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "uuid", + "primaryKey": true, + "notNull": true, + "default": "gen_random_uuid()" + }, + "tenant_id": { + "name": "tenant_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "source_path": { + "name": "source_path", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "checksum": { + "name": "checksum", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "loaded_at": { + "name": "loaded_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": { + "deployment_packages_tenant_id_unique": { + "name": "deployment_packages_tenant_id_unique", + "nullsNotDistinct": false, + "columns": [ + "tenant_id" + ] + } + }, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.intelligence_channel_mappings": { + "name": "intelligence_channel_mappings", + "schema": "", + "columns": { + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "channel_id": { + "name": "channel_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "thread_id": { + "name": "thread_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "intelligence_channel_mappings_thread_idx": { + "name": "intelligence_channel_mappings_thread_idx", + "columns": [ + { + "expression": "thread_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "intelligence_channel_mappings_user_id_users_id_fk": { + "name": "intelligence_channel_mappings_user_id_users_id_fk", + "tableFrom": "intelligence_channel_mappings", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "intelligence_channel_mappings_channel_id_channels_id_fk": { + "name": "intelligence_channel_mappings_channel_id_channels_id_fk", + "tableFrom": "intelligence_channel_mappings", + "tableTo": "channels", + "columnsFrom": [ + "channel_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "intelligence_channel_mappings_user_id_channel_id_pk": { + "name": "intelligence_channel_mappings_user_id_channel_id_pk", + "columns": [ + "user_id", + "channel_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.revoked_access": { + "name": "revoked_access", + "schema": "", + "columns": { + "email": { + "name": "email", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "revoked_at": { + "name": "revoked_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "revoked_by": { + "name": "revoked_by", + "type": "text", + "primaryKey": false, + "notNull": true + } + }, + "indexes": {}, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.sessions": { + "name": "sessions", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "token": { + "name": "token", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "expires_at": { + "name": "expires_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + }, + "ip_address": { + "name": "ip_address", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "user_agent": { + "name": "user_agent", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "sessions_user_id_users_id_fk": { + "name": "sessions_user_id_users_id_fk", + "tableFrom": "sessions", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": { + "sessions_token_unique": { + "name": "sessions_token_unique", + "nullsNotDistinct": false, + "columns": [ + "token" + ] + } + }, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.sso_providers": { + "name": "sso_providers", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "issuer": { + "name": "issuer", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "oidc_config": { + "name": "oidc_config", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "saml_config": { + "name": "saml_config", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "provider_id": { + "name": "provider_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "organization_id": { + "name": "organization_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "domain": { + "name": "domain", + "type": "text", + "primaryKey": false, + "notNull": true + } + }, + "indexes": {}, + "foreignKeys": { + "sso_providers_user_id_users_id_fk": { + "name": "sso_providers_user_id_users_id_fk", + "tableFrom": "sso_providers", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "set null", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": { + "sso_providers_provider_id_unique": { + "name": "sso_providers_provider_id_unique", + "nullsNotDistinct": false, + "columns": [ + "provider_id" + ] + } + }, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.user_instructions": { + "name": "user_instructions", + "schema": "", + "columns": { + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "instructions": { + "name": "instructions", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "user_instructions_user_id_users_id_fk": { + "name": "user_instructions_user_id_users_id_fk", + "tableFrom": "user_instructions", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.user_roles": { + "name": "user_roles", + "schema": "", + "columns": { + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "role": { + "name": "role", + "type": "role", + "typeSchema": "public", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "user_roles_user_id_users_id_fk": { + "name": "user_roles_user_id_users_id_fk", + "tableFrom": "user_roles", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "user_roles_user_id_role_pk": { + "name": "user_roles_user_id_role_pk", + "columns": [ + "user_id", + "role" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.users": { + "name": "users", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "email": { + "name": "email", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "name": { + "name": "name", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "image": { + "name": "image", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "email_verified": { + "name": "email_verified", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": false + }, + "preferences": { + "name": "preferences", + "type": "jsonb", + "primaryKey": false, + "notNull": true, + "default": "'{}'::jsonb" + }, + "groups": { + "name": "groups", + "type": "text[]", + "primaryKey": false, + "notNull": true, + "default": "'{}'" + }, + "onboarding_step": { + "name": "onboarding_step", + "type": "integer", + "primaryKey": false, + "notNull": true, + "default": 0 + }, + "onboarding_completed_at": { + "name": "onboarding_completed_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "last_signed_in_at": { + "name": "last_signed_in_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": { + "users_email_unique": { + "name": "users_email_unique", + "nullsNotDistinct": false, + "columns": [ + "email" + ] + } + }, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.verifications": { + "name": "verifications", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "identifier": { + "name": "identifier", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "value": { + "name": "value", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "expires_at": { + "name": "expires_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.action_policy": { + "name": "action_policy", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "mode": { + "name": "mode", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "deny": { + "name": "deny", + "type": "text[]", + "primaryKey": false, + "notNull": true + }, + "allow": { + "name": "allow", + "type": "text[]", + "primaryKey": false, + "notNull": true + }, + "updated_by": { + "name": "updated_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.computer_page_frame": { + "name": "computer_page_frame", + "schema": "", + "columns": { + "computer_id": { + "name": "computer_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "tool_call_id": { + "name": "tool_call_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "url": { + "name": "url", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "title": { + "name": "title", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "frame": { + "name": "frame", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "captured_at": { + "name": "captured_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "computer_page_frame_captured_idx": { + "name": "computer_page_frame_captured_idx", + "columns": [ + { + "expression": "captured_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": {}, + "compositePrimaryKeys": { + "computer_page_frame_computer_id_tool_call_id_pk": { + "name": "computer_page_frame_computer_id_tool_call_id_pk", + "columns": [ + "computer_id", + "tool_call_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.computer_snapshot": { + "name": "computer_snapshot", + "schema": "", + "columns": { + "computer_id": { + "name": "computer_id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "snapshot_id": { + "name": "snapshot_id", + "type": "integer", + "primaryKey": false, + "notNull": true + }, + "url": { + "name": "url", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "elements": { + "name": "elements", + "type": "jsonb", + "primaryKey": false, + "notNull": true + }, + "taken_at": { + "name": "taken_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "session": { + "name": "session", + "type": "text", + "primaryKey": false, + "notNull": false + } + }, + "indexes": {}, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.agent_preferences": { + "name": "agent_preferences", + "schema": "", + "columns": { + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "hidden_at": { + "name": "hidden_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "pinned_at": { + "name": "pinned_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + } + }, + "indexes": {}, + "foreignKeys": { + "agent_preferences_user_id_users_id_fk": { + "name": "agent_preferences_user_id_users_id_fk", + "tableFrom": "agent_preferences", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "agent_preferences_agent_id_agents_id_fk": { + "name": "agent_preferences_agent_id_agents_id_fk", + "tableFrom": "agent_preferences", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "agent_preferences_user_id_agent_id_pk": { + "name": "agent_preferences_user_id_agent_id_pk", + "columns": [ + "user_id", + "agent_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.agent_profiles": { + "name": "agent_profiles", + "schema": "", + "columns": { + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "title": { + "name": "title", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "role_description": { + "name": "role_description", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "avatar_seed": { + "name": "avatar_seed", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "visibility": { + "name": "visibility", + "type": "agent_visibility", + "typeSchema": "public", + "primaryKey": false, + "notNull": true + }, + "callback_token_hash": { + "name": "callback_token_hash", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "callback_token_issued_at": { + "name": "callback_token_issued_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "deleted_at": { + "name": "deleted_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "agent_profiles_visibility_deleted_idx": { + "name": "agent_profiles_visibility_deleted_idx", + "columns": [ + { + "expression": "visibility", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "deleted_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "agent_profiles_agent_id_agents_id_fk": { + "name": "agent_profiles_agent_id_agents_id_fk", + "tableFrom": "agent_profiles", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "agent_profiles_owner_user_id_users_id_fk": { + "name": "agent_profiles_owner_user_id_users_id_fk", + "tableFrom": "agent_profiles", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "set null", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.routine_runs": { + "name": "routine_runs", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "routine_id": { + "name": "routine_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "started_at": { + "name": "started_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "finished_at": { + "name": "finished_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "status": { + "name": "status", + "type": "routine_run_status", + "typeSchema": "public", + "primaryKey": false, + "notNull": false + }, + "waiting": { + "name": "waiting", + "type": "jsonb", + "primaryKey": false, + "notNull": false + }, + "error": { + "name": "error", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "source": { + "name": "source", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'schedule'" + } + }, + "indexes": { + "routine_runs_by_routine_idx": { + "name": "routine_runs_by_routine_idx", + "columns": [ + { + "expression": "routine_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "started_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "routine_runs_routine_id_routines_id_fk": { + "name": "routine_runs_routine_id_routines_id_fk", + "tableFrom": "routine_runs", + "tableTo": "routines", + "columnsFrom": [ + "routine_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.routine_sweeps": { + "name": "routine_sweeps", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "swept_at": { + "name": "swept_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "owner": { + "name": "owner", + "type": "text", + "primaryKey": false, + "notNull": false + } + }, + "indexes": {}, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.routines": { + "name": "routines", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "channel_id": { + "name": "channel_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "instruction": { + "name": "instruction", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "cron": { + "name": "cron", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "timezone": { + "name": "timezone", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'UTC'" + }, + "enabled": { + "name": "enabled", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": true + }, + "next_run_at": { + "name": "next_run_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + }, + "last_run_at": { + "name": "last_run_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "enabled_at": { + "name": "enabled_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "routines_due_idx": { + "name": "routines_due_idx", + "columns": [ + { + "expression": "enabled", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "next_run_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "routines_by_owner_idx": { + "name": "routines_by_owner_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "enabled", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "routines_owner_user_id_users_id_fk": { + "name": "routines_owner_user_id_users_id_fk", + "tableFrom": "routines", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "routines_agent_id_agents_id_fk": { + "name": "routines_agent_id_agents_id_fk", + "tableFrom": "routines", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.component_exclusions": { + "name": "component_exclusions", + "schema": "", + "columns": { + "component_name": { + "name": "component_name", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "withheld_by": { + "name": "withheld_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "component_exclusions_component_name_components_name_fk": { + "name": "component_exclusions_component_name_components_name_fk", + "tableFrom": "component_exclusions", + "tableTo": "components", + "columnsFrom": [ + "component_name" + ], + "columnsTo": [ + "name" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "component_exclusions_agent_id_agents_id_fk": { + "name": "component_exclusions_agent_id_agents_id_fk", + "tableFrom": "component_exclusions", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "component_exclusions_component_name_agent_id_pk": { + "name": "component_exclusions_component_name_agent_id_pk", + "columns": [ + "component_name", + "agent_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.component_functions": { + "name": "component_functions", + "schema": "", + "columns": { + "component_name": { + "name": "component_name", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "function_name": { + "name": "function_name", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "granted_by": { + "name": "granted_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "component_functions_component_name_components_name_fk": { + "name": "component_functions_component_name_components_name_fk", + "tableFrom": "component_functions", + "tableTo": "components", + "columnsFrom": [ + "component_name" + ], + "columnsTo": [ + "name" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "component_functions_component_name_function_name_pk": { + "name": "component_functions_component_name_function_name_pk", + "columns": [ + "component_name", + "function_name" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.components": { + "name": "components", + "schema": "", + "columns": { + "name": { + "name": "name", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "title": { + "name": "title", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "kind": { + "name": "kind", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "draft_description": { + "name": "draft_description", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "published_description": { + "name": "published_description", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "published": { + "name": "published", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": false + }, + "published_at": { + "name": "published_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "updated_by": { + "name": "updated_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.brokered_connections": { + "name": "brokered_connections", + "schema": "", + "columns": { + "provider": { + "name": "provider", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "app": { + "name": "app", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "holder": { + "name": "holder", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "vendor_user_id": { + "name": "vendor_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "connected_by": { + "name": "connected_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "connected_at": { + "name": "connected_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "verified": { + "name": "verified", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": false + }, + "verified_at": { + "name": "verified_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "probe_action": { + "name": "probe_action", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "brokered_connections_person_idx": { + "name": "brokered_connections_person_idx", + "columns": [ + { + "expression": "provider", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "app", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "where": "\"brokered_connections\".\"holder\" = 'person'", + "concurrently": false, + "method": "btree", + "with": {} + }, + "brokered_connections_deployment_idx": { + "name": "brokered_connections_deployment_idx", + "columns": [ + { + "expression": "provider", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "app", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "where": "\"brokered_connections\".\"holder\" = 'deployment'", + "concurrently": false, + "method": "btree", + "with": {} + }, + "brokered_connections_user_idx": { + "name": "brokered_connections_user_idx", + "columns": [ + { + "expression": "user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "brokered_connections_holder_check": { + "name": "brokered_connections_holder_check", + "value": "(\"brokered_connections\".\"holder\" = 'person' AND \"brokered_connections\".\"user_id\" IS NOT NULL) OR (\"brokered_connections\".\"holder\" = 'deployment' AND \"brokered_connections\".\"user_id\" IS NULL)" + }, + "brokered_connections_provider_check": { + "name": "brokered_connections_provider_check", + "value": "\"brokered_connections\".\"provider\" IN ('composio', 'arcade')" + } + }, + "isRLSEnabled": false + }, + "public.composio_connections": { + "name": "composio_connections", + "schema": "", + "columns": { + "toolkit": { + "name": "toolkit", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "connected_at": { + "name": "connected_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "verified": { + "name": "verified", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": false + }, + "verified_at": { + "name": "verified_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "probe_action": { + "name": "probe_action", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "composio_connections_user_idx": { + "name": "composio_connections_user_idx", + "columns": [ + { + "expression": "user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": {}, + "compositePrimaryKeys": { + "composio_connections_toolkit_user_id_pk": { + "name": "composio_connections_toolkit_user_id_pk", + "columns": [ + "toolkit", + "user_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.mcp_servers": { + "name": "mcp_servers", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "title": { + "name": "title", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "logo": { + "name": "logo", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "vendor": { + "name": "vendor", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "url": { + "name": "url", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "provenance": { + "name": "provenance", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'first-party'" + }, + "credential_id": { + "name": "credential_id", + "type": "uuid", + "primaryKey": false, + "notNull": false + }, + "auth_scheme": { + "name": "auth_scheme", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "account_mode": { + "name": "account_mode", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "shared_vendor_user_id": { + "name": "shared_vendor_user_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "tools_refreshed_at": { + "name": "tools_refreshed_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "last_error": { + "name": "last_error", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "added_by": { + "name": "added_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "mcp_servers_credential_id_credentials_id_fk": { + "name": "mcp_servers_credential_id_credentials_id_fk", + "tableFrom": "mcp_servers", + "tableTo": "credentials", + "columnsFrom": [ + "credential_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "restrict", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "mcp_servers_account_mode_check": { + "name": "mcp_servers_account_mode_check", + "value": "\"mcp_servers\".\"account_mode\" IS NULL OR \"mcp_servers\".\"account_mode\" IN ('personal', 'shared')" + } + }, + "isRLSEnabled": false + }, + "public.mcp_tools": { + "name": "mcp_tools", + "schema": "", + "columns": { + "server_id": { + "name": "server_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "name": { + "name": "name", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "description": { + "name": "description", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "''" + }, + "input_schema": { + "name": "input_schema", + "type": "jsonb", + "primaryKey": false, + "notNull": true, + "default": "'{}'::jsonb" + }, + "effect": { + "name": "effect", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "destructive": { + "name": "destructive", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": false + }, + "version": { + "name": "version", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "mcp_tools_server_id_mcp_servers_id_fk": { + "name": "mcp_tools_server_id_mcp_servers_id_fk", + "tableFrom": "mcp_tools", + "tableTo": "mcp_servers", + "columnsFrom": [ + "server_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "mcp_tools_server_id_name_pk": { + "name": "mcp_tools_server_id_name_pk", + "columns": [ + "server_id", + "name" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.mcp_user_credentials": { + "name": "mcp_user_credentials", + "schema": "", + "columns": { + "server_id": { + "name": "server_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "credential_id": { + "name": "credential_id", + "type": "uuid", + "primaryKey": false, + "notNull": true + }, + "scope": { + "name": "scope", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "connected_at": { + "name": "connected_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "mcp_user_credentials_user_idx": { + "name": "mcp_user_credentials_user_idx", + "columns": [ + { + "expression": "user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "mcp_user_credentials_server_id_mcp_servers_id_fk": { + "name": "mcp_user_credentials_server_id_mcp_servers_id_fk", + "tableFrom": "mcp_user_credentials", + "tableTo": "mcp_servers", + "columnsFrom": [ + "server_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "mcp_user_credentials_user_id_users_id_fk": { + "name": "mcp_user_credentials_user_id_users_id_fk", + "tableFrom": "mcp_user_credentials", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "mcp_user_credentials_credential_id_credentials_id_fk": { + "name": "mcp_user_credentials_credential_id_credentials_id_fk", + "tableFrom": "mcp_user_credentials", + "tableTo": "credentials", + "columnsFrom": [ + "credential_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "no action", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "mcp_user_credentials_server_id_user_id_pk": { + "name": "mcp_user_credentials_server_id_user_id_pk", + "columns": [ + "server_id", + "user_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.pending_authorizations": { + "name": "pending_authorizations", + "schema": "", + "columns": { + "actor_id": { + "name": "actor_id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "server_id": { + "name": "server_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "action": { + "name": "action", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "holder": { + "name": "holder", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "vendor_user_id": { + "name": "vendor_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "auth_id": { + "name": "auth_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "completed_at": { + "name": "completed_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "outcome": { + "name": "outcome", + "type": "text", + "primaryKey": false, + "notNull": false + } + }, + "indexes": {}, + "foreignKeys": { + "pending_authorizations_server_id_mcp_servers_id_fk": { + "name": "pending_authorizations_server_id_mcp_servers_id_fk", + "tableFrom": "pending_authorizations", + "tableTo": "mcp_servers", + "columnsFrom": [ + "server_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "pending_authorizations_holder_check": { + "name": "pending_authorizations_holder_check", + "value": "(\"pending_authorizations\".\"holder\" = 'person' AND \"pending_authorizations\".\"user_id\" IS NOT NULL) OR (\"pending_authorizations\".\"holder\" = 'deployment' AND \"pending_authorizations\".\"user_id\" IS NULL)" + }, + "pending_authorizations_outcome_check": { + "name": "pending_authorizations_outcome_check", + "value": "\"pending_authorizations\".\"outcome\" IS NULL OR \"pending_authorizations\".\"outcome\" IN ('completed', 'failed', 'unreconciled', 'withdrawn')" + } + }, + "isRLSEnabled": false + }, + "public.plugin_grants": { + "name": "plugin_grants", + "schema": "", + "columns": { + "kind": { + "name": "kind", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "ref": { + "name": "ref", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "granted_by": { + "name": "granted_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "plugin_grants_agent_idx": { + "name": "plugin_grants_agent_idx", + "columns": [ + { + "expression": "agent_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "plugin_grants_agent_id_agents_id_fk": { + "name": "plugin_grants_agent_id_agents_id_fk", + "tableFrom": "plugin_grants", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "plugin_grants_kind_ref_agent_id_pk": { + "name": "plugin_grants_kind_ref_agent_id_pk", + "columns": [ + "kind", + "ref", + "agent_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.sandboxed_components": { + "name": "sandboxed_components", + "schema": "", + "columns": { + "name": { + "name": "name", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "title": { + "name": "title", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "draft_description": { + "name": "draft_description", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "''" + }, + "draft_html": { + "name": "draft_html", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "''" + }, + "draft_css": { + "name": "draft_css", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "''" + }, + "draft_js_functions": { + "name": "draft_js_functions", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "''" + }, + "draft_argument_schema": { + "name": "draft_argument_schema", + "type": "jsonb", + "primaryKey": false, + "notNull": true, + "default": "'{}'::jsonb" + }, + "published_description": { + "name": "published_description", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "published_html": { + "name": "published_html", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "published_css": { + "name": "published_css", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "published_js_functions": { + "name": "published_js_functions", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "published_argument_schema": { + "name": "published_argument_schema", + "type": "jsonb", + "primaryKey": false, + "notNull": false + }, + "sample_arguments": { + "name": "sample_arguments", + "type": "jsonb", + "primaryKey": false, + "notNull": true, + "default": "'{}'::jsonb" + }, + "revision": { + "name": "revision", + "type": "integer", + "primaryKey": false, + "notNull": true, + "default": 0 + }, + "published": { + "name": "published", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": false + }, + "published_at": { + "name": "published_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "authored_by": { + "name": "authored_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.skill_tools": { + "name": "skill_tools", + "schema": "", + "columns": { + "skill_id": { + "name": "skill_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "ref": { + "name": "ref", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "declared_by": { + "name": "declared_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "skill_tools_ref_idx": { + "name": "skill_tools_ref_idx", + "columns": [ + { + "expression": "ref", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "skill_tools_skill_id_skills_id_fk": { + "name": "skill_tools_skill_id_skills_id_fk", + "tableFrom": "skill_tools", + "tableTo": "skills", + "columnsFrom": [ + "skill_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "skill_tools_skill_id_ref_pk": { + "name": "skill_tools_skill_id_ref_pk", + "columns": [ + "skill_id", + "ref" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.skills": { + "name": "skills", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "slug": { + "name": "slug", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "title": { + "name": "title", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "summary": { + "name": "summary", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "instructions": { + "name": "instructions", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "origin": { + "name": "origin", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'yours'" + }, + "installed_by": { + "name": "installed_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "skills_slug_key": { + "name": "skills_slug_key", + "columns": [ + { + "expression": "slug", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "concurrently": false, + "method": "btree", + "with": {} + }, + "skills_owner_idx": { + "name": "skills_owner_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "skills_owner_user_id_users_id_fk": { + "name": "skills_owner_user_id_users_id_fk", + "tableFrom": "skills", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.work_items": { + "name": "work_items", + "schema": "", + "columns": { + "kind": { + "name": "kind", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "key": { + "name": "key", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "run_at": { + "name": "run_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "claimed_by": { + "name": "claimed_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "lease_until": { + "name": "lease_until", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "attempts": { + "name": "attempts", + "type": "integer", + "primaryKey": false, + "notNull": true, + "default": 0 + }, + "finished_at": { + "name": "finished_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "last_error": { + "name": "last_error", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "payload": { + "name": "payload", + "type": "jsonb", + "primaryKey": false, + "notNull": true, + "default": "'{}'::jsonb" + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "work_items_claimable_idx": { + "name": "work_items_claimable_idx", + "columns": [ + { + "expression": "kind", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "run_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": {}, + "compositePrimaryKeys": { + "work_items_kind_key_pk": { + "name": "work_items_kind_key_pk", + "columns": [ + "kind", + "key" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.voice_sessions": { + "name": "voice_sessions", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "channel_id": { + "name": "channel_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "anchor_message_id": { + "name": "anchor_message_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "started_at": { + "name": "started_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + }, + "ended_at": { + "name": "ended_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + }, + "duration_seconds": { + "name": "duration_seconds", + "type": "integer", + "primaryKey": false, + "notNull": true + }, + "transcript": { + "name": "transcript", + "type": "jsonb", + "primaryKey": false, + "notNull": true + }, + "summary": { + "name": "summary", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "summary_status": { + "name": "summary_status", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'failed'" + } + }, + "indexes": { + "voice_sessions_channel_started_idx": { + "name": "voice_sessions_channel_started_idx", + "columns": [ + { + "expression": "channel_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "started_at", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "voice_sessions_channel_id_channels_id_fk": { + "name": "voice_sessions_channel_id_channels_id_fk", + "tableFrom": "voice_sessions", + "tableTo": "channels", + "columnsFrom": [ + "channel_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "voice_sessions_user_id_users_id_fk": { + "name": "voice_sessions_user_id_users_id_fk", + "tableFrom": "voice_sessions", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "voice_sessions_duration_check": { + "name": "voice_sessions_duration_check", + "value": "\"voice_sessions\".\"duration_seconds\" >= 0" + }, + "voice_sessions_summary_check": { + "name": "voice_sessions_summary_check", + "value": "(\"voice_sessions\".\"summary_status\" = 'ready' AND \"voice_sessions\".\"summary\" IS NOT NULL) OR (\"voice_sessions\".\"summary_status\" = 'failed' AND \"voice_sessions\".\"summary\" IS NULL)" + } + }, + "isRLSEnabled": false + }, + "public.learning_settings": { + "name": "learning_settings", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "settings": { + "name": "settings", + "type": "jsonb", + "primaryKey": false, + "notNull": true + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.learning_thread_bindings": { + "name": "learning_thread_bindings", + "schema": "", + "columns": { + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "thread_id": { + "name": "thread_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "container_id": { + "name": "container_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": {}, + "compositePrimaryKeys": { + "learning_thread_bindings_user_id_thread_id_pk": { + "name": "learning_thread_bindings_user_id_thread_id_pk", + "columns": [ + "user_id", + "thread_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.responsibilities": { + "name": "responsibilities", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "channel_id": { + "name": "channel_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "thread_id": { + "name": "thread_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "title": { + "name": "title", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "instruction": { + "name": "instruction", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "success_criteria": { + "name": "success_criteria", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "status": { + "name": "status", + "type": "responsibility_status", + "typeSchema": "public", + "primaryKey": false, + "notNull": true, + "default": "'active'" + }, + "progress": { + "name": "progress", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "''" + }, + "last_result": { + "name": "last_result", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "subscriptions": { + "name": "subscriptions", + "type": "jsonb", + "primaryKey": false, + "notNull": true, + "default": "'[]'::jsonb" + }, + "completed_at": { + "name": "completed_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "responsibilities_owner_status_idx": { + "name": "responsibilities_owner_status_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "status", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "responsibilities_owner_user_id_users_id_fk": { + "name": "responsibilities_owner_user_id_users_id_fk", + "tableFrom": "responsibilities", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "responsibilities_agent_id_agents_id_fk": { + "name": "responsibilities_agent_id_agents_id_fk", + "tableFrom": "responsibilities", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.responsibility_events": { + "name": "responsibility_events", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "source": { + "name": "source", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "external_id": { + "name": "external_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "type": { + "name": "type", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "payload": { + "name": "payload", + "type": "jsonb", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "responsibility_events_source_id_idx": { + "name": "responsibility_events_source_id_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "source", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "external_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "responsibility_events_owner_user_id_users_id_fk": { + "name": "responsibility_events_owner_user_id_users_id_fk", + "tableFrom": "responsibility_events", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.responsibility_runs": { + "name": "responsibility_runs", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "responsibility_id": { + "name": "responsibility_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "event_id": { + "name": "event_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "status": { + "name": "status", + "type": "responsibility_run_status", + "typeSchema": "public", + "primaryKey": false, + "notNull": true, + "default": "'queued'" + }, + "reply_text": { + "name": "reply_text", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "error": { + "name": "error", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "waiting": { + "name": "waiting", + "type": "jsonb", + "primaryKey": false, + "notNull": false + }, + "continuation": { + "name": "continuation", + "type": "jsonb", + "primaryKey": false, + "notNull": false + }, + "started_at": { + "name": "started_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "finished_at": { + "name": "finished_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "responsibility_runs_event_idx": { + "name": "responsibility_runs_event_idx", + "columns": [ + { + "expression": "responsibility_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "event_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "concurrently": false, + "method": "btree", + "with": {} + }, + "responsibility_runs_status_idx": { + "name": "responsibility_runs_status_idx", + "columns": [ + { + "expression": "status", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "created_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "responsibility_runs_responsibility_id_responsibilities_id_fk": { + "name": "responsibility_runs_responsibility_id_responsibilities_id_fk", + "tableFrom": "responsibility_runs", + "tableTo": "responsibilities", + "columnsFrom": [ + "responsibility_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "responsibility_runs_event_id_responsibility_events_id_fk": { + "name": "responsibility_runs_event_id_responsibility_events_id_fk", + "tableFrom": "responsibility_runs", + "tableTo": "responsibility_events", + "columnsFrom": [ + "event_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.responsibility_source_bindings": { + "name": "responsibility_source_bindings", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "source": { + "name": "source", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "repository": { + "name": "repository", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "credential_id": { + "name": "credential_id", + "type": "uuid", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "responsibility_source_bindings_owner_idx": { + "name": "responsibility_source_bindings_owner_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "responsibility_source_bindings_owner_user_id_users_id_fk": { + "name": "responsibility_source_bindings_owner_user_id_users_id_fk", + "tableFrom": "responsibility_source_bindings", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "responsibility_source_bindings_credential_id_credentials_id_fk": { + "name": "responsibility_source_bindings_credential_id_credentials_id_fk", + "tableFrom": "responsibility_source_bindings", + "tableTo": "credentials", + "columnsFrom": [ + "credential_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "no action", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.responsibility_triggers": { + "name": "responsibility_triggers", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "responsibility_id": { + "name": "responsibility_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "kind": { + "name": "kind", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "config": { + "name": "config", + "type": "jsonb", + "primaryKey": false, + "notNull": true + }, + "credential_id": { + "name": "credential_id", + "type": "uuid", + "primaryKey": false, + "notNull": false + }, + "enabled": { + "name": "enabled", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "responsibility_triggers_owner_idx": { + "name": "responsibility_triggers_owner_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "responsibility_triggers_responsibility_idx": { + "name": "responsibility_triggers_responsibility_idx", + "columns": [ + { + "expression": "responsibility_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "responsibility_triggers_kind_idx": { + "name": "responsibility_triggers_kind_idx", + "columns": [ + { + "expression": "kind", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "responsibility_triggers_owner_user_id_users_id_fk": { + "name": "responsibility_triggers_owner_user_id_users_id_fk", + "tableFrom": "responsibility_triggers", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "responsibility_triggers_responsibility_id_responsibilities_id_fk": { + "name": "responsibility_triggers_responsibility_id_responsibilities_id_fk", + "tableFrom": "responsibility_triggers", + "tableTo": "responsibilities", + "columnsFrom": [ + "responsibility_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "responsibility_triggers_credential_id_credentials_id_fk": { + "name": "responsibility_triggers_credential_id_credentials_id_fk", + "tableFrom": "responsibility_triggers", + "tableTo": "credentials", + "columnsFrom": [ + "credential_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "no action", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.approval_preferences": { + "name": "approval_preferences", + "schema": "", + "columns": { + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "enabled": { + "name": "enabled", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": false + }, + "auto_review": { + "name": "auto_review", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": false + }, + "host_commands": { + "name": "host_commands", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'ask'" + } + }, + "indexes": {}, + "foreignKeys": { + "approval_preferences_owner_user_id_users_id_fk": { + "name": "approval_preferences_owner_user_id_users_id_fk", + "tableFrom": "approval_preferences", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "approval_preferences_host_commands_check": { + "name": "approval_preferences_host_commands_check", + "value": "\"approval_preferences\".\"host_commands\" IN ('ask', 'allow', 'never')" + } + }, + "isRLSEnabled": false + }, + "public.approval_requests": { + "name": "approval_requests", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "run_id": { + "name": "run_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "tool_call_id": { + "name": "tool_call_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "action_digest": { + "name": "action_digest", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "action": { + "name": "action", + "type": "jsonb", + "primaryKey": false, + "notNull": true + }, + "status": { + "name": "status", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'pending'" + }, + "decision": { + "name": "decision", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "result": { + "name": "result", + "type": "jsonb", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "decided_at": { + "name": "decided_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "consumed_at": { + "name": "consumed_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "completed_at": { + "name": "completed_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + } + }, + "indexes": { + "approval_requests_action_idx": { + "name": "approval_requests_action_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "run_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "tool_call_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "concurrently": false, + "method": "btree", + "with": {} + }, + "approval_requests_inbox_idx": { + "name": "approval_requests_inbox_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "status", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "approval_requests_owner_user_id_users_id_fk": { + "name": "approval_requests_owner_user_id_users_id_fk", + "tableFrom": "approval_requests", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "approval_status_check": { + "name": "approval_status_check", + "value": "\"approval_requests\".\"status\" IN ('pending', 'approved', 'denied', 'consumed', 'completed')" + }, + "approval_decision_check": { + "name": "approval_decision_check", + "value": "\"approval_requests\".\"decision\" IN ('allow_once', 'allow_always', 'deny', 'handled')" + } + }, + "isRLSEnabled": false + }, + "public.approval_rules": { + "name": "approval_rules", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "bot_id": { + "name": "bot_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "tool_ref": { + "name": "tool_ref", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "effect": { + "name": "effect", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "scope": { + "name": "scope", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "behaviour": { + "name": "behaviour", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'allow'" + }, + "revoked_at": { + "name": "revoked_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "approval_rules_owner_idx": { + "name": "approval_rules_owner_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "approval_rules_owner_user_id_users_id_fk": { + "name": "approval_rules_owner_user_id_users_id_fk", + "tableFrom": "approval_rules", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "approval_rules_behaviour_check": { + "name": "approval_rules_behaviour_check", + "value": "\"approval_rules\".\"behaviour\" IN ('allow', 'pre_approved', 'ask', 'hand_off')" + } + }, + "isRLSEnabled": false + }, + "public.approval_team_rules": { + "name": "approval_team_rules", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "bot_id": { + "name": "bot_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "tool_ref": { + "name": "tool_ref", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "effect": { + "name": "effect", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "scope": { + "name": "scope", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "behaviour": { + "name": "behaviour", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "created_by": { + "name": "created_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "revoked_at": { + "name": "revoked_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "approval_team_rules_created_by_users_id_fk": { + "name": "approval_team_rules_created_by_users_id_fk", + "tableFrom": "approval_team_rules", + "tableTo": "users", + "columnsFrom": [ + "created_by" + ], + "columnsTo": [ + "id" + ], + "onDelete": "set null", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "approval_team_rules_behaviour_check": { + "name": "approval_team_rules_behaviour_check", + "value": "\"approval_team_rules\".\"behaviour\" IN ('allow', 'pre_approved', 'ask', 'hand_off')" + } + }, + "isRLSEnabled": false + }, + "public.approval_team_settings": { + "name": "approval_team_settings", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "enforce_auto_review": { + "name": "enforce_auto_review", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": false + }, + "custom_rules_enabled": { + "name": "custom_rules_enabled", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": true + }, + "host_commands_cap": { + "name": "host_commands_cap", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'allow'" + }, + "updated_by": { + "name": "updated_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "approval_team_settings_updated_by_users_id_fk": { + "name": "approval_team_settings_updated_by_users_id_fk", + "tableFrom": "approval_team_settings", + "tableTo": "users", + "columnsFrom": [ + "updated_by" + ], + "columnsTo": [ + "id" + ], + "onDelete": "set null", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "approval_team_settings_host_commands_cap_check": { + "name": "approval_team_settings_host_commands_cap_check", + "value": "\"approval_team_settings\".\"host_commands_cap\" IN ('ask', 'allow', 'never')" + } + }, + "isRLSEnabled": false + }, + "public.memory_sources": { + "name": "memory_sources", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "tool_ref": { + "name": "tool_ref", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "title": { + "name": "title", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "args": { + "name": "args", + "type": "jsonb", + "primaryKey": false, + "notNull": true, + "default": "'{}'::jsonb" + }, + "enabled": { + "name": "enabled", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": true + }, + "sync_status": { + "name": "sync_status", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'idle'" + }, + "sync_error": { + "name": "sync_error", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "last_sync_at": { + "name": "last_sync_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "next_sync_at": { + "name": "next_sync_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "memory_sources_owner_idx": { + "name": "memory_sources_owner_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "memory_sources_due_idx": { + "name": "memory_sources_due_idx", + "columns": [ + { + "expression": "enabled", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "next_sync_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "memory_sources_owner_user_id_users_id_fk": { + "name": "memory_sources_owner_user_id_users_id_fk", + "tableFrom": "memory_sources", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "memory_sources_agent_id_agents_id_fk": { + "name": "memory_sources_agent_id_agents_id_fk", + "tableFrom": "memory_sources", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.personal_memories": { + "name": "personal_memories", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "source_id": { + "name": "source_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "external_id": { + "name": "external_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "import_digest": { + "name": "import_digest", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "content": { + "name": "content", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "provenance": { + "name": "provenance", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "enabled": { + "name": "enabled", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": true + }, + "review_state": { + "name": "review_state", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'unreviewed'" + }, + "deleted_at": { + "name": "deleted_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "formed_by": { + "name": "formed_by", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'person'" + }, + "formed_by_agent_id": { + "name": "formed_by_agent_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "source_app": { + "name": "source_app", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "source_ref": { + "name": "source_ref", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "source_link": { + "name": "source_link", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "observed_at": { + "name": "observed_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "intelligence_memory_id": { + "name": "intelligence_memory_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "intelligence_digest": { + "name": "intelligence_digest", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "personal_memories_owner_idx": { + "name": "personal_memories_owner_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "enabled", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "personal_memories_intelligence_idx": { + "name": "personal_memories_intelligence_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "intelligence_memory_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "personal_memories_formed_idx": { + "name": "personal_memories_formed_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "formed_by_agent_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "personal_memories_import_idx": { + "name": "personal_memories_import_idx", + "columns": [ + { + "expression": "source_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "external_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "concurrently": false, + "method": "btree", + "with": {} + }, + "personal_memories_formed_digest_idx": { + "name": "personal_memories_formed_digest_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "import_digest", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "where": "\"personal_memories\".\"formed_by\" = 'bot'", + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "personal_memories_owner_user_id_users_id_fk": { + "name": "personal_memories_owner_user_id_users_id_fk", + "tableFrom": "personal_memories", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "personal_memories_source_id_memory_sources_id_fk": { + "name": "personal_memories_source_id_memory_sources_id_fk", + "tableFrom": "personal_memories", + "tableTo": "memory_sources", + "columnsFrom": [ + "source_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "personal_memories_formed_by_agent_id_agents_id_fk": { + "name": "personal_memories_formed_by_agent_id_agents_id_fk", + "tableFrom": "personal_memories", + "tableTo": "agents", + "columnsFrom": [ + "formed_by_agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.default_opt_outs": { + "name": "default_opt_outs", + "schema": "", + "columns": { + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "feature": { + "name": "feature", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "scope": { + "name": "scope", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "''" + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "default_opt_outs_owner_user_id_users_id_fk": { + "name": "default_opt_outs_owner_user_id_users_id_fk", + "tableFrom": "default_opt_outs", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "default_opt_outs_agent_id_agents_id_fk": { + "name": "default_opt_outs_agent_id_agents_id_fk", + "tableFrom": "default_opt_outs", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "default_opt_outs_owner_user_id_agent_id_feature_scope_pk": { + "name": "default_opt_outs_owner_user_id_agent_id_feature_scope_pk", + "columns": [ + "owner_user_id", + "agent_id", + "feature", + "scope" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "default_opt_outs_feature_check": { + "name": "default_opt_outs_feature_check", + "value": "\"default_opt_outs\".\"feature\" IN ('memory_source', 'proactive_research')" + } + }, + "isRLSEnabled": false + }, + "public.proactive_settings": { + "name": "proactive_settings", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "channel_id": { + "name": "channel_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "thread_id": { + "name": "thread_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "focus": { + "name": "focus", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "''" + }, + "enabled": { + "name": "enabled", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": true + }, + "interval_minutes": { + "name": "interval_minutes", + "type": "integer", + "primaryKey": false, + "notNull": true, + "default": 240 + }, + "next_run_at": { + "name": "next_run_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "last_run_at": { + "name": "last_run_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "last_status": { + "name": "last_status", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'idle'" + }, + "last_error": { + "name": "last_error", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "proactive_settings_owner_agent_idx": { + "name": "proactive_settings_owner_agent_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "agent_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "concurrently": false, + "method": "btree", + "with": {} + }, + "proactive_settings_due_idx": { + "name": "proactive_settings_due_idx", + "columns": [ + { + "expression": "enabled", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "next_run_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "proactive_settings_owner_user_id_users_id_fk": { + "name": "proactive_settings_owner_user_id_users_id_fk", + "tableFrom": "proactive_settings", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "proactive_settings_agent_id_agents_id_fk": { + "name": "proactive_settings_agent_id_agents_id_fk", + "tableFrom": "proactive_settings", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "proactive_settings_interval_check": { + "name": "proactive_settings_interval_check", + "value": "\"proactive_settings\".\"interval_minutes\" >= 60 AND \"proactive_settings\".\"interval_minutes\" <= 1440" + }, + "proactive_settings_status_check": { + "name": "proactive_settings_status_check", + "value": "\"proactive_settings\".\"last_status\" IN ('idle', 'running', 'succeeded', 'error')" + } + }, + "isRLSEnabled": false + }, + "public.proactive_suggestions": { + "name": "proactive_suggestions", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "setting_id": { + "name": "setting_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "run_id": { + "name": "run_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "title": { + "name": "title", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "detail": { + "name": "detail", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "source_app": { + "name": "source_app", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "source_ref": { + "name": "source_ref", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "source_link": { + "name": "source_link", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "status": { + "name": "status", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'open'" + }, + "delivered_at": { + "name": "delivered_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "resolved_at": { + "name": "resolved_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "proactive_suggestions_owner_idx": { + "name": "proactive_suggestions_owner_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "status", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "created_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "proactive_suggestions_run_idx": { + "name": "proactive_suggestions_run_idx", + "columns": [ + { + "expression": "run_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "proactive_suggestions_owner_user_id_users_id_fk": { + "name": "proactive_suggestions_owner_user_id_users_id_fk", + "tableFrom": "proactive_suggestions", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "proactive_suggestions_agent_id_agents_id_fk": { + "name": "proactive_suggestions_agent_id_agents_id_fk", + "tableFrom": "proactive_suggestions", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "proactive_suggestions_setting_id_proactive_settings_id_fk": { + "name": "proactive_suggestions_setting_id_proactive_settings_id_fk", + "tableFrom": "proactive_suggestions", + "tableTo": "proactive_settings", + "columnsFrom": [ + "setting_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "proactive_suggestions_status_check": { + "name": "proactive_suggestions_status_check", + "value": "\"proactive_suggestions\".\"status\" IN ('open', 'dismissed', 'started')" + } + }, + "isRLSEnabled": false + }, + "public.demonstrations": { + "name": "demonstrations", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "bot_id": { + "name": "bot_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "title": { + "name": "title", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "status": { + "name": "status", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'recording'" + }, + "actions": { + "name": "actions", + "type": "jsonb", + "primaryKey": false, + "notNull": true, + "default": "'[]'::jsonb" + }, + "draft": { + "name": "draft", + "type": "jsonb", + "primaryKey": false, + "notNull": false + }, + "skill_slug": { + "name": "skill_slug", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "finished_at": { + "name": "finished_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + } + }, + "indexes": { + "demonstrations_owner_idx": { + "name": "demonstrations_owner_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "created_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "demonstrations_active_bot_idx": { + "name": "demonstrations_active_bot_idx", + "columns": [ + { + "expression": "bot_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "where": "\"demonstrations\".\"status\" = 'recording'", + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "demonstrations_owner_user_id_users_id_fk": { + "name": "demonstrations_owner_user_id_users_id_fk", + "tableFrom": "demonstrations", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "demonstrations_bot_id_agents_id_fk": { + "name": "demonstrations_bot_id_agents_id_fk", + "tableFrom": "demonstrations", + "tableTo": "agents", + "columnsFrom": [ + "bot_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.delivery_bindings": { + "name": "delivery_bindings", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "channel_id": { + "name": "channel_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "thread_id": { + "name": "thread_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "transport": { + "name": "transport", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "identity": { + "name": "identity", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "realm": { + "name": "realm", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "address": { + "name": "address", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "mention_id": { + "name": "mention_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "enabled": { + "name": "enabled", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": true + }, + "opted_out_at": { + "name": "opted_out_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "delivery_binding_identity_idx": { + "name": "delivery_binding_identity_idx", + "columns": [ + { + "expression": "transport", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "realm", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "identity", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "concurrently": false, + "method": "btree", + "with": {} + }, + "delivery_bindings_owner_idx": { + "name": "delivery_bindings_owner_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "delivery_bindings_owner_user_id_users_id_fk": { + "name": "delivery_bindings_owner_user_id_users_id_fk", + "tableFrom": "delivery_bindings", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "delivery_bindings_channel_id_channels_id_fk": { + "name": "delivery_bindings_channel_id_channels_id_fk", + "tableFrom": "delivery_bindings", + "tableTo": "channels", + "columnsFrom": [ + "channel_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "delivery_bindings_agent_id_agents_id_fk": { + "name": "delivery_bindings_agent_id_agents_id_fk", + "tableFrom": "delivery_bindings", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.delivery_challenges": { + "name": "delivery_challenges", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "channel_id": { + "name": "channel_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "thread_id": { + "name": "thread_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "transport": { + "name": "transport", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "address": { + "name": "address", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "expires_at": { + "name": "expires_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + }, + "consumed_at": { + "name": "consumed_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "delivery_challenges_owner_user_id_users_id_fk": { + "name": "delivery_challenges_owner_user_id_users_id_fk", + "tableFrom": "delivery_challenges", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "delivery_challenges_channel_id_channels_id_fk": { + "name": "delivery_challenges_channel_id_channels_id_fk", + "tableFrom": "delivery_challenges", + "tableTo": "channels", + "columnsFrom": [ + "channel_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "delivery_challenges_agent_id_agents_id_fk": { + "name": "delivery_challenges_agent_id_agents_id_fk", + "tableFrom": "delivery_challenges", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.delivery_inbox": { + "name": "delivery_inbox", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "channel_id": { + "name": "channel_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "thread_id": { + "name": "thread_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "binding_id": { + "name": "binding_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "source": { + "name": "source", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "realm": { + "name": "realm", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "external_id": { + "name": "external_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "text": { + "name": "text", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "state": { + "name": "state", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'queued'" + }, + "error": { + "name": "error", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "delivery_inbox_dedupe_idx": { + "name": "delivery_inbox_dedupe_idx", + "columns": [ + { + "expression": "source", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "realm", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "external_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "concurrently": false, + "method": "btree", + "with": {} + }, + "delivery_inbox_owner_idx": { + "name": "delivery_inbox_owner_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "created_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "delivery_inbox_owner_user_id_users_id_fk": { + "name": "delivery_inbox_owner_user_id_users_id_fk", + "tableFrom": "delivery_inbox", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "delivery_inbox_channel_id_channels_id_fk": { + "name": "delivery_inbox_channel_id_channels_id_fk", + "tableFrom": "delivery_inbox", + "tableTo": "channels", + "columnsFrom": [ + "channel_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "delivery_inbox_agent_id_agents_id_fk": { + "name": "delivery_inbox_agent_id_agents_id_fk", + "tableFrom": "delivery_inbox", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.delivery_outbox": { + "name": "delivery_outbox", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "channel_id": { + "name": "channel_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "thread_id": { + "name": "thread_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "dedupe_key": { + "name": "dedupe_key", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "binding_id": { + "name": "binding_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "device_id": { + "name": "device_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "transport": { + "name": "transport", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "text": { + "name": "text", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "kind": { + "name": "kind", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "request_id": { + "name": "request_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "state": { + "name": "state", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'queued'" + }, + "provider_id": { + "name": "provider_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "error": { + "name": "error", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "delivery_outbox_owner_idx": { + "name": "delivery_outbox_owner_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "created_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "delivery_outbox_provider_idx": { + "name": "delivery_outbox_provider_idx", + "columns": [ + { + "expression": "transport", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "provider_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "delivery_outbox_owner_user_id_users_id_fk": { + "name": "delivery_outbox_owner_user_id_users_id_fk", + "tableFrom": "delivery_outbox", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "delivery_outbox_channel_id_channels_id_fk": { + "name": "delivery_outbox_channel_id_channels_id_fk", + "tableFrom": "delivery_outbox", + "tableTo": "channels", + "columnsFrom": [ + "channel_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "delivery_outbox_agent_id_agents_id_fk": { + "name": "delivery_outbox_agent_id_agents_id_fk", + "tableFrom": "delivery_outbox", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": { + "delivery_outbox_dedupe_key_unique": { + "name": "delivery_outbox_dedupe_key_unique", + "nullsNotDistinct": false, + "columns": [ + "dedupe_key" + ] + } + }, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.push_devices": { + "name": "push_devices", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "token": { + "name": "token", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "project_id": { + "name": "project_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "platform": { + "name": "platform", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "enabled": { + "name": "enabled", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "push_devices_owner_idx": { + "name": "push_devices_owner_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "push_devices_owner_user_id_users_id_fk": { + "name": "push_devices_owner_user_id_users_id_fk", + "tableFrom": "push_devices", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": { + "push_devices_token_unique": { + "name": "push_devices_token_unique", + "nullsNotDistinct": false, + "columns": [ + "token" + ] + } + }, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.group_bot_threads": { + "name": "group_bot_threads", + "schema": "", + "columns": { + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "channel_id": { + "name": "channel_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "thread_id": { + "name": "thread_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "group_bot_threads_thread_idx": { + "name": "group_bot_threads_thread_idx", + "columns": [ + { + "expression": "thread_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "group_bot_threads_owner_user_id_users_id_fk": { + "name": "group_bot_threads_owner_user_id_users_id_fk", + "tableFrom": "group_bot_threads", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "group_bot_threads_channel_id_channels_id_fk": { + "name": "group_bot_threads_channel_id_channels_id_fk", + "tableFrom": "group_bot_threads", + "tableTo": "channels", + "columnsFrom": [ + "channel_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "group_bot_threads_owner_user_id_channel_id_agent_id_pk": { + "name": "group_bot_threads_owner_user_id_channel_id_agent_id_pk", + "columns": [ + "owner_user_id", + "channel_id", + "agent_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.group_messages": { + "name": "group_messages", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "channel_id": { + "name": "channel_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "thread_id": { + "name": "thread_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "text": { + "name": "text", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "status": { + "name": "status", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'completed'" + }, + "details": { + "name": "details", + "type": "jsonb", + "primaryKey": false, + "notNull": true, + "default": "'{}'::jsonb" + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "group_messages_channel_idx": { + "name": "group_messages_channel_idx", + "columns": [ + { + "expression": "channel_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "created_at", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "group_messages_channel_id_channels_id_fk": { + "name": "group_messages_channel_id_channels_id_fk", + "tableFrom": "group_messages", + "tableTo": "channels", + "columnsFrom": [ + "channel_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "group_messages_owner_user_id_users_id_fk": { + "name": "group_messages_owner_user_id_users_id_fk", + "tableFrom": "group_messages", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "group_messages_status_check": { + "name": "group_messages_status_check", + "value": "\"group_messages\".\"status\" IN ('queued', 'running', 'waiting', 'completed', 'failed')" + } + }, + "isRLSEnabled": false + }, + "public.action_records": { + "name": "action_records", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "uuid", + "primaryKey": true, + "notNull": true, + "default": "gen_random_uuid()" + }, + "surface": { + "name": "surface", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "bot_id": { + "name": "bot_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "actor_user_id": { + "name": "actor_user_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "tool_name": { + "name": "tool_name", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "command": { + "name": "command", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "outcome": { + "name": "outcome", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "action_records_created_idx": { + "name": "action_records_created_idx", + "columns": [ + { + "expression": "created_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "action_records_bot_idx": { + "name": "action_records_bot_idx", + "columns": [ + { + "expression": "bot_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "created_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "action_records_surface_check": { + "name": "action_records_surface_check", + "value": "\"action_records\".\"surface\" IN ('cloud', 'local')" + } + }, + "isRLSEnabled": false + }, + "public.capability_settings": { + "name": "capability_settings", + "schema": "", + "columns": { + "scope_kind": { + "name": "scope_kind", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "scope_id": { + "name": "scope_id", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "''" + }, + "capability": { + "name": "capability", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "allowed": { + "name": "allowed", + "type": "boolean", + "primaryKey": false, + "notNull": true + }, + "updated_by": { + "name": "updated_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": {}, + "compositePrimaryKeys": { + "capability_settings_scope_kind_scope_id_capability_pk": { + "name": "capability_settings_scope_kind_scope_id_capability_pk", + "columns": [ + "scope_kind", + "scope_id", + "capability" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "capability_settings_scope_kind_check": { + "name": "capability_settings_scope_kind_check", + "value": "\"capability_settings\".\"scope_kind\" IN ('organization', 'role', 'group')" + } + }, + "isRLSEnabled": false + }, + "public.enterprise_settings": { + "name": "enterprise_settings", + "schema": "", + "columns": { + "key": { + "name": "key", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "value": { + "name": "value", + "type": "jsonb", + "primaryKey": false, + "notNull": true + }, + "updated_by": { + "name": "updated_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.model_usage": { + "name": "model_usage", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "uuid", + "primaryKey": true, + "notNull": true, + "default": "gen_random_uuid()" + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "thread_id": { + "name": "thread_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "run_id": { + "name": "run_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "model": { + "name": "model", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "source": { + "name": "source", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "allowed": { + "name": "allowed", + "type": "boolean", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "model_usage_created_idx": { + "name": "model_usage_created_idx", + "columns": [ + { + "expression": "created_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "model_usage_model_idx": { + "name": "model_usage_model_idx", + "columns": [ + { + "expression": "model", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "created_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "model_usage_source_check": { + "name": "model_usage_source_check", + "value": "\"model_usage\".\"source\" IN ('configured', 'observed', 'unknown')" + } + }, + "isRLSEnabled": false + }, + "public.network_policies": { + "name": "network_policies", + "schema": "", + "columns": { + "scope_kind": { + "name": "scope_kind", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "scope_id": { + "name": "scope_id", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "''" + }, + "mode": { + "name": "mode", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "rules": { + "name": "rules", + "type": "jsonb", + "primaryKey": false, + "notNull": true, + "default": "'{\"entries\":[]}'::jsonb" + }, + "locked": { + "name": "locked", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": false + }, + "updated_by": { + "name": "updated_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": {}, + "compositePrimaryKeys": { + "network_policies_scope_kind_scope_id_pk": { + "name": "network_policies_scope_kind_scope_id_pk", + "columns": [ + "scope_kind", + "scope_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "network_policies_scope_kind_check": { + "name": "network_policies_scope_kind_check", + "value": "\"network_policies\".\"scope_kind\" IN ('organization', 'group')" + }, + "network_policies_mode_check": { + "name": "network_policies_mode_check", + "value": "\"network_policies\".\"mode\" IN ('allow_all', 'defaults_plus_allowlist', 'allowlist_only')" + } + }, + "isRLSEnabled": false + }, + "public.scim_connection_bindings": { + "name": "scim_connection_bindings", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "connection_id": { + "name": "connection_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "connection_key": { + "name": "connection_key", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "provisioning_domain_id": { + "name": "provisioning_domain_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + }, + "decommissioned_at": { + "name": "decommissioned_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "decommission_status": { + "name": "decommission_status", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'active'" + }, + "decommission_cursor_user_id": { + "name": "decommission_cursor_user_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "decommission_reconciled_user_count": { + "name": "decommission_reconciled_user_count", + "type": "integer", + "primaryKey": false, + "notNull": true, + "default": 0 + }, + "decommission_batch_count": { + "name": "decommission_batch_count", + "type": "integer", + "primaryKey": false, + "notNull": true, + "default": 0 + }, + "decommission_revision": { + "name": "decommission_revision", + "type": "integer", + "primaryKey": false, + "notNull": true, + "default": 0 + }, + "decommission_completed_at": { + "name": "decommission_completed_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "decommission_lease_id": { + "name": "decommission_lease_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "decommission_lease_expires_at": { + "name": "decommission_lease_expires_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + } + }, + "indexes": { + "scim_connection_bindings_connection_idx": { + "name": "scim_connection_bindings_connection_idx", + "columns": [ + { + "expression": "connection_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": { + "scim_connection_bindings_connection_key_unique": { + "name": "scim_connection_bindings_connection_key_unique", + "nullsNotDistinct": false, + "columns": [ + "connection_key" + ] + } + }, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.scim_group_members": { + "name": "scim_group_members", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "connection_id": { + "name": "connection_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "group_id": { + "name": "group_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "scim_user_id": { + "name": "scim_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "membership_key": { + "name": "membership_key", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + } + }, + "indexes": { + "scim_group_members_connection_idx": { + "name": "scim_group_members_connection_idx", + "columns": [ + { + "expression": "connection_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "scim_group_members_group_idx": { + "name": "scim_group_members_group_idx", + "columns": [ + { + "expression": "group_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "scim_group_members_scim_user_idx": { + "name": "scim_group_members_scim_user_idx", + "columns": [ + { + "expression": "scim_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "scim_group_members_group_id_scim_groups_id_fk": { + "name": "scim_group_members_group_id_scim_groups_id_fk", + "tableFrom": "scim_group_members", + "tableTo": "scim_groups", + "columnsFrom": [ + "group_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "scim_group_members_scim_user_id_scim_users_id_fk": { + "name": "scim_group_members_scim_user_id_scim_users_id_fk", + "tableFrom": "scim_group_members", + "tableTo": "scim_users", + "columnsFrom": [ + "scim_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": { + "scim_group_members_membership_key_unique": { + "name": "scim_group_members_membership_key_unique", + "nullsNotDistinct": false, + "columns": [ + "membership_key" + ] + } + }, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.scim_groups": { + "name": "scim_groups", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "connection_id": { + "name": "connection_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "provisioning_domain_id": { + "name": "provisioning_domain_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "revision": { + "name": "revision", + "type": "integer", + "primaryKey": false, + "notNull": true, + "default": 0 + }, + "display_name": { + "name": "display_name", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "display_name_key": { + "name": "display_name_key", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "external_id": { + "name": "external_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "external_id_key": { + "name": "external_id_key", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "order_key": { + "name": "order_key", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + } + }, + "indexes": { + "scim_groups_connection_idx": { + "name": "scim_groups_connection_idx", + "columns": [ + { + "expression": "connection_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "scim_groups_domain_idx": { + "name": "scim_groups_domain_idx", + "columns": [ + { + "expression": "provisioning_domain_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": { + "scim_groups_display_name_key_unique": { + "name": "scim_groups_display_name_key_unique", + "nullsNotDistinct": false, + "columns": [ + "display_name_key" + ] + }, + "scim_groups_external_id_key_unique": { + "name": "scim_groups_external_id_key_unique", + "nullsNotDistinct": false, + "columns": [ + "external_id_key" + ] + }, + "scim_groups_order_key_unique": { + "name": "scim_groups_order_key_unique", + "nullsNotDistinct": false, + "columns": [ + "order_key" + ] + } + }, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.scim_identity_tombstones": { + "name": "scim_identity_tombstones", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "connection_id": { + "name": "connection_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "provisioning_domain_id": { + "name": "provisioning_domain_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "external_id": { + "name": "external_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "external_id_key": { + "name": "external_id_key", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "profile": { + "name": "profile", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "deleted_at": { + "name": "deleted_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + } + }, + "indexes": { + "scim_identity_tombstones_connection_idx": { + "name": "scim_identity_tombstones_connection_idx", + "columns": [ + { + "expression": "connection_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "scim_identity_tombstones_domain_idx": { + "name": "scim_identity_tombstones_domain_idx", + "columns": [ + { + "expression": "provisioning_domain_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "scim_identity_tombstones_user_idx": { + "name": "scim_identity_tombstones_user_idx", + "columns": [ + { + "expression": "user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "scim_identity_tombstones_user_id_users_id_fk": { + "name": "scim_identity_tombstones_user_id_users_id_fk", + "tableFrom": "scim_identity_tombstones", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": { + "scim_identity_tombstones_external_id_key_unique": { + "name": "scim_identity_tombstones_external_id_key_unique", + "nullsNotDistinct": false, + "columns": [ + "external_id_key" + ] + } + }, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.scim_projection_grants": { + "name": "scim_projection_grants", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "connection_id": { + "name": "connection_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "provisioning_domain_id": { + "name": "provisioning_domain_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "scim_user_id": { + "name": "scim_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "source_kind": { + "name": "source_kind", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "source_id": { + "name": "source_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "source_value": { + "name": "source_value", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "role": { + "name": "role", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "grant_key": { + "name": "grant_key", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + } + }, + "indexes": { + "scim_projection_grants_connection_idx": { + "name": "scim_projection_grants_connection_idx", + "columns": [ + { + "expression": "connection_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "scim_projection_grants_domain_idx": { + "name": "scim_projection_grants_domain_idx", + "columns": [ + { + "expression": "provisioning_domain_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "scim_projection_grants_scim_user_idx": { + "name": "scim_projection_grants_scim_user_idx", + "columns": [ + { + "expression": "scim_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "scim_projection_grants_user_idx": { + "name": "scim_projection_grants_user_idx", + "columns": [ + { + "expression": "user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "scim_projection_grants_scim_user_id_scim_users_id_fk": { + "name": "scim_projection_grants_scim_user_id_scim_users_id_fk", + "tableFrom": "scim_projection_grants", + "tableTo": "scim_users", + "columnsFrom": [ + "scim_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "scim_projection_grants_user_id_users_id_fk": { + "name": "scim_projection_grants_user_id_users_id_fk", + "tableFrom": "scim_projection_grants", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": { + "scim_projection_grants_grant_key_unique": { + "name": "scim_projection_grants_grant_key_unique", + "nullsNotDistinct": false, + "columns": [ + "grant_key" + ] + } + }, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.scim_subjects": { + "name": "scim_subjects", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "profile_source_id": { + "name": "profile_source_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "revision": { + "name": "revision", + "type": "integer", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + } + }, + "indexes": { + "scim_subjects_profile_source_idx": { + "name": "scim_subjects_profile_source_idx", + "columns": [ + { + "expression": "profile_source_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "scim_subjects_user_id_users_id_fk": { + "name": "scim_subjects_user_id_users_id_fk", + "tableFrom": "scim_subjects", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": { + "scim_subjects_user_id_unique": { + "name": "scim_subjects_user_id_unique", + "nullsNotDistinct": false, + "columns": [ + "user_id" + ] + } + }, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.scim_users": { + "name": "scim_users", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "connection_id": { + "name": "connection_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "provisioning_domain_id": { + "name": "provisioning_domain_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "connection_user_key": { + "name": "connection_user_key", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "user_name": { + "name": "user_name", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "user_name_key": { + "name": "user_name_key", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "primary_email": { + "name": "primary_email", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "work_email_value_index": { + "name": "work_email_value_index", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "email_value_index": { + "name": "email_value_index", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "display_name": { + "name": "display_name", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "formatted_name": { + "name": "formatted_name", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "given_name": { + "name": "given_name", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "family_name": { + "name": "family_name", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "serialized_emails": { + "name": "serialized_emails", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "serialized_attributes": { + "name": "serialized_attributes", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "external_id": { + "name": "external_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "external_id_key": { + "name": "external_id_key", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "active": { + "name": "active", + "type": "boolean", + "primaryKey": false, + "notNull": true + }, + "order_key": { + "name": "order_key", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + } + }, + "indexes": { + "scim_users_connection_idx": { + "name": "scim_users_connection_idx", + "columns": [ + { + "expression": "connection_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "scim_users_domain_idx": { + "name": "scim_users_domain_idx", + "columns": [ + { + "expression": "provisioning_domain_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "scim_users_user_idx": { + "name": "scim_users_user_idx", + "columns": [ + { + "expression": "user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "scim_users_user_id_users_id_fk": { + "name": "scim_users_user_id_users_id_fk", + "tableFrom": "scim_users", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": { + "scim_users_connection_user_key_unique": { + "name": "scim_users_connection_user_key_unique", + "nullsNotDistinct": false, + "columns": [ + "connection_user_key" + ] + }, + "scim_users_user_name_key_unique": { + "name": "scim_users_user_name_key_unique", + "nullsNotDistinct": false, + "columns": [ + "user_name_key" + ] + }, + "scim_users_external_id_key_unique": { + "name": "scim_users_external_id_key_unique", + "nullsNotDistinct": false, + "columns": [ + "external_id_key" + ] + }, + "scim_users_order_key_unique": { + "name": "scim_users_order_key_unique", + "nullsNotDistinct": false, + "columns": [ + "order_key" + ] + } + }, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.bot_lifecycle": { + "name": "bot_lifecycle", + "schema": "", + "columns": { + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "paused_at": { + "name": "paused_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "notify": { + "name": "notify", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'all'" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "bot_lifecycle_owner_user_id_users_id_fk": { + "name": "bot_lifecycle_owner_user_id_users_id_fk", + "tableFrom": "bot_lifecycle", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "bot_lifecycle_agent_id_agents_id_fk": { + "name": "bot_lifecycle_agent_id_agents_id_fk", + "tableFrom": "bot_lifecycle", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "bot_lifecycle_owner_user_id_agent_id_pk": { + "name": "bot_lifecycle_owner_user_id_agent_id_pk", + "columns": [ + "owner_user_id", + "agent_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.update_routing_preferences": { + "name": "update_routing_preferences", + "schema": "", + "columns": { + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "kind": { + "name": "kind", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "transports": { + "name": "transports", + "type": "text[]", + "primaryKey": false, + "notNull": true, + "default": "'{}'" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "update_routing_preferences_owner_user_id_users_id_fk": { + "name": "update_routing_preferences_owner_user_id_users_id_fk", + "tableFrom": "update_routing_preferences", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "update_routing_preferences_owner_user_id_kind_pk": { + "name": "update_routing_preferences_owner_user_id_kind_pk", + "columns": [ + "owner_user_id", + "kind" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.saved_logins": { + "name": "saved_logins", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "origin": { + "name": "origin", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "username": { + "name": "username", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "encrypted_password": { + "name": "encrypted_password", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "last_used_at": { + "name": "last_used_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + } + }, + "indexes": { + "saved_logins_owner_origin_username_idx": { + "name": "saved_logins_owner_origin_username_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "origin", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "username", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "concurrently": false, + "method": "btree", + "with": {} + }, + "saved_logins_owner_idx": { + "name": "saved_logins_owner_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "saved_logins_owner_user_id_users_id_fk": { + "name": "saved_logins_owner_user_id_users_id_fk", + "tableFrom": "saved_logins", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.sign_in_requests": { + "name": "sign_in_requests", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "bot_id": { + "name": "bot_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "origin": { + "name": "origin", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "reason": { + "name": "reason", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "status": { + "name": "status", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'pending'" + }, + "method": { + "name": "method", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "outcome": { + "name": "outcome", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "thread_id": { + "name": "thread_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "tool_call_id": { + "name": "tool_call_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "control_request_id": { + "name": "control_request_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "continuation": { + "name": "continuation", + "type": "jsonb", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "expires_at": { + "name": "expires_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + }, + "resolved_at": { + "name": "resolved_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "filling_until": { + "name": "filling_until", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + } + }, + "indexes": { + "sign_in_requests_owner_idx": { + "name": "sign_in_requests_owner_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "status", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "sign_in_requests_owner_user_id_users_id_fk": { + "name": "sign_in_requests_owner_user_id_users_id_fk", + "tableFrom": "sign_in_requests", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "sign_in_requests_status_check": { + "name": "sign_in_requests_status_check", + "value": "\"sign_in_requests\".\"status\" IN ('pending', 'filling', 'code_required', 'taken_over', 'signed_in', 'failed', 'cancelled', 'expired')" + }, + "sign_in_requests_method_check": { + "name": "sign_in_requests_method_check", + "value": "\"sign_in_requests\".\"method\" IS NULL OR \"sign_in_requests\".\"method\" IN ('typed', 'saved', 'takeover')" + } + }, + "isRLSEnabled": false + }, + "public.team_bot_assignments": { + "name": "team_bot_assignments", + "schema": "", + "columns": { + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "group_name": { + "name": "group_name", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "assigned_by": { + "name": "assigned_by", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "assigned_at": { + "name": "assigned_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "team_bot_assignments_agent_id_agents_id_fk": { + "name": "team_bot_assignments_agent_id_agents_id_fk", + "tableFrom": "team_bot_assignments", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "team_bot_assignments_assigned_by_users_id_fk": { + "name": "team_bot_assignments_assigned_by_users_id_fk", + "tableFrom": "team_bot_assignments", + "tableTo": "users", + "columnsFrom": [ + "assigned_by" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "team_bot_assignments_agent_id_group_name_pk": { + "name": "team_bot_assignments_agent_id_group_name_pk", + "columns": [ + "agent_id", + "group_name" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.team_bot_audience": { + "name": "team_bot_audience", + "schema": "", + "columns": { + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "kind": { + "name": "kind", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "value": { + "name": "value", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "team_bot_audience_agent_id_agents_id_fk": { + "name": "team_bot_audience_agent_id_agents_id_fk", + "tableFrom": "team_bot_audience", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "team_bot_audience_agent_id_kind_value_pk": { + "name": "team_bot_audience_agent_id_kind_value_pk", + "columns": [ + "agent_id", + "kind", + "value" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "team_bot_audience_kind_check": { + "name": "team_bot_audience_kind_check", + "value": "\"team_bot_audience\".\"kind\" IN ('user', 'group')" + } + }, + "isRLSEnabled": false + }, + "public.team_bot_consent_defaults": { + "name": "team_bot_consent_defaults", + "schema": "", + "columns": { + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "server_id": { + "name": "server_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "team_bot_consent_defaults_user_id_users_id_fk": { + "name": "team_bot_consent_defaults_user_id_users_id_fk", + "tableFrom": "team_bot_consent_defaults", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "team_bot_consent_defaults_user_id_server_id_pk": { + "name": "team_bot_consent_defaults_user_id_server_id_pk", + "columns": [ + "user_id", + "server_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.team_bot_consents": { + "name": "team_bot_consents", + "schema": "", + "columns": { + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "server_id": { + "name": "server_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "decision": { + "name": "decision", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "team_bot_consents_user_id_users_id_fk": { + "name": "team_bot_consents_user_id_users_id_fk", + "tableFrom": "team_bot_consents", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "team_bot_consents_agent_id_agents_id_fk": { + "name": "team_bot_consents_agent_id_agents_id_fk", + "tableFrom": "team_bot_consents", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "team_bot_consents_user_id_agent_id_server_id_pk": { + "name": "team_bot_consents_user_id_agent_id_server_id_pk", + "columns": [ + "user_id", + "agent_id", + "server_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "team_bot_consents_decision_check": { + "name": "team_bot_consents_decision_check", + "value": "\"team_bot_consents\".\"decision\" IN ('always', 'once')" + } + }, + "isRLSEnabled": false + }, + "public.team_bot_publications": { + "name": "team_bot_publications", + "schema": "", + "columns": { + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "published_by": { + "name": "published_by", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "audience": { + "name": "audience", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "published_at": { + "name": "published_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "team_bot_publications_agent_id_agents_id_fk": { + "name": "team_bot_publications_agent_id_agents_id_fk", + "tableFrom": "team_bot_publications", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "team_bot_publications_published_by_users_id_fk": { + "name": "team_bot_publications_published_by_users_id_fk", + "tableFrom": "team_bot_publications", + "tableTo": "users", + "columnsFrom": [ + "published_by" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "team_bot_publications_audience_check": { + "name": "team_bot_publications_audience_check", + "value": "\"team_bot_publications\".\"audience\" IN ('team', 'people')" + } + }, + "isRLSEnabled": false + }, + "public.shared_use_approval_members": { + "name": "shared_use_approval_members", + "schema": "", + "columns": { + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "server_id": { + "name": "server_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "kind": { + "name": "kind", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "value": { + "name": "value", + "type": "text", + "primaryKey": false, + "notNull": true + } + }, + "indexes": {}, + "foreignKeys": { + "shared_use_approval_members_approval_fk": { + "name": "shared_use_approval_members_approval_fk", + "tableFrom": "shared_use_approval_members", + "tableTo": "shared_use_approvals", + "columnsFrom": [ + "agent_id", + "server_id" + ], + "columnsTo": [ + "agent_id", + "server_id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "shared_use_approval_members_agent_id_server_id_kind_value_pk": { + "name": "shared_use_approval_members_agent_id_server_id_kind_value_pk", + "columns": [ + "agent_id", + "server_id", + "kind", + "value" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "shared_use_approval_members_kind_check": { + "name": "shared_use_approval_members_kind_check", + "value": "\"shared_use_approval_members\".\"kind\" IN ('user', 'group')" + } + }, + "isRLSEnabled": false + }, + "public.shared_use_approvals": { + "name": "shared_use_approvals", + "schema": "", + "columns": { + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "server_id": { + "name": "server_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "audience": { + "name": "audience", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "outside_input": { + "name": "outside_input", + "type": "boolean", + "primaryKey": false, + "notNull": true + }, + "approved_by": { + "name": "approved_by", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "approved_at": { + "name": "approved_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "shared_use_approvals_agent_id_agents_id_fk": { + "name": "shared_use_approvals_agent_id_agents_id_fk", + "tableFrom": "shared_use_approvals", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "shared_use_approvals_server_id_mcp_servers_id_fk": { + "name": "shared_use_approvals_server_id_mcp_servers_id_fk", + "tableFrom": "shared_use_approvals", + "tableTo": "mcp_servers", + "columnsFrom": [ + "server_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "shared_use_approvals_agent_id_server_id_pk": { + "name": "shared_use_approvals_agent_id_server_id_pk", + "columns": [ + "agent_id", + "server_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "shared_use_approvals_audience_check": { + "name": "shared_use_approvals_audience_check", + "value": "\"shared_use_approvals\".\"audience\" IN ('owner', 'people', 'team')" + } + }, + "isRLSEnabled": false + }, + "public.shared_use_requests": { + "name": "shared_use_requests", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "server_id": { + "name": "server_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "proposed_audience": { + "name": "proposed_audience", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "proposed_outside_input": { + "name": "proposed_outside_input", + "type": "boolean", + "primaryKey": false, + "notNull": true + }, + "proposed_members": { + "name": "proposed_members", + "type": "jsonb", + "primaryKey": false, + "notNull": true, + "default": "'[]'::jsonb" + }, + "reason": { + "name": "reason", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "requested_by": { + "name": "requested_by", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "status": { + "name": "status", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'pending'" + }, + "decided_by": { + "name": "decided_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "decided_at": { + "name": "decided_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "shared_use_requests_pending_idx": { + "name": "shared_use_requests_pending_idx", + "columns": [ + { + "expression": "agent_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "server_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "where": "\"shared_use_requests\".\"status\" = 'pending'", + "concurrently": false, + "method": "btree", + "with": {} + }, + "shared_use_requests_status_idx": { + "name": "shared_use_requests_status_idx", + "columns": [ + { + "expression": "status", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "shared_use_requests_agent_id_agents_id_fk": { + "name": "shared_use_requests_agent_id_agents_id_fk", + "tableFrom": "shared_use_requests", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "shared_use_requests_server_id_mcp_servers_id_fk": { + "name": "shared_use_requests_server_id_mcp_servers_id_fk", + "tableFrom": "shared_use_requests", + "tableTo": "mcp_servers", + "columnsFrom": [ + "server_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "shared_use_requests_audience_check": { + "name": "shared_use_requests_audience_check", + "value": "\"shared_use_requests\".\"proposed_audience\" IN ('owner', 'people', 'team')" + }, + "shared_use_requests_reason_check": { + "name": "shared_use_requests_reason_check", + "value": "\"shared_use_requests\".\"reason\" IN ('publish', 'trigger', 'grant', 'refused_call')" + }, + "shared_use_requests_status_check": { + "name": "shared_use_requests_status_check", + "value": "\"shared_use_requests\".\"status\" IN ('pending', 'approved', 'declined', 'superseded')" + } + }, + "isRLSEnabled": false + }, + "public.identity_link_challenges": { + "name": "identity_link_challenges", + "schema": "", + "columns": { + "token_hash": { + "name": "token_hash", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "provider": { + "name": "provider", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "expires_at": { + "name": "expires_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + } + }, + "indexes": { + "identity_link_challenges_expiry_idx": { + "name": "identity_link_challenges_expiry_idx", + "columns": [ + { + "expression": "expires_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "identity_link_challenges_user_provider_idx": { + "name": "identity_link_challenges_user_provider_idx", + "columns": [ + { + "expression": "user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "provider", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.identity_links": { + "name": "identity_links", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "provider": { + "name": "provider", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "realm": { + "name": "realm", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "subject": { + "name": "subject", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "handle": { + "name": "handle", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "verified_by": { + "name": "verified_by", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "credential_id": { + "name": "credential_id", + "type": "uuid", + "primaryKey": false, + "notNull": false + }, + "status": { + "name": "status", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'active'" + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "identity_links_identity_idx": { + "name": "identity_links_identity_idx", + "columns": [ + { + "expression": "provider", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "realm", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "subject", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "concurrently": false, + "method": "btree", + "with": {} + }, + "identity_links_user_realm_idx": { + "name": "identity_links_user_realm_idx", + "columns": [ + { + "expression": "user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "provider", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "realm", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "concurrently": false, + "method": "btree", + "with": {} + }, + "identity_links_credential_idx": { + "name": "identity_links_credential_idx", + "columns": [ + { + "expression": "credential_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "where": "\"identity_links\".\"credential_id\" IS NOT NULL", + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "identity_links_credential_id_credentials_id_fk": { + "name": "identity_links_credential_id_credentials_id_fk", + "tableFrom": "identity_links", + "tableTo": "credentials", + "columnsFrom": [ + "credential_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "no action", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "identity_links_verified_by_check": { + "name": "identity_links_verified_by_check", + "value": "\"identity_links\".\"verified_by\" IN ('challenge', 'oauth')" + }, + "identity_links_status_check": { + "name": "identity_links_status_check", + "value": "\"identity_links\".\"status\" IN ('active', 'needs_reconnect')" + } + }, + "isRLSEnabled": false + } + }, + "enums": { + "public.agent_type": { + "name": "agent_type", + "schema": "public", + "values": [ + "built_in", + "remote_ag_ui", + "remote_mastra" + ] + }, + "public.credential_kind": { + "name": "credential_kind", + "schema": "public", + "values": [ + "model", + "connector", + "agent", + "mcp", + "mcp_oauth_client", + "mcp_user_token" + ] + }, + "public.role": { + "name": "role", + "schema": "public", + "values": [ + "admin", + "user" + ] + }, + "public.agent_visibility": { + "name": "agent_visibility", + "schema": "public", + "values": [ + "public", + "private" + ] + }, + "public.routine_run_status": { + "name": "routine_run_status", + "schema": "public", + "values": [ + "succeeded", + "failed", + "skipped", + "waiting" + ] + }, + "public.responsibility_run_status": { + "name": "responsibility_run_status", + "schema": "public", + "values": [ + "queued", + "running", + "waiting", + "succeeded", + "failed", + "skipped" + ] + }, + "public.responsibility_status": { + "name": "responsibility_status", + "schema": "public", + "values": [ + "active", + "paused", + "completed" + ] + } + }, + "schemas": {}, + "sequences": {}, + "roles": {}, + "policies": {}, + "views": {}, + "_meta": { + "columns": {}, + "schemas": {}, + "tables": {} + } +} \ No newline at end of file diff --git a/server/drizzle/meta/0059_snapshot.json b/server/drizzle/meta/0059_snapshot.json new file mode 100644 index 000000000..9f947ad31 --- /dev/null +++ b/server/drizzle/meta/0059_snapshot.json @@ -0,0 +1,9964 @@ +{ + "id": "a1b20dec-1a95-4bb3-b4b1-d1196a22a6cf", + "prevId": "d7748e18-de30-4092-afcd-21350f0829a1", + "version": "7", + "dialect": "postgresql", + "tables": { + "public.accounts": { + "name": "accounts", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "account_id": { + "name": "account_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "provider_id": { + "name": "provider_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "issuer": { + "name": "issuer", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "access_token": { + "name": "access_token", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "refresh_token": { + "name": "refresh_token", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "id_token": { + "name": "id_token", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "access_token_expires_at": { + "name": "access_token_expires_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "refresh_token_expires_at": { + "name": "refresh_token_expires_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "scope": { + "name": "scope", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "password": { + "name": "password", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "accounts_provider_account_idx": { + "name": "accounts_provider_account_idx", + "columns": [ + { + "expression": "provider_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "account_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "accounts_user_id_users_id_fk": { + "name": "accounts_user_id_users_id_fk", + "tableFrom": "accounts", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.agents": { + "name": "agents", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "name": { + "name": "name", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "type": { + "name": "type", + "type": "agent_type", + "typeSchema": "public", + "primaryKey": false, + "notNull": true + }, + "configuration": { + "name": "configuration", + "type": "jsonb", + "primaryKey": false, + "notNull": true + }, + "package_id": { + "name": "package_id", + "type": "uuid", + "primaryKey": false, + "notNull": false + }, + "override": { + "name": "override", + "type": "jsonb", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "agents_package_id_deployment_packages_id_fk": { + "name": "agents_package_id_deployment_packages_id_fk", + "tableFrom": "agents", + "tableTo": "deployment_packages", + "columnsFrom": [ + "package_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "set null", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.attachments": { + "name": "attachments", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "uuid", + "primaryKey": true, + "notNull": true, + "default": "gen_random_uuid()" + }, + "channel_id": { + "name": "channel_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "uploaded_by": { + "name": "uploaded_by", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "name": { + "name": "name", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "mime_type": { + "name": "mime_type", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "size_bytes": { + "name": "size_bytes", + "type": "integer", + "primaryKey": false, + "notNull": true + }, + "bytes": { + "name": "bytes", + "type": "bytea", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "attached_at": { + "name": "attached_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "upload_group": { + "name": "upload_group", + "type": "text", + "primaryKey": false, + "notNull": false + } + }, + "indexes": { + "attachments_channel_idx": { + "name": "attachments_channel_idx", + "columns": [ + { + "expression": "channel_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "attachments_uploaded_by_idx": { + "name": "attachments_uploaded_by_idx", + "columns": [ + { + "expression": "uploaded_by", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "attachments_upload_group_idx": { + "name": "attachments_upload_group_idx", + "columns": [ + { + "expression": "channel_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "uploaded_by", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "upload_group", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "where": "\"attachments\".\"attached_at\" is null", + "concurrently": false, + "method": "btree", + "with": {} + }, + "attachments_staged_idx": { + "name": "attachments_staged_idx", + "columns": [ + { + "expression": "created_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "where": "\"attachments\".\"attached_at\" is null", + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "attachments_channel_id_channels_id_fk": { + "name": "attachments_channel_id_channels_id_fk", + "tableFrom": "attachments", + "tableTo": "channels", + "columnsFrom": [ + "channel_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "attachments_uploaded_by_users_id_fk": { + "name": "attachments_uploaded_by_users_id_fk", + "tableFrom": "attachments", + "tableTo": "users", + "columnsFrom": [ + "uploaded_by" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.audit_events": { + "name": "audit_events", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "uuid", + "primaryKey": true, + "notNull": true, + "default": "gen_random_uuid()" + }, + "actor_user_id": { + "name": "actor_user_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "initiator_kind": { + "name": "initiator_kind", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'person'" + }, + "initiator_id": { + "name": "initiator_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "event_type": { + "name": "event_type", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "target_type": { + "name": "target_type", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "target_id": { + "name": "target_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "payload": { + "name": "payload", + "type": "jsonb", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "audit_events_created_at_idx": { + "name": "audit_events_created_at_idx", + "columns": [ + { + "expression": "created_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "audit_events_type_time_idx": { + "name": "audit_events_type_time_idx", + "columns": [ + { + "expression": "event_type", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "created_at", + "isExpression": false, + "asc": false, + "nulls": "last" + }, + { + "expression": "id", + "isExpression": false, + "asc": false, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "audit_events_actor_time_idx": { + "name": "audit_events_actor_time_idx", + "columns": [ + { + "expression": "actor_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "created_at", + "isExpression": false, + "asc": false, + "nulls": "last" + }, + { + "expression": "id", + "isExpression": false, + "asc": false, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "audit_events_target_time_idx": { + "name": "audit_events_target_time_idx", + "columns": [ + { + "expression": "target_type", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "target_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "created_at", + "isExpression": false, + "asc": false, + "nulls": "last" + }, + { + "expression": "id", + "isExpression": false, + "asc": false, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "audit_events_initiator_time_idx": { + "name": "audit_events_initiator_time_idx", + "columns": [ + { + "expression": "initiator_kind", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "created_at", + "isExpression": false, + "asc": false, + "nulls": "last" + }, + { + "expression": "id", + "isExpression": false, + "asc": false, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.channel_agents": { + "name": "channel_agents", + "schema": "", + "columns": { + "channel_id": { + "name": "channel_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "channel_agents_channel_id_channels_id_fk": { + "name": "channel_agents_channel_id_channels_id_fk", + "tableFrom": "channel_agents", + "tableTo": "channels", + "columnsFrom": [ + "channel_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "channel_agents_agent_id_agents_id_fk": { + "name": "channel_agents_agent_id_agents_id_fk", + "tableFrom": "channel_agents", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "channel_agents_channel_id_agent_id_pk": { + "name": "channel_agents_channel_id_agent_id_pk", + "columns": [ + "channel_id", + "agent_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.channel_memberships": { + "name": "channel_memberships", + "schema": "", + "columns": { + "channel_id": { + "name": "channel_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "pinned_at": { + "name": "pinned_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "last_read_at": { + "name": "last_read_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "channel_memberships_channel_id_channels_id_fk": { + "name": "channel_memberships_channel_id_channels_id_fk", + "tableFrom": "channel_memberships", + "tableTo": "channels", + "columnsFrom": [ + "channel_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "channel_memberships_user_id_users_id_fk": { + "name": "channel_memberships_user_id_users_id_fk", + "tableFrom": "channel_memberships", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "channel_memberships_channel_id_user_id_pk": { + "name": "channel_memberships_channel_id_user_id_pk", + "columns": [ + "channel_id", + "user_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.channels": { + "name": "channels", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "name": { + "name": "name", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "description": { + "name": "description", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "suggested_prompts": { + "name": "suggested_prompts", + "type": "text[]", + "primaryKey": false, + "notNull": true, + "default": "'{}'" + }, + "allowed_groups": { + "name": "allowed_groups", + "type": "text[]", + "primaryKey": false, + "notNull": true, + "default": "'{}'" + }, + "package_id": { + "name": "package_id", + "type": "uuid", + "primaryKey": false, + "notNull": false + }, + "override": { + "name": "override", + "type": "jsonb", + "primaryKey": false, + "notNull": false + }, + "summary": { + "name": "summary", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "summary_at": { + "name": "summary_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "last_message": { + "name": "last_message", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "last_message_source_id": { + "name": "last_message_source_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "last_message_at": { + "name": "last_message_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "last_message_agent_id": { + "name": "last_message_agent_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "deleted_at": { + "name": "deleted_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "channels_recent_activity_idx": { + "name": "channels_recent_activity_idx", + "columns": [ + { + "expression": "COALESCE(\"last_message_at\", \"created_at\") DESC", + "asc": true, + "isExpression": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "channels_awaiting_summary_idx": { + "name": "channels_awaiting_summary_idx", + "columns": [ + { + "expression": "id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "where": "\"channels\".\"summary\" is null and \"channels\".\"deleted_at\" is null", + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "channels_package_id_deployment_packages_id_fk": { + "name": "channels_package_id_deployment_packages_id_fk", + "tableFrom": "channels", + "tableTo": "deployment_packages", + "columnsFrom": [ + "package_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "set null", + "onUpdate": "no action" + }, + "channels_last_message_agent_id_agents_id_fk": { + "name": "channels_last_message_agent_id_agents_id_fk", + "tableFrom": "channels", + "tableTo": "agents", + "columnsFrom": [ + "last_message_agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "set null", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.credentials": { + "name": "credentials", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "uuid", + "primaryKey": true, + "notNull": true, + "default": "gen_random_uuid()" + }, + "kind": { + "name": "kind", + "type": "credential_kind", + "typeSchema": "public", + "primaryKey": false, + "notNull": true + }, + "provider": { + "name": "provider", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "encrypted_value": { + "name": "encrypted_value", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "key_id": { + "name": "key_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "metadata": { + "name": "metadata", + "type": "jsonb", + "primaryKey": false, + "notNull": true + }, + "revoked_at": { + "name": "revoked_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "credentials_active_key_idx": { + "name": "credentials_active_key_idx", + "columns": [ + { + "expression": "kind", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "provider", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "key_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "where": "\"credentials\".\"revoked_at\" IS NULL", + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.deployment_packages": { + "name": "deployment_packages", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "uuid", + "primaryKey": true, + "notNull": true, + "default": "gen_random_uuid()" + }, + "tenant_id": { + "name": "tenant_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "source_path": { + "name": "source_path", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "checksum": { + "name": "checksum", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "loaded_at": { + "name": "loaded_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": { + "deployment_packages_tenant_id_unique": { + "name": "deployment_packages_tenant_id_unique", + "nullsNotDistinct": false, + "columns": [ + "tenant_id" + ] + } + }, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.intelligence_channel_mappings": { + "name": "intelligence_channel_mappings", + "schema": "", + "columns": { + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "channel_id": { + "name": "channel_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "thread_id": { + "name": "thread_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "intelligence_channel_mappings_thread_idx": { + "name": "intelligence_channel_mappings_thread_idx", + "columns": [ + { + "expression": "thread_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "intelligence_channel_mappings_user_id_users_id_fk": { + "name": "intelligence_channel_mappings_user_id_users_id_fk", + "tableFrom": "intelligence_channel_mappings", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "intelligence_channel_mappings_channel_id_channels_id_fk": { + "name": "intelligence_channel_mappings_channel_id_channels_id_fk", + "tableFrom": "intelligence_channel_mappings", + "tableTo": "channels", + "columnsFrom": [ + "channel_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "intelligence_channel_mappings_user_id_channel_id_pk": { + "name": "intelligence_channel_mappings_user_id_channel_id_pk", + "columns": [ + "user_id", + "channel_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.revoked_access": { + "name": "revoked_access", + "schema": "", + "columns": { + "email": { + "name": "email", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "revoked_at": { + "name": "revoked_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "revoked_by": { + "name": "revoked_by", + "type": "text", + "primaryKey": false, + "notNull": true + } + }, + "indexes": {}, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.sessions": { + "name": "sessions", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "token": { + "name": "token", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "expires_at": { + "name": "expires_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + }, + "ip_address": { + "name": "ip_address", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "user_agent": { + "name": "user_agent", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "sessions_user_id_users_id_fk": { + "name": "sessions_user_id_users_id_fk", + "tableFrom": "sessions", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": { + "sessions_token_unique": { + "name": "sessions_token_unique", + "nullsNotDistinct": false, + "columns": [ + "token" + ] + } + }, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.sso_providers": { + "name": "sso_providers", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "issuer": { + "name": "issuer", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "oidc_config": { + "name": "oidc_config", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "saml_config": { + "name": "saml_config", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "provider_id": { + "name": "provider_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "organization_id": { + "name": "organization_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "domain": { + "name": "domain", + "type": "text", + "primaryKey": false, + "notNull": true + } + }, + "indexes": {}, + "foreignKeys": { + "sso_providers_user_id_users_id_fk": { + "name": "sso_providers_user_id_users_id_fk", + "tableFrom": "sso_providers", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "set null", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": { + "sso_providers_provider_id_unique": { + "name": "sso_providers_provider_id_unique", + "nullsNotDistinct": false, + "columns": [ + "provider_id" + ] + } + }, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.user_instructions": { + "name": "user_instructions", + "schema": "", + "columns": { + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "instructions": { + "name": "instructions", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "user_instructions_user_id_users_id_fk": { + "name": "user_instructions_user_id_users_id_fk", + "tableFrom": "user_instructions", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.user_roles": { + "name": "user_roles", + "schema": "", + "columns": { + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "role": { + "name": "role", + "type": "role", + "typeSchema": "public", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "user_roles_user_id_users_id_fk": { + "name": "user_roles_user_id_users_id_fk", + "tableFrom": "user_roles", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "user_roles_user_id_role_pk": { + "name": "user_roles_user_id_role_pk", + "columns": [ + "user_id", + "role" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.users": { + "name": "users", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "email": { + "name": "email", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "name": { + "name": "name", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "image": { + "name": "image", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "email_verified": { + "name": "email_verified", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": false + }, + "preferences": { + "name": "preferences", + "type": "jsonb", + "primaryKey": false, + "notNull": true, + "default": "'{}'::jsonb" + }, + "groups": { + "name": "groups", + "type": "text[]", + "primaryKey": false, + "notNull": true, + "default": "'{}'" + }, + "onboarding_step": { + "name": "onboarding_step", + "type": "integer", + "primaryKey": false, + "notNull": true, + "default": 0 + }, + "onboarding_completed_at": { + "name": "onboarding_completed_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "last_signed_in_at": { + "name": "last_signed_in_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": { + "users_email_unique": { + "name": "users_email_unique", + "nullsNotDistinct": false, + "columns": [ + "email" + ] + } + }, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.verifications": { + "name": "verifications", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "identifier": { + "name": "identifier", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "value": { + "name": "value", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "expires_at": { + "name": "expires_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.action_policy": { + "name": "action_policy", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "mode": { + "name": "mode", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "deny": { + "name": "deny", + "type": "text[]", + "primaryKey": false, + "notNull": true + }, + "allow": { + "name": "allow", + "type": "text[]", + "primaryKey": false, + "notNull": true + }, + "updated_by": { + "name": "updated_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.computer_page_frame": { + "name": "computer_page_frame", + "schema": "", + "columns": { + "computer_id": { + "name": "computer_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "tool_call_id": { + "name": "tool_call_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "url": { + "name": "url", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "title": { + "name": "title", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "frame": { + "name": "frame", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "captured_at": { + "name": "captured_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "computer_page_frame_captured_idx": { + "name": "computer_page_frame_captured_idx", + "columns": [ + { + "expression": "captured_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": {}, + "compositePrimaryKeys": { + "computer_page_frame_computer_id_tool_call_id_pk": { + "name": "computer_page_frame_computer_id_tool_call_id_pk", + "columns": [ + "computer_id", + "tool_call_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.computer_snapshot": { + "name": "computer_snapshot", + "schema": "", + "columns": { + "computer_id": { + "name": "computer_id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "snapshot_id": { + "name": "snapshot_id", + "type": "integer", + "primaryKey": false, + "notNull": true + }, + "url": { + "name": "url", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "elements": { + "name": "elements", + "type": "jsonb", + "primaryKey": false, + "notNull": true + }, + "taken_at": { + "name": "taken_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "session": { + "name": "session", + "type": "text", + "primaryKey": false, + "notNull": false + } + }, + "indexes": {}, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.agent_preferences": { + "name": "agent_preferences", + "schema": "", + "columns": { + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "hidden_at": { + "name": "hidden_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "pinned_at": { + "name": "pinned_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + } + }, + "indexes": {}, + "foreignKeys": { + "agent_preferences_user_id_users_id_fk": { + "name": "agent_preferences_user_id_users_id_fk", + "tableFrom": "agent_preferences", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "agent_preferences_agent_id_agents_id_fk": { + "name": "agent_preferences_agent_id_agents_id_fk", + "tableFrom": "agent_preferences", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "agent_preferences_user_id_agent_id_pk": { + "name": "agent_preferences_user_id_agent_id_pk", + "columns": [ + "user_id", + "agent_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.agent_profiles": { + "name": "agent_profiles", + "schema": "", + "columns": { + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "title": { + "name": "title", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "role_description": { + "name": "role_description", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "avatar_seed": { + "name": "avatar_seed", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "visibility": { + "name": "visibility", + "type": "agent_visibility", + "typeSchema": "public", + "primaryKey": false, + "notNull": true + }, + "callback_token_hash": { + "name": "callback_token_hash", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "callback_token_issued_at": { + "name": "callback_token_issued_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "deleted_at": { + "name": "deleted_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "agent_profiles_visibility_deleted_idx": { + "name": "agent_profiles_visibility_deleted_idx", + "columns": [ + { + "expression": "visibility", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "deleted_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "agent_profiles_agent_id_agents_id_fk": { + "name": "agent_profiles_agent_id_agents_id_fk", + "tableFrom": "agent_profiles", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "agent_profiles_owner_user_id_users_id_fk": { + "name": "agent_profiles_owner_user_id_users_id_fk", + "tableFrom": "agent_profiles", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "set null", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.routine_runs": { + "name": "routine_runs", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "routine_id": { + "name": "routine_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "started_at": { + "name": "started_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "finished_at": { + "name": "finished_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "status": { + "name": "status", + "type": "routine_run_status", + "typeSchema": "public", + "primaryKey": false, + "notNull": false + }, + "waiting": { + "name": "waiting", + "type": "jsonb", + "primaryKey": false, + "notNull": false + }, + "error": { + "name": "error", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "source": { + "name": "source", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'schedule'" + } + }, + "indexes": { + "routine_runs_by_routine_idx": { + "name": "routine_runs_by_routine_idx", + "columns": [ + { + "expression": "routine_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "started_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "routine_runs_routine_id_routines_id_fk": { + "name": "routine_runs_routine_id_routines_id_fk", + "tableFrom": "routine_runs", + "tableTo": "routines", + "columnsFrom": [ + "routine_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.routine_sweeps": { + "name": "routine_sweeps", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "swept_at": { + "name": "swept_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "owner": { + "name": "owner", + "type": "text", + "primaryKey": false, + "notNull": false + } + }, + "indexes": {}, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.routines": { + "name": "routines", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "channel_id": { + "name": "channel_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "instruction": { + "name": "instruction", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "cron": { + "name": "cron", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "timezone": { + "name": "timezone", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'UTC'" + }, + "enabled": { + "name": "enabled", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": true + }, + "next_run_at": { + "name": "next_run_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + }, + "last_run_at": { + "name": "last_run_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "enabled_at": { + "name": "enabled_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "routines_due_idx": { + "name": "routines_due_idx", + "columns": [ + { + "expression": "enabled", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "next_run_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "routines_by_owner_idx": { + "name": "routines_by_owner_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "enabled", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "routines_owner_user_id_users_id_fk": { + "name": "routines_owner_user_id_users_id_fk", + "tableFrom": "routines", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "routines_agent_id_agents_id_fk": { + "name": "routines_agent_id_agents_id_fk", + "tableFrom": "routines", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.component_exclusions": { + "name": "component_exclusions", + "schema": "", + "columns": { + "component_name": { + "name": "component_name", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "withheld_by": { + "name": "withheld_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "component_exclusions_component_name_components_name_fk": { + "name": "component_exclusions_component_name_components_name_fk", + "tableFrom": "component_exclusions", + "tableTo": "components", + "columnsFrom": [ + "component_name" + ], + "columnsTo": [ + "name" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "component_exclusions_agent_id_agents_id_fk": { + "name": "component_exclusions_agent_id_agents_id_fk", + "tableFrom": "component_exclusions", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "component_exclusions_component_name_agent_id_pk": { + "name": "component_exclusions_component_name_agent_id_pk", + "columns": [ + "component_name", + "agent_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.component_functions": { + "name": "component_functions", + "schema": "", + "columns": { + "component_name": { + "name": "component_name", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "function_name": { + "name": "function_name", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "granted_by": { + "name": "granted_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "component_functions_component_name_components_name_fk": { + "name": "component_functions_component_name_components_name_fk", + "tableFrom": "component_functions", + "tableTo": "components", + "columnsFrom": [ + "component_name" + ], + "columnsTo": [ + "name" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "component_functions_component_name_function_name_pk": { + "name": "component_functions_component_name_function_name_pk", + "columns": [ + "component_name", + "function_name" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.components": { + "name": "components", + "schema": "", + "columns": { + "name": { + "name": "name", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "title": { + "name": "title", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "kind": { + "name": "kind", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "draft_description": { + "name": "draft_description", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "published_description": { + "name": "published_description", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "published": { + "name": "published", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": false + }, + "published_at": { + "name": "published_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "updated_by": { + "name": "updated_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.brokered_connections": { + "name": "brokered_connections", + "schema": "", + "columns": { + "provider": { + "name": "provider", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "app": { + "name": "app", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "holder": { + "name": "holder", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "vendor_user_id": { + "name": "vendor_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "connected_by": { + "name": "connected_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "connected_at": { + "name": "connected_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "verified": { + "name": "verified", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": false + }, + "verified_at": { + "name": "verified_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "probe_action": { + "name": "probe_action", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "brokered_connections_person_idx": { + "name": "brokered_connections_person_idx", + "columns": [ + { + "expression": "provider", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "app", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "where": "\"brokered_connections\".\"holder\" = 'person'", + "concurrently": false, + "method": "btree", + "with": {} + }, + "brokered_connections_deployment_idx": { + "name": "brokered_connections_deployment_idx", + "columns": [ + { + "expression": "provider", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "app", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "where": "\"brokered_connections\".\"holder\" = 'deployment'", + "concurrently": false, + "method": "btree", + "with": {} + }, + "brokered_connections_user_idx": { + "name": "brokered_connections_user_idx", + "columns": [ + { + "expression": "user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "brokered_connections_holder_check": { + "name": "brokered_connections_holder_check", + "value": "(\"brokered_connections\".\"holder\" = 'person' AND \"brokered_connections\".\"user_id\" IS NOT NULL) OR (\"brokered_connections\".\"holder\" = 'deployment' AND \"brokered_connections\".\"user_id\" IS NULL)" + }, + "brokered_connections_provider_check": { + "name": "brokered_connections_provider_check", + "value": "\"brokered_connections\".\"provider\" IN ('composio', 'arcade')" + } + }, + "isRLSEnabled": false + }, + "public.composio_connections": { + "name": "composio_connections", + "schema": "", + "columns": { + "toolkit": { + "name": "toolkit", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "connected_at": { + "name": "connected_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "verified": { + "name": "verified", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": false + }, + "verified_at": { + "name": "verified_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "probe_action": { + "name": "probe_action", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "composio_connections_user_idx": { + "name": "composio_connections_user_idx", + "columns": [ + { + "expression": "user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": {}, + "compositePrimaryKeys": { + "composio_connections_toolkit_user_id_pk": { + "name": "composio_connections_toolkit_user_id_pk", + "columns": [ + "toolkit", + "user_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.mcp_servers": { + "name": "mcp_servers", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "title": { + "name": "title", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "logo": { + "name": "logo", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "vendor": { + "name": "vendor", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "url": { + "name": "url", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "provenance": { + "name": "provenance", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'first-party'" + }, + "credential_id": { + "name": "credential_id", + "type": "uuid", + "primaryKey": false, + "notNull": false + }, + "auth_scheme": { + "name": "auth_scheme", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "account_mode": { + "name": "account_mode", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "shared_vendor_user_id": { + "name": "shared_vendor_user_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "tools_refreshed_at": { + "name": "tools_refreshed_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "last_error": { + "name": "last_error", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "added_by": { + "name": "added_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "mcp_servers_credential_id_credentials_id_fk": { + "name": "mcp_servers_credential_id_credentials_id_fk", + "tableFrom": "mcp_servers", + "tableTo": "credentials", + "columnsFrom": [ + "credential_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "restrict", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "mcp_servers_account_mode_check": { + "name": "mcp_servers_account_mode_check", + "value": "\"mcp_servers\".\"account_mode\" IS NULL OR \"mcp_servers\".\"account_mode\" IN ('personal', 'shared')" + } + }, + "isRLSEnabled": false + }, + "public.mcp_tools": { + "name": "mcp_tools", + "schema": "", + "columns": { + "server_id": { + "name": "server_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "name": { + "name": "name", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "description": { + "name": "description", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "''" + }, + "input_schema": { + "name": "input_schema", + "type": "jsonb", + "primaryKey": false, + "notNull": true, + "default": "'{}'::jsonb" + }, + "effect": { + "name": "effect", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "destructive": { + "name": "destructive", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": false + }, + "version": { + "name": "version", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "mcp_tools_server_id_mcp_servers_id_fk": { + "name": "mcp_tools_server_id_mcp_servers_id_fk", + "tableFrom": "mcp_tools", + "tableTo": "mcp_servers", + "columnsFrom": [ + "server_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "mcp_tools_server_id_name_pk": { + "name": "mcp_tools_server_id_name_pk", + "columns": [ + "server_id", + "name" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.mcp_user_credentials": { + "name": "mcp_user_credentials", + "schema": "", + "columns": { + "server_id": { + "name": "server_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "credential_id": { + "name": "credential_id", + "type": "uuid", + "primaryKey": false, + "notNull": true + }, + "scope": { + "name": "scope", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "connected_at": { + "name": "connected_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "mcp_user_credentials_user_idx": { + "name": "mcp_user_credentials_user_idx", + "columns": [ + { + "expression": "user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "mcp_user_credentials_server_id_mcp_servers_id_fk": { + "name": "mcp_user_credentials_server_id_mcp_servers_id_fk", + "tableFrom": "mcp_user_credentials", + "tableTo": "mcp_servers", + "columnsFrom": [ + "server_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "mcp_user_credentials_user_id_users_id_fk": { + "name": "mcp_user_credentials_user_id_users_id_fk", + "tableFrom": "mcp_user_credentials", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "mcp_user_credentials_credential_id_credentials_id_fk": { + "name": "mcp_user_credentials_credential_id_credentials_id_fk", + "tableFrom": "mcp_user_credentials", + "tableTo": "credentials", + "columnsFrom": [ + "credential_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "no action", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "mcp_user_credentials_server_id_user_id_pk": { + "name": "mcp_user_credentials_server_id_user_id_pk", + "columns": [ + "server_id", + "user_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.pending_authorizations": { + "name": "pending_authorizations", + "schema": "", + "columns": { + "actor_id": { + "name": "actor_id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "server_id": { + "name": "server_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "action": { + "name": "action", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "holder": { + "name": "holder", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "vendor_user_id": { + "name": "vendor_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "auth_id": { + "name": "auth_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "completed_at": { + "name": "completed_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "outcome": { + "name": "outcome", + "type": "text", + "primaryKey": false, + "notNull": false + } + }, + "indexes": {}, + "foreignKeys": { + "pending_authorizations_server_id_mcp_servers_id_fk": { + "name": "pending_authorizations_server_id_mcp_servers_id_fk", + "tableFrom": "pending_authorizations", + "tableTo": "mcp_servers", + "columnsFrom": [ + "server_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "pending_authorizations_holder_check": { + "name": "pending_authorizations_holder_check", + "value": "(\"pending_authorizations\".\"holder\" = 'person' AND \"pending_authorizations\".\"user_id\" IS NOT NULL) OR (\"pending_authorizations\".\"holder\" = 'deployment' AND \"pending_authorizations\".\"user_id\" IS NULL)" + }, + "pending_authorizations_outcome_check": { + "name": "pending_authorizations_outcome_check", + "value": "\"pending_authorizations\".\"outcome\" IS NULL OR \"pending_authorizations\".\"outcome\" IN ('completed', 'failed', 'unreconciled', 'withdrawn')" + }, + "pending_authorizations_completion_check": { + "name": "pending_authorizations_completion_check", + "value": "(\"pending_authorizations\".\"completed_at\" IS NULL) = (\"pending_authorizations\".\"outcome\" IS NULL)" + } + }, + "isRLSEnabled": false + }, + "public.plugin_grants": { + "name": "plugin_grants", + "schema": "", + "columns": { + "kind": { + "name": "kind", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "ref": { + "name": "ref", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "granted_by": { + "name": "granted_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "plugin_grants_agent_idx": { + "name": "plugin_grants_agent_idx", + "columns": [ + { + "expression": "agent_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "plugin_grants_agent_id_agents_id_fk": { + "name": "plugin_grants_agent_id_agents_id_fk", + "tableFrom": "plugin_grants", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "plugin_grants_kind_ref_agent_id_pk": { + "name": "plugin_grants_kind_ref_agent_id_pk", + "columns": [ + "kind", + "ref", + "agent_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.sandboxed_components": { + "name": "sandboxed_components", + "schema": "", + "columns": { + "name": { + "name": "name", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "title": { + "name": "title", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "draft_description": { + "name": "draft_description", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "''" + }, + "draft_html": { + "name": "draft_html", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "''" + }, + "draft_css": { + "name": "draft_css", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "''" + }, + "draft_js_functions": { + "name": "draft_js_functions", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "''" + }, + "draft_argument_schema": { + "name": "draft_argument_schema", + "type": "jsonb", + "primaryKey": false, + "notNull": true, + "default": "'{}'::jsonb" + }, + "published_description": { + "name": "published_description", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "published_html": { + "name": "published_html", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "published_css": { + "name": "published_css", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "published_js_functions": { + "name": "published_js_functions", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "published_argument_schema": { + "name": "published_argument_schema", + "type": "jsonb", + "primaryKey": false, + "notNull": false + }, + "sample_arguments": { + "name": "sample_arguments", + "type": "jsonb", + "primaryKey": false, + "notNull": true, + "default": "'{}'::jsonb" + }, + "revision": { + "name": "revision", + "type": "integer", + "primaryKey": false, + "notNull": true, + "default": 0 + }, + "published": { + "name": "published", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": false + }, + "published_at": { + "name": "published_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "authored_by": { + "name": "authored_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.skill_tools": { + "name": "skill_tools", + "schema": "", + "columns": { + "skill_id": { + "name": "skill_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "ref": { + "name": "ref", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "declared_by": { + "name": "declared_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "skill_tools_ref_idx": { + "name": "skill_tools_ref_idx", + "columns": [ + { + "expression": "ref", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "skill_tools_skill_id_skills_id_fk": { + "name": "skill_tools_skill_id_skills_id_fk", + "tableFrom": "skill_tools", + "tableTo": "skills", + "columnsFrom": [ + "skill_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "skill_tools_skill_id_ref_pk": { + "name": "skill_tools_skill_id_ref_pk", + "columns": [ + "skill_id", + "ref" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.skills": { + "name": "skills", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "slug": { + "name": "slug", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "title": { + "name": "title", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "summary": { + "name": "summary", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "instructions": { + "name": "instructions", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "origin": { + "name": "origin", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'yours'" + }, + "installed_by": { + "name": "installed_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "skills_slug_key": { + "name": "skills_slug_key", + "columns": [ + { + "expression": "slug", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "concurrently": false, + "method": "btree", + "with": {} + }, + "skills_owner_idx": { + "name": "skills_owner_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "skills_owner_user_id_users_id_fk": { + "name": "skills_owner_user_id_users_id_fk", + "tableFrom": "skills", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.work_items": { + "name": "work_items", + "schema": "", + "columns": { + "kind": { + "name": "kind", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "key": { + "name": "key", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "run_at": { + "name": "run_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "claimed_by": { + "name": "claimed_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "lease_until": { + "name": "lease_until", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "attempts": { + "name": "attempts", + "type": "integer", + "primaryKey": false, + "notNull": true, + "default": 0 + }, + "finished_at": { + "name": "finished_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "last_error": { + "name": "last_error", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "payload": { + "name": "payload", + "type": "jsonb", + "primaryKey": false, + "notNull": true, + "default": "'{}'::jsonb" + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "work_items_claimable_idx": { + "name": "work_items_claimable_idx", + "columns": [ + { + "expression": "kind", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "run_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": {}, + "compositePrimaryKeys": { + "work_items_kind_key_pk": { + "name": "work_items_kind_key_pk", + "columns": [ + "kind", + "key" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.voice_sessions": { + "name": "voice_sessions", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "channel_id": { + "name": "channel_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "anchor_message_id": { + "name": "anchor_message_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "started_at": { + "name": "started_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + }, + "ended_at": { + "name": "ended_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + }, + "duration_seconds": { + "name": "duration_seconds", + "type": "integer", + "primaryKey": false, + "notNull": true + }, + "transcript": { + "name": "transcript", + "type": "jsonb", + "primaryKey": false, + "notNull": true + }, + "summary": { + "name": "summary", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "summary_status": { + "name": "summary_status", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'failed'" + } + }, + "indexes": { + "voice_sessions_channel_started_idx": { + "name": "voice_sessions_channel_started_idx", + "columns": [ + { + "expression": "channel_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "started_at", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "voice_sessions_channel_id_channels_id_fk": { + "name": "voice_sessions_channel_id_channels_id_fk", + "tableFrom": "voice_sessions", + "tableTo": "channels", + "columnsFrom": [ + "channel_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "voice_sessions_user_id_users_id_fk": { + "name": "voice_sessions_user_id_users_id_fk", + "tableFrom": "voice_sessions", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "voice_sessions_duration_check": { + "name": "voice_sessions_duration_check", + "value": "\"voice_sessions\".\"duration_seconds\" >= 0" + }, + "voice_sessions_summary_check": { + "name": "voice_sessions_summary_check", + "value": "(\"voice_sessions\".\"summary_status\" = 'ready' AND \"voice_sessions\".\"summary\" IS NOT NULL) OR (\"voice_sessions\".\"summary_status\" = 'failed' AND \"voice_sessions\".\"summary\" IS NULL)" + } + }, + "isRLSEnabled": false + }, + "public.learning_settings": { + "name": "learning_settings", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "settings": { + "name": "settings", + "type": "jsonb", + "primaryKey": false, + "notNull": true + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.learning_thread_bindings": { + "name": "learning_thread_bindings", + "schema": "", + "columns": { + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "thread_id": { + "name": "thread_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "container_id": { + "name": "container_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": {}, + "compositePrimaryKeys": { + "learning_thread_bindings_user_id_thread_id_pk": { + "name": "learning_thread_bindings_user_id_thread_id_pk", + "columns": [ + "user_id", + "thread_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.responsibilities": { + "name": "responsibilities", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "channel_id": { + "name": "channel_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "thread_id": { + "name": "thread_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "title": { + "name": "title", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "instruction": { + "name": "instruction", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "success_criteria": { + "name": "success_criteria", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "status": { + "name": "status", + "type": "responsibility_status", + "typeSchema": "public", + "primaryKey": false, + "notNull": true, + "default": "'active'" + }, + "progress": { + "name": "progress", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "''" + }, + "last_result": { + "name": "last_result", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "subscriptions": { + "name": "subscriptions", + "type": "jsonb", + "primaryKey": false, + "notNull": true, + "default": "'[]'::jsonb" + }, + "completed_at": { + "name": "completed_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "responsibilities_owner_status_idx": { + "name": "responsibilities_owner_status_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "status", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "responsibilities_owner_user_id_users_id_fk": { + "name": "responsibilities_owner_user_id_users_id_fk", + "tableFrom": "responsibilities", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "responsibilities_agent_id_agents_id_fk": { + "name": "responsibilities_agent_id_agents_id_fk", + "tableFrom": "responsibilities", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.responsibility_events": { + "name": "responsibility_events", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "source": { + "name": "source", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "external_id": { + "name": "external_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "type": { + "name": "type", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "payload": { + "name": "payload", + "type": "jsonb", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "responsibility_events_source_id_idx": { + "name": "responsibility_events_source_id_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "source", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "external_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "responsibility_events_owner_user_id_users_id_fk": { + "name": "responsibility_events_owner_user_id_users_id_fk", + "tableFrom": "responsibility_events", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.responsibility_runs": { + "name": "responsibility_runs", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "responsibility_id": { + "name": "responsibility_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "event_id": { + "name": "event_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "status": { + "name": "status", + "type": "responsibility_run_status", + "typeSchema": "public", + "primaryKey": false, + "notNull": true, + "default": "'queued'" + }, + "reply_text": { + "name": "reply_text", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "error": { + "name": "error", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "waiting": { + "name": "waiting", + "type": "jsonb", + "primaryKey": false, + "notNull": false + }, + "continuation": { + "name": "continuation", + "type": "jsonb", + "primaryKey": false, + "notNull": false + }, + "started_at": { + "name": "started_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "finished_at": { + "name": "finished_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "responsibility_runs_event_idx": { + "name": "responsibility_runs_event_idx", + "columns": [ + { + "expression": "responsibility_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "event_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "concurrently": false, + "method": "btree", + "with": {} + }, + "responsibility_runs_status_idx": { + "name": "responsibility_runs_status_idx", + "columns": [ + { + "expression": "status", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "created_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "responsibility_runs_responsibility_id_responsibilities_id_fk": { + "name": "responsibility_runs_responsibility_id_responsibilities_id_fk", + "tableFrom": "responsibility_runs", + "tableTo": "responsibilities", + "columnsFrom": [ + "responsibility_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "responsibility_runs_event_id_responsibility_events_id_fk": { + "name": "responsibility_runs_event_id_responsibility_events_id_fk", + "tableFrom": "responsibility_runs", + "tableTo": "responsibility_events", + "columnsFrom": [ + "event_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.responsibility_source_bindings": { + "name": "responsibility_source_bindings", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "source": { + "name": "source", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "repository": { + "name": "repository", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "credential_id": { + "name": "credential_id", + "type": "uuid", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "responsibility_source_bindings_owner_idx": { + "name": "responsibility_source_bindings_owner_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "responsibility_source_bindings_owner_user_id_users_id_fk": { + "name": "responsibility_source_bindings_owner_user_id_users_id_fk", + "tableFrom": "responsibility_source_bindings", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "responsibility_source_bindings_credential_id_credentials_id_fk": { + "name": "responsibility_source_bindings_credential_id_credentials_id_fk", + "tableFrom": "responsibility_source_bindings", + "tableTo": "credentials", + "columnsFrom": [ + "credential_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "no action", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.responsibility_triggers": { + "name": "responsibility_triggers", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "responsibility_id": { + "name": "responsibility_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "kind": { + "name": "kind", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "config": { + "name": "config", + "type": "jsonb", + "primaryKey": false, + "notNull": true + }, + "credential_id": { + "name": "credential_id", + "type": "uuid", + "primaryKey": false, + "notNull": false + }, + "enabled": { + "name": "enabled", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "responsibility_triggers_owner_idx": { + "name": "responsibility_triggers_owner_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "responsibility_triggers_responsibility_idx": { + "name": "responsibility_triggers_responsibility_idx", + "columns": [ + { + "expression": "responsibility_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "responsibility_triggers_kind_idx": { + "name": "responsibility_triggers_kind_idx", + "columns": [ + { + "expression": "kind", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "responsibility_triggers_owner_user_id_users_id_fk": { + "name": "responsibility_triggers_owner_user_id_users_id_fk", + "tableFrom": "responsibility_triggers", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "responsibility_triggers_responsibility_id_responsibilities_id_fk": { + "name": "responsibility_triggers_responsibility_id_responsibilities_id_fk", + "tableFrom": "responsibility_triggers", + "tableTo": "responsibilities", + "columnsFrom": [ + "responsibility_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "responsibility_triggers_credential_id_credentials_id_fk": { + "name": "responsibility_triggers_credential_id_credentials_id_fk", + "tableFrom": "responsibility_triggers", + "tableTo": "credentials", + "columnsFrom": [ + "credential_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "no action", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.approval_preferences": { + "name": "approval_preferences", + "schema": "", + "columns": { + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "enabled": { + "name": "enabled", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": false + }, + "auto_review": { + "name": "auto_review", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": false + }, + "host_commands": { + "name": "host_commands", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'ask'" + } + }, + "indexes": {}, + "foreignKeys": { + "approval_preferences_owner_user_id_users_id_fk": { + "name": "approval_preferences_owner_user_id_users_id_fk", + "tableFrom": "approval_preferences", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "approval_preferences_host_commands_check": { + "name": "approval_preferences_host_commands_check", + "value": "\"approval_preferences\".\"host_commands\" IN ('ask', 'allow', 'never')" + } + }, + "isRLSEnabled": false + }, + "public.approval_requests": { + "name": "approval_requests", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "run_id": { + "name": "run_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "tool_call_id": { + "name": "tool_call_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "action_digest": { + "name": "action_digest", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "action": { + "name": "action", + "type": "jsonb", + "primaryKey": false, + "notNull": true + }, + "status": { + "name": "status", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'pending'" + }, + "decision": { + "name": "decision", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "result": { + "name": "result", + "type": "jsonb", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "decided_at": { + "name": "decided_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "consumed_at": { + "name": "consumed_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "completed_at": { + "name": "completed_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + } + }, + "indexes": { + "approval_requests_action_idx": { + "name": "approval_requests_action_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "run_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "tool_call_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "concurrently": false, + "method": "btree", + "with": {} + }, + "approval_requests_inbox_idx": { + "name": "approval_requests_inbox_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "status", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "approval_requests_owner_user_id_users_id_fk": { + "name": "approval_requests_owner_user_id_users_id_fk", + "tableFrom": "approval_requests", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "approval_status_check": { + "name": "approval_status_check", + "value": "\"approval_requests\".\"status\" IN ('pending', 'approved', 'denied', 'consumed', 'completed')" + }, + "approval_decision_check": { + "name": "approval_decision_check", + "value": "\"approval_requests\".\"decision\" IN ('allow_once', 'allow_always', 'deny', 'handled')" + } + }, + "isRLSEnabled": false + }, + "public.approval_rules": { + "name": "approval_rules", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "bot_id": { + "name": "bot_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "tool_ref": { + "name": "tool_ref", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "effect": { + "name": "effect", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "scope": { + "name": "scope", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "behaviour": { + "name": "behaviour", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'allow'" + }, + "revoked_at": { + "name": "revoked_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "approval_rules_owner_idx": { + "name": "approval_rules_owner_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "approval_rules_owner_user_id_users_id_fk": { + "name": "approval_rules_owner_user_id_users_id_fk", + "tableFrom": "approval_rules", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "approval_rules_behaviour_check": { + "name": "approval_rules_behaviour_check", + "value": "\"approval_rules\".\"behaviour\" IN ('allow', 'pre_approved', 'ask', 'hand_off')" + } + }, + "isRLSEnabled": false + }, + "public.approval_team_rules": { + "name": "approval_team_rules", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "bot_id": { + "name": "bot_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "tool_ref": { + "name": "tool_ref", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "effect": { + "name": "effect", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "scope": { + "name": "scope", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "behaviour": { + "name": "behaviour", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "created_by": { + "name": "created_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "revoked_at": { + "name": "revoked_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "approval_team_rules_created_by_users_id_fk": { + "name": "approval_team_rules_created_by_users_id_fk", + "tableFrom": "approval_team_rules", + "tableTo": "users", + "columnsFrom": [ + "created_by" + ], + "columnsTo": [ + "id" + ], + "onDelete": "set null", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "approval_team_rules_behaviour_check": { + "name": "approval_team_rules_behaviour_check", + "value": "\"approval_team_rules\".\"behaviour\" IN ('allow', 'pre_approved', 'ask', 'hand_off')" + } + }, + "isRLSEnabled": false + }, + "public.approval_team_settings": { + "name": "approval_team_settings", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "enforce_auto_review": { + "name": "enforce_auto_review", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": false + }, + "custom_rules_enabled": { + "name": "custom_rules_enabled", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": true + }, + "host_commands_cap": { + "name": "host_commands_cap", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'allow'" + }, + "updated_by": { + "name": "updated_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "approval_team_settings_updated_by_users_id_fk": { + "name": "approval_team_settings_updated_by_users_id_fk", + "tableFrom": "approval_team_settings", + "tableTo": "users", + "columnsFrom": [ + "updated_by" + ], + "columnsTo": [ + "id" + ], + "onDelete": "set null", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "approval_team_settings_host_commands_cap_check": { + "name": "approval_team_settings_host_commands_cap_check", + "value": "\"approval_team_settings\".\"host_commands_cap\" IN ('ask', 'allow', 'never')" + } + }, + "isRLSEnabled": false + }, + "public.memory_sources": { + "name": "memory_sources", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "tool_ref": { + "name": "tool_ref", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "title": { + "name": "title", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "args": { + "name": "args", + "type": "jsonb", + "primaryKey": false, + "notNull": true, + "default": "'{}'::jsonb" + }, + "enabled": { + "name": "enabled", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": true + }, + "sync_status": { + "name": "sync_status", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'idle'" + }, + "sync_error": { + "name": "sync_error", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "last_sync_at": { + "name": "last_sync_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "next_sync_at": { + "name": "next_sync_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "memory_sources_owner_idx": { + "name": "memory_sources_owner_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "memory_sources_due_idx": { + "name": "memory_sources_due_idx", + "columns": [ + { + "expression": "enabled", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "next_sync_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "memory_sources_owner_user_id_users_id_fk": { + "name": "memory_sources_owner_user_id_users_id_fk", + "tableFrom": "memory_sources", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "memory_sources_agent_id_agents_id_fk": { + "name": "memory_sources_agent_id_agents_id_fk", + "tableFrom": "memory_sources", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.personal_memories": { + "name": "personal_memories", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "source_id": { + "name": "source_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "external_id": { + "name": "external_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "import_digest": { + "name": "import_digest", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "content": { + "name": "content", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "provenance": { + "name": "provenance", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "enabled": { + "name": "enabled", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": true + }, + "review_state": { + "name": "review_state", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'unreviewed'" + }, + "deleted_at": { + "name": "deleted_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "formed_by": { + "name": "formed_by", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'person'" + }, + "formed_by_agent_id": { + "name": "formed_by_agent_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "source_app": { + "name": "source_app", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "source_ref": { + "name": "source_ref", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "source_link": { + "name": "source_link", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "observed_at": { + "name": "observed_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "intelligence_memory_id": { + "name": "intelligence_memory_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "intelligence_digest": { + "name": "intelligence_digest", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "personal_memories_owner_idx": { + "name": "personal_memories_owner_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "enabled", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "personal_memories_intelligence_idx": { + "name": "personal_memories_intelligence_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "intelligence_memory_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "personal_memories_formed_idx": { + "name": "personal_memories_formed_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "formed_by_agent_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "personal_memories_import_idx": { + "name": "personal_memories_import_idx", + "columns": [ + { + "expression": "source_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "external_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "concurrently": false, + "method": "btree", + "with": {} + }, + "personal_memories_formed_digest_idx": { + "name": "personal_memories_formed_digest_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "import_digest", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "where": "\"personal_memories\".\"formed_by\" = 'bot'", + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "personal_memories_owner_user_id_users_id_fk": { + "name": "personal_memories_owner_user_id_users_id_fk", + "tableFrom": "personal_memories", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "personal_memories_source_id_memory_sources_id_fk": { + "name": "personal_memories_source_id_memory_sources_id_fk", + "tableFrom": "personal_memories", + "tableTo": "memory_sources", + "columnsFrom": [ + "source_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "personal_memories_formed_by_agent_id_agents_id_fk": { + "name": "personal_memories_formed_by_agent_id_agents_id_fk", + "tableFrom": "personal_memories", + "tableTo": "agents", + "columnsFrom": [ + "formed_by_agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.default_opt_outs": { + "name": "default_opt_outs", + "schema": "", + "columns": { + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "feature": { + "name": "feature", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "scope": { + "name": "scope", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "''" + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "default_opt_outs_owner_user_id_users_id_fk": { + "name": "default_opt_outs_owner_user_id_users_id_fk", + "tableFrom": "default_opt_outs", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "default_opt_outs_agent_id_agents_id_fk": { + "name": "default_opt_outs_agent_id_agents_id_fk", + "tableFrom": "default_opt_outs", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "default_opt_outs_owner_user_id_agent_id_feature_scope_pk": { + "name": "default_opt_outs_owner_user_id_agent_id_feature_scope_pk", + "columns": [ + "owner_user_id", + "agent_id", + "feature", + "scope" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "default_opt_outs_feature_check": { + "name": "default_opt_outs_feature_check", + "value": "\"default_opt_outs\".\"feature\" IN ('memory_source', 'proactive_research')" + } + }, + "isRLSEnabled": false + }, + "public.proactive_settings": { + "name": "proactive_settings", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "channel_id": { + "name": "channel_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "thread_id": { + "name": "thread_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "focus": { + "name": "focus", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "''" + }, + "enabled": { + "name": "enabled", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": true + }, + "interval_minutes": { + "name": "interval_minutes", + "type": "integer", + "primaryKey": false, + "notNull": true, + "default": 240 + }, + "next_run_at": { + "name": "next_run_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "last_run_at": { + "name": "last_run_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "last_status": { + "name": "last_status", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'idle'" + }, + "last_error": { + "name": "last_error", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "proactive_settings_owner_agent_idx": { + "name": "proactive_settings_owner_agent_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "agent_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "concurrently": false, + "method": "btree", + "with": {} + }, + "proactive_settings_due_idx": { + "name": "proactive_settings_due_idx", + "columns": [ + { + "expression": "enabled", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "next_run_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "proactive_settings_owner_user_id_users_id_fk": { + "name": "proactive_settings_owner_user_id_users_id_fk", + "tableFrom": "proactive_settings", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "proactive_settings_agent_id_agents_id_fk": { + "name": "proactive_settings_agent_id_agents_id_fk", + "tableFrom": "proactive_settings", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "proactive_settings_interval_check": { + "name": "proactive_settings_interval_check", + "value": "\"proactive_settings\".\"interval_minutes\" >= 60 AND \"proactive_settings\".\"interval_minutes\" <= 1440" + }, + "proactive_settings_status_check": { + "name": "proactive_settings_status_check", + "value": "\"proactive_settings\".\"last_status\" IN ('idle', 'running', 'succeeded', 'error')" + } + }, + "isRLSEnabled": false + }, + "public.proactive_suggestions": { + "name": "proactive_suggestions", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "setting_id": { + "name": "setting_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "run_id": { + "name": "run_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "title": { + "name": "title", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "detail": { + "name": "detail", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "source_app": { + "name": "source_app", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "source_ref": { + "name": "source_ref", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "source_link": { + "name": "source_link", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "status": { + "name": "status", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'open'" + }, + "delivered_at": { + "name": "delivered_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "resolved_at": { + "name": "resolved_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "proactive_suggestions_owner_idx": { + "name": "proactive_suggestions_owner_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "status", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "created_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "proactive_suggestions_run_idx": { + "name": "proactive_suggestions_run_idx", + "columns": [ + { + "expression": "run_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "proactive_suggestions_owner_user_id_users_id_fk": { + "name": "proactive_suggestions_owner_user_id_users_id_fk", + "tableFrom": "proactive_suggestions", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "proactive_suggestions_agent_id_agents_id_fk": { + "name": "proactive_suggestions_agent_id_agents_id_fk", + "tableFrom": "proactive_suggestions", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "proactive_suggestions_setting_id_proactive_settings_id_fk": { + "name": "proactive_suggestions_setting_id_proactive_settings_id_fk", + "tableFrom": "proactive_suggestions", + "tableTo": "proactive_settings", + "columnsFrom": [ + "setting_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "proactive_suggestions_status_check": { + "name": "proactive_suggestions_status_check", + "value": "\"proactive_suggestions\".\"status\" IN ('open', 'dismissed', 'started')" + } + }, + "isRLSEnabled": false + }, + "public.demonstrations": { + "name": "demonstrations", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "bot_id": { + "name": "bot_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "title": { + "name": "title", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "status": { + "name": "status", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'recording'" + }, + "actions": { + "name": "actions", + "type": "jsonb", + "primaryKey": false, + "notNull": true, + "default": "'[]'::jsonb" + }, + "draft": { + "name": "draft", + "type": "jsonb", + "primaryKey": false, + "notNull": false + }, + "skill_slug": { + "name": "skill_slug", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "finished_at": { + "name": "finished_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + } + }, + "indexes": { + "demonstrations_owner_idx": { + "name": "demonstrations_owner_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "created_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "demonstrations_active_bot_idx": { + "name": "demonstrations_active_bot_idx", + "columns": [ + { + "expression": "bot_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "where": "\"demonstrations\".\"status\" = 'recording'", + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "demonstrations_owner_user_id_users_id_fk": { + "name": "demonstrations_owner_user_id_users_id_fk", + "tableFrom": "demonstrations", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "demonstrations_bot_id_agents_id_fk": { + "name": "demonstrations_bot_id_agents_id_fk", + "tableFrom": "demonstrations", + "tableTo": "agents", + "columnsFrom": [ + "bot_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.delivery_bindings": { + "name": "delivery_bindings", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "channel_id": { + "name": "channel_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "thread_id": { + "name": "thread_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "transport": { + "name": "transport", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "identity": { + "name": "identity", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "realm": { + "name": "realm", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "address": { + "name": "address", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "mention_id": { + "name": "mention_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "enabled": { + "name": "enabled", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": true + }, + "opted_out_at": { + "name": "opted_out_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "delivery_binding_identity_idx": { + "name": "delivery_binding_identity_idx", + "columns": [ + { + "expression": "transport", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "realm", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "identity", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "concurrently": false, + "method": "btree", + "with": {} + }, + "delivery_bindings_owner_idx": { + "name": "delivery_bindings_owner_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "delivery_bindings_owner_user_id_users_id_fk": { + "name": "delivery_bindings_owner_user_id_users_id_fk", + "tableFrom": "delivery_bindings", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "delivery_bindings_channel_id_channels_id_fk": { + "name": "delivery_bindings_channel_id_channels_id_fk", + "tableFrom": "delivery_bindings", + "tableTo": "channels", + "columnsFrom": [ + "channel_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "delivery_bindings_agent_id_agents_id_fk": { + "name": "delivery_bindings_agent_id_agents_id_fk", + "tableFrom": "delivery_bindings", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.delivery_challenges": { + "name": "delivery_challenges", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "channel_id": { + "name": "channel_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "thread_id": { + "name": "thread_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "transport": { + "name": "transport", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "address": { + "name": "address", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "expires_at": { + "name": "expires_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + }, + "consumed_at": { + "name": "consumed_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "delivery_challenges_owner_user_id_users_id_fk": { + "name": "delivery_challenges_owner_user_id_users_id_fk", + "tableFrom": "delivery_challenges", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "delivery_challenges_channel_id_channels_id_fk": { + "name": "delivery_challenges_channel_id_channels_id_fk", + "tableFrom": "delivery_challenges", + "tableTo": "channels", + "columnsFrom": [ + "channel_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "delivery_challenges_agent_id_agents_id_fk": { + "name": "delivery_challenges_agent_id_agents_id_fk", + "tableFrom": "delivery_challenges", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.delivery_inbox": { + "name": "delivery_inbox", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "channel_id": { + "name": "channel_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "thread_id": { + "name": "thread_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "binding_id": { + "name": "binding_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "source": { + "name": "source", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "realm": { + "name": "realm", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "external_id": { + "name": "external_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "text": { + "name": "text", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "state": { + "name": "state", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'queued'" + }, + "error": { + "name": "error", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "delivery_inbox_dedupe_idx": { + "name": "delivery_inbox_dedupe_idx", + "columns": [ + { + "expression": "source", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "realm", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "external_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "concurrently": false, + "method": "btree", + "with": {} + }, + "delivery_inbox_owner_idx": { + "name": "delivery_inbox_owner_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "created_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "delivery_inbox_owner_user_id_users_id_fk": { + "name": "delivery_inbox_owner_user_id_users_id_fk", + "tableFrom": "delivery_inbox", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "delivery_inbox_channel_id_channels_id_fk": { + "name": "delivery_inbox_channel_id_channels_id_fk", + "tableFrom": "delivery_inbox", + "tableTo": "channels", + "columnsFrom": [ + "channel_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "delivery_inbox_agent_id_agents_id_fk": { + "name": "delivery_inbox_agent_id_agents_id_fk", + "tableFrom": "delivery_inbox", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.delivery_outbox": { + "name": "delivery_outbox", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "channel_id": { + "name": "channel_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "thread_id": { + "name": "thread_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "dedupe_key": { + "name": "dedupe_key", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "binding_id": { + "name": "binding_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "device_id": { + "name": "device_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "transport": { + "name": "transport", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "text": { + "name": "text", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "kind": { + "name": "kind", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "request_id": { + "name": "request_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "state": { + "name": "state", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'queued'" + }, + "provider_id": { + "name": "provider_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "error": { + "name": "error", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "delivery_outbox_owner_idx": { + "name": "delivery_outbox_owner_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "created_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "delivery_outbox_provider_idx": { + "name": "delivery_outbox_provider_idx", + "columns": [ + { + "expression": "transport", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "provider_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "delivery_outbox_owner_user_id_users_id_fk": { + "name": "delivery_outbox_owner_user_id_users_id_fk", + "tableFrom": "delivery_outbox", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "delivery_outbox_channel_id_channels_id_fk": { + "name": "delivery_outbox_channel_id_channels_id_fk", + "tableFrom": "delivery_outbox", + "tableTo": "channels", + "columnsFrom": [ + "channel_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "delivery_outbox_agent_id_agents_id_fk": { + "name": "delivery_outbox_agent_id_agents_id_fk", + "tableFrom": "delivery_outbox", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": { + "delivery_outbox_dedupe_key_unique": { + "name": "delivery_outbox_dedupe_key_unique", + "nullsNotDistinct": false, + "columns": [ + "dedupe_key" + ] + } + }, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.push_devices": { + "name": "push_devices", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "token": { + "name": "token", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "project_id": { + "name": "project_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "platform": { + "name": "platform", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "enabled": { + "name": "enabled", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "push_devices_owner_idx": { + "name": "push_devices_owner_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "push_devices_owner_user_id_users_id_fk": { + "name": "push_devices_owner_user_id_users_id_fk", + "tableFrom": "push_devices", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": { + "push_devices_token_unique": { + "name": "push_devices_token_unique", + "nullsNotDistinct": false, + "columns": [ + "token" + ] + } + }, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.group_bot_threads": { + "name": "group_bot_threads", + "schema": "", + "columns": { + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "channel_id": { + "name": "channel_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "thread_id": { + "name": "thread_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "group_bot_threads_thread_idx": { + "name": "group_bot_threads_thread_idx", + "columns": [ + { + "expression": "thread_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "group_bot_threads_owner_user_id_users_id_fk": { + "name": "group_bot_threads_owner_user_id_users_id_fk", + "tableFrom": "group_bot_threads", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "group_bot_threads_channel_id_channels_id_fk": { + "name": "group_bot_threads_channel_id_channels_id_fk", + "tableFrom": "group_bot_threads", + "tableTo": "channels", + "columnsFrom": [ + "channel_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "group_bot_threads_owner_user_id_channel_id_agent_id_pk": { + "name": "group_bot_threads_owner_user_id_channel_id_agent_id_pk", + "columns": [ + "owner_user_id", + "channel_id", + "agent_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.group_messages": { + "name": "group_messages", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "channel_id": { + "name": "channel_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "thread_id": { + "name": "thread_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "text": { + "name": "text", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "status": { + "name": "status", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'completed'" + }, + "details": { + "name": "details", + "type": "jsonb", + "primaryKey": false, + "notNull": true, + "default": "'{}'::jsonb" + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "group_messages_channel_idx": { + "name": "group_messages_channel_idx", + "columns": [ + { + "expression": "channel_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "created_at", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "group_messages_channel_id_channels_id_fk": { + "name": "group_messages_channel_id_channels_id_fk", + "tableFrom": "group_messages", + "tableTo": "channels", + "columnsFrom": [ + "channel_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "group_messages_owner_user_id_users_id_fk": { + "name": "group_messages_owner_user_id_users_id_fk", + "tableFrom": "group_messages", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "group_messages_status_check": { + "name": "group_messages_status_check", + "value": "\"group_messages\".\"status\" IN ('queued', 'running', 'waiting', 'completed', 'failed')" + } + }, + "isRLSEnabled": false + }, + "public.action_records": { + "name": "action_records", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "uuid", + "primaryKey": true, + "notNull": true, + "default": "gen_random_uuid()" + }, + "surface": { + "name": "surface", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "bot_id": { + "name": "bot_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "actor_user_id": { + "name": "actor_user_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "tool_name": { + "name": "tool_name", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "command": { + "name": "command", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "outcome": { + "name": "outcome", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "action_records_created_idx": { + "name": "action_records_created_idx", + "columns": [ + { + "expression": "created_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "action_records_bot_idx": { + "name": "action_records_bot_idx", + "columns": [ + { + "expression": "bot_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "created_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "action_records_surface_check": { + "name": "action_records_surface_check", + "value": "\"action_records\".\"surface\" IN ('cloud', 'local')" + } + }, + "isRLSEnabled": false + }, + "public.capability_settings": { + "name": "capability_settings", + "schema": "", + "columns": { + "scope_kind": { + "name": "scope_kind", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "scope_id": { + "name": "scope_id", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "''" + }, + "capability": { + "name": "capability", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "allowed": { + "name": "allowed", + "type": "boolean", + "primaryKey": false, + "notNull": true + }, + "updated_by": { + "name": "updated_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": {}, + "compositePrimaryKeys": { + "capability_settings_scope_kind_scope_id_capability_pk": { + "name": "capability_settings_scope_kind_scope_id_capability_pk", + "columns": [ + "scope_kind", + "scope_id", + "capability" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "capability_settings_scope_kind_check": { + "name": "capability_settings_scope_kind_check", + "value": "\"capability_settings\".\"scope_kind\" IN ('organization', 'role', 'group')" + } + }, + "isRLSEnabled": false + }, + "public.enterprise_settings": { + "name": "enterprise_settings", + "schema": "", + "columns": { + "key": { + "name": "key", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "value": { + "name": "value", + "type": "jsonb", + "primaryKey": false, + "notNull": true + }, + "updated_by": { + "name": "updated_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.model_usage": { + "name": "model_usage", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "uuid", + "primaryKey": true, + "notNull": true, + "default": "gen_random_uuid()" + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "thread_id": { + "name": "thread_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "run_id": { + "name": "run_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "model": { + "name": "model", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "source": { + "name": "source", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "allowed": { + "name": "allowed", + "type": "boolean", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "model_usage_created_idx": { + "name": "model_usage_created_idx", + "columns": [ + { + "expression": "created_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "model_usage_model_idx": { + "name": "model_usage_model_idx", + "columns": [ + { + "expression": "model", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "created_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "model_usage_source_check": { + "name": "model_usage_source_check", + "value": "\"model_usage\".\"source\" IN ('configured', 'observed', 'unknown')" + } + }, + "isRLSEnabled": false + }, + "public.network_policies": { + "name": "network_policies", + "schema": "", + "columns": { + "scope_kind": { + "name": "scope_kind", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "scope_id": { + "name": "scope_id", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "''" + }, + "mode": { + "name": "mode", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "rules": { + "name": "rules", + "type": "jsonb", + "primaryKey": false, + "notNull": true, + "default": "'{\"entries\":[]}'::jsonb" + }, + "locked": { + "name": "locked", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": false + }, + "updated_by": { + "name": "updated_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": {}, + "compositePrimaryKeys": { + "network_policies_scope_kind_scope_id_pk": { + "name": "network_policies_scope_kind_scope_id_pk", + "columns": [ + "scope_kind", + "scope_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "network_policies_scope_kind_check": { + "name": "network_policies_scope_kind_check", + "value": "\"network_policies\".\"scope_kind\" IN ('organization', 'group')" + }, + "network_policies_mode_check": { + "name": "network_policies_mode_check", + "value": "\"network_policies\".\"mode\" IN ('allow_all', 'defaults_plus_allowlist', 'allowlist_only')" + } + }, + "isRLSEnabled": false + }, + "public.scim_connection_bindings": { + "name": "scim_connection_bindings", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "connection_id": { + "name": "connection_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "connection_key": { + "name": "connection_key", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "provisioning_domain_id": { + "name": "provisioning_domain_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + }, + "decommissioned_at": { + "name": "decommissioned_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "decommission_status": { + "name": "decommission_status", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'active'" + }, + "decommission_cursor_user_id": { + "name": "decommission_cursor_user_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "decommission_reconciled_user_count": { + "name": "decommission_reconciled_user_count", + "type": "integer", + "primaryKey": false, + "notNull": true, + "default": 0 + }, + "decommission_batch_count": { + "name": "decommission_batch_count", + "type": "integer", + "primaryKey": false, + "notNull": true, + "default": 0 + }, + "decommission_revision": { + "name": "decommission_revision", + "type": "integer", + "primaryKey": false, + "notNull": true, + "default": 0 + }, + "decommission_completed_at": { + "name": "decommission_completed_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "decommission_lease_id": { + "name": "decommission_lease_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "decommission_lease_expires_at": { + "name": "decommission_lease_expires_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + } + }, + "indexes": { + "scim_connection_bindings_connection_idx": { + "name": "scim_connection_bindings_connection_idx", + "columns": [ + { + "expression": "connection_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": { + "scim_connection_bindings_connection_key_unique": { + "name": "scim_connection_bindings_connection_key_unique", + "nullsNotDistinct": false, + "columns": [ + "connection_key" + ] + } + }, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.scim_group_members": { + "name": "scim_group_members", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "connection_id": { + "name": "connection_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "group_id": { + "name": "group_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "scim_user_id": { + "name": "scim_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "membership_key": { + "name": "membership_key", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + } + }, + "indexes": { + "scim_group_members_connection_idx": { + "name": "scim_group_members_connection_idx", + "columns": [ + { + "expression": "connection_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "scim_group_members_group_idx": { + "name": "scim_group_members_group_idx", + "columns": [ + { + "expression": "group_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "scim_group_members_scim_user_idx": { + "name": "scim_group_members_scim_user_idx", + "columns": [ + { + "expression": "scim_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "scim_group_members_group_id_scim_groups_id_fk": { + "name": "scim_group_members_group_id_scim_groups_id_fk", + "tableFrom": "scim_group_members", + "tableTo": "scim_groups", + "columnsFrom": [ + "group_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "scim_group_members_scim_user_id_scim_users_id_fk": { + "name": "scim_group_members_scim_user_id_scim_users_id_fk", + "tableFrom": "scim_group_members", + "tableTo": "scim_users", + "columnsFrom": [ + "scim_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": { + "scim_group_members_membership_key_unique": { + "name": "scim_group_members_membership_key_unique", + "nullsNotDistinct": false, + "columns": [ + "membership_key" + ] + } + }, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.scim_groups": { + "name": "scim_groups", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "connection_id": { + "name": "connection_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "provisioning_domain_id": { + "name": "provisioning_domain_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "revision": { + "name": "revision", + "type": "integer", + "primaryKey": false, + "notNull": true, + "default": 0 + }, + "display_name": { + "name": "display_name", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "display_name_key": { + "name": "display_name_key", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "external_id": { + "name": "external_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "external_id_key": { + "name": "external_id_key", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "order_key": { + "name": "order_key", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + } + }, + "indexes": { + "scim_groups_connection_idx": { + "name": "scim_groups_connection_idx", + "columns": [ + { + "expression": "connection_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "scim_groups_domain_idx": { + "name": "scim_groups_domain_idx", + "columns": [ + { + "expression": "provisioning_domain_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": { + "scim_groups_display_name_key_unique": { + "name": "scim_groups_display_name_key_unique", + "nullsNotDistinct": false, + "columns": [ + "display_name_key" + ] + }, + "scim_groups_external_id_key_unique": { + "name": "scim_groups_external_id_key_unique", + "nullsNotDistinct": false, + "columns": [ + "external_id_key" + ] + }, + "scim_groups_order_key_unique": { + "name": "scim_groups_order_key_unique", + "nullsNotDistinct": false, + "columns": [ + "order_key" + ] + } + }, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.scim_identity_tombstones": { + "name": "scim_identity_tombstones", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "connection_id": { + "name": "connection_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "provisioning_domain_id": { + "name": "provisioning_domain_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "external_id": { + "name": "external_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "external_id_key": { + "name": "external_id_key", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "profile": { + "name": "profile", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "deleted_at": { + "name": "deleted_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + } + }, + "indexes": { + "scim_identity_tombstones_connection_idx": { + "name": "scim_identity_tombstones_connection_idx", + "columns": [ + { + "expression": "connection_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "scim_identity_tombstones_domain_idx": { + "name": "scim_identity_tombstones_domain_idx", + "columns": [ + { + "expression": "provisioning_domain_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "scim_identity_tombstones_user_idx": { + "name": "scim_identity_tombstones_user_idx", + "columns": [ + { + "expression": "user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "scim_identity_tombstones_user_id_users_id_fk": { + "name": "scim_identity_tombstones_user_id_users_id_fk", + "tableFrom": "scim_identity_tombstones", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": { + "scim_identity_tombstones_external_id_key_unique": { + "name": "scim_identity_tombstones_external_id_key_unique", + "nullsNotDistinct": false, + "columns": [ + "external_id_key" + ] + } + }, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.scim_projection_grants": { + "name": "scim_projection_grants", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "connection_id": { + "name": "connection_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "provisioning_domain_id": { + "name": "provisioning_domain_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "scim_user_id": { + "name": "scim_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "source_kind": { + "name": "source_kind", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "source_id": { + "name": "source_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "source_value": { + "name": "source_value", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "role": { + "name": "role", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "grant_key": { + "name": "grant_key", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + } + }, + "indexes": { + "scim_projection_grants_connection_idx": { + "name": "scim_projection_grants_connection_idx", + "columns": [ + { + "expression": "connection_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "scim_projection_grants_domain_idx": { + "name": "scim_projection_grants_domain_idx", + "columns": [ + { + "expression": "provisioning_domain_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "scim_projection_grants_scim_user_idx": { + "name": "scim_projection_grants_scim_user_idx", + "columns": [ + { + "expression": "scim_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "scim_projection_grants_user_idx": { + "name": "scim_projection_grants_user_idx", + "columns": [ + { + "expression": "user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "scim_projection_grants_scim_user_id_scim_users_id_fk": { + "name": "scim_projection_grants_scim_user_id_scim_users_id_fk", + "tableFrom": "scim_projection_grants", + "tableTo": "scim_users", + "columnsFrom": [ + "scim_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "scim_projection_grants_user_id_users_id_fk": { + "name": "scim_projection_grants_user_id_users_id_fk", + "tableFrom": "scim_projection_grants", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": { + "scim_projection_grants_grant_key_unique": { + "name": "scim_projection_grants_grant_key_unique", + "nullsNotDistinct": false, + "columns": [ + "grant_key" + ] + } + }, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.scim_subjects": { + "name": "scim_subjects", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "profile_source_id": { + "name": "profile_source_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "revision": { + "name": "revision", + "type": "integer", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + } + }, + "indexes": { + "scim_subjects_profile_source_idx": { + "name": "scim_subjects_profile_source_idx", + "columns": [ + { + "expression": "profile_source_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "scim_subjects_user_id_users_id_fk": { + "name": "scim_subjects_user_id_users_id_fk", + "tableFrom": "scim_subjects", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": { + "scim_subjects_user_id_unique": { + "name": "scim_subjects_user_id_unique", + "nullsNotDistinct": false, + "columns": [ + "user_id" + ] + } + }, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.scim_users": { + "name": "scim_users", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "connection_id": { + "name": "connection_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "provisioning_domain_id": { + "name": "provisioning_domain_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "connection_user_key": { + "name": "connection_user_key", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "user_name": { + "name": "user_name", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "user_name_key": { + "name": "user_name_key", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "primary_email": { + "name": "primary_email", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "work_email_value_index": { + "name": "work_email_value_index", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "email_value_index": { + "name": "email_value_index", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "display_name": { + "name": "display_name", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "formatted_name": { + "name": "formatted_name", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "given_name": { + "name": "given_name", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "family_name": { + "name": "family_name", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "serialized_emails": { + "name": "serialized_emails", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "serialized_attributes": { + "name": "serialized_attributes", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "external_id": { + "name": "external_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "external_id_key": { + "name": "external_id_key", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "active": { + "name": "active", + "type": "boolean", + "primaryKey": false, + "notNull": true + }, + "order_key": { + "name": "order_key", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + } + }, + "indexes": { + "scim_users_connection_idx": { + "name": "scim_users_connection_idx", + "columns": [ + { + "expression": "connection_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "scim_users_domain_idx": { + "name": "scim_users_domain_idx", + "columns": [ + { + "expression": "provisioning_domain_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "scim_users_user_idx": { + "name": "scim_users_user_idx", + "columns": [ + { + "expression": "user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "scim_users_user_id_users_id_fk": { + "name": "scim_users_user_id_users_id_fk", + "tableFrom": "scim_users", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": { + "scim_users_connection_user_key_unique": { + "name": "scim_users_connection_user_key_unique", + "nullsNotDistinct": false, + "columns": [ + "connection_user_key" + ] + }, + "scim_users_user_name_key_unique": { + "name": "scim_users_user_name_key_unique", + "nullsNotDistinct": false, + "columns": [ + "user_name_key" + ] + }, + "scim_users_external_id_key_unique": { + "name": "scim_users_external_id_key_unique", + "nullsNotDistinct": false, + "columns": [ + "external_id_key" + ] + }, + "scim_users_order_key_unique": { + "name": "scim_users_order_key_unique", + "nullsNotDistinct": false, + "columns": [ + "order_key" + ] + } + }, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.bot_lifecycle": { + "name": "bot_lifecycle", + "schema": "", + "columns": { + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "paused_at": { + "name": "paused_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "notify": { + "name": "notify", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'all'" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "bot_lifecycle_owner_user_id_users_id_fk": { + "name": "bot_lifecycle_owner_user_id_users_id_fk", + "tableFrom": "bot_lifecycle", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "bot_lifecycle_agent_id_agents_id_fk": { + "name": "bot_lifecycle_agent_id_agents_id_fk", + "tableFrom": "bot_lifecycle", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "bot_lifecycle_owner_user_id_agent_id_pk": { + "name": "bot_lifecycle_owner_user_id_agent_id_pk", + "columns": [ + "owner_user_id", + "agent_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.update_routing_preferences": { + "name": "update_routing_preferences", + "schema": "", + "columns": { + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "kind": { + "name": "kind", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "transports": { + "name": "transports", + "type": "text[]", + "primaryKey": false, + "notNull": true, + "default": "'{}'" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "update_routing_preferences_owner_user_id_users_id_fk": { + "name": "update_routing_preferences_owner_user_id_users_id_fk", + "tableFrom": "update_routing_preferences", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "update_routing_preferences_owner_user_id_kind_pk": { + "name": "update_routing_preferences_owner_user_id_kind_pk", + "columns": [ + "owner_user_id", + "kind" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.saved_logins": { + "name": "saved_logins", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "origin": { + "name": "origin", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "username": { + "name": "username", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "encrypted_password": { + "name": "encrypted_password", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "last_used_at": { + "name": "last_used_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + } + }, + "indexes": { + "saved_logins_owner_origin_username_idx": { + "name": "saved_logins_owner_origin_username_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "origin", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "username", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "concurrently": false, + "method": "btree", + "with": {} + }, + "saved_logins_owner_idx": { + "name": "saved_logins_owner_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "saved_logins_owner_user_id_users_id_fk": { + "name": "saved_logins_owner_user_id_users_id_fk", + "tableFrom": "saved_logins", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.sign_in_requests": { + "name": "sign_in_requests", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "bot_id": { + "name": "bot_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "origin": { + "name": "origin", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "reason": { + "name": "reason", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "status": { + "name": "status", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'pending'" + }, + "method": { + "name": "method", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "outcome": { + "name": "outcome", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "thread_id": { + "name": "thread_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "tool_call_id": { + "name": "tool_call_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "control_request_id": { + "name": "control_request_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "continuation": { + "name": "continuation", + "type": "jsonb", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "expires_at": { + "name": "expires_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + }, + "resolved_at": { + "name": "resolved_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "filling_until": { + "name": "filling_until", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + } + }, + "indexes": { + "sign_in_requests_owner_idx": { + "name": "sign_in_requests_owner_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "status", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "sign_in_requests_owner_user_id_users_id_fk": { + "name": "sign_in_requests_owner_user_id_users_id_fk", + "tableFrom": "sign_in_requests", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "sign_in_requests_status_check": { + "name": "sign_in_requests_status_check", + "value": "\"sign_in_requests\".\"status\" IN ('pending', 'filling', 'code_required', 'taken_over', 'signed_in', 'failed', 'cancelled', 'expired')" + }, + "sign_in_requests_method_check": { + "name": "sign_in_requests_method_check", + "value": "\"sign_in_requests\".\"method\" IS NULL OR \"sign_in_requests\".\"method\" IN ('typed', 'saved', 'takeover')" + } + }, + "isRLSEnabled": false + }, + "public.team_bot_assignments": { + "name": "team_bot_assignments", + "schema": "", + "columns": { + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "group_name": { + "name": "group_name", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "assigned_by": { + "name": "assigned_by", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "assigned_at": { + "name": "assigned_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "team_bot_assignments_agent_id_agents_id_fk": { + "name": "team_bot_assignments_agent_id_agents_id_fk", + "tableFrom": "team_bot_assignments", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "team_bot_assignments_assigned_by_users_id_fk": { + "name": "team_bot_assignments_assigned_by_users_id_fk", + "tableFrom": "team_bot_assignments", + "tableTo": "users", + "columnsFrom": [ + "assigned_by" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "team_bot_assignments_agent_id_group_name_pk": { + "name": "team_bot_assignments_agent_id_group_name_pk", + "columns": [ + "agent_id", + "group_name" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.team_bot_audience": { + "name": "team_bot_audience", + "schema": "", + "columns": { + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "kind": { + "name": "kind", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "value": { + "name": "value", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "team_bot_audience_agent_id_agents_id_fk": { + "name": "team_bot_audience_agent_id_agents_id_fk", + "tableFrom": "team_bot_audience", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "team_bot_audience_agent_id_kind_value_pk": { + "name": "team_bot_audience_agent_id_kind_value_pk", + "columns": [ + "agent_id", + "kind", + "value" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "team_bot_audience_kind_check": { + "name": "team_bot_audience_kind_check", + "value": "\"team_bot_audience\".\"kind\" IN ('user', 'group')" + } + }, + "isRLSEnabled": false + }, + "public.team_bot_consent_defaults": { + "name": "team_bot_consent_defaults", + "schema": "", + "columns": { + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "server_id": { + "name": "server_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "team_bot_consent_defaults_user_id_users_id_fk": { + "name": "team_bot_consent_defaults_user_id_users_id_fk", + "tableFrom": "team_bot_consent_defaults", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "team_bot_consent_defaults_user_id_server_id_pk": { + "name": "team_bot_consent_defaults_user_id_server_id_pk", + "columns": [ + "user_id", + "server_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.team_bot_consents": { + "name": "team_bot_consents", + "schema": "", + "columns": { + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "server_id": { + "name": "server_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "decision": { + "name": "decision", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "team_bot_consents_user_id_users_id_fk": { + "name": "team_bot_consents_user_id_users_id_fk", + "tableFrom": "team_bot_consents", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "team_bot_consents_agent_id_agents_id_fk": { + "name": "team_bot_consents_agent_id_agents_id_fk", + "tableFrom": "team_bot_consents", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "team_bot_consents_user_id_agent_id_server_id_pk": { + "name": "team_bot_consents_user_id_agent_id_server_id_pk", + "columns": [ + "user_id", + "agent_id", + "server_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "team_bot_consents_decision_check": { + "name": "team_bot_consents_decision_check", + "value": "\"team_bot_consents\".\"decision\" IN ('always', 'once')" + } + }, + "isRLSEnabled": false + }, + "public.team_bot_publications": { + "name": "team_bot_publications", + "schema": "", + "columns": { + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "published_by": { + "name": "published_by", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "audience": { + "name": "audience", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "published_at": { + "name": "published_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "team_bot_publications_agent_id_agents_id_fk": { + "name": "team_bot_publications_agent_id_agents_id_fk", + "tableFrom": "team_bot_publications", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "team_bot_publications_published_by_users_id_fk": { + "name": "team_bot_publications_published_by_users_id_fk", + "tableFrom": "team_bot_publications", + "tableTo": "users", + "columnsFrom": [ + "published_by" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "team_bot_publications_audience_check": { + "name": "team_bot_publications_audience_check", + "value": "\"team_bot_publications\".\"audience\" IN ('team', 'people')" + } + }, + "isRLSEnabled": false + }, + "public.shared_use_approval_members": { + "name": "shared_use_approval_members", + "schema": "", + "columns": { + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "server_id": { + "name": "server_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "kind": { + "name": "kind", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "value": { + "name": "value", + "type": "text", + "primaryKey": false, + "notNull": true + } + }, + "indexes": {}, + "foreignKeys": { + "shared_use_approval_members_approval_fk": { + "name": "shared_use_approval_members_approval_fk", + "tableFrom": "shared_use_approval_members", + "tableTo": "shared_use_approvals", + "columnsFrom": [ + "agent_id", + "server_id" + ], + "columnsTo": [ + "agent_id", + "server_id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "shared_use_approval_members_agent_id_server_id_kind_value_pk": { + "name": "shared_use_approval_members_agent_id_server_id_kind_value_pk", + "columns": [ + "agent_id", + "server_id", + "kind", + "value" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "shared_use_approval_members_kind_check": { + "name": "shared_use_approval_members_kind_check", + "value": "\"shared_use_approval_members\".\"kind\" IN ('user', 'group')" + } + }, + "isRLSEnabled": false + }, + "public.shared_use_approvals": { + "name": "shared_use_approvals", + "schema": "", + "columns": { + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "server_id": { + "name": "server_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "audience": { + "name": "audience", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "outside_input": { + "name": "outside_input", + "type": "boolean", + "primaryKey": false, + "notNull": true + }, + "approved_by": { + "name": "approved_by", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "approved_at": { + "name": "approved_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "shared_use_approvals_agent_id_agents_id_fk": { + "name": "shared_use_approvals_agent_id_agents_id_fk", + "tableFrom": "shared_use_approvals", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "shared_use_approvals_server_id_mcp_servers_id_fk": { + "name": "shared_use_approvals_server_id_mcp_servers_id_fk", + "tableFrom": "shared_use_approvals", + "tableTo": "mcp_servers", + "columnsFrom": [ + "server_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "shared_use_approvals_agent_id_server_id_pk": { + "name": "shared_use_approvals_agent_id_server_id_pk", + "columns": [ + "agent_id", + "server_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "shared_use_approvals_audience_check": { + "name": "shared_use_approvals_audience_check", + "value": "\"shared_use_approvals\".\"audience\" IN ('owner', 'people', 'team')" + } + }, + "isRLSEnabled": false + }, + "public.shared_use_requests": { + "name": "shared_use_requests", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "server_id": { + "name": "server_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "proposed_audience": { + "name": "proposed_audience", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "proposed_outside_input": { + "name": "proposed_outside_input", + "type": "boolean", + "primaryKey": false, + "notNull": true + }, + "proposed_members": { + "name": "proposed_members", + "type": "jsonb", + "primaryKey": false, + "notNull": true, + "default": "'[]'::jsonb" + }, + "reason": { + "name": "reason", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "requested_by": { + "name": "requested_by", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "status": { + "name": "status", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'pending'" + }, + "decided_by": { + "name": "decided_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "decided_at": { + "name": "decided_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "shared_use_requests_pending_idx": { + "name": "shared_use_requests_pending_idx", + "columns": [ + { + "expression": "agent_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "server_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "where": "\"shared_use_requests\".\"status\" = 'pending'", + "concurrently": false, + "method": "btree", + "with": {} + }, + "shared_use_requests_status_idx": { + "name": "shared_use_requests_status_idx", + "columns": [ + { + "expression": "status", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "shared_use_requests_agent_id_agents_id_fk": { + "name": "shared_use_requests_agent_id_agents_id_fk", + "tableFrom": "shared_use_requests", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "shared_use_requests_server_id_mcp_servers_id_fk": { + "name": "shared_use_requests_server_id_mcp_servers_id_fk", + "tableFrom": "shared_use_requests", + "tableTo": "mcp_servers", + "columnsFrom": [ + "server_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "shared_use_requests_audience_check": { + "name": "shared_use_requests_audience_check", + "value": "\"shared_use_requests\".\"proposed_audience\" IN ('owner', 'people', 'team')" + }, + "shared_use_requests_reason_check": { + "name": "shared_use_requests_reason_check", + "value": "\"shared_use_requests\".\"reason\" IN ('publish', 'trigger', 'grant', 'refused_call')" + }, + "shared_use_requests_status_check": { + "name": "shared_use_requests_status_check", + "value": "\"shared_use_requests\".\"status\" IN ('pending', 'approved', 'declined', 'superseded')" + } + }, + "isRLSEnabled": false + }, + "public.identity_link_challenges": { + "name": "identity_link_challenges", + "schema": "", + "columns": { + "token_hash": { + "name": "token_hash", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "provider": { + "name": "provider", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "expires_at": { + "name": "expires_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + } + }, + "indexes": { + "identity_link_challenges_expiry_idx": { + "name": "identity_link_challenges_expiry_idx", + "columns": [ + { + "expression": "expires_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "identity_link_challenges_user_provider_idx": { + "name": "identity_link_challenges_user_provider_idx", + "columns": [ + { + "expression": "user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "provider", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.identity_links": { + "name": "identity_links", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "provider": { + "name": "provider", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "realm": { + "name": "realm", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "subject": { + "name": "subject", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "handle": { + "name": "handle", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "verified_by": { + "name": "verified_by", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "credential_id": { + "name": "credential_id", + "type": "uuid", + "primaryKey": false, + "notNull": false + }, + "status": { + "name": "status", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'active'" + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "identity_links_identity_idx": { + "name": "identity_links_identity_idx", + "columns": [ + { + "expression": "provider", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "realm", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "subject", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "concurrently": false, + "method": "btree", + "with": {} + }, + "identity_links_user_realm_idx": { + "name": "identity_links_user_realm_idx", + "columns": [ + { + "expression": "user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "provider", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "realm", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "concurrently": false, + "method": "btree", + "with": {} + }, + "identity_links_credential_idx": { + "name": "identity_links_credential_idx", + "columns": [ + { + "expression": "credential_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "where": "\"identity_links\".\"credential_id\" IS NOT NULL", + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "identity_links_credential_id_credentials_id_fk": { + "name": "identity_links_credential_id_credentials_id_fk", + "tableFrom": "identity_links", + "tableTo": "credentials", + "columnsFrom": [ + "credential_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "no action", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "identity_links_verified_by_check": { + "name": "identity_links_verified_by_check", + "value": "\"identity_links\".\"verified_by\" IN ('challenge', 'oauth')" + }, + "identity_links_status_check": { + "name": "identity_links_status_check", + "value": "\"identity_links\".\"status\" IN ('active', 'needs_reconnect')" + } + }, + "isRLSEnabled": false + } + }, + "enums": { + "public.agent_type": { + "name": "agent_type", + "schema": "public", + "values": [ + "built_in", + "remote_ag_ui", + "remote_mastra" + ] + }, + "public.credential_kind": { + "name": "credential_kind", + "schema": "public", + "values": [ + "model", + "connector", + "agent", + "mcp", + "mcp_oauth_client", + "mcp_user_token" + ] + }, + "public.role": { + "name": "role", + "schema": "public", + "values": [ + "admin", + "user" + ] + }, + "public.agent_visibility": { + "name": "agent_visibility", + "schema": "public", + "values": [ + "public", + "private" + ] + }, + "public.routine_run_status": { + "name": "routine_run_status", + "schema": "public", + "values": [ + "succeeded", + "failed", + "skipped", + "waiting" + ] + }, + "public.responsibility_run_status": { + "name": "responsibility_run_status", + "schema": "public", + "values": [ + "queued", + "running", + "waiting", + "succeeded", + "failed", + "skipped" + ] + }, + "public.responsibility_status": { + "name": "responsibility_status", + "schema": "public", + "values": [ + "active", + "paused", + "completed" + ] + } + }, + "schemas": {}, + "sequences": {}, + "roles": {}, + "policies": {}, + "views": {}, + "_meta": { + "columns": {}, + "schemas": {}, + "tables": {} + } +} \ No newline at end of file diff --git a/server/drizzle/meta/0060_snapshot.json b/server/drizzle/meta/0060_snapshot.json new file mode 100644 index 000000000..e45a97bda --- /dev/null +++ b/server/drizzle/meta/0060_snapshot.json @@ -0,0 +1,10021 @@ +{ + "id": "4dd738d3-9934-4fe3-adf8-725b8b8439ee", + "prevId": "a1b20dec-1a95-4bb3-b4b1-d1196a22a6cf", + "version": "7", + "dialect": "postgresql", + "tables": { + "public.accounts": { + "name": "accounts", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "account_id": { + "name": "account_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "provider_id": { + "name": "provider_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "issuer": { + "name": "issuer", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "access_token": { + "name": "access_token", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "refresh_token": { + "name": "refresh_token", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "id_token": { + "name": "id_token", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "access_token_expires_at": { + "name": "access_token_expires_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "refresh_token_expires_at": { + "name": "refresh_token_expires_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "scope": { + "name": "scope", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "password": { + "name": "password", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "accounts_provider_account_idx": { + "name": "accounts_provider_account_idx", + "columns": [ + { + "expression": "provider_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "account_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "accounts_user_id_users_id_fk": { + "name": "accounts_user_id_users_id_fk", + "tableFrom": "accounts", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.agents": { + "name": "agents", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "name": { + "name": "name", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "type": { + "name": "type", + "type": "agent_type", + "typeSchema": "public", + "primaryKey": false, + "notNull": true + }, + "configuration": { + "name": "configuration", + "type": "jsonb", + "primaryKey": false, + "notNull": true + }, + "package_id": { + "name": "package_id", + "type": "uuid", + "primaryKey": false, + "notNull": false + }, + "override": { + "name": "override", + "type": "jsonb", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "agents_package_id_deployment_packages_id_fk": { + "name": "agents_package_id_deployment_packages_id_fk", + "tableFrom": "agents", + "tableTo": "deployment_packages", + "columnsFrom": [ + "package_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "set null", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.attachments": { + "name": "attachments", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "uuid", + "primaryKey": true, + "notNull": true, + "default": "gen_random_uuid()" + }, + "channel_id": { + "name": "channel_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "uploaded_by": { + "name": "uploaded_by", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "name": { + "name": "name", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "mime_type": { + "name": "mime_type", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "size_bytes": { + "name": "size_bytes", + "type": "integer", + "primaryKey": false, + "notNull": true + }, + "bytes": { + "name": "bytes", + "type": "bytea", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "attached_at": { + "name": "attached_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "upload_group": { + "name": "upload_group", + "type": "text", + "primaryKey": false, + "notNull": false + } + }, + "indexes": { + "attachments_channel_idx": { + "name": "attachments_channel_idx", + "columns": [ + { + "expression": "channel_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "attachments_uploaded_by_idx": { + "name": "attachments_uploaded_by_idx", + "columns": [ + { + "expression": "uploaded_by", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "attachments_upload_group_idx": { + "name": "attachments_upload_group_idx", + "columns": [ + { + "expression": "channel_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "uploaded_by", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "upload_group", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "where": "\"attachments\".\"attached_at\" is null", + "concurrently": false, + "method": "btree", + "with": {} + }, + "attachments_staged_idx": { + "name": "attachments_staged_idx", + "columns": [ + { + "expression": "created_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "where": "\"attachments\".\"attached_at\" is null", + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "attachments_channel_id_channels_id_fk": { + "name": "attachments_channel_id_channels_id_fk", + "tableFrom": "attachments", + "tableTo": "channels", + "columnsFrom": [ + "channel_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "attachments_uploaded_by_users_id_fk": { + "name": "attachments_uploaded_by_users_id_fk", + "tableFrom": "attachments", + "tableTo": "users", + "columnsFrom": [ + "uploaded_by" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.audit_events": { + "name": "audit_events", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "uuid", + "primaryKey": true, + "notNull": true, + "default": "gen_random_uuid()" + }, + "actor_user_id": { + "name": "actor_user_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "initiator_kind": { + "name": "initiator_kind", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'person'" + }, + "initiator_id": { + "name": "initiator_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "event_type": { + "name": "event_type", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "target_type": { + "name": "target_type", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "target_id": { + "name": "target_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "payload": { + "name": "payload", + "type": "jsonb", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "audit_events_created_at_idx": { + "name": "audit_events_created_at_idx", + "columns": [ + { + "expression": "created_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "audit_events_type_time_idx": { + "name": "audit_events_type_time_idx", + "columns": [ + { + "expression": "event_type", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "created_at", + "isExpression": false, + "asc": false, + "nulls": "last" + }, + { + "expression": "id", + "isExpression": false, + "asc": false, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "audit_events_actor_time_idx": { + "name": "audit_events_actor_time_idx", + "columns": [ + { + "expression": "actor_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "created_at", + "isExpression": false, + "asc": false, + "nulls": "last" + }, + { + "expression": "id", + "isExpression": false, + "asc": false, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "audit_events_target_time_idx": { + "name": "audit_events_target_time_idx", + "columns": [ + { + "expression": "target_type", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "target_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "created_at", + "isExpression": false, + "asc": false, + "nulls": "last" + }, + { + "expression": "id", + "isExpression": false, + "asc": false, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "audit_events_initiator_time_idx": { + "name": "audit_events_initiator_time_idx", + "columns": [ + { + "expression": "initiator_kind", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "created_at", + "isExpression": false, + "asc": false, + "nulls": "last" + }, + { + "expression": "id", + "isExpression": false, + "asc": false, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.channel_agents": { + "name": "channel_agents", + "schema": "", + "columns": { + "channel_id": { + "name": "channel_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "channel_agents_channel_id_channels_id_fk": { + "name": "channel_agents_channel_id_channels_id_fk", + "tableFrom": "channel_agents", + "tableTo": "channels", + "columnsFrom": [ + "channel_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "channel_agents_agent_id_agents_id_fk": { + "name": "channel_agents_agent_id_agents_id_fk", + "tableFrom": "channel_agents", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "channel_agents_channel_id_agent_id_pk": { + "name": "channel_agents_channel_id_agent_id_pk", + "columns": [ + "channel_id", + "agent_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.channel_memberships": { + "name": "channel_memberships", + "schema": "", + "columns": { + "channel_id": { + "name": "channel_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "pinned_at": { + "name": "pinned_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "last_read_at": { + "name": "last_read_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "channel_memberships_channel_id_channels_id_fk": { + "name": "channel_memberships_channel_id_channels_id_fk", + "tableFrom": "channel_memberships", + "tableTo": "channels", + "columnsFrom": [ + "channel_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "channel_memberships_user_id_users_id_fk": { + "name": "channel_memberships_user_id_users_id_fk", + "tableFrom": "channel_memberships", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "channel_memberships_channel_id_user_id_pk": { + "name": "channel_memberships_channel_id_user_id_pk", + "columns": [ + "channel_id", + "user_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.channels": { + "name": "channels", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "name": { + "name": "name", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "description": { + "name": "description", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "suggested_prompts": { + "name": "suggested_prompts", + "type": "text[]", + "primaryKey": false, + "notNull": true, + "default": "'{}'" + }, + "allowed_groups": { + "name": "allowed_groups", + "type": "text[]", + "primaryKey": false, + "notNull": true, + "default": "'{}'" + }, + "package_id": { + "name": "package_id", + "type": "uuid", + "primaryKey": false, + "notNull": false + }, + "override": { + "name": "override", + "type": "jsonb", + "primaryKey": false, + "notNull": false + }, + "summary": { + "name": "summary", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "summary_at": { + "name": "summary_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "last_message": { + "name": "last_message", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "last_message_source_id": { + "name": "last_message_source_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "last_message_at": { + "name": "last_message_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "last_message_agent_id": { + "name": "last_message_agent_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "deleted_at": { + "name": "deleted_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "channels_recent_activity_idx": { + "name": "channels_recent_activity_idx", + "columns": [ + { + "expression": "COALESCE(\"last_message_at\", \"created_at\") DESC", + "asc": true, + "isExpression": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "channels_awaiting_summary_idx": { + "name": "channels_awaiting_summary_idx", + "columns": [ + { + "expression": "id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "where": "\"channels\".\"summary\" is null and \"channels\".\"deleted_at\" is null", + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "channels_package_id_deployment_packages_id_fk": { + "name": "channels_package_id_deployment_packages_id_fk", + "tableFrom": "channels", + "tableTo": "deployment_packages", + "columnsFrom": [ + "package_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "set null", + "onUpdate": "no action" + }, + "channels_last_message_agent_id_agents_id_fk": { + "name": "channels_last_message_agent_id_agents_id_fk", + "tableFrom": "channels", + "tableTo": "agents", + "columnsFrom": [ + "last_message_agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "set null", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.credentials": { + "name": "credentials", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "uuid", + "primaryKey": true, + "notNull": true, + "default": "gen_random_uuid()" + }, + "kind": { + "name": "kind", + "type": "credential_kind", + "typeSchema": "public", + "primaryKey": false, + "notNull": true + }, + "provider": { + "name": "provider", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "encrypted_value": { + "name": "encrypted_value", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "key_id": { + "name": "key_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "metadata": { + "name": "metadata", + "type": "jsonb", + "primaryKey": false, + "notNull": true + }, + "revoked_at": { + "name": "revoked_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "credentials_active_key_idx": { + "name": "credentials_active_key_idx", + "columns": [ + { + "expression": "kind", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "provider", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "key_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "where": "\"credentials\".\"revoked_at\" IS NULL", + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.deployment_packages": { + "name": "deployment_packages", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "uuid", + "primaryKey": true, + "notNull": true, + "default": "gen_random_uuid()" + }, + "tenant_id": { + "name": "tenant_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "source_path": { + "name": "source_path", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "checksum": { + "name": "checksum", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "loaded_at": { + "name": "loaded_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": { + "deployment_packages_tenant_id_unique": { + "name": "deployment_packages_tenant_id_unique", + "nullsNotDistinct": false, + "columns": [ + "tenant_id" + ] + } + }, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.intelligence_channel_mappings": { + "name": "intelligence_channel_mappings", + "schema": "", + "columns": { + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "channel_id": { + "name": "channel_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "thread_id": { + "name": "thread_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "intelligence_channel_mappings_thread_idx": { + "name": "intelligence_channel_mappings_thread_idx", + "columns": [ + { + "expression": "thread_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "intelligence_channel_mappings_user_id_users_id_fk": { + "name": "intelligence_channel_mappings_user_id_users_id_fk", + "tableFrom": "intelligence_channel_mappings", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "intelligence_channel_mappings_channel_id_channels_id_fk": { + "name": "intelligence_channel_mappings_channel_id_channels_id_fk", + "tableFrom": "intelligence_channel_mappings", + "tableTo": "channels", + "columnsFrom": [ + "channel_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "intelligence_channel_mappings_user_id_channel_id_pk": { + "name": "intelligence_channel_mappings_user_id_channel_id_pk", + "columns": [ + "user_id", + "channel_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.revoked_access": { + "name": "revoked_access", + "schema": "", + "columns": { + "email": { + "name": "email", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "revoked_at": { + "name": "revoked_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "revoked_by": { + "name": "revoked_by", + "type": "text", + "primaryKey": false, + "notNull": true + } + }, + "indexes": {}, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.sessions": { + "name": "sessions", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "token": { + "name": "token", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "expires_at": { + "name": "expires_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + }, + "ip_address": { + "name": "ip_address", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "user_agent": { + "name": "user_agent", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "sessions_user_id_users_id_fk": { + "name": "sessions_user_id_users_id_fk", + "tableFrom": "sessions", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": { + "sessions_token_unique": { + "name": "sessions_token_unique", + "nullsNotDistinct": false, + "columns": [ + "token" + ] + } + }, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.sso_providers": { + "name": "sso_providers", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "issuer": { + "name": "issuer", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "oidc_config": { + "name": "oidc_config", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "saml_config": { + "name": "saml_config", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "provider_id": { + "name": "provider_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "organization_id": { + "name": "organization_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "domain": { + "name": "domain", + "type": "text", + "primaryKey": false, + "notNull": true + } + }, + "indexes": {}, + "foreignKeys": { + "sso_providers_user_id_users_id_fk": { + "name": "sso_providers_user_id_users_id_fk", + "tableFrom": "sso_providers", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "set null", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": { + "sso_providers_provider_id_unique": { + "name": "sso_providers_provider_id_unique", + "nullsNotDistinct": false, + "columns": [ + "provider_id" + ] + } + }, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.user_instructions": { + "name": "user_instructions", + "schema": "", + "columns": { + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "instructions": { + "name": "instructions", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "user_instructions_user_id_users_id_fk": { + "name": "user_instructions_user_id_users_id_fk", + "tableFrom": "user_instructions", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.user_roles": { + "name": "user_roles", + "schema": "", + "columns": { + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "role": { + "name": "role", + "type": "role", + "typeSchema": "public", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "user_roles_user_id_users_id_fk": { + "name": "user_roles_user_id_users_id_fk", + "tableFrom": "user_roles", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "user_roles_user_id_role_pk": { + "name": "user_roles_user_id_role_pk", + "columns": [ + "user_id", + "role" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.users": { + "name": "users", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "email": { + "name": "email", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "name": { + "name": "name", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "image": { + "name": "image", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "email_verified": { + "name": "email_verified", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": false + }, + "preferences": { + "name": "preferences", + "type": "jsonb", + "primaryKey": false, + "notNull": true, + "default": "'{}'::jsonb" + }, + "groups": { + "name": "groups", + "type": "text[]", + "primaryKey": false, + "notNull": true, + "default": "'{}'" + }, + "onboarding_step": { + "name": "onboarding_step", + "type": "integer", + "primaryKey": false, + "notNull": true, + "default": 0 + }, + "onboarding_completed_at": { + "name": "onboarding_completed_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "last_signed_in_at": { + "name": "last_signed_in_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": { + "users_email_unique": { + "name": "users_email_unique", + "nullsNotDistinct": false, + "columns": [ + "email" + ] + } + }, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.verifications": { + "name": "verifications", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "identifier": { + "name": "identifier", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "value": { + "name": "value", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "expires_at": { + "name": "expires_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.action_policy": { + "name": "action_policy", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "mode": { + "name": "mode", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "deny": { + "name": "deny", + "type": "text[]", + "primaryKey": false, + "notNull": true + }, + "allow": { + "name": "allow", + "type": "text[]", + "primaryKey": false, + "notNull": true + }, + "updated_by": { + "name": "updated_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.computer_page_frame": { + "name": "computer_page_frame", + "schema": "", + "columns": { + "computer_id": { + "name": "computer_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "tool_call_id": { + "name": "tool_call_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "url": { + "name": "url", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "title": { + "name": "title", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "frame": { + "name": "frame", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "captured_at": { + "name": "captured_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "computer_page_frame_captured_idx": { + "name": "computer_page_frame_captured_idx", + "columns": [ + { + "expression": "captured_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": {}, + "compositePrimaryKeys": { + "computer_page_frame_computer_id_tool_call_id_pk": { + "name": "computer_page_frame_computer_id_tool_call_id_pk", + "columns": [ + "computer_id", + "tool_call_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.computer_snapshot": { + "name": "computer_snapshot", + "schema": "", + "columns": { + "computer_id": { + "name": "computer_id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "snapshot_id": { + "name": "snapshot_id", + "type": "integer", + "primaryKey": false, + "notNull": true + }, + "url": { + "name": "url", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "elements": { + "name": "elements", + "type": "jsonb", + "primaryKey": false, + "notNull": true + }, + "taken_at": { + "name": "taken_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "session": { + "name": "session", + "type": "text", + "primaryKey": false, + "notNull": false + } + }, + "indexes": {}, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.agent_preferences": { + "name": "agent_preferences", + "schema": "", + "columns": { + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "hidden_at": { + "name": "hidden_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "pinned_at": { + "name": "pinned_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + } + }, + "indexes": {}, + "foreignKeys": { + "agent_preferences_user_id_users_id_fk": { + "name": "agent_preferences_user_id_users_id_fk", + "tableFrom": "agent_preferences", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "agent_preferences_agent_id_agents_id_fk": { + "name": "agent_preferences_agent_id_agents_id_fk", + "tableFrom": "agent_preferences", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "agent_preferences_user_id_agent_id_pk": { + "name": "agent_preferences_user_id_agent_id_pk", + "columns": [ + "user_id", + "agent_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.agent_profiles": { + "name": "agent_profiles", + "schema": "", + "columns": { + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "title": { + "name": "title", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "role_description": { + "name": "role_description", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "avatar_seed": { + "name": "avatar_seed", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "visibility": { + "name": "visibility", + "type": "agent_visibility", + "typeSchema": "public", + "primaryKey": false, + "notNull": true + }, + "callback_token_hash": { + "name": "callback_token_hash", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "callback_token_issued_at": { + "name": "callback_token_issued_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "deleted_at": { + "name": "deleted_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "agent_profiles_visibility_deleted_idx": { + "name": "agent_profiles_visibility_deleted_idx", + "columns": [ + { + "expression": "visibility", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "deleted_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "agent_profiles_agent_id_agents_id_fk": { + "name": "agent_profiles_agent_id_agents_id_fk", + "tableFrom": "agent_profiles", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "agent_profiles_owner_user_id_users_id_fk": { + "name": "agent_profiles_owner_user_id_users_id_fk", + "tableFrom": "agent_profiles", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "set null", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.routine_runs": { + "name": "routine_runs", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "routine_id": { + "name": "routine_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "started_at": { + "name": "started_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "finished_at": { + "name": "finished_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "status": { + "name": "status", + "type": "routine_run_status", + "typeSchema": "public", + "primaryKey": false, + "notNull": false + }, + "waiting": { + "name": "waiting", + "type": "jsonb", + "primaryKey": false, + "notNull": false + }, + "error": { + "name": "error", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "source": { + "name": "source", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'schedule'" + } + }, + "indexes": { + "routine_runs_by_routine_idx": { + "name": "routine_runs_by_routine_idx", + "columns": [ + { + "expression": "routine_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "started_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "routine_runs_routine_id_routines_id_fk": { + "name": "routine_runs_routine_id_routines_id_fk", + "tableFrom": "routine_runs", + "tableTo": "routines", + "columnsFrom": [ + "routine_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.routine_sweeps": { + "name": "routine_sweeps", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "swept_at": { + "name": "swept_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "owner": { + "name": "owner", + "type": "text", + "primaryKey": false, + "notNull": false + } + }, + "indexes": {}, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.routines": { + "name": "routines", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "channel_id": { + "name": "channel_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "instruction": { + "name": "instruction", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "cron": { + "name": "cron", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "timezone": { + "name": "timezone", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'UTC'" + }, + "enabled": { + "name": "enabled", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": true + }, + "next_run_at": { + "name": "next_run_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + }, + "last_run_at": { + "name": "last_run_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "enabled_at": { + "name": "enabled_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "routines_due_idx": { + "name": "routines_due_idx", + "columns": [ + { + "expression": "enabled", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "next_run_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "routines_by_owner_idx": { + "name": "routines_by_owner_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "enabled", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "routines_owner_user_id_users_id_fk": { + "name": "routines_owner_user_id_users_id_fk", + "tableFrom": "routines", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "routines_agent_id_agents_id_fk": { + "name": "routines_agent_id_agents_id_fk", + "tableFrom": "routines", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.component_exclusions": { + "name": "component_exclusions", + "schema": "", + "columns": { + "component_name": { + "name": "component_name", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "withheld_by": { + "name": "withheld_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "component_exclusions_component_name_components_name_fk": { + "name": "component_exclusions_component_name_components_name_fk", + "tableFrom": "component_exclusions", + "tableTo": "components", + "columnsFrom": [ + "component_name" + ], + "columnsTo": [ + "name" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "component_exclusions_agent_id_agents_id_fk": { + "name": "component_exclusions_agent_id_agents_id_fk", + "tableFrom": "component_exclusions", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "component_exclusions_component_name_agent_id_pk": { + "name": "component_exclusions_component_name_agent_id_pk", + "columns": [ + "component_name", + "agent_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.component_functions": { + "name": "component_functions", + "schema": "", + "columns": { + "component_name": { + "name": "component_name", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "function_name": { + "name": "function_name", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "granted_by": { + "name": "granted_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "component_functions_component_name_components_name_fk": { + "name": "component_functions_component_name_components_name_fk", + "tableFrom": "component_functions", + "tableTo": "components", + "columnsFrom": [ + "component_name" + ], + "columnsTo": [ + "name" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "component_functions_component_name_function_name_pk": { + "name": "component_functions_component_name_function_name_pk", + "columns": [ + "component_name", + "function_name" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.components": { + "name": "components", + "schema": "", + "columns": { + "name": { + "name": "name", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "title": { + "name": "title", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "kind": { + "name": "kind", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "draft_description": { + "name": "draft_description", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "published_description": { + "name": "published_description", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "published": { + "name": "published", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": false + }, + "published_at": { + "name": "published_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "updated_by": { + "name": "updated_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.brokered_connections": { + "name": "brokered_connections", + "schema": "", + "columns": { + "provider": { + "name": "provider", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "app": { + "name": "app", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "holder": { + "name": "holder", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "vendor_user_id": { + "name": "vendor_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "connected_by": { + "name": "connected_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "connected_at": { + "name": "connected_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "verified": { + "name": "verified", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": false + }, + "verified_at": { + "name": "verified_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "probe_action": { + "name": "probe_action", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "brokered_connections_person_idx": { + "name": "brokered_connections_person_idx", + "columns": [ + { + "expression": "provider", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "app", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "where": "\"brokered_connections\".\"holder\" = 'person'", + "concurrently": false, + "method": "btree", + "with": {} + }, + "brokered_connections_deployment_idx": { + "name": "brokered_connections_deployment_idx", + "columns": [ + { + "expression": "provider", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "app", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "where": "\"brokered_connections\".\"holder\" = 'deployment'", + "concurrently": false, + "method": "btree", + "with": {} + }, + "brokered_connections_user_idx": { + "name": "brokered_connections_user_idx", + "columns": [ + { + "expression": "user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "brokered_connections_holder_check": { + "name": "brokered_connections_holder_check", + "value": "(\"brokered_connections\".\"holder\" = 'person' AND \"brokered_connections\".\"user_id\" IS NOT NULL) OR (\"brokered_connections\".\"holder\" = 'deployment' AND \"brokered_connections\".\"user_id\" IS NULL)" + }, + "brokered_connections_provider_check": { + "name": "brokered_connections_provider_check", + "value": "\"brokered_connections\".\"provider\" IN ('composio', 'arcade')" + } + }, + "isRLSEnabled": false + }, + "public.composio_connections": { + "name": "composio_connections", + "schema": "", + "columns": { + "toolkit": { + "name": "toolkit", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "connected_at": { + "name": "connected_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "verified": { + "name": "verified", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": false + }, + "verified_at": { + "name": "verified_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "probe_action": { + "name": "probe_action", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "composio_connections_user_idx": { + "name": "composio_connections_user_idx", + "columns": [ + { + "expression": "user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": {}, + "compositePrimaryKeys": { + "composio_connections_toolkit_user_id_pk": { + "name": "composio_connections_toolkit_user_id_pk", + "columns": [ + "toolkit", + "user_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.mcp_servers": { + "name": "mcp_servers", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "title": { + "name": "title", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "logo": { + "name": "logo", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "vendor": { + "name": "vendor", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "url": { + "name": "url", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "provenance": { + "name": "provenance", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'first-party'" + }, + "credential_id": { + "name": "credential_id", + "type": "uuid", + "primaryKey": false, + "notNull": false + }, + "auth_scheme": { + "name": "auth_scheme", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "account_mode": { + "name": "account_mode", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "shared_vendor_user_id": { + "name": "shared_vendor_user_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "tools_refreshed_at": { + "name": "tools_refreshed_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "last_error": { + "name": "last_error", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "added_by": { + "name": "added_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "mcp_servers_credential_id_credentials_id_fk": { + "name": "mcp_servers_credential_id_credentials_id_fk", + "tableFrom": "mcp_servers", + "tableTo": "credentials", + "columnsFrom": [ + "credential_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "restrict", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "mcp_servers_account_mode_check": { + "name": "mcp_servers_account_mode_check", + "value": "\"mcp_servers\".\"account_mode\" IS NULL OR \"mcp_servers\".\"account_mode\" IN ('personal', 'shared')" + } + }, + "isRLSEnabled": false + }, + "public.mcp_tools": { + "name": "mcp_tools", + "schema": "", + "columns": { + "server_id": { + "name": "server_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "name": { + "name": "name", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "description": { + "name": "description", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "''" + }, + "input_schema": { + "name": "input_schema", + "type": "jsonb", + "primaryKey": false, + "notNull": true, + "default": "'{}'::jsonb" + }, + "effect": { + "name": "effect", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "destructive": { + "name": "destructive", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": false + }, + "version": { + "name": "version", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "mcp_tools_server_id_mcp_servers_id_fk": { + "name": "mcp_tools_server_id_mcp_servers_id_fk", + "tableFrom": "mcp_tools", + "tableTo": "mcp_servers", + "columnsFrom": [ + "server_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "mcp_tools_server_id_name_pk": { + "name": "mcp_tools_server_id_name_pk", + "columns": [ + "server_id", + "name" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.mcp_user_credentials": { + "name": "mcp_user_credentials", + "schema": "", + "columns": { + "server_id": { + "name": "server_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "credential_id": { + "name": "credential_id", + "type": "uuid", + "primaryKey": false, + "notNull": true + }, + "scope": { + "name": "scope", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "connected_at": { + "name": "connected_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "mcp_user_credentials_user_idx": { + "name": "mcp_user_credentials_user_idx", + "columns": [ + { + "expression": "user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "mcp_user_credentials_server_id_mcp_servers_id_fk": { + "name": "mcp_user_credentials_server_id_mcp_servers_id_fk", + "tableFrom": "mcp_user_credentials", + "tableTo": "mcp_servers", + "columnsFrom": [ + "server_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "mcp_user_credentials_user_id_users_id_fk": { + "name": "mcp_user_credentials_user_id_users_id_fk", + "tableFrom": "mcp_user_credentials", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "mcp_user_credentials_credential_id_credentials_id_fk": { + "name": "mcp_user_credentials_credential_id_credentials_id_fk", + "tableFrom": "mcp_user_credentials", + "tableTo": "credentials", + "columnsFrom": [ + "credential_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "no action", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "mcp_user_credentials_server_id_user_id_pk": { + "name": "mcp_user_credentials_server_id_user_id_pk", + "columns": [ + "server_id", + "user_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.pending_authorizations": { + "name": "pending_authorizations", + "schema": "", + "columns": { + "actor_id": { + "name": "actor_id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "server_id": { + "name": "server_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "action": { + "name": "action", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "holder": { + "name": "holder", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "vendor_user_id": { + "name": "vendor_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "auth_id": { + "name": "auth_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "completed_at": { + "name": "completed_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "outcome": { + "name": "outcome", + "type": "text", + "primaryKey": false, + "notNull": false + } + }, + "indexes": { + "pending_authorizations_server_idx": { + "name": "pending_authorizations_server_idx", + "columns": [ + { + "expression": "server_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "pending_authorizations_user_idx": { + "name": "pending_authorizations_user_idx", + "columns": [ + { + "expression": "user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "pending_authorizations_actor_id_users_id_fk": { + "name": "pending_authorizations_actor_id_users_id_fk", + "tableFrom": "pending_authorizations", + "tableTo": "users", + "columnsFrom": [ + "actor_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "pending_authorizations_server_id_mcp_servers_id_fk": { + "name": "pending_authorizations_server_id_mcp_servers_id_fk", + "tableFrom": "pending_authorizations", + "tableTo": "mcp_servers", + "columnsFrom": [ + "server_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "pending_authorizations_user_id_users_id_fk": { + "name": "pending_authorizations_user_id_users_id_fk", + "tableFrom": "pending_authorizations", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "pending_authorizations_holder_check": { + "name": "pending_authorizations_holder_check", + "value": "(\"pending_authorizations\".\"holder\" = 'person' AND \"pending_authorizations\".\"user_id\" IS NOT NULL) OR (\"pending_authorizations\".\"holder\" = 'deployment' AND \"pending_authorizations\".\"user_id\" IS NULL)" + }, + "pending_authorizations_outcome_check": { + "name": "pending_authorizations_outcome_check", + "value": "\"pending_authorizations\".\"outcome\" IS NULL OR \"pending_authorizations\".\"outcome\" IN ('completed', 'failed', 'unreconciled', 'withdrawn')" + }, + "pending_authorizations_completion_check": { + "name": "pending_authorizations_completion_check", + "value": "(\"pending_authorizations\".\"completed_at\" IS NULL) = (\"pending_authorizations\".\"outcome\" IS NULL)" + } + }, + "isRLSEnabled": false + }, + "public.plugin_grants": { + "name": "plugin_grants", + "schema": "", + "columns": { + "kind": { + "name": "kind", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "ref": { + "name": "ref", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "granted_by": { + "name": "granted_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "plugin_grants_agent_idx": { + "name": "plugin_grants_agent_idx", + "columns": [ + { + "expression": "agent_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "plugin_grants_agent_id_agents_id_fk": { + "name": "plugin_grants_agent_id_agents_id_fk", + "tableFrom": "plugin_grants", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "plugin_grants_kind_ref_agent_id_pk": { + "name": "plugin_grants_kind_ref_agent_id_pk", + "columns": [ + "kind", + "ref", + "agent_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.sandboxed_components": { + "name": "sandboxed_components", + "schema": "", + "columns": { + "name": { + "name": "name", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "title": { + "name": "title", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "draft_description": { + "name": "draft_description", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "''" + }, + "draft_html": { + "name": "draft_html", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "''" + }, + "draft_css": { + "name": "draft_css", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "''" + }, + "draft_js_functions": { + "name": "draft_js_functions", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "''" + }, + "draft_argument_schema": { + "name": "draft_argument_schema", + "type": "jsonb", + "primaryKey": false, + "notNull": true, + "default": "'{}'::jsonb" + }, + "published_description": { + "name": "published_description", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "published_html": { + "name": "published_html", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "published_css": { + "name": "published_css", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "published_js_functions": { + "name": "published_js_functions", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "published_argument_schema": { + "name": "published_argument_schema", + "type": "jsonb", + "primaryKey": false, + "notNull": false + }, + "sample_arguments": { + "name": "sample_arguments", + "type": "jsonb", + "primaryKey": false, + "notNull": true, + "default": "'{}'::jsonb" + }, + "revision": { + "name": "revision", + "type": "integer", + "primaryKey": false, + "notNull": true, + "default": 0 + }, + "published": { + "name": "published", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": false + }, + "published_at": { + "name": "published_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "authored_by": { + "name": "authored_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.skill_tools": { + "name": "skill_tools", + "schema": "", + "columns": { + "skill_id": { + "name": "skill_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "ref": { + "name": "ref", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "declared_by": { + "name": "declared_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "skill_tools_ref_idx": { + "name": "skill_tools_ref_idx", + "columns": [ + { + "expression": "ref", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "skill_tools_skill_id_skills_id_fk": { + "name": "skill_tools_skill_id_skills_id_fk", + "tableFrom": "skill_tools", + "tableTo": "skills", + "columnsFrom": [ + "skill_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "skill_tools_skill_id_ref_pk": { + "name": "skill_tools_skill_id_ref_pk", + "columns": [ + "skill_id", + "ref" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.skills": { + "name": "skills", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "slug": { + "name": "slug", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "title": { + "name": "title", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "summary": { + "name": "summary", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "instructions": { + "name": "instructions", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "origin": { + "name": "origin", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'yours'" + }, + "installed_by": { + "name": "installed_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "skills_slug_key": { + "name": "skills_slug_key", + "columns": [ + { + "expression": "slug", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "concurrently": false, + "method": "btree", + "with": {} + }, + "skills_owner_idx": { + "name": "skills_owner_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "skills_owner_user_id_users_id_fk": { + "name": "skills_owner_user_id_users_id_fk", + "tableFrom": "skills", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.work_items": { + "name": "work_items", + "schema": "", + "columns": { + "kind": { + "name": "kind", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "key": { + "name": "key", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "run_at": { + "name": "run_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "claimed_by": { + "name": "claimed_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "lease_until": { + "name": "lease_until", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "attempts": { + "name": "attempts", + "type": "integer", + "primaryKey": false, + "notNull": true, + "default": 0 + }, + "finished_at": { + "name": "finished_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "last_error": { + "name": "last_error", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "payload": { + "name": "payload", + "type": "jsonb", + "primaryKey": false, + "notNull": true, + "default": "'{}'::jsonb" + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "work_items_claimable_idx": { + "name": "work_items_claimable_idx", + "columns": [ + { + "expression": "kind", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "run_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": {}, + "compositePrimaryKeys": { + "work_items_kind_key_pk": { + "name": "work_items_kind_key_pk", + "columns": [ + "kind", + "key" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.voice_sessions": { + "name": "voice_sessions", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "channel_id": { + "name": "channel_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "anchor_message_id": { + "name": "anchor_message_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "started_at": { + "name": "started_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + }, + "ended_at": { + "name": "ended_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + }, + "duration_seconds": { + "name": "duration_seconds", + "type": "integer", + "primaryKey": false, + "notNull": true + }, + "transcript": { + "name": "transcript", + "type": "jsonb", + "primaryKey": false, + "notNull": true + }, + "summary": { + "name": "summary", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "summary_status": { + "name": "summary_status", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'failed'" + } + }, + "indexes": { + "voice_sessions_channel_started_idx": { + "name": "voice_sessions_channel_started_idx", + "columns": [ + { + "expression": "channel_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "started_at", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "voice_sessions_channel_id_channels_id_fk": { + "name": "voice_sessions_channel_id_channels_id_fk", + "tableFrom": "voice_sessions", + "tableTo": "channels", + "columnsFrom": [ + "channel_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "voice_sessions_user_id_users_id_fk": { + "name": "voice_sessions_user_id_users_id_fk", + "tableFrom": "voice_sessions", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "voice_sessions_duration_check": { + "name": "voice_sessions_duration_check", + "value": "\"voice_sessions\".\"duration_seconds\" >= 0" + }, + "voice_sessions_summary_check": { + "name": "voice_sessions_summary_check", + "value": "(\"voice_sessions\".\"summary_status\" = 'ready' AND \"voice_sessions\".\"summary\" IS NOT NULL) OR (\"voice_sessions\".\"summary_status\" = 'failed' AND \"voice_sessions\".\"summary\" IS NULL)" + } + }, + "isRLSEnabled": false + }, + "public.learning_settings": { + "name": "learning_settings", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "settings": { + "name": "settings", + "type": "jsonb", + "primaryKey": false, + "notNull": true + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.learning_thread_bindings": { + "name": "learning_thread_bindings", + "schema": "", + "columns": { + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "thread_id": { + "name": "thread_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "container_id": { + "name": "container_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": {}, + "compositePrimaryKeys": { + "learning_thread_bindings_user_id_thread_id_pk": { + "name": "learning_thread_bindings_user_id_thread_id_pk", + "columns": [ + "user_id", + "thread_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.responsibilities": { + "name": "responsibilities", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "channel_id": { + "name": "channel_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "thread_id": { + "name": "thread_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "title": { + "name": "title", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "instruction": { + "name": "instruction", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "success_criteria": { + "name": "success_criteria", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "status": { + "name": "status", + "type": "responsibility_status", + "typeSchema": "public", + "primaryKey": false, + "notNull": true, + "default": "'active'" + }, + "progress": { + "name": "progress", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "''" + }, + "last_result": { + "name": "last_result", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "subscriptions": { + "name": "subscriptions", + "type": "jsonb", + "primaryKey": false, + "notNull": true, + "default": "'[]'::jsonb" + }, + "completed_at": { + "name": "completed_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "responsibilities_owner_status_idx": { + "name": "responsibilities_owner_status_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "status", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "responsibilities_owner_user_id_users_id_fk": { + "name": "responsibilities_owner_user_id_users_id_fk", + "tableFrom": "responsibilities", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "responsibilities_agent_id_agents_id_fk": { + "name": "responsibilities_agent_id_agents_id_fk", + "tableFrom": "responsibilities", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.responsibility_events": { + "name": "responsibility_events", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "source": { + "name": "source", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "external_id": { + "name": "external_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "type": { + "name": "type", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "payload": { + "name": "payload", + "type": "jsonb", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "responsibility_events_source_id_idx": { + "name": "responsibility_events_source_id_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "source", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "external_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "responsibility_events_owner_user_id_users_id_fk": { + "name": "responsibility_events_owner_user_id_users_id_fk", + "tableFrom": "responsibility_events", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.responsibility_runs": { + "name": "responsibility_runs", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "responsibility_id": { + "name": "responsibility_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "event_id": { + "name": "event_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "status": { + "name": "status", + "type": "responsibility_run_status", + "typeSchema": "public", + "primaryKey": false, + "notNull": true, + "default": "'queued'" + }, + "reply_text": { + "name": "reply_text", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "error": { + "name": "error", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "waiting": { + "name": "waiting", + "type": "jsonb", + "primaryKey": false, + "notNull": false + }, + "continuation": { + "name": "continuation", + "type": "jsonb", + "primaryKey": false, + "notNull": false + }, + "started_at": { + "name": "started_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "finished_at": { + "name": "finished_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "responsibility_runs_event_idx": { + "name": "responsibility_runs_event_idx", + "columns": [ + { + "expression": "responsibility_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "event_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "concurrently": false, + "method": "btree", + "with": {} + }, + "responsibility_runs_status_idx": { + "name": "responsibility_runs_status_idx", + "columns": [ + { + "expression": "status", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "created_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "responsibility_runs_responsibility_id_responsibilities_id_fk": { + "name": "responsibility_runs_responsibility_id_responsibilities_id_fk", + "tableFrom": "responsibility_runs", + "tableTo": "responsibilities", + "columnsFrom": [ + "responsibility_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "responsibility_runs_event_id_responsibility_events_id_fk": { + "name": "responsibility_runs_event_id_responsibility_events_id_fk", + "tableFrom": "responsibility_runs", + "tableTo": "responsibility_events", + "columnsFrom": [ + "event_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.responsibility_source_bindings": { + "name": "responsibility_source_bindings", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "source": { + "name": "source", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "repository": { + "name": "repository", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "credential_id": { + "name": "credential_id", + "type": "uuid", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "responsibility_source_bindings_owner_idx": { + "name": "responsibility_source_bindings_owner_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "responsibility_source_bindings_owner_user_id_users_id_fk": { + "name": "responsibility_source_bindings_owner_user_id_users_id_fk", + "tableFrom": "responsibility_source_bindings", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "responsibility_source_bindings_credential_id_credentials_id_fk": { + "name": "responsibility_source_bindings_credential_id_credentials_id_fk", + "tableFrom": "responsibility_source_bindings", + "tableTo": "credentials", + "columnsFrom": [ + "credential_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "no action", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.responsibility_triggers": { + "name": "responsibility_triggers", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "responsibility_id": { + "name": "responsibility_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "kind": { + "name": "kind", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "config": { + "name": "config", + "type": "jsonb", + "primaryKey": false, + "notNull": true + }, + "credential_id": { + "name": "credential_id", + "type": "uuid", + "primaryKey": false, + "notNull": false + }, + "enabled": { + "name": "enabled", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "responsibility_triggers_owner_idx": { + "name": "responsibility_triggers_owner_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "responsibility_triggers_responsibility_idx": { + "name": "responsibility_triggers_responsibility_idx", + "columns": [ + { + "expression": "responsibility_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "responsibility_triggers_kind_idx": { + "name": "responsibility_triggers_kind_idx", + "columns": [ + { + "expression": "kind", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "responsibility_triggers_owner_user_id_users_id_fk": { + "name": "responsibility_triggers_owner_user_id_users_id_fk", + "tableFrom": "responsibility_triggers", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "responsibility_triggers_responsibility_id_responsibilities_id_fk": { + "name": "responsibility_triggers_responsibility_id_responsibilities_id_fk", + "tableFrom": "responsibility_triggers", + "tableTo": "responsibilities", + "columnsFrom": [ + "responsibility_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "responsibility_triggers_credential_id_credentials_id_fk": { + "name": "responsibility_triggers_credential_id_credentials_id_fk", + "tableFrom": "responsibility_triggers", + "tableTo": "credentials", + "columnsFrom": [ + "credential_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "no action", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.approval_preferences": { + "name": "approval_preferences", + "schema": "", + "columns": { + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "enabled": { + "name": "enabled", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": false + }, + "auto_review": { + "name": "auto_review", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": false + }, + "host_commands": { + "name": "host_commands", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'ask'" + } + }, + "indexes": {}, + "foreignKeys": { + "approval_preferences_owner_user_id_users_id_fk": { + "name": "approval_preferences_owner_user_id_users_id_fk", + "tableFrom": "approval_preferences", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "approval_preferences_host_commands_check": { + "name": "approval_preferences_host_commands_check", + "value": "\"approval_preferences\".\"host_commands\" IN ('ask', 'allow', 'never')" + } + }, + "isRLSEnabled": false + }, + "public.approval_requests": { + "name": "approval_requests", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "run_id": { + "name": "run_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "tool_call_id": { + "name": "tool_call_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "action_digest": { + "name": "action_digest", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "action": { + "name": "action", + "type": "jsonb", + "primaryKey": false, + "notNull": true + }, + "status": { + "name": "status", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'pending'" + }, + "decision": { + "name": "decision", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "result": { + "name": "result", + "type": "jsonb", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "decided_at": { + "name": "decided_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "consumed_at": { + "name": "consumed_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "completed_at": { + "name": "completed_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + } + }, + "indexes": { + "approval_requests_action_idx": { + "name": "approval_requests_action_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "run_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "tool_call_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "concurrently": false, + "method": "btree", + "with": {} + }, + "approval_requests_inbox_idx": { + "name": "approval_requests_inbox_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "status", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "approval_requests_owner_user_id_users_id_fk": { + "name": "approval_requests_owner_user_id_users_id_fk", + "tableFrom": "approval_requests", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "approval_status_check": { + "name": "approval_status_check", + "value": "\"approval_requests\".\"status\" IN ('pending', 'approved', 'denied', 'consumed', 'completed')" + }, + "approval_decision_check": { + "name": "approval_decision_check", + "value": "\"approval_requests\".\"decision\" IN ('allow_once', 'allow_always', 'deny', 'handled')" + } + }, + "isRLSEnabled": false + }, + "public.approval_rules": { + "name": "approval_rules", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "bot_id": { + "name": "bot_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "tool_ref": { + "name": "tool_ref", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "effect": { + "name": "effect", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "scope": { + "name": "scope", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "behaviour": { + "name": "behaviour", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'allow'" + }, + "revoked_at": { + "name": "revoked_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "approval_rules_owner_idx": { + "name": "approval_rules_owner_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "approval_rules_owner_user_id_users_id_fk": { + "name": "approval_rules_owner_user_id_users_id_fk", + "tableFrom": "approval_rules", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "approval_rules_behaviour_check": { + "name": "approval_rules_behaviour_check", + "value": "\"approval_rules\".\"behaviour\" IN ('allow', 'pre_approved', 'ask', 'hand_off')" + } + }, + "isRLSEnabled": false + }, + "public.approval_team_rules": { + "name": "approval_team_rules", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "bot_id": { + "name": "bot_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "tool_ref": { + "name": "tool_ref", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "effect": { + "name": "effect", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "scope": { + "name": "scope", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "behaviour": { + "name": "behaviour", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "created_by": { + "name": "created_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "revoked_at": { + "name": "revoked_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "approval_team_rules_created_by_users_id_fk": { + "name": "approval_team_rules_created_by_users_id_fk", + "tableFrom": "approval_team_rules", + "tableTo": "users", + "columnsFrom": [ + "created_by" + ], + "columnsTo": [ + "id" + ], + "onDelete": "set null", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "approval_team_rules_behaviour_check": { + "name": "approval_team_rules_behaviour_check", + "value": "\"approval_team_rules\".\"behaviour\" IN ('allow', 'pre_approved', 'ask', 'hand_off')" + } + }, + "isRLSEnabled": false + }, + "public.approval_team_settings": { + "name": "approval_team_settings", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "enforce_auto_review": { + "name": "enforce_auto_review", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": false + }, + "custom_rules_enabled": { + "name": "custom_rules_enabled", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": true + }, + "host_commands_cap": { + "name": "host_commands_cap", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'allow'" + }, + "updated_by": { + "name": "updated_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "approval_team_settings_updated_by_users_id_fk": { + "name": "approval_team_settings_updated_by_users_id_fk", + "tableFrom": "approval_team_settings", + "tableTo": "users", + "columnsFrom": [ + "updated_by" + ], + "columnsTo": [ + "id" + ], + "onDelete": "set null", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "approval_team_settings_host_commands_cap_check": { + "name": "approval_team_settings_host_commands_cap_check", + "value": "\"approval_team_settings\".\"host_commands_cap\" IN ('ask', 'allow', 'never')" + } + }, + "isRLSEnabled": false + }, + "public.memory_sources": { + "name": "memory_sources", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "tool_ref": { + "name": "tool_ref", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "title": { + "name": "title", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "args": { + "name": "args", + "type": "jsonb", + "primaryKey": false, + "notNull": true, + "default": "'{}'::jsonb" + }, + "enabled": { + "name": "enabled", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": true + }, + "sync_status": { + "name": "sync_status", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'idle'" + }, + "sync_error": { + "name": "sync_error", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "last_sync_at": { + "name": "last_sync_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "next_sync_at": { + "name": "next_sync_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "memory_sources_owner_idx": { + "name": "memory_sources_owner_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "memory_sources_due_idx": { + "name": "memory_sources_due_idx", + "columns": [ + { + "expression": "enabled", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "next_sync_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "memory_sources_owner_user_id_users_id_fk": { + "name": "memory_sources_owner_user_id_users_id_fk", + "tableFrom": "memory_sources", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "memory_sources_agent_id_agents_id_fk": { + "name": "memory_sources_agent_id_agents_id_fk", + "tableFrom": "memory_sources", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.personal_memories": { + "name": "personal_memories", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "source_id": { + "name": "source_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "external_id": { + "name": "external_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "import_digest": { + "name": "import_digest", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "content": { + "name": "content", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "provenance": { + "name": "provenance", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "enabled": { + "name": "enabled", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": true + }, + "review_state": { + "name": "review_state", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'unreviewed'" + }, + "deleted_at": { + "name": "deleted_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "formed_by": { + "name": "formed_by", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'person'" + }, + "formed_by_agent_id": { + "name": "formed_by_agent_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "source_app": { + "name": "source_app", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "source_ref": { + "name": "source_ref", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "source_link": { + "name": "source_link", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "observed_at": { + "name": "observed_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "intelligence_memory_id": { + "name": "intelligence_memory_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "intelligence_digest": { + "name": "intelligence_digest", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "personal_memories_owner_idx": { + "name": "personal_memories_owner_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "enabled", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "personal_memories_intelligence_idx": { + "name": "personal_memories_intelligence_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "intelligence_memory_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "personal_memories_formed_idx": { + "name": "personal_memories_formed_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "formed_by_agent_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "personal_memories_import_idx": { + "name": "personal_memories_import_idx", + "columns": [ + { + "expression": "source_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "external_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "concurrently": false, + "method": "btree", + "with": {} + }, + "personal_memories_formed_digest_idx": { + "name": "personal_memories_formed_digest_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "import_digest", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "where": "\"personal_memories\".\"formed_by\" = 'bot'", + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "personal_memories_owner_user_id_users_id_fk": { + "name": "personal_memories_owner_user_id_users_id_fk", + "tableFrom": "personal_memories", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "personal_memories_source_id_memory_sources_id_fk": { + "name": "personal_memories_source_id_memory_sources_id_fk", + "tableFrom": "personal_memories", + "tableTo": "memory_sources", + "columnsFrom": [ + "source_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "personal_memories_formed_by_agent_id_agents_id_fk": { + "name": "personal_memories_formed_by_agent_id_agents_id_fk", + "tableFrom": "personal_memories", + "tableTo": "agents", + "columnsFrom": [ + "formed_by_agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.default_opt_outs": { + "name": "default_opt_outs", + "schema": "", + "columns": { + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "feature": { + "name": "feature", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "scope": { + "name": "scope", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "''" + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "default_opt_outs_owner_user_id_users_id_fk": { + "name": "default_opt_outs_owner_user_id_users_id_fk", + "tableFrom": "default_opt_outs", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "default_opt_outs_agent_id_agents_id_fk": { + "name": "default_opt_outs_agent_id_agents_id_fk", + "tableFrom": "default_opt_outs", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "default_opt_outs_owner_user_id_agent_id_feature_scope_pk": { + "name": "default_opt_outs_owner_user_id_agent_id_feature_scope_pk", + "columns": [ + "owner_user_id", + "agent_id", + "feature", + "scope" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "default_opt_outs_feature_check": { + "name": "default_opt_outs_feature_check", + "value": "\"default_opt_outs\".\"feature\" IN ('memory_source', 'proactive_research')" + } + }, + "isRLSEnabled": false + }, + "public.proactive_settings": { + "name": "proactive_settings", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "channel_id": { + "name": "channel_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "thread_id": { + "name": "thread_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "focus": { + "name": "focus", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "''" + }, + "enabled": { + "name": "enabled", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": true + }, + "interval_minutes": { + "name": "interval_minutes", + "type": "integer", + "primaryKey": false, + "notNull": true, + "default": 240 + }, + "next_run_at": { + "name": "next_run_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "last_run_at": { + "name": "last_run_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "last_status": { + "name": "last_status", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'idle'" + }, + "last_error": { + "name": "last_error", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "proactive_settings_owner_agent_idx": { + "name": "proactive_settings_owner_agent_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "agent_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "concurrently": false, + "method": "btree", + "with": {} + }, + "proactive_settings_due_idx": { + "name": "proactive_settings_due_idx", + "columns": [ + { + "expression": "enabled", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "next_run_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "proactive_settings_owner_user_id_users_id_fk": { + "name": "proactive_settings_owner_user_id_users_id_fk", + "tableFrom": "proactive_settings", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "proactive_settings_agent_id_agents_id_fk": { + "name": "proactive_settings_agent_id_agents_id_fk", + "tableFrom": "proactive_settings", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "proactive_settings_interval_check": { + "name": "proactive_settings_interval_check", + "value": "\"proactive_settings\".\"interval_minutes\" >= 60 AND \"proactive_settings\".\"interval_minutes\" <= 1440" + }, + "proactive_settings_status_check": { + "name": "proactive_settings_status_check", + "value": "\"proactive_settings\".\"last_status\" IN ('idle', 'running', 'succeeded', 'error')" + } + }, + "isRLSEnabled": false + }, + "public.proactive_suggestions": { + "name": "proactive_suggestions", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "setting_id": { + "name": "setting_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "run_id": { + "name": "run_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "title": { + "name": "title", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "detail": { + "name": "detail", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "source_app": { + "name": "source_app", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "source_ref": { + "name": "source_ref", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "source_link": { + "name": "source_link", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "status": { + "name": "status", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'open'" + }, + "delivered_at": { + "name": "delivered_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "resolved_at": { + "name": "resolved_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "proactive_suggestions_owner_idx": { + "name": "proactive_suggestions_owner_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "status", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "created_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "proactive_suggestions_run_idx": { + "name": "proactive_suggestions_run_idx", + "columns": [ + { + "expression": "run_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "proactive_suggestions_owner_user_id_users_id_fk": { + "name": "proactive_suggestions_owner_user_id_users_id_fk", + "tableFrom": "proactive_suggestions", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "proactive_suggestions_agent_id_agents_id_fk": { + "name": "proactive_suggestions_agent_id_agents_id_fk", + "tableFrom": "proactive_suggestions", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "proactive_suggestions_setting_id_proactive_settings_id_fk": { + "name": "proactive_suggestions_setting_id_proactive_settings_id_fk", + "tableFrom": "proactive_suggestions", + "tableTo": "proactive_settings", + "columnsFrom": [ + "setting_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "proactive_suggestions_status_check": { + "name": "proactive_suggestions_status_check", + "value": "\"proactive_suggestions\".\"status\" IN ('open', 'dismissed', 'started')" + } + }, + "isRLSEnabled": false + }, + "public.demonstrations": { + "name": "demonstrations", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "bot_id": { + "name": "bot_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "title": { + "name": "title", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "status": { + "name": "status", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'recording'" + }, + "actions": { + "name": "actions", + "type": "jsonb", + "primaryKey": false, + "notNull": true, + "default": "'[]'::jsonb" + }, + "draft": { + "name": "draft", + "type": "jsonb", + "primaryKey": false, + "notNull": false + }, + "skill_slug": { + "name": "skill_slug", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "finished_at": { + "name": "finished_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + } + }, + "indexes": { + "demonstrations_owner_idx": { + "name": "demonstrations_owner_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "created_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "demonstrations_active_bot_idx": { + "name": "demonstrations_active_bot_idx", + "columns": [ + { + "expression": "bot_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "where": "\"demonstrations\".\"status\" = 'recording'", + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "demonstrations_owner_user_id_users_id_fk": { + "name": "demonstrations_owner_user_id_users_id_fk", + "tableFrom": "demonstrations", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "demonstrations_bot_id_agents_id_fk": { + "name": "demonstrations_bot_id_agents_id_fk", + "tableFrom": "demonstrations", + "tableTo": "agents", + "columnsFrom": [ + "bot_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.delivery_bindings": { + "name": "delivery_bindings", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "channel_id": { + "name": "channel_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "thread_id": { + "name": "thread_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "transport": { + "name": "transport", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "identity": { + "name": "identity", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "realm": { + "name": "realm", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "address": { + "name": "address", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "mention_id": { + "name": "mention_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "enabled": { + "name": "enabled", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": true + }, + "opted_out_at": { + "name": "opted_out_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "delivery_binding_identity_idx": { + "name": "delivery_binding_identity_idx", + "columns": [ + { + "expression": "transport", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "realm", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "identity", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "concurrently": false, + "method": "btree", + "with": {} + }, + "delivery_bindings_owner_idx": { + "name": "delivery_bindings_owner_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "delivery_bindings_owner_user_id_users_id_fk": { + "name": "delivery_bindings_owner_user_id_users_id_fk", + "tableFrom": "delivery_bindings", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "delivery_bindings_channel_id_channels_id_fk": { + "name": "delivery_bindings_channel_id_channels_id_fk", + "tableFrom": "delivery_bindings", + "tableTo": "channels", + "columnsFrom": [ + "channel_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "delivery_bindings_agent_id_agents_id_fk": { + "name": "delivery_bindings_agent_id_agents_id_fk", + "tableFrom": "delivery_bindings", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.delivery_challenges": { + "name": "delivery_challenges", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "channel_id": { + "name": "channel_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "thread_id": { + "name": "thread_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "transport": { + "name": "transport", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "address": { + "name": "address", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "expires_at": { + "name": "expires_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + }, + "consumed_at": { + "name": "consumed_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "delivery_challenges_owner_user_id_users_id_fk": { + "name": "delivery_challenges_owner_user_id_users_id_fk", + "tableFrom": "delivery_challenges", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "delivery_challenges_channel_id_channels_id_fk": { + "name": "delivery_challenges_channel_id_channels_id_fk", + "tableFrom": "delivery_challenges", + "tableTo": "channels", + "columnsFrom": [ + "channel_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "delivery_challenges_agent_id_agents_id_fk": { + "name": "delivery_challenges_agent_id_agents_id_fk", + "tableFrom": "delivery_challenges", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.delivery_inbox": { + "name": "delivery_inbox", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "channel_id": { + "name": "channel_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "thread_id": { + "name": "thread_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "binding_id": { + "name": "binding_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "source": { + "name": "source", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "realm": { + "name": "realm", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "external_id": { + "name": "external_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "text": { + "name": "text", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "state": { + "name": "state", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'queued'" + }, + "error": { + "name": "error", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "delivery_inbox_dedupe_idx": { + "name": "delivery_inbox_dedupe_idx", + "columns": [ + { + "expression": "source", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "realm", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "external_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "concurrently": false, + "method": "btree", + "with": {} + }, + "delivery_inbox_owner_idx": { + "name": "delivery_inbox_owner_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "created_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "delivery_inbox_owner_user_id_users_id_fk": { + "name": "delivery_inbox_owner_user_id_users_id_fk", + "tableFrom": "delivery_inbox", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "delivery_inbox_channel_id_channels_id_fk": { + "name": "delivery_inbox_channel_id_channels_id_fk", + "tableFrom": "delivery_inbox", + "tableTo": "channels", + "columnsFrom": [ + "channel_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "delivery_inbox_agent_id_agents_id_fk": { + "name": "delivery_inbox_agent_id_agents_id_fk", + "tableFrom": "delivery_inbox", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.delivery_outbox": { + "name": "delivery_outbox", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "channel_id": { + "name": "channel_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "thread_id": { + "name": "thread_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "dedupe_key": { + "name": "dedupe_key", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "binding_id": { + "name": "binding_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "device_id": { + "name": "device_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "transport": { + "name": "transport", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "text": { + "name": "text", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "kind": { + "name": "kind", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "request_id": { + "name": "request_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "state": { + "name": "state", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'queued'" + }, + "provider_id": { + "name": "provider_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "error": { + "name": "error", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "delivery_outbox_owner_idx": { + "name": "delivery_outbox_owner_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "created_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "delivery_outbox_provider_idx": { + "name": "delivery_outbox_provider_idx", + "columns": [ + { + "expression": "transport", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "provider_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "delivery_outbox_owner_user_id_users_id_fk": { + "name": "delivery_outbox_owner_user_id_users_id_fk", + "tableFrom": "delivery_outbox", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "delivery_outbox_channel_id_channels_id_fk": { + "name": "delivery_outbox_channel_id_channels_id_fk", + "tableFrom": "delivery_outbox", + "tableTo": "channels", + "columnsFrom": [ + "channel_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "delivery_outbox_agent_id_agents_id_fk": { + "name": "delivery_outbox_agent_id_agents_id_fk", + "tableFrom": "delivery_outbox", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": { + "delivery_outbox_dedupe_key_unique": { + "name": "delivery_outbox_dedupe_key_unique", + "nullsNotDistinct": false, + "columns": [ + "dedupe_key" + ] + } + }, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.push_devices": { + "name": "push_devices", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "token": { + "name": "token", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "project_id": { + "name": "project_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "platform": { + "name": "platform", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "enabled": { + "name": "enabled", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "push_devices_owner_idx": { + "name": "push_devices_owner_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "push_devices_owner_user_id_users_id_fk": { + "name": "push_devices_owner_user_id_users_id_fk", + "tableFrom": "push_devices", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": { + "push_devices_token_unique": { + "name": "push_devices_token_unique", + "nullsNotDistinct": false, + "columns": [ + "token" + ] + } + }, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.group_bot_threads": { + "name": "group_bot_threads", + "schema": "", + "columns": { + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "channel_id": { + "name": "channel_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "thread_id": { + "name": "thread_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "group_bot_threads_thread_idx": { + "name": "group_bot_threads_thread_idx", + "columns": [ + { + "expression": "thread_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "group_bot_threads_owner_user_id_users_id_fk": { + "name": "group_bot_threads_owner_user_id_users_id_fk", + "tableFrom": "group_bot_threads", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "group_bot_threads_channel_id_channels_id_fk": { + "name": "group_bot_threads_channel_id_channels_id_fk", + "tableFrom": "group_bot_threads", + "tableTo": "channels", + "columnsFrom": [ + "channel_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "group_bot_threads_owner_user_id_channel_id_agent_id_pk": { + "name": "group_bot_threads_owner_user_id_channel_id_agent_id_pk", + "columns": [ + "owner_user_id", + "channel_id", + "agent_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.group_messages": { + "name": "group_messages", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "channel_id": { + "name": "channel_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "thread_id": { + "name": "thread_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "text": { + "name": "text", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "status": { + "name": "status", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'completed'" + }, + "details": { + "name": "details", + "type": "jsonb", + "primaryKey": false, + "notNull": true, + "default": "'{}'::jsonb" + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "group_messages_channel_idx": { + "name": "group_messages_channel_idx", + "columns": [ + { + "expression": "channel_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "created_at", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "group_messages_channel_id_channels_id_fk": { + "name": "group_messages_channel_id_channels_id_fk", + "tableFrom": "group_messages", + "tableTo": "channels", + "columnsFrom": [ + "channel_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "group_messages_owner_user_id_users_id_fk": { + "name": "group_messages_owner_user_id_users_id_fk", + "tableFrom": "group_messages", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "group_messages_status_check": { + "name": "group_messages_status_check", + "value": "\"group_messages\".\"status\" IN ('queued', 'running', 'waiting', 'completed', 'failed')" + } + }, + "isRLSEnabled": false + }, + "public.action_records": { + "name": "action_records", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "uuid", + "primaryKey": true, + "notNull": true, + "default": "gen_random_uuid()" + }, + "surface": { + "name": "surface", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "bot_id": { + "name": "bot_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "actor_user_id": { + "name": "actor_user_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "tool_name": { + "name": "tool_name", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "command": { + "name": "command", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "outcome": { + "name": "outcome", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "action_records_created_idx": { + "name": "action_records_created_idx", + "columns": [ + { + "expression": "created_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "action_records_bot_idx": { + "name": "action_records_bot_idx", + "columns": [ + { + "expression": "bot_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "created_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "action_records_surface_check": { + "name": "action_records_surface_check", + "value": "\"action_records\".\"surface\" IN ('cloud', 'local')" + } + }, + "isRLSEnabled": false + }, + "public.capability_settings": { + "name": "capability_settings", + "schema": "", + "columns": { + "scope_kind": { + "name": "scope_kind", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "scope_id": { + "name": "scope_id", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "''" + }, + "capability": { + "name": "capability", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "allowed": { + "name": "allowed", + "type": "boolean", + "primaryKey": false, + "notNull": true + }, + "updated_by": { + "name": "updated_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": {}, + "compositePrimaryKeys": { + "capability_settings_scope_kind_scope_id_capability_pk": { + "name": "capability_settings_scope_kind_scope_id_capability_pk", + "columns": [ + "scope_kind", + "scope_id", + "capability" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "capability_settings_scope_kind_check": { + "name": "capability_settings_scope_kind_check", + "value": "\"capability_settings\".\"scope_kind\" IN ('organization', 'role', 'group')" + } + }, + "isRLSEnabled": false + }, + "public.enterprise_settings": { + "name": "enterprise_settings", + "schema": "", + "columns": { + "key": { + "name": "key", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "value": { + "name": "value", + "type": "jsonb", + "primaryKey": false, + "notNull": true + }, + "updated_by": { + "name": "updated_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.model_usage": { + "name": "model_usage", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "uuid", + "primaryKey": true, + "notNull": true, + "default": "gen_random_uuid()" + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "thread_id": { + "name": "thread_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "run_id": { + "name": "run_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "model": { + "name": "model", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "source": { + "name": "source", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "allowed": { + "name": "allowed", + "type": "boolean", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "model_usage_created_idx": { + "name": "model_usage_created_idx", + "columns": [ + { + "expression": "created_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "model_usage_model_idx": { + "name": "model_usage_model_idx", + "columns": [ + { + "expression": "model", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "created_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "model_usage_source_check": { + "name": "model_usage_source_check", + "value": "\"model_usage\".\"source\" IN ('configured', 'observed', 'unknown')" + } + }, + "isRLSEnabled": false + }, + "public.network_policies": { + "name": "network_policies", + "schema": "", + "columns": { + "scope_kind": { + "name": "scope_kind", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "scope_id": { + "name": "scope_id", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "''" + }, + "mode": { + "name": "mode", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "rules": { + "name": "rules", + "type": "jsonb", + "primaryKey": false, + "notNull": true, + "default": "'{\"entries\":[]}'::jsonb" + }, + "locked": { + "name": "locked", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": false + }, + "updated_by": { + "name": "updated_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": {}, + "compositePrimaryKeys": { + "network_policies_scope_kind_scope_id_pk": { + "name": "network_policies_scope_kind_scope_id_pk", + "columns": [ + "scope_kind", + "scope_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "network_policies_scope_kind_check": { + "name": "network_policies_scope_kind_check", + "value": "\"network_policies\".\"scope_kind\" IN ('organization', 'group')" + }, + "network_policies_mode_check": { + "name": "network_policies_mode_check", + "value": "\"network_policies\".\"mode\" IN ('allow_all', 'defaults_plus_allowlist', 'allowlist_only')" + } + }, + "isRLSEnabled": false + }, + "public.scim_connection_bindings": { + "name": "scim_connection_bindings", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "connection_id": { + "name": "connection_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "connection_key": { + "name": "connection_key", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "provisioning_domain_id": { + "name": "provisioning_domain_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + }, + "decommissioned_at": { + "name": "decommissioned_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "decommission_status": { + "name": "decommission_status", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'active'" + }, + "decommission_cursor_user_id": { + "name": "decommission_cursor_user_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "decommission_reconciled_user_count": { + "name": "decommission_reconciled_user_count", + "type": "integer", + "primaryKey": false, + "notNull": true, + "default": 0 + }, + "decommission_batch_count": { + "name": "decommission_batch_count", + "type": "integer", + "primaryKey": false, + "notNull": true, + "default": 0 + }, + "decommission_revision": { + "name": "decommission_revision", + "type": "integer", + "primaryKey": false, + "notNull": true, + "default": 0 + }, + "decommission_completed_at": { + "name": "decommission_completed_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "decommission_lease_id": { + "name": "decommission_lease_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "decommission_lease_expires_at": { + "name": "decommission_lease_expires_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + } + }, + "indexes": { + "scim_connection_bindings_connection_idx": { + "name": "scim_connection_bindings_connection_idx", + "columns": [ + { + "expression": "connection_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": { + "scim_connection_bindings_connection_key_unique": { + "name": "scim_connection_bindings_connection_key_unique", + "nullsNotDistinct": false, + "columns": [ + "connection_key" + ] + } + }, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.scim_group_members": { + "name": "scim_group_members", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "connection_id": { + "name": "connection_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "group_id": { + "name": "group_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "scim_user_id": { + "name": "scim_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "membership_key": { + "name": "membership_key", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + } + }, + "indexes": { + "scim_group_members_connection_idx": { + "name": "scim_group_members_connection_idx", + "columns": [ + { + "expression": "connection_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "scim_group_members_group_idx": { + "name": "scim_group_members_group_idx", + "columns": [ + { + "expression": "group_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "scim_group_members_scim_user_idx": { + "name": "scim_group_members_scim_user_idx", + "columns": [ + { + "expression": "scim_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "scim_group_members_group_id_scim_groups_id_fk": { + "name": "scim_group_members_group_id_scim_groups_id_fk", + "tableFrom": "scim_group_members", + "tableTo": "scim_groups", + "columnsFrom": [ + "group_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "scim_group_members_scim_user_id_scim_users_id_fk": { + "name": "scim_group_members_scim_user_id_scim_users_id_fk", + "tableFrom": "scim_group_members", + "tableTo": "scim_users", + "columnsFrom": [ + "scim_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": { + "scim_group_members_membership_key_unique": { + "name": "scim_group_members_membership_key_unique", + "nullsNotDistinct": false, + "columns": [ + "membership_key" + ] + } + }, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.scim_groups": { + "name": "scim_groups", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "connection_id": { + "name": "connection_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "provisioning_domain_id": { + "name": "provisioning_domain_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "revision": { + "name": "revision", + "type": "integer", + "primaryKey": false, + "notNull": true, + "default": 0 + }, + "display_name": { + "name": "display_name", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "display_name_key": { + "name": "display_name_key", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "external_id": { + "name": "external_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "external_id_key": { + "name": "external_id_key", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "order_key": { + "name": "order_key", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + } + }, + "indexes": { + "scim_groups_connection_idx": { + "name": "scim_groups_connection_idx", + "columns": [ + { + "expression": "connection_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "scim_groups_domain_idx": { + "name": "scim_groups_domain_idx", + "columns": [ + { + "expression": "provisioning_domain_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": { + "scim_groups_display_name_key_unique": { + "name": "scim_groups_display_name_key_unique", + "nullsNotDistinct": false, + "columns": [ + "display_name_key" + ] + }, + "scim_groups_external_id_key_unique": { + "name": "scim_groups_external_id_key_unique", + "nullsNotDistinct": false, + "columns": [ + "external_id_key" + ] + }, + "scim_groups_order_key_unique": { + "name": "scim_groups_order_key_unique", + "nullsNotDistinct": false, + "columns": [ + "order_key" + ] + } + }, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.scim_identity_tombstones": { + "name": "scim_identity_tombstones", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "connection_id": { + "name": "connection_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "provisioning_domain_id": { + "name": "provisioning_domain_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "external_id": { + "name": "external_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "external_id_key": { + "name": "external_id_key", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "profile": { + "name": "profile", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "deleted_at": { + "name": "deleted_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + } + }, + "indexes": { + "scim_identity_tombstones_connection_idx": { + "name": "scim_identity_tombstones_connection_idx", + "columns": [ + { + "expression": "connection_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "scim_identity_tombstones_domain_idx": { + "name": "scim_identity_tombstones_domain_idx", + "columns": [ + { + "expression": "provisioning_domain_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "scim_identity_tombstones_user_idx": { + "name": "scim_identity_tombstones_user_idx", + "columns": [ + { + "expression": "user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "scim_identity_tombstones_user_id_users_id_fk": { + "name": "scim_identity_tombstones_user_id_users_id_fk", + "tableFrom": "scim_identity_tombstones", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": { + "scim_identity_tombstones_external_id_key_unique": { + "name": "scim_identity_tombstones_external_id_key_unique", + "nullsNotDistinct": false, + "columns": [ + "external_id_key" + ] + } + }, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.scim_projection_grants": { + "name": "scim_projection_grants", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "connection_id": { + "name": "connection_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "provisioning_domain_id": { + "name": "provisioning_domain_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "scim_user_id": { + "name": "scim_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "source_kind": { + "name": "source_kind", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "source_id": { + "name": "source_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "source_value": { + "name": "source_value", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "role": { + "name": "role", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "grant_key": { + "name": "grant_key", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + } + }, + "indexes": { + "scim_projection_grants_connection_idx": { + "name": "scim_projection_grants_connection_idx", + "columns": [ + { + "expression": "connection_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "scim_projection_grants_domain_idx": { + "name": "scim_projection_grants_domain_idx", + "columns": [ + { + "expression": "provisioning_domain_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "scim_projection_grants_scim_user_idx": { + "name": "scim_projection_grants_scim_user_idx", + "columns": [ + { + "expression": "scim_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "scim_projection_grants_user_idx": { + "name": "scim_projection_grants_user_idx", + "columns": [ + { + "expression": "user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "scim_projection_grants_scim_user_id_scim_users_id_fk": { + "name": "scim_projection_grants_scim_user_id_scim_users_id_fk", + "tableFrom": "scim_projection_grants", + "tableTo": "scim_users", + "columnsFrom": [ + "scim_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "scim_projection_grants_user_id_users_id_fk": { + "name": "scim_projection_grants_user_id_users_id_fk", + "tableFrom": "scim_projection_grants", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": { + "scim_projection_grants_grant_key_unique": { + "name": "scim_projection_grants_grant_key_unique", + "nullsNotDistinct": false, + "columns": [ + "grant_key" + ] + } + }, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.scim_subjects": { + "name": "scim_subjects", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "profile_source_id": { + "name": "profile_source_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "revision": { + "name": "revision", + "type": "integer", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + } + }, + "indexes": { + "scim_subjects_profile_source_idx": { + "name": "scim_subjects_profile_source_idx", + "columns": [ + { + "expression": "profile_source_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "scim_subjects_user_id_users_id_fk": { + "name": "scim_subjects_user_id_users_id_fk", + "tableFrom": "scim_subjects", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": { + "scim_subjects_user_id_unique": { + "name": "scim_subjects_user_id_unique", + "nullsNotDistinct": false, + "columns": [ + "user_id" + ] + } + }, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.scim_users": { + "name": "scim_users", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "connection_id": { + "name": "connection_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "provisioning_domain_id": { + "name": "provisioning_domain_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "connection_user_key": { + "name": "connection_user_key", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "user_name": { + "name": "user_name", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "user_name_key": { + "name": "user_name_key", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "primary_email": { + "name": "primary_email", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "work_email_value_index": { + "name": "work_email_value_index", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "email_value_index": { + "name": "email_value_index", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "display_name": { + "name": "display_name", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "formatted_name": { + "name": "formatted_name", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "given_name": { + "name": "given_name", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "family_name": { + "name": "family_name", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "serialized_emails": { + "name": "serialized_emails", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "serialized_attributes": { + "name": "serialized_attributes", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "external_id": { + "name": "external_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "external_id_key": { + "name": "external_id_key", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "active": { + "name": "active", + "type": "boolean", + "primaryKey": false, + "notNull": true + }, + "order_key": { + "name": "order_key", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + } + }, + "indexes": { + "scim_users_connection_idx": { + "name": "scim_users_connection_idx", + "columns": [ + { + "expression": "connection_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "scim_users_domain_idx": { + "name": "scim_users_domain_idx", + "columns": [ + { + "expression": "provisioning_domain_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "scim_users_user_idx": { + "name": "scim_users_user_idx", + "columns": [ + { + "expression": "user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "scim_users_user_id_users_id_fk": { + "name": "scim_users_user_id_users_id_fk", + "tableFrom": "scim_users", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": { + "scim_users_connection_user_key_unique": { + "name": "scim_users_connection_user_key_unique", + "nullsNotDistinct": false, + "columns": [ + "connection_user_key" + ] + }, + "scim_users_user_name_key_unique": { + "name": "scim_users_user_name_key_unique", + "nullsNotDistinct": false, + "columns": [ + "user_name_key" + ] + }, + "scim_users_external_id_key_unique": { + "name": "scim_users_external_id_key_unique", + "nullsNotDistinct": false, + "columns": [ + "external_id_key" + ] + }, + "scim_users_order_key_unique": { + "name": "scim_users_order_key_unique", + "nullsNotDistinct": false, + "columns": [ + "order_key" + ] + } + }, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.bot_lifecycle": { + "name": "bot_lifecycle", + "schema": "", + "columns": { + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "paused_at": { + "name": "paused_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "notify": { + "name": "notify", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'all'" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "bot_lifecycle_owner_user_id_users_id_fk": { + "name": "bot_lifecycle_owner_user_id_users_id_fk", + "tableFrom": "bot_lifecycle", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "bot_lifecycle_agent_id_agents_id_fk": { + "name": "bot_lifecycle_agent_id_agents_id_fk", + "tableFrom": "bot_lifecycle", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "bot_lifecycle_owner_user_id_agent_id_pk": { + "name": "bot_lifecycle_owner_user_id_agent_id_pk", + "columns": [ + "owner_user_id", + "agent_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.update_routing_preferences": { + "name": "update_routing_preferences", + "schema": "", + "columns": { + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "kind": { + "name": "kind", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "transports": { + "name": "transports", + "type": "text[]", + "primaryKey": false, + "notNull": true, + "default": "'{}'" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "update_routing_preferences_owner_user_id_users_id_fk": { + "name": "update_routing_preferences_owner_user_id_users_id_fk", + "tableFrom": "update_routing_preferences", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "update_routing_preferences_owner_user_id_kind_pk": { + "name": "update_routing_preferences_owner_user_id_kind_pk", + "columns": [ + "owner_user_id", + "kind" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.saved_logins": { + "name": "saved_logins", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "origin": { + "name": "origin", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "username": { + "name": "username", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "encrypted_password": { + "name": "encrypted_password", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "last_used_at": { + "name": "last_used_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + } + }, + "indexes": { + "saved_logins_owner_origin_username_idx": { + "name": "saved_logins_owner_origin_username_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "origin", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "username", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "concurrently": false, + "method": "btree", + "with": {} + }, + "saved_logins_owner_idx": { + "name": "saved_logins_owner_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "saved_logins_owner_user_id_users_id_fk": { + "name": "saved_logins_owner_user_id_users_id_fk", + "tableFrom": "saved_logins", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.sign_in_requests": { + "name": "sign_in_requests", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "bot_id": { + "name": "bot_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "origin": { + "name": "origin", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "reason": { + "name": "reason", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "status": { + "name": "status", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'pending'" + }, + "method": { + "name": "method", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "outcome": { + "name": "outcome", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "thread_id": { + "name": "thread_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "tool_call_id": { + "name": "tool_call_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "control_request_id": { + "name": "control_request_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "continuation": { + "name": "continuation", + "type": "jsonb", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "expires_at": { + "name": "expires_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + }, + "resolved_at": { + "name": "resolved_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "filling_until": { + "name": "filling_until", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + } + }, + "indexes": { + "sign_in_requests_owner_idx": { + "name": "sign_in_requests_owner_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "status", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "sign_in_requests_owner_user_id_users_id_fk": { + "name": "sign_in_requests_owner_user_id_users_id_fk", + "tableFrom": "sign_in_requests", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "sign_in_requests_status_check": { + "name": "sign_in_requests_status_check", + "value": "\"sign_in_requests\".\"status\" IN ('pending', 'filling', 'code_required', 'taken_over', 'signed_in', 'failed', 'cancelled', 'expired')" + }, + "sign_in_requests_method_check": { + "name": "sign_in_requests_method_check", + "value": "\"sign_in_requests\".\"method\" IS NULL OR \"sign_in_requests\".\"method\" IN ('typed', 'saved', 'takeover')" + } + }, + "isRLSEnabled": false + }, + "public.team_bot_assignments": { + "name": "team_bot_assignments", + "schema": "", + "columns": { + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "group_name": { + "name": "group_name", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "assigned_by": { + "name": "assigned_by", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "assigned_at": { + "name": "assigned_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "team_bot_assignments_agent_id_agents_id_fk": { + "name": "team_bot_assignments_agent_id_agents_id_fk", + "tableFrom": "team_bot_assignments", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "team_bot_assignments_assigned_by_users_id_fk": { + "name": "team_bot_assignments_assigned_by_users_id_fk", + "tableFrom": "team_bot_assignments", + "tableTo": "users", + "columnsFrom": [ + "assigned_by" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "team_bot_assignments_agent_id_group_name_pk": { + "name": "team_bot_assignments_agent_id_group_name_pk", + "columns": [ + "agent_id", + "group_name" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.team_bot_audience": { + "name": "team_bot_audience", + "schema": "", + "columns": { + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "kind": { + "name": "kind", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "value": { + "name": "value", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "team_bot_audience_agent_id_agents_id_fk": { + "name": "team_bot_audience_agent_id_agents_id_fk", + "tableFrom": "team_bot_audience", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "team_bot_audience_agent_id_kind_value_pk": { + "name": "team_bot_audience_agent_id_kind_value_pk", + "columns": [ + "agent_id", + "kind", + "value" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "team_bot_audience_kind_check": { + "name": "team_bot_audience_kind_check", + "value": "\"team_bot_audience\".\"kind\" IN ('user', 'group')" + } + }, + "isRLSEnabled": false + }, + "public.team_bot_consent_defaults": { + "name": "team_bot_consent_defaults", + "schema": "", + "columns": { + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "server_id": { + "name": "server_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "team_bot_consent_defaults_user_id_users_id_fk": { + "name": "team_bot_consent_defaults_user_id_users_id_fk", + "tableFrom": "team_bot_consent_defaults", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "team_bot_consent_defaults_user_id_server_id_pk": { + "name": "team_bot_consent_defaults_user_id_server_id_pk", + "columns": [ + "user_id", + "server_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.team_bot_consents": { + "name": "team_bot_consents", + "schema": "", + "columns": { + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "server_id": { + "name": "server_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "decision": { + "name": "decision", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "team_bot_consents_user_id_users_id_fk": { + "name": "team_bot_consents_user_id_users_id_fk", + "tableFrom": "team_bot_consents", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "team_bot_consents_agent_id_agents_id_fk": { + "name": "team_bot_consents_agent_id_agents_id_fk", + "tableFrom": "team_bot_consents", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "team_bot_consents_user_id_agent_id_server_id_pk": { + "name": "team_bot_consents_user_id_agent_id_server_id_pk", + "columns": [ + "user_id", + "agent_id", + "server_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "team_bot_consents_decision_check": { + "name": "team_bot_consents_decision_check", + "value": "\"team_bot_consents\".\"decision\" IN ('always', 'once')" + } + }, + "isRLSEnabled": false + }, + "public.team_bot_publications": { + "name": "team_bot_publications", + "schema": "", + "columns": { + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "published_by": { + "name": "published_by", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "audience": { + "name": "audience", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "published_at": { + "name": "published_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "team_bot_publications_agent_id_agents_id_fk": { + "name": "team_bot_publications_agent_id_agents_id_fk", + "tableFrom": "team_bot_publications", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "team_bot_publications_published_by_users_id_fk": { + "name": "team_bot_publications_published_by_users_id_fk", + "tableFrom": "team_bot_publications", + "tableTo": "users", + "columnsFrom": [ + "published_by" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "team_bot_publications_audience_check": { + "name": "team_bot_publications_audience_check", + "value": "\"team_bot_publications\".\"audience\" IN ('team', 'people')" + } + }, + "isRLSEnabled": false + }, + "public.shared_use_approval_members": { + "name": "shared_use_approval_members", + "schema": "", + "columns": { + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "server_id": { + "name": "server_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "kind": { + "name": "kind", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "value": { + "name": "value", + "type": "text", + "primaryKey": false, + "notNull": true + } + }, + "indexes": {}, + "foreignKeys": { + "shared_use_approval_members_approval_fk": { + "name": "shared_use_approval_members_approval_fk", + "tableFrom": "shared_use_approval_members", + "tableTo": "shared_use_approvals", + "columnsFrom": [ + "agent_id", + "server_id" + ], + "columnsTo": [ + "agent_id", + "server_id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "shared_use_approval_members_agent_id_server_id_kind_value_pk": { + "name": "shared_use_approval_members_agent_id_server_id_kind_value_pk", + "columns": [ + "agent_id", + "server_id", + "kind", + "value" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "shared_use_approval_members_kind_check": { + "name": "shared_use_approval_members_kind_check", + "value": "\"shared_use_approval_members\".\"kind\" IN ('user', 'group')" + } + }, + "isRLSEnabled": false + }, + "public.shared_use_approvals": { + "name": "shared_use_approvals", + "schema": "", + "columns": { + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "server_id": { + "name": "server_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "audience": { + "name": "audience", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "outside_input": { + "name": "outside_input", + "type": "boolean", + "primaryKey": false, + "notNull": true + }, + "approved_by": { + "name": "approved_by", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "approved_at": { + "name": "approved_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "shared_use_approvals_agent_id_agents_id_fk": { + "name": "shared_use_approvals_agent_id_agents_id_fk", + "tableFrom": "shared_use_approvals", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "shared_use_approvals_server_id_mcp_servers_id_fk": { + "name": "shared_use_approvals_server_id_mcp_servers_id_fk", + "tableFrom": "shared_use_approvals", + "tableTo": "mcp_servers", + "columnsFrom": [ + "server_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "shared_use_approvals_agent_id_server_id_pk": { + "name": "shared_use_approvals_agent_id_server_id_pk", + "columns": [ + "agent_id", + "server_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "shared_use_approvals_audience_check": { + "name": "shared_use_approvals_audience_check", + "value": "\"shared_use_approvals\".\"audience\" IN ('owner', 'people', 'team')" + } + }, + "isRLSEnabled": false + }, + "public.shared_use_requests": { + "name": "shared_use_requests", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "server_id": { + "name": "server_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "proposed_audience": { + "name": "proposed_audience", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "proposed_outside_input": { + "name": "proposed_outside_input", + "type": "boolean", + "primaryKey": false, + "notNull": true + }, + "proposed_members": { + "name": "proposed_members", + "type": "jsonb", + "primaryKey": false, + "notNull": true, + "default": "'[]'::jsonb" + }, + "reason": { + "name": "reason", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "requested_by": { + "name": "requested_by", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "status": { + "name": "status", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'pending'" + }, + "decided_by": { + "name": "decided_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "decided_at": { + "name": "decided_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "shared_use_requests_pending_idx": { + "name": "shared_use_requests_pending_idx", + "columns": [ + { + "expression": "agent_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "server_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "where": "\"shared_use_requests\".\"status\" = 'pending'", + "concurrently": false, + "method": "btree", + "with": {} + }, + "shared_use_requests_status_idx": { + "name": "shared_use_requests_status_idx", + "columns": [ + { + "expression": "status", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "shared_use_requests_agent_id_agents_id_fk": { + "name": "shared_use_requests_agent_id_agents_id_fk", + "tableFrom": "shared_use_requests", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "shared_use_requests_server_id_mcp_servers_id_fk": { + "name": "shared_use_requests_server_id_mcp_servers_id_fk", + "tableFrom": "shared_use_requests", + "tableTo": "mcp_servers", + "columnsFrom": [ + "server_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "shared_use_requests_audience_check": { + "name": "shared_use_requests_audience_check", + "value": "\"shared_use_requests\".\"proposed_audience\" IN ('owner', 'people', 'team')" + }, + "shared_use_requests_reason_check": { + "name": "shared_use_requests_reason_check", + "value": "\"shared_use_requests\".\"reason\" IN ('publish', 'trigger', 'grant', 'refused_call')" + }, + "shared_use_requests_status_check": { + "name": "shared_use_requests_status_check", + "value": "\"shared_use_requests\".\"status\" IN ('pending', 'approved', 'declined', 'superseded')" + } + }, + "isRLSEnabled": false + }, + "public.identity_link_challenges": { + "name": "identity_link_challenges", + "schema": "", + "columns": { + "token_hash": { + "name": "token_hash", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "provider": { + "name": "provider", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "expires_at": { + "name": "expires_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + } + }, + "indexes": { + "identity_link_challenges_expiry_idx": { + "name": "identity_link_challenges_expiry_idx", + "columns": [ + { + "expression": "expires_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "identity_link_challenges_user_provider_idx": { + "name": "identity_link_challenges_user_provider_idx", + "columns": [ + { + "expression": "user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "provider", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.identity_links": { + "name": "identity_links", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "provider": { + "name": "provider", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "realm": { + "name": "realm", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "subject": { + "name": "subject", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "handle": { + "name": "handle", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "verified_by": { + "name": "verified_by", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "credential_id": { + "name": "credential_id", + "type": "uuid", + "primaryKey": false, + "notNull": false + }, + "status": { + "name": "status", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'active'" + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "identity_links_identity_idx": { + "name": "identity_links_identity_idx", + "columns": [ + { + "expression": "provider", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "realm", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "subject", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "concurrently": false, + "method": "btree", + "with": {} + }, + "identity_links_user_realm_idx": { + "name": "identity_links_user_realm_idx", + "columns": [ + { + "expression": "user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "provider", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "realm", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "concurrently": false, + "method": "btree", + "with": {} + }, + "identity_links_credential_idx": { + "name": "identity_links_credential_idx", + "columns": [ + { + "expression": "credential_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "where": "\"identity_links\".\"credential_id\" IS NOT NULL", + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "identity_links_credential_id_credentials_id_fk": { + "name": "identity_links_credential_id_credentials_id_fk", + "tableFrom": "identity_links", + "tableTo": "credentials", + "columnsFrom": [ + "credential_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "no action", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "identity_links_verified_by_check": { + "name": "identity_links_verified_by_check", + "value": "\"identity_links\".\"verified_by\" IN ('challenge', 'oauth')" + }, + "identity_links_status_check": { + "name": "identity_links_status_check", + "value": "\"identity_links\".\"status\" IN ('active', 'needs_reconnect')" + } + }, + "isRLSEnabled": false + } + }, + "enums": { + "public.agent_type": { + "name": "agent_type", + "schema": "public", + "values": [ + "built_in", + "remote_ag_ui", + "remote_mastra" + ] + }, + "public.credential_kind": { + "name": "credential_kind", + "schema": "public", + "values": [ + "model", + "connector", + "agent", + "mcp", + "mcp_oauth_client", + "mcp_user_token" + ] + }, + "public.role": { + "name": "role", + "schema": "public", + "values": [ + "admin", + "user" + ] + }, + "public.agent_visibility": { + "name": "agent_visibility", + "schema": "public", + "values": [ + "public", + "private" + ] + }, + "public.routine_run_status": { + "name": "routine_run_status", + "schema": "public", + "values": [ + "succeeded", + "failed", + "skipped", + "waiting" + ] + }, + "public.responsibility_run_status": { + "name": "responsibility_run_status", + "schema": "public", + "values": [ + "queued", + "running", + "waiting", + "succeeded", + "failed", + "skipped" + ] + }, + "public.responsibility_status": { + "name": "responsibility_status", + "schema": "public", + "values": [ + "active", + "paused", + "completed" + ] + } + }, + "schemas": {}, + "sequences": {}, + "roles": {}, + "policies": {}, + "views": {}, + "_meta": { + "columns": {}, + "schemas": {}, + "tables": {} + } +} \ No newline at end of file diff --git a/server/drizzle/meta/0061_snapshot.json b/server/drizzle/meta/0061_snapshot.json new file mode 100644 index 000000000..a1b63c6a0 --- /dev/null +++ b/server/drizzle/meta/0061_snapshot.json @@ -0,0 +1,10021 @@ +{ + "id": "bc785e20-49f3-4886-b0b1-a81186dcbe0c", + "prevId": "4dd738d3-9934-4fe3-adf8-725b8b8439ee", + "version": "7", + "dialect": "postgresql", + "tables": { + "public.accounts": { + "name": "accounts", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "account_id": { + "name": "account_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "provider_id": { + "name": "provider_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "issuer": { + "name": "issuer", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "access_token": { + "name": "access_token", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "refresh_token": { + "name": "refresh_token", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "id_token": { + "name": "id_token", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "access_token_expires_at": { + "name": "access_token_expires_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "refresh_token_expires_at": { + "name": "refresh_token_expires_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "scope": { + "name": "scope", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "password": { + "name": "password", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "accounts_provider_account_idx": { + "name": "accounts_provider_account_idx", + "columns": [ + { + "expression": "provider_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "account_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "accounts_user_id_users_id_fk": { + "name": "accounts_user_id_users_id_fk", + "tableFrom": "accounts", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.agents": { + "name": "agents", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "name": { + "name": "name", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "type": { + "name": "type", + "type": "agent_type", + "typeSchema": "public", + "primaryKey": false, + "notNull": true + }, + "configuration": { + "name": "configuration", + "type": "jsonb", + "primaryKey": false, + "notNull": true + }, + "package_id": { + "name": "package_id", + "type": "uuid", + "primaryKey": false, + "notNull": false + }, + "override": { + "name": "override", + "type": "jsonb", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "agents_package_id_deployment_packages_id_fk": { + "name": "agents_package_id_deployment_packages_id_fk", + "tableFrom": "agents", + "tableTo": "deployment_packages", + "columnsFrom": [ + "package_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "set null", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.attachments": { + "name": "attachments", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "uuid", + "primaryKey": true, + "notNull": true, + "default": "gen_random_uuid()" + }, + "channel_id": { + "name": "channel_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "uploaded_by": { + "name": "uploaded_by", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "name": { + "name": "name", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "mime_type": { + "name": "mime_type", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "size_bytes": { + "name": "size_bytes", + "type": "integer", + "primaryKey": false, + "notNull": true + }, + "bytes": { + "name": "bytes", + "type": "bytea", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "attached_at": { + "name": "attached_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "upload_group": { + "name": "upload_group", + "type": "text", + "primaryKey": false, + "notNull": false + } + }, + "indexes": { + "attachments_channel_idx": { + "name": "attachments_channel_idx", + "columns": [ + { + "expression": "channel_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "attachments_uploaded_by_idx": { + "name": "attachments_uploaded_by_idx", + "columns": [ + { + "expression": "uploaded_by", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "attachments_upload_group_idx": { + "name": "attachments_upload_group_idx", + "columns": [ + { + "expression": "channel_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "uploaded_by", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "upload_group", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "where": "\"attachments\".\"attached_at\" is null", + "concurrently": false, + "method": "btree", + "with": {} + }, + "attachments_staged_idx": { + "name": "attachments_staged_idx", + "columns": [ + { + "expression": "created_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "where": "\"attachments\".\"attached_at\" is null", + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "attachments_channel_id_channels_id_fk": { + "name": "attachments_channel_id_channels_id_fk", + "tableFrom": "attachments", + "tableTo": "channels", + "columnsFrom": [ + "channel_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "attachments_uploaded_by_users_id_fk": { + "name": "attachments_uploaded_by_users_id_fk", + "tableFrom": "attachments", + "tableTo": "users", + "columnsFrom": [ + "uploaded_by" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.audit_events": { + "name": "audit_events", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "uuid", + "primaryKey": true, + "notNull": true, + "default": "gen_random_uuid()" + }, + "actor_user_id": { + "name": "actor_user_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "initiator_kind": { + "name": "initiator_kind", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'person'" + }, + "initiator_id": { + "name": "initiator_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "event_type": { + "name": "event_type", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "target_type": { + "name": "target_type", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "target_id": { + "name": "target_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "payload": { + "name": "payload", + "type": "jsonb", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "audit_events_created_at_idx": { + "name": "audit_events_created_at_idx", + "columns": [ + { + "expression": "created_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "audit_events_type_time_idx": { + "name": "audit_events_type_time_idx", + "columns": [ + { + "expression": "event_type", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "created_at", + "isExpression": false, + "asc": false, + "nulls": "last" + }, + { + "expression": "id", + "isExpression": false, + "asc": false, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "audit_events_actor_time_idx": { + "name": "audit_events_actor_time_idx", + "columns": [ + { + "expression": "actor_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "created_at", + "isExpression": false, + "asc": false, + "nulls": "last" + }, + { + "expression": "id", + "isExpression": false, + "asc": false, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "audit_events_target_time_idx": { + "name": "audit_events_target_time_idx", + "columns": [ + { + "expression": "target_type", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "target_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "created_at", + "isExpression": false, + "asc": false, + "nulls": "last" + }, + { + "expression": "id", + "isExpression": false, + "asc": false, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "audit_events_initiator_time_idx": { + "name": "audit_events_initiator_time_idx", + "columns": [ + { + "expression": "initiator_kind", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "created_at", + "isExpression": false, + "asc": false, + "nulls": "last" + }, + { + "expression": "id", + "isExpression": false, + "asc": false, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.channel_agents": { + "name": "channel_agents", + "schema": "", + "columns": { + "channel_id": { + "name": "channel_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "channel_agents_channel_id_channels_id_fk": { + "name": "channel_agents_channel_id_channels_id_fk", + "tableFrom": "channel_agents", + "tableTo": "channels", + "columnsFrom": [ + "channel_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "channel_agents_agent_id_agents_id_fk": { + "name": "channel_agents_agent_id_agents_id_fk", + "tableFrom": "channel_agents", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "channel_agents_channel_id_agent_id_pk": { + "name": "channel_agents_channel_id_agent_id_pk", + "columns": [ + "channel_id", + "agent_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.channel_memberships": { + "name": "channel_memberships", + "schema": "", + "columns": { + "channel_id": { + "name": "channel_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "pinned_at": { + "name": "pinned_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "last_read_at": { + "name": "last_read_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "channel_memberships_channel_id_channels_id_fk": { + "name": "channel_memberships_channel_id_channels_id_fk", + "tableFrom": "channel_memberships", + "tableTo": "channels", + "columnsFrom": [ + "channel_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "channel_memberships_user_id_users_id_fk": { + "name": "channel_memberships_user_id_users_id_fk", + "tableFrom": "channel_memberships", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "channel_memberships_channel_id_user_id_pk": { + "name": "channel_memberships_channel_id_user_id_pk", + "columns": [ + "channel_id", + "user_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.channels": { + "name": "channels", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "name": { + "name": "name", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "description": { + "name": "description", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "suggested_prompts": { + "name": "suggested_prompts", + "type": "text[]", + "primaryKey": false, + "notNull": true, + "default": "'{}'" + }, + "allowed_groups": { + "name": "allowed_groups", + "type": "text[]", + "primaryKey": false, + "notNull": true, + "default": "'{}'" + }, + "package_id": { + "name": "package_id", + "type": "uuid", + "primaryKey": false, + "notNull": false + }, + "override": { + "name": "override", + "type": "jsonb", + "primaryKey": false, + "notNull": false + }, + "summary": { + "name": "summary", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "summary_at": { + "name": "summary_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "last_message": { + "name": "last_message", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "last_message_source_id": { + "name": "last_message_source_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "last_message_at": { + "name": "last_message_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "last_message_agent_id": { + "name": "last_message_agent_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "deleted_at": { + "name": "deleted_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "channels_recent_activity_idx": { + "name": "channels_recent_activity_idx", + "columns": [ + { + "expression": "COALESCE(\"last_message_at\", \"created_at\") DESC", + "asc": true, + "isExpression": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "channels_awaiting_summary_idx": { + "name": "channels_awaiting_summary_idx", + "columns": [ + { + "expression": "id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "where": "\"channels\".\"summary\" is null and \"channels\".\"deleted_at\" is null", + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "channels_package_id_deployment_packages_id_fk": { + "name": "channels_package_id_deployment_packages_id_fk", + "tableFrom": "channels", + "tableTo": "deployment_packages", + "columnsFrom": [ + "package_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "set null", + "onUpdate": "no action" + }, + "channels_last_message_agent_id_agents_id_fk": { + "name": "channels_last_message_agent_id_agents_id_fk", + "tableFrom": "channels", + "tableTo": "agents", + "columnsFrom": [ + "last_message_agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "set null", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.credentials": { + "name": "credentials", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "uuid", + "primaryKey": true, + "notNull": true, + "default": "gen_random_uuid()" + }, + "kind": { + "name": "kind", + "type": "credential_kind", + "typeSchema": "public", + "primaryKey": false, + "notNull": true + }, + "provider": { + "name": "provider", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "encrypted_value": { + "name": "encrypted_value", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "key_id": { + "name": "key_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "metadata": { + "name": "metadata", + "type": "jsonb", + "primaryKey": false, + "notNull": true + }, + "revoked_at": { + "name": "revoked_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "credentials_active_key_idx": { + "name": "credentials_active_key_idx", + "columns": [ + { + "expression": "kind", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "provider", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "key_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "where": "\"credentials\".\"revoked_at\" IS NULL", + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.deployment_packages": { + "name": "deployment_packages", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "uuid", + "primaryKey": true, + "notNull": true, + "default": "gen_random_uuid()" + }, + "tenant_id": { + "name": "tenant_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "source_path": { + "name": "source_path", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "checksum": { + "name": "checksum", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "loaded_at": { + "name": "loaded_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": { + "deployment_packages_tenant_id_unique": { + "name": "deployment_packages_tenant_id_unique", + "nullsNotDistinct": false, + "columns": [ + "tenant_id" + ] + } + }, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.intelligence_channel_mappings": { + "name": "intelligence_channel_mappings", + "schema": "", + "columns": { + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "channel_id": { + "name": "channel_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "thread_id": { + "name": "thread_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "intelligence_channel_mappings_thread_idx": { + "name": "intelligence_channel_mappings_thread_idx", + "columns": [ + { + "expression": "thread_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "intelligence_channel_mappings_user_id_users_id_fk": { + "name": "intelligence_channel_mappings_user_id_users_id_fk", + "tableFrom": "intelligence_channel_mappings", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "intelligence_channel_mappings_channel_id_channels_id_fk": { + "name": "intelligence_channel_mappings_channel_id_channels_id_fk", + "tableFrom": "intelligence_channel_mappings", + "tableTo": "channels", + "columnsFrom": [ + "channel_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "intelligence_channel_mappings_user_id_channel_id_pk": { + "name": "intelligence_channel_mappings_user_id_channel_id_pk", + "columns": [ + "user_id", + "channel_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.revoked_access": { + "name": "revoked_access", + "schema": "", + "columns": { + "email": { + "name": "email", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "revoked_at": { + "name": "revoked_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "revoked_by": { + "name": "revoked_by", + "type": "text", + "primaryKey": false, + "notNull": true + } + }, + "indexes": {}, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.sessions": { + "name": "sessions", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "token": { + "name": "token", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "expires_at": { + "name": "expires_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + }, + "ip_address": { + "name": "ip_address", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "user_agent": { + "name": "user_agent", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "sessions_user_id_users_id_fk": { + "name": "sessions_user_id_users_id_fk", + "tableFrom": "sessions", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": { + "sessions_token_unique": { + "name": "sessions_token_unique", + "nullsNotDistinct": false, + "columns": [ + "token" + ] + } + }, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.sso_providers": { + "name": "sso_providers", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "issuer": { + "name": "issuer", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "oidc_config": { + "name": "oidc_config", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "saml_config": { + "name": "saml_config", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "provider_id": { + "name": "provider_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "organization_id": { + "name": "organization_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "domain": { + "name": "domain", + "type": "text", + "primaryKey": false, + "notNull": true + } + }, + "indexes": {}, + "foreignKeys": { + "sso_providers_user_id_users_id_fk": { + "name": "sso_providers_user_id_users_id_fk", + "tableFrom": "sso_providers", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "set null", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": { + "sso_providers_provider_id_unique": { + "name": "sso_providers_provider_id_unique", + "nullsNotDistinct": false, + "columns": [ + "provider_id" + ] + } + }, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.user_instructions": { + "name": "user_instructions", + "schema": "", + "columns": { + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "instructions": { + "name": "instructions", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "user_instructions_user_id_users_id_fk": { + "name": "user_instructions_user_id_users_id_fk", + "tableFrom": "user_instructions", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.user_roles": { + "name": "user_roles", + "schema": "", + "columns": { + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "role": { + "name": "role", + "type": "role", + "typeSchema": "public", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "user_roles_user_id_users_id_fk": { + "name": "user_roles_user_id_users_id_fk", + "tableFrom": "user_roles", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "user_roles_user_id_role_pk": { + "name": "user_roles_user_id_role_pk", + "columns": [ + "user_id", + "role" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.users": { + "name": "users", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "email": { + "name": "email", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "name": { + "name": "name", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "image": { + "name": "image", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "email_verified": { + "name": "email_verified", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": false + }, + "preferences": { + "name": "preferences", + "type": "jsonb", + "primaryKey": false, + "notNull": true, + "default": "'{}'::jsonb" + }, + "groups": { + "name": "groups", + "type": "text[]", + "primaryKey": false, + "notNull": true, + "default": "'{}'" + }, + "onboarding_step": { + "name": "onboarding_step", + "type": "integer", + "primaryKey": false, + "notNull": true, + "default": 0 + }, + "onboarding_completed_at": { + "name": "onboarding_completed_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "last_signed_in_at": { + "name": "last_signed_in_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": { + "users_email_unique": { + "name": "users_email_unique", + "nullsNotDistinct": false, + "columns": [ + "email" + ] + } + }, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.verifications": { + "name": "verifications", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "identifier": { + "name": "identifier", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "value": { + "name": "value", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "expires_at": { + "name": "expires_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.action_policy": { + "name": "action_policy", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "mode": { + "name": "mode", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "deny": { + "name": "deny", + "type": "text[]", + "primaryKey": false, + "notNull": true + }, + "allow": { + "name": "allow", + "type": "text[]", + "primaryKey": false, + "notNull": true + }, + "updated_by": { + "name": "updated_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.computer_page_frame": { + "name": "computer_page_frame", + "schema": "", + "columns": { + "computer_id": { + "name": "computer_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "tool_call_id": { + "name": "tool_call_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "url": { + "name": "url", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "title": { + "name": "title", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "frame": { + "name": "frame", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "captured_at": { + "name": "captured_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "computer_page_frame_captured_idx": { + "name": "computer_page_frame_captured_idx", + "columns": [ + { + "expression": "captured_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": {}, + "compositePrimaryKeys": { + "computer_page_frame_computer_id_tool_call_id_pk": { + "name": "computer_page_frame_computer_id_tool_call_id_pk", + "columns": [ + "computer_id", + "tool_call_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.computer_snapshot": { + "name": "computer_snapshot", + "schema": "", + "columns": { + "computer_id": { + "name": "computer_id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "snapshot_id": { + "name": "snapshot_id", + "type": "integer", + "primaryKey": false, + "notNull": true + }, + "url": { + "name": "url", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "elements": { + "name": "elements", + "type": "jsonb", + "primaryKey": false, + "notNull": true + }, + "taken_at": { + "name": "taken_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "session": { + "name": "session", + "type": "text", + "primaryKey": false, + "notNull": false + } + }, + "indexes": {}, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.agent_preferences": { + "name": "agent_preferences", + "schema": "", + "columns": { + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "hidden_at": { + "name": "hidden_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "pinned_at": { + "name": "pinned_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + } + }, + "indexes": {}, + "foreignKeys": { + "agent_preferences_user_id_users_id_fk": { + "name": "agent_preferences_user_id_users_id_fk", + "tableFrom": "agent_preferences", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "agent_preferences_agent_id_agents_id_fk": { + "name": "agent_preferences_agent_id_agents_id_fk", + "tableFrom": "agent_preferences", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "agent_preferences_user_id_agent_id_pk": { + "name": "agent_preferences_user_id_agent_id_pk", + "columns": [ + "user_id", + "agent_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.agent_profiles": { + "name": "agent_profiles", + "schema": "", + "columns": { + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "title": { + "name": "title", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "role_description": { + "name": "role_description", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "avatar_seed": { + "name": "avatar_seed", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "visibility": { + "name": "visibility", + "type": "agent_visibility", + "typeSchema": "public", + "primaryKey": false, + "notNull": true + }, + "callback_token_hash": { + "name": "callback_token_hash", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "callback_token_issued_at": { + "name": "callback_token_issued_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "deleted_at": { + "name": "deleted_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "agent_profiles_visibility_deleted_idx": { + "name": "agent_profiles_visibility_deleted_idx", + "columns": [ + { + "expression": "visibility", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "deleted_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "agent_profiles_agent_id_agents_id_fk": { + "name": "agent_profiles_agent_id_agents_id_fk", + "tableFrom": "agent_profiles", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "agent_profiles_owner_user_id_users_id_fk": { + "name": "agent_profiles_owner_user_id_users_id_fk", + "tableFrom": "agent_profiles", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "set null", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.routine_runs": { + "name": "routine_runs", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "routine_id": { + "name": "routine_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "started_at": { + "name": "started_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "finished_at": { + "name": "finished_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "status": { + "name": "status", + "type": "routine_run_status", + "typeSchema": "public", + "primaryKey": false, + "notNull": false + }, + "waiting": { + "name": "waiting", + "type": "jsonb", + "primaryKey": false, + "notNull": false + }, + "error": { + "name": "error", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "source": { + "name": "source", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'schedule'" + } + }, + "indexes": { + "routine_runs_by_routine_idx": { + "name": "routine_runs_by_routine_idx", + "columns": [ + { + "expression": "routine_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "started_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "routine_runs_routine_id_routines_id_fk": { + "name": "routine_runs_routine_id_routines_id_fk", + "tableFrom": "routine_runs", + "tableTo": "routines", + "columnsFrom": [ + "routine_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.routine_sweeps": { + "name": "routine_sweeps", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "swept_at": { + "name": "swept_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "owner": { + "name": "owner", + "type": "text", + "primaryKey": false, + "notNull": false + } + }, + "indexes": {}, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.routines": { + "name": "routines", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "channel_id": { + "name": "channel_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "instruction": { + "name": "instruction", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "cron": { + "name": "cron", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "timezone": { + "name": "timezone", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'UTC'" + }, + "enabled": { + "name": "enabled", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": true + }, + "next_run_at": { + "name": "next_run_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + }, + "last_run_at": { + "name": "last_run_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "enabled_at": { + "name": "enabled_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "routines_due_idx": { + "name": "routines_due_idx", + "columns": [ + { + "expression": "enabled", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "next_run_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "routines_by_owner_idx": { + "name": "routines_by_owner_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "enabled", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "routines_owner_user_id_users_id_fk": { + "name": "routines_owner_user_id_users_id_fk", + "tableFrom": "routines", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "routines_agent_id_agents_id_fk": { + "name": "routines_agent_id_agents_id_fk", + "tableFrom": "routines", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.component_exclusions": { + "name": "component_exclusions", + "schema": "", + "columns": { + "component_name": { + "name": "component_name", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "withheld_by": { + "name": "withheld_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "component_exclusions_component_name_components_name_fk": { + "name": "component_exclusions_component_name_components_name_fk", + "tableFrom": "component_exclusions", + "tableTo": "components", + "columnsFrom": [ + "component_name" + ], + "columnsTo": [ + "name" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "component_exclusions_agent_id_agents_id_fk": { + "name": "component_exclusions_agent_id_agents_id_fk", + "tableFrom": "component_exclusions", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "component_exclusions_component_name_agent_id_pk": { + "name": "component_exclusions_component_name_agent_id_pk", + "columns": [ + "component_name", + "agent_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.component_functions": { + "name": "component_functions", + "schema": "", + "columns": { + "component_name": { + "name": "component_name", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "function_name": { + "name": "function_name", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "granted_by": { + "name": "granted_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "component_functions_component_name_components_name_fk": { + "name": "component_functions_component_name_components_name_fk", + "tableFrom": "component_functions", + "tableTo": "components", + "columnsFrom": [ + "component_name" + ], + "columnsTo": [ + "name" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "component_functions_component_name_function_name_pk": { + "name": "component_functions_component_name_function_name_pk", + "columns": [ + "component_name", + "function_name" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.components": { + "name": "components", + "schema": "", + "columns": { + "name": { + "name": "name", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "title": { + "name": "title", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "kind": { + "name": "kind", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "draft_description": { + "name": "draft_description", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "published_description": { + "name": "published_description", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "published": { + "name": "published", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": false + }, + "published_at": { + "name": "published_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "updated_by": { + "name": "updated_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.brokered_connections": { + "name": "brokered_connections", + "schema": "", + "columns": { + "provider": { + "name": "provider", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "app": { + "name": "app", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "holder": { + "name": "holder", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "vendor_user_id": { + "name": "vendor_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "connected_by": { + "name": "connected_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "connected_at": { + "name": "connected_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "verified": { + "name": "verified", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": false + }, + "verified_at": { + "name": "verified_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "probe_action": { + "name": "probe_action", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "brokered_connections_person_idx": { + "name": "brokered_connections_person_idx", + "columns": [ + { + "expression": "provider", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "app", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "where": "\"brokered_connections\".\"holder\" = 'person'", + "concurrently": false, + "method": "btree", + "with": {} + }, + "brokered_connections_deployment_idx": { + "name": "brokered_connections_deployment_idx", + "columns": [ + { + "expression": "provider", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "app", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "where": "\"brokered_connections\".\"holder\" = 'deployment'", + "concurrently": false, + "method": "btree", + "with": {} + }, + "brokered_connections_user_idx": { + "name": "brokered_connections_user_idx", + "columns": [ + { + "expression": "user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "brokered_connections_holder_check": { + "name": "brokered_connections_holder_check", + "value": "(\"brokered_connections\".\"holder\" = 'person' AND \"brokered_connections\".\"user_id\" IS NOT NULL) OR (\"brokered_connections\".\"holder\" = 'deployment' AND \"brokered_connections\".\"user_id\" IS NULL)" + }, + "brokered_connections_provider_check": { + "name": "brokered_connections_provider_check", + "value": "\"brokered_connections\".\"provider\" IN ('composio', 'arcade')" + } + }, + "isRLSEnabled": false + }, + "public.composio_connections": { + "name": "composio_connections", + "schema": "", + "columns": { + "toolkit": { + "name": "toolkit", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "connected_at": { + "name": "connected_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "verified": { + "name": "verified", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": false + }, + "verified_at": { + "name": "verified_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "probe_action": { + "name": "probe_action", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "composio_connections_user_idx": { + "name": "composio_connections_user_idx", + "columns": [ + { + "expression": "user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": {}, + "compositePrimaryKeys": { + "composio_connections_toolkit_user_id_pk": { + "name": "composio_connections_toolkit_user_id_pk", + "columns": [ + "toolkit", + "user_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.mcp_servers": { + "name": "mcp_servers", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "title": { + "name": "title", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "logo": { + "name": "logo", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "vendor": { + "name": "vendor", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "url": { + "name": "url", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "provenance": { + "name": "provenance", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'first-party'" + }, + "credential_id": { + "name": "credential_id", + "type": "uuid", + "primaryKey": false, + "notNull": false + }, + "auth_scheme": { + "name": "auth_scheme", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "account_mode": { + "name": "account_mode", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "shared_vendor_user_id": { + "name": "shared_vendor_user_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "tools_refreshed_at": { + "name": "tools_refreshed_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "last_error": { + "name": "last_error", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "added_by": { + "name": "added_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "mcp_servers_credential_id_credentials_id_fk": { + "name": "mcp_servers_credential_id_credentials_id_fk", + "tableFrom": "mcp_servers", + "tableTo": "credentials", + "columnsFrom": [ + "credential_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "restrict", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "mcp_servers_account_mode_check": { + "name": "mcp_servers_account_mode_check", + "value": "\"mcp_servers\".\"account_mode\" IS NULL OR \"mcp_servers\".\"account_mode\" IN ('personal', 'shared')" + } + }, + "isRLSEnabled": false + }, + "public.mcp_tools": { + "name": "mcp_tools", + "schema": "", + "columns": { + "server_id": { + "name": "server_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "name": { + "name": "name", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "description": { + "name": "description", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "''" + }, + "input_schema": { + "name": "input_schema", + "type": "jsonb", + "primaryKey": false, + "notNull": true, + "default": "'{}'::jsonb" + }, + "effect": { + "name": "effect", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "destructive": { + "name": "destructive", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": false + }, + "version": { + "name": "version", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "mcp_tools_server_id_mcp_servers_id_fk": { + "name": "mcp_tools_server_id_mcp_servers_id_fk", + "tableFrom": "mcp_tools", + "tableTo": "mcp_servers", + "columnsFrom": [ + "server_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "mcp_tools_server_id_name_pk": { + "name": "mcp_tools_server_id_name_pk", + "columns": [ + "server_id", + "name" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.mcp_user_credentials": { + "name": "mcp_user_credentials", + "schema": "", + "columns": { + "server_id": { + "name": "server_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "credential_id": { + "name": "credential_id", + "type": "uuid", + "primaryKey": false, + "notNull": true + }, + "scope": { + "name": "scope", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "connected_at": { + "name": "connected_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "mcp_user_credentials_user_idx": { + "name": "mcp_user_credentials_user_idx", + "columns": [ + { + "expression": "user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "mcp_user_credentials_server_id_mcp_servers_id_fk": { + "name": "mcp_user_credentials_server_id_mcp_servers_id_fk", + "tableFrom": "mcp_user_credentials", + "tableTo": "mcp_servers", + "columnsFrom": [ + "server_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "mcp_user_credentials_user_id_users_id_fk": { + "name": "mcp_user_credentials_user_id_users_id_fk", + "tableFrom": "mcp_user_credentials", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "mcp_user_credentials_credential_id_credentials_id_fk": { + "name": "mcp_user_credentials_credential_id_credentials_id_fk", + "tableFrom": "mcp_user_credentials", + "tableTo": "credentials", + "columnsFrom": [ + "credential_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "no action", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "mcp_user_credentials_server_id_user_id_pk": { + "name": "mcp_user_credentials_server_id_user_id_pk", + "columns": [ + "server_id", + "user_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.pending_authorizations": { + "name": "pending_authorizations", + "schema": "", + "columns": { + "actor_id": { + "name": "actor_id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "server_id": { + "name": "server_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "action": { + "name": "action", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "holder": { + "name": "holder", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "vendor_user_id": { + "name": "vendor_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "auth_id": { + "name": "auth_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "completed_at": { + "name": "completed_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "outcome": { + "name": "outcome", + "type": "text", + "primaryKey": false, + "notNull": false + } + }, + "indexes": { + "pending_authorizations_server_idx": { + "name": "pending_authorizations_server_idx", + "columns": [ + { + "expression": "server_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "pending_authorizations_user_idx": { + "name": "pending_authorizations_user_idx", + "columns": [ + { + "expression": "user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "pending_authorizations_actor_id_users_id_fk": { + "name": "pending_authorizations_actor_id_users_id_fk", + "tableFrom": "pending_authorizations", + "tableTo": "users", + "columnsFrom": [ + "actor_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "pending_authorizations_server_id_mcp_servers_id_fk": { + "name": "pending_authorizations_server_id_mcp_servers_id_fk", + "tableFrom": "pending_authorizations", + "tableTo": "mcp_servers", + "columnsFrom": [ + "server_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "pending_authorizations_user_id_users_id_fk": { + "name": "pending_authorizations_user_id_users_id_fk", + "tableFrom": "pending_authorizations", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "pending_authorizations_holder_check": { + "name": "pending_authorizations_holder_check", + "value": "(\"pending_authorizations\".\"holder\" = 'person' AND \"pending_authorizations\".\"user_id\" IS NOT NULL) OR (\"pending_authorizations\".\"holder\" = 'deployment' AND \"pending_authorizations\".\"user_id\" IS NULL)" + }, + "pending_authorizations_outcome_check": { + "name": "pending_authorizations_outcome_check", + "value": "\"pending_authorizations\".\"outcome\" IS NULL OR \"pending_authorizations\".\"outcome\" IN ('completed', 'failed', 'unreconciled', 'withdrawn')" + }, + "pending_authorizations_completion_check": { + "name": "pending_authorizations_completion_check", + "value": "(\"pending_authorizations\".\"completed_at\" IS NULL) = (\"pending_authorizations\".\"outcome\" IS NULL)" + } + }, + "isRLSEnabled": false + }, + "public.plugin_grants": { + "name": "plugin_grants", + "schema": "", + "columns": { + "kind": { + "name": "kind", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "ref": { + "name": "ref", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "granted_by": { + "name": "granted_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "plugin_grants_agent_idx": { + "name": "plugin_grants_agent_idx", + "columns": [ + { + "expression": "agent_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "plugin_grants_agent_id_agents_id_fk": { + "name": "plugin_grants_agent_id_agents_id_fk", + "tableFrom": "plugin_grants", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "plugin_grants_kind_ref_agent_id_pk": { + "name": "plugin_grants_kind_ref_agent_id_pk", + "columns": [ + "kind", + "ref", + "agent_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.sandboxed_components": { + "name": "sandboxed_components", + "schema": "", + "columns": { + "name": { + "name": "name", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "title": { + "name": "title", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "draft_description": { + "name": "draft_description", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "''" + }, + "draft_html": { + "name": "draft_html", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "''" + }, + "draft_css": { + "name": "draft_css", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "''" + }, + "draft_js_functions": { + "name": "draft_js_functions", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "''" + }, + "draft_argument_schema": { + "name": "draft_argument_schema", + "type": "jsonb", + "primaryKey": false, + "notNull": true, + "default": "'{}'::jsonb" + }, + "published_description": { + "name": "published_description", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "published_html": { + "name": "published_html", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "published_css": { + "name": "published_css", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "published_js_functions": { + "name": "published_js_functions", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "published_argument_schema": { + "name": "published_argument_schema", + "type": "jsonb", + "primaryKey": false, + "notNull": false + }, + "sample_arguments": { + "name": "sample_arguments", + "type": "jsonb", + "primaryKey": false, + "notNull": true, + "default": "'{}'::jsonb" + }, + "revision": { + "name": "revision", + "type": "integer", + "primaryKey": false, + "notNull": true, + "default": 0 + }, + "published": { + "name": "published", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": false + }, + "published_at": { + "name": "published_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "authored_by": { + "name": "authored_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.skill_tools": { + "name": "skill_tools", + "schema": "", + "columns": { + "skill_id": { + "name": "skill_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "ref": { + "name": "ref", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "declared_by": { + "name": "declared_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "skill_tools_ref_idx": { + "name": "skill_tools_ref_idx", + "columns": [ + { + "expression": "ref", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "skill_tools_skill_id_skills_id_fk": { + "name": "skill_tools_skill_id_skills_id_fk", + "tableFrom": "skill_tools", + "tableTo": "skills", + "columnsFrom": [ + "skill_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "skill_tools_skill_id_ref_pk": { + "name": "skill_tools_skill_id_ref_pk", + "columns": [ + "skill_id", + "ref" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.skills": { + "name": "skills", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "slug": { + "name": "slug", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "title": { + "name": "title", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "summary": { + "name": "summary", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "instructions": { + "name": "instructions", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "origin": { + "name": "origin", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'yours'" + }, + "installed_by": { + "name": "installed_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "skills_slug_key": { + "name": "skills_slug_key", + "columns": [ + { + "expression": "slug", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "concurrently": false, + "method": "btree", + "with": {} + }, + "skills_owner_idx": { + "name": "skills_owner_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "skills_owner_user_id_users_id_fk": { + "name": "skills_owner_user_id_users_id_fk", + "tableFrom": "skills", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.work_items": { + "name": "work_items", + "schema": "", + "columns": { + "kind": { + "name": "kind", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "key": { + "name": "key", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "run_at": { + "name": "run_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "claimed_by": { + "name": "claimed_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "lease_until": { + "name": "lease_until", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "attempts": { + "name": "attempts", + "type": "integer", + "primaryKey": false, + "notNull": true, + "default": 0 + }, + "finished_at": { + "name": "finished_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "last_error": { + "name": "last_error", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "payload": { + "name": "payload", + "type": "jsonb", + "primaryKey": false, + "notNull": true, + "default": "'{}'::jsonb" + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "work_items_claimable_idx": { + "name": "work_items_claimable_idx", + "columns": [ + { + "expression": "kind", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "run_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": {}, + "compositePrimaryKeys": { + "work_items_kind_key_pk": { + "name": "work_items_kind_key_pk", + "columns": [ + "kind", + "key" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.voice_sessions": { + "name": "voice_sessions", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "channel_id": { + "name": "channel_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "anchor_message_id": { + "name": "anchor_message_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "started_at": { + "name": "started_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + }, + "ended_at": { + "name": "ended_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + }, + "duration_seconds": { + "name": "duration_seconds", + "type": "integer", + "primaryKey": false, + "notNull": true + }, + "transcript": { + "name": "transcript", + "type": "jsonb", + "primaryKey": false, + "notNull": true + }, + "summary": { + "name": "summary", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "summary_status": { + "name": "summary_status", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'failed'" + } + }, + "indexes": { + "voice_sessions_channel_started_idx": { + "name": "voice_sessions_channel_started_idx", + "columns": [ + { + "expression": "channel_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "started_at", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "voice_sessions_channel_id_channels_id_fk": { + "name": "voice_sessions_channel_id_channels_id_fk", + "tableFrom": "voice_sessions", + "tableTo": "channels", + "columnsFrom": [ + "channel_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "voice_sessions_user_id_users_id_fk": { + "name": "voice_sessions_user_id_users_id_fk", + "tableFrom": "voice_sessions", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "voice_sessions_duration_check": { + "name": "voice_sessions_duration_check", + "value": "\"voice_sessions\".\"duration_seconds\" >= 0" + }, + "voice_sessions_summary_check": { + "name": "voice_sessions_summary_check", + "value": "(\"voice_sessions\".\"summary_status\" = 'ready' AND \"voice_sessions\".\"summary\" IS NOT NULL) OR (\"voice_sessions\".\"summary_status\" = 'failed' AND \"voice_sessions\".\"summary\" IS NULL)" + } + }, + "isRLSEnabled": false + }, + "public.learning_settings": { + "name": "learning_settings", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "settings": { + "name": "settings", + "type": "jsonb", + "primaryKey": false, + "notNull": true + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.learning_thread_bindings": { + "name": "learning_thread_bindings", + "schema": "", + "columns": { + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "thread_id": { + "name": "thread_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "container_id": { + "name": "container_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": {}, + "compositePrimaryKeys": { + "learning_thread_bindings_user_id_thread_id_pk": { + "name": "learning_thread_bindings_user_id_thread_id_pk", + "columns": [ + "user_id", + "thread_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.responsibilities": { + "name": "responsibilities", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "channel_id": { + "name": "channel_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "thread_id": { + "name": "thread_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "title": { + "name": "title", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "instruction": { + "name": "instruction", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "success_criteria": { + "name": "success_criteria", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "status": { + "name": "status", + "type": "responsibility_status", + "typeSchema": "public", + "primaryKey": false, + "notNull": true, + "default": "'active'" + }, + "progress": { + "name": "progress", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "''" + }, + "last_result": { + "name": "last_result", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "subscriptions": { + "name": "subscriptions", + "type": "jsonb", + "primaryKey": false, + "notNull": true, + "default": "'[]'::jsonb" + }, + "completed_at": { + "name": "completed_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "responsibilities_owner_status_idx": { + "name": "responsibilities_owner_status_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "status", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "responsibilities_owner_user_id_users_id_fk": { + "name": "responsibilities_owner_user_id_users_id_fk", + "tableFrom": "responsibilities", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "responsibilities_agent_id_agents_id_fk": { + "name": "responsibilities_agent_id_agents_id_fk", + "tableFrom": "responsibilities", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.responsibility_events": { + "name": "responsibility_events", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "source": { + "name": "source", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "external_id": { + "name": "external_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "type": { + "name": "type", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "payload": { + "name": "payload", + "type": "jsonb", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "responsibility_events_source_id_idx": { + "name": "responsibility_events_source_id_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "source", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "external_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "responsibility_events_owner_user_id_users_id_fk": { + "name": "responsibility_events_owner_user_id_users_id_fk", + "tableFrom": "responsibility_events", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.responsibility_runs": { + "name": "responsibility_runs", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "responsibility_id": { + "name": "responsibility_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "event_id": { + "name": "event_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "status": { + "name": "status", + "type": "responsibility_run_status", + "typeSchema": "public", + "primaryKey": false, + "notNull": true, + "default": "'queued'" + }, + "reply_text": { + "name": "reply_text", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "error": { + "name": "error", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "waiting": { + "name": "waiting", + "type": "jsonb", + "primaryKey": false, + "notNull": false + }, + "continuation": { + "name": "continuation", + "type": "jsonb", + "primaryKey": false, + "notNull": false + }, + "started_at": { + "name": "started_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "finished_at": { + "name": "finished_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "responsibility_runs_event_idx": { + "name": "responsibility_runs_event_idx", + "columns": [ + { + "expression": "responsibility_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "event_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "concurrently": false, + "method": "btree", + "with": {} + }, + "responsibility_runs_status_idx": { + "name": "responsibility_runs_status_idx", + "columns": [ + { + "expression": "status", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "created_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "responsibility_runs_responsibility_id_responsibilities_id_fk": { + "name": "responsibility_runs_responsibility_id_responsibilities_id_fk", + "tableFrom": "responsibility_runs", + "tableTo": "responsibilities", + "columnsFrom": [ + "responsibility_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "responsibility_runs_event_id_responsibility_events_id_fk": { + "name": "responsibility_runs_event_id_responsibility_events_id_fk", + "tableFrom": "responsibility_runs", + "tableTo": "responsibility_events", + "columnsFrom": [ + "event_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.responsibility_source_bindings": { + "name": "responsibility_source_bindings", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "source": { + "name": "source", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "repository": { + "name": "repository", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "credential_id": { + "name": "credential_id", + "type": "uuid", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "responsibility_source_bindings_owner_idx": { + "name": "responsibility_source_bindings_owner_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "responsibility_source_bindings_owner_user_id_users_id_fk": { + "name": "responsibility_source_bindings_owner_user_id_users_id_fk", + "tableFrom": "responsibility_source_bindings", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "responsibility_source_bindings_credential_id_credentials_id_fk": { + "name": "responsibility_source_bindings_credential_id_credentials_id_fk", + "tableFrom": "responsibility_source_bindings", + "tableTo": "credentials", + "columnsFrom": [ + "credential_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "no action", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.responsibility_triggers": { + "name": "responsibility_triggers", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "responsibility_id": { + "name": "responsibility_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "kind": { + "name": "kind", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "config": { + "name": "config", + "type": "jsonb", + "primaryKey": false, + "notNull": true + }, + "credential_id": { + "name": "credential_id", + "type": "uuid", + "primaryKey": false, + "notNull": false + }, + "enabled": { + "name": "enabled", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "responsibility_triggers_owner_idx": { + "name": "responsibility_triggers_owner_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "responsibility_triggers_responsibility_idx": { + "name": "responsibility_triggers_responsibility_idx", + "columns": [ + { + "expression": "responsibility_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "responsibility_triggers_kind_idx": { + "name": "responsibility_triggers_kind_idx", + "columns": [ + { + "expression": "kind", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "responsibility_triggers_owner_user_id_users_id_fk": { + "name": "responsibility_triggers_owner_user_id_users_id_fk", + "tableFrom": "responsibility_triggers", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "responsibility_triggers_responsibility_id_responsibilities_id_fk": { + "name": "responsibility_triggers_responsibility_id_responsibilities_id_fk", + "tableFrom": "responsibility_triggers", + "tableTo": "responsibilities", + "columnsFrom": [ + "responsibility_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "responsibility_triggers_credential_id_credentials_id_fk": { + "name": "responsibility_triggers_credential_id_credentials_id_fk", + "tableFrom": "responsibility_triggers", + "tableTo": "credentials", + "columnsFrom": [ + "credential_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "no action", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.approval_preferences": { + "name": "approval_preferences", + "schema": "", + "columns": { + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "enabled": { + "name": "enabled", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": false + }, + "auto_review": { + "name": "auto_review", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": false + }, + "host_commands": { + "name": "host_commands", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'ask'" + } + }, + "indexes": {}, + "foreignKeys": { + "approval_preferences_owner_user_id_users_id_fk": { + "name": "approval_preferences_owner_user_id_users_id_fk", + "tableFrom": "approval_preferences", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "approval_preferences_host_commands_check": { + "name": "approval_preferences_host_commands_check", + "value": "\"approval_preferences\".\"host_commands\" IN ('ask', 'allow', 'never')" + } + }, + "isRLSEnabled": false + }, + "public.approval_requests": { + "name": "approval_requests", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "run_id": { + "name": "run_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "tool_call_id": { + "name": "tool_call_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "action_digest": { + "name": "action_digest", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "action": { + "name": "action", + "type": "jsonb", + "primaryKey": false, + "notNull": true + }, + "status": { + "name": "status", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'pending'" + }, + "decision": { + "name": "decision", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "result": { + "name": "result", + "type": "jsonb", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "decided_at": { + "name": "decided_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "consumed_at": { + "name": "consumed_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "completed_at": { + "name": "completed_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + } + }, + "indexes": { + "approval_requests_action_idx": { + "name": "approval_requests_action_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "run_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "tool_call_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "concurrently": false, + "method": "btree", + "with": {} + }, + "approval_requests_inbox_idx": { + "name": "approval_requests_inbox_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "status", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "approval_requests_owner_user_id_users_id_fk": { + "name": "approval_requests_owner_user_id_users_id_fk", + "tableFrom": "approval_requests", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "approval_status_check": { + "name": "approval_status_check", + "value": "\"approval_requests\".\"status\" IN ('pending', 'approved', 'denied', 'consumed', 'completed')" + }, + "approval_decision_check": { + "name": "approval_decision_check", + "value": "\"approval_requests\".\"decision\" IN ('allow_once', 'allow_always', 'deny', 'handled')" + } + }, + "isRLSEnabled": false + }, + "public.approval_rules": { + "name": "approval_rules", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "bot_id": { + "name": "bot_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "tool_ref": { + "name": "tool_ref", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "effect": { + "name": "effect", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "scope": { + "name": "scope", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "behaviour": { + "name": "behaviour", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'allow'" + }, + "revoked_at": { + "name": "revoked_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "approval_rules_owner_idx": { + "name": "approval_rules_owner_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "approval_rules_owner_user_id_users_id_fk": { + "name": "approval_rules_owner_user_id_users_id_fk", + "tableFrom": "approval_rules", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "approval_rules_behaviour_check": { + "name": "approval_rules_behaviour_check", + "value": "\"approval_rules\".\"behaviour\" IN ('allow', 'pre_approved', 'ask', 'hand_off')" + } + }, + "isRLSEnabled": false + }, + "public.approval_team_rules": { + "name": "approval_team_rules", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "bot_id": { + "name": "bot_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "tool_ref": { + "name": "tool_ref", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "effect": { + "name": "effect", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "scope": { + "name": "scope", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "behaviour": { + "name": "behaviour", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "created_by": { + "name": "created_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "revoked_at": { + "name": "revoked_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "approval_team_rules_created_by_users_id_fk": { + "name": "approval_team_rules_created_by_users_id_fk", + "tableFrom": "approval_team_rules", + "tableTo": "users", + "columnsFrom": [ + "created_by" + ], + "columnsTo": [ + "id" + ], + "onDelete": "set null", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "approval_team_rules_behaviour_check": { + "name": "approval_team_rules_behaviour_check", + "value": "\"approval_team_rules\".\"behaviour\" IN ('allow', 'pre_approved', 'ask', 'hand_off')" + } + }, + "isRLSEnabled": false + }, + "public.approval_team_settings": { + "name": "approval_team_settings", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "enforce_auto_review": { + "name": "enforce_auto_review", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": false + }, + "custom_rules_enabled": { + "name": "custom_rules_enabled", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": true + }, + "host_commands_cap": { + "name": "host_commands_cap", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'allow'" + }, + "updated_by": { + "name": "updated_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "approval_team_settings_updated_by_users_id_fk": { + "name": "approval_team_settings_updated_by_users_id_fk", + "tableFrom": "approval_team_settings", + "tableTo": "users", + "columnsFrom": [ + "updated_by" + ], + "columnsTo": [ + "id" + ], + "onDelete": "set null", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "approval_team_settings_host_commands_cap_check": { + "name": "approval_team_settings_host_commands_cap_check", + "value": "\"approval_team_settings\".\"host_commands_cap\" IN ('ask', 'allow', 'never')" + } + }, + "isRLSEnabled": false + }, + "public.memory_sources": { + "name": "memory_sources", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "tool_ref": { + "name": "tool_ref", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "title": { + "name": "title", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "args": { + "name": "args", + "type": "jsonb", + "primaryKey": false, + "notNull": true, + "default": "'{}'::jsonb" + }, + "enabled": { + "name": "enabled", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": true + }, + "sync_status": { + "name": "sync_status", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'idle'" + }, + "sync_error": { + "name": "sync_error", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "last_sync_at": { + "name": "last_sync_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "next_sync_at": { + "name": "next_sync_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "memory_sources_owner_idx": { + "name": "memory_sources_owner_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "memory_sources_due_idx": { + "name": "memory_sources_due_idx", + "columns": [ + { + "expression": "enabled", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "next_sync_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "memory_sources_owner_user_id_users_id_fk": { + "name": "memory_sources_owner_user_id_users_id_fk", + "tableFrom": "memory_sources", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "memory_sources_agent_id_agents_id_fk": { + "name": "memory_sources_agent_id_agents_id_fk", + "tableFrom": "memory_sources", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.personal_memories": { + "name": "personal_memories", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "source_id": { + "name": "source_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "external_id": { + "name": "external_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "import_digest": { + "name": "import_digest", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "content": { + "name": "content", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "provenance": { + "name": "provenance", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "enabled": { + "name": "enabled", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": true + }, + "review_state": { + "name": "review_state", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'unreviewed'" + }, + "deleted_at": { + "name": "deleted_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "formed_by": { + "name": "formed_by", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'person'" + }, + "formed_by_agent_id": { + "name": "formed_by_agent_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "source_app": { + "name": "source_app", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "source_ref": { + "name": "source_ref", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "source_link": { + "name": "source_link", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "observed_at": { + "name": "observed_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "intelligence_memory_id": { + "name": "intelligence_memory_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "intelligence_digest": { + "name": "intelligence_digest", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "personal_memories_owner_idx": { + "name": "personal_memories_owner_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "enabled", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "personal_memories_intelligence_idx": { + "name": "personal_memories_intelligence_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "intelligence_memory_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "personal_memories_formed_idx": { + "name": "personal_memories_formed_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "formed_by_agent_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "personal_memories_import_idx": { + "name": "personal_memories_import_idx", + "columns": [ + { + "expression": "source_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "external_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "concurrently": false, + "method": "btree", + "with": {} + }, + "personal_memories_formed_digest_idx": { + "name": "personal_memories_formed_digest_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "import_digest", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "where": "\"personal_memories\".\"formed_by\" = 'bot'", + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "personal_memories_owner_user_id_users_id_fk": { + "name": "personal_memories_owner_user_id_users_id_fk", + "tableFrom": "personal_memories", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "personal_memories_source_id_memory_sources_id_fk": { + "name": "personal_memories_source_id_memory_sources_id_fk", + "tableFrom": "personal_memories", + "tableTo": "memory_sources", + "columnsFrom": [ + "source_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "personal_memories_formed_by_agent_id_agents_id_fk": { + "name": "personal_memories_formed_by_agent_id_agents_id_fk", + "tableFrom": "personal_memories", + "tableTo": "agents", + "columnsFrom": [ + "formed_by_agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.default_opt_outs": { + "name": "default_opt_outs", + "schema": "", + "columns": { + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "feature": { + "name": "feature", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "scope": { + "name": "scope", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "''" + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "default_opt_outs_owner_user_id_users_id_fk": { + "name": "default_opt_outs_owner_user_id_users_id_fk", + "tableFrom": "default_opt_outs", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "default_opt_outs_agent_id_agents_id_fk": { + "name": "default_opt_outs_agent_id_agents_id_fk", + "tableFrom": "default_opt_outs", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "default_opt_outs_owner_user_id_agent_id_feature_scope_pk": { + "name": "default_opt_outs_owner_user_id_agent_id_feature_scope_pk", + "columns": [ + "owner_user_id", + "agent_id", + "feature", + "scope" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "default_opt_outs_feature_check": { + "name": "default_opt_outs_feature_check", + "value": "\"default_opt_outs\".\"feature\" IN ('memory_source', 'proactive_research')" + } + }, + "isRLSEnabled": false + }, + "public.proactive_settings": { + "name": "proactive_settings", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "channel_id": { + "name": "channel_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "thread_id": { + "name": "thread_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "focus": { + "name": "focus", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "''" + }, + "enabled": { + "name": "enabled", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": true + }, + "interval_minutes": { + "name": "interval_minutes", + "type": "integer", + "primaryKey": false, + "notNull": true, + "default": 240 + }, + "next_run_at": { + "name": "next_run_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "last_run_at": { + "name": "last_run_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "last_status": { + "name": "last_status", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'idle'" + }, + "last_error": { + "name": "last_error", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "proactive_settings_owner_agent_idx": { + "name": "proactive_settings_owner_agent_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "agent_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "concurrently": false, + "method": "btree", + "with": {} + }, + "proactive_settings_due_idx": { + "name": "proactive_settings_due_idx", + "columns": [ + { + "expression": "enabled", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "next_run_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "proactive_settings_owner_user_id_users_id_fk": { + "name": "proactive_settings_owner_user_id_users_id_fk", + "tableFrom": "proactive_settings", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "proactive_settings_agent_id_agents_id_fk": { + "name": "proactive_settings_agent_id_agents_id_fk", + "tableFrom": "proactive_settings", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "proactive_settings_interval_check": { + "name": "proactive_settings_interval_check", + "value": "\"proactive_settings\".\"interval_minutes\" >= 60 AND \"proactive_settings\".\"interval_minutes\" <= 1440" + }, + "proactive_settings_status_check": { + "name": "proactive_settings_status_check", + "value": "\"proactive_settings\".\"last_status\" IN ('idle', 'running', 'succeeded', 'error')" + } + }, + "isRLSEnabled": false + }, + "public.proactive_suggestions": { + "name": "proactive_suggestions", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "setting_id": { + "name": "setting_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "run_id": { + "name": "run_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "title": { + "name": "title", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "detail": { + "name": "detail", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "source_app": { + "name": "source_app", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "source_ref": { + "name": "source_ref", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "source_link": { + "name": "source_link", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "status": { + "name": "status", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'open'" + }, + "delivered_at": { + "name": "delivered_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "resolved_at": { + "name": "resolved_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "proactive_suggestions_owner_idx": { + "name": "proactive_suggestions_owner_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "status", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "created_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "proactive_suggestions_run_idx": { + "name": "proactive_suggestions_run_idx", + "columns": [ + { + "expression": "run_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "proactive_suggestions_owner_user_id_users_id_fk": { + "name": "proactive_suggestions_owner_user_id_users_id_fk", + "tableFrom": "proactive_suggestions", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "proactive_suggestions_agent_id_agents_id_fk": { + "name": "proactive_suggestions_agent_id_agents_id_fk", + "tableFrom": "proactive_suggestions", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "proactive_suggestions_setting_id_proactive_settings_id_fk": { + "name": "proactive_suggestions_setting_id_proactive_settings_id_fk", + "tableFrom": "proactive_suggestions", + "tableTo": "proactive_settings", + "columnsFrom": [ + "setting_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "proactive_suggestions_status_check": { + "name": "proactive_suggestions_status_check", + "value": "\"proactive_suggestions\".\"status\" IN ('open', 'dismissed', 'started')" + } + }, + "isRLSEnabled": false + }, + "public.demonstrations": { + "name": "demonstrations", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "bot_id": { + "name": "bot_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "title": { + "name": "title", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "status": { + "name": "status", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'recording'" + }, + "actions": { + "name": "actions", + "type": "jsonb", + "primaryKey": false, + "notNull": true, + "default": "'[]'::jsonb" + }, + "draft": { + "name": "draft", + "type": "jsonb", + "primaryKey": false, + "notNull": false + }, + "skill_slug": { + "name": "skill_slug", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "finished_at": { + "name": "finished_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + } + }, + "indexes": { + "demonstrations_owner_idx": { + "name": "demonstrations_owner_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "created_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "demonstrations_active_bot_idx": { + "name": "demonstrations_active_bot_idx", + "columns": [ + { + "expression": "bot_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "where": "\"demonstrations\".\"status\" = 'recording'", + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "demonstrations_owner_user_id_users_id_fk": { + "name": "demonstrations_owner_user_id_users_id_fk", + "tableFrom": "demonstrations", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "demonstrations_bot_id_agents_id_fk": { + "name": "demonstrations_bot_id_agents_id_fk", + "tableFrom": "demonstrations", + "tableTo": "agents", + "columnsFrom": [ + "bot_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.delivery_bindings": { + "name": "delivery_bindings", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "channel_id": { + "name": "channel_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "thread_id": { + "name": "thread_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "transport": { + "name": "transport", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "identity": { + "name": "identity", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "realm": { + "name": "realm", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "address": { + "name": "address", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "mention_id": { + "name": "mention_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "enabled": { + "name": "enabled", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": true + }, + "opted_out_at": { + "name": "opted_out_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "delivery_binding_identity_idx": { + "name": "delivery_binding_identity_idx", + "columns": [ + { + "expression": "transport", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "realm", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "identity", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "concurrently": false, + "method": "btree", + "with": {} + }, + "delivery_bindings_owner_idx": { + "name": "delivery_bindings_owner_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "delivery_bindings_owner_user_id_users_id_fk": { + "name": "delivery_bindings_owner_user_id_users_id_fk", + "tableFrom": "delivery_bindings", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "delivery_bindings_channel_id_channels_id_fk": { + "name": "delivery_bindings_channel_id_channels_id_fk", + "tableFrom": "delivery_bindings", + "tableTo": "channels", + "columnsFrom": [ + "channel_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "delivery_bindings_agent_id_agents_id_fk": { + "name": "delivery_bindings_agent_id_agents_id_fk", + "tableFrom": "delivery_bindings", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.delivery_challenges": { + "name": "delivery_challenges", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "channel_id": { + "name": "channel_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "thread_id": { + "name": "thread_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "transport": { + "name": "transport", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "address": { + "name": "address", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "expires_at": { + "name": "expires_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + }, + "consumed_at": { + "name": "consumed_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "delivery_challenges_owner_user_id_users_id_fk": { + "name": "delivery_challenges_owner_user_id_users_id_fk", + "tableFrom": "delivery_challenges", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "delivery_challenges_channel_id_channels_id_fk": { + "name": "delivery_challenges_channel_id_channels_id_fk", + "tableFrom": "delivery_challenges", + "tableTo": "channels", + "columnsFrom": [ + "channel_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "delivery_challenges_agent_id_agents_id_fk": { + "name": "delivery_challenges_agent_id_agents_id_fk", + "tableFrom": "delivery_challenges", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.delivery_inbox": { + "name": "delivery_inbox", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "channel_id": { + "name": "channel_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "thread_id": { + "name": "thread_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "binding_id": { + "name": "binding_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "source": { + "name": "source", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "realm": { + "name": "realm", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "external_id": { + "name": "external_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "text": { + "name": "text", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "state": { + "name": "state", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'queued'" + }, + "error": { + "name": "error", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "delivery_inbox_dedupe_idx": { + "name": "delivery_inbox_dedupe_idx", + "columns": [ + { + "expression": "source", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "realm", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "external_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "concurrently": false, + "method": "btree", + "with": {} + }, + "delivery_inbox_owner_idx": { + "name": "delivery_inbox_owner_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "created_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "delivery_inbox_owner_user_id_users_id_fk": { + "name": "delivery_inbox_owner_user_id_users_id_fk", + "tableFrom": "delivery_inbox", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "delivery_inbox_channel_id_channels_id_fk": { + "name": "delivery_inbox_channel_id_channels_id_fk", + "tableFrom": "delivery_inbox", + "tableTo": "channels", + "columnsFrom": [ + "channel_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "delivery_inbox_agent_id_agents_id_fk": { + "name": "delivery_inbox_agent_id_agents_id_fk", + "tableFrom": "delivery_inbox", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.delivery_outbox": { + "name": "delivery_outbox", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "channel_id": { + "name": "channel_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "thread_id": { + "name": "thread_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "dedupe_key": { + "name": "dedupe_key", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "binding_id": { + "name": "binding_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "device_id": { + "name": "device_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "transport": { + "name": "transport", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "text": { + "name": "text", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "kind": { + "name": "kind", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "request_id": { + "name": "request_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "state": { + "name": "state", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'queued'" + }, + "provider_id": { + "name": "provider_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "error": { + "name": "error", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "delivery_outbox_owner_idx": { + "name": "delivery_outbox_owner_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "created_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "delivery_outbox_provider_idx": { + "name": "delivery_outbox_provider_idx", + "columns": [ + { + "expression": "transport", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "provider_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "delivery_outbox_owner_user_id_users_id_fk": { + "name": "delivery_outbox_owner_user_id_users_id_fk", + "tableFrom": "delivery_outbox", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "delivery_outbox_channel_id_channels_id_fk": { + "name": "delivery_outbox_channel_id_channels_id_fk", + "tableFrom": "delivery_outbox", + "tableTo": "channels", + "columnsFrom": [ + "channel_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "delivery_outbox_agent_id_agents_id_fk": { + "name": "delivery_outbox_agent_id_agents_id_fk", + "tableFrom": "delivery_outbox", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": { + "delivery_outbox_dedupe_key_unique": { + "name": "delivery_outbox_dedupe_key_unique", + "nullsNotDistinct": false, + "columns": [ + "dedupe_key" + ] + } + }, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.push_devices": { + "name": "push_devices", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "token": { + "name": "token", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "project_id": { + "name": "project_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "platform": { + "name": "platform", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "enabled": { + "name": "enabled", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "push_devices_owner_idx": { + "name": "push_devices_owner_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "push_devices_owner_user_id_users_id_fk": { + "name": "push_devices_owner_user_id_users_id_fk", + "tableFrom": "push_devices", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": { + "push_devices_token_unique": { + "name": "push_devices_token_unique", + "nullsNotDistinct": false, + "columns": [ + "token" + ] + } + }, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.group_bot_threads": { + "name": "group_bot_threads", + "schema": "", + "columns": { + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "channel_id": { + "name": "channel_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "thread_id": { + "name": "thread_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "group_bot_threads_thread_idx": { + "name": "group_bot_threads_thread_idx", + "columns": [ + { + "expression": "thread_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "group_bot_threads_owner_user_id_users_id_fk": { + "name": "group_bot_threads_owner_user_id_users_id_fk", + "tableFrom": "group_bot_threads", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "group_bot_threads_channel_id_channels_id_fk": { + "name": "group_bot_threads_channel_id_channels_id_fk", + "tableFrom": "group_bot_threads", + "tableTo": "channels", + "columnsFrom": [ + "channel_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "group_bot_threads_owner_user_id_channel_id_agent_id_pk": { + "name": "group_bot_threads_owner_user_id_channel_id_agent_id_pk", + "columns": [ + "owner_user_id", + "channel_id", + "agent_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.group_messages": { + "name": "group_messages", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "channel_id": { + "name": "channel_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "thread_id": { + "name": "thread_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "text": { + "name": "text", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "status": { + "name": "status", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'completed'" + }, + "details": { + "name": "details", + "type": "jsonb", + "primaryKey": false, + "notNull": true, + "default": "'{}'::jsonb" + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "group_messages_channel_idx": { + "name": "group_messages_channel_idx", + "columns": [ + { + "expression": "channel_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "created_at", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "group_messages_channel_id_channels_id_fk": { + "name": "group_messages_channel_id_channels_id_fk", + "tableFrom": "group_messages", + "tableTo": "channels", + "columnsFrom": [ + "channel_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "group_messages_owner_user_id_users_id_fk": { + "name": "group_messages_owner_user_id_users_id_fk", + "tableFrom": "group_messages", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "group_messages_status_check": { + "name": "group_messages_status_check", + "value": "\"group_messages\".\"status\" IN ('queued', 'running', 'waiting', 'completed', 'failed')" + } + }, + "isRLSEnabled": false + }, + "public.action_records": { + "name": "action_records", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "uuid", + "primaryKey": true, + "notNull": true, + "default": "gen_random_uuid()" + }, + "surface": { + "name": "surface", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "bot_id": { + "name": "bot_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "actor_user_id": { + "name": "actor_user_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "tool_name": { + "name": "tool_name", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "command": { + "name": "command", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "outcome": { + "name": "outcome", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "action_records_created_idx": { + "name": "action_records_created_idx", + "columns": [ + { + "expression": "created_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "action_records_bot_idx": { + "name": "action_records_bot_idx", + "columns": [ + { + "expression": "bot_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "created_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "action_records_surface_check": { + "name": "action_records_surface_check", + "value": "\"action_records\".\"surface\" IN ('cloud', 'local')" + } + }, + "isRLSEnabled": false + }, + "public.capability_settings": { + "name": "capability_settings", + "schema": "", + "columns": { + "scope_kind": { + "name": "scope_kind", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "scope_id": { + "name": "scope_id", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "''" + }, + "capability": { + "name": "capability", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "allowed": { + "name": "allowed", + "type": "boolean", + "primaryKey": false, + "notNull": true + }, + "updated_by": { + "name": "updated_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": {}, + "compositePrimaryKeys": { + "capability_settings_scope_kind_scope_id_capability_pk": { + "name": "capability_settings_scope_kind_scope_id_capability_pk", + "columns": [ + "scope_kind", + "scope_id", + "capability" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "capability_settings_scope_kind_check": { + "name": "capability_settings_scope_kind_check", + "value": "\"capability_settings\".\"scope_kind\" IN ('organization', 'role', 'group')" + } + }, + "isRLSEnabled": false + }, + "public.enterprise_settings": { + "name": "enterprise_settings", + "schema": "", + "columns": { + "key": { + "name": "key", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "value": { + "name": "value", + "type": "jsonb", + "primaryKey": false, + "notNull": true + }, + "updated_by": { + "name": "updated_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.model_usage": { + "name": "model_usage", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "uuid", + "primaryKey": true, + "notNull": true, + "default": "gen_random_uuid()" + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "thread_id": { + "name": "thread_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "run_id": { + "name": "run_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "model": { + "name": "model", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "source": { + "name": "source", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "allowed": { + "name": "allowed", + "type": "boolean", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "model_usage_created_idx": { + "name": "model_usage_created_idx", + "columns": [ + { + "expression": "created_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "model_usage_model_idx": { + "name": "model_usage_model_idx", + "columns": [ + { + "expression": "model", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "created_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "model_usage_source_check": { + "name": "model_usage_source_check", + "value": "\"model_usage\".\"source\" IN ('configured', 'observed', 'unknown')" + } + }, + "isRLSEnabled": false + }, + "public.network_policies": { + "name": "network_policies", + "schema": "", + "columns": { + "scope_kind": { + "name": "scope_kind", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "scope_id": { + "name": "scope_id", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "''" + }, + "mode": { + "name": "mode", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "rules": { + "name": "rules", + "type": "jsonb", + "primaryKey": false, + "notNull": true, + "default": "'{\"entries\":[]}'::jsonb" + }, + "locked": { + "name": "locked", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": false + }, + "updated_by": { + "name": "updated_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": {}, + "compositePrimaryKeys": { + "network_policies_scope_kind_scope_id_pk": { + "name": "network_policies_scope_kind_scope_id_pk", + "columns": [ + "scope_kind", + "scope_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "network_policies_scope_kind_check": { + "name": "network_policies_scope_kind_check", + "value": "\"network_policies\".\"scope_kind\" IN ('organization', 'group')" + }, + "network_policies_mode_check": { + "name": "network_policies_mode_check", + "value": "\"network_policies\".\"mode\" IN ('allow_all', 'defaults_plus_allowlist', 'allowlist_only')" + } + }, + "isRLSEnabled": false + }, + "public.scim_connection_bindings": { + "name": "scim_connection_bindings", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "connection_id": { + "name": "connection_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "connection_key": { + "name": "connection_key", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "provisioning_domain_id": { + "name": "provisioning_domain_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + }, + "decommissioned_at": { + "name": "decommissioned_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "decommission_status": { + "name": "decommission_status", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'active'" + }, + "decommission_cursor_user_id": { + "name": "decommission_cursor_user_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "decommission_reconciled_user_count": { + "name": "decommission_reconciled_user_count", + "type": "integer", + "primaryKey": false, + "notNull": true, + "default": 0 + }, + "decommission_batch_count": { + "name": "decommission_batch_count", + "type": "integer", + "primaryKey": false, + "notNull": true, + "default": 0 + }, + "decommission_revision": { + "name": "decommission_revision", + "type": "integer", + "primaryKey": false, + "notNull": true, + "default": 0 + }, + "decommission_completed_at": { + "name": "decommission_completed_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "decommission_lease_id": { + "name": "decommission_lease_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "decommission_lease_expires_at": { + "name": "decommission_lease_expires_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + } + }, + "indexes": { + "scim_connection_bindings_connection_idx": { + "name": "scim_connection_bindings_connection_idx", + "columns": [ + { + "expression": "connection_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": { + "scim_connection_bindings_connection_key_unique": { + "name": "scim_connection_bindings_connection_key_unique", + "nullsNotDistinct": false, + "columns": [ + "connection_key" + ] + } + }, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.scim_group_members": { + "name": "scim_group_members", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "connection_id": { + "name": "connection_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "group_id": { + "name": "group_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "scim_user_id": { + "name": "scim_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "membership_key": { + "name": "membership_key", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + } + }, + "indexes": { + "scim_group_members_connection_idx": { + "name": "scim_group_members_connection_idx", + "columns": [ + { + "expression": "connection_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "scim_group_members_group_idx": { + "name": "scim_group_members_group_idx", + "columns": [ + { + "expression": "group_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "scim_group_members_scim_user_idx": { + "name": "scim_group_members_scim_user_idx", + "columns": [ + { + "expression": "scim_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "scim_group_members_group_id_scim_groups_id_fk": { + "name": "scim_group_members_group_id_scim_groups_id_fk", + "tableFrom": "scim_group_members", + "tableTo": "scim_groups", + "columnsFrom": [ + "group_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "scim_group_members_scim_user_id_scim_users_id_fk": { + "name": "scim_group_members_scim_user_id_scim_users_id_fk", + "tableFrom": "scim_group_members", + "tableTo": "scim_users", + "columnsFrom": [ + "scim_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": { + "scim_group_members_membership_key_unique": { + "name": "scim_group_members_membership_key_unique", + "nullsNotDistinct": false, + "columns": [ + "membership_key" + ] + } + }, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.scim_groups": { + "name": "scim_groups", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "connection_id": { + "name": "connection_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "provisioning_domain_id": { + "name": "provisioning_domain_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "revision": { + "name": "revision", + "type": "integer", + "primaryKey": false, + "notNull": true, + "default": 0 + }, + "display_name": { + "name": "display_name", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "display_name_key": { + "name": "display_name_key", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "external_id": { + "name": "external_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "external_id_key": { + "name": "external_id_key", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "order_key": { + "name": "order_key", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + } + }, + "indexes": { + "scim_groups_connection_idx": { + "name": "scim_groups_connection_idx", + "columns": [ + { + "expression": "connection_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "scim_groups_domain_idx": { + "name": "scim_groups_domain_idx", + "columns": [ + { + "expression": "provisioning_domain_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": { + "scim_groups_display_name_key_unique": { + "name": "scim_groups_display_name_key_unique", + "nullsNotDistinct": false, + "columns": [ + "display_name_key" + ] + }, + "scim_groups_external_id_key_unique": { + "name": "scim_groups_external_id_key_unique", + "nullsNotDistinct": false, + "columns": [ + "external_id_key" + ] + }, + "scim_groups_order_key_unique": { + "name": "scim_groups_order_key_unique", + "nullsNotDistinct": false, + "columns": [ + "order_key" + ] + } + }, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.scim_identity_tombstones": { + "name": "scim_identity_tombstones", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "connection_id": { + "name": "connection_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "provisioning_domain_id": { + "name": "provisioning_domain_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "external_id": { + "name": "external_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "external_id_key": { + "name": "external_id_key", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "profile": { + "name": "profile", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "deleted_at": { + "name": "deleted_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + } + }, + "indexes": { + "scim_identity_tombstones_connection_idx": { + "name": "scim_identity_tombstones_connection_idx", + "columns": [ + { + "expression": "connection_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "scim_identity_tombstones_domain_idx": { + "name": "scim_identity_tombstones_domain_idx", + "columns": [ + { + "expression": "provisioning_domain_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "scim_identity_tombstones_user_idx": { + "name": "scim_identity_tombstones_user_idx", + "columns": [ + { + "expression": "user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "scim_identity_tombstones_user_id_users_id_fk": { + "name": "scim_identity_tombstones_user_id_users_id_fk", + "tableFrom": "scim_identity_tombstones", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": { + "scim_identity_tombstones_external_id_key_unique": { + "name": "scim_identity_tombstones_external_id_key_unique", + "nullsNotDistinct": false, + "columns": [ + "external_id_key" + ] + } + }, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.scim_projection_grants": { + "name": "scim_projection_grants", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "connection_id": { + "name": "connection_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "provisioning_domain_id": { + "name": "provisioning_domain_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "scim_user_id": { + "name": "scim_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "source_kind": { + "name": "source_kind", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "source_id": { + "name": "source_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "source_value": { + "name": "source_value", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "role": { + "name": "role", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "grant_key": { + "name": "grant_key", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + } + }, + "indexes": { + "scim_projection_grants_connection_idx": { + "name": "scim_projection_grants_connection_idx", + "columns": [ + { + "expression": "connection_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "scim_projection_grants_domain_idx": { + "name": "scim_projection_grants_domain_idx", + "columns": [ + { + "expression": "provisioning_domain_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "scim_projection_grants_scim_user_idx": { + "name": "scim_projection_grants_scim_user_idx", + "columns": [ + { + "expression": "scim_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "scim_projection_grants_user_idx": { + "name": "scim_projection_grants_user_idx", + "columns": [ + { + "expression": "user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "scim_projection_grants_scim_user_id_scim_users_id_fk": { + "name": "scim_projection_grants_scim_user_id_scim_users_id_fk", + "tableFrom": "scim_projection_grants", + "tableTo": "scim_users", + "columnsFrom": [ + "scim_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "scim_projection_grants_user_id_users_id_fk": { + "name": "scim_projection_grants_user_id_users_id_fk", + "tableFrom": "scim_projection_grants", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": { + "scim_projection_grants_grant_key_unique": { + "name": "scim_projection_grants_grant_key_unique", + "nullsNotDistinct": false, + "columns": [ + "grant_key" + ] + } + }, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.scim_subjects": { + "name": "scim_subjects", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "profile_source_id": { + "name": "profile_source_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "revision": { + "name": "revision", + "type": "integer", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + } + }, + "indexes": { + "scim_subjects_profile_source_idx": { + "name": "scim_subjects_profile_source_idx", + "columns": [ + { + "expression": "profile_source_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "scim_subjects_user_id_users_id_fk": { + "name": "scim_subjects_user_id_users_id_fk", + "tableFrom": "scim_subjects", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": { + "scim_subjects_user_id_unique": { + "name": "scim_subjects_user_id_unique", + "nullsNotDistinct": false, + "columns": [ + "user_id" + ] + } + }, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.scim_users": { + "name": "scim_users", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "connection_id": { + "name": "connection_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "provisioning_domain_id": { + "name": "provisioning_domain_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "connection_user_key": { + "name": "connection_user_key", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "user_name": { + "name": "user_name", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "user_name_key": { + "name": "user_name_key", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "primary_email": { + "name": "primary_email", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "work_email_value_index": { + "name": "work_email_value_index", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "email_value_index": { + "name": "email_value_index", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "display_name": { + "name": "display_name", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "formatted_name": { + "name": "formatted_name", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "given_name": { + "name": "given_name", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "family_name": { + "name": "family_name", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "serialized_emails": { + "name": "serialized_emails", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "serialized_attributes": { + "name": "serialized_attributes", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "external_id": { + "name": "external_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "external_id_key": { + "name": "external_id_key", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "active": { + "name": "active", + "type": "boolean", + "primaryKey": false, + "notNull": true + }, + "order_key": { + "name": "order_key", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + } + }, + "indexes": { + "scim_users_connection_idx": { + "name": "scim_users_connection_idx", + "columns": [ + { + "expression": "connection_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "scim_users_domain_idx": { + "name": "scim_users_domain_idx", + "columns": [ + { + "expression": "provisioning_domain_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "scim_users_user_idx": { + "name": "scim_users_user_idx", + "columns": [ + { + "expression": "user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "scim_users_user_id_users_id_fk": { + "name": "scim_users_user_id_users_id_fk", + "tableFrom": "scim_users", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": { + "scim_users_connection_user_key_unique": { + "name": "scim_users_connection_user_key_unique", + "nullsNotDistinct": false, + "columns": [ + "connection_user_key" + ] + }, + "scim_users_user_name_key_unique": { + "name": "scim_users_user_name_key_unique", + "nullsNotDistinct": false, + "columns": [ + "user_name_key" + ] + }, + "scim_users_external_id_key_unique": { + "name": "scim_users_external_id_key_unique", + "nullsNotDistinct": false, + "columns": [ + "external_id_key" + ] + }, + "scim_users_order_key_unique": { + "name": "scim_users_order_key_unique", + "nullsNotDistinct": false, + "columns": [ + "order_key" + ] + } + }, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.bot_lifecycle": { + "name": "bot_lifecycle", + "schema": "", + "columns": { + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "paused_at": { + "name": "paused_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "notify": { + "name": "notify", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'all'" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "bot_lifecycle_owner_user_id_users_id_fk": { + "name": "bot_lifecycle_owner_user_id_users_id_fk", + "tableFrom": "bot_lifecycle", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "bot_lifecycle_agent_id_agents_id_fk": { + "name": "bot_lifecycle_agent_id_agents_id_fk", + "tableFrom": "bot_lifecycle", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "bot_lifecycle_owner_user_id_agent_id_pk": { + "name": "bot_lifecycle_owner_user_id_agent_id_pk", + "columns": [ + "owner_user_id", + "agent_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.update_routing_preferences": { + "name": "update_routing_preferences", + "schema": "", + "columns": { + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "kind": { + "name": "kind", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "transports": { + "name": "transports", + "type": "text[]", + "primaryKey": false, + "notNull": true, + "default": "'{}'" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "update_routing_preferences_owner_user_id_users_id_fk": { + "name": "update_routing_preferences_owner_user_id_users_id_fk", + "tableFrom": "update_routing_preferences", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "update_routing_preferences_owner_user_id_kind_pk": { + "name": "update_routing_preferences_owner_user_id_kind_pk", + "columns": [ + "owner_user_id", + "kind" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.saved_logins": { + "name": "saved_logins", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "origin": { + "name": "origin", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "username": { + "name": "username", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "encrypted_password": { + "name": "encrypted_password", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "last_used_at": { + "name": "last_used_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + } + }, + "indexes": { + "saved_logins_owner_origin_username_idx": { + "name": "saved_logins_owner_origin_username_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "origin", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "username", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "concurrently": false, + "method": "btree", + "with": {} + }, + "saved_logins_owner_idx": { + "name": "saved_logins_owner_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "saved_logins_owner_user_id_users_id_fk": { + "name": "saved_logins_owner_user_id_users_id_fk", + "tableFrom": "saved_logins", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.sign_in_requests": { + "name": "sign_in_requests", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "bot_id": { + "name": "bot_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "origin": { + "name": "origin", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "reason": { + "name": "reason", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "status": { + "name": "status", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'pending'" + }, + "method": { + "name": "method", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "outcome": { + "name": "outcome", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "thread_id": { + "name": "thread_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "tool_call_id": { + "name": "tool_call_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "control_request_id": { + "name": "control_request_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "continuation": { + "name": "continuation", + "type": "jsonb", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "expires_at": { + "name": "expires_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + }, + "resolved_at": { + "name": "resolved_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "filling_until": { + "name": "filling_until", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + } + }, + "indexes": { + "sign_in_requests_owner_idx": { + "name": "sign_in_requests_owner_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "status", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "sign_in_requests_owner_user_id_users_id_fk": { + "name": "sign_in_requests_owner_user_id_users_id_fk", + "tableFrom": "sign_in_requests", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "sign_in_requests_status_check": { + "name": "sign_in_requests_status_check", + "value": "\"sign_in_requests\".\"status\" IN ('pending', 'filling', 'code_required', 'taken_over', 'signed_in', 'failed', 'cancelled', 'expired')" + }, + "sign_in_requests_method_check": { + "name": "sign_in_requests_method_check", + "value": "\"sign_in_requests\".\"method\" IS NULL OR \"sign_in_requests\".\"method\" IN ('typed', 'saved', 'takeover')" + } + }, + "isRLSEnabled": false + }, + "public.team_bot_assignments": { + "name": "team_bot_assignments", + "schema": "", + "columns": { + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "group_name": { + "name": "group_name", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "assigned_by": { + "name": "assigned_by", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "assigned_at": { + "name": "assigned_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "team_bot_assignments_agent_id_agents_id_fk": { + "name": "team_bot_assignments_agent_id_agents_id_fk", + "tableFrom": "team_bot_assignments", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "team_bot_assignments_assigned_by_users_id_fk": { + "name": "team_bot_assignments_assigned_by_users_id_fk", + "tableFrom": "team_bot_assignments", + "tableTo": "users", + "columnsFrom": [ + "assigned_by" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "team_bot_assignments_agent_id_group_name_pk": { + "name": "team_bot_assignments_agent_id_group_name_pk", + "columns": [ + "agent_id", + "group_name" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.team_bot_audience": { + "name": "team_bot_audience", + "schema": "", + "columns": { + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "kind": { + "name": "kind", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "value": { + "name": "value", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "team_bot_audience_agent_id_agents_id_fk": { + "name": "team_bot_audience_agent_id_agents_id_fk", + "tableFrom": "team_bot_audience", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "team_bot_audience_agent_id_kind_value_pk": { + "name": "team_bot_audience_agent_id_kind_value_pk", + "columns": [ + "agent_id", + "kind", + "value" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "team_bot_audience_kind_check": { + "name": "team_bot_audience_kind_check", + "value": "\"team_bot_audience\".\"kind\" IN ('user', 'group')" + } + }, + "isRLSEnabled": false + }, + "public.team_bot_consent_defaults": { + "name": "team_bot_consent_defaults", + "schema": "", + "columns": { + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "server_id": { + "name": "server_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "team_bot_consent_defaults_user_id_users_id_fk": { + "name": "team_bot_consent_defaults_user_id_users_id_fk", + "tableFrom": "team_bot_consent_defaults", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "team_bot_consent_defaults_user_id_server_id_pk": { + "name": "team_bot_consent_defaults_user_id_server_id_pk", + "columns": [ + "user_id", + "server_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.team_bot_consents": { + "name": "team_bot_consents", + "schema": "", + "columns": { + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "server_id": { + "name": "server_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "decision": { + "name": "decision", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "team_bot_consents_user_id_users_id_fk": { + "name": "team_bot_consents_user_id_users_id_fk", + "tableFrom": "team_bot_consents", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "team_bot_consents_agent_id_agents_id_fk": { + "name": "team_bot_consents_agent_id_agents_id_fk", + "tableFrom": "team_bot_consents", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "team_bot_consents_user_id_agent_id_server_id_pk": { + "name": "team_bot_consents_user_id_agent_id_server_id_pk", + "columns": [ + "user_id", + "agent_id", + "server_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "team_bot_consents_decision_check": { + "name": "team_bot_consents_decision_check", + "value": "\"team_bot_consents\".\"decision\" IN ('always', 'once')" + } + }, + "isRLSEnabled": false + }, + "public.team_bot_publications": { + "name": "team_bot_publications", + "schema": "", + "columns": { + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "published_by": { + "name": "published_by", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "audience": { + "name": "audience", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "published_at": { + "name": "published_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "team_bot_publications_agent_id_agents_id_fk": { + "name": "team_bot_publications_agent_id_agents_id_fk", + "tableFrom": "team_bot_publications", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "team_bot_publications_published_by_users_id_fk": { + "name": "team_bot_publications_published_by_users_id_fk", + "tableFrom": "team_bot_publications", + "tableTo": "users", + "columnsFrom": [ + "published_by" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "team_bot_publications_audience_check": { + "name": "team_bot_publications_audience_check", + "value": "\"team_bot_publications\".\"audience\" IN ('team', 'people')" + } + }, + "isRLSEnabled": false + }, + "public.shared_use_approval_members": { + "name": "shared_use_approval_members", + "schema": "", + "columns": { + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "server_id": { + "name": "server_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "kind": { + "name": "kind", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "value": { + "name": "value", + "type": "text", + "primaryKey": false, + "notNull": true + } + }, + "indexes": {}, + "foreignKeys": { + "shared_use_approval_members_approval_fk": { + "name": "shared_use_approval_members_approval_fk", + "tableFrom": "shared_use_approval_members", + "tableTo": "shared_use_approvals", + "columnsFrom": [ + "agent_id", + "server_id" + ], + "columnsTo": [ + "agent_id", + "server_id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "shared_use_approval_members_agent_id_server_id_kind_value_pk": { + "name": "shared_use_approval_members_agent_id_server_id_kind_value_pk", + "columns": [ + "agent_id", + "server_id", + "kind", + "value" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "shared_use_approval_members_kind_check": { + "name": "shared_use_approval_members_kind_check", + "value": "\"shared_use_approval_members\".\"kind\" IN ('user', 'group')" + } + }, + "isRLSEnabled": false + }, + "public.shared_use_approvals": { + "name": "shared_use_approvals", + "schema": "", + "columns": { + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "server_id": { + "name": "server_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "audience": { + "name": "audience", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "outside_input": { + "name": "outside_input", + "type": "boolean", + "primaryKey": false, + "notNull": true + }, + "approved_by": { + "name": "approved_by", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "approved_at": { + "name": "approved_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "shared_use_approvals_agent_id_agents_id_fk": { + "name": "shared_use_approvals_agent_id_agents_id_fk", + "tableFrom": "shared_use_approvals", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "shared_use_approvals_server_id_mcp_servers_id_fk": { + "name": "shared_use_approvals_server_id_mcp_servers_id_fk", + "tableFrom": "shared_use_approvals", + "tableTo": "mcp_servers", + "columnsFrom": [ + "server_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "shared_use_approvals_agent_id_server_id_pk": { + "name": "shared_use_approvals_agent_id_server_id_pk", + "columns": [ + "agent_id", + "server_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "shared_use_approvals_audience_check": { + "name": "shared_use_approvals_audience_check", + "value": "\"shared_use_approvals\".\"audience\" IN ('owner', 'people', 'team')" + } + }, + "isRLSEnabled": false + }, + "public.shared_use_requests": { + "name": "shared_use_requests", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "server_id": { + "name": "server_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "proposed_audience": { + "name": "proposed_audience", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "proposed_outside_input": { + "name": "proposed_outside_input", + "type": "boolean", + "primaryKey": false, + "notNull": true + }, + "proposed_members": { + "name": "proposed_members", + "type": "jsonb", + "primaryKey": false, + "notNull": true, + "default": "'[]'::jsonb" + }, + "reason": { + "name": "reason", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "requested_by": { + "name": "requested_by", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "status": { + "name": "status", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'pending'" + }, + "decided_by": { + "name": "decided_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "decided_at": { + "name": "decided_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "shared_use_requests_pending_idx": { + "name": "shared_use_requests_pending_idx", + "columns": [ + { + "expression": "agent_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "server_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "where": "\"shared_use_requests\".\"status\" = 'pending'", + "concurrently": false, + "method": "btree", + "with": {} + }, + "shared_use_requests_status_idx": { + "name": "shared_use_requests_status_idx", + "columns": [ + { + "expression": "status", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "shared_use_requests_agent_id_agents_id_fk": { + "name": "shared_use_requests_agent_id_agents_id_fk", + "tableFrom": "shared_use_requests", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "shared_use_requests_server_id_mcp_servers_id_fk": { + "name": "shared_use_requests_server_id_mcp_servers_id_fk", + "tableFrom": "shared_use_requests", + "tableTo": "mcp_servers", + "columnsFrom": [ + "server_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "shared_use_requests_audience_check": { + "name": "shared_use_requests_audience_check", + "value": "\"shared_use_requests\".\"proposed_audience\" IN ('owner', 'people', 'team')" + }, + "shared_use_requests_reason_check": { + "name": "shared_use_requests_reason_check", + "value": "\"shared_use_requests\".\"reason\" IN ('publish', 'trigger', 'grant', 'refused_call')" + }, + "shared_use_requests_status_check": { + "name": "shared_use_requests_status_check", + "value": "\"shared_use_requests\".\"status\" IN ('pending', 'approved', 'declined', 'superseded')" + } + }, + "isRLSEnabled": false + }, + "public.identity_link_challenges": { + "name": "identity_link_challenges", + "schema": "", + "columns": { + "token_hash": { + "name": "token_hash", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "provider": { + "name": "provider", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "expires_at": { + "name": "expires_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + } + }, + "indexes": { + "identity_link_challenges_expiry_idx": { + "name": "identity_link_challenges_expiry_idx", + "columns": [ + { + "expression": "expires_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "identity_link_challenges_user_provider_idx": { + "name": "identity_link_challenges_user_provider_idx", + "columns": [ + { + "expression": "user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "provider", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.identity_links": { + "name": "identity_links", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "provider": { + "name": "provider", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "realm": { + "name": "realm", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "subject": { + "name": "subject", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "handle": { + "name": "handle", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "verified_by": { + "name": "verified_by", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "credential_id": { + "name": "credential_id", + "type": "uuid", + "primaryKey": false, + "notNull": false + }, + "status": { + "name": "status", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'active'" + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "identity_links_identity_idx": { + "name": "identity_links_identity_idx", + "columns": [ + { + "expression": "provider", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "realm", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "subject", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "concurrently": false, + "method": "btree", + "with": {} + }, + "identity_links_user_realm_idx": { + "name": "identity_links_user_realm_idx", + "columns": [ + { + "expression": "user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "provider", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "realm", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "concurrently": false, + "method": "btree", + "with": {} + }, + "identity_links_credential_idx": { + "name": "identity_links_credential_idx", + "columns": [ + { + "expression": "credential_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "where": "\"identity_links\".\"credential_id\" IS NOT NULL", + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "identity_links_credential_id_credentials_id_fk": { + "name": "identity_links_credential_id_credentials_id_fk", + "tableFrom": "identity_links", + "tableTo": "credentials", + "columnsFrom": [ + "credential_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "no action", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "identity_links_verified_by_check": { + "name": "identity_links_verified_by_check", + "value": "\"identity_links\".\"verified_by\" IN ('challenge', 'oauth')" + }, + "identity_links_status_check": { + "name": "identity_links_status_check", + "value": "\"identity_links\".\"status\" IN ('active', 'needs_reconnect')" + } + }, + "isRLSEnabled": false + } + }, + "enums": { + "public.agent_type": { + "name": "agent_type", + "schema": "public", + "values": [ + "built_in", + "remote_ag_ui", + "remote_mastra" + ] + }, + "public.credential_kind": { + "name": "credential_kind", + "schema": "public", + "values": [ + "model", + "connector", + "agent", + "mcp", + "mcp_oauth_client", + "mcp_user_token" + ] + }, + "public.role": { + "name": "role", + "schema": "public", + "values": [ + "admin", + "user" + ] + }, + "public.agent_visibility": { + "name": "agent_visibility", + "schema": "public", + "values": [ + "public", + "private" + ] + }, + "public.routine_run_status": { + "name": "routine_run_status", + "schema": "public", + "values": [ + "succeeded", + "failed", + "skipped", + "waiting" + ] + }, + "public.responsibility_run_status": { + "name": "responsibility_run_status", + "schema": "public", + "values": [ + "queued", + "running", + "waiting", + "succeeded", + "failed", + "skipped" + ] + }, + "public.responsibility_status": { + "name": "responsibility_status", + "schema": "public", + "values": [ + "active", + "paused", + "completed" + ] + } + }, + "schemas": {}, + "sequences": {}, + "roles": {}, + "policies": {}, + "views": {}, + "_meta": { + "columns": {}, + "schemas": {}, + "tables": {} + } +} \ No newline at end of file diff --git a/server/drizzle/meta/0062_snapshot.json b/server/drizzle/meta/0062_snapshot.json new file mode 100644 index 000000000..82e9e0759 --- /dev/null +++ b/server/drizzle/meta/0062_snapshot.json @@ -0,0 +1,9997 @@ +{ + "id": "715bfd83-d33c-4c64-8233-060458d32510", + "prevId": "bc785e20-49f3-4886-b0b1-a81186dcbe0c", + "version": "7", + "dialect": "postgresql", + "tables": { + "public.accounts": { + "name": "accounts", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "account_id": { + "name": "account_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "provider_id": { + "name": "provider_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "issuer": { + "name": "issuer", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "access_token": { + "name": "access_token", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "refresh_token": { + "name": "refresh_token", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "id_token": { + "name": "id_token", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "access_token_expires_at": { + "name": "access_token_expires_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "refresh_token_expires_at": { + "name": "refresh_token_expires_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "scope": { + "name": "scope", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "password": { + "name": "password", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "accounts_provider_account_idx": { + "name": "accounts_provider_account_idx", + "columns": [ + { + "expression": "provider_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "account_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "accounts_user_id_users_id_fk": { + "name": "accounts_user_id_users_id_fk", + "tableFrom": "accounts", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.agents": { + "name": "agents", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "name": { + "name": "name", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "type": { + "name": "type", + "type": "agent_type", + "typeSchema": "public", + "primaryKey": false, + "notNull": true + }, + "configuration": { + "name": "configuration", + "type": "jsonb", + "primaryKey": false, + "notNull": true + }, + "package_id": { + "name": "package_id", + "type": "uuid", + "primaryKey": false, + "notNull": false + }, + "override": { + "name": "override", + "type": "jsonb", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "agents_package_id_deployment_packages_id_fk": { + "name": "agents_package_id_deployment_packages_id_fk", + "tableFrom": "agents", + "tableTo": "deployment_packages", + "columnsFrom": [ + "package_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "set null", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.attachments": { + "name": "attachments", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "uuid", + "primaryKey": true, + "notNull": true, + "default": "gen_random_uuid()" + }, + "channel_id": { + "name": "channel_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "uploaded_by": { + "name": "uploaded_by", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "name": { + "name": "name", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "mime_type": { + "name": "mime_type", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "size_bytes": { + "name": "size_bytes", + "type": "integer", + "primaryKey": false, + "notNull": true + }, + "bytes": { + "name": "bytes", + "type": "bytea", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "attached_at": { + "name": "attached_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "upload_group": { + "name": "upload_group", + "type": "text", + "primaryKey": false, + "notNull": false + } + }, + "indexes": { + "attachments_channel_idx": { + "name": "attachments_channel_idx", + "columns": [ + { + "expression": "channel_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "attachments_uploaded_by_idx": { + "name": "attachments_uploaded_by_idx", + "columns": [ + { + "expression": "uploaded_by", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "attachments_upload_group_idx": { + "name": "attachments_upload_group_idx", + "columns": [ + { + "expression": "channel_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "uploaded_by", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "upload_group", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "where": "\"attachments\".\"attached_at\" is null", + "concurrently": false, + "method": "btree", + "with": {} + }, + "attachments_staged_idx": { + "name": "attachments_staged_idx", + "columns": [ + { + "expression": "created_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "where": "\"attachments\".\"attached_at\" is null", + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "attachments_channel_id_channels_id_fk": { + "name": "attachments_channel_id_channels_id_fk", + "tableFrom": "attachments", + "tableTo": "channels", + "columnsFrom": [ + "channel_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "attachments_uploaded_by_users_id_fk": { + "name": "attachments_uploaded_by_users_id_fk", + "tableFrom": "attachments", + "tableTo": "users", + "columnsFrom": [ + "uploaded_by" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.audit_events": { + "name": "audit_events", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "uuid", + "primaryKey": true, + "notNull": true, + "default": "gen_random_uuid()" + }, + "actor_user_id": { + "name": "actor_user_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "initiator_kind": { + "name": "initiator_kind", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'person'" + }, + "initiator_id": { + "name": "initiator_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "event_type": { + "name": "event_type", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "target_type": { + "name": "target_type", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "target_id": { + "name": "target_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "payload": { + "name": "payload", + "type": "jsonb", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "audit_events_created_at_idx": { + "name": "audit_events_created_at_idx", + "columns": [ + { + "expression": "created_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "audit_events_type_time_idx": { + "name": "audit_events_type_time_idx", + "columns": [ + { + "expression": "event_type", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "created_at", + "isExpression": false, + "asc": false, + "nulls": "last" + }, + { + "expression": "id", + "isExpression": false, + "asc": false, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "audit_events_actor_time_idx": { + "name": "audit_events_actor_time_idx", + "columns": [ + { + "expression": "actor_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "created_at", + "isExpression": false, + "asc": false, + "nulls": "last" + }, + { + "expression": "id", + "isExpression": false, + "asc": false, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "audit_events_target_time_idx": { + "name": "audit_events_target_time_idx", + "columns": [ + { + "expression": "target_type", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "target_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "created_at", + "isExpression": false, + "asc": false, + "nulls": "last" + }, + { + "expression": "id", + "isExpression": false, + "asc": false, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "audit_events_initiator_time_idx": { + "name": "audit_events_initiator_time_idx", + "columns": [ + { + "expression": "initiator_kind", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "created_at", + "isExpression": false, + "asc": false, + "nulls": "last" + }, + { + "expression": "id", + "isExpression": false, + "asc": false, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.channel_agents": { + "name": "channel_agents", + "schema": "", + "columns": { + "channel_id": { + "name": "channel_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "channel_agents_channel_id_channels_id_fk": { + "name": "channel_agents_channel_id_channels_id_fk", + "tableFrom": "channel_agents", + "tableTo": "channels", + "columnsFrom": [ + "channel_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "channel_agents_agent_id_agents_id_fk": { + "name": "channel_agents_agent_id_agents_id_fk", + "tableFrom": "channel_agents", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "channel_agents_channel_id_agent_id_pk": { + "name": "channel_agents_channel_id_agent_id_pk", + "columns": [ + "channel_id", + "agent_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.channel_memberships": { + "name": "channel_memberships", + "schema": "", + "columns": { + "channel_id": { + "name": "channel_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "pinned_at": { + "name": "pinned_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "last_read_at": { + "name": "last_read_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "channel_memberships_channel_id_channels_id_fk": { + "name": "channel_memberships_channel_id_channels_id_fk", + "tableFrom": "channel_memberships", + "tableTo": "channels", + "columnsFrom": [ + "channel_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "channel_memberships_user_id_users_id_fk": { + "name": "channel_memberships_user_id_users_id_fk", + "tableFrom": "channel_memberships", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "channel_memberships_channel_id_user_id_pk": { + "name": "channel_memberships_channel_id_user_id_pk", + "columns": [ + "channel_id", + "user_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.channels": { + "name": "channels", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "name": { + "name": "name", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "description": { + "name": "description", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "suggested_prompts": { + "name": "suggested_prompts", + "type": "text[]", + "primaryKey": false, + "notNull": true, + "default": "'{}'" + }, + "allowed_groups": { + "name": "allowed_groups", + "type": "text[]", + "primaryKey": false, + "notNull": true, + "default": "'{}'" + }, + "package_id": { + "name": "package_id", + "type": "uuid", + "primaryKey": false, + "notNull": false + }, + "override": { + "name": "override", + "type": "jsonb", + "primaryKey": false, + "notNull": false + }, + "summary": { + "name": "summary", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "summary_at": { + "name": "summary_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "last_message": { + "name": "last_message", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "last_message_source_id": { + "name": "last_message_source_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "last_message_at": { + "name": "last_message_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "last_message_agent_id": { + "name": "last_message_agent_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "deleted_at": { + "name": "deleted_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "channels_recent_activity_idx": { + "name": "channels_recent_activity_idx", + "columns": [ + { + "expression": "COALESCE(\"last_message_at\", \"created_at\") DESC", + "asc": true, + "isExpression": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "channels_awaiting_summary_idx": { + "name": "channels_awaiting_summary_idx", + "columns": [ + { + "expression": "id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "where": "\"channels\".\"summary\" is null and \"channels\".\"deleted_at\" is null", + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "channels_package_id_deployment_packages_id_fk": { + "name": "channels_package_id_deployment_packages_id_fk", + "tableFrom": "channels", + "tableTo": "deployment_packages", + "columnsFrom": [ + "package_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "set null", + "onUpdate": "no action" + }, + "channels_last_message_agent_id_agents_id_fk": { + "name": "channels_last_message_agent_id_agents_id_fk", + "tableFrom": "channels", + "tableTo": "agents", + "columnsFrom": [ + "last_message_agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "set null", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.credentials": { + "name": "credentials", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "uuid", + "primaryKey": true, + "notNull": true, + "default": "gen_random_uuid()" + }, + "kind": { + "name": "kind", + "type": "credential_kind", + "typeSchema": "public", + "primaryKey": false, + "notNull": true + }, + "provider": { + "name": "provider", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "encrypted_value": { + "name": "encrypted_value", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "key_id": { + "name": "key_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "metadata": { + "name": "metadata", + "type": "jsonb", + "primaryKey": false, + "notNull": true + }, + "revoked_at": { + "name": "revoked_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "credentials_active_key_idx": { + "name": "credentials_active_key_idx", + "columns": [ + { + "expression": "kind", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "provider", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "key_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "where": "\"credentials\".\"revoked_at\" IS NULL", + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.deployment_packages": { + "name": "deployment_packages", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "uuid", + "primaryKey": true, + "notNull": true, + "default": "gen_random_uuid()" + }, + "tenant_id": { + "name": "tenant_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "source_path": { + "name": "source_path", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "checksum": { + "name": "checksum", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "loaded_at": { + "name": "loaded_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": { + "deployment_packages_tenant_id_unique": { + "name": "deployment_packages_tenant_id_unique", + "nullsNotDistinct": false, + "columns": [ + "tenant_id" + ] + } + }, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.intelligence_channel_mappings": { + "name": "intelligence_channel_mappings", + "schema": "", + "columns": { + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "channel_id": { + "name": "channel_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "thread_id": { + "name": "thread_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "intelligence_channel_mappings_thread_idx": { + "name": "intelligence_channel_mappings_thread_idx", + "columns": [ + { + "expression": "thread_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "intelligence_channel_mappings_user_id_users_id_fk": { + "name": "intelligence_channel_mappings_user_id_users_id_fk", + "tableFrom": "intelligence_channel_mappings", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "intelligence_channel_mappings_channel_id_channels_id_fk": { + "name": "intelligence_channel_mappings_channel_id_channels_id_fk", + "tableFrom": "intelligence_channel_mappings", + "tableTo": "channels", + "columnsFrom": [ + "channel_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "intelligence_channel_mappings_user_id_channel_id_pk": { + "name": "intelligence_channel_mappings_user_id_channel_id_pk", + "columns": [ + "user_id", + "channel_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.revoked_access": { + "name": "revoked_access", + "schema": "", + "columns": { + "email": { + "name": "email", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "revoked_at": { + "name": "revoked_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "revoked_by": { + "name": "revoked_by", + "type": "text", + "primaryKey": false, + "notNull": true + } + }, + "indexes": {}, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.sessions": { + "name": "sessions", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "token": { + "name": "token", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "expires_at": { + "name": "expires_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + }, + "ip_address": { + "name": "ip_address", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "user_agent": { + "name": "user_agent", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "sessions_user_id_users_id_fk": { + "name": "sessions_user_id_users_id_fk", + "tableFrom": "sessions", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": { + "sessions_token_unique": { + "name": "sessions_token_unique", + "nullsNotDistinct": false, + "columns": [ + "token" + ] + } + }, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.sso_providers": { + "name": "sso_providers", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "issuer": { + "name": "issuer", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "oidc_config": { + "name": "oidc_config", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "saml_config": { + "name": "saml_config", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "provider_id": { + "name": "provider_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "organization_id": { + "name": "organization_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "domain": { + "name": "domain", + "type": "text", + "primaryKey": false, + "notNull": true + } + }, + "indexes": {}, + "foreignKeys": { + "sso_providers_user_id_users_id_fk": { + "name": "sso_providers_user_id_users_id_fk", + "tableFrom": "sso_providers", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "set null", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": { + "sso_providers_provider_id_unique": { + "name": "sso_providers_provider_id_unique", + "nullsNotDistinct": false, + "columns": [ + "provider_id" + ] + } + }, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.user_instructions": { + "name": "user_instructions", + "schema": "", + "columns": { + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "instructions": { + "name": "instructions", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "user_instructions_user_id_users_id_fk": { + "name": "user_instructions_user_id_users_id_fk", + "tableFrom": "user_instructions", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.user_roles": { + "name": "user_roles", + "schema": "", + "columns": { + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "role": { + "name": "role", + "type": "role", + "typeSchema": "public", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "user_roles_user_id_users_id_fk": { + "name": "user_roles_user_id_users_id_fk", + "tableFrom": "user_roles", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "user_roles_user_id_role_pk": { + "name": "user_roles_user_id_role_pk", + "columns": [ + "user_id", + "role" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.users": { + "name": "users", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "email": { + "name": "email", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "name": { + "name": "name", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "image": { + "name": "image", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "email_verified": { + "name": "email_verified", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": false + }, + "preferences": { + "name": "preferences", + "type": "jsonb", + "primaryKey": false, + "notNull": true, + "default": "'{}'::jsonb" + }, + "groups": { + "name": "groups", + "type": "text[]", + "primaryKey": false, + "notNull": true, + "default": "'{}'" + }, + "onboarding_step": { + "name": "onboarding_step", + "type": "integer", + "primaryKey": false, + "notNull": true, + "default": 0 + }, + "onboarding_completed_at": { + "name": "onboarding_completed_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "last_signed_in_at": { + "name": "last_signed_in_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": { + "users_email_unique": { + "name": "users_email_unique", + "nullsNotDistinct": false, + "columns": [ + "email" + ] + } + }, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.verifications": { + "name": "verifications", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "identifier": { + "name": "identifier", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "value": { + "name": "value", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "expires_at": { + "name": "expires_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.action_policy": { + "name": "action_policy", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "mode": { + "name": "mode", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "deny": { + "name": "deny", + "type": "text[]", + "primaryKey": false, + "notNull": true + }, + "allow": { + "name": "allow", + "type": "text[]", + "primaryKey": false, + "notNull": true + }, + "updated_by": { + "name": "updated_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.computer_page_frame": { + "name": "computer_page_frame", + "schema": "", + "columns": { + "computer_id": { + "name": "computer_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "tool_call_id": { + "name": "tool_call_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "url": { + "name": "url", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "title": { + "name": "title", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "frame": { + "name": "frame", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "captured_at": { + "name": "captured_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "computer_page_frame_captured_idx": { + "name": "computer_page_frame_captured_idx", + "columns": [ + { + "expression": "captured_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": {}, + "compositePrimaryKeys": { + "computer_page_frame_computer_id_tool_call_id_pk": { + "name": "computer_page_frame_computer_id_tool_call_id_pk", + "columns": [ + "computer_id", + "tool_call_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.computer_snapshot": { + "name": "computer_snapshot", + "schema": "", + "columns": { + "computer_id": { + "name": "computer_id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "snapshot_id": { + "name": "snapshot_id", + "type": "integer", + "primaryKey": false, + "notNull": true + }, + "url": { + "name": "url", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "elements": { + "name": "elements", + "type": "jsonb", + "primaryKey": false, + "notNull": true + }, + "taken_at": { + "name": "taken_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "session": { + "name": "session", + "type": "text", + "primaryKey": false, + "notNull": false + } + }, + "indexes": {}, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.agent_preferences": { + "name": "agent_preferences", + "schema": "", + "columns": { + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "hidden_at": { + "name": "hidden_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "pinned_at": { + "name": "pinned_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + } + }, + "indexes": {}, + "foreignKeys": { + "agent_preferences_user_id_users_id_fk": { + "name": "agent_preferences_user_id_users_id_fk", + "tableFrom": "agent_preferences", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "agent_preferences_agent_id_agents_id_fk": { + "name": "agent_preferences_agent_id_agents_id_fk", + "tableFrom": "agent_preferences", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "agent_preferences_user_id_agent_id_pk": { + "name": "agent_preferences_user_id_agent_id_pk", + "columns": [ + "user_id", + "agent_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.agent_profiles": { + "name": "agent_profiles", + "schema": "", + "columns": { + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "title": { + "name": "title", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "role_description": { + "name": "role_description", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "avatar_seed": { + "name": "avatar_seed", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "visibility": { + "name": "visibility", + "type": "agent_visibility", + "typeSchema": "public", + "primaryKey": false, + "notNull": true + }, + "callback_token_hash": { + "name": "callback_token_hash", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "callback_token_issued_at": { + "name": "callback_token_issued_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "deleted_at": { + "name": "deleted_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "agent_profiles_visibility_deleted_idx": { + "name": "agent_profiles_visibility_deleted_idx", + "columns": [ + { + "expression": "visibility", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "deleted_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "agent_profiles_agent_id_agents_id_fk": { + "name": "agent_profiles_agent_id_agents_id_fk", + "tableFrom": "agent_profiles", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "agent_profiles_owner_user_id_users_id_fk": { + "name": "agent_profiles_owner_user_id_users_id_fk", + "tableFrom": "agent_profiles", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "set null", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.routine_runs": { + "name": "routine_runs", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "routine_id": { + "name": "routine_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "started_at": { + "name": "started_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "finished_at": { + "name": "finished_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "status": { + "name": "status", + "type": "routine_run_status", + "typeSchema": "public", + "primaryKey": false, + "notNull": false + }, + "waiting": { + "name": "waiting", + "type": "jsonb", + "primaryKey": false, + "notNull": false + }, + "error": { + "name": "error", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "source": { + "name": "source", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'schedule'" + } + }, + "indexes": { + "routine_runs_by_routine_idx": { + "name": "routine_runs_by_routine_idx", + "columns": [ + { + "expression": "routine_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "started_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "routine_runs_routine_id_routines_id_fk": { + "name": "routine_runs_routine_id_routines_id_fk", + "tableFrom": "routine_runs", + "tableTo": "routines", + "columnsFrom": [ + "routine_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.routine_sweeps": { + "name": "routine_sweeps", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "swept_at": { + "name": "swept_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "owner": { + "name": "owner", + "type": "text", + "primaryKey": false, + "notNull": false + } + }, + "indexes": {}, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.routines": { + "name": "routines", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "channel_id": { + "name": "channel_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "instruction": { + "name": "instruction", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "cron": { + "name": "cron", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "timezone": { + "name": "timezone", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'UTC'" + }, + "enabled": { + "name": "enabled", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": true + }, + "next_run_at": { + "name": "next_run_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + }, + "last_run_at": { + "name": "last_run_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "enabled_at": { + "name": "enabled_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "routines_due_idx": { + "name": "routines_due_idx", + "columns": [ + { + "expression": "enabled", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "next_run_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "routines_by_owner_idx": { + "name": "routines_by_owner_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "enabled", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "routines_owner_user_id_users_id_fk": { + "name": "routines_owner_user_id_users_id_fk", + "tableFrom": "routines", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "routines_agent_id_agents_id_fk": { + "name": "routines_agent_id_agents_id_fk", + "tableFrom": "routines", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.component_exclusions": { + "name": "component_exclusions", + "schema": "", + "columns": { + "component_name": { + "name": "component_name", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "withheld_by": { + "name": "withheld_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "component_exclusions_component_name_components_name_fk": { + "name": "component_exclusions_component_name_components_name_fk", + "tableFrom": "component_exclusions", + "tableTo": "components", + "columnsFrom": [ + "component_name" + ], + "columnsTo": [ + "name" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "component_exclusions_agent_id_agents_id_fk": { + "name": "component_exclusions_agent_id_agents_id_fk", + "tableFrom": "component_exclusions", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "component_exclusions_component_name_agent_id_pk": { + "name": "component_exclusions_component_name_agent_id_pk", + "columns": [ + "component_name", + "agent_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.component_functions": { + "name": "component_functions", + "schema": "", + "columns": { + "component_name": { + "name": "component_name", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "function_name": { + "name": "function_name", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "granted_by": { + "name": "granted_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "component_functions_component_name_components_name_fk": { + "name": "component_functions_component_name_components_name_fk", + "tableFrom": "component_functions", + "tableTo": "components", + "columnsFrom": [ + "component_name" + ], + "columnsTo": [ + "name" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "component_functions_component_name_function_name_pk": { + "name": "component_functions_component_name_function_name_pk", + "columns": [ + "component_name", + "function_name" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.components": { + "name": "components", + "schema": "", + "columns": { + "name": { + "name": "name", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "title": { + "name": "title", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "kind": { + "name": "kind", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "draft_description": { + "name": "draft_description", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "published_description": { + "name": "published_description", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "published": { + "name": "published", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": false + }, + "published_at": { + "name": "published_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "updated_by": { + "name": "updated_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.brokered_connections": { + "name": "brokered_connections", + "schema": "", + "columns": { + "provider": { + "name": "provider", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "app": { + "name": "app", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "holder": { + "name": "holder", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "vendor_user_id": { + "name": "vendor_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "connected_by": { + "name": "connected_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "connected_at": { + "name": "connected_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "verified": { + "name": "verified", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": false + }, + "verified_at": { + "name": "verified_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "probe_action": { + "name": "probe_action", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "brokered_connections_person_idx": { + "name": "brokered_connections_person_idx", + "columns": [ + { + "expression": "provider", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "app", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "where": "\"brokered_connections\".\"holder\" = 'person'", + "concurrently": false, + "method": "btree", + "with": {} + }, + "brokered_connections_deployment_idx": { + "name": "brokered_connections_deployment_idx", + "columns": [ + { + "expression": "provider", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "app", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "where": "\"brokered_connections\".\"holder\" = 'deployment'", + "concurrently": false, + "method": "btree", + "with": {} + }, + "brokered_connections_user_idx": { + "name": "brokered_connections_user_idx", + "columns": [ + { + "expression": "user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "brokered_connections_holder_check": { + "name": "brokered_connections_holder_check", + "value": "(\"brokered_connections\".\"holder\" = 'person' AND \"brokered_connections\".\"user_id\" IS NOT NULL) OR (\"brokered_connections\".\"holder\" = 'deployment' AND \"brokered_connections\".\"user_id\" IS NULL)" + }, + "brokered_connections_provider_check": { + "name": "brokered_connections_provider_check", + "value": "\"brokered_connections\".\"provider\" IN ('composio', 'arcade')" + } + }, + "isRLSEnabled": false + }, + "public.composio_connections": { + "name": "composio_connections", + "schema": "", + "columns": { + "toolkit": { + "name": "toolkit", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "connected_at": { + "name": "connected_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "verified": { + "name": "verified", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": false + }, + "verified_at": { + "name": "verified_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "probe_action": { + "name": "probe_action", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "composio_connections_user_idx": { + "name": "composio_connections_user_idx", + "columns": [ + { + "expression": "user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": {}, + "compositePrimaryKeys": { + "composio_connections_toolkit_user_id_pk": { + "name": "composio_connections_toolkit_user_id_pk", + "columns": [ + "toolkit", + "user_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.mcp_servers": { + "name": "mcp_servers", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "title": { + "name": "title", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "logo": { + "name": "logo", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "vendor": { + "name": "vendor", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "url": { + "name": "url", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "provenance": { + "name": "provenance", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'first-party'" + }, + "credential_id": { + "name": "credential_id", + "type": "uuid", + "primaryKey": false, + "notNull": false + }, + "auth_scheme": { + "name": "auth_scheme", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "account_mode": { + "name": "account_mode", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "shared_vendor_user_id": { + "name": "shared_vendor_user_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "tools_refreshed_at": { + "name": "tools_refreshed_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "last_error": { + "name": "last_error", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "added_by": { + "name": "added_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "mcp_servers_credential_id_credentials_id_fk": { + "name": "mcp_servers_credential_id_credentials_id_fk", + "tableFrom": "mcp_servers", + "tableTo": "credentials", + "columnsFrom": [ + "credential_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "restrict", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "mcp_servers_account_mode_check": { + "name": "mcp_servers_account_mode_check", + "value": "\"mcp_servers\".\"account_mode\" IS NULL OR \"mcp_servers\".\"account_mode\" IN ('personal', 'shared')" + } + }, + "isRLSEnabled": false + }, + "public.mcp_tools": { + "name": "mcp_tools", + "schema": "", + "columns": { + "server_id": { + "name": "server_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "name": { + "name": "name", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "description": { + "name": "description", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "''" + }, + "input_schema": { + "name": "input_schema", + "type": "jsonb", + "primaryKey": false, + "notNull": true, + "default": "'{}'::jsonb" + }, + "effect": { + "name": "effect", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "destructive": { + "name": "destructive", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": false + }, + "version": { + "name": "version", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "mcp_tools_server_id_mcp_servers_id_fk": { + "name": "mcp_tools_server_id_mcp_servers_id_fk", + "tableFrom": "mcp_tools", + "tableTo": "mcp_servers", + "columnsFrom": [ + "server_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "mcp_tools_server_id_name_pk": { + "name": "mcp_tools_server_id_name_pk", + "columns": [ + "server_id", + "name" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.mcp_user_credentials": { + "name": "mcp_user_credentials", + "schema": "", + "columns": { + "server_id": { + "name": "server_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "credential_id": { + "name": "credential_id", + "type": "uuid", + "primaryKey": false, + "notNull": true + }, + "scope": { + "name": "scope", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "connected_at": { + "name": "connected_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "mcp_user_credentials_user_idx": { + "name": "mcp_user_credentials_user_idx", + "columns": [ + { + "expression": "user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "mcp_user_credentials_server_id_mcp_servers_id_fk": { + "name": "mcp_user_credentials_server_id_mcp_servers_id_fk", + "tableFrom": "mcp_user_credentials", + "tableTo": "mcp_servers", + "columnsFrom": [ + "server_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "mcp_user_credentials_user_id_users_id_fk": { + "name": "mcp_user_credentials_user_id_users_id_fk", + "tableFrom": "mcp_user_credentials", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "mcp_user_credentials_credential_id_credentials_id_fk": { + "name": "mcp_user_credentials_credential_id_credentials_id_fk", + "tableFrom": "mcp_user_credentials", + "tableTo": "credentials", + "columnsFrom": [ + "credential_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "no action", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "mcp_user_credentials_server_id_user_id_pk": { + "name": "mcp_user_credentials_server_id_user_id_pk", + "columns": [ + "server_id", + "user_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.pending_authorizations": { + "name": "pending_authorizations", + "schema": "", + "columns": { + "actor_id": { + "name": "actor_id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "server_id": { + "name": "server_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "action": { + "name": "action", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "holder": { + "name": "holder", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "vendor_user_id": { + "name": "vendor_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "auth_id": { + "name": "auth_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "completed_at": { + "name": "completed_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "outcome": { + "name": "outcome", + "type": "text", + "primaryKey": false, + "notNull": false + } + }, + "indexes": { + "pending_authorizations_server_idx": { + "name": "pending_authorizations_server_idx", + "columns": [ + { + "expression": "server_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "pending_authorizations_actor_id_users_id_fk": { + "name": "pending_authorizations_actor_id_users_id_fk", + "tableFrom": "pending_authorizations", + "tableTo": "users", + "columnsFrom": [ + "actor_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "pending_authorizations_server_id_mcp_servers_id_fk": { + "name": "pending_authorizations_server_id_mcp_servers_id_fk", + "tableFrom": "pending_authorizations", + "tableTo": "mcp_servers", + "columnsFrom": [ + "server_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "pending_authorizations_holder_check": { + "name": "pending_authorizations_holder_check", + "value": "(\"pending_authorizations\".\"holder\" = 'person' AND \"pending_authorizations\".\"user_id\" IS NOT NULL) OR (\"pending_authorizations\".\"holder\" = 'deployment' AND \"pending_authorizations\".\"user_id\" IS NULL)" + }, + "pending_authorizations_outcome_check": { + "name": "pending_authorizations_outcome_check", + "value": "\"pending_authorizations\".\"outcome\" IS NULL OR \"pending_authorizations\".\"outcome\" IN ('completed', 'failed', 'unreconciled', 'withdrawn')" + }, + "pending_authorizations_completion_check": { + "name": "pending_authorizations_completion_check", + "value": "(\"pending_authorizations\".\"completed_at\" IS NULL) = (\"pending_authorizations\".\"outcome\" IS NULL)" + }, + "pending_authorizations_user_is_actor_check": { + "name": "pending_authorizations_user_is_actor_check", + "value": "\"pending_authorizations\".\"user_id\" IS NULL OR \"pending_authorizations\".\"user_id\" = \"pending_authorizations\".\"actor_id\"" + } + }, + "isRLSEnabled": false + }, + "public.plugin_grants": { + "name": "plugin_grants", + "schema": "", + "columns": { + "kind": { + "name": "kind", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "ref": { + "name": "ref", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "granted_by": { + "name": "granted_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "plugin_grants_agent_idx": { + "name": "plugin_grants_agent_idx", + "columns": [ + { + "expression": "agent_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "plugin_grants_agent_id_agents_id_fk": { + "name": "plugin_grants_agent_id_agents_id_fk", + "tableFrom": "plugin_grants", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "plugin_grants_kind_ref_agent_id_pk": { + "name": "plugin_grants_kind_ref_agent_id_pk", + "columns": [ + "kind", + "ref", + "agent_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.sandboxed_components": { + "name": "sandboxed_components", + "schema": "", + "columns": { + "name": { + "name": "name", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "title": { + "name": "title", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "draft_description": { + "name": "draft_description", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "''" + }, + "draft_html": { + "name": "draft_html", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "''" + }, + "draft_css": { + "name": "draft_css", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "''" + }, + "draft_js_functions": { + "name": "draft_js_functions", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "''" + }, + "draft_argument_schema": { + "name": "draft_argument_schema", + "type": "jsonb", + "primaryKey": false, + "notNull": true, + "default": "'{}'::jsonb" + }, + "published_description": { + "name": "published_description", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "published_html": { + "name": "published_html", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "published_css": { + "name": "published_css", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "published_js_functions": { + "name": "published_js_functions", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "published_argument_schema": { + "name": "published_argument_schema", + "type": "jsonb", + "primaryKey": false, + "notNull": false + }, + "sample_arguments": { + "name": "sample_arguments", + "type": "jsonb", + "primaryKey": false, + "notNull": true, + "default": "'{}'::jsonb" + }, + "revision": { + "name": "revision", + "type": "integer", + "primaryKey": false, + "notNull": true, + "default": 0 + }, + "published": { + "name": "published", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": false + }, + "published_at": { + "name": "published_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "authored_by": { + "name": "authored_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.skill_tools": { + "name": "skill_tools", + "schema": "", + "columns": { + "skill_id": { + "name": "skill_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "ref": { + "name": "ref", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "declared_by": { + "name": "declared_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "skill_tools_ref_idx": { + "name": "skill_tools_ref_idx", + "columns": [ + { + "expression": "ref", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "skill_tools_skill_id_skills_id_fk": { + "name": "skill_tools_skill_id_skills_id_fk", + "tableFrom": "skill_tools", + "tableTo": "skills", + "columnsFrom": [ + "skill_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "skill_tools_skill_id_ref_pk": { + "name": "skill_tools_skill_id_ref_pk", + "columns": [ + "skill_id", + "ref" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.skills": { + "name": "skills", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "slug": { + "name": "slug", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "title": { + "name": "title", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "summary": { + "name": "summary", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "instructions": { + "name": "instructions", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "origin": { + "name": "origin", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'yours'" + }, + "installed_by": { + "name": "installed_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "skills_slug_key": { + "name": "skills_slug_key", + "columns": [ + { + "expression": "slug", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "concurrently": false, + "method": "btree", + "with": {} + }, + "skills_owner_idx": { + "name": "skills_owner_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "skills_owner_user_id_users_id_fk": { + "name": "skills_owner_user_id_users_id_fk", + "tableFrom": "skills", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.work_items": { + "name": "work_items", + "schema": "", + "columns": { + "kind": { + "name": "kind", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "key": { + "name": "key", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "run_at": { + "name": "run_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "claimed_by": { + "name": "claimed_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "lease_until": { + "name": "lease_until", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "attempts": { + "name": "attempts", + "type": "integer", + "primaryKey": false, + "notNull": true, + "default": 0 + }, + "finished_at": { + "name": "finished_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "last_error": { + "name": "last_error", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "payload": { + "name": "payload", + "type": "jsonb", + "primaryKey": false, + "notNull": true, + "default": "'{}'::jsonb" + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "work_items_claimable_idx": { + "name": "work_items_claimable_idx", + "columns": [ + { + "expression": "kind", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "run_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": {}, + "compositePrimaryKeys": { + "work_items_kind_key_pk": { + "name": "work_items_kind_key_pk", + "columns": [ + "kind", + "key" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.voice_sessions": { + "name": "voice_sessions", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "channel_id": { + "name": "channel_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "anchor_message_id": { + "name": "anchor_message_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "started_at": { + "name": "started_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + }, + "ended_at": { + "name": "ended_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + }, + "duration_seconds": { + "name": "duration_seconds", + "type": "integer", + "primaryKey": false, + "notNull": true + }, + "transcript": { + "name": "transcript", + "type": "jsonb", + "primaryKey": false, + "notNull": true + }, + "summary": { + "name": "summary", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "summary_status": { + "name": "summary_status", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'failed'" + } + }, + "indexes": { + "voice_sessions_channel_started_idx": { + "name": "voice_sessions_channel_started_idx", + "columns": [ + { + "expression": "channel_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "started_at", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "voice_sessions_channel_id_channels_id_fk": { + "name": "voice_sessions_channel_id_channels_id_fk", + "tableFrom": "voice_sessions", + "tableTo": "channels", + "columnsFrom": [ + "channel_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "voice_sessions_user_id_users_id_fk": { + "name": "voice_sessions_user_id_users_id_fk", + "tableFrom": "voice_sessions", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "voice_sessions_duration_check": { + "name": "voice_sessions_duration_check", + "value": "\"voice_sessions\".\"duration_seconds\" >= 0" + }, + "voice_sessions_summary_check": { + "name": "voice_sessions_summary_check", + "value": "(\"voice_sessions\".\"summary_status\" = 'ready' AND \"voice_sessions\".\"summary\" IS NOT NULL) OR (\"voice_sessions\".\"summary_status\" = 'failed' AND \"voice_sessions\".\"summary\" IS NULL)" + } + }, + "isRLSEnabled": false + }, + "public.learning_settings": { + "name": "learning_settings", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "settings": { + "name": "settings", + "type": "jsonb", + "primaryKey": false, + "notNull": true + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.learning_thread_bindings": { + "name": "learning_thread_bindings", + "schema": "", + "columns": { + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "thread_id": { + "name": "thread_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "container_id": { + "name": "container_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": {}, + "compositePrimaryKeys": { + "learning_thread_bindings_user_id_thread_id_pk": { + "name": "learning_thread_bindings_user_id_thread_id_pk", + "columns": [ + "user_id", + "thread_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.responsibilities": { + "name": "responsibilities", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "channel_id": { + "name": "channel_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "thread_id": { + "name": "thread_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "title": { + "name": "title", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "instruction": { + "name": "instruction", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "success_criteria": { + "name": "success_criteria", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "status": { + "name": "status", + "type": "responsibility_status", + "typeSchema": "public", + "primaryKey": false, + "notNull": true, + "default": "'active'" + }, + "progress": { + "name": "progress", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "''" + }, + "last_result": { + "name": "last_result", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "subscriptions": { + "name": "subscriptions", + "type": "jsonb", + "primaryKey": false, + "notNull": true, + "default": "'[]'::jsonb" + }, + "completed_at": { + "name": "completed_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "responsibilities_owner_status_idx": { + "name": "responsibilities_owner_status_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "status", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "responsibilities_owner_user_id_users_id_fk": { + "name": "responsibilities_owner_user_id_users_id_fk", + "tableFrom": "responsibilities", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "responsibilities_agent_id_agents_id_fk": { + "name": "responsibilities_agent_id_agents_id_fk", + "tableFrom": "responsibilities", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.responsibility_events": { + "name": "responsibility_events", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "source": { + "name": "source", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "external_id": { + "name": "external_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "type": { + "name": "type", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "payload": { + "name": "payload", + "type": "jsonb", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "responsibility_events_source_id_idx": { + "name": "responsibility_events_source_id_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "source", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "external_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "responsibility_events_owner_user_id_users_id_fk": { + "name": "responsibility_events_owner_user_id_users_id_fk", + "tableFrom": "responsibility_events", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.responsibility_runs": { + "name": "responsibility_runs", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "responsibility_id": { + "name": "responsibility_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "event_id": { + "name": "event_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "status": { + "name": "status", + "type": "responsibility_run_status", + "typeSchema": "public", + "primaryKey": false, + "notNull": true, + "default": "'queued'" + }, + "reply_text": { + "name": "reply_text", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "error": { + "name": "error", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "waiting": { + "name": "waiting", + "type": "jsonb", + "primaryKey": false, + "notNull": false + }, + "continuation": { + "name": "continuation", + "type": "jsonb", + "primaryKey": false, + "notNull": false + }, + "started_at": { + "name": "started_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "finished_at": { + "name": "finished_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "responsibility_runs_event_idx": { + "name": "responsibility_runs_event_idx", + "columns": [ + { + "expression": "responsibility_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "event_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "concurrently": false, + "method": "btree", + "with": {} + }, + "responsibility_runs_status_idx": { + "name": "responsibility_runs_status_idx", + "columns": [ + { + "expression": "status", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "created_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "responsibility_runs_responsibility_id_responsibilities_id_fk": { + "name": "responsibility_runs_responsibility_id_responsibilities_id_fk", + "tableFrom": "responsibility_runs", + "tableTo": "responsibilities", + "columnsFrom": [ + "responsibility_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "responsibility_runs_event_id_responsibility_events_id_fk": { + "name": "responsibility_runs_event_id_responsibility_events_id_fk", + "tableFrom": "responsibility_runs", + "tableTo": "responsibility_events", + "columnsFrom": [ + "event_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.responsibility_source_bindings": { + "name": "responsibility_source_bindings", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "source": { + "name": "source", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "repository": { + "name": "repository", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "credential_id": { + "name": "credential_id", + "type": "uuid", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "responsibility_source_bindings_owner_idx": { + "name": "responsibility_source_bindings_owner_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "responsibility_source_bindings_owner_user_id_users_id_fk": { + "name": "responsibility_source_bindings_owner_user_id_users_id_fk", + "tableFrom": "responsibility_source_bindings", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "responsibility_source_bindings_credential_id_credentials_id_fk": { + "name": "responsibility_source_bindings_credential_id_credentials_id_fk", + "tableFrom": "responsibility_source_bindings", + "tableTo": "credentials", + "columnsFrom": [ + "credential_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "no action", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.responsibility_triggers": { + "name": "responsibility_triggers", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "responsibility_id": { + "name": "responsibility_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "kind": { + "name": "kind", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "config": { + "name": "config", + "type": "jsonb", + "primaryKey": false, + "notNull": true + }, + "credential_id": { + "name": "credential_id", + "type": "uuid", + "primaryKey": false, + "notNull": false + }, + "enabled": { + "name": "enabled", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "responsibility_triggers_owner_idx": { + "name": "responsibility_triggers_owner_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "responsibility_triggers_responsibility_idx": { + "name": "responsibility_triggers_responsibility_idx", + "columns": [ + { + "expression": "responsibility_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "responsibility_triggers_kind_idx": { + "name": "responsibility_triggers_kind_idx", + "columns": [ + { + "expression": "kind", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "responsibility_triggers_owner_user_id_users_id_fk": { + "name": "responsibility_triggers_owner_user_id_users_id_fk", + "tableFrom": "responsibility_triggers", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "responsibility_triggers_responsibility_id_responsibilities_id_fk": { + "name": "responsibility_triggers_responsibility_id_responsibilities_id_fk", + "tableFrom": "responsibility_triggers", + "tableTo": "responsibilities", + "columnsFrom": [ + "responsibility_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "responsibility_triggers_credential_id_credentials_id_fk": { + "name": "responsibility_triggers_credential_id_credentials_id_fk", + "tableFrom": "responsibility_triggers", + "tableTo": "credentials", + "columnsFrom": [ + "credential_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "no action", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.approval_preferences": { + "name": "approval_preferences", + "schema": "", + "columns": { + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "enabled": { + "name": "enabled", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": false + }, + "auto_review": { + "name": "auto_review", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": false + }, + "host_commands": { + "name": "host_commands", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'ask'" + } + }, + "indexes": {}, + "foreignKeys": { + "approval_preferences_owner_user_id_users_id_fk": { + "name": "approval_preferences_owner_user_id_users_id_fk", + "tableFrom": "approval_preferences", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "approval_preferences_host_commands_check": { + "name": "approval_preferences_host_commands_check", + "value": "\"approval_preferences\".\"host_commands\" IN ('ask', 'allow', 'never')" + } + }, + "isRLSEnabled": false + }, + "public.approval_requests": { + "name": "approval_requests", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "run_id": { + "name": "run_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "tool_call_id": { + "name": "tool_call_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "action_digest": { + "name": "action_digest", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "action": { + "name": "action", + "type": "jsonb", + "primaryKey": false, + "notNull": true + }, + "status": { + "name": "status", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'pending'" + }, + "decision": { + "name": "decision", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "result": { + "name": "result", + "type": "jsonb", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "decided_at": { + "name": "decided_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "consumed_at": { + "name": "consumed_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "completed_at": { + "name": "completed_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + } + }, + "indexes": { + "approval_requests_action_idx": { + "name": "approval_requests_action_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "run_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "tool_call_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "concurrently": false, + "method": "btree", + "with": {} + }, + "approval_requests_inbox_idx": { + "name": "approval_requests_inbox_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "status", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "approval_requests_owner_user_id_users_id_fk": { + "name": "approval_requests_owner_user_id_users_id_fk", + "tableFrom": "approval_requests", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "approval_status_check": { + "name": "approval_status_check", + "value": "\"approval_requests\".\"status\" IN ('pending', 'approved', 'denied', 'consumed', 'completed')" + }, + "approval_decision_check": { + "name": "approval_decision_check", + "value": "\"approval_requests\".\"decision\" IN ('allow_once', 'allow_always', 'deny', 'handled')" + } + }, + "isRLSEnabled": false + }, + "public.approval_rules": { + "name": "approval_rules", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "bot_id": { + "name": "bot_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "tool_ref": { + "name": "tool_ref", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "effect": { + "name": "effect", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "scope": { + "name": "scope", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "behaviour": { + "name": "behaviour", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'allow'" + }, + "revoked_at": { + "name": "revoked_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "approval_rules_owner_idx": { + "name": "approval_rules_owner_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "approval_rules_owner_user_id_users_id_fk": { + "name": "approval_rules_owner_user_id_users_id_fk", + "tableFrom": "approval_rules", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "approval_rules_behaviour_check": { + "name": "approval_rules_behaviour_check", + "value": "\"approval_rules\".\"behaviour\" IN ('allow', 'pre_approved', 'ask', 'hand_off')" + } + }, + "isRLSEnabled": false + }, + "public.approval_team_rules": { + "name": "approval_team_rules", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "bot_id": { + "name": "bot_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "tool_ref": { + "name": "tool_ref", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "effect": { + "name": "effect", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "scope": { + "name": "scope", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "behaviour": { + "name": "behaviour", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "created_by": { + "name": "created_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "revoked_at": { + "name": "revoked_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "approval_team_rules_created_by_users_id_fk": { + "name": "approval_team_rules_created_by_users_id_fk", + "tableFrom": "approval_team_rules", + "tableTo": "users", + "columnsFrom": [ + "created_by" + ], + "columnsTo": [ + "id" + ], + "onDelete": "set null", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "approval_team_rules_behaviour_check": { + "name": "approval_team_rules_behaviour_check", + "value": "\"approval_team_rules\".\"behaviour\" IN ('allow', 'pre_approved', 'ask', 'hand_off')" + } + }, + "isRLSEnabled": false + }, + "public.approval_team_settings": { + "name": "approval_team_settings", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "enforce_auto_review": { + "name": "enforce_auto_review", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": false + }, + "custom_rules_enabled": { + "name": "custom_rules_enabled", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": true + }, + "host_commands_cap": { + "name": "host_commands_cap", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'allow'" + }, + "updated_by": { + "name": "updated_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "approval_team_settings_updated_by_users_id_fk": { + "name": "approval_team_settings_updated_by_users_id_fk", + "tableFrom": "approval_team_settings", + "tableTo": "users", + "columnsFrom": [ + "updated_by" + ], + "columnsTo": [ + "id" + ], + "onDelete": "set null", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "approval_team_settings_host_commands_cap_check": { + "name": "approval_team_settings_host_commands_cap_check", + "value": "\"approval_team_settings\".\"host_commands_cap\" IN ('ask', 'allow', 'never')" + } + }, + "isRLSEnabled": false + }, + "public.memory_sources": { + "name": "memory_sources", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "tool_ref": { + "name": "tool_ref", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "title": { + "name": "title", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "args": { + "name": "args", + "type": "jsonb", + "primaryKey": false, + "notNull": true, + "default": "'{}'::jsonb" + }, + "enabled": { + "name": "enabled", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": true + }, + "sync_status": { + "name": "sync_status", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'idle'" + }, + "sync_error": { + "name": "sync_error", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "last_sync_at": { + "name": "last_sync_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "next_sync_at": { + "name": "next_sync_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "memory_sources_owner_idx": { + "name": "memory_sources_owner_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "memory_sources_due_idx": { + "name": "memory_sources_due_idx", + "columns": [ + { + "expression": "enabled", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "next_sync_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "memory_sources_owner_user_id_users_id_fk": { + "name": "memory_sources_owner_user_id_users_id_fk", + "tableFrom": "memory_sources", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "memory_sources_agent_id_agents_id_fk": { + "name": "memory_sources_agent_id_agents_id_fk", + "tableFrom": "memory_sources", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.personal_memories": { + "name": "personal_memories", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "source_id": { + "name": "source_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "external_id": { + "name": "external_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "import_digest": { + "name": "import_digest", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "content": { + "name": "content", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "provenance": { + "name": "provenance", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "enabled": { + "name": "enabled", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": true + }, + "review_state": { + "name": "review_state", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'unreviewed'" + }, + "deleted_at": { + "name": "deleted_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "formed_by": { + "name": "formed_by", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'person'" + }, + "formed_by_agent_id": { + "name": "formed_by_agent_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "source_app": { + "name": "source_app", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "source_ref": { + "name": "source_ref", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "source_link": { + "name": "source_link", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "observed_at": { + "name": "observed_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "intelligence_memory_id": { + "name": "intelligence_memory_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "intelligence_digest": { + "name": "intelligence_digest", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "personal_memories_owner_idx": { + "name": "personal_memories_owner_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "enabled", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "personal_memories_intelligence_idx": { + "name": "personal_memories_intelligence_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "intelligence_memory_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "personal_memories_formed_idx": { + "name": "personal_memories_formed_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "formed_by_agent_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "personal_memories_import_idx": { + "name": "personal_memories_import_idx", + "columns": [ + { + "expression": "source_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "external_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "concurrently": false, + "method": "btree", + "with": {} + }, + "personal_memories_formed_digest_idx": { + "name": "personal_memories_formed_digest_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "import_digest", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "where": "\"personal_memories\".\"formed_by\" = 'bot'", + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "personal_memories_owner_user_id_users_id_fk": { + "name": "personal_memories_owner_user_id_users_id_fk", + "tableFrom": "personal_memories", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "personal_memories_source_id_memory_sources_id_fk": { + "name": "personal_memories_source_id_memory_sources_id_fk", + "tableFrom": "personal_memories", + "tableTo": "memory_sources", + "columnsFrom": [ + "source_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "personal_memories_formed_by_agent_id_agents_id_fk": { + "name": "personal_memories_formed_by_agent_id_agents_id_fk", + "tableFrom": "personal_memories", + "tableTo": "agents", + "columnsFrom": [ + "formed_by_agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.default_opt_outs": { + "name": "default_opt_outs", + "schema": "", + "columns": { + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "feature": { + "name": "feature", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "scope": { + "name": "scope", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "''" + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "default_opt_outs_owner_user_id_users_id_fk": { + "name": "default_opt_outs_owner_user_id_users_id_fk", + "tableFrom": "default_opt_outs", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "default_opt_outs_agent_id_agents_id_fk": { + "name": "default_opt_outs_agent_id_agents_id_fk", + "tableFrom": "default_opt_outs", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "default_opt_outs_owner_user_id_agent_id_feature_scope_pk": { + "name": "default_opt_outs_owner_user_id_agent_id_feature_scope_pk", + "columns": [ + "owner_user_id", + "agent_id", + "feature", + "scope" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "default_opt_outs_feature_check": { + "name": "default_opt_outs_feature_check", + "value": "\"default_opt_outs\".\"feature\" IN ('memory_source', 'proactive_research')" + } + }, + "isRLSEnabled": false + }, + "public.proactive_settings": { + "name": "proactive_settings", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "channel_id": { + "name": "channel_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "thread_id": { + "name": "thread_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "focus": { + "name": "focus", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "''" + }, + "enabled": { + "name": "enabled", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": true + }, + "interval_minutes": { + "name": "interval_minutes", + "type": "integer", + "primaryKey": false, + "notNull": true, + "default": 240 + }, + "next_run_at": { + "name": "next_run_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "last_run_at": { + "name": "last_run_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "last_status": { + "name": "last_status", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'idle'" + }, + "last_error": { + "name": "last_error", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "proactive_settings_owner_agent_idx": { + "name": "proactive_settings_owner_agent_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "agent_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "concurrently": false, + "method": "btree", + "with": {} + }, + "proactive_settings_due_idx": { + "name": "proactive_settings_due_idx", + "columns": [ + { + "expression": "enabled", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "next_run_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "proactive_settings_owner_user_id_users_id_fk": { + "name": "proactive_settings_owner_user_id_users_id_fk", + "tableFrom": "proactive_settings", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "proactive_settings_agent_id_agents_id_fk": { + "name": "proactive_settings_agent_id_agents_id_fk", + "tableFrom": "proactive_settings", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "proactive_settings_interval_check": { + "name": "proactive_settings_interval_check", + "value": "\"proactive_settings\".\"interval_minutes\" >= 60 AND \"proactive_settings\".\"interval_minutes\" <= 1440" + }, + "proactive_settings_status_check": { + "name": "proactive_settings_status_check", + "value": "\"proactive_settings\".\"last_status\" IN ('idle', 'running', 'succeeded', 'error')" + } + }, + "isRLSEnabled": false + }, + "public.proactive_suggestions": { + "name": "proactive_suggestions", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "setting_id": { + "name": "setting_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "run_id": { + "name": "run_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "title": { + "name": "title", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "detail": { + "name": "detail", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "source_app": { + "name": "source_app", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "source_ref": { + "name": "source_ref", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "source_link": { + "name": "source_link", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "status": { + "name": "status", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'open'" + }, + "delivered_at": { + "name": "delivered_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "resolved_at": { + "name": "resolved_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "proactive_suggestions_owner_idx": { + "name": "proactive_suggestions_owner_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "status", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "created_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "proactive_suggestions_run_idx": { + "name": "proactive_suggestions_run_idx", + "columns": [ + { + "expression": "run_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "proactive_suggestions_owner_user_id_users_id_fk": { + "name": "proactive_suggestions_owner_user_id_users_id_fk", + "tableFrom": "proactive_suggestions", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "proactive_suggestions_agent_id_agents_id_fk": { + "name": "proactive_suggestions_agent_id_agents_id_fk", + "tableFrom": "proactive_suggestions", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "proactive_suggestions_setting_id_proactive_settings_id_fk": { + "name": "proactive_suggestions_setting_id_proactive_settings_id_fk", + "tableFrom": "proactive_suggestions", + "tableTo": "proactive_settings", + "columnsFrom": [ + "setting_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "proactive_suggestions_status_check": { + "name": "proactive_suggestions_status_check", + "value": "\"proactive_suggestions\".\"status\" IN ('open', 'dismissed', 'started')" + } + }, + "isRLSEnabled": false + }, + "public.demonstrations": { + "name": "demonstrations", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "bot_id": { + "name": "bot_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "title": { + "name": "title", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "status": { + "name": "status", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'recording'" + }, + "actions": { + "name": "actions", + "type": "jsonb", + "primaryKey": false, + "notNull": true, + "default": "'[]'::jsonb" + }, + "draft": { + "name": "draft", + "type": "jsonb", + "primaryKey": false, + "notNull": false + }, + "skill_slug": { + "name": "skill_slug", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "finished_at": { + "name": "finished_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + } + }, + "indexes": { + "demonstrations_owner_idx": { + "name": "demonstrations_owner_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "created_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "demonstrations_active_bot_idx": { + "name": "demonstrations_active_bot_idx", + "columns": [ + { + "expression": "bot_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "where": "\"demonstrations\".\"status\" = 'recording'", + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "demonstrations_owner_user_id_users_id_fk": { + "name": "demonstrations_owner_user_id_users_id_fk", + "tableFrom": "demonstrations", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "demonstrations_bot_id_agents_id_fk": { + "name": "demonstrations_bot_id_agents_id_fk", + "tableFrom": "demonstrations", + "tableTo": "agents", + "columnsFrom": [ + "bot_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.delivery_bindings": { + "name": "delivery_bindings", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "channel_id": { + "name": "channel_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "thread_id": { + "name": "thread_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "transport": { + "name": "transport", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "identity": { + "name": "identity", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "realm": { + "name": "realm", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "address": { + "name": "address", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "mention_id": { + "name": "mention_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "enabled": { + "name": "enabled", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": true + }, + "opted_out_at": { + "name": "opted_out_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "delivery_binding_identity_idx": { + "name": "delivery_binding_identity_idx", + "columns": [ + { + "expression": "transport", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "realm", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "identity", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "concurrently": false, + "method": "btree", + "with": {} + }, + "delivery_bindings_owner_idx": { + "name": "delivery_bindings_owner_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "delivery_bindings_owner_user_id_users_id_fk": { + "name": "delivery_bindings_owner_user_id_users_id_fk", + "tableFrom": "delivery_bindings", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "delivery_bindings_channel_id_channels_id_fk": { + "name": "delivery_bindings_channel_id_channels_id_fk", + "tableFrom": "delivery_bindings", + "tableTo": "channels", + "columnsFrom": [ + "channel_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "delivery_bindings_agent_id_agents_id_fk": { + "name": "delivery_bindings_agent_id_agents_id_fk", + "tableFrom": "delivery_bindings", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.delivery_challenges": { + "name": "delivery_challenges", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "channel_id": { + "name": "channel_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "thread_id": { + "name": "thread_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "transport": { + "name": "transport", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "address": { + "name": "address", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "expires_at": { + "name": "expires_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + }, + "consumed_at": { + "name": "consumed_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "delivery_challenges_owner_user_id_users_id_fk": { + "name": "delivery_challenges_owner_user_id_users_id_fk", + "tableFrom": "delivery_challenges", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "delivery_challenges_channel_id_channels_id_fk": { + "name": "delivery_challenges_channel_id_channels_id_fk", + "tableFrom": "delivery_challenges", + "tableTo": "channels", + "columnsFrom": [ + "channel_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "delivery_challenges_agent_id_agents_id_fk": { + "name": "delivery_challenges_agent_id_agents_id_fk", + "tableFrom": "delivery_challenges", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.delivery_inbox": { + "name": "delivery_inbox", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "channel_id": { + "name": "channel_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "thread_id": { + "name": "thread_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "binding_id": { + "name": "binding_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "source": { + "name": "source", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "realm": { + "name": "realm", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "external_id": { + "name": "external_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "text": { + "name": "text", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "state": { + "name": "state", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'queued'" + }, + "error": { + "name": "error", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "delivery_inbox_dedupe_idx": { + "name": "delivery_inbox_dedupe_idx", + "columns": [ + { + "expression": "source", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "realm", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "external_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "concurrently": false, + "method": "btree", + "with": {} + }, + "delivery_inbox_owner_idx": { + "name": "delivery_inbox_owner_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "created_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "delivery_inbox_owner_user_id_users_id_fk": { + "name": "delivery_inbox_owner_user_id_users_id_fk", + "tableFrom": "delivery_inbox", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "delivery_inbox_channel_id_channels_id_fk": { + "name": "delivery_inbox_channel_id_channels_id_fk", + "tableFrom": "delivery_inbox", + "tableTo": "channels", + "columnsFrom": [ + "channel_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "delivery_inbox_agent_id_agents_id_fk": { + "name": "delivery_inbox_agent_id_agents_id_fk", + "tableFrom": "delivery_inbox", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.delivery_outbox": { + "name": "delivery_outbox", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "channel_id": { + "name": "channel_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "thread_id": { + "name": "thread_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "dedupe_key": { + "name": "dedupe_key", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "binding_id": { + "name": "binding_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "device_id": { + "name": "device_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "transport": { + "name": "transport", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "text": { + "name": "text", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "kind": { + "name": "kind", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "request_id": { + "name": "request_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "state": { + "name": "state", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'queued'" + }, + "provider_id": { + "name": "provider_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "error": { + "name": "error", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "delivery_outbox_owner_idx": { + "name": "delivery_outbox_owner_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "created_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "delivery_outbox_provider_idx": { + "name": "delivery_outbox_provider_idx", + "columns": [ + { + "expression": "transport", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "provider_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "delivery_outbox_owner_user_id_users_id_fk": { + "name": "delivery_outbox_owner_user_id_users_id_fk", + "tableFrom": "delivery_outbox", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "delivery_outbox_channel_id_channels_id_fk": { + "name": "delivery_outbox_channel_id_channels_id_fk", + "tableFrom": "delivery_outbox", + "tableTo": "channels", + "columnsFrom": [ + "channel_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "delivery_outbox_agent_id_agents_id_fk": { + "name": "delivery_outbox_agent_id_agents_id_fk", + "tableFrom": "delivery_outbox", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": { + "delivery_outbox_dedupe_key_unique": { + "name": "delivery_outbox_dedupe_key_unique", + "nullsNotDistinct": false, + "columns": [ + "dedupe_key" + ] + } + }, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.push_devices": { + "name": "push_devices", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "token": { + "name": "token", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "project_id": { + "name": "project_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "platform": { + "name": "platform", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "enabled": { + "name": "enabled", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "push_devices_owner_idx": { + "name": "push_devices_owner_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "push_devices_owner_user_id_users_id_fk": { + "name": "push_devices_owner_user_id_users_id_fk", + "tableFrom": "push_devices", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": { + "push_devices_token_unique": { + "name": "push_devices_token_unique", + "nullsNotDistinct": false, + "columns": [ + "token" + ] + } + }, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.group_bot_threads": { + "name": "group_bot_threads", + "schema": "", + "columns": { + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "channel_id": { + "name": "channel_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "thread_id": { + "name": "thread_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "group_bot_threads_thread_idx": { + "name": "group_bot_threads_thread_idx", + "columns": [ + { + "expression": "thread_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "group_bot_threads_owner_user_id_users_id_fk": { + "name": "group_bot_threads_owner_user_id_users_id_fk", + "tableFrom": "group_bot_threads", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "group_bot_threads_channel_id_channels_id_fk": { + "name": "group_bot_threads_channel_id_channels_id_fk", + "tableFrom": "group_bot_threads", + "tableTo": "channels", + "columnsFrom": [ + "channel_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "group_bot_threads_owner_user_id_channel_id_agent_id_pk": { + "name": "group_bot_threads_owner_user_id_channel_id_agent_id_pk", + "columns": [ + "owner_user_id", + "channel_id", + "agent_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.group_messages": { + "name": "group_messages", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "channel_id": { + "name": "channel_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "thread_id": { + "name": "thread_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "text": { + "name": "text", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "status": { + "name": "status", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'completed'" + }, + "details": { + "name": "details", + "type": "jsonb", + "primaryKey": false, + "notNull": true, + "default": "'{}'::jsonb" + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "group_messages_channel_idx": { + "name": "group_messages_channel_idx", + "columns": [ + { + "expression": "channel_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "created_at", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "group_messages_channel_id_channels_id_fk": { + "name": "group_messages_channel_id_channels_id_fk", + "tableFrom": "group_messages", + "tableTo": "channels", + "columnsFrom": [ + "channel_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "group_messages_owner_user_id_users_id_fk": { + "name": "group_messages_owner_user_id_users_id_fk", + "tableFrom": "group_messages", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "group_messages_status_check": { + "name": "group_messages_status_check", + "value": "\"group_messages\".\"status\" IN ('queued', 'running', 'waiting', 'completed', 'failed')" + } + }, + "isRLSEnabled": false + }, + "public.action_records": { + "name": "action_records", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "uuid", + "primaryKey": true, + "notNull": true, + "default": "gen_random_uuid()" + }, + "surface": { + "name": "surface", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "bot_id": { + "name": "bot_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "actor_user_id": { + "name": "actor_user_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "tool_name": { + "name": "tool_name", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "command": { + "name": "command", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "outcome": { + "name": "outcome", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "action_records_created_idx": { + "name": "action_records_created_idx", + "columns": [ + { + "expression": "created_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "action_records_bot_idx": { + "name": "action_records_bot_idx", + "columns": [ + { + "expression": "bot_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "created_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "action_records_surface_check": { + "name": "action_records_surface_check", + "value": "\"action_records\".\"surface\" IN ('cloud', 'local')" + } + }, + "isRLSEnabled": false + }, + "public.capability_settings": { + "name": "capability_settings", + "schema": "", + "columns": { + "scope_kind": { + "name": "scope_kind", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "scope_id": { + "name": "scope_id", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "''" + }, + "capability": { + "name": "capability", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "allowed": { + "name": "allowed", + "type": "boolean", + "primaryKey": false, + "notNull": true + }, + "updated_by": { + "name": "updated_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": {}, + "compositePrimaryKeys": { + "capability_settings_scope_kind_scope_id_capability_pk": { + "name": "capability_settings_scope_kind_scope_id_capability_pk", + "columns": [ + "scope_kind", + "scope_id", + "capability" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "capability_settings_scope_kind_check": { + "name": "capability_settings_scope_kind_check", + "value": "\"capability_settings\".\"scope_kind\" IN ('organization', 'role', 'group')" + } + }, + "isRLSEnabled": false + }, + "public.enterprise_settings": { + "name": "enterprise_settings", + "schema": "", + "columns": { + "key": { + "name": "key", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "value": { + "name": "value", + "type": "jsonb", + "primaryKey": false, + "notNull": true + }, + "updated_by": { + "name": "updated_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.model_usage": { + "name": "model_usage", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "uuid", + "primaryKey": true, + "notNull": true, + "default": "gen_random_uuid()" + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "thread_id": { + "name": "thread_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "run_id": { + "name": "run_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "model": { + "name": "model", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "source": { + "name": "source", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "allowed": { + "name": "allowed", + "type": "boolean", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "model_usage_created_idx": { + "name": "model_usage_created_idx", + "columns": [ + { + "expression": "created_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "model_usage_model_idx": { + "name": "model_usage_model_idx", + "columns": [ + { + "expression": "model", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "created_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "model_usage_source_check": { + "name": "model_usage_source_check", + "value": "\"model_usage\".\"source\" IN ('configured', 'observed', 'unknown')" + } + }, + "isRLSEnabled": false + }, + "public.network_policies": { + "name": "network_policies", + "schema": "", + "columns": { + "scope_kind": { + "name": "scope_kind", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "scope_id": { + "name": "scope_id", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "''" + }, + "mode": { + "name": "mode", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "rules": { + "name": "rules", + "type": "jsonb", + "primaryKey": false, + "notNull": true, + "default": "'{\"entries\":[]}'::jsonb" + }, + "locked": { + "name": "locked", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": false + }, + "updated_by": { + "name": "updated_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": {}, + "compositePrimaryKeys": { + "network_policies_scope_kind_scope_id_pk": { + "name": "network_policies_scope_kind_scope_id_pk", + "columns": [ + "scope_kind", + "scope_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "network_policies_scope_kind_check": { + "name": "network_policies_scope_kind_check", + "value": "\"network_policies\".\"scope_kind\" IN ('organization', 'group')" + }, + "network_policies_mode_check": { + "name": "network_policies_mode_check", + "value": "\"network_policies\".\"mode\" IN ('allow_all', 'defaults_plus_allowlist', 'allowlist_only')" + } + }, + "isRLSEnabled": false + }, + "public.scim_connection_bindings": { + "name": "scim_connection_bindings", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "connection_id": { + "name": "connection_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "connection_key": { + "name": "connection_key", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "provisioning_domain_id": { + "name": "provisioning_domain_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + }, + "decommissioned_at": { + "name": "decommissioned_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "decommission_status": { + "name": "decommission_status", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'active'" + }, + "decommission_cursor_user_id": { + "name": "decommission_cursor_user_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "decommission_reconciled_user_count": { + "name": "decommission_reconciled_user_count", + "type": "integer", + "primaryKey": false, + "notNull": true, + "default": 0 + }, + "decommission_batch_count": { + "name": "decommission_batch_count", + "type": "integer", + "primaryKey": false, + "notNull": true, + "default": 0 + }, + "decommission_revision": { + "name": "decommission_revision", + "type": "integer", + "primaryKey": false, + "notNull": true, + "default": 0 + }, + "decommission_completed_at": { + "name": "decommission_completed_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "decommission_lease_id": { + "name": "decommission_lease_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "decommission_lease_expires_at": { + "name": "decommission_lease_expires_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + } + }, + "indexes": { + "scim_connection_bindings_connection_idx": { + "name": "scim_connection_bindings_connection_idx", + "columns": [ + { + "expression": "connection_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": { + "scim_connection_bindings_connection_key_unique": { + "name": "scim_connection_bindings_connection_key_unique", + "nullsNotDistinct": false, + "columns": [ + "connection_key" + ] + } + }, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.scim_group_members": { + "name": "scim_group_members", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "connection_id": { + "name": "connection_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "group_id": { + "name": "group_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "scim_user_id": { + "name": "scim_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "membership_key": { + "name": "membership_key", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + } + }, + "indexes": { + "scim_group_members_connection_idx": { + "name": "scim_group_members_connection_idx", + "columns": [ + { + "expression": "connection_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "scim_group_members_group_idx": { + "name": "scim_group_members_group_idx", + "columns": [ + { + "expression": "group_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "scim_group_members_scim_user_idx": { + "name": "scim_group_members_scim_user_idx", + "columns": [ + { + "expression": "scim_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "scim_group_members_group_id_scim_groups_id_fk": { + "name": "scim_group_members_group_id_scim_groups_id_fk", + "tableFrom": "scim_group_members", + "tableTo": "scim_groups", + "columnsFrom": [ + "group_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "scim_group_members_scim_user_id_scim_users_id_fk": { + "name": "scim_group_members_scim_user_id_scim_users_id_fk", + "tableFrom": "scim_group_members", + "tableTo": "scim_users", + "columnsFrom": [ + "scim_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": { + "scim_group_members_membership_key_unique": { + "name": "scim_group_members_membership_key_unique", + "nullsNotDistinct": false, + "columns": [ + "membership_key" + ] + } + }, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.scim_groups": { + "name": "scim_groups", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "connection_id": { + "name": "connection_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "provisioning_domain_id": { + "name": "provisioning_domain_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "revision": { + "name": "revision", + "type": "integer", + "primaryKey": false, + "notNull": true, + "default": 0 + }, + "display_name": { + "name": "display_name", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "display_name_key": { + "name": "display_name_key", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "external_id": { + "name": "external_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "external_id_key": { + "name": "external_id_key", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "order_key": { + "name": "order_key", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + } + }, + "indexes": { + "scim_groups_connection_idx": { + "name": "scim_groups_connection_idx", + "columns": [ + { + "expression": "connection_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "scim_groups_domain_idx": { + "name": "scim_groups_domain_idx", + "columns": [ + { + "expression": "provisioning_domain_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": { + "scim_groups_display_name_key_unique": { + "name": "scim_groups_display_name_key_unique", + "nullsNotDistinct": false, + "columns": [ + "display_name_key" + ] + }, + "scim_groups_external_id_key_unique": { + "name": "scim_groups_external_id_key_unique", + "nullsNotDistinct": false, + "columns": [ + "external_id_key" + ] + }, + "scim_groups_order_key_unique": { + "name": "scim_groups_order_key_unique", + "nullsNotDistinct": false, + "columns": [ + "order_key" + ] + } + }, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.scim_identity_tombstones": { + "name": "scim_identity_tombstones", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "connection_id": { + "name": "connection_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "provisioning_domain_id": { + "name": "provisioning_domain_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "external_id": { + "name": "external_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "external_id_key": { + "name": "external_id_key", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "profile": { + "name": "profile", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "deleted_at": { + "name": "deleted_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + } + }, + "indexes": { + "scim_identity_tombstones_connection_idx": { + "name": "scim_identity_tombstones_connection_idx", + "columns": [ + { + "expression": "connection_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "scim_identity_tombstones_domain_idx": { + "name": "scim_identity_tombstones_domain_idx", + "columns": [ + { + "expression": "provisioning_domain_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "scim_identity_tombstones_user_idx": { + "name": "scim_identity_tombstones_user_idx", + "columns": [ + { + "expression": "user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "scim_identity_tombstones_user_id_users_id_fk": { + "name": "scim_identity_tombstones_user_id_users_id_fk", + "tableFrom": "scim_identity_tombstones", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": { + "scim_identity_tombstones_external_id_key_unique": { + "name": "scim_identity_tombstones_external_id_key_unique", + "nullsNotDistinct": false, + "columns": [ + "external_id_key" + ] + } + }, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.scim_projection_grants": { + "name": "scim_projection_grants", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "connection_id": { + "name": "connection_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "provisioning_domain_id": { + "name": "provisioning_domain_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "scim_user_id": { + "name": "scim_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "source_kind": { + "name": "source_kind", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "source_id": { + "name": "source_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "source_value": { + "name": "source_value", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "role": { + "name": "role", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "grant_key": { + "name": "grant_key", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + } + }, + "indexes": { + "scim_projection_grants_connection_idx": { + "name": "scim_projection_grants_connection_idx", + "columns": [ + { + "expression": "connection_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "scim_projection_grants_domain_idx": { + "name": "scim_projection_grants_domain_idx", + "columns": [ + { + "expression": "provisioning_domain_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "scim_projection_grants_scim_user_idx": { + "name": "scim_projection_grants_scim_user_idx", + "columns": [ + { + "expression": "scim_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "scim_projection_grants_user_idx": { + "name": "scim_projection_grants_user_idx", + "columns": [ + { + "expression": "user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "scim_projection_grants_scim_user_id_scim_users_id_fk": { + "name": "scim_projection_grants_scim_user_id_scim_users_id_fk", + "tableFrom": "scim_projection_grants", + "tableTo": "scim_users", + "columnsFrom": [ + "scim_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "scim_projection_grants_user_id_users_id_fk": { + "name": "scim_projection_grants_user_id_users_id_fk", + "tableFrom": "scim_projection_grants", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": { + "scim_projection_grants_grant_key_unique": { + "name": "scim_projection_grants_grant_key_unique", + "nullsNotDistinct": false, + "columns": [ + "grant_key" + ] + } + }, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.scim_subjects": { + "name": "scim_subjects", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "profile_source_id": { + "name": "profile_source_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "revision": { + "name": "revision", + "type": "integer", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + } + }, + "indexes": { + "scim_subjects_profile_source_idx": { + "name": "scim_subjects_profile_source_idx", + "columns": [ + { + "expression": "profile_source_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "scim_subjects_user_id_users_id_fk": { + "name": "scim_subjects_user_id_users_id_fk", + "tableFrom": "scim_subjects", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": { + "scim_subjects_user_id_unique": { + "name": "scim_subjects_user_id_unique", + "nullsNotDistinct": false, + "columns": [ + "user_id" + ] + } + }, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.scim_users": { + "name": "scim_users", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "connection_id": { + "name": "connection_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "provisioning_domain_id": { + "name": "provisioning_domain_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "connection_user_key": { + "name": "connection_user_key", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "user_name": { + "name": "user_name", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "user_name_key": { + "name": "user_name_key", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "primary_email": { + "name": "primary_email", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "work_email_value_index": { + "name": "work_email_value_index", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "email_value_index": { + "name": "email_value_index", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "display_name": { + "name": "display_name", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "formatted_name": { + "name": "formatted_name", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "given_name": { + "name": "given_name", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "family_name": { + "name": "family_name", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "serialized_emails": { + "name": "serialized_emails", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "serialized_attributes": { + "name": "serialized_attributes", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "external_id": { + "name": "external_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "external_id_key": { + "name": "external_id_key", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "active": { + "name": "active", + "type": "boolean", + "primaryKey": false, + "notNull": true + }, + "order_key": { + "name": "order_key", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + } + }, + "indexes": { + "scim_users_connection_idx": { + "name": "scim_users_connection_idx", + "columns": [ + { + "expression": "connection_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "scim_users_domain_idx": { + "name": "scim_users_domain_idx", + "columns": [ + { + "expression": "provisioning_domain_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "scim_users_user_idx": { + "name": "scim_users_user_idx", + "columns": [ + { + "expression": "user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "scim_users_user_id_users_id_fk": { + "name": "scim_users_user_id_users_id_fk", + "tableFrom": "scim_users", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": { + "scim_users_connection_user_key_unique": { + "name": "scim_users_connection_user_key_unique", + "nullsNotDistinct": false, + "columns": [ + "connection_user_key" + ] + }, + "scim_users_user_name_key_unique": { + "name": "scim_users_user_name_key_unique", + "nullsNotDistinct": false, + "columns": [ + "user_name_key" + ] + }, + "scim_users_external_id_key_unique": { + "name": "scim_users_external_id_key_unique", + "nullsNotDistinct": false, + "columns": [ + "external_id_key" + ] + }, + "scim_users_order_key_unique": { + "name": "scim_users_order_key_unique", + "nullsNotDistinct": false, + "columns": [ + "order_key" + ] + } + }, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.bot_lifecycle": { + "name": "bot_lifecycle", + "schema": "", + "columns": { + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "paused_at": { + "name": "paused_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "notify": { + "name": "notify", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'all'" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "bot_lifecycle_owner_user_id_users_id_fk": { + "name": "bot_lifecycle_owner_user_id_users_id_fk", + "tableFrom": "bot_lifecycle", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "bot_lifecycle_agent_id_agents_id_fk": { + "name": "bot_lifecycle_agent_id_agents_id_fk", + "tableFrom": "bot_lifecycle", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "bot_lifecycle_owner_user_id_agent_id_pk": { + "name": "bot_lifecycle_owner_user_id_agent_id_pk", + "columns": [ + "owner_user_id", + "agent_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.update_routing_preferences": { + "name": "update_routing_preferences", + "schema": "", + "columns": { + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "kind": { + "name": "kind", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "transports": { + "name": "transports", + "type": "text[]", + "primaryKey": false, + "notNull": true, + "default": "'{}'" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "update_routing_preferences_owner_user_id_users_id_fk": { + "name": "update_routing_preferences_owner_user_id_users_id_fk", + "tableFrom": "update_routing_preferences", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "update_routing_preferences_owner_user_id_kind_pk": { + "name": "update_routing_preferences_owner_user_id_kind_pk", + "columns": [ + "owner_user_id", + "kind" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.saved_logins": { + "name": "saved_logins", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "origin": { + "name": "origin", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "username": { + "name": "username", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "encrypted_password": { + "name": "encrypted_password", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "last_used_at": { + "name": "last_used_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + } + }, + "indexes": { + "saved_logins_owner_origin_username_idx": { + "name": "saved_logins_owner_origin_username_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "origin", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "username", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "concurrently": false, + "method": "btree", + "with": {} + }, + "saved_logins_owner_idx": { + "name": "saved_logins_owner_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "saved_logins_owner_user_id_users_id_fk": { + "name": "saved_logins_owner_user_id_users_id_fk", + "tableFrom": "saved_logins", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.sign_in_requests": { + "name": "sign_in_requests", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "bot_id": { + "name": "bot_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "origin": { + "name": "origin", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "reason": { + "name": "reason", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "status": { + "name": "status", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'pending'" + }, + "method": { + "name": "method", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "outcome": { + "name": "outcome", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "thread_id": { + "name": "thread_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "tool_call_id": { + "name": "tool_call_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "control_request_id": { + "name": "control_request_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "continuation": { + "name": "continuation", + "type": "jsonb", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "expires_at": { + "name": "expires_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + }, + "resolved_at": { + "name": "resolved_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "filling_until": { + "name": "filling_until", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + } + }, + "indexes": { + "sign_in_requests_owner_idx": { + "name": "sign_in_requests_owner_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "status", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "sign_in_requests_owner_user_id_users_id_fk": { + "name": "sign_in_requests_owner_user_id_users_id_fk", + "tableFrom": "sign_in_requests", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "sign_in_requests_status_check": { + "name": "sign_in_requests_status_check", + "value": "\"sign_in_requests\".\"status\" IN ('pending', 'filling', 'code_required', 'taken_over', 'signed_in', 'failed', 'cancelled', 'expired')" + }, + "sign_in_requests_method_check": { + "name": "sign_in_requests_method_check", + "value": "\"sign_in_requests\".\"method\" IS NULL OR \"sign_in_requests\".\"method\" IN ('typed', 'saved', 'takeover')" + } + }, + "isRLSEnabled": false + }, + "public.team_bot_assignments": { + "name": "team_bot_assignments", + "schema": "", + "columns": { + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "group_name": { + "name": "group_name", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "assigned_by": { + "name": "assigned_by", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "assigned_at": { + "name": "assigned_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "team_bot_assignments_agent_id_agents_id_fk": { + "name": "team_bot_assignments_agent_id_agents_id_fk", + "tableFrom": "team_bot_assignments", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "team_bot_assignments_assigned_by_users_id_fk": { + "name": "team_bot_assignments_assigned_by_users_id_fk", + "tableFrom": "team_bot_assignments", + "tableTo": "users", + "columnsFrom": [ + "assigned_by" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "team_bot_assignments_agent_id_group_name_pk": { + "name": "team_bot_assignments_agent_id_group_name_pk", + "columns": [ + "agent_id", + "group_name" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.team_bot_audience": { + "name": "team_bot_audience", + "schema": "", + "columns": { + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "kind": { + "name": "kind", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "value": { + "name": "value", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "team_bot_audience_agent_id_agents_id_fk": { + "name": "team_bot_audience_agent_id_agents_id_fk", + "tableFrom": "team_bot_audience", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "team_bot_audience_agent_id_kind_value_pk": { + "name": "team_bot_audience_agent_id_kind_value_pk", + "columns": [ + "agent_id", + "kind", + "value" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "team_bot_audience_kind_check": { + "name": "team_bot_audience_kind_check", + "value": "\"team_bot_audience\".\"kind\" IN ('user', 'group')" + } + }, + "isRLSEnabled": false + }, + "public.team_bot_consent_defaults": { + "name": "team_bot_consent_defaults", + "schema": "", + "columns": { + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "server_id": { + "name": "server_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "team_bot_consent_defaults_user_id_users_id_fk": { + "name": "team_bot_consent_defaults_user_id_users_id_fk", + "tableFrom": "team_bot_consent_defaults", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "team_bot_consent_defaults_user_id_server_id_pk": { + "name": "team_bot_consent_defaults_user_id_server_id_pk", + "columns": [ + "user_id", + "server_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.team_bot_consents": { + "name": "team_bot_consents", + "schema": "", + "columns": { + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "server_id": { + "name": "server_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "decision": { + "name": "decision", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "team_bot_consents_user_id_users_id_fk": { + "name": "team_bot_consents_user_id_users_id_fk", + "tableFrom": "team_bot_consents", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "team_bot_consents_agent_id_agents_id_fk": { + "name": "team_bot_consents_agent_id_agents_id_fk", + "tableFrom": "team_bot_consents", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "team_bot_consents_user_id_agent_id_server_id_pk": { + "name": "team_bot_consents_user_id_agent_id_server_id_pk", + "columns": [ + "user_id", + "agent_id", + "server_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "team_bot_consents_decision_check": { + "name": "team_bot_consents_decision_check", + "value": "\"team_bot_consents\".\"decision\" IN ('always', 'once')" + } + }, + "isRLSEnabled": false + }, + "public.team_bot_publications": { + "name": "team_bot_publications", + "schema": "", + "columns": { + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "published_by": { + "name": "published_by", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "audience": { + "name": "audience", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "published_at": { + "name": "published_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "team_bot_publications_agent_id_agents_id_fk": { + "name": "team_bot_publications_agent_id_agents_id_fk", + "tableFrom": "team_bot_publications", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "team_bot_publications_published_by_users_id_fk": { + "name": "team_bot_publications_published_by_users_id_fk", + "tableFrom": "team_bot_publications", + "tableTo": "users", + "columnsFrom": [ + "published_by" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "team_bot_publications_audience_check": { + "name": "team_bot_publications_audience_check", + "value": "\"team_bot_publications\".\"audience\" IN ('team', 'people')" + } + }, + "isRLSEnabled": false + }, + "public.shared_use_approval_members": { + "name": "shared_use_approval_members", + "schema": "", + "columns": { + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "server_id": { + "name": "server_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "kind": { + "name": "kind", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "value": { + "name": "value", + "type": "text", + "primaryKey": false, + "notNull": true + } + }, + "indexes": {}, + "foreignKeys": { + "shared_use_approval_members_approval_fk": { + "name": "shared_use_approval_members_approval_fk", + "tableFrom": "shared_use_approval_members", + "tableTo": "shared_use_approvals", + "columnsFrom": [ + "agent_id", + "server_id" + ], + "columnsTo": [ + "agent_id", + "server_id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "shared_use_approval_members_agent_id_server_id_kind_value_pk": { + "name": "shared_use_approval_members_agent_id_server_id_kind_value_pk", + "columns": [ + "agent_id", + "server_id", + "kind", + "value" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "shared_use_approval_members_kind_check": { + "name": "shared_use_approval_members_kind_check", + "value": "\"shared_use_approval_members\".\"kind\" IN ('user', 'group')" + } + }, + "isRLSEnabled": false + }, + "public.shared_use_approvals": { + "name": "shared_use_approvals", + "schema": "", + "columns": { + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "server_id": { + "name": "server_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "audience": { + "name": "audience", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "outside_input": { + "name": "outside_input", + "type": "boolean", + "primaryKey": false, + "notNull": true + }, + "approved_by": { + "name": "approved_by", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "approved_at": { + "name": "approved_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "shared_use_approvals_agent_id_agents_id_fk": { + "name": "shared_use_approvals_agent_id_agents_id_fk", + "tableFrom": "shared_use_approvals", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "shared_use_approvals_server_id_mcp_servers_id_fk": { + "name": "shared_use_approvals_server_id_mcp_servers_id_fk", + "tableFrom": "shared_use_approvals", + "tableTo": "mcp_servers", + "columnsFrom": [ + "server_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "shared_use_approvals_agent_id_server_id_pk": { + "name": "shared_use_approvals_agent_id_server_id_pk", + "columns": [ + "agent_id", + "server_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "shared_use_approvals_audience_check": { + "name": "shared_use_approvals_audience_check", + "value": "\"shared_use_approvals\".\"audience\" IN ('owner', 'people', 'team')" + } + }, + "isRLSEnabled": false + }, + "public.shared_use_requests": { + "name": "shared_use_requests", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "server_id": { + "name": "server_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "proposed_audience": { + "name": "proposed_audience", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "proposed_outside_input": { + "name": "proposed_outside_input", + "type": "boolean", + "primaryKey": false, + "notNull": true + }, + "proposed_members": { + "name": "proposed_members", + "type": "jsonb", + "primaryKey": false, + "notNull": true, + "default": "'[]'::jsonb" + }, + "reason": { + "name": "reason", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "requested_by": { + "name": "requested_by", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "status": { + "name": "status", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'pending'" + }, + "decided_by": { + "name": "decided_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "decided_at": { + "name": "decided_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "shared_use_requests_pending_idx": { + "name": "shared_use_requests_pending_idx", + "columns": [ + { + "expression": "agent_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "server_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "where": "\"shared_use_requests\".\"status\" = 'pending'", + "concurrently": false, + "method": "btree", + "with": {} + }, + "shared_use_requests_status_idx": { + "name": "shared_use_requests_status_idx", + "columns": [ + { + "expression": "status", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "shared_use_requests_agent_id_agents_id_fk": { + "name": "shared_use_requests_agent_id_agents_id_fk", + "tableFrom": "shared_use_requests", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "shared_use_requests_server_id_mcp_servers_id_fk": { + "name": "shared_use_requests_server_id_mcp_servers_id_fk", + "tableFrom": "shared_use_requests", + "tableTo": "mcp_servers", + "columnsFrom": [ + "server_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "shared_use_requests_audience_check": { + "name": "shared_use_requests_audience_check", + "value": "\"shared_use_requests\".\"proposed_audience\" IN ('owner', 'people', 'team')" + }, + "shared_use_requests_reason_check": { + "name": "shared_use_requests_reason_check", + "value": "\"shared_use_requests\".\"reason\" IN ('publish', 'trigger', 'grant', 'refused_call')" + }, + "shared_use_requests_status_check": { + "name": "shared_use_requests_status_check", + "value": "\"shared_use_requests\".\"status\" IN ('pending', 'approved', 'declined', 'superseded')" + } + }, + "isRLSEnabled": false + }, + "public.identity_link_challenges": { + "name": "identity_link_challenges", + "schema": "", + "columns": { + "token_hash": { + "name": "token_hash", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "provider": { + "name": "provider", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "expires_at": { + "name": "expires_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + } + }, + "indexes": { + "identity_link_challenges_expiry_idx": { + "name": "identity_link_challenges_expiry_idx", + "columns": [ + { + "expression": "expires_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "identity_link_challenges_user_provider_idx": { + "name": "identity_link_challenges_user_provider_idx", + "columns": [ + { + "expression": "user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "provider", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.identity_links": { + "name": "identity_links", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "provider": { + "name": "provider", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "realm": { + "name": "realm", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "subject": { + "name": "subject", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "handle": { + "name": "handle", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "verified_by": { + "name": "verified_by", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "credential_id": { + "name": "credential_id", + "type": "uuid", + "primaryKey": false, + "notNull": false + }, + "status": { + "name": "status", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'active'" + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "identity_links_identity_idx": { + "name": "identity_links_identity_idx", + "columns": [ + { + "expression": "provider", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "realm", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "subject", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "concurrently": false, + "method": "btree", + "with": {} + }, + "identity_links_user_realm_idx": { + "name": "identity_links_user_realm_idx", + "columns": [ + { + "expression": "user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "provider", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "realm", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "concurrently": false, + "method": "btree", + "with": {} + }, + "identity_links_credential_idx": { + "name": "identity_links_credential_idx", + "columns": [ + { + "expression": "credential_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "where": "\"identity_links\".\"credential_id\" IS NOT NULL", + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "identity_links_credential_id_credentials_id_fk": { + "name": "identity_links_credential_id_credentials_id_fk", + "tableFrom": "identity_links", + "tableTo": "credentials", + "columnsFrom": [ + "credential_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "no action", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "identity_links_verified_by_check": { + "name": "identity_links_verified_by_check", + "value": "\"identity_links\".\"verified_by\" IN ('challenge', 'oauth')" + }, + "identity_links_status_check": { + "name": "identity_links_status_check", + "value": "\"identity_links\".\"status\" IN ('active', 'needs_reconnect')" + } + }, + "isRLSEnabled": false + } + }, + "enums": { + "public.agent_type": { + "name": "agent_type", + "schema": "public", + "values": [ + "built_in", + "remote_ag_ui", + "remote_mastra" + ] + }, + "public.credential_kind": { + "name": "credential_kind", + "schema": "public", + "values": [ + "model", + "connector", + "agent", + "mcp", + "mcp_oauth_client", + "mcp_user_token" + ] + }, + "public.role": { + "name": "role", + "schema": "public", + "values": [ + "admin", + "user" + ] + }, + "public.agent_visibility": { + "name": "agent_visibility", + "schema": "public", + "values": [ + "public", + "private" + ] + }, + "public.routine_run_status": { + "name": "routine_run_status", + "schema": "public", + "values": [ + "succeeded", + "failed", + "skipped", + "waiting" + ] + }, + "public.responsibility_run_status": { + "name": "responsibility_run_status", + "schema": "public", + "values": [ + "queued", + "running", + "waiting", + "succeeded", + "failed", + "skipped" + ] + }, + "public.responsibility_status": { + "name": "responsibility_status", + "schema": "public", + "values": [ + "active", + "paused", + "completed" + ] + } + }, + "schemas": {}, + "sequences": {}, + "roles": {}, + "policies": {}, + "views": {}, + "_meta": { + "columns": {}, + "schemas": {}, + "tables": {} + } +} \ No newline at end of file diff --git a/server/drizzle/meta/0063_snapshot.json b/server/drizzle/meta/0063_snapshot.json new file mode 100644 index 000000000..f2311f2b5 --- /dev/null +++ b/server/drizzle/meta/0063_snapshot.json @@ -0,0 +1,10003 @@ +{ + "id": "645222d2-0cbd-418f-a0d7-72628d49059c", + "prevId": "715bfd83-d33c-4c64-8233-060458d32510", + "version": "7", + "dialect": "postgresql", + "tables": { + "public.accounts": { + "name": "accounts", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "account_id": { + "name": "account_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "provider_id": { + "name": "provider_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "issuer": { + "name": "issuer", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "access_token": { + "name": "access_token", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "refresh_token": { + "name": "refresh_token", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "id_token": { + "name": "id_token", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "access_token_expires_at": { + "name": "access_token_expires_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "refresh_token_expires_at": { + "name": "refresh_token_expires_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "scope": { + "name": "scope", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "password": { + "name": "password", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "accounts_provider_account_idx": { + "name": "accounts_provider_account_idx", + "columns": [ + { + "expression": "provider_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "account_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "accounts_user_id_users_id_fk": { + "name": "accounts_user_id_users_id_fk", + "tableFrom": "accounts", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.agents": { + "name": "agents", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "name": { + "name": "name", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "type": { + "name": "type", + "type": "agent_type", + "typeSchema": "public", + "primaryKey": false, + "notNull": true + }, + "configuration": { + "name": "configuration", + "type": "jsonb", + "primaryKey": false, + "notNull": true + }, + "package_id": { + "name": "package_id", + "type": "uuid", + "primaryKey": false, + "notNull": false + }, + "override": { + "name": "override", + "type": "jsonb", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "agents_package_id_deployment_packages_id_fk": { + "name": "agents_package_id_deployment_packages_id_fk", + "tableFrom": "agents", + "tableTo": "deployment_packages", + "columnsFrom": [ + "package_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "set null", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.attachments": { + "name": "attachments", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "uuid", + "primaryKey": true, + "notNull": true, + "default": "gen_random_uuid()" + }, + "channel_id": { + "name": "channel_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "uploaded_by": { + "name": "uploaded_by", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "name": { + "name": "name", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "mime_type": { + "name": "mime_type", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "size_bytes": { + "name": "size_bytes", + "type": "integer", + "primaryKey": false, + "notNull": true + }, + "bytes": { + "name": "bytes", + "type": "bytea", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "attached_at": { + "name": "attached_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "upload_group": { + "name": "upload_group", + "type": "text", + "primaryKey": false, + "notNull": false + } + }, + "indexes": { + "attachments_channel_idx": { + "name": "attachments_channel_idx", + "columns": [ + { + "expression": "channel_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "attachments_uploaded_by_idx": { + "name": "attachments_uploaded_by_idx", + "columns": [ + { + "expression": "uploaded_by", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "attachments_upload_group_idx": { + "name": "attachments_upload_group_idx", + "columns": [ + { + "expression": "channel_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "uploaded_by", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "upload_group", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "where": "\"attachments\".\"attached_at\" is null", + "concurrently": false, + "method": "btree", + "with": {} + }, + "attachments_staged_idx": { + "name": "attachments_staged_idx", + "columns": [ + { + "expression": "created_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "where": "\"attachments\".\"attached_at\" is null", + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "attachments_channel_id_channels_id_fk": { + "name": "attachments_channel_id_channels_id_fk", + "tableFrom": "attachments", + "tableTo": "channels", + "columnsFrom": [ + "channel_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "attachments_uploaded_by_users_id_fk": { + "name": "attachments_uploaded_by_users_id_fk", + "tableFrom": "attachments", + "tableTo": "users", + "columnsFrom": [ + "uploaded_by" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.audit_events": { + "name": "audit_events", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "uuid", + "primaryKey": true, + "notNull": true, + "default": "gen_random_uuid()" + }, + "actor_user_id": { + "name": "actor_user_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "initiator_kind": { + "name": "initiator_kind", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'person'" + }, + "initiator_id": { + "name": "initiator_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "event_type": { + "name": "event_type", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "target_type": { + "name": "target_type", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "target_id": { + "name": "target_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "payload": { + "name": "payload", + "type": "jsonb", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "audit_events_created_at_idx": { + "name": "audit_events_created_at_idx", + "columns": [ + { + "expression": "created_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "audit_events_type_time_idx": { + "name": "audit_events_type_time_idx", + "columns": [ + { + "expression": "event_type", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "created_at", + "isExpression": false, + "asc": false, + "nulls": "last" + }, + { + "expression": "id", + "isExpression": false, + "asc": false, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "audit_events_actor_time_idx": { + "name": "audit_events_actor_time_idx", + "columns": [ + { + "expression": "actor_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "created_at", + "isExpression": false, + "asc": false, + "nulls": "last" + }, + { + "expression": "id", + "isExpression": false, + "asc": false, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "audit_events_target_time_idx": { + "name": "audit_events_target_time_idx", + "columns": [ + { + "expression": "target_type", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "target_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "created_at", + "isExpression": false, + "asc": false, + "nulls": "last" + }, + { + "expression": "id", + "isExpression": false, + "asc": false, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "audit_events_initiator_time_idx": { + "name": "audit_events_initiator_time_idx", + "columns": [ + { + "expression": "initiator_kind", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "created_at", + "isExpression": false, + "asc": false, + "nulls": "last" + }, + { + "expression": "id", + "isExpression": false, + "asc": false, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.channel_agents": { + "name": "channel_agents", + "schema": "", + "columns": { + "channel_id": { + "name": "channel_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "channel_agents_channel_id_channels_id_fk": { + "name": "channel_agents_channel_id_channels_id_fk", + "tableFrom": "channel_agents", + "tableTo": "channels", + "columnsFrom": [ + "channel_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "channel_agents_agent_id_agents_id_fk": { + "name": "channel_agents_agent_id_agents_id_fk", + "tableFrom": "channel_agents", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "channel_agents_channel_id_agent_id_pk": { + "name": "channel_agents_channel_id_agent_id_pk", + "columns": [ + "channel_id", + "agent_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.channel_memberships": { + "name": "channel_memberships", + "schema": "", + "columns": { + "channel_id": { + "name": "channel_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "pinned_at": { + "name": "pinned_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "last_read_at": { + "name": "last_read_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "channel_memberships_channel_id_channels_id_fk": { + "name": "channel_memberships_channel_id_channels_id_fk", + "tableFrom": "channel_memberships", + "tableTo": "channels", + "columnsFrom": [ + "channel_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "channel_memberships_user_id_users_id_fk": { + "name": "channel_memberships_user_id_users_id_fk", + "tableFrom": "channel_memberships", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "channel_memberships_channel_id_user_id_pk": { + "name": "channel_memberships_channel_id_user_id_pk", + "columns": [ + "channel_id", + "user_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.channels": { + "name": "channels", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "name": { + "name": "name", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "description": { + "name": "description", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "suggested_prompts": { + "name": "suggested_prompts", + "type": "text[]", + "primaryKey": false, + "notNull": true, + "default": "'{}'" + }, + "allowed_groups": { + "name": "allowed_groups", + "type": "text[]", + "primaryKey": false, + "notNull": true, + "default": "'{}'" + }, + "package_id": { + "name": "package_id", + "type": "uuid", + "primaryKey": false, + "notNull": false + }, + "override": { + "name": "override", + "type": "jsonb", + "primaryKey": false, + "notNull": false + }, + "summary": { + "name": "summary", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "summary_at": { + "name": "summary_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "last_message": { + "name": "last_message", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "last_message_source_id": { + "name": "last_message_source_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "last_message_at": { + "name": "last_message_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "last_message_agent_id": { + "name": "last_message_agent_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "deleted_at": { + "name": "deleted_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "channels_recent_activity_idx": { + "name": "channels_recent_activity_idx", + "columns": [ + { + "expression": "COALESCE(\"last_message_at\", \"created_at\") DESC", + "asc": true, + "isExpression": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "channels_awaiting_summary_idx": { + "name": "channels_awaiting_summary_idx", + "columns": [ + { + "expression": "id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "where": "\"channels\".\"summary\" is null and \"channels\".\"deleted_at\" is null", + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "channels_package_id_deployment_packages_id_fk": { + "name": "channels_package_id_deployment_packages_id_fk", + "tableFrom": "channels", + "tableTo": "deployment_packages", + "columnsFrom": [ + "package_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "set null", + "onUpdate": "no action" + }, + "channels_last_message_agent_id_agents_id_fk": { + "name": "channels_last_message_agent_id_agents_id_fk", + "tableFrom": "channels", + "tableTo": "agents", + "columnsFrom": [ + "last_message_agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "set null", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.credentials": { + "name": "credentials", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "uuid", + "primaryKey": true, + "notNull": true, + "default": "gen_random_uuid()" + }, + "kind": { + "name": "kind", + "type": "credential_kind", + "typeSchema": "public", + "primaryKey": false, + "notNull": true + }, + "provider": { + "name": "provider", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "encrypted_value": { + "name": "encrypted_value", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "key_id": { + "name": "key_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "metadata": { + "name": "metadata", + "type": "jsonb", + "primaryKey": false, + "notNull": true + }, + "revoked_at": { + "name": "revoked_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "credentials_active_key_idx": { + "name": "credentials_active_key_idx", + "columns": [ + { + "expression": "kind", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "provider", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "key_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "where": "\"credentials\".\"revoked_at\" IS NULL", + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.deployment_packages": { + "name": "deployment_packages", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "uuid", + "primaryKey": true, + "notNull": true, + "default": "gen_random_uuid()" + }, + "tenant_id": { + "name": "tenant_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "source_path": { + "name": "source_path", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "checksum": { + "name": "checksum", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "loaded_at": { + "name": "loaded_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": { + "deployment_packages_tenant_id_unique": { + "name": "deployment_packages_tenant_id_unique", + "nullsNotDistinct": false, + "columns": [ + "tenant_id" + ] + } + }, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.intelligence_channel_mappings": { + "name": "intelligence_channel_mappings", + "schema": "", + "columns": { + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "channel_id": { + "name": "channel_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "thread_id": { + "name": "thread_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "intelligence_channel_mappings_thread_idx": { + "name": "intelligence_channel_mappings_thread_idx", + "columns": [ + { + "expression": "thread_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "intelligence_channel_mappings_user_id_users_id_fk": { + "name": "intelligence_channel_mappings_user_id_users_id_fk", + "tableFrom": "intelligence_channel_mappings", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "intelligence_channel_mappings_channel_id_channels_id_fk": { + "name": "intelligence_channel_mappings_channel_id_channels_id_fk", + "tableFrom": "intelligence_channel_mappings", + "tableTo": "channels", + "columnsFrom": [ + "channel_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "intelligence_channel_mappings_user_id_channel_id_pk": { + "name": "intelligence_channel_mappings_user_id_channel_id_pk", + "columns": [ + "user_id", + "channel_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.revoked_access": { + "name": "revoked_access", + "schema": "", + "columns": { + "email": { + "name": "email", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "revoked_at": { + "name": "revoked_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "revoked_by": { + "name": "revoked_by", + "type": "text", + "primaryKey": false, + "notNull": true + } + }, + "indexes": {}, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.sessions": { + "name": "sessions", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "token": { + "name": "token", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "expires_at": { + "name": "expires_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + }, + "ip_address": { + "name": "ip_address", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "user_agent": { + "name": "user_agent", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "sessions_user_id_users_id_fk": { + "name": "sessions_user_id_users_id_fk", + "tableFrom": "sessions", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": { + "sessions_token_unique": { + "name": "sessions_token_unique", + "nullsNotDistinct": false, + "columns": [ + "token" + ] + } + }, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.sso_providers": { + "name": "sso_providers", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "issuer": { + "name": "issuer", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "oidc_config": { + "name": "oidc_config", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "saml_config": { + "name": "saml_config", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "provider_id": { + "name": "provider_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "organization_id": { + "name": "organization_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "domain": { + "name": "domain", + "type": "text", + "primaryKey": false, + "notNull": true + } + }, + "indexes": {}, + "foreignKeys": { + "sso_providers_user_id_users_id_fk": { + "name": "sso_providers_user_id_users_id_fk", + "tableFrom": "sso_providers", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "set null", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": { + "sso_providers_provider_id_unique": { + "name": "sso_providers_provider_id_unique", + "nullsNotDistinct": false, + "columns": [ + "provider_id" + ] + } + }, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.user_instructions": { + "name": "user_instructions", + "schema": "", + "columns": { + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "instructions": { + "name": "instructions", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "user_instructions_user_id_users_id_fk": { + "name": "user_instructions_user_id_users_id_fk", + "tableFrom": "user_instructions", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.user_roles": { + "name": "user_roles", + "schema": "", + "columns": { + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "role": { + "name": "role", + "type": "role", + "typeSchema": "public", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "user_roles_user_id_users_id_fk": { + "name": "user_roles_user_id_users_id_fk", + "tableFrom": "user_roles", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "user_roles_user_id_role_pk": { + "name": "user_roles_user_id_role_pk", + "columns": [ + "user_id", + "role" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.users": { + "name": "users", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "email": { + "name": "email", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "name": { + "name": "name", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "image": { + "name": "image", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "email_verified": { + "name": "email_verified", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": false + }, + "preferences": { + "name": "preferences", + "type": "jsonb", + "primaryKey": false, + "notNull": true, + "default": "'{}'::jsonb" + }, + "groups": { + "name": "groups", + "type": "text[]", + "primaryKey": false, + "notNull": true, + "default": "'{}'" + }, + "onboarding_step": { + "name": "onboarding_step", + "type": "integer", + "primaryKey": false, + "notNull": true, + "default": 0 + }, + "onboarding_completed_at": { + "name": "onboarding_completed_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "last_signed_in_at": { + "name": "last_signed_in_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": { + "users_email_unique": { + "name": "users_email_unique", + "nullsNotDistinct": false, + "columns": [ + "email" + ] + } + }, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.verifications": { + "name": "verifications", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "identifier": { + "name": "identifier", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "value": { + "name": "value", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "expires_at": { + "name": "expires_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.action_policy": { + "name": "action_policy", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "mode": { + "name": "mode", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "deny": { + "name": "deny", + "type": "text[]", + "primaryKey": false, + "notNull": true + }, + "allow": { + "name": "allow", + "type": "text[]", + "primaryKey": false, + "notNull": true + }, + "updated_by": { + "name": "updated_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.computer_page_frame": { + "name": "computer_page_frame", + "schema": "", + "columns": { + "computer_id": { + "name": "computer_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "tool_call_id": { + "name": "tool_call_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "url": { + "name": "url", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "title": { + "name": "title", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "frame": { + "name": "frame", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "captured_at": { + "name": "captured_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "computer_page_frame_captured_idx": { + "name": "computer_page_frame_captured_idx", + "columns": [ + { + "expression": "captured_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": {}, + "compositePrimaryKeys": { + "computer_page_frame_computer_id_tool_call_id_pk": { + "name": "computer_page_frame_computer_id_tool_call_id_pk", + "columns": [ + "computer_id", + "tool_call_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.computer_snapshot": { + "name": "computer_snapshot", + "schema": "", + "columns": { + "computer_id": { + "name": "computer_id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "snapshot_id": { + "name": "snapshot_id", + "type": "integer", + "primaryKey": false, + "notNull": true + }, + "url": { + "name": "url", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "elements": { + "name": "elements", + "type": "jsonb", + "primaryKey": false, + "notNull": true + }, + "taken_at": { + "name": "taken_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "session": { + "name": "session", + "type": "text", + "primaryKey": false, + "notNull": false + } + }, + "indexes": {}, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.agent_preferences": { + "name": "agent_preferences", + "schema": "", + "columns": { + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "hidden_at": { + "name": "hidden_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "pinned_at": { + "name": "pinned_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + } + }, + "indexes": {}, + "foreignKeys": { + "agent_preferences_user_id_users_id_fk": { + "name": "agent_preferences_user_id_users_id_fk", + "tableFrom": "agent_preferences", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "agent_preferences_agent_id_agents_id_fk": { + "name": "agent_preferences_agent_id_agents_id_fk", + "tableFrom": "agent_preferences", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "agent_preferences_user_id_agent_id_pk": { + "name": "agent_preferences_user_id_agent_id_pk", + "columns": [ + "user_id", + "agent_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.agent_profiles": { + "name": "agent_profiles", + "schema": "", + "columns": { + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "title": { + "name": "title", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "role_description": { + "name": "role_description", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "avatar_seed": { + "name": "avatar_seed", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "visibility": { + "name": "visibility", + "type": "agent_visibility", + "typeSchema": "public", + "primaryKey": false, + "notNull": true + }, + "callback_token_hash": { + "name": "callback_token_hash", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "callback_token_issued_at": { + "name": "callback_token_issued_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "deleted_at": { + "name": "deleted_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "agent_profiles_visibility_deleted_idx": { + "name": "agent_profiles_visibility_deleted_idx", + "columns": [ + { + "expression": "visibility", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "deleted_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "agent_profiles_agent_id_agents_id_fk": { + "name": "agent_profiles_agent_id_agents_id_fk", + "tableFrom": "agent_profiles", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "agent_profiles_owner_user_id_users_id_fk": { + "name": "agent_profiles_owner_user_id_users_id_fk", + "tableFrom": "agent_profiles", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "set null", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.routine_runs": { + "name": "routine_runs", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "routine_id": { + "name": "routine_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "started_at": { + "name": "started_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "finished_at": { + "name": "finished_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "status": { + "name": "status", + "type": "routine_run_status", + "typeSchema": "public", + "primaryKey": false, + "notNull": false + }, + "waiting": { + "name": "waiting", + "type": "jsonb", + "primaryKey": false, + "notNull": false + }, + "error": { + "name": "error", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "source": { + "name": "source", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'schedule'" + } + }, + "indexes": { + "routine_runs_by_routine_idx": { + "name": "routine_runs_by_routine_idx", + "columns": [ + { + "expression": "routine_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "started_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "routine_runs_routine_id_routines_id_fk": { + "name": "routine_runs_routine_id_routines_id_fk", + "tableFrom": "routine_runs", + "tableTo": "routines", + "columnsFrom": [ + "routine_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.routine_sweeps": { + "name": "routine_sweeps", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "swept_at": { + "name": "swept_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "owner": { + "name": "owner", + "type": "text", + "primaryKey": false, + "notNull": false + } + }, + "indexes": {}, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.routines": { + "name": "routines", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "channel_id": { + "name": "channel_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "instruction": { + "name": "instruction", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "cron": { + "name": "cron", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "timezone": { + "name": "timezone", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'UTC'" + }, + "enabled": { + "name": "enabled", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": true + }, + "next_run_at": { + "name": "next_run_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + }, + "last_run_at": { + "name": "last_run_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "enabled_at": { + "name": "enabled_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "routines_due_idx": { + "name": "routines_due_idx", + "columns": [ + { + "expression": "enabled", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "next_run_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "routines_by_owner_idx": { + "name": "routines_by_owner_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "enabled", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "routines_owner_user_id_users_id_fk": { + "name": "routines_owner_user_id_users_id_fk", + "tableFrom": "routines", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "routines_agent_id_agents_id_fk": { + "name": "routines_agent_id_agents_id_fk", + "tableFrom": "routines", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.component_exclusions": { + "name": "component_exclusions", + "schema": "", + "columns": { + "component_name": { + "name": "component_name", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "withheld_by": { + "name": "withheld_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "component_exclusions_component_name_components_name_fk": { + "name": "component_exclusions_component_name_components_name_fk", + "tableFrom": "component_exclusions", + "tableTo": "components", + "columnsFrom": [ + "component_name" + ], + "columnsTo": [ + "name" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "component_exclusions_agent_id_agents_id_fk": { + "name": "component_exclusions_agent_id_agents_id_fk", + "tableFrom": "component_exclusions", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "component_exclusions_component_name_agent_id_pk": { + "name": "component_exclusions_component_name_agent_id_pk", + "columns": [ + "component_name", + "agent_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.component_functions": { + "name": "component_functions", + "schema": "", + "columns": { + "component_name": { + "name": "component_name", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "function_name": { + "name": "function_name", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "granted_by": { + "name": "granted_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "component_functions_component_name_components_name_fk": { + "name": "component_functions_component_name_components_name_fk", + "tableFrom": "component_functions", + "tableTo": "components", + "columnsFrom": [ + "component_name" + ], + "columnsTo": [ + "name" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "component_functions_component_name_function_name_pk": { + "name": "component_functions_component_name_function_name_pk", + "columns": [ + "component_name", + "function_name" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.components": { + "name": "components", + "schema": "", + "columns": { + "name": { + "name": "name", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "title": { + "name": "title", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "kind": { + "name": "kind", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "draft_description": { + "name": "draft_description", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "published_description": { + "name": "published_description", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "published": { + "name": "published", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": false + }, + "published_at": { + "name": "published_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "updated_by": { + "name": "updated_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.brokered_connections": { + "name": "brokered_connections", + "schema": "", + "columns": { + "provider": { + "name": "provider", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "app": { + "name": "app", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "holder": { + "name": "holder", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "vendor_user_id": { + "name": "vendor_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "connected_by": { + "name": "connected_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "connected_at": { + "name": "connected_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "verified": { + "name": "verified", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": false + }, + "verified_at": { + "name": "verified_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "probe_action": { + "name": "probe_action", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "brokered_connections_person_idx": { + "name": "brokered_connections_person_idx", + "columns": [ + { + "expression": "provider", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "app", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "where": "\"brokered_connections\".\"holder\" = 'person'", + "concurrently": false, + "method": "btree", + "with": {} + }, + "brokered_connections_deployment_idx": { + "name": "brokered_connections_deployment_idx", + "columns": [ + { + "expression": "provider", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "app", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "where": "\"brokered_connections\".\"holder\" = 'deployment'", + "concurrently": false, + "method": "btree", + "with": {} + }, + "brokered_connections_user_idx": { + "name": "brokered_connections_user_idx", + "columns": [ + { + "expression": "user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "brokered_connections_holder_check": { + "name": "brokered_connections_holder_check", + "value": "(\"brokered_connections\".\"holder\" = 'person' AND \"brokered_connections\".\"user_id\" IS NOT NULL) OR (\"brokered_connections\".\"holder\" = 'deployment' AND \"brokered_connections\".\"user_id\" IS NULL)" + }, + "brokered_connections_provider_check": { + "name": "brokered_connections_provider_check", + "value": "\"brokered_connections\".\"provider\" IN ('composio', 'arcade')" + } + }, + "isRLSEnabled": false + }, + "public.composio_connections": { + "name": "composio_connections", + "schema": "", + "columns": { + "toolkit": { + "name": "toolkit", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "connected_at": { + "name": "connected_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "verified": { + "name": "verified", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": false + }, + "verified_at": { + "name": "verified_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "probe_action": { + "name": "probe_action", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "composio_connections_user_idx": { + "name": "composio_connections_user_idx", + "columns": [ + { + "expression": "user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": {}, + "compositePrimaryKeys": { + "composio_connections_toolkit_user_id_pk": { + "name": "composio_connections_toolkit_user_id_pk", + "columns": [ + "toolkit", + "user_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.mcp_servers": { + "name": "mcp_servers", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "title": { + "name": "title", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "logo": { + "name": "logo", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "vendor": { + "name": "vendor", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "url": { + "name": "url", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "provenance": { + "name": "provenance", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'first-party'" + }, + "credential_id": { + "name": "credential_id", + "type": "uuid", + "primaryKey": false, + "notNull": false + }, + "auth_scheme": { + "name": "auth_scheme", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "account_mode": { + "name": "account_mode", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "shared_vendor_user_id": { + "name": "shared_vendor_user_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "tools_refreshed_at": { + "name": "tools_refreshed_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "last_error": { + "name": "last_error", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "added_by": { + "name": "added_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "mcp_servers_credential_id_credentials_id_fk": { + "name": "mcp_servers_credential_id_credentials_id_fk", + "tableFrom": "mcp_servers", + "tableTo": "credentials", + "columnsFrom": [ + "credential_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "restrict", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "mcp_servers_account_mode_check": { + "name": "mcp_servers_account_mode_check", + "value": "\"mcp_servers\".\"account_mode\" IS NULL OR \"mcp_servers\".\"account_mode\" IN ('personal', 'shared')" + } + }, + "isRLSEnabled": false + }, + "public.mcp_tools": { + "name": "mcp_tools", + "schema": "", + "columns": { + "server_id": { + "name": "server_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "name": { + "name": "name", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "vendor_name": { + "name": "vendor_name", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "description": { + "name": "description", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "''" + }, + "input_schema": { + "name": "input_schema", + "type": "jsonb", + "primaryKey": false, + "notNull": true, + "default": "'{}'::jsonb" + }, + "effect": { + "name": "effect", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "destructive": { + "name": "destructive", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": false + }, + "version": { + "name": "version", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "mcp_tools_server_id_mcp_servers_id_fk": { + "name": "mcp_tools_server_id_mcp_servers_id_fk", + "tableFrom": "mcp_tools", + "tableTo": "mcp_servers", + "columnsFrom": [ + "server_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "mcp_tools_server_id_name_pk": { + "name": "mcp_tools_server_id_name_pk", + "columns": [ + "server_id", + "name" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.mcp_user_credentials": { + "name": "mcp_user_credentials", + "schema": "", + "columns": { + "server_id": { + "name": "server_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "credential_id": { + "name": "credential_id", + "type": "uuid", + "primaryKey": false, + "notNull": true + }, + "scope": { + "name": "scope", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "connected_at": { + "name": "connected_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "mcp_user_credentials_user_idx": { + "name": "mcp_user_credentials_user_idx", + "columns": [ + { + "expression": "user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "mcp_user_credentials_server_id_mcp_servers_id_fk": { + "name": "mcp_user_credentials_server_id_mcp_servers_id_fk", + "tableFrom": "mcp_user_credentials", + "tableTo": "mcp_servers", + "columnsFrom": [ + "server_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "mcp_user_credentials_user_id_users_id_fk": { + "name": "mcp_user_credentials_user_id_users_id_fk", + "tableFrom": "mcp_user_credentials", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "mcp_user_credentials_credential_id_credentials_id_fk": { + "name": "mcp_user_credentials_credential_id_credentials_id_fk", + "tableFrom": "mcp_user_credentials", + "tableTo": "credentials", + "columnsFrom": [ + "credential_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "no action", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "mcp_user_credentials_server_id_user_id_pk": { + "name": "mcp_user_credentials_server_id_user_id_pk", + "columns": [ + "server_id", + "user_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.pending_authorizations": { + "name": "pending_authorizations", + "schema": "", + "columns": { + "actor_id": { + "name": "actor_id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "server_id": { + "name": "server_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "action": { + "name": "action", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "holder": { + "name": "holder", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "vendor_user_id": { + "name": "vendor_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "auth_id": { + "name": "auth_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "completed_at": { + "name": "completed_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "outcome": { + "name": "outcome", + "type": "text", + "primaryKey": false, + "notNull": false + } + }, + "indexes": { + "pending_authorizations_server_idx": { + "name": "pending_authorizations_server_idx", + "columns": [ + { + "expression": "server_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "pending_authorizations_actor_id_users_id_fk": { + "name": "pending_authorizations_actor_id_users_id_fk", + "tableFrom": "pending_authorizations", + "tableTo": "users", + "columnsFrom": [ + "actor_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "pending_authorizations_server_id_mcp_servers_id_fk": { + "name": "pending_authorizations_server_id_mcp_servers_id_fk", + "tableFrom": "pending_authorizations", + "tableTo": "mcp_servers", + "columnsFrom": [ + "server_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "pending_authorizations_holder_check": { + "name": "pending_authorizations_holder_check", + "value": "(\"pending_authorizations\".\"holder\" = 'person' AND \"pending_authorizations\".\"user_id\" IS NOT NULL) OR (\"pending_authorizations\".\"holder\" = 'deployment' AND \"pending_authorizations\".\"user_id\" IS NULL)" + }, + "pending_authorizations_outcome_check": { + "name": "pending_authorizations_outcome_check", + "value": "\"pending_authorizations\".\"outcome\" IS NULL OR \"pending_authorizations\".\"outcome\" IN ('completed', 'failed', 'unreconciled', 'withdrawn')" + }, + "pending_authorizations_completion_check": { + "name": "pending_authorizations_completion_check", + "value": "(\"pending_authorizations\".\"completed_at\" IS NULL) = (\"pending_authorizations\".\"outcome\" IS NULL)" + }, + "pending_authorizations_user_is_actor_check": { + "name": "pending_authorizations_user_is_actor_check", + "value": "\"pending_authorizations\".\"user_id\" IS NULL OR \"pending_authorizations\".\"user_id\" = \"pending_authorizations\".\"actor_id\"" + } + }, + "isRLSEnabled": false + }, + "public.plugin_grants": { + "name": "plugin_grants", + "schema": "", + "columns": { + "kind": { + "name": "kind", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "ref": { + "name": "ref", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "granted_by": { + "name": "granted_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "plugin_grants_agent_idx": { + "name": "plugin_grants_agent_idx", + "columns": [ + { + "expression": "agent_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "plugin_grants_agent_id_agents_id_fk": { + "name": "plugin_grants_agent_id_agents_id_fk", + "tableFrom": "plugin_grants", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "plugin_grants_kind_ref_agent_id_pk": { + "name": "plugin_grants_kind_ref_agent_id_pk", + "columns": [ + "kind", + "ref", + "agent_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.sandboxed_components": { + "name": "sandboxed_components", + "schema": "", + "columns": { + "name": { + "name": "name", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "title": { + "name": "title", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "draft_description": { + "name": "draft_description", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "''" + }, + "draft_html": { + "name": "draft_html", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "''" + }, + "draft_css": { + "name": "draft_css", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "''" + }, + "draft_js_functions": { + "name": "draft_js_functions", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "''" + }, + "draft_argument_schema": { + "name": "draft_argument_schema", + "type": "jsonb", + "primaryKey": false, + "notNull": true, + "default": "'{}'::jsonb" + }, + "published_description": { + "name": "published_description", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "published_html": { + "name": "published_html", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "published_css": { + "name": "published_css", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "published_js_functions": { + "name": "published_js_functions", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "published_argument_schema": { + "name": "published_argument_schema", + "type": "jsonb", + "primaryKey": false, + "notNull": false + }, + "sample_arguments": { + "name": "sample_arguments", + "type": "jsonb", + "primaryKey": false, + "notNull": true, + "default": "'{}'::jsonb" + }, + "revision": { + "name": "revision", + "type": "integer", + "primaryKey": false, + "notNull": true, + "default": 0 + }, + "published": { + "name": "published", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": false + }, + "published_at": { + "name": "published_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "authored_by": { + "name": "authored_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.skill_tools": { + "name": "skill_tools", + "schema": "", + "columns": { + "skill_id": { + "name": "skill_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "ref": { + "name": "ref", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "declared_by": { + "name": "declared_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "skill_tools_ref_idx": { + "name": "skill_tools_ref_idx", + "columns": [ + { + "expression": "ref", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "skill_tools_skill_id_skills_id_fk": { + "name": "skill_tools_skill_id_skills_id_fk", + "tableFrom": "skill_tools", + "tableTo": "skills", + "columnsFrom": [ + "skill_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "skill_tools_skill_id_ref_pk": { + "name": "skill_tools_skill_id_ref_pk", + "columns": [ + "skill_id", + "ref" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.skills": { + "name": "skills", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "slug": { + "name": "slug", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "title": { + "name": "title", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "summary": { + "name": "summary", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "instructions": { + "name": "instructions", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "origin": { + "name": "origin", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'yours'" + }, + "installed_by": { + "name": "installed_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "skills_slug_key": { + "name": "skills_slug_key", + "columns": [ + { + "expression": "slug", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "concurrently": false, + "method": "btree", + "with": {} + }, + "skills_owner_idx": { + "name": "skills_owner_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "skills_owner_user_id_users_id_fk": { + "name": "skills_owner_user_id_users_id_fk", + "tableFrom": "skills", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.work_items": { + "name": "work_items", + "schema": "", + "columns": { + "kind": { + "name": "kind", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "key": { + "name": "key", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "run_at": { + "name": "run_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "claimed_by": { + "name": "claimed_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "lease_until": { + "name": "lease_until", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "attempts": { + "name": "attempts", + "type": "integer", + "primaryKey": false, + "notNull": true, + "default": 0 + }, + "finished_at": { + "name": "finished_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "last_error": { + "name": "last_error", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "payload": { + "name": "payload", + "type": "jsonb", + "primaryKey": false, + "notNull": true, + "default": "'{}'::jsonb" + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "work_items_claimable_idx": { + "name": "work_items_claimable_idx", + "columns": [ + { + "expression": "kind", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "run_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": {}, + "compositePrimaryKeys": { + "work_items_kind_key_pk": { + "name": "work_items_kind_key_pk", + "columns": [ + "kind", + "key" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.voice_sessions": { + "name": "voice_sessions", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "channel_id": { + "name": "channel_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "anchor_message_id": { + "name": "anchor_message_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "started_at": { + "name": "started_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + }, + "ended_at": { + "name": "ended_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + }, + "duration_seconds": { + "name": "duration_seconds", + "type": "integer", + "primaryKey": false, + "notNull": true + }, + "transcript": { + "name": "transcript", + "type": "jsonb", + "primaryKey": false, + "notNull": true + }, + "summary": { + "name": "summary", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "summary_status": { + "name": "summary_status", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'failed'" + } + }, + "indexes": { + "voice_sessions_channel_started_idx": { + "name": "voice_sessions_channel_started_idx", + "columns": [ + { + "expression": "channel_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "started_at", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "voice_sessions_channel_id_channels_id_fk": { + "name": "voice_sessions_channel_id_channels_id_fk", + "tableFrom": "voice_sessions", + "tableTo": "channels", + "columnsFrom": [ + "channel_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "voice_sessions_user_id_users_id_fk": { + "name": "voice_sessions_user_id_users_id_fk", + "tableFrom": "voice_sessions", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "voice_sessions_duration_check": { + "name": "voice_sessions_duration_check", + "value": "\"voice_sessions\".\"duration_seconds\" >= 0" + }, + "voice_sessions_summary_check": { + "name": "voice_sessions_summary_check", + "value": "(\"voice_sessions\".\"summary_status\" = 'ready' AND \"voice_sessions\".\"summary\" IS NOT NULL) OR (\"voice_sessions\".\"summary_status\" = 'failed' AND \"voice_sessions\".\"summary\" IS NULL)" + } + }, + "isRLSEnabled": false + }, + "public.learning_settings": { + "name": "learning_settings", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "settings": { + "name": "settings", + "type": "jsonb", + "primaryKey": false, + "notNull": true + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.learning_thread_bindings": { + "name": "learning_thread_bindings", + "schema": "", + "columns": { + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "thread_id": { + "name": "thread_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "container_id": { + "name": "container_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": {}, + "compositePrimaryKeys": { + "learning_thread_bindings_user_id_thread_id_pk": { + "name": "learning_thread_bindings_user_id_thread_id_pk", + "columns": [ + "user_id", + "thread_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.responsibilities": { + "name": "responsibilities", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "channel_id": { + "name": "channel_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "thread_id": { + "name": "thread_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "title": { + "name": "title", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "instruction": { + "name": "instruction", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "success_criteria": { + "name": "success_criteria", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "status": { + "name": "status", + "type": "responsibility_status", + "typeSchema": "public", + "primaryKey": false, + "notNull": true, + "default": "'active'" + }, + "progress": { + "name": "progress", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "''" + }, + "last_result": { + "name": "last_result", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "subscriptions": { + "name": "subscriptions", + "type": "jsonb", + "primaryKey": false, + "notNull": true, + "default": "'[]'::jsonb" + }, + "completed_at": { + "name": "completed_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "responsibilities_owner_status_idx": { + "name": "responsibilities_owner_status_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "status", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "responsibilities_owner_user_id_users_id_fk": { + "name": "responsibilities_owner_user_id_users_id_fk", + "tableFrom": "responsibilities", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "responsibilities_agent_id_agents_id_fk": { + "name": "responsibilities_agent_id_agents_id_fk", + "tableFrom": "responsibilities", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.responsibility_events": { + "name": "responsibility_events", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "source": { + "name": "source", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "external_id": { + "name": "external_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "type": { + "name": "type", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "payload": { + "name": "payload", + "type": "jsonb", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "responsibility_events_source_id_idx": { + "name": "responsibility_events_source_id_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "source", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "external_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "responsibility_events_owner_user_id_users_id_fk": { + "name": "responsibility_events_owner_user_id_users_id_fk", + "tableFrom": "responsibility_events", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.responsibility_runs": { + "name": "responsibility_runs", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "responsibility_id": { + "name": "responsibility_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "event_id": { + "name": "event_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "status": { + "name": "status", + "type": "responsibility_run_status", + "typeSchema": "public", + "primaryKey": false, + "notNull": true, + "default": "'queued'" + }, + "reply_text": { + "name": "reply_text", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "error": { + "name": "error", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "waiting": { + "name": "waiting", + "type": "jsonb", + "primaryKey": false, + "notNull": false + }, + "continuation": { + "name": "continuation", + "type": "jsonb", + "primaryKey": false, + "notNull": false + }, + "started_at": { + "name": "started_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "finished_at": { + "name": "finished_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "responsibility_runs_event_idx": { + "name": "responsibility_runs_event_idx", + "columns": [ + { + "expression": "responsibility_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "event_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "concurrently": false, + "method": "btree", + "with": {} + }, + "responsibility_runs_status_idx": { + "name": "responsibility_runs_status_idx", + "columns": [ + { + "expression": "status", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "created_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "responsibility_runs_responsibility_id_responsibilities_id_fk": { + "name": "responsibility_runs_responsibility_id_responsibilities_id_fk", + "tableFrom": "responsibility_runs", + "tableTo": "responsibilities", + "columnsFrom": [ + "responsibility_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "responsibility_runs_event_id_responsibility_events_id_fk": { + "name": "responsibility_runs_event_id_responsibility_events_id_fk", + "tableFrom": "responsibility_runs", + "tableTo": "responsibility_events", + "columnsFrom": [ + "event_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.responsibility_source_bindings": { + "name": "responsibility_source_bindings", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "source": { + "name": "source", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "repository": { + "name": "repository", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "credential_id": { + "name": "credential_id", + "type": "uuid", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "responsibility_source_bindings_owner_idx": { + "name": "responsibility_source_bindings_owner_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "responsibility_source_bindings_owner_user_id_users_id_fk": { + "name": "responsibility_source_bindings_owner_user_id_users_id_fk", + "tableFrom": "responsibility_source_bindings", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "responsibility_source_bindings_credential_id_credentials_id_fk": { + "name": "responsibility_source_bindings_credential_id_credentials_id_fk", + "tableFrom": "responsibility_source_bindings", + "tableTo": "credentials", + "columnsFrom": [ + "credential_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "no action", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.responsibility_triggers": { + "name": "responsibility_triggers", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "responsibility_id": { + "name": "responsibility_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "kind": { + "name": "kind", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "config": { + "name": "config", + "type": "jsonb", + "primaryKey": false, + "notNull": true + }, + "credential_id": { + "name": "credential_id", + "type": "uuid", + "primaryKey": false, + "notNull": false + }, + "enabled": { + "name": "enabled", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "responsibility_triggers_owner_idx": { + "name": "responsibility_triggers_owner_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "responsibility_triggers_responsibility_idx": { + "name": "responsibility_triggers_responsibility_idx", + "columns": [ + { + "expression": "responsibility_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "responsibility_triggers_kind_idx": { + "name": "responsibility_triggers_kind_idx", + "columns": [ + { + "expression": "kind", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "responsibility_triggers_owner_user_id_users_id_fk": { + "name": "responsibility_triggers_owner_user_id_users_id_fk", + "tableFrom": "responsibility_triggers", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "responsibility_triggers_responsibility_id_responsibilities_id_fk": { + "name": "responsibility_triggers_responsibility_id_responsibilities_id_fk", + "tableFrom": "responsibility_triggers", + "tableTo": "responsibilities", + "columnsFrom": [ + "responsibility_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "responsibility_triggers_credential_id_credentials_id_fk": { + "name": "responsibility_triggers_credential_id_credentials_id_fk", + "tableFrom": "responsibility_triggers", + "tableTo": "credentials", + "columnsFrom": [ + "credential_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "no action", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.approval_preferences": { + "name": "approval_preferences", + "schema": "", + "columns": { + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "enabled": { + "name": "enabled", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": false + }, + "auto_review": { + "name": "auto_review", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": false + }, + "host_commands": { + "name": "host_commands", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'ask'" + } + }, + "indexes": {}, + "foreignKeys": { + "approval_preferences_owner_user_id_users_id_fk": { + "name": "approval_preferences_owner_user_id_users_id_fk", + "tableFrom": "approval_preferences", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "approval_preferences_host_commands_check": { + "name": "approval_preferences_host_commands_check", + "value": "\"approval_preferences\".\"host_commands\" IN ('ask', 'allow', 'never')" + } + }, + "isRLSEnabled": false + }, + "public.approval_requests": { + "name": "approval_requests", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "run_id": { + "name": "run_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "tool_call_id": { + "name": "tool_call_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "action_digest": { + "name": "action_digest", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "action": { + "name": "action", + "type": "jsonb", + "primaryKey": false, + "notNull": true + }, + "status": { + "name": "status", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'pending'" + }, + "decision": { + "name": "decision", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "result": { + "name": "result", + "type": "jsonb", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "decided_at": { + "name": "decided_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "consumed_at": { + "name": "consumed_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "completed_at": { + "name": "completed_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + } + }, + "indexes": { + "approval_requests_action_idx": { + "name": "approval_requests_action_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "run_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "tool_call_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "concurrently": false, + "method": "btree", + "with": {} + }, + "approval_requests_inbox_idx": { + "name": "approval_requests_inbox_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "status", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "approval_requests_owner_user_id_users_id_fk": { + "name": "approval_requests_owner_user_id_users_id_fk", + "tableFrom": "approval_requests", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "approval_status_check": { + "name": "approval_status_check", + "value": "\"approval_requests\".\"status\" IN ('pending', 'approved', 'denied', 'consumed', 'completed')" + }, + "approval_decision_check": { + "name": "approval_decision_check", + "value": "\"approval_requests\".\"decision\" IN ('allow_once', 'allow_always', 'deny', 'handled')" + } + }, + "isRLSEnabled": false + }, + "public.approval_rules": { + "name": "approval_rules", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "bot_id": { + "name": "bot_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "tool_ref": { + "name": "tool_ref", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "effect": { + "name": "effect", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "scope": { + "name": "scope", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "behaviour": { + "name": "behaviour", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'allow'" + }, + "revoked_at": { + "name": "revoked_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "approval_rules_owner_idx": { + "name": "approval_rules_owner_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "approval_rules_owner_user_id_users_id_fk": { + "name": "approval_rules_owner_user_id_users_id_fk", + "tableFrom": "approval_rules", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "approval_rules_behaviour_check": { + "name": "approval_rules_behaviour_check", + "value": "\"approval_rules\".\"behaviour\" IN ('allow', 'pre_approved', 'ask', 'hand_off')" + } + }, + "isRLSEnabled": false + }, + "public.approval_team_rules": { + "name": "approval_team_rules", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "bot_id": { + "name": "bot_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "tool_ref": { + "name": "tool_ref", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "effect": { + "name": "effect", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "scope": { + "name": "scope", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "behaviour": { + "name": "behaviour", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "created_by": { + "name": "created_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "revoked_at": { + "name": "revoked_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "approval_team_rules_created_by_users_id_fk": { + "name": "approval_team_rules_created_by_users_id_fk", + "tableFrom": "approval_team_rules", + "tableTo": "users", + "columnsFrom": [ + "created_by" + ], + "columnsTo": [ + "id" + ], + "onDelete": "set null", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "approval_team_rules_behaviour_check": { + "name": "approval_team_rules_behaviour_check", + "value": "\"approval_team_rules\".\"behaviour\" IN ('allow', 'pre_approved', 'ask', 'hand_off')" + } + }, + "isRLSEnabled": false + }, + "public.approval_team_settings": { + "name": "approval_team_settings", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "enforce_auto_review": { + "name": "enforce_auto_review", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": false + }, + "custom_rules_enabled": { + "name": "custom_rules_enabled", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": true + }, + "host_commands_cap": { + "name": "host_commands_cap", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'allow'" + }, + "updated_by": { + "name": "updated_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "approval_team_settings_updated_by_users_id_fk": { + "name": "approval_team_settings_updated_by_users_id_fk", + "tableFrom": "approval_team_settings", + "tableTo": "users", + "columnsFrom": [ + "updated_by" + ], + "columnsTo": [ + "id" + ], + "onDelete": "set null", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "approval_team_settings_host_commands_cap_check": { + "name": "approval_team_settings_host_commands_cap_check", + "value": "\"approval_team_settings\".\"host_commands_cap\" IN ('ask', 'allow', 'never')" + } + }, + "isRLSEnabled": false + }, + "public.memory_sources": { + "name": "memory_sources", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "tool_ref": { + "name": "tool_ref", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "title": { + "name": "title", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "args": { + "name": "args", + "type": "jsonb", + "primaryKey": false, + "notNull": true, + "default": "'{}'::jsonb" + }, + "enabled": { + "name": "enabled", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": true + }, + "sync_status": { + "name": "sync_status", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'idle'" + }, + "sync_error": { + "name": "sync_error", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "last_sync_at": { + "name": "last_sync_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "next_sync_at": { + "name": "next_sync_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "memory_sources_owner_idx": { + "name": "memory_sources_owner_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "memory_sources_due_idx": { + "name": "memory_sources_due_idx", + "columns": [ + { + "expression": "enabled", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "next_sync_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "memory_sources_owner_user_id_users_id_fk": { + "name": "memory_sources_owner_user_id_users_id_fk", + "tableFrom": "memory_sources", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "memory_sources_agent_id_agents_id_fk": { + "name": "memory_sources_agent_id_agents_id_fk", + "tableFrom": "memory_sources", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.personal_memories": { + "name": "personal_memories", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "source_id": { + "name": "source_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "external_id": { + "name": "external_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "import_digest": { + "name": "import_digest", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "content": { + "name": "content", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "provenance": { + "name": "provenance", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "enabled": { + "name": "enabled", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": true + }, + "review_state": { + "name": "review_state", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'unreviewed'" + }, + "deleted_at": { + "name": "deleted_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "formed_by": { + "name": "formed_by", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'person'" + }, + "formed_by_agent_id": { + "name": "formed_by_agent_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "source_app": { + "name": "source_app", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "source_ref": { + "name": "source_ref", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "source_link": { + "name": "source_link", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "observed_at": { + "name": "observed_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "intelligence_memory_id": { + "name": "intelligence_memory_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "intelligence_digest": { + "name": "intelligence_digest", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "personal_memories_owner_idx": { + "name": "personal_memories_owner_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "enabled", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "personal_memories_intelligence_idx": { + "name": "personal_memories_intelligence_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "intelligence_memory_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "personal_memories_formed_idx": { + "name": "personal_memories_formed_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "formed_by_agent_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "personal_memories_import_idx": { + "name": "personal_memories_import_idx", + "columns": [ + { + "expression": "source_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "external_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "concurrently": false, + "method": "btree", + "with": {} + }, + "personal_memories_formed_digest_idx": { + "name": "personal_memories_formed_digest_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "import_digest", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "where": "\"personal_memories\".\"formed_by\" = 'bot'", + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "personal_memories_owner_user_id_users_id_fk": { + "name": "personal_memories_owner_user_id_users_id_fk", + "tableFrom": "personal_memories", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "personal_memories_source_id_memory_sources_id_fk": { + "name": "personal_memories_source_id_memory_sources_id_fk", + "tableFrom": "personal_memories", + "tableTo": "memory_sources", + "columnsFrom": [ + "source_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "personal_memories_formed_by_agent_id_agents_id_fk": { + "name": "personal_memories_formed_by_agent_id_agents_id_fk", + "tableFrom": "personal_memories", + "tableTo": "agents", + "columnsFrom": [ + "formed_by_agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.default_opt_outs": { + "name": "default_opt_outs", + "schema": "", + "columns": { + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "feature": { + "name": "feature", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "scope": { + "name": "scope", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "''" + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "default_opt_outs_owner_user_id_users_id_fk": { + "name": "default_opt_outs_owner_user_id_users_id_fk", + "tableFrom": "default_opt_outs", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "default_opt_outs_agent_id_agents_id_fk": { + "name": "default_opt_outs_agent_id_agents_id_fk", + "tableFrom": "default_opt_outs", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "default_opt_outs_owner_user_id_agent_id_feature_scope_pk": { + "name": "default_opt_outs_owner_user_id_agent_id_feature_scope_pk", + "columns": [ + "owner_user_id", + "agent_id", + "feature", + "scope" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "default_opt_outs_feature_check": { + "name": "default_opt_outs_feature_check", + "value": "\"default_opt_outs\".\"feature\" IN ('memory_source', 'proactive_research')" + } + }, + "isRLSEnabled": false + }, + "public.proactive_settings": { + "name": "proactive_settings", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "channel_id": { + "name": "channel_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "thread_id": { + "name": "thread_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "focus": { + "name": "focus", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "''" + }, + "enabled": { + "name": "enabled", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": true + }, + "interval_minutes": { + "name": "interval_minutes", + "type": "integer", + "primaryKey": false, + "notNull": true, + "default": 240 + }, + "next_run_at": { + "name": "next_run_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "last_run_at": { + "name": "last_run_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "last_status": { + "name": "last_status", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'idle'" + }, + "last_error": { + "name": "last_error", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "proactive_settings_owner_agent_idx": { + "name": "proactive_settings_owner_agent_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "agent_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "concurrently": false, + "method": "btree", + "with": {} + }, + "proactive_settings_due_idx": { + "name": "proactive_settings_due_idx", + "columns": [ + { + "expression": "enabled", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "next_run_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "proactive_settings_owner_user_id_users_id_fk": { + "name": "proactive_settings_owner_user_id_users_id_fk", + "tableFrom": "proactive_settings", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "proactive_settings_agent_id_agents_id_fk": { + "name": "proactive_settings_agent_id_agents_id_fk", + "tableFrom": "proactive_settings", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "proactive_settings_interval_check": { + "name": "proactive_settings_interval_check", + "value": "\"proactive_settings\".\"interval_minutes\" >= 60 AND \"proactive_settings\".\"interval_minutes\" <= 1440" + }, + "proactive_settings_status_check": { + "name": "proactive_settings_status_check", + "value": "\"proactive_settings\".\"last_status\" IN ('idle', 'running', 'succeeded', 'error')" + } + }, + "isRLSEnabled": false + }, + "public.proactive_suggestions": { + "name": "proactive_suggestions", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "setting_id": { + "name": "setting_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "run_id": { + "name": "run_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "title": { + "name": "title", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "detail": { + "name": "detail", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "source_app": { + "name": "source_app", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "source_ref": { + "name": "source_ref", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "source_link": { + "name": "source_link", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "status": { + "name": "status", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'open'" + }, + "delivered_at": { + "name": "delivered_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "resolved_at": { + "name": "resolved_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "proactive_suggestions_owner_idx": { + "name": "proactive_suggestions_owner_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "status", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "created_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "proactive_suggestions_run_idx": { + "name": "proactive_suggestions_run_idx", + "columns": [ + { + "expression": "run_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "proactive_suggestions_owner_user_id_users_id_fk": { + "name": "proactive_suggestions_owner_user_id_users_id_fk", + "tableFrom": "proactive_suggestions", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "proactive_suggestions_agent_id_agents_id_fk": { + "name": "proactive_suggestions_agent_id_agents_id_fk", + "tableFrom": "proactive_suggestions", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "proactive_suggestions_setting_id_proactive_settings_id_fk": { + "name": "proactive_suggestions_setting_id_proactive_settings_id_fk", + "tableFrom": "proactive_suggestions", + "tableTo": "proactive_settings", + "columnsFrom": [ + "setting_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "proactive_suggestions_status_check": { + "name": "proactive_suggestions_status_check", + "value": "\"proactive_suggestions\".\"status\" IN ('open', 'dismissed', 'started')" + } + }, + "isRLSEnabled": false + }, + "public.demonstrations": { + "name": "demonstrations", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "bot_id": { + "name": "bot_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "title": { + "name": "title", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "status": { + "name": "status", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'recording'" + }, + "actions": { + "name": "actions", + "type": "jsonb", + "primaryKey": false, + "notNull": true, + "default": "'[]'::jsonb" + }, + "draft": { + "name": "draft", + "type": "jsonb", + "primaryKey": false, + "notNull": false + }, + "skill_slug": { + "name": "skill_slug", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "finished_at": { + "name": "finished_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + } + }, + "indexes": { + "demonstrations_owner_idx": { + "name": "demonstrations_owner_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "created_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "demonstrations_active_bot_idx": { + "name": "demonstrations_active_bot_idx", + "columns": [ + { + "expression": "bot_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "where": "\"demonstrations\".\"status\" = 'recording'", + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "demonstrations_owner_user_id_users_id_fk": { + "name": "demonstrations_owner_user_id_users_id_fk", + "tableFrom": "demonstrations", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "demonstrations_bot_id_agents_id_fk": { + "name": "demonstrations_bot_id_agents_id_fk", + "tableFrom": "demonstrations", + "tableTo": "agents", + "columnsFrom": [ + "bot_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.delivery_bindings": { + "name": "delivery_bindings", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "channel_id": { + "name": "channel_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "thread_id": { + "name": "thread_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "transport": { + "name": "transport", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "identity": { + "name": "identity", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "realm": { + "name": "realm", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "address": { + "name": "address", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "mention_id": { + "name": "mention_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "enabled": { + "name": "enabled", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": true + }, + "opted_out_at": { + "name": "opted_out_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "delivery_binding_identity_idx": { + "name": "delivery_binding_identity_idx", + "columns": [ + { + "expression": "transport", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "realm", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "identity", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "concurrently": false, + "method": "btree", + "with": {} + }, + "delivery_bindings_owner_idx": { + "name": "delivery_bindings_owner_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "delivery_bindings_owner_user_id_users_id_fk": { + "name": "delivery_bindings_owner_user_id_users_id_fk", + "tableFrom": "delivery_bindings", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "delivery_bindings_channel_id_channels_id_fk": { + "name": "delivery_bindings_channel_id_channels_id_fk", + "tableFrom": "delivery_bindings", + "tableTo": "channels", + "columnsFrom": [ + "channel_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "delivery_bindings_agent_id_agents_id_fk": { + "name": "delivery_bindings_agent_id_agents_id_fk", + "tableFrom": "delivery_bindings", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.delivery_challenges": { + "name": "delivery_challenges", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "channel_id": { + "name": "channel_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "thread_id": { + "name": "thread_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "transport": { + "name": "transport", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "address": { + "name": "address", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "expires_at": { + "name": "expires_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + }, + "consumed_at": { + "name": "consumed_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "delivery_challenges_owner_user_id_users_id_fk": { + "name": "delivery_challenges_owner_user_id_users_id_fk", + "tableFrom": "delivery_challenges", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "delivery_challenges_channel_id_channels_id_fk": { + "name": "delivery_challenges_channel_id_channels_id_fk", + "tableFrom": "delivery_challenges", + "tableTo": "channels", + "columnsFrom": [ + "channel_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "delivery_challenges_agent_id_agents_id_fk": { + "name": "delivery_challenges_agent_id_agents_id_fk", + "tableFrom": "delivery_challenges", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.delivery_inbox": { + "name": "delivery_inbox", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "channel_id": { + "name": "channel_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "thread_id": { + "name": "thread_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "binding_id": { + "name": "binding_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "source": { + "name": "source", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "realm": { + "name": "realm", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "external_id": { + "name": "external_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "text": { + "name": "text", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "state": { + "name": "state", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'queued'" + }, + "error": { + "name": "error", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "delivery_inbox_dedupe_idx": { + "name": "delivery_inbox_dedupe_idx", + "columns": [ + { + "expression": "source", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "realm", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "external_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "concurrently": false, + "method": "btree", + "with": {} + }, + "delivery_inbox_owner_idx": { + "name": "delivery_inbox_owner_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "created_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "delivery_inbox_owner_user_id_users_id_fk": { + "name": "delivery_inbox_owner_user_id_users_id_fk", + "tableFrom": "delivery_inbox", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "delivery_inbox_channel_id_channels_id_fk": { + "name": "delivery_inbox_channel_id_channels_id_fk", + "tableFrom": "delivery_inbox", + "tableTo": "channels", + "columnsFrom": [ + "channel_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "delivery_inbox_agent_id_agents_id_fk": { + "name": "delivery_inbox_agent_id_agents_id_fk", + "tableFrom": "delivery_inbox", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.delivery_outbox": { + "name": "delivery_outbox", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "channel_id": { + "name": "channel_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "thread_id": { + "name": "thread_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "dedupe_key": { + "name": "dedupe_key", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "binding_id": { + "name": "binding_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "device_id": { + "name": "device_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "transport": { + "name": "transport", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "text": { + "name": "text", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "kind": { + "name": "kind", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "request_id": { + "name": "request_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "state": { + "name": "state", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'queued'" + }, + "provider_id": { + "name": "provider_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "error": { + "name": "error", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "delivery_outbox_owner_idx": { + "name": "delivery_outbox_owner_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "created_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "delivery_outbox_provider_idx": { + "name": "delivery_outbox_provider_idx", + "columns": [ + { + "expression": "transport", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "provider_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "delivery_outbox_owner_user_id_users_id_fk": { + "name": "delivery_outbox_owner_user_id_users_id_fk", + "tableFrom": "delivery_outbox", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "delivery_outbox_channel_id_channels_id_fk": { + "name": "delivery_outbox_channel_id_channels_id_fk", + "tableFrom": "delivery_outbox", + "tableTo": "channels", + "columnsFrom": [ + "channel_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "delivery_outbox_agent_id_agents_id_fk": { + "name": "delivery_outbox_agent_id_agents_id_fk", + "tableFrom": "delivery_outbox", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": { + "delivery_outbox_dedupe_key_unique": { + "name": "delivery_outbox_dedupe_key_unique", + "nullsNotDistinct": false, + "columns": [ + "dedupe_key" + ] + } + }, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.push_devices": { + "name": "push_devices", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "token": { + "name": "token", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "project_id": { + "name": "project_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "platform": { + "name": "platform", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "enabled": { + "name": "enabled", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "push_devices_owner_idx": { + "name": "push_devices_owner_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "push_devices_owner_user_id_users_id_fk": { + "name": "push_devices_owner_user_id_users_id_fk", + "tableFrom": "push_devices", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": { + "push_devices_token_unique": { + "name": "push_devices_token_unique", + "nullsNotDistinct": false, + "columns": [ + "token" + ] + } + }, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.group_bot_threads": { + "name": "group_bot_threads", + "schema": "", + "columns": { + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "channel_id": { + "name": "channel_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "thread_id": { + "name": "thread_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "group_bot_threads_thread_idx": { + "name": "group_bot_threads_thread_idx", + "columns": [ + { + "expression": "thread_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "group_bot_threads_owner_user_id_users_id_fk": { + "name": "group_bot_threads_owner_user_id_users_id_fk", + "tableFrom": "group_bot_threads", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "group_bot_threads_channel_id_channels_id_fk": { + "name": "group_bot_threads_channel_id_channels_id_fk", + "tableFrom": "group_bot_threads", + "tableTo": "channels", + "columnsFrom": [ + "channel_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "group_bot_threads_owner_user_id_channel_id_agent_id_pk": { + "name": "group_bot_threads_owner_user_id_channel_id_agent_id_pk", + "columns": [ + "owner_user_id", + "channel_id", + "agent_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.group_messages": { + "name": "group_messages", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "channel_id": { + "name": "channel_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "thread_id": { + "name": "thread_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "text": { + "name": "text", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "status": { + "name": "status", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'completed'" + }, + "details": { + "name": "details", + "type": "jsonb", + "primaryKey": false, + "notNull": true, + "default": "'{}'::jsonb" + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "group_messages_channel_idx": { + "name": "group_messages_channel_idx", + "columns": [ + { + "expression": "channel_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "created_at", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "group_messages_channel_id_channels_id_fk": { + "name": "group_messages_channel_id_channels_id_fk", + "tableFrom": "group_messages", + "tableTo": "channels", + "columnsFrom": [ + "channel_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "group_messages_owner_user_id_users_id_fk": { + "name": "group_messages_owner_user_id_users_id_fk", + "tableFrom": "group_messages", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "group_messages_status_check": { + "name": "group_messages_status_check", + "value": "\"group_messages\".\"status\" IN ('queued', 'running', 'waiting', 'completed', 'failed')" + } + }, + "isRLSEnabled": false + }, + "public.action_records": { + "name": "action_records", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "uuid", + "primaryKey": true, + "notNull": true, + "default": "gen_random_uuid()" + }, + "surface": { + "name": "surface", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "bot_id": { + "name": "bot_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "actor_user_id": { + "name": "actor_user_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "tool_name": { + "name": "tool_name", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "command": { + "name": "command", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "outcome": { + "name": "outcome", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "action_records_created_idx": { + "name": "action_records_created_idx", + "columns": [ + { + "expression": "created_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "action_records_bot_idx": { + "name": "action_records_bot_idx", + "columns": [ + { + "expression": "bot_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "created_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "action_records_surface_check": { + "name": "action_records_surface_check", + "value": "\"action_records\".\"surface\" IN ('cloud', 'local')" + } + }, + "isRLSEnabled": false + }, + "public.capability_settings": { + "name": "capability_settings", + "schema": "", + "columns": { + "scope_kind": { + "name": "scope_kind", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "scope_id": { + "name": "scope_id", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "''" + }, + "capability": { + "name": "capability", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "allowed": { + "name": "allowed", + "type": "boolean", + "primaryKey": false, + "notNull": true + }, + "updated_by": { + "name": "updated_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": {}, + "compositePrimaryKeys": { + "capability_settings_scope_kind_scope_id_capability_pk": { + "name": "capability_settings_scope_kind_scope_id_capability_pk", + "columns": [ + "scope_kind", + "scope_id", + "capability" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "capability_settings_scope_kind_check": { + "name": "capability_settings_scope_kind_check", + "value": "\"capability_settings\".\"scope_kind\" IN ('organization', 'role', 'group')" + } + }, + "isRLSEnabled": false + }, + "public.enterprise_settings": { + "name": "enterprise_settings", + "schema": "", + "columns": { + "key": { + "name": "key", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "value": { + "name": "value", + "type": "jsonb", + "primaryKey": false, + "notNull": true + }, + "updated_by": { + "name": "updated_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.model_usage": { + "name": "model_usage", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "uuid", + "primaryKey": true, + "notNull": true, + "default": "gen_random_uuid()" + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "thread_id": { + "name": "thread_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "run_id": { + "name": "run_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "model": { + "name": "model", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "source": { + "name": "source", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "allowed": { + "name": "allowed", + "type": "boolean", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "model_usage_created_idx": { + "name": "model_usage_created_idx", + "columns": [ + { + "expression": "created_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "model_usage_model_idx": { + "name": "model_usage_model_idx", + "columns": [ + { + "expression": "model", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "created_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "model_usage_source_check": { + "name": "model_usage_source_check", + "value": "\"model_usage\".\"source\" IN ('configured', 'observed', 'unknown')" + } + }, + "isRLSEnabled": false + }, + "public.network_policies": { + "name": "network_policies", + "schema": "", + "columns": { + "scope_kind": { + "name": "scope_kind", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "scope_id": { + "name": "scope_id", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "''" + }, + "mode": { + "name": "mode", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "rules": { + "name": "rules", + "type": "jsonb", + "primaryKey": false, + "notNull": true, + "default": "'{\"entries\":[]}'::jsonb" + }, + "locked": { + "name": "locked", + "type": "boolean", + "primaryKey": false, + "notNull": true, + "default": false + }, + "updated_by": { + "name": "updated_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": {}, + "compositePrimaryKeys": { + "network_policies_scope_kind_scope_id_pk": { + "name": "network_policies_scope_kind_scope_id_pk", + "columns": [ + "scope_kind", + "scope_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "network_policies_scope_kind_check": { + "name": "network_policies_scope_kind_check", + "value": "\"network_policies\".\"scope_kind\" IN ('organization', 'group')" + }, + "network_policies_mode_check": { + "name": "network_policies_mode_check", + "value": "\"network_policies\".\"mode\" IN ('allow_all', 'defaults_plus_allowlist', 'allowlist_only')" + } + }, + "isRLSEnabled": false + }, + "public.scim_connection_bindings": { + "name": "scim_connection_bindings", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "connection_id": { + "name": "connection_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "connection_key": { + "name": "connection_key", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "provisioning_domain_id": { + "name": "provisioning_domain_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + }, + "decommissioned_at": { + "name": "decommissioned_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "decommission_status": { + "name": "decommission_status", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'active'" + }, + "decommission_cursor_user_id": { + "name": "decommission_cursor_user_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "decommission_reconciled_user_count": { + "name": "decommission_reconciled_user_count", + "type": "integer", + "primaryKey": false, + "notNull": true, + "default": 0 + }, + "decommission_batch_count": { + "name": "decommission_batch_count", + "type": "integer", + "primaryKey": false, + "notNull": true, + "default": 0 + }, + "decommission_revision": { + "name": "decommission_revision", + "type": "integer", + "primaryKey": false, + "notNull": true, + "default": 0 + }, + "decommission_completed_at": { + "name": "decommission_completed_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "decommission_lease_id": { + "name": "decommission_lease_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "decommission_lease_expires_at": { + "name": "decommission_lease_expires_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + } + }, + "indexes": { + "scim_connection_bindings_connection_idx": { + "name": "scim_connection_bindings_connection_idx", + "columns": [ + { + "expression": "connection_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": { + "scim_connection_bindings_connection_key_unique": { + "name": "scim_connection_bindings_connection_key_unique", + "nullsNotDistinct": false, + "columns": [ + "connection_key" + ] + } + }, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.scim_group_members": { + "name": "scim_group_members", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "connection_id": { + "name": "connection_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "group_id": { + "name": "group_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "scim_user_id": { + "name": "scim_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "membership_key": { + "name": "membership_key", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + } + }, + "indexes": { + "scim_group_members_connection_idx": { + "name": "scim_group_members_connection_idx", + "columns": [ + { + "expression": "connection_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "scim_group_members_group_idx": { + "name": "scim_group_members_group_idx", + "columns": [ + { + "expression": "group_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "scim_group_members_scim_user_idx": { + "name": "scim_group_members_scim_user_idx", + "columns": [ + { + "expression": "scim_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "scim_group_members_group_id_scim_groups_id_fk": { + "name": "scim_group_members_group_id_scim_groups_id_fk", + "tableFrom": "scim_group_members", + "tableTo": "scim_groups", + "columnsFrom": [ + "group_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "scim_group_members_scim_user_id_scim_users_id_fk": { + "name": "scim_group_members_scim_user_id_scim_users_id_fk", + "tableFrom": "scim_group_members", + "tableTo": "scim_users", + "columnsFrom": [ + "scim_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": { + "scim_group_members_membership_key_unique": { + "name": "scim_group_members_membership_key_unique", + "nullsNotDistinct": false, + "columns": [ + "membership_key" + ] + } + }, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.scim_groups": { + "name": "scim_groups", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "connection_id": { + "name": "connection_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "provisioning_domain_id": { + "name": "provisioning_domain_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "revision": { + "name": "revision", + "type": "integer", + "primaryKey": false, + "notNull": true, + "default": 0 + }, + "display_name": { + "name": "display_name", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "display_name_key": { + "name": "display_name_key", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "external_id": { + "name": "external_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "external_id_key": { + "name": "external_id_key", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "order_key": { + "name": "order_key", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + } + }, + "indexes": { + "scim_groups_connection_idx": { + "name": "scim_groups_connection_idx", + "columns": [ + { + "expression": "connection_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "scim_groups_domain_idx": { + "name": "scim_groups_domain_idx", + "columns": [ + { + "expression": "provisioning_domain_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": { + "scim_groups_display_name_key_unique": { + "name": "scim_groups_display_name_key_unique", + "nullsNotDistinct": false, + "columns": [ + "display_name_key" + ] + }, + "scim_groups_external_id_key_unique": { + "name": "scim_groups_external_id_key_unique", + "nullsNotDistinct": false, + "columns": [ + "external_id_key" + ] + }, + "scim_groups_order_key_unique": { + "name": "scim_groups_order_key_unique", + "nullsNotDistinct": false, + "columns": [ + "order_key" + ] + } + }, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.scim_identity_tombstones": { + "name": "scim_identity_tombstones", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "connection_id": { + "name": "connection_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "provisioning_domain_id": { + "name": "provisioning_domain_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "external_id": { + "name": "external_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "external_id_key": { + "name": "external_id_key", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "profile": { + "name": "profile", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "deleted_at": { + "name": "deleted_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + } + }, + "indexes": { + "scim_identity_tombstones_connection_idx": { + "name": "scim_identity_tombstones_connection_idx", + "columns": [ + { + "expression": "connection_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "scim_identity_tombstones_domain_idx": { + "name": "scim_identity_tombstones_domain_idx", + "columns": [ + { + "expression": "provisioning_domain_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "scim_identity_tombstones_user_idx": { + "name": "scim_identity_tombstones_user_idx", + "columns": [ + { + "expression": "user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "scim_identity_tombstones_user_id_users_id_fk": { + "name": "scim_identity_tombstones_user_id_users_id_fk", + "tableFrom": "scim_identity_tombstones", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": { + "scim_identity_tombstones_external_id_key_unique": { + "name": "scim_identity_tombstones_external_id_key_unique", + "nullsNotDistinct": false, + "columns": [ + "external_id_key" + ] + } + }, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.scim_projection_grants": { + "name": "scim_projection_grants", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "connection_id": { + "name": "connection_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "provisioning_domain_id": { + "name": "provisioning_domain_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "scim_user_id": { + "name": "scim_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "source_kind": { + "name": "source_kind", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "source_id": { + "name": "source_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "source_value": { + "name": "source_value", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "role": { + "name": "role", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "grant_key": { + "name": "grant_key", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + } + }, + "indexes": { + "scim_projection_grants_connection_idx": { + "name": "scim_projection_grants_connection_idx", + "columns": [ + { + "expression": "connection_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "scim_projection_grants_domain_idx": { + "name": "scim_projection_grants_domain_idx", + "columns": [ + { + "expression": "provisioning_domain_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "scim_projection_grants_scim_user_idx": { + "name": "scim_projection_grants_scim_user_idx", + "columns": [ + { + "expression": "scim_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "scim_projection_grants_user_idx": { + "name": "scim_projection_grants_user_idx", + "columns": [ + { + "expression": "user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "scim_projection_grants_scim_user_id_scim_users_id_fk": { + "name": "scim_projection_grants_scim_user_id_scim_users_id_fk", + "tableFrom": "scim_projection_grants", + "tableTo": "scim_users", + "columnsFrom": [ + "scim_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "scim_projection_grants_user_id_users_id_fk": { + "name": "scim_projection_grants_user_id_users_id_fk", + "tableFrom": "scim_projection_grants", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": { + "scim_projection_grants_grant_key_unique": { + "name": "scim_projection_grants_grant_key_unique", + "nullsNotDistinct": false, + "columns": [ + "grant_key" + ] + } + }, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.scim_subjects": { + "name": "scim_subjects", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "profile_source_id": { + "name": "profile_source_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "revision": { + "name": "revision", + "type": "integer", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + } + }, + "indexes": { + "scim_subjects_profile_source_idx": { + "name": "scim_subjects_profile_source_idx", + "columns": [ + { + "expression": "profile_source_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "scim_subjects_user_id_users_id_fk": { + "name": "scim_subjects_user_id_users_id_fk", + "tableFrom": "scim_subjects", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": { + "scim_subjects_user_id_unique": { + "name": "scim_subjects_user_id_unique", + "nullsNotDistinct": false, + "columns": [ + "user_id" + ] + } + }, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.scim_users": { + "name": "scim_users", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "connection_id": { + "name": "connection_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "provisioning_domain_id": { + "name": "provisioning_domain_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "connection_user_key": { + "name": "connection_user_key", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "user_name": { + "name": "user_name", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "user_name_key": { + "name": "user_name_key", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "primary_email": { + "name": "primary_email", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "work_email_value_index": { + "name": "work_email_value_index", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "email_value_index": { + "name": "email_value_index", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "display_name": { + "name": "display_name", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "formatted_name": { + "name": "formatted_name", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "given_name": { + "name": "given_name", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "family_name": { + "name": "family_name", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "serialized_emails": { + "name": "serialized_emails", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "serialized_attributes": { + "name": "serialized_attributes", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "external_id": { + "name": "external_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "external_id_key": { + "name": "external_id_key", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "active": { + "name": "active", + "type": "boolean", + "primaryKey": false, + "notNull": true + }, + "order_key": { + "name": "order_key", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + } + }, + "indexes": { + "scim_users_connection_idx": { + "name": "scim_users_connection_idx", + "columns": [ + { + "expression": "connection_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "scim_users_domain_idx": { + "name": "scim_users_domain_idx", + "columns": [ + { + "expression": "provisioning_domain_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "scim_users_user_idx": { + "name": "scim_users_user_idx", + "columns": [ + { + "expression": "user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "scim_users_user_id_users_id_fk": { + "name": "scim_users_user_id_users_id_fk", + "tableFrom": "scim_users", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": { + "scim_users_connection_user_key_unique": { + "name": "scim_users_connection_user_key_unique", + "nullsNotDistinct": false, + "columns": [ + "connection_user_key" + ] + }, + "scim_users_user_name_key_unique": { + "name": "scim_users_user_name_key_unique", + "nullsNotDistinct": false, + "columns": [ + "user_name_key" + ] + }, + "scim_users_external_id_key_unique": { + "name": "scim_users_external_id_key_unique", + "nullsNotDistinct": false, + "columns": [ + "external_id_key" + ] + }, + "scim_users_order_key_unique": { + "name": "scim_users_order_key_unique", + "nullsNotDistinct": false, + "columns": [ + "order_key" + ] + } + }, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.bot_lifecycle": { + "name": "bot_lifecycle", + "schema": "", + "columns": { + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "paused_at": { + "name": "paused_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "notify": { + "name": "notify", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'all'" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "bot_lifecycle_owner_user_id_users_id_fk": { + "name": "bot_lifecycle_owner_user_id_users_id_fk", + "tableFrom": "bot_lifecycle", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "bot_lifecycle_agent_id_agents_id_fk": { + "name": "bot_lifecycle_agent_id_agents_id_fk", + "tableFrom": "bot_lifecycle", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "bot_lifecycle_owner_user_id_agent_id_pk": { + "name": "bot_lifecycle_owner_user_id_agent_id_pk", + "columns": [ + "owner_user_id", + "agent_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.update_routing_preferences": { + "name": "update_routing_preferences", + "schema": "", + "columns": { + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "kind": { + "name": "kind", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "transports": { + "name": "transports", + "type": "text[]", + "primaryKey": false, + "notNull": true, + "default": "'{}'" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "update_routing_preferences_owner_user_id_users_id_fk": { + "name": "update_routing_preferences_owner_user_id_users_id_fk", + "tableFrom": "update_routing_preferences", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "update_routing_preferences_owner_user_id_kind_pk": { + "name": "update_routing_preferences_owner_user_id_kind_pk", + "columns": [ + "owner_user_id", + "kind" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.saved_logins": { + "name": "saved_logins", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "origin": { + "name": "origin", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "username": { + "name": "username", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "encrypted_password": { + "name": "encrypted_password", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "last_used_at": { + "name": "last_used_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + } + }, + "indexes": { + "saved_logins_owner_origin_username_idx": { + "name": "saved_logins_owner_origin_username_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "origin", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "username", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "concurrently": false, + "method": "btree", + "with": {} + }, + "saved_logins_owner_idx": { + "name": "saved_logins_owner_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "saved_logins_owner_user_id_users_id_fk": { + "name": "saved_logins_owner_user_id_users_id_fk", + "tableFrom": "saved_logins", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.sign_in_requests": { + "name": "sign_in_requests", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "owner_user_id": { + "name": "owner_user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "bot_id": { + "name": "bot_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "origin": { + "name": "origin", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "reason": { + "name": "reason", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "status": { + "name": "status", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'pending'" + }, + "method": { + "name": "method", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "outcome": { + "name": "outcome", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "thread_id": { + "name": "thread_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "tool_call_id": { + "name": "tool_call_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "control_request_id": { + "name": "control_request_id", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "continuation": { + "name": "continuation", + "type": "jsonb", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "expires_at": { + "name": "expires_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + }, + "resolved_at": { + "name": "resolved_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "filling_until": { + "name": "filling_until", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + } + }, + "indexes": { + "sign_in_requests_owner_idx": { + "name": "sign_in_requests_owner_idx", + "columns": [ + { + "expression": "owner_user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "status", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "sign_in_requests_owner_user_id_users_id_fk": { + "name": "sign_in_requests_owner_user_id_users_id_fk", + "tableFrom": "sign_in_requests", + "tableTo": "users", + "columnsFrom": [ + "owner_user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "sign_in_requests_status_check": { + "name": "sign_in_requests_status_check", + "value": "\"sign_in_requests\".\"status\" IN ('pending', 'filling', 'code_required', 'taken_over', 'signed_in', 'failed', 'cancelled', 'expired')" + }, + "sign_in_requests_method_check": { + "name": "sign_in_requests_method_check", + "value": "\"sign_in_requests\".\"method\" IS NULL OR \"sign_in_requests\".\"method\" IN ('typed', 'saved', 'takeover')" + } + }, + "isRLSEnabled": false + }, + "public.team_bot_assignments": { + "name": "team_bot_assignments", + "schema": "", + "columns": { + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "group_name": { + "name": "group_name", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "assigned_by": { + "name": "assigned_by", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "assigned_at": { + "name": "assigned_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "team_bot_assignments_agent_id_agents_id_fk": { + "name": "team_bot_assignments_agent_id_agents_id_fk", + "tableFrom": "team_bot_assignments", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "team_bot_assignments_assigned_by_users_id_fk": { + "name": "team_bot_assignments_assigned_by_users_id_fk", + "tableFrom": "team_bot_assignments", + "tableTo": "users", + "columnsFrom": [ + "assigned_by" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "team_bot_assignments_agent_id_group_name_pk": { + "name": "team_bot_assignments_agent_id_group_name_pk", + "columns": [ + "agent_id", + "group_name" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.team_bot_audience": { + "name": "team_bot_audience", + "schema": "", + "columns": { + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "kind": { + "name": "kind", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "value": { + "name": "value", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "team_bot_audience_agent_id_agents_id_fk": { + "name": "team_bot_audience_agent_id_agents_id_fk", + "tableFrom": "team_bot_audience", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "team_bot_audience_agent_id_kind_value_pk": { + "name": "team_bot_audience_agent_id_kind_value_pk", + "columns": [ + "agent_id", + "kind", + "value" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "team_bot_audience_kind_check": { + "name": "team_bot_audience_kind_check", + "value": "\"team_bot_audience\".\"kind\" IN ('user', 'group')" + } + }, + "isRLSEnabled": false + }, + "public.team_bot_consent_defaults": { + "name": "team_bot_consent_defaults", + "schema": "", + "columns": { + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "server_id": { + "name": "server_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "team_bot_consent_defaults_user_id_users_id_fk": { + "name": "team_bot_consent_defaults_user_id_users_id_fk", + "tableFrom": "team_bot_consent_defaults", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "team_bot_consent_defaults_user_id_server_id_pk": { + "name": "team_bot_consent_defaults_user_id_server_id_pk", + "columns": [ + "user_id", + "server_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.team_bot_consents": { + "name": "team_bot_consents", + "schema": "", + "columns": { + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "server_id": { + "name": "server_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "decision": { + "name": "decision", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "team_bot_consents_user_id_users_id_fk": { + "name": "team_bot_consents_user_id_users_id_fk", + "tableFrom": "team_bot_consents", + "tableTo": "users", + "columnsFrom": [ + "user_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "team_bot_consents_agent_id_agents_id_fk": { + "name": "team_bot_consents_agent_id_agents_id_fk", + "tableFrom": "team_bot_consents", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "team_bot_consents_user_id_agent_id_server_id_pk": { + "name": "team_bot_consents_user_id_agent_id_server_id_pk", + "columns": [ + "user_id", + "agent_id", + "server_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "team_bot_consents_decision_check": { + "name": "team_bot_consents_decision_check", + "value": "\"team_bot_consents\".\"decision\" IN ('always', 'once')" + } + }, + "isRLSEnabled": false + }, + "public.team_bot_publications": { + "name": "team_bot_publications", + "schema": "", + "columns": { + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "published_by": { + "name": "published_by", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "audience": { + "name": "audience", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "published_at": { + "name": "published_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "team_bot_publications_agent_id_agents_id_fk": { + "name": "team_bot_publications_agent_id_agents_id_fk", + "tableFrom": "team_bot_publications", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "team_bot_publications_published_by_users_id_fk": { + "name": "team_bot_publications_published_by_users_id_fk", + "tableFrom": "team_bot_publications", + "tableTo": "users", + "columnsFrom": [ + "published_by" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "team_bot_publications_audience_check": { + "name": "team_bot_publications_audience_check", + "value": "\"team_bot_publications\".\"audience\" IN ('team', 'people')" + } + }, + "isRLSEnabled": false + }, + "public.shared_use_approval_members": { + "name": "shared_use_approval_members", + "schema": "", + "columns": { + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "server_id": { + "name": "server_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "kind": { + "name": "kind", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "value": { + "name": "value", + "type": "text", + "primaryKey": false, + "notNull": true + } + }, + "indexes": {}, + "foreignKeys": { + "shared_use_approval_members_approval_fk": { + "name": "shared_use_approval_members_approval_fk", + "tableFrom": "shared_use_approval_members", + "tableTo": "shared_use_approvals", + "columnsFrom": [ + "agent_id", + "server_id" + ], + "columnsTo": [ + "agent_id", + "server_id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "shared_use_approval_members_agent_id_server_id_kind_value_pk": { + "name": "shared_use_approval_members_agent_id_server_id_kind_value_pk", + "columns": [ + "agent_id", + "server_id", + "kind", + "value" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "shared_use_approval_members_kind_check": { + "name": "shared_use_approval_members_kind_check", + "value": "\"shared_use_approval_members\".\"kind\" IN ('user', 'group')" + } + }, + "isRLSEnabled": false + }, + "public.shared_use_approvals": { + "name": "shared_use_approvals", + "schema": "", + "columns": { + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "server_id": { + "name": "server_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "audience": { + "name": "audience", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "outside_input": { + "name": "outside_input", + "type": "boolean", + "primaryKey": false, + "notNull": true + }, + "approved_by": { + "name": "approved_by", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "approved_at": { + "name": "approved_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": {}, + "foreignKeys": { + "shared_use_approvals_agent_id_agents_id_fk": { + "name": "shared_use_approvals_agent_id_agents_id_fk", + "tableFrom": "shared_use_approvals", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "shared_use_approvals_server_id_mcp_servers_id_fk": { + "name": "shared_use_approvals_server_id_mcp_servers_id_fk", + "tableFrom": "shared_use_approvals", + "tableTo": "mcp_servers", + "columnsFrom": [ + "server_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": { + "shared_use_approvals_agent_id_server_id_pk": { + "name": "shared_use_approvals_agent_id_server_id_pk", + "columns": [ + "agent_id", + "server_id" + ] + } + }, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "shared_use_approvals_audience_check": { + "name": "shared_use_approvals_audience_check", + "value": "\"shared_use_approvals\".\"audience\" IN ('owner', 'people', 'team')" + } + }, + "isRLSEnabled": false + }, + "public.shared_use_requests": { + "name": "shared_use_requests", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "agent_id": { + "name": "agent_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "server_id": { + "name": "server_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "proposed_audience": { + "name": "proposed_audience", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "proposed_outside_input": { + "name": "proposed_outside_input", + "type": "boolean", + "primaryKey": false, + "notNull": true + }, + "proposed_members": { + "name": "proposed_members", + "type": "jsonb", + "primaryKey": false, + "notNull": true, + "default": "'[]'::jsonb" + }, + "reason": { + "name": "reason", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "requested_by": { + "name": "requested_by", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "status": { + "name": "status", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'pending'" + }, + "decided_by": { + "name": "decided_by", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "decided_at": { + "name": "decided_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": false + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "shared_use_requests_pending_idx": { + "name": "shared_use_requests_pending_idx", + "columns": [ + { + "expression": "agent_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "server_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "where": "\"shared_use_requests\".\"status\" = 'pending'", + "concurrently": false, + "method": "btree", + "with": {} + }, + "shared_use_requests_status_idx": { + "name": "shared_use_requests_status_idx", + "columns": [ + { + "expression": "status", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "shared_use_requests_agent_id_agents_id_fk": { + "name": "shared_use_requests_agent_id_agents_id_fk", + "tableFrom": "shared_use_requests", + "tableTo": "agents", + "columnsFrom": [ + "agent_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + }, + "shared_use_requests_server_id_mcp_servers_id_fk": { + "name": "shared_use_requests_server_id_mcp_servers_id_fk", + "tableFrom": "shared_use_requests", + "tableTo": "mcp_servers", + "columnsFrom": [ + "server_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "cascade", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "shared_use_requests_audience_check": { + "name": "shared_use_requests_audience_check", + "value": "\"shared_use_requests\".\"proposed_audience\" IN ('owner', 'people', 'team')" + }, + "shared_use_requests_reason_check": { + "name": "shared_use_requests_reason_check", + "value": "\"shared_use_requests\".\"reason\" IN ('publish', 'trigger', 'grant', 'refused_call')" + }, + "shared_use_requests_status_check": { + "name": "shared_use_requests_status_check", + "value": "\"shared_use_requests\".\"status\" IN ('pending', 'approved', 'declined', 'superseded')" + } + }, + "isRLSEnabled": false + }, + "public.identity_link_challenges": { + "name": "identity_link_challenges", + "schema": "", + "columns": { + "token_hash": { + "name": "token_hash", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "provider": { + "name": "provider", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "expires_at": { + "name": "expires_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true + } + }, + "indexes": { + "identity_link_challenges_expiry_idx": { + "name": "identity_link_challenges_expiry_idx", + "columns": [ + { + "expression": "expires_at", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": false, + "concurrently": false, + "method": "btree", + "with": {} + }, + "identity_link_challenges_user_provider_idx": { + "name": "identity_link_challenges_user_provider_idx", + "columns": [ + { + "expression": "user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "provider", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": {}, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": {}, + "isRLSEnabled": false + }, + "public.identity_links": { + "name": "identity_links", + "schema": "", + "columns": { + "id": { + "name": "id", + "type": "text", + "primaryKey": true, + "notNull": true + }, + "provider": { + "name": "provider", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "realm": { + "name": "realm", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "subject": { + "name": "subject", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "user_id": { + "name": "user_id", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "handle": { + "name": "handle", + "type": "text", + "primaryKey": false, + "notNull": false + }, + "verified_by": { + "name": "verified_by", + "type": "text", + "primaryKey": false, + "notNull": true + }, + "credential_id": { + "name": "credential_id", + "type": "uuid", + "primaryKey": false, + "notNull": false + }, + "status": { + "name": "status", + "type": "text", + "primaryKey": false, + "notNull": true, + "default": "'active'" + }, + "created_at": { + "name": "created_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + }, + "updated_at": { + "name": "updated_at", + "type": "timestamp with time zone", + "primaryKey": false, + "notNull": true, + "default": "now()" + } + }, + "indexes": { + "identity_links_identity_idx": { + "name": "identity_links_identity_idx", + "columns": [ + { + "expression": "provider", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "realm", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "subject", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "concurrently": false, + "method": "btree", + "with": {} + }, + "identity_links_user_realm_idx": { + "name": "identity_links_user_realm_idx", + "columns": [ + { + "expression": "user_id", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "provider", + "isExpression": false, + "asc": true, + "nulls": "last" + }, + { + "expression": "realm", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "concurrently": false, + "method": "btree", + "with": {} + }, + "identity_links_credential_idx": { + "name": "identity_links_credential_idx", + "columns": [ + { + "expression": "credential_id", + "isExpression": false, + "asc": true, + "nulls": "last" + } + ], + "isUnique": true, + "where": "\"identity_links\".\"credential_id\" IS NOT NULL", + "concurrently": false, + "method": "btree", + "with": {} + } + }, + "foreignKeys": { + "identity_links_credential_id_credentials_id_fk": { + "name": "identity_links_credential_id_credentials_id_fk", + "tableFrom": "identity_links", + "tableTo": "credentials", + "columnsFrom": [ + "credential_id" + ], + "columnsTo": [ + "id" + ], + "onDelete": "no action", + "onUpdate": "no action" + } + }, + "compositePrimaryKeys": {}, + "uniqueConstraints": {}, + "policies": {}, + "checkConstraints": { + "identity_links_verified_by_check": { + "name": "identity_links_verified_by_check", + "value": "\"identity_links\".\"verified_by\" IN ('challenge', 'oauth')" + }, + "identity_links_status_check": { + "name": "identity_links_status_check", + "value": "\"identity_links\".\"status\" IN ('active', 'needs_reconnect')" + } + }, + "isRLSEnabled": false + } + }, + "enums": { + "public.agent_type": { + "name": "agent_type", + "schema": "public", + "values": [ + "built_in", + "remote_ag_ui", + "remote_mastra" + ] + }, + "public.credential_kind": { + "name": "credential_kind", + "schema": "public", + "values": [ + "model", + "connector", + "agent", + "mcp", + "mcp_oauth_client", + "mcp_user_token" + ] + }, + "public.role": { + "name": "role", + "schema": "public", + "values": [ + "admin", + "user" + ] + }, + "public.agent_visibility": { + "name": "agent_visibility", + "schema": "public", + "values": [ + "public", + "private" + ] + }, + "public.routine_run_status": { + "name": "routine_run_status", + "schema": "public", + "values": [ + "succeeded", + "failed", + "skipped", + "waiting" + ] + }, + "public.responsibility_run_status": { + "name": "responsibility_run_status", + "schema": "public", + "values": [ + "queued", + "running", + "waiting", + "succeeded", + "failed", + "skipped" + ] + }, + "public.responsibility_status": { + "name": "responsibility_status", + "schema": "public", + "values": [ + "active", + "paused", + "completed" + ] + } + }, + "schemas": {}, + "sequences": {}, + "roles": {}, + "policies": {}, + "views": {}, + "_meta": { + "columns": {}, + "schemas": {}, + "tables": {} + } +} \ No newline at end of file diff --git a/server/drizzle/meta/_journal.json b/server/drizzle/meta/_journal.json index 70e4dfa60..10108fb72 100644 --- a/server/drizzle/meta/_journal.json +++ b/server/drizzle/meta/_journal.json @@ -400,6 +400,55 @@ "when": 1791866936937, "tag": "0056_sign_in_code_step", "breakpoints": true + }, + { + "idx": 57, + "version": "7", + "when": 1791908858814, + "tag": "0057_arcade_provider", + "breakpoints": true + }, + { + "idx": 58, + "version": "7", + "when": 1791924168752, + "tag": "0058_pending_authorization_checks", + "breakpoints": true + }, + { + "idx": 59, + "version": "7", + "when": 1791942141206, + "tag": "0059_pending_authorization_completion_pair", + "breakpoints": true + }, + { + "idx": 60, + "version": "7", + "when": 1791943538845, + "tag": "0060_pending_authorization_person_keys", + "breakpoints": true + }, + { + "idx": 61, + "version": "7", + "when": 1791943598343, + "tag": "0061_settle_brokered_account_mode", + "breakpoints": true + }, + { + "idx": 62, + "version": "7", + "when": 1791994602603, + "tag": "0062_pending_authorization_user_is_actor", + "breakpoints": true + }, + { + "idx": 63, + "version": "7", + "when": 1792012124232, + "tag": "0063_mcp_tool_vendor_name", + "breakpoints": true } ] } \ No newline at end of file diff --git a/server/package.json b/server/package.json index df7114e93..175943146 100644 --- a/server/package.json +++ b/server/package.json @@ -7,7 +7,7 @@ "scripts": { "build": "tsc --noEmit", "db:generate": "bun --env-file=../.env drizzle-kit generate --config=drizzle.config.ts", - "db:migrate": "bun --env-file=../.env drizzle-kit migrate --config=drizzle.config.ts", + "db:migrate": "bun --env-file=../.env scripts/migrate.ts", "dev": "bun --env-file=../.env --watch src/index.ts", "typecheck": "tsc --noEmit" }, @@ -15,6 +15,7 @@ "@ag-ui/client": "1.0.1", "@ag-ui/core": "1.0.1", "@ag-ui/mastra": "1.1.6", + "@arcadeai/arcadejs": "2.4.1", "@better-auth/drizzle-adapter": "^1.7.1", "@better-auth/electron": "1.7.1", "@better-auth/expo": "1.7.1", diff --git a/server/scripts/migrate.ts b/server/scripts/migrate.ts index e4dddbeda..411d1d8ad 100644 --- a/server/scripts/migrate.ts +++ b/server/scripts/migrate.ts @@ -9,35 +9,80 @@ * * The migrator underneath it is part of `drizzle-orm`, which is a runtime dependency because the * server imports it anyway. It needs a connection and the folder of SQL files, both of which are in - * the image, and it keeps the same `drizzle.__drizzle_migrations` journal the CLI does, so the two - * are interchangeable and a database migrated by either is migrated. + * the image, and it keeps its journal where `MIGRATIONS_JOURNAL` in `src/db/apply-migrations` says. + * That is drizzle's default table, the one the CLI uses when `drizzle.config.ts` names none, so a + * database migrated by the CLI before this script existed is read here without translation, and + * the two were interchangeable — for exactly as long as those two names stay in step. + * + * It is now what every path runs — the image, the Helm Job, the compose stack, CI, and `db:migrate` + * — because the two stopped being interchangeable in the direction that matters: only this one + * refuses a database holding a stamp newer than a migration it is about to walk past. See + * `src/db/migration-reach`. */ import { join } from "node:path"; -import { drizzle } from "drizzle-orm/postgres-js"; -import { migrate } from "drizzle-orm/postgres-js/migrator"; -import postgres from "postgres"; - -const databaseUrl = process.env.DATABASE_URL; -if (!databaseUrl) { - throw new Error( - "DATABASE_URL must be configured before running a database migration command", - ); -} +import postgres, { type Sql } from "postgres"; +import { applyMigrations } from "../src/db/apply-migrations"; -/* - * One connection, and `max: 1`. +/** + * The whole run against one connection, and the connection released afterwards. * - * Migrations are a single ordered conversation with the database, and a pool would let two - * statements that must be ordered land on different connections. + * Exported, and the work injectable, so that what happens when the release itself fails can be + * tested without a database that refuses to close. `tests/migrate-teardown.test.ts`. */ -const client = postgres(databaseUrl, { max: 1, onnotice: () => {} }); - -try { - await migrate(drizzle(client), { - migrationsFolder: join(import.meta.dir, "..", "drizzle"), - }); - console.info(JSON.stringify({ type: "migrations-applied", status: "ok" })); -} finally { - // Released whatever happened, so a failure exits rather than hanging on an open socket. +export async function runMigrations( + client: Sql, + migrationsFolder: string, + apply: typeof applyMigrations = applyMigrations, +): Promise { + try { + /* + * Guarded, because the migrator's own idea of "applied" is one number. + * + * It runs a migration when the journal stamps it later than the newest stamp the database holds, + * and it has nothing to say about a migration stamped earlier that it has never run. See + * `src/db/migration-reach`: a database that ran a branch's migrations before that branch was + * merged and renumbered holds a stamp newer than the migrations the merge brought in, and the + * unguarded migrator walks past them and prints the line below anyway. + */ + await apply(client, migrationsFolder); + console.info(JSON.stringify({ type: "migrations-applied", status: "ok" })); + } catch (failure) { + /* + * Released whatever happened, so a failure exits rather than hanging on an open socket — but + * NOT with an awaited `end()` in a `finally`. A rejection there replaces the error in flight, + * and the error in flight is the one this script exists to deliver: the refusal naming the + * migrations a database walked past would leave as a bare socket error. The release's own + * failure is reported beside it, and the run's failure is the one that propagates. + */ + await client.end({ timeout: 5 }).catch((teardown: unknown) => { + console.error( + JSON.stringify({ + type: "migrations-connection-release-failed", + error: + teardown instanceof Error ? teardown.message : String(teardown), + }), + ); + }); + throw failure; + } + // After a clean run a failed release has nothing to hide, so it is the run's outcome. await client.end({ timeout: 5 }); } + +if (import.meta.main) { + const databaseUrl = process.env.DATABASE_URL; + if (!databaseUrl) { + throw new Error( + "DATABASE_URL must be configured before running a database migration command", + ); + } + + /* + * One connection, and `max: 1`. + * + * Migrations are a single ordered conversation with the database, and a pool would let two + * statements that must be ordered land on different connections. + */ + const client = postgres(databaseUrl, { max: 1, onnotice: () => {} }); + await runMigrations(client, join(import.meta.dir, "..", "drizzle")); +} diff --git a/server/scripts/test-network-guard.ts b/server/scripts/test-network-guard.ts new file mode 100644 index 000000000..bf52b4516 --- /dev/null +++ b/server/scripts/test-network-guard.ts @@ -0,0 +1,517 @@ +/** + * The test process's egress, closed at the transport rather than asked for politely file by file. + * + * A test that dials a vendor stops being a fact about this repository. It passes or fails on the + * vendor's uptime, on DNS and on whatever the network did that minute, so a red says nothing and a + * green says less than it looks like; it is slow and flaky in a suite this size; it carries + * whatever the test handed it — an API key, a user id, a return address — to a third party; and it + * is a real request against a real service, made from CI, on every run. + * + * EVERY TEST FILE ALREADY MEANT TO STUB, AND STUBBING PER FILE IS WHAT FAILED. `server/tests/ + * composio-broker-seam.test.ts` assigned `globalThis.fetch` around the call it was about and still + * reached `https://backend.composio.dev/api/v3.1/auth_configs` on every run, because the vendor + * client had been constructed one line EARLIER and `@composio/client` binds its transport once, at + * construction (`this.fetch = options.fetch ?? Shims.getDefaultFetch()`, `client.mjs:122`). A stub + * installed after that point is a stub the SDK never sees. That failure mode is invisible in review + * — the file reads as if it stubs — which is why the floor is here, in a preload that runs before + * any test file is imported and therefore before any vendor client can capture a transport. + * + * WHAT IS REFUSED: a connection to anything that is not loopback, through every way this runtime + * (Bun 1.4) offers a test file of opening one. Patching `globalThis.fetch` and `http.request` alone + * is not that: an earlier version of this file did only that, and `https.get`, `Bun.fetch`, the + * named imports `import { get } from "node:https"`, the built-in `undici`, `net`, `tls`, + * `Bun.connect`, `WebSocket` and `dgram` all still reached example.com. Each one is closed below, + * at the lowest layer JavaScript can reach for it: + * + * - `Bun.fetch` is a read-only, non-configurable property and cannot be replaced, and the built-in + * `undici` captured the native fetch before this file ran. Both honour the proxy environment, so + * the process's HTTP(S) proxy is pointed at a refusing listener on loopback (`NO_PROXY` keeps the + * suite's own loopback servers direct). Every native fetch to a far host is handed to that + * listener, which records it and answers 403 without ever opening a socket onward. + * - `globalThis.fetch` is still replaced too, so the common path rejects with the explanation + * below instead of resolving a 403. + * - `node:http`/`node:https` do NOT read the proxy environment, so `request`, `get` and + * `ClientRequest` are replaced on both, and `syncBuiltinESMExports()` pushes the replacements into + * the named-import bindings, which Bun otherwise snapshots when the built-in first loads. + * - `node:net`/`node:tls` are guarded on `net.Socket.prototype.connect`, which `net.connect`, + * `net.createConnection` and `tls.connect` all reach; `Bun.connect`, `node:http2`'s `connect`, + * `WebSocket` (global, `ws`, `undici`, `node:http`) and UDP (`dgram`, `Bun.udpSocket`) likewise. + * + * Raw sockets are allowed to one more place than loopback: the hosts of `TEST_DATABASE_URL` and + * `DATABASE_URL`, because that is how the Postgres driver reaches the test database and that host is + * deployment configuration, not necessarily loopback. + * + * AND RAW SOCKETS ARE JUDGED BY THE ADDRESS THEY REACH, because some suites' SUBJECT is the socket + * layer. `agent-computer`'s egress filter has to prove it pins the address it checked, falls back + * to the next one, and gives up on one that never answers, and it can only prove that by opening + * sockets at `rebind.example.test`, `dual.example.test` and `10.255.255.1`. None of those can be a + * vendor, and the rule that admits them says why — not a list of the hosts a suite happens to use: + * - a LITERAL address the public internet does not route (RFC 1918 private, the RFC 5737/3849 + * documentation ranges, IPv6 unique-local). Link-local is excluded on purpose: 169.254.169.254 is + * the cloud metadata service, which hands out credentials. + * - a name under a top-level domain RFC 6761 reserves so public DNS never answers it (`.test`, + * `.invalid`, `.example`) — and ONLY with its lookup wrapped, because a `lookup` option or + * `/etc/hosts` can map a reserved name to any address. The wrapped lookup lets the connection + * proceed only if every address it answers is one a literal would be let through to, so a name + * is never the way round the address rule. + * This is at `net.Socket#connect` only, where a lookup can be checked. Every other entry point + * (`fetch`, `http(s).request`/`get`, `http2`, `WebSocket`) stays loopback-only, and + * `Bun.connect`/UDP take the same literal-address rule but no names. + * Why not a named opt-out like `OPENBOT_LIVE_*`: `bun run test:ci` runs every file in ONE process, + * so a flag one suite set would unguard every file after it. + * + * WHAT IS NOT GUARDED, AND WHY — none of these is how any code in this repository talks to a vendor: + * `Bun.SQL` (native; it IS the database path, and its connection never surfaces to JavaScript); + * `Bun.S3Client`/`Bun.redis` (native clients this repository does not use); a `fetch` given an + * explicit `proxy` or `unix` option, or a test that rewrites the proxy variables itself; a child + * process (`Bun.spawn`, `child_process` running `curl`); a `Worker`, whose global scope does not + * run this preload; and DNS lookups, which resolve a name but connect to nothing. + * `server/tests/test-network-guard.test.ts` plants a call through every guarded entry point. + * + * HOW A SUITE THAT IS MEANT TO DIAL OPTS OUT: any `OPENBOT_LIVE_*` variable with a non-empty value. + * The three live suites already set one — `OPENBOT_LIVE_COMPOSIO`, `OPENBOT_LIVE_ARCADE` and + * `OPENBOT_LIVE_SCREEN` are set by their `test:live-*` scripts in `package.json`, which also refuse + * to run without a key, so a live suite remains deliberate and credentialed and stays skipped + * otherwise. + */ + +import dgram from "node:dgram"; +import dns from "node:dns"; +import http from "node:http"; +import http2 from "node:http2"; +import https from "node:https"; +import { syncBuiltinESMExports } from "node:module"; +import net from "node:net"; + +const liveRun = Object.entries(process.env).some( + ([name, value]) => name.startsWith("OPENBOT_LIVE_") && (value ?? "").trim(), +); + +/** Loopback, in every spelling a URL or a Node request option can arrive in. */ +function isLoopback(host: string): boolean { + const bare = host.replace(/^\[|\]$/g, "").toLowerCase(); + return ( + bare === "localhost" || + bare === "::1" || + bare === "0.0.0.0" || + bare === "::" || + bare === "" || + bare.endsWith(".localhost") || + /^127\./.test(bare) || + /^::ffff:127\./.test(bare) + ); +} + +/** The configured database hosts, read when asked, since a test may point either variable elsewhere. */ +function isDatabaseHost(host: string): boolean { + const bare = host.replace(/^\[|\]$/g, "").toLowerCase(); + return [process.env.TEST_DATABASE_URL, process.env.DATABASE_URL].some( + (configured) => { + if (!configured) return false; + try { + return ( + new URL(configured).hostname.replace(/^\[|\]$/g, "").toLowerCase() === + bare + ); + } catch { + return false; + } + }, + ); +} + +/** + * Every target this guard refused, in order, on the global so a test can read it. + * + * A refusal does not always reach the caller as itself: `@composio/client` retries a rejected + * transport and then reports "Connection error.", which is the same sentence a real outage would + * produce, and a native `Bun.fetch` sees the refusing proxy's 403. So the fact that the guard — + * rather than the network — stopped a call is recorded here at the point of refusal, where it is + * unambiguous. `server/tests/test-network-guard.test.ts` reads it; nothing in `server/src` may. + */ +declare global { + var openbotTestNetworkRefusals: string[] | undefined; +} + +globalThis.openbotTestNetworkRefusals = []; + +const explanation = + "Tests do not use the network: stub the transport this call goes through (and stub it BEFORE " + + "constructing any client, which binds `fetch` once), or, for a deliberate vendor suite, set an " + + "OPENBOT_LIVE_* variable as `bun run test:live-*` does. Guard: server/scripts/test-network-guard.ts."; + +function refuse(target: string): Error { + globalThis.openbotTestNetworkRefusals?.push(target); + return new Error(`A test tried to reach ${target}. ${explanation}`); +} + +/** The host a Node `request`/`get`/`ClientRequest` call is aimed at, from any of its overloads. */ +function nodeRequestHost(args: unknown[]): string { + let host = ""; + const [first, second] = args; + if (typeof first === "string") host = new URL(first).hostname; + else if (first instanceof URL) host = first.hostname; + for (const options of [first, second]) { + if (options && typeof options === "object" && !(options instanceof URL)) { + const { hostname, host: hostWithPort } = options as { + hostname?: string | null; + host?: string | null; + }; + const named = hostname ?? hostWithPort; + if (named) host = String(named).replace(/:\d+$/, ""); + } + } + return host; +} + +/** The host a `net.Socket#connect` is aimed at; `null` for a Unix socket path, which is local. */ +function socketConnectHost(args: unknown[]): string | null { + const [first, second] = args; + if (Array.isArray(first)) return socketConnectHost(first); + if (first && typeof first === "object") { + const options = first as { path?: string; host?: string }; + if (options.path) return null; + return options.host ?? "localhost"; + } + if (typeof first === "string" && !/^\d+$/.test(first)) return null; + return typeof second === "string" ? second : "localhost"; +} + +/** + * Addresses no vendor can be behind, because the public internet does not route them: RFC 1918 + * private space, the RFC 5737 / RFC 3849 documentation ranges, and IPv6 unique-local space + * (RFC 4193). Loopback is judged by `isLoopback`. Link-local (169.254/16, fe80::/10) is + * deliberately NOT here: 169.254.169.254 is the cloud metadata service, which hands out credentials. + */ +const unroutable = new net.BlockList(); +unroutable.addSubnet("10.0.0.0", 8, "ipv4"); +unroutable.addSubnet("172.16.0.0", 12, "ipv4"); +unroutable.addSubnet("192.168.0.0", 16, "ipv4"); +unroutable.addSubnet("192.0.2.0", 24, "ipv4"); +unroutable.addSubnet("198.51.100.0", 24, "ipv4"); +unroutable.addSubnet("203.0.113.0", 24, "ipv4"); +unroutable.addSubnet("fc00::", 7, "ipv6"); +unroutable.addSubnet("2001:db8::", 32, "ipv6"); + +/** A LITERAL address that is loopback or that the public internet does not route. Never a name. */ +function isUnroutableAddress(host: string): boolean { + const bare = host.replace(/^\[|\]$/g, "").toLowerCase(); + const family = net.isIP(bare); + if (family === 0) return false; + return ( + isLoopback(bare) || unroutable.check(bare, family === 6 ? "ipv6" : "ipv4") + ); +} + +/** + * A name under a top-level domain RFC 6761 reserves so that public DNS never answers for it: + * `.test`, `.invalid`, `.example` (`.localhost` is loopback already). + * + * BEING RESERVED IS NOT ENOUGH ON ITS OWN, so no entry point lets such a name through bare: + * `/etc/hosts`, a local resolver, or a `lookup` option the caller hands in can map any name to any + * address. A special-use name is let through only at `net.Socket#connect`, where its lookup is + * replaced by `checkedLookup`, which judges the ADDRESS it resolves to by the same rule as a literal. + */ +function isSpecialUseName(host: string): boolean { + return net.isIP(host) === 0 && /\.(test|invalid|example)\.?$/i.test(host); +} + +function guardSocketHost(host: string | null, label: string): void { + if ( + host === null || + isLoopback(host) || + isDatabaseHost(host) || + isUnroutableAddress(host) + ) + return; + throw refuse(`${label} ${host}`); +} + +type LookupCallback = ( + error: Error | null, + address?: string | Array<{ address: string; family: number }>, + family?: number, +) => void; +type Lookup = ( + hostname: string, + options: object | LookupCallback, + callback?: LookupCallback, +) => void; + +/** + * The caller's `lookup` (or the system resolver), passed on only when every address it answers is + * one `guardSocketHost` would let a literal through to. Otherwise the socket gets the refusal as its + * connection error and never dials the address. + */ +function checkedLookup(lookup: Lookup | undefined): Lookup { + const resolve = lookup ?? (dns.lookup as unknown as Lookup); + return (hostname, options, callback) => { + const done = ( + typeof options === "function" ? options : callback + ) as LookupCallback; + resolve( + hostname, + typeof options === "function" ? {} : options, + (error, address, family) => { + if (error) return done(error); + const answered = Array.isArray(address) + ? address.map((entry) => entry.address) + : [String(address)]; + const far = answered.find( + (candidate) => !isUnroutableAddress(candidate), + ); + if (far !== undefined) + return done(refuse(`socket ${hostname} resolved to ${far}`)); + done(null, address, family); + }, + ); + }; +} + +/** + * `net.Socket#connect` arguments aimed at a special-use name, rewritten with the lookup checked. + * The overloads a name arrives in — `(options, cb)`, `(port, host, cb)`, and the pre-normalized + * `[options, cb]` array Node's own `net.connect` passes — are covered. `null` for any other shape, + * which `guardSocketHost` then refuses like any other name. + */ +function withCheckedLookup(args: unknown[]): unknown[] | null { + const [first, second] = args; + if (Array.isArray(first)) { + // The normalized array is tagged by the runtime (a copy is not recognised as one and is + // rejected as missing arguments), so it is rewritten in place rather than rebuilt. + const inner = withCheckedLookup(first); + if (!inner) return null; + first.splice(0, first.length, ...inner); + return args; + } + if (first && typeof first === "object") { + const options = first as { lookup?: Lookup }; + return [ + { ...options, lookup: checkedLookup(options.lookup) }, + ...args.slice(1), + ]; + } + if ( + (typeof first === "number" || /^\d+$/.test(String(first))) && + typeof second === "string" + ) { + return [ + { port: Number(first), host: second, lookup: checkedLookup(undefined) }, + ...args.slice(2), + ]; + } + return null; +} + +type Callable = (...args: unknown[]) => unknown; +type Constructable = new (...args: unknown[]) => object; + +function replace(owner: object, key: string, value: unknown): void { + (owner as Record)[key] = value; +} + +if (!liveRun) { + /* + * The refusing proxy, for every native fetch this file cannot wrap. `Bun.listen` binds + * synchronously, so the port is known before the variables naming it are set, and the listener + * is unreferenced so it never holds a finished run open. + */ + const refusingProxy = Bun.listen({ + hostname: "127.0.0.1", + port: 0, + socket: { + data(socket, chunk) { + const [method = "", target = ""] = chunk + .toString("latin1") + .split("\r\n", 1)[0] + .split(" "); + refuse( + method === "CONNECT" + ? `https://${target.replace(/:443$/, "")}` + : target.replace(/\?.*$/, ""), + ); + const body = `Refused by the test network guard. ${explanation}`; + socket.end( + "HTTP/1.1 403 Forbidden\r\nConnection: close\r\n" + + "X-Openbot-Test-Network-Guard: refused\r\nContent-Type: text/plain\r\n" + + `Content-Length: ${Buffer.byteLength(body)}\r\n\r\n${body}`, + ); + }, + }, + }); + refusingProxy.unref(); + const proxy = `http://127.0.0.1:${refusingProxy.port}`; + const direct = "localhost,127.0.0.1,::1,[::1],0.0.0.0,.localhost"; + for (const name of ["HTTP_PROXY", "HTTPS_PROXY", "http_proxy", "https_proxy"]) + process.env[name] = proxy; + for (const name of ["NO_PROXY", "no_proxy"]) process.env[name] = direct; + + const passThrough = globalThis.fetch; + globalThis.fetch = ((input: unknown, init?: RequestInit) => { + const raw = + typeof input === "string" + ? input + : input instanceof URL + ? input.href + : ((input as { url?: string } | null)?.url ?? String(input)); + let url: URL | null = null; + try { + url = new URL(raw); + } catch { + // A relative or unparseable target reaches no host; the runtime's own error is the right one. + } + if (url && /^(https?|wss?):$/.test(url.protocol)) { + if (!isLoopback(url.hostname)) { + return Promise.reject(refuse(url.origin + url.pathname)); + } + } + return passThrough(input as RequestInfo | URL, init); + }) as typeof globalThis.fetch; + + /* + * `request`, `get` and `ClientRequest` are forwarded through an `unknown[]` signature rather than + * one of their overloads: nothing here reads an argument it did not already read off the first + * two, and restating the overloads would be a declaration to maintain against Node's. `get` is + * replaced on its own because the built-in calls its internal `request`, not this property. + */ + for (const module of [http, https] as const) { + for (const key of ["request", "get"] as const) { + const original = module[key] as unknown as Callable; + replace(module, key, (...args: unknown[]) => { + const host = nodeRequestHost(args); + if (!isLoopback(host)) throw refuse(host); + return original(...args); + }); + } + } + const OriginalClientRequest = http.ClientRequest as unknown as Constructable; + replace( + http, + "ClientRequest", + class GuardedClientRequest extends OriginalClientRequest { + constructor(...args: unknown[]) { + const host = nodeRequestHost(args); + if (!isLoopback(host)) throw refuse(host); + super(...args); + } + }, + ); + + const originalSocketConnect = net.Socket.prototype.connect as Callable; + replace( + net.Socket.prototype, + "connect", + function (this: net.Socket, ...args: unknown[]) { + const host = socketConnectHost(args); + if (host !== null && isSpecialUseName(host) && !isDatabaseHost(host)) { + const checked = withCheckedLookup(args); + if (checked) return originalSocketConnect.apply(this, checked); + } + guardSocketHost(host, "socket"); + return originalSocketConnect.apply(this, args); + }, + ); + + const originalBunConnect = Bun.connect as unknown as Callable; + // `Bun.connect` answers with a promise, so a refusal is a rejection rather than a throw. + replace(Bun, "connect", (options: { hostname?: string; unix?: string }) => { + try { + guardSocketHost( + options?.unix ? null : (options?.hostname ?? ""), + "socket", + ); + } catch (refusal) { + return Promise.reject(refusal); + } + return originalBunConnect(options); + }); + + const originalHttp2Connect = http2.connect as unknown as Callable; + replace(http2, "connect", (authority: unknown, ...rest: unknown[]) => { + const host = + authority instanceof URL + ? authority.hostname + : typeof authority === "string" + ? new URL(authority).hostname + : ((authority as { hostname?: string; host?: string } | null) + ?.hostname ?? + (authority as { host?: string } | null)?.host ?? + ""); + if (!isLoopback(host)) throw refuse(`http2 ${host}`); + return originalHttp2Connect(authority, ...rest); + }); + + const OriginalWebSocket = globalThis.WebSocket as unknown as Constructable; + class GuardedWebSocket extends OriginalWebSocket { + constructor(...args: unknown[]) { + const url = new URL(String(args[0])); + if (!isLoopback(url.hostname)) throw refuse(url.origin + url.pathname); + super(...args); + } + } + replace(globalThis, "WebSocket", GuardedWebSocket); + replace(http, "WebSocket", GuardedWebSocket); + for (const builtin of ["ws", "undici"]) { + const module = require(builtin) as Record; + if (module.WebSocket) replace(module, "WebSocket", GuardedWebSocket); + } + + const originalDgramSend = dgram.Socket.prototype.send as Callable; + replace( + dgram.Socket.prototype, + "send", + function (this: dgram.Socket, ...args: unknown[]) { + // send(msg, port, address?, cb?) or send(msg, offset, length, port, address?, cb?) + const address = + typeof args[2] === "number" && typeof args[3] === "number" + ? args[4] + : args[2]; + if (typeof address === "string") guardSocketHost(address, "udp"); + return originalDgramSend.apply(this, args); + }, + ); + const originalDgramConnect = dgram.Socket.prototype.connect as Callable; + replace( + dgram.Socket.prototype, + "connect", + function (this: dgram.Socket, ...args: unknown[]) { + guardSocketHost( + typeof args[1] === "string" ? args[1] : "localhost", + "udp", + ); + return originalDgramConnect.apply(this, args); + }, + ); + + const originalUdpSocket = Bun.udpSocket as unknown as Callable; + replace( + Bun, + "udpSocket", + async (options: { connect?: { hostname?: string } }) => { + if (options?.connect) + guardSocketHost(options.connect.hostname ?? "", "udp"); + const socket = (await originalUdpSocket(options)) as { + send: Callable; + sendMany: Callable; + }; + const send = socket.send.bind(socket); + socket.send = (...args: unknown[]) => { + if (typeof args[2] === "string") guardSocketHost(args[2], "udp"); + return send(...args); + }; + const sendMany = socket.sendMany.bind(socket); + socket.sendMany = (packets: unknown) => { + if (!options?.connect && Array.isArray(packets)) { + for (let i = 2; i < packets.length; i += 3) + guardSocketHost(String(packets[i]), "udp"); + } + return sendMany(packets); + }; + return socket; + }, + ); + + // Bun snapshots a built-in's named exports when it first loads; this re-reads every replacement + // above into them, so `import { get } from "node:https"` in a test file is the guarded one. + syncBuiltinESMExports(); +} diff --git a/server/scripts/test-preload.ts b/server/scripts/test-preload.ts index beb9760ee..aecde0a84 100644 --- a/server/scripts/test-preload.ts +++ b/server/scripts/test-preload.ts @@ -20,10 +20,15 @@ * `@copilotkit/runtime` also eagerly imports the Vertex provider, which pulls `gaxios` through a * Bun global cache path during tests. These tests do not exercise Vertex, so the provider is stubbed * at the same preload boundary and fails loudly if a server test tries to use it. + * + * And `./test-network-guard` closes the process's egress, for the same reason this file exists at + * all: it has to run before any test file is imported, because a vendor client binds its transport + * when it is constructed and a stub installed afterwards is one the client never sees. */ import { mock } from "bun:test"; import "eventsource"; +import "./test-network-guard"; mock.module("@ai-sdk/google-vertex", () => ({ createVertex: () => () => { diff --git a/server/src/app.ts b/server/src/app.ts index dcf69de23..b162f5dfa 100644 --- a/server/src/app.ts +++ b/server/src/app.ts @@ -99,6 +99,7 @@ import type { OnboardingStore } from "./people/onboarding"; import { MAX_PAGE, type PeopleStore } from "./people/store"; import type { AccountModeSwitch } from "./plugins/account-mode"; import type { ComposioBroker } from "./plugins/broker"; +import type { BrokerProvider } from "./plugins/access"; import { createPluginRoutes } from "./plugins/routes"; import { createSharedUseRoutes } from "./plugins/shared-use-routes"; import type { SharedUseStore } from "./plugins/shared-use-store"; @@ -386,7 +387,7 @@ export function createApp( * configured, which is the correct degraded behaviour: a deployment with no Composio API key has * no app directory to offer, rather than one that lists apps nobody can connect. */ - composio?: { broker: ComposioBroker }, + composio?: { broker: ComposioBroker; provider: BrokerProvider }, /** Native model OAuth stays server-side; callers hold only a separate local bearer. */ modelProviderProxy?: ModelProviderProxy, userPreferences?: UserPreferencesStore, diff --git a/server/src/audit.ts b/server/src/audit.ts index 356e0f0a8..dfc737734 100644 --- a/server/src/audit.ts +++ b/server/src/audit.ts @@ -235,6 +235,19 @@ export const auditEventTypes = [ * while the grant at Google stood untouched. */ "mcp.account_disconnected", + /* + * One person retracted their own pending per-action authorization before it completed. + * + * The counterpart of `mcp.account_connected` on the same lifecycle: that row is the attempt + * ending in a yes, this one is the person deliberately ending it themselves. Without it, pressing + * Cancel deleted the attempt and nothing recorded who withdrew what — on a lifecycle whose whole + * point is that consent is attributable. Filed under the app's slug, as its two siblings are. + * + * NEVER THE CONSENT URL AND NEVER THE VENDOR'S HANDLE FOR THE FLOW: the first is a bearer + * capability, and neither is in the payload. `minted` says only whether a flow had been started at + * the vendor at all, which is the one fact about it a reader of the trail needs. + */ + "mcp.authorization_cancelled", // An administrator switched a brokered app between each person's account and one shared account. "mcp.account_mode_changed", // A Bot's use of a Shared app needs an administrator's approval: filed by a refused call or by the diff --git a/server/src/components/headless.ts b/server/src/components/headless.ts index 9ef4f70ae..1b629101e 100644 --- a/server/src/components/headless.ts +++ b/server/src/components/headless.ts @@ -217,11 +217,15 @@ const ActivityReportProps = z.object({ ), }); -/** Which server-side function each activity report reads. The same map `activity.tsx` holds. */ -const ACTIVITY_FUNCTION_FOR: Record = { - activity: "botActivity", - refusals: "recentRefusals", -}; +/** + * Which server-side function each activity report reads. The same map `activity.tsx` holds, and a + * Map there for the same reason: the key is a string somebody else chose, and an object lookup + * answers a borrowed `Object.prototype` member with something truthy that is no function name. + */ +const ACTIVITY_FUNCTION_FOR: ReadonlyMap = new Map([ + ["activity", "botActivity"], + ["refusals", "recentRefusals"], +]); export type HeadlessComponentSpec = { /** The tool name, the catalogue key, and the renderer's key in the app. */ @@ -315,7 +319,7 @@ export const HEADLESS_COMPONENTS: readonly HeadlessComponentSpec[] = [ reads: (args) => { const functionName = typeof args.report === "string" - ? ACTIVITY_FUNCTION_FOR[args.report] + ? ACTIVITY_FUNCTION_FOR.get(args.report) : undefined; return functionName ? [functionName] : []; }, diff --git a/server/src/config.ts b/server/src/config.ts index 337100055..aa1409f5b 100644 --- a/server/src/config.ts +++ b/server/src/config.ts @@ -16,6 +16,7 @@ import { type TranscriptionConfig, transcriptionConfig, } from "./dictation/config"; +import type { BrokerProvider } from "./plugins/access"; import { type VoiceConfig, voiceConfig } from "./voice/config"; import { type WebBotAuth, webBotAuthFromEnv } from "./web-bot-auth"; @@ -249,6 +250,16 @@ export type DeploymentConfig = { composioApiKey: string | undefined; /** GitHub App user sign-in, so people can link their GitHub account. Both or neither of GITHUB_APP_CLIENT_ID / GITHUB_APP_CLIENT_SECRET. */ githubApp?: GithubAppConfig; + /** + * The Arcade API key, from `ARCADE_API_KEY`. Unset is the ordinary state. Trimmed and never + * validated here, for the same reason as `composioApiKey`. + */ + arcadeApiKey: string | undefined; + /** + * Which tool broker the operator asked for, from `OPENBOT_BROKER_PROVIDER`. Only read and + * validated here: which provider is active is decided elsewhere. Unset is `undefined`. + */ + brokerProvider: BrokerProvider | undefined; /** * Where this deployment is reached from outside, with no trailing slash. * @@ -421,6 +432,17 @@ function optional(environment: Environment, name: string): string | undefined { return environment[name]?.trim() || undefined; } +function brokerProvider(environment: Environment): BrokerProvider | undefined { + const raw = optional(environment, "OPENBOT_BROKER_PROVIDER"); + if (raw === undefined) return undefined; + if (raw !== "composio" && raw !== "arcade") { + throw new Error( + `OPENBOT_BROKER_PROVIDER must be "composio" or "arcade", got "${raw}". Leave it unset to choose by which API key is configured.`, + ); + } + return raw; +} + /** * Whether this deployment says it is in production, which is what the two hard refusals turn on. * @@ -1353,6 +1375,8 @@ export function loadConfig( agentEndpointAllowedHosts: agentEndpointAllowedHosts(environment), deploymentId: optional(environment, "DEPLOYMENT_ID"), composioApiKey: optional(environment, "COMPOSIO_API_KEY"), + arcadeApiKey: optional(environment, "ARCADE_API_KEY"), + brokerProvider: brokerProvider(environment), publicUrl, appUrl: ( optional(environment, "OPENBOT_APP_URL") ?? diff --git a/server/src/db/apply-migrations.ts b/server/src/db/apply-migrations.ts new file mode 100644 index 000000000..5e32a61c7 --- /dev/null +++ b/server/src/db/apply-migrations.ts @@ -0,0 +1,162 @@ +/** + * Apply a migration folder to a database, or refuse before touching it. + * + * Separate from `scripts/migrate.ts` so that the refusal has a test. The script is an executable — + * it reads the environment and exits — and the only way to find out what it does to a database that + * is one journal out of step is to run it against such a database, which is what + * `tests/migration-reach.integration.test.ts` does through this function. + * + * See `./migration-reach` for what is being checked and why the answer is a refusal rather than a + * repair. + */ +import { drizzle } from "drizzle-orm/postgres-js"; +import { migrate } from "drizzle-orm/postgres-js/migrator"; +import type { Sql, TransactionSql } from "postgres"; +import { + type AppliedMigration, + type MigrationsJournal, + migrationsOutOfReach, + outOfReachRefusal, + readMigrationFolder, +} from "./migration-reach"; + +/** + * Where the migrator keeps its bookkeeping, named once. + * + * `migrate()` writes to whatever `migrationsSchema` / `migrationsTable` it is handed, and the + * reach check below reads the same table to decide whether migrating is safe. If the two ever named + * different tables the check would read an absent table, see nothing applied, and wave every + * migration through — the refusal silently switched off. So both are handed this one object, and + * nothing else in the server spells the name. + * + * The same object reaches the refusal's repair SQL (`outOfReachRefusal`), so the table an operator + * is told to fix is the table the check read. The type is declared in `./migration-reach` and the + * value here: that module is the dependency, not the dependent, and importing this value into it + * would close a cycle. + */ +export type { MigrationsJournal }; + +export const MIGRATIONS_JOURNAL: MigrationsJournal = { + migrationsSchema: "drizzle", + migrationsTable: "__drizzle_migrations", +}; + +/** + * What the migrator has already recorded here, or nothing at all. + * + * `to_regclass` rather than a query that may fail: a database the migrator has never touched has no + * journal schema, and selecting from a table that is not there would be an error indistinguishable + * from a database that cannot be read. + */ +async function appliedMigrations( + client: TransactionSql, + { migrationsSchema, migrationsTable }: MigrationsJournal, +): Promise { + const [present] = await client<{ table: string | null }[]>` + select to_regclass(format('%I.%I', ${migrationsSchema}::text, ${migrationsTable}::text))::text as table + `; + if (!present?.table) return []; + + const rows = await client<{ hash: string; created_at: string | null }[]>` + select hash, created_at from ${client(migrationsSchema)}.${client(migrationsTable)} + `; + return rows.map((row) => ({ + hash: row.hash, + /* + * A NULL `created_at` is CARRIED, never coerced. `Number(null)` is 0, and 0 is a legitimate + * stamp — so coercing here would hand `migratorHighWaterMark` a row indistinguishable from an + * early migration and the guard would pass on exactly the database it exists to refuse. The + * column is a bare `bigint` drizzle leaves nullable; see `./migration-reach`. + */ + createdAt: row.created_at === null ? null : Number(row.created_at), + })); +} + +/** Thrown instead of migrating, when migrating would skip work and call it done. */ +export class MigrationsOutOfReachError extends Error { + constructor(message: string) { + super(message); + this.name = "MigrationsOutOfReachError"; + } +} + +/** + * One lock per database for every run of this function, whatever journal it carries. + * + * A constant rather than anything derived from the folder: the runs that must not overlap are + * precisely the ones whose folders differ. Advisory locks are scoped to the database, so two + * databases on one server never wait on each other. + */ +const MIGRATION_LOCK = "openbot:apply-migrations"; + +/** + * Check, then migrate, with nothing able to commit in between. + * + * THE GAP THIS CLOSES. The reach check reads the journal table; the migrator then reads it AGAIN to + * find its high-water mark. Run as two steps, a second migrator could commit between + * those reads — and if it carries a different journal (an operator's `db:migrate` from a checkout, + * or a second release's Job started while the first is still running) its stamp can land above a + * migration this run still has pending. The check passed before that stamp existed; the migrator + * reads it afterwards, walks past the migration, and the run reports success over a table that is + * not there: the exact outcome the check exists to prevent, arrived at through the gap between the + * two reads. A rival with the SAME journal (a Job pod the controller started twice) is the lesser + * case: both read the same mark, both run the same SQL, and one dies on a duplicate `CREATE`. + * + * So both run inside one transaction that first takes a transaction-scoped advisory lock. Every + * other run of this function queues behind it and, once admitted, checks a table the previous run + * has already committed. The lock goes with the transaction — on commit, on the refusal's rollback, + * or when the connection dies — so there is no unlock to forget and no session to leak it into. + * + * WHAT IT DOES NOT COVER. A migrator that is not this function (`drizzle-kit migrate`, or an image + * built before this lock) does not take it, and can still interleave. Every path this repository + * runs goes through here; see `scripts/migrate.ts`. + */ +export async function applyMigrations( + client: Sql, + migrationsFolder: string, + journal: MigrationsJournal = MIGRATIONS_JOURNAL, +): Promise { + const folder = await readMigrationFolder(migrationsFolder); + + await client.begin(async (tx) => { + await tx`select pg_advisory_xact_lock(hashtextextended(${MIGRATION_LOCK}, 0))`; + + const applied = await appliedMigrations(tx, journal); + const outOfReach = migrationsOutOfReach(folder, applied); + if (outOfReach.length > 0) { + throw new MigrationsOutOfReachError( + outOfReachRefusal(outOfReach, folder, applied, journal), + ); + } + + await migrate(drizzle(withinTransaction(client, tx)), { + migrationsFolder, + ...journal, + }); + }); +} + +/** + * The open transaction, in the shape `drizzle()` takes a client in. + * + * Drizzle's migrator reads its high-water mark and runs the migrations through the client it is + * given, and opens its own transaction with `client.begin`. A postgres.js transaction has no + * `begin` — only `savepoint` — and no `options`, which `drizzle()` writes its type parsers into. So + * this hands it exactly those three things: `unsafe` and `savepoint` from the transaction, so every + * statement the migrator sends is inside the lock, and `options` from the pool the transaction + * belongs to, which is where postgres.js reads parsers from. Its transaction becomes a savepoint in + * ours, with the same all-or-nothing effect it always had. + * + * If a later drizzle-orm reaches for anything else on its client, it fails here with a TypeError at + * the first migration rather than migrating outside the lock — and + * `tests/migration-reach.integration.test.ts` runs exactly this path. + */ +function withinTransaction(client: Sql, tx: TransactionSql): Sql { + const adapter = { + options: client.options, + unsafe: tx.unsafe.bind(tx), + begin: (fn: (sql: TransactionSql) => T | Promise) => tx.savepoint(fn), + }; + // The cast is the claim above: drizzle uses these three members and no others. + return adapter as unknown as Sql; +} diff --git a/server/src/db/migration-reach.ts b/server/src/db/migration-reach.ts new file mode 100644 index 000000000..ff813cbe5 --- /dev/null +++ b/server/src/db/migration-reach.ts @@ -0,0 +1,243 @@ +/** + * Whether every migration in the folder can still be reached by the migrator, on THIS database. + * + * WHAT THE MIGRATOR ACTUALLY DOES. `PgDialect.migrate` reads one row of its journal table (see + * `MigrationsJournal`) — `order by created_at desc limit 1` — and then runs a migration + * if, and only if, its journal `when` is greater than `Number(created_at)` of that row. That row is + * not always the newest stamp: Postgres sorts NULLs FIRST in a descending order, so a single row + * with a NULL `created_at` is the row it reads, and `Number(null)` is 0. See `migratorHighWaterMark`. It never looks at hashes, never looks at tags, and never notices that a + * migration it walked past was one it has never run. A migration whose `when` is at or below the + * high-water mark is therefore not "pending": it is unreachable, forever, and the migrator will + * report success without it. + * + * WHY THAT IS NOT HYPOTHETICAL. A branch that ships migrations and is then merged with `main` has + * its own migrations renumbered and restamped to sit after main's. Every database that ran the + * branch BEFORE the merge has already recorded the branch's old, higher stamp. Main's migrations + * now carry a `when` older than that mark, so they are skipped — silently — while the renumbered + * branch migrations, stamped later still, run perfectly. The database ends up missing tables that + * the migrator just said it had applied. A fresh database is unaffected, which is exactly why CI, + * which always migrates from empty, cannot see it. + * + * WHY THIS REFUSES RATHER THAN REPAIRS. Running the unreachable SQL and backfilling its row is a + * two-line change and the wrong one. The migrations that are out of reach are out of reach because + * some OTHER journal already ran against this database, and nothing here knows what that journal + * did — whether its statements created the same objects under other names, left half a schema + * behind, or were the hand-repair of an earlier failure. The honest answer to "this database cannot + * be brought up to date by running the folder forward" is to say so, loudly, with the names in + * hand, and to stop. An operator can then drop a disposable database, or repair a durable one + * deliberately. What must never happen again is `{"type":"migrations-applied","status":"ok"}` over + * tables that do not exist. + */ +import { createHash } from "node:crypto"; +import { readFile } from "node:fs/promises"; +import { join } from "node:path"; + +/** One migration in the folder, as the migrator reads it. */ +export type FolderMigration = { + tag: string; + /** The journal's `when`: the only thing the migrator compares. */ + when: number; + /** + * sha256 of the whole `.sql` file, hex. + * + * Computed exactly as `drizzle-orm/migrator`'s `readMigrationFiles` computes it — the whole file + * as read, before any statement splitting — because this is matched against the hashes that the + * migrator itself wrote into its journal table. A different recipe here would make + * every applied migration look unapplied. + */ + hash: string; +}; + +/** + * One row of the migrator's journal table (see `MigrationsJournal`). + * + * `createdAt` is nullable because the column is: drizzle creates it as a bare `bigint`, and a NULL + * there is not noise to be defaulted away — it is the row the migrator compares against. A reader + * that turns NULL into a number before it gets here hides exactly the case that matters. + */ +export type AppliedMigration = { hash: string; createdAt: number | null }; + +/** + * Where the migrator keeps its bookkeeping: the table it reads its high-water mark from and records + * each applied migration in. + * + * The SHAPE lives here, in the module with no database in it, and the VALUE does not: + * `MIGRATIONS_JOURNAL` in `./apply-migrations` is the one place the name is chosen, and it is handed + * to everything that needs it — the reach check's read, `migrate()`, and `outOfReachRefusal`'s repair + * instructions. The value cannot move here without this module deciding deployment configuration, + * and it cannot be imported from there without a cycle (`./apply-migrations` imports this module), + * so it is passed in. Nothing in this file may spell the table's name. + */ +export type MigrationsJournal = { + migrationsSchema: string; + migrationsTable: string; +}; + +/** + * The journal table as an operator would type it into `psql`: schema-qualified, each part quoted. + * + * Quoted always rather than when needed, because "when needed" is a reserved-word list this file + * has no business keeping; a quoted lower-case identifier means exactly what the bare one does. + */ +function journalTable({ + migrationsSchema, + migrationsTable, +}: MigrationsJournal): string { + const quote = (identifier: string) => `"${identifier.replaceAll('"', '""')}"`; + return `${quote(migrationsSchema)}.${quote(migrationsTable)}`; +} + +type Journal = { entries: { idx: number; tag: string; when: number }[] }; + +/** + * The folder, read the way the migrator reads it: the journal decides, not the directory listing. + * + * A `.sql` file with no journal entry never runs and is not this function's business; an entry with + * no file stops the migrator dead, and `readFile` rejecting here says so in the same breath. + */ +export async function readMigrationFolder( + folder: string, +): Promise { + const journal = JSON.parse( + await readFile(join(folder, "meta", "_journal.json"), "utf8"), + ) as Journal; + + return Promise.all( + journal.entries.map(async (entry) => ({ + tag: entry.tag, + when: entry.when, + hash: createHash("sha256") + .update(await readFile(join(folder, `${entry.tag}.sql`), "utf8")) + .digest("hex"), + })), + ); +} + +/** + * The number the migrator will compare every journal `when` against, chosen the way it chooses it. + * + * `PgDialect.migrate` (drizzle-orm 0.45.2) runs `select … order by created_at desc limit 1` and then + * `Number(lastDbMigration.created_at) < migration.folderMillis`. Two things follow, and this + * function must reproduce both, because a guard that picks a different row than the migrator is a + * guard about some other migrator: + * + * - Postgres puts NULLs FIRST in a descending sort, so one NULL `created_at` is the row it reads, + * however many real stamps sit below it. `Math.max` over the stamps picks the largest real one + * and disagrees. + * - `Number(null)` is 0, so that row's mark is 0 and every migration in the folder is "after" it: + * the migrator re-runs the whole history and dies on the first `CREATE TYPE` that already exists. + * + * `undefined` for an empty table: the migrator then has no row and runs everything, correctly. + */ +export function migratorHighWaterMark( + applied: readonly AppliedMigration[], +): number | undefined { + if (applied.length === 0) return undefined; + if (applied.some((row) => row.createdAt === null)) return 0; + return Math.max(...applied.map((row) => row.createdAt ?? 0)); +} + +/** + * The migrations the migrator would get wrong on this database, judged against the row it reads. + * + * Two ways, both of which end with the migrator's word and the database disagreeing: + * + * - OUT OF REACH: never applied, and stamped at or below the mark — walked past forever, while the + * run reports success. + * - TO BE RE-RUN: already applied (its hash is recorded), yet stamped ABOVE the mark — run a second + * time. With honest stamps the mark is at least every applied migration's `when`, so this is + * empty; it fills when the row the migrator reads is not the newest stamp, which a NULL + * `created_at` guarantees. + * + * An empty `applied` is a database the migrator has never touched, where everything is reachable by + * definition — a fresh database can never be in this trouble, and saying so explicitly keeps the + * check from having an opinion about the one case it has no evidence for. + */ +export function migrationsOutOfReach( + folder: readonly FolderMigration[], + applied: readonly AppliedMigration[], +): FolderMigration[] { + const highWaterMark = migratorHighWaterMark(applied); + if (highWaterMark === undefined) return []; + + const appliedHashes = new Set(applied.map((row) => row.hash)); + + return folder.filter((migration) => + migration.when <= highWaterMark + ? !appliedHashes.has(migration.hash) + : appliedHashes.has(migration.hash), + ); +} + +/** + * The refusal, written for whoever is reading a failed deploy at an unreasonable hour. + * + * It names the mark and what set it, every migration that cannot be reached, and the two ways out, + * because the one thing an operator cannot work out from a stack trace is that the database is + * *ahead* of the folder rather than behind it. + * + * `journal` is required, not defaulted: the repair instructions are SQL an operator will paste, and + * they must name the table the check actually read. A default here would be a second spelling of the + * name, and the first configuration that moved the journal would make this message send someone to + * repair a table that is not the one refusing them. + */ +export function outOfReachRefusal( + outOfReach: readonly FolderMigration[], + folder: readonly FolderMigration[], + applied: readonly AppliedMigration[], + journal: MigrationsJournal, +): string { + const table = journalTable(journal); + const highWaterMark = migratorHighWaterMark(applied) ?? 0; + const appliedHashes = new Set(applied.map((row) => row.hash)); + const skipped = outOfReach.filter( + (migration) => !appliedHashes.has(migration.hash), + ); + const rerun = outOfReach.filter((migration) => + appliedHashes.has(migration.hash), + ); + const nulls = applied.filter((row) => row.createdAt === null).length; + const inFolder = new Set(folder.map((migration) => migration.hash)); + /* + * Rows this folder cannot account for. Not a failure on its own — a squashed or deleted migration + * leaves them too — but when migrations are out of reach these rows are almost always the reason, + * so the count is the fastest thing an operator can act on. + */ + const unknown = applied.filter((row) => !inFolder.has(row.hash)).length; + const mark = + nulls > 0 + ? "a row with no created_at, which the migrator reads first and counts as 0" + : (folder.find((migration) => migration.when === highWaterMark)?.tag ?? + "a migration this folder does not contain"); + const list = (migrations: readonly FolderMigration[]) => + migrations.map( + (migration) => ` - ${migration.tag} (stamped ${migration.when})`, + ); + + return [ + `This database's migration journal, ${table}, has already recorded a migration stamped ${highWaterMark} (${mark}), and the migrator only runs migrations stamped after the row it reads: the first one ordered by created_at descending.`, + ...(nulls === 0 + ? [] + : [ + `${nulls === 1 ? "1 applied row has" : `${nulls} applied rows have`} a NULL created_at. Postgres sorts NULLs first in a descending order, so that row, not the newest stamp, is the mark.`, + ]), + ...(skipped.length === 0 + ? [] + : [ + `${skipped.length === 1 ? "This migration is" : `These ${skipped.length} migrations are`} stamped at or below that mark and ${skipped.length === 1 ? "has" : "have"} never been applied here, so running the migrator would skip ${skipped.length === 1 ? "it" : "them"} and report success over the schema ${skipped.length === 1 ? "it" : "they"} should have created:`, + ...list(skipped), + ]), + ...(rerun.length === 0 + ? [] + : [ + `${rerun.length === 1 ? "This migration has" : `These ${rerun.length} migrations have`} already been applied here but ${rerun.length === 1 ? "is" : "are"} stamped above that mark, so running the migrator would run ${rerun.length === 1 ? "it" : "them"} a second time:`, + ...list(rerun), + ]), + unknown === 0 + ? "Every applied migration is still present in this folder." + : `${unknown} applied ${unknown === 1 ? "migration is" : "migrations are"} not in this folder at all, which is what a renumbered or rewritten migration history looks like from here: this database ran a journal that no longer exists.`, + nulls > 0 + ? `Nothing has been applied. Give every row with a NULL created_at the journal \`when\` of the migration whose hash it records (\`update ${table} set created_at = where hash = \`), or delete a row that matches no migration, and run again.` + : `Nothing has been applied. Recreate the database from empty if it is disposable (a development, preview or CI database usually is); otherwise apply the SQL above by hand and record each one with \`insert into ${table} (hash, created_at) values (, )\`, which leaves the high-water mark where it is.`, + ].join("\n"); +} diff --git a/server/src/db/schema/plugins.ts b/server/src/db/schema/plugins.ts index 7d2d7d2e0..83da06c4e 100644 --- a/server/src/db/schema/plugins.ts +++ b/server/src/db/schema/plugins.ts @@ -166,6 +166,34 @@ export const mcpTools = pgTable( .notNull() .references(() => mcpServers.id, { onDelete: "cascade" }), name: text("name").notNull(), + /** + * THE VENDOR'S OWN SPELLING OF THIS ACTION, which is not always a name a model may be offered. + * + * `name` is this deployment's identifier for the action: half of the `/` ref a + * grant is written against, and the half of `mcp____` a model is offered. A + * model tool name must match `^[a-zA-Z0-9_-]+$`, so `name` must too. + * + * THE TWO USED TO BE ONE COLUMN, AND ARCADE IS WHERE THAT BROKE. Its listing answers + * `qualified_name` — `Gmail.ListEmails` — and the dot is legal at the vendor and illegal in a + * tool name, so every Arcade action this deployment recorded produced an offered name the model + * API rejects outright. Not the one tool: the request carries every tool together, so a single + * granted Arcade action failed the whole call with `Invalid 'tools[47].name'`, and no Arcade + * tool had ever been callable by any model. + * + * STORED RATHER THAN RECONSTRUCTED. `Gmail.ListEmails` is `.` and the toolkit + * is already the server id, so the vendor's spelling LOOKS derivable from `name` — but that is a + * rule about the shape of today's listing, not a promise the vendor makes, and the one thing + * that must never be guessed is the string an action is executed by. It is also what the + * per-action authorization flow speaks end to end (`grantsFor`, the Authorize button, the + * attempt row, `?action=`, the vendor's own `authorize({ action })`) and what this deployment's + * refusal sentences quote back, so it is a fact the row has to hold. + * + * EQUAL TO `name` FOR EVERY OTHER TRANSPORT, and that is not a placeholder. Composio's + * `GMAIL_FETCH_EMAILS` and an MCP server's names are already offerable as they stand, so there + * are no two spellings to keep apart and the column says so. Migration 0063 backfilled it that + * way for the same reason. + */ + vendorName: text("vendor_name").notNull(), description: text("description").notNull().default(""), /** The tool's own JSON Schema, passed to the model unchanged. */ inputSchema: jsonb("input_schema").notNull().default({}), @@ -410,7 +438,7 @@ export const composioConnections = pgTable( export const brokeredConnections = pgTable( "brokered_connections", { - provider: text("provider").$type<"composio">().notNull(), + provider: text("provider").$type<"composio" | "arcade">().notNull(), app: text("app").notNull(), holder: text("holder").$type<"person" | "deployment">().notNull(), userId: text("user_id"), @@ -431,7 +459,7 @@ export const brokeredConnections = pgTable( ), check( "brokered_connections_provider_check", - sql`${table.provider} IN ('composio')`, + sql`${table.provider} IN ('composio', 'arcade')`, ), uniqueIndex("brokered_connections_person_idx") .on(table.provider, table.app, table.userId) @@ -443,6 +471,138 @@ export const brokeredConnections = pgTable( ], ); +/** + * One in-flight Arcade authorization: what the returning browser is verified against. + * + * `actor_id` IS THE SIGNED-IN PERSON'S `users.id` — the session subject — AND NEVER + * `credentialActorId`. `store.ts` reads `input.credentialActorId ?? input.actorId`, and on a Team + * Bot those differ, and neither is the person holding the browser. The verifier finds this attempt + * from the returning browser's session, so any other key writes attempts a browser can never match. + * + * The key is the actor alone, so a person has at most one attempt at a time. A PRIMARY KEY with + * "expired is treated as absent" would be a permanent 409, because the expired row still occupies + * the key. Starting an attempt is therefore one `INSERT ... ON CONFLICT (actor_id) DO UPDATE ... + * WHERE created_at < now() - interval '15 minutes' OR completed_at IS NOT NULL`: a live attempt is + * refused, an expired or completed one is taken over, and nobody is ever locked out. + * + * `completed_at` is what makes completion happen exactly once: the verifier claims the row by + * setting it, and a second return finds it set. `auth_id` is what binds a callback to this attempt; + * an attempt holding null can never complete. + * + * THE ROW IS THE ACTOR'S, AND ONLY `actor_id` CARRIES THE KEY TO `users`. `actor_id` is `users.id`, + * and a column that names a table without a key is a column the database will let drift: a deleted + * person left attempt rows pointing at nobody, and the verifier's "find the attempt for this + * session" would then be matching a key no session can ever present. + * + * `user_id` IS NOT A SECOND PERSON. It is whose account the attempt is for, and for a `person` + * attempt that is the actor and nobody else — `accountRefFor` answers a Personal app with + * `{ userId: actorId }`, and nothing lets one person consent into another's account. So the database + * holds `user_id IS NULL OR user_id = actor_id` (`pending_authorizations_user_is_actor_check`), and + * through that CHECK `user_id` names a person exactly when `actor_id` does. It carried a cascading + * key of its own from `0060` to `0062`, and with nothing making the two columns equal that key let a + * row name two people and die with EITHER: deleting one person took an attempt a DIFFERENT person + * had started. An attempt is evidence of somebody's consent in progress, and the one person whose + * deletion may end it is the one who started it. + * + * CASCADE RATHER THAN RESTRICT, AND THIS ROW IS NOT THE AUDIT TRAIL. An attempt is in-flight + * working state with a fifteen-minute life and at most one row per actor, holding no grant and no + * secret; what a person authorized is recorded in `audit_events`, which deliberately carries + * NO key to `users` for exactly the reason the trail must outlive them. `RESTRICT` here would make + * a person undeletable for fifteen minutes because they happened to have a browser mid-redirect, + * which is a legitimate deletion blocked by ephemeral state. Note the contrast with + * {@link brokeredConnections}, whose `user_id` is keyless ON PURPOSE: that row IS the record of + * which apps somebody held, and `retireConnectionsFor` reads it AFTER the `users` row is gone. + * Nothing reads an attempt after its person is gone. + * + * `server_id`'s key gets an index of its own. A foreign key is not indexed by postgres on the + * referencing side, so deleting one `mcp_servers` row made the cascade scan this table, and so did + * every lookup by server. `actor_id` is the primary key and indexed by it; `user_id`, no longer a + * key and read by nothing, has none. + */ +export const pendingAuthorizations = pgTable( + "pending_authorizations", + { + actorId: text("actor_id") + .primaryKey() + .references(() => users.id, { onDelete: "cascade" }), + serverId: text("server_id") + .notNull() + .references(() => mcpServers.id, { onDelete: "cascade" }), + action: text("action").notNull(), + /** + * Whose account this attempt is for, with the same meaning and the same two values as + * {@link brokeredConnections.holder} — and held by the same CHECK, because `$type<>` is erased + * at runtime and the row this attempt is reconciled into is held to that pair. + */ + holder: text("holder").$type<"person" | "deployment">().notNull(), + /** Always the actor or `null`; see `pending_authorizations_user_is_actor_check` below. */ + userId: text("user_id"), + vendorUserId: text("vendor_user_id").notNull(), + authId: text("auth_id"), + createdAt: createdAt(), + completedAt: timestamp("completed_at", { withTimezone: true }), + /** + * How the attempt ended, `null` while it is still in flight. + * + * The four names are a ROSTER the database holds, not a comment: every reader switches on them, + * and a fifth value written by hand — or by a caller that cast past the declared union — would + * reach a `switch` the compiler has already been told is exhaustive. + */ + outcome: text("outcome").$type< + "completed" | "failed" | "unreconciled" | "withdrawn" + >(), + }, + (table) => [ + check( + "pending_authorizations_holder_check", + sql`(${table.holder} = 'person' AND ${table.userId} IS NOT NULL) OR (${table.holder} = 'deployment' AND ${table.userId} IS NULL)`, + ), + check( + "pending_authorizations_outcome_check", + sql`${table.outcome} IS NULL OR ${table.outcome} IN ('completed', 'failed', 'unreconciled', 'withdrawn')`, + ), + /** + * An attempt has ended, or it has not: `completed_at` and `outcome` are set together or + * neither is. + * + * A ROW CARRYING AN `outcome` WITH `completed_at` STILL NULL IS A FINISHED ATTEMPT THAT EVERY + * READER READS AS A LIVE ONE. `claimAuthorizationAttempt` frees a held key only + * `WHERE created_at < now() - interval '15 minutes' OR completed_at IS NOT NULL`, and + * `authorizationAttemptFor` answers on `completed_at IS NULL` alone; neither consults + * `outcome`. So one such row locks its actor out of authorizing anything for the rest of the + * 15-minute TTL, with a verdict already recorded against it. The mirror shape — a + * `completed_at` with no `outcome` — is an attempt that ended with nothing saying how, and + * `outcome` is what every operator-facing reading of this table is of. + * + * HERE AND NOT IN THE APPLICATION, although both writers already set the pair in one + * statement. That those two agree today is precisely what makes the invariant invisible to the + * next writer, to a hand-run UPDATE and to a partial restore, and none of those three passes + * through the two functions that currently get it right. Written as a boolean equality rather + * than two `OR`-ed clauses because `(x IS NULL) = (y IS NULL)` is never itself NULL, so the + * CHECK can only pass or refuse — it has no third, silently-accepting verdict. + */ + check( + "pending_authorizations_completion_check", + sql`(${table.completedAt} IS NULL) = (${table.outcome} IS NULL)`, + ), + /** + * A `person` attempt is for the actor's own account, so the row names one person, not two. + * + * HERE AND NOT ONLY IN `accountRefFor`, because this is what keeps a cascade on `users` from + * reaching a row somebody else started — the guarantee is the database's or it is nobody's: a + * hand-run INSERT, a restore, or the next writer does not pass through `accountRefFor`. The + * `IS NULL` arm is the `deployment` attempt, whose shape `pending_authorizations_holder_check` + * already decides; spelled out so this CHECK says what it admits rather than leaning on a NULL + * comparison passing. + */ + check( + "pending_authorizations_user_is_actor_check", + sql`${table.userId} IS NULL OR ${table.userId} = ${table.actorId}`, + ), + index("pending_authorizations_server_idx").on(table.serverId), + ], +); + /** * One person's grant on one MCP server: the row that makes a Bot answer as the asker. * diff --git a/server/src/index.ts b/server/src/index.ts index 1a519b93c..225af16a3 100644 --- a/server/src/index.ts +++ b/server/src/index.ts @@ -6,7 +6,7 @@ import { import { COMPUTER_GUIDANCE } from "@openbot/shared/bot-prompt"; import { workOwner } from "@openbot/shared/work-owner"; import { createTurnRunner } from "@openbot/toolkit/run-turn"; -import { and, eq, isNull } from "drizzle-orm"; +import { and, eq, isNull, ne, sql } from "drizzle-orm"; import { z } from "zod"; import { createActivityStore } from "./activity/activity"; import { @@ -130,6 +130,7 @@ import { } from "./credentials"; import { createDatabase } from "./db/client"; import { + brokeredConnections, channelAgents, channelMemberships, channels, @@ -185,15 +186,23 @@ import { createPasswordStore } from "./passwords/store"; import { createOnboardingStore } from "./people/onboarding"; import { createPeopleStore } from "./people/store"; import { createAccountModeSwitch } from "./plugins/account-mode"; +import { assertActivatable, providerDecision } from "./plugins/broker"; +import { BROKERED_PROFILE } from "./plugins/access"; import { useRoutineTools } from "./plugins/builtin-routines"; +import { useArcadeClient } from "./plugins/arcade"; +import { createArcadeClient } from "./plugins/arcade-adapter"; import { useComposioClient } from "./plugins/composio"; import { createComposioClient } from "./plugins/composio-adapter"; -import { backfillComposioLogos } from "./plugins/logos"; +import { backfillBrokeredLogos } from "./plugins/logos"; import { redirectUriFor } from "./plugins/oauth"; import { createSharedUseGate, createSharedUseStore, } from "./plugins/shared-use-store"; +import { + selectProviderWiring, + storedProvider, +} from "./plugins/provider-wiring"; import { createPluginStore } from "./plugins/store"; import { grantedSkills, @@ -769,10 +778,35 @@ const sandboxedStore = createSandboxedStore(database, bootAuditStore); * Installing a client built from an absent key would turn all of that into a vendor error at first * use, which sends an operator looking for a broken Composio instead of at their own configuration. */ -const composio = config.composioApiKey - ? createComposioClient(config.composioApiKey) - : null; -if (composio) useComposioClient(composio.actions); +/* + * EXACTLY ONE PROVIDER, DECIDED ONCE. `selectProviderWiring` answers which transport client is + * installed and which broker goes on to the store and the routes; the other client is installed as + * an explicit `null`, so a deployment holding both keys (legal, and needed to end accounts at the + * old vendor) never has two seams live. It refuses, rather than wiring nothing, both configurations + * it cannot decide: a named provider whose key is unset, and both keys set with nothing named. + */ +const providerWiring = selectProviderWiring(config, { + composio: createComposioClient, + arcade: createArcadeClient, +}); +useComposioClient(providerWiring.install.composio); +useArcadeClient(providerWiring.install.arcade); +const wiredProvider = providerWiring.provider; +const composio = + wiredProvider && providerWiring.broker + ? { broker: providerWiring.broker, provider: wiredProvider } + : null; +/* + * Activation is refused while the OTHER provider still holds connection rows. Keyed on rows, never + * on keys: having both keys set is the expected state while a sunset is in progress. + */ +if (wiredProvider) { + const [{ count: otherProviderRows }] = await database + .select({ count: sql`count(*)::int` }) + .from(brokeredConnections) + .where(ne(brokeredConnections.provider, wiredProvider)); + assertActivatable(wiredProvider, otherProviderRows); +} /** * The private sign-in form and the Passwords vault. A Bot asks to be signed in; the person answers @@ -835,7 +869,41 @@ const signInService = computerGateway * module scope because the publication, assignment and grant routes below also need to reapprove * or refile against it when a Bot's exposure changes. */ -const sharedUseStore = createSharedUseStore(database); +/* + * WHICH SLICE of `brokered_connections` this deployment reads, decided ONCE, at the one boundary + * that can see both the configuration and the rows. + * + * THERE IS NO `?? "composio"` HERE ANY MORE, AND THAT WAS A BUG RATHER THAN A SHORTHAND. + * Configuration names no provider for three different reasons, and the one that matters is "both + * keys set, OPENBOT_BROKER_PROVIDER unset" — legal, documented, and exactly what a deployment + * migrating off Composio sits in while it ends its old accounts. Defaulting it to `composio` gave + * the plugin store and the shared-use store a filter that excludes every Arcade row this deployment + * holds, so live Arcade connections read as absent and the accounts behind them could not be + * revoked. `storedProvider` takes the three causes apart and, where configuration is silent, lets + * the rows name themselves. The shared-use store and the plugin store are both given this one + * value, so the gate and the approvals it reads agree. + */ +const providerConfiguration = providerDecision(config); +const brokerProvider = storedProvider( + providerConfiguration, + ( + await database + .selectDistinct({ provider: brokeredConnections.provider }) + .from(brokeredConnections) + ).map((row) => row.provider), +); +if (providerConfiguration.kind === "ambiguous") { + /* + * Said out loud, once, at startup: this deployment has two keys and no answer, so nothing is + * active and nothing can be connected or revoked until one is named. The rows it already holds + * are read as their own provider's (above), which is why this is a warning and not a refusal — + * the screens stay honest, the vendor calls stay impossible. + */ + console.warn( + `${providerConfiguration.configured.map((provider) => BROKERED_PROFILE[provider].envVar).join(" and ")} are both set and OPENBOT_BROKER_PROVIDER names neither, so no broker is active: connected apps can be neither connected nor revoked until it is set. Existing connections are read as ${BROKERED_PROFILE[brokerProvider].vendor}'s.`, + ); +} +const sharedUseStore = createSharedUseStore(database, brokerProvider); const pluginStore = createPluginStore({ database, @@ -867,6 +935,7 @@ const pluginStore = createPluginStore({ * attempted. */ broker: composio?.broker, + brokerProvider, }); /* @@ -884,9 +953,13 @@ const accountModes = createAccountModeSwitch({ // Logo metadata is optional; a vendor outage must not prevent the API from starting. if (composio) { - void backfillComposioLogos(database, composio.broker).catch(() => { + void backfillBrokeredLogos( + database, + composio.provider, + composio.broker, + ).catch(() => { console.warn( - "Composio app logos could not be updated. Existing icons remain available; missing logos will be retried on the next restart.", + `${BROKERED_PROFILE[composio.provider].vendor} app logos could not be updated. Existing icons remain available; missing logos will be retried on the next restart.`, ); }); } @@ -2397,7 +2470,7 @@ const app = createApp( // The app directory, behind the same client the plugin store and the transport already share. // Absent without a key, which leaves the routes reporting no broker rather than listing apps // nobody could connect. - composio ? { broker: composio.broker } : undefined, + composio ?? undefined, process.env.OPENBOT_MODEL_OAUTH_FILE?.trim() ? createProviderOAuthProxy(process.env.OPENBOT_MODEL_OAUTH_FILE.trim()) : undefined, diff --git a/server/src/intelligence-entitlement-check.ts b/server/src/intelligence-entitlement-check.ts index 265ed1a8c..cef575869 100644 --- a/server/src/intelligence-entitlement-check.ts +++ b/server/src/intelligence-entitlement-check.ts @@ -20,18 +20,29 @@ export type EntitlementWarning = { fix: string; }; -const FIXES: Record = { - RUNTIME_ENTITLEMENTS_SELF_HOSTED_MISCONFIGURED: +/** + * The codes this build has advice for. A Map, because the code is Intelligence's string rather than + * this deployment's: a plain object answers `toString` with an inherited function, which is truthy + * and so takes the place of the sentence the `||` below exists to supply. + */ +const FIXES: ReadonlyMap = new Map([ + [ + "RUNTIME_ENTITLEMENTS_SELF_HOSTED_MISCONFIGURED", "Intelligence has no valid licence. Give Intelligence's own deployment a COPILOTKIT_LICENSE_TOKEN " + - "(its Helm chart takes it as appApi.licenseSecret, or externalSecrets.secrets.license); setting it " + - "on OpenBot alone is not enough. Until then memory and other licensed features are refused.", - RUNTIME_ENTITLEMENTS_SELF_HOSTED_EXPIRED: + "(its Helm chart takes it as appApi.licenseSecret, or externalSecrets.secrets.license); setting it " + + "on OpenBot alone is not enough. Until then memory and other licensed features are refused.", + ], + [ + "RUNTIME_ENTITLEMENTS_SELF_HOSTED_EXPIRED", "Intelligence's licence has expired. Renew it and replace COPILOTKIT_LICENSE_TOKEN on Intelligence's " + - "deployment. Until then memory and other licensed features are refused.", - RUNTIME_ENTITLEMENTS_MANAGED_UNAVAILABLE: + "deployment. Until then memory and other licensed features are refused.", + ], + [ + "RUNTIME_ENTITLEMENTS_MANAGED_UNAVAILABLE", "Managed Intelligence could not resolve this project's entitlement just now. This is usually " + - "temporary; licensed features may be refused until it recovers.", -}; + "temporary; licensed features may be refused until it recovers.", + ], +]); /** The warning a response deserves, or null when Intelligence answers ready and active. */ export function entitlementWarning( @@ -52,7 +63,7 @@ export function entitlementWarning( ...(code ? { code } : {}), ...(response.error?.message ? { message: response.error.message } : {}), fix: - (code && FIXES[code]) || + (code && FIXES.get(code)) || "Intelligence did not confirm this deployment's entitlement, so licensed features such as memory may be refused.", }; } diff --git a/server/src/plugins/access.ts b/server/src/plugins/access.ts index 56a582f86..bb911cfa9 100644 --- a/server/src/plugins/access.ts +++ b/server/src/plugins/access.ts @@ -1,6 +1,7 @@ +import { toolkitOf as arcadeToolkitOf } from "./arcade"; import { schemeKind } from "./broker"; import type { CatalogueEntry } from "./catalogue"; -import { toolkitOf } from "./composio"; +import { toolkitOf as composioToolkitOf } from "./composio"; import type { TransportKind } from "./transport"; /** @@ -23,6 +24,14 @@ import type { TransportKind } from "./transport"; * without filling in this function, and the test beside it enumerates every row shape that exists — * which is the exhaustiveness the previous arrangement could not offer, since nothing connects three * independent string comparisons. + * + * AND THIS IS THE ONE MODULE ALLOWED TO SPELL A BROKER'S NAME, which `brokered-provenance.test.ts` + * enforces by exempting this file and no other. A second broker turned `row.provenance === "composio"` + * from a reading of one column into a claim that there is only one broker — a claim each copy of the + * comparison made separately, in a module that had no reason to be edited when the second one + * arrived. So the name stops being a comparison anybody can write and becomes {@link BrokerProvider} + * and {@link brokeredProvenance}, asked here; everywhere else reads the resolved fields below. The + * exemption is not a privilege, it is the cost of having somewhere for the vocabulary to live. */ /** Whose credential a call goes out on. */ @@ -195,7 +204,118 @@ export class CatalogueTransportUnroutableError extends ServerUnresolvableError { * compile-time door and the runtime one shut, rather than trading the second for the first. */ function isBrokerTransport(kind: TransportKind): boolean { - return kind === "composio"; + return brokeredProvenance(kind); +} + +/** + * Which broker a row is reached through, for a row that is reached through one at all. + * + * A NAMED UNION RATHER THAN THE STRING THE COLUMN HOLDS, because the column holds every provenance + * there is — `first-party`, `custom`, a broker's name — and only these two mean "an app somebody + * enabled at a broker, reached with the deployment's key and kept apart by an id we send". Code that + * compared the column to a literal could not say which of those it meant, so the comparison had to be + * re-derived wherever it was needed, and re-derived wrongly once a second broker existed. + * + * THE VALUES ARE THE COLUMN'S OWN SPELLINGS, not a mapping away from them. `brokered_connections.provider` + * is constrained to exactly `composio` and `arcade`, and `mcp_servers.provenance` writes the same two + * words, so a translation table here would be a second vocabulary to keep in step with the database's + * for no gain. What this type adds is that the compiler now knows the set is closed: a third broker is + * a change to this line, and every `Record` below stops compiling until it is + * answered for. + */ +export type BrokerProvider = Extract; + +/** + * Whether a provenance names a broker — the one place that question is asked. + * + * CRITERION. No module outside this one compares a provenance or a provider column to a vendor's + * name. `brokered-provenance.test.ts` is what says so, and this predicate is what that test leaves + * callers with instead. + * + * REASON. The comparison it replaces was correct and complete for as long as there was one broker, + * and every copy of it became a silent `false` for Arcade rows on the day there were two — not a + * failure, a row quietly resolving as somebody's MCP endpoint and being dialled as one. A function + * cannot do that: adding a broker to the union above changes every caller's answer at once, and the + * ones that must NOT change are then the ones that have to say so explicitly. + * + * TAKES A `string`, NOT A `BrokerProvider`, because every caller is holding a database column. A + * parameter narrowed to the union would push the unsafe cast back out to each call site, which is + * precisely the thing being collected here. The type predicate is the point: `row.provenance` goes + * in as a string and comes out narrowed, so the tables keyed on the union below are reachable + * without an assertion. + */ +export function brokeredProvenance(p: string): p is BrokerProvider { + return p === "composio" || p === "arcade"; +} + +/** + * Which app at which broker, read from the url by the parser belonging to that broker. + * + * ONE PARSER PER PROVIDER, AND THEY ARE NOT INTERCHANGEABLE. `composio://gmail` and `arcade://Gmail` + * are different schemes naming apps under different rules: Composio's slugs are lower case by + * convention and Arcade's toolkit names are case-sensitive and dotted, so each module's `toolkitOf` + * answers null for the other's url by design. Dispatching on the provider rather than trying both + * parsers is what keeps that null meaning "this row's url does not name an app at its own broker" — + * the thing the brokered gate needs — instead of "no broker recognised it", which would let a row + * provenanced at one broker resolve against the other's parse of the same string. + * + * A `Record` keyed on {@link BrokerProvider} rather than a branch, so a broker added to the union + * cannot be resolved until the url it is dialled at can be read. + */ +const TOOLKIT_OF: Record string | null> = { + composio: composioToolkitOf, + arcade: arcadeToolkitOf, +}; + +/** + * What each broker's rows are minted as: the url scheme, the id namespace and the vendor label. + * + * ONE ROW PER PROVIDER, KEYED ON {@link BrokerProvider}, so a third broker cannot be enabled until + * it says how its rows are spelled. The provenance column is the provider's own name and needs no + * entry here. The id prefix is what prefixes every tool name and what a grant and a policy rule are + * written against, which is why `store.ts` reserves EVERY provider's and not only the active one's: + * a deployment that switches broker must not find a typed server already sitting in the namespace + * the other path mints into. The scheme is reserved the same way one step in — the screen name + * `/admin/plugins/` is a static route on each broker — and that reservation is derived + * from these keys rather than spelled again, because a reservation spelled twice is the one that + * gets added to once. + * + * AND IT LIVES HERE RATHER THAN IN `store.ts`, BESIDE {@link TOOLKIT_OF}, for that table's reason. + * This module is where a broker's vocabulary is allowed to be spelled, and it is the one file + * `brokered-provenance.test.ts` exempts. A scheme literal in `store.ts` is a second home for the + * same word, and the guard that keeps the first home the only one cannot be absolute while the + * record it reads from sits outside it. `shared-use-store.ts` had to derive its own `${provider}://` + * for exactly as long as this was private here, which is what two homes costs: one table, one + * spelling, read by everybody. + */ +export const BROKERED_PROFILE: Record< + BrokerProvider, + { scheme: string; idPrefix: string; vendor: string; envVar: string } +> = { + composio: { + scheme: "composio://", + idPrefix: "composio-", + vendor: "Composio", + envVar: "COMPOSIO_API_KEY", + }, + arcade: { + scheme: "arcade://", + idPrefix: "arcade-", + vendor: "Arcade", + envVar: "ARCADE_API_KEY", + }, +}; + +/** + * {@link TOOLKIT_OF}, reachable. A function so a caller cannot index the table with a widened + * string, and so the table stays private to the one module that argues for it: a second dispatch + * anywhere else is a second place for a provider to be missed. + */ +export function toolkitOfFor( + provider: BrokerProvider, + url: string, +): string | null { + return TOOLKIT_OF[provider](url); } /** @@ -207,7 +327,7 @@ function isBrokerTransport(kind: TransportKind): boolean { * from an old backup, written by a bug — cannot turn a reviewed vendor into a brokered one and start * sending its calls somewhere else. The row only ever answers where the catalogue is silent. * - * IT CUTS BOTH WAYS, WHICH IS WHY `composio` IS REFUSED RATHER THAN OVERRULED. Only one direction + * IT CUTS BOTH WAYS, WHICH IS WHY A BROKERED PROVENANCE IS REFUSED RATHER THAN OVERRULED. Only one direction * was considered when that order was written: a brokered row whose id collides with a curated slug * was quietly answered as the curated vendor. Nothing in these two arguments tells that row apart * from a tampered curated one, so the only answer that is not wrong in one of the two worlds is no @@ -234,16 +354,16 @@ export function accessFor( }, entry: CatalogueEntry | null, ): ServerAccess { - if (entry && row.provenance === "composio") { + if (entry && brokeredProvenance(row.provenance)) { throw new ServerRowAmbiguousError( - `${entry.key} is a server this deployment ships an entry for, and a row with that id says its provenance is composio. Nothing can tell an edited column from a brokered app that took the name, so this row is not resolved at all: rename it, or correct its provenance.`, + `${entry.key} is a server this deployment ships an entry for, and a row with that id says its provenance is ${row.provenance}. Nothing can tell an edited column from a brokered app that took the name, so this row is not resolved at all: rename it, or correct its provenance.`, ); } if (entry) { if (isBrokerTransport(entry.transport ?? "mcp")) { throw new CatalogueTransportUnroutableError( - `${entry.key} is a catalogue entry declaring the composio transport, which is reached from a row's provenance and the app slug in its url — neither of which an entry has. There is no app to broker to and no connection to check, so this entry is not resolved at all: give it the transport it is actually reached over.`, + `${entry.key} is a catalogue entry declaring the ${entry.transport ?? "mcp"} transport, which is a broker's and is reached from a row's provenance and the app slug in its url — neither of which an entry has. There is no app to broker to and no connection to check, so this entry is not resolved at all: give it the transport it is actually reached over.`, ); } @@ -255,7 +375,7 @@ export function accessFor( }; } - if (row.provenance === "composio") { + if (brokeredProvenance(row.provenance)) { /* * AND A BROKERED APP THAT NEEDS NO CREDENTIAL IS REACHED AS THE DEPLOYMENT, NOT AS THE ASKER. * @@ -281,15 +401,22 @@ export function accessFor( * asked, the call lands in one account that is nobody's in particular, and naming the asker as * the account would assert an attribution that does not exist. The asker is still on the row as * `actor`. + * + * NEITHER OF THOSE TWO READINGS IS THE BROKER'S, which is why adding a second broker leaves this + * branch alone. `schemeKind` and `accountMode` are columns on OUR row describing what the app was + * created as and whether it was switched to Shared, and both answer the same question about an + * Arcade app that they answer about a Composio one. Only WHICH broker and WHICH app are the + * provider's business, and those are the two fields below. */ + const provider = row.provenance; return { - transport: "composio", + transport: provider, credential: "brokered", reachedAs: schemeKind(row.authScheme) === "none" || row.accountMode === "shared" ? "deployment" : "person", - toolkit: toolkitOf(row.url), + toolkit: TOOLKIT_OF[provider](row.url), }; } diff --git a/server/src/plugins/arcade-adapter.ts b/server/src/plugins/arcade-adapter.ts new file mode 100644 index 000000000..be67c89fd --- /dev/null +++ b/server/src/plugins/arcade-adapter.ts @@ -0,0 +1,1801 @@ +import Arcade, { APIError } from "@arcadeai/arcadejs"; +import { + type ArcadeActions, + type ArcadeFailure, + ArcadeFailureError, + authorizationRequirementOf, + classify, + requiredScopesOf, + shapeOf, + vendorStatusOf, +} from "./arcade"; +import { + type BrokerApp, + type BrokerConnection, + BrokerRefusalError, + type ConnectedAppBroker, + flagOf, + type GrantState, +} from "./broker"; + +/** + * THE VENDOR'S ONLY DOOR INTO THE SERVER. This is the one file under `server/src` that imports + * `@arcadeai/arcadejs`, so a version bump has exactly this file to be read against, the same + * convention `createComposioClient` states for its SDK. It imports the transport (`./arcade`) for + * the `ArcadeFailure` shape; the transport never imports it, because that direction is a cycle and + * `broker.ts` records why. + */ + +/** Deeper than any real wrapping; a bound, so a cyclic `cause` cannot loop. */ +const MAX_CAUSE_DEPTH = 16; + +/** + * THE TEXT A VENDOR FIELD CARRIES, OR NOTHING — AND A STRING WITH NO TEXT IN IT IS NOTHING. + * + * `""` is absence wearing a value's clothes, and answering it as a value is what breaks every + * caller that then writes `textOf(a) ?? textOf(b)`: `??` falls through on null and undefined ONLY, + * so an empty `provider_user_info.name` SHADOWED a perfectly good `login` and the Connected-accounts + * screen drew a blank name on a connection that is genuinely connected. The emptiness belongs here, + * in the function that claims to answer "is this text", and not in a `||` at each call site — one + * of which would be forgotten. Whitespace-only is the same fact: a name of three spaces draws the + * same blank. + * + * The value is returned UNTOUCHED when it has text; this answers whether there is any, it does not + * reformat what the vendor sent. `authorize` below already spells this rule inline for `url` and + * the authorization id (`typeof x !== "string" || x === ""`), which is the same judgement made one + * field at a time. + */ +const textOf = (value: unknown): string | undefined => + typeof value === "string" && value.trim() !== "" ? value : undefined; + +/** + * Walk the `cause` chain to the FIRST `APIError` and read its `status` and the response body's + * `error.name` / `error.message`. The SDK's own fields are `status`, `headers` and `error` (the + * parsed body); nothing on it names the tool, so nothing here looks for one. No `APIError` anywhere + * in the chain answers `null`. + * + * `status` is undefined for `APIConnectionError` and `APIUserAbortError`, which extend `APIError`: + * no response was ever read, so the outcome is uncertain, not refused. + */ +export function normalizeArcadeError(error: unknown): ArcadeFailure | null { + const seen = new Set(); + let current: unknown = error; + for (let depth = 0; depth < MAX_CAUSE_DEPTH; depth += 1) { + if (current === null || typeof current !== "object" || seen.has(current)) + return null; + seen.add(current); + /* + * A REFUSAL THIS FILE ALREADY NORMALIZED ANSWERS ITSELF, and it is read on the same chain walk + * rather than only at the top, because {@link vendorCall}'s answer is carried as a `cause` by + * the one place that wraps it again (`revoke`, which fails over several connections at once). + * + * THIS IS WHAT KEEPS THE MEDIATION FROM COSTING ANYTHING. Every reader of a failure out of this + * adapter — the authorize route's definite-or-uncertain decision, keyed on `status`; `callTool`'s + * authorize prompt and `confirmReturn`'s `user_mismatch`, both keyed on the body's `error.name` + * — asks through this function, so stopping the vendor's own `APIError` at the adapter boundary + * takes nothing away from any of them. The vendor's PROSE is the only thing that does not come + * back out; see {@link ArcadeFailureError}, which drops it. + */ + if (current instanceof ArcadeFailureError) return current.failure; + if (current instanceof APIError) { + const body = current.error; + const record = + body !== null && typeof body === "object" + ? (body as Record) + : {}; + return { + status: typeof current.status === "number" ? current.status : undefined, + name: textOf(record.name), + message: textOf(record.message), + }; + } + current = (current as { cause?: unknown }).cause; + } + return null; +} + +/** + * THIS DEPLOYMENT'S ONE SENTENCE FOR "ARCADE ANSWERED, AND THE ANSWER HAD NO BODY IN IT". + * + * ONE SENTENCE AND NOT SEVERAL, because the fact is one fact wherever it lands: the socket carried + * a status and no readable value under it — an empty 204, or a body whose whole JSON is `null`. + * It is written in the uncertainty register {@link vendorCall}'s `APIConnectionError` sentence uses + * ("is not known here") rather than the refusal register ("Arcade refused …"), because an empty + * answer is not the vendor declining: whether the call took effect is genuinely unknown, and every + * caller that spends a DELETE off this reading must treat it as unknown. + * + * NOT A SHAPE QUOTED BACK. The body is the thing this file exists to keep off an admin page; see + * {@link vendorCall}. "No body" says all there is to say without quoting one. + */ +const unreadableBody = (step: string): string => + `Arcade answered ${step} with no body this deployment could read — an empty response, or one whose JSON is the literal null — so what it says is not known here.`; + +/** + * THE ANSWER'S BODY, OR THIS DEPLOYMENT'S REFUSAL — never a dereference of `null`. + * + * FOR THE CALLS THAT ARE NOT PAGED LISTINGS. A page goes through `OffsetPage`'s constructor, which + * raises on a null body and is caught in {@link vendorCall}; `tools.authorize`, `auth.status` and + * `auth.confirmUser` go through no constructor at all, so the SDK hands a literal `null` straight + * back WEARING ITS DECLARED RESPONSE TYPE. The generated types are a description of what Arcade + * sends today and are validated by nothing — the same reading `confirmReturn`'s `auth_id` check + * already states one field down — so reading `answer.status` off one of those is the identical + * unguarded dereference, raising the identical bare `TypeError` from inside this file instead. + * + * THE FIELD-LEVEL GUARDS BELOW STAY EXACTLY AS THEY ARE: this establishes only that there is an + * object to read fields off, and says nothing about what is in it. + */ +function requireBody(step: string, answer: T): T & object { + if (answer === null || typeof answer !== "object") { + throw new Error(unreadableBody(step)); + } + return answer as T & object; +} + +/** + * ONE CALL TO THE VENDOR, WITH ITS REFUSAL TURNED INTO THIS DEPLOYMENT'S OWN SENTENCE. + * + * EVERY `client.*` CALL IN THIS FILE GOES THROUGH HERE, and that uniformity is the point rather + * than a tidiness: the thing being confined is the SDK's `APIError`, whose `message` is + * `${status} ${the response body}` (`core/error.js: makeMessage`), and one unwrapped call is one + * path on which a vendor body reaches a log line, the Plugins page's `lastError`, a model's context + * or an audit row. On this vendor a body is not inert — the auth paths answer with a bearer `url` + * and a live `context.token` — and the claim this adapter is held to is that neither ever reaches + * any of those. `step` is written HERE, at the call site, for the reason `callTool`'s refusal names + * the action from the call site: nothing in an `APIError` says what was being asked. + * + * WHAT IS NOT AN SDK ERROR IS RETHROWN UNTOUCHED, which is deliberate: it leaves this file's own + * refusals — the malformed-listing sentences, the mint with no url — exactly as they were. + * + * WITH ONE EXCEPTION, AND IT IS THE BODY THE SDK COULD NOT READ. A 204 with `content-length: 0`, + * and a body whose JSON is the literal `null`, both reach `OffsetPage`'s constructor as `body === + * null` and raise a bare `TypeError: null is not an object (evaluating 'body.items')` from inside + * `@arcadeai/arcadejs`, before one line of this file has looked at anything. Left to escape as + * itself, that `TypeError` is the WRONG ANSWER TWICE: an operator reading the Plugins page gets a + * vendor stack trace instead of this deployment's sentence, indistinguishable in the logs from a + * programmer error here; and the only reason the revoke invariant holds on those two shapes is + * that a crash is technically "not answering" — one tidy-up of the cast that raises it (a `?? []`, + * say) turns both into `revoke` answering `false` with no DELETE spent, which is the live defect + * `broker.ts:712-717` forbids. So the body this deployment could not read gets a REFUSAL, the same + * one {@link requireBody} writes for the non-paged calls, and never a fallback to an empty list. + * + * THE ORDER IS WHAT MAKES THAT SAFE, and it is the whole of the old warning against catching "by + * shape": `normalizeArcadeError` IS ASKED FIRST and every `APIError` answers it, so nothing + * reaching the `TypeError` branch carries a vendor response at all. The `run()` closures here are + * one `client.*` call each and nothing else, so a `TypeError` with no `APIError` anywhere in its + * chain is the SDK failing to read an answer, which is exactly what the sentence says. + * + * A REFUSAL THAT IS ALREADY MEDIATED PASSES STRAIGHT THROUGH, so a nested call cannot dress one + * sentence up in another. + */ +async function vendorCall(step: string, run: () => Promise): Promise { + try { + return await run(); + } catch (error) { + if (error instanceof ArcadeFailureError) throw error; + const failure = normalizeArcadeError(error); + if (!failure) { + if (error instanceof TypeError) throw new Error(unreadableBody(step)); + throw error; + } + throw new ArcadeFailureError( + failure.status === undefined + ? // `status` is undefined for `APIConnectionError` and `APIUserAbortError`: no response was + // ever read, so the outcome is uncertain rather than refused, and the sentence says so — + // the authorize route keys exactly that distinction off `status`. + `Arcade did not answer ${step}, so whether it ran is not known here.` + : `Arcade refused ${step} with HTTP ${failure.status}.`, + failure, + ); + } +} + +/** + * Page size for the PER-TOOLKIT action listings, `grantsFor` and `authProvidersNamedBy`. A short + * page ends it, never `total_count`. The whole-directory listing behind `listApps` does NOT use + * this: see {@link DIRECTORY_PAGE_SIZE}. + * + * THE MEASURED WORST CASE, so the next person does not re-scan the API: across Arcade's directory + * (8,320 tools, 129 toolkits) the largest toolkit is **`GithubApi`, 818 actions** — then + * `PosthogApi` 766, `DatadogApi` 588, `ZohoBooksApi` 511, `HubspotCrmApi` 453. At 100 a page + * costs ~1.19 s, so `GithubApi` read SEQUENTIALLY was 9 pages, ~10.7 s, past the 10 s + * `VENDOR_CALL_TIMEOUT_MS` that wraps the grants screen and Disconnect alike: neither could load. + * Under {@link CATALOGUE_CONCURRENCY} it is page one, then the other 8 in one wave, ~2.4 s. + * + * KEPT AT 100 RATHER THAN RAISED TO THE DIRECTORY'S 1000, deliberately. Latency, not size, + * dominates (~1.19 s at 100, ~1.8 s at 1000), so two waves of 100 cost about what one page of + * 1000 does. At 1000 every toolkit Arcade publishes would be ONE page, and the paths that make a + * per-toolkit read trustworthy — a short page ending it, `seen < total` judged across pages, a + * provider disagreeing with itself past page one — would stop being exercised by any real toolkit + * while still being the only defence when one grows. At 100, every toolkit over 100 actions + * crosses page boundaries on every read, so the completeness check stays a live check. + */ +const CATALOGUE_PAGE_SIZE = 100; + +/** + * How many per-toolkit action pages are in flight at once after page one has said how many there + * are, through the same opt-in {@link Listing.concurrency} the directory uses. + * + * EIGHT, because it covers `GithubApi` (818 actions → 8 pages after the first) in ONE wave while + * still bounding what a lying `total_count` can fire. The deadline arithmetic is + * `~1.19 s × (1 + ⌈remaining / 8⌉)`: under 10 s up to 56 remaining pages, a toolkit of ~5,700 + * actions, for the grants screen. Disconnect spends ~3 more sequential calls after this listing + * (auth providers, connections, the DELETE; ~1.2 s each, not measured separately), which leaves + * room for 32 remaining pages, a toolkit of ~3,300 actions — four times `GithubApi`. Past that is + * the number to revisit. + */ +const CATALOGUE_CONCURRENCY = 8; +/** A runaway guard, not a bound. */ +const CATALOGUE_MAX_PAGES = 1000; + +/** + * Page size for the WHOLE-DIRECTORY listing `listApps` reads, which is the "Browse Arcade" screen. + * + * THE ARITHMETIC, MEASURED AGAINST THE LIVE API so the next person changing this does not re-probe: + * - Arcade's directory reported `total_count` **8,320** tools. + * - `limit=1000` is accepted (1,000 items in ~1.77 s); `limit=5000` is REJECTED (empty answer in + * ~0.17 s), so **1000 is at or near the vendor's ceiling** — do not raise this past it. + * - A page costs **~1.8 s** at limit 1000 (~1.2 s at 100, ~1.8 s at 250): latency, not size, + * dominates, so fewer larger pages are nearly free. + * + * At the old page size of 100 that was 84 SEQUENTIAL pages, ~100 s, against a 10 s + * `VENDOR_CALL_TIMEOUT_MS` that wraps the WHOLE `listApps` — so the directory could never load. At + * 1000 it is 9 pages: one, then the remaining 8 at once under {@link DIRECTORY_CONCURRENCY}, ~3.6 s. + */ +const DIRECTORY_PAGE_SIZE = 1000; + +/** + * How many directory pages are in flight at once after page one has said how many there are. + * + * EIGHT, because it covers today's directory in ONE wave (8,320 tools → 8 pages after the first) + * while still being a bound: a `total_count` of a million fires eight requests at a time, never a + * thousand. The deadline arithmetic is `~1.8 s × (1 + ⌈remaining / 8⌉)`, which stays under the 10 s + * `VENDOR_CALL_TIMEOUT_MS` up to 32 remaining pages — a directory of roughly 33,000 tools, four times + * today's. Past that the listing will time out again, and that is the number to revisit. + */ +const DIRECTORY_CONCURRENCY = 8; + +/** + * WHAT ARCADE ITSELF SENT: the parsed response body, and never the SDK's page object. + * + * `OffsetPage`'s constructor MANUFACTURES DEFAULTS for the two fields every listing here reads — + * `this.items = body.items || []` and `this.total_count = body.total_count || 0` — so a field the + * vendor never sent presents on the page as a well-formed empty answer. Read off the page, "Arcade + * sent no items" is INDISTINGUISHABLE FROM "Arcade sent an empty list" and "Arcade sent no total" + * is INDISTINGUISHABLE FROM "Arcade said zero": the `Array.isArray` guards below can never fire, + * every `typeof reported === "number"` test passes on an absent field, and a malformed or truncated + * listing commits as a complete one. + * + * `AbstractPage` keeps the parsed body untouched beside it, so the honest values are read from + * there. The answer's own properties are the fallback for an answer that has NO `body` at all, + * which is what `admin.authProviders.list` (a plain `APIPromise`, not a page) and every hand-built + * stub return — those were never passed through a page constructor, so nothing was manufactured. + * + * AND THE PRESENCE OF `body` IS WHAT DECIDES WHICH OF THE TWO THIS IS — never whether the body + * happens to be readable. `AbstractPage`'s constructor always assigns `body`, so the property + * existing is the answer saying "I went through a page constructor, and my own `items` and + * `total_count` are that constructor's inventions". From there the body is the ONLY honest + * reading, and a body that is not a record means THE ANSWER COULD NOT BE READ — it does not mean + * the answer was empty. + * + * MEASURED, because this is the hole the fallback left and it is the live defect again: a 200 + * carrying `content-type: text/html` — a proxy's courtesy page — parses to a STRING + * (`internal/parse.js` returns `response.text()` for anything that is not JSON), so no record + * exists anywhere and a `?? page` fallback hands back the page's manufactured `items: []`. + * `listApps` then answered `[]`, `isConnected` answered false, and `revoke` answered `false` WITH + * NO DELETE SPENT while the caller deleted the local row — `broker.ts:712-717`'s forbidden + * outcome, reached by a route neither contributing guard could see, because both were written + * against MALFORMED JSON and this is the branch where the JSON was never parsed at all. + * + * ANSWERING `null` IS THE REFUSAL, and deliberately not a throw from here: every caller already + * has this deployment's own sentence for an unreadable listing — {@link pagedItems}' per-listing + * `malformed`, and the transport's own `Array.isArray` guard for `listTools` — and routing through + * them is what keeps one vocabulary on this seam instead of a second error shape invented here. + */ +function sentBody(answer: unknown): Record | null { + const page = record(answer); + if (!page) return null; + if ("body" in page) return record(page.body); + return page; +} + +/** A count's decimal spelling and nothing else: no sign, no exponent, no separator, no point. */ +const COUNT_TEXT = /^[0-9]+$/; + +/** + * A COUNT ARCADE SENT, READ AS THREE OUTCOMES AND NEVER TWO: the number, `undefined` for a field + * the vendor did not send, and `"unreadable"` for one it DID send in a shape this cannot read. + * + * THE THIRD OUTCOME IS THE WHOLE POINT. The previous reading was `typeof raw === "number" ? raw : + * undefined`, which folded "the vendor did not say" together with "the vendor said something this + * deployment cannot read" — and every caller treats the first as "there is nothing to cross-check + * against". Measured: a vendor that serves 100 of 250 connections and spells the claim + * `"total_count": "250"` had its truncation cross-check silently switched off, and `revoke` + * DELETED 100, ANSWERED `true`, AND LEFT 150 GRANTS LIVE with no signal anywhere that the + * withdrawal was partial. That is strictly worse than the `false`-with-no-DELETE defect this file + * is full of warnings about: that one is at least visibly wrong. + * + * A NUMERIC STRING IS A LEGITIMATE SPELLING AND IS COERCED. `"250"` is the vendor saying 250 — it + * is unambiguous, it is what a serializer that renders integers as text sends, and refusing it + * would take Disconnect permanently offline for a deployment whose vendor always spells it so, + * trading a silent partial for a hard failure with no way through. Coercing instead makes the + * cross-check FIRE, which is what actually protects the invariant: the 250-of-100 listing above + * now throws the `incomplete` sentence, no DELETE is spent, and the local row survives. + * + * EVERYTHING ELSE PRESENT REFUSES, and the strictness is deliberate, because a lenient parse is + * how this defect comes back. `"many"`, `null`, an object, `true`, `NaN`, `Infinity`, a negative, + * a fraction and `"1e3"` are all unreadable: anything that is not a plain non-negative decimal + * integer is a value whose meaning this deployment would be guessing at. `NaN` in particular was + * already slipping through the old `typeof` test and disabling the cross-check the same way a + * string did — `seen < NaN` is false — so the number branch checks the VALUE and not just the type. + * + * ABSENT STAYS ABSENT. `total_count` is optional on the wire and the listings here end on a short + * page, never on a total; a missing field must go on meaning "the vendor did not say" or every + * engine that omits it would refuse. + */ +function countOf(raw: unknown): number | "unreadable" | undefined { + if (raw === undefined) return undefined; + if (typeof raw === "string") { + const text = raw.trim(); + if (!COUNT_TEXT.test(text)) return "unreadable"; + const parsed = Number(text); + return Number.isSafeInteger(parsed) ? parsed : "unreadable"; + } + if (typeof raw !== "number") return "unreadable"; + return Number.isSafeInteger(raw) && raw >= 0 ? raw : "unreadable"; +} + +/** What the vendor sent, written into a refusal without pasting an object into a sentence. */ +function shownValue(value: unknown): string { + if (typeof value === "string") return JSON.stringify(value); + if (value !== null && typeof value === "object") return "an object"; + return String(value); +} + +/** + * The `total_count` Arcade itself sent, or nothing. Read through {@link sentBody}, for its reason, + * and through {@link countOf}, for ITS reason: a total the vendor sent in a shape this cannot read + * THROWS the caller's own sentence rather than answering `undefined` and disabling the only + * cross-check that can tell a truncated listing from a whole one. + */ +function reportedTotalOf( + answer: unknown, + unreadable: (shown: string) => string, +): number | undefined { + const raw = sentBody(answer)?.total_count; + const count = countOf(raw); + if (count === "unreadable") throw new Error(unreadable(shownValue(raw))); + return count; +} + +/** + * The `items` Arcade itself sent, UNCHECKED — the caller's own guard is what decides whether this + * is a list. Read through {@link sentBody}, for its reason: off the page object, a listing that + * sent no `items` at all reads as an empty one and no guard anywhere can tell them apart. + */ +function sentItemsOf(answer: unknown): unknown { + return sentBody(answer)?.items; +} + +/** + * The HIGHEST total any page reported, never the LAST one. + * + * Keeping the last page's value loses the same way `reportedTotalOf` describes, one step later: an + * engine that truncates at 250 of 300 and drops `total_count` on its short page would otherwise + * erase the 300 that page one reported, and the cross-check would have nothing to compare against. + */ +const highestTotal = ( + total: number | undefined, + reported: number | undefined, +): number | undefined => + reported === undefined + ? total + : total === undefined + ? reported + : Math.max(total, reported); + +/** One listing's page size, runaway guard, page call and the three sentences a failure carries. */ +type Listing = { + pageSize: number; + maxPages: number; + page: (offset: number) => Promise; + malformed: string; + unending: string; + incomplete: (seen: number, total: number) => string; + /** + * What this deployment says when the vendor sent a `total_count` it cannot read. A sentence of + * its own rather than a reuse of `malformed`: the list itself was fine and the CLAIM ABOUT ITS + * LENGTH was not, and a reader sent looking for a broken list would find a well-formed one. + */ + unreadableTotal: (shown: string) => string; + /** + * How many pages may be in flight at once AFTER PAGE ONE. Absent or 1 is the strictly sequential + * read the connection and auth-provider listings use. `listApps` and the per-toolkit action + * listings (`grantsFor`, `authProvidersNamedBy`) turn it on. Above 1, page one's `total_count` decides which further + * offsets are fetched ahead, at most this many at a time; see {@link pagedItems}. + */ + concurrency?: number; +}; + +/** + * `run`, at most `limit` at a time, and NOT AT ALL once `abandoned()` says the reader has stopped. + * + * The second half is what keeps a lying `total_count` from costing anything: a listing that claims + * a million rows and then ends on page two must not go on firing the 998 requests queued behind it. + */ +function bounded( + limit: number, + abandoned: () => boolean, +): (run: () => Promise) => Promise { + let active = 0; + const waiting: (() => void)[] = []; + return (run: () => Promise) => + new Promise((resolve, reject) => { + const start = () => { + if (abandoned()) { + resolve(undefined); + waiting.shift()?.(); + return; + } + active += 1; + // Through an executor, so a call that throws synchronously is a rejection like any other. + new Promise((answered) => answered(run())) + .then(resolve, reject) + .finally(() => { + active -= 1; + waiting.shift()?.(); + }); + }; + if (active < limit) start(); + else waiting.push(start); + }); +} + +/** + * ONE LISTING READ TO ITS END, as a stream of items. + * + * PAGINATION ENDS ON A SHORT PAGE, never on `total_count`, which is optional on the wire; the + * reported total is a CROSS-CHECK and is taken through {@link reportedTotalOf} and + * {@link highestTotal} so that "the vendor did not say" can never read as "the vendor said zero" + * — nor, through {@link countOf}, as "the vendor said something unreadable". A cross-check with no + * input is not a cross-check, and the listing it would have caught is the truncated one. + * + * THE SDK'S OWN AUTO-PAGINATION IS NOT USED by anything that goes through here, and that is the + * point: `OffsetPage.nextPageRequestOptions` returns `null` the moment `total_count` is falsy, so + * `for await (… of client.x.list(…))` silently stops after page one against any engine that omits + * the field — and the caller cannot tell a complete answer from a first page of it. + * + * THE INCOMPLETENESS THROW IS THE LAST THING THIS YIELDS, after every item, so a caller that folds + * items as they arrive still never sees a short listing finish as a whole one. + * + * FETCHING AHEAD ({@link Listing.concurrency}) CHANGES WHEN A PAGE IS ASKED FOR, NEVER HOW IT IS + * READ. Page one is asked for alone; its `total_count` names the offsets that should exist, and + * those are requested at once under the bound. The answers are then consumed IN OFFSET ORDER by + * exactly the loop below, so every rule above still holds page by page: a short page still ends the + * listing (the pages fetched past it are discarded unread and the queued ones never fire), a total + * that UNDER-reports still reads on sequentially from where the prefetch ran out, and `seen < total` + * still throws. A page ahead that FAILED fails the listing when the loop reaches it, and not before. + * Without a readable total on page one there is nothing to fetch ahead of, and it reads sequentially. + */ +async function* pagedItems(listing: Listing): AsyncGenerator { + let seen = 0; + let total: number | undefined; + let ended = false; + let stopped = false; + const ahead = new Map>(); + try { + for (let index = 0; index < listing.maxPages; index += 1) { + const fetched = ahead.get(seen); + ahead.delete(seen); + const answer = await (fetched ?? listing.page(seen)); + const items = sentItemsOf(answer); + if (!Array.isArray(items)) throw new Error(listing.malformed); + yield* items; + seen += items.length; + total = highestTotal( + total, + reportedTotalOf(answer, listing.unreadableTotal), + ); + if (items.length < listing.pageSize) { + ended = true; + break; + } + if ( + index === 0 && + total !== undefined && + (listing.concurrency ?? 1) > 1 + ) { + const slot = bounded(listing.concurrency ?? 1, () => stopped); + // `floor`, not `ceil - 1`: a total that is an exact multiple of the page size still needs + // the EMPTY page after it, because a short page — never the total — is what ends a listing. + const last = Math.min( + Math.floor(total / listing.pageSize), + listing.maxPages - 1, + ); + for (let page = 1; page <= last; page += 1) { + const offset = page * listing.pageSize; + const pending = slot(() => listing.page(offset)); + // Observed here so a page fetched past the end — or past a failure the loop throws on + // first — never surfaces as an unhandled rejection. The loop still awaits the original. + pending.catch(() => undefined); + ahead.set(offset, pending); + } + } + } + } finally { + stopped = true; + } + if (!ended) throw new Error(listing.unending); + if (total !== undefined && seen < total) { + throw new Error(listing.incomplete(seen, total)); + } +} + +/** The verdict `classify` falls back to when it could not read a behaviour. See {@link isClassified}. */ +const CLOSED_VERDICT = { effect: "write", destructive: true } as const; + +/** + * Whether ARCADE classified this action, as against this deployment falling back for it. + * + * `classify` from `./arcade` is the one reading of `metadata.behavior` anywhere here, and it is + * deliberately TOTAL: anything it cannot read answers the closed `{ write, destructive }` verdict, + * so an unannotated action is approved like a deletion. That fallback is exactly what must not be + * counted — counted, `AirtableApi`'s `metadata: null` actions would report as classified, and the + * coverage warning that exists to name them would never fire. + * + * AN EMPTY `behavior` IS NOT A CLASSIFICATION EITHER, and `classify` is where that is decided: a + * block stating neither flag answers the closed verdict, so it arrives here as the fallback it is + * and the `flagOf(behavior.destructive, false)` below — the collision-breaker, not a second reading + * of the wire — answers `false` for it. Were `{}` read as a plain write, every such action would + * report as classified and the coverage warning would miss exactly the actions it exists to name, + * the same way `AirtableApi`'s `metadata: null` actions would. + * + * THE CLOSED VERDICT IS ALSO A REAL ANSWER, which is the only subtlety here: `Attio.RemoveFromList` + * genuinely publishes `destructive: true` and lands on the same pair. So the verdict is read first, + * and only that one collision is broken — by asking whether Arcade actually sent a `behavior` whose + * `destructive` flag reads true, through `flagOf`, the same function `classify` reads it with and + * never a second parse of the wire. + * + * NEVER THE `Api` SUFFIX (spec D8). `AirtableApi` and `GithubApi` are unannotated today and + * `Apollo` is annotated, so the suffix correlates beautifully — and it is Arcade's naming + * convention rather than a contract. A rule reading it is a guess wearing a measurement's clothes, + * right until Arcade curates `DatadogApi`. + */ +function isClassified(metadata: unknown): boolean { + const verdict = classify(metadata); + if ( + verdict.effect !== CLOSED_VERDICT.effect || + verdict.destructive !== CLOSED_VERDICT.destructive + ) { + return true; + } + const behavior = record(record(metadata)?.behavior); + return behavior !== null && flagOf(behavior.destructive, false) === true; +} + +/** + * The oauth2 scopes one listed action asks for, for the catalogue's counts — read through + * {@link requiredScopesOf}, the one reading `grantStateOf` and the transport's listing share. + * + * AN UNREADABLE SCOPES BLOCK REFUSES, as {@link requiresAuthorization} refuses an unreadable + * authorization block, and for its reason: `[]` here files the action as unscoped — "the connection + * itself is the grant" — so a block this deployment could not read would be counted as the vendor + * saying no separate permission exists. The SHAPE (`authorizationRequirementOf`, `shapeOf`) lives in + * `./arcade` because the transport's own listing reads the same block for the scopes the gate checks. + */ +function scopesOf(item: unknown, toolkit: string): string[] { + const read = requiredScopesOf(item); + if (read.kind === "read") return read.scopes; + throw new BrokerRefusalError( + `Arcade sent ${read.shape} where the ${read.field === "requirements" || read.field === "authorization" ? read.field : `oauth2 ${read.field}`} of one of ${toolkit}'s actions belongs, and that is what says which permissions connecting ${toolkit} asks for. A shape this deployment cannot read is not "no separate permission", so the catalogue stops here rather than count it as one. That is a change in what Arcade answers rather than a setting an operator can correct, so upgrading this deployment's @arcadeai/arcadejs is what fixes it.`, + ); +} + +/** + * Whether ARCADE SAYS this action needs a person to authorize it — read, never assumed. + * + * THIS REPLACES A HARDCODED `{ kind: "consent" }` THAT WAS A CLAIM ABOUT THE VENDOR MADE WITHOUT + * READING THE VENDOR. Every toolkit in the catalogue was announced to the rest of this deployment + * as an app somebody connects by clicking through a consent screen, and the live listing says + * otherwise about real apps: `Apollo` publishes NO `requirements.authorization` and one + * deployment-wide secret (`APOLLO_API_KEY`) instead — verbatim in `fixtures/arcade-catalogue.json` + * — so Connect sent somebody to a consent flow for a connection consent cannot complete, and + * `tools.authorize` was minted for an action that requires no authorization at all. + * + * AN AUTHORIZATION BLOCK IS THE WHOLE OF THE QUESTION, AND SECRETS ARE NOT PART OF IT. The two are + * different people's work and {@link grantStateOf} already keeps them apart for the same reason: + * a secret is set ONCE FOR EVERYBODY by an operator in the Arcade dashboard — {@link FIELDS_REFUSAL} + * is this deployment's standing sentence about that — so it is not something the person connecting + * can supply, and an app that asks only for one asks THEM for nothing. It is therefore `no-auth` + * here and `needs-operator` on the grants screen, which is the channel that already names the keys. + * Calling it `fields` would draw a form collecting one person's answer and share it with everyone; + * calling it `unsupported` would hide the app from the picker for good, including after the + * operator sets the secret and the app works perfectly. + * + * ANY ONE ACTION'S AUTHORIZATION MAKES THE TOOLKIT A CONSENT APP, because the question this answers + * is "how would somebody connect this app", and a toolkit with one authorized action has a consent + * flow that is how they reach it. Arcade grants per action, so the grants screen is where an action + * that needs nothing is told apart from one that does. + * + * AND A SHAPE THIS DEPLOYMENT CANNOT READ REFUSES RATHER THAN ANSWERING EITHER WAY. Both wrong + * answers are silent: a guessed `consent` is the defect above, and a guessed `no-auth` records an + * app as needing no connection, which hides the Connect button on an app that does. `routes.ts` + * holds the catalogue for the picker and the enable path both, so one refusal an operator can act + * on is worth more than several hundred rows, one of which is a guess — `connectionOf` in + * `composio-adapter.ts` gives that reasoning in full. `null` and an absent field are NOT unreadable + * shapes: they are the vendor saying this action requires nothing, which `AirtableApi`'s + * `metadata: null` shows Arcade does say. + */ +function requiresAuthorization(item: unknown, toolkit: string): boolean { + const read = authorizationRequirementOf(item); + if (read.kind === "unreadable" && read.field === "requirements") { + throw new BrokerRefusalError( + `Arcade sent ${read.shape} where ${toolkit}'s requirements belong, and that field is what says whether somebody has to authorize this app at all. A shape this deployment cannot read is not the vendor saying "nothing to authorize", so it is not read as one — the catalogue stops here rather than offer ${toolkit} under a flow nobody established it has. That is a change in what Arcade answers rather than a setting an operator can correct, so upgrading this deployment's @arcadeai/arcadejs is what fixes it.`, + ); + } + if (read.kind === "unreadable") { + throw new BrokerRefusalError( + `Arcade sent ${read.shape} where ${toolkit}'s authorization requirement belongs, and this deployment reads that object to decide whether connecting ${toolkit} means sending somebody to a consent screen. A shape this deployment cannot read decides neither way, so the catalogue stops here rather than guess. That is a change in what Arcade answers rather than a setting an operator can correct, so upgrading this deployment's @arcadeai/arcadejs is what fixes it.`, + ); + } + return read.kind === "required"; +} + +/** + * The flow an app gets, from the one fact {@link requiresAuthorization} measured over its actions. + * + * TWO OF THE FIVE KINDS AND NOT THE OTHER THREE, deliberately. `fields` and `self-registering` are + * Composio's shapes: Arcade has no per-person field entry ({@link FIELDS_REFUSAL}) and registers no + * client at consent time. `unsupported` is a verdict about an app this deployment cannot drive, and + * both answers here are apps it drives — the unreadable case REFUSES rather than landing here. + */ +function connectionOf(authorizes: boolean): BrokerConnection { + return authorizes ? { kind: "consent" } : { kind: "no-auth" }; +} + +/** + * Every toolkit Arcade publishes, with `actionCount` taken from the FULL PAGED tool listing. + * + * COUNTED, NEVER READ OFF PAGE ONE: `GithubApi` publishes hundreds of actions where `Github` + * publishes 43, so a first page of 100 would be a wrong answer in the picker. Pagination ends on a + * short page; `total_count` is optional on the wire and is used only as a cross-check. + * + * THE OTHER THREE FACTS ARE COUNTED IN THIS SAME FOLD, BEFORE THE TOOLS ARE DISCARDED, and that is + * the whole of why they are free: the listing is already paged to the end for `actionCount`, so no + * second listing and NO EXTRA VENDOR CALL is made for them. + * + * `permissionCount` is the number of DISTINCT NON-EMPTY scope sets, held per toolkit as sorted, + * joined strings — SORTED BEFORE JOINED, so `[a,b]` and `[b,a]` are one permission asked for twice. + * An action with NO scopes joins no group: Github's 43 actions all carry an `oauth2` block with no + * scopes and one read consent flipped 43 of 43 to `met: true`, so "no scopes" means "the connection + * itself is the grant", not "needs nothing" — such an action is not separately approvable. + * `scopedActionCount` is what keeps that from reading as one permission covering everything. + */ +async function listApps(client: Arcade): Promise { + /** + * The fold's own tally, with PLAIN NUMBERS. `BrokerApp`'s three counts are nullable because + * another provider may not measure them; this provider does, on every action it folds, so a + * nullable accumulator here would only be a null nothing can produce, narrowed at every `+= 1`. + * `permissions` holds the sorted-and-joined scope sets; empty sets never enter it. + */ + type Tally = Omit< + BrokerApp, + "classifiedCount" | "connection" | "permissionCount" | "scopedActionCount" + > & { + classifiedCount: number; + scopedActionCount: number; + permissions: Set; + /** + * Whether any action folded so far carries an authorization requirement — the ONE fact + * {@link connectionOf} turns into this app's flow, and a fold rather than a literal because the + * listing is per ACTION and the flow is per TOOLKIT. + */ + authorizes: boolean; + }; + const counts = new Map(); + for await (const item of pagedItems({ + pageSize: DIRECTORY_PAGE_SIZE, + maxPages: CATALOGUE_MAX_PAGES, + concurrency: DIRECTORY_CONCURRENCY, + page: (offset) => + vendorCall("the app catalogue listing", () => + client.tools.list({ limit: DIRECTORY_PAGE_SIZE, offset }), + ), + malformed: + "Arcade did not answer with a tool list, so its app catalogue could not be read.", + unending: `Arcade's catalogue never ended after ${CATALOGUE_MAX_PAGES} pages, so it is not trusted.`, + incomplete: (seen, total) => + `Arcade listed ${seen} of ${total} actions, so its app catalogue is incomplete.`, + unreadableTotal: (shown) => + `Arcade reported its app catalogue's total_count as ${shown}, which is not a count, so whether the catalogue was listed in full could not be checked.`, + })) { + const toolkit = ( + item as { toolkit?: { name?: unknown; description?: unknown } } | null + )?.toolkit; + // AN EMPTY NAME IS NO NAME, the same judgement {@link textOf} makes: the name is this app's + // SLUG as well as its label, so an action whose toolkit is named `""` would otherwise raise a + // blank, unconnectable row in the picker rather than being skipped as unreadable. + const name = textOf(toolkit?.name); + if (!name) continue; + const classified = isClassified(record(item)?.metadata); + // READ OFF THIS ACTION, never written down for the catalogue; see {@link requiresAuthorization}. + // Asked AFTER the name, so a refusal can say which app it is about, and BEFORE the scopes, so an + // unreadable authorization block is refused in that function's words rather than the scopes'. + const authorizes = requiresAuthorization(item, name); + const scopes = scopesOf(item, name); + const standing = + counts.get(name) ?? + ({ + slug: name, + name, + // An absent description IS an empty one here: the field is a label with a blank default, + // not an identity, so nothing is shadowed by the two reading alike. + description: textOf(toolkit?.description) ?? "", + // NEITHER IS A STAND-IN FOR SOMETHING UNREAD: a tool's `toolkit` object carries `name`, + // `description` and `version` and nothing else — the SDK's `ToolDefinition.Toolkit` says + // so and the live listing agrees — so these two are Arcade publishing no logo and no + // category, which is what `BrokerApp.logo` is nullable for. A logo, where one exists, is + // filled in afterwards by `backfillBrokeredLogos` from outside the vendor's listing. + logo: null, + categories: [], + actionCount: 0, + classifiedCount: 0, + scopedActionCount: 0, + permissions: new Set(), + authorizes: false, + } satisfies Tally); + standing.actionCount += 1; + if (classified) standing.classifiedCount += 1; + if (authorizes) standing.authorizes = true; + if (scopes.length > 0) { + standing.scopedActionCount += 1; + // SORTED, THEN JOINED. The other order makes one permission into two the first time the + // vendor lists the same scopes in a different sequence. + standing.permissions.add([...scopes].sort().join(" ")); + } + counts.set(name, standing); + } + // `permissionCount` IS READ OFF THE FINISHED SET, never kept per page: a size taken mid-listing + // is a count of the sets seen so far, which is a different number on every page but the last. + // `connection` IS READ OFF THE FINISHED FOLD for `permissionCount`'s reason: a kind decided + // mid-listing is a verdict about the actions seen so far, and the action that carries the + // authorization may be on the last page. + return [...counts.values()].map(({ permissions, authorizes, ...app }) => ({ + ...app, + permissionCount: permissions.size, + connection: connectionOf(authorizes), + })); +} + +const FIELDS_REFUSAL = + "Arcade has no per-person field entry: what it asks for is a deployment-wide secret (admin.secrets, e.g. GITHUB_SERVER_URL) that an operator sets once for everybody, so a form asking a person to type one would collect a value that is not theirs and share it with everyone. Set it in the Arcade dashboard instead."; + +type ConnectionRow = Arcade.Admin.UserConnectionResponse; + +/** Page size for the auth-provider configuration listing. A short page ends it, as `listApps`. */ +const AUTH_PROVIDER_PAGE_SIZE = 100; +/** A runaway guard, not a bound. */ +const AUTH_PROVIDER_MAX_PAGES = 100; + +/** Page size for the user-connection listing. A short page ends it, as `listApps`. */ +const CONNECTION_PAGE_SIZE = 100; +/** A runaway guard, not a bound. */ +const CONNECTION_MAX_PAGES = 100; + +/** + * The INSTANCE ids of every auth provider this project has configured of one TYPE. + * + * THERE ARE THREE THINGS AND THEY NEED THREE WORDS. `provider` in this codebase is the BROKER + * (`arcade`); `authProvider` is the vendor's OAuth provider TYPE (`google`); and this is the third, + * the provider INSTANCE — an operator's configuration OF a type, which Arcade keys by its own id + * (`google-openbot`, `arcade-google`, `cpk-poc`). On an auth-provider config `id` is the INSTANCE + * and `provider_id` is the TYPE. Verbatim from the live project: + * + * ``` + * {"id":"cpk-poc", "provider_id":"github", "type":"oauth2", "status":"active"} + * {"id":"google-openbot", "provider_id":"google", "type":"oauth2", "status":"active"} + * {"id":"arcade-google", "provider_id":"google", "type":"oauth2", "status":"active"} + * ``` + * + * A SET AND NEVER ONE ID: `arcade-google` and `google-openbot` are both of type `google`, and a + * person may hold a connection under either. Reducing to one would drop real connections. + * + * PAGED, AND A MALFORMED LISTING THROWS, on `listApps`' argument and with its guards: a truncated + * config list would silently answer "not connected" for whoever is held under an instance that fell + * off the end. Folded to lower case on the way in, so the comparison is Amendment 16's. + */ +async function authProviderInstances( + client: Arcade, + authProvider: string, +): Promise> { + const wanted = authProvider.toLowerCase(); + const instances = new Set(); + for await (const item of pagedItems({ + pageSize: AUTH_PROVIDER_PAGE_SIZE, + maxPages: AUTH_PROVIDER_MAX_PAGES, + page: (offset) => + vendorCall( + `the auth-provider configuration listing for ${authProvider}`, + () => + client.admin.authProviders.list({ + query: { limit: AUTH_PROVIDER_PAGE_SIZE, offset }, + }), + ), + malformed: `Arcade did not answer with an auth-provider list, so the configurations of ${authProvider} its connections are held under could not be read.`, + unending: `Arcade's auth-provider list never ended after ${AUTH_PROVIDER_MAX_PAGES} pages, so it is not trusted.`, + incomplete: (seen, total) => + `Arcade listed ${seen} of ${total} auth providers, so its configuration list is incomplete.`, + unreadableTotal: (shown) => + `Arcade reported its auth-provider list's total_count as ${shown}, which is not a count, so whether the configurations of ${authProvider} were listed in full could not be checked.`, + })) { + const config = record(item); + const instance = textOf(config?.id); + if (instance && textOf(config?.provider_id)?.toLowerCase() === wanted) { + instances.add(instance.toLowerCase()); + } + } + return instances; +} + +/** + * The connections an account holds under a toolkit's AUTH PROVIDER. + * + * FILTERED ON THE PROVIDER, NOT THE TOOLKIT NAME — AND NOT ON THE PROVIDER TYPE EITHER. Both halves + * of that are measured, and the second is why this reads a third listing rather than comparing two + * strings. + * + * THE TOOLKIT NAME IS THE WRONG SPELLING because a provider equals the toolkit only when an + * operator happened to name it so (`Github`, `Asana`, `Attio`); one Google connection serves + * `Gmail` and `GoogleCalendar` both. So the toolkit is resolved through `authProviderOf`, which is + * where that mapping lives. + * + * AND `authProviderOf`'S ANSWER IS ALSO THE WRONG SPELLING FOR A CONNECTION ROW, because + * `provider_id` MEANS TWO DIFFERENT THINGS ON THE TWO OBJECTS. Measured against the live API: + * + * - on a tool listing, `requirements.authorization.provider_id` — what `authProviderOf` reads — is + * the provider TYPE: `"google"`; + * - on a user-connection row, `provider_id` is the provider INSTANCE id, the operator's + * configuration: `"google-openbot"`, `"arcade-google"`, `"cpk-poc"`. + * + * A connection row's full key set, verbatim, carries NO vendor-type field at all: `id`, + * `provider_type`, `connection_id`, `connection_status`, `scopes`, `user_id`, `provider_id`, + * `provider_description`, `provider_user_info` — and `provider_type` is `"oauth2"`, the auth SCHEME + * rather than the vendor. The instance id is the ONLY link to the vendor. So `"google"` never + * equals `"google-openbot"`, a direct comparison matches nothing on any real deployment — with + * Arcade's own default providers too, which are `arcade-google` and `arcade-github` and never the + * bare type — and `isConnected` reads false, `accountName` null, and `revoke` false WITHOUT + * SPENDING A DELETE, so nothing is ever revoked at the vendor. Do not "simplify" this back: every + * fixture that spells the two sides alike hides it. + * + * The bridge is {@link authProviderInstances}: the type `authProviderOf` answered is expanded, once + * per call, into the SET of configured instance ids of that type, and a row matches when its + * `provider_id` is in that set (case-insensitively — Amendment 16's client-side fold stands). Both + * the provider and the configuration list are read ONCE per call, never per row. + * + * PAGED THROUGH {@link pagedItems}, NEVER THROUGH THE SDK'S `for await (… of … .list(…))`. That + * iterator asks `OffsetPage.nextPageRequestOptions`, which returns `null` the moment `total_count` + * is falsy — and the constructor coerces an ABSENT `total_count` to `0`. So against any engine that + * omits the field, the SDK's own auto-pagination stops after page one: measured at 30 connections + * served 10 to a page, ONE request went out, `isConnected` answered `true`, `accountName` read a + * name off page one, and `revoke` DELETED TEN AND ANSWERED `true` while twenty connections stayed + * live at the vendor. That is the outcome `revoke`'s own comment forbids — a partial ask reading as + * a clean success. Reading to a SHORT PAGE instead ends on evidence the engine cannot omit, and an + * unverifiable listing THROWS rather than answering short, so no caller here can mistake a first + * page for the whole of what somebody holds. + * + * A ROW UNDER AN INSTANCE THE CONFIG LIST DOES NOT NAME DOES NOT MATCH — a provider configuration + * deleted while a connection outlives it. That is fail-closed: the row is left alone rather than + * deleted on a guess about which vendor it belongs to. + * + * EVERY ATTRIBUTABLE ROW IS RETURNED, DEAD ONES INCLUDED, AND LIVENESS IS THE CALLER'S QUESTION. + * A row carries its own `connection_status`, and {@link connectionIsLive} reads it — but here, + * because the two kinds of caller need opposite things from a row the vendor reports as finished: + * `isConnected` and `accountName` must not count it, and `revoke` must still delete it. Filtering it + * out at this level would answer both at once, and the one it answered wrongly would be the + * destructive one. + * + * AN UNRESOLVED TOOLKIT REFUSES, AND DOES NOT FALL BACK TO THE TOOLKIT NAME. The fallback is + * refused for the reason it always was — it would silently restore the instance/type defect under + * a different spelling, invisibly against every fixture in the tree. But ANSWERING NO ROWS IS NOT + * THE OTHER OPTION, and that is this function's own measured defect. A toolkit whose actions name + * ZERO provider ids, or TWO OR MORE of them, is not a toolkit with no connections: it is a listing + * this deployment could not read an attribution out of. Answering `[]` for it made `isConnected` + * false and `accountName` null for somebody genuinely connected — so Connect minted a SECOND + * authorization beside the live one — and made `revoke` answer `false` ("there was nothing to + * withdraw") WITHOUT SPENDING A SINGLE DELETE, while `store.ts`'s disconnect path deletes the + * local `brokered_connections` row on that answer regardless. The outcome is the one + * `broker.ts`'s `revoke` contract forbids outright: a LIVE grant at the vendor that no row this + * deployment holds any longer names, and no way back but guessing which app it belonged to. + * + * So an unattributable toolkit throws a {@link BrokerRefusalError} naming what the listing said, + * exactly as a malformed one does — `authProviderOf` and {@link authProviderInstances} THROW on a + * listing that is malformed, truncated against its own reported total, or never-ending, and this + * joins them. All three lifecycle members refuse together, which is the point: the refusal reaches + * the Disconnect path BEFORE any local row is deleted, so the row is still standing on the second + * press, and the Connect screen says why rather than offering a second grant. + * + * THE SEAM'S `authProviderOf` STILL ANSWERS `null`, and that is not the same decision. Its caller + * is the sibling resolver in `store.ts`, which counts an unresolved app as `unanswered` and ends + * NOTHING for it — fail-closed on a question that spends no delete. Here the question is the + * destructive one. + */ +async function connectionsFor( + client: Arcade, + vendorUserId: string, + toolkit: string, +): Promise { + const { named, unreadable } = await authProvidersNamedBy(client, toolkit); + // FIRST, because an unreadable action makes both counts below unreliable: it may name none, the + // one already read, or another. + if (unreadable) { + throw new BrokerRefusalError( + unreadableProviderSentence(toolkit, unreadable), + ); + } + if (named.size !== 1) { + throw new BrokerRefusalError( + named.size === 0 + ? `Arcade's action listing for ${toolkit} names no auth provider at all, so which of this account's connections belong to ${toolkit} could not be read. Nothing was read as connected and nothing was withdrawn — a connection may still be live at the vendor. Give ${toolkit} an auth provider in the Arcade dashboard and try again.` + : `Arcade's action listing for ${toolkit} names ${named.size} different auth providers (${[...named].sort().join(", ")}), so which of this account's connections belong to ${toolkit} could not be read. Nothing was read as connected and nothing was withdrawn — a connection may still be live at the vendor. Settle ${toolkit} on one auth provider in the Arcade dashboard and try again.`, + ); + } + // The one id, taken off the set the refusal above has already narrowed to exactly one. + const [authProvider] = [...named]; + const instances = await authProviderInstances(client, authProvider); + const rows: ConnectionRow[] = []; + for await (const item of pagedItems({ + pageSize: CONNECTION_PAGE_SIZE, + maxPages: CONNECTION_MAX_PAGES, + page: (offset) => + vendorCall(`the connection listing for ${toolkit}`, () => + client.admin.userConnections.list({ + user_id: vendorUserId, + limit: CONNECTION_PAGE_SIZE, + offset, + }), + ), + malformed: `Arcade did not answer with a connection list, so what this account holds at ${toolkit} could not be read.`, + unending: `Arcade's connection list never ended after ${CONNECTION_MAX_PAGES} pages, so it is not trusted.`, + incomplete: (seen, total) => + `Arcade listed ${seen} of ${total} connections, so what this account holds at ${toolkit} could not be read in full.`, + unreadableTotal: (shown) => + `Arcade reported its connection list's total_count as ${shown}, which is not a count, so whether what this account holds at ${toolkit} was listed in full could not be checked.`, + })) { + /* + * A ROW THAT IS NOT AN OBJECT IS A HOLE IN THE LISTING, AND A HOLE IS NOT A ROW TO SKIP. + * + * `items: [null]` is what the live API sent here, and `item as ConnectionRow` believed it: the + * very next line read `row.provider_id` off `null` and raised a bare `TypeError`, which is the + * wrong answer in both directions. It carries a stack trace onto the Disconnect path where + * this deployment's own sentence belongs; and the only reason the revoke invariant held on + * this shape was that a crash is technically "not answering" — make the cast defensive with a + * skip or a `?? []` and the listing silently becomes two rows instead of three, which is + * `revoke` answering off a listing it could not read whole, the exact outcome + * `broker.ts:712-717` forbids. + * + * SO IT REFUSES, in the register of this listing's own `malformed` sentence one block up: the + * unreadable row is not attributable to any provider instance, and a DELETE spent on the rows + * BESIDE it would be a partial ask reported as a clean success. + */ + // ARRAYS ARE REFUSED WITH THE REST, which {@link record} alone would not do — it answers a + // list as an object, and a list has no `provider_id`, so the row would be dropped silently + // and the listing would again be read short. + const row = Array.isArray(item) ? null : record(item); + if (!row) { + throw new Error( + `Arcade's connection list carried ${shapeOf(item)} where a connection belongs, so what this account holds at ${toolkit} could not be read.`, + ); + } + const instance = textOf(row.provider_id)?.toLowerCase(); + if (instance !== undefined && instances.has(instance)) + rows.push(row as ConnectionRow); + } + return rows; +} + +/** + * The one `connection_status` measured on a usable connection at the live API: `"active"`. + * + * AN ALLOWLIST OF THE LIVE SPELLING RATHER THAN A DENYLIST OF THE DEAD ONES, because the dead + * vocabulary cannot be enumerated from here — the SDK declares the field as a bare + * `connection_status?: string` with no union, and a denylist missing one spelling would go on + * reading that spelling as connected, which is the defect itself. + */ +const LIVE_CONNECTION_STATUS = "active"; + +/** + * The `status` spellings a FRESH MINT may answer under which sending somebody to the consent screen + * is the right next step: the flow has not begun (`not_started`) or is waiting for them (`pending`). + * + * AN ALLOWLIST, AND NOT THE SDK'S UNION TURNED AROUND, for {@link LIVE_CONNECTION_STATUS}'s reason. + * `AuthorizationResponse.status` is declared as a four-way union in the generated types, but the + * union is a description of what Arcade sends today, not a constraint on what arrives: a spelling + * outside it deserializes with no complaint from anybody. The two outcomes that are NOT a consent + * screen — `completed` and `failed` — are therefore refused by absence rather than by name, so that + * a fifth spelling is refused with them instead of being handed to a browser as a live redirect. + * + * SEPARATE FROM {@link grantStateOf}'S READING, deliberately. That one reads the LISTING's + * `requirements.authorization`, whose vocabulary is `token_status` plus an `active`/`inactive` + * status, and whose question is "what does this account already hold". This one reads a mint's own + * answer, whose question is "is a consent screen what happens next". Sharing a table between them + * would make one vendor's change to either vocabulary move the other answer too. + */ +const MINT_AWAITS_CONSENT_STATUSES = new Set(["not_started", "pending"]); + +/** + * The listing's `token_status` spellings under which this account holds no usable token and a + * consent is what would give it one. `completed` is the held grant; anything else is `unknown`. + * Kept apart from {@link MINT_AWAITS_CONSENT_STATUSES} for the reason that set's docblock gives, + * even where the spellings overlap: `failed` belongs here (a failed token is one to consent again + * for) and not there (a failed MINT is not a consent screen to send somebody to). + */ +const TOKEN_AWAITS_CONSENT_STATUSES = new Set([ + "not_started", + "pending", + "failed", +]); + +/** + * Whether a connection row is one somebody can actually USE, read off the row's OWN `connection_status`. + * + * THE ROW'S EXISTENCE IS NOT THE ANSWER, WHICH IS WHAT THIS IS FOR. A user-connection row carries + * `connection_status` beside its ids — it is in the key set {@link connectionsFor} quotes verbatim + * — and that field is the vendor saying whether the connection still works. Treating a row's mere + * presence as a yes answers `isConnected: true`, with a name beside it, for a connection Arcade is + * reporting as expired, revoked at the provider, pending or failed. Nothing then goes wrong until a + * tool call fails, far from the screen that said Connected, with no way back but guessing. + * + * SILENCE IS NOT A NO. An ABSENT status — the key missing, `undefined` or `null` — reads as live, + * deliberately: the field is OPTIONAL on the wire (`connection_status?: string`), so a pessimistic + * reading would answer "not connected" for every real connection against any engine that omits it + * — `isConnected` false and `accountName` null — which is precisely the live defect this seam + * already suffered once when it compared a provider TYPE to a provider INSTANCE. The rule is + * therefore: the vendor said something other than live → not live; the vendor said nothing → the + * existence of the row is all the evidence there is, and it stands. + * + * BUT A STATUS THAT IS PRESENT AND CANNOT BE READ IS NOT SILENCE. `{}`, `false`, `0`, a list, or a + * BLANK string is the vendor saying SOMETHING about this connection in a shape this deployment does + * not read — and "live" is the one answer that would act on it. It reads as not live, by + * {@link vendorStatusOf}'s rule: a blank string on a field whose value is a decision is unreadable, + * the judgement `authProvidersNamedBy` already makes of a blank `provider_id`. (This file once said + * "absent or empty reads as live"; the empty half is withdrawn, so that one rule — absent is + * `undefined`/`null`, blank is unreadable — holds on every vendor authorization field.) + * + * FOLDED AND TRIMMED, Amendment 16's client-side fold, for the reason every other comparison in + * this file is: a case the vendor changes must not change an answer about somebody's account. + * + * NOT A FILTER ON {@link connectionsFor}. `revoke` must still delete a dead row — it is a row at the + * vendor, and leaving it behind as unreachable debris while answering `false` ("there was nothing") + * is the failure mode `revoke`'s own contract forbids. So the listing stays whole and only the + * POSITIVE reads — `isConnected`, `accountName` — ask this question. + */ +function connectionIsLive(row: ConnectionRow): boolean { + const status = vendorStatusOf(row.connection_status); + if (status.kind === "absent") return true; + return status.kind === "text" && status.text === LIVE_CONNECTION_STATUS; +} + +/** + * DELETE TAKES `connection_id` (`ac_...`), NOT `id` (`at_...`). A user-connection row carries both + * and the listing prints `id` FIRST; the SDK declares `delete(id: string)` and does not say which. + * Measured against the live API: `at_...` answers 500, `ac_...` answers 204. Reading the obvious + * field fails only when somebody presses Disconnect, the worst time to find out. + */ +async function deleteConnection( + client: Arcade, + connectionId: string | undefined, +): Promise { + if (!connectionId) { + throw new Error("Arcade connection has no connection_id to delete."); + } + await vendorCall("a connection delete", () => + client.admin.userConnections.delete(connectionId), + ); +} + +const record = (value: unknown): Record | null => + value !== null && typeof value === "object" + ? (value as Record) + : null; + +/** + * One listed action read into this deployment's vocabulary, or nothing when it has no name. + * + * `requirements.met` IS A BOOLEAN WITH TWO UNRELATED CAUSES AND IS NEVER READ HERE. It is false + * both when the person has not consented and when a deployment-wide secret is unset — the live + * listing shows `Github` requiring `GITHUB_SERVER_URL`, which an operator sets once for everybody + * and which no amount of consenting moves. Sending somebody to a consent screen over that one + * sends them somewhere that cannot help them, so the secrets are read FIRST and answer + * `needs-operator` with the keys they name. + * + * `unknown` IS ITS OWN STATE RATHER THAN A PESSIMISTIC `needs-consent`, because not knowing is not + * the same as not connected: telling somebody to authorize something they already authorized sends + * them round twice. So anything the listing does not say clearly answers `unknown` with the reason. + */ +function grantStateOf(item: unknown): GrantState[] { + const tool = record(item); + const action = textOf(tool?.qualified_name); + if (!action) return []; + const requirements = record(tool?.requirements); + + /* + * A SECRETS FIELD THAT IS NOT A LIST IS UNREADABLE, NOT EMPTY — the same judgement `classify` + * makes about an empty `behavior`, one requirement description along. `secrets` absent is the + * ordinary case and genuinely means this action needs no deployment secret; `secrets: {}`, or any + * other non-list, is Arcade describing requirements in a shape this cannot read, and silently + * folding it to "no secrets, none missing" lets the function go on to answer `authorized` for an + * action that may be waiting on an unset `GITHUB_SERVER_URL`. Nobody is then told to set it: the + * `needs-operator` state that exists to name it cannot fire, and the person is left with an + * action the screen says they hold and the vendor refuses. `unknown` with a reason is what the + * docblock's "anything the listing does not say clearly" already promises. + */ + const rawSecrets = requirements?.secrets; + if ( + rawSecrets !== undefined && + rawSecrets !== null && + !Array.isArray(rawSecrets) + ) { + return [ + { + action, + state: "unknown", + reason: + "Arcade listed this action's deployment secrets as something other than a list, so whether any is unset could not be read.", + }, + ]; + } + const missing: string[] = []; + let secretUnreadable = false; + for (const raw of Array.isArray(rawSecrets) ? rawSecrets : []) { + const secret = record(raw); + const key = textOf(secret?.key); + if (!key) { + secretUnreadable = true; + continue; + } + if (secret?.met === false) missing.push(key); + else if (secret?.met !== true) secretUnreadable = true; + } + if (missing.length > 0) return [{ action, state: "needs-operator", missing }]; + if (secretUnreadable) { + return [ + { + action, + state: "unknown", + reason: + "Arcade listed a deployment secret for this action without saying whether it is set.", + }, + ]; + } + + // NO AUTHORIZATION BLOCK IS THE VENDOR SAYING THIS ACTION NEEDS NONE, with every secret it does + // need already read as set above — so it is usable, and `authorized` with no scopes is the state + // that says so. See {@link authorizationRequirementOf} for why this is the one reading. + // `not-required`, NEVER `held`: nobody approved it and no approval reaches it, so the consent + // copy must not count it among what an approval approves. See {@link GrantState}. + const read = authorizationRequirementOf(item); + if (read.kind === "none") { + return [ + { + action, + state: "authorized", + scopes: [], + authorization: "not-required", + }, + ]; + } + if (read.kind === "unreadable") { + return [ + { + action, + state: "unknown", + reason: + read.field === "requirements" + ? `Arcade listed this action's requirements as ${read.shape}, so what this account holds could not be read.` + : `Arcade listed this action's authorization as ${read.shape}, so what this account holds could not be read.`, + }, + ]; + } + // THE SCOPES BY THE ONE READING, see {@link requiredScopesOf}: an unreadable `oauth2` or + // `scopes` is `unknown`, never `[]` — `authorized []` is "the connection is the whole grant", + // which is an answer about this account the listing did not give. + const scopesRead = requiredScopesOf(item); + if (scopesRead.kind === "unreadable") { + return [ + { + action, + state: "unknown", + reason: `Arcade listed the permissions this action needs as ${scopesRead.shape}, so what this account holds could not be read.`, + }, + ]; + } + const { scopes } = scopesRead; + /* + * `token_status` IS THE WHOLE OF WHAT THIS ACCOUNT HOLDS, AND `status` IS NOT READ HERE AT ALL. + * The two sit side by side and answer different questions: `status` (`active`/`inactive`, with a + * `status_reason` such as "Provider not found" in `fixtures/arcade-catalogue.json`) is the AUTH + * PROVIDER's standing at this deployment, and is the same for everybody; `token_status` is this + * account's token. Reading `status: "active"` as a grant when `token_status` was missing marked + * EVERY action of a configured provider as held by everyone the listing was asked about (A7c), and + * reading `inactive` as "go and consent" sends somebody to a consent screen for a provider that + * is not there. So an absent or unreadable `token_status` is `unknown`, with the reason, and the + * text is FOLDED AND TRIMMED by {@link vendorStatusOf} as every other vendor status is. + */ + const tokenStatus = vendorStatusOf(read.authorization.token_status); + if (tokenStatus.kind !== "text") { + return [ + { + action, + state: "unknown", + reason: + tokenStatus.kind === "absent" + ? "Arcade's listing did not say whether this account holds a token for this action." + : `Arcade's listing gave this account's token status for this action as ${tokenStatus.shape}, so whether it is held could not be read.`, + }, + ]; + } + if (tokenStatus.text === "completed") { + return [{ action, state: "authorized", scopes, authorization: "held" }]; + } + if (TOKEN_AWAITS_CONSENT_STATUSES.has(tokenStatus.text)) { + return [{ action, state: "needs-consent", scopes }]; + } + return [ + { + action, + state: "unknown", + reason: + "Arcade's listing gave this account's token status for this action in a spelling this deployment does not read.", + }, + ]; +} + +/** + * What one account holds at one app, action by action. + * + * THIS IS THE ONE PLACE A `user_id` IS SENT ON A LISTING. The transport's `listTools` sends none + * and reads no per-person state off the answer, because a catalogue is the same for everybody and a + * per-person listing would make it one person's. Here the question IS about a person, so the + * account's vendor id goes out with it. + * + * PAGED TO THE END, as `listApps` is and for its reason: this answers ONE `GrantState` PER ACTION, + * so a single first page would quietly drop every action past it — `GithubApi` publishes hundreds — + * and the grants screen would show a partial holding as the whole of one. A short page ends it and + * an unverifiable listing throws; see {@link pagedItems}. + */ +async function grantsFor( + client: Arcade, + vendorUserId: string, + toolkit: string, +): Promise { + const grants: GrantState[] = []; + for await (const item of pagedItems({ + pageSize: CATALOGUE_PAGE_SIZE, + maxPages: CATALOGUE_MAX_PAGES, + concurrency: CATALOGUE_CONCURRENCY, + page: (offset) => + vendorCall(`the action listing for ${toolkit}`, () => + client.tools.list({ + toolkit, + user_id: vendorUserId, + limit: CATALOGUE_PAGE_SIZE, + offset, + }), + ), + malformed: `Arcade did not answer with an action list for ${toolkit}, so what this account holds there could not be read.`, + unending: `Arcade's action list for ${toolkit} never ended after ${CATALOGUE_MAX_PAGES} pages, so it is not trusted.`, + incomplete: (seen, total) => + `Arcade listed ${seen} of ${total} actions for ${toolkit}, so what this account holds there could not be read in full.`, + unreadableTotal: (shown) => + `Arcade reported the action list for ${toolkit} with a total_count of ${shown}, which is not a count, so whether what this account holds there was listed in full could not be checked.`, + })) { + grants.push(...grantStateOf(item)); + } + return grants; +} + +/** + * The auth provider a toolkit's connections are held under, read off the LISTING ITSELF. + * + * READ, NEVER DERIVED FROM THE TOOLKIT NAME. `requirements.authorization.provider_id` is the field + * the fixture already carries beside the auth-config `id`, and it names an auth-provider + * configuration rather than a toolkit — one Google provider serves `Gmail` and `GoogleCalendar` + * both. Reading it is correct under BOTH readings of the field: if it did turn out to equal the + * toolkit slug, the listing would simply say so. Comparing it to the toolkit name is correct under + * only one, and would be invisible against every fixture in this tree, where `Github`, `Asana` and + * `Attio` all happen to be named after themselves. There is NO FALLBACK to the toolkit name. + * + * PAGED TO ITS END THROUGH {@link pagedItems}, LIKE EVERY OTHER LISTING IN THIS FILE. An earlier + * revision read ONE unpaged request here and argued the saving was free: every tool in a toolkit + * shares its auth provider, so a further page could only repeat what the first already said. THAT + * ARGUMENT IS DISPROVEN, measured against a real HTTP engine — a 150-action `Gmail` listing whose + * first 100 actions sit under `google` and whose last 50 under `microsoft` answered `google`, off + * the single request `/v1/tools?toolkit=Gmail`. The guard below could not fire, because it was + * reading a PREFIX and a prefix agrees with itself. "Every tool shares its provider" is a statement + * about what a toolkit ought to be, not about what the vendor sends, and this function's whole job + * is to read what the vendor sends. The request also carried NO `limit`, so the window it judged + * from was the vendor's default rather than {@link CATALOGUE_PAGE_SIZE} — a number this deployment + * never chose and the vendor may change. + * + * The cost is one extra request only on a toolkit larger than a page, and it buys the same property + * `grantsFor` and `connectionsFor` are paged for: a first page can never present as the whole of + * one. A TRUNCATED LISTING NOW THROWS here too, rather than resolving a provider off whatever + * arrived — the `incomplete` sentence below — which is right for the reason `connectionsFor`'s + * comment gives: these three callers spend deletes. + * + * AND IT GUARDS RATHER THAN ASSUMES. The DISTINCT non-null provider ids across the WHOLE listing + * are collected and anything other than exactly one answers `null`, so a toolkit that disagrees + * with itself is UNANSWERED rather than silently resolved to whichever action came first. Case is + * carried through untouched, so two spellings of one provider count as two and are likewise + * unanswered; whether they are the same provider is the caller's comparison, and + * `connectionSiblings` folds case for the one caller that makes it. A listing carrying ANY action + * whose authorization could not be read is unanswered too, however many ids sit beside it — see + * {@link authProvidersNamedBy}. + * + * `null` IS WHAT UNANSWERED MEANS, AND IT IS NOT AN ANSWER ANY CALLER MAY SPEND. It is not "no + * provider", and a toolkit with no provider id anywhere lands on it for the same reason an + * ambiguous one does. What a caller must do with it depends on what its own answer costs: + * + * - {@link connectionsFor} — the connection lifecycle, where the answer spends DELETEs and decides + * whether somebody is shown as connected — REFUSES, and reads {@link authProvidersNamedBy} + * directly so its sentence can say whether the listing named none or several. Answering no rows + * there was the live defect: `revoke` said `false` ("nothing to withdraw") with no delete spent + * while the caller deleted the local row anyway, and `isConnected`/`accountName` sent somebody + * who is already connected round a second authorization. Its comment has that in full. + * - The SEAM member below hands `null` on unchanged, for `store.ts`'s sibling resolver, which + * counts an unresolved app as `unanswered` and ends nothing for it. That question spends + * nothing, so fail-closed is a real answer there and the seam's `Promise` stands. + * + * `requirements.met` IS NOT READ HERE EITHER, for `grantStateOf`'s reason: this reads a DIFFERENT + * field of the same `requirements.authorization` object. + */ +async function authProviderOf( + client: Arcade, + toolkit: string, +): Promise { + const { named, unreadable } = await authProvidersNamedBy(client, toolkit); + // An unreadable block is UNANSWERED, for the reason several ids are: the one id beside it is not + // the whole of what the listing says. + if (unreadable) return null; + return named.size === 1 ? [...named][0] : null; +} + +/** + * What a toolkit's listing says about its auth provider: the DISTINCT ids it names, and the first + * action whose authorization this deployment could not read, if any. + * + * `unreadable` IS A THIRD ANSWER, NOT AN EMPTY CONTRIBUTION. An action whose `requirements` or + * `requirements.authorization` arrives as a shape this deployment cannot read — or whose + * `provider_id` is present and is not a name — might name ANY provider, so the set beside it is + * not the whole of what the listing says. {@link authorizationRequirementOf} draws the same line for + * the catalogue and the grants screen; this is that line applied to `provider_id`. + */ +type AuthProvidersNamed = { + named: Set; + unreadable: { + action: string | undefined; + field: "requirements" | "authorization" | "provider_id"; + shape: string; + } | null; +}; + +/** + * Why a toolkit's provider could not be read off one unreadable action, for a refusal to say. + * Names the FIELD and the SHAPE that arrived there, never the value, for {@link shapeOf}'s reason. + */ +function unreadableProviderSentence( + toolkit: string, + unreadable: NonNullable, +): string { + const where = unreadable.action + ? `${toolkit}'s action ${unreadable.action}` + : `one of ${toolkit}'s actions`; + const field = + unreadable.field === "provider_id" + ? "auth provider id" + : unreadable.field === "authorization" + ? "authorization requirement" + : "requirements"; + return `Arcade sent ${unreadable.shape} where ${where} carries its ${field}, so which auth provider ${toolkit}'s connections are held under could not be read — that action may name a provider the rest of the listing does not. Nothing was read as connected and nothing was withdrawn — a connection may still be live at the vendor. That is a change in what Arcade answers rather than a setting an operator can correct, so upgrading this deployment's @arcadeai/arcadejs is what fixes it.`; +} + +/** + * The DISTINCT auth provider ids a toolkit's listing names, read to the listing's end — and the + * first action whose authorization could not be read. + * + * SEPARATED FROM {@link authProviderOf} SO THAT THE VERDICT AND THE EVIDENCE ARE TWO THINGS. The + * seam's `authProviderOf` answers a provider or `null`, and `null` is a verdict with the evidence + * thrown away — zero ids, nine ids and an unreadable block arrive at its caller as the same word. + * {@link connectionsFor} REFUSES on any of them, and a refusal has to say which one happened and + * name what it read, so it reads the evidence and `authProviderOf` folds it to its verdict. There is + * still ONE reading of the wire. + * + * AN UNREADABLE BLOCK IS NO LONGER SKIPPED. It once contributed nothing and raised nothing, so a + * `Gmail` listing of one `google` action beside one whose authorization arrived as a string + * resolved to `google` — a single provider asserted off a listing this deployment did not read + * whole, which is the fail-open direction for callers that spend DELETEs on the answer. ABSENCE is + * still not unreadability: an action with no authorization block, or a block with no `provider_id` + * (the live `Airtable` shape in `fixtures/arcade-catalogue.json`), names no provider and is read as + * naming none, exactly as {@link authorizationRequirementOf} reads it. + */ +async function authProvidersNamedBy( + client: Arcade, + toolkit: string, +): Promise { + const named = new Set(); + let unreadable: AuthProvidersNamed["unreadable"] = null; + for await (const item of pagedItems({ + pageSize: CATALOGUE_PAGE_SIZE, + maxPages: CATALOGUE_MAX_PAGES, + concurrency: CATALOGUE_CONCURRENCY, + page: (offset) => + vendorCall(`the action listing for ${toolkit}`, () => + client.tools.list({ toolkit, limit: CATALOGUE_PAGE_SIZE, offset }), + ), + malformed: `Arcade did not answer with an action list for ${toolkit}, so the auth provider its connections are held under could not be read.`, + unending: `Arcade's action list for ${toolkit} never ended after ${CATALOGUE_MAX_PAGES} pages, so the auth provider its connections are held under is not trusted.`, + incomplete: (seen, total) => + `Arcade listed ${seen} of ${total} actions for ${toolkit}, so the auth provider its connections are held under could not be read in full.`, + unreadableTotal: (shown) => + `Arcade reported the action list for ${toolkit} with a total_count of ${shown}, which is not a count, so whether the auth provider its connections are held under could be read in full is not known.`, + })) { + // Read to the END even after an unreadable action, so a truncated or malformed listing still + // throws its own sentence rather than being reported as one unreadable row. + const read = authorizationRequirementOf(item); + if (read.kind === "none") continue; + const action = textOf(record(item)?.qualified_name); + if (read.kind === "unreadable") { + unreadable ??= { action, field: read.field, shape: read.shape }; + continue; + } + const providerId = read.authorization.provider_id; + if (providerId === undefined || providerId === null) continue; + const provider = textOf(providerId); + if (provider) named.add(provider); + else + unreadable ??= { + action, + field: "provider_id", + shape: shapeOf(providerId), + }; + } + return { named, unreadable }; +} + +/** + * The Arcade client, in the shape `createComposioClient` returns. `new Arcade({ apiKey })` opens no + * socket and sends no request, so tests replace the SDK's PROTOTYPE methods before calling this. + * + * EVERY CALL TO THE VENDOR GOES THROUGH {@link vendorCall}, which is where a refusal becomes this + * deployment's own sentence and the vendor's body stops. `callTool` still reaches the body's + * `error.name` — a raw `APIError`'s `name` is the CLASS name through the prototype chain, never the + * body's, so without the normalization the authorize prompt would be unreachable — but it reaches + * it through {@link ArcadeFailureError}, not through a bare object thrown as if it were an error. + */ +export function createArcadeClient(apiKey: string): { + actions: ArcadeActions; + broker: ConnectedAppBroker; +} { + const client = new Arcade({ apiKey }); + const actions: ArcadeActions = { + // `total_count` IS NORMALIZED HERE, and this is the only place it can be. The transport + // (`./arcade`) must not import this file — that direction is a cycle — so it cannot reach + // {@link reportedTotalOf}, and what it receives has to already tell "the vendor did not say" + // apart from "the vendor said zero". Handing it the SDK's `OffsetPage` does not: that object's + // `total_count` is `body.total_count || 0`, so `listTools` read a `0` off an answer that + // carried no total and its `raw.length < total` cross-check could never fire. The FIELD IS + // OMITTED when the vendor omitted it, which is what the declared `total_count?: number` means. + listTools: async (q) => { + const answer = await vendorCall( + `the action listing for ${q.toolkit}`, + () => + client.tools.list({ + toolkit: q.toolkit, + limit: q.limit, + offset: q.offset, + }), + ); + // Passed through unchecked: a malformed listing is the transport's sentence to write, and + // its own `Array.isArray` guard is what writes it. THE ITEMS ARE READ OFF THE RAW BODY for + // {@link sentItemsOf}'s reason — handing over the page's manufactured `[]` would leave that + // guard as dead as the totals the comment above describes, and a listing that answered no + // items at all would refresh an app's actions down to none. + const items = sentItemsOf(answer) as unknown[]; + // AND A TOTAL THIS CANNOT READ REFUSES HERE TOO, rather than being dropped on the way out. + // The declared `total_count?: number` leaves the transport exactly two readings — a number + // to cross-check against, or "the vendor did not say" — so a value that is neither has + // nowhere honest to go: omitting it would switch off the transport's own + // `raw.length < total` check and commit a truncated refresh as a whole catalogue. + const total = reportedTotalOf( + answer, + (shown) => + `Arcade reported the action listing for ${q.toolkit} with a total_count of ${shown}, which is not a count, so whether the listing is whole could not be checked. Nothing was refreshed and the actions already recorded for this app are kept.`, + ); + return total === undefined ? { items } : { items, total_count: total }; + }, + execute: async (r) => + vendorCall(`running ${r.tool_name}`, () => + client.tools.execute({ + tool_name: r.tool_name, + input: r.input, + user_id: r.user_id, + }), + ), + }; + const broker: ConnectedAppBroker = { + grantIsLocal: false, + listApps: () => listApps(client), + // 5.3: no auth config per app. Arcade's equivalent is an auth provider registered once in the + // dashboard for the whole project, so there is nothing to create or delete here. + ensureAuthConfig: async () => "not-needed", + deleteAuthConfig: async () => {}, + // The field-entry pair REFUSES. Composio's field schemes are a person typing their own API key; + // `admin.secrets` is a deployment-wide secret an operator sets once for everybody. + connectionFields: () => + Promise.reject(new BrokerRefusalError(FIELDS_REFUSAL)), + connectWithFields: () => + Promise.reject(new BrokerRefusalError(FIELDS_REFUSAL)), + accountName: async ({ account, toolkit }) => { + // Filtered by the row's own provider, as Composio's `accountsFor(..., toolkit, ...)` is: a + // person connected to two apps must never be shown the OTHER app's name on this app's screen. + // + // AND BY THE ROW'S OWN `connection_status`, through {@link connectionIsLive}: this name is + // shown beside "Connected", so a name read off a row the vendor reports as expired or revoked + // says the connection is live in the one place somebody looks to check. + for (const row of await connectionsFor( + client, + account.vendorUserId, + toolkit, + )) { + if (!connectionIsLive(row)) continue; + const info = row.provider_user_info as + | { name?: unknown; login?: unknown } + | null + | undefined; + const name = textOf(info?.name) ?? textOf(info?.login); + if (name) return name; + } + return null; + }, + // The mint. Stays a TOP-LEVEL member: the Composio connect flow calls it from routes.ts, so it + // cannot move behind the nullable `authorizations` sub-surface. + authorize: async ({ account, action }) => { + if (!action) { + throw new BrokerRefusalError( + "Arcade grants per action, so an authorization needs the action it is for and none was given.", + ); + } + // NEVER SEND `next_uri`. THIS LOOKS LIKE A BUG AND IS A MEASUREMENT. The SDK declares the + // field (`ToolAuthorizeParams.next_uri`), but against the live API it refuses EVERY value and + // the mint answers `500 "error starting authorization challenge: invalid next URI"`: an app + // page, the verifier's own origin, `cloud.arcade.dev` and a localhost address alike. Do not + // "fix" this by passing a return address. + // + // `returnUrl` IS ACCEPTED AND IGNORED, for the same reason: the landing page comes from the + // attempt row (spec D18), not from a parameter this vendor will take. + // + // THE REFUSAL IS MEDIATED, AND ON THIS CALL THAT IS NOT A STYLE POINT: the body an + // authorization answers with is the one that carries a bearer `url`, and the SDK's `APIError` + // puts the body it could not read a `message` off into its own `message`. See + // {@link vendorCall}; the route's definite-or-uncertain decision reads `status` through + // `normalizeArcadeError` and is unaffected. + // THROUGH {@link requireBody}: a mint that answered an empty body, or a body of literal + // `null`, has `answer === null` wearing `AuthorizationResponse`, and the `status` read below + // would raise a bare `TypeError` rather than the sentence this route shows somebody. + const answer = requireBody( + `the authorization for ${action}`, + await vendorCall(`the authorization for ${action}`, () => + client.tools.authorize({ + tool_name: action, + user_id: account.vendorUserId, + }), + ), + ); + // WHAT THE VENDOR SAID ABOUT THIS AUTHORIZATION, READ BEFORE ITS URL IS READ AS A NEXT STEP. + // `tools.authorize` does not only answer "go to this screen": it answers `completed` for an + // account that already holds the grant, `failed` for one the vendor could not begin — and it + // may answer either WITH a `url` beside it, so the absent-url refusal below is not this guard + // in disguise. Unread, both were handed back as a live consent link: somebody already + // connected is sent round a screen they finished, and a failed authorization is dressed up + // as a working one, with an `ar_…` recorded against the attempt that can never complete. + // + // AN ALLOWLIST OF THE SPELLINGS UNDER WHICH CONSENT IS GENUINELY THE NEXT STEP, for the + // reason {@link LIVE_CONNECTION_STATUS} gives: the dead vocabulary cannot be enumerated from + // here. The SDK's declared union is a convenience, not a promise about the wire — an engine + // answering `revoked` or `expired` type-checks as nothing and a denylist missing that + // spelling goes on sending a browser to it, which is the defect itself. + // + // SILENCE IS NOT A NO, as it is not in {@link connectionIsLive}: `status` is OPTIONAL on the + // wire, so an ABSENT field (missing, `undefined`, `null`) leaves the url and the id as the + // whole of the evidence and they stand. A status that is PRESENT AND UNREADABLE — `{}`, + // `false`, a number, a blank string — is not silence: the vendor said something about this + // authorization and this deployment cannot tell what, so the bearer url beside it is NOT + // handed on as a live redirect. {@link vendorStatusOf} is the one reading of both, and it + // FOLDS AND TRIMS the text for this file's standing reason: a case the vendor changes must not + // change what somebody is told about their own account. + // + // A `BrokerRefusalError` AND NOT A BARE `Error`, which is the difference between being told + // and being locked out. The mint route keys its three outcomes on what was thrown: an + // authored refusal is DEFINITE, so the attempt is discarded and the actor may press Authorize + // again at once, with this sentence shown; a bare `Error` normalizes to `null` and is read as + // "the mint may be live", leaving the attempt standing for its fifteen-minute TTL. Nothing + // IS live here — the vendor answered, and said this is not a consent to walk through. + const read = vendorStatusOf(answer.status); + if (read.kind === "unreadable") { + throw new BrokerRefusalError( + `Arcade answered this account's authorization for ${action} with ${read.shape} where its status belongs, so whether a consent screen is the next step could not be read and nobody was sent anywhere. Press Authorize again to start a fresh one.`, + ); + } + const status = read.kind === "text" ? read.text : undefined; + if (status !== undefined && !MINT_AWAITS_CONSENT_STATUSES.has(status)) { + throw new BrokerRefusalError( + status === "completed" + ? `Arcade answered that this account's authorization for ${action} is already completed, so nobody was sent to a consent screen. Reload this page: the grant it is reporting is already in place.` + : `Arcade answered that this account's authorization for ${action} is "${status}" rather than one waiting for consent, so nobody was sent anywhere and nothing was connected. Press Authorize again to start a fresh one.`, + ); + } + // The url is a bearer capability: it goes back to the caller and nowhere else. + const url = answer.url; + if (typeof url !== "string" || url === "") { + throw new Error( + "Arcade answered an authorization with no url to visit.", + ); + } + // The mint's own `ar_…` id: spec D24 binds it to the callback's `auth_id`. A mint that + // answered none is not a success, and the refusal is here so that a null can never be + // minted from an Arcade answer — `authorizationId` is non-null for every Arcade mint. + const authorizationId = answer.id; + if (typeof authorizationId !== "string" || authorizationId === "") { + throw new Error("Arcade answered an authorization with no id."); + } + return { redirectUrl: url, authorizationId }; + }, + // 6.2: the connection-lifecycle trio. + // A LIVE ROW AND NOT MERELY A ROW. The seam's word is "currently attached to this app at the + // vendor", and a row Arcade reports as expired, revoked, pending or failed is not that; see + // {@link connectionIsLive}, which also says why a row with NO status still counts. + isConnected: async ({ account, toolkit }) => + (await connectionsFor(client, account.vendorUserId, toolkit)).some( + connectionIsLive, + ), + // Answers what was REQUESTED: true when something was found and every delete was accepted, + // false when there was nothing. Every delete is attempted, then ANY failure throws: a partial + // ask must not read as `false` ("nothing there") nor as a clean `true`. + // + // AND `false` IS ONLY EVER SAID OFF A LISTING READ WHOLE, which is {@link connectionsFor}'s + // promise rather than this one's: an unreadable, truncated or UNATTRIBUTABLE listing throws out + // of it before this line, so `rows.length === 0` here means the vendor said so. `false` with no + // delete spent is the live defect's exact signature — the caller deletes the local row on it — + // and `arcade-revoke-invariant.test.ts` asserts the outcome rather than any one mechanism. + // + // ON EVERY ROW, LIVE OR NOT, WHICH IS WHY THIS DOES NOT ASK {@link connectionIsLive}. A dead row + // is still a row at the vendor: skipping it would leave it standing while this answered `false` + // ("there was nothing to withdraw"), and a reconnect would then be made beside debris nobody can + // see. Deleting a connection the vendor already considers finished costs one call and is the + // only reading under which Disconnect means what it says. + revoke: async ({ account, toolkit }) => { + const rows = await connectionsFor(client, account.vendorUserId, toolkit); + if (rows.length === 0) return false; + const outcomes = await Promise.allSettled( + rows.map((row) => deleteConnection(client, row.connection_id)), + ); + const failed = outcomes.filter((o) => o.status === "rejected"); + if (failed.length > 0) { + throw new Error( + `Arcade revoke failed for ${failed.length} of ${rows.length} connections.`, + { cause: (failed[0] as PromiseRejectedResult).reason }, + ); + } + return true; + }, + revokeAccount: (accountId) => deleteConnection(client, accountId), + // 6.3: the read-only status pair. Both are DECLARED here because the seam requires them — + // `grantsFor` is a member every broker answers, and `authorizations` is the sub-surface Arcade + // alone runs, so a null here would say Arcade mints nothing to poll, which is false. The + // bodies are 6.3's. `status` must narrow to `{ status, userId, scopes }` and nothing else: the + // raw `auth.status` response carries `context.token`, a live provider access token, plus the + // person's full profile. + grantsFor: ({ account, toolkit }) => + grantsFor(client, account.vendorUserId, toolkit), + // Read off the listing's own `requirements.authorization.provider_id`, never derived from the + // toolkit name and never falling back to it. See `authProviderOf` above. + authProviderOf: (toolkit) => authProviderOf(client, toolkit), + authorizations: { + /** + * Where one minted authorization has got to — THREE FIELDS READ OUT AND THE RESPONSE OBJECT + * DROPPED HERE, inside the adapter, so nothing outside this file ever holds it. + * + * THIS DELIBERATELY INVERTS THIS CODEBASE'S CARRY-THE-VENDOR-ERROR-AS-`cause` CONVENTION. + * That convention is right everywhere else: a vendor's own words are what a maintainer needs + * when a call fails. It is wrong here, because `auth.status` answers with `context.token` — a + * LIVE, WORKING provider access token for the person who just consented — and their full + * `user_info` profile beside it, while `url` is a bearer capability of its own. A status + * response LOOKS LIKE METADATA, which is exactly how the throwaway harness that proved this + * flow came to write the token to a file on its first run. + * + * So the protection is the RETURN TYPE and not a comment asking the next person to remember: + * what is not returned cannot be logged, attached as a `cause`, or written into an audit + * payload by code that never sees it. Do not widen this, and do not add `url`. + */ + status: async (id, options) => { + // THE REFUSAL IS MEDIATED TOO, for the same reason the RESPONSE is: a status this vendor + // would not answer is answered ABOUT a flow whose body carries the token and the url. + // + // AND THE CALLER'S DEADLINE REACHES THE WIRE: an abandoned poll closes its socket rather + // than leaving this deployment holding one open against a vendor nobody is waiting on. + // + // AND THROUGH {@link requireBody}, for `authorize`'s reason: an empty body arrives here + // as `null` wearing the declared response type, and the three field reads below would + // raise a bare `TypeError` instead of saying what happened. + const answer = requireBody( + "an authorization status read", + await vendorCall("an authorization status read", () => + client.auth.status({ id }, { signal: options?.signal }), + ), + ); + const scopes = answer.scopes; + // THE ONE STATUS READING ({@link vendorStatusOf}): folded and trimmed, and an absent or + // unreadable status is `"unknown"`, which the return leg refuses as not finished. + const settled = vendorStatusOf(answer.status); + return { + status: settled.kind === "text" ? settled.text : "unknown", + userId: textOf(answer.user_id) ?? null, + scopes: Array.isArray(scopes) + ? scopes.filter((s): s is string => typeof s === "string") + : [], + }; + }, + // `handle` is opaque to the seam; `flow_id` is Arcade's word for it and stops in this file. + // A `user_mismatch` answer is an ANSWER, so it surfaces as `{ mismatch: true }`; any other + // failure is an outage or a bug and is rethrown as the sentence {@link vendorCall} wrote for + // it — `user_mismatch` is still read, because the body's `error.name` survives the mediation + // and `normalizeArcadeError` answers off the carried failure. + confirmReturn: async ({ handle, vendorUserId }, options) => { + let answer: { auth_id?: unknown }; + try { + // THROUGH {@link requireBody}, for `authorize`'s reason. The refusal it writes is + // raised INSIDE the try, which is deliberate and harmless: `normalizeArcadeError` + // answers `null` for it, so it is not read as `user_mismatch` and is rethrown as + // itself by the `throw error` below — an unreadable body is an outage, which is the + // same judgement the `auth_id` check further down already states. + answer = requireBody( + "the return-leg confirmation", + await vendorCall("the return-leg confirmation", () => + client.auth.confirmUser( + { + flow_id: handle, + user_id: vendorUserId, + }, + { signal: options?.signal }, + ), + ), + ); + } catch (error) { + if (normalizeArcadeError(error)?.name === "user_mismatch") { + return { mismatch: true }; + } + throw error; + } + // THE WHOLE SUBJECT OF THE BINDING, CHECKED HERE AS THE MINT CHECKS ITS OWN — see + // `authorize` above. `ConfirmUserResponse.auth_id` is DECLARED required by the SDK's types + // and is VALIDATED by nothing in it, so an answer that omits the field arrives as + // `undefined` wearing the type `string`, and `{ authorizationId: undefined }` would be a + // confirmation made against nothing that the seam's own type says is an id. + // + // AND IT THROWS RATHER THAN ANSWERING `{ mismatch: true }`, which is the contract routes.ts + // states at its binding: where the vendor's real shape differs from what was assumed, this + // does NOT answer a clean refusal — the return leg surfaces an outage, which is honest, + // because an id that could not be read is not evidence that the handle belongs to somebody + // else. A refusal reading "not your authorization" would blame the person for an answer + // their vendor failed to make. + const authorizationId = answer.auth_id; + if (typeof authorizationId !== "string" || authorizationId === "") { + throw new Error( + "Arcade confirmed a return with no authorization id.", + ); + } + return { authorizationId }; + }, + }, + }; + return { actions, broker }; +} diff --git a/server/src/plugins/arcade.ts b/server/src/plugins/arcade.ts new file mode 100644 index 000000000..14705855a --- /dev/null +++ b/server/src/plugins/arcade.ts @@ -0,0 +1,690 @@ +/** + * The Arcade transport's vendor-free half. Imports no vendor package and nothing from + * `arcade-adapter.ts`: the adapter imports this module, never the reverse (see `./broker`, which + * records that the other direction is a cycle). + */ + +import { cutAtCodeUnits } from "../channels/text"; +import { flagOf } from "./broker"; +import { type ListedTool, MAX_RESULT_CHARS, type McpCallResult } from "./mcp"; + +/** + * Whether listing tools needs somebody's credential. It does not: the listing uses the deployment's + * own Arcade key, and a listing is not a person's. + */ +export const listNeedsCredential = false; + +const TOOLKIT_NAME = /^[A-Za-z0-9_-]+$/; + +/** + * Which toolkit this connection is about, from `arcade://Toolkit`. + * + * CASE IS PRESERVED AND NOTHING IS NORMALIZED. Arcade's toolkit and action names are case-sensitive, + * and action names are dotted (`Apollo.EnrichOrganization`: the dot separates toolkit from action, + * so a toolkit name never contains one and `TOOLKIT_NAME` rightly rejects it), where Composio's + * slugs are neither, so a lowercased toolkit reaches nothing: + * `arcade://Gmail` and `arcade://gmail` are distinct apps. + * + * ONE TOOLKIT OR NOTHING. This answer is the name the brokered gate looks a person's row up by, so a + * url read loosely is one app's connection satisfying a call against another. + * `arcade://Gmail/messages` must not answer `"Gmail/messages"`: a path segment is not an app. + * + * TRIMMED BEFORE THE SLASHES COME OFF, as `composio.ts` does: the other order leaves a space as the + * last character, so the slash is not at the end and nothing matches. + */ +export function toolkitOf(url: string): string | null { + const prefix = "arcade://"; + if (!url.startsWith(prefix)) return null; + const name = url.slice(prefix.length).trim().replace(/\/+$/, ""); + return TOOLKIT_NAME.test(name) ? name : null; +} + +/** + * What a tool does, from `metadata.behavior`. DESTRUCTIVE IS READ FIRST, and the order is the + * decision: a reading that checked `read_only` first would record a both-flagged tool as a READ, + * the one direction nothing downstream recovers from, since nothing ever asks again. + * + * ABSENT METADATA, OR A FLAG THAT `flagOf` ANSWERS NULL (a vendor publishing a string where it + * documents a boolean), IS A DESTRUCTIVE WRITE, which is also what a listing that would not say + * already records in `./mcp`. It fails safe by putting an approval in front of a read, which is + * annoying and correct; the alternative lets a deletion through unannounced. + * + * AN EMPTY BEHAVIOUR OBJECT IS A VENDOR THAT SAID NOTHING, AND IS READ EXACTLY AS AN ABSENT ONE. + * `{}` — or a block carrying only `idempotent` and the like — states NEITHER flag, so the two + * `flagOf(…, false)` defaults below would otherwise manufacture "not destructive, not read-only" + * out of nothing and answer the plain-write verdict: a container Arcade opened and put nothing in, + * read as Arcade declaring the action safe to run unannounced. The absence of a stated restriction + * is not the absence of a restriction, and an EMPTY container cannot be allowed to be worth more + * than NO container two lines above it. + * + * NOT THE SAME CALL AS `arcade-adapter.ts`'s `connectionIsLive`, WHERE SILENCE IS DELIBERATELY + * PERMISSIVE AND SAYS SO AT LENGTH. There + * the silent field is `connection_status`, optional on the wire, and a pessimistic reading + * un-connects every real connection against any engine that omits it — the cost of failing closed + * falls on people who did nothing wrong. Here the cost of failing closed is one approval prompt in + * front of an action that may turn out to be a read; the cost of failing open is a deletion that + * nobody was asked about. The flags' per-field defaults stand once EITHER flag is stated, which is + * the vendor describing this action rather than saying nothing at all. + */ +export function classify(metadata: unknown): { + effect: "read" | "write"; + destructive: boolean; +} { + const closed = { effect: "write", destructive: true } as const; + if (typeof metadata !== "object" || metadata === null) return closed; + const behavior = (metadata as { behavior?: unknown }).behavior; + if (typeof behavior !== "object" || behavior === null) return closed; + const flags = behavior as { destructive?: unknown; read_only?: unknown }; + const stated = (value: unknown) => value !== undefined && value !== null; + if (!stated(flags.destructive) && !stated(flags.read_only)) return closed; + const destructive = flagOf(flags.destructive, false); + const readOnly = flagOf(flags.read_only, false); + if (destructive === null || readOnly === null) return closed; + if (destructive) return { effect: "write", destructive: true }; + if (readOnly) return { effect: "read", destructive: false }; + return { effect: "write", destructive: false }; +} + +/** + * What this transport needs of Arcade's client, and nothing more: `./arcade-adapter` maps the + * vendor's SDK onto it, so this file imports no vendor package. Mirrors `ComposioActions`. + * + * `listTools` carries no `user_id` by construction: the query type has no such field. + */ +export type ArcadeActions = { + listTools(q: { + toolkit: string; + limit: number; + offset: number; + }): Promise<{ items: unknown[]; total_count?: number }>; + execute(r: { + tool_name: string; + input: Record; + user_id: string; + }): Promise<{ + success?: boolean; + output?: { + value?: unknown; + error?: { message?: string }; + authorization?: unknown; + }; + }>; +}; + +let installed: ArcadeActions | null = null; + +/** Installs (or, with `null`, removes) the Arcade client. Null is also the unconfigured state. */ +export function useArcadeClient(client: ArcadeActions | null): void { + installed = client; +} + +export type ArcadeListedTool = ListedTool & { scopes: string[] }; + +const PAGE_SIZE = 100; +/** A runaway guard, not a bound: 1000 pages of 100 is far past any one toolkit. */ +const MAX_PAGES = 1000; + +function record(value: unknown): Record | null { + return typeof value === "object" && value !== null && !Array.isArray(value) + ? (value as Record) + : null; +} + +/** + * WHAT ARRIVED WHERE A SHAPE BELONGED, named without quoting it. + * + * A listing row carries whatever the vendor chose to put on it, and a refusal from here is read off + * an admin page, so the SHAPE is the part that is both safe to say and the part that helps — + * `sent` in `composio-adapter.ts` says this at length and this is the same judgement, kept local + * because that file is the other vendor's door and neither imports the other. + */ +export function shapeOf(value: unknown): string { + if (Array.isArray(value)) return "a list"; + // `typeof null` IS `"object"`, so the bare template would write "a object" — the wrong grammar + // and, worse, the wrong fact: a hole is not a shape this deployment read and could not use, it + // is the absence of one. The callers that pass a present-but-unreadable field guard both of + // these before asking; `connectionsFor`'s unreadable ROW is the one that can carry a `null`. + if (value === null || value === undefined) return "nothing"; + if (typeof value === "string" && value.trim() === "") return "a blank string"; + return `a ${typeof value}`; +} + +/* + * --------------------------------------------------------------------------------------------- + * THE ONE READING OF A VENDOR AUTHORIZATION FIELD — absent, unreadable, or read. + * + * Every Arcade field this deployment draws an AUTHORIZATION conclusion from is read through one of + * the three functions below, and all three apply the same rule, stated once here: + * + * ABSENT — the key missing, `undefined`, or `null` — is the vendor saying nothing, and answers the + * field's documented default. `null` IS ABSENCE ON EVERY FIELD, NOT ON SOME: the SDK declares + * these fields optional, Arcade sends `metadata: null` and `requirements: null` for "none" + * (`AirtableApi`, `Apollo` in `fixtures/arcade-catalogue.json`), and a serializer that writes an + * unset optional as `null` rather than dropping the key is saying what a missing key says. A rule + * under which `null` meant "absent" on one field and "a value I cannot read" on the next would + * make the same vendor answer mean opposite things one line apart. + * + * UNREADABLE — present, but not the field's shape — is NEITHER default. Each caller decides what + * an unreadable field costs it, and every caller fails CLOSED: the catalogue and the transport + * listing refuse, the grants screen says `unknown`, a connection is not live, a mint is refused. + * A BLANK STRING IS UNREADABLE on a field whose value is a decision. It is present (so it is not + * absence) and carries no value (so it is not text); `authProvidersNamedBy` already refuses a + * blank `provider_id` for exactly this reason. `textOf` in `arcade-adapter.ts` reads a blank + * LABEL as absence, which is right for a display name and is not the question asked here. + * + * READ — the value in this deployment's vocabulary: a status FOLDED AND TRIMMED (a case or a + * space the vendor changes must not change an answer about somebody's account), a scope list + * whose every element is a scope. + * + * WHY ONE READING. `authorizationRequirementOf` (C2) answered this tri-state for the authorization + * block, and every OTHER reader of a field inside or beside it picked its own default for what it + * could not read — the permissive one, each time: a missing `token_status` fell back to the + * PROVIDER's `status: "active"` and drew every action as held; an unreadable `oauth2`/`scopes` + * became `[]`, which the gate reads as "the connection itself is the grant"; a non-text + * `connection_status` read as live; a non-text mint `status` handed a bearer url on as a live + * redirect. One reading means a new reader cannot pick a sixth default by accident. + * --------------------------------------------------------------------------------------------- + */ + +/** + * What one listed action's `requirements.authorization` SAYS, read once for every caller that asks. + * + * THE ONE READING OF THIS FIELD'S ABSENCE. Two readers once reached opposite answers on the same + * row: `requiresAuthorization` read a missing block as "needs nothing" and filed the app as + * `no-auth`, while `grantStateOf` read the same silence as "could not be read" and drew every + * action of that app as a broker outage on the grants screen, forever. The vendor's own listing + * settles which is right — `Apollo` publishes NO authorization block and a deployment secret + * instead, verbatim in `fixtures/arcade-catalogue.json` — so `null` and an absent field are + * `none`, here and therefore everywhere. + * + * A PRESENT FIELD THIS DEPLOYMENT CANNOT READ IS NEITHER ANSWER. It is `unreadable`, with WHICH + * field and the shape that arrived there, and each caller decides what an unreadable row costs it: + * the catalogue refuses, the grants screen says `unknown`. + * + * HERE, IN THE TRANSPORT, AND NOT IN THE ADAPTER, because the transport's own listing reads the same + * block for the scopes the gate checks, and the adapter imports this module, never the reverse. + */ +export type AuthorizationRequirement = + | { kind: "none" } + | { + kind: "unreadable"; + field: "requirements" | "authorization"; + shape: string; + } + | { kind: "required"; authorization: Record }; + +export function authorizationRequirementOf( + item: unknown, +): AuthorizationRequirement { + const requirements = record(item)?.requirements; + if (requirements === undefined || requirements === null) { + return { kind: "none" }; + } + if (typeof requirements !== "object" || Array.isArray(requirements)) { + return { + kind: "unreadable", + field: "requirements", + shape: shapeOf(requirements), + }; + } + const authorization = (requirements as Record).authorization; + if (authorization === undefined || authorization === null) { + return { kind: "none" }; + } + if (typeof authorization !== "object" || Array.isArray(authorization)) { + return { + kind: "unreadable", + field: "authorization", + shape: shapeOf(authorization), + }; + } + return { + kind: "required", + authorization: authorization as Record, + }; +} + +/** + * The OAuth scopes one listed action asks for — `requirements.authorization.oauth2.scopes` — read + * by {@link authorizationRequirementOf}'s rule, one level further in. + * + * `[]` IS A CLAIM, NOT A SHRUG. An action whose scopes are `[]` is one whose connection IS the + * grant (Github's 43 actions publish exactly that), and the gate, the catalogue's counts and the + * grants screen all read it so. So `[]` is answered only when the vendor SAID it: no authorization + * block, an `oauth2` absent or `{}`, a `scopes` absent or `[]`. An `oauth2` or a `scopes` in any + * other shape is `unreadable`, and so is a list holding anything but scope text: `["repo", 5]` + * read as `["repo"]` would be a narrower grant than the one the vendor described, which is the same + * fail-open answer one element at a time. + */ +export type ScopesRequirement = + | { kind: "read"; scopes: string[] } + | { + kind: "unreadable"; + field: "requirements" | "authorization" | "oauth2" | "scopes"; + shape: string; + }; + +export function requiredScopesOf(item: unknown): ScopesRequirement { + const read = authorizationRequirementOf(item); + if (read.kind === "none") return { kind: "read", scopes: [] }; + if (read.kind === "unreadable") return read; + const oauth2 = read.authorization.oauth2; + if (oauth2 === undefined || oauth2 === null) { + return { kind: "read", scopes: [] }; + } + if (typeof oauth2 !== "object" || Array.isArray(oauth2)) { + return { kind: "unreadable", field: "oauth2", shape: shapeOf(oauth2) }; + } + const scopes = (oauth2 as Record).scopes; + if (scopes === undefined || scopes === null) { + return { kind: "read", scopes: [] }; + } + if (!Array.isArray(scopes)) { + return { kind: "unreadable", field: "scopes", shape: shapeOf(scopes) }; + } + const odd = scopes.findIndex( + (scope) => typeof scope !== "string" || scope.trim() === "", + ); + if (odd !== -1) { + return { + kind: "unreadable", + field: "scopes", + shape: `a list holding ${shapeOf(scopes[odd])}`, + }; + } + return { kind: "read", scopes: scopes as string[] }; +} + +/** + * One vendor STATUS field — `token_status`, `connection_status`, a mint's or a flow's `status` — + * read by the rule above: absent, unreadable, or its text FOLDED AND TRIMMED. + * + * NOT `textOf`, deliberately: `textOf` answers a blank string as absence, which is right for a + * label and wrong for a decision, and it does not fold. Each status reader once spelled its own + * `textOf(x)?.trim().toLowerCase()` (or forgot to), and the one that forgot answered a vendor-side + * change of case differently from the ones that did. + */ +export type VendorStatus = + | { kind: "absent" } + | { kind: "unreadable"; shape: string } + | { kind: "text"; text: string }; + +export function vendorStatusOf(value: unknown): VendorStatus { + if (value === undefined || value === null) return { kind: "absent" }; + if (typeof value !== "string" || value.trim() === "") { + return { kind: "unreadable", shape: shapeOf(value) }; + } + return { kind: "text", text: value.trim().toLowerCase() }; +} + +/** Where on the action a {@link ScopesRequirement} could not be read, in words. */ +function scopesFieldOf( + field: Extract["field"], +): string { + return field === "requirements" + ? "requirements" + : field === "authorization" + ? "authorization requirement" + : `authorization ${field}`; +} + +/** + * The OAuth scopes an action needs, for the tool the gate checks. + * + * NEVER `requirements.met`. The two sit in the same object and behave oppositely: `met` is a + * per-person claim that answers TRUE FOR EVERYBODY when asked without a `user_id` (and this + * listing sends none), while `scopes` is a static property of the action that carries no identity. + * Reading `met` here would record every person as connected to everything, and nothing else would + * go red: the gate would pass, the call would be made, and the first sign would be somebody + * else's mailbox. + * + * AN UNREADABLE SCOPES BLOCK REFUSES THE LISTING; IT IS NEVER `[]`. `[]` on a listed tool is what + * the gate reads as "the connection is the grant", so answering it for a block this deployment + * could not read would let any connection run an action whose real scopes nobody read. See + * {@link requiredScopesOf}. The refusal names the shape, never the vendor's value. + */ +function scopesOf(tool: Record, toolkit: string): string[] { + const read = requiredScopesOf(tool); + if (read.kind === "read") return read.scopes; + throw new Error( + `Arcade listed one of ${toolkit}'s actions with ${read.shape} where its ${scopesFieldOf(read.field)} belongs, and that is what says which permissions it needs. A shape this deployment cannot read is not "no permissions", so nothing was refreshed and the actions already recorded for this app are kept.`, + ); +} + +function inputSchemaOf(input: unknown): Record { + const parameters = record(input)?.parameters; + const properties: Record = {}; + const required: string[] = []; + for (const raw of Array.isArray(parameters) ? parameters : []) { + const parameter = record(raw); + if (!parameter || typeof parameter.name !== "string") continue; + const valType = record(parameter.value_schema)?.val_type; + properties[parameter.name] = { + type: valType === "json" ? "object" : (valType ?? "string"), + description: + typeof parameter.description === "string" ? parameter.description : "", + }; + if (parameter.required === true) required.push(parameter.name); + } + return { type: "object", properties, required }; +} + +/** + * Every action of one toolkit, read to the end. + * + * NO `user_id` IS SENT. A listing is not somebody's: it is what this deployment offers everybody. + * + * PAGINATION STOPS ON A SHORT PAGE, never on `total_count`. That field is optional; an earlier draft + * fell back to `?? tools.length` and so exited after one page. It is used only as a cross-check. + */ +export async function listTools(connection: { + url: string; +}): Promise { + const toolkit = toolkitOf(connection.url); + if (!toolkit) { + throw new Error( + `${connection.url} does not name an Arcade toolkit, so nothing was asked what it offers. The url has to be arcade:// followed by a toolkit name; correct it on the Plugins page.`, + ); + } + if (!installed) { + throw new Error( + `Arcade is not configured for this deployment, so nothing could be asked what ${toolkit} offers. The actions already recorded for this app are kept rather than cleared.`, + ); + } + + const raw: unknown[] = []; + let total: number | undefined; + let exhausted = true; + for (let page = 0; page < MAX_PAGES; page++) { + let answer: { items: unknown[]; total_count?: number }; + try { + answer = await installed.listTools({ + toolkit, + limit: PAGE_SIZE, + offset: raw.length, + }); + } catch (error) { + /* + * A SENTENCE, NOT THE VENDOR'S OBJECT, as `composio.ts`'s listing does. `refreshTools` puts + * `error.message` on the admin page and into a model's context, and an SDK `APIError` builds + * its message from the whole response body: an unsanitised vendor payload. The original is + * kept as `cause` for a log. + */ + throw new Error(listingSentence(toolkit, error), { cause: error }); + } + const items = (answer as { items?: unknown } | null)?.items; + if (!Array.isArray(items)) { + throw new Error( + `Arcade did not answer with an action list for ${toolkit}. Nothing was refreshed and the actions already recorded for this app are kept.`, + ); + } + raw.push(...items); + // THE HIGHEST ANY PAGE REPORTED, NEVER THE LAST. An engine that truncates at 250 of 300 drops + // `total_count` from its short final page, and keeping the last value would erase the 300 page + // one reported and commit 250 actions as a complete listing. (`total_count` reaching here is + // already honest about absence: `createArcadeClient` omits the field when the vendor omitted + // it, because the SDK's page object coerces an absent total to `0`.) + if (typeof answer.total_count === "number") { + total = + total === undefined + ? answer.total_count + : Math.max(total, answer.total_count); + } + if (items.length < PAGE_SIZE) { + exhausted = false; + break; + } + } + if (exhausted) { + throw new Error( + `Arcade's listing for ${toolkit} never ended after ${MAX_PAGES} pages, so it is not trusted to be a list of this app's actions. Nothing was refreshed and the actions already recorded for this app are kept.`, + ); + } + if (total !== undefined && raw.length < total) { + throw new Error( + `Arcade listed ${raw.length} of ${total} actions for ${toolkit}, so the listing is incomplete. Nothing was refreshed and the actions already recorded for this app are kept.`, + ); + } + + return raw.flatMap((item) => { + const tool = record(item); + if (!tool || typeof tool.qualified_name !== "string") return []; + const offerable = offerableName(tool.qualified_name, toolkit); + if (offerable === null) return []; + return [ + { + name: offerable, + /* + * WHAT THE VENDOR IS CALLED BY, kept beside the name this deployment records rather than in + * place of it. `execute` sends this and the refusal sentences in this file quote it; the + * model is offered `name`. See {@link ListedTool.vendorName}. + */ + vendorName: tool.qualified_name, + description: + typeof tool.description === "string" ? tool.description : "", + inputSchema: inputSchemaOf(tool.input), + ...classify(tool.metadata), + scopes: scopesOf(tool, toolkit), + }, + ]; + }); +} + +/** + * The part of an Arcade `qualified_name` this deployment records as the action's name, or null when + * the listing offers nothing that can be one. + * + * ARCADE QUALIFIES EVERY ACTION WITH ITS TOOLKIT — `Gmail.ListEmails` — and the toolkit is already + * the server id, so carrying the prefix would spell the app twice in every ref and every offered + * name. More to the point the dot is ILLEGAL in a model tool name (`^[a-zA-Z0-9_-]+$`), which is + * the defect this function exists to close: recorded whole, the qualified name went into + * `mcp__arcade-Gmail__Gmail.ListEmails` and the model API refused the entire request, every tool in + * it, on the first granted Arcade action. + * + * ONLY THE VENDOR'S OWN PREFIX IS REMOVED, and only when the remainder stands on its own. Anything + * else — a differently-qualified name, a second dot, a character no tool name may carry — is left + * for the guard in `storableTools` to refuse by name, because a listing this does not recognise is + * not something to repair by guessing. Dropped here rather than refused outright for the one case + * the vendor's own schema permits and this deployment can do nothing with: an empty remainder. + */ +function offerableName(qualifiedName: string, toolkit: string): string | null { + const prefix = `${toolkit}.`; + const bare = qualifiedName.toLowerCase().startsWith(prefix.toLowerCase()) + ? qualifiedName.slice(prefix.length) + : qualifiedName; + return bare.trim().length === 0 ? null : bare; +} + +/** What this deployment says when Arcade's listing could not be read. Never the vendor's words. */ +function listingSentence(toolkit: string, _error: unknown): string { + return `Arcade's action list for ${toolkit} could not be read, so nothing was refreshed and the actions already recorded for this app are kept.`; +} + +/** + * A failure from Arcade, already normalized and cause-unwrapped by `./arcade-adapter`, so nothing + * here sees an SDK class. `name` is the RESPONSE BODY's `error.name`. + */ +export type ArcadeFailure = { + status: number | undefined; + name: string | undefined; + message: string | undefined; +}; + +/** + * A REFUSAL FROM ARCADE AS A REAL `Error`, CARRYING THIS DEPLOYMENT'S SENTENCE AND NOT THE VENDOR'S. + * + * TWO DEFECTS IN ONE CLASS, and both were measured rather than imagined. + * + * A BARE OBJECT IS NOT A REASON. `createArcadeClient`'s `execute` used to `throw` the normalized + * failure itself — a plain `{ status, name, message }`. `reasonWithoutStatement`, which is the one + * door every log line in `routes.ts` copies a reason through, answers `String(thrown)` for anything + * that is not an `Error`: the literal text `[object Object]`. So the single log line written at the + * moment a tool call failed carried no information whatsoever, and there was no stack beside it. + * + * AND THE VENDOR'S WORDS ARE DROPPED HERE, which is the half the type enforces. The SDK's `APIError` + * builds its own `message` as `${status} ${body.message ?? JSON.stringify(body)}` + * (`@arcadeai/arcadejs`, `core/error.js: makeMessage`), so an `APIError` allowed to escape the + * adapter puts the vendor's RESPONSE BODY into every reader that quotes a message — an admin page, + * a log line, a model's context, an audit row. On this vendor that body is not inert: the auth + * paths answer with an `authorization` whose `url` is a bearer capability and whose `context.token` + * is a live provider access token, and the adapter's `authorizations.status` already inverts this + * codebase's carry-the-vendor-error-as-`cause` convention for exactly that reason. This is the same + * refusal one layer out: the constructor keeps `status` and the body's `error.name` — the two + * MACHINE fields this deployment keys decisions on, in {@link isAuthorizationRequired} and in the + * route that decides whether a failed mint is definite — and drops the vendor's PROSE on the floor. + * Nothing that is not stored cannot be logged. + * + * `status` IS ALSO A TOP-LEVEL FIELD, because that is what an `APIError` presents and callers that + * read it off the thrown value go on working across this change. + */ +export class ArcadeFailureError extends Error { + readonly status: number | undefined; + readonly failure: ArcadeFailure; + constructor(sentence: string, failure: ArcadeFailure) { + super(sentence); + this.name = "ArcadeFailureError"; + this.status = failure.status; + // THE ONE DOOR THE VENDOR'S PROSE DOES NOT COME THROUGH. Written here rather than at each + // construction site so that a later caller cannot pass it on by forgetting to. + this.failure = { + status: failure.status, + name: failure.name, + message: undefined, + }; + } +} + +/** + * KEYED ON THE BODY'S NAME, NEVER ON THE 403. A 403 is also what a revoked key, a disabled project + * and a rate limit look like; keyed on the status, this would tell somebody to authorize an action + * when the deployment's key is what is wrong. + */ +export function isAuthorizationRequired(failure: ArcadeFailure): boolean { + return failure.name === "tool_authorization_required"; +} + +/** + * The thrown value, READ AS A SHAPE rather than cast into one. `record` is a plain-object coercion + * that normalizes nothing and walks no `cause`, so a cast through it would let any object at all + * stand in for a normalized failure. Only a `name` string is required, since that is the one field + * `isAuthorizationRequired` keys on; the rest are read as-is or left undefined. + * + * {@link ArcadeFailureError} IS ASKED FIRST AND BY TYPE, because the shape reading cannot see it: + * an `Error`'s `name` is its CLASS name through the prototype chain, so a duck-typed read of one + * answers `"ArcadeFailureError"` for every refusal and the authorize prompt below would be + * unreachable — which is the same trap the adapter's own comment records for a raw `APIError`. + */ +function arcadeFailure(thrown: unknown): ArcadeFailure | null { + if (thrown instanceof ArcadeFailureError) return thrown.failure; + const raw = record(thrown); + if (!raw || typeof raw.name !== "string") return null; + return { + status: typeof raw.status === "number" ? raw.status : undefined, + name: raw.name, + message: typeof raw.message === "string" ? raw.message : undefined, + }; +} + +/** + * The cap every string this module puts in front of a model goes through, as `composio.ts`'s + * `cap()` does, with the same limit and the same marker. + * + * A tool result is read by a model AND copied into the audit row, so an unbounded one is somebody + * else's server deciding how much of our context window to spend and how large a durable record + * grows — and the text is attacker-influenceable, since it is whatever the mailbox, issue or + * document the action read happens to contain. Truncated visibly, never silently: `truncated` is + * the field that says it happened, and reporting `false` unconditionally made it a field that + * structurally could not. + * + * BOTH ANSWERS GO THROUGH IT. A refusal lands in a model's context exactly as a result does, and + * this file's refusals quote `toolName`, which is a `qualified_name` the vendor's listing supplied. + */ +function cap(text: string): { text: string; truncated: boolean } { + if (text.length <= MAX_RESULT_CHARS) return { text, truncated: false }; + return { + text: `${cutAtCodeUnits(text, MAX_RESULT_CHARS)}\n\n[truncated]`, + truncated: true, + }; +} + +const failureResult = (text: string): McpCallResult => ({ + ...cap(text), + isError: true, +}); + +/** + * Call one Arcade action as the connection's actor. + * + * THE ACTION IN THE REFUSAL COMES FROM THE CALL SITE, never from the error: `APIError` in + * `@arcadeai/arcadejs@2.4.1` carries `status`, `headers` and `error` and nothing naming the tool. + * + * NO URL IS EVER IN THE SENTENCE, ON ANY PATH. The `authorization.url` is a bearer capability: + * whoever opens it attaches an account to the identity the flow was minted for. It is never + * returned to a model, logged, put in an error body or written to an audit row. The refusal names + * the Settings page, where the link is minted by an authenticated request whose actor is known. + * + * THE SUCCESS PATH IS COVERED BY THAT SAME PROMISE, and this is where it is easiest to break. A 200 + * is not a safe envelope: `ExecuteToolResponse.output.authorization` is the SAME + * `AuthorizationResponse` the 403 carries, with the url and a `context.token` that is a LIVE OAUTH + * ACCESS TOKEN for the end user's account. `output.value` IS THE ONLY PART OF THE ENVELOPE THAT MAY + * CROSS INTO `text`; the envelope is never stringified whole, because `text` is returned to a model + * and copied into the audit row. An answer carrying an `authorization` at all is the refusal, not a + * result: it means the call was not run as an authorized actor. + * + * NOTHING THE VENDOR SAID IS REPEATED either: the ordinary failure is this deployment's sentence, + * and `output.error` is read only as a BOOLEAN — its `message`, `developer_message` and + * `stacktrace` are the vendor's words and stay out of `text`. + */ +export async function callTool( + connection: { url: string; actorId?: string }, + toolName: string, + args: Record, +): Promise { + if (!installed) { + return failureResult( + `Arcade is not configured for this deployment, so ${toolName} was not run.`, + ); + } + if (!connection.actorId) { + return failureResult( + `${toolName} was not run: no account was named to run it as.`, + ); + } + try { + const answer = await installed.execute({ + tool_name: toolName, + input: args, + user_id: connection.actorId, + }); + if (answer.output?.authorization) { + return failureResult( + `${toolName} has not been authorized on this account yet. Authorize it in Settings → Connected accounts and ask again.`, + ); + } + if (answer.success === false || answer.output?.error) { + return failureResult(`Arcade could not run ${toolName}.`); + } + const value = JSON.stringify(answer.output?.value ?? null, null, 2); + /* + * `JSON.stringify` ANSWERS `undefined` RATHER THAN THROWING for a value with no JSON form — a + * function, a symbol — and `output.value` is the vendor's field while the `unknown` saying + * anything may be there is ours. `??` does not catch it: a function is not nullish. Named here + * so the refusal is this deployment's sentence rather than a `text.length` TypeError raised + * inside {@link cap} and caught below as if Arcade had failed. + */ + if (value === undefined) { + return failureResult( + `${toolName} ran, but its answer has no JSON form, so there is nothing to show.`, + ); + } + return { ...cap(value), isError: false }; + } catch (thrown) { + const failure = arcadeFailure(thrown); + if (failure && isAuthorizationRequired(failure)) { + return failureResult( + `${toolName} has not been authorized on this account yet. Authorize it in Settings → Connected accounts and ask again.`, + ); + } + return failureResult(`Arcade could not run ${toolName}.`); + } +} diff --git a/server/src/plugins/broker.ts b/server/src/plugins/broker.ts index 8595a1080..681f0812f 100644 --- a/server/src/plugins/broker.ts +++ b/server/src/plugins/broker.ts @@ -10,9 +10,24 @@ * schema. Everything below is a name for a shape, so the vendor's package stays confined to the * adapter that implements {@link ConnectedAppBroker} — one file, replaceable, and the only place a * version bump can reach. A module that named the vendor's types here would put their package on - * the import graph of every test that touches enablement. `AccountRef`, below, is the one import - * that crosses this file's boundary, and it is a type this deployment names, never the vendor's. + * the import graph of every test that touches enablement. `AccountRef`, `BrokerProvider` and + * `BROKERED_PROFILE`, below, are the only imports that cross this file's boundary, and all three are + * names this deployment owns, never the vendor's. Two are types; `BROKERED_PROFILE` is a value, and + * the comment on its import says what that costs. */ +// This import closes a runtime cycle: `./access` imports `schemeKind` from this file. It is safe +// for two reasons, and the reasons are the rule. `access.ts` reads `schemeKind` only inside a +// function body, and this file reads `BROKERED_PROFILE` only inside a refusal constructor — the +// `BrokerUnconfiguredError` one and the `BrokerReturnUrlError` one — so whichever module evaluates +// first, the other's half-initialised bindings are never touched while either is still evaluating. +// Nothing may call across this cycle at module scope. +// Hoisting a `BROKERED_PROFILE[provider]` destructure out of either constructor, or deriving a +// top-level constant in `access.ts` from `schemeKind`, would read a lexical binding the other module +// has not yet initialised: it throws under one evaluation order and not the other, so it can pass +// every test and still fail at boot. The cycle is deliberate: passing `vendor` and `envVar` in +// would scatter the vocabulary across every call site, which is what keeping `BROKERED_PROFILE` in +// `access.ts` exists to prevent. +import { BROKERED_PROFILE, type BrokerProvider } from "./access"; import type { AccountRef } from "./shared-accounts"; /** @@ -317,6 +332,43 @@ export type BrokerApp = { * made the choice this field exists to inform. */ actionCount: number; + /** + * How many of those actions the provider itself classified, or null where nobody measured. + * + * REQUIRED AND NULLABLE, WHICH IS THE WHOLE POINT OF THE FIELD. `0` means MEASURED, AND NOTHING + * WAS CLASSIFIED — every action of this app will be approved like a deletion, so the coverage + * warning fires. `null` means NOT MEASURED — this provider does not publish the fact, so the page + * says nothing. Those are opposite sentences. + * + * An OPTIONAL field makes them the same shape at the call site, and the natural `?? 0` collapses + * "unmeasured" into "measured none" — firing a coverage warning on a Composio deployment, a false + * alarm at exactly the moment somebody is deciding whether to trust an app. So every projection + * states the value, `./composio-adapter` writes an explicit `null`, and NOTHING WRITES `?? 0`. + */ + classifiedCount: number | null; + /** + * How many DISTINCT NON-EMPTY scope sets the app's actions ask for, or null where nobody measured. + * + * The count of things that are separately approvable. Two actions asking for the same scopes are + * one permission; `[a,b]` and `[b,a]` are the same set and so are one too, which is why the sets + * are SORTED before they are joined. + * + * AN ACTION WITH NO SCOPES IS NOT ITS OWN PERMISSION — measured, not chosen. Github's 43 actions + * all carry an `oauth2` block with no scopes, and one read consent flipped 43 of 43 to + * `met: true`. So "no scopes" never meant "needs nothing"; it meant "the connection itself is the + * grant, and any consent covers this". Such an action is not separately approvable, so it joins + * no group and this count does not move for it. See {@link BrokerApp.scopedActionCount}. + */ + permissionCount: number | null; + /** + * How many actions carry AT LEAST ONE scope, or null where nobody measured. + * + * IT EXISTS BECAUSE WITHOUT IT A MIXED APP LIES BY ARITHMETIC. A toolkit of two actions where one + * asks for scopes and one asks for none reports `permissionCount: 1` across `actionCount: 2`, + * which reads as ONE PERMISSION COVERING BOTH — while the second is in fact covered by any + * approval at all. Those are different facts, and this is the field that tells them apart. + */ + scopedActionCount: number | null; /** How somebody would connect to it. See {@link BrokerConnection}. */ connection: BrokerConnection; }; @@ -327,6 +379,100 @@ export type BrokerApp = { */ export type AuthConfigOutcome = "created" | "standing" | "not-needed"; +/** + * What one account holds at one app, in THIS DEPLOYMENT'S OWN VOCABULARY rather than a vendor's row. + * + * `action` PLUS A STATE PLUS `scopes` IS OPENBOT'S SHAPE AND NOT ARCADE'S. A provider that grants + * per action answers one of these per action because that is what it knows; a provider that grants + * per app answers the same state once per action because that is what IT knows, and neither is + * reading the other's rows. The four states are what a caller can act on — run it, send them to a + * consent, tell an operator to set something up, say that nothing could be read — and `unknown` + * carries its own reason because a state nobody could read is a real answer and not a defensive one. + * + * A DEGENERATE ANSWER IS NOT AN ABSENT ONE, which is why {@link ConnectedAppBroker.grantsFor} is on + * the seam rather than behind a nullable sub-surface. Composio's auth config fixes the scope set + * when it is created, so every action in a toolkit shares one state and one scope list; N identical + * entries is the honest rendering of a toolkit-wide grant, not a stub standing in for a missing + * answer. + * + * `authorized` SAYS WHY THE ACTION IS USABLE, BECAUSE TWO DIFFERENT FACTS ANSWER IT. `held` is an + * authorization this account holds — a consent somebody gave, which a later consent screen is + * talking about. `not-required` is the vendor publishing no authorization for the action at all + * (Arcade's `Apollo`): it is usable, and no approval ever withheld it or will ever grant it. Both + * are `authorized` because both can be called; they are told apart because the consent copy's "approving this + * approves all N" counts only the first, and an action nobody has to approve is not something an + * approval covers. REQUIRED, not optional: an absent field would quietly read as one of the two. + */ +export type GrantState = + | { + action: string; + state: "authorized"; + scopes: string[]; + authorization: "held" | "not-required"; + } + | { action: string; state: "needs-consent"; scopes: string[] } + | { action: string; state: "needs-operator"; missing: string[] } + | { action: string; state: "unknown"; reason: string }; + +/** + * The CORRELATED, POLLABLE AUTHORIZATION FLOW one provider runs and the other does not. + * + * THE LINE THIS SUB-SURFACE FALLS ON IS "THIS BROKER RUNS A CORRELATED, POLLABLE AUTHORIZATION + * FLOW" — NOT "THIS BROKER CAN START A CONSENT", WHICH BOTH DO. {@link ConnectedAppBroker.authorize} + * therefore stays top-level and must not be tidied in here: its caller is the Composio connect flow + * in `routes.ts`, and moving it would either break that route or force Composio to declare this + * sub-surface, which would make the nullability mean nothing. + * + * ASKING THE OTHER PROVIDER FOR THE STATUS OF A MINT IS A CATEGORY ERROR RATHER THAN A HARD + * QUESTION. Composio mints no correlated authorization to poll, and its return leg is an OAuth + * callback with state handled in `oauth.ts` and never through the broker. A member that existed only + * to throw would be a provider branch wearing a type's clothes — which is the charge this seam + * already met once at `accountName`, two implementations of one member answering different + * questions. That charge does NOT apply to {@link ConnectedAppBroker.grantsFor}, which does not + * throw. + * + * `status` IS NAMED `status` AND NOT `authorizationStatus`: the sub-surface supplies the noun. + */ +export type AuthorizationFlow = { + /** + * Where one minted authorization has got to, by the id the mint answered with. + * + * NARROWED TO THESE THREE FIELDS AND NOTHING ELSE. A provider's own status reply carries the live + * access token it issued and the person's full profile beside it, and neither is something a seam + * this deployment reads in routes and stores should be able to hand on by accident. + * + * `signal` IS OPTIONAL ON THE SEAM AND HONOURED BY THE ADAPTER. The caller polls this on a leg + * where a browser is held open, and a poll COUNT bounds nothing while each call is unbounded — + * so the caller gives up on its own schedule and says so here, and the adapter hands the signal + * to the SDK's request options rather than leaving a socket open against a vendor nobody is + * waiting on any more. A stub that ignores it is behaving correctly: an abandoned call is still + * abandoned, the signal only makes the abandonment reach the wire. + */ + status( + id: string, + options?: { signal?: AbortSignal }, + ): Promise<{ status: string; userId: string | null; scopes: string[] }>; + /** + * Match somebody coming back from the provider's screen to the authorization they left through. + * + * `handle` IS AN OPAQUE STRING THIS SEAM DOES NOT INTERPRET. It is minted by the adapter, carried + * by the return leg and handed back here to be recognised; `flow_id` is Arcade's word for it and + * stops at the adapter. Nothing here parses it, compares it to a scheme or reads a provider out of + * it. + * + * `{ mismatch: true }` RATHER THAN A THROW, because a handle that belongs to somebody else is an + * ANSWER: it is exactly the case a return leg has to be able to refuse quietly, and a caller + * cannot tell it from an outage if both arrive as exceptions. + */ + confirmReturn( + q: { + handle: string; + vendorUserId: string; + }, + options?: { signal?: AbortSignal }, + ): Promise<{ authorizationId: string } | { mismatch: true }>; +}; + /** * What this deployment needs of Composio's broker, and nothing more. * @@ -338,6 +484,104 @@ export type AuthConfigOutcome = "created" | "standing" | "not-needed"; * dial. */ export type ConnectedAppBroker = { + /** + * Whether this provider's grant is held by THIS deployment, as opposed to by the vendor. + * + * A DECLARED PROPERTY, AND NEVER A `provider === "arcade"` COMPARISON. Every permission check + * that has to know where a grant lives reads this field off the broker it was handed; none of + * them asks which vendor it is talking to. `store.ts:1631` is why: a gate and its exemption + * keyed on different things there, and the exemption failed OPEN — a duplicate row let a call + * run for somebody who had connected nothing. A vendor-name comparison inside a permission check + * is that same shape, two answers to one question that nothing forces to agree, and adding a + * provider would mean finding every such comparison by hand. A property on the seam makes the + * answer one value per broker and makes a new broker declare it or fail to type-check. + * + * TRUE for Composio, whose connection rows and grants live in this deployment's own tables. That + * is the behaviour it always had, made explicit here rather than changed. + */ + grantIsLocal: boolean; + /** + * The correlated authorization flow, or a DECLARED `null` where this broker runs none. + * + * THE FIELD IS REQUIRED AND THE `null` IS A STATEMENT RATHER THAN AN INFERRED ABSENCE. A broker + * literal that omits it fails to type-check, which is the whole of what this costs and the whole + * of what it buys. {@link ConnectedAppBroker.grantIsLocal} is the shape being copied and its + * docblock argues for it in its own words: an optional-shaped capability read with `?.` or + * `=== undefined` answers for a broker that never declared anything, which is how a gate and its + * exemption came to key on different things at `store.ts:1631` and the exemption failed OPEN — + * a call ran for somebody who had connected nothing. Nine stubs omitting `grantIsLocal` were the + * evidence; an optional member here would reopen that exact shape one field along. + * + * SO A ROUTE REACHES IT WITH `if (!broker.authorizations)` — A PRESENCE TEST ON A VALUE THE + * BROKER DECLARED, and never a vendor name. Which flow a provider runs is the provider's own + * answer, stated once on the object it hands over. + * + * WHAT IT IS AND IS NOT ABOUT: see {@link AuthorizationFlow}. The line is "this broker runs a + * correlated, pollable authorization flow", NOT "this broker can start a consent" — both do that, + * through {@link ConnectedAppBroker.authorize}, which stays top-level. + */ + authorizations: AuthorizationFlow | null; + /** + * What this account holds at this app, action by action. + * + * THE NEUTRAL SEAM BOTH PROVIDERS ANSWER, and it is one question rather than two: what does this + * account hold at this app. A provider that grants per action answers from its own rows; a + * provider whose auth config fixes the scope set when it is created answers the same state once + * per action, carrying that config's scopes. The second answer is DEGENERATE AND DEGENERATE IS + * NOT ABSENT — it is what a toolkit-wide grant honestly looks like through this vocabulary, and + * an implementation that threw instead would be two implementations of one member answering + * different questions, which is the real bug this seam already found at `accountName`. + * + * {@link GrantState} IS THIS DEPLOYMENT'S VOCABULARY AND NOT A VENDOR'S ROW SHAPE. Nothing here + * is copied across from a provider's listing; see that type. + */ + grantsFor(q: { toolkit: string; account: AccountRef }): Promise; + /** + * The VENDOR'S OWN AUTH PROVIDER a connection for this toolkit is held under, or null where the + * vendor does not say. + * + * IT IS NOT THE TOOLKIT NAME, AND THE COINCIDENCE IS NOT THE RULE. Arcade keys a connection on + * `(user_id, provider_id)` rather than on a toolkit: one Google provider serves `Gmail` and + * `GoogleCalendar` both. A provider equals the toolkit slug only where an operator named it that + * way — which `Github`, `Asana` and `Attio` all happen to do, and those are every toolkit in this + * tree's fixtures and stubs. So a derivation from the toolkit name, or a fallback to it where the + * vendor is silent, would pass every test here and be wrong about the deployment it was written + * for. `null` is the honest answer, and its callers leave such an app out rather than guess. + * + * WHAT THIS MEMBER ANSWERS WITH IS THE PROVIDER TYPE, AND `provider_id` NAMES THREE DIFFERENT + * THINGS ON THREE ARCADE OBJECTS. Measured against the live API: + * + * - on a TOOL LISTING, `requirements.authorization.provider_id` is the provider TYPE (`google`) — + * this is the one this member reads, and the one it returns; + * - on a USER-CONNECTION ROW, `provider_id` is the provider INSTANCE id, an operator's + * configuration OF a type (`google-openbot`, `arcade-google`, `cpk-poc`). A refusal envelope's + * `"provider_id": "cpk-poc"` is an instance too; + * - on an AUTH-PROVIDER CONFIG the two sit side by side — `id` is the INSTANCE and `provider_id` + * is the TYPE — which is the only bridge between the first two, because a connection row + * carries no vendor-type field at all: its `provider_type` is `"oauth2"`, the auth SCHEME. + * + * SO A CALLER MUST NOT COMPARE THIS ANSWER TO A CONNECTION ROW'S `provider_id`. `"google"` never + * equals `"google-openbot"`, so that comparison matched zero rows on every real deployment — + * Arcade's own defaults included, since those are `arcade-google` and `arcade-github` and never + * the bare type — and it read as "connected to nothing" rather than as an error. A caller wanting + * rows expands this type into the SET of configured instance ids of that type first; the Arcade + * adapter's `connectionsFor` is where that is done and why. + * + * NAMED `authProviderOf` AND NEVER `providerIdOf`. In this codebase `provider` means the BROKER — + * {@link BrokerProvider}, `brokered_connections.provider` — and that collision has already been + * paid for once, when an audit key `provider` was renamed `authProvider` because it meant the auth + * provider while a column fifty lines away meant the broker. + * + * TOP-LEVEL RATHER THAN ON {@link ConnectedAppBroker.authorizations}, because it is not a step in + * a flow and it is not a question only one provider can answer. Both answer it; see + * {@link ConnectedAppBroker.grantsFor} for the same line drawn one member along, and for why a + * DEGENERATE answer — a vendor whose connections are per toolkit, so a toolkit is its own auth + * provider and the shared set is always empty — is an answer rather than an absence. + * + * CASE IS CARRIED THROUGH UNTOUCHED. Whether two providers are the same provider is the caller's + * comparison to make, and Arcade's toolkit and action case is never normalised here. + */ + authProviderOf(toolkit: string): Promise; /** Every app the catalogue offers, which is what an administrator chooses from. */ listApps(): Promise; /** @@ -397,6 +641,22 @@ export type ConnectedAppBroker = { * connection, so it is neither stored nor logged nor put in an audit row: it is handed to the * browser that asked for it and then forgotten. A redirect url in a log is somebody else's * mailbox for as long as it stays valid. + * + * IT ANSWERS THE MINT'S OWN ID BESIDE THE URL, AND THE ID IS REQUIRED AND NULLABLE, NEVER + * OPTIONAL. `authorizationId` is the handle the vendor gave this one mint, which is what a + * return leg is checked against (spec D24: the attempt's id must equal the callback's + * `auth_id`). An OMITTED field is an inferred absence, and the natural `?? something` at a call + * site turns "this broker mints no id" into a value — an empty string or a made-up id that a + * verifier would then compare against. A required nullable field makes the `null` a DECLARED + * STATEMENT, the same shape {@link ConnectedAppBroker.grantIsLocal} and + * {@link ConnectedAppBroker.authorizations} have in this file, and a call site that holds a + * null passes it on as null. + * + * IT PAIRS WITH {@link ConnectedAppBroker.authorizations}: a broker declaring `null` there + * answers `null` here, and a broker declaring a flow answers a non-null id on every successful + * mint. A broker that grew a flow and forgot the id would leave D24 with no source while every + * type still checked, so `broker-authorization-pairing.test.ts` asserts the pair over every + * broker literal in the tree. */ authorize(request: { account: AccountRef; @@ -426,7 +686,19 @@ export type ConnectedAppBroker = { * address through that before it hands it here. */ returnUrl: string; - }): Promise<{ redirectUrl: string }>; + /** + * The one action this consent is being begun for, for a vendor that grants per action. + * + * OPTIONAL, AND IGNORABLE. An adapter whose vendor grants per app, as Composio does, has no use + * for it and drops it without throwing: handing an action to a broker that cannot use it is + * not an error, and a caller need not know which kind of broker it holds to call this. + * + * `returnUrl` ABOVE STAYS REQUIRED ON THE SEAM EVEN SO. An adapter whose vendor answers with + * its own return leg may ignore it, but the seam does not relax for that: the next adapter + * that needs it must not find the field optional because the last one did not. + */ + action?: string; + }): Promise<{ redirectUrl: string; authorizationId: string | null }>; /** Whether this account is currently attached to this app at the vendor. */ isConnected(request: { account: AccountRef; @@ -615,11 +887,22 @@ export class BrokerRefusalError extends Error { * message where no call was made at all. */ export class BrokerUnconfiguredError extends BrokerRefusalError { - constructor(provider = "Composio") { + /** + * BOTH ARGUMENTS ARE REQUIRED, AND THAT IS THE FIX. This used to default to Composio, so a call + * site that passed nothing put `COMPOSIO_API_KEY` on an Arcade deployment. An omission is a + * compile error now: every site must say which provider it means and who is reading. + * + * `reader` IS WHO THE SENTENCE IS FOR. An `operator` can set an environment variable, so the + * sentence names the ACTIVE provider's variable (from {@link BROKERED_PROFILE}). A `person` can + * set nothing, and a vendor they do not use and a key they cannot reach is the vendor + * vocabulary spec D11 keeps off their screen, so theirs names neither. + */ + constructor(provider: BrokerProvider, reader: "operator" | "person") { + const { vendor, envVar } = BROKERED_PROFILE[provider]; super( - provider === "Composio" - ? "Composio is not configured for this deployment, so nothing was asked. Set COMPOSIO_API_KEY to make the brokered apps available; until it is set there is nothing to connect, nothing to grant and no Composio tool for a Bot to call, and the admin Plugins page shows one row under More apps that goes nowhere." - : `${provider} is not configured for this deployment, so nothing was asked.`, + reader === "person" + ? "Connected apps are not set up for this deployment, so nothing was asked. An administrator can set them up." + : `${vendor} is not configured for this deployment, so nothing was asked. Set ${envVar} to make the brokered apps available; until it is set there is nothing to connect, nothing to grant and no ${vendor} tool for a Bot to call, and the admin Plugins page shows one row under More apps that goes nowhere.`, ); this.name = "BrokerUnconfiguredError"; } @@ -628,20 +911,50 @@ export class BrokerUnconfiguredError extends BrokerRefusalError { /** * A return address that could not bring anybody back, refused before a consent is spent on it. * - * ITS OWN CLASS BECAUSE ITS REMEDY IS ITS OWN. Every other refusal in this file is about Composio — - * a key that is not set, a config this deployment never made, a consent the vendor answered with no - * page. This one is about this deployment's own address for itself, and the person who can act on it - * is an operator with `OPENBOT_APP_URL` in front of them. A caller that could not tell the two apart - * would send somebody to check a Composio key that is perfectly fine. + * ITS OWN CLASS BECAUSE ITS REMEDY IS ITS OWN. Every other refusal in this file is about the broker + * — a key that is not set, a config this deployment never made, a consent the vendor answered with + * no page. This one is about this deployment's own address for itself, and the reader who can act + * on it is an operator with `OPENBOT_APP_URL` in front of them. A caller that could not tell the + * two apart would send somebody to check a vendor key that is perfectly fine. * * A {@link BrokerRefusalError} because it keeps that class's promise about the message: the sentence * is written here, names the step that fixes it, and carries no url. Which matters more than usual * for this one — the value it is refusing is the thing a bad message would be tempted to quote, and * an address is the half of a connect link that says which deployment and which person it is for. + * + * TWO SENTENCES, BECAUSE THE READER WHO MEETS THIS IS NOT THE READER WHO CAN FIX IT, and that is + * the whole of what this class now settles. Both call sites are `requireUser` routes: whoever reads + * `message` is somebody who pressed Connect, and `OPENBOT_APP_URL` is an environment variable they + * cannot set and a vendor name is vocabulary spec D11 keeps off their screen — the same division + * {@link BrokerUnconfiguredError} draws between its `person` and its `operator`. So `message` says + * what happened and who to ask, and {@link operatorMessage} — which the route logs rather than + * answers — names the ACTIVE provider and the variable. A single sentence had to fail one of them, + * and the one it failed was the person: it spelled `Composio` as a literal on a function that took + * no provider, so the Arcade deployments that are the only ones able to reach the authorize route's + * refusal were told their failure involved a vendor they do not use. + * + * THE OPERATOR'S HALF IS HELD AND NOT RAISED, so {@link brokerSentence} keeps answering with the + * safe sentence and a route that passes a refusal through cannot pass this one through by accident. + * Neither half quotes the address, for the reason given on {@link brokerReturnUrl}: a log line is + * one of the places that message was always promised not to reach. */ export class BrokerReturnUrlError extends BrokerRefusalError { - constructor(message: string) { - super(message); + /** + * The same refusal written for whoever can act on it, for a log and never for a response body. + */ + readonly operatorMessage: string; + + constructor(provider: BrokerProvider, address: "unbuilt" | "not-a-web-page") { + const { vendor } = BROKERED_PROFILE[provider]; + super( + address === "unbuilt" + ? "This deployment built no address to send you back to, so connecting was not begun rather than begun with nowhere to land. Nothing was asked of your account; an administrator can set this deployment's address up." + : "The address this deployment would send you back to is not a web address, so a consent granted now would end on a page with no way back here. Nothing was asked of your account; an administrator can correct this deployment's address.", + ); + this.operatorMessage = + address === "unbuilt" + ? `This deployment built no address for ${vendor} to send a person back to, so the connection was not begun rather than begun with nowhere to land. Set OPENBOT_APP_URL to the address this deployment's pages are served from, and connecting an app will have a return leg.` + : `The address ${vendor} would send a person back to is not a web address, so a consent granted there would end on ${vendor}'s own page with no way back here. Set OPENBOT_APP_URL to this deployment's own origin including the scheme — https://openbot.example.com rather than openbot.example.com.`; this.name = "BrokerReturnUrlError"; } } @@ -658,21 +971,24 @@ export class BrokerReturnUrlError extends BrokerRefusalError { * TWO REFUSALS, BECAUSE THEY ARE TWO DIFFERENT MISTAKES. An empty address is a caller that built * none — the guard in front of this one did not run, or ran against the wrong value. An address that * is not a web page is a configured one that cannot work: `OPENBOT_APP_URL` set to - * `openbot.example.com`, which no browser can resolve from Composio's origin, or to `localhost:3001`, + * `openbot.example.com`, which no browser can resolve from the vendor's origin, or to `localhost:3001`, * where `localhost:` is read as the scheme. Both are reachable from the settings this deployment * actually ships — the variable is an environment string and nothing between it and the vendor looks * at it — and both end with the same person on the same hosted page with nowhere to go. * * IT NAMES THE SETTING AND NOT THE VALUE. The setting is the remedy, and it is the same one whether * the address arrived empty or malformed; the value is a page address for one person's connection - * and belongs in no message, no log and no audit row, for the reason the connect url does not. + * and belongs in no message, no log and no audit row, for the reason the connect url does not. And + * it names it to the OPERATOR ALONE: the provider passed in picks that reader's vendor, while the + * sentence the person reads names neither it nor the variable, which {@link BrokerReturnUrlError} + * argues at length. * * WHAT COMES BACK IS THE ADDRESS THAT WAS CHECKED, WHICH IS NOT ALWAYS THE STRING THAT WENT IN. The * check reads a parsed address: the emptiness test trims, and parsing drops the spaces and control * characters a URL cannot contain — so ` https://openbot.test/…`, an address ending in a newline and * one with a tab inside its host all satisfy this guard while denoting something else entirely. A * version that approved the parsed address and returned the raw one approved nothing: the padding - * travelled on to Composio as part of the callback, which is the person stranded on a vendor page + * travelled on to the vendor as part of the callback, which is the person stranded on a vendor page * that this function exists to prevent. Returning what was read is what makes the reading binding. * * THAT IS A READING OF THE ADDRESS AND NOT A CHOICE ABOUT IT. Where somebody lands holding a @@ -682,17 +998,16 @@ export class BrokerReturnUrlError extends BrokerRefusalError { * at an address that means nothing, which is why the branch above refuses rather than repairs: a * missing scheme is a setting to fix and not whitespace to drop. */ -export function brokerReturnUrl(returnUrl: string): string { +export function brokerReturnUrl( + returnUrl: string, + provider: BrokerProvider, +): string { if (returnUrl.trim() === "") { - throw new BrokerReturnUrlError( - "This deployment built no address for Composio to send you back to, so the connection was not begun rather than begun with nowhere to land. Set OPENBOT_APP_URL to the address this deployment's pages are served from, and connecting an app will have a return leg.", - ); + throw new BrokerReturnUrlError(provider, "unbuilt"); } const address = webAddress(returnUrl); if (address === null) { - throw new BrokerReturnUrlError( - "The address Composio would send you back to is not a web address, so a consent granted there would end on Composio's own page with no way back here. Set OPENBOT_APP_URL to this deployment's own origin including the scheme — https://openbot.example.com rather than openbot.example.com.", - ); + throw new BrokerReturnUrlError(provider, "not-a-web-page"); } return address.href; } @@ -734,3 +1049,134 @@ function webAddress(value: string): URL | null { export function brokerSentence(error: unknown): string | null { return error instanceof BrokerRefusalError ? error.message : null; } + +/** What configuration says about which broker is active, INCLUDING why it says nothing. */ +export type ProviderDecision = + | { kind: "active"; provider: BrokerProvider } + /** No key is set: this deployment has no broker and never had one through configuration. */ + | { kind: "unconfigured" } + /** + * Both keys are set and `OPENBOT_BROKER_PROVIDER` names neither, so configuration proposes two + * providers and chooses between them nowhere. A legal state — `docs/plugins/arcade.md` says so, + * and a migrating deployment passes through it — and the one an answer must never be invented + * for. + */ + | { kind: "ambiguous"; configured: BrokerProvider[] } + /** `OPENBOT_BROKER_PROVIDER` names a provider whose key is unset: an operator's typo. */ + | { kind: "misnamed"; named: BrokerProvider }; + +/** +/** + * A KEY OF NOTHING IS NO KEY. + * + * `ARCADE_API_KEY=` with nothing after it, or a value that is all whitespace, is an operator typo + * and not a configured credential. Exported because {@link providerDecision}, {@link activeProvider} + * and `./provider-wiring`'s ambiguity refusal must agree on it exactly: wiring decides that both + * keys are set and the deployment cannot say which vendor is live, and if it counted a blank key as + * set while these did not, it would tell an operator holding two EMPTY keys that both are + * configured. One definition, so they cannot drift apart. + * + * `./config` trims every optional environment value and so happens to turn those into `undefined` + * today, but that is one incidental guard in a distant module standing between a typo and a client + * built on "", and these functions take config-shaped VALUES rather than an environment, so every + * other caller (a test, an embedder, a future loader) reaches them untrimmed. What "configured" + * means for a credential is answered here. + */ +export const credential = (key: string | undefined): boolean => + key !== undefined && key.trim() !== ""; + +/** + * Which broker this deployment runs, from configuration alone (no database access), AND WHY WHEN + * NOTHING DOES. + * + * THE THREE CAUSES ARE NOT ONE CAUSE, which is why this answers a decision rather than + * `BrokerProvider | null`. "No key set" is a deployment with no broker and no brokered row of its + * own; "both keys, nothing named" is a migration in progress, with live rows at one vendor or the + * other and nothing in configuration saying which; "named but unkeyed" is a typo that must stop the + * server. A single `null` made all three the same value, and every caller that then wrote + * `?? "composio"` turned the second one — the only one that can hold Arcade rows — into "Composio + * is active", which filtered those rows out of existence and left the accounts behind them + * unrevokable. + * + * One key set selects that provider. Both set is legal and expected, since ending an account at the + * old vendor needs its key, so `brokerProvider` decides between them. + */ +export function providerDecision(c: { + composioApiKey?: string; + arcadeApiKey?: string; + brokerProvider?: BrokerProvider; +}): ProviderDecision { + const configured: BrokerProvider[] = []; + if (credential(c.composioApiKey)) configured.push("composio"); + if (credential(c.arcadeApiKey)) configured.push("arcade"); + const named = c.brokerProvider; + if (named !== undefined) { + return configured.includes(named) + ? { kind: "active", provider: named } + : { kind: "misnamed", named }; + } + if (configured.length === 1) + return { kind: "active", provider: configured[0] as BrokerProvider }; + return configured.length === 0 + ? { kind: "unconfigured" } + : { kind: "ambiguous", configured }; +} + +/** + * The active provider, or `null` for every deployment where configuration names none. + * + * KEPT FOR THE CALLERS THAT GENUINELY ASK A YES/NO QUESTION — "is there a broker to wire" — and + * nothing more. A caller that has to NAME a provider when this answers null is asking the question + * {@link providerDecision} answers, and must take the three causes apart instead of defaulting one + * of them to a vendor. + */ +export function activeProvider(c: { + composioApiKey?: string; + arcadeApiKey?: string; + brokerProvider?: BrokerProvider; +}): BrokerProvider | null { + const decision = providerDecision(c); + return decision.kind === "active" ? decision.provider : null; +} + +/** + * Activating a provider is refused while the OTHER provider still holds `brokered_connections` rows. + * + * KEYED ON ROWS, NOT ON KEYS, AND THAT IS THE WHOLE POINT. Both keys set is a legal and expected + * state, because ending an account at the old vendor needs its key, so a deployment holding both is + * never misconfigured. What a deployment must not be able to do is switch by editing its environment: + * `DELETE /servers/:id/connection` revokes at the vendor before it deletes anything local, and a + * deployment that swapped keys would hold rows for accounts it could no longer end. + * + * TAKES A COUNT, NOT A DATABASE. The caller counts the rows belonging to the provider that is not + * `candidate`; this reads no key, never calls {@link activeProvider} and imports no vendor package. + */ +export function assertActivatable( + candidate: BrokerProvider, + otherProviderRows: number, +): void { + const other = candidate === "arcade" ? "Composio" : "Arcade"; + const self = candidate === "arcade" ? "Arcade" : "Composio"; + /* + * A COUNT THAT IS NOT A COUNT REFUSES, AND IS NEVER REPEATED BACK. `NaN <= 0` is false, so a + * `<= 0` test alone lets a NaN through to the sentence below, where it reads as the literal + * words "NaN brokered connections" — a refusal that tells a person a number they cannot act on. + * A negative or fractional count is the same failure wearing different clothes: whatever + * produced it was not counting rows. So the only counts allowed past here are the ones a row + * count can actually be, and anything else refuses saying what is true — the count was not + * taken — rather than printing the sentinel it was handed. + * + * REFUSING, NOT PROCEEDING, because this guard exists to keep a deployment from reaching the + * vendor with rows it could no longer revoke. Not knowing how many rows the other provider + * holds is not the same as knowing it holds none. + */ + if (!Number.isInteger(otherProviderRows) || otherProviderRows < 0) { + throw new BrokerRefusalError( + `${self} cannot be activated: the connections belonging to ${other} could not be counted. Keep both API keys set, check that the database is reachable, and start again; activating without that count could leave accounts nobody can revoke.`, + ); + } + if (otherProviderRows === 0) return; + throw new BrokerRefusalError( + `${self} cannot be activated while ${otherProviderRows} brokered connection${otherProviderRows === 1 ? "" : "s"} still belong${otherProviderRows === 1 ? "s" : ""} to ${other}. Keep both API keys set, and end those connections through the ${other} sunset flow first; switching providers by changing the environment would leave accounts nobody can revoke.`, + ); +} diff --git a/server/src/plugins/composio-adapter.ts b/server/src/plugins/composio-adapter.ts index 716db9e4c..5cba2e202 100644 --- a/server/src/plugins/composio-adapter.ts +++ b/server/src/plugins/composio-adapter.ts @@ -109,7 +109,7 @@ export function buildComposioClient( const broker: ComposioBroker = { ...directoryMethods(context), - ...consentMethods(context), + ...consentMethods(context, actions), ...fieldMethods(context), ...accountMethods(context), }; diff --git a/server/src/plugins/composio-client/consent.ts b/server/src/plugins/composio-client/consent.ts index eba5bb582..e14943ace 100644 --- a/server/src/plugins/composio-client/consent.ts +++ b/server/src/plugins/composio-client/consent.ts @@ -1,6 +1,12 @@ -import { BrokerRefusalError, type ComposioBroker } from "../broker"; +import { + BrokerRefusalError, + type ComposioBroker, + type GrantState, +} from "../broker"; +import { type ComposioActions, LISTING_LIMIT } from "../composio"; import { askVendor, + configIdOf, everyRefusal, named, sent, @@ -11,18 +17,130 @@ import { withdrawableAccounts, withdrawalDeclined, } from "../composio-vendor"; +import type { AccountRef } from "../shared-accounts"; import type { ClientContext } from "./context"; import { CONFIG_SUFFIX, CONNECTED, REVOCABLE, STATUSES_NAMED } from "./model"; -/** Sending a person to consent, asking whether they are connected, and revoking. */ -export function consentMethods(context: ClientContext) { +/** + * Sending a person to consent, asking whether they are connected and what they hold, and revoking. + * + * `actions` is the same client's action seam, read by {@link ComposioBroker.grantsFor} for the + * actions it reports a grant over. + */ +export function consentMethods( + context: ClientContext, + actions: ComposioActions, +) { const { vendor, accountsFor, configsFor, askForEach } = context; return { + // Composio's grant is held by this deployment. Its existing behaviour, declared; see + // {@link ConnectedAppBroker.grantIsLocal} for why this is a property and not a comparison. + grantIsLocal: true, + // Composio runs no correlated, pollable authorization flow: it mints nothing to poll, and its + // return leg is an OAuth callback with state, handled in `oauth.ts` and never through this + // seam. Declared rather than omitted; see {@link ConnectedAppBroker.authorizations}. + authorizations: null, + /** + * The toolkit itself, WHICH IS AN ANSWER AND NOT A STUB. + * + * A Composio connection is made against an auth config, and an auth config is per toolkit. So + * there is no auth provider standing behind several toolkits here the way Arcade's `google` + * stands behind `Gmail` and `GoogleCalendar`: the toolkit IS its own auth provider, and the set + * of apps sharing a connection with it is consequently ALWAYS EMPTY. That is the truth about + * Composio rather than a degradation of it — {@link ConnectedAppBroker.grantsFor}'s "degenerate + * is not absent", one member along. + * + * SO IT DOES NOT THROW, and the reason is what a throw would cost the callers: every consumer + * of the sibling computation would need a presence test around this call, and the disconnect + * path would carry a provider branch — which is the vendor-name comparison this seam exists to + * keep out of permission and revocation code. + * + * No network: the answer is a property of how Composio is shaped, so nothing is asked. + */ + authProviderOf: async (toolkit: string) => toolkit, + /** + * What this person holds at this app, said once per action because that is what Composio knows. + * + * DEGENERATE AND NOT ABSENT, which is why this is implemented rather than thrown. An auth + * config fixes its scope set when it is created and a connection is made against the config, + * so there is exactly one answer for the toolkit: either this person has an account on it or + * they have not, and the scopes are the config's. Reporting that answer once per action is the + * honest rendering of a toolkit-wide grant through {@link GrantState}, which is this + * deployment's vocabulary rather than any vendor's row shape. The alternative — a throw — + * would make one seam member answer two different questions depending on who implemented it, + * which is the defect this file already carried at {@link ComposioBroker.accountName}. + * + * THE STATE IS MEASURED OVER EVERY CONFIG, AS {@link ComposioBroker.isConnected}'S IS. The two + * are the same read-only question — can this person act through the app — and the call that + * runs an action names the person and the toolkit, not the account, so an account on an + * operator's hand-made config is one they act through. Measuring this one over our configs + * alone would answer `needs-consent` to somebody the gate lets through, and send them to + * consent to an app they already use. Only {@link ComposioBroker.revoke}, which ACTS on what it + * finds, is scoped to ours. + * + * SO THE SCOPES ARE THE CONFIGS THIS PERSON'S ACCOUNTS WERE MINTED AGAINST, WHICH NEED NOT BE + * OURS. A config fixes its scope set when it is created and every account on it holds exactly + * that set, so an `authorized` answer carries the scopes of the configs the counted accounts + * sit on — every one of them, which is why the listing is read to the end rather than stopped at + * the first row. This used to carry THIS DEPLOYMENT'S scopes whatever the account sat on, which + * paired `authorized` with a scope set the person never granted. A `needs-consent` answer + * carries our configs' scopes instead, because those are the configs a consent from here is + * minted against: it describes what they would be asked for. + * + * AN ACCOUNT WHOSE CONFIG CANNOT BE NAMED, OR IS NOT AMONG THE CONFIGS THAT COULD BE READ, + * LENDS NO SCOPES — neither its own, which nothing here can read, nor ours, which it does not + * hold. The names are deduplicated and ordered so that two readings of one unchanged deployment + * are one answer. + */ + async grantsFor({ + toolkit, + account, + }: { + toolkit: string; + account: AccountRef; + }): Promise { + const connected = await accountsFor( + account.vendorUserId, + toolkit, + CONNECTED, + ); + const state = connected.length > 0 ? "authorized" : "needs-consent"; + + const { held, ours } = await configsFor(toolkit); + const mintedOn = new Set( + connected.map(configIdOf).filter((id) => id !== null), + ); + const granting = + state === "authorized" + ? held.filter((config) => mintedOn.has(config.id)) + : ours; + const scopes = [ + ...new Set(granting.flatMap((config) => config.scopes)), + ].sort(); + + const published = await actions.listActions(toolkit, { + limit: LISTING_LIMIT, + }); + // A fresh array per entry: one shared list would let a caller mutating its first grant's + // scopes rewrite every other grant in the answer. An authorized entry is always `held`: it is + // authorized only because this person holds an account, which is a consent they gave. + return published.map( + (action): GrantState => + state === "authorized" + ? { + action: action.slug, + state, + scopes: [...scopes], + authorization: "held", + } + : { action: action.slug, state, scopes: [...scopes] }, + ); + }, async authorize({ account, toolkit, returnUrl, - }): Promise<{ redirectUrl: string }> { + }): Promise<{ redirectUrl: string; authorizationId: string | null }> { const userId = account.vendorUserId; /* * THE CONFIG THIS DEPLOYMENT ALREADY MADE, AND NO SECOND ONE MADE HERE. @@ -291,7 +409,11 @@ export function consentMethods(context: ClientContext) { `Composio began a connection to ${toolkit} but answered with no page to visit, so there is nothing to send ${whose(account)} to. An app that is connected by entering a credential rather than by visiting a page cannot be connected from here.`, ); } - return { redirectUrl: page }; + // DECLARED NULL, NOT COMPOSIO'S CONNECTION-REQUEST ID. Composio's return leg never comes + // through this seam: it lands in `oauth.ts`, correlated by sealed state this deployment + // minted, not by an id the broker handed back. The connection-request id would put a value + // with a DIFFERENT MEANING behind the same member — the `accountName` defect again. + return { redirectUrl: page, authorizationId: null }; }, async isConnected({ account, toolkit }): Promise { @@ -578,5 +700,14 @@ export function consentMethods(context: ClientContext) { */ return ids.length > 0; }, - } satisfies Pick; + } satisfies Pick< + ComposioBroker, + | "grantIsLocal" + | "authorizations" + | "authProviderOf" + | "grantsFor" + | "authorize" + | "isConnected" + | "revoke" + >; } diff --git a/server/src/plugins/composio-client/context.ts b/server/src/plugins/composio-client/context.ts index 9953919a3..57f0d770b 100644 --- a/server/src/plugins/composio-client/context.ts +++ b/server/src/plugins/composio-client/context.ts @@ -1,6 +1,7 @@ import type { BrokerApp, BrokerRefusalError } from "../broker"; import { LISTING_LIMIT } from "../composio"; import { + type AccountRow, appOf, askVendor, type CheckedAuthConfig, @@ -34,8 +35,8 @@ export function createClientContext( * * AND SO ARE THE OTHER TWO THINGS THE TWO QUESTIONS DO NOT SHARE, for the same reason the * statuses are. `configs` is which authorization configs the answer is about — every one of them - * for the gate, and only this deployment's for the withdrawal, because the withdrawal ACTS on - * what it finds. `enough` is when the rows in hand already settle the question, which is true of + * for the three that only READ (the gate, `grantsFor` and `accountName`), and only this + * deployment's for the withdrawal, because the withdrawal ACTS on what it finds. `enough` is when the rows in hand already settle the question, which is true of * a boolean the moment one row arrives and never true of a set of accounts to end. Both are * written at the call sites below, beside the statuses, so that the whole of the difference * between the two questions is one argument list a reader can compare. @@ -46,9 +47,9 @@ export function createClientContext( statuses: VendorAccountStatus[], asked: { configs?: string[]; - enough?: (rows: { id?: unknown; data?: unknown }[]) => boolean; + enough?: (rows: AccountRow[]) => boolean; } = {}, - ): Promise<{ id?: unknown; data?: unknown }[]> => { + ): Promise => { /* * EVERY PAGE UNLESS THE CALLER SAYS OTHERWISE, READ HERE RATHER THAN AT EITHER CALLER, so that * the two questions cannot drift on the one thing they do share. A truncated listing is the diff --git a/server/src/plugins/composio-client/model.ts b/server/src/plugins/composio-client/model.ts index d2619357a..47cb41199 100644 --- a/server/src/plugins/composio-client/model.ts +++ b/server/src/plugins/composio-client/model.ts @@ -1,6 +1,7 @@ import type { BrokerApp, FieldScheme } from "../broker"; import type { ComposioResult } from "../composio"; import type { + AccountRow, CheckedAuthConfig, VendorAccountStatus, VendorAuthConfig, @@ -420,7 +421,7 @@ export type ComposioVendor = { * same function reads `response.auth_config.id` (`:60`) on its way to building each row, so a * row that is not an object raises inside the vendor's code and never reaches this listing. */ - items: { id?: unknown; data?: unknown }[]; + items: AccountRow[]; /** * The same truncation signal as the auth-config listing above, from the same vendor schema. * diff --git a/server/src/plugins/composio-vendor.ts b/server/src/plugins/composio-vendor.ts index cc8f4e9d4..9e29f74fd 100644 --- a/server/src/plugins/composio-vendor.ts +++ b/server/src/plugins/composio-vendor.ts @@ -178,8 +178,42 @@ export type VendorAuthConfig = { id?: unknown; name?: unknown; status?: unknown; + /** + * What the config was created to ask for, where Composio publishes it, and `unknown` because it + * is copied across verbatim like the three above. + * + * IT IS A PROPERTY OF THE CONFIG RATHER THAN OF AN ACCOUNT, which is the whole of why + * {@link ComposioBroker.grantsFor}'s answer is one state for a toolkit: the scope set is fixed + * when the config is created and every account connected against it holds exactly that set. + */ + scopes?: unknown; }; +/** + * One connected account as the listing hands it over, narrowed to the fields this file reads. + * + * `id` and `data` are read by the withdrawal and by {@link ComposioBroker.accountName}. + * `authConfig` is read by {@link ComposioBroker.grantsFor} alone, for the id of the config the + * account was minted against, because that config — and no other — fixes the scopes the account + * holds. `transformConnectedAccountResponse` builds it on every row from the raw + * `auth_config` (`@composio/core` 0.18.1, `src/utils/transformers/connectedAccounts.ts:55-62`), and + * it is `unknown` for the reason every other field here is: the transform is warn-only. + */ +export type AccountRow = { id?: unknown; data?: unknown; authConfig?: unknown }; + +/** + * The id of the auth config one account was minted against, or null where Composio did not name it. + * + * NULL RATHER THAN A REFUSAL, BECAUSE ITS ONE READER REPORTS RATHER THAN ACTS — the reasoning of + * {@link scopesOf}, one field along. An account whose config cannot be named is still an account, + * and what is lost is only the description of what it holds. + */ +export function configIdOf(row: AccountRow): string | null { + const config = row.authConfig; + if (!config || typeof config !== "object") return null; + return textOf((config as { id?: unknown }).id); +} + /** * The connected-account statuses this file knows how to ask for, as the literals the SDK admits. * @@ -1038,6 +1072,16 @@ export function appOf(row: VendorToolkit, position: number): BrokerApp { logo, categories, actionCount, + /* + * THREE EXPLICIT NULLS, AND NEVER `?? 0`. Composio's toolkit listing publishes no behaviour + * classification and no per-action scope sets, so this deployment has not measured them here — + * which is a different fact from having measured them and found none. A zero would say the + * second, and the page would fire its coverage warning on every Composio app: a false alarm at + * exactly the moment somebody is deciding whether to trust one. See {@link BrokerApp}. + */ + classifiedCount: null, + permissionCount: null, + scopedActionCount: null, connection: connectionOf(row), }; } @@ -1055,8 +1099,35 @@ export type CheckedAuthConfig = { id: string; name: string; status: unknown; + /** The scope set this config was created with, as {@link scopesOf} could read it. */ + scopes: string[]; }; +/** + * The scope names on an auth config row, and the EMPTY LIST for everything else. + * + * NOT A REFUSAL, BECAUSE ITS ONE READER REPORTS RATHER THAN ACTS. Every other field this file + * reads off a config decides something destructive or something a person is sent through — which + * id to delete, which config to mint a consent against — so a shape that cannot be read is a thing + * to stop on. Scopes are carried on a {@link GrantState}, which is a description handed to a page: + * Composio publishes none at all for a key-scheme config, so "no scope set published" is the + * ordinary case and not a fault, and an app somebody is plainly connected to must not become + * unreportable because the field arrived as a string. + * + * ONE PASS, AND THE NON-STRINGS ARE DROPPED RATHER THAN RENDERED. A scope is a name sent to a + * provider; `String({})` is not one, and a list half of whose entries were invented here is worse + * than a shorter list. + */ +function scopesOf(value: unknown): string[] { + if (!Array.isArray(value)) return []; + const names: string[] = []; + for (const entry of value) { + const name = textOf(entry); + if (name !== null) names.push(name); + } + return names; +} + /** * That status as the WORD it is, so the test and the sentence about it are about the same value. * @@ -1198,7 +1269,12 @@ export function readableConfigs( return; } - const config: CheckedAuthConfig = { id, name, status: row.status }; + const config: CheckedAuthConfig = { + id, + name, + status: row.status, + scopes: scopesOf(row.scopes), + }; if (slot === undefined) { slotOf.set(id, settled.length); settled.push(config); diff --git a/server/src/plugins/google-drive-rest.ts b/server/src/plugins/google-drive-rest.ts index 59ad4f943..a57b3da0b 100644 --- a/server/src/plugins/google-drive-rest.ts +++ b/server/src/plugins/google-drive-rest.ts @@ -65,12 +65,17 @@ const SHARED_DRIVE_ITEMS = { * * A Doc has no bytes to download — `alt=media` refuses it — so it has to be exported. Anything not * in here is a real file and is fetched directly. + * + * A Map, because the type comes off a file somebody else uploaded and named. Asked of a plain + * object, `toString` is answered with `Object.prototype.toString`: truthy, so the file is taken for + * an editor format, the refusal below is skipped, and that function is sent to Google as the format + * to export to. */ -const EXPORTABLE: Record = { - "application/vnd.google-apps.document": "text/plain", - "application/vnd.google-apps.spreadsheet": "text/csv", - "application/vnd.google-apps.presentation": "text/plain", -}; +const EXPORTABLE: ReadonlyMap = new Map([ + ["application/vnd.google-apps.document", "text/plain"], + ["application/vnd.google-apps.spreadsheet", "text/csv"], + ["application/vnd.google-apps.presentation", "text/plain"], +]); /** * What this adapter offers, as the same shape a server would have answered `tools/list` with. @@ -478,7 +483,7 @@ export async function callTool( readId = targetId; } - const exportAs = file.mimeType ? EXPORTABLE[file.mimeType] : undefined; + const exportAs = file.mimeType ? EXPORTABLE.get(file.mimeType) : undefined; /* * A file whose bytes are not text is declined by name, not decoded and hoped for. diff --git a/server/src/plugins/logos.ts b/server/src/plugins/logos.ts index c2f4a9936..604d686e7 100644 --- a/server/src/plugins/logos.ts +++ b/server/src/plugins/logos.ts @@ -1,25 +1,26 @@ import { and, eq, isNull } from "drizzle-orm"; import type { Database } from "../db/client"; import { mcpServers } from "../db/schema"; +import { type BrokerProvider, toolkitOfFor } from "./access"; import type { ComposioBroker } from "./broker"; -import { toolkitOf } from "./composio"; /** Fill older app records without changing their connections, schemes, or grants. */ -export async function backfillComposioLogos( +export async function backfillBrokeredLogos( database: Database, + provider: BrokerProvider, broker: Pick, ) { const missing = await database .select({ id: mcpServers.id, url: mcpServers.url }) .from(mcpServers) - .where(and(eq(mcpServers.provenance, "composio"), isNull(mcpServers.logo))); + .where(and(eq(mcpServers.provenance, provider), isNull(mcpServers.logo))); if (missing.length === 0) return; const logos = new Map( (await broker.listApps()).map((app) => [app.slug, app.logo]), ); for (const row of missing) { - const slug = toolkitOf(row.url); + const slug = toolkitOfFor(provider, row.url); const logo = slug ? logos.get(slug) : null; if (!logo) continue; await database @@ -29,7 +30,7 @@ export async function backfillComposioLogos( and( eq(mcpServers.id, row.id), eq(mcpServers.url, row.url), - eq(mcpServers.provenance, "composio"), + eq(mcpServers.provenance, provider), isNull(mcpServers.logo), ), ); diff --git a/server/src/plugins/mcp.ts b/server/src/plugins/mcp.ts index d2d310def..b2265c1ca 100644 --- a/server/src/plugins/mcp.ts +++ b/server/src/plugins/mcp.ts @@ -192,6 +192,20 @@ export type McpTool = { * `McpTool` stays exactly what a `tools/list` answer contains, because that is what it is for. */ export type ListedTool = McpTool & { + /** + * The vendor's own spelling, when it differs from the name this deployment records. + * + * ABSENT MEANS THEY ARE THE SAME STRING, which is the honest answer for every transport but + * Arcade: Composio's `GMAIL_FETCH_EMAILS`, an MCP server's names and the Drive REST names are all + * offerable to a model exactly as the vendor spells them, so there is nothing to keep apart. + * + * THE TRANSPORT DECIDES, because only it knows the vendor's naming convention. Arcade's listing + * answers `Toolkit.Action` and the dot is illegal in a model tool name, so its transport splits + * the two: `name` is the action, this is the qualified name the vendor is called by. Deriving it + * here instead would make a rule out of the shape of one vendor's listing. See + * {@link mcpTools.vendorName}. + */ + vendorName?: string; /** What the vendor said this action does, when it said anything. */ effect?: "read" | "write"; /** Whether the vendor marked it as destroying something. */ diff --git a/server/src/plugins/plugin-store/calls.ts b/server/src/plugins/plugin-store/calls.ts index 70f9e9482..c409223e4 100644 --- a/server/src/plugins/plugin-store/calls.ts +++ b/server/src/plugins/plugin-store/calls.ts @@ -133,6 +133,7 @@ export function callMethods(context: StoreContext) { const advertised = await database .select({ name: mcpTools.name, + vendorName: mcpTools.vendorName, inputSchema: mcpTools.inputSchema, effect: mcpTools.effect, destructive: mcpTools.destructive, @@ -480,7 +481,20 @@ export function callMethods(context: StoreContext) { actorId: vendorUserId ?? input.credentialActorId ?? input.actorId, botId: input.botId, }, - toolName, + /* + * THE NAME THE VENDOR KNOWS, WHICH IS THE ONLY ONE IT WILL ANSWER TO. `toolName` is this + * deployment's half of the ref and is what the model was offered; Arcade is called by the + * qualified name its listing gave. They are the same string for every other transport, + * which is what the fallback records rather than papers over — see + * {@link mcpTools.vendorName}. + * + * FALLING BACK TO `toolName` RATHER THAN REFUSING, because a row this read did not find + * is not an unknown action: `classifyTool` above is built to decide on an app whose + * listing predates its catalogue entry, and the call goes on to the vendor to be judged + * there. The fallback is reached only for an action with no recorded row at all, and for + * those two names were never distinct. + */ + advertised[0]?.vendorName ?? toolName, vendorArgs, ); await recordAuditEvent(auditStore, { diff --git a/server/src/plugins/plugin-store/connections.ts b/server/src/plugins/plugin-store/connections.ts index ab748bd12..035fd0d4f 100644 --- a/server/src/plugins/plugin-store/connections.ts +++ b/server/src/plugins/plugin-store/connections.ts @@ -1,13 +1,16 @@ -import { and, asc, eq, inArray, sql } from "drizzle-orm"; -import { recordAuditEvent } from "../../audit"; +import { and, asc, eq, inArray, isNull, sql } from "drizzle-orm"; +import { createAuditStore, recordAuditEvent } from "../../audit"; +import type { Database } from "../../db/client"; import { brokeredConnections, credentials as credentialRows, mcpServers, mcpTools, mcpUserCredentials, + pendingAuthorizations, users, } from "../../db/schema"; +import { BROKERED_PROFILE, toolkitOfFor } from "../access"; import { BrokerRefusalError, BrokerUnconfiguredError, @@ -18,17 +21,19 @@ import { import { asksForArguments, askAction as composioAskAction, - toolkitOf, VERSION_ARG, } from "../composio"; -import type { AccountRef } from "../shared-accounts"; +import { type AccountRef, personAccount } from "../shared-accounts"; import type { StoreContext } from "./context"; import { + attemptNamed, type BrokeredProbe, IDENTITY_ACTION, iso, type OAuthClient, + type PendingAuthorization, PluginRefusedError, + pendingAuthorizationFromRow, } from "./model"; /** OAuth clients and a person's connections, including every brokered (Composio) connection flow. */ @@ -53,6 +58,13 @@ export function connectionMethods(context: StoreContext) { brokeredAppRowsAt, brokeredAppScheme, brokeredAppKind, + brokerProvider, + closeAuthorizationAttempt, + resolveSiblings, + consentRevokeReaches, + vendorRevocationClaim, + siblingsEndedBy, + clearEndedSiblings, } = context; return { /** @@ -359,6 +371,14 @@ export function connectionMethods(context: StoreContext) { * draw the deployment's shared account as one of them — a deployment row has no `user_id`, * and the filter keeps that a fact this query states rather than one it happens to rely on. */ + /* + * NO PROVIDER PREDICATE HERE, DELIBERATELY, AND THAT IS NOT AN OVERSIGHT. Each row is resolved + * below at the ACTIVE provider's canonical url, so another provider's row would be silently + * dropped from the page. What keeps that unreachable is the startup activation refusal + * (`assertActivatable`, called from `server/src/index.ts`): it will not boot when the + * configured provider differs from the one on the existing rows. The provider sunset flow + * relaxes that refusal, and whoever builds it must add the `brokerProvider` predicate here. + */ const connections = await database .select({ toolkit: brokeredConnections.app, @@ -421,13 +441,21 @@ export function connectionMethods(context: StoreContext) { * join answered and what the missing `serverId` below drops. A person can hold an account at * an app this deployment has since removed, and the settings page has no row to draw for it. */ + /* + * AT THE ACTIVE BROKER'S SCHEME, which is the one {@link brokeredAppRow} resolves every other + * url against. Spelled `composio://` here, this read answered an empty map on any other + * broker — every `serverId` undefined, every connection dropped, and the connected-accounts + * page drawn empty for somebody holding accounts. Fail-closed and visible, and total. + */ + const canonical = (toolkit: string) => + `${BROKERED_PROFILE[brokerProvider].scheme}${toolkit}`; const named = await brokeredAppRowsAt( - connections.map((row) => `composio://${row.toolkit}`), + connections.map((row) => canonical(row.toolkit)), ); const rows = connections .flatMap((row) => { - const serverId = named.get(`composio://${row.toolkit}`)?.id; + const serverId = named.get(canonical(row.toolkit))?.id; return serverId === undefined ? [] : [{ ...row, serverId }]; }) // By server id, as the join's own `order by` was, so this read and `connectionsFor` hand the @@ -487,7 +515,7 @@ export function connectionMethods(context: StoreContext) { .from(mcpServers) .where(eq(mcpServers.id, serverId)) .limit(1); - const toolkit = server ? toolkitOf(server.url) : null; + const toolkit = server ? toolkitOfFor(brokerProvider, server.url) : null; if (!toolkit) return null; const [row] = await database @@ -504,7 +532,7 @@ export function connectionMethods(context: StoreContext) { .leftJoin(users, eq(users.id, brokeredConnections.connectedBy)) .where( and( - eq(brokeredConnections.provider, "composio"), + eq(brokeredConnections.provider, brokerProvider), eq(brokeredConnections.app, toolkit), eq(brokeredConnections.holder, "deployment"), ), @@ -571,7 +599,7 @@ export function connectionMethods(context: StoreContext) { .orderBy(asc(mcpServers.id)); const answering = await brokeredAppRowsAt( marked - .filter((row) => toolkitOf(row.url) !== null) + .filter((row) => toolkitOfFor(brokerProvider, row.url) !== null) .map((row) => row.url), ); const shared = marked.filter( @@ -580,7 +608,7 @@ export function connectionMethods(context: StoreContext) { return await Promise.all( shared.map(async (server) => { - const toolkit = toolkitOf(server.url); + const toolkit = toolkitOfFor(brokerProvider, server.url); const [connection, kind] = await Promise.all([ this.deploymentConnectionFor(server.id), toolkit ? brokeredAppKind(toolkit) : null, @@ -702,7 +730,15 @@ export function connectionMethods(context: StoreContext) { // property of whichever plan the server happened to pick. const actions = await database .select({ - name: mcpTools.name, + /* + * THE VENDOR'S SPELLING, BECAUSE THIS NAME IS CALLED RATHER THAN DISPLAYED. The pair this + * answers goes to the transport directly (see `probeConnection`), and a transport answers + * only to the name its own listing gave. {@link IDENTITY_ACTION} is written in that same + * vocabulary — `_GET_ME`, `_WHOAMI` — so it is matched against this for the same reason. + * Identical to `name` on every transport this path actually reaches. See + * {@link mcpTools.vendorName}. + */ + name: mcpTools.vendorName, inputSchema: mcpTools.inputSchema, effect: mcpTools.effect, destructive: mcpTools.destructive, @@ -834,6 +870,11 @@ export function connectionMethods(context: StoreContext) { * AN UPDATE AND NEVER AN INSERT, and `returning` is how "there was a row" is ANSWERED rather * than assumed. An update that matches nothing is not a failure — it is the row having been * deleted while the vendor was being asked — and the caller has a sentence for that. + * + * `vendor_user_id` IS DELIBERATELY NOT IN THIS `set`. This branch records a CHECK of a + * connection that already exists, never a connection; it may not re-point the row at a + * different vendor identity, because only a connect or a confirm (the upsert below) is + * evidence of a grant held under the identity it names. */ const written = await database .update(brokeredConnections) @@ -843,10 +884,38 @@ export function connectionMethods(context: StoreContext) { return { verifiedAt, wrote: written.length > 0 }; } + /* + * THE VENDOR IDENTITY THIS WRITE'S EVIDENCE IS ABOUT, WRITTEN ON BOTH BRANCHES OF THE UPSERT. + * + * CRITERION. After this upsert the row names `input.account.vendorUserId`, whatever it named + * before. + * + * REASON. Every caller of the upsert has just heard from the vendor about the account held + * under THIS id — a consent, or the vendor confirming it holds an account — and + * `connectionTokenFor` sends calls out under the ROW's `vendor_user_id`, never a recomputed + * one. A conflict arm that rewrote `verified`/`verified_at` and left the old id standing + * wrote a verdict about one account onto a row naming another, and every later call landed + * in the account the evidence was not about. The insert always set it; the arms did not. + */ + const connectedAs = input.account.vendorUserId; await database .insert(brokeredConnections) .values({ - provider: "composio", + /* + * THE BROKER THIS ROW WAS ACTUALLY MINTED AT, which is this store's own, because this + * insert only ever runs behind a connection just made at the broker this store holds. + * + * CRITERION. A row inserted here carries the provider whose grant it stands for, so the + * reads keyed on `provider` above find exactly the rows this writer wrote. + * + * REASON. The literal `composio` here was the one line that could not fail loudly. An + * Arcade deployment writing it would read its own rows back through a `composio` filter + * and APPEAR TO WORK, while the refusal that is supposed to fire when the other provider + * holds rows never fired — nothing would ever be filed under the other name — and the + * offboarding sweep, keyed the same way, would sweep a slice of the table that was not + * this deployment's. Every symptom of that is silence. + */ + provider: brokerProvider, app: input.toolkit, holder: input.account.holder, userId: @@ -869,7 +938,7 @@ export function connectionMethods(context: StoreContext) { brokeredConnections.userId, ], targetWhere: sql`${brokeredConnections.holder} = 'person'`, - set, + set: { ...set, vendorUserId: connectedAs }, } : { target: [brokeredConnections.provider, brokeredConnections.app], @@ -879,15 +948,560 @@ export function connectionMethods(context: StoreContext) { // which `set` otherwise never said, leaving the row crediting whoever // connected it the first time. Added only when this call names a // `connectedBy` at all, so a re-check or a confirm that passes none does not - // blank out the administrator an earlier connect already recorded. + // blank out the administrator an earlier connect already recorded. That + // condition is the point: do NOT make this unconditional. set: input.connectedBy - ? { ...set, connectedBy: input.connectedBy ?? null } - : set, + ? { + ...set, + vendorUserId: connectedAs, + connectedBy: input.connectedBy, + } + : { ...set, vendorUserId: connectedAs }, }, ); return { verifiedAt, wrote: true }; }, + /** + * The other apps this deployment holds a connection for that share THIS app's connection: the + * apps on the same vendor identity AND the same AUTH PROVIDER, never the provider alone. The + * reason is written out on {@link connectionSiblings}; this is that computation over the rows + * this deployment actually holds under the active provider. + * + * THE BROKER THIS STORE WAS BUILT WITH ANSWERS IT, AND NO CALLER SUPPLIES A RESOLVER. The auth + * provider is the vendor's fact and this store keeps no copy of it, so it is asked for — of + * {@link ConnectedAppBroker.authProviderOf}, which both providers implement. A resolver taken as + * a parameter would be a question every caller had to answer identically or see a different + * sibling set; with the store calling its own broker there is ONE answer by construction and + * nothing to keep in step. A deployment with no broker answers `[]` — a presence test on a + * declared value, and correct, because such a deployment holds no brokered rows at all. + * + * THE SCAN IS PRE-FILTERED ON THE ASKING IDENTITY, IN THE `WHERE`. Resolving the auth provider + * is a vendor call per app, on a screen somebody is waiting on; resolving it for every brokered + * row of the whole deployment and only then discarding the rows on other identities is unbounded + * in the one dimension that grows. `vendor_user_id` is a column, so the filter is free — and + * semantically identical, because {@link connectionSiblings} discards exactly those rows. + * + * An app the broker cannot answer for (`null`) is left out rather than guessed at: claiming a + * sibling that is not one is the failure D26 exists to prevent. If the asking app itself is + * unanswered the list is empty. + * + * `unanswered` IS HOW MANY OTHER APPS ON THE ASKING IDENTITY WERE LEFT OUT FOR THAT REASON — an + * integer, never names; see {@link resolveSiblings} for why it is surfaced. + * + * IT ANSWERS A FACT AND ACTS ON NOTHING: no revocation, no deletion, no audit write. Returns the + * sibling toolkits, sorted, never including `toolkit`, and the unanswered count. + */ + async siblingApps(input: { + toolkit: string; + account: AccountRef; + }): Promise<{ siblings: string[]; unanswered: number }> { + return resolveSiblings(input); + }, + + /** + * Start an Arcade authorization attempt for one person: take the key if it is free, expired or + * completed, and refuse if a LIVE attempt holds it. ONE STATEMENT. + * + * `actorId` IS THE SESSION SUBJECT (`users.id`), NEVER `credentialActorId`. This file reads + * `input.credentialActorId ?? input.actorId`, and on a Team Bot those differ, and neither is the + * person holding the browser. The verifier finds the attempt from the returning browser's + * session, so any other key writes attempts a browser can never match. + * + * ONE STATEMENT BECAUSE A READ-THEN-WRITE LETS TWO REQUESTS BOTH SEE "NO LIVE ATTEMPT" AND BOTH + * INSERT. The conditional `ON CONFLICT ... DO UPDATE ... WHERE` is what makes the claim atomic: + * the second request waits on the first's row and then evaluates the WHERE against it. The + * live row is answered by the same statement, in a branch that only produces rows when the + * claim produced none. It can be null: a rival that committed after this statement took its + * snapshot is live but not yet visible to it, and the caller's 409 then names nothing. + * + * `created_at` is truncated to milliseconds so the `Date` handed back names the stored value + * exactly — a microsecond no `Date` can carry would otherwise sit in the row unreachable. + * {@link recordAuthorizationMint} and {@link discardAuthorizationAttempt} do not RELY on that: + * they truncate the column in the comparison too, so a row written by anything else — the + * column's own `defaultNow()`, say — is still reachable. See {@link attemptNamed}. + */ + async claimAuthorizationAttempt(input: { + actorId: string; + serverId: string; + action: string; + account: AccountRef; + }): Promise< + | { claimed: true; attempt: PendingAuthorization } + | { claimed: false; live: PendingAuthorization | null } + > { + const rows = await database.execute(sql` + WITH claimed AS ( + INSERT INTO pending_authorizations + (actor_id, server_id, action, holder, user_id, vendor_user_id, created_at) + VALUES ( + ${input.actorId}, ${input.serverId}, ${input.action}, ${input.account.holder}, + ${input.account.holder === "person" ? input.account.userId : null}, + ${input.account.vendorUserId}, date_trunc('milliseconds', now()) + ) + ON CONFLICT (actor_id) DO UPDATE SET + server_id = EXCLUDED.server_id, + action = EXCLUDED.action, + holder = EXCLUDED.holder, + user_id = EXCLUDED.user_id, + vendor_user_id = EXCLUDED.vendor_user_id, + auth_id = NULL, + created_at = EXCLUDED.created_at, + completed_at = NULL, + outcome = NULL + WHERE pending_authorizations.created_at < now() - interval '15 minutes' + OR pending_authorizations.completed_at IS NOT NULL + RETURNING * + ) + SELECT true AS claimed, claimed.* FROM claimed + UNION ALL + SELECT false AS claimed, p.* FROM pending_authorizations p + WHERE p.actor_id = ${input.actorId} + AND NOT EXISTS (SELECT 1 FROM claimed) + `); + const row = rows[0] as Record | undefined; + if (!row) return { claimed: false, live: null }; + const attempt = pendingAuthorizationFromRow(row); + return row.claimed === true + ? { claimed: true, attempt } + : { claimed: false, live: attempt }; + }, + + /** + * Write the `ar_...` the vendor minted onto the attempt, matched on `(actor_id, created_at)` + * through {@link attemptNamed}, which is where the precision of that match is argued. + * + * WRITE-ONCE, AND NEVER AFTER SETTLEMENT: the UPDATE also requires `auth_id IS NULL` and + * `completed_at IS NULL`. `auth_id` is what binds the attempt to the authorization the person + * was actually sent to consent to, and both conditions are needed to keep that binding fixed. + * + * `completed_at IS NULL` is {@link closeAuthorizationAttempt}'s rule, for the same reason: a + * settled attempt is a record, not a draft. Without it, a late or duplicated mint rewrote a + * completed attempt's `ar_...`, even to NULL, and the row no longer named the authorization + * the person consented to. + * + * `auth_id IS NULL` is needed because `completed_at IS NULL` alone still lets a duplicated mint + * rebind a LIVE attempt. Once the person has the first id's consent URL, writing a second id + * (or NULL) makes their return leg match nothing. A NULL `auth_id` is never valid after + * settlement: every settling write (`completeAuthorizationAttempt` and the three verdicts + * through `closeAuthorizationAttempt`) matches `auth_id = $1`, which NULL never satisfies. + * So `auth_id IS NULL` alone would already rule out any row the store settled. `completed_at + * IS NULL` is kept anyway, so the guard does not depend on every future writer settling + * through those paths. + * + * The first write is the only one, and it can be NULL: a vendor that answered with no id + * leaves the attempt null, and it expires. Answers whether it wrote. False means the attempt + * was discarded, replaced, already minted or already settled. The authorize route acts on it: + * on false it does not hand out the consent url, because nothing here records that flow. + */ + async recordAuthorizationMint(input: { + actorId: string; + /** A `Date`, or the ISO string one becomes through JSON; see {@link attemptInstant}. */ + createdAt: Date | string; + /** Null when the vendor answered with no id: the attempt then can never complete. */ + authId: string | null; + }): Promise { + const written = await database + .update(pendingAuthorizations) + .set({ authId: input.authId }) + .where( + and( + attemptNamed(input.actorId, input.createdAt), + isNull(pendingAuthorizations.authId), + isNull(pendingAuthorizations.completedAt), + ), + ) + .returning({ actorId: pendingAuthorizations.actorId }); + return written.length > 0; + }, + + /** + * Delete one attempt, matched on `(actor_id, created_at)` SO IT CAN NEVER DELETE A NEWER + * ATTEMPT BY THE SAME ACTOR. Matching on `auth_id` would be wrong: an attempt whose mint never + * completed has none, and that is exactly the one most worth cancelling. + * + * CONDITIONAL ON `completed_at IS NULL`, THE SAME RULE {@link closeAuthorizationAttempt} AND + * THE COMPLETION HOLD, BECAUSE A SETTLED ATTEMPT IS A RECORD AND NOT A DRAFT. `(actor_id, + * created_at)` does not stop naming a row when the row settles, and every caller of this reads + * the attempt FIRST and deletes it AFTER. Unconditional, a completion committing in that gap + * was erased outright — the one row saying this person's consent went through, with the grant + * live at the vendor, the `brokered_connections` row written and `mcp.account_connected` on + * the trail — and the cancel route then answered `{ cancelled: true }` for a consent that had + * succeeded. The DELETE waits on the completion's row lock and re-evaluates this condition + * against the committed row, so the guard holds under the race and not merely before it. + * + * `false` therefore means one of three things — no row under that key, a row under a different + * `created_at`, or a row that has settled — and all three are "nothing was discarded". A caller + * that must tell the third apart asks {@link settledAuthorizationOutcome}. + */ + async discardAuthorizationAttempt(input: { + actorId: string; + /** A `Date`, or the ISO string one becomes through JSON; see {@link attemptInstant}. */ + createdAt: Date | string; + }): Promise { + const deleted = await database + .delete(pendingAuthorizations) + .where( + and( + attemptNamed(input.actorId, input.createdAt), + isNull(pendingAuthorizations.completedAt), + ), + ) + .returning({ actorId: pendingAuthorizations.actorId }); + return deleted.length > 0; + }, + + /** + * How the attempt named by `(actor_id, created_at)` ended, or null while it has not ended, or + * when no row carries that key. + * + * FOR THE ONE CALLER THAT HAS TO SAY WHY A DISCARD REFUSED: the cancel route, which must not + * answer a person whose consent COMPLETED while they were cancelling it as though nothing had + * happened. Named through {@link attemptNamed} like the discard it explains, so it can only + * report the attempt that discard was aimed at and never a newer one by the same actor. Once + * settled, a row keeps that `created_at` until a new claim takes the key and rewrites it, so a + * reading after the refused DELETE answers for the same attempt the DELETE refused. + */ + async settledAuthorizationOutcome(input: { + actorId: string; + createdAt: Date | string; + }): Promise { + const [row] = await database + .select({ outcome: pendingAuthorizations.outcome }) + .from(pendingAuthorizations) + .where(attemptNamed(input.actorId, input.createdAt)); + return row?.outcome ?? null; + }, + + /** + * Finish one Arcade authorization: consume the attempt, record the connection and file the + * trail, ALL THREE IN ONE TRANSACTION OR NONE OF THEM. + * + * THE ATTEMPT ROW IS THE SERIALIZATION POINT AND THE DATABASE ENFORCES IT. The first statement + * is a conditional `UPDATE ... WHERE actor_id = $1 AND auth_id = $2 AND completed_at IS NULL + * RETURNING`, and it is what makes completion happen exactly once. A read of the attempt + * followed by a write would not: two callbacks can both read the row before either consumes it, + * and both would then write a connection and a second `mcp.account_connected`. The second + * caller's UPDATE instead waits on the first's row lock, re-evaluates `completed_at IS NULL` + * against the committed row, and matches nothing. + * + * AN `auth_id` IN AN AUDIT PAYLOAD ENFORCES NOTHING, which is the shape this replaces. + * {@link auditEvents.id} is `uuid().defaultRandom()`, so the trail has no key a second callback + * could collide with — it would simply hold two rows for one connection, and the connection + * upsert would have run twice on the way there. + * + * ZERO ROWS MEANS STOP, AND THE CALLER IS TOLD NOTHING, which is deliberate. Zero rows is + * either somebody else completing this attempt first or a callback naming an attempt that is + * not this one, and NEITHER is a thing this deployment can tell apart or should act on + * differently: both wrote nothing and both leave the browser looking at an account that is + * connected. So this answers the same for the loser as for the winner, and a replayed callback + * is a no-op rather than an error somebody has to explain. A caller wanting to know what the + * row says reads {@link authorizationAttemptFor}. + * + * THE CONNECTION AND THE AUDIT ROW ARE IN THE SAME TRANSACTION AS THAT UPDATE and not merely + * after it. A failure between them used to leave the attempt consumed and nothing recording + * what it was consumed FOR: the person's account is live at the vendor, this deployment holds + * no `brokered_connections` row — which is the whole of the permission a brokered call is + * decided on — and the attempt can never be completed again. The audit insert is bound to the + * transaction for the same reason, through {@link createAuditStore} over the transaction handle + * rather than the store's own `auditStore`, which holds the pool and would commit on its own. + * + * `scopes` IS WHAT THE VENDOR GRANTED, AND IT IS THE ONLY THING FROM THAT ANSWER THAT IS + * WRITTEN ANYWHERE. Arcade's `auth.status` carries a live provider access token and an + * authorization URL beside it; neither reaches this row, this method's arguments, a log line or + * an error. What the trail gets is the action the attempt was for and the scopes that came + * back, which is exactly what is needed later to explain a tool call refused for want of a + * scope — the question {@link mcpUserCredentials.scope} exists to answer for a `user-oauth` + * grant. `authProvider` is the authorization provider this deployment ASKED for (`google`, say, as + * distinct from the broker, `brokered_connections.provider`). The caller resolves it from the + * app's own row at freshness-revalidation time and passes it in; the attempt row has no + * provider column to carry it. It is never read back out of a vendor reply, and the narrowed + * `status` return of D31 makes that structurally impossible. + */ + async completeAuthorizationAttempt(input: { + actorId: string; + authId: string; + toolkit: string; + account: AccountRef; + action: string; + scopes: string[]; + authProvider: string; + }): Promise { + await database.transaction(async (transaction) => { + /* + * ONE STATEMENT, AND THE FIRST ONE. `completed_at` is truncated to milliseconds for the + * reason `claimAuthorizationAttempt` truncates `created_at`: a `Date` carries only + * milliseconds, and a column this deployment writes at microsecond precision is one no + * later `Date`-valued filter can ever match. Nothing matches on this column today; writing + * it the same way is what keeps that true if something does. + */ + const claimed = await transaction.execute(sql` + UPDATE pending_authorizations + SET completed_at = date_trunc('milliseconds', now()), + outcome = 'completed' + WHERE actor_id = ${input.actorId} + AND auth_id = ${input.authId} + AND completed_at IS NULL + RETURNING actor_id + `); + if (claimed.length === 0) return; + + // Read inside the transaction, under the attempt's lock, so the answer the audit row + // carries is the one this very write acted on rather than one a rival moved underneath it. + const [existing] = await transaction + .select({ app: brokeredConnections.app }) + .from(brokeredConnections) + .where(accountRow(input.toolkit, input.account)); + + const verifiedAt = new Date(); + const set = { + verified: true, + verifiedAt, + // NOTHING WAS SPENT TO EARN THAT FLAG. A consent screen is the vendor's own yes, and no + // action of the app's is ever called against it; see `confirmBrokeredConnection`, which + // writes the same pair for the same reason. + probeAction: null, + updatedAt: verifiedAt, + }; + /* + * WHO CONNECTED THE TEAM ACCOUNT, WRITTEN HERE FOR THE SAME REASON EVERY OTHER WRITER + * WRITES IT. `connectedBy` is only ever a deployment-held row's column — a person's row is + * attributed by `user_id` already — and for a Shared app it is the attribution an + * administrator reads off `deploymentConnectionFor` to decide whether a team connection is + * legitimate and who to ask about it. This writer held `actorId`, the session subject + * (`users.id`) the attempt is keyed on and the id the admin read joins `users` on, and + * recorded none of it: an Arcade-consented Shared app's row was permanently null, and the + * page then said nobody connected it. The null is a real state for rows written before + * this, which is why both readers keep answering `null` rather than inventing a name. + * + * AND THE RE-CONSENT SUPERSEDES, which is `recordBrokeredConnection`'s rule spelled the + * same way: a deployment account is shared, so the administrator who most recently + * completed a consent for it is the one the row credits. Unconditional here, unlike there, + * because this path always holds an actor — there is no caller that passes none. + */ + const connectedBy = + input.account.holder === "deployment" ? input.actorId : null; + await transaction + .insert(brokeredConnections) + .values({ + // The broker this row was actually minted at, which is this store's own — never a + // literal, for the reason `recordBrokeredConnection` sets out at length. + provider: brokerProvider, + app: input.toolkit, + holder: input.account.holder, + userId: + input.account.holder === "person" ? input.account.userId : null, + vendorUserId: input.account.vendorUserId, + connectedBy, + ...set, + }) + .onConflictDoUpdate( + input.account.holder === "person" + ? { + target: [ + brokeredConnections.provider, + brokeredConnections.app, + brokeredConnections.userId, + ], + targetWhere: sql`${brokeredConnections.holder} = 'person'`, + // The identity the grant was just made under, for `recordBrokeredConnection`'s + // reason: calls go out under the row's id, so a re-consent that left the old one + // standing sent them to an account this consent says nothing about. + set: { ...set, vendorUserId: input.account.vendorUserId }, + } + : { + target: [ + brokeredConnections.provider, + brokeredConnections.app, + ], + targetWhere: sql`${brokeredConnections.holder} = 'deployment'`, + set: { + ...set, + vendorUserId: input.account.vendorUserId, + connectedBy, + }, + }, + ); + + await recordAuditEvent( + createAuditStore(transaction as unknown as Database), + { + eventType: "mcp.account_connected", + targetType: "mcp_server", + // The app, the id every other writer of this event files a brokered connection under, + // so one query answers what happened to one person's access to one app however it + // began and however it ended. + targetId: input.toolkit, + payload: { + actor: input.actorId, + server: input.toolkit, + /* + * WHAT THE VENDOR GRANTED, WHICH A BROKERED ROW HAS NEVER BEEN ABLE TO SAY BEFORE. + * Both Composio writers carry `""` because Composio holds the grant and never tells + * this deployment what it covers; Arcade does tell us, on the key all four writers + * already agree on, so the same query reads both. + */ + scope: input.scopes.join(" "), + // The action the attempt was for: what this grant was obtained in order to call. + action: input.action, + authProvider: input.authProvider, + reconnected: Boolean(existing), + holder: input.account.holder, + }, + }, + ); + }); + }, + + /** + * Close an attempt as `failed` or `unreconciled`, matched on `(actor_id, auth_id)`. + * + * ON THE PAIR AND NOT ON `created_at`, unlike {@link recordAuthorizationMint} and + * {@link discardAuthorizationAttempt}, because the caller here is the returning callback and + * all it holds is the `ar_...`. An attempt with no `auth_id` matches nothing, which is correct: + * no callback can be about an attempt that never minted one. + * + * CONDITIONAL ON `completed_at IS NULL`, exactly as the completion above is: an attempt that + * has settled — completed, failed, unreconciled or withdrawn — is not reopened by a later + * callback, and `false` says so. See {@link closeAuthorizationAttempt} for what the asymmetry + * used to be and what it cost. + */ + async failAuthorizationAttempt(input: { + actorId: string; + authId: string; + }): Promise { + return await closeAuthorizationAttempt(input, "failed"); + }, + + /** + * Mark an attempt whose outcome this deployment could not settle — the vendor answered, and + * what it answered could not be reconciled with the attempt. Kept apart from `failed` so an + * operator can tell "the person declined" from "we do not know what happened". + */ + async markAuthorizationUnreconciled(input: { + actorId: string; + authId: string; + }): Promise { + return await closeAuthorizationAttempt(input, "unreconciled"); + }, + + /** + * Mark an attempt whose consent completed at the vendor and which this deployment then refused + * and ended by withdrawing the grant — neither a decline nor an unknown. An operator seeing a + * run of these is seeing apps whose mode is being switched inside a consent window, which is a + * different problem from people declining. + */ + async markAuthorizationWithdrawn(input: { + actorId: string; + authId: string; + }): Promise { + return await closeAuthorizationAttempt(input, "withdrawn"); + }, + + /** + * The live attempt for a session subject (`users.id`, never `credentialActorId`), or null when + * there is none, it is past the 15-minute TTL, or it has completed. + */ + /** + * Whether this attempt's completion COMMITTED — asked of the row the transaction serializes on. + * + * FOR ONE CALLER AND ONE QUESTION: `/arcade/verify`'s completion rejected, and "the call threw" + * is not "the work rolled back". A connection lost on the way back from a COMMIT the server had + * already applied rejects at the client over a grant that is written down, and the verifier + * telling that person `not-recorded` sends them to mint a second consent at the vendor against + * a connection they already hold. The attempt row is the one place that can say which happened: + * {@link createPluginStore}'s `completeAuthorizationAttempt` stamps `outcome = 'completed'` in + * the first statement of the transaction, so the stamp exists exactly when the transaction did. + * + * NOT {@link authorizationAttemptFor}, which cannot answer this. It filters on `completed_at IS + * NULL` AND on the fifteen-minute TTL, so it answers `null` for a completed attempt and for an + * expired one alike — and a verifier that read "no live attempt" as "it committed" would + * report a grant that is not there for any completion that ran long enough to age out. + * + * MATCHED ON `(actor_id, auth_id)` like the closers above and never on `created_at`, because + * what the caller holds at this point is the `ar_...`. A rival callback having completed the + * same attempt first answers `true` here, which is correct: the grant is recorded either way, + * and this deployment has never been able or willing to tell the winner from the loser. + */ + async authorizationAttemptCompleted(input: { + actorId: string; + authId: string; + }): Promise { + const [row] = await database + .select({ actorId: pendingAuthorizations.actorId }) + .from(pendingAuthorizations) + .where( + and( + eq(pendingAuthorizations.actorId, input.actorId), + eq(pendingAuthorizations.authId, input.authId), + eq(pendingAuthorizations.outcome, "completed"), + ), + ); + return row !== undefined; + }, + + async authorizationAttemptFor( + actorId: string, + ): Promise { + const [row] = await database + .select() + .from(pendingAuthorizations) + .where( + and( + eq(pendingAuthorizations.actorId, actorId), + isNull(pendingAuthorizations.completedAt), + sql`${pendingAuthorizations.createdAt} >= now() - interval '15 minutes'`, + ), + ); + return row ?? null; + }, + + /** + * File `mcp.authorization_cancelled` for an attempt its own person has just retracted. + * + * CALLED ONLY AFTER {@link discardAuthorizationAttempt} ANSWERED TRUE, by the cancel route and by + * nothing else. The same deletion also tidies up after a refused or unrecorded mint, and those + * are this deployment cleaning up after itself, not a person withdrawing consent — so the row is + * filed here, for the one caller whose act it describes, and not inside the deletion. + * + * TARGETED AT THE APP'S SLUG, read off the attempt's server row with {@link toolkitOfFor}, which + * is the id `mcp.account_connected` and `mcp.account_disconnected` file a brokered app under, so + * one query on the target answers every ending of one app's consent. An attempt OUTLIVES what + * its row's url says — an administrator can re-point the row while a consent is in flight, and + * the cancel route deliberately still lets the person retract it — and once the url names no + * app the row's own id is the only name left for what was cancelled, so that is what the row is + * filed under; `serverId` is in the payload either way. + * + * WHO DID IT GOES IN THE PAYLOAD, as on every writer here, never in `actorUserId`. And the + * payload carries NEITHER the consent url NOR the attempt's `auth_id`: the attempt row never held + * the url, and the vendor's handle is not needed to say what a person withdrew. `minted` is + * whether a flow had been started at the vendor at all. + */ + async recordAuthorizationCancelled(input: { + actorId: string; + attempt: PendingAuthorization; + }): Promise { + const [row] = await database + .select({ url: mcpServers.url }) + .from(mcpServers) + .where(eq(mcpServers.id, input.attempt.serverId)) + .limit(1); + const toolkit = row ? toolkitOfFor(brokerProvider, row.url) : null; + await recordAuditEvent(auditStore, { + eventType: "mcp.authorization_cancelled", + targetType: "mcp_server", + targetId: toolkit ?? input.attempt.serverId, + payload: { + actor: input.actorId, + server: toolkit, + serverId: input.attempt.serverId, + action: input.attempt.action, + holder: input.attempt.holder, + minted: input.attempt.authId !== null, + }, + }); + }, + /** * Spend one call on this person's key, and say what the vendor made of it. * @@ -1012,9 +1626,42 @@ export function connectionMethods(context: StoreContext) { * Composio transport strips before anything reaches the vendor and asserts that it did, so * what Composio is handed is the action and an empty argument object. */ + /* + * AND ON ANY OTHER BROKER THIS REFUSES RATHER THAN DIALS, because `composioAskAction` is + * Composio's own `askAction` and no counterpart has been written for a second broker. + * + * CRITERION. A deployment whose broker is not Composio gets a stated refusal here, and no + * request leaves this process. + * + * REASON. The url this used to compose was `composio://` whatever the broker was, so + * an Arcade deployment's check was sent to Composio with a Composio-shaped url. On a + * deployment holding no Composio key that fails at a vendor it has no business talking to and + * the person is told their connection could not be checked — an outage reported where there + * was none. Where a Composio key IS present it is worse: the slug is a plain app name, so the + * call lands on an UNRELATED app of the same name at the wrong vendor and succeeds, and the + * row records a verified check of an account nobody holds. + * + * `unreachable` IS THE HONEST OUTCOME, not `nothing`. Nothing was learned about the key and + * nothing is recorded about it — `probe` is null, so {@link _ProbeOutcomeLeaves} leaves the + * row untouched and `probe_action` unwritten — and `attempted` is what WOULD have been spent, + * which is the fact about this deployment's intent that field exists to carry. The sentence + * names the state rather than blaming the connection, because the gap is ours. + * + * TODO: delete this once a probe is designed for the second broker. Until then a refusal that + * says so is the only answer that is not a claim about somebody's account. + */ + if (brokerProvider !== "composio") { + return { + outcome: "unreachable", + probe: null, + attempted: candidate.name, + sentence: `This deployment brokers its apps through ${BROKERED_PROFILE[brokerProvider].vendor}, and the only connection check this deployment knows how to make is Composio's. Nothing was asked about this connection, so nothing is recorded about it.`, + }; + } + const { result, answered } = await composioAskAction( { - url: `composio://${input.toolkit}`, + url: `${BROKERED_PROFILE.composio.scheme}${input.toolkit}`, actorId: input.account.vendorUserId, // Spread rather than passed as `undefined`, so "any account of theirs" reaches the wire // as a body with no such key. See {@link ComposioActions.execute}. @@ -1139,7 +1786,7 @@ export function connectionMethods(context: StoreContext) { }): Promise<{ connected: boolean }> { // Before anything, and for the reason `addBrokeredApp` says it first too: a deployment with // no key has no broker to have connected anybody at, so there is nothing here to ask. - if (!broker) throw new BrokerUnconfiguredError(); + if (!broker) throw new BrokerUnconfiguredError(brokerProvider, "person"); const connected = await broker.isConnected({ account: input.account, @@ -1453,7 +2100,7 @@ export function connectionMethods(context: StoreContext) { }): Promise<{ connected: true; verified: boolean; probe: string | null }> { // First, and for `confirmBrokeredConnection`'s reason: a deployment with no key has nobody to // connect anybody at, and the refusal must happen before the values are touched at all. - if (!broker) throw new BrokerUnconfiguredError(); + if (!broker) throw new BrokerUnconfiguredError(brokerProvider, "person"); // Keyed on the url and on the one row that answers for it — see `brokeredAppScheme`. It is // the same reasoning the connection gate in `connectionTokenFor` is keyed on, and for the @@ -1855,7 +2502,7 @@ export function connectionMethods(context: StoreContext) { verifiedAt: string | null; probe: string | null; }> { - if (!broker) throw new BrokerUnconfiguredError(); + if (!broker) throw new BrokerUnconfiguredError(brokerProvider, "person"); // Keyed on the url and on the one row that answers for it — see `brokeredAppKind`. It is the // read `connectBrokeredWithFields`, `confirmBrokeredConnection` and `disconnectBrokered` all @@ -1942,7 +2589,7 @@ export function connectionMethods(context: StoreContext) { */ if (probed.outcome === "unreachable") { throw new PluginRefusedError( - `${input.toolkit} could not be checked just now: ${probed.sentence} Nothing here changed — your connection is still recorded exactly as the last check left it — so pressing Re-check again when Composio is answering is the whole of the retry.`, + `${input.toolkit} could not be checked just now: ${probed.sentence} Nothing here changed — your connection is still recorded exactly as the last check left it — so pressing Re-check again when ${BROKERED_PROFILE[brokerProvider].vendor} is answering is the whole of the retry.`, null, ); } @@ -2162,7 +2809,7 @@ export function connectionMethods(context: StoreContext) { */ reason: "self" | "person_removed" | "admin" | "mode_switched"; }): Promise<{ vendorRevocationRequested: boolean }> { - if (!broker) throw new BrokerUnconfiguredError(); + if (!broker) throw new BrokerUnconfiguredError(brokerProvider, "person"); /* * Keyed on the url and on the one row that answers for it — see {@link brokeredAppKind}. @@ -2179,7 +2826,10 @@ export function connectionMethods(context: StoreContext) { * and an app it cannot say holds a key is one whose withdrawal it has to report as asked. */ /** - * WHAT THIS DISCONNECT CLAIMS ON THE TRAIL FOR EACH KIND OF APP. + * WHAT THIS DISCONNECT CLAIMS ON THE TRAIL FOR THE ASKED APP, BY KIND. What it does about a + * SIBLING of each kind is a different decision and is written down where it is made — see + * rule 1 on {@link clearEndedSiblings}, which for a key DELETES NOTHING AND CLAIMS NOTHING + * rather than claiming no revocation about a row it removed. * * Type-only and erased; see {@link Decides}. `=== "key"` collapses three answers into two, * and the collapse is deliberate here rather than accidental: the field below is a claim that @@ -2196,20 +2846,64 @@ export function connectionMethods(context: StoreContext) { unreadable: "reports it as asked for too, which is the claim that cannot be too weak"; } >; - const fieldScheme = (await brokeredAppKind(input.toolkit)) === "key"; + /* + * THE APPS THIS REVOCATION ENDS BESIDES THE ONE ASKED ABOUT, read BEFORE anything is revoked. + * Where a connection is keyed `(identity, auth provider)` — Arcade — withdrawing one app's + * connection ends every app that shares it, so a local row left for one of them claims an + * account the vendor no longer holds, which is the other way to lie. Where each app is its + * own auth provider — Composio — this is always empty and nothing below differs from a + * disconnect of one. The question is {@link resolveSiblings}' and none of it is derived here. + */ + const { siblings, unanswered } = await resolveSiblings({ + toolkit: input.toolkit, + account: input.account, + }); + + /* + * WHETHER THE ASKED APP IS ONE THIS DEPLOYMENT HOLDS A KEY FOR, which decides WHAT THE TRAIL + * CLAIMS about it and nothing else. Its row goes either way: the person pressed Disconnect on + * THIS app, the row is the whole of what Disconnect works off, and leaving it would be + * refusing the act. The siblings are the opposite question — nobody asked about them — and + * {@link clearEndedSiblings} answers it, rule 1 included. + * + * This was one `keyApps` set spanning the asked app and its siblings, and the set only ever + * weakened the trail claim: a KEY sibling's row was deleted anyway, by the single OAuth + * revoke that never ended it, leaving a live account at the vendor with no local row to + * reach it. + * + * The claim is {@link vendorRevocationClaim}'s, which {@link removeServer} and + * {@link retireConnectionsFor} make for their own asked apps: this method was the one of the + * three that said `false` for a key, and now none of them says it for itself. + */ + const claim = await vendorRevocationClaim(input.toolkit); // Whether there was an account to end at all, which is what decides if anybody was // disconnected. Named apart from the field below because for a key the two differ: something // ended, and nothing was asked of the provider. + // + // REVOKE BEFORE ANY LOCAL DELETE, and ONE ask: it ends the siblings with it. It THROWS on a + // partial ask, which is the partial failure — the throw leaves this method before a single + // row is deleted or written, every app's row standing, so pressing Disconnect again is the + // recovery. const ended = await broker.revoke({ account: input.account, toolkit: input.toolkit, }); - const vendorRevocationRequested = fieldScheme ? false : ended; + const asked = claim(ended); - // `returning` because whether a row was here is half of what decides if anybody was - // disconnected, and a delete that answered nothing would leave the two cases indistinguishable. + /* + * THE ASKED APP FIRST, and on its own terms — this is the act, not a cascade of it. + * + * `deleted || ended` RATHER THAN RULE 3, deliberately and only here: a disconnect of an app + * whose row this deployment never held is still a withdrawal the vendor made, and the trail + * has to carry it. A SIBLING has no such act of its own to record, which is why + * {@link clearEndedSiblings} files nothing without a row. + * + * `returning` because whether a row was here is half of what decides if anybody was + * disconnected, and a delete that answered nothing would leave the two cases + * indistinguishable. + */ const [deleted] = await database .delete(brokeredConnections) .where(accountRow(input.toolkit, input.account)) @@ -2225,19 +2919,154 @@ export function connectionMethods(context: StoreContext) { server: input.toolkit, // Whose account this was, which is not always who ended it: an administrator // offboarding somebody and a person disconnecting themselves write the same shape of - // row, and only these two fields tell them apart. The deployment's own account has no - // person behind it, so it is named as the deployment rather than as whoever pressed. + // row, and only these two fields tell them apart. The deployment's own account has + // no person behind it, so it is named as the deployment rather than as whoever + // pressed. owner: input.account.holder === "person" ? input.account.userId : "deployment", reason: input.reason, - vendorRevocationRequested, + ...asked, + /* + * HOW MANY apps on this identity could not be asked about and so were left out of + * the set below, never their names. An integer, so an operator can see that "we did + * not know" happened; see {@link resolveSiblings}. + */ + unansweredSiblings: unanswered, }, }); } - return { vendorRevocationRequested }; + // Then the apps that went with it, each naming the disconnect that ended it, by the three + // rules that are written down once; see {@link clearEndedSiblings}. + await clearEndedSiblings({ + siblings, + account: input.account, + endedWith: input.toolkit, + revoked: ended, + unanswered, + by: input.by, + reason: input.reason, + }); + + return asked; + }, + + /** + * THE LOCAL SIDE OF A WITHDRAWAL SOMEBODY ELSE ALREADY MADE AT THE VENDOR: the rows this + * deployment holds for an account a revoke has just ended, and the trail that says why they + * went. + * + * WHO THIS IS FOR. The verifier refuses a consent whose context moved on and withdraws the + * RETIRED identity's app at the vendor — a revoke it issues itself, outside this store, + * because the decision is the route's and the attempt row is what records it. On Arcade that + * one revoke ends the whole `(identity, auth provider)` connection and so every app sharing + * it, and the rows here for those apps would otherwise be left standing: this deployment's own + * records claiming live connections for apps the vendor has already disconnected. A person + * then sees apps listed as connected that fail on first use, and nothing tells them otherwise. + * This is the write that stops that, and it is a STORE method rather than route code for the + * reason every other row write is: `brokered_connections` and the trail are this file's. + * + * IT ASKS NOTHING OF ANY VENDOR AND DECIDES NOTHING BUT WHAT A LOCAL ROW SAYS. The caller + * resolved the siblings — of + * {@link siblingApps}, BEFORE its revoke went out, which is the ordering {@link + * disconnectBrokered} and {@link removeServer} both keep — and the caller watched its revoke + * ANSWER TRUE. Called on anything less, it would be claiming an account gone on the strength + * of an answer nobody got; that rule is {@link removeServer}'s and this one is its other half. + * + * ONLY A ROW THAT WAS ACTUALLY HERE GETS A TRAIL ROW, which is again {@link removeServer}'s + * rule. The act itself is already recorded — on the attempt row, as `withdrawn` — so these + * rows exist to explain why an app's connection VANISHED from this deployment's records, and + * an app that had no row here had nothing to explain. + * + * THAT RULE AND THE TWO BESIDE IT NOW LIVE IN {@link clearEndedSiblings}, which this method + * hands its siblings to and which {@link disconnectBrokered} and {@link removeServer} hand + * their own to. They were spelled three times and the spellings disagreed about every one of + * them. + * + * `reason` IS ONE WORD AND IT IS THIS ONE. "The consent's context moved on" is not any of the + * four {@link disconnectBrokered} takes — nobody disconnected anything, nobody was offboarded, + * and a mode switch is only one of the several ways the context can move — so the trail gets + * its own word rather than the nearest-looking lie. Fixed in the type so there is no second + * caller spelling it differently. + */ + async clearWithdrawnAccount(input: { + toolkit: string; + account: AccountRef; + /** The apps the caller's revoke ended besides `toolkit`; {@link siblingApps} answers it. */ + siblings: string[]; + /** + * How many apps on this identity could not be asked about, an integer and never names, which + * qualifies the `endedWith` claim and goes beside it and nowhere else; see + * {@link resolveSiblings}. + */ + unanswered: number; + by: string; + reason: "context_changed"; + }): Promise<{ cleared: string[] }> { + const cleared: string[] = []; + /* + * THE ASKED APP FIRST, then the apps that went with it, so the trail reads in the order the + * withdrawal happened. The asked app's own row names no other app beside it — it was ended + * by its own ask — and a sibling's names the app that asked, which is the only thing that + * tells a reader why a connection they never touched is gone. + * + * THE ASKED APP TAKES THE SAME THREE RULES, which is this method's whole difference from + * {@link disconnectBrokered}'s asked app and is right for the same reason the rules are: + * nobody here pressed anything about this app either. A caller's revoke ended an OAuth + * connection for a RETIRED identity, so an app this deployment holds a key for was not in + * it (rule 1); the caller watched that revoke answer true, which is the contract above and + * is rule 2 discharged at the door; and a row that was not here had nothing to explain + * (rule 3). The act itself is already recorded on the attempt row, as `withdrawn`. + * + * Rule 1 is asked of {@link consentRevokeReaches}, its one spelling, rather than of the kind + * directly — this was the one site that compared the kind for itself (round 2, K5). + */ + if (await consentRevokeReaches(input.toolkit)) { + const [deleted] = await database + .delete(brokeredConnections) + .where(accountRow(input.toolkit, input.account)) + .returning({ app: brokeredConnections.app }); + if (deleted) { + cleared.push(input.toolkit); + await recordAuditEvent(auditStore, { + eventType: "mcp.account_disconnected", + targetType: "mcp_server", + targetId: input.toolkit, + payload: { + actor: input.by, + server: input.toolkit, + owner: + input.account.holder === "person" + ? input.account.userId + : "deployment", + reason: input.reason, + /* + * TRUE FOR EVERY ROW HERE, AND IT IS NOT A GUESS: this method is reached only from a + * revoke that answered true, and on Arcade that ask ended the siblings with the app + * it named. `vendorRevocationRequested: false` means "no vendor was asked", which is + * the one thing none of these rows may say. + */ + vendorRevocationRequested: true, + }, + }); + } + } + + cleared.push( + ...(await clearEndedSiblings({ + siblings: input.siblings, + account: input.account, + endedWith: input.toolkit, + // The contract above: the caller watched its revoke answer true before calling this. + revoked: true, + unanswered: input.unanswered, + by: input.by, + reason: input.reason, + })), + ); + return { cleared }; }, /** @@ -2367,6 +3196,16 @@ export function connectionMethods(context: StoreContext) { * retirements of the same person revoke in the same order and write their rows in the same * order. */ + /* + * NO PROVIDER PREDICATE HERE, DELIBERATELY, AND THAT IS NOT AN OVERSIGHT. The sweep below + * revokes through the ACTIVE broker, so a row filed under another provider would be a + * revocation requested at the wrong vendor, which would not recognise the connection, and an + * audit row claiming `vendorRevocationRequested` about access that was never removed. What + * keeps that unreachable is the startup activation refusal (`assertActivatable`, called from + * `server/src/index.ts`): a deployment holding both providers' rows cannot boot. The provider + * sunset flow relaxes that refusal, and whoever builds it must add the `brokerProvider` + * predicate here. + */ const brokered = await database .select({ toolkit: brokeredConnections.app }) .from(brokeredConnections) @@ -2378,6 +3217,66 @@ export function connectionMethods(context: StoreContext) { ) .orderBy(asc(brokeredConnections.app)); + /* + * THE APPS EACH OF THIS PERSON'S REVOCATIONS ENDS BESIDES THE ONE ASKED ABOUT, read BEFORE a + * single revoke goes out and through {@link resolveSiblings}, the one place that answers it. + * + * WHY THIS LOOP NEEDS IT AT ALL, when it already asks about every app the person holds. + * Where a connection is keyed `(identity, auth provider)` — Arcade — the FIRST app's revoke + * ends the connection and every app sharing it, so the ask for a sibling that follows finds + * nothing left and answers `false`. Passed through, that is `vendorRevocationRequested: + * false` on the trail for a grant this deployment asked for and got, which is the one + * reading of that field that must never be written: it says "no vendor was asked" about an + * account that was withdrawn, to whoever later checks that an offboarding completed. The + * order the rows come back in decides which app gets the truthful row and which gets the + * false one, which is to say nothing decides it. + * + * Where each app is its own auth provider — Composio — every set here is empty by + * construction, each ask stands alone, and nothing below differs from what this method + * always did. + * + * RESOLVED AGAINST THE PERSON'S OWN IDENTITY, the same `account` the revokes below are asked + * with. MEMOIZED ACROSS THE WHOLE OFFBOARDING for the reason {@link removeServer} gives: + * `authProviderOf` is a live vendor call on Arcade, and the bound is then the number of + * DISTINCT TOOLKITS this person holds rather than that number squared. Empty with no broker + * configured, where nothing is asked of anybody and the `false` below is the whole truth. + */ + const account = personAccount(userId); + const authProviders = new Map>(); + const endedBesides = new Map< + string, + { siblings: string[]; unanswered: number } + >(); + if (broker) { + for (const connection of brokered) { + endedBesides.set( + connection.toolkit, + await resolveSiblings( + { toolkit: connection.toolkit, account }, + authProviders, + ), + ); + } + } + + /* + * WHAT THE TRAIL MAY CLAIM WAS ASKED OF THE VENDOR FOR EACH APP, read before a single revoke + * goes out, as {@link disconnectBrokered} reads its own. A KEY app's row says `false` whatever + * the vendor answered — see {@link vendorRevocationClaim}, which all three writers of an asked + * app's row now ask. This one used to pass the vendor's answer through for a key (round 2, + * L5-a), the same divergence {@link removeServer} had (A5c). + */ + const toRetire: { + toolkit: string; + claim: Awaited>; + }[] = []; + for (const connection of brokered) { + toRetire.push({ + toolkit: connection.toolkit, + claim: await vendorRevocationClaim(connection.toolkit), + }); + } + /* * What the broker was actually asked for each app, kept so the trail below records the answer * rather than the call. False where there is no broker at all: a deployment whose key has @@ -2397,21 +3296,29 @@ export function connectionMethods(context: StoreContext) { * asked — a later one is not punished for an earlier one — and the first refusal is rethrown * below, so the act still fails loudly and the administrator still gets a 500. */ - const withdrawn: { toolkit: string; requested: boolean }[] = []; + const withdrawn: { + toolkit: string; + requested: boolean; + claim: Awaited>; + }[] = []; const refusals: unknown[] = []; - for (const connection of brokered) { + for (const connection of toRetire) { try { withdrawn.push({ toolkit: connection.toolkit, + claim: connection.claim, requested: broker ? await broker.revoke({ /* * THE PERSON'S OWN ACCOUNT, NAMED AS ONE. Offboarding somebody ends what they * held and never the deployment's shared account, whoever connected it — so the - * holder is fixed here rather than read off anything, and the vendor id is the - * person's own, which is what a personal account is filed under at Composio. + * holder is fixed above rather than read off anything, and the vendor id is the + * person's own, which is what a personal account is filed under at Composio. The + * SAME value the siblings were resolved against, because an answer about one + * identity describing a revocation on another is the whole of what that set is + * for. */ - account: { holder: "person", userId, vendorUserId: userId }, + account, toolkit: connection.toolkit, }) : false, @@ -2451,8 +3358,49 @@ export function connectionMethods(context: StoreContext) { ); } + /* + * WHICH OF THIS PERSON'S APPS WERE ENDED BY ANOTHER APP'S REVOCATION, and by which one. + * + * Only from a revoke that ANSWERED TRUE: `false` means nothing was found to withdraw or the + * auth provider could not be resolved, and the vendor was not shown to have ended anything, + * so nothing is claimed on the strength of it — the rule {@link removeServer} files its + * siblings by. The asked app is skipped in favour of its own answer, and the first ender + * wins, which is deterministic because the rows are walked in app order. + * + * APPS THIS PERSON HOLDS ARE ALL THIS CAN SPEAK FOR. A sibling resolved on the same identity + * but held by the deployment, or an app whose own revoke threw and so has no row here, is + * left alone: this map only corrects what the loop below is already about to write. + * + * WHICH SIBLINGS A REVOKE ENDED IS {@link siblingsEndedBy}'S ANSWER, the one + * {@link clearEndedSiblings} deletes on — rules 1 and 2 — and not a walk of this method's + * own. It was one: rule 2 without rule 1, so a KEY app whose own ask answered false was filed + * as ended by an OAuth sibling's revoke that never reached it (round 2, A5b). What differs + * here is only what is DONE with the answer: this method deletes its own rows as its own acts + * above, so it takes the judgement without the delete and files `endedWith` from it. + */ + const endedWith = new Map(); + for (const entry of withdrawn) { + const ended = await siblingsEndedBy({ + siblings: endedBesides.get(entry.toolkit)?.siblings ?? [], + endedWith: entry.toolkit, + revoked: entry.requested, + }); + for (const app of ended) { + if (!endedWith.has(app)) endedWith.set(app, entry.toolkit); + } + } + for (const connection of withdrawn) { retired += 1; + /* + * The app whose revocation ended this one, where this one's own ask came back empty + * because that revocation had already taken it. Absent for an app that was ended by its + * own ask, which needs no other grant named beside it. + */ + const endedBy = connection.requested + ? undefined + : endedWith.get(connection.toolkit); + const resolved = endedBesides.get(connection.toolkit); await recordAuditEvent(auditStore, { eventType: "mcp.account_disconnected", targetType: "mcp_server", @@ -2473,8 +3421,30 @@ export function connectionMethods(context: StoreContext) { * withdrawal asked for, or there was nothing to ask about, or there was no broker to * ask. The value of the field is exactly that a reader can tell those apart, so a * constant here would be worse than none. + * + * OR WHAT WAS ASKED ABOUT THE CONNECTION THIS APP SHARES, which is the same claim + * made about the same grant. On Arcade the ask that ended this app may have been + * spelled with a sibling's name, and `revoke`'s `false` here then means "already + * gone", not "nobody asked" — `endedWith` beside it names the app that asked. + * + * AND NEVER FOR A KEY: {@link vendorRevocationClaim} makes the claim from that + * reading, and for a key app it is `false` whatever the vendor answered. + */ + ...connection.claim(connection.requested || Boolean(endedBy)), + /* + * AND WHERE A SIBLING RELATIONSHIP IS BEING CLAIMED, HOW MANY apps on this identity + * could not be asked about and so could not be ruled siblings either way — an + * integer, never their names; see {@link resolveSiblings}. Beside `endedWith` and + * nowhere else, which is where {@link removeServer} puts it and for its reason: the + * count qualifies a claim about which apps went together, and a row making no such + * claim would be carrying a number about nothing. */ - vendorRevocationRequested: connection.requested, + ...(endedBy + ? { + endedWith: endedBy, + unansweredSiblings: resolved?.unanswered ?? 0, + } + : {}), }, }); } diff --git a/server/src/plugins/plugin-store/context.ts b/server/src/plugins/plugin-store/context.ts index 4d001db4f..62112a895 100644 --- a/server/src/plugins/plugin-store/context.ts +++ b/server/src/plugins/plugin-store/context.ts @@ -13,24 +13,34 @@ import { mcpServers, mcpTools, mcpUserCredentials, + pendingAuthorizations, pluginGrants, skillTools, } from "../../db/schema"; -import { accessFor, type ServerAccess } from "../access"; +import { + accessFor, + BROKERED_PROFILE, + type BrokerProvider, + type ServerAccess, + toolkitOfFor, +} from "../access"; import { type Decides, type SchemeKind, schemeKind } from "../broker"; import { type CatalogueEntry, catalogueEntry } from "../catalogue"; -import { toolkitOf } from "../composio"; import { registerDynamicClient } from "../oauth"; import { type AccountAnswer, type AccountMode, type AccountRef, accountFor, + personAccount, } from "../shared-accounts"; import { + type BrokeredDisconnectReason, CatalogueEntryUnknownError, CLIENT_REREGISTRATION_BACKOFF_MS, + type ConnectionFootprint, CustomServerRefusedError, + connectionSiblings, exchangeRefreshTokenOverHttp, INVALID_CLIENT, isUsableClient, @@ -63,6 +73,12 @@ export function createStoreContext(options: PluginStoreOptions) { // No default, unlike the seams above: there is no real implementation in this tree to fall back // to, and a deployment with no Composio key is supposed to have no broker. See `./broker`. const broker = options.broker; + /* + * The broker this store is for: every read of `brokered_connections`, every `provenance` test and + * the connection writer below read THIS rather than each re-deciding. Taken as given, never + * defaulted — see {@link PluginStoreOptions.brokerProvider} for why there is no fallback here. + */ + const brokerProvider: BrokerProvider = options.brokerProvider; /* * One exchange at a time per (server, person). A rotating vendor invalidates the refresh @@ -265,7 +281,9 @@ export function createStoreContext(options: PluginStoreOptions) { * so only a removal racing this read gets here, and it is refused as the missing row is above. */ const toolkit = - dialled.provenance === "composio" ? toolkitOf(dialled.url) : null; + dialled.provenance === brokerProvider + ? toolkitOfFor(brokerProvider, dialled.url) + : null; const app = toolkit ? await brokeredAppRow(toolkit) : null; if (toolkit && !app) return { @@ -299,8 +317,12 @@ export function createStoreContext(options: PluginStoreOptions) { return { refusal: `${row.title} runs in the account of the person asking, and this run is not attributed to anybody.`, }; + /* + * The actor's id is both the local id and the vendor id, deliberately and for both + * providers. See {@link personAccount} for why, before changing it. + */ return { - ref: { holder: "person", userId: actorId, vendorUserId: actorId }, + ref: personAccount(actorId), title: row.title, mode: "personal", appId, @@ -323,17 +345,69 @@ export function createStoreContext(options: PluginStoreOptions) { const accountRow = (toolkit: string, account: AccountRef) => account.holder === "person" ? and( - eq(brokeredConnections.provider, "composio"), + eq(brokeredConnections.provider, brokerProvider), eq(brokeredConnections.app, toolkit), eq(brokeredConnections.holder, "person"), eq(brokeredConnections.userId, account.userId), ) : and( - eq(brokeredConnections.provider, "composio"), + eq(brokeredConnections.provider, brokerProvider), eq(brokeredConnections.app, toolkit), eq(brokeredConnections.holder, "deployment"), ); + /** + * The one statement behind `failAuthorizationAttempt`, `markAuthorizationUnreconciled` and + * `markAuthorizationWithdrawn`, so the three verdicts cannot drift into three row shapes. + * `completed_at` is truncated to milliseconds for the reason `claimAuthorizationAttempt` + * truncates `created_at`. + * + * CONDITIONAL ON `completed_at IS NULL`, EXACTLY AS THE COMPLETION ABOVE IS, BECAUSE A SETTLED + * ATTEMPT IS A RECORD AND NOT A DRAFT. Without that condition this UPDATE matched on + * `(actor_id, auth_id)` alone, and `(actor_id, auth_id)` does not stop naming a row when the row + * settles: a return leg that completed is still holding the `ar_...` a second leg will match on. + * So a slow or retried FAILURE callback arriving behind a SUCCESSFUL completion rewrote + * `outcome = 'completed'` as `outcome = 'failed'` and re-stamped `completed_at`, and the attempt + * then said the person's authorization failed while the grant was live at the vendor, the + * `brokered_connections` row was written and `mcp.account_connected` was on the trail. The trail + * and the attempt disagreed about what happened, and the attempt was the one that was wrong. + * + * THE OLD COMMENT HERE ARGUED THE ASYMMETRY WAS THE POINT, on the grounds that "a second one + * re-stamping the same verdict grants nothing to anybody". That is true of the case it imagined — + * `failed` over `failed` — and says nothing about the case that actually happens, which is a + * verdict over a DIFFERENT and already-final one. Completion is not the only write that must + * happen once; it is the only one that was treated that way. + * + * FIRST TERMINAL VERDICT WINS, AND A LATE ONE IS REFUSED RATHER THAN APPLIED. `false` now means + * one of three things — no attempt under that actor, an attempt holding a different `auth_id`, + * or an attempt that has already settled — and all three are "this call did not close anything", + * which is the only distinction a caller has ever acted on. Nothing is lost to the person on the + * losing leg: their own request still ends in the refusal redirect it would have ended in anyway. + * What this deployment cannot yet SAY is that two legs of one authorization disagreed; there is + * no audit event type for it and inventing one is wider than this change. Recording the true + * outcome is strictly better than recording the false one, which is what the alternative was. + */ + const closeAuthorizationAttempt = async ( + input: { actorId: string; authId: string }, + outcome: "failed" | "unreconciled" | "withdrawn", + ) => { + const written = await database + .update(pendingAuthorizations) + .set({ + completedAt: sql`date_trunc('milliseconds', now())`, + outcome, + }) + .where( + and( + eq(pendingAuthorizations.actorId, input.actorId), + eq(pendingAuthorizations.authId, input.authId), + isNull(pendingAuthorizations.completedAt), + ), + ) + .returning({ actorId: pendingAuthorizations.actorId }); + return written.length > 0; + }; + /** * The token one call goes out with, and whose it is — decided from `access.credential`, so that * this function and the audit row cannot disagree about whose account a call ran in. @@ -432,7 +506,7 @@ export function createStoreContext(options: PluginStoreOptions) { */ if (!access.toolkit) { throw new PluginInvariantError( - `${row.id} resolves to a brokered credential with no Composio app in its url.`, + `${row.id} resolves to a brokered credential with no ${BROKERED_PROFILE[brokerProvider].vendor} app in its url.`, ); } @@ -520,6 +594,54 @@ export function createStoreContext(options: PluginStoreOptions) { `${row.title} changed how it is shared while this call was being checked, so it was not called. Ask again.`, null, ); + /* + * A ROW IS ONLY REQUIRED WHERE THIS DEPLOYMENT IS THE ONE HOLDING THE GRANT. + * + * CRITERION. Whether a brokered call has to find a `brokered_connections` row first is the + * broker's DECLARED {@link ConnectedAppBroker.grantIsLocal} — never a `provider === "arcade"` + * comparison, never a test of the row's provenance column, never a look at its url. The + * question is "where does the grant live", the field answers exactly that question, and the + * vendor's name is not an answer to it. + * + * REASON. The gate just below and its `none` exemption above once keyed on DIFFERENT things, + * and the exemption failed OPEN: a duplicate row recording `NO_AUTH` at a key app's url + * skipped the per-person gate entirely, and the deployment's own key ran a call for somebody + * who had connected nothing. A vendor's name compared inside a check whose vocabulary is + * about permission is that same shape — two answers to one question with nothing forcing them + * to agree, and a third broker would mean finding every such comparison by hand. A declared + * property is checkable against every adapter, reads the same as the `listNeedsCredential` + * beside it, and a third provider answers it by existing or fails to type-check. + * + * WHY THE ROW IS NOT REQUIRED WHERE THE GRANT IS THE VENDOR'S. Such a broker checks per + * action, on every call, at the vendor. A local row demanding to exist first would be a + * second, weaker copy of that check — and it is the copy that forces a Connect button, which + * forces an arbitrary first consent before anybody knows which action they want. Here the + * call proceeds and the vendor's own typed refusal is the authoritative answer. + * + * ONLY A PRECONDITION IS REMOVED; THE IDENTITY IS UNCHANGED. The id returned is + * `resolved.ref.vendorUserId` — the very value the branch below returns out of the row — + * derived by {@link accountRefFor} from the session's actor and the app's own mode, Personal + * or Shared, exactly as before. The model cannot name an identity, nothing about whose + * account a call runs in changes here, and the Shared case still goes out as the deployment. + * + * AND THE PROPERTY IS ONLY EVER READ ABOUT THAT BROKER'S OWN ROWS, which is not a vendor-name + * comparison sneaking back in — it is the question of WHOSE declaration this is. + * + * CRITERION. A brokered row is governed by the broker it was minted at. Where that is not the + * configured one, no declaration of the configured broker's applies to it, and the local gate + * stands — which refuses, because a row of the other broker's can have no connection row here. + * + * REASON. `access.transport` is the row's provenance (see `accessFor`) and `broker` is whatever + * this deployment is configured with, and the two are not always the same vendor: a deployment + * that has switched broker still holds the other's rows. Read off the active broker alone, the + * waiver crossed over to them — on an Arcade deployment, a left-over Composio app was called + * with no connection row of any kind, exempted by a per-action check at a vendor that has never + * heard of it, on a deployment that cannot connect, check or disconnect it at all. The + * `grantIsLocal` argument is about where THIS broker's grants live; it says nothing about + * somebody else's. + */ + if (broker && !broker.grantIsLocal && access.transport === brokerProvider) + return { vendorUserId: resolved.ref.vendorUserId }; const [connected] = await database .select({ vendorUserId: brokeredConnections.vendorUserId }) .from(brokeredConnections) @@ -1402,7 +1524,7 @@ export function createStoreContext(options: PluginStoreOptions) { if (!existing) return; if (accessFor(existing, null).credential !== "brokered") return; throw new CustomServerRefusedError( - `${serverId} is a Composio app this deployment has enabled, and people may have connected their accounts to it. Remove the app first — which ends those accounts at Composio — and the name is then free.`, + `${serverId} is ${brokerProvider === "arcade" ? "an" : "a"} ${BROKERED_PROFILE[brokerProvider].vendor} app this deployment has enabled, and people may have connected their accounts to it. Remove the app first — which ends those accounts at ${BROKERED_PROFILE[brokerProvider].vendor} — and the name is then free.`, ); } @@ -1439,7 +1561,10 @@ export function createStoreContext(options: PluginStoreOptions) { * with it, so the audience gate decides on and keys its approval by the row that answers rather * than the one that was dialled. Null for every row that is not a brokered app. */ - const toolkit = row.provenance === "composio" ? toolkitOf(row.url) : null; + const toolkit = + row.provenance === brokerProvider + ? toolkitOfFor(brokerProvider, row.url) + : null; const app = toolkit ? await brokeredAppRow(toolkit) : null; const access = accessFor( app @@ -1504,7 +1629,7 @@ export function createStoreContext(options: PluginStoreOptions) { async function brokeredAppRow( toolkit: string, ): Promise { - const url = `composio://${toolkit}`; + const url = `${BROKERED_PROFILE[brokerProvider].scheme}${toolkit}`; return (await brokeredAppRowsAt([url])).get(url) ?? null; } @@ -1572,6 +1697,276 @@ export function createStoreContext(options: PluginStoreOptions) { return schemeKind(await brokeredAppScheme(toolkit)); } + /** + * THE ONE PLACE THAT ASKS THE BROKER FOR AN AUTH PROVIDER, and so the only place that knows how + * many it could not get. {@link connectionSiblings} says what the answers imply; this is the + * question asked of the rows this deployment holds, with its one extra fact: HOW MANY APPS ON + * THE ASKING IDENTITY WENT UNANSWERED. + * + * THE COUNT EXISTS BECAUSE THE RULE IS ASYMMETRIC ON PURPOSE. An app the broker cannot answer for + * is left out rather than guessed at — naming an app that will not be touched trains people to + * dismiss the warning that matters (D26). But under-naming is not free: somebody presses + * Disconnect and loses an app nobody warned them about, and a deployment whose resolver fails + * systematically would do it silently and for ever. So the number is surfaced, an integer and + * never names, for whoever reads the trail. + * + * Counted over the OTHER apps on the asking identity: the asking app's own row is not a sibling + * candidate. If the asking app itself is unanswered, nothing is resolvable and every other app on + * the identity is unanswered with it. + */ + async function resolveSiblings( + input: { + toolkit: string; + account: AccountRef; + }, + /** + * ONE CALL'S MEMO OF `authProviderOf`, PASSED IN BY A CALLER THAT RESOLVES OVER MANY ACCOUNTS. + * + * Resolving an auth provider is a live vendor call with no cache of its own on Arcade + * (`arcade-adapter`'s `authProviderOf` lists the toolkit's tools every time); on Composio it is + * the toolkit name and costs nothing. A caller that walks every PERSON who connected an app — + * {@link removeServer} — would otherwise ask the vendor for the same handful of toolkits once + * per person and again once per app that person holds, which is unbounded in the number of + * people and times out partway through a removal that has already revoked at the vendor. + * + * A toolkit's auth provider cannot change inside one removal, so answering the second ask from + * the first is semantically identical — the same argument the identity pre-filter above makes + * for its `where`. The memo holds the PROMISE, so two resolutions of one toolkit share one + * in-flight call rather than racing into two. + * + * ITS LIFETIME IS ONE CALL AND IT IS THEN DISCARDED. Omitted, every resolution is asked for + * fresh, which is what a single-account caller wants; nothing here is a process-lifetime cache, + * which would be a different design with an invalidation question this one does not have. + */ + memo?: Map>, + ): Promise<{ siblings: string[]; unanswered: number }> { + if (!broker) return { siblings: [], unanswered: 0 }; + const vendor = broker; + const authProviderOf = (toolkit: string): Promise => { + if (!memo) return vendor.authProviderOf(toolkit); + const asked = memo.get(toolkit); + if (asked) return asked; + const asking = vendor.authProviderOf(toolkit); + memo.set(toolkit, asking); + return asking; + }; + const authProvider = await authProviderOf(input.toolkit); + const held = await database + .select({ + app: brokeredConnections.app, + vendorUserId: brokeredConnections.vendorUserId, + }) + .from(brokeredConnections) + .where( + and( + eq(brokeredConnections.provider, brokerProvider), + eq(brokeredConnections.vendorUserId, input.account.vendorUserId), + ), + ); + if (!authProvider) { + const others = new Set( + held.map((row) => row.app).filter((app) => app !== input.toolkit), + ); + return { siblings: [], unanswered: others.size }; + } + const footprints: ConnectionFootprint[] = []; + const unanswered = new Set(); + for (const row of held) { + const rowProvider = await authProviderOf(row.app); + if (rowProvider) footprints.push({ ...row, authProvider: rowProvider }); + else if (row.app !== input.toolkit) unanswered.add(row.app); + } + return { + siblings: connectionSiblings( + { + app: input.toolkit, + vendorUserId: input.account.vendorUserId, + authProvider, + }, + footprints, + ), + unanswered: unanswered.size, + }; + } + + /** + * WHETHER A CONSENT REVOKE AT THE VENDOR REACHES THIS APP AT ALL — the one spelling of rule 1, + * which every judgement below about a KEY app asks rather than comparing a kind itself. + * + * A key is a credential of this deployment's own; no withdrawal at the vendor ends it. So a key + * app is never an app a revoke ENDED (its row stands, and no trail row names an ender for it), + * and never one whose trail row may say a vendor was ASKED to withdraw it. `!== "key"` keeps the + * reading every caller already made: an app whose scheme cannot be read, or that has no account, + * is reported as reached, which is the claim that cannot be too weak (see + * {@link disconnectBrokered}'s roster). + */ + async function consentRevokeReaches(app: string): Promise { + return (await brokeredAppKind(app)) !== "key"; + } + + /** + * WHAT THE TRAIL SAYS WAS ASKED OF THE VENDOR ABOUT THE APP AN ACT WAS ABOUT — the one spelling + * of `vendorRevocationRequested` that is computed rather than constant. + * + * `answered` is the caller's own reading of what the vendor said: {@link disconnectBrokered}'s + * `ended`, {@link removeServer}'s per-account answer, {@link retireConnectionsFor}'s own answer + * or-ed with "a sibling's ask ended it". For a KEY app that reading is not the claim — whatever + * the vendor answered, it did not withdraw a key it never held — so the field is `false`. Three + * writers decided that three ways (round 2, A5c and L5-a): only the first said `false`. + * + * IN TWO STEPS, READ THEN ANSWER: the app's kind is read when this is called and the claim is + * made when the vendor's answer is handed to what it returns. Every writer reads the kind BEFORE + * its revoke goes out — so a failed read leaves the act before anything was asked of the vendor — + * and that order is kept rather than moved behind the revoke for the helper's convenience. + * + * Answers the payload fragment rather than the boolean so that no writer computes the field + * itself: a writer spreads this, and the guard in `sole-definition.test.ts` holds that to one + * home. + */ + async function vendorRevocationClaim( + app: string, + ): Promise<(answered: boolean) => { vendorRevocationRequested: boolean }> { + const reaches = await consentRevokeReaches(app); + return (answered) => ({ vendorRevocationRequested: reaches && answered }); + } + + /** + * WHICH OF A REVOKE'S SIBLINGS THAT REVOKE ENDED — rules 1 and 2 of {@link clearEndedSiblings}, + * as a JUDGEMENT with no write attached, so that a caller who needs the answer without the delete + * asks the same question rather than walking the set itself. + * + * {@link clearEndedSiblings} deletes and files what this answers (and adds rule 3, which is about + * a row and so belongs to the delete). {@link retireConnectionsFor} needs only the answer: it has + * already revoked every app the person holds and deletes them as its own acts, and what it needs + * from the siblings is which of its rows to annotate with `endedWith`. It used to walk the set + * itself with rule 2 and without rule 1, and so filed a KEY app as ended by an OAuth sibling's + * revoke (round 2, A5b) — trail-only, which is why no audit of the rows caught it. + * + * Deduplicated, the asking app excluded, in {@link resolveSiblings}' order. + */ + async function siblingsEndedBy(input: { + siblings: readonly string[]; + /** The app whose revoke this is. Never in the answer — it has its own row. */ + endedWith: string; + /** What that revoke ANSWERED. Rule 2. */ + revoked: boolean; + }): Promise { + if (!input.revoked) return []; + const ended: string[] = []; + for (const app of new Set(input.siblings)) { + if (app === input.endedWith) continue; + if (!(await consentRevokeReaches(app))) continue; + ended.push(app); + } + return ended; + } + + /** + * THE LOCAL ROWS ONE REVOKE'S CASCADE ENDS, AND THE THREE RULES THAT DECIDE WHICH — in ONE place, + * because they were in two and the two disagreed about all three. + * + * WHAT A CASCADE IS. {@link resolveSiblings} answers which other apps share the connection the + * caller's single revoke withdrew; where a connection is keyed `(identity, auth provider)` — + * Arcade — that one ask ended them too, so their rows here would otherwise go on claiming + * accounts the vendor no longer holds. This is the write that ends them, and it is the ONLY + * thing in this file that deletes a row for an app NOBODY ASKED ABOUT. That is why the rules are + * a function rather than a convention: a row deleted here is a grant somebody still holds at the + * vendor and can no longer reach from this deployment, and the cost of getting it wrong is not + * symmetric with the cost of leaving a row standing. + * + * RULE 1 — AN APP THIS DEPLOYMENT HOLDS A KEY FOR IS NOT WHAT THAT REVOKE ENDED, so its row + * stands and the trail says nothing about it. The withdrawal ended an OAuth connection; a key is + * a credential of this deployment's own and no consent revoke at the vendor reaches it. Deleting + * it destroys a credential nothing withdrew and leaves a LIVE account with no local row to reach + * it; recording it claims a vendor ended something it never held — the reading + * {@link disconnectBrokered} writes `vendorRevocationRequested: false` for, there on an act that + * really was about that app. The scheme is read off `mcp_servers`, which this never deletes from. + * + * RULE 2 — ONLY FROM A REVOKE THAT ANSWERED TRUE (`revoked`). `false` means nothing was found to + * withdraw, or the auth provider could not be resolved, and the vendor was not shown to have + * ended ANYTHING; a sibling's row is then left standing rather than claimed gone on the strength + * of an answer nobody got. It is a parameter and not a caller's discipline because a caller's + * discipline is exactly what one of the two callers did not keep. + * + * RULE 3 — ONLY A ROW THAT WAS ACTUALLY HERE GETS A TRAIL ROW (`if (!deleted) continue`). These + * rows exist to explain why an app's connection VANISHED from this deployment's records, and an + * app that had no row here had nothing to explain. A sibling resolved on this identity but held + * by somebody else — {@link resolveSiblings} reads the identity, {@link accountRow} the holder — + * is exactly that case, and it used to get a row saying it had been disconnected. + * + * THE ONLY SPELLING OF THESE RULES. Three acts cascade a revoke onto its siblings — + * {@link disconnectBrokered}, {@link clearWithdrawnAccount} and {@link removeServer} — and all + * three call this. {@link removeServer}'s loop was the oldest spelling and kept only 2 and 3 for + * itself, deleting a KEY sibling's row on a removal; routing it here closed that (round 2, A5a). + * A fourth cascade belongs here too, not beside it. Rules 1 and 2 themselves are + * {@link siblingsEndedBy}'s, which this asks and which {@link retireConnectionsFor} asks for the + * one thing it needs without the delete — the `endedWith` it files — so the judgement about which + * siblings a revoke ended has one home whether or not a row is deleted on it (round 2, K5). + * + * `vendorRevocationRequested` IS TRUE ON EVERY ROW THIS WRITES AND IS NOT A GUESS: rule 2 says a + * revoke answered true, and that ask ended the siblings with the app it named. `false` means "no + * vendor was asked", which is the one thing none of these rows may say. `endedWith` names the app + * that asked — the only thing that tells a reader why a connection they never touched is gone — + * and `unansweredSiblings` qualifies that claim, beside it and nowhere else. + * + * IT ASKS NOTHING OF ANY VENDOR. The caller revoked, before it called this; see each caller. + * + * Answers the apps it actually cleared, which is what {@link clearWithdrawnAccount} returns and + * what a caller needs in order to say what went. + */ + async function clearEndedSiblings(input: { + /** {@link resolveSiblings}' answer for `endedWith`. Deduplicated here; order is its own. */ + siblings: readonly string[]; + account: AccountRef; + /** The app whose revoke this cascade belongs to. Never cleared here — it has its own row. */ + endedWith: string; + /** What that revoke ANSWERED. Rule 2. */ + revoked: boolean; + /** {@link resolveSiblings}' count, an integer and never names. */ + unanswered: number; + by: string; + /** + * The trail's one word for why, from the closed set the writers of this event use. Wider than + * any one caller's own `reason`, so {@link removeServer} passes `mcp_server_removed` through + * the same parameter the other two pass theirs. + */ + reason: BrokeredDisconnectReason; + }): Promise { + // Rules 1 and 2, and the dedupe, are {@link siblingsEndedBy}'s; rule 3 is the delete's. + const ended = await siblingsEndedBy(input); + const cleared: string[] = []; + for (const app of ended) { + // `returning` because whether a row was here is the whole of rule 3, and a delete that + // answered nothing would leave the two cases indistinguishable. + const [deleted] = await database + .delete(brokeredConnections) + .where(accountRow(app, input.account)) + .returning({ app: brokeredConnections.app }); + if (!deleted) continue; + cleared.push(app); + await recordAuditEvent(auditStore, { + eventType: "mcp.account_disconnected", + targetType: "mcp_server", + targetId: app, + payload: { + actor: input.by, + server: app, + // Whose account this was, which is not always who ended it; named as the deployment + // where there is no person behind it. + owner: + input.account.holder === "person" + ? input.account.userId + : "deployment", + reason: input.reason, + vendorRevocationRequested: true, + unansweredSiblings: input.unanswered, + endedWith: input.endedWith, + }, + }); + } + return cleared; + } + return { options, database, @@ -1609,6 +2004,13 @@ export function createStoreContext(options: PluginStoreOptions) { brokeredAppRowsAt, brokeredAppScheme, brokeredAppKind, + brokerProvider, + closeAuthorizationAttempt, + resolveSiblings, + consentRevokeReaches, + vendorRevocationClaim, + siblingsEndedBy, + clearEndedSiblings, }; } diff --git a/server/src/plugins/plugin-store/model.ts b/server/src/plugins/plugin-store/model.ts index 69ef78b10..4702cfe8d 100644 --- a/server/src/plugins/plugin-store/model.ts +++ b/server/src/plugins/plugin-store/model.ts @@ -1,3 +1,4 @@ +import { and, eq, sql } from "drizzle-orm"; import type { ApprovalGate } from "../../approvals/types"; import type { AuditStore } from "../../audit"; import type { ActionPolicy } from "../../computer/policy"; @@ -7,8 +8,14 @@ import type { } from "../../credentials"; import type { Database } from "../../db/client"; import { isQueryFailure, withoutStatement } from "../../db/query-failure"; +import { pendingAuthorizations } from "../../db/schema"; import type { CheckPrivateShare } from "../../proactive/private-share"; -import { type ServerAccess, ServerUnresolvableError } from "../access"; +import { + BROKERED_PROFILE, + type BrokerProvider, + type ServerAccess, + ServerUnresolvableError, +} from "../access"; import type { BrokerConnection, ComposioBroker, @@ -607,6 +614,7 @@ export function storableTools(serverId: string, listed: ListedTool[]) { { serverId: string; name: string; + vendorName: string; description: string; inputSchema: Record; effect: "read" | "write" | null; @@ -617,10 +625,35 @@ export function storableTools(serverId: string, listed: ListedTool[]) { for (const tool of listed) { const name = tool.name.replaceAll(NUL, ""); + /* + * THE GUARD THAT MAKES THE OFFERED NAME OFFERABLE, placed at the one seam every transport's + * listing passes through on its way into the database. + * + * A model tool name may only match `^[a-zA-Z0-9_-]+$`, and `name` is spliced into one by + * {@link toolNameFor}. Nothing used to check: Arcade's dotted `qualified_name` was recorded + * whole and the refusal arrived much later and somewhere else entirely — as a 400 on the model + * request naming `tools[47]`, with no mention of the app, the action or the refresh that + * recorded it. A person reading that has nothing to act on. + * + * SO IT REFUSES HERE, WHERE THE NAME HAS A PROVENANCE. `refreshTools` runs this before its + * transaction and maps a throw to "nothing was refreshed and the actions already recorded are + * kept", so an app that starts publishing an unofferable name keeps working with what it had + * and says what is wrong on its own page. + */ + if (!OFFERABLE_TOOL_NAME.test(name)) { + throw new PluginInvariantError( + `${serverId} published an action named "${name}", which cannot be offered to a model: a tool name may only use letters, digits, underscores and hyphens. Nothing was refreshed and the actions already recorded for this app are kept.`, + ); + } if (byName.has(name)) continue; byName.set(name, { serverId, name, + /* + * The vendor's spelling where the transport drew a distinction, and the same string where it + * did not — which is the whole of what absence means here. See {@link ListedTool.vendorName}. + */ + vendorName: (tool.vendorName ?? name).replaceAll(NUL, ""), /* * Defaulted where the COLUMN has a default, because that is what the previous mapping leaned * on: it passed these two straight through, so a transport handing back undefined got the @@ -715,6 +748,16 @@ export const INVALID_CLIENT = "invalid_client"; */ export type Transaction = Parameters[0]>[0]; +/** + * THE ONLY SHAPE A MODEL TOOL NAME MAY TAKE, as the model API enforces it: `^[a-zA-Z0-9_-]+$`. + * + * Declared here beside {@link toolNameFor}, which is the function that has to satisfy it, and + * applied in {@link storableTools}, which is the one door every transport's listing goes through. + * The prefix and separator this module splices in are themselves made of these characters, so a + * `name` that passes is an offered name that passes. + */ +export const OFFERABLE_TOOL_NAME = /^[a-zA-Z0-9_-]+$/; + /** * A tool name the model can actually call. * @@ -1046,6 +1089,23 @@ export const CLIENT_REREGISTRATION_BACKOFF_MS = 5 * 60_000; export const IDENTITY_ACTION = /(_GET_ME|_PROFILE|_CURRENT_USER|_USER_INFO|_WHOAMI)$/; +/** + * Every broker's id namespace, reserved together. See {@link BROKERED_PROFILE} in `./access` for + * what a profile holds and why it lives there; this is only the list this file reserves off it. + */ +export const BROKERED_ID_PREFIXES = Object.values(BROKERED_PROFILE); + +/** + * Every broker's screen name, reserved together, for the reason {@link BROKERED_ID_PREFIXES} is. + * + * THE KEYS, NOT A SECOND LITERAL LIST. `/admin/plugins/composio` is the app directory's own page and + * `/admin/plugins/arcade` is the Arcade one, and a static route is matched ahead of + * `/admin/plugins/$key` on both — so a server sitting at either id would be listed and then open + * somebody else's page instead of its own. Spelled as its own list, this reservation would be the + * one somebody adds a broker to {@link BROKERED_PROFILE} without adding to. + */ +export const BROKERED_SCREEN_NAMES = Object.entries(BROKERED_PROFILE); + /** What a vendor's token endpoint gave back for a refresh token. */ export type AccessToken = { accessToken: string; @@ -1128,6 +1188,34 @@ export type PluginStoreOptions = { * above — invent a broker to get a store. */ broker?: ComposioBroker; + /** + * Which broker this deployment runs, which is the slice of `brokered_connections` this store + * reads and the word its connection writer stamps on every row it mints. + * + * THE ONE PLACE THE VENDOR IS NAMED. Every read of `brokered_connections` below and the insert in + * {@link createPluginStore}'s `recordBrokeredConnection` used to spell `composio` for themselves — + * eleven comparisons that were each correct while there was one broker and each silently wrong on + * the day there were two. They now all read this. A deployment running Arcade whose store was + * still filtering on `composio` would not fail: it would read an empty slice, write rows nobody + * reads back, and leave the "the other provider holds rows" refusal permanently unfired while the + * offboarding sweep swept the wrong table slice. That is the failure this field exists to make + * impossible to reach by accident. + * + * REQUIRED, UNLIKE `broker` ABOVE, BECAUSE FORGETTING IT HAS NO SYMPTOM. An absent `broker` says + * one true thing — this deployment has not configured one — and every path that needs it raises. + * An absent provider would have had to be guessed, and the only guess available was `composio`: + * an Arcade deployment built by forgetting this field would then read and write the COMPOSIO slice + * of `brokered_connections`, hand its own rows back through a composio filter, and APPEAR TO WORK. + * Spec D3's "the other provider holds rows" refusal would never fire, because nothing would ever + * be filed under the other name, and the offboarding sweep would sweep a slice that is not this + * deployment's. Nothing goes red. There is no error to raise later, so the compiler asks now. + * + * SO THERE IS NO DEFAULT ANYWHERE — not here, not in {@link createPluginStore}, not in a test + * helper. A function that cannot reach the provider takes it as a parameter; a second answer to + * "which provider" is a second thing that can be wrong while agreeing with nothing. `activeProvider` + * in `./broker` decides it from configuration at the one deployment boundary that knows. + */ + brokerProvider: BrokerProvider; /** Where the vendor sends people back; needed to (re)register a dynamic client. */ redirectUri?: string; /** @@ -1137,6 +1225,157 @@ export type PluginStoreOptions = { deploymentId?: string; }; +/** One in-flight Arcade authorization attempt, as the table stores it. */ +export type PendingAuthorization = typeof pendingAuthorizations.$inferSelect; + +/** + * WHY A BROKERED ACCOUNT'S ROW WENT, as the trail spells it, and a closed set rather than free + * text for the reason {@link PluginStore.disconnectBrokered} gives: a reader asking the trail + * WHICH of these happened can be answered only if it is the same word every time. + * + * ONE SET ACROSS EVERY WRITER OF `mcp.account_disconnected`, so that `clearEndedSiblings` — which + * writes for all of them — takes the word rather than re-deciding it. Each writer still narrows + * this to the words IT may use; nothing takes the whole union as its own input. + */ +export type BrokeredDisconnectReason = + /** The person disconnected their own account. */ + | "self" + /** The person was removed from the People screen; {@link PluginStore.retireConnectionsFor}. */ + | "person_removed" + /** An administrator disconnected the deployment's account for a Shared app. */ + | "admin" + /** The app was switched between Personal and Shared, retiring the old mode's accounts. */ + | "mode_switched" + /** A consent's context moved on and the verifier withdrew the retired identity's app. */ + | "context_changed" + /** The app itself was removed; {@link PluginStore.removeServer}. */ + | "mcp_server_removed"; + +/** One app's connection, as far as sibling-finding needs to know it. */ +export type ConnectionFootprint = { + /** The toolkit, spelled as the vendor spells it. Compared exactly, never case-folded. */ + app: string; + /** The identity the connection is held under at the vendor. */ + vendorUserId: string; + /** + * The vendor's own AUTH PROVIDER the connection is held under (`google`), not the broker's name. + * + * NAMED `authProvider` AND NEVER `providerId`, because `provider` in this file means the BROKER — + * `brokered_connections.provider` is read a few lines below this one — and that collision has + * already been paid for once in an audit payload. See {@link ConnectedAppBroker.authProviderOf}, + * which is where this value comes from and which is likewise not the toolkit name. + */ + authProvider: string; +}; + +/** + * The apps that share `of`'s connection, which are the apps sharing BOTH its vendor identity AND + * its AUTH PROVIDER. NEVER THE PROVIDER ALONE (spec D26). + * + * REASON. An Arcade connection is keyed `(user_id, provider_id)`, and this deployment holds MANY + * vendor identities: each person's own, PLUS ONE RANDOM IDENTITY PER SHARED APP, minted by + * `mintDeploymentVendorUserId`. So shared Gmail and shared Slack, both using Google, do NOT share + * a connection: their `user_id`s differ. A computation keyed on `provider_id` alone would warn + * about apps that WILL NOT BE TOUCHED, which trains people to dismiss the warning that matters. + * Silently ending two connections when somebody asked to end one is the failure to avoid. + * + * The auth provider is compared case-insensitively, as the adapter's `connectionsFor` does; the app + * name is not, because Arcade toolkit case is never normalised. The answer never contains `of` + * itself, and is sorted so two callers see the same list. This function ACTS ON NOTHING. + */ +export function connectionSiblings( + of: ConnectionFootprint, + among: readonly ConnectionFootprint[], +): string[] { + const provider = of.authProvider.toLowerCase(); + const found = new Set(); + for (const other of among) { + if (other.app === of.app) continue; + if (other.vendorUserId !== of.vendorUserId) continue; + if (other.authProvider.toLowerCase() !== provider) continue; + found.add(other.app); + } + return [...found].sort(); +} + +/** Raw `execute` rows are snake_case and carry timestamps as whatever the driver decoded. */ +export function pendingAuthorizationFromRow( + row: Record, +): PendingAuthorization { + const when = (v: unknown) => + v === null || v === undefined ? null : new Date(v as string | Date); + return { + actorId: row.actor_id as string, + serverId: row.server_id as string, + action: row.action as string, + holder: row.holder as PendingAuthorization["holder"], + userId: (row.user_id as string | null) ?? null, + vendorUserId: row.vendor_user_id as string, + authId: (row.auth_id as string | null) ?? null, + createdAt: when(row.created_at) as Date, + completedAt: when(row.completed_at), + outcome: (row.outcome as PendingAuthorization["outcome"]) ?? null, + }; +} + +/** + * The instant a caller names an authorization attempt by, as a `Date`, or a refusal naming the + * field. + * + * THE DECLARED TYPE IS `Date` AND THE VALUE IS NOT ALWAYS ONE. `PendingAuthorization.createdAt` is + * typed `Date` and is one while it stays in this process, but an attempt that has been through + * JSON — serialised into a job, a cache or a cross-process hop and parsed back — carries an ISO + * STRING under a `Date` annotation. Handed to drizzle, that string reaches + * `PgTimestamp.mapToDriverValue`, which calls `.toISOString()` on it and raises + * `TypeError: value.toISOString is not a function` from inside the driver: a failure that names + * neither the field nor the caller. An ISO string names the same instant perfectly well, so it is + * accepted; anything that names NO instant is refused HERE, where the message can say what was + * wrong, rather than running as a query that silently matches nothing. + */ +function attemptInstant(createdAt: Date | string): Date { + const instant = + createdAt instanceof Date + ? createdAt + : typeof createdAt === "string" + ? new Date(createdAt) + : new Date(Number.NaN); + if (Number.isNaN(instant.getTime())) { + throw new Error( + `An authorization attempt's created_at must be a Date or an ISO timestamp, not ${JSON.stringify(createdAt) ?? String(createdAt)}.`, + ); + } + return instant; +} + +/** + * The condition that names ONE actor's attempt by the `created_at` a caller holds. + * + * MATCHED AT MILLISECOND PRECISION ON BOTH SIDES, BECAUSE THE TWO SIDES DO NOT CARRY THE SAME ONE. + * `created_at` is a `timestamptz`, which PostgreSQL keeps to the MICROSECOND, and the `Date` the + * driver hands back carries MILLISECONDS. A row stored at `…13.407577` is read back as + * `…13.407Z`, and an exact `=` against that `Date` matches NOTHING — so the mint writes no + * `auth_id`, and per {@link pendingAuthorizations}, "an attempt holding null can never complete": + * a silently dead attempt that waits out its fifteen minutes. + * + * {@link createPluginStore}'s `claimAuthorizationAttempt` writes `date_trunc('milliseconds', now())` + * for exactly this reason, but THAT ONLY HOLDS FOR THE ONE WRITER THAT REMEMBERS. The column's + * default is `now()` at full precision, which is what drizzle's inferred insert type invites any + * other writer — a fixture, a backfill, a future route — to take. Truncating the COLUMN in the + * comparison holds whatever wrote the row, which is why the invariant lives here rather than in + * the schema: it needs no migration and no writer's cooperation. + * + * TRUNCATING CAN NEVER MATCH A DIFFERENT ROW: `actor_id` is the table's PRIMARY KEY, so there is at + * most one attempt per actor and `created_at` is the staleness guard on that one row, never a + * selector among several. It still refuses a value naming an OLDER attempt, which is what stops a + * late discard from deleting the replacement that took the key. + */ +export function attemptNamed(actorId: string, createdAt: Date | string) { + return and( + eq(pendingAuthorizations.actorId, actorId), + sql`date_trunc('milliseconds', ${pendingAuthorizations.createdAt}) = ${attemptInstant(createdAt).toISOString()}::timestamptz`, + ); +} + /** * The literal recorded on the row, which is the scheme a later call must keep using. * diff --git a/server/src/plugins/plugin-store/servers.ts b/server/src/plugins/plugin-store/servers.ts index 661b1d04d..7bc883405 100644 --- a/server/src/plugins/plugin-store/servers.ts +++ b/server/src/plugins/plugin-store/servers.ts @@ -13,7 +13,7 @@ import { mcpTools, pluginGrants, } from "../../db/schema"; -import { accessFor } from "../access"; +import { BROKERED_PROFILE, brokeredProvenance, toolkitOfFor } from "../access"; import { type BrokerConnection, BrokerUnconfiguredError, @@ -28,12 +28,17 @@ import { serverCredentialKind, tokenHeaderFor, } from "../catalogue"; -import { toolkitOf } from "../composio"; import type { ListedTool } from "../mcp"; -import type { AccountMode, AccountRef } from "../shared-accounts"; +import { + type AccountMode, + type AccountRef, + asAccountRef, +} from "../shared-accounts"; import { transportFor } from "../transport"; import type { StoreContext } from "./context"; import { + BROKERED_ID_PREFIXES, + BROKERED_SCREEN_NAMES, CatalogueEntryUnknownError, CustomServerRefusedError, DEPLOYMENT_ACTOR, @@ -64,8 +69,24 @@ export function serverMethods(context: StoreContext) { brokeredAppRow, brokeredAppRowsAt, brokeredAppScheme, + brokerProvider, + resolveSiblings, + vendorRevocationClaim, + clearEndedSiblings, } = context; return { + /** + * The one provider this store's rows belong to, readable by the layer above it. + * + * EXPOSED SO THE ROUTES DO NOT DECIDE IT A SECOND TIME. `routes.ts` used to take the name off + * the broker it was handed and write `?? "composio"` when there was none — which is a second + * answer to the question {@link PluginStoreOptions.brokerProvider} argues must have exactly one. + * The two came apart precisely where it hurt: a deployment with both keys set and + * `OPENBOT_BROKER_PROVIDER` unset is wired with no broker at all, so the routes read every + * `arcade://` row of this store with Composio's parser. Read from here, the parser the routes + * use and the filter this store queries with cannot disagree. + */ + brokerProvider, accountRefFor, /** * Add a server from the catalogue. @@ -227,23 +248,32 @@ export function serverMethods(context: StoreContext) { /* * Nor may it take the name of a screen. `/admin/plugins/composio` is a static route — the app - * directory's own page — and a static route is matched ahead of `/admin/plugins/$key`, so a - * server sitting at this id would be listed and then open somebody else's page instead of its - * own. Brokered servers are `composio-` and no catalogue entry is called this, which - * leaves a hand-typed id as the only way to reach it. + * directory's own page — and `/admin/plugins/arcade` is the Arcade equivalent, and a static + * route is matched ahead of `/admin/plugins/$key`, so a server sitting at either id would be + * listed and then open somebody else's page instead of its own. Brokered servers are + * `-` and no catalogue entry is called either of these, which leaves a + * hand-typed id as the only way to reach them. + * + * BOTH, ON WHICHEVER BROKER THIS DEPLOYMENT RUNS, and derived from + * {@link BROKERED_SCREEN_NAMES} rather than from a literal — the same argument the id-prefix + * loop six lines below makes for its own namespace: the screen is there to be collided with + * whether or not this deployment brokers through it today, and a reservation spelled twice is + * the one that gets added to once. Each refusal still names the id it refused. */ - if (input.id === "composio") { - throw new CustomServerRefusedError( - "composio is the name of this deployment's own Composio screen, so a server added there could never be opened. Choose another.", - ); + for (const [screen, { vendor }] of BROKERED_SCREEN_NAMES) { + if (input.id === screen) { + throw new CustomServerRefusedError( + `${screen} is the name of this deployment's own ${vendor} screen, so a server added there could never be opened. Choose another.`, + ); + } } /* * NOR THE NAMESPACE THE BROKERED ROWS ARE MINTED IN, which is the reservation above one step * further out. * - * CRITERION. No server added by URL may take an id beginning `composio-`, whether or not a row - * is sitting there today. + * CRITERION. No server added by URL may take an id beginning `composio-` or `arcade-`, whether + * or not a row is sitting there today, and on whichever broker this deployment runs. * * REASON. {@link addBrokeredApp} composes its id as `composio-` from the app an * administrator enabled, so that space is already spoken for by a path that writes @@ -262,10 +292,12 @@ export function serverMethods(context: StoreContext) { * and a policy rule are written against, so a row shadowing another path's namespace inherits * rules that were written about something else. */ - if (input.id.startsWith("composio-")) { - throw new CustomServerRefusedError( - `Names beginning composio- belong to the Composio apps this deployment enables, so ${input.id} is not a name a server added by URL can take. Choose another.`, - ); + for (const { idPrefix, vendor } of BROKERED_ID_PREFIXES) { + if (input.id.startsWith(idPrefix)) { + throw new CustomServerRefusedError( + `Names beginning ${idPrefix} belong to the ${vendor} apps this deployment enables, so ${input.id} is not a name a server added by URL can take. Choose another.`, + ); + } } if (!/^[a-z0-9][a-z0-9-]{0,38}[a-z0-9]$/.test(input.id)) { throw new CustomServerRefusedError( @@ -439,10 +471,10 @@ export function serverMethods(context: StoreContext) { * * NO URL IS TAKEN FROM A CALLER, WHICH IS WHY THERE IS NO HOST RULE HERE. `addCustomServer` * guards the address because the address is what an administrator typed and what a credential - * would then be spent at; this one composes `composio://` itself, and a brokered row is - * never dialled at a host at all — the transport reads the app off that url and asks Composio, - * over the deployment's own key. So the only thing left to check about the url is that it says - * what this call meant, and {@link toolkitOf} is what checks it: the slug goes in, the url comes + * would then be spent at; this one composes `://` itself from the store's provider, and a brokered row is + * never dialled at a host at all — the transport reads the app off that url and asks the active + * broker, over the deployment's own key. So the only thing left to check about the url is that it says + * what this call meant, and {@link toolkitOfFor} is what checks it: the slug goes in, the url comes * back out through the very function `accessFor` will read it with, and a slug those two * disagree about is refused rather than stored. A pattern written here instead would be a second * opinion about the shape of an app name, and the reading that decides which app a call runs @@ -481,12 +513,15 @@ export function serverMethods(context: StoreContext) { }): Promise { // Before anything at all. A deployment with no key has no catalogue for this app to have been // chosen from, so there is nothing here to half-do and nothing to say but the setting. - if (!broker) throw new BrokerUnconfiguredError(); + if (!broker) + throw new BrokerUnconfiguredError(brokerProvider, "operator"); - const url = `composio://${input.slug}`; - if (toolkitOf(url) !== input.slug) { + const profile = BROKERED_PROFILE[brokerProvider]; + const url = `${profile.scheme}${input.slug}`; + const rowId = `${profile.idPrefix}${input.slug}`; + if (toolkitOfFor(brokerProvider, url) !== input.slug) { throw new CustomServerRefusedError( - `${input.slug} is not a name a Composio app can have. An app is named in letters, numbers, underscores and hyphens, because that name is read back out of this row's url to decide which app a call is against.`, + `${input.slug} is not a name ${brokerProvider === "arcade" ? "an" : "a"} ${profile.vendor} app can have. An app is named in letters, numbers, underscores and hyphens, because that name is read back out of this row's url to decide which app a call is against.`, ); } @@ -547,14 +582,14 @@ export function serverMethods(context: StoreContext) { await database .insert(mcpServers) .values({ - id: `composio-${input.slug}`, + id: rowId, title: input.title, logo: input.logo ?? null, // The broker, whoever publishes the app behind it. `vendor` is what the first-party rule // is checked against, and Composio is who this deployment is actually talking to. - vendor: "Composio", + vendor: profile.vendor, url, - provenance: "composio", + provenance: brokerProvider, // Nothing for the vault to hold. A brokered call runs as the person asking, on their own // connection at the vendor, which is a `composio_connections` row rather than a secret. credentialId: null, @@ -628,8 +663,8 @@ export function serverMethods(context: StoreContext) { * host somebody typed is answering that rule about a server this deployment no longer * dials. */ - provenance: "composio", - vendor: "Composio", + provenance: brokerProvider, + vendor: profile.vendor, addedBy: input.by, updatedAt: new Date(), /* @@ -679,8 +714,7 @@ export function serverMethods(context: StoreContext) { * insert above and this read disagree about what was stored; it is respelled rather than held * in a binding so that nothing below can take it by mistake. */ - const answering = - (await brokeredAppRow(input.slug))?.id ?? `composio-${input.slug}`; + const answering = (await brokeredAppRow(input.slug))?.id ?? rowId; /** * WHICH ROW EACH ACT OF AN ENABLE NAMES, WRITTEN DOWN BECAUSE NOTHING ELSE CAN SAY IT. @@ -764,41 +798,83 @@ export function serverMethods(context: StoreContext) { .from(brokeredConnections) .where( and( - eq(brokeredConnections.provider, "composio"), + eq(brokeredConnections.provider, brokerProvider), eq(brokeredConnections.app, input.slug), ), ) .limit(1); if (configured !== "standing" && connections.length === 0) { - /* - * MODE PICKED FOR THE PERSON ONLY WHERE THIS REWRITE IS WHAT GIVES THE APP AN ACCOUNT AT - * ALL, AND NEVER WHERE ONE WAS ALREADY CHOSEN. A row enabled `no-auth` has `accountMode` - * null — there was nothing to hold a mode about, see the insert above — and if this same - * re-add is what turns it into a key or consent app, it needs the ordinary default an - * insert would have given it, or every later read that asks "personal or shared" finds - * null and has no answer. An administrator who already chose Shared keeps that choice. - */ - const [current] = await database - .select({ accountMode: mcpServers.accountMode }) - .from(mcpServers) - .where(eq(mcpServers.id, answering)) - .limit(1); - const bumpAccountMode = - schemeKind(recorded) === "none" && - schemeKind(scheme) !== "none" && - (current?.accountMode ?? null) === null; - await database .update(mcpServers) - .set({ - authScheme: scheme, - updatedAt: new Date(), - ...(bumpAccountMode ? { accountMode: "personal" as const } : {}), - }) + .set({ authScheme: scheme, updatedAt: new Date() }) .where(eq(mcpServers.id, answering)); } + /* + * AN APP WITH AN ACCOUNT LEAVES THIS METHOD SAYING WHOSE, ALWAYS — AND THAT IS A SEPARATE + * STATEMENT FROM THE SCHEME ABOVE FOR A REASON. + * + * CRITERION. After `addBrokeredApp` returns, the row that answers for the app either records + * a mode or is an app with no account to hold one about ({@link schemeKind} `none`). There is + * no third state, and in particular no enabled key-or-consent app with a null here. + * + * REASON. The null is not a cosmetic gap: {@link accountFor} refuses a call against such a + * row as `ambiguous` — "does not say whether it is reached through each person's account or a + * shared one, so it was not called" — so an app in that state is enabled, listed, connectable + * and dead. THREE THINGS HAD TO BE TRUE AT ONCE FOR IT TO HAPPEN AND ALL THREE WERE. The + * INSERT above settles the column, but this method's second branch is the upsert's CONFLICT + * arm, which writes the url and the provenance — it CONVERTS a row that was not brokered + * into one that is — and never wrote this column at all. The guard that stood here then asked + * `schemeKind(recorded) === "none"`, which is the question "was this a no-auth app a moment + * ago"; `recorded` is {@link brokeredAppScheme}, and a row that was not brokered a moment ago + * answers `null`, which is `unreadable` rather than `none`. And the whole block was gated on + * `configured !== "standing"`, so the one obvious remedy — press Add again — reaches it only + * on the single press that created the config and never afterwards. An administrator + * converting a hand-added or restored row got an app that refused every call, and nothing + * they could press repaired it: the Plugins page offers "Make shared" for a null mode (it + * reads any non-`shared` value as Personal) and no way to say Personal at all. + * + * SO THE QUESTION ASKED HERE IS THE ONE THE REFUSAL ASKS, and nothing else: does the row + * answering for this app have an account to hold, and does it fail to say whose. The scheme + * is re-read rather than taken from `scheme` because the branch above may or may not have + * written it, and what matters is what now STANDS on the answering row — including the + * `unreadable` null a converted row carries, which {@link accountFor} treats as having an + * account and which is therefore exactly as dead without a mode as a recorded `OAUTH2`. + * + * `personal` IS THE FILL, which is the insert's own default and the conservative one: it + * reaches each asking person's own account. `shared` would hand everybody one account nobody + * chose to share. + * + * AND NEVER OVER A MODE THAT IS THERE. The `IS NULL` lives in the WHERE rather than in a + * read-then-write, so an administrator's Shared choice cannot be lost to this statement, nor + * to a switch racing it. + * + * ON THE ANSWERING ROW, WHICH IS WHY THE CONFLICT ARM STILL DOES NOT WRITE THE COLUMN. Every + * reader of a brokered app's mode — {@link brokeredAppRowsAt} and so `serverAddress`, the + * listing, the call gate — resolves it off the row that answers for the url, which is not + * always the row the upsert keyed on. A fill in the conflict arm would settle the minted row + * and leave the one that is actually read still null. + * + * ROWS ALREADY STUCK IN THE NULL STATE ARE NOT REACHED FROM HERE AT ALL, because an enabled + * app cannot be re-added without first being removed. They are repaired by + * `0059_settle_brokered_account_mode`, which is the same decision written once against the + * table; see `tests/brokered-account-mode-backfill.integration.test.ts`. + */ + const [settled] = await database + .select({ authScheme: mcpServers.authScheme }) + .from(mcpServers) + .where(eq(mcpServers.id, answering)) + .limit(1); + if (schemeKind(settled?.authScheme ?? null) !== "none") { + await database + .update(mcpServers) + .set({ accountMode: "personal", updatedAt: new Date() }) + .where( + and(eq(mcpServers.id, answering), isNull(mcpServers.accountMode)), + ); + } + await recordAuditEvent(auditStore, { eventType: "configuration.changed", targetType: "mcp_server", @@ -818,7 +894,7 @@ export function serverMethods(context: StoreContext) { // Named for the same reason the custom path names its own: "who enabled an app whose // actions nobody reviewed" is a question somebody will ask, and the answer should not // require knowing how ids were spelled in a past build. - provenance: "composio", + provenance: brokerProvider, }, }); @@ -979,7 +1055,9 @@ export function serverMethods(context: StoreContext) { * KEYED ON THE APP THE URL NAMES, exactly as `connectionTokenFor` keys the gate. `row.id` is a * display key and nothing holds it equal to the slug in the url, so a delete by id would clear * some other app's connections, or none, for the very row shape that gate already refuses to - * trust. `accessFor` is asked rather than the url parsed here, so this cannot drift from it. + * trust. The slug is read with {@link toolkitOfFor} — the one per-provider parser `accessFor` + * itself reads it with — so this cannot drift from what the gate resolves; see the comment on + * `rowProvider` below for why the PROVIDER is read beside it rather than the slug alone. * * ASKED WITH NO ENTRY, deliberately, and that is not the entry-wins order being dodged. An * entry can only ever SUPPRESS this answer — `accessFor` returns a null toolkit for every row @@ -1017,9 +1095,52 @@ export function serverMethods(context: StoreContext) { * deployment holds at Composio, not an account — while a live account whose config has * already been deleted is access that nothing left here can end. */ - const toolkit = existing ? accessFor(existing, null).toolkit : null; - - if (toolkit) { + /* + * AND ALL OF IT IS ABOUT THE BROKER THE ROW WAS MINTED AT, which is not always the one this + * deployment is configured with. + * + * CRITERION. One removal names ONE vendor. The app slug, the connection rows it clears and + * the account it ends are all that row's own broker's, and a vendor is asked only where it is + * the one this deployment can reach. + * + * REASON. These three were read three different ways in one operation: the slug off the ROW's + * provenance (through `accessFor`, which parses the url with the parser belonging to whatever + * that column says), the connection rows off the CONFIGURED `brokerProvider`, and the + * revocation off the ACTIVE broker. A deployment that has switched broker — or a restore, or a + * hand edit — holds rows whose provenance is the other vendor, and for one of those the three + * disagreed: a non-null FOREIGN slug went to `revoke` and `deleteAuthConfig` at the wrong + * vendor, naming one of its apps by a name that means something else there, while the deletes + * beneath matched no row at all. The removal then reported the connector gone, with every + * local consent row still standing and the right vendor never asked. + * + * SO THE ROW'S PROVENANCE DECIDES WHAT IS CLEARED, AND THE CONFIGURED PROVIDER DECIDES ONLY + * WHETHER A VENDOR IS ASKED. The local half always runs: the criterion two comments up — + * removing an app leaves nobody holding brokered access to it — is about this deployment's own + * gate, and it holds whichever broker minted the row. The vendor half is skipped where the + * row's broker is not the configured one, because there is no client for it here and no + * credential to reach it with; `vendorRevocationRequested` then says `false` on every trail + * row, which is exactly what that field is for and the same answer a deployment with no broker + * at all gets. An account left standing at a vendor this deployment can no longer reach is not + * a thing a removal can end, and saying so is better than asking the wrong vendor to. + * + * The parse is {@link toolkitOfFor} with the ROW's provider rather than `accessFor`, because + * what this needs is the pair — which broker, and which app at it — and `accessFor` answers + * only the second. It is the same answer for the same rows: `accessFor` reads the slug with + * the very same per-provider parser, under the same brokered-provenance test, and is asked + * with no entry here for the reason the comment above gives. + */ + const rowProvider = + existing && brokeredProvenance(existing.provenance) + ? existing.provenance + : null; + const toolkit = + existing && rowProvider + ? toolkitOfFor(rowProvider, existing.url) + : null; + /** The broker to ask, which is none at all where the row is the other vendor's. */ + const rowBroker = rowProvider === brokerProvider ? broker : null; + + if (rowProvider && toolkit) { /* * Read before anything is deleted, because the revokes below need the people and the rows * are where the people are. Sorted, so two removals of the same app revoke in the same @@ -1034,7 +1155,8 @@ export function serverMethods(context: StoreContext) { .from(brokeredConnections) .where( and( - eq(brokeredConnections.provider, "composio"), + // The row's own broker, not the configured one: see the comment above `rowProvider`. + eq(brokeredConnections.provider, rowProvider), eq(brokeredConnections.app, toolkit), ), ) @@ -1049,20 +1171,32 @@ export function serverMethods(context: StoreContext) { * which may still be standing after a switch back that has not retired it yet. Each is * revoked as the account its row says it is, under the vendor id the row was filed under, * so the deployment's account is asked for as the deployment's and never as whoever - * pressed "remove". A person row always carries its user id (the table's holder check), - * so the fallback to the deployment form below is the shape a corrupt row would need, not - * a reading anything here relies on. + * pressed "remove". + * + * READ THROUGH {@link asAccountRef}, AND A ROW THAT NAMES NO ACCOUNT STOPS THE REMOVAL + * BEFORE ANYTHING IS ASKED OR DELETED. This was a ternary whose else-branch absorbed every + * pair it did not recognise into `{ holder: "deployment" }`, and the two readings below — + * the revoke and the trail's `owner` — each repeated it. `brokered_connections_holder_check` + * makes `person` with a NULL user id unwritable, which is exactly why this is a refusal + * rather than a coercion: a state the database says cannot exist, absorbed into the other + * holder, is a withdrawal aimed at the DEPLOYMENT's account over a person's row. The + * EMPTY STRING is not hypothetical — `IS NOT NULL` does not stop `''` — and the old + * reading's `!== null` let it through as a person ref under nobody's id, which reached + * `rowBroker.revoke` and was filed as an `owner` of `""`. + * + * RESOLVED FOR THE WHOLE SET UP FRONT, so the throw lands before the first revoke rather + * than part-way through one: a removal that had already withdrawn two accounts at the + * vendor and then threw would leave their rows standing and no trail for either. */ - const accountOf = ( - connection: (typeof connected)[number], - ): AccountRef => - connection.holder === "person" && connection.userId !== null - ? { - holder: "person", - userId: connection.userId, - vendorUserId: connection.vendorUserId, - } - : { holder: "deployment", vendorUserId: connection.vendorUserId }; + const accounts = connected.map((connection): AccountRef => { + const account = asAccountRef(connection); + if (!account) { + throw new PluginInvariantError( + `${toolkit} holds a connection row whose holder and user id name no account, so the accounts standing for it cannot be ended.`, + ); + } + return account; + }); /* * What the broker was actually asked for each of them, kept so the trail below records the @@ -1070,25 +1204,62 @@ export function serverMethods(context: StoreContext) { * key has since been unset can still remove the app, and it could not have been calling it * either way — but nothing was asked of Composio and the row must not claim otherwise. */ - const vendorRevocationRequested: boolean[] = []; - for (const connection of connected) { - vendorRevocationRequested.push( - broker - ? await broker.revoke({ account: accountOf(connection), toolkit }) - : false, + const revokeAnswers: boolean[] = []; + /* + * What the trail may CLAIM from those answers about this app, read before anything is + * revoked, as {@link disconnectBrokered} reads its own; see {@link vendorRevocationClaim}. + */ + const claim = await vendorRevocationClaim(toolkit); + /* + * THE APPS EACH ACCOUNT'S REVOCATION ENDS BESIDES THIS ONE, read BEFORE anything is revoked + * and through {@link resolveSiblings}, the one place that answers it. Where a connection is + * keyed `(identity, auth provider)` — Arcade — withdrawing it ends every app sharing it, so a + * local row left for one of them claims an account the vendor no longer holds. On Composio the + * set is empty by construction and nothing below differs from what this method always did. + */ + const endedBesides: { siblings: string[]; unanswered: number }[] = []; + /* + * ONE AUTH-PROVIDER RESOLUTION PER TOOLKIT FOR THE WHOLE REMOVAL, not one per person. + * + * `connected` holds a row per PERSON who connected this app, and each `resolveSiblings` + * above resolves the asked toolkit plus every app that person holds. Unmemoized that is a + * live vendor call per (person × app) on Arcade — a removal on a deployment with two + * hundred people holding five apps each is over a thousand serial calls inside one admin + * request, which times out partway and leaves accounts revoked at the vendor with every + * local row still standing. Memoized, the bound is the number of DISTINCT TOOLKITS across + * those rows, whatever the number of people. + * + * The memo lives exactly as long as this removal and is dropped with it; see + * {@link resolveSiblings} for why one call's worth is semantically free. + */ + const authProviders = new Map>(); + for (const account of accounts) { + /* + * ASKED OF `rowBroker` AND NOT OF `broker`, both here and at the revoke below. + * {@link resolveSiblings} resolves against the CONFIGURED provider's rows and the active + * broker's `authProviderOf`, so asking it about a foreign row's app would be the same + * wrong-vendor question the revoke was asking. No broker for this row means nothing was + * asked, which is the answer the empty set and the `false` beside it already carry. + */ + endedBesides.push( + rowBroker + ? await resolveSiblings({ toolkit, account }, authProviders) + : { siblings: [], unanswered: 0 }, + ); + revokeAnswers.push( + rowBroker ? await rowBroker.revoke({ account, toolkit }) : false, ); } - await database - .delete(brokeredConnections) - .where( - and( - eq(brokeredConnections.provider, "composio"), - eq(brokeredConnections.app, toolkit), - ), - ); + await database.delete(brokeredConnections).where( + and( + // The row's own broker, as the read above. + eq(brokeredConnections.provider, rowProvider), + eq(brokeredConnections.app, toolkit), + ), + ); - for (const [index, connection] of connected.entries()) { + for (const [index, account] of accounts.entries()) { await recordAuditEvent(auditStore, { eventType: "mcp.account_disconnected", targetType: "mcp_server", @@ -1117,11 +1288,11 @@ export function serverMethods(context: StoreContext) { server: toolkit, // Whose account this was, by the rule {@link disconnectBrokered} names it by: a // person's own under their id, the deployment's own as the deployment, never as - // the administrator who removed the app. + // the administrator who removed the app. Taken off the SAME `AccountRef` the revoke + // above was asked with — read once, by `asAccountRef` — so the trail cannot name a + // holder the withdrawal did not use. owner: - connection.holder === "person" && connection.userId !== null - ? connection.userId - : "deployment", + account.holder === "person" ? account.userId : "deployment", // The same three-way distinction the vault loop above draws, and the same answer: an // administrator took the whole app away and the person did nothing. reason: "mcp_server_removed", @@ -1134,16 +1305,57 @@ export function serverMethods(context: StoreContext) { * outlives it somewhere else, so a constant here would be worse than none. It says * "requested" because that is the strongest thing the vendor's answer supports: * the upstream withdrawal runs as a background job nothing here can poll. + * + * AND NEVER FOR A KEY: the claim is {@link vendorRevocationClaim}'s, the one + * {@link disconnectBrokered} and {@link retireConnectionsFor} make, and for a key app + * it is `false` whatever the vendor answered. This row used to pass the raw answer + * through for a key (round 2, A5c). */ - vendorRevocationRequested: - vendorRevocationRequested[index] ?? false, + ...claim(revokeAnswers[index] ?? false), }, }); } + /* + * THE SIBLINGS THE VENDOR ENDED WITH THIS APP, by the three rules written down once in + * {@link clearEndedSiblings} — the same call {@link disconnectBrokered} and + * {@link clearWithdrawnAccount} make. This loop used to spell rules 2 and 3 itself and so + * missed rule 1: a KEY sibling's row was deleted on the strength of an OAuth revoke that + * never ended it, leaving a live account at the vendor with no local row to reach it. + * + * WHAT DIFFERS FROM THOSE CALLERS IS ONLY THE ASKED APP, and it is handled above rather + * than here: a removal ends EVERY holder's row for `toolkit` in one delete keyed on the + * ROW's provider, where a disconnect ends one account's. So `endedWith` is `toolkit`, whose + * rows are already gone, and the helper never clears it. `revoked` is the vendor's raw + * answer per account, as `disconnectBrokered` passes its own `ended`. + * + * It sits after the revokes above for the same reason the asked app's rows do: an exception + * from any of them left every row standing. AND IT CAN CLEAR ONLY THE CONFIGURED PROVIDER'S + * OWN ROWS, which is what keeps the helper's `accountRow` delete — keyed on `brokerProvider` + * — about the same broker as the siblings it deletes: `revoked` true requires `rowBroker`, + * and there is no `rowBroker` for a row the other broker minted. + */ + for (const [index, account] of accounts.entries()) { + const { siblings, unanswered } = endedBesides[index] ?? { + siblings: [], + unanswered: 0, + }; + await clearEndedSiblings({ + siblings, + account, + endedWith: toolkit, + revoked: revokeAnswers[index] ?? false, + unanswered, + by, + reason: "mcp_server_removed", + }); + } + // Last of all, for the reason above, and skipped entirely on a deployment with no - // broker to have made one. - if (broker) await broker.deleteAuthConfig(toolkit); + // broker to have made one — or, for a row of the other broker's, no broker of ITS that + // this deployment can reach. Nothing here holds an auth config at a vendor it is not + // configured for, and this slug is not a name that vendor's apps go by. + if (rowBroker) await rowBroker.deleteAuthConfig(toolkit); } const released = await database.transaction(async (transaction) => { @@ -1662,7 +1874,9 @@ export function serverMethods(context: StoreContext) { * ONE EXTRA READ FOR THE WHOLE LIST, and none where the deployment has enabled no apps. */ const brokeredApps = await brokeredAppRowsAt( - rows.filter((row) => toolkitOf(row.url) !== null).map((row) => row.url), + rows + .filter((row) => toolkitOfFor(brokerProvider, row.url) !== null) + .map((row) => row.url), ); /* @@ -1677,7 +1891,7 @@ export function serverMethods(context: StoreContext) { .from(brokeredConnections) .where( and( - eq(brokeredConnections.provider, "composio"), + eq(brokeredConnections.provider, brokerProvider), eq(brokeredConnections.holder, "deployment"), ), ) @@ -1686,7 +1900,7 @@ export function serverMethods(context: StoreContext) { return rows.map((row) => { const entry = catalogueEntry(row.id); - const toolkit = toolkitOf(row.url); + const toolkit = toolkitOfFor(brokerProvider, row.url); return { id: row.id, title: row.title, @@ -1809,7 +2023,7 @@ export function serverMethods(context: StoreContext) { .where(eq(mcpServers.id, serverId)) .limit(1); if (!row) return undefined; - const toolkit = toolkitOf(row.url); + const toolkit = toolkitOfFor(brokerProvider, row.url); if (!toolkit) return { ...row, accountMode: null }; const app = await brokeredAppRow(toolkit); return { @@ -1840,7 +2054,20 @@ export function serverMethods(context: StoreContext) { return rows.map((row) => row.url); }, - /** Every account any holder has on a brokered app, as the broker would be asked to end it. */ + /** + * Every account any holder has on a brokered app, as the broker would be asked to end it. + * + * READ THROUGH {@link asAccountRef}, AND A ROW THAT NAMES NO ACCOUNT STOPS THE READ. Every + * account handed back here is passed straight to {@link disconnectBrokered} by the mode + * switch, so what is minted here is what a revoke is aimed at and what the trail records. The + * reading this replaces was `userId: row.userId ?? ""`, the quiet direction of the same + * coercion `asAccountRef` exists to refuse: a person row carrying no user id came out as a + * person ref belonging to NOBODY and was withdrawn under an owner of `""`. `''` is the pair + * that is actually reachable — `brokered_connections_holder_check` tests `IS NOT NULL`, which + * `''` satisfies — and `null` is unwritable, which is why both are a refusal rather than a + * default. The `null` answer below still means only "not a brokered app at this broker"; + * a row that cannot be read is this deployment contradicting its own CHECK, and says so. + */ async accountsOn( serverId: string, ): Promise<{ toolkit: string; accounts: AccountRef[] } | null> { @@ -1849,7 +2076,7 @@ export function serverMethods(context: StoreContext) { .from(mcpServers) .where(eq(mcpServers.id, serverId)) .limit(1); - const toolkit = row ? toolkitOf(row.url) : null; + const toolkit = row ? toolkitOfFor(brokerProvider, row.url) : null; if (!toolkit) return null; const held = await database .select({ @@ -1860,22 +2087,21 @@ export function serverMethods(context: StoreContext) { .from(brokeredConnections) .where( and( - eq(brokeredConnections.provider, "composio"), + eq(brokeredConnections.provider, brokerProvider), eq(brokeredConnections.app, toolkit), ), ); return { toolkit, - accounts: held.map( - (row): AccountRef => - row.holder === "person" - ? { - holder: "person", - userId: row.userId ?? "", - vendorUserId: row.vendorUserId, - } - : { holder: "deployment", vendorUserId: row.vendorUserId }, - ), + accounts: held.map((row): AccountRef => { + const account = asAccountRef(row); + if (!account) { + throw new PluginInvariantError( + `${toolkit} holds a connection row whose holder and user id name no account, so the accounts standing for it cannot be listed.`, + ); + } + return account; + }), }; }, @@ -1898,7 +2124,9 @@ export function serverMethods(context: StoreContext) { .from(mcpServers) .where(eq(mcpServers.id, serverId)) .limit(1); - const toolkit = dialled ? toolkitOf(dialled.url) : null; + const toolkit = dialled + ? toolkitOfFor(brokerProvider, dialled.url) + : null; const app = toolkit ? await brokeredAppRow(toolkit) : null; await database .update(mcpServers) diff --git a/server/src/plugins/plugin-store/skills.ts b/server/src/plugins/plugin-store/skills.ts index 39ca3dec5..6fae1ce94 100644 --- a/server/src/plugins/plugin-store/skills.ts +++ b/server/src/plugins/plugin-store/skills.ts @@ -4,6 +4,7 @@ import { agentProfiles, agents, mcpServers, + mcpTools, pluginGrants, skills, skillTools, @@ -126,6 +127,41 @@ export function skillMethods(context: StoreContext) { return row !== undefined; }, + /** + * Whether this server publishes an action named EXACTLY this. + * + * One indexed read on `mcp_tools`, and deliberately not `listServers`, which materialises every + * tool and every grant in the deployment to answer. The comparison is `=` on the stored text and + * so CASE-SENSITIVE: Arcade names are dotted and case-sensitive and are never normalized, and + * `Gmail.SendEmail` is not `gmail.sendemail`. + * + * ASKED OF `vendor_name`, WHICH IS THE NAME THE QUESTION IS ABOUT. Every caller of this reaches + * it holding an action out of the per-action authorization flow, and that flow speaks the + * vendor's spelling from end to end: `grantsFor` lists what Arcade reports, the Authorize button + * sends that back, the attempt row stores it, `?action=` carries it home and `authorize({ + * action })` is refused by the vendor under any other spelling. Asking `name` — this + * deployment's own identifier, which for Arcade is the qualified name with its toolkit removed — + * would make this gate answer false for every action that exists, and `/servers/:id/authorize` + * would refuse the whole flow with "does not publish an action by that name". + * + * The two columns hold the same string for every other transport, so no other provider's gate + * moves. See {@link mcpTools.vendorName}. + */ + async serverPublishesAction( + serverId: string, + action: string, + ): Promise { + if (!serverId || !action) return false; + const [row] = await database + .select({ name: mcpTools.vendorName }) + .from(mcpTools) + .where( + and(eq(mcpTools.serverId, serverId), eq(mcpTools.vendorName, action)), + ) + .limit(1); + return row !== undefined; + }, + async agentOwner(agentId: string): Promise { const [row] = await database .select({ ownerUserId: agentProfiles.ownerUserId }) @@ -186,12 +222,26 @@ export function skillMethods(context: StoreContext) { }) // Editing keeps the owner it already had. Whose a skill is, is not something a re-save // should quietly change, and the route has already checked this person may edit it. + // `installed_by` is left alone too: it records who first installed it, not who last saved. .onConflictDoUpdate({ target: skills.slug, set: { title: input.title, summary: input.summary, instructions: input.instructions, + /* + * WHERE THE TEXT NOW COMES FROM, WRITTEN BESIDE THE TEXT. + * + * CRITERION. A save through here leaves `origin` saying what it says on an insert. + * + * REASON. `origin = 'catalogue'` is the condition the package seed (`tenant-package.ts`, + * `setWhere`) overwrites a skill on at every boot. Leaving it standing after somebody + * edited a shipped skill here kept the row eligible, so the next boot silently replaced + * their edit with the package's text — the exact outcome that seed's own comment says + * it exists to prevent ("rather than the package silently replacing something somebody + * wrote"). + */ + origin: input.origin ?? "yours", updatedAt: new Date(), }, }); diff --git a/server/src/plugins/provider-wiring.ts b/server/src/plugins/provider-wiring.ts new file mode 100644 index 000000000..0da576033 --- /dev/null +++ b/server/src/plugins/provider-wiring.ts @@ -0,0 +1,186 @@ +import type { ArcadeActions } from "./arcade"; +import type { ComposioActions } from "./composio"; +import { + providerDecision, + type ConnectedAppBroker, + type ProviderDecision, +} from "./broker"; +import { BROKERED_PROFILE, type BrokerProvider } from "./access"; + +/** + * The entrypoint's provider decision, with the vendor constructors passed in so this file imports + * no vendor package and a test can answer without booting the server or making a request. + */ +type ClientFactory = (apiKey: string) => { + actions: Actions; + broker: ConnectedAppBroker; +}; + +export type ProviderWiring = { + /** The one active provider, or `null` for a deployment that legitimately has no broker. */ + provider: BrokerProvider | null; + /** The one broker handed to the store and the routes; `null` exactly when `provider` is. */ + broker: ConnectedAppBroker | null; + /** Both transport seams, always both: the one that is not active is explicitly `null`. */ + install: { composio: ComposioActions | null; arcade: ArcadeActions | null }; +}; + +/** + * Chooses ONE provider from configuration and builds only that provider's client. + * + * {@link providerDecision} answers one of four kinds, and this function has exactly one outcome for + * each, which is the point: the three causes of "no provider" were a single `null` before, and + * every caller that then wrote `?? "composio"` turned the one cause that can hold Arcade rows into + * "Composio is active". + * + * `active` wires that provider. `unconfigured` — no key at all — is the ONLY one wired to nothing: + * nobody configured a broker, so having none is the answer the configuration asked for. + * + * `misnamed` AND `ambiguous` ARE REFUSED RATHER THAN DEGRADED. A named provider whose key is unset + * or blank is an operator typo. Both keys set with nothing named is an operator half-way through a + * sunset who has not said which vendor is live — not a state anybody wants on purpose, because the + * deployment comes up holding two vendor keys and brokering nothing, so every brokered feature is + * dead. Returning null wiring for either would be a failure nobody is told about at boot: the + * symptom surfaces much later and far away, as features that simply do not work, and sends an + * operator looking for a broken vendor instead of at their own environment. Both are refused here, + * naming the variables and never a value. + * + * BOTH-KEYS IS COUNTED WITH `credential`, inside {@link providerDecision}, not with + * `!== undefined`. A deployment holding two BLANK keys has configured no vendor at all, and must be + * told that rather than that both of its vendors are set. + * + * NO BRANCH BELOW REACHES NULL WIRING BY FALLING THROUGH. The one null wiring is returned from the + * branch that means it, and a selected provider whose key is somehow absent throws rather than + * quietly becoming the same thing — see the invariant below. + */ +export function selectProviderWiring( + c: { + composioApiKey?: string; + arcadeApiKey?: string; + brokerProvider?: BrokerProvider; + }, + create: { + composio: ClientFactory; + arcade: ClientFactory; + }, +): ProviderWiring { + const decision = providerDecision(c); + if (decision.kind === "misnamed") { + const keyName = BROKERED_PROFILE[decision.named].envVar; + throw new Error( + `OPENBOT_BROKER_PROVIDER=${decision.named} names a provider whose ${keyName} is not set to a key. Set ${keyName} to this deployment's key, or change or unset OPENBOT_BROKER_PROVIDER.`, + ); + } + if (decision.kind === "ambiguous") { + throw new Error( + "COMPOSIO_API_KEY and ARCADE_API_KEY are both set and OPENBOT_BROKER_PROVIDER is unset, so no provider is active and nothing brokered would work. Set OPENBOT_BROKER_PROVIDER to composio or arcade to say which vendor is live, or unset the key of the vendor this deployment is not using.", + ); + } + if (decision.kind === "unconfigured") { + // Neither key set: a deployment that asked for no broker, and gets exactly that. + return { + provider: null, + broker: null, + install: { composio: null, arcade: null }, + }; + } + const provider = decision.provider; + if (provider === "arcade") { + const client = create.arcade( + requiredKey(provider, c.arcadeApiKey, "ARCADE_API_KEY"), + ); + return { + provider, + broker: client.broker, + install: { composio: null, arcade: client.actions }, + }; + } + const client = create.composio( + requiredKey(provider, c.composioApiKey, "COMPOSIO_API_KEY"), + ); + return { + provider, + broker: client.broker, + install: { composio: client.actions, arcade: null }, + }; +} + +/** + * The key a selected provider must have, demanded rather than tested. + * + * {@link providerDecision} selects a provider only from a key it has seen, so this cannot fire today. + * It is written as a demand because of what the alternative WAS: the two branches above each + * carried `&& c.ApiKey !== undefined`, which made a selected provider with no key fall + * through to null wiring — the broker silently unwired, by the very code whose job is to wire it. + * A narrowing that doubles as a silent exit is the shape this finding is about, so the narrowing is + * kept and the exit is removed: if the two ever disagree, the deployment says so at boot. + */ +function requiredKey( + provider: BrokerProvider, + apiKey: string | undefined, + keyName: string, +): string { + if (apiKey !== undefined) return apiKey; + throw new Error( + `${provider} was selected as the broker but ${keyName} is not set. This is a bug in provider selection, not a configuration error; no broker was wired.`, + ); +} + +/** + * WHICH SLICE of `brokered_connections` this deployment's stores read and write, which is a + * different question from which broker is active, and has an answer where that one has none. + * + * CONFIGURATION FIRST, THEN THE ROWS, AND NEVER A VENDOR PICKED OUT OF THE AIR. An active provider + * is the answer. Where configuration names none — a broker key withdrawn after rows were made — + * the rows this deployment actually holds name it instead. That is the whole fix: `?? "composio"` + * answered "Composio" for a deployment whose every connection is an Arcade one, so those rows were + * filtered out of every read, parsed with the wrong parser, and the live accounts behind them could + * be neither seen nor revoked. Asking the rows cannot be wrong about them, because they are what is + * being named. + * + * AMBIGUOUS CONFIGURATION NEVER REACHES HERE AT BOOT. {@link selectProviderWiring} refuses both + * keys set with nothing named before any store is built, so the `ambiguous` arm below is reachable + * only by a direct caller (a test). What DOES reach here is `unconfigured` — no key at all — where + * rows can still outlive a withdrawn key and must be read as their own provider's. + * + * ROWS AT BOTH VENDORS WITH NOTHING ACTIVE IS REFUSED, which is {@link assertActivatable}'s refusal + * from the other side: that one stops a deployment activating one provider while the other holds + * rows, and this one stops a deployment reading one vendor's rows as the other's while NOTHING is + * active. Both say the same thing to an operator — name a provider, and end the other's connections + * through its own sunset flow. + * + * AND NO ROWS AT ALL NAMES AN EMPTY SLICE. A `BrokerProvider` has to be spelled, and with no row of + * either vendor there is no row to misfile: every `eq(provider, …)` selects nothing whichever name + * is used, and no row can appear while this holds, because writing one needs a live broker and + * there is none. The name is a label on an empty set, not a claim that Composio is active — what + * answers that is `providerWiring.broker`, which is `null` here. + */ +export function storedProvider( + decision: ProviderDecision, + rowOwners: BrokerProvider[], +): BrokerProvider { + if (decision.kind === "active") return decision.provider; + if (decision.kind === "misnamed") { + // Unreachable: `selectProviderWiring` stops the server on this before any store is built. + throw new Error( + `OPENBOT_BROKER_PROVIDER=${decision.named} names a provider whose ${BROKERED_PROFILE[decision.named].envVar} is not set.`, + ); + } + const owners = [...new Set(rowOwners)]; + if (owners.length > 1) { + const counted = owners + .map((owner) => BROKERED_PROFILE[owner].vendor) + .join(" and "); + throw new Error( + `This deployment holds brokered connections at ${counted}, and nothing names which provider is active: ${ + decision.kind === "ambiguous" + ? `${decision.configured.map((p) => BROKERED_PROFILE[p].envVar).join(" and ")} are both set and OPENBOT_BROKER_PROVIDER is unset` + : "no broker API key is set" + }. Set OPENBOT_BROKER_PROVIDER to the provider those connections are to be read as, and end the other provider's connections through its own sunset flow.`, + ); + } + const owner = owners[0]; + if (owner !== undefined) return owner; + // No rows of either vendor. See the last paragraph above: this labels an empty set. + return "composio"; +} diff --git a/server/src/plugins/route-groups/composio-apps.ts b/server/src/plugins/route-groups/composio-apps.ts index 5c23a242b..ca7c4ead9 100644 --- a/server/src/plugins/route-groups/composio-apps.ts +++ b/server/src/plugins/route-groups/composio-apps.ts @@ -1,11 +1,12 @@ import { requireAdmin } from "../../auth/guards"; import { reasonWithoutStatement } from "../../db/query-failure"; +import { BROKERED_PROFILE } from "../access"; import { type BrokerApp, BrokerUnconfiguredError, brokerSentence, } from "../broker"; -import { toolkitOf, vendorSentence } from "../composio"; +import { vendorSentence } from "../composio"; import { CatalogueEntryUnknownError, CustomServerRefusedError, @@ -15,8 +16,9 @@ import { } from "../store"; import { brokerRefusal, - DIRECTORY_UNAVAILABLE, + directoryUnavailable, type PluginRouteContext, + withVendorDeadline, } from "./context"; /** Browsing Composio's directory and enabling an app out of it. */ @@ -25,6 +27,9 @@ export function mountComposioAppRoutes({ store, requireUser, composio, + activeProvider, + activeVendor, + appOfUrl, actorEmail, }: PluginRouteContext) { /** @@ -44,8 +49,9 @@ export function mountComposioAppRoutes({ * {@link BrokerUnconfiguredError}'s own message is what is sent rather than a sentence written * here. * - * `enabled` comes off `toolkitOf(url)` and never off the row's id. The url is where the - * transport reads which app a call is against, so it is the only reading that decides anything; + * `enabled` comes off `appOfUrl(url)` — the active broker's own parser — and never off the + * row's id. The url is where the transport reads which app a call is against, so it is the only + * reading that decides anything; * the id names the row — `composio-linear` — and reading one as the other would quietly work * until somebody renamed a row. `serverUrls` hands over the urls and nothing else, which is that * property made structural: there is no id here to read by mistake. @@ -61,18 +67,24 @@ export function mountComposioAppRoutes({ if (!composio) { return context.json( - { error: new BrokerUnconfiguredError().message }, + { + error: new BrokerUnconfiguredError(activeProvider, "operator") + .message, + }, 503, ); } let directory: BrokerApp[]; try { - directory = await composio.broker.listApps(); + directory = await withVendorDeadline(() => composio.broker.listApps()); } catch (error) { // The vendor's own sentence where there is one, because "invalid api key" is the diagnosis // and a 500 is not. See {@link brokerRefusal} for what is kept out of the answer. - const refusal = brokerRefusal(error, DIRECTORY_UNAVAILABLE); + const refusal = brokerRefusal( + error, + directoryUnavailable(activeProvider), + ); return context.json({ error: refusal.error }, refusal.status); } /* @@ -121,7 +133,7 @@ export function mountComposioAppRoutes({ const enabled = new Set( urls - .map((url) => toolkitOf(url)) + .map((url) => appOfUrl(url)) .filter((toolkit): toolkit is string => toolkit !== null), ); return context.json({ @@ -148,7 +160,10 @@ export function mountComposioAppRoutes({ if (!composio) { return context.json( - { error: new BrokerUnconfiguredError().message }, + { + error: new BrokerUnconfiguredError(activeProvider, "operator") + .message, + }, 503, ); } @@ -171,7 +186,7 @@ export function mountComposioAppRoutes({ let directory: BrokerApp[] = []; if (slug) { try { - directory = await composio.broker.listApps(); + directory = await withVendorDeadline(() => composio.broker.listApps()); } catch (error) { /* * The same failure the directory route answers, in the same words, because it is the same @@ -179,7 +194,10 @@ export function mountComposioAppRoutes({ * deployment whose key is wrong was told nothing at all, on the one screen where the key * had just been set. */ - const refusal = brokerRefusal(error, DIRECTORY_UNAVAILABLE); + const refusal = brokerRefusal( + error, + directoryUnavailable(activeProvider), + ); return context.json({ error: refusal.error }, refusal.status); } } @@ -188,7 +206,7 @@ export function mountComposioAppRoutes({ return context.json( { error: slug - ? `${slug} is not an app Composio lists for this deployment.` + ? `${slug} is not an app ${BROKERED_PROFILE[activeProvider].vendor} lists for this deployment.` : "An app is required.", }, 400, @@ -325,7 +343,7 @@ export function mountComposioAppRoutes({ JSON.stringify({ type: "composio-app-not-enabled", slug: app.slug, - note: "Enabling a brokered app failed for a reason neither this deployment nor Composio put a sentence to. The administrator was answered 502 with the generic sentence.", + note: `Enabling a brokered app failed for a reason neither this deployment nor ${activeVendor} put a sentence to. The administrator was answered 502 with the generic sentence.`, error: reasonWithoutStatement(error), }), ); @@ -333,7 +351,7 @@ export function mountComposioAppRoutes({ const refusal = brokerRefusal( error, - `${app.name} could not be enabled, and Composio said nothing about why. Try again, and check this deployment's Composio key if it persists.`, + `${app.name} could not be enabled, and ${activeVendor} said nothing about why. Try again, and check this deployment's ${activeVendor} key if it persists.`, ); return context.json({ error: refusal.error }, refusal.status); } diff --git a/server/src/plugins/route-groups/connections.ts b/server/src/plugins/route-groups/connections.ts index 7ef106608..2c161ea71 100644 --- a/server/src/plugins/route-groups/connections.ts +++ b/server/src/plugins/route-groups/connections.ts @@ -1,15 +1,18 @@ import type { AppVariables } from "../../auth/guards"; +import { reasonWithoutStatement } from "../../db/query-failure"; +import { normalizeArcadeError } from "../arcade-adapter"; import { type BrokerField, BrokerUnconfiguredError, brokerReturnUrl, + brokerSentence, type Decides, + type GrantState, isFieldScheme, type SchemeKind, schemeKind, } from "../broker"; import { catalogueEntry } from "../catalogue"; -import { toolkitOf } from "../composio"; import { authorizationUrlFor, type ConnectOrigin, @@ -19,13 +22,23 @@ import { redirectUriFor, sealConnectState, } from "../oauth"; -import type { AccountRef } from "../shared-accounts"; +import { type AccountRef, asAccountRef } from "../shared-accounts"; import { CatalogueEntryUnknownError, type OAuthClient, PluginRefusedError, } from "../store"; -import { brokerRefusal, type PluginRouteContext } from "./context"; +import { + type AuthorizationRefusal, + brokerRefusal, + logReturnUrlRefusal, + type PluginRouteContext, + STATUS_CALL_TIMEOUT_MS, + sameAccount, + settledStatus, + signInUrlFor, + withVendorDeadline, +} from "./context"; /** A person's connections: listing them, connecting an app (OAuth or brokered) and disconnecting. */ export function mountConnectionRoutes({ @@ -34,6 +47,9 @@ export function mountConnectionRoutes({ requireUser, connect, composio, + activeProvider, + activeVendor, + appOfUrl, actorEmail, }: PluginRouteContext) { /** @@ -135,7 +151,7 @@ export function mountConnectionRoutes({ * person. On a deployment with no `OPENBOT_PUBLIC_URL` it failed one step earlier still, * refusing for want of a setting that has no bearing on a flow it does not enter. * - * The app comes off the row's url via `toolkitOf` rather than off its id, for the reason the + * The app comes off the row's url via `appOfUrl` rather than off its id, for the reason the * directory route says: the url is where the transport reads which app a call is against, and * the id is a row name that happens to look similar. * @@ -146,7 +162,7 @@ export function mountConnectionRoutes({ * a missing row did when this was a `.find`. */ const row = await store.serverAddress(serverId); - const toolkit = row ? toolkitOf(row.url) : null; + const toolkit = row ? appOfUrl(row.url) : null; if (row && toolkit) { /* * AN APP THAT NEEDS NO CREDENTIAL IS ANSWERED HERE, BEFORE `brokeredAccountFor` IS EVER @@ -200,7 +216,10 @@ export function mountConnectionRoutes({ */ if (!composio) { return context.json( - { error: new BrokerUnconfiguredError().message }, + { + error: new BrokerUnconfiguredError(activeProvider, "person") + .message, + }, 503, ); } @@ -336,14 +355,16 @@ export function mountConnectionRoutes({ */ let published: BrokerField[]; try { - published = await composio.broker.connectionFields({ - toolkit, - authScheme, - }); + published = await withVendorDeadline(() => + composio.broker.connectionFields({ + toolkit, + authScheme, + }), + ); } catch (error) { const refusal = brokerRefusal( error, - `Composio would not say what ${row.title} asks for, and said nothing about why. Try again, and ask an administrator to check this deployment's Composio key if it persists.`, + `${activeVendor} would not say what ${row.title} asks for, and said nothing about why. Try again, and ask an administrator to check this deployment's ${activeVendor} key if it persists.`, ); return context.json({ error: refusal.error }, refusal.status); } @@ -373,7 +394,7 @@ export function mountConnectionRoutes({ if (published.length === 0) { return context.json( { - error: `${row.title} publishes no boxes to fill in, so there is nothing you could type that would reach it and no account was made. An administrator has to look at how ${row.title} is set up at Composio; removing it on the Plugins page and adding it again is what records the way Composio connects it now.`, + error: `${row.title} publishes no boxes to fill in, so there is nothing you could type that would reach it and no account was made. An administrator has to look at how ${row.title} is set up at ${activeVendor}; removing it on the Plugins page and adding it again is what records the way ${activeVendor} connects it now.`, }, 400, ); @@ -451,7 +472,7 @@ export function mountConnectionRoutes({ const optional = published.map((field) => field.name).join(", "); return context.json( { - error: `${row.title} publishes no box it says has to be filled in — only ${optional} — so nothing you could type would be a credential it insists on, and no account was made. An app that genuinely needs none is one Composio publishes as needing no authentication, and ${row.title} is recorded here as an app whose secret you type. An administrator has to look at how ${row.title} is set up at Composio; removing it on the Plugins page and adding it again is what records the way Composio connects it now.`, + error: `${row.title} publishes no box it says has to be filled in — only ${optional} — so nothing you could type would be a credential it insists on, and no account was made. An app that genuinely needs none is one ${activeVendor} publishes as needing no authentication, and ${row.title} is recorded here as an app whose secret you type. An administrator has to look at how ${row.title} is set up at ${activeVendor}; removing it on the Plugins page and adding it again is what records the way ${activeVendor} connects it now.`, }, 400, ); @@ -517,7 +538,7 @@ export function mountConnectionRoutes({ */ return context.json( { - error: `That is not the form ${row.title} publishes, so nothing was sent to Composio. Press Connect again to draw it from what the app asks for now, and fill in the boxes it shows; each one holds text.`, + error: `That is not the form ${row.title} publishes, so nothing was sent to ${activeVendor}. Press Connect again to draw it from what the app asks for now, and fill in the boxes it shows; each one holds text.`, }, 400, ); @@ -565,7 +586,7 @@ export function mountConnectionRoutes({ if (missing.length > 0) { return context.json( { - error: `${row.title} cannot be connected without ${missing.join(", ")}, so nothing was sent to Composio. Fill in every box the form marks required — a box holding only spaces is an empty one — and press Connect again.`, + error: `${row.title} cannot be connected without ${missing.join(", ")}, so nothing was sent to ${activeVendor}. Fill in every box the form marks required — a box holding only spaces is an empty one — and press Connect again.`, }, 400, ); @@ -606,7 +627,7 @@ export function mountConnectionRoutes({ } const refusal = brokerRefusal( error, - `${row.title} could not be connected with what you entered, and Composio said nothing about why. Try again, and ask an administrator to check this deployment's Composio key if it persists.`, + `${row.title} could not be connected with what you entered, and ${activeVendor} said nothing about why. Try again, and ask an administrator to check this deployment's ${activeVendor} key if it persists.`, ); return context.json({ error: refusal.error }, refusal.status); } @@ -633,7 +654,7 @@ export function mountConnectionRoutes({ if (kind === "unreadable") { return context.json( { - error: `This deployment cannot tell how ${row.title} connects, so nothing was sent to Composio and no account was made. An administrator has to remove it on the Plugins page and add it again, which records the way Composio connects it now.`, + error: `This deployment cannot tell how ${row.title} connects, so nothing was sent to ${activeVendor} and no account was made. An administrator has to remove it on the Plugins page and add it again, which records the way ${activeVendor} connects it now.`, }, 400, ); @@ -667,8 +688,7 @@ export function mountConnectionRoutes({ if (!connect?.appUrl) { return context.json( { - error: - "This deployment has no app URL configured, so Composio would have nowhere to send you back to. Set OPENBOT_APP_URL.", + error: `This deployment has no app URL configured, so ${activeVendor} would have nowhere to send you back to. Set OPENBOT_APP_URL.`, }, 503, ); @@ -712,26 +732,35 @@ export function mountConnectionRoutes({ */ let redirectUrl: string; try { - ({ redirectUrl } = await composio.broker.authorize({ - account, - toolkit, - /* - * THE REFUSAL ABOVE CHECKS THAT A SETTING IS SET; THIS CHECKS THAT IT IS AN ADDRESS. - * `appUrl` is an environment string — `OPENBOT_APP_URL`, or the first `TRUSTED_ORIGINS` - * entry — and nothing between there and Composio has ever looked at it, so - * `openbot.example.com` with the scheme left off builds a callback that is not a - * callback. That failure lands after somebody has consented, on the vendor's page, where - * this deployment cannot tell them anything; the guard moves it to before the link is - * minted, where the sentence reaches an operator who can set the variable. - */ - returnUrl: brokerReturnUrl( - connectedAccountsUrlFor(connect.appUrl, { serverId }, returnTo), - ), - })); + ({ redirectUrl } = await withVendorDeadline(() => + composio.broker.authorize({ + account, + toolkit, + /* + * THE REFUSAL ABOVE CHECKS THAT A SETTING IS SET; THIS CHECKS THAT IT IS AN ADDRESS. + * `appUrl` is an environment string — `OPENBOT_APP_URL`, or the first `TRUSTED_ORIGINS` + * entry — and nothing between there and Composio has ever looked at it, so + * `openbot.example.com` with the scheme left off builds a callback that is not a + * callback. That failure lands after somebody has consented, on the vendor's page, where + * this deployment cannot tell them anything; the guard moves it to before the link is + * minted, where nobody has spent a consent on it yet. + * + * WHO IS READING DECIDES WHAT IS SAID, AND HERE THAT IS A PERSON. This route is + * `requireUser`: whoever pressed Connect gets the refusal's own sentence, which names no + * vendor and no variable because they can act on neither. The operator's half of it is + * logged below instead, where an operator looks and a person does not. + */ + returnUrl: brokerReturnUrl( + connectedAccountsUrlFor(connect.appUrl, { serverId }, returnTo), + activeProvider, + ), + }), + )); } catch (error) { + logReturnUrlRefusal(error, serverId); const refusal = brokerRefusal( error, - `Composio would not begin a connection to ${row.title}, and said nothing about why. Try again, and ask an administrator to check this deployment's Composio key if it persists.`, + `${activeVendor} would not begin a connection to ${row.title}, and said nothing about why. Try again, and ask an administrator to check this deployment's ${activeVendor} key if it persists.`, ); return context.json({ error: refusal.error }, refusal.status); } @@ -851,7 +880,7 @@ export function mountConnectionRoutes({ * * A ROW THAT IS NOT BROKERED IS REFUSED IN SO MANY WORDS. The id may well name a server this * deployment really has — what is wrong is that its connection does not live at Composio, and - * there is nothing for either route to confirm or to end. `null` from `toolkitOf` also covers an + * there is nothing for either route to confirm or to end. `null` from `appOfUrl` also covers an * id naming no row at all, which is the same answer from the caller's side. * * NO BROKER IS A 503 NAMING THE SETTING, as it is on the directory and on connect, and it is @@ -864,7 +893,7 @@ export function mountConnectionRoutes({ * actor who is not an administrator is refused here, once, instead of in four routes below. * * THE CONNECT ROUTE'S BROKERED BRANCH IS THE FOURTH, CALLED ONLY ONCE IT ALREADY KNOWS THE - * BRANCH IS TAKEN. That route still asks `toolkitOf` itself before this function is ever reached + * BRANCH IS TAKEN. That route still asks `appOfUrl` itself before this function is ever reached * — a row that is not brokered has an OAuth flow below it to fall through to, and refusing it * here, where there is no such flow to fall through to, would be wrong. Once that question is * settled and the answer is yes, whose account the connection is for is exactly the question @@ -874,6 +903,13 @@ export function mountConnectionRoutes({ const brokeredAccountFor = async ( context: { var: AppVariables }, serverId: string, + /** + * `readOnly` is true for a question about the account's STATE, which anybody working with the + * app benefits from, and false for every act done in it. It lifts exactly one refusal — the + * administrator requirement on a Shared app's account — and nothing else: the account + * resolved is the same one either way, so a reader is told about the identity calls use. + */ + options: { readOnly?: boolean } = {}, ): Promise< | { toolkit: string; @@ -889,7 +925,7 @@ export function mountConnectionRoutes({ } > => { const row = await store.serverAddress(serverId); - const toolkit = row ? toolkitOf(row.url) : null; + const toolkit = row ? appOfUrl(row.url) : null; if (!toolkit) { return { refusal: { @@ -900,7 +936,10 @@ export function mountConnectionRoutes({ } if (!composio) { return { - refusal: { error: new BrokerUnconfiguredError().message, status: 503 }, + refusal: { + error: new BrokerUnconfiguredError(activeProvider, "person").message, + status: 503, + }, }; } const resolved = await store.accountRefFor(serverId, context.var.actor.id); @@ -908,6 +947,7 @@ export function mountConnectionRoutes({ return { refusal: { error: resolved.refusal, status: 400 } }; } if ( + !options.readOnly && resolved.ref.holder === "deployment" && context.var.actor.role !== "admin" ) { @@ -921,6 +961,69 @@ export function mountConnectionRoutes({ return { toolkit, account: resolved.ref, title: resolved.title }; }; + /** + * What the account behind this app holds, action by action: `{ actions: GrantState[] }`. + * + * A BOOLEAN WOULD NOT DO. An action can be blocked by consent, which Authorize moves, or by a + * deployment secret an operator sets once for everybody, which no amount of consenting moves; and + * a listing nobody could read is `unknown` rather than a pessimistic `needs-consent`, because + * telling somebody to authorize what they already authorized sends them round twice. The states + * are the broker's, passed through as it answered them. + * + * WHOSE IDENTITY IS ASKED ABOUT COMES FROM `brokeredAccountFor`: a Personal app's is the + * viewer's, a Shared app's is the app's own `shared_vendor_user_id`. Asking about the viewer for + * a Shared app would report a state no call ever uses. + * + * BEHIND `requireUser` AND NOT ADMIN-GATED: the status is a fact about the team's account that + * anybody working with the app benefits from. Minting is the privileged act, and the authorize + * route still refuses it with 403 through the same resolver. + * + * NO PRESENCE TEST ON THE BROKER AND NO REFUSAL PATH: every broker answers `grantsFor`, a + * degenerate answer being a real one, so this works on both deployments. A throw from the broker + * is answered as `unknown` carrying our own sentence, never the vendor's words, which could + * carry a credential. + */ + routes.get("/servers/:id/grants", requireUser, async (context) => { + const resolved = await brokeredAccountFor( + context, + context.req.param("id"), + { readOnly: true }, + ); + if (resolved.refusal) { + return context.json( + { error: resolved.refusal.error }, + resolved.refusal.status, + ); + } + const { toolkit, account } = resolved; + // `composio` is non-null here: the resolver refuses 503 before it returns an account. + const broker = composio?.broker; + if (!broker) { + return context.json( + { + error: new BrokerUnconfiguredError(activeProvider, "person").message, + }, + 503, + ); + } + let actions: GrantState[]; + try { + actions = await withVendorDeadline(() => + broker.grantsFor({ toolkit, account }), + ); + } catch { + actions = [ + { + action: toolkit, + state: "unknown", + reason: + "This deployment could not read what this account holds just now, so nothing is said about it either way. Try again in a moment.", + }, + ]; + } + return context.json({ actions }); + }); + /** * Ask Composio whether this person's account is really attached, and write the answer down. * @@ -993,7 +1096,7 @@ export function mountConnectionRoutes({ */ const refusal = brokerRefusal( error, - "Composio would not say whether this account is connected, and gave no reason, so what is shown here is the last answer it gave rather than a fresh one. Try again, and ask an administrator to check this deployment's Composio key if it persists.", + `${activeVendor} would not say whether this account is connected, and gave no reason, so what is shown here is the last answer it gave rather than a fresh one. Try again, and ask an administrator to check this deployment's ${activeVendor} key if it persists.`, ); return context.json({ error: refusal.error }, refusal.status); } @@ -1081,7 +1184,7 @@ export function mountConnectionRoutes({ */ const refusal = brokerRefusal( error, - "Composio would not say whether this connection still works, and gave no reason, so what is shown here is the last answer it gave rather than a fresh one. Press Re-check again, and ask an administrator to check this deployment's Composio key if it persists.", + `${activeVendor} would not say whether this connection still works, and gave no reason, so what is shown here is the last answer it gave rather than a fresh one. Press Re-check again, and ask an administrator to check this deployment's ${activeVendor} key if it persists.`, ); return context.json({ error: refusal.error }, refusal.status); } @@ -1148,9 +1251,1216 @@ export function mountConnectionRoutes({ */ const refusal = brokerRefusal( error, - "Composio would not end this account, and gave no reason. Press Disconnect again: the revoke at Composio runs before anything here is deleted, so repeating it is safe and is the whole recovery. Ask an administrator to check this deployment's Composio key if it persists.", + `${activeVendor} would not end this account, and gave no reason. Press Disconnect again: the revoke at ${activeVendor} runs before anything here is deleted, so repeating it is safe and is the whole recovery. Ask an administrator to check this deployment's ${activeVendor} key if it persists.`, ); return context.json({ error: refusal.error }, refusal.status); } }); + + /** + * WHAT DISCONNECTING THIS APP WOULD END BESIDES IT, for the confirmation to show before the + * press. Answers `{ siblings, unanswered }`: the other apps' toolkits, sorted, and how many apps + * on the same vendor identity could not be asked about and so are left out (a count, never + * names). It acts on nothing: no revoke, no delete, no audit row. + * + * THE SET IS THE STORE'S, KEYED ON THE PAIR `(vendor identity, auth provider)` AND NEVER ON THE + * PROVIDER ALONE — see `siblingApps`. Nothing is derived here, so this route and the cascade + * `DELETE /servers/:id/connection` runs cannot disagree about which apps are named. On Composio + * an app is its own auth provider, so the answer is always empty. + * + * THE ACCOUNT COMES FROM `brokeredAccountFor`, exactly as on the DELETE it previews: the list is + * about the account that press would end, so it is asked of the same resolution and is refused + * to the same callers. + */ + routes.get( + "/servers/:id/connection/siblings", + requireUser, + async (context) => { + const resolved = await brokeredAccountFor( + context, + context.req.param("id"), + ); + if (resolved.refusal) { + return context.json( + { error: resolved.refusal.error }, + resolved.refusal.status, + ); + } + try { + return context.json( + await store.siblingApps({ + toolkit: resolved.toolkit, + account: resolved.account, + }), + ); + } catch (error) { + const refusal = brokerRefusal( + error, + "This deployment could not work out which other apps share this connection, and the vendor said nothing about why. Try again.", + ); + return context.json({ error: refusal.error }, refusal.status); + } + }, + ); + + /** + * Begin authorizing ONE ACTION of a brokered app, for a provider that grants action by action. + * Answers `{ authorizationUrl }` and nothing else. + * + * ORDERING PRINCIPLE: EVERYTHING THAT CAN FAIL WITHOUT THE VENDOR RUNS BEFORE THE CLAIM; THE + * CLAIM IS THE LAST THING BEFORE THE MINT. A bad `OPENBOT_APP_URL` must not leave a live attempt + * with no mint behind it, and the mint runs after the insert so a mint can never exist without a + * row to correlate it. + * + * THE CAPABILITY GATE IS FIRST, BEFORE `brokeredAccountFor` AND BEFORE ANYTHING IS WRITTEN. A + * broker that declares no authorization flow cannot complete one, so claiming a row for it would + * block the actor for the full attempt lifetime over a flow that was never possible; a gate after + * the claim does not prevent that. It is a presence test on a declared capability and never a + * vendor name. 503 and not 404 or 400: the route exists, so 404 would lie, and the request is not + * what is wrong; 503 is this file's vocabulary for a capability this deployment does not have. + * + * `actorId` IS THE SESSION SUBJECT (`users.id`) AND NEVER A CREDENTIAL ACTOR: the verifier finds + * the attempt from the returning browser's session. + * + * THE URL IS A BEARER CAPABILITY — answered to this browser and to nothing else. It is never + * logged, audited or put in an error body. No `next_uri` is sent: the vendor refuses every value, + * and the landing page comes from the attempt row instead. + * + * A FAILED MINT'S ATTEMPT is handled at the mint's `catch`. NOT HERE: cancelling one. + */ + routes.post("/servers/:id/authorize", requireUser, async (context) => { + const serverId = context.req.param("id"); + + if (!composio) { + return context.json( + { + error: new BrokerUnconfiguredError(activeProvider, "person").message, + }, + 503, + ); + } + const flow = composio.broker.authorizations; + if (!flow) { + return context.json( + { + error: + "This deployment's apps are connected once for the whole app, with the Connect button on the app's page; they are not authorized one action at a time.", + }, + 503, + ); + } + + const resolved = await brokeredAccountFor(context, serverId); + if (resolved.refusal) { + return context.json( + { error: resolved.refusal.error }, + resolved.refusal.status, + ); + } + const { account, toolkit, title } = resolved; + + const body = await context.req.json().catch(() => null); + const action = + body && typeof body === "object" && "action" in body + ? (body as { action: unknown }).action + : undefined; + // Exact `===` against the stored names: Arcade's are case-sensitive and never normalized. + if ( + typeof action !== "string" || + !(await store.serverPublishesAction(serverId, action)) + ) { + return context.json( + { error: `${title} does not publish an action by that name.` }, + 400, + ); + } + + if (!connect?.appUrl) { + return context.json( + { + error: + "This deployment has no app URL configured, so there is nowhere to send you back to. Set OPENBOT_APP_URL.", + }, + 503, + ); + } + const returnTo: ConnectOrigin = + context.req.query("returnTo") === "admin" ? "admin" : "settings"; + let returnUrl: string; + try { + returnUrl = brokerReturnUrl( + connectedAccountsUrlFor(connect.appUrl, { serverId }, returnTo), + activeProvider, + ); + } catch (error) { + logReturnUrlRefusal(error, serverId); + const refusal = brokerRefusal( + error, + "This deployment could not build the address to send you back to, so nothing was started.", + ); + return context.json({ error: refusal.error }, refusal.status); + } + + const claim = await store.claimAuthorizationAttempt({ + actorId: context.var.actor.id, + serverId, + action, + account, + }); + if (!claim.claimed) { + return context.json( + { + error: claim.live + ? `An authorization for ${claim.live.action} is already in progress. Finish it, or wait for it to expire, before starting another.` + : "An authorization is already in progress. Finish it, or wait for it to expire, before starting another.", + }, + 409, + ); + } + + let minted: Awaited>; + try { + minted = await withVendorDeadline(() => + composio.broker.authorize({ + account, + toolkit, + action, + returnUrl, + }), + ); + } catch (error) { + /* + * WHAT A FAILED MINT DOES TO ITS ATTEMPT. THREE OUTCOMES, KEYED ON WHAT WAS ANSWERED. + * + * DEFINITE: the broker refused before asking (an authored `BrokerRefusalError`), or the + * vendor ANSWERED with an HTTP status. Nothing is live upstream, so the attempt is discarded + * and the actor is free to try again. Matched on `(actor_id, created_at)`, never `auth_id`: an + * attempt whose mint never completed has none, and `created_at` is what stops a late cleanup + * from deleting a NEWER attempt by the same actor. + * + * UNCERTAIN, AND THE ATTEMPT IS LEFT STANDING: `status === undefined` on a normalized SDK + * error. `APIConnectionError` and `APIUserAbortError` EXTEND `APIError`, so the normalizer + * answers `{ status: undefined, ... }` for them, NOT `null`; a dropped connection or an + * aborted socket means Arcade may well have created a flow. Keying this on `null` would class + * a timeout as a refusal and delete an attempt whose flow may be live, which frees the actor + * to start a second flow beside it. An attempt holding a null `auth_id` can never complete, + * so leaving it to expire is safe, and it is the point. + * + * THE NORMALIZER ANSWERING `null` IS UNCERTAIN TOO. That is "not an SDK error at all", and + * the adapter throws exactly such an `Error` ("Arcade answered an authorization with no id.") + * for a mint that answered SUCCESSFULLY without an `ar_...`: Arcade very likely did create a + * flow. Do not tidy this case into the definite branch. + * + * AND {@link VendorTimeoutError} LANDS IN THAT SAME UNCERTAIN BRANCH, which is why the mint's + * deadline is safe to add: it is neither authored nor an SDK error, so it is read as "we + * stopped waiting and do not know", the attempt is left standing, and a flow the vendor may + * have created behind the deadline is not orphaned beside a second one. + * + * NOTHING FROM THE VENDOR'S ANSWER IS LOGGED, AUDITED OR RETURNED: its body can carry the + * authorization url, a bearer capability. + */ + const authored = brokerSentence(error) !== null; + const failure = normalizeArcadeError(error); + const definite = + authored || (failure !== null && failure.status !== undefined); + if (definite) { + /* + * THE CLEAN-UP IS GUARDED, FOR THE SAME REASON THE RECORD-FAILURE CLEAN-UP BELOW IS. + * + * This discard is a tidy-up for a refusal the handler has ALREADY WORKED OUT — which vendor + * sentence to pass on, and whether it is a 502 or an authored 503. Unguarded, a fault on the + * delete threw past the handler and the person got a BODYLESS 500 instead: the least + * informative answer possible, in exactly the case where this route had something specific + * and true to tell them, and the failure of a clean-up destroyed the error it was cleaning + * up after. The refusal is the answer; whether the row went with it is not the person's + * problem to be given a blank page over. + * + * WHAT A FAILED DISCARD COSTS THEM IS SAID RATHER THAN GUESSED AT. The attempt stands with a + * null `auth_id`, so it can never complete and `claimAuthorizationAttempt` refuses a second + * start until it is fifteen minutes old — which makes the generic sentence's "try again in a + * moment" false. The extra clause is the same one the record-failure branch answers with for + * the same condition, and it is added rather than substituted: the vendor's own sentence is + * the half that says WHY, and it is not thrown away to make room for ours. + * + * The error is read through {@link reasonWithoutStatement}, as every database failure logged + * on this route is: a `DrizzleQueryError`'s own message is the statement and every value + * bound to it. + */ + let freed = false; + try { + freed = await store.discardAuthorizationAttempt({ + actorId: context.var.actor.id, + createdAt: claim.attempt.createdAt, + }); + } catch (cleanup) { + console.error( + JSON.stringify({ + type: "arcade-refused-attempt-not-cleared", + server: serverId, + action, + note: "A mint was refused and its attempt could not be deleted. The person was told why the vendor refused, and the row holds them until it expires.", + error: reasonWithoutStatement(cleanup), + }), + ); + freed = false; + } + const refusal = brokerRefusal( + error, + "The app's vendor refused to start that authorization, so nothing was started. Try again in a moment.", + ); + return context.json( + { + error: freed + ? refusal.error + : `${refusal.error} The attempt could not be cleared either; it expires within fifteen minutes, and starting over works after that.`, + }, + refusal.status, + ); + } + /* + * THE UNCERTAIN MINT: THE CLAIM STANDS, AND IT DOES NOT STAND IN SILENCE. + * + * WHY THE CLAIM STANDS. Nobody can read the vendor's answer here, so nobody knows whether a + * flow exists at the vendor. Ending the attempt on that guess is the irreversible mistake in + * one direction: a deleted claim frees this actor to start a second flow beside one that may + * be live. A settled verdict is no better: `closeAuthorizationAttempt` matches on `auth_id`, + * which is NULL here, so there is no verdict this row could take, and a settled row frees the + * actor just as a deleted one does. Left standing with a NULL `auth_id`, the row can never + * complete and holds the actor until it is fifteen minutes old. That cost is bounded. A + * second live flow is not. + * + * WHY IT IS NOT LEFT SILENT. Before this line the branch wrote nothing anywhere. The row says + * "a claim with no mint", which is also what a mint still in flight looks like. The person got + * a 502 sentence and the deployment kept no trace. So a flow this deployment may have + * started, and will never see completed, was invisible to everybody who could end it. This + * is B6a's shape one seam earlier: `arcade-context-withdrawal-unknown` is the same unknown + * on the revoke, and it is answered the same way. + * + * WHAT AN OPERATOR CAN NOW SEE, AND DO WITH IT. One line, `arcade-mint-outcome-unknown`, + * naming the server, the action and `attemptStartedAt`. The attempt row is + * `pending_authorizations` at that `(server_id, action, created_at)`, holding NULL `auth_id`. + * The vendor-side flow, if one exists, is a pending authorization for this action on this + * account started at that instant. Nobody was given its url, so nobody can complete it. An + * operator who needs it gone ends it at the vendor; otherwise it lapses there and the claim + * lapses here. A run of these lines is the vendor not answering, not one person's problem. + * + * WHAT IS NOT IN THE LINE. No authorization id: none was read, and that is the point. No + * redirect url, the bearer capability; on the "answered with no id" path it existed and was + * dropped inside the adapter. No account or vendor user id, as on every sibling line. The + * reason goes through {@link reasonWithoutStatement}. Every error that reaches this branch + * carries this deployment's own sentence: `ArcadeFailureError` drops the vendor's prose by + * construction, the adapter's own refusals are ours, and {@link VendorTimeoutError} is ours. + * + * NOT AN AUDIT ROW. Nothing here writes to `pending_authorizations`, and the attempt's + * missing trail rows are already debt in `pending-authorization-audit-ledger.test.ts`, under + * the claim and the expiry overwrite (B5e). Filing an event for this one branch while the + * claim it follows files none would put half a lifecycle on the trail. + */ + console.error( + JSON.stringify({ + type: "arcade-mint-outcome-unknown", + server: serverId, + action, + attemptStartedAt: claim.attempt.createdAt, + note: "The vendor did not answer an authorization clearly, so whether it started a flow is unknown. The attempt was left standing with no authorization id: it cannot complete, it holds this person until it is fifteen minutes old, and nobody was sent to a consent screen. If the vendor shows a pending authorization for this action begun at attemptStartedAt, nobody here can finish it; end it there if it must not linger.", + error: reasonWithoutStatement(error), + }), + ); + /* + * L4a-b: THE SENTENCE NAMED A STEP THIS BRANCH MAKES IMPOSSIBLE. + * + * It used to end "finish it if you were sent to a consent screen" — and the line logged + * immediately above says, of the very same branch, that NOBODY WAS SENT TO ONE. Both cannot + * be true, and the log is the one that is: this branch is reached when the MINT did not + * answer clearly, so there is no authorization url to hand back and the browser never left + * this page. An instruction nobody can follow is worse than no instruction — somebody goes + * looking through their tabs and their mail for a consent screen that was never opened, and + * concludes they lost it. + * + * WHAT REPLACES IT IS WHAT THEY CAN ACTUALLY DO, in the register the two sibling refusals on + * this route already use for the same predicament (the uncertain-mint and unrecorded-mint + * sentences below): nothing opened, nothing connected, whether a flow started at the vendor + * is unknown, one that did cannot be finished from here, and the wait is bounded and named. + * + * THE WAIT IS NOT A SUGGESTION AND IS NOT DROPPED. The attempt is deliberately left standing + * precisely because a flow MAY be live, so "cancel it and start again" would be the wrong + * advice however much friendlier it reads — it is the hold that keeps a second authorization + * from being minted beside a first nobody can see. + */ + return context.json( + { + error: + "The app's vendor did not answer clearly, so nobody was sent to a consent screen and nothing was connected. Whether an authorization started at the vendor is unknown, and one that did cannot be finished from here. This attempt expires within fifteen minutes, and starting over works after that.", + }, + 502, + ); + } + // A null id is recorded as NULL: an attempt holding none can never complete and simply expires. + let bound: boolean; + try { + bound = await store.recordAuthorizationMint({ + actorId: context.var.actor.id, + createdAt: claim.attempt.createdAt, + authId: minted.authorizationId, + }); + } catch (error) { + /* + * THE ONE WRITE ON THIS ROUTE THAT RUNS AFTER SOMETHING IRREVERSIBLE, AND IT USED TO BE THE + * ONLY CALL HERE WITH NO GUARD AT ALL. + * + * The mint SUCCEEDED: a flow is live at the vendor. Unhandled, a transient fault on this one + * local UPDATE — a statement timeout, a pool exhausted, a failover — threw past the handler + * into a BODYLESS 500, and left the claim standing with a NULL `auth_id`. That row is the + * worst of both halves. It can never complete, because the return leg matches the attempt on + * `auth_id` and a null matches no `flow_id` the browser can bring back; and it still HOLDS + * THE ACTOR, because `claimAuthorizationAttempt` refuses a second start until the row is + * fifteen minutes old. So one local hiccup turned a successful authorization into a person + * locked out of retrying, told nothing, with a live flow at Arcade that this deployment has + * no record of. + * + * THE ATTEMPT IS DISCARDED RATHER THAN LEFT TO EXPIRE, and this is NOT the uncertain-mint + * branch above turned around. There, the row is left standing because it may yet be the + * record of a live flow and deleting it would free the actor to run a second flow beside one + * that could still complete. Here the row provably records NOTHING: the id that would let it + * complete is exactly the value that failed to be written. Keeping it buys no safety and + * costs the person a quarter of an hour of refusals. Matched on `(actor_id, created_at)`, so + * a slow arrival here can never delete a newer attempt, and wrapped in its own `try` because + * the fault that broke the write above is likely to break this one too — a failed cleanup + * must not replace this refusal with the bodyless 500 it exists to prevent. + * + * AND THE MINT IS NOT LOST. The console line is what is left to carry it once the database + * has refused the row, and it holds the `ar_...` the vendor answered — the plain-text value + * this route was about to store — so an operator can find that flow at the vendor and end it. + * THE REDIRECT URL IS NOT LOGGED AND NEVER WILL BE: that is the bearer capability, and + * whoever opens it attaches the account. The error goes through + * {@link reasonWithoutStatement} for the reason `oauth-connection-not-recorded` gives: a + * `DrizzleQueryError`'s own message is the statement and every value bound to it. + */ + let freed = false; + try { + freed = await store.discardAuthorizationAttempt({ + actorId: context.var.actor.id, + createdAt: claim.attempt.createdAt, + }); + } catch { + freed = false; + } + console.error( + JSON.stringify({ + type: "arcade-mint-not-recorded", + server: serverId, + action, + authorizationId: minted.authorizationId, + attemptCleared: freed, + note: "An authorization was minted at the vendor and could not be written to its attempt. The person was told, was not sent to the consent screen, and the flow named here is live at the vendor with nothing here recording it.", + error: reasonWithoutStatement(error), + }), + ); + return context.json( + { + error: freed + ? "The app's vendor started that authorization, and this deployment could not record it — so it cannot be finished here and nothing was connected. Press Authorize again: the attempt was cleared, so starting over is safe." + : "The app's vendor started that authorization, and this deployment could not record it — so it cannot be finished here and nothing was connected. The attempt could not be cleared either; it expires within fifteen minutes, and starting over works after that.", + }, + 500, + ); + } + if (!bound) { + /* + * THE MINT WROTE NOTHING, SO THE CONSENT URL IS NOT HANDED OUT. + * + * `recordAuthorizationMint` answers false when no unminted, unsettled attempt stands under + * `(actor_id, created_at)`. On this route that is a cancel that landed while the vendor was + * minting: `DELETE /servers/:id/authorize` discarded the attempt (and filed + * `mcp.authorization_cancelled` for it), and only then did the vendor answer. The url it + * answered is a bearer capability for a flow with NO ATTEMPT BEHIND IT. Handing it out sent + * the person to grant access at the vendor against a record that does not exist, and the + * return leg then refused that consent as `no-attempt`, after the grant had been made. The + * person asked for nothing to be started, so nothing is. + * + * 409, THE STATUS THE CANCEL ROUTE ANSWERS WHEN IT AND A COMPLETION CROSS, because this is + * that kind of race seen from the other request: two acts on one attempt, and the one that + * lost is told so in an error a client cannot mistake for a url to follow. Nothing is + * discarded here: false means no attempt of this request's is left to discard, and a newer + * or settled row by the same actor is not this request's to touch. + * + * NOTHING IS LOGGED. The flow at the vendor is unreachable: its url was given to nobody and + * is written nowhere, so it expires there. The person's cancel is already on the trail. + * Neither the url nor the `ar_...` reaches this body. + */ + return context.json( + { + error: + "That authorization was cancelled before the app's vendor finished starting it, so you were not sent on and nothing was connected. Press Authorize to start again.", + }, + 409, + ); + } + return context.json({ authorizationUrl: minted.redirectUrl }); + }); + + /** + * Cancel THIS actor's authorization attempt, so somebody who closed the consent tab need not wait + * out the fifteen-minute TTL. Answers `{ cancelled }`: whether an attempt was removed. + * + * CANCELLING WHEN NO ATTEMPT EXISTS IS NOT AN ERROR — the attempt may have expired, failed or + * been cancelled already, and the person's intent (nothing in flight, nothing connected) is met. + * + * A CONSENT THAT COMPLETED UNDER THE CANCEL IS THE ONE CASE WHERE THAT INTENT IS NOT MET, AND IT + * IS ANSWERED 409 RATHER THAN `{ cancelled: true }` OR `{ cancelled: false }`. The attempt is read + * and then discarded, and a completion can commit between the two. `discardAuthorizationAttempt` + * refuses a settled row, so the record of that consent survives; but the account IS connected + * now, and neither boolean says so — `true` would be a lie and `false` reads as "there was nothing + * to cancel". The person asked for nothing to be connected and something was, so they are told + * which, in an error a client cannot mistake for success, and pointed at the one thing that undoes + * it: disconnecting. Any other settled outcome (failed, unreconciled, withdrawn) connected nothing, + * so it is the ordinary `{ cancelled: false }`. + * + * MATCHED ON `(actor_id, created_at)`, NEVER ON `auth_id`: an attempt whose mint never completed + * has no `auth_id` and is exactly the one most worth cancelling, and `created_at` is what stops + * this from deleting a NEWER attempt by the same actor that replaced the one resolved here. It + * goes through `discardAuthorizationAttempt`, the same deletion the mint's definite-failure + * discard uses. + * + * `actorId` IS THE SESSION SUBJECT (`users.id`), NEVER A CREDENTIAL ACTOR. BEHIND `requireUser` + * AND NOT ADMIN-GATED AT THE ROUTE, as the disconnect route above: `brokeredAccountFor` is where + * a Shared app is refused to anybody but an administrator. + * + * THE ATTEMPT IS RESOLVED BEFORE THE APP IS, AND THAT ORDER IS THE WHOLE POINT. Cancelling is an + * operation on the ATTEMPT ROW, and this route reads NOTHING off `brokeredAccountFor`'s success + * branch — not the toolkit, not the account, not the title. The deletion is keyed + * `(actor_id, created_at)` off the row itself. So resolving the app first bought no fact this + * route uses and cost the one case that needs cancelling most: AN ATTEMPT OUTLIVES ITS APP. Once + * an administrator removes the row, `brokeredAccountFor` answers `appOfUrl(null)` → "That app is + * not reached through a broker", 400, and a person holding a live pending authorization on an app + * that is gone could never retract it — while `claimAuthorizationAttempt` went on refusing them a + * new one for the full fifteen minutes. A not-found about the app, in answer to a request about + * their own attempt. + * + * DROPPING THE GATE FOR THAT CASE GIVES NOBODY ANYTHING THEY DID NOT ALREADY HAVE. The row + * reached here is the signed-in person's OWN attempt, by the only key the table has, and the act + * is its deletion; the administrator requirement on a Shared app guards that app's deployment + * account, which this route never touches. The one actor it newly admits is somebody whose + * authority changed while their own consent was in flight — and letting them retract what they + * started is the right answer, not a hole. + * + * THE REFUSALS SURVIVE WHERE THEY STILL MEAN SOMETHING, which is the branch with nothing of this + * actor's to cancel. A DELETE aimed at an ordinary OAuth row, or at no row at all, is then still + * told so in the words every sibling route uses, rather than being flattened into a cheerful + * `{ cancelled: false }` that claims the request was understood. + * + * AND IT CANCELS THE ATTEMPT THE PATH NAMES, NEVER MERELY "WHATEVER THIS ACTOR IS HOLDING". The + * attempt key is the actor alone, so the lookup can only answer that one row — but the request + * names an app, and an attempt standing on a DIFFERENT app is not the thing being cancelled. + * Deleting it anyway killed an in-flight consent begun from another screen and answered + * `{ cancelled: true }` as though it had done what was asked, which is the same broken + * correlation the mint/claim/complete path exists to hold from the other end. A standing attempt + * on another app is therefore the `{ cancelled: false }` of "no attempt for THIS app", which is + * the same answer, and the same non-error, as there being no attempt at all. + * + * THE SERVER IS COMPARED AGAINST THE RAW PATH PARAMETER, which is exactly what + * `POST /servers/:id/authorize` writes into `server_id` when it claims the row. Comparing against + * anything derived — the toolkit, the resolved title — would be two spellings of one fact and a + * place for them to drift apart. + */ + routes.delete("/servers/:id/authorize", requireUser, async (context) => { + const serverId = context.req.param("id"); + const actorId = context.var.actor.id; + const attempt = await store.authorizationAttemptFor(actorId); + if (attempt && attempt.serverId === serverId) { + const cancelled = await store.discardAuthorizationAttempt({ + actorId, + createdAt: attempt.createdAt, + }); + /* + * A RETRACTION IS ON THE TRAIL, AND ONLY ONE THAT HAPPENED. The person withdrawing their own + * pending consent is the other deliberate ending of this lifecycle besides completing it, and + * it is filed for the same reason `mcp.account_connected` is. Only when the deletion removed + * a row: a cancel that lost a race to a newer attempt removed nothing and withdrew nothing. + * After the deletion and not around it, as the disconnect route files its row, so a failed + * audit write fails the request rather than passing silently. + */ + if (cancelled) { + await store.recordAuthorizationCancelled({ actorId, attempt }); + } else if ( + /* + * AND A CANCEL THAT LOST TO THE COMPLETION SAYS SO. The discard refuses a settled attempt, + * so `cancelled` is false here for two different reasons; only one of them is "nothing was + * standing". Answering `{ cancelled: false }` to a person whose consent completed would + * leave them believing they had retracted an account that is now connected. + */ + (await store.settledAuthorizationOutcome({ + actorId, + createdAt: attempt.createdAt, + })) === "completed" + ) { + return context.json( + { + error: + "That authorization finished before it could be cancelled, so the account is connected. Disconnect it if you did not mean to connect it.", + }, + 409, + ); + } + return context.json({ cancelled }); + } + const resolved = await brokeredAccountFor(context, serverId); + if (resolved.refusal) { + return context.json( + { error: resolved.refusal.error }, + resolved.refusal.status, + ); + } + return context.json({ cancelled: false }); + }); + + /** + * Where a person's BROWSER lands after a brokered per-action consent: the verifier. + * + * THIS ROUTE BREAKS THIS FILE'S JSON/401 CONVENTION DELIBERATELY, AND THE REASON IS WRITTEN HERE + * SO NOBODY "FIXES" IT TO MATCH ITS NEIGHBOURS. Every other route in this file answers `fetch` + * from OpenBot's own pages, so JSON is what the caller can read and 401 is what an unauthenticated + * one deserves. Here the caller is a PERSON'S BROWSER, arriving on a top-level navigation from the + * broker's own screen with a just-completed consent behind it — so an unauthenticated arrival is + * sent to sign-in with a 303 and a `Location` CARRYING ITS `flow_id`, never answered 401. A 401 + * here is somebody who has just granted a third party access to their mailbox being shown a raw + * error object on an API origin that serves no pages. + * + * WHICH IS WHY `requireUser` IS RUN BY HAND RATHER THAN MOUNTED IN FRONT OF THE HANDLER. The guard + * answers 401 JSON, and the whole point of this route is that it must not. It is still the same + * guard — the session is read, the role is resolved and `actor` is set by it, so nothing here + * re-implements authentication — and only its REFUSAL is translated into the redirect. The + * composition is the one `admin/gate.ts` already uses: call it with a `next` that records that it + * ran. + * + * SIGNING BACK IN AS THE SAME PERSON THEN COMPLETES NORMALLY, because the attempt is keyed on the + * signed-in person. Signing in as somebody else finds no attempt and refuses, which is correct and + * occasionally annoying. + * + * CRITERION: NO REQUEST TO THIS ENDPOINT ENDS WITHOUT A `Location`, WITH ONE STATED EXCEPTION. + * That is the criterion `/oauth/callback` below already holds itself to in as many words, and this + * is the file's second browser-navigation return leg — so a refusal here ends the same way that + * one does: back at the connected-accounts LIST, with a word about what happened and nothing + * written. The reason travels as an opaque code on `?authorized=` + * ({@link AUTHORIZATION_REFUSALS}); the sentence belongs to the app, which is the only place it is + * written down. THE LIST AND NOT AN APP PAGE, uniformly: three of the refusals have no attempt row + * to build an app address from, and {@link connectedAccountsUrlFor} already argues that picking + * one would be a guess about what somebody had been doing. + * + * THE EXCEPTION IS THE 403, AND IT IS STATED RATHER THAN INHERITED. The guard that refuses a + * session with no role is the same guard `/api/me` answers from, so such a session cannot reliably + * load the landing page either — it is sent to `/sign` or into an error boundary, which is the + * dead end that branch exists to avoid. It keeps its JSON body. + */ + routes.get("/arcade/verify", async (context) => { + /** + * Where a refusal lands, which is the LIST screen with the reason beside it. + * + * Built from {@link connectedAccountsUrlFor}'s failure address with its query dropped, so the + * one place that knows how to address the app's origin stays the one place that knows — and so + * that `?connected=failed`, which belongs to the Composio callback, is NOT carried along beside + * `?authorized=` and drawn as a second notice about something that did not happen. + */ + const refusedWith = (reason: AuthorizationRefusal) => { + const [screen] = connectedAccountsUrlFor(connect?.appUrl, { + failed: true, + }).split("?"); + return context.redirect(`${screen}?authorized=${reason}`, 303); + }; + + /* + * Read, not yet judged. The redirect below has to carry it, and that redirect happens before + * the value is validated — reading a query string calls nobody and writes nothing. + */ + const flowId = (context.req.query("flow_id") ?? "").trim(); + + /** + * WHETHER THE COMPLETION TRANSACTION IS KNOWN TO HAVE COMMITTED, and the one thing the two + * `catch`es below have to agree about. Declared out here, ahead of the `try`, because the + * blanket `catch` has to be able to tell a throw over a live, recorded grant from a throw over + * nothing at all — which is the distinction it used to answer `not-recorded` for both halves + * of. Set in exactly one place: the completion's own `catch` below. + */ + let recorded = false; + + /* + * EVERYTHING FROM HERE IS IN ONE `try`, FOR THE REASON `/oauth/callback` BELOW GIVES FOR ITS + * OWN: so it is the whole body rather than each call. A blanket `catch` is a promise about the + * route; a per-call one is a promise about the calls somebody remembered. The criterion is + * that no request to this endpoint ends without a `Location`, and a call that throws would + * otherwise put somebody who has just consented at another company on a bodyless 500 — there + * is no `app.onError` on this app to turn that into anything else, and this is an origin that + * serves no pages. + * + * IT OPENS HERE AND NOT AT THE COMPLETION, which is where it used to open and where it was a + * promise about the calls somebody remembered. Two awaited reads happen first and both reach a + * store: `requireUser` reads the session and then this actor's roles, and + * `authorizationAttemptFor` is the one query on the happy path. A database blip or an + * exhausted pool during the attempt read is the ordinary way to reach either. + * + * THE STATED EXCEPTION IS UNTOUCHED BY THIS. The 403 for a session with no role RETURNS, and a + * `catch` sees throws and not returns, so it keeps its JSON body. + * + * The inner `try`s below take the vendor's throws first, so no refusal code changes here. AND + * THE COMPLETION NOW HAS ONE OF ITS OWN, which is not a hedge against this `catch` but the + * thing this `catch` cannot do: it is the only step on this leg that can leave a grant RECORDED + * on the way out, so it is the only one that can say whether `not-recorded` is true. See it. + */ + try { + let signedIn = false; + const refusal = await requireUser(context, async () => { + signedIn = true; + }); + if (!signedIn) { + /* + * ONLY A MISSING SESSION GOES TO SIGN-IN. The guard also refuses 403 for a session with no + * role, and sending that person to sign-in is a dead end: the sign-in screen's own load hits + * the same guard, gets the same 403, and they sign in as themselves again with nothing + * changed and never told their access was removed. + */ + if (refusal instanceof Response && refusal.status === 401) { + return context.redirect(signInUrlFor(connect?.appUrl, flowId), 303); + } + return context.json( + { + error: + "This deployment no longer recognises you, so nothing was recorded. Ask an administrator to restore your access, then start the authorization again from the app's page.", + }, + 403, + ); + } + + /* + * THE CAPABILITY GATE, AND IT IS A PRESENCE TEST ON A VALUE THE BROKER DECLARED. Never a + * `provider === "arcade"` comparison: see {@link ConnectedAppBroker.authorizations}, and + * `store.ts`'s gate comment, which records a defect where a gate and its exemption keyed on + * different things and the exemption failed OPEN. A deployment whose broker runs no correlated + * authorization flow has no return leg for this route to verify. + */ + if (!composio) return refusedWith("no-broker"); + const flow = composio.broker.authorizations; + if (!flow) return refusedWith("not-supported"); + + /* + * A HANDLE THIS DEPLOYMENT CANNOT USE IS REFUSED WITHOUT ASKING THE VENDOR ANYTHING. Empty, + * missing or whitespace-only are one fact — the browser arrived without the one thing the + * return leg carries — and spending a vendor call on it would be an unauthenticated-shaped + * request reaching another company's API. + */ + if (!flowId) return refusedWith("missing-handle"); + + /* + * THE ATTEMPT COMES FROM THE SIGNED-IN ACTOR AND NEVER FROM THE HANDLE. The vendor's return-leg + * id and the id its mint answered with are different id spaces with no endpoint between them, + * and nothing here may try to bridge them; trying identities until one is accepted would be an + * oracle reporting which of this deployment's identities have flows outstanding. The session + * names exactly one candidate, which is what makes the correlation exact rather than probable. + * + * {@link PluginStore.authorizationAttemptFor} already excludes a completed attempt and one past + * the fifteen-minute TTL, so all three absences arrive here as `null` and are refused in one + * sentence. A NULL `auth_id` is the fourth: its mint never completed, so there is nothing for + * the binding below to be checked against and the attempt can only ever expire. + * + * A ROW THAT CANNOT SAY WHOSE ACCOUNT IT IS FOR IS THE FIFTH, AND IT IS REFUSED HERE RATHER + * THAN READ AS THE DEPLOYMENT'S. `(holder, user_id)` is held by + * `pending_authorizations_holder_check`, so a `person` row with no user id cannot be written + * and this branch is unreachable through the table — which is exactly why it must be a + * refusal: the reading it replaces rebuilt that row as `{ holder: "deployment" }` and then + * aimed the withdrawal below at the DEPLOYMENT's account, ending a connection nobody asked + * about while the person's stayed live. Refused BEFORE the vendor is asked anything, like the + * null `auth_id` above and for the same reason: the attempt can never complete, so no call is + * worth spending on it, and nothing is written — the row stands until its TTL. + */ + const actorId = context.var.actor.id; + const attempt = await store.authorizationAttemptFor(actorId); + if (!attempt || attempt.authId === null) return refusedWith("no-attempt"); + const attemptAccount = asAccountRef(attempt); + if (!attemptAccount) return refusedWith("no-attempt"); + const authId = attempt.authId; + + /* + * THE BINDING. `handle` IS AN OPAQUE STRING THE SEAM DOES NOT INTERPRET — the vendor's word for + * it stops at the adapter, and nothing here parses it, compares it to a scheme or reads a + * provider out of it. + * + * THE MISMATCH BRANCH IS ASSUMPTION-BACKED AND IS MOCKED-ONLY UNTIL A LIVE PROBE RUNS. The SDK + * declares no error shape for a handle belonging to somebody else; the adapter detects one by + * normalizing the thrown error and reading `user_mismatch`, and RETHROWS anything else. If the + * vendor's real shape differs, `confirmReturn` does not quietly answer `{ mismatch: true }` — + * it throws, and the branch below surfaces an outage instead of a clean refusal. That is UX + * degradation and not a hole: nothing is written and the attempt row is left alone either way, + * and the `auth_id` comparison underneath independently covers a `confirm` that SUCCEEDS + * against the wrong identity. Do not read a passing mocked test as proof this path works. + */ + let confirmed: Awaited>; + try { + confirmed = await withVendorDeadline( + (signal) => + flow.confirmReturn( + { + handle: flowId, + vendorUserId: attempt.vendorUserId, + }, + { signal }, + ), + STATUS_CALL_TIMEOUT_MS, + ); + } catch { + /* + * NOTHING FROM THE VENDOR'S ANSWER TRAVELS WITH THIS — not its sentence, not its body, not + * the error. A reply on this leg can carry an authorization url, which is a bearer capability, + * and an outage is not worth a person's consent being quotable out of an error body. + * + * LOGGED, THOUGH, WHICH IT WAS NOT. This refusal and the status one below are the two ways a + * return leg ends with the vendor unreachable, and they reach the person as the SAME + * sentence — so without a line an operator cannot tell which call failed, and the two are + * not equally serious: this one ran BEFORE anything was confirmed, so no completion is + * implied by reaching it. Said plainly here rather than left to be inferred from the absence + * of the other line. + * + * AND NO REASON TRAVELS WITH IT, for the reason the paragraph above already gives about the + * redirect: a reply on this leg can carry an authorization url, which is a bearer + * capability. That hazard does not stop at the response — it was measured reaching this + * line — and a log is not a lesser destination. Both vendor calls on this route therefore + * log what happened and where to look, and nothing derived from what the vendor said. See + * `arcade-completion-status-unknown` below, which drops its reason for the same reason and + * over a worse secret. + */ + console.error( + JSON.stringify({ + type: "arcade-return-confirmation-unknown", + server: attempt.serverId, + action: attempt.action, + authorizationId: authId, + attemptStartedAt: attempt.createdAt, + note: "A person returned from a consent screen and the vendor could not be asked whether this return belongs to their authorization, so nothing was read and nothing was written. The attempt was left standing and returning to the link can still settle it. Unlike arcade-completion-status-unknown this implies no completed consent: the status was never reached. No reason is carried here on purpose: a reply on this leg can hold an authorization url, which is a bearer capability.", + }), + ); + return refusedWith("vendor-unavailable"); + } + + /* + * TWO REFUSALS, ONE SENTENCE, AND THE ATTEMPT ROW IS LEFT UNTOUCHED BY BOTH. A handle the vendor + * says belongs to somebody else, and a confirmation naming a DIFFERENT authorization than the + * one this deployment minted, are both "this return leg is not for the attempt you are holding". + * + * THE `auth_id` COMPARISON IS NOT OPTIONAL AND IT IS NOT HOPEFUL: the confirmation's id was + * measured IDENTICAL to the mint's through a completed consent, so this is an exact equality + * over one id space. Identity alone is not correlation — an expired read attempt, a fresh send + * attempt under the same identity, and then the read's callback arriving late matches on + * identity at every step, and a check stopping there would attribute a read consent to a send + * request. Local expiry does not cancel a vendor flow, so late callbacks are ordinary. + * + * NOTHING IS WRITTEN AND NOTHING IS CLOSED. A late callback must never consume or ALTER the + * replacement it arrived behind, so the row is not deleted, not completed and not marked. + */ + if ("mismatch" in confirmed || confirmed.authorizationId !== authId) { + return refusedWith("not-your-authorization"); + } + + /* + * THE BOUNDED WAIT. `pending` is polled a few times over a few seconds and never with the SDK's + * unbounded `waitForCompletion`: a browser is held open on this request, and a vendor that has + * stopped answering must not hold it open forever. See {@link settledStatus}. + * + * NOTHING FROM THAT ANSWER TRAVELS ANYWHERE (D31). The vendor's own status reply carries a LIVE + * PROVIDER ACCESS TOKEN and the person's full profile; the seam narrows it to three fields + * inside the adapter, and the three are read here into a decision, a comparison and the scope + * list the completion writes. Not one of them is logged, attached as a `cause` or put in an + * error body, and the status object itself reaches none of those either. A status response + * LOOKS LIKE METADATA, which is how the throwaway harness that proved this flow came to write + * the token to a file on its first run. + */ + let settled: Awaited>; + try { + settled = await settledStatus(flow, authId); + } catch { + /* + * THE ONE UNKNOWN ON THIS LEG THAT CAN SIT OVER A LIVE GRANT, AND IT USED TO BE SILENT. + * + * Everything above has already passed: the handle was confirmed, it named THIS mint, and the + * person is standing here because a consent screen sent them. So the likeliest state behind + * this throw is a consent that COMPLETED AT THE VENDOR — and the only thing that failed is + * this deployment reading the status that would let it record one. Nothing is written, so the + * grant is live at Arcade and no row here names it. + * + * THE ROW IS LEFT STANDING, DELIBERATELY, AND THAT IS WHY A LINE IS THE WHOLE FIX. A status + * this deployment could not read is not a verdict: closing the attempt would take away the + * link the person can come back to, and writing a connection would record a completion + * nothing here has evidence of. The attempt stands until its TTL and a return can still + * settle it — so the recovery already exists, and what was missing was anybody knowing to + * look. See `arcade-mint-outcome-unknown`, which is this shape on the opening leg. + * + * AND THIS LINE CARRIES NO REASON, WHICH IS THE ONE PLACE IT DEPARTS FROM ITS SIBLINGS. + * + * `arcade-mint-outcome-unknown` and `arcade-context-withdrawal-unknown` both log the error + * through {@link reasonWithoutStatement}, on the argument that everything reaching them + * carries this deployment's own sentence. THAT ARGUMENT DOES NOT HOLD HERE and it was + * MEASURED not holding: this is the status leg, whose reply carries a LIVE PROVIDER ACCESS + * TOKEN and the person's profile (D31) — the adapter already inverts the carry-the-vendor- + * error-as-`cause` convention for exactly that reason — and a failure injected on this seam + * put the token straight into the line. A log is not a lesser destination than a redirect, + * and this leg's whole discipline is that nothing of that answer travels anywhere. + * + * So the line names WHAT HAPPENED AND WHERE TO LOOK, and nothing derived from the vendor: + * the authorization id an operator finds the flow by, the app, the action, and when the + * attempt began. The reason is the one thing that cannot be included without reopening the + * hole this leg exists to keep shut, and an operator holding the id can ask the vendor + * directly — which is the thing the missing reason would only have described. + * + * Held by `arcade-verify.test.ts`, which asserts the token reaches neither the response nor + * this line. + */ + console.error( + JSON.stringify({ + type: "arcade-completion-status-unknown", + server: attempt.serverId, + action: attempt.action, + authorizationId: authId, + attemptStartedAt: attempt.createdAt, + note: "A person returned from a consent screen and this deployment could not read whether the authorization completed, so nothing was recorded. The consent may well be LIVE at the vendor with no row here naming it. The attempt was left standing rather than closed, so returning to the link can still settle it; if it expires first, check the authorization at the vendor before assuming nothing was granted. No reason is carried here on purpose: the vendor's status answer holds a live access token.", + }), + ); + return refusedWith("vendor-unavailable"); + } + + /* + * WHAT EACH OUTCOME DOES TO THE ATTEMPT ROW, AND THE TIMEOUT IS THE ONE THAT LEAVES IT ALONE. + * `failed` and an identity that is not the attempt's are verdicts, so the row is consumed and + * marked. STILL `pending` AT THE BOUND IS NEITHER A SUCCESS NOR A FAILURE: the consent may be + * finished a second later, and a row closed here would mean a person who came back to the + * link found nothing to finish. It stands until its TTL. + */ + if (settled.status === "failed") { + await store.failAuthorizationAttempt({ actorId, authId }); + return refusedWith("authorization-failed"); + } + if (settled.status !== "completed") return refusedWith("not-finished"); + if (settled.userId !== attempt.vendorUserId) { + await store.failAuthorizationAttempt({ actorId, authId }); + return refusedWith("not-your-authorization"); + } + + /* + * FRESHNESS (D28): A CONSENT WHOSE CONTEXT HAS MOVED ON IS NOT COMPLETED INTO THE PRESENT. + * + * The app's CURRENT account, its mode, the active provider and this actor's current authority + * are all re-resolved through the same resolver the mint used, and all of them have to still + * be the attempt's. The window is one consent's TTL and it needs an administrator to switch an + * app's mode twice inside it — which is rare, and silent: writing it would create a live grant + * bound to a retired identity that nothing will ever call with, and on an app somebody + * disconnected in between it would quietly resurrect the account. + * + * AND THE GRANT MAY ALREADY BE LIVE AT THE VENDOR, because the person completed it there + * before this deployment looked. So the RETIRED identity's connection is withdrawn — keyed on + * that identity and on this app, which CANNOT TOUCH THE CURRENT ACCOUNT: a connection is keyed + * `(user_id, provider_id)` and the retired identity is not the current one. Where that + * withdrawal succeeds the attempt is marked `withdrawn`; where it fails, is not attempted or + * answers `false` it is kept as `unreconciled` rather than closed, because a grant + * we know about and could not end is worth a row somebody can act on. + */ + /* + * THE RETIRED IDENTITY IS THE ATTEMPT'S OWN, READ ONCE AT THE TOP AND NOT REBUILT HERE. A + * reference built a second time from the row's columns is a second chance to build it wrong, + * and the one this replaced defaulted a pair it did not recognise to the deployment's. + */ + const retired: AccountRef = attemptAccount; + const fresh = await brokeredAccountFor(context, attempt.serverId); + if (fresh.refusal || !sameAccount(fresh.account, retired)) { + const row = await store.serverAddress(attempt.serverId); + const retiredApp = row ? appOfUrl(row.url) : null; + let withdrawn = false; + /* + * WHAT THIS WITHDRAWAL ENDS BESIDES THE APP IT NAMES, RESOLVED BEFORE THE REVOKE GOES OUT. + * + * Where a connection is keyed `(identity, auth provider)` — Arcade — the one revoke below + * ends the whole connection and so every app on the retired identity that shares it. Their + * rows here would be left standing, which makes this deployment's own records claim live + * connections for apps the vendor has already disconnected: a person sees apps listed as + * connected that fail on first use, and nothing here knows to tell them otherwise. The set + * is the store's, keyed on the pair and never on the provider alone, and BEFORE rather than + * after, which is the ordering `disconnectBrokered` and `removeServer` both keep: once the + * revoke has run, a sibling's auth provider is a question asked of a connection that is + * already gone. On Composio an app is its own auth provider, so it is always empty and + * nothing below differs from what this refusal always did. + * + * AND A SET THIS COULD NOT RESOLVE STOPS THE REVOKE RATHER THAN WIDENING IT. The ask is a + * live vendor call per app on a request a browser is held open on, so it is bounded — on + * the WHOLE resolution rather than on each call inside it, because the store's method takes + * no signal, which is the bound that matters to the browser. A timeout or a refusal leaves + * `collateral` null and nothing is then asked of the vendor at all. Ending apps this + * deployment cannot then name is the failure this whole branch is about, and the + * alternative is not silence: the attempt is kept `unreconciled` below, which is a row an + * operator can act on over a grant that is merely still live. + */ + let collateral: { siblings: string[]; unanswered: number } | null = + null; + if (retiredApp) { + try { + collateral = await withVendorDeadline(() => + store.siblingApps({ toolkit: retiredApp, account: retired }), + ); + } catch (error) { + /* + * Nothing from the vendor's answer travels with this, here as everywhere on this leg. + * + * AND THE FIX THAT LOGGED THE REVOKE THROW DID NOT REACH ITS OWN SIBLING. `arcade- + * context-withdrawal-unknown` below covers the revoke raising; this call sits one step + * in front of it and decides whether that revoke is attempted AT ALL. Unresolved, the + * revoke is skipped entirely and the attempt is closed `unreconciled` — the same outcome + * the branch below writes a line for, reached by a different road and, until now, + * without one. An operator reading the trail saw `unreconciled` and nothing saying why. + */ + collateral = null; + console.error( + JSON.stringify({ + type: "arcade-sibling-resolution-unknown", + server: attempt.serverId, + app: retiredApp, + action: attempt.action, + authorizationId: authId, + note: "A consent completed at the vendor after this app's account changed, and which apps the retired identity's grant also covers could not be resolved. No withdrawal was attempted, so the retired identity's grant is still live at the vendor and this deployment's rows for it were left alone. The attempt was closed unreconciled. Disconnect the app here to settle it.", + error: reasonWithoutStatement(error), + }), + ); + } + } + if (retiredApp && collateral) { + try { + /* + * THE BOOLEAN IS READ, NOT DROPPED. `false` means "nothing there" — on Arcade a + * toolkit whose auth provider could NOT be resolved now refuses rather than answering + * it, so an unattributable app arrives here as the throw below. Both land on the + * not-withdrawn branch, which is the safe reading over a possibly-live grant. + */ + withdrawn = await withVendorDeadline(() => + composio.broker.revoke({ + account: retired, + toolkit: retiredApp, + }), + ); + } catch (error) { + /* + * A THROW HERE IS NOT AN ANSWER OF `false`, AND IT IS NOT READ AS ONE. + * + * `false` is the broker saying "there was nothing to withdraw", off a listing it read + * whole. A throw says nothing of the kind: the seam deletes EVERY connection it found + * and only then throws if any delete failed, so "revoke failed for 1 of 3" arrives + * here with two of three already gone; and a deadline that fires is this deployment + * giving up on a call the vendor may finish a moment later. Either way the vendor side + * may already be withdrawn — the commit-then-throw shape `/arcade/verify`'s completion + * catch below was fixed for, one call earlier on the same leg. + * + * SO THE OUTCOME IS NEITHER CLAIM. `withdrawn` stays false, which is the conservative + * half: no local row is cleared and no collateral is put on the trail on the strength + * of a withdrawal nobody saw, because the alternative — clearing on a guess — is + * this deployment forgetting a grant that may still be live, and that is the + * irreversible mistake. The attempt is closed `unreconciled`, which is the existing + * verdict for "we do not know what happened" and is exactly true here. + * + * WHAT `unreconciled` DOES NOT COVER, AND THIS LINE DOES. The row holds an outcome and + * a timestamp and nothing else: no reason, nothing reads it back, and it reads the same + * for a vendor that said "nothing there" as for a call whose outcome is unknown. It + * cannot say the one thing an operator needs here — that the vendor may ALREADY have + * ended this connection, so the rows this deployment still holds for the app and for + * every sibling on the same connection may be claiming live connections that are gone, + * or that the grant is live and needs ending by hand. That is a disagreement between + * this deployment and the vendor that nobody would otherwise find out about, and + * leaving no trace of it was half of the defect. A third outcome on the row would need + * a schema change to say what this line says, and the line is where every sibling on + * this route already reports a failure it swallowed. + * + * WHAT IS IN THE LINE is what `arcade-completion-not-recorded` allows itself and the + * names of this deployment's own apps: the authorization id an operator finds the flow + * by, the app, the sibling apps whose rows may now be stale, and the reason through + * {@link reasonWithoutStatement}. Errors out of the broker seam carry this deployment's + * own sentence — `ArcadeFailureError` (`arcade.ts`) drops the vendor's prose by construction + * and {@link VendorTimeoutError} is ours — so nothing of the vendor's answer travels + * with this, here as everywhere on this leg. No account id, no vendor user id. + */ + withdrawn = false; + console.error( + JSON.stringify({ + type: "arcade-context-withdrawal-unknown", + server: attempt.serverId, + app: retiredApp, + action: attempt.action, + authorizationId: authId, + siblings: collateral.siblings, + note: "A consent completed at the vendor after this app's account changed, and withdrawing the retired identity's grant raised instead of answering. Whether the vendor withdrew it is unknown: the attempt was closed unreconciled and no row here was cleared, so either the grant is still live at the vendor or this deployment's rows for the app and the siblings named here claim connections the vendor has already ended. Check the connection at the vendor and disconnect the app here to settle it.", + error: reasonWithoutStatement(error), + }), + ); + } + } + /* + * AND THE ROWS FOR WHAT IT ENDED GO WITH IT, ONLY ON AN ANSWER OF TRUE. `false` is "nothing + * found, or we could not work out what to withdraw", and no local row may be cleared — nor + * any collateral claimed on the trail — on the strength of an answer nobody got. The trail + * rows this writes are what tell a person why an app they never touched stopped being + * connected here, and tell an operator that one withdrawal took several apps with it. + */ + if (withdrawn && retiredApp && collateral) { + await store.clearWithdrawnAccount({ + toolkit: retiredApp, + account: retired, + siblings: collateral.siblings, + unanswered: collateral.unanswered, + // The actor this attempt is keyed on, read once at the top like everything else here. + by: actorId, + reason: "context_changed", + }); + } + if (withdrawn) + await store.markAuthorizationWithdrawn({ actorId, authId }); + else await store.markAuthorizationUnreconciled({ actorId, authId }); + return refusedWith("context-changed"); + } + + /* + * ONE TRANSACTION, AND A REPLAY IS A NO-OP RATHER THAN AN ERROR. The attempt row is the + * serialization point: zero rows updated means somebody else completed this attempt first, and + * the loser is answered exactly as the winner is and writes nothing. See + * {@link PluginStore.completeAuthorizationAttempt}. + * + * `authProvider` IS ASKED OF THE BROKER AND NEVER DERIVED FROM THE TOOLKIT NAME. The two + * coincide only where an operator happened to name their provider configuration after the + * app, which {@link ConnectedAppBroker.authProviderOf} sets out at length — so a derivation + * would pass every test in this tree and be wrong about the deployment it shipped to. A + * vendor that does not say is recorded as not saying, and a vendor that cannot be reached for + * it costs nobody their completed consent: this is an audit label, and the grant is already + * live. It is never read back out of a status reply, which D31's narrowing makes + * structurally impossible anyway. + */ + const authProvider = await withVendorDeadline(() => + composio.broker.authProviderOf(fresh.toolkit), + ).catch(() => null); + + /* + * AND THE LANDING COMES FROM THE ATTEMPT ROW (D18), NEVER FROM `next_uri`. The vendor refuses + * every `next_uri` at mint, and what `confirm_user` answers is the vendor's OWN success page + * rather than ours. The row holds the app and the action this consent was for, and it cannot + * be missing here — this handler refused long before it needed an address — so there is no + * fallback to specify. + * + * AND BOTH HOLDERS LAND ON THE SAME SCREEN, which is the only one that reads `?action=`. An + * account the deployment holds used to be sent to `/admin/plugins/:key`, but that route has no + * `validateSearch` for `action`, no landing notice and no grant list, so the whole Shared-app + * flow completed a consent at the vendor and landed somewhere that said nothing about it. The + * settings page draws the Shared app's grant list and the landing notice for either holder, + * so this is where the action somebody just authorized is actually named and marked. + * + * `connectedAccountsUrlFor` with `{ serverId }` answers a query-less path, so appending + * `?action=` here cannot produce a second `?`. + * + * BUILT BEFORE THE WRITE RATHER THAN AFTER IT, so that the only thing standing between a + * committed grant and the person's browser is the redirect itself. Both reads are off the + * attempt row and neither calls anybody. + */ + const landing = `${connectedAccountsUrlFor(connect?.appUrl, { + serverId: attempt.serverId, + })}?action=${encodeURIComponent(attempt.action)}`; + + /* + * THE COMPLETION HAS ITS OWN `catch`, AND IT IS THE ONLY PLACE ON THIS LEG THAT MAY ANSWER + * `not-recorded`. + * + * THE DEFECT IT CLOSES, FIRST HALF: the blanket `catch` below used to answer `not-recorded` + * for every throw in this handler INCLUDING ONE RAISED AFTER THIS TRANSACTION HAD COMMITTED. + * The grant is live at the vendor and the row is written here, and the person was told it was + * not recorded — so they start over, mint a second consent against a connection they already + * have, and the one sentence this leg exists to get right is the one it got backwards. + * + * THE TWO ARE NOT TOLD APART BY WHETHER THE CALL THREW. The transaction is all-or-nothing + * ({@link PluginStore.completeAuthorizationAttempt}), but "the call rejected" and "the work + * rolled back" are different facts: a connection lost on the way back from a COMMIT the + * server already applied rejects here over a grant that IS written down. So the row the + * transaction serializes on is ASKED + * ({@link PluginStore.authorizationAttemptCompleted}) rather than inferred from the throw, + * and that answer — not the throw — decides which sentence the person gets. A probe that + * cannot be reached either reads as not recorded, which is the reading that sends somebody + * back to try again rather than away believing in a grant that is not there; the completion + * is idempotent on `completed_at IS NULL`, so a retry over a grant that did land writes + * nothing twice. + * + * SECOND HALF: IT IS LOGGED, which the blanket `catch` did not do at all. This is the one leg + * where a vendor grant can be LIVE with nothing here recording it, and it was also the one + * leg that left an operator no trace of that happening — every sibling on this route logs, + * and this is the same line `arcade-mint-not-recorded` writes at the other end of the same + * lifecycle, for the same reason: the `ar_…` is what lets an operator find that flow at the + * vendor and end it. + * + * WHAT IS IN THE LINE IS EXACTLY WHAT IS SAFE TO PUT THERE. The authorization id, the app and + * the action: the first is the handle the mint log already carries, and the other two are + * this deployment's own catalogue names. NOT the `authorization.url`, which is the bearer + * capability whoever opens it attaches the account with and which this handler never holds a + * copy of anyway; NOT the status reply, which carries a LIVE PROVIDER ACCESS TOKEN and the + * person's profile behind D31's narrowing; NOT the granted scopes and NOT the vendor user id, + * which name the person and buy an operator nothing the id does not. The error goes through + * {@link reasonWithoutStatement}, because a `DrizzleQueryError`'s own message is the failed + * statement and every value bound to it — which here includes the scope list and the account. + */ + try { + await store.completeAuthorizationAttempt({ + actorId, + authId, + toolkit: fresh.toolkit, + account: fresh.account, + action: attempt.action, + scopes: settled.scopes, + authProvider: authProvider ?? "", + }); + recorded = true; + } catch (error) { + recorded = await store + .authorizationAttemptCompleted({ actorId, authId }) + .catch(() => false); + console.error( + JSON.stringify({ + type: recorded + ? "arcade-completion-unacknowledged" + : "arcade-completion-not-recorded", + server: attempt.serverId, + action: attempt.action, + authorizationId: authId, + note: recorded + ? "A per-action consent was written down and the write then failed to report itself. The attempt row says it committed, so the person was sent on to the page that says so and nothing needs redoing." + : "A person completed a per-action consent at the vendor and this deployment could not write it down. The authorization named here is LIVE at the vendor with nothing here recording it; the person was told so, and the attempt row stands until its TTL.", + error: reasonWithoutStatement(error), + }), + ); + if (!recorded) return refusedWith("not-recorded"); + } + + return context.redirect(landing, 303); + } catch (error) { + /* + * AND THE BLANKET `catch` IS NO LONGER WHERE A LOST COMPLETION GOES QUIET. It stands over the + * reads that happen BEFORE the completion — the guard's session and role reads, the attempt + * read, and the refusals' own string building — so `not-recorded` is true of everything that + * reaches it: the completion above answers for itself, under its own `catch`, and never falls + * through to here still thinking it might have landed. + * + * `recorded` IS LOGGED RATHER THAN ASSUMED FALSE. The only step left after the completion is + * the redirect, and the sole way it can throw is a `Location` this deployment's own `appUrl` + * made unencodable — which would equally defeat the refusal built below, so there is no + * honest second answer to give here and the flag is what makes the claim checkable in a + * deployment rather than only in this comment. + * + * LOGGED AT ALL, which is the second half of what this leg was missing: every sibling on this + * route reports a failure it swallowed, and this one reported nothing. With the same + * restraint as the completion's own line above and nothing of the vendor's in it, through + * {@link reasonWithoutStatement} for the reason given there. + */ + console.error( + JSON.stringify({ + type: "arcade-verify-failed", + recorded, + note: "A check on the verifier raised instead of answering. The person was sent back to the list with a failure.", + error: reasonWithoutStatement(error), + }), + ); + return refusedWith("not-recorded"); + } + }); } diff --git a/server/src/plugins/route-groups/context.ts b/server/src/plugins/route-groups/context.ts index 87635f5f8..c061485ce 100644 --- a/server/src/plugins/route-groups/context.ts +++ b/server/src/plugins/route-groups/context.ts @@ -1,9 +1,16 @@ import type { Hono, MiddlewareHandler } from "hono"; import type { BotAccessCheck } from "../../agents/profile-policy"; import type { AppVariables } from "../../auth/guards"; +import { BROKERED_PROFILE, type BrokerProvider } from "../access"; import type { AccountModeSwitch } from "../account-mode"; -import { brokerSentence, type ComposioBroker } from "../broker"; +import { + type AuthorizationFlow, + BrokerReturnUrlError, + brokerSentence, + type ComposioBroker, +} from "../broker"; import { vendorSentence } from "../composio"; +import type { AccountRef } from "../shared-accounts"; import type { SharedUseStore } from "../shared-use-store"; import type { PluginStore } from "../store"; @@ -70,15 +77,261 @@ export function brokerRefusal( } /** - * What a reader is told when Composio would not answer with its directory. + * A return address this deployment could not use, said once where an operator will read it. * - * One constant because two routes make that call — browsing the catalogue and enabling an app out of + * THE REMEDY AND THE READER HAD COME APART, WHICH IS WHAT THIS CLOSES. Both routes that check a + * return address are `requireUser`, so the sentence they answer with reaches somebody who pressed + * Connect — and `OPENBOT_APP_URL` is a variable they cannot set, named beside a vendor they may not + * even be on. {@link BrokerReturnUrlError} answers them with neither now, which would leave the + * operator's half nowhere at all if it were not written here: a misconfigured address would be + * invisible to the one person who can correct it. + * + * A LOG AND NOT A RESPONSE, because that is the difference between the two readers. The log is the + * operator's screen, and the sentence it carries is the error's own — written in `./broker`, naming + * the ACTIVE provider, and quoting no address, which is the promise that makes it safe to write + * down at all. Anything else thrown past this is somebody else's to explain, so it is ignored here + * rather than logged generically. + */ +export function logReturnUrlRefusal(error: unknown, serverId: string): void { + if (!(error instanceof BrokerReturnUrlError)) return; + console.error( + JSON.stringify({ + type: "broker-return-url-unusable", + serverId, + note: error.operatorMessage, + }), + ); +} + +/** + * What a reader is told when the active broker would not answer with its directory. + * + * One function because two routes make that call — browsing the catalogue and enabling an app out of * it — and a reader meeting the same failure through two doors should not meet two sentences. It * names the setting rather than quoting it: a key that was pasted with a space in it, or one for - * another project, is the likeliest reason Composio will not talk to this deployment at all. + * another project, is the likeliest reason the vendor will not talk to this deployment at all. + * + * THE VENDOR AND ITS SETTING COME OFF THE ACTIVE PROVIDER'S PROFILE, because the client shows the + * server's sentence in preference to its own fallback: a sentence that spelled one broker was read + * by an operator of the other. + */ +export function directoryUnavailable(provider: BrokerProvider): string { + const { vendor, envVar } = BROKERED_PROFILE[provider]; + return `${vendor} would not answer with its app directory, and said nothing about why. Check that ${envVar} is this project's key, and check ${vendor}'s status if it persists.`; +} + +/** + * Where a browser with no session is sent when it lands on the verifier, carrying what it arrived + * with. + * + * ABSOLUTE ON THE APP'S ORIGIN, for the reason {@link connectedAccountsUrlFor} is: the verifier + * lands on the API and the sign-in screen is a page, and locally those are two different ports — a + * relative `Location` would resolve against this server, which serves no pages at all. A deployment + * that serves both from one origin has no `appUrl`, and relative is correct there. + * + * THE HANDLE TRAVELS AS ITSELF AND NOT AS A RETURN ADDRESS. A `next=` parameter holding a URL is a + * redirect target somebody else gets a say in; this carries the one opaque value the return leg + * arrived with, so signing back in as the same person has everything it needs to resume and nothing + * it could be pointed elsewhere with. Encoded, because it is somebody else's id and this deployment + * does not know what is in it. + */ +export function signInUrlFor( + appUrl: string | undefined, + flowId: string, +): string { + const base = `${appUrl?.replace(/\/+$/, "") ?? ""}/sign`; + return flowId ? `${base}?flow_id=${encodeURIComponent(flowId)}` : base; +} + +/** + * WHY THE VERIFIER REFUSED, AS AN OPAQUE CODE — and the CLOSED SET of them. + * + * THE CODE TRAVELS AND THE SENTENCE DOES NOT. Each of these is rendered by the connected-accounts + * list, which holds the words; a message rendered from a query string is a message anybody can + * author on this deployment's own origin, and the code is also what keeps the copy in ONE place + * rather than in two that drift. The parameter is `?authorized=`, a channel of its own: `?connected=` + * belongs to the Composio OAuth callback and is neither reused nor widened here. + * + * ASSERTED AS A SET so an eleventh cannot be added without a test going red, and so the app's own map + * can be held to exactly the same list. + */ +export const AUTHORIZATION_REFUSALS = [ + // This deployment reaches no broker at all, so there is no return leg to verify. + "no-broker", + // The broker it reaches declares no correlated authorization flow. + "not-supported", + // The link arrived without the part that says which authorization it finishes. + "missing-handle", + // Nothing USABLE of this person's is waiting: never started, expired, another session's, a mint + // that never answered with an id, or a row that cannot say whose account it is for. + "no-attempt", + // The vendor was asked and did not answer. + "vendor-unavailable", + // The link, or the authorization behind it, is not the one this person is holding. + "not-your-authorization", + // The consent has not finished at the vendor yet. The attempt is LEFT STANDING for a retry. + "not-finished", + // The vendor says the authorization did not complete. + "authorization-failed", + // The app's account context moved on while the consent was open (D28). + "context-changed", + // This deployment could not write what it had, so it wrote none of it. + "not-recorded", +] as const; + +export type AuthorizationRefusal = (typeof AUTHORIZATION_REFUSALS)[number]; + +/** Whether two account references name the same account, holder included. */ +export function sameAccount(left: AccountRef, right: AccountRef): boolean { + if (left.vendorUserId !== right.vendorUserId) return false; + if (left.holder === "person") { + return right.holder === "person" && left.userId === right.userId; + } + return right.holder === "deployment"; +} + +/** + * A BROKER CALL THAT DID NOT ANSWER INSIDE ITS BOUND, AND CARRYING NOTHING OF THE VENDOR'S (D31). + * + * The message names this deployment's own bound and the thrown object has no `cause`, deliberately: + * a call that times out on the return leg is a call whose answer would have carried a LIVE provider + * access token and a full profile, and the one thing certain about a half-read answer is that + * nobody has narrowed it yet. So there is nothing here to attach, log or quote — which is the same + * promise {@link brokerRefusal} makes about the vendor's own errors, kept by having no vendor + * material to begin with. + * + * It is an ordinary `Error` to every reader of it: `brokerSentence` does not author it and + * `vendorSentence` finds no nested body, so every call site below answers it with its OWN generic + * sentence and a 502 — "we asked and got nothing back", which is exactly what happened. + * + * NOT EXPORTED, because nothing outside this file should be branching on it: every exit it can + * reach is already one of this file's own refusals, and a caller matching on the class would be + * re-deciding what the catch blocks here have decided. */ -export const DIRECTORY_UNAVAILABLE = - "Composio would not answer with its app directory, and said nothing about why. Check that COMPOSIO_API_KEY is this project's key, and check Composio's status if it persists."; +class VendorTimeoutError extends Error { + constructor(afterMs: number) { + super(`The broker did not answer within ${afterMs}ms.`); + this.name = "VendorTimeoutError"; + } +} + +/** + * How long ONE outbound call to the broker may take before this deployment stops waiting on it. + * + * EVERY CALL OUT OF THIS FILE GOES THROUGH {@link withVendorDeadline}, and that is the invariant + * rather than the number. A bound on how MANY times something is attempted is not a bound at all + * while each attempt is unbounded: a vendor that accepts the connection and then never writes a + * byte holds the socket, the handler and the browser open for as long as it cares to, and no retry + * limit, poll count or loop condition is ever reached because the first wait never ends. + */ +const VENDOR_CALL_TIMEOUT_MS = 10_000; + +/** + * The same bound on ONE return-leg status poll, and tighter because a browser is held open on it. + * + * Five polls at two seconds with four one-second pauses is a worst case of FOURTEEN seconds for the + * whole wait, and that arithmetic is the point of stating both numbers here. + */ +export const STATUS_CALL_TIMEOUT_MS = 2_000; + +/** + * At most five polls, pausing BETWEEN them — so four pauses, not five. NEVER the SDK's unbounded + * `waitForCompletion`. + */ +const STATUS_POLLS = 5; +const STATUS_PAUSE_MS = 1000; + +/** + * One outbound vendor call under a deadline, with an `AbortSignal` for the seams that take one. + * + * THE SIGNAL IS THE HALF THAT MATTERS UPSTREAM AND THE RACE IS THE HALF THAT MATTERS HERE. The race + * is what lets the handler answer and the browser go; aborting is what stops this deployment from + * holding a socket open against a vendor it has already given up on, and the seams that can carry + * a signal take it (see {@link AuthorizationFlow}). A seam that cannot is still bounded by the + * race — a timeout is a timeout to the person waiting either way — and its call is simply + * abandoned rather than cancelled. + * + * THE TIMER IS CLEARED ON BOTH OUTCOMES. A pending timer on a call that answered in time would keep + * an event loop alive for the rest of the bound, which in a test run is a suite that will not exit + * and in a deployment is a handler that has returned still holding a reason not to. + * + * NOTHING IS RETRIED HERE. A deadline that retried would be the very shape this fix exists to + * remove, one layer up. + */ +export function withVendorDeadline( + call: (signal: AbortSignal) => Promise, + afterMs: number = VENDOR_CALL_TIMEOUT_MS, +): Promise { + const controller = new AbortController(); + let timer: ReturnType | undefined; + const deadline = new Promise((_resolve, reject) => { + timer = setTimeout(() => { + controller.abort(); + reject(new VendorTimeoutError(afterMs)); + }, afterMs); + }); + /* + * A CALL THAT THROWS BEFORE IT RETURNS A PROMISE IS A REJECTION, NOT AN ESCAPE. The deadline is + * already armed by this line, so invoking `call` bare inside the race would let a synchronous + * throw — `brokerReturnUrl` refusing a scheme-less `OPENBOT_APP_URL` while the callback builds its + * argument is the one that happens — leave this function before the race and its `.finally` + * exist: the timer stays armed, aborts nothing anybody is waiting on and rejects `deadline` with + * no one subscribed, and a caller's `.catch(...)` on the returned promise is skipped entirely. + * Calling it inside an executor turns that throw into this promise's rejection, still + * synchronously and still exactly once. + */ + const answer = new Promise((resolve) => resolve(call(controller.signal))); + /* + * `Promise.race` subscribes to both, so a call that answers AFTER the deadline has its rejection + * observed here and never surfaces as an unhandled one. Its answer is dropped unread, which is + * also the D31-safe thing to do with it. + */ + return Promise.race([answer, deadline]).finally(() => { + if (timer !== undefined) clearTimeout(timer); + }); +} + +/** + * Where one authorization has got to, waited for with a BOUND ON THE WHOLE WAIT AND ON EACH CALL. + * + * `pending` is the only state worth asking again about, and five polls at two seconds each with a + * one-second pause between them — at most fourteen seconds, and the pauses are BETWEEN the polls, + * so four of them and not five — is the whole of the patience this has. A timeout is neither a + * success nor a failure, so what comes back is the last answer read and the caller decides; nothing + * here writes, retries forever or blocks a browser on a vendor that has stopped answering. + * + * THE POLL COUNT ALONE NEVER BOUNDED ANYTHING. It bounded how many times `flow.status` was CALLED, + * while each call waited as long as the vendor liked — so a vendor that accepted the connection and + * never answered held this request open forever, which is the one case the paragraph above claims + * to prevent. {@link withVendorDeadline} is what makes the claim true, and a poll that spends its + * own bound THROWS rather than counting: a vendor that will not answer in two seconds is a vendor + * that is not answering, and the caller's `vendor-unavailable` refusal leaves the attempt row + * standing exactly as the exhausted-polls refusal does. + * + * WHAT COMES BACK IS THE SEAM'S THREE FIELDS AND NOTHING MORE (D31). The vendor's own status reply + * carries a live provider access token and the person's full profile; the adapter drops them, and + * this function must never widen what it hands on, log it, or attach it as a `cause`. + */ +export async function settledStatus( + flow: AuthorizationFlow, + id: string, +): Promise>> { + const poll = () => + withVendorDeadline( + (signal) => flow.status(id, { signal }), + STATUS_CALL_TIMEOUT_MS, + ); + let answer = await poll(); + for ( + let polls = 1; + polls < STATUS_POLLS && answer.status === "pending"; + polls += 1 + ) { + await new Promise((resolve) => setTimeout(resolve, STATUS_PAUSE_MS)); + answer = await poll(); + } + return answer; +} /** What the connect flow needs that the store does not hold. See `createPluginRoutes`. */ export type PluginConnectOptions = { @@ -123,8 +376,14 @@ export type PluginRouteContext = { requireUser: MiddlewareHandler<{ Variables: AppVariables }>; canUseBot: BotAccessCheck; connect: PluginConnectOptions | undefined; - composio: { broker: ComposioBroker } | undefined; + composio: { broker: ComposioBroker; provider: BrokerProvider } | undefined; shared: { modes: AccountModeSwitch; use: SharedUseStore } | undefined; + /** The provider this deployment's brokered rows belong to. See `createPluginRoutes`. */ + activeProvider: BrokerProvider; + /** {@link activeProvider}'s name as the sentences on this layer spell it. */ + activeVendor: string; + /** Which app a brokered row is, read by {@link activeProvider}'s own parser. */ + appOfUrl: (url: string) => string | null; actorEmail: (context: { var: AppVariables }) => string; skillActor: (context: { var: AppVariables }) => { id: string; diff --git a/server/src/plugins/route-groups/servers.ts b/server/src/plugins/route-groups/servers.ts index 9c51fdab2..0eb831c6d 100644 --- a/server/src/plugins/route-groups/servers.ts +++ b/server/src/plugins/route-groups/servers.ts @@ -2,7 +2,7 @@ import { requireAdmin } from "../../auth/guards"; import { reasonWithoutStatement } from "../../db/query-failure"; import { brokerSentence, schemeKind } from "../broker"; import { CATALOGUE } from "../catalogue"; -import { toolkitOf, vendorSentence } from "../composio"; +import { vendorSentence } from "../composio"; import { redirectUriFor } from "../oauth"; import { asAccountMode } from "../shared-accounts"; import { asSharedUseApproval, type SharedUseApproval } from "../shared-use"; @@ -22,6 +22,9 @@ export function mountServerRoutes({ connect, composio, shared, + activeProvider, + activeVendor, + appOfUrl, actorEmail, skillActor, }: PluginRouteContext) { @@ -61,6 +64,46 @@ export function mountServerRoutes({ * screen needs is whether to draw the app directory, which is a yes or a no. */ composioConfigured: Boolean(composio), + /* + * Whether this deployment's broker authorizes ONE ACTION AT A TIME, as a declared capability. + * + * A PRESENCE TEST ON A VALUE THE BROKER DECLARED, computed from the same expression the two + * routes that run that flow gate on — `/servers/:id/authorize` and the `/arcade/verify` + * return leg both read `composio.broker.authorizations`. The screen that draws the per-action + * grant list used to gate on `provider === "arcade"` instead, so the screen and the routes + * keyed on different facts: a broker named arcade reached with `authorizations` null would + * have drawn the list and 503'd every Authorize press. See {@link + * ConnectedAppBroker.authorizations} and `store.ts`'s gate comment, which records a defect of + * exactly that shape. + * + * A capability, never a name: what the screen asks is what the broker can DO, and two + * providers are free to share an answer. `provider` beside it stays a NAME and answers a + * different question — which vendor to put in copy. + * + * False on Composio, whose auth config fixes one state for a whole toolkit, so every Composio + * render is unchanged. + */ + authorizesPerAction: Boolean(composio?.broker.authorizations), + /* + * WHICH vendor brokers this deployment's apps, as a name. + * + * Handed in with the broker, never read off it: the broker declares what it can do, not who + * it is, and a name sniffed from it would be the comparison the store argues against. + * + * A screen that FILTERS by brokered-ness needs no provider name. One provider holds rows at a + * time, so a predicate over a row's provenance is enough. A screen that NAMES a vendor + * ("Browse Composio", the `/admin/plugins/composio` route, the key's setting, "Reached + * through Composio") cannot derive that name from a row, and this is the only thing that + * answers it. It is separate from `composioConfigured`, which asks whether the directory can + * be browsed at all. + * + * A NAME, never a key and never a capability. The Plugins page is reachable by any signed-in + * person, so nothing about the vendor key (its presence, shape or anything derived from it) + * travels with this. Composio when no broker is configured, so that deployment is unchanged — + * read from {@link activeProvider}, which is also what the brokered reads below parse with, so + * the name this page shows and the parser those routes use cannot come apart. + */ + provider: activeProvider, servers: await store.listServers(), // Scoped: the deployment's skills plus this person's own. An administrator sees them all. skills: await store.listSkills(skillActor(context)), @@ -358,7 +401,7 @@ export function mountServerRoutes({ JSON.stringify({ type: "mcp-server-not-removed", server: serverId, - note: "Removing a server failed for a reason neither this deployment nor Composio put a sentence to. The administrator was answered 502 with the generic sentence, and the server row is still there.", + note: `Removing a server failed for a reason neither this deployment nor ${activeVendor} put a sentence to. The administrator was answered 502 with the generic sentence, and the server row is still there.`, error: reasonWithoutStatement(error), }), ); @@ -366,12 +409,36 @@ export function mountServerRoutes({ const refusal = brokerRefusal( error, - "Removing this app did not finish, and neither this deployment nor Composio said why, so the app is still here rather than gone with grants of its own left live at the vendor. Press Remove again: every account is withdrawn at Composio before anything here is deleted, so repeating it is safe and asks only for what is left. Check this deployment's Composio key if it persists.", + `Removing this app did not finish, and neither this deployment nor ${activeVendor} said why, so the app is still here rather than gone with grants of its own left live at the vendor. Press Remove again: every account is withdrawn at ${activeVendor} before anything here is deleted, so repeating it is safe and asks only for what is left. Check this deployment's ${activeVendor} key if it persists.`, ); return context.json({ error: refusal.error }, refusal.status); } - if (wasShared) - await shared?.modes.forgetRule(serverId, context.var.actor.id); + /* + * THE SAME SHAPE AS THE MINT'S RECORD-AFTER-THE-FACT BELOW, AND GUARDED FOR THE SAME REASON. + * `removeServer` has already returned, which means every account was withdrawn AT THE VENDOR + * and every row here is gone — none of it undoable, and none of it repeatable either: a second + * Remove finds no app. Unhandled, a fault tidying up the one leftover ask-before-write rule + * answered that completed removal with a bodyless 500, so the administrator was told the + * removal failed and had no press left to make. + * + * SO THE ANSWER STAYS `ok`, BECAUSE THE REMOVAL REALLY DID HAPPEN, and the leftover is named on + * the console instead: a revoked-rule row that outlives the app it guarded, which an + * administrator can retire from the rules screen and which grants nobody anything meanwhile. + */ + if (wasShared) { + try { + await shared?.modes.forgetRule(serverId, context.var.actor.id); + } catch (error) { + console.error( + JSON.stringify({ + type: "shared-rule-not-forgotten", + server: serverId, + note: "An app was removed, at the vendor and here, and its ask-before-write rule could not be retired afterwards. The administrator was answered ok, because the removal is done and cannot be repeated; the rule is still standing.", + error: reasonWithoutStatement(error), + }), + ); + } + } return context.json({ ok: true }); }); @@ -398,7 +465,7 @@ export function mountServerRoutes({ return context.json({ error: "Choose personal or shared." }, 400); const serverId = context.req.param("id"); const row = await store.serverAddress(serverId); - if (!row || !toolkitOf(row.url)) { + if (!row || !appOfUrl(row.url)) { return context.json( { error: "That app is not reached through a broker." }, 400, diff --git a/server/src/plugins/routes.ts b/server/src/plugins/routes.ts index b3cebe4ba..e78ce8b17 100644 --- a/server/src/plugins/routes.ts +++ b/server/src/plugins/routes.ts @@ -1,6 +1,7 @@ import { Hono, type MiddlewareHandler } from "hono"; import type { BotAccessCheck } from "../agents/profile-policy"; import type { AppVariables } from "../auth/guards"; +import { BROKERED_PROFILE, type BrokerProvider, toolkitOfFor } from "./access"; import type { AccountModeSwitch } from "./account-mode"; import type { ComposioBroker } from "./broker"; import { mountComposioAppRoutes } from "./route-groups/composio-apps"; @@ -16,7 +17,11 @@ import { mountSkillRoutes } from "./route-groups/skills"; import type { SharedUseStore } from "./shared-use-store"; import type { PluginStore } from "./store"; -export type { ConnectingPersonCheck } from "./route-groups/context"; +export type { + AuthorizationRefusal, + ConnectingPersonCheck, +} from "./route-groups/context"; +export { AUTHORIZATION_REFUSALS } from "./route-groups/context"; /** * The Plugins surface: what this deployment has added, and which Bots may use it. @@ -72,7 +77,7 @@ export function createPluginRoutes( * trap `connect` documents applies here with one more argument in it — every parameter from that * position on is optional, so a misplaced one typechecks and quietly does nothing. */ - composio?: { broker: ComposioBroker }, + composio?: { broker: ComposioBroker; provider: BrokerProvider }, /** * Who may use an app's one shared account, and the switch that makes an app Shared or Personal. * @@ -84,6 +89,80 @@ export function createPluginRoutes( ) { const routes = new Hono<{ Variables: AppVariables }>(); + /** + * WHICH broker this deployment's rows are reached through, as a name, read once for the whole + * layer. + * + * HANDED IN WITH THE BROKER AND NEVER SNIFFED OFF IT. The broker declares what it can DO — + * `grantIsLocal`, `authorizations` — deliberately not who it is, so a vendor name derived from it + * would be the comparison `store.ts` argues against, made against a capability that two providers + * are free to share. + * + * TAKEN FROM THE STORE, BECAUSE THE STORE'S ROWS ARE WHAT IS BEING NAMED. It used to be read off + * the broker bag with `?? "composio"` behind it, and that `??` was a second answer to a question + * `server/src/index.ts` had already answered. The two came apart exactly where it hurt: a + * deployment with both API keys set and `OPENBOT_BROKER_PROVIDER` unset — legal, and what a + * migration sits in — is wired with NO broker, so the bag is absent, so every `arcade://` row of + * that deployment was parsed with Composio's parser. The account-mode switch refused those rows + * as "not reached through a broker", the directory called enabled apps not enabled, connect fell + * past its brokered branch in silence, and the operator was told to set COMPOSIO_API_KEY. The + * store was built with the one name the deployment decided; reading it here means the parser + * these routes use, the filter the store queries with and the name the page shows are one value. + * + * NO BROKER IS STILL NOT THE CASE THIS DECIDES. Rows outlive a key being unset, and the + * Personal ⇄ Shared switch is wired from the shared bag rather than from the broker, so it + * answers for such a row today — now with that row's own parser rather than Composio's. + */ + const activeProvider: BrokerProvider = store.brokerProvider; + /* + * Said at construction, not at the first request. A store without this field is a stand-in rather + * than a store, and one that got this far would have every brokered read dispatch on `undefined` + * — four routes answering wrongly, none of them raising. Typed as present, so this catches only a + * cast; it refuses rather than filling in a vendor, which is the whole of this file's bug. + */ + if (!activeProvider) { + throw new Error( + "createPluginRoutes was given a plugin store with no brokerProvider. The store names the provider its rows belong to; the routes never guess one.", + ); + } + + /** + * The ACTIVE broker's name, as the sentences on this layer spell it. + * + * ONE READING FOR EVERY SENTENCE, AND NEVER A LITERAL. Every refusal below used to spell + * "Composio" into the prose — the app that would not be removed, the app that would not be + * enabled, the six ways a key app's connect fails, the consent with nowhere to send anybody, and + * the confirm, re-check and disconnect tails. On an Arcade deployment each of them named a vendor + * this deployment holds no key for and never dials, and sent the reader to check a key that does + * not exist. The name comes off {@link activeProvider}'s profile, which is also what the brokered + * reads below parse with, so the vendor a sentence names and the vendor a route actually reached + * cannot come apart. + * + * THE PROFILE RATHER THAN A TERNARY, because {@link BROKERED_PROFILE} is where a provider's + * vocabulary is written down once — a second spelling here is the second home the record exists + * to prevent, and a provider added to it without being added here would typecheck. + */ + const activeVendor = BROKERED_PROFILE[activeProvider].vendor; + + /** + * Which app a brokered row is, read by the parser belonging to the broker this deployment runs. + * + * ONE PARSER PER PROVIDER, AND THEY ARE NOT INTERCHANGEABLE — the argument is {@link toolkitOfFor}'s + * and is not repeated here. What this layer adds is that all four reads below used to call + * Composio's parser by name, and that parser answers null for `arcade://Gmail` by design. Four + * reads, four different wrong answers on an Arcade deployment, and not one of them a failure or a + * log line: the account-mode switch refused a brokered app as "not reached through a broker", the + * directory reported every enabled app as not enabled, the connect route fell past its brokered + * branch in silence, and `brokeredAccountFor` — step one of confirm, re-check and disconnect — + * refused a connected app before any account was resolved. + * + * A CLOSURE RATHER THAN THE DISPATCH SPELLED FOUR TIMES, which is how `shared-use-store.ts` holds + * the same thing: the provider is read in one place, so a fifth read added below cannot be the one + * that forgets to pass it. + */ + const appOfUrl = (url: string): string | null => + toolkitOfFor(activeProvider, url); + const actorEmail = (context: { var: AppVariables }) => context.var.actor?.email ?? "unknown"; @@ -120,6 +199,9 @@ export function createPluginRoutes( connect, composio, shared, + activeProvider, + activeVendor, + appOfUrl, actorEmail, skillActor, skillRefusal, diff --git a/server/src/plugins/shared-accounts.ts b/server/src/plugins/shared-accounts.ts index 3792413f9..c68e33563 100644 --- a/server/src/plugins/shared-accounts.ts +++ b/server/src/plugins/shared-accounts.ts @@ -1,4 +1,5 @@ import { randomBytes } from "node:crypto"; +import { brokeredProvenance } from "./access"; import { type Decides, type SchemeKind, schemeKind } from "./broker"; /** @@ -20,10 +21,86 @@ export type AccountRef = | { holder: "person"; userId: string; vendorUserId: string } | { holder: "deployment"; vendorUserId: string }; +/** + * A PERSON'S ACCOUNT, AND WHY ITS TWO IDS ARE ONE VALUE. + * + * `userId` and `vendorUserId` are different CONCEPTS — who the account belongs to here, and the + * name the vendor files it under — and they are kept as two fields because the deployment holder + * proves they can differ: its vendor id is minted by {@link mintDeploymentVendorUserId} and has no + * local user at all. FOR A PERSON THEY ARE THE SAME VALUE ON PURPOSE, for both providers: + * + * - Neither vendor issues a user handle. Composio's `user_id` and Arcade's `user_id` are both a + * string the CALLER chooses and the vendor files connections under, so "the vendor's id for this + * person" is whatever this deployment sends, and what it sends is the person's own id. + * - Every person connection that exists was made that way. Before shared accounts the Composio + * adapter was handed the local user id directly, and migration 0052 backfilled + * `vendor_user_id = user_id` for every person row it carried over. Sending anything else now + * would ask the vendor about an identity nobody connected under, and every existing connection + * would read as absent. + * - Arcade echoes the id back: a return leg's settled `userId` is compared to the attempt's stored + * `vendor_user_id`, which was minted from this ref. + * + * SO DO NOT "FIX" THE COLLAPSE BY DERIVING A DIFFERENT VENDOR ID HERE without migrating every + * stored person row and every vendor-side connection with it. And do not read the collapse as + * licence to use one field for the other: a store lookup by person matches `user_id`, a vendor call + * sends `vendorUserId`, and code that crosses them is only right by coincidence. This is the one + * place a person's ref is minted from a local id; a ref read back from a stored row goes through + * {@link asAccountRef} and carries the row's own `vendor_user_id`. + */ +export function personAccount(userId: string): AccountRef { + return { holder: "person", userId, vendorUserId: userId }; +} + export function asAccountMode(value: unknown): AccountMode | null { return value === "personal" || value === "shared" ? value : null; } +/** + * A STORED `(holder, user_id)` PAIR READ BACK AS THE ACCOUNT IT NAMES, or `null` when it names no + * account this deployment may act in. + * + * THE POINT IS THE `null`, AND IT EXISTS BECAUSE THE OTHER READING IS SILENT. A row that says + * `person` and carries no user id was for years rebuilt as `{ holder: "deployment" }` by a ternary + * whose else-branch quietly absorbed it — and a reference is not a label: it is what a revoke, a + * grant read and a call are aimed at. Aimed one holder out, a disconnect somebody asked for ends + * the DEPLOYMENT's connection and leaves theirs live, or ends the deployment's on one person's + * behalf. Both failures look exactly like success from the browser that asked. + * + * THE TWO REFUSALS ARE THE DATABASE'S OWN CHECK, RESTATED WHERE TYPESCRIPT CAN SEE IT. + * `brokered_connections_holder_check` and `pending_authorizations_holder_check` both hold + * `(person AND user_id IS NOT NULL) OR (deployment AND user_id IS NULL)`, so for a row that came + * out of either table every refusal here is already impossible — which is the whole reason to + * refuse rather than to coerce. An impossible state answered with a plain `null` is a caller's + * refusal; the same state absorbed into the other holder is a wrong act with no trace. The empty + * string is refused with the null, because a CHECK for `IS NOT NULL` does not stop `''` and `''` is + * nobody's user id. + * + * `holder` IS TAKEN AS `string` ON PURPOSE. drizzle's `$type<>` is erased at runtime, so a column + * declared as the pair can still deliver a third word; a parameter typed as the union would let the + * compiler promise what only the CHECK enforces. + */ +export function asAccountRef(stored: { + holder: string; + userId: string | null; + vendorUserId: string; +}): AccountRef | null { + if (stored.holder === "person") { + return stored.userId + ? { + holder: "person", + userId: stored.userId, + vendorUserId: stored.vendorUserId, + } + : null; + } + if (stored.holder === "deployment") { + return stored.userId + ? null + : { holder: "deployment", vendorUserId: stored.vendorUserId }; + } + return null; +} + export type AccountAnswer = | { kind: "none" } | { kind: "person"; userId: string } @@ -39,7 +116,7 @@ export function accountFor( }, credentialActorId: string, ): AccountAnswer { - if (row.provenance !== "composio") return { kind: "none" }; + if (!brokeredProvenance(row.provenance)) return { kind: "none" }; const kind = schemeKind(row.authScheme); type _AccountForDecides = Decides< diff --git a/server/src/plugins/shared-use-store.ts b/server/src/plugins/shared-use-store.ts index c63c345ad..1ac9f9609 100644 --- a/server/src/plugins/shared-use-store.ts +++ b/server/src/plugins/shared-use-store.ts @@ -20,7 +20,7 @@ import { teamBotPublications, users, } from "../db/schema"; -import { toolkitOf } from "./composio"; +import { BROKERED_PROFILE, type BrokerProvider, toolkitOfFor } from "./access"; import { type ActorFacts, type ApprovalMember, @@ -73,12 +73,38 @@ export type SharedUseGate = (input: { const sameApproval = (left: SharedUseApproval, right: SharedUseApproval) => covers(left, right) && covers(right, left); -export function createSharedUseStore(database: Database) { +/** + * The url scheme a broker's apps live at, read from the one record that holds it. + * + * DERIVED HERE AS `${provider}://` UNTIL {@link BROKERED_PROFILE} BECAME REACHABLE. That derivation + * was right about every scheme there is and still a second source of truth: the store mints its rows + * from the record, this read them back from a rule, and nothing held the two in step beyond the + * happy fact that a broker's scheme is its own name. A third broker that spelled its scheme any + * other way would have had its rows written at one address and looked for at another, silently, in + * the gate that decides who may use a shared account. One table, one spelling. + */ +const schemeOf = (provider: BrokerProvider) => + BROKERED_PROFILE[provider].scheme; + +/** + * `provider` IS REQUIRED, with no default, for the reason `PluginStoreOptions.brokerProvider` is: + * this store has to read urls with the same parser, at the same scheme, as the store whose gate + * consults the approvals filed here. A default would let the two disagree silently, which is the + * failed-open shape the canonical-url rule below exists to prevent. The caller passes the one value + * the plugin store is given. + */ +export function createSharedUseStore( + database: Database, + provider: BrokerProvider, +) { const roles = createRoleRepository(database); + const scheme = schemeOf(provider); + const appOfUrl = (url: string) => toolkitOfFor(provider, url); + const canonicalUrlOf = (toolkit: string) => `${scheme}${toolkit}`; /* * EVERY ROW AT AN APP'S CANONICAL URL, LOWEST ID FIRST — THE ANSWERING ROW IS THE HEAD. Several - * `mcp_servers` rows may point at one `composio://` url (the url has no unique index, + * `mcp_servers` rows may point at one `` url (the url has no unique index, * deliberately), and the store's `brokeredAppRowsAt` names the row that answers for the app as * the first one SQL's `order by id` yields at that url. This is the same rule spelled with the * same `order by`, so the deployment's collation decides here exactly as it decides there — a @@ -86,19 +112,19 @@ export function createSharedUseStore(database: Database) { * than imported because the store's helper is a closure inside `createStore`, and this store is * built from the database alone. * - * "AT THE URL" MEANS THE CANONICAL ONE, `composio://${toolkitOf(url)}`, NOT THE DIALLED ROW'S OWN - * url string. `toolkitOf` (`./composio`) trims whitespace and a trailing slash before it reads - * the slug, so a row stored as `composio://github/` or `composio://github ` names the toolkit - * `github` exactly as `composio://github` does — and the store's own gate (`brokeredAppRow`, + * "AT THE URL" MEANS THE CANONICAL ONE, `${scheme}${appOfUrl(url)}`, NOT THE DIALLED ROW'S OWN + * url string. `appOfUrl` (the active provider's own parser, via `toolkitOfFor`) trims whitespace and a trailing slash before it reads + * the slug, so a row stored as `github/` or `github ` names the toolkit + * `github` exactly as `github` does — and the store's own gate (`brokeredAppRow`, * `accountRefFor`) only ever looks rows up at the trimmed, canonical address. Grouping by the raw * stored url instead, as this used to, made such a row an app of its own: an approval granted or * read through it could never be found by the gate, which asks at the canonical url and nowhere * else. So THIS is "the same rule" the comment above claims — same `order by`, same address the * gate itself resolves to. * - * A row whose url is not `composio://` at all, or whose slug `toolkitOf` cannot parse, is an app + * A row whose url is not at the provider's scheme at all, or whose slug `appOfUrl` cannot parse, is an app * of its own and is the only row in its answer — the same two cases the store's own gate lets - * stand rather than refuses (`accountRefFor` reads `toolkitOf` only for a `composio` provenance, + * stand rather than refuses (`accountRefFor` reads `appOfUrl` only for a row provenanced at the active provider, * and a null result there is read as "not brokered", not as a refusal). * * NO ROW AT THE CANONICAL URL is answered by falling back to the dialled `serverId` itself, which @@ -122,9 +148,9 @@ export function createSharedUseStore(database: Database) { .where(eq(mcpServers.id, serverId)) .limit(1); const url = row?.url ?? null; - const toolkit = url ? toolkitOf(url) : null; + const toolkit = url ? appOfUrl(url) : null; if (!toolkit) return { appId: serverId, url, ids: [serverId] }; - const canonical = `composio://${toolkit}`; + const canonical = canonicalUrlOf(toolkit); const siblings = await database .select({ id: mcpServers.id }) .from(mcpServers) @@ -371,9 +397,9 @@ export function createSharedUseStore(database: Database) { * url to its answering row, and the mode, the title and the id returned are that row's. A Bot * holding tools through two rows at one url holds one app and is listed once. * - * "ITS URL" IS THE CANONICAL ONE A GRANTED ROW RESOLVES TO THROUGH `toolkitOf`, same as + * "ITS URL" IS THE CANONICAL ONE A GRANTED ROW RESOLVES TO THROUGH `appOfUrl`, same as * `rowsOfApp` above, and not the row's own stored url compared by prefix. A granted row stored as - * `composio://github/` is the toolkit `github` exactly as `composio://github` is, and grouping it + * `github/` is the toolkit `github` exactly as `github` is, and grouping it * by its raw url instead left it unmatched against the answering row at the trimmed address — so * a Bot holding the app only through such a row was listed under a row of its own, or dropped, * rather than under the one row the gate actually answers for the app. @@ -395,13 +421,13 @@ export function createSharedUseStore(database: Database) { .select({ id: mcpServers.id, url: mcpServers.url }) .from(mcpServers) .where(inArray(mcpServers.id, serverIds)); - const toolkitOfRow = (url: string | null) => (url ? toolkitOf(url) : null); + const toolkitOfRow = (url: string | null) => (url ? appOfUrl(url) : null); const canonicalUrls = [ ...new Set( granted .map((row) => toolkitOfRow(row.url)) .filter((toolkit): toolkit is string => !!toolkit) - .map((toolkit) => `composio://${toolkit}`), + .map(canonicalUrlOf), ), ]; const atUrls = @@ -421,7 +447,7 @@ export function createSharedUseStore(database: Database) { granted.map((row) => { const toolkit = toolkitOfRow(row.url); if (!toolkit) return row.id; - return answeringAt.get(`composio://${toolkit}`) ?? row.id; + return answeringAt.get(canonicalUrlOf(toolkit)) ?? row.id; }), ), ]; @@ -442,25 +468,25 @@ export function createSharedUseStore(database: Database) { * to contain `_` and `%`, which a LIKE would read as wildcards and match a neighbouring app's * grants by. * - * "ANY ROW AT ITS URL" HAS TO MEAN EVERY ROW `toolkitOf` RESOLVES TO THE SAME TOOLKIT, NOT ONLY + * "ANY ROW AT ITS URL" HAS TO MEAN EVERY ROW `appOfUrl` RESOLVES TO THE SAME TOOLKIT, NOT ONLY * THE ONES `rowsOfApp` FOUND AT THE EXACT CANONICAL URL. `rowsOfApp`'s `ids` already covers the * canonical rows plus the row actually dialled, but a grant can be made through a THIRD row — - * neither the dialled one nor stored at the trimmed address, e.g. `composio:///` sitting + * neither the dialled one nor stored at the trimmed address, e.g. `/` sitting * elsewhere in the table — and that row never surfaces from an exact `eq` on the canonical url. So - * every `composio://` row is read once here and matched in JavaScript by `toolkitOf`, which is the + * every row at the provider's scheme is read once here and matched in JavaScript by `appOfUrl`, which is the * one place that defines what "the same toolkit" means. */ async function botsHolding(serverId: string): Promise { const { ids, url } = await rowsOfApp(serverId); - const toolkit = url ? toolkitOf(url) : null; + const toolkit = url ? appOfUrl(url) : null; let allIds = ids; if (toolkit) { - const composioRows = await database + const schemeRows = await database .select({ id: mcpServers.id, url: mcpServers.url }) .from(mcpServers) - .where(sql`${mcpServers.url} like 'composio://%'`); - const matching = composioRows - .filter((row) => row.url && toolkitOf(row.url) === toolkit) + .where(sql`${mcpServers.url} like ${`${scheme}%`}`); + const matching = schemeRows + .filter((row) => row.url && appOfUrl(row.url) === toolkit) .map((row) => row.id); allIds = [...new Set([...ids, ...matching])]; } diff --git a/server/src/plugins/store.ts b/server/src/plugins/store.ts index 556bedac7..e74eb9e77 100644 --- a/server/src/plugins/store.ts +++ b/server/src/plugins/store.ts @@ -9,9 +9,12 @@ import { skillMethods } from "./plugin-store/skills"; export type { CatalogueEntry } from "./catalogue"; export type { AccessToken, + BrokeredDisconnectReason, BrokeredProbe, + ConnectionFootprint, GrantedPlugins, OAuthClient, + PendingAuthorization, PluginDecision, PluginKind, PluginStoreOptions, @@ -25,6 +28,7 @@ export type { export { BROKERED_PROBE_OUTCOMES, CatalogueEntryUnknownError, + connectionSiblings, CustomServerRefusedError, deploymentFaultSentence, exchangeRefreshTokenOverHttp, diff --git a/server/src/plugins/transport.ts b/server/src/plugins/transport.ts index 7a7d8bc10..e926533ce 100644 --- a/server/src/plugins/transport.ts +++ b/server/src/plugins/transport.ts @@ -1,3 +1,4 @@ +import * as arcade from "./arcade"; import * as builtinRoutines from "./builtin-routines"; import * as composio from "./composio"; import * as driveRest from "./google-drive-rest"; @@ -122,12 +123,13 @@ export type TransportKind = | "mcp" | "google-drive-rest" | "builtin-routines" - | "composio"; + | "composio" + | "arcade"; /** * The kinds a CATALOGUE ENTRY may name, which is every one except the broker's. * - * CRITERION. `composio` is not writable in a reviewed entry, and the compiler is what says so. + * CRITERION. Neither broker's transport (`composio`, `arcade`) is writable in a reviewed entry, and the compiler is what says so. * * REASON. A brokered row is reached by an app slug read off its url and a per-person connection * looked up by that slug; a catalogue entry has neither, and `accessFor` answers `toolkit: null` @@ -141,13 +143,17 @@ export type TransportKind = * `Exclude` rather than a hand-written second union, so a kind added above is offered to the * catalogue automatically and only the broker stays out. */ -export type CuratedTransportKind = Exclude; +export type CuratedTransportKind = Exclude< + TransportKind, + "composio" | "arcade" +>; const TRANSPORTS: Record = { mcp, "google-drive-rest": driveRest, "builtin-routines": builtinRoutines, composio, + arcade, }; /** diff --git a/server/tests/account-mode.integration.test.ts b/server/tests/account-mode.integration.test.ts index 8caa2a883..01c79f5a1 100644 --- a/server/tests/account-mode.integration.test.ts +++ b/server/tests/account-mode.integration.test.ts @@ -32,10 +32,17 @@ const rules: { }[] = []; const broker = { + // This stub stands in for Composio, whose grant is held locally and which runs no + // correlated authorization flow; see `ConnectedAppBroker.grantIsLocal` and `.authorizations`. + grantIsLocal: true, + // Nothing here asks what auth provider a connection is held under. + authProviderOf: async () => null, + authorizations: null, + grantsFor: async () => [], listApps: async () => [], ensureAuthConfig: async () => "standing", deleteAuthConfig: async () => {}, - authorize: async () => ({ redirectUrl: "x" }), + authorize: async () => ({ redirectUrl: "x", authorizationId: null }), isConnected: async () => true, revoke: async ({ account }) => { if (account.vendorUserId === failRevokeFor) @@ -50,6 +57,7 @@ const broker = { } satisfies ConnectedAppBroker; const store = createPluginStore({ + brokerProvider: "composio", database, auditStore: createAuditStore(database), credentials: {} as never, @@ -59,7 +67,7 @@ const store = createPluginStore({ deploymentId: "acme", sharedUse: async () => ({ allowed: true }), }); -const sharedUse = createSharedUseStore(database); +const sharedUse = createSharedUseStore(database, "composio"); const modes = createAccountModeSwitch({ store, sharedUse, diff --git a/server/tests/agent-callback-token.test.ts b/server/tests/agent-callback-token.test.ts index a73a6ad44..f80e640d5 100644 --- a/server/tests/agent-callback-token.test.ts +++ b/server/tests/agent-callback-token.test.ts @@ -420,6 +420,7 @@ describe("the tool-call route a callback token guards", () => { undefined, undefined, { + brokerProvider: "composio" as const, callTool: async () => { throw thrown; }, @@ -587,6 +588,7 @@ describe("the tool-call route a callback token guards", () => { */ function storeAnswering(result: { text: string; isError: boolean }) { return { + brokerProvider: "composio" as const, callTool: async () => ({ ...result, truncated: false }), listForAgent: async () => ({ tools: [ diff --git a/server/tests/agent-handoff.test.ts b/server/tests/agent-handoff.test.ts index 99a1cd5ff..97a98e6d9 100644 --- a/server/tests/agent-handoff.test.ts +++ b/server/tests/agent-handoff.test.ts @@ -4,10 +4,8 @@ import { HANDOFF_KIND, type HandoffCaps, } from "../src/agents/handoff"; -import type { - AgentProfile, - AgentProfileStore, -} from "../src/agents/profile-store"; +import type { AgentProfileStore } from "../src/agents/profile-store"; +import type { AgentProfile } from "../src/agents/profile-types"; import type { AuditStore } from "../src/audit"; import type { WorkQueue } from "../src/work/queue"; diff --git a/server/tests/arcade-adapter-authorize.test.ts b/server/tests/arcade-adapter-authorize.test.ts new file mode 100644 index 000000000..c11ae4c85 --- /dev/null +++ b/server/tests/arcade-adapter-authorize.test.ts @@ -0,0 +1,208 @@ +import { afterEach, describe, expect, test } from "bun:test"; +import Arcade, { APIError } from "@arcadeai/arcadejs"; +import { useArcadeClient } from "../src/plugins/arcade"; +import { BrokerRefusalError } from "../src/plugins/broker"; +import { createArcadeClient } from "../src/plugins/arcade-adapter"; +import type { AccountRef } from "../src/plugins/shared-accounts"; + +/** Prototype stubs BEFORE construction; `new Arcade({ apiKey })` opens no socket. */ +type Methods = Record unknown>; +const protoOf = (pick: (c: Arcade) => object): Methods => + Object.getPrototypeOf( + pick(new Arcade({ apiKey: "never-dialled" })), + ) as Methods; + +const restores: (() => void)[] = []; +function stub( + on: Methods, + name: string, + impl: (...args: unknown[]) => unknown, +) { + const was = on[name]; + on[name] = impl; + restores.push(() => { + on[name] = was; + }); +} +afterEach(() => { + while (restores.length) restores.pop()?.(); + useArcadeClient(null); +}); + +const account: AccountRef = { + holder: "person", + userId: "u1", + vendorUserId: "vendor-u1", +}; + +describe("arcade adapter authorize", () => { + test("sends tool_name and user_id with the action's case intact", async () => { + const seen: unknown[] = []; + stub( + protoOf((c) => c.tools), + "authorize", + (params) => { + seen.push(params); + return Promise.resolve({ + id: "au_1", + url: "https://consent.example/x", + }); + }, + ); + const { broker } = createArcadeClient("never-dialled"); + const out = await broker.authorize({ + account, + toolkit: "Github", + returnUrl: "https://app.example/settings", + action: "Github.CreateIssue", + }); + expect(seen).toHaveLength(1); + const params = seen[0] as Record; + expect(params.tool_name).toBe("Github.CreateIssue"); + expect(params.user_id).toBe("vendor-u1"); + // The mint's own `ar_…` id rides out beside the url: spec D24 binds it to the callback's auth_id. + expect(out).toEqual({ + redirectUrl: "https://consent.example/x", + authorizationId: "au_1", + }); + }); + + test("returns the mint's id as authorizationId, untouched", async () => { + stub( + protoOf((c) => c.tools), + "authorize", + () => + Promise.resolve({ id: "ar_abc123", url: "https://consent.example/y" }), + ); + const { broker } = createArcadeClient("never-dialled"); + const out = await broker.authorize({ + account, + toolkit: "Github", + returnUrl: "https://app.example/settings", + action: "Github.CreateIssue", + }); + expect(out.authorizationId).toBe("ar_abc123"); + }); + + test("a mint that answers no id is not a success, so no null is ever minted", async () => { + stub( + protoOf((c) => c.tools), + "authorize", + () => Promise.resolve({ url: "https://consent.example/y" }), + ); + const { broker } = createArcadeClient("never-dialled"); + await expect( + broker.authorize({ + account, + toolkit: "Github", + returnUrl: "https://app.example/settings", + action: "Github.CreateIssue", + }), + ).rejects.toThrow("no id"); + }); + + test("with no action it refuses without dialling", async () => { + const seen: unknown[] = []; + stub( + protoOf((c) => c.tools), + "authorize", + (params) => { + seen.push(params); + return Promise.resolve({}); + }, + ); + const { broker } = createArcadeClient("never-dialled"); + await expect( + broker.authorize({ + account, + toolkit: "Github", + returnUrl: "https://app.example/settings", + }), + ).rejects.toBeInstanceOf(BrokerRefusalError); + expect(seen).toHaveLength(0); + }); + + test("the outgoing authorize params contain no next_uri key at all", async () => { + const seen: unknown[] = []; + stub( + protoOf((c) => c.tools), + "authorize", + (params) => { + seen.push(params); + return Promise.resolve({ + id: "au_1", + url: "https://consent.example/x", + }); + }, + ); + const { broker } = createArcadeClient("never-dialled"); + await broker.authorize({ + account, + toolkit: "Github", + returnUrl: "https://app.example/settings", + action: "Github.CreateIssue", + }); + const params = seen[0] as object; + expect(Object.keys(params)).not.toContain("next_uri"); + expect("next_uri" in params).toBe(false); + expect(JSON.stringify(params)).not.toContain("app.example"); + }); +}); + +describe("arcade adapter confirmReturn", () => { + const confirmUser = (impl: (...args: unknown[]) => unknown) => + stub( + protoOf((c) => c.auth), + "confirmUser", + impl, + ); + + test("returns the authorizationId, sending the handle as flow_id", async () => { + const seen: unknown[] = []; + confirmUser((params) => { + seen.push(params); + return Promise.resolve({ auth_id: "au_9" }); + }); + const { broker } = createArcadeClient("never-dialled"); + const out = await broker.authorizations?.confirmReturn({ + handle: "flow-abc", + vendorUserId: "vendor-u1", + }); + expect(out).toEqual({ authorizationId: "au_9" }); + expect(seen[0]).toEqual({ flow_id: "flow-abc", user_id: "vendor-u1" }); + }); + + test("reports user_mismatch as { mismatch: true }, not a throw", async () => { + confirmUser(() => + Promise.reject( + new APIError( + 400, + { name: "user_mismatch", message: "wrong user" }, + "400", + new Headers(), + ), + ), + ); + const { broker } = createArcadeClient("never-dialled"); + const out = await broker.authorizations?.confirmReturn({ + handle: "flow-abc", + vendorUserId: "someone-else", + }); + expect(out).toEqual({ mismatch: true }); + }); + + test("any other failure still throws", async () => { + confirmUser(() => + Promise.reject( + new APIError(500, { name: "boom", message: "x" }, "500", new Headers()), + ), + ); + const { broker } = createArcadeClient("never-dialled"); + await expect( + broker.authorizations?.confirmReturn({ + handle: "flow-abc", + vendorUserId: "vendor-u1", + }), + ).rejects.toMatchObject({ status: 500 }); + }); +}); diff --git a/server/tests/arcade-adapter-connections.test.ts b/server/tests/arcade-adapter-connections.test.ts new file mode 100644 index 000000000..0de1b587b --- /dev/null +++ b/server/tests/arcade-adapter-connections.test.ts @@ -0,0 +1,792 @@ +import { afterEach, beforeEach, describe, expect, test } from "bun:test"; +import Arcade from "@arcadeai/arcadejs"; +import { useArcadeClient } from "../src/plugins/arcade"; +import { createArcadeClient } from "../src/plugins/arcade-adapter"; +import { brokerSentence } from "../src/plugins/broker"; +import type { AccountRef } from "../src/plugins/shared-accounts"; + +/** Prototype stubs BEFORE construction; `new Arcade({ apiKey })` opens no socket. */ +type Methods = Record unknown>; +const connectionsProto = (): Methods => + Object.getPrototypeOf( + new Arcade({ apiKey: "never-dialled" }).admin.userConnections, + ) as Methods; + +const toolsProto = (): Methods => + Object.getPrototypeOf( + new Arcade({ apiKey: "never-dialled" }).tools, + ) as Methods; + +const authProvidersProto = (): Methods => + Object.getPrototypeOf( + new Arcade({ apiKey: "never-dialled" }).admin.authProviders, + ) as Methods; + +const restores: (() => void)[] = []; +function stub( + name: string, + impl: (...args: unknown[]) => unknown, + on: Methods = connectionsProto(), +) { + const was = on[name]; + on[name] = impl; + restores.push(() => { + on[name] = was; + }); +} +afterEach(() => { + while (restores.length) restores.pop()?.(); + useArcadeClient(null); +}); + +const account: AccountRef = { + holder: "person", + userId: "u1", + vendorUserId: "vendor-u1", +}; + +/** + * One user-connection row, whose `provider_id` is a provider INSTANCE id and NEVER a provider type. + * + * That is the live shape, and it is the whole subject of this file: on a tool listing + * `provider_id` is the TYPE (`google`), on a connection row it is the operator's CONFIGURATION of + * that type (`google-openbot`, `arcade-google`, `cpk-poc`). A fixture spelling both sides alike — + * which every fixture here once did — makes the two meanings coincide and hides a comparison that + * matches nothing on any real deployment. + */ +const row = (n: number, instance: string, info?: unknown) => ({ + id: `at_${n}`, + connection_id: `ac_${n}`, + provider_id: instance, + provider_user_info: info, +}); + +/** + * What the toolkit's listing says its auth provider TYPE is, keyed by the toolkit asked about. A + * toolkit absent from the map is answered by a listing that names no provider, i.e. UNRESOLVED. + * Counts the listing reads so a test can pin that a call resolves once. + */ +function providers(byToolkit: Record) { + const asked: unknown[] = []; + stub( + "list", + (query) => { + asked.push(query); + const toolkit = (query as { toolkit: string }).toolkit; + const provider = byToolkit[toolkit]; + return Promise.resolve({ + items: [ + { + qualified_name: `${toolkit}.A`, + requirements: { + authorization: { + id: "x", + ...(provider ? { provider_id: provider } : {}), + }, + }, + }, + ], + }); + }, + toolsProto(), + ); + return asked; +} + +/** + * The project's configured auth providers, verbatim in shape from the live project: `id` is the + * INSTANCE and `provider_id` is the TYPE. Two instances share the type `google` on purpose — an + * operator's own and one of Arcade's defaults — because a person may hold a connection under + * either and reducing the type to one instance would drop one of them. + */ +const CONFIGS = [ + { id: "cpk-poc", provider_id: "github", type: "oauth2", status: "active" }, + { + id: "google-openbot", + provider_id: "google", + type: "oauth2", + status: "active", + }, + { + id: "arcade-google", + provider_id: "google", + type: "oauth2", + status: "active", + }, +]; + +/** + * The configuration listing, PAGED BY THE QUERY IT IS HANDED — the sibling of {@link listing}, and + * scoped for the same reason. + * + * `admin.authProviders.list(options)` takes a bare `RequestOptions`, so its paging lives in a + * NESTED `{ query: { limit, offset } }` and nowhere else: a flat `{ limit, offset }` is not an error + * the SDK reports, it is a request carrying no query at all, answered with whatever page the vendor + * defaults to. A stub that served every config to every call made that shape — and the size and + * position of the page the adapter asks for — unobservable: asking for nothing, asking flat, or + * asking for the wrong offset all passed every test in this file. So a page is served only to a + * `query` naming a numeric `limit` and `offset`, sliced exactly as asked, and any other call gets a + * real empty page whose `total_count` still counts every config — so the adapter's own + * incompleteness cross-check fails loudly rather than answering a silent "not connected". + * + * Returns the options it was asked, so a test can assert the shape by name as well as by effect, + * and pin that a call reads the configurations once. + */ +type ConfigsOptions = { query?: { limit?: unknown; offset?: unknown } }; +function configs(items: unknown[] = CONFIGS) { + const asked: ConfigsOptions[] = []; + stub( + "list", + (options) => { + const o = (options ?? {}) as ConfigsOptions; + asked.push(o); + const { limit, offset } = o.query ?? {}; + if (typeof limit !== "number" || typeof offset !== "number") { + return Promise.resolve({ items: [], total_count: items.length }); + } + return Promise.resolve({ + items: items.slice(offset, offset + limit), + offset, + limit, + total_count: items.length, + }); + }, + authProvidersProto(), + ); + return asked; +} + +/** + * A PAGE, NOT A BARE GENERATOR. `connectionsFor` pages the connection listing itself rather than + * leaning on the SDK's auto-pagination, because `OffsetPage` stops after page one whenever the + * engine omits `total_count` — see `arcade-pagination-engine.test.ts`, which proves that against a + * real HTTP engine. So the stub answers what the real `list` resolves to: an object with `items`, + * honouring the `limit`/`offset` the adapter sends. + * + * AND SCOPED TO THE IDENTITY THE QUERY NAMES, which is the other half of what the real listing + * does and what this stub once left out. `admin.userConnections.list` answers the connections of + * ONE `user_id`; a stub that served its rows to every query made the identity the adapter sends + * unobservable, so sending `account.userId` — the LOCAL id — or sending no `user_id` at all passed + * every test in this file. Scoping the read to `account.vendorUserId` is the whole subject of + * commit `28b13e4a`, a live defect in which one person's Disconnect could read, and spend DELETEs + * against, another person's connections. So: rows are served only to a query naming `heldBy` + * (the vendor identity by default), and any other query — wrong id, or none — gets a real empty + * page, exactly as the vendor would answer for an identity holding nothing. + * + * Returns the queries it was asked, so a test can assert the identity by name as well as by effect. + */ +type ListingQuery = { user_id?: unknown; limit?: number; offset?: number }; +function listing(rows: unknown[], heldBy: string = account.vendorUserId) { + const asked: ListingQuery[] = []; + stub("list", (query) => { + const q = (query ?? {}) as ListingQuery; + asked.push(q); + const mine = q.user_id === heldBy ? rows : []; + const offset = q.offset ?? 0; + const limit = q.limit ?? mine.length; + return Promise.resolve({ + items: mine.slice(offset, offset + limit), + offset, + limit, + total_count: mine.length, + }); + }); + return asked; +} + +/** The TYPE each toolkit's listing names. Nothing here is an instance id. */ +const TOOLKIT_TYPES = { + Github: "github", + GitHub: "github", + Google: "google", + Gmail: "google", +}; + +describe("arcade adapter connection lifecycle", () => { + beforeEach(() => { + providers(TOOLKIT_TYPES); + configs(); + }); + + test("isConnected is true on a non-empty list and false on an empty one", async () => { + const rows: unknown[] = [row(1, "cpk-poc")]; + listing(rows); + const { broker } = createArcadeClient("never-dialled"); + expect(await broker.isConnected({ account, toolkit: "Github" })).toBe(true); + rows.length = 0; + expect(await broker.isConnected({ account, toolkit: "Github" })).toBe( + false, + ); + }); + + test("isConnected ignores another app's connection", async () => { + listing([row(1, "google-openbot")]); + const { broker } = createArcadeClient("never-dialled"); + expect(await broker.isConnected({ account, toolkit: "Github" })).toBe( + false, + ); + }); + + /* + * THE IDENTITY THE LISTING IS READ FOR, ASSERTED BY NAME. `AccountRef` carries two ids and they + * are not interchangeable: `userId` is this deployment's own, `vendorUserId` is the one Arcade + * files a connection under. Reading the listing for the wrong one is what commit `28b13e4a` + * fixed in the source, and sending no `user_id` at all is worse still — `admin.userConnections` + * then answers EVERY account's connections, which `revoke` would attribute to this one and + * spend DELETEs against. Both are spelled out here because an effect-only assertion cannot tell + * the difference between "scoped to the right id" and "scoped to a wrong id that happens to + * hold these rows". + */ + test("the connection listing is read for the VENDOR identity, on every page and every member", async () => { + const asked = listing([row(1, "cpk-poc", { name: "Ada" })]); + stub("delete", () => Promise.resolve()); + const { broker } = createArcadeClient("never-dialled"); + const toolkit = "Github"; + expect(await broker.isConnected({ account, toolkit })).toBe(true); + expect(await broker.accountName({ account, toolkit })).toBe("Ada"); + expect(await broker.revoke({ account, toolkit })).toBe(true); + expect(asked.length).toBeGreaterThan(0); + for (const query of asked) { + expect(query.user_id).toBe(account.vendorUserId); + expect(query.user_id).not.toBe(account.userId); + } + }); + + test("connections held by ANOTHER vendor identity are neither read nor deleted", async () => { + listing([row(1, "cpk-poc", { name: "Ada" })], "vendor-somebody-else"); + const deleted: unknown[] = []; + stub("delete", (id) => { + deleted.push(id); + return Promise.resolve(); + }); + const { broker } = createArcadeClient("never-dialled"); + const toolkit = "Github"; + expect(await broker.isConnected({ account, toolkit })).toBe(false); + expect(await broker.accountName({ account, toolkit })).toBeNull(); + expect(await broker.revoke({ account, toolkit })).toBe(false); + expect(deleted).toEqual([]); + }); + + test("delete is passed the ac_ connection_id, never the at_ id", async () => { + listing([row(7, "cpk-poc")]); + const deleted: unknown[] = []; + stub("delete", (id) => { + deleted.push(id); + return Promise.resolve(); + }); + const { broker } = createArcadeClient("never-dialled"); + expect(await broker.revoke({ account, toolkit: "Github" })).toBe(true); + expect(deleted).toEqual(["ac_7"]); + expect(String(deleted[0]).startsWith("at_")).toBe(false); + }); + + test("revokeAccount deletes by the id it is handed", async () => { + const deleted: unknown[] = []; + stub("delete", (id) => { + deleted.push(id); + return Promise.resolve(); + }); + const { broker } = createArcadeClient("never-dialled"); + await broker.revokeAccount("ac_9"); + expect(deleted).toEqual(["ac_9"]); + }); + + test("revoke answers false on nothing-found and deletes nothing", async () => { + listing([row(1, "google-openbot")]); + const deleted: unknown[] = []; + stub("delete", (id) => { + deleted.push(id); + return Promise.resolve(); + }); + const { broker } = createArcadeClient("never-dialled"); + expect(await broker.revoke({ account, toolkit: "Github" })).toBe(false); + expect(deleted).toEqual([]); + }); + + test("revoke THROWS when one of several deletes fails, after trying them all", async () => { + listing([row(1, "cpk-poc"), row(2, "cpk-poc"), row(3, "cpk-poc")]); + const tried: unknown[] = []; + stub("delete", (id) => { + tried.push(id); + return id === "ac_2" + ? Promise.reject(new Error("500")) + : Promise.resolve(); + }); + const { broker } = createArcadeClient("never-dialled"); + let outcome: unknown = "returned"; + try { + outcome = await broker.revoke({ account, toolkit: "Github" }); + } catch (error) { + outcome = error; + } + expect(outcome).toBeInstanceOf(Error); + expect((outcome as Error).message).toMatch(/1 of 3/); + expect(tried).toEqual(["ac_1", "ac_2", "ac_3"]); + }); + + test("accountName never answers another app's name", async () => { + listing([ + row(1, "cpk-poc", {}), + row(2, "google-openbot", { name: "Grace" }), + row(3, "cpk-poc", { name: "Ada" }), + ]); + const { broker } = createArcadeClient("never-dialled"); + expect(await broker.accountName({ account, toolkit: "GitHub" })).toBe( + "Ada", + ); + expect(await broker.accountName({ account, toolkit: "Google" })).toBe( + "Grace", + ); + }); + + test("accountName is null, not the second app's name, when the first carries none", async () => { + listing([ + row(1, "cpk-poc", {}), + row(2, "google-openbot", { name: "Grace" }), + ]); + const { broker } = createArcadeClient("never-dialled"); + expect(await broker.accountName({ account, toolkit: "Github" })).toBeNull(); + }); + + /* + * THE DEFECT THIS FILE EXISTS FOR, AT ITS THREE MEMBERS. `Gmail` names the TYPE `google`; the + * connection is held under the INSTANCE `google-openbot`. A comparison of the two raw strings + * finds nothing — and `revoke` then answers false WITHOUT SPENDING A DELETE, so the vendor + * connection outlives the Disconnect that was supposed to end it. + */ + test("a Gmail connection under the custom instance `google-openbot` is FOUND by all three members", async () => { + listing([row(4, "google-openbot", { name: "Grace" })]); + const deleted: unknown[] = []; + stub("delete", (id) => { + deleted.push(id); + return Promise.resolve(); + }); + const { broker } = createArcadeClient("never-dialled"); + const toolkit = "Gmail"; + expect(await broker.isConnected({ account, toolkit })).toBe(true); + expect(await broker.accountName({ account, toolkit })).toBe("Grace"); + expect(await broker.revoke({ account, toolkit })).toBe(true); + // The `ac_…` connection_id, never the `at_…` row id. + expect(deleted).toEqual(["ac_4"]); + }); + + test("a Gmail connection under Arcade's DEFAULT instance `arcade-google` is found too", async () => { + listing([row(5, "arcade-google", { name: "Ada" })]); + const deleted: unknown[] = []; + stub("delete", (id) => { + deleted.push(id); + return Promise.resolve(); + }); + const { broker } = createArcadeClient("never-dialled"); + const toolkit = "Gmail"; + expect(await broker.isConnected({ account, toolkit })).toBe(true); + expect(await broker.accountName({ account, toolkit })).toBe("Ada"); + expect(await broker.revoke({ account, toolkit })).toBe(true); + expect(deleted).toEqual(["ac_5"]); + }); + + test("BOTH instances of one type are matched; neither is dropped for the other", async () => { + listing([row(4, "google-openbot"), row(5, "arcade-google")]); + const deleted: unknown[] = []; + stub("delete", (id) => { + deleted.push(id); + return Promise.resolve(); + }); + const { broker } = createArcadeClient("never-dialled"); + expect(await broker.revoke({ account, toolkit: "Gmail" })).toBe(true); + expect(deleted.sort()).toEqual(["ac_4", "ac_5"]); + }); + + test("an UNRELATED instance (`cpk-poc`, type github) is not a Gmail connection", async () => { + listing([row(1, "cpk-poc", { name: "Ada" })]); + const deleted: unknown[] = []; + stub("delete", (id) => { + deleted.push(id); + return Promise.resolve(); + }); + const { broker } = createArcadeClient("never-dialled"); + const toolkit = "Gmail"; + expect(await broker.isConnected({ account, toolkit })).toBe(false); + expect(await broker.accountName({ account, toolkit })).toBeNull(); + expect(await broker.revoke({ account, toolkit })).toBe(false); + expect(deleted).toEqual([]); + }); + + test("the TYPE itself is not an instance id, so a row spelled `google` is not matched", async () => { + // Nothing anywhere falls back to comparing the raw type against a row. + listing([row(6, "google", { name: "Grace" })]); + const { broker } = createArcadeClient("never-dialled"); + expect(await broker.isConnected({ account, toolkit: "Gmail" })).toBe(false); + }); + + test("an instance the configuration list does not name is fail-closed, not deleted", async () => { + // A provider configuration deleted while a connection outlived it. + listing([row(8, "retired-google", { name: "Grace" })]); + const deleted: unknown[] = []; + stub("delete", (id) => { + deleted.push(id); + return Promise.resolve(); + }); + const { broker } = createArcadeClient("never-dialled"); + expect(await broker.revoke({ account, toolkit: "Gmail" })).toBe(false); + expect(deleted).toEqual([]); + }); + + test("both the type and the instance are compared case-insensitively", async () => { + providers({ Gmail: "GOOGLE" }); + configs([{ id: "Google-OpenBot", provider_id: "Google" }]); + listing([row(4, "google-openbot", { name: "Grace" })]); + const { broker } = createArcadeClient("never-dialled"); + expect(await broker.isConnected({ account, toolkit: "Gmail" })).toBe(true); + }); + + test("a different provider on the same identity is still excluded", async () => { + listing([row(1, "cpk-poc", { name: "Ada" }), row(2, "google-openbot", {})]); + const deleted: unknown[] = []; + stub("delete", (id) => { + deleted.push(id); + return Promise.resolve(); + }); + const { broker } = createArcadeClient("never-dialled"); + expect(await broker.accountName({ account, toolkit: "Gmail" })).toBeNull(); + expect(await broker.revoke({ account, toolkit: "Gmail" })).toBe(true); + expect(deleted).toEqual(["ac_2"]); + }); + + /** + * AN UNATTRIBUTABLE TOOLKIT REFUSES OUT OF ALL THREE LIFECYCLE MEMBERS, AND NEVER FALLS BACK TO + * ITS NAME. Both halves matter and they used to be answered the same wrong way. + * + * The fallback is still refused: each fixture below serves a row whose instance id IS literally + * the toolkit name folded down, so a fallback would find it and delete it — attributing somebody + * else's connection to this app on a guess. + * + * And answering NO ROWS is refused too, which is this pair's reason for existing. `revoke` then + * said `false` — "there was nothing to withdraw" — without spending a single DELETE, while + * `store.ts`'s disconnect path deletes the local `brokered_connections` row on that answer + * regardless: a live grant at the vendor that no row this deployment holds any longer names. + * `isConnected` and `accountName` said not-connected for the same person, so Connect offered a + * second authorization beside the live one. The listing was not read; refusing is the only + * honest answer, and `broker.ts`'s `revoke` contract requires it. + */ + test("a toolkit whose listing names NO provider refuses rather than answering no rows", async () => { + providers({}); + listing([row(1, "gmail", { name: "Grace" })]); + const deleted: unknown[] = []; + stub("delete", (id) => { + deleted.push(id); + return Promise.resolve(); + }); + const { broker } = createArcadeClient("never-dialled"); + const toolkit = "Gmail"; + const refusal = /names no auth provider at all/; + await expect(broker.isConnected({ account, toolkit })).rejects.toThrow( + refusal, + ); + await expect(broker.accountName({ account, toolkit })).rejects.toThrow( + refusal, + ); + await expect(broker.revoke({ account, toolkit })).rejects.toThrow(refusal); + expect(deleted).toEqual([]); + }); + + test("a toolkit whose listing names TWO providers refuses, naming both", async () => { + // Two actions of one toolkit under two different provider types: the toolkit disagrees with + // itself, so which of this account's connections are its own cannot be read off the listing. + stub( + "list", + (query) => { + const toolkit = (query as { toolkit: string }).toolkit; + return Promise.resolve({ + items: ["microsoft", "google"].map((provider, n) => ({ + qualified_name: `${toolkit}.A${n}`, + requirements: { authorization: { id: "x", provider_id: provider } }, + })), + }); + }, + toolsProto(), + ); + listing([row(1, "gmail", { name: "Grace" })]); + const deleted: unknown[] = []; + stub("delete", (id) => { + deleted.push(id); + return Promise.resolve(); + }); + const { broker } = createArcadeClient("never-dialled"); + const toolkit = "Gmail"; + // Sorted, so the sentence does not change with the order the listing happened to arrive in. + const refusal = /names 2 different auth providers \(google, microsoft\)/; + await expect(broker.isConnected({ account, toolkit })).rejects.toThrow( + refusal, + ); + await expect(broker.accountName({ account, toolkit })).rejects.toThrow( + refusal, + ); + await expect(broker.revoke({ account, toolkit })).rejects.toThrow(refusal); + expect(deleted).toEqual([]); + }); + + test("the unattributable refusal is an AUTHORED one, so the route shows its sentence", async () => { + // A `BrokerRefusalError` and not a bare `Error`: `brokerSentence` is what the Disconnect and + // Connect routes read, and a bare error would have them say "the vendor said nothing about + // why, check the key" about a sentence this deployment wrote itself. + providers({}); + listing([row(1, "google-openbot")]); + const { broker } = createArcadeClient("never-dialled"); + const error = await broker + .revoke({ account, toolkit: "Gmail" }) + .then(() => null) + .catch((thrown: unknown) => thrown); + expect(brokerSentence(error)).toMatch(/names no auth provider at all/); + }); + + test("a malformed listing THROWS out of the lifecycle members rather than answering no rows", async () => { + stub("list", () => Promise.resolve({ items: "nope" }), toolsProto()); + listing([row(1, "google-openbot")]); + const { broker } = createArcadeClient("never-dialled"); + await expect(broker.revoke({ account, toolkit: "Gmail" })).rejects.toThrow( + /action list/, + ); + }); + + test("a malformed auth-provider listing THROWS rather than answering no rows", async () => { + stub( + "list", + () => Promise.resolve({ items: "nope" }), + authProvidersProto(), + ); + listing([row(1, "google-openbot")]); + const { broker } = createArcadeClient("never-dialled"); + await expect(broker.revoke({ account, toolkit: "Gmail" })).rejects.toThrow( + /auth-provider list/, + ); + }); + + /** + * AN AUTHORIZATION BLOCK THIS DEPLOYMENT CANNOT READ IS NOT AN ACTION THAT NAMES NO PROVIDER. + * + * `authProvidersNamedBy` once skipped it in silence, so a `Gmail` listing of one readable + * `google` action beside one whose authorization arrived unreadable resolved to `google`, and + * all three members answered — `revoke` spending DELETEs — off a listing that was not read whole. + * The unreadable action may name another provider; one id beside it is not an attribution. + */ + const beside = (unreadable: Record) => + stub( + "list", + (query) => { + const toolkit = (query as { toolkit: string }).toolkit; + return Promise.resolve({ + items: [ + { + qualified_name: `${toolkit}.Readable`, + requirements: { + authorization: { id: "x", provider_id: "google" }, + }, + }, + { qualified_name: `${toolkit}.Unreadable`, ...unreadable }, + ], + }); + }, + toolsProto(), + ); + + test.each([ + [ + "an authorization that is a string", + { requirements: { authorization: "oauth2" } }, + /Arcade sent a string where Gmail's action Gmail\.Unreadable carries its authorization requirement/, + ], + [ + "requirements that are a list", + { requirements: ["oauth2"] }, + /Arcade sent a list where Gmail's action Gmail\.Unreadable carries its requirements/, + ], + [ + "a provider_id that is a number", + { requirements: { authorization: { id: "x", provider_id: 42 } } }, + /Arcade sent a number where Gmail's action Gmail\.Unreadable carries its auth provider id/, + ], + ])( + "an action carrying %s REFUSES, rather than resolving off the readable one", + async (_, unreadable, refusal) => { + beside(unreadable); + listing([row(1, "google-openbot", { name: "Grace" })]); + const deleted: unknown[] = []; + stub("delete", (id) => { + deleted.push(id); + return Promise.resolve(); + }); + const { broker } = createArcadeClient("never-dialled"); + const toolkit = "Gmail"; + await expect(broker.isConnected({ account, toolkit })).rejects.toThrow( + refusal, + ); + await expect(broker.accountName({ account, toolkit })).rejects.toThrow( + refusal, + ); + const error = await broker + .revoke({ account, toolkit }) + .then(() => null) + .catch((thrown: unknown) => thrown); + // AUTHORED, so the Disconnect route shows this sentence rather than vendor-outage advice. + expect(brokerSentence(error)).toMatch(refusal); + expect(deleted).toEqual([]); + }, + ); + + test("an action with NO authorization block beside a readable one still resolves — absence is not unreadability", async () => { + beside({ requirements: { authorization: null } }); + listing([row(1, "google-openbot", { name: "Grace" })]); + const { broker } = createArcadeClient("never-dialled"); + expect(await broker.isConnected({ account, toolkit: "Gmail" })).toBe(true); + }); + + test("each call resolves the provider and its configurations once, however many rows", async () => { + const asked = providers({ Gmail: "google" }); + const read = configs(); + listing([ + row(1, "google-openbot"), + row(2, "google-openbot"), + row(3, "arcade-google"), + ]); + stub("delete", () => Promise.resolve()); + const { broker } = createArcadeClient("never-dialled"); + await broker.revoke({ account, toolkit: "Gmail" }); + expect(asked).toHaveLength(1); + expect(read).toHaveLength(1); + }); + + /* + * THE CONFIGURATION LISTING'S PAGING, ASSERTED BY NAME AND BY EFFECT. The instance a person is + * held under sits on PAGE TWO, behind a full page of other configurations, so an adapter that + * reads one page, asks flat, or asks for the wrong offset cannot find it; and the options are + * pinned verbatim, because `RequestOptions` drops anything outside `query` without a word. + */ + test("the auth-provider listing is paged in the nested query shape, to the page holding the instance", async () => { + const filler = Array.from({ length: 100 }, (_, n) => ({ + id: `filler-${n}`, + provider_id: "github", + })); + const read = configs([ + ...filler, + { id: "google-openbot", provider_id: "google" }, + ]); + listing([row(1, "google-openbot", { name: "Grace" })]); + const { broker } = createArcadeClient("never-dialled"); + expect(await broker.isConnected({ account, toolkit: "Gmail" })).toBe(true); + expect(read).toEqual([ + { query: { limit: 100, offset: 0 } }, + { query: { limit: 100, offset: 100 } }, + ]); + }); +}); + +/** + * The same row, carrying the vendor's OWN answer to "is this connection still usable". + * + * Separate from {@link row} rather than a fourth parameter on it, because the point is that the + * field is OPTIONAL on the wire: every fixture above omits it on purpose, and omission must keep + * meaning "the vendor said nothing". A `null` status omits the key entirely, which is the shape an + * engine that does not send the field answers with. + */ +const statusRow = ( + n: number, + instance: string, + status: string | null, + info?: unknown, +) => ({ + ...row(n, instance, info), + ...(status === null ? {} : { connection_status: status }), +}); + +/** + * THE ROW'S EXISTENCE IS NOT THE ANSWER, AND THE THREE MEMBERS DO NOT AGREE ABOUT WHAT IS. + * + * `connection_status` is Arcade saying whether a connection still works. The positive reads — + * `isConnected`, `accountName` — must SKIP a row it reports as expired, revoked, pending or failed, + * because a screen saying "Connected, as Grace" off such a row is wrong in the one place somebody + * looks to check, and nothing contradicts it until a tool call fails far away from here. + * + * `revoke` must STILL DELETE that row, which is the half a fixture set of live-only rows cannot + * tell apart from the other. A dead row is a row the VENDOR still holds; skipping it would have + * `revoke` answer `false` — "there was nothing to withdraw" — while `store.ts`'s disconnect path + * deletes the local `brokered_connections` row on that answer regardless, leaving a grant at the + * vendor that nothing this deployment holds any longer names. That is the exact signature of the + * live defect this seam has already shipped once. + * + * Every fixture here is under `cpk-poc`/`google-openbot`, INSTANCE ids this project's + * configuration names, so nothing below can pass or fail for the instance-vs-type reason the rest + * of this file is about: the only variable is the status. + */ +describe("a connection the vendor reports as dead", () => { + beforeEach(() => { + providers(TOOLKIT_TYPES); + configs(); + }); + + test("is skipped by isConnected and accountName, and is STILL DELETED by revoke", async () => { + listing([statusRow(1, "cpk-poc", "expired", { name: "Ada" })]); + const deleted: unknown[] = []; + stub("delete", (id) => { + deleted.push(id); + return Promise.resolve(); + }); + const { broker } = createArcadeClient("never-dialled"); + const toolkit = "Github"; + expect(await broker.isConnected({ account, toolkit })).toBe(false); + expect(await broker.accountName({ account, toolkit })).toBeNull(); + // Not `false`-with-no-delete: the row is the vendor's, and Disconnect must spend the call. + expect(await broker.revoke({ account, toolkit })).toBe(true); + expect(deleted).toEqual(["ac_1"]); + }); + + test("beside a live row, the LIVE one answers and revoke deletes both", async () => { + listing([ + statusRow(1, "cpk-poc", "expired", { name: "Ada" }), + statusRow(2, "cpk-poc", "active", { name: "Grace" }), + ]); + const deleted: unknown[] = []; + stub("delete", (id) => { + deleted.push(id); + return Promise.resolve(); + }); + const { broker } = createArcadeClient("never-dialled"); + const toolkit = "Github"; + expect(await broker.isConnected({ account, toolkit })).toBe(true); + // The dead row is FIRST, so a member that stopped at the first row would say "Ada". + expect(await broker.accountName({ account, toolkit })).toBe("Grace"); + expect(await broker.revoke({ account, toolkit })).toBe(true); + expect([...deleted].sort()).toEqual(["ac_1", "ac_2"]); + }); + + /* + * K2 SETTLED WHAT "BLANK" MEANS, ONCE, FOR EVERY VENDOR DECISION FIELD: a status the vendor did + * not send (or sent as `null`) is SILENCE and the row stands; a status sent BLANK is present and + * carries nothing, which is UNREADABLE — the judgement `authProvidersNamedBy` makes of a blank + * `provider_id` — and an unreadable status is not "live". This row once asserted the opposite for + * blank, which made the two readers disagree about the same wire value. + */ + test("a status the vendor did not send is SILENCE and still reads as live; a blank one does not", async () => { + listing([ + statusRow(1, "cpk-poc", null, { name: "Ada" }), + statusRow(2, "google-openbot", "", { name: "Grace" }), + ]); + const { broker } = createArcadeClient("never-dialled"); + expect(await broker.isConnected({ account, toolkit: "Github" })).toBe(true); + expect(await broker.accountName({ account, toolkit: "Github" })).toBe( + "Ada", + ); + expect(await broker.isConnected({ account, toolkit: "Gmail" })).toBe(false); + expect(await broker.accountName({ account, toolkit: "Gmail" })).toBeNull(); + }); + + test("the status is folded and trimmed, so ` ACTIVE ` is live and `Expired` is not", async () => { + listing([statusRow(1, "cpk-poc", " ACTIVE ", { name: "Ada" })]); + const { broker } = createArcadeClient("never-dialled"); + expect(await broker.isConnected({ account, toolkit: "Github" })).toBe(true); + listing([statusRow(2, "cpk-poc", "Expired", { name: "Ada" })]); + expect(await broker.isConnected({ account, toolkit: "Github" })).toBe( + false, + ); + }); +}); diff --git a/server/tests/arcade-adapter-errors.test.ts b/server/tests/arcade-adapter-errors.test.ts new file mode 100644 index 000000000..4c937fac6 --- /dev/null +++ b/server/tests/arcade-adapter-errors.test.ts @@ -0,0 +1,67 @@ +import { describe, expect, test } from "bun:test"; +import { APIConnectionError, APIError } from "@arcadeai/arcadejs"; +import { normalizeArcadeError } from "../src/plugins/arcade-adapter"; + +// The SDK's real shape: constructor(status, error, message, headers); own fields status, +// headers, error. Nothing on it names the tool. +const refusal = () => + new APIError( + 403, + { name: "tool_authorization_required", message: "Authorize Gmail first" }, + undefined, + new Headers(), + ); + +describe("normalizeArcadeError", () => { + test("a realistically-shaped 403 normalizes", () => { + expect(normalizeArcadeError(refusal())).toEqual({ + status: 403, + name: "tool_authorization_required", + message: "Authorize Gmail first", + }); + }); + + test("the same error wrapped in cause still normalizes", () => { + const wrapped = new Error("outer", { + cause: new Error("middle", { cause: refusal() }), + }); + expect(normalizeArcadeError(wrapped)).toEqual({ + status: 403, + name: "tool_authorization_required", + message: "Authorize Gmail first", + }); + }); + + test("a plain Error answers null", () => { + expect(normalizeArcadeError(new Error("boom"))).toBeNull(); + }); + + test("non-errors answer null", () => { + expect(normalizeArcadeError(undefined)).toBeNull(); + expect(normalizeArcadeError("403")).toBeNull(); + }); + + test("a cyclic cause chain terminates with null", () => { + const a: Error & { cause?: unknown } = new Error("a"); + a.cause = a; + expect(normalizeArcadeError(a)).toBeNull(); + }); + + test("an error with no body leaves name and message undefined", () => { + expect( + normalizeArcadeError( + new APIError(500, undefined, undefined, new Headers()), + ), + ).toEqual({ + status: 500, + name: undefined, + message: undefined, + }); + }); + + test("a connection failure keeps status undefined", () => { + expect( + normalizeArcadeError(new APIConnectionError({ message: "down" }))?.status, + ).toBeUndefined(); + }); +}); diff --git a/server/tests/arcade-adapter-status.test.ts b/server/tests/arcade-adapter-status.test.ts new file mode 100644 index 000000000..1a44abf19 --- /dev/null +++ b/server/tests/arcade-adapter-status.test.ts @@ -0,0 +1,328 @@ +import { afterEach, describe, expect, test } from "bun:test"; +import Arcade from "@arcadeai/arcadejs"; +import { useArcadeClient } from "../src/plugins/arcade"; +import { createArcadeClient } from "../src/plugins/arcade-adapter"; +import type { AccountRef } from "../src/plugins/shared-accounts"; + +/** Prototype stubs BEFORE construction; `new Arcade({ apiKey })` opens no socket. */ +type Methods = Record unknown>; +const protoOf = (pick: (c: Arcade) => unknown): Methods => + Object.getPrototypeOf( + pick(new Arcade({ apiKey: "never-dialled" })), + ) as Methods; + +const restores: (() => void)[] = []; +function stub( + pick: (c: Arcade) => unknown, + name: string, + impl: (...args: unknown[]) => unknown, +) { + const on = protoOf(pick); + const was = on[name]; + on[name] = impl; + restores.push(() => { + on[name] = was; + }); +} +afterEach(() => { + while (restores.length) restores.pop()?.(); + useArcadeClient(null); +}); + +const account: AccountRef = { + holder: "person", + userId: "u1", + vendorUserId: "vendor-u1", +}; + +/** The listing calls, so a test can assert what went out with them. */ +const listCalls: unknown[] = []; +function listing(items: unknown[]) { + listCalls.length = 0; + stub( + (c) => c.tools, + "list", + (query) => { + listCalls.push(query); + return Promise.resolve({ items }); + }, + ); +} + +const tool = (name: string, requirements: unknown) => ({ + fully_qualified_name: `${name}@1.0.0`, + qualified_name: name, + name: name.split(".")[1], + toolkit: { name: "Github" }, + requirements, +}); + +describe("grantsFor maps a toolkit listing to this deployment's vocabulary", () => { + test("sends the user_id it was given and maps all four states", async () => { + listing([ + tool("Github.SetStarred", { + met: true, + authorization: { + provider_id: "github", + status: "active", + token_status: "completed", + oauth2: { scopes: ["repo", "user"] }, + }, + secrets: [], + }), + tool("Github.ListStargazers", { + met: false, + authorization: { + provider_id: "github", + status: "inactive", + token_status: "not_started", + oauth2: { scopes: ["repo"] }, + }, + secrets: [], + }), + tool("Github.CreateIssue", { + met: false, + authorization: { + provider_id: "github", + status: "active", + token_status: "completed", + oauth2: { scopes: ["repo"] }, + }, + // The live listing: an operator sets this once for everybody and no amount + // of consenting moves it. + secrets: [ + { key: "GITHUB_SERVER_URL", met: false, status_reason: "unset" }, + ], + }), + // An authorization block in a shape this deployment cannot read. NOT a row with no block at + // all: that is the vendor saying the action needs none, and is `authorized` — see below. + tool("Github.CountStargazers", { met: false, authorization: "oauth2" }), + ]); + + const { broker } = createArcadeClient("never-dialled"); + const grants = await broker.grantsFor({ toolkit: "Github", account }); + + expect(listCalls).toHaveLength(1); + expect(listCalls[0]).toMatchObject({ + toolkit: "Github", + user_id: "vendor-u1", + }); + + expect(grants).toEqual([ + { + action: "Github.SetStarred", + state: "authorized", + scopes: ["repo", "user"], + authorization: "held", + }, + { + action: "Github.ListStargazers", + state: "needs-consent", + scopes: ["repo"], + }, + { + action: "Github.CreateIssue", + state: "needs-operator", + missing: ["GITHUB_SERVER_URL"], + }, + { + action: "Github.CountStargazers", + state: "unknown", + reason: expect.any(String), + }, + ]); + }); + + test("an unreadable authorization is unknown, never a pessimistic needs-consent", async () => { + listing([ + // An authorization block with neither a status nor a token_status: the listing + // says neither "connected" nor "not connected". + tool("Github.WhoAmI", { + met: false, + authorization: { provider_id: "github", oauth2: { scopes: ["user"] } }, + secrets: [], + }), + ]); + + const { broker } = createArcadeClient("never-dialled"); + const grants = await broker.grantsFor({ toolkit: "Github", account }); + + expect(grants).toHaveLength(1); + expect(grants[0]?.state).toBe("unknown"); + expect(grants[0]?.state).not.toBe("needs-consent"); + expect(grants[0]).toEqual({ + action: "Github.WhoAmI", + state: "unknown", + reason: expect.any(String), + }); + }); +}); + +/** + * ONE READING OF A MISSING AUTHORIZATION BLOCK, ASKED OF BOTH QUESTIONS ON THE SAME ROW. + * + * The catalogue files an app whose actions publish no `requirements.authorization` as `no-auth`; + * the grants screen once read that same silence as "could not be read" and drew every action of + * such an app as `unknown` — the broker-outage state — forever, with nothing anybody could do about + * it. `Apollo` is the live shape (one deployment secret, no authorization block), here with its + * secret SET, which is the state that used to stick. + */ +describe("an action that publishes no authorization needs none, on every screen", () => { + const silent = [ + tool("Apollo.EnrichOrganization", { + met: true, + secrets: [{ key: "APOLLO_API_KEY", met: true }], + }), + tool("Apollo.SearchPeople", null), + { + qualified_name: "Apollo.SearchOrganizations", + toolkit: { name: "Github" }, + }, + ]; + + test("the catalogue says no-auth and the grants screen says usable, never unknown", async () => { + listing(silent); + const { broker } = createArcadeClient("never-dialled"); + + const apps = await broker.listApps(); + expect(apps.map((app) => app.connection)).toEqual([{ kind: "no-auth" }]); + + expect(await broker.grantsFor({ toolkit: "Github", account })).toEqual([ + { + action: "Apollo.EnrichOrganization", + state: "authorized", + scopes: [], + authorization: "not-required", + }, + { + action: "Apollo.SearchPeople", + state: "authorized", + scopes: [], + authorization: "not-required", + }, + { + action: "Apollo.SearchOrganizations", + state: "authorized", + scopes: [], + authorization: "not-required", + }, + ]); + }); + + test("an UNSET secret on such an action is still the operator's, not authorized", async () => { + listing([ + tool("Apollo.EnrichOrganization", { + met: false, + secrets: [{ key: "APOLLO_API_KEY", met: false }], + }), + ]); + const { broker } = createArcadeClient("never-dialled"); + + expect(await broker.grantsFor({ toolkit: "Apollo", account })).toEqual([ + { + action: "Apollo.EnrichOrganization", + state: "needs-operator", + missing: ["APOLLO_API_KEY"], + }, + ]); + }); +}); + +/** + * THE LEAK TEST. `auth.status` answers with a LIVE provider access token and the person's full + * profile; the narrowing is a type, not a rule somebody has to remember. + */ +const TOKEN = "gho_16C7e42F292c6912E7710c838347Ae178B4a"; +const PROFILE = { + email: "ada@example.com", + name: "Ada Lovelace", + login: "ada", + id: 4711, +}; + +function statusAnswers(answer: unknown) { + stub( + (c) => c.auth, + "status", + () => Promise.resolve(answer), + ); +} + +describe("authorizations.status narrows and drops the rest", () => { + const raw = { + id: "auth_123", + status: "completed", + user_id: "vendor-u1", + scopes: ["repo", "user"], + provider_id: "github", + url: "https://cloud.arcade.dev/approve/abc123", + context: { token: TOKEN, user_info: PROFILE }, + }; + + test("returns exactly the three fields", async () => { + statusAnswers(raw); + const { broker } = createArcadeClient("never-dialled"); + const flow = broker.authorizations; + if (!flow) throw new Error("Arcade must declare an authorization flow."); + + const narrowed = await flow.status("auth_123"); + expect(Object.keys(narrowed).sort()).toEqual([ + "scopes", + "status", + "userId", + ]); + expect(narrowed).toEqual({ + status: "completed", + userId: "vendor-u1", + scopes: ["repo", "user"], + }); + }); + + test("the token, the profile and the url do not survive the narrowing", async () => { + statusAnswers(raw); + const { broker } = createArcadeClient("never-dialled"); + const flow = broker.authorizations; + if (!flow) throw new Error("Arcade must declare an authorization flow."); + + const serialized = JSON.stringify(await flow.status("auth_123")); + expect(serialized).not.toContain(TOKEN); + expect(serialized).not.toContain("gho_"); + expect(serialized).not.toContain(PROFILE.email); + expect(serialized).not.toContain(PROFILE.name); + expect(serialized).not.toContain(PROFILE.login); + expect(serialized).not.toContain("user_info"); + expect(serialized).not.toContain("token"); + // An authorization url is a bearer capability and is not one of the three fields. + expect(serialized).not.toContain(raw.url); + expect(serialized).not.toContain("provider_id"); + }); + + test("a missing status and user_id answer a string and a null, not undefined", async () => { + statusAnswers({ context: { token: TOKEN, user_info: PROFILE } }); + const { broker } = createArcadeClient("never-dialled"); + const flow = broker.authorizations; + if (!flow) throw new Error("Arcade must declare an authorization flow."); + + const narrowed = await flow.status("auth_123"); + expect(narrowed.userId).toBeNull(); + expect(typeof narrowed.status).toBe("string"); + expect(narrowed.scopes).toEqual([]); + expect(JSON.stringify(narrowed)).not.toContain(TOKEN); + }); + + /** + * AN EMPTY STATUS IS NOT A STATUS AND AN EMPTY USER ID IS NOT AN ID. `??` falls through on null + * and undefined only, so a `textOf` answering `""` as text handed the return leg an empty status + * in place of `"unknown"` and an empty string where the identity comparison expects `null`. + */ + test("an empty status and user_id read as absent, not as empty text", async () => { + statusAnswers({ status: "", user_id: " ", scopes: [] }); + const { broker } = createArcadeClient("never-dialled"); + const flow = broker.authorizations; + if (!flow) throw new Error("Arcade must declare an authorization flow."); + + const narrowed = await flow.status("auth_123"); + expect(narrowed.status).toBe("unknown"); + expect(narrowed.userId).toBeNull(); + }); +}); diff --git a/server/tests/arcade-adapter.test.ts b/server/tests/arcade-adapter.test.ts new file mode 100644 index 000000000..d5ffb699c --- /dev/null +++ b/server/tests/arcade-adapter.test.ts @@ -0,0 +1,291 @@ +import { afterEach, describe, expect, test } from "bun:test"; +import Arcade, { APIError } from "@arcadeai/arcadejs"; +import { callTool, useArcadeClient } from "../src/plugins/arcade"; +import { BrokerRefusalError } from "../src/plugins/broker"; +import { createArcadeClient } from "../src/plugins/arcade-adapter"; + +/** + * Same pattern as `composio-adapter.test.ts` ("the key becoming a vendor"): `new Arcade({ apiKey })` + * opens no socket and sends no request, and its resources' methods live on their classes' + * prototypes, so a prototype replaced BEFORE `createArcadeClient` runs is what the client it builds + * will call. A seed instance is built only to reach the prototype. + */ +type Methods = Record unknown>; +const toolsProto = (): Methods => + Object.getPrototypeOf( + new Arcade({ apiKey: "never-dialled" }).tools, + ) as Methods; + +const restores: (() => void)[] = []; +function stub( + on: Methods, + name: string, + impl: (...args: unknown[]) => unknown, +) { + const was = on[name]; + on[name] = impl; + restores.push(() => { + on[name] = was; + }); +} +afterEach(() => { + while (restores.length) restores.pop()?.(); + useArcadeClient(null); +}); + +const toolOf = (toolkit: string, i: number) => ({ + qualified_name: `${toolkit}.A${i}`, + toolkit: { name: toolkit, description: `${toolkit} things` }, +}); + +describe("createArcadeClient", () => { + test("declares its grant is held by the vendor", () => { + expect(createArcadeClient("never-dialled").broker.grantIsLocal).toBe(false); + }); + + test("constructing it opens no socket and sends no request", () => { + const calls: string[] = []; + const realFetch = globalThis.fetch; + globalThis.fetch = ((...args: unknown[]) => { + calls.push(`fetch ${String(args[0])}`); + return Promise.reject(new Error("dialled")); + }) as typeof fetch; + restores.push(() => { + globalThis.fetch = realFetch; + }); + for (const name of ["list", "execute", "get", "authorize"]) + stub(toolsProto(), name, () => { + calls.push(`tools.${name}`); + return Promise.reject(new Error("dialled")); + }); + const proto = Arcade.prototype as unknown as Methods; + for (const name of ["request", "get", "post", "getAPIList"]) + stub(proto, name, () => { + calls.push(`client.${name}`); + return Promise.reject(new Error("dialled")); + }); + createArcadeClient("never-dialled"); + expect(calls).toEqual([]); + }); + + test("listApps counts actions across the FULL paged listing", async () => { + // Pages of 1000 — the directory's page size since the "Browse Arcade" deadline fix (see + // `DIRECTORY_PAGE_SIZE`); this pinned [0, 100, 200] at the old size of 100. Pages are served BY + // OFFSET, not by call order, because pages two and three are now asked for concurrently. + const pages: [string, number][][] = [ + [["GithubApi", 1000]], + [["GithubApi", 1000]], + [ + ["GithubApi", 400], + ["Github", 100], + ], + ]; + const asked: { limit: number; offset: number }[] = []; + stub(toolsProto(), "list", (...args: unknown[]) => { + const q = args[0] as { limit: number; offset: number; toolkit?: string }; + asked.push({ limit: q.limit, offset: q.offset }); + const page = pages[q.offset / 1000] ?? []; + const items = page.flatMap(([tk, n]) => + Array.from({ length: n }, (_, i) => toolOf(tk, i)), + ); + return Promise.resolve({ items, total_count: 2500, offset: q.offset }); + }); + const apps = await createArcadeClient("never-dialled").broker.listApps(); + expect(asked).toEqual([ + { limit: 1000, offset: 0 }, + { limit: 1000, offset: 1000 }, + { limit: 1000, offset: 2000 }, + ]); + expect(apps.find((a) => a.slug === "GithubApi")?.actionCount).toBe(2400); + expect(apps.find((a) => a.slug === "Github")?.actionCount).toBe(100); + expect(apps.reduce((n, a) => n + a.actionCount, 0)).toBe(2500); + }); + + test("a REAL APIError through execute reaches callTool's authorize sentence", async () => { + stub(toolsProto(), "execute", () => + Promise.reject( + new APIError( + 403, + { name: "tool_authorization_required", message: "Authorize Gmail" }, + undefined, + new Headers(), + ), + ), + ); + const { actions } = createArcadeClient("never-dialled"); + useArcadeClient(actions); + const result = await callTool( + { url: "arcade://Gmail", actorId: "u1" }, + "Gmail.SendEmail", + {}, + ); + expect(result.isError).toBe(true); + expect(result.text).toBe( + "Gmail.SendEmail has not been authorized on this account yet. Authorize it in Settings → Connected accounts and ask again.", + ); + }); + + test("a non-SDK error is rethrown as itself, not as a synthetic failure", async () => { + const boom = new Error("boom"); + stub(toolsProto(), "execute", () => Promise.reject(boom)); + const { actions } = createArcadeClient("never-dialled"); + await expect( + actions.execute({ tool_name: "X.Y", input: {}, user_id: "u" }), + ).rejects.toBe(boom); + }); + + const connectionsProto = (): Methods => + Object.getPrototypeOf( + new Arcade({ apiKey: "never-dialled" }).admin.userConnections, + ) as Methods; + const authProvidersProto = (): Methods => + Object.getPrototypeOf( + new Arcade({ apiKey: "never-dialled" }).admin.authProviders, + ) as Methods; + const account = { vendorUserId: "u1" } as never; + + test("ensureAuthConfig answers not-needed in every case", async () => { + const { broker } = createArcadeClient("never-dialled"); + for (const toolkit of ["Github", "Gmail", "GithubApi"]) + expect( + await broker.ensureAuthConfig({ + toolkit, + connection: { kind: "consent" }, + } as never), + ).toBe("not-needed"); + }); + + test("deleteAuthConfig is a no-op", async () => { + const { broker } = createArcadeClient("never-dialled"); + expect(await broker.deleteAuthConfig("Github")).toBeUndefined(); + }); + + test("connectionFields and connectWithFields refuse, naming the deployment-wide secret", async () => { + const { broker } = createArcadeClient("never-dialled"); + const a = broker.connectionFields({ + toolkit: "Github", + authScheme: "API_KEY", + } as never); + await expect(a).rejects.toBeInstanceOf(BrokerRefusalError); + await expect(a).rejects.toThrow(/deployment-wide secret/); + const b = broker.connectWithFields({ + account, + toolkit: "Github", + authScheme: "API_KEY", + values: { k: "v" }, + } as never); + await expect(b).rejects.toBeInstanceOf(BrokerRefusalError); + await expect(b).rejects.toThrow(/deployment-wide secret/); + }); + + test("accountName reads provider_user_info.name, then .login, else null", async () => { + const rows: unknown[] = []; + // A PAGE, as the real `list` resolves to: `connectionsFor` pages the listing itself rather + // than through the SDK, whose auto-pagination stops after page one when the engine omits + // `total_count`. See `arcade-pagination-engine.test.ts`. + stub(connectionsProto(), "list", () => + Promise.resolve({ items: rows, offset: 0, total_count: rows.length }), + ); + // The toolkit's own listing names the provider TYPE its connections are held under. + stub(toolsProto(), "list", () => + Promise.resolve({ + items: [ + { + qualified_name: "Github.A0", + requirements: { authorization: { id: "x", provider_id: "github" } }, + }, + ], + }), + ); + // And the project's configured providers map that type to its INSTANCE ids, which is what a + // connection row carries. See `connectionsFor`. + stub(authProvidersProto(), "list", () => + Promise.resolve({ + items: [{ id: "cpk-poc", provider_id: "github" }], + total_count: 1, + }), + ); + const { broker } = createArcadeClient("never-dialled"); + const ask = () => broker.accountName({ account, toolkit: "Github" }); + rows.push({ + provider_id: "cpk-poc", + provider_user_info: { name: "Ada", login: "ada1" }, + }); + expect(await ask()).toBe("Ada"); + rows.length = 0; + rows.push({ + provider_id: "cpk-poc", + provider_user_info: { login: "ada1" }, + }); + expect(await ask()).toBe("ada1"); + rows.length = 0; + rows.push({ provider_id: "cpk-poc", provider_user_info: {} }); + expect(await ask()).toBeNull(); + + // AN EMPTY NAME MUST NOT SHADOW A GOOD LOGIN. `??` falls through on null and undefined only, + // so a `textOf` that answered `""` as text ended the chain on the empty field and drew a blank + // where the account's identity goes — on a connection that is genuinely connected. + rows.length = 0; + rows.push({ + provider_id: "cpk-poc", + provider_user_info: { name: "", login: "maxim" }, + }); + expect(await ask()).toBe("maxim"); + + // Whitespace-only is the same blank to whoever reads the screen. + rows.length = 0; + rows.push({ + provider_id: "cpk-poc", + provider_user_info: { name: " ", login: "maxim" }, + }); + expect(await ask()).toBe("maxim"); + + // And a row carrying nothing but empty text is no name at all, never an empty one. + rows.length = 0; + rows.push({ + provider_id: "cpk-poc", + provider_user_info: { name: "", login: "" }, + }); + expect(await ask()).toBeNull(); + }); + + test("a toolkit named with empty text raises no blank app", async () => { + stub(toolsProto(), "list", (...args: unknown[]) => { + const q = args[0] as { offset: number }; + return Promise.resolve({ + items: + q.offset === 0 + ? [ + toolOf("Github", 0), + { qualified_name: "X.A0", toolkit: { name: "" } }, + { qualified_name: "Y.A0", toolkit: { name: " " } }, + ] + : [], + offset: q.offset, + }); + }); + const apps = await createArcadeClient("never-dialled").broker.listApps(); + // The slug is what a URL and a picker row are built from; an empty one is unconnectable. + expect(apps.map((a) => a.slug)).toEqual(["Github"]); + }); + + test("no app resolves to a fields connection", async () => { + stub(toolsProto(), "list", () => + Promise.resolve({ + items: [toolOf("Github", 0), toolOf("Gmail", 0)], + total_count: 2, + }), + ); + const apps = await createArcadeClient("never-dialled").broker.listApps(); + expect(apps.length).toBeGreaterThan(0); + // `no-auth` is in the list because `toolOf` publishes no `requirements` at all, which is Arcade + // saying this action needs authorizing by nobody — the kind is READ per app now rather than + // written once for the catalogue, and `arcade-connection-kind-engine.test.ts` is where each + // published shape is held to its answer. `fields` is the one this test is about and it is still + // unreachable: Arcade has no per-person field entry. + for (const app of apps) + expect(["consent", "no-auth", "unsupported"]).toContain( + app.connection.kind, + ); + }); +}); diff --git a/server/tests/arcade-attempt-constraints.test.ts b/server/tests/arcade-attempt-constraints.test.ts new file mode 100644 index 000000000..e5fa4633a --- /dev/null +++ b/server/tests/arcade-attempt-constraints.test.ts @@ -0,0 +1,399 @@ +// server/tests/arcade-attempt-constraints.test.ts +// +// `pending_authorizations` declares two unions in TypeScript — `holder` and `outcome` — and +// drizzle's `$type<>` is erased at runtime, so only the database can hold them. These are the +// checks the sibling table `brokered_connections` has had all along, asked of the new table: +// a holder outside the pair, an outcome outside the roster, and the two holder/`user_id` +// combinations `brokered_connections_holder_check` exists to make impossible. +import { afterAll, beforeAll, describe, expect, test } from "bun:test"; +import { randomUUID } from "node:crypto"; +import { sql } from "drizzle-orm"; +import { createDatabase } from "../src/db/client"; +import { mcpServers, pendingAuthorizations } from "../src/db/schema/plugins"; +import { checkRoster } from "./support/constraints"; +import { TEST_POOL, testDatabaseUrl } from "./support/database"; +import { removePeople, seedPeople } from "./support/people"; + +const database = createDatabase(testDatabaseUrl(), TEST_POOL); +const suite = randomUUID().slice(0, 8); +const serverId = `arcade-constraints-${suite}`; + +/** + * An attempt row with every column legal, so each test varies exactly the one it is about. + * + * `userId` defaults to the actor, because a `person` attempt is for the actor's own account and the + * database holds that (`pending_authorizations_user_is_actor_check`). This fixture used to give + * every row one shared `user-${suite}` beside a fresh actor — a two-person row production never + * writes, and exactly the shape that let one person's deletion take another person's attempt. + */ +const attempt = (overrides: Record) => { + const actorId = + (overrides.actorId as string | undefined) ?? + `actor-${randomUUID().slice(0, 8)}`; + return { + actorId, + serverId, + action: "connect", + holder: "person" as const, + userId: actorId, + vendorUserId: `v-${suite}`, + ...overrides, + }; +}; + +/** + * Every person this file invented, so `afterAll` can take them away again. + * + * `actor_id` keys to `users` and cascades (and `user_id`, when set, must equal it), so the row a + * case is about cannot be written until its person exists — and deleting the person afterwards is + * also what deletes the attempt. Seeding happens inside {@link insert} rather than in `beforeAll` because the actor id is + * generated per row, and a case that forgot to seed its own would otherwise be refused by the + * foreign key and read as a CHECK that did not fire. + */ +const seeded = new Set(); + +const seedFor = async (row: Record) => { + const people = [row.actorId, row.userId].filter( + (id): id is string => typeof id === "string" && id.length > 0, + ); + for (const id of people) seeded.add(id); + await seedPeople(database, people); +}; + +// Awaited rather than handed back as a builder, so a failure says what the database did with the +// row and not what drizzle's query object looks like. +const insert = async (overrides: Record) => { + const row = attempt(overrides); + await seedFor(row); + await database + .insert(pendingAuthorizations) + // biome-ignore lint/suspicious/noExplicitAny: the point is what the DATABASE refuses, past the declared unions. + .values(row as any); +}; + +/** + * The name of the constraint that refused a statement, or `"accepted"` if nothing did. + * + * Named rather than merely thrown, because "it threw" would also pass on a typo in a column name. + * drizzle's own message is only "Failed query: ..."; the constraint it tripped is `constraint` on + * the postgres error underneath. + */ +const refusedBy = async (run: () => Promise): Promise => { + try { + await run(); + } catch (error) { + const cause = (error as { cause?: { constraint?: string } }).cause; + return cause?.constraint ?? String(error); + } + return "accepted"; +}; + +beforeAll(async () => { + await database.insert(mcpServers).values({ + id: serverId, + title: "Attempt constraints", + vendor: "test", + url: "https://example.invalid/mcp", + }); +}); + +afterAll(async () => { + await database.execute(sql`delete from mcp_servers where id = ${serverId}`); + await removePeople(database, [...seeded]); + await database.$client.close(); +}); + +describe("pending_authorizations holds its declared unions", () => { + test("a holder outside the pair is refused", async () => { + expect(await refusedBy(() => insert({ holder: "llama" }))).toBe( + "pending_authorizations_holder_check", + ); + }); + + /* + * Each roster case carries a `completed_at` alongside its junk `outcome`, so the row is legal in + * every respect but the one under test. Without it the row also breaks the completion pairing + * below, postgres names whichever constraint it evaluated first, and the test stops being about + * the roster at all. + */ + test("an outcome outside the roster is refused on insert", async () => { + expect( + await refusedBy(() => + insert({ outcome: "banana", completedAt: new Date() }), + ), + ).toBe("pending_authorizations_outcome_check"); + }); + + test("an outcome outside the roster is refused on update", async () => { + const actorId = `update-${suite}`; + await insert({ actorId }); + const refusal = await refusedBy(() => + database + .update(pendingAuthorizations) + // biome-ignore lint/suspicious/noExplicitAny: a cast past the union is exactly what the CHECK is for. + .set({ outcome: "cancelled" as any, completedAt: new Date() }) + .where(sql`actor_id = ${actorId}`), + ); + expect(refusal).toBe("pending_authorizations_outcome_check"); + }); + + /** + * The pairing of `completed_at` and `outcome`, which is the one invariant of this table that no + * single column can hold. + * + * A row carrying an `outcome` with `completed_at` still NULL is a FINISHED attempt that every + * reader here reads as a LIVE one: `claimAuthorizationAttempt` replaces a held key only + * `WHERE created_at < now() - interval '15 minutes' OR completed_at IS NOT NULL`, and + * `authorizationAttemptFor` answers on `completed_at IS NULL` alone. Neither looks at `outcome`, + * so such a row locks its actor out of starting another authorization for the rest of the TTL, + * with a verdict already recorded against it. The other half is less damaging and just as wrong: + * a `completed_at` with no `outcome` is an attempt that ended with nothing saying how, and every + * operator-facing reading of the table is of `outcome`. + * + * Nothing in the application writes either shape — both writers set the pair in one statement — + * which is exactly why it belongs in the database rather than in a comment: the only ways in are + * a hand-run UPDATE, a restore, or the next writer, and none of those is reviewed here. + */ + test("an outcome with no completion time is refused", async () => { + expect( + await refusedBy(() => insert({ outcome: "failed", completedAt: null })), + ).toBe("pending_authorizations_completion_check"); + }); + + test("a completion time with no outcome is refused", async () => { + expect( + await refusedBy(() => insert({ completedAt: new Date(), outcome: null })), + ).toBe("pending_authorizations_completion_check"); + }); + + test("breaking the pair by UPDATE is refused too", async () => { + const actorId = `pair-${suite}`; + await insert({ actorId }); + const refusal = await refusedBy(() => + database + .update(pendingAuthorizations) + .set({ outcome: "withdrawn" }) + .where(sql`actor_id = ${actorId}`), + ); + expect(refusal).toBe("pending_authorizations_completion_check"); + }); + + test("a person attempt with no user id is refused", async () => { + expect( + await refusedBy(() => insert({ holder: "person", userId: null })), + ).toBe("pending_authorizations_holder_check"); + }); + + test("a deployment attempt carrying a user id is refused", async () => { + expect( + await refusedBy(() => + // The actor's own id, so the user-is-actor CHECK is satisfied and only the holder pair can + // be what refuses. + insert({ holder: "deployment" }), + ), + ).toBe("pending_authorizations_holder_check"); + }); + + /** + * The rosters themselves, because every test above asks only about one value outside them. + * + * `llama` and `banana` go on being refused by a constraint that has quietly grown a member, and + * `cancelled` goes on being refused right up until the day it is the member that was added — at + * which point that test fails for the right reason and these two say which roster moved. The + * TypeScript unions in `schema/plugins` are erased at runtime, so these lines and the migration + * are the only two places the rosters exist; they have to be read against each other. + */ + test("the holder CHECK admits exactly the two holders", async () => { + expect( + await checkRoster(database, "pending_authorizations_holder_check"), + ).toEqual(["deployment", "person"]); + }); + + test("the outcome CHECK admits exactly the four outcomes", async () => { + expect( + await checkRoster(database, "pending_authorizations_outcome_check"), + ).toEqual(["completed", "failed", "unreconciled", "withdrawn"]); + }); + + test("the legal shapes are all still accepted", async () => { + const action = `legal-${suite}`; + await insert({ action, holder: "person" }); + await insert({ action, holder: "deployment", userId: null }); + // Each ended shape carries its `completed_at`, because the pair is now held by a CHECK: an + // outcome on its own is no longer one of the legal shapes, and this list says which are. + for (const outcome of [ + null, + "completed", + "failed", + "unreconciled", + "withdrawn", + ]) { + await insert({ + action, + outcome, + completedAt: outcome === null ? null : new Date(), + }); + } + const rows = await database.execute( + sql`select count(*)::int as n from pending_authorizations where action = ${action}`, + ); + expect(rows[0]?.n).toBe(7); + }); +}); + +/** + * The two columns that name `users.id`, and whether the database holds them to it. + * + * `0057` created both `actor_id` and `user_id` naming `users.id` in the docblock and carrying no + * key, which is the shape where the schema is documentation and the data is whatever got written: + * a deleted person left attempts pointing at nobody, and an actor id that was never a person at all + * was accepted without complaint. `0059` adds both keys, cascading, and these are the cases that + * say so — asked of the DATABASE, because a `.references()` in drizzle that no migration carried + * into postgres enforces nothing at all. + */ +describe("pending_authorizations keys the people it names", () => { + test("an actor who is not a person is refused", async () => { + const stranger = `ghost-actor-${randomUUID().slice(0, 8)}`; + const refusal = await refusedBy(() => + database + .insert(pendingAuthorizations) + // biome-ignore lint/suspicious/noExplicitAny: an id past the key is exactly what the FK is for. + .values(attempt({ actorId: stranger, userId: stranger }) as any), + ); + expect(refusal).toBe("pending_authorizations_actor_id_users_id_fk"); + }); + + test("a user_id that is not a person is refused", async () => { + // The actor IS a person here, so only the second column can be what refuses: a case that left + // both unseeded would pass on the actor key alone and say nothing about `user_id`. Since `0062` + // what refuses it is the user-is-actor CHECK, not a key of its own: `user_id` names a person + // exactly when it names the actor, who is one. + const actorId = `keyed-actor-${randomUUID().slice(0, 8)}`; + await seedPeople(database, [actorId]); + seeded.add(actorId); + const refusal = await refusedBy(() => + database.insert(pendingAuthorizations).values( + attempt({ + actorId, + userId: `ghost-owner-${randomUUID().slice(0, 8)}`, + // biome-ignore lint/suspicious/noExplicitAny: an id that names nobody is exactly what is being asked about. + }) as any, + ), + ); + expect(refusal).toBe("pending_authorizations_user_is_actor_check"); + }); + + test("deleting the person takes their in-flight attempt with them", async () => { + const actorId = `departing-${randomUUID().slice(0, 8)}`; + await insert({ actorId, userId: actorId }); + const before = await database.execute( + sql`select count(*)::int as n from pending_authorizations where actor_id = ${actorId}`, + ); + expect(before[0]?.n).toBe(1); + + await database.execute(sql`delete from users where id = ${actorId}`); + seeded.delete(actorId); + + const after = await database.execute( + sql`select count(*)::int as n from pending_authorizations where actor_id = ${actorId}`, + ); + expect(after[0]?.n).toBe(0); + }); + + /** + * The index, not merely the key. + * + * Postgres indexes the REFERENCED side of a foreign key and not the referencing side, so the + * `server_id` key `0057` added left every cascade from `mcp_servers` — and every lookup by server + * — scanning this table. There is nothing about a missing index a functional test can observe, so + * it is asked for by name. + * + * The keys are read from `pg_constraint` rather than listed, so a key added later is held to the + * same rule without anybody remembering this test — and the list is pinned too, so dropping or + * adding one is a visible edit. `user_id` lost its key (and its index) in `0062`; see the + * user-is-actor cases below. + */ + test("every foreign key on the table has an index leading with its column", async () => { + const keys = await database.execute(sql` + SELECT a.attname AS column + FROM pg_constraint c + JOIN pg_attribute a ON a.attrelid = c.conrelid AND a.attnum = ANY (c.conkey) + WHERE c.conrelid = 'pending_authorizations'::regclass AND c.contype = 'f' + ORDER BY a.attname + `); + const columns = keys.map((row) => String(row.column)); + const rows = await database.execute(sql` + SELECT indexdef FROM pg_indexes + WHERE schemaname = 'public' AND tablename = 'pending_authorizations' + `); + const definitions = rows.map((row) => String(row.indexdef)); + const led = (column: string) => + definitions.some((definition) => + definition.includes(`USING btree (${column}`), + ); + expect( + Object.fromEntries(columns.map((column) => [column, led(column)])), + ).toEqual({ actor_id: true, server_id: true }); + }); +}); + +/** + * Whose deletion may take an attempt away: the person who STARTED it, and nobody else. + * + * The row is keyed by `actor_id` — one attempt per actor, by primary key — so it is the actor's. + * `user_id` is whose account the attempt is for, and for a `person` attempt that is always the + * actor too: `accountRefFor` answers a Personal app with `{ userId: actorId }`, and the only writer + * (`claimAuthorizationAttempt`) copies that ref. Before `0062` nothing in the DATABASE said so, and + * `user_id` carried a cascading key of its own — so a row naming two people died with EITHER of + * them, and one person's deletion destroyed an attempt somebody else had started. + * + * The first case is the observation itself, asked without a branch: try to write the two-person + * row, then — whatever the database did with it — give the actor their own attempt if the slot is + * still free (`ON CONFLICT DO NOTHING`), delete the OTHER person, and count what the actor has + * left. Against a schema that admits the two-person row, the actor's attempt is gone. + */ +describe("an attempt belongs to the person who started it", () => { + test("deleting one person never takes an attempt a different person started", async () => { + const actorId = `starter-${randomUUID().slice(0, 8)}`; + const otherId = `other-${randomUUID().slice(0, 8)}`; + await seedPeople(database, [actorId, otherId]); + seeded.add(actorId); + seeded.add(otherId); + + await refusedBy(() => + database + .insert(pendingAuthorizations) + // biome-ignore lint/suspicious/noExplicitAny: the two-person row is exactly what is being asked about. + .values(attempt({ actorId, userId: otherId }) as any), + ); + await database + .insert(pendingAuthorizations) + // biome-ignore lint/suspicious/noExplicitAny: a legal attempt, written past the declared unions like every row here. + .values(attempt({ actorId, userId: actorId }) as any) + .onConflictDoNothing(); + + await database.execute(sql`delete from users where id = ${otherId}`); + seeded.delete(otherId); + + const left = await database.execute( + sql`select count(*)::int as n from pending_authorizations where actor_id = ${actorId}`, + ); + expect(left[0]?.n).toBe(1); + }); + + test("a person attempt for somebody other than its actor is refused", async () => { + const actorId = `starter-${randomUUID().slice(0, 8)}`; + const otherId = `other-${randomUUID().slice(0, 8)}`; + await seedPeople(database, [actorId, otherId]); + seeded.add(actorId); + seeded.add(otherId); + expect( + await refusedBy(() => + database + .insert(pendingAuthorizations) + // biome-ignore lint/suspicious/noExplicitAny: the two-person row is exactly what is being asked about. + .values(attempt({ actorId, userId: otherId }) as any), + ), + ).toBe("pending_authorizations_user_is_actor_check"); + }); +}); diff --git a/server/tests/arcade-attempt-schema.test.ts b/server/tests/arcade-attempt-schema.test.ts new file mode 100644 index 000000000..5c8c05879 --- /dev/null +++ b/server/tests/arcade-attempt-schema.test.ts @@ -0,0 +1,92 @@ +// server/tests/arcade-attempt-schema.test.ts +import { afterAll, beforeAll, describe, expect, test } from "bun:test"; +import { randomUUID } from "node:crypto"; +import { sql } from "drizzle-orm"; +import { createDatabase } from "../src/db/client"; +import { mcpServers } from "../src/db/schema/plugins"; +import { TEST_POOL, testDatabaseUrl } from "./support/database"; +import { removePeople, seedPeople } from "./support/people"; + +const database = createDatabase(testDatabaseUrl(), TEST_POOL); +const suite = randomUUID().slice(0, 8); +const serverId = `arcade-attempt-${suite}`; + +/* + * The three actors the cases below claim under, seeded as real people because `actor_id` now carries + * the key to `users` it always claimed in the docblock (and `user_id` is held equal to it). Named up here so + * `afterAll` can delete them, and so the cascade takes the attempts with them. + */ +const actors = [`live-${suite}`, `expired-${suite}`, `done-${suite}`]; + +/** The one statement a start-attempt route issues: take the key if free, expired, or completed. */ +const claim = (actorId: string, authId: string) => + database.execute(sql` + INSERT INTO pending_authorizations + (actor_id, server_id, action, holder, user_id, vendor_user_id, auth_id) + VALUES (${actorId}, ${serverId}, 'connect', 'person', ${actorId}, ${`v-${actorId}`}, ${authId}) + ON CONFLICT (actor_id) DO UPDATE SET + server_id = EXCLUDED.server_id, + action = EXCLUDED.action, + holder = EXCLUDED.holder, + user_id = EXCLUDED.user_id, + vendor_user_id = EXCLUDED.vendor_user_id, + auth_id = EXCLUDED.auth_id, + created_at = now(), + completed_at = NULL, + outcome = NULL + WHERE pending_authorizations.created_at < now() - interval '15 minutes' + OR pending_authorizations.completed_at IS NOT NULL + RETURNING * + `); + +beforeAll(async () => { + await seedPeople(database, actors); + await database.insert(mcpServers).values({ + id: serverId, + title: "Attempt schema", + vendor: "test", + url: "https://example.invalid/mcp", + }); +}); + +afterAll(async () => { + await database.execute(sql`delete from mcp_servers where id = ${serverId}`); + await removePeople(database, actors); + await database.$client.close(); +}); + +describe("pending_authorizations", () => { + test("a second attempt for one actor is refused while the first is live", async () => { + const actor = actors[0]!; + expect((await claim(actor, "auth-1")).length).toBe(1); + expect((await claim(actor, "auth-2")).length).toBe(0); + const rows = await database.execute( + sql`select auth_id from pending_authorizations where actor_id = ${actor}`, + ); + expect(rows[0]?.auth_id).toBe("auth-1"); + }); + + test("an expired attempt is replaceable in one statement", async () => { + const actor = actors[1]!; + expect((await claim(actor, "auth-old")).length).toBe(1); + await database.execute( + sql`update pending_authorizations set created_at = now() - interval '16 minutes' where actor_id = ${actor}`, + ); + const replaced = await claim(actor, "auth-new"); + expect(replaced.length).toBe(1); + expect(replaced[0]?.auth_id).toBe("auth-new"); + }); + + test("a completed attempt is replaceable", async () => { + const actor = actors[2]!; + expect((await claim(actor, "auth-old")).length).toBe(1); + await database.execute( + sql`update pending_authorizations set completed_at = now(), outcome = 'completed' where actor_id = ${actor}`, + ); + const replaced = await claim(actor, "auth-new"); + expect(replaced.length).toBe(1); + expect(replaced[0]?.auth_id).toBe("auth-new"); + expect(replaced[0]?.completed_at).toBeNull(); + expect(replaced[0]?.outcome).toBeNull(); + }); +}); diff --git a/server/tests/arcade-attempt-store.integration.test.ts b/server/tests/arcade-attempt-store.integration.test.ts new file mode 100644 index 000000000..4874aa834 --- /dev/null +++ b/server/tests/arcade-attempt-store.integration.test.ts @@ -0,0 +1,504 @@ +// server/tests/arcade-attempt-store.integration.test.ts +import { afterAll, beforeAll, describe, expect, test } from "bun:test"; +import { randomUUID } from "node:crypto"; +import { eq, sql } from "drizzle-orm"; +import { createAuditStore } from "../src/audit"; +import { createDatabase } from "../src/db/client"; +import { mcpServers, pendingAuthorizations } from "../src/db/schema"; +import type { ConnectedAppBroker } from "../src/plugins/broker"; +import type { AccountRef } from "../src/plugins/shared-accounts"; +import { createPluginStore } from "../src/plugins/store"; +import { TEST_POOL, testDatabaseUrl } from "./support/database"; +import { removePeople, seedPeople } from "./support/people"; + +const database = createDatabase(testDatabaseUrl(), TEST_POOL); +const suite = randomUUID().slice(0, 8); +const serverId = `arcade-attempt-store-${suite}`; + +const broker: ConnectedAppBroker = { + // Arcade holds the grant at the vendor, not locally; see `ConnectedAppBroker.grantIsLocal`. + grantIsLocal: false, + // Nothing here asks what auth provider a connection is held under. + authProviderOf: async () => null, + // Arcade runs the correlated, pollable flow, so this stub DECLARES the sub-surface rather + // than a null; nothing here reaches either member. See `ConnectedAppBroker.authorizations`. + authorizations: { + status: async () => { + throw new Error("nothing here polls an authorization"); + }, + confirmReturn: async () => { + throw new Error("nothing here confirms a return leg"); + }, + }, + grantsFor: async () => [], + listApps: async () => [], + ensureAuthConfig: async () => "standing", + deleteAuthConfig: async () => {}, + authorize: async () => ({ + redirectUrl: "https://vendor.example/consent", + authorizationId: "ar_stub", + }), + isConnected: async () => true, + revoke: async () => true, + connectionFields: async () => [], + connectWithFields: async () => ({ accountId: "ca_1" }), + revokeAccount: async () => {}, + accountName: async () => "acme-bot", +}; + +const policy = { mode: "enforce" as const, deny: [], allow: ["true"] }; + +const store = createPluginStore({ + brokerProvider: "arcade", + database, + auditStore: createAuditStore(database), + credentials: {} as never, + encryptionKey: "x".repeat(44), + policy: () => policy, + broker, + deploymentId: `acme-${suite}`, + sharedUse: async () => ({ allowed: true }), +}); + +const account = (actor: string): AccountRef => ({ + holder: "person", + userId: actor, + vendorUserId: `v-${actor}`, +}); + +const claim = (actorId: string, action = "connect") => + store.claimAuthorizationAttempt({ + actorId, + serverId, + action, + account: account(actorId), + }); + +const age = (actorId: string, interval: string) => + database.execute( + sql`update pending_authorizations set created_at = created_at - ${interval}::interval where actor_id = ${actorId}`, + ); + +/** + * An actor id for this suite, AND THE PERSON BEHIND IT. + * + * `pending_authorizations.actor_id` keys to `users` and cascades (`.user_id` must equal it), so an + * attempt cannot be written for somebody who does not exist. Seeding here rather than in each case + * keeps the cases about the store: a case that invented its own id would be refused by the foreign + * key, and the refusal would read as the store failing to claim. + */ +const actors: string[] = []; +const actor = async (name: string) => { + const id = `${name}-${suite}`; + actors.push(id); + await seedPeople(database, [id]); + return id; +}; + +beforeAll(async () => { + await database.insert(mcpServers).values({ + id: serverId, + title: "Attempt store", + vendor: "Arcade", + url: "https://example.invalid/mcp", + }); +}); + +afterAll(async () => { + // Cascades to the attempts. + await database.delete(mcpServers).where(eq(mcpServers.id, serverId)); + await removePeople(database, actors); + await database.$client.close(); +}); + +describe("claimAuthorizationAttempt", () => { + test("succeeds when no attempt exists", async () => { + const a = await actor("fresh"); + const got = await claim(a); + expect(got.claimed).toBe(true); + if (!got.claimed) return; + expect(got.attempt.actorId).toBe(a); + expect(got.attempt.serverId).toBe(serverId); + expect(got.attempt.holder).toBe("person"); + expect(got.attempt.userId).toBe(a); + expect(got.attempt.vendorUserId).toBe(`v-${a}`); + expect(got.attempt.authId).toBeNull(); + }); + + test("a second claim while the first is live returns zero rows and answers the live row", async () => { + const a = await actor("live"); + const first = await claim(a, "connect"); + const second = await claim(a, "reconnect"); + expect(first.claimed).toBe(true); + expect(second.claimed).toBe(false); + if (first.claimed && !second.claimed) { + expect(second.live?.actorId).toBe(a); + expect(second.live?.action).toBe("connect"); + expect(second.live?.createdAt.getTime()).toBe( + first.attempt.createdAt.getTime(), + ); + } + }); + + test("succeeds after the first expired, replacing it", async () => { + const a = await actor("expired"); + await claim(a, "old"); + await age(a, "16 minutes"); + const got = await claim(a, "new"); + expect(got.claimed).toBe(true); + const rows = await database + .select() + .from(pendingAuthorizations) + .where(eq(pendingAuthorizations.actorId, a)); + expect(rows.length).toBe(1); + expect(rows[0]?.action).toBe("new"); + }); + + test("succeeds after the first completed, replacing it", async () => { + const a = await actor("completed"); + await claim(a, "old"); + await database.execute( + sql`update pending_authorizations set completed_at = now(), outcome = 'completed' where actor_id = ${a}`, + ); + const got = await claim(a, "new"); + expect(got.claimed).toBe(true); + const rows = await database + .select() + .from(pendingAuthorizations) + .where(eq(pendingAuthorizations.actorId, a)); + expect(rows[0]?.action).toBe("new"); + expect(rows[0]?.completedAt).toBeNull(); + expect(rows[0]?.outcome).toBeNull(); + }); + + test("two concurrent claims by one actor: exactly one wins", async () => { + const a = await actor("race"); + const results = await Promise.all([claim(a, "one"), claim(a, "two")]); + expect(results.filter((r) => r.claimed).length).toBe(1); + expect(results.filter((r) => !r.claimed).length).toBe(1); + }); +}); + +describe("recordAuthorizationMint", () => { + test("writes the ar_ onto the attempt and leaves another actor's alone", async () => { + const a = await actor("mint"); + const other = await actor("mint-other"); + const mine = await claim(a); + await claim(other); + if (!mine.claimed) throw new Error("claim failed"); + const wrote = await store.recordAuthorizationMint({ + actorId: a, + createdAt: mine.attempt.createdAt, + authId: "ar_abc", + }); + expect(wrote).toBe(true); + const got = await store.authorizationAttemptFor(a); + expect(got?.authId).toBe("ar_abc"); + expect((await store.authorizationAttemptFor(other))?.authId).toBeNull(); + }); + + test("a mint against a different created_at writes nothing", async () => { + const a = await actor("mint-stale"); + await claim(a); + const wrote = await store.recordAuthorizationMint({ + actorId: a, + createdAt: new Date(0), + authId: "ar_stale", + }); + expect(wrote).toBe(false); + expect((await store.authorizationAttemptFor(a))?.authId).toBeNull(); + }); + + /** + * The attempt's `auth_id` as the TABLE holds it. Not `authorizationAttemptFor`, which answers + * null for a settled attempt and so could not see a settled row being rewritten. + */ + const storedAuthId = async (actorId: string) => { + const [row] = await database + .select({ authId: pendingAuthorizations.authId }) + .from(pendingAuthorizations) + .where(eq(pendingAuthorizations.actorId, actorId)); + if (!row) throw new Error(`no attempt for ${actorId}`); + return row.authId; + }; + + /** Claim and mint one attempt, answering the `created_at` it is named by. */ + const minted = async (actorId: string, authId: string) => { + const got = await claim(actorId); + if (!got.claimed) throw new Error("claim failed"); + const wrote = await store.recordAuthorizationMint({ + actorId, + createdAt: got.attempt.createdAt, + authId, + }); + if (!wrote) throw new Error("first mint failed"); + return got.attempt.createdAt; + }; + + test("a late mint cannot rewrite a COMPLETED attempt's auth_id to null", async () => { + const a = await actor("mint-late-null"); + const createdAt = await minted(a, "ar_consented"); + await database.execute( + sql`update pending_authorizations set completed_at = now(), outcome = 'completed' where actor_id = ${a}`, + ); + const wrote = await store.recordAuthorizationMint({ + actorId: a, + createdAt, + authId: null, + }); + expect(await storedAuthId(a)).toBe("ar_consented"); + expect(wrote).toBe(false); + }); + + test("a late mint cannot rebind a FAILED attempt to a different ar_", async () => { + const a = await actor("mint-late-other"); + const createdAt = await minted(a, "ar_consented"); + expect( + await store.failAuthorizationAttempt({ + actorId: a, + authId: "ar_consented", + }), + ).toBe(true); + const wrote = await store.recordAuthorizationMint({ + actorId: a, + createdAt, + authId: "ar_other", + }); + expect(await storedAuthId(a)).toBe("ar_consented"); + expect(wrote).toBe(false); + }); + + test("a duplicated mint cannot rebind a LIVE attempt that already holds an ar_", async () => { + const a = await actor("mint-dup"); + const createdAt = await minted(a, "ar_first"); + const wrote = await store.recordAuthorizationMint({ + actorId: a, + createdAt, + authId: "ar_second", + }); + expect(await storedAuthId(a)).toBe("ar_first"); + expect(wrote).toBe(false); + }); + + test("a mint cannot bind an attempt settled with no auth_id by a writer outside the store", async () => { + const a = await actor("mint-late-settled-null"); + const got = await claim(a); + if (!got.claimed) throw new Error("claim failed"); + await database.execute( + sql`update pending_authorizations set completed_at = now(), outcome = 'failed' where actor_id = ${a}`, + ); + const wrote = await store.recordAuthorizationMint({ + actorId: a, + createdAt: got.attempt.createdAt, + authId: "ar_late", + }); + expect(await storedAuthId(a)).toBeNull(); + expect(wrote).toBe(false); + }); + + test("a mint still writes onto a live attempt whose vendor answered no id", async () => { + const a = await actor("mint-after-null"); + const got = await claim(a); + if (!got.claimed) throw new Error("claim failed"); + expect( + await store.recordAuthorizationMint({ + actorId: a, + createdAt: got.attempt.createdAt, + authId: null, + }), + ).toBe(true); + expect(await storedAuthId(a)).toBeNull(); + }); +}); + +describe("discardAuthorizationAttempt", () => { + test("deletes the named attempt, an unminted one included", async () => { + const a = await actor("discard"); + const got = await claim(a); + if (!got.claimed) throw new Error("claim failed"); + const deleted = await store.discardAuthorizationAttempt({ + actorId: a, + createdAt: got.attempt.createdAt, + }); + expect(deleted).toBe(true); + expect(await store.authorizationAttemptFor(a)).toBeNull(); + }); + + test("leaves a NEWER attempt by the same actor standing", async () => { + const a = await actor("newer"); + const older = await claim(a, "older"); + if (!older.claimed) throw new Error("claim failed"); + await age(a, "16 minutes"); + // What the row NOW holds, which is what a late discard would have been aiming at. + // `older.attempt.createdAt` is the PRE-age value and matches nothing, so a discard + // aimed at it misses whether or not a replacement exists, which is no test at all. + const [aged] = await database + .select() + .from(pendingAuthorizations) + .where(eq(pendingAuthorizations.actorId, a)); + if (!aged) throw new Error("aged row missing"); + const agedAt = aged.createdAt; + + const newer = await claim(a, "newer"); + expect(newer.claimed).toBe(true); + if (!newer.claimed) return; + // Differ by 16 minutes BY CONSTRUCTION, not by wall-clock luck: no same-millisecond race. + expect(newer.attempt.createdAt.getTime()).not.toBe(agedAt.getTime()); + + // Aimed at the attempt that actually stood: the replacement must survive it. + const deleted = await store.discardAuthorizationAttempt({ + actorId: a, + createdAt: agedAt, + }); + expect(deleted).toBe(false); + const standing = await store.authorizationAttemptFor(a); + expect(standing?.action).toBe("newer"); + expect(standing?.createdAt.getTime()).toBe( + newer.attempt.createdAt.getTime(), + ); + }); + + /* + * B2a. A SETTLED ATTEMPT IS A RECORD, AND A DISCARD AIMED AT IT BY ITS OWN `created_at` MUST NOT + * ERASE IT. Every caller reads the attempt first and discards it after, so the `created_at` it + * holds still names the row once a completion has committed in between. + */ + for (const outcome of [ + "completed", + "failed", + "unreconciled", + "withdrawn", + ] as const) { + test(`leaves a ${outcome} attempt standing and answers false`, async () => { + const a = await actor(`discard-settled-${outcome}`); + const got = await claim(a); + if (!got.claimed) throw new Error("claim failed"); + await database.execute( + sql`update pending_authorizations set completed_at = now(), outcome = ${outcome} where actor_id = ${a}`, + ); + + const deleted = await store.discardAuthorizationAttempt({ + actorId: a, + createdAt: got.attempt.createdAt, + }); + + const rows = await database + .select() + .from(pendingAuthorizations) + .where(eq(pendingAuthorizations.actorId, a)); + expect(rows.map((row) => row.outcome)).toEqual([outcome]); + expect(deleted).toBe(false); + expect( + await store.settledAuthorizationOutcome({ + actorId: a, + createdAt: got.attempt.createdAt, + }), + ).toBe(outcome); + }); + } +}); + +describe("authorizationAttemptFor", () => { + test("answers the live attempt", async () => { + const a = await actor("for-live"); + await claim(a); + expect((await store.authorizationAttemptFor(a))?.actorId).toBe(a); + }); + + test("answers null when there is none", async () => { + expect( + await store.authorizationAttemptFor(await actor("for-none")), + ).toBeNull(); + }); + + test("answers null past the TTL", async () => { + const a = await actor("for-expired"); + await claim(a); + await age(a, "16 minutes"); + expect(await store.authorizationAttemptFor(a)).toBeNull(); + }); +}); + +/** + * Naming an attempt by its `created_at` has to work for a row ANY writer wrote, and for a value + * that has been through JSON on the way back. + * + * `claimAuthorizationAttempt` truncates what it writes to milliseconds, but the COLUMN DEFAULT is + * `now()`, which PostgreSQL keeps to the microsecond; a row that takes the default — which is what + * drizzle's inferred insert type invites — is read back as a millisecond `Date` naming a different + * instant than the one stored. An exact `=` then matches nothing and the attempt is silently dead: + * no `auth_id` is ever written, and per the table's own docblock "an attempt holding null can never + * complete". + */ +describe("naming an attempt by created_at", () => { + /** Takes the column default, the way any writer using the inferred insert type does. */ + const insertWithDefaultCreatedAt = async (actorId: string) => { + const [row] = await database + .insert(pendingAuthorizations) + .values({ + actorId, + serverId, + action: "connect", + holder: "person", + userId: actorId, + vendorUserId: `v-${actorId}`, + }) + .returning(); + if (!row) throw new Error("insert returned nothing"); + return row; + }; + + test("a mint matches a row written with the column default", async () => { + const a = await actor("default-mint"); + const row = await insertWithDefaultCreatedAt(a); + const wrote = await store.recordAuthorizationMint({ + actorId: a, + createdAt: row.createdAt, + authId: "ar_default", + }); + expect(wrote).toBe(true); + expect((await store.authorizationAttemptFor(a))?.authId).toBe("ar_default"); + }); + + test("a discard matches a row written with the column default", async () => { + const a = await actor("default-discard"); + const row = await insertWithDefaultCreatedAt(a); + expect( + await store.discardAuthorizationAttempt({ + actorId: a, + createdAt: row.createdAt, + }), + ).toBe(true); + expect(await store.authorizationAttemptFor(a)).toBeNull(); + }); + + test("a created_at that has been through JSON still names its attempt", async () => { + const a = await actor("json-mint"); + const got = await claim(a); + if (!got.claimed) throw new Error("claim failed"); + // The declared type says `Date`; a serialised attempt hands back a string. + const serialised: { createdAt: Date } = JSON.parse( + JSON.stringify(got.attempt), + ); + const wrote = await store.recordAuthorizationMint({ + actorId: a, + createdAt: serialised.createdAt, + authId: "ar_json", + }); + expect(wrote).toBe(true); + expect((await store.authorizationAttemptFor(a))?.authId).toBe("ar_json"); + }); + + test("a created_at that names no instant is refused, not matched", async () => { + const a = await actor("bad-instant"); + await claim(a); + await expect( + store.recordAuthorizationMint({ + actorId: a, + createdAt: new Date("not a date"), + authId: "ar_bad", + }), + ).rejects.toThrow(/created_at/); + expect((await store.authorizationAttemptFor(a))?.authId).toBeNull(); + }); +}); diff --git a/server/tests/arcade-auth-provider.test.ts b/server/tests/arcade-auth-provider.test.ts new file mode 100644 index 000000000..8bb6d1aac --- /dev/null +++ b/server/tests/arcade-auth-provider.test.ts @@ -0,0 +1,144 @@ +import { afterEach, describe, expect, test } from "bun:test"; +import Arcade from "@arcadeai/arcadejs"; +import { createArcadeClient } from "../src/plugins/arcade-adapter"; + +/** + * `provider_id` IS THE AUTH PROVIDER AND NOT THE TOOLKIT, which is the whole of what this file + * exists to pin. One Google connection serves `Gmail` and `GoogleCalendar` both, and the live API + * refuses with an operator-named `"provider_id": "cpk-poc"` — a provider CONFIGURATION, not a + * toolkit. It coincides with the toolkit slug only when an operator names it that way, which + * `Github`, `Asana` and `Attio` all happen to do and which is every toolkit in this tree's + * fixtures. So the case that matters is constructed here rather than taken from the fixture: a + * toolkit whose provider is named DIFFERENTLY from it. + * + * Same prototype-stubbing pattern as `arcade-adapter.test.ts`, so nothing dials. + */ +type Methods = Record unknown>; +const toolsProto = (): Methods => + Object.getPrototypeOf( + new Arcade({ apiKey: "never-dialled" }).tools, + ) as Methods; + +const restores: (() => void)[] = []; +function stub( + on: Methods, + name: string, + impl: (...args: unknown[]) => unknown, +) { + const was = on[name]; + on[name] = impl; + restores.push(() => { + on[name] = was; + }); +} +afterEach(() => { + while (restores.length) restores.pop()?.(); +}); + +/** One listed action carrying the provider its toolkit's connections are held under. */ +const toolUnder = (toolkit: string, i: number, providerId: string | null) => ({ + qualified_name: `${toolkit}.A${i}`, + toolkit: { name: toolkit }, + requirements: { + authorization: { + id: `arcade-${i}`, + ...(providerId === null ? {} : { provider_id: providerId }), + oauth2: { scopes: [] }, + }, + }, +}); + +describe("Arcade authProviderOf", () => { + test("answers the listing's provider for a toolkit named differently from it", async () => { + const asked: unknown[] = []; + stub(toolsProto(), "list", (query: unknown) => { + asked.push(query); + return Promise.resolve({ + items: [ + toolUnder("Gmail", 1, "google"), + toolUnder("Gmail", 2, "google"), + ], + }); + }); + + const { broker } = createArcadeClient("never-dialled"); + + expect(await broker.authProviderOf("Gmail")).toBe("google"); + // ONE page and no paging: every tool in a toolkit shares its auth provider. + expect(asked).toHaveLength(1); + expect((asked[0] as { toolkit?: string }).toolkit).toBe("Gmail"); + }); + + test("carries the vendor's own case through untouched", async () => { + stub(toolsProto(), "list", () => + Promise.resolve({ items: [toolUnder("Gmail", 1, "Google")] }), + ); + + expect( + await createArcadeClient("never-dialled").broker.authProviderOf("Gmail"), + ).toBe("Google"); + }); + + test("answers null when the page names two distinct providers, never the first", async () => { + stub(toolsProto(), "list", () => + Promise.resolve({ + items: [ + toolUnder("Mixed", 1, "google"), + toolUnder("Mixed", 2, "slack"), + ], + }), + ); + + expect( + await createArcadeClient("never-dialled").broker.authProviderOf("Mixed"), + ).toBeNull(); + }); + + test("answers null — NEVER the toolkit name — when the listing does not say", async () => { + stub(toolsProto(), "list", () => + Promise.resolve({ items: [toolUnder("Gmail", 1, null)] }), + ); + + expect( + await createArcadeClient("never-dialled").broker.authProviderOf("Gmail"), + ).toBeNull(); + }); + + /** + * AN UNREADABLE AUTHORIZATION BESIDE A READABLE ONE IS UNANSWERED, NOT THE READABLE ONE'S ID. + * The seam's caller (`store.ts`'s sibling resolver) counts `null` as unanswered and ends nothing + * for it; answering `google` here would let it end rows on a listing it never read whole. + */ + test("answers null when another action's authorization could not be read", async () => { + stub(toolsProto(), "list", () => + Promise.resolve({ + items: [ + toolUnder("Gmail", 1, "google"), + { + qualified_name: "Gmail.A2", + requirements: { authorization: "oauth2" }, + }, + ], + }), + ); + + expect( + await createArcadeClient("never-dialled").broker.authProviderOf("Gmail"), + ).toBeNull(); + }); + + test("still answers the provider when another action has NO authorization at all", async () => { + stub(toolsProto(), "list", () => + Promise.resolve({ + items: [ + toolUnder("Gmail", 1, "google"), + { qualified_name: "Gmail.A2", requirements: null }, + ], + }), + ); + + expect( + await createArcadeClient("never-dialled").broker.authProviderOf("Gmail"), + ).toBe("google"); + }); +}); diff --git a/server/tests/arcade-authorize-cancel.test.ts b/server/tests/arcade-authorize-cancel.test.ts new file mode 100644 index 000000000..ca2891fa1 --- /dev/null +++ b/server/tests/arcade-authorize-cancel.test.ts @@ -0,0 +1,655 @@ +// server/tests/arcade-authorize-cancel.test.ts +import { + afterAll, + beforeAll, + beforeEach, + describe, + expect, + test, +} from "bun:test"; +import { randomUUID } from "node:crypto"; +import { eq, inArray, sql } from "drizzle-orm"; +import { Hono, type MiddlewareHandler } from "hono"; +import { createAuditStore } from "../src/audit"; +import type { AppVariables } from "../src/auth/guards"; +import { createDatabase } from "../src/db/client"; +import { + auditEvents, + brokeredConnections, + mcpServers, + mcpTools, + pendingAuthorizations, +} from "../src/db/schema"; +import type { BrokerProvider } from "../src/plugins/access"; +import type { ConnectedAppBroker } from "../src/plugins/broker"; +import { createPluginRoutes } from "../src/plugins/routes"; +import { createPluginStore } from "../src/plugins/store"; +import { TEST_POOL, testDatabaseUrl } from "./support/database"; +import { removePeople, seedPeople } from "./support/people"; + +const database = createDatabase(testDatabaseUrl(), TEST_POOL); +const suite = randomUUID().slice(0, 8); +const personalApp = `arcade-cp-${suite}`; +const sharedApp = `arcade-cs-${suite}`; +const otherApp = `arcade-co-${suite}`; +const movedApp = `arcade-cm-${suite}`; +const composioApp = `composio-cp-${suite}`; +const composioSharedApp = `composio-cs-${suite}`; +const SHARED_VENDOR_ID = `openbot-deployment:acme-${suite}:R`; +const ACTION = "Gmail.SendEmail"; +const SECRET_URL = "https://vendor.example/consent?secret=bearer-capability"; + +let mints: { vendorUserId: string; action?: string; toolkit: string }[] = []; +let nextAuthId: string | null = "ar_minted_1"; + +const arcadeBroker: ConnectedAppBroker = { + grantIsLocal: false, + // Nothing here asks what auth provider a connection is held under. + authProviderOf: async () => null, + authorizations: { + status: async () => { + throw new Error("nothing here polls an authorization"); + }, + confirmReturn: async () => { + throw new Error("nothing here confirms a return leg"); + }, + }, + grantsFor: async () => [], + listApps: async () => [], + ensureAuthConfig: async () => "standing", + deleteAuthConfig: async () => {}, + authorize: async ({ account, toolkit, action }) => { + mints.push({ vendorUserId: account.vendorUserId, action, toolkit }); + return { redirectUrl: SECRET_URL, authorizationId: nextAuthId }; + }, + isConnected: async () => true, + revoke: async () => true, + connectionFields: async () => [], + connectWithFields: async () => ({ accountId: "ca_1" }), + revokeAccount: async () => {}, + accountName: async () => "acme-bot", +}; + +/* + * A broker that runs NO per-action authorization flow — `authorizations: null`, the declared + * capability the cancel route's Composio half is reached under. `POST /authorize` refuses such a + * deployment with a 503 before any mint, so a mint reached under it is a defect, not a case. + */ +const composioBroker: ConnectedAppBroker = { + ...arcadeBroker, + grantIsLocal: true, + authorizations: null, + authorize: async () => { + throw new Error("nothing here mints under a broker with no flow"); + }, +}; + +function appAs( + role: "admin" | "user", + id: string, + provider: BrokerProvider = "arcade", + wrap: ( + store: ReturnType, + ) => ReturnType = (s) => s, +) { + const broker = provider === "arcade" ? arcadeBroker : composioBroker; + const baseStore = createPluginStore({ + brokerProvider: provider, + database, + auditStore: createAuditStore(database), + credentials: {} as never, + encryptionKey: "x".repeat(44), + policy: () => ({ mode: "enforce", deny: [], allow: ["true"] }), + broker, + deploymentId: `acme-${suite}`, + }); + const store = wrap(baseStore); + const signedIn: MiddlewareHandler<{ Variables: AppVariables }> = async ( + context, + next, + ) => { + context.set("actor", { id, email: `${id}@example.test`, role } as never); + await next(); + }; + return new Hono().route( + "/api/plugins", + createPluginRoutes( + store, + signedIn, + async () => true, + { + publicUrl: "https://openbot.example", + appUrl: "https://app.example", + encryptionKey: `${"A".repeat(43)}=`, + personHasAccess: async () => true, + }, + { broker, provider }, + ), + ); +} + +/** + * An actor id for this suite, AND THE `users` ROW BEHIND IT. + * + * `pending_authorizations.actor_id` keys to `users` and cascades (`.user_id` must equal it), so the + * attempt these cases cancel cannot be minted for somebody who does not exist. + */ +const actors: string[] = []; +const person = async (name: string) => { + const id = `${name}-${suite}`; + actors.push(id); + await seedPeople(database, [id]); + return id; +}; + +const authorize = (app: Hono, serverId: string) => + app.request(`/api/plugins/servers/${serverId}/authorize`, { + method: "POST", + headers: { "content-type": "application/json" }, + body: JSON.stringify({ action: ACTION }), + }); +const cancel = (app: Hono, serverId: string) => + app.request(`/api/plugins/servers/${serverId}/authorize`, { + method: "DELETE", + }); + +const attemptsFor = (actorId: string) => + database + .select() + .from(pendingAuthorizations) + .where(eq(pendingAuthorizations.actorId, actorId)); + +beforeAll(async () => { + await database.insert(mcpServers).values([ + { + id: personalApp, + title: "Gmail", + vendor: "Arcade", + url: `arcade://P${suite}`, + provenance: "arcade", + authScheme: "OAUTH2", + accountMode: "personal", + }, + { + id: sharedApp, + title: "Team Gmail", + vendor: "Arcade", + url: `arcade://S${suite}`, + provenance: "arcade", + authScheme: "OAUTH2", + accountMode: "shared", + sharedVendorUserId: SHARED_VENDOR_ID, + }, + { + id: otherApp, + title: "Slack", + vendor: "Arcade", + url: `arcade://O${suite}`, + provenance: "arcade", + authScheme: "OAUTH2", + accountMode: "personal", + }, + { + id: movedApp, + title: "Notion", + vendor: "Arcade", + url: `arcade://M${suite}`, + provenance: "arcade", + authScheme: "OAUTH2", + accountMode: "personal", + }, + { + id: composioApp, + title: "Composio Gmail", + vendor: "Composio", + url: `composio://cp${suite}`, + provenance: "composio", + authScheme: "OAUTH2", + accountMode: "personal", + }, + { + id: composioSharedApp, + title: "Composio Team Gmail", + vendor: "Composio", + url: `composio://cs${suite}`, + provenance: "composio", + authScheme: "OAUTH2", + accountMode: "shared", + sharedVendorUserId: SHARED_VENDOR_ID, + }, + ]); + await database.insert(mcpTools).values( + [personalApp, sharedApp, otherApp, movedApp].map((serverId) => ({ + serverId, + name: ACTION, + vendorName: ACTION, + })), + ); +}); + +afterAll(async () => { + await database + .delete(mcpServers) + .where( + inArray(mcpServers.id, [ + personalApp, + sharedApp, + otherApp, + movedApp, + composioApp, + composioSharedApp, + ]), + ); + if (actors.length) { + await database + .delete(pendingAuthorizations) + .where(inArray(pendingAuthorizations.actorId, actors)); + } + await removePeople(database, actors); + await database.$client.close(); +}); + +beforeEach(() => { + mints = []; + nextAuthId = "ar_minted_1"; +}); + +describe("DELETE /servers/:id/authorize", () => { + test("cancelling removes the attempt and a fresh authorization immediately succeeds", async () => { + const actor = await person("cancel"); + const app = appAs("user", actor); + expect((await authorize(app, personalApp)).status).toBe(200); + expect(await attemptsFor(actor)).toHaveLength(1); + + const response = await cancel(app, personalApp); + expect(response.status).toBeLessThan(300); + expect(await attemptsFor(actor)).toEqual([]); + + nextAuthId = "ar_minted_2"; + const again = await authorize(app, personalApp); + expect(again.status).toBe(200); + const [row] = await attemptsFor(actor); + expect(row).toMatchObject({ + authId: "ar_minted_2", + completedAt: null, + outcome: null, + }); + // created_at round-trips through a JS Date: it is what the cancel matches on. + const created = row?.createdAt as Date; + const [exact] = (await database.execute( + sql`select (created_at = ${created.toISOString()}::timestamptz) as exact + from pending_authorizations where actor_id = ${actor}`, + )) as unknown as { exact: boolean }[]; + expect(exact?.exact).toBe(true); + }); + + test("cancelling an attempt whose mint never completed (no auth_id) removes it", async () => { + const actor = await person("noid"); + nextAuthId = null; + const app = appAs("user", actor); + expect((await authorize(app, personalApp)).status).toBe(200); + const [before] = await attemptsFor(actor); + expect(before?.authId).toBeNull(); + expect((await cancel(app, personalApp)).status).toBeLessThan(300); + expect(await attemptsFor(actor)).toEqual([]); + }); + + test("cancelling when no attempt exists is not an error", async () => { + const actor = await person("none"); + const response = await cancel(appAs("user", actor), personalApp); + expect(response.status).toBeLessThan(300); + expect(await attemptsFor(actor)).toEqual([]); + }); + + test("a cancel naming one app does not cancel this actor's attempt on another", async () => { + const actor = await person("otherapp"); + const app = appAs("user", actor); + expect((await authorize(app, personalApp)).status).toBe(200); + const [before] = await attemptsFor(actor); + expect(before?.serverId).toBe(personalApp); + + const response = await cancel(app, otherApp); + expect(response.status).toBeLessThan(300); + expect(await response.json()).toEqual({ cancelled: false }); + + const [after] = await attemptsFor(actor); + expect(after?.serverId).toBe(personalApp); + expect(after?.createdAt.getTime()).toBe(before?.createdAt.getTime()); + expect(after?.authId).toBe("ar_minted_1"); + }); + + test("a cancel issued for an OLD created_at does not remove a NEWER attempt by the same actor", async () => { + const actor = await person("stale"); + const plain = appAs("user", actor); + expect((await authorize(plain, personalApp)).status).toBe(200); + const [old] = await attemptsFor(actor); + if (!old) throw new Error("no first attempt"); + // The first attempt expires and a newer one replaces it, completing-in-flight with its own state. + await database.execute( + sql`update pending_authorizations set created_at = created_at - interval '16 minutes' where actor_id = ${actor}`, + ); + const stale = { + ...old, + createdAt: new Date(old.createdAt.getTime() - 16 * 60 * 1000), + }; + nextAuthId = "ar_newer"; + expect((await authorize(plain, personalApp)).status).toBe(200); + const [newer] = await attemptsFor(actor); + expect(newer?.createdAt.getTime()).toBeGreaterThan( + stale.createdAt.getTime(), + ); + + // The cancel resolves the attempt it was issued for (the old one) and then loses the race. + const racing = appAs("user", actor, "arcade", (store) => ({ + ...store, + authorizationAttemptFor: async () => stale, + })); + expect((await cancel(racing, personalApp)).status).toBeLessThan(300); + + const [after] = await attemptsFor(actor); + expect(after?.createdAt.getTime()).toBe( + newer?.createdAt.getTime() as number, + ); + expect(after?.authId).toBe("ar_newer"); + expect(after?.completedAt).toBeNull(); + expect(after?.outcome).toBeNull(); + }); + + /* + * B2a. A COMPLETION THAT COMMITS BETWEEN THE CANCEL'S READ AND ITS DELETE. The route reads the + * live attempt, then discards it by `(actor_id, created_at)`; the read is wrapped here so the + * REAL completion runs, against the real row, in exactly that gap. Unguarded, the DELETE erased + * the completed attempt and the route answered `{ cancelled: true }` for a consent that had + * succeeded — the grant live at the vendor and the connection written. + */ + test("a consent that completes under the cancel survives it, and the cancel says so", async () => { + const actor = await person("raced"); + const toolkit = `race-${suite}`; + expect((await authorize(appAs("user", actor), personalApp)).status).toBe( + 200, + ); + const racing = appAs("user", actor, "arcade", (store) => ({ + ...store, + authorizationAttemptFor: async (actorId: string) => { + const live = await store.authorizationAttemptFor(actorId); + if (live?.authId) { + await store.completeAuthorizationAttempt({ + actorId, + authId: live.authId, + toolkit, + account: { + holder: "person", + userId: actorId, + vendorUserId: live.vendorUserId, + }, + action: ACTION, + scopes: [], + authProvider: "google", + }); + } + return live; + }, + })); + try { + const response = await cancel(racing, personalApp); + // One comparison, so a failure shows the answer AND what became of the record side by side. + expect({ + status: response.status, + body: await response.json(), + outcomes: (await attemptsFor(actor)).map((row) => row.outcome), + }).toEqual({ + status: 409, + body: { + error: + "That authorization finished before it could be cancelled, so the account is connected. Disconnect it if you did not mean to connect it.", + }, + outcomes: ["completed"], + }); + } finally { + await database + .delete(brokeredConnections) + .where(eq(brokeredConnections.app, toolkit)); + } + }); + + /* + * B5. CANCELLING IS AN OPERATION ON THE ATTEMPT, AND THE ATTEMPT OUTLIVES WHAT THE APP LOOKS + * LIKE. The route used to resolve the app FIRST and refuse on anything `brokeredAccountFor` + * refuses — while reading nothing off its success branch. So every way an app can stop + * resolving, with a live attempt still standing, was a person holding a pending authorization + * they could not retract: the attempt key is the actor ALONE, so that one row also refused them + * a new authorization on ANY app for the full fifteen minutes. + * + * A HARD `DELETE` OF THE SERVER ROW IS NOT ONE OF THOSE WAYS, and that is worth writing down + * rather than testing: `pending_authorizations.server_id` is `references(mcpServers.id, + * { onDelete: "cascade" })`, so `removeServer` takes the attempt with it and there is nothing + * left to cancel. The two below are reachable, and both by an administrator doing something + * ordinary. + */ + test("an attempt on an app whose url no longer parses as brokered can still be cancelled", async () => { + const actor = await person("moved"); + const app = appAs("user", actor); + expect((await authorize(app, movedApp)).status).toBe(200); + expect(await attemptsFor(actor)).toHaveLength(1); + + // The app is re-pointed at an ordinary MCP endpoint: `appOfUrl` now answers null for it. + await database + .update(mcpServers) + .set({ url: `https://moved-${suite}.example/mcp` }) + .where(eq(mcpServers.id, movedApp)); + try { + const response = await cancel(app, movedApp); + expect(response.status).toBeLessThan(300); + expect(await response.json()).toEqual({ cancelled: true }); + expect(await attemptsFor(actor)).toEqual([]); + } finally { + await database + .update(mcpServers) + .set({ url: `arcade://M${suite}` }) + .where(eq(mcpServers.id, movedApp)); + } + }); + + test("an administrator demoted mid-consent can still cancel their own Shared-app attempt", async () => { + const actor = await person("demoted"); + expect((await authorize(appAs("admin", actor), sharedApp)).status).toBe( + 200, + ); + const [before] = await attemptsFor(actor); + expect(before?.serverId).toBe(sharedApp); + expect(before?.vendorUserId).toBe(SHARED_VENDOR_ID); + + // The same person, no longer an administrator, with their own consent still in flight. + const response = await cancel(appAs("user", actor), sharedApp); + expect(response.status).toBeLessThan(300); + expect(await response.json()).toEqual({ cancelled: true }); + expect(await attemptsFor(actor)).toEqual([]); + }); + + /* + * AND THE REFUSALS ARE NOT TRADED AWAY FOR THAT. With nothing of this actor's to cancel, a + * DELETE aimed at a row that is not brokered is still told so, rather than flattened into a + * `{ cancelled: false }` that claims the request was understood. + */ + test("with no attempt of this actor's, a non-brokered app is still refused in so many words", async () => { + const actor = await person("refused"); + const app = appAs("user", actor); + await database + .update(mcpServers) + .set({ url: `https://refused-${suite}.example/mcp` }) + .where(eq(mcpServers.id, movedApp)); + try { + const response = await cancel(app, movedApp); + expect(response.status).toBe(400); + expect(await response.json()).toEqual({ + error: "That app is not reached through a broker.", + }); + } finally { + await database + .update(mcpServers) + .set({ url: `arcade://M${suite}` }) + .where(eq(mcpServers.id, movedApp)); + } + }); +}); + +/* + * B5a. THE COMPOSIO HALF: CANCEL UNDER A BROKER WHOSE `authorizations` IS NULL. + * + * The cancel route reads no flow capability at all — it resolves the attempt row first and + * discards it, and only with nothing of this actor's on the named app does it resolve the app + * through `brokeredAccountFor`, under the ACTIVE provider's url parser. So on such a deployment + * the route is still reachable, and these pin what it answers there: a cancel is not the POST's + * "this deployment does not authorize per action" 503, an attempt left standing across a switch + * of provider is still the person's to retract, and the refusals keep their words under the + * Composio parser. + */ +describe("DELETE /servers/:id/authorize on a deployment whose broker runs no authorization flow", () => { + test("with nothing standing, a Composio app answers { cancelled: false }, not the POST's 503", async () => { + const actor = await person("c-none"); + const response = await cancel( + appAs("user", actor, "composio"), + composioApp, + ); + expect(response.status).toBe(200); + expect(await response.json()).toEqual({ cancelled: false }); + expect(mints).toEqual([]); + expect(await attemptsFor(actor)).toEqual([]); + }); + + test("an attempt minted before the deployment switched to Composio can still be cancelled", async () => { + const actor = await person("c-switched"); + expect((await authorize(appAs("user", actor), personalApp)).status).toBe( + 200, + ); + const [before] = await attemptsFor(actor); + expect(before?.serverId).toBe(personalApp); + mints = []; + + // Under Composio `arcade://` parses to no app at all, so only the attempt-first order reaches it. + const response = await cancel( + appAs("user", actor, "composio"), + personalApp, + ); + expect(response.status).toBe(200); + expect(await response.json()).toEqual({ cancelled: true }); + expect(await attemptsFor(actor)).toEqual([]); + expect(mints).toEqual([]); + }); + + test("a cancel naming a Composio app does not cancel this actor's attempt on another app", async () => { + const actor = await person("c-other"); + expect((await authorize(appAs("user", actor), personalApp)).status).toBe( + 200, + ); + const [before] = await attemptsFor(actor); + + const response = await cancel( + appAs("user", actor, "composio"), + composioApp, + ); + expect(response.status).toBe(200); + expect(await response.json()).toEqual({ cancelled: false }); + + const [after] = await attemptsFor(actor); + expect(after?.serverId).toBe(personalApp); + expect(after?.createdAt.getTime()).toBe(before?.createdAt.getTime()); + expect(after?.authId).toBe("ar_minted_1"); + }); + + test("with nothing standing, an `arcade://` row is refused under the Composio parser in so many words", async () => { + const actor = await person("c-refused"); + const response = await cancel( + appAs("user", actor, "composio"), + personalApp, + ); + expect(response.status).toBe(400); + expect(await response.json()).toEqual({ + error: "That app is not reached through a broker.", + }); + }); + + test("with nothing standing, a non-administrator aimed at a Shared Composio app is refused", async () => { + const actor = await person("c-shared"); + const response = await cancel( + appAs("user", actor, "composio"), + composioSharedApp, + ); + expect(response.status).toBe(403); + expect(await response.json()).toEqual({ + error: "An administrator connects shared apps.", + }); + }); +}); + +/* + * B5b. A RETRACTION IS ON THE TRAIL. The mint/claim/complete lifecycle exists to make a person's + * consent attributable, and `mcp.account_connected` records the one ending where they said yes. A + * person pressing Cancel on their own pending authorization is the other deliberate ending, and it + * used to leave nothing at all: the row was deleted and no record said who withdrew what. + * + * Read by the ACTOR in the payload, which is where every writer on this lifecycle puts who did it, + * so another test's rows on the same app can neither satisfy nor spoil these. + */ +describe("DELETE /servers/:id/authorize — the audit row", () => { + const cancellationsBy = (actorId: string) => + database + .select() + .from(auditEvents) + .where( + sql`${auditEvents.eventType} = 'mcp.authorization_cancelled' and ${auditEvents.payload}->>'actor' = ${actorId}`, + ); + + test("cancelling a live attempt files one mcp.authorization_cancelled row against the app", async () => { + const actor = await person("audited"); + const app = appAs("user", actor); + expect((await authorize(app, personalApp)).status).toBe(200); + + const response = await cancel(app, personalApp); + expect(await response.json()).toEqual({ cancelled: true }); + + const rows = await cancellationsBy(actor); + expect(rows).toHaveLength(1); + const [row] = rows; + // The app's slug, which is what `mcp.account_connected` and `mcp.account_disconnected` file a + // brokered app under — so one query on the target answers every ending of one app's consent. + expect(row?.targetType).toBe("mcp_server"); + expect(row?.targetId).toBe(`P${suite}`); + expect(row?.initiatorKind).toBe("person"); + expect(row?.payload).toEqual({ + actor, + server: `P${suite}`, + serverId: personalApp, + action: ACTION, + holder: "person", + minted: true, + }); + // THE CONFIDENTIALITY PROMISE: neither the bearer consent url nor the vendor's handle for the + // flow reaches the trail. + const written = JSON.stringify(row); + expect(written).not.toContain(SECRET_URL); + expect(written).not.toContain("ar_minted_1"); + }); + + test("a cancel that loses the race to a newer attempt removes nothing and files no row", async () => { + const actor = await person("unaudited"); + const app = appAs("user", actor); + expect((await authorize(app, personalApp)).status).toBe(200); + const [old] = await attemptsFor(actor); + if (!old) throw new Error("no first attempt"); + // The cancel resolved an attempt that a newer one has since replaced: its delete matches nothing. + const stale = { + ...old, + createdAt: new Date(old.createdAt.getTime() - 16 * 60 * 1000), + }; + const racing = appAs("user", actor, "arcade", (store) => ({ + ...store, + authorizationAttemptFor: async () => stale, + })); + expect(await (await cancel(racing, personalApp)).json()).toEqual({ + cancelled: false, + }); + expect(await attemptsFor(actor)).toHaveLength(1); + expect(await cancellationsBy(actor)).toEqual([]); + }); +}); diff --git a/server/tests/arcade-authorize-route.test.ts b/server/tests/arcade-authorize-route.test.ts new file mode 100644 index 000000000..755c205f8 --- /dev/null +++ b/server/tests/arcade-authorize-route.test.ts @@ -0,0 +1,808 @@ +// server/tests/arcade-authorize-route.test.ts +import { + afterAll, + beforeAll, + beforeEach, + describe, + expect, + test, +} from "bun:test"; +import { APIConnectionError, APIError } from "@arcadeai/arcadejs"; +import { randomUUID } from "node:crypto"; +import { eq, inArray, sql } from "drizzle-orm"; +import { Hono, type MiddlewareHandler } from "hono"; +import { createAuditStore } from "../src/audit"; +import type { AppVariables } from "../src/auth/guards"; +import { createDatabase } from "../src/db/client"; +import { mcpServers, mcpTools, pendingAuthorizations } from "../src/db/schema"; +import type { BrokerProvider } from "../src/plugins/access"; +import type { ConnectedAppBroker } from "../src/plugins/broker"; +import { createPluginRoutes } from "../src/plugins/routes"; +import { createPluginStore, type PluginStore } from "../src/plugins/store"; +import { TEST_POOL, testDatabaseUrl } from "./support/database"; +import { removePeople, seedPeople } from "./support/people"; + +const database = createDatabase(testDatabaseUrl(), TEST_POOL); +const suite = randomUUID().slice(0, 8); +const personalApp = `arcade-p-${suite}`; +const sharedApp = `arcade-s-${suite}`; +const composioApp = `composio-p-${suite}`; +const SHARED_VENDOR_ID = `openbot-deployment:acme-${suite}:R`; +const ACTION = "Gmail.SendEmail"; +const SECRET_URL = "https://vendor.example/consent?secret=bearer-capability"; + +let mints: { vendorUserId: string; action?: string; toolkit: string }[] = []; +let nextAuthId: string | null = "ar_minted_1"; +// What the next mint does before answering; a test sets it to throw, or to hold the mint open. +let beforeMint: (() => Promise) | null = null; + +const arcadeBroker: ConnectedAppBroker = { + grantIsLocal: false, + // Nothing here asks what auth provider a connection is held under. + authProviderOf: async () => null, + authorizations: { + status: async () => { + throw new Error("nothing here polls an authorization"); + }, + confirmReturn: async () => { + throw new Error("nothing here confirms a return leg"); + }, + }, + grantsFor: async () => [], + listApps: async () => [], + ensureAuthConfig: async () => "standing", + deleteAuthConfig: async () => {}, + authorize: async ({ account, toolkit, action }) => { + mints.push({ vendorUserId: account.vendorUserId, action, toolkit }); + await beforeMint?.(); + return { redirectUrl: SECRET_URL, authorizationId: nextAuthId }; + }, + isConnected: async () => true, + revoke: async () => true, + connectionFields: async () => [], + connectWithFields: async () => ({ accountId: "ca_1" }), + revokeAccount: async () => {}, + accountName: async () => "acme-bot", +}; + +const composioBroker: ConnectedAppBroker = { + ...arcadeBroker, + grantIsLocal: true, + // Nothing here asks what auth provider a connection is held under. + authProviderOf: async () => null, + authorizations: null, + authorize: async ({ account, toolkit, action }) => { + mints.push({ vendorUserId: account.vendorUserId, action, toolkit }); + return { redirectUrl: SECRET_URL, authorizationId: null }; + }, +}; + +function appAs( + role: "admin" | "user", + id: string, + provider: BrokerProvider = "arcade", + // What this app's store does differently. One test makes the local write after a SUCCESSFUL mint + // fail, which is the only way to reach the route's record-after-the-fact branch. + override: Partial = {}, +) { + const broker = provider === "arcade" ? arcadeBroker : composioBroker; + const store = createPluginStore({ + brokerProvider: provider, + database, + auditStore: createAuditStore(database), + credentials: {} as never, + encryptionKey: "x".repeat(44), + policy: () => ({ mode: "enforce", deny: [], allow: ["true"] }), + broker, + deploymentId: `acme-${suite}`, + }); + const signedIn: MiddlewareHandler<{ Variables: AppVariables }> = async ( + context, + next, + ) => { + context.set("actor", { id, email: `${id}@example.test`, role } as never); + await next(); + }; + return new Hono().route( + "/api/plugins", + createPluginRoutes( + { ...store, ...override }, + signedIn, + async () => true, + { + publicUrl: "https://openbot.example", + appUrl: "https://app.example", + encryptionKey: `${"A".repeat(43)}=`, + personHasAccess: async () => true, + }, + { broker, provider }, + ), + ); +} + +/** + * An actor id for this suite, AND THE `users` ROW BEHIND IT. + * + * `pending_authorizations.actor_id` keys to `users` and cascades (`.user_id` must equal it), so the + * attempt a mint writes cannot name somebody who does not exist. + */ +const actors: string[] = []; +const person = async (name: string) => { + const id = `${name}-${suite}`; + actors.push(id); + await seedPeople(database, [id]); + return id; +}; + +const authorize = ( + app: Hono, + serverId: string, + body: unknown = { action: ACTION }, +) => + app.request(`/api/plugins/servers/${serverId}/authorize`, { + method: "POST", + headers: { "content-type": "application/json" }, + body: JSON.stringify(body), + }); + +/** + * Every line the deployment wrote while `work` ran, each as the text it would have printed. The + * arguments are joined rather than mapped through one `String()`, so an object logged beside a + * string still shows up as `[object Object]`, which is the shape a leak hides in. + */ +async function heard(work: () => T | Promise): Promise<[T, string[]]> { + const said: string[] = []; + const before = globalThis.console; + const hear = (...args: unknown[]) => + said.push(args.map((arg) => String(arg)).join(" ")); + globalThis.console = { + ...before, + log: hear, + info: hear, + warn: hear, + error: hear, + debug: hear, + } as typeof console; + try { + return [await work(), said]; + } finally { + globalThis.console = before; + } +} + +const attemptsFor = (actorId: string) => + database + .select() + .from(pendingAuthorizations) + .where(eq(pendingAuthorizations.actorId, actorId)); + +beforeAll(async () => { + await database.insert(mcpServers).values([ + { + id: personalApp, + title: "Gmail", + vendor: "Arcade", + url: `arcade://P${suite}`, + provenance: "arcade", + authScheme: "OAUTH2", + accountMode: "personal", + }, + { + id: sharedApp, + title: "Team Gmail", + vendor: "Arcade", + url: `arcade://S${suite}`, + provenance: "arcade", + authScheme: "OAUTH2", + accountMode: "shared", + sharedVendorUserId: SHARED_VENDOR_ID, + }, + { + id: composioApp, + title: "Composio Gmail", + vendor: "Composio", + url: `composio://c${suite}`, + provenance: "composio", + authScheme: "OAUTH2", + }, + ]); + await database.insert(mcpTools).values( + [personalApp, sharedApp, composioApp].map((serverId) => ({ + serverId, + name: ACTION, + vendorName: ACTION, + })), + ); +}); + +afterAll(async () => { + await database + .delete(mcpServers) + .where(inArray(mcpServers.id, [personalApp, sharedApp, composioApp])); + if (actors.length) { + await database + .delete(pendingAuthorizations) + .where(inArray(pendingAuthorizations.actorId, actors)); + } + await removePeople(database, actors); + await database.$client.close(); +}); + +beforeEach(() => { + mints = []; + nextAuthId = "ar_minted_1"; + beforeMint = null; +}); + +describe("POST /servers/:id/authorize", () => { + test("mints for the named action and the row records the exact account and the authorization id", async () => { + const actor = await person("mint"); + const response = await authorize(appAs("user", actor), personalApp); + expect(response.status).toBe(200); + expect(await response.json()).toEqual({ authorizationUrl: SECRET_URL }); + expect(mints).toEqual([ + { vendorUserId: actor, action: ACTION, toolkit: `P${suite}` }, + ]); + const [row] = await attemptsFor(actor); + expect(row).toMatchObject({ + actorId: actor, + serverId: personalApp, + action: ACTION, + holder: "person", + userId: actor, + vendorUserId: actor, + authId: "ar_minted_1", + completedAt: null, + outcome: null, + }); + // created_at round-trips through a JS Date: the mint matched on it, and the stored value is + // exactly millisecond-precise. + const created = row?.createdAt as Date; + expect(new Date(created.getTime()).getTime()).toBe(created.getTime()); + const [exact] = (await database.execute( + sql`select (created_at = date_trunc('milliseconds', created_at)) as exact + from pending_authorizations where actor_id = ${actor}`, + )) as unknown as { exact: boolean }[]; + expect(exact?.exact).toBe(true); + }); + + test("a null authorization id is recorded as NULL, never collapsed", async () => { + const actor = await person("nullid"); + nextAuthId = null; + const response = await authorize(appAs("user", actor), personalApp); + expect(response.status).toBe(200); + const [row] = await attemptsFor(actor); + expect(row?.authId).toBeNull(); + expect(row?.completedAt).toBeNull(); + }); + + test("an action the app does not publish is a 400 with no attempt and no mint", async () => { + const actor = await person("unpublished"); + const response = await authorize(appAs("user", actor), personalApp, { + action: "Gmail.DeleteEverything", + }); + expect(response.status).toBe(400); + expect(mints).toEqual([]); + expect(await attemptsFor(actor)).toEqual([]); + }); + + test("a differently-cased action is not accepted", async () => { + const actor = await person("cased"); + const response = await authorize(appAs("user", actor), personalApp, { + action: ACTION.toLowerCase(), + }); + expect(response.status).toBe(400); + expect(mints).toEqual([]); + expect(await attemptsFor(actor)).toEqual([]); + }); + + test("a non-admin on a Shared app is a 403 with no attempt", async () => { + const actor = await person("shared-user"); + const response = await authorize(appAs("user", actor), sharedApp); + expect(response.status).toBe(403); + expect(mints).toEqual([]); + expect(await attemptsFor(actor)).toEqual([]); + }); + + test("an admin on a Shared app records the deployment's account on the row", async () => { + const actor = await person("shared-admin"); + const response = await authorize(appAs("admin", actor), sharedApp); + expect(response.status).toBe(200); + const [row] = await attemptsFor(actor); + expect(row).toMatchObject({ + holder: "deployment", + userId: null, + vendorUserId: SHARED_VENDOR_ID, + authId: "ar_minted_1", + }); + }); + + test("a second authorization while one is live is a 409 naming the first", async () => { + const actor = await person("live"); + const app = appAs("user", actor); + expect((await authorize(app, personalApp)).status).toBe(200); + const [first] = await attemptsFor(actor); + mints = []; + const second = await authorize(app, personalApp); + expect(second.status).toBe(409); + expect(JSON.stringify(await second.json())).toContain(ACTION); + expect(mints).toEqual([]); + const [after] = await attemptsFor(actor); + expect(after?.createdAt.getTime()).toBe( + first?.createdAt.getTime() as number, + ); + expect(after?.authId).toBe("ar_minted_1"); + }); + + test("an authorization after the first expired succeeds, replacing it", async () => { + const actor = await person("expired"); + const app = appAs("user", actor); + expect((await authorize(app, personalApp)).status).toBe(200); + await database.execute( + sql`update pending_authorizations set created_at = created_at - interval '16 minutes' where actor_id = ${actor}`, + ); + const [old] = await attemptsFor(actor); + nextAuthId = "ar_minted_2"; + expect((await authorize(app, personalApp)).status).toBe(200); + const rows = await attemptsFor(actor); + expect(rows).toHaveLength(1); + expect(rows[0]?.authId).toBe("ar_minted_2"); + expect(rows[0]?.createdAt.getTime()).toBeGreaterThan( + old?.createdAt.getTime() as number, + ); + }); + + test("the authorization url appears in no audit row", async () => { + const actor = await person("audit"); + expect((await authorize(appAs("user", actor), personalApp)).status).toBe( + 200, + ); + const leaked = await database.execute( + sql`select id from audit_events + where payload::text like ${"%bearer-capability%"} + or target_id like ${"%bearer-capability%"}`, + ); + expect(leaked.length).toBe(0); + }); + + test("a deployment whose broker runs no authorization flow answers 503 and writes no attempt", async () => { + const actor = await person("composio"); + const response = await authorize( + appAs("user", actor, "composio"), + composioApp, + ); + expect(response.status).toBe(503); + expect(mints).toEqual([]); + expect(await attemptsFor(actor)).toEqual([]); + expect(JSON.stringify(await response.json())).not.toContain( + "vendor.example", + ); + }); + + test("the gate answers before whose account it is: a non-admin on a Shared app of such a deployment is a 503, not a 403", async () => { + const actor = await person("composio-shared"); + const response = await authorize( + appAs("user", actor, "composio"), + sharedApp, + ); + expect(response.status).toBe(503); + expect(await attemptsFor(actor)).toEqual([]); + }); + + describe("a mint that fails", () => { + const refuse = async () => { + throw new APIError( + 500, + { name: "boom", message: "vendor-body-secret" }, + "500", + new Headers(), + ); + }; + + test("a definite vendor refusal deletes the attempt, and a late cleanup can never delete a newer one", async () => { + const actor = await person("definite"); + beforeMint = refuse; + const response = await authorize(appAs("user", actor), personalApp); + expect(response.status).toBe(502); + expect(JSON.stringify(await response.json())).not.toContain( + "vendor-body-secret", + ); + expect(await attemptsFor(actor)).toEqual([]); + + // The actor starts again; the first attempt's cleanup then arrives late. + beforeMint = null; + nextAuthId = "ar_newer"; + expect((await authorize(appAs("user", actor), personalApp)).status).toBe( + 200, + ); + const [newer] = await attemptsFor(actor); + const store = createPluginStore({ + brokerProvider: "arcade", + database, + auditStore: createAuditStore(database), + credentials: {} as never, + encryptionKey: "x".repeat(44), + policy: () => ({ mode: "enforce", deny: [], allow: ["true"] }), + broker: arcadeBroker, + deploymentId: `acme-${suite}`, + }); + const staleCreatedAt = new Date( + (newer?.createdAt.getTime() as number) - 5, + ); + expect( + await store.discardAuthorizationAttempt({ + actorId: actor, + createdAt: staleCreatedAt, + }), + ).toBe(false); + const [survivor] = await attemptsFor(actor); + expect(survivor).toMatchObject({ + authId: "ar_newer", + completedAt: null, + outcome: null, + }); + expect(survivor?.createdAt.getTime()).toBe(newer?.createdAt.getTime()); + }); + + test("a definite refusal whose clean-up also fails still answers the refusal, not a bodyless 500", async () => { + const actor = await person("definite-stuck"); + beforeMint = refuse; + const response = await authorize( + appAs("user", actor, "arcade", { + discardAuthorizationAttempt: async () => { + throw new Error("Failed query: delete from pending_authorizations"); + }, + }), + personalApp, + ); + // The refusal the handler worked out, not the generic 500 a thrown clean-up produces. + expect(response.status).toBe(502); + const body = (await response.json()) as { error?: string }; + expect(typeof body.error).toBe("string"); + expect(JSON.stringify(body)).not.toContain("vendor-body-secret"); + expect(JSON.stringify(body)).not.toContain("Failed query"); + // Nothing cleared it, so the row stands and expires on its own. + const [row] = await attemptsFor(actor); + expect(row).toMatchObject({ authId: null, completedAt: null }); + }); + + test("an authored refusal is definite: nothing reached the vendor, so the attempt is deleted", async () => { + const actor = await person("authored"); + const { BrokerRefusalError } = await import("../src/plugins/broker"); + beforeMint = async () => { + throw new BrokerRefusalError("Arcade needs an action."); + }; + const response = await authorize(appAs("user", actor), personalApp); + expect(response.status).toBe(503); + expect(await attemptsFor(actor)).toEqual([]); + }); + + test("an uncertain failure (status undefined) leaves the attempt standing with a null auth_id", async () => { + const actor = await person("uncertain"); + beforeMint = async () => { + throw new APIConnectionError({ message: "socket dropped" }); + }; + const response = await authorize(appAs("user", actor), personalApp); + expect(response.status).toBe(502); + const body = JSON.stringify(await response.json()); + expect(body).not.toContain("bearer-capability"); + const rows = await attemptsFor(actor); + expect(rows).toHaveLength(1); + expect(rows[0]).toMatchObject({ + authId: null, + completedAt: null, + outcome: null, + }); + const created = rows[0]?.createdAt as Date; + expect(new Date(created.getTime()).getTime()).toBe(created.getTime()); + // ...and it still holds the actor: a second start is a 409, not a second flow. + beforeMint = null; + expect((await authorize(appAs("user", actor), personalApp)).status).toBe( + 409, + ); + }); + + /* + * L4-a: THE UNCERTAIN BRANCH LEAVES THE CLAIM STANDING, AND IT USED TO LEAVE NOTHING ELSE. + * + * The outcome assertions here already passed before the fix: the row stands with a NULL + * `auth_id` and holds the actor. What was missing is the trace. A flow the vendor may have + * started went unrecorded everywhere, so nobody who could end it at the vendor could find it. + */ + test("an uncertain mint leaves the claim standing AND leaves an operator a line naming it", async () => { + const actor = await person("uncertain-line"); + beforeMint = async () => { + throw new APIConnectionError({ message: "socket dropped" }); + }; + const [response, said] = await heard(() => + authorize(appAs("user", actor), personalApp), + ); + expect(response.status).toBe(502); + + // NOT ENDED ON A GUESS: the claim stands, with no id, holding the actor. + const [row] = await attemptsFor(actor); + expect(row).toMatchObject({ + authId: null, + completedAt: null, + outcome: null, + }); + + // AND SAID OUT LOUD, with what an operator needs to find the attempt and the flow. + const line = said.find((text) => + text.includes("arcade-mint-outcome-unknown"), + ); + expect(line).toBeDefined(); + const logged = JSON.parse(line ?? "{}") as Record; + expect(logged.server).toBe(personalApp); + expect(logged.action).toBe(ACTION); + expect(logged.attemptStartedAt).toBe(row?.createdAt.toISOString()); + expect(logged.error).toBe("socket dropped"); + // Nothing that is not ours: no bearer url, no vendor user id, no authorization id field. + expect(line).not.toContain("bearer-capability"); + expect(line).not.toContain(actor); + expect(Object.keys(logged)).not.toContain("authorizationId"); + + /* + * L4a-b: AND THE SENTENCE THE PERSON GETS NAMES ONLY STEPS THIS BRANCH CAN DELIVER. + * + * It used to end "finish it if you were sent to a consent screen", while the line asserted + * just above says of the same branch that nobody was sent to one — and the line is the one + * that is true, because reaching here means the mint never answered a url. Somebody acting on + * the old sentence searched their tabs for a consent screen that was never opened. + * + * ASSERTED AS THE ABSENCE OF THE INSTRUCTION, not as the presence of a replacement: the words + * may be reworded, and what must not come back is a step nobody can take. The bounded wait is + * checked too, because it is the one thing here that IS actionable. + */ + const { error: said502 } = (await response.json()) as { error: string }; + expect(said502).not.toContain("consent screen, before starting another"); + expect(said502).toContain("nobody was sent to a consent screen"); + expect(said502).toContain("expires within fifteen minutes"); + }); + + test("the missing-id mint is uncertain and leaves the same line, carrying the adapter's sentence", async () => { + const actor = await person("noid-line"); + beforeMint = async () => { + throw new Error("Arcade answered an authorization with no id."); + }; + const [response, said] = await heard(() => + authorize(appAs("user", actor), personalApp), + ); + expect(response.status).toBe(502); + const line = said.find((text) => + text.includes("arcade-mint-outcome-unknown"), + ); + expect(line).toBeDefined(); + expect(line).toContain("Arcade answered an authorization with no id."); + expect(line).not.toContain("bearer-capability"); + }); + + test("a definite refusal is not an unknown outcome, so it leaves no such line", async () => { + const actor = await person("definite-no-line"); + beforeMint = refuse; + const [response, said] = await heard(() => + authorize(appAs("user", actor), personalApp), + ); + expect(response.status).toBe(502); + expect(await attemptsFor(actor)).toEqual([]); + expect( + said.filter((text) => text.includes("arcade-mint-outcome-unknown")), + ).toEqual([]); + }); + + test("a non-SDK throw (the adapter's missing-id Error) is uncertain too: the attempt stands", async () => { + const actor = await person("noid"); + beforeMint = async () => { + throw new Error("Arcade answered an authorization with no id."); + }; + const response = await authorize(appAs("user", actor), personalApp); + expect(response.status).toBe(502); + const [row] = await attemptsFor(actor); + expect(row).toMatchObject({ + authId: null, + completedAt: null, + outcome: null, + }); + }); + }); + + describe("a mint that succeeded and could not be recorded", () => { + // The local UPDATE after the vendor said yes. `DrizzleQueryError`'s own message is the + // statement and its bound values, which is the shape this route must not pass on. + const failWrite = { + recordAuthorizationMint: async () => { + throw new Error( + 'Failed query: update "pending_authorizations" set "auth_id" = $1 -- params: ["ar_minted_1"]', + ); + }, + } as Partial; + + test("the person is told, is not sent to the consent screen, and the url does not travel", async () => { + const actor = await person("unrecorded"); + const response = await authorize( + appAs("user", actor, "arcade", failWrite), + personalApp, + ); + // Not a bodyless 500: a sentence, and nothing of the vendor's answer in it. + expect(response.status).toBe(500); + const body = (await response.json()) as { + error?: string; + authorizationUrl?: string; + }; + expect(typeof body.error).toBe("string"); + expect(body.authorizationUrl).toBeUndefined(); + expect(JSON.stringify(body)).not.toContain("bearer-capability"); + expect(JSON.stringify(body)).not.toContain("Failed query"); + // The mint really did happen at the vendor. + expect(mints).toHaveLength(1); + }); + + test("the actor is not blocked: the dead attempt is cleared and a second start mints again", async () => { + const actor = await person("unrecorded-retry"); + expect( + ( + await authorize( + appAs("user", actor, "arcade", failWrite), + personalApp, + ) + ).status, + ).toBe(500); + // A row holding a null auth_id can never complete and would hold the actor for the TTL. + expect(await attemptsFor(actor)).toEqual([]); + mints = []; + nextAuthId = "ar_after_retry"; + const second = await authorize(appAs("user", actor), personalApp); + expect(second.status).toBe(200); + expect(mints).toHaveLength(1); + const [row] = await attemptsFor(actor); + expect(row).toMatchObject({ authId: "ar_after_retry", outcome: null }); + }); + + test("a failed clean-up still answers a sentence rather than throwing past the handler", async () => { + const actor = await person("unrecorded-stuck"); + const response = await authorize( + appAs("user", actor, "arcade", { + ...failWrite, + discardAuthorizationAttempt: async () => { + throw new Error("Failed query: delete from pending_authorizations"); + }, + }), + personalApp, + ); + expect(response.status).toBe(500); + const body = (await response.json()) as { error?: string }; + expect(typeof body.error).toBe("string"); + expect(JSON.stringify(body)).not.toContain("Failed query"); + // Nothing cleared it, so the row stands and expires on its own. + const [row] = await attemptsFor(actor); + expect(row).toMatchObject({ authId: null, completedAt: null }); + }); + }); + + test("two concurrent starts by one actor yield exactly one 200 and one 409", async () => { + const actor = await person("race"); + // Hold the winner's mint open so the loser's claim runs while it is in flight. + let release: () => void = () => {}; + const held = new Promise((resolve) => { + release = resolve; + }); + beforeMint = () => held; + const app = appAs("user", actor); + const first = authorize(app, personalApp); + const second = authorize(app, personalApp); + const settled = Promise.all([first, second]); + setTimeout(release, 150); + const responses = await settled; + expect(responses.map((r) => r.status).sort()).toEqual([200, 409]); + expect(mints).toHaveLength(1); + const rows = await attemptsFor(actor); + expect(rows).toHaveLength(1); + expect(rows[0]).toMatchObject({ + authId: "ar_minted_1", + completedAt: null, + outcome: null, + }); + }); + + test("a Shared app is authorized under the SESSION SUBJECT, not the deployment's credential account", async () => { + const actor = await person("team-bot"); + expect((await authorize(appAs("admin", actor), sharedApp)).status).toBe( + 200, + ); + const rows = await attemptsFor(actor); + expect(rows).toHaveLength(1); + expect(rows[0]).toMatchObject({ + actorId: actor, + holder: "deployment", + vendorUserId: SHARED_VENDOR_ID, + completedAt: null, + outcome: null, + }); + expect(rows[0]?.actorId).not.toBe(SHARED_VENDOR_ID); + const stray = await database + .select() + .from(pendingAuthorizations) + .where(eq(pendingAuthorizations.actorId, SHARED_VENDOR_ID)); + expect(stray).toEqual([]); + }); + + describe("a mint that the store declines to record", () => { + const cancel = (app: Hono, serverId: string) => + app.request(`/api/plugins/servers/${serverId}/authorize`, { + method: "DELETE", + }); + + /* + * B5d. The mint is held open at the vendor, the person cancels, and only then does the vendor + * answer. `recordAuthorizationMint` finds no attempt under `(actor_id, created_at)` and writes + * nothing. The consent url the vendor answered is a bearer capability for a flow that this + * deployment no longer has any record of, so it must not be handed out. + */ + test("a cancel that lands while the mint is in flight: no consent url, no attempt, a 409 that says why", async () => { + const actor = await person("cancel-mid-mint"); + let release: () => void = () => {}; + const held = new Promise((resolve) => { + release = resolve; + }); + let entered: () => void = () => {}; + const minting = new Promise((resolve) => { + entered = resolve; + }); + beforeMint = () => { + entered(); + return held; + }; + const app = appAs("user", actor); + const started = authorize(app, personalApp); + await minting; + // The attempt is standing with no auth_id while the vendor has not answered yet. + expect(await attemptsFor(actor)).toMatchObject([{ authId: null }]); + const cancelled = await cancel(app, personalApp); + expect(cancelled.status).toBe(200); + expect(await cancelled.json()).toEqual({ cancelled: true }); + release(); + const response = await started; + const text = await response.text(); + // The vendor did mint, and nothing stands behind it here. + expect(mints).toHaveLength(1); + expect(await attemptsFor(actor)).toEqual([]); + expect(text).not.toContain("bearer-capability"); + expect(text).not.toContain("ar_minted_1"); + expect(response.status).toBe(409); + const body = JSON.parse(text) as { + error?: string; + authorizationUrl?: string; + }; + expect(body.authorizationUrl).toBeUndefined(); + expect(body.error).toContain("cancelled"); + // Nothing holds the actor: starting over mints again and binds the new attempt. + beforeMint = null; + mints = []; + nextAuthId = "ar_after_cancel"; + const again = await authorize(app, personalApp); + expect(again.status).toBe(200); + expect(await again.json()).toEqual({ authorizationUrl: SECRET_URL }); + expect(await attemptsFor(actor)).toMatchObject([ + { authId: "ar_after_cancel", completedAt: null }, + ]); + }); + + test("whatever the reason the write declined, the consent url is not handed out", async () => { + const actor = await person("mint-declined"); + const response = await authorize( + appAs("user", actor, "arcade", { + recordAuthorizationMint: async () => false, + }), + personalApp, + ); + const text = await response.text(); + expect(mints).toHaveLength(1); + expect(text).not.toContain("bearer-capability"); + expect(text).not.toContain("ar_minted_1"); + expect(response.status).toBe(409); + expect( + (JSON.parse(text) as { authorizationUrl?: string }).authorizationUrl, + ).toBeUndefined(); + }); + }); +}); diff --git a/server/tests/arcade-authorize-status-engine.test.ts b/server/tests/arcade-authorize-status-engine.test.ts new file mode 100644 index 000000000..b51cd6a76 --- /dev/null +++ b/server/tests/arcade-authorize-status-engine.test.ts @@ -0,0 +1,201 @@ +import { afterEach, describe, expect, test } from "bun:test"; +import { useArcadeClient } from "../src/plugins/arcade"; +import { createArcadeClient } from "../src/plugins/arcade-adapter"; +import { BrokerRefusalError } from "../src/plugins/broker"; +import type { AccountRef } from "../src/plugins/shared-accounts"; + +/** + * WHAT THE VENDOR SAID ABOUT THE AUTHORIZATION IT JUST MINTED, READ OFF A REAL HTTP ANSWER. + * + * The rest of the authorize suite replaces `Tools.prototype.authorize` with a function returning a + * hand-built object. That is blind to this class: the stub returns whatever shape the test chose, + * so it cannot show what happens when the LIVE engine answers `{"status":"completed"}` — the answer + * Arcade gives when the account already holds this grant — or `{"status":"failed"}`. This file + * serves those answers as JSON over a socket through `ARCADE_BASE_URL`, exactly as + * `arcade-pagination-engine.test.ts` does, and `new Arcade({ apiKey })` reads that variable at + * construction, which is why the engine starts BEFORE `createArcadeClient`. + */ + +const account: AccountRef = { + holder: "person", + userId: "u1", + vendorUserId: "vendor-u1", +}; + +type EngineOptions = { + /** + * The `status` the mint answers with; `null` OMITS the field, as the wire may. Anything else is + * serialized as it stands, so a status that is not text reaches the adapter as the wire sent it. + */ + status: unknown; + /** Send `"status": null` explicitly rather than omitting the key. */ + explicitNull?: true; + /** Whether the mint answers a consent url beside it. */ + url?: string | null; +}; + +type Engine = { port: number; stop: () => void }; + +function startEngine(options: EngineOptions): Engine { + const server = Bun.serve({ + port: 0, + fetch(request) { + const url = new URL(request.url); + if (url.pathname === "/v1/tools/authorize") { + const body: Record = { id: "ar_mint1" }; + if (options.status !== null) body.status = options.status; + else if (options.explicitNull) body.status = null; + const consent = + options.url === undefined + ? "https://consent.example/go" + : options.url; + if (consent !== null) body.url = consent; + return Response.json(body); + } + return new Response("not found", { status: 404 }); + }, + }); + return { port: server.port, stop: () => server.stop(true) }; +} + +let running: Engine | null = null; +const wasBaseURL = process.env.ARCADE_BASE_URL; + +function engine(options: EngineOptions): Engine { + running = startEngine(options); + process.env.ARCADE_BASE_URL = `http://localhost:${running.port}`; + return running; +} + +afterEach(() => { + running?.stop(); + running = null; + useArcadeClient(null); + if (wasBaseURL === undefined) delete process.env.ARCADE_BASE_URL; + else process.env.ARCADE_BASE_URL = wasBaseURL; +}); + +const mint = () => + createArcadeClient("never-dialled").broker.authorize({ + account, + toolkit: "Gmail", + action: "Gmail.SendEmail", + returnUrl: "https://openbot.example/settings/plugins", + }); + +describe("the mint reads the status Arcade answered with", () => { + test("a pending mint is handed on, which is the whole of the happy path", async () => { + engine({ status: "pending" }); + expect(await mint()).toEqual({ + redirectUrl: "https://consent.example/go", + authorizationId: "ar_mint1", + }); + }); + + test("an answer with NO status is handed on: silence is not a no", async () => { + engine({ status: null }); + expect(await mint()).toEqual({ + redirectUrl: "https://consent.example/go", + authorizationId: "ar_mint1", + }); + }); + + test("a mint the vendor calls completed does not send anybody to a consent screen", async () => { + // Arcade answers this for an account that already holds the grant, and it answers it WITH a + // url: the defect is not an absent url, so the url guard below cannot stand in for this. + engine({ status: "completed" }); + await expect(mint()).rejects.toBeInstanceOf(BrokerRefusalError); + await expect(mint()).rejects.toThrow(/already/i); + }); + + test("a mint the vendor calls failed is not handed on as a live redirect", async () => { + engine({ status: "failed" }); + await expect(mint()).rejects.toBeInstanceOf(BrokerRefusalError); + await expect(mint()).rejects.toThrow(/failed/); + }); + + test("a status this deployment does not know is not read as consent-is-next", async () => { + // The spelling is not in the SDK's declared union at all. An allowlist refuses it; a denylist + // of the dead spellings would hand its url to a browser. + engine({ status: "revoked" }); + await expect(mint()).rejects.toBeInstanceOf(BrokerRefusalError); + }); + + /* + * D6. Every assertion above holds whether or not the status is FOLDED: an unfolded `" Completed "` + * is a spelling outside the allowlist and is refused anyway, so the old single row here could not + * fail on a deleted `.trim().toLowerCase()`. The rows below can: a padded or upper-cased member of + * the ALLOWLIST is handed on only when the read folds it, and the held-grant SENTENCE ("already") + * is reached only by a folded `completed`. + */ + test("the status is read case- and space-insensitively, as every other comparison here is", async () => { + engine({ status: " Completed " }); + await expect(mint()).rejects.toBeInstanceOf(BrokerRefusalError); + await expect(mint()).rejects.toThrow(/already/i); + }); + + test("a padded, re-cased pending is still a consent to walk through", async () => { + engine({ status: " Pending " }); + expect(await mint()).toEqual({ + redirectUrl: "https://consent.example/go", + authorizationId: "ar_mint1", + }); + }); + + test("not_started — the other half of the allowlist, and what a first mint answers — is handed on", async () => { + engine({ status: "not_started" }); + expect(await mint()).toEqual({ + redirectUrl: "https://consent.example/go", + authorizationId: "ar_mint1", + }); + }); + + test("a padded, upper-cased not_started is handed on too", async () => { + engine({ status: " NOT_STARTED " }); + expect(await mint()).toEqual({ + redirectUrl: "https://consent.example/go", + authorizationId: "ar_mint1", + }); + }); + + test("an explicit null status is silence, exactly like an omitted one", async () => { + engine({ status: null, explicitNull: true }); + expect(await mint()).toEqual({ + redirectUrl: "https://consent.example/go", + authorizationId: "ar_mint1", + }); + }); +}); + +/** + * L2-b. A STATUS THAT IS PRESENT AND IS NOT STATUS TEXT IS NOT SILENCE. It once read as silence — + * `textOf` answered `undefined` for it, and "silence is not a no" handed the bearer url beside it + * to a browser as a live redirect, after a status the code could not read. It is refused, as a + * DEFINITE refusal (a `BrokerRefusalError`), so the attempt is discarded and Authorize can be + * pressed again at once. + */ +describe("a mint status this deployment cannot read is not handed on", () => { + for (const [label, status] of [ + ["an object", {}], + ["false", false], + ["a number", 0], + ["a list", []], + ["a blank string", ""], + ["whitespace", " "], + ] as const) { + test(`${label} where the status belongs refuses, and the url is not returned`, async () => { + engine({ status }); + const outcome = await mint().then( + (minted) => ({ minted }), + (error: unknown) => ({ error }), + ); + expect("minted" in outcome).toBe(false); + expect((outcome as { error: unknown }).error).toBeInstanceOf( + BrokerRefusalError, + ); + expect(String((outcome as { error: Error }).error.message)).not.toContain( + "consent.example", + ); + }); + } +}); diff --git a/server/tests/arcade-classify.test.ts b/server/tests/arcade-classify.test.ts new file mode 100644 index 000000000..af34b7e42 --- /dev/null +++ b/server/tests/arcade-classify.test.ts @@ -0,0 +1,47 @@ +import { describe, expect, test } from "bun:test"; +import { classify } from "../src/plugins/arcade"; + +/** + * What an Arcade tool does, read from `metadata.behavior`. `destructive` is read FIRST: a reading + * that checked `read_only` first would record a both-flagged tool as a read, the one direction + * nothing downstream recovers from. Anything that cannot be read fails closed to a destructive + * write, which costs an approval in front of a read rather than a deletion let through unannounced. + */ +describe("classify", () => { + test("destructive is a destructive write", () => { + expect(classify({ behavior: { destructive: true } })).toEqual({ + effect: "write", + destructive: true, + }); + }); + + test("read_only alone is a read", () => { + expect(classify({ behavior: { read_only: true } })).toEqual({ + effect: "read", + destructive: false, + }); + }); + + test("both flags true is a destructive write, never a read", () => { + expect( + classify({ behavior: { destructive: true, read_only: true } }), + ).toEqual({ effect: "write", destructive: true }); + }); + + test("neither flag true is a plain write", () => { + expect( + classify({ behavior: { destructive: false, read_only: false } }), + ).toEqual({ effect: "write", destructive: false }); + }); + + test("absent metadata fails closed", () => { + expect(classify(undefined)).toEqual({ effect: "write", destructive: true }); + }); + + test("a string-valued flag fails closed rather than coercing", () => { + expect(classify({ behavior: { read_only: "true" } })).toEqual({ + effect: "write", + destructive: true, + }); + }); +}); diff --git a/server/tests/arcade-completion-transaction.integration.test.ts b/server/tests/arcade-completion-transaction.integration.test.ts new file mode 100644 index 000000000..0cef5f8eb --- /dev/null +++ b/server/tests/arcade-completion-transaction.integration.test.ts @@ -0,0 +1,572 @@ +// server/tests/arcade-completion-transaction.integration.test.ts +import { afterAll, beforeAll, describe, expect, test } from "bun:test"; +import { randomUUID } from "node:crypto"; +import { and, eq, like } from "drizzle-orm"; +import { createAuditStore } from "../src/audit"; +import { createDatabase } from "../src/db/client"; +import { + auditEvents, + brokeredConnections, + mcpServers, + pendingAuthorizations, +} from "../src/db/schema"; +import type { ConnectedAppBroker } from "../src/plugins/broker"; +import type { AccountRef } from "../src/plugins/shared-accounts"; +import { createPluginStore } from "../src/plugins/store"; +import { testDatabaseUrl } from "./support/database"; +import { removePeople, seedPeople } from "./support/people"; + +/* + * FOUR CONNECTIONS RATHER THAN THE SHARED `TEST_POOL` OF TWO, because the race below drives two + * completion TRANSACTIONS at once and the second one blocks on the first's row lock while holding + * its own connection. Two is the exact floor for that pair and leaves nothing for the reads that + * follow if the driver has not handed a connection back yet; `support/database.ts` says a file + * wanting a different pool asks for one itself. + */ +const database = createDatabase(testDatabaseUrl(), { max: 4 }); +const suite = randomUUID().slice(0, 8); +const serverId = `arcade-completion-${suite}`; + +const broker: ConnectedAppBroker = { + // Arcade holds the grant at the vendor, not locally; see `ConnectedAppBroker.grantIsLocal`. + grantIsLocal: false, + // Nothing here asks what auth provider a connection is held under. + authProviderOf: async () => null, + // Arcade runs the correlated, pollable flow, so this stub DECLARES the sub-surface rather + // than a null; nothing here reaches either member. See `ConnectedAppBroker.authorizations`. + authorizations: { + status: async () => { + throw new Error("nothing here polls an authorization"); + }, + confirmReturn: async () => { + throw new Error("nothing here confirms a return leg"); + }, + }, + grantsFor: async () => [], + listApps: async () => [], + ensureAuthConfig: async () => "standing", + deleteAuthConfig: async () => {}, + authorize: async () => ({ + redirectUrl: "https://vendor.example/consent", + authorizationId: "ar_stub", + }), + isConnected: async () => true, + revoke: async () => true, + connectionFields: async () => [], + connectWithFields: async () => ({ accountId: "ca_1" }), + revokeAccount: async () => {}, + accountName: async () => "acme-bot", +}; + +const policy = { mode: "enforce" as const, deny: [], allow: ["true"] }; + +const storeOn = (handle: typeof database) => + createPluginStore({ + brokerProvider: "arcade", + database: handle, + auditStore: createAuditStore(handle), + credentials: {} as never, + encryptionKey: "x".repeat(44), + policy: () => policy, + broker, + deploymentId: `acme-${suite}`, + sharedUse: async () => ({ allowed: true }), + }); + +const store = storeOn(database); + +/** + * The same store with the AUDIT INSERT made to throw, and nothing else changed. + * + * The failure is injected at the DATABASE HANDLE rather than at the store's `auditStore` option, + * because the audit write that has to be atomic with the connection write is the one bound to the + * transaction — a throwing `auditStore` passed into `createPluginStore` would never be the object + * that write goes through, and the test would prove nothing. This proxy lets the connection upsert + * through and refuses the `audit_events` insert, so it fires BETWEEN the two writes, which is where + * the rollback has to hold. + */ +const brokenAuditDatabase = new Proxy(database, { + get(target, property, receiver) { + if (property !== "transaction") { + const value = Reflect.get(target, property, receiver); + return typeof value === "function" ? value.bind(target) : value; + } + return (work: (tx: unknown) => Promise) => + target.transaction((transaction) => + work( + new Proxy(transaction, { + get(txTarget, txProperty, txReceiver) { + if (txProperty === "insert") { + return (table: unknown) => { + if (table === auditEvents) + throw new Error("injected audit failure"); + return txTarget.insert(table as never); + }; + } + const value = Reflect.get(txTarget, txProperty, txReceiver); + return typeof value === "function" ? value.bind(txTarget) : value; + }, + }), + ), + ); + }, +}) as typeof database; + +const brokenAuditStore = storeOn(brokenAuditDatabase); + +const account = (actor: string): AccountRef => ({ + holder: "person", + userId: actor, + vendorUserId: `v-${actor}`, +}); + +/** + * An actor id for this suite, AND THE PERSON BEHIND IT. + * + * `pending_authorizations.actor_id` keys to `users` and cascades (`.user_id` must equal it), so an + * attempt cannot exist for somebody who does not. Seeded here so each case stays about the completion transaction + * rather than about the foreign key. + */ +const people: string[] = []; +const actor = async (name: string) => { + const id = `${name}-${suite}`; + people.push(id); + await seedPeople(database, [id]); + return id; +}; +const toolkit = (name: string) => `tk-${name}-${suite}`; + +/** A claimed attempt carrying a minted `ar_...`, which is what a callback arrives against. */ +const attemptWith = async (actorId: string, authId: string) => { + const claimed = await store.claimAuthorizationAttempt({ + actorId, + serverId, + action: "Google.SendEmail", + account: account(actorId), + }); + if (!claimed.claimed) throw new Error("claim failed"); + const minted = await store.recordAuthorizationMint({ + actorId, + createdAt: claimed.attempt.createdAt, + authId, + }); + if (!minted) throw new Error("mint failed"); + return claimed.attempt; +}; + +const connectionsFor = (app: string) => + database + .select() + .from(brokeredConnections) + .where( + and( + eq(brokeredConnections.provider, "arcade"), + eq(brokeredConnections.app, app), + ), + ); + +const connectedEventsFor = (app: string) => + database + .select() + .from(auditEvents) + .where( + and( + eq(auditEvents.eventType, "mcp.account_connected"), + eq(auditEvents.targetId, app), + ), + ); + +const attemptRow = async (actorId: string) => { + const [row] = await database + .select() + .from(pendingAuthorizations) + .where(eq(pendingAuthorizations.actorId, actorId)); + if (!row) throw new Error("attempt row gone"); + return row; +}; + +beforeAll(async () => { + await database.insert(mcpServers).values({ + id: serverId, + title: "Completion transaction", + vendor: "Arcade", + url: "https://example.invalid/mcp", + }); +}); + +afterAll(async () => { + // Cascades to the attempts. The connections are keyed on the app, not the server, so they go + // separately; the audit rows cannot go at all, which is what `audit_events_append_only` is for. + await database.delete(mcpServers).where(eq(mcpServers.id, serverId)); + await database + .delete(brokeredConnections) + .where(like(brokeredConnections.app, `%-${suite}`)); + await removePeople(database, people); + await database.$client.close(); +}); + +describe("completeAuthorizationAttempt", () => { + test("one call writes exactly one connection and one audit event naming the action and scopes", async () => { + const a = await actor("single"); + const app = toolkit("single"); + await attemptWith(a, "ar_single"); + + await store.completeAuthorizationAttempt({ + actorId: a, + authId: "ar_single", + toolkit: app, + account: account(a), + action: "Google.SendEmail", + scopes: ["gmail.send", "gmail.readonly"], + authProvider: "google", + }); + + const connections = await connectionsFor(app); + expect(connections.length).toBe(1); + expect(connections[0]?.holder).toBe("person"); + expect(connections[0]?.userId).toBe(a); + expect(connections[0]?.vendorUserId).toBe(`v-${a}`); + expect(connections[0]?.verified).toBe(true); + expect(connections[0]?.verifiedAt).not.toBeNull(); + expect(connections[0]?.probeAction).toBeNull(); + // A PERSON'S ROW IS ATTRIBUTED BY `user_id` AND NEVER BY `connected_by`, which is the + // deployment-held column: `deploymentConnectionFor` is the only reader and it reads only + // `holder = 'deployment'`. Writing the actor here would put an id in a column no reader of a + // person's row consults, on the row that already names them. + expect(connections[0]?.connectedBy).toBeNull(); + + const events = await connectedEventsFor(app); + expect(events.length).toBe(1); + const payload = events[0]?.payload as Record; + expect(payload.action).toBe("Google.SendEmail"); + expect(payload.scope).toBe("gmail.send gmail.readonly"); + expect(payload.server).toBe(app); + expect(payload.holder).toBe("person"); + expect(payload.authProvider).toBe("google"); + expect(payload).not.toHaveProperty("provider"); + + const attempt = await attemptRow(a); + expect(attempt.outcome).toBe("completed"); + expect(attempt.completedAt).not.toBeNull(); + }); + + /* + * WHO CONNECTED THE TEAM ACCOUNT. A Shared app's row is the one place an administrator can read + * that from, and a consent completed through Arcade used to leave it permanently null — so + * `deploymentConnectionFor` answered that nobody connected an account the whole deployment acts + * as. The actor is the session subject (`users.id`) the attempt is keyed on, which is the id the + * admin read joins `users` on for an email. + */ + test("a DEPLOYMENT-held completion records the administrator who consented, and a later one supersedes", async () => { + const first = await actor("shared-first"); + const second = await actor("shared-second"); + const app = toolkit("shared"); + const deployment: AccountRef = { + holder: "deployment", + vendorUserId: `v-${app}`, + }; + + const claimFor = async (actorId: string, authId: string) => { + const claimed = await store.claimAuthorizationAttempt({ + actorId, + serverId, + action: "Google.SendEmail", + account: deployment, + }); + if (!claimed.claimed) throw new Error("claim failed"); + const minted = await store.recordAuthorizationMint({ + actorId, + createdAt: claimed.attempt.createdAt, + authId, + }); + if (!minted) throw new Error("mint failed"); + }; + const complete = (actorId: string, authId: string) => + store.completeAuthorizationAttempt({ + actorId, + authId, + toolkit: app, + account: deployment, + action: "Google.SendEmail", + scopes: ["gmail.send"], + authProvider: "google", + }); + + await claimFor(first, "ar_shared_first"); + await complete(first, "ar_shared_first"); + + let connections = await connectionsFor(app); + expect(connections.length).toBe(1); + expect(connections[0]?.holder).toBe("deployment"); + expect(connections[0]?.userId).toBeNull(); + expect(connections[0]?.connectedBy).toBe(first); + + // AND THE SECOND ADMINISTRATOR SUPERSEDES THE FIRST, because a deployment account is shared + // and the row credits whoever most recently consented for it. The insert takes the conflict + // branch here, which is the half that used to keep an attribution standing while rewriting + // everything around it. + await claimFor(second, "ar_shared_second"); + await complete(second, "ar_shared_second"); + + connections = await connectionsFor(app); + expect(connections.length).toBe(1); + expect(connections[0]?.connectedBy).toBe(second); + }); + + /* + * THE ROW NAMES THE IDENTITY THE LATEST CONSENT WAS GIVEN UNDER. Calls go out under the row's + * `vendor_user_id` (`connectionTokenFor` reads it back rather than recomputing it), so a + * re-consent under a new identity that rewrote `verified`/`verified_at` and left the old id + * standing sent every later call to an account this consent says nothing about. Both holders, + * because both conflict arms used to omit it. + */ + test.each(["deployment", "person"] as const)( + "a %s re-consent under a NEW vendor identity moves the row to it", + async (holder) => { + const a = await actor(`reid-${holder}`); + const app = toolkit(`reid-${holder}`); + const as = (vendorUserId: string): AccountRef => + holder === "deployment" + ? { holder, vendorUserId } + : { holder, userId: a, vendorUserId }; + + const consent = async (authId: string, ref: AccountRef) => { + const claimed = await store.claimAuthorizationAttempt({ + actorId: a, + serverId, + action: "Google.SendEmail", + account: ref, + }); + if (!claimed.claimed) throw new Error("claim failed"); + const minted = await store.recordAuthorizationMint({ + actorId: a, + createdAt: claimed.attempt.createdAt, + authId, + }); + if (!minted) throw new Error("mint failed"); + await store.completeAuthorizationAttempt({ + actorId: a, + authId, + toolkit: app, + account: ref, + action: "Google.SendEmail", + scopes: ["gmail.send"], + authProvider: "google", + }); + }; + + await consent(`ar_reid_${holder}_1`, as(`old-${app}`)); + await consent(`ar_reid_${holder}_2`, as(`new-${app}`)); + + const connections = await connectionsFor(app); + expect(connections.length).toBe(1); + expect(connections[0]?.vendorUserId).toBe(`new-${app}`); + }, + ); + + test("two CONCURRENT calls write exactly one connection and one audit event, and the loser answers as the winner would", async () => { + const a = await actor("race"); + const app = toolkit("race"); + await attemptWith(a, "ar_race"); + + const call = () => + store.completeAuthorizationAttempt({ + actorId: a, + authId: "ar_race", + toolkit: app, + account: account(a), + action: "Google.SendEmail", + scopes: ["gmail.send"], + authProvider: "google", + }); + + // CONCURRENTLY, on the real pool. A sequential replay passes against an implementation with no + // serialization at all, so it would be no evidence about this method. + const answers = await Promise.all([call(), call()]); + // The loser is indistinguishable from the winner by its answer, which is the point: a replay is + // a no-op and not an error. + expect(answers).toEqual([undefined, undefined]); + + expect((await connectionsFor(app)).length).toBe(1); + expect((await connectedEventsFor(app)).length).toBe(1); + + const attempt = await attemptRow(a); + expect(attempt.outcome).toBe("completed"); + expect(attempt.completedAt).not.toBeNull(); + }); + + test("a failure between the connection write and the audit write persists NEITHER", async () => { + const a = await actor("rollback"); + const app = toolkit("rollback"); + await attemptWith(a, "ar_rollback"); + + await expect( + brokenAuditStore.completeAuthorizationAttempt({ + actorId: a, + authId: "ar_rollback", + toolkit: app, + account: account(a), + action: "Google.SendEmail", + scopes: ["gmail.send"], + authProvider: "google", + }), + ).rejects.toThrow("injected audit failure"); + + // BOTH tables, because "it returned" is not evidence that nothing was written. + expect((await connectionsFor(app)).length).toBe(0); + expect((await connectedEventsFor(app)).length).toBe(0); + + // And the attempt is still claimable, because its UPDATE was in the same transaction. + const attempt = await attemptRow(a); + expect(attempt.completedAt).toBeNull(); + expect(attempt.outcome).toBeNull(); + }); + + test("an auth_id that does not match the row writes nothing and leaves the row UNCHANGED", async () => { + const a = await actor("mismatch"); + const app = toolkit("mismatch"); + await attemptWith(a, "ar_real"); + + await store.completeAuthorizationAttempt({ + actorId: a, + authId: "ar_someone_elses", + toolkit: app, + account: account(a), + action: "Google.SendEmail", + scopes: ["gmail.send"], + authProvider: "google", + }); + + expect((await connectionsFor(app)).length).toBe(0); + expect((await connectedEventsFor(app)).length).toBe(0); + + // THE ROW'S OWN STATE, not a return value. + const attempt = await attemptRow(a); + expect(attempt.completedAt).toBeNull(); + expect(attempt.outcome).toBeNull(); + expect(attempt.authId).toBe("ar_real"); + }); +}); + +describe("failAuthorizationAttempt / markAuthorizationUnreconciled", () => { + test("mark an attempt failed, matched on (actor_id, auth_id)", async () => { + const a = await actor("failed"); + await attemptWith(a, "ar_failed"); + + expect( + await store.failAuthorizationAttempt({ + actorId: a, + authId: "ar_other", + }), + ).toBe(false); + let attempt = await attemptRow(a); + expect(attempt.outcome).toBeNull(); + expect(attempt.completedAt).toBeNull(); + + expect( + await store.failAuthorizationAttempt({ actorId: a, authId: "ar_failed" }), + ).toBe(true); + attempt = await attemptRow(a); + expect(attempt.outcome).toBe("failed"); + expect(attempt.completedAt).not.toBeNull(); + }); + + test("mark an attempt unreconciled, matched on (actor_id, auth_id)", async () => { + const a = await actor("unreconciled"); + await attemptWith(a, "ar_unreconciled"); + + expect( + await store.markAuthorizationUnreconciled({ + actorId: a, + authId: "ar_other", + }), + ).toBe(false); + expect((await attemptRow(a)).outcome).toBeNull(); + + expect( + await store.markAuthorizationUnreconciled({ + actorId: a, + authId: "ar_unreconciled", + }), + ).toBe(true); + const attempt = await attemptRow(a); + expect(attempt.outcome).toBe("unreconciled"); + expect(attempt.completedAt).not.toBeNull(); + }); + + /* + * THE CASE THE `(actor_id, auth_id)` MATCH DOES NOT EXCLUDE ON ITS OWN. A completed attempt is + * still holding the `ar_...` the failing leg matches on, so without `completed_at IS NULL` this + * close rewrote a person's SUCCESSFUL authorization as a failure — while the connection row and + * the `mcp.account_connected` entry written by that completion stood. The attempt and the trail + * then disagreed, and the attempt was the one that was wrong. + * + * Sequential rather than concurrent, deliberately, and it is not a weaker test: the failing leg + * is a LATE callback and the thing under test is the state of the committed row it arrives at, + * not a lock ordering. Concurrency is what `completeAuthorizationAttempt`'s own race test proves. + */ + test("a late failure callback does NOT reopen an attempt that already completed", async () => { + const a = await actor("late-fail"); + const app = toolkit("late-fail"); + await attemptWith(a, "ar_late_fail"); + + await store.completeAuthorizationAttempt({ + actorId: a, + authId: "ar_late_fail", + toolkit: app, + account: account(a), + action: "Google.SendEmail", + scopes: ["gmail.send"], + authProvider: "google", + }); + const completed = await attemptRow(a); + expect(completed.outcome).toBe("completed"); + + /* + * THE ROW IS ASSERTED BEFORE THE RETURN VALUE, so a regression here reads as the corruption it + * is rather than as a boolean that came back the wrong way. The boolean is checked too, below. + */ + const closed = await store.failAuthorizationAttempt({ + actorId: a, + authId: "ar_late_fail", + }); + + const after = await attemptRow(a); + expect(after.outcome).toBe("completed"); + // NOT MERELY "still terminal": the timestamp must be the completion's own, because re-stamping + // it would move when this grant was obtained even where the verdict survived. + expect(after.completedAt).toEqual(completed.completedAt); + // The grant the attempt is the record OF is untouched, which is the half a reader checks next. + expect((await connectionsFor(app)).length).toBe(1); + expect((await connectedEventsFor(app)).length).toBe(1); + expect(closed).toBe(false); + }); + + /* The same rule among the three non-completion verdicts: the first one to settle the row wins. */ + test("a second verdict does not overwrite the first one an attempt settled on", async () => { + const a = await actor("settled"); + await attemptWith(a, "ar_settled"); + + expect( + await store.failAuthorizationAttempt({ + actorId: a, + authId: "ar_settled", + }), + ).toBe(true); + const failed = await attemptRow(a); + + const withdrew = await store.markAuthorizationWithdrawn({ + actorId: a, + authId: "ar_settled", + }); + const unreconciled = await store.markAuthorizationUnreconciled({ + actorId: a, + authId: "ar_settled", + }); + + const after = await attemptRow(a); + expect(after.outcome).toBe("failed"); + expect(after.completedAt).toEqual(failed.completedAt); + expect([withdrew, unreconciled]).toEqual([false, false]); + }); +}); diff --git a/server/tests/arcade-confirm-engine.test.ts b/server/tests/arcade-confirm-engine.test.ts new file mode 100644 index 000000000..d3c3261fe --- /dev/null +++ b/server/tests/arcade-confirm-engine.test.ts @@ -0,0 +1,94 @@ +import { afterEach, describe, expect, test } from "bun:test"; +import { useArcadeClient } from "../src/plugins/arcade"; +import { createArcadeClient } from "../src/plugins/arcade-adapter"; + +/** + * THE RETURN LEG AGAINST A REAL HTTP ENGINE, BECAUSE NOTHING LESS CAN SEE THIS CLASS OF DEFECT. + * + * `arcade-adapter-authorize.test.ts` stubs the SDK's `Auth` PROTOTYPE and hands `confirmUser` a + * hand-written object, so every field that file writes is a field the adapter is guaranteed to + * find. The wire makes no such guarantee: `ConfirmUserResponse.auth_id` is DECLARED required in + * the SDK's types and is not VALIDATED anywhere in it, so a vendor answer that omits the field + * reaches the adapter as `undefined` wearing the type `string` — the same hole the mint closes by + * hand at `arcade-adapter.ts`'s `authorize`. + * + * So these tests serve real JSON over a real socket through `ARCADE_BASE_URL` and let the SDK + * build and parse its own request. `new Arcade({ apiKey })` reads that variable at construction, + * which is why the server is started BEFORE `createArcadeClient`. + */ + +const CONFIRM_PATH = "/v1/auth/confirm_user"; + +type Engine = { + port: number; + /** Every path the SDK asked for, in order. */ + requests: string[]; + stop: () => void; +}; + +/** Serve `body` (verbatim JSON) from the confirm endpoint. */ +function startEngine(body: unknown): Engine { + const requests: string[] = []; + const server = Bun.serve({ + port: 0, + fetch(request) { + const url = new URL(request.url); + requests.push(url.pathname); + if (url.pathname === CONFIRM_PATH) return Response.json(body); + return new Response("not found", { status: 404 }); + }, + }); + return { port: server.port, requests, stop: () => server.stop(true) }; +} + +let running: Engine | null = null; +const wasBaseURL = process.env.ARCADE_BASE_URL; + +function engine(body: unknown): Engine { + running = startEngine(body); + process.env.ARCADE_BASE_URL = `http://localhost:${running.port}`; + return running; +} + +afterEach(() => { + running?.stop(); + running = null; + useArcadeClient(null); + if (wasBaseURL === undefined) delete process.env.ARCADE_BASE_URL; + else process.env.ARCADE_BASE_URL = wasBaseURL; +}); + +const confirm = () => { + const { broker } = createArcadeClient("never-dialled"); + const flow = broker.authorizations; + if (!flow) throw new Error("the Arcade broker runs an authorization flow."); + return flow.confirmReturn({ handle: "fl_1", vendorUserId: "vendor-u1" }); +}; + +describe("confirmReturn answers an authorization id or it answers nothing", () => { + test("a confirmation that OMITS auth_id throws rather than answering an id-less match", async () => { + const e = engine({ next_uri: "https://cloud.arcade.dev/done" }); + + await expect(confirm()).rejects.toThrow(/no authorization id/); + // The call was really made: this is the vendor's answer being refused, not a short circuit. + expect(e.requests).toEqual([CONFIRM_PATH]); + }); + + test("an EMPTY auth_id is refused on the same footing as an absent one", async () => { + engine({ auth_id: "" }); + + await expect(confirm()).rejects.toThrow(/no authorization id/); + }); + + test("a non-string auth_id is refused rather than carried into the binding", async () => { + engine({ auth_id: 7 }); + + await expect(confirm()).rejects.toThrow(/no authorization id/); + }); + + test("the id the vendor really answered rides out untouched", async () => { + engine({ auth_id: "ar_7", next_uri: "https://cloud.arcade.dev/done" }); + + expect(await confirm()).toEqual({ authorizationId: "ar_7" }); + }); +}); diff --git a/server/tests/arcade-connection-kind-engine.test.ts b/server/tests/arcade-connection-kind-engine.test.ts new file mode 100644 index 000000000..a1d1d133f --- /dev/null +++ b/server/tests/arcade-connection-kind-engine.test.ts @@ -0,0 +1,182 @@ +import { afterEach, describe, expect, test } from "bun:test"; +import { createArcadeClient } from "../src/plugins/arcade-adapter"; +import type { BrokerApp } from "../src/plugins/broker"; + +/** + * WHICH FLOW AN ARCADE APP GETS IS READ OFF THE LISTING, AND THIS IS THE FILE THAT WATCHES IT. + * + * `listApps` used to write `connection: { kind: "consent" }` onto every toolkit in the catalogue, + * which is a claim about the vendor made without reading the vendor. `Apollo` — verbatim below, + * from `fixtures/arcade-catalogue.json` — publishes NO `requirements.authorization` at all and one + * deployment-wide secret instead, so it was announced as an app somebody connects by clicking + * through a consent screen when there is no consent screen for it anywhere: pressing Connect mints + * an authorization for a tool that requires none. + * + * SERVED OVER A REAL SOCKET THROUGH `ARCADE_BASE_URL`, as `arcade-pagination-engine.test.ts` does + * and for its reason: the adapter suite's prototype stubs hand the adapter whatever shape the test + * felt like, and the shapes this file is about — a `requirements` the SDK's own types forbid — are + * exactly the ones a stub cannot be trusted to reproduce. + */ + +type Engine = { port: number; stop: () => void }; + +const toolkitOf = (name: string) => ({ + name, + description: `Arcade tools designed for LLMs to interact with ${name}`, + version: "1.0.0", +}); + +/** Verbatim from the live listing: an oauth2 authorization, which IS a consent flow. */ +const OAUTH_REQUIREMENTS = { + met: true, + authorization: { + id: "arcade-asana", + provider_id: "asana", + provider_type: "oauth2", + oauth2: { scopes: ["default"] }, + status: "active", + }, +}; + +/** Verbatim from the live listing: a deployment-wide secret and NO authorization whatsoever. */ +const SECRET_REQUIREMENTS = { + met: false, + secrets: [ + { + key: "APOLLO_API_KEY", + met: false, + status_reason: "Secret APOLLO_API_KEY not found", + }, + ], +}; + +const toolOf = (toolkit: string, n: number, extra: object = {}) => ({ + qualified_name: `${toolkit}.Action${n}`, + name: `Action${n}`, + fully_qualified_name: `${toolkit}.Action${n}@1.0.0`, + toolkit: toolkitOf(toolkit), + input: { parameters: [] }, + ...extra, +}); + +let running: Engine | null = null; +const wasBaseURL = process.env.ARCADE_BASE_URL; + +function engine(tools: unknown[]): Engine { + const server = Bun.serve({ + port: 0, + fetch(request) { + const url = new URL(request.url); + if (url.pathname !== "/v1/tools") { + return new Response("not found", { status: 404 }); + } + const offset = Number(url.searchParams.get("offset") ?? "0"); + const limit = Number(url.searchParams.get("limit") ?? "100"); + const page = tools.slice(offset, offset + limit); + return Response.json({ + items: page, + offset, + limit, + page_count: page.length, + total_count: tools.length, + }); + }, + }); + running = { port: server.port, stop: () => server.stop(true) }; + process.env.ARCADE_BASE_URL = `http://localhost:${server.port}`; + return running; +} + +afterEach(() => { + running?.stop(); + running = null; + if (wasBaseURL === undefined) delete process.env.ARCADE_BASE_URL; + else process.env.ARCADE_BASE_URL = wasBaseURL; +}); + +const appOf = (apps: BrokerApp[], slug: string): BrokerApp => { + const app = apps.find((a) => a.slug === slug); + if (!app) throw new Error(`no app ${slug} in the directory`); + return app; +}; + +const listed = () => createArcadeClient("never-dialled").broker.listApps(); + +describe("the connection kind is read off what Arcade publishes", () => { + test("an app Arcade publishes an oauth2 authorization for is a consent app", async () => { + engine([toolOf("Asana", 0, { requirements: OAUTH_REQUIREMENTS })]); + expect(appOf(await listed(), "Asana").connection).toEqual({ + kind: "consent", + }); + }); + + test("an app that asks only for a deployment-wide secret is NOT a consent app", async () => { + // Apollo's live shape: a secret an operator sets once for everybody, and no authorization at + // all. There is no consent screen to send anybody to, so announcing one is a wrong answer. + engine([toolOf("Apollo", 0, { requirements: SECRET_REQUIREMENTS })]); + expect(appOf(await listed(), "Apollo").connection).toEqual({ + kind: "no-auth", + }); + }); + + test("an app that publishes no requirements at all asks nobody for anything", async () => { + engine([toolOf("Hackernews", 0)]); + expect(appOf(await listed(), "Hackernews").connection).toEqual({ + kind: "no-auth", + }); + }); + + test("one action's authorization makes the whole toolkit a consent app", async () => { + // A toolkit whose actions disagree still HAS a consent flow, and that flow is how somebody + // reaches the actions that need it. + engine([ + toolOf("Mixed", 0, { requirements: SECRET_REQUIREMENTS }), + toolOf("Mixed", 1, { requirements: OAUTH_REQUIREMENTS }), + ]); + expect(appOf(await listed(), "Mixed").connection).toEqual({ + kind: "consent", + }); + }); + + test("the kinds are read per app, not written once for the catalogue", async () => { + engine([ + toolOf("Asana", 0, { requirements: OAUTH_REQUIREMENTS }), + toolOf("Apollo", 0, { requirements: SECRET_REQUIREMENTS }), + toolOf("Hackernews", 0), + ]); + const apps = await listed(); + expect( + Object.fromEntries(apps.map((a) => [a.slug, a.connection.kind])), + ).toEqual({ Asana: "consent", Apollo: "no-auth", Hackernews: "no-auth" }); + }); +}); + +describe("a requirements shape this deployment cannot read is refused, never guessed", () => { + test("requirements that are not an object refuse, naming the app", async () => { + engine([toolOf("Apollo", 0, { requirements: "yes" })]); + await expect(listed()).rejects.toThrow( + /Arcade sent a string where Apollo's requirements belong/, + ); + }); + + test("an authorization that is not an object refuses, naming the app", async () => { + engine([toolOf("Asana", 0, { requirements: { authorization: "oauth2" } })]); + await expect(listed()).rejects.toThrow( + /Arcade sent a string where Asana's authorization requirement belongs/, + ); + }); + + test("a list where requirements belong is refused as a list", async () => { + engine([toolOf("Asana", 0, { requirements: [] })]); + await expect(listed()).rejects.toThrow( + /Arcade sent a list where Asana's requirements belong/, + ); + }); + + test("a null requirements is the vendor's silence and not a bad shape", async () => { + engine([toolOf("Hackernews", 0, { requirements: null })]); + expect(appOf(await listed(), "Hackernews").connection).toEqual({ + kind: "no-auth", + }); + }); +}); diff --git a/server/tests/arcade-directory-deadline-engine.test.ts b/server/tests/arcade-directory-deadline-engine.test.ts new file mode 100644 index 000000000..515bd666f --- /dev/null +++ b/server/tests/arcade-directory-deadline-engine.test.ts @@ -0,0 +1,233 @@ +import { afterEach, describe, expect, test } from "bun:test"; +import { useArcadeClient } from "../src/plugins/arcade"; +import { createArcadeClient } from "../src/plugins/arcade-adapter"; +import { withVendorDeadline } from "../src/plugins/route-groups/context"; + +/** + * "BROWSE ARCADE" MUST LOAD INSIDE ITS DEADLINE AGAINST A DIRECTORY OF ARCADE'S REAL SIZE. + * + * Every other `listApps` test serves a handful of rows, so nothing ever asked whether the listing + * finishes in time. Against the live API it could not: 8,320 tools read 100 at a time is 84 + * SEQUENTIAL pages at ~1.2 s each, ~100 s, and the route wraps the whole of `listApps` in the 10 s + * `VENDOR_CALL_TIMEOUT_MS` — the browser got a 502 after 10,157 ms, every time. + * + * So this engine serves THE MEASURED DIRECTORY over a real socket, with the MEASURED LATENCY, and + * holds the listing to the deadline. Time is scaled down ×10 throughout so the suite stays fast; + * the RATIO between page latency and deadline is the live one: + * + * | measured live | here (÷10) | + * |----------------------------------------|--------------| + * | `total_count` 8,320 | 8,320 (same) | + * | ~1.19 s per page at limit ≤ 100 | 119 ms | + * | ~1.8 s per page at limit 250…1000 | 180 ms | + * | limit above 1000 REJECTED, empty body | same | + * | `VENDOR_CALL_TIMEOUT_MS` 10,000 ms | 1,000 ms | + */ + +const SCALE = 10; +/** `route-groups/context.ts`'s `VENDOR_CALL_TIMEOUT_MS`, scaled. */ +const DEADLINE_MS = 10_000 / SCALE; +const DIRECTORY = 8_320; +const TOOLKIT_SIZE = 52; // 8,320 / 52 = 160 toolkits + +const toolRow = (n: number) => { + const toolkit = `Kit${Math.floor(n / TOOLKIT_SIZE)}`; + return { + qualified_name: `${toolkit}.Action${n}`, + description: "", + toolkit: { name: toolkit, description: "" }, + input: { parameters: [] }, + }; +}; + +type Asked = { + limit: number; + offset: number; + /** How many requests were in flight at the moment this one arrived, itself included. */ + inFlightAtStart: number; + /** How many requests had already been ANSWERED when this one arrived. */ + answeredBefore: number; +}; + +type Engine = { + asked: Asked[]; + maxInFlight: () => number; + stop: () => void; +}; + +type EngineOptions = { + /** What `total_count` says on every page. */ + claimed: number; + /** How many rows the engine actually serves, which may be fewer — or more — than it claims. */ + served?: number; + /** Per-request latency in ms at limit ≤ 100, and above it. Defaults are the live ones, ÷10. */ + latency?: { small: number; large: number }; +}; + +const sleep = (ms: number) => + new Promise((resolve) => setTimeout(resolve, ms)); + +function startEngine(options: EngineOptions): Engine { + const asked: Asked[] = []; + const latency = options.latency ?? { + small: 1190 / SCALE, + large: 1800 / SCALE, + }; + const served = options.served ?? options.claimed; + let inFlight = 0; + let peak = 0; + let answered = 0; + const server = Bun.serve({ + port: 0, + async fetch(request) { + const url = new URL(request.url); + if (url.pathname !== "/v1/tools") + return new Response("not found", { status: 404 }); + const offset = Number(url.searchParams.get("offset") ?? "0"); + const limit = Number(url.searchParams.get("limit") ?? "25"); + inFlight += 1; + peak = Math.max(peak, inFlight); + asked.push({ + limit, + offset, + inFlightAtStart: inFlight, + answeredBefore: answered, + }); + try { + // MEASURED: limit=5000 answered an EMPTY response in ~0.17 s. A page size past the + // vendor's ceiling must fail here exactly as it fails live. + if (limit > 1000) { + await sleep(170 / SCALE); + return new Response("", { status: 200 }); + } + await sleep(limit <= 100 ? latency.small : latency.large); + const items = []; + for (let n = offset; n < Math.min(offset + limit, served); n++) + items.push(toolRow(n)); + return Response.json({ + items, + offset, + limit, + page_count: items.length, + total_count: options.claimed, + }); + } finally { + inFlight -= 1; + answered += 1; + } + }, + }); + process.env.ARCADE_BASE_URL = `http://localhost:${server.port}`; + return { asked, maxInFlight: () => peak, stop: () => server.stop(true) }; +} + +let running: Engine | null = null; +const wasBaseURL = process.env.ARCADE_BASE_URL; + +function engine(options: EngineOptions): Engine { + running = startEngine(options); + return running; +} + +afterEach(() => { + running?.stop(); + running = null; + useArcadeClient(null); + if (wasBaseURL === undefined) delete process.env.ARCADE_BASE_URL; + else process.env.ARCADE_BASE_URL = wasBaseURL; +}); + +/** `listApps` exactly as the "Browse Arcade" route calls it: under the vendor deadline. */ +const browse = () => + withVendorDeadline( + () => createArcadeClient("never-dialled").broker.listApps(), + DEADLINE_MS, + ); + +describe("the Arcade directory loads inside the vendor deadline at its real size", () => { + test("8,320 tools are listed in full before the deadline", async () => { + const e = engine({ claimed: DIRECTORY }); + const started = performance.now(); + + const apps = await browse(); + + const took = performance.now() - started; + expect(apps.reduce((n, app) => n + app.actionCount, 0)).toBe(DIRECTORY); + expect(apps.length).toBe(DIRECTORY / TOOLKIT_SIZE); + // Comfortably inside, not merely inside: one page alone, then one wave of the rest. + expect(took).toBeLessThan(DEADLINE_MS); + expect(e.asked.length).toBe(9); + }); + + test("page one is asked for alone, then every remaining page at once", async () => { + const e = engine({ claimed: DIRECTORY }); + + await browse(); + + const [first, ...rest] = e.asked; + // Page one first, alone — its `total_count` is what says how many pages follow. + expect(first).toEqual({ + limit: 1000, + offset: 0, + inFlightAtStart: 1, + answeredBefore: 0, + }); + // Every other page, by offset, at the same page size, and none of them twice. + expect(rest.map((one) => one.offset).sort((a, b) => a - b)).toEqual([ + 1000, 2000, 3000, 4000, 5000, 6000, 7000, 8000, + ]); + for (const one of rest) expect(one.limit).toBe(1000); + // ...all asked for AFTER page one answered, and BEFORE any of them answered: one wave. + for (const one of rest) expect(one.answeredBefore).toBe(1); + expect(e.maxInFlight()).toBe(8); + }); + + test("a bigger directory is still fetched at most eight pages at a time", async () => { + // 20,000 tools: 19 pages after the first, so the bound — not the directory — decides the peak. + const e = engine({ claimed: 20_000, latency: { small: 5, large: 20 } }); + + const apps = await browse(); + + expect(apps.reduce((n, app) => n + app.actionCount, 0)).toBe(20_000); + expect(e.asked.length).toBe(21); + expect(e.maxInFlight()).toBe(8); + }); +}); + +describe("fetching ahead does not weaken the incompleteness check", () => { + test("a directory that claims 8,320 and serves 8,000 is refused", async () => { + engine({ claimed: DIRECTORY, served: 8000 }); + + await expect(browse()).rejects.toThrow( + /listed 8000 of 8320 actions, so its app catalogue is incomplete/, + ); + }); + + test("a short page in the MIDDLE ends the listing, and the pages fetched past it are not counted", async () => { + // The page at offset 4000 holds 500 rows; the five pages fetched ahead past it hold nothing. + // A reader that summed every answer would still see 4500 — but one that kept reading past the + // short page would be trusting a listing that already said it was over. + engine({ claimed: DIRECTORY, served: 4500 }); + + await expect(browse()).rejects.toThrow( + /listed 4500 of 8320 actions, so its app catalogue is incomplete/, + ); + }); + + test("a total that UNDER-reports is read on past, sequentially, to the real end", async () => { + // Claims 2000, serves 3500: the prefetch covers offsets 1000 and 2000, both full, so the + // listing must go on asking — a short page ends it, never the total. + const e = engine({ + claimed: 2000, + served: 3500, + latency: { small: 5, large: 20 }, + }); + + const apps = await browse(); + + expect(apps.reduce((n, app) => n + app.actionCount, 0)).toBe(3500); + expect(e.asked.map((one) => one.offset).sort((a, b) => a - b)).toEqual([ + 0, 1000, 2000, 3000, + ]); + }); +}); diff --git a/server/tests/arcade-disconnect-cascade.test.ts b/server/tests/arcade-disconnect-cascade.test.ts new file mode 100644 index 000000000..e0ad48e5e --- /dev/null +++ b/server/tests/arcade-disconnect-cascade.test.ts @@ -0,0 +1,281 @@ +// server/tests/arcade-disconnect-cascade.test.ts +import { afterAll, afterEach, describe, expect, test } from "bun:test"; +import { randomUUID } from "node:crypto"; +import { and, asc, eq, inArray, sql } from "drizzle-orm"; +import { createAuditStore } from "../src/audit"; +import { createDatabase } from "../src/db/client"; +import { auditEvents, brokeredConnections, mcpServers } from "../src/db/schema"; +import type { ConnectedAppBroker } from "../src/plugins/broker"; +import { createPluginStore } from "../src/plugins/store"; +import { TEST_POOL, testDatabaseUrl } from "./support/database"; + +const database = createDatabase(testDatabaseUrl(), TEST_POOL); + +/* The pool this file opened, given back. `bun test` runs every file in one process and nothing + * reaps an idle connection, so a pool held to the end of the run is two connections the rest of + * the suite cannot have. */ +afterAll(async () => { + await database.$client.close(); +}); +const suite = randomUUID().slice(0, 8); +const gmail = `Gmail-${suite}`; +const calendar = `GoogleCalendar-${suite}`; +const slack = `Slack-${suite}`; +const drive = `GoogleDrive-${suite}`; +const lonely = `Lonely-${suite}`; +const keyed = `Keyed-${suite}`; + +const providerOf: Record = { + [gmail]: "google", + [calendar]: "google", + [drive]: null, // the resolver cannot answer for this one + [slack]: "slack", + [lonely]: "google", + // Gmail's connection exactly, except that this deployment holds a KEY for it. + [keyed]: "google", +}; + +/** What the vendor was asked to revoke, in order, and whether it should refuse. */ +const revoked: string[] = []; +let refuseRevoke = false; +/* + * What `revoke` ANSWERS where it does not refuse. `false` is "there was nothing to withdraw", and + * it is the answer no app but the asked one may be claimed gone on. + */ +let revokeAnswer = true; + +const broker: ConnectedAppBroker = { + grantIsLocal: false, + authorizations: { + status: async () => { + throw new Error("nothing here polls an authorization"); + }, + confirmReturn: async () => { + throw new Error("nothing here confirms a return leg"); + }, + }, + authProviderOf: async (toolkit) => providerOf[toolkit] ?? null, + grantsFor: async () => [], + listApps: async () => [], + ensureAuthConfig: async () => "standing", + deleteAuthConfig: async () => {}, + authorize: async () => ({ + redirectUrl: "https://vendor.example/consent", + authorizationId: "ar_1", + }), + isConnected: async () => true, + revoke: async ({ toolkit }) => { + revoked.push(toolkit); + if (refuseRevoke) + throw new Error("Arcade revoke failed for 1 of 2 connections."); + return revokeAnswer; + }, + connectionFields: async () => [], + connectWithFields: async () => ({ accountId: "ca_1" }), + revokeAccount: async () => {}, + accountName: async () => "acme", +}; + +const store = createPluginStore({ + brokerProvider: "arcade", + database, + auditStore: createAuditStore(database), + credentials: {} as never, + encryptionKey: "x".repeat(44), + policy: () => ({ mode: "enforce" as const, deny: [], allow: ["true"] }), + broker, +}); + +const seeded: string[] = []; +async function hold(app: string, userId: string) { + seeded.push(app); + await database.insert(brokeredConnections).values({ + provider: "arcade", + app, + holder: "person", + userId, + vendorUserId: userId, + }); +} +/* + * A row under the DEPLOYMENT's holder but on a person's vendor identity: `resolveSiblings` reads + * the identity and so finds it, and `accountRow` reads the holder and so does not touch it. + */ +async function holdForDeployment(app: string, vendorUserId: string) { + seeded.push(app); + await database.insert(brokeredConnections).values({ + provider: "arcade", + app, + holder: "deployment", + userId: null, + vendorUserId, + }); +} +/* + * The app's own row, which is where its auth scheme is recorded and so the only thing that says + * whether this deployment holds a key for it. + */ +const servers: string[] = []; +async function server(app: string, authScheme: string) { + servers.push(app); + await database.insert(mcpServers).values({ + id: app, + title: app, + vendor: "Arcade", + url: `arcade://${app}`, + provenance: "arcade", + authScheme, + }); +} +const rowsFor = async (apps: string[]) => + ( + await database + .select({ app: brokeredConnections.app }) + .from(brokeredConnections) + .where(inArray(brokeredConnections.app, apps)) + .orderBy(asc(brokeredConnections.app)) + ).map((row) => row.app); +// Filed by owner, because the trail is append-only and an earlier test's rows are still there. +const trailFor = (userId: string) => + database + .select({ + app: auditEvents.targetId, + payload: sql>`payload`, + }) + .from(auditEvents) + .where( + and( + eq(auditEvents.eventType, "mcp.account_disconnected"), + sql`payload ->> 'owner' = ${userId}`, + ), + ) + .orderBy(asc(auditEvents.targetId)); + +// The audit trail is append-only, so it is never cleaned: every name here carries this run's suffix. +afterEach(async () => { + if (seeded.length) { + await database + .delete(brokeredConnections) + .where(inArray(brokeredConnections.app, seeded)); + } + seeded.length = 0; + if (servers.length) { + await database.delete(mcpServers).where(inArray(mcpServers.id, servers)); + } + servers.length = 0; + revoked.length = 0; + refuseRevoke = false; + revokeAnswer = true; +}); + +const disconnect = (userId: string, toolkit: string) => + store.disconnectBrokered({ + toolkit, + account: { holder: "person", userId, vendorUserId: userId }, + by: userId, + reason: "self", + }); + +describe("the disconnect cascade", () => { + test("a disconnect whose siblings are two apps removes and audits BOTH local rows", async () => { + const userId = `person-${suite}-a`; + await hold(gmail, userId); + await hold(calendar, userId); + await hold(slack, userId); // another provider: untouched + + await disconnect(userId, gmail); + + expect(await rowsFor([gmail, calendar, slack])).toEqual([slack]); + const trail = await trailFor(userId); + expect(trail.map((event) => event.app)).toEqual([calendar, gmail].sort()); + }); + + test("a partial vendor failure THROWS and every local row survives, with no audit row", async () => { + const userId = `person-${suite}-b`; + await hold(gmail, userId); + await hold(calendar, userId); + refuseRevoke = true; + + await expect(disconnect(userId, gmail)).rejects.toThrow(/revoke failed/); + + expect(await rowsFor([gmail, calendar])).toEqual([calendar, gmail].sort()); + expect(await trailFor(userId)).toEqual([]); + }); + + test("a disconnect with no siblings removes and audits exactly the one app", async () => { + const userId = `person-${suite}-c`; + await hold(lonely, userId); + await hold(slack, userId); + + await disconnect(userId, lonely); + + expect(await rowsFor([lonely, slack])).toEqual([slack]); + const trail = await trailFor(userId); + expect(trail.map((event) => event.app)).toEqual([lonely]); + }); + + test("the audit payload carries the unanswered count, an integer and never names", async () => { + const userId = `person-${suite}-d`; + await hold(gmail, userId); + await hold(calendar, userId); + await hold(drive, userId); // its auth provider cannot be resolved + + await disconnect(userId, gmail); + + // The unanswered app is NOT touched (left out, never guessed)... + expect(await rowsFor([gmail, calendar, drive])).toEqual([drive]); + // ...and every row written says that one app was not known. + const trail = await trailFor(userId); + expect(trail).toHaveLength(2); + for (const event of trail) { + expect(event.payload.unansweredSiblings).toBe(1); + expect(JSON.stringify(event.payload)).not.toContain(drive); + } + }); + + /* + * THE THREE RULES A CASCADE DELETE OBEYS, each asserted on the thing they protect: the row of an + * app NOBODY ASKED ABOUT. All three live in `clearEndedSiblings` in `store.ts`. + */ + test("a KEY sibling's row SURVIVES, and nothing is written about it", async () => { + const userId = `person-${suite}-e`; + await server(keyed, "API_KEY"); + await hold(gmail, userId); + await hold(keyed, userId); // same identity, same provider — but a key, not a consent + + await disconnect(userId, gmail); + + // The one OAuth revoke never ended the key, so the row that is the only way to reach that + // account is still here, and the trail claims nothing about it. + expect(await rowsFor([gmail, keyed])).toEqual([keyed]); + expect((await trailFor(userId)).map((event) => event.app)).toEqual([gmail]); + }); + + test("a revoke that ANSWERS FALSE leaves a sibling's row standing and unaudited", async () => { + const userId = `person-${suite}-f`; + await hold(gmail, userId); + await hold(calendar, userId); + revokeAnswer = false; + + await disconnect(userId, gmail); + + // Nothing was shown to have been withdrawn, so no app but the asked one is claimed gone. + expect(await rowsFor([gmail, calendar])).toEqual([calendar]); + const trail = await trailFor(userId); + expect(trail.map((event) => event.app)).toEqual([gmail]); + expect(trail[0]?.payload.vendorRevocationRequested).toBe(false); + }); + + test("a sibling this account holds NO ROW for gets no trail row", async () => { + const userId = `person-${suite}-g`; + await hold(gmail, userId); + await holdForDeployment(calendar, userId); // a sibling, but not this account's row + + await disconnect(userId, gmail); + + // The row is another holder's and so was never this disconnect's to delete — and a row that + // was not deleted has no vanished connection to explain. + expect(await rowsFor([gmail, calendar])).toEqual([calendar]); + expect((await trailFor(userId)).map((event) => event.app)).toEqual([gmail]); + }); +}); diff --git a/server/tests/arcade-disconnect-route.test.ts b/server/tests/arcade-disconnect-route.test.ts new file mode 100644 index 000000000..f587bd35d --- /dev/null +++ b/server/tests/arcade-disconnect-route.test.ts @@ -0,0 +1,331 @@ +// server/tests/arcade-disconnect-route.test.ts +/** + * `GET /api/plugins/servers/:id/connection/siblings` and `DELETE /api/plugins/servers/:id/connection`, + * driven through `createApp`: what ending one app's connection ends besides it, and the cascade. + * + * THE ROWS AND THE TRAIL ARE ASSERTED, never a response body alone. + * + * SCOPING. `audit_events` is append-only and nothing here is cleaned from it, so every case mints + * its own `run()`: a fresh `suite+counter` suffix on every app, person and vendor identity it + * touches. Rows and trail are read through `inArray` on THAT case's app names only, and the + * "untouched" and "nothing audited" assertions therefore name keys no other case writes — an + * unwanted deletion or audit row for one of them could only have come from this case. + */ +import { afterAll, describe, expect, test } from "bun:test"; +import { randomUUID } from "node:crypto"; +import { and, asc, eq, inArray } from "drizzle-orm"; +import { createApp } from "../src/app"; +import { createAuditStore } from "../src/audit"; +import { loadConfig } from "../src/config"; +import { createDatabase } from "../src/db/client"; +import { auditEvents, brokeredConnections, mcpServers } from "../src/db/schema"; +import type { ConnectedAppBroker } from "../src/plugins/broker"; +import { createPluginStore } from "../src/plugins/store"; +import { TEST_POOL, testDatabaseUrl } from "./support/database"; +import { testEnvironment } from "./support/environment"; + +const database = createDatabase(testDatabaseUrl(), TEST_POOL); +const suite = randomUUID().slice(0, 8); +let counter = 0; + +type Provider = "arcade" | "composio"; +let revokes: string[] = []; +/** + * What the vendor stub answers. A function answers PER TOOLKIT, which is the only way a case can + * have one connection's revoke succeed while another's fails: the store makes exactly one ask per + * disconnect, so a partial failure is a wave of disconnects and not a single call that half-ran. + */ +type RevokeAnswer = boolean | Error | ((toolkit: string) => boolean | Error); +let revokeAnswer: RevokeAnswer = true; + +const providerOf = (provider: Provider) => (toolkit: string) => + provider === "composio" + ? toolkit + : toolkit.startsWith("Slack") + ? "slack" + : "google"; + +function brokerFor(provider: Provider): ConnectedAppBroker { + return { + grantIsLocal: false, + authProviderOf: async (toolkit) => providerOf(provider)(toolkit), + authorizations: null, + grantsFor: async () => [], + listApps: async () => [], + ensureAuthConfig: async () => "standing", + deleteAuthConfig: async () => {}, + authorize: async () => ({ + redirectUrl: "https://vendor.example/consent", + authorizationId: null, + }), + isConnected: async () => true, + revoke: async (request) => { + revokes.push(request.toolkit); + const answer = + typeof revokeAnswer === "function" + ? revokeAnswer(request.toolkit) + : revokeAnswer; + if (answer instanceof Error) throw answer; + return answer; + }, + connectionFields: async () => [], + connectWithFields: async () => ({ accountId: "ca_1" }), + revokeAccount: async () => {}, + accountName: async () => null, + }; +} + +function build(who: string, provider: Provider) { + const broker = brokerFor(provider); + const auditStore = createAuditStore(database); + const pluginStore = createPluginStore({ + brokerProvider: provider, + database, + auditStore, + credentials: {} as never, + encryptionKey: "x".repeat(44), + policy: () => ({ mode: "enforce", deny: [], allow: ["true"] }), + broker, + deploymentId: `acme-${suite}`, + }); + const args = new Array(createApp.length) as unknown as Parameters< + typeof createApp + >; + args[0] = loadConfig( + testEnvironment({ OPENBOT_APP_URL: "https://app.example" }), + ); + args[1] = { + handler: () => new Response(null, { status: 204 }), + api: { + getSession: async () => ({ + user: { id: who, email: `${who}@example.test`, name: "Person" }, + }), + }, + } as never; + args[2] = { rolesForUser: async () => ["user"] } as never; + args[12] = auditStore; + args[14] = pluginStore; + args[29] = { broker, provider }; + return createApp(...args); +} + +const toolkits: string[] = []; + +/** This case's own names. Nothing another case writes can share one. */ +function run(provider: Provider = "arcade") { + counter += 1; + const tag = `${suite}${counter}`; + const names = { + gmail: `Gmail${tag}`, + calendar: `GoogleCalendar${tag}`, + docs: `GoogleDocs${tag}`, + slack: `Slack${tag}`, + person: `person-${tag}`, + shared: `openbot-deployment:acme:${tag}`, + }; + toolkits.push(names.gmail, names.calendar, names.docs, names.slack); + revokes = []; + revokeAnswer = true; + return { ...names, provider, id: (toolkit: string) => `srv-${toolkit}` }; +} + +async function app(n: ReturnType, toolkit: string) { + await database.insert(mcpServers).values({ + id: n.id(toolkit), + title: toolkit, + vendor: n.provider === "arcade" ? "Arcade" : "Composio", + url: `${n.provider}://${toolkit}`, + provenance: n.provider, + authScheme: "OAUTH2", + accountMode: "personal", + }); +} +async function hold( + n: ReturnType, + toolkit: string, + vendorUserId: string, + holder: "person" | "deployment" = "person", +) { + await database.insert(brokeredConnections).values({ + provider: n.provider, + app: toolkit, + holder, + userId: holder === "person" ? vendorUserId : null, + vendorUserId, + }); +} +const rowsFor = async (names: string[]) => + ( + await database + .select({ app: brokeredConnections.app }) + .from(brokeredConnections) + .where(inArray(brokeredConnections.app, names)) + .orderBy(asc(brokeredConnections.app)) + ).map((row) => row.app); +const trailFor = async (names: string[]) => + ( + await database + .select({ app: auditEvents.targetId }) + .from(auditEvents) + .where( + and( + eq(auditEvents.eventType, "mcp.account_disconnected"), + inArray(auditEvents.targetId, names), + ), + ) + .orderBy(asc(auditEvents.targetId)) + ).map((row) => row.app); + +const preview = (n: ReturnType, toolkit: string) => + build(n.person, n.provider).request( + `http://openbot.test/api/plugins/servers/${n.id(toolkit)}/connection/siblings`, + ); +const disconnect = (n: ReturnType, toolkit: string) => + build(n.person, n.provider).request( + `http://openbot.test/api/plugins/servers/${n.id(toolkit)}/connection`, + { method: "DELETE" }, + ); + +afterAll(async () => { + await database + .delete(brokeredConnections) + .where(inArray(brokeredConnections.app, toolkits)); + await database.delete(mcpServers).where( + inArray( + mcpServers.id, + toolkits.map((t) => `srv-${t}`), + ), + ); + await database.$client.close(); +}); + +describe("the sibling list the confirmation shows", () => { + test("is computed on the PAIR: another identity's app on the same provider is not named", async () => { + const n = run(); + for (const t of [n.gmail, n.calendar, n.docs, n.slack]) await app(n, t); + await hold(n, n.gmail, n.person); + await hold(n, n.calendar, n.person); // same identity, same provider: a sibling + await hold(n, n.docs, n.shared, "deployment"); // same provider, ANOTHER identity + await hold(n, n.slack, n.person); // same identity, ANOTHER provider + + const response = await preview(n, n.gmail); + + expect(response.status).toBe(200); + expect(await response.json()).toEqual({ + siblings: [n.calendar], + unanswered: 0, + }); + // Asking changes nothing: no revoke, no row gone. + expect(revokes).toEqual([]); + expect(await rowsFor([n.gmail, n.calendar, n.docs, n.slack])).toEqual( + [n.gmail, n.calendar, n.docs, n.slack].sort(), + ); + }); +}); + +describe("the disconnect", () => { + test("removes and audits every app that ended, and nothing on another pair", async () => { + const n = run(); + for (const t of [n.gmail, n.calendar, n.docs, n.slack]) await app(n, t); + await hold(n, n.gmail, n.person); + await hold(n, n.calendar, n.person); + await hold(n, n.docs, n.shared, "deployment"); + await hold(n, n.slack, n.person); + + const response = await disconnect(n, n.gmail); + + expect(response.status).toBe(200); + expect(revokes).toEqual([n.gmail]); // ONE ask to the vendor + expect(await rowsFor([n.gmail, n.calendar, n.docs, n.slack])).toEqual( + [n.docs, n.slack].sort(), + ); + expect(await trailFor([n.gmail, n.calendar, n.docs, n.slack])).toEqual( + [n.gmail, n.calendar].sort(), + ); + }); + + test("a revoke that throws leaves EVERY row of the identity standing and audits nothing", async () => { + const n = run(); + // Three apps on ONE auth provider, so the single ask below covers two siblings as well as the + // app pressed: the throw must leave all three, not only the one named. + for (const t of [n.gmail, n.calendar, n.docs]) await app(n, t); + await hold(n, n.gmail, n.person); + await hold(n, n.calendar, n.person); + await hold(n, n.docs, n.person); + revokeAnswer = new Error("revoke failed halfway"); + + const response = await disconnect(n, n.gmail); + + expect(response.status).toBeGreaterThanOrEqual(500); + expect(revokes).toEqual([n.gmail]); + expect(await rowsFor([n.gmail, n.calendar, n.docs])).toEqual( + [n.gmail, n.calendar, n.docs].sort(), + ); + expect(await trailFor([n.gmail, n.calendar, n.docs])).toEqual([]); + }); + + test("a partial failure across an identity's connections ends the asked one and leaves the failed one whole", async () => { + const n = run(); + // TWO connections for one identity: Slack is its own auth provider, Gmail and Calendar share + // google. The store asks the vendor ONCE per disconnect, so "partial" is this wave — one ask + // answered, the next thrown on — and the point is that the succeeded half is not rolled back + // and the failed half is not half-applied. + for (const t of [n.gmail, n.calendar, n.slack]) await app(n, t); + await hold(n, n.gmail, n.person); + await hold(n, n.calendar, n.person); + await hold(n, n.slack, n.person); + revokeAnswer = (toolkit) => + toolkit === n.slack ? true : new Error("revoke failed halfway"); + + const ok = await disconnect(n, n.slack); + const failed = await disconnect(n, n.gmail); + + expect(ok.status).toBe(200); + expect(await ok.json()).toEqual({ vendorRevocationRequested: true }); + expect(failed.status).toBeGreaterThanOrEqual(500); + // BOTH asks reached the vendor, in that order: the failure is the vendor's answer and not a + // disconnect this deployment declined to make. + expect(revokes).toEqual([n.slack, n.gmail]); + // The succeeded one is gone; the failed one took NEITHER its own row nor its sibling's. + expect(await rowsFor([n.gmail, n.calendar, n.slack])).toEqual( + [n.gmail, n.calendar].sort(), + ); + expect(await trailFor([n.gmail, n.calendar, n.slack])).toEqual([n.slack]); + }); + + test("answers what the vendor was asked, passing a false through unrewritten", async () => { + const n = run(); + await app(n, n.gmail); + await hold(n, n.gmail, n.person); + revokeAnswer = false; + + const response = await disconnect(n, n.gmail); + + expect(await response.json()).toEqual({ vendorRevocationRequested: false }); + // The false is the VENDOR's: one DELETE was spent asking, not a default returned by a route + // that deleted the row and never asked. + expect(revokes).toEqual([n.gmail]); + expect(await rowsFor([n.gmail])).toEqual([]); + }); +}); + +describe("Composio, where an app is its own auth provider", () => { + test("names no siblings and disconnects exactly the one app", async () => { + const n = run("composio"); + for (const t of [n.gmail, n.calendar]) await app(n, t); + await hold(n, n.gmail, n.person); + await hold(n, n.calendar, n.person); + + const listed = await preview(n, n.gmail); + expect(await listed.json()).toEqual({ siblings: [], unanswered: 0 }); + + const response = await disconnect(n, n.gmail); + + expect(response.status).toBe(200); + // ONE DELETE spent at the vendor, for the app pressed and no other: the local row going is + // half the disconnect, and a row deleted with no ask leaves a live grant nothing here reaches. + expect(revokes).toEqual([n.gmail]); + expect(await rowsFor([n.gmail, n.calendar])).toEqual([n.calendar]); + expect(await trailFor([n.gmail, n.calendar])).toEqual([n.gmail]); + }); +}); diff --git a/server/tests/arcade-empty-vendor-structures-engine.test.ts b/server/tests/arcade-empty-vendor-structures-engine.test.ts new file mode 100644 index 000000000..f2f6b4bde --- /dev/null +++ b/server/tests/arcade-empty-vendor-structures-engine.test.ts @@ -0,0 +1,280 @@ +import { afterEach, describe, expect, test } from "bun:test"; +import { listTools, useArcadeClient } from "../src/plugins/arcade"; +import { createArcadeClient } from "../src/plugins/arcade-adapter"; +import type { AccountRef } from "../src/plugins/shared-accounts"; + +/** + * AN EMPTY VENDOR STRUCTURE IS NOT A VENDOR ANSWER, AGAINST A REAL HTTP ENGINE. + * + * `metadata: { behavior: {} }` and `requirements: { secrets: {} }` are containers Arcade opened and + * put nothing in. Read as answers they say "not destructive" and "nothing is required" — a + * permission decision taken on missing data, and the opposite of what an ABSENT `metadata` or an + * absent `behavior` already answers two lines away in the same function. + * + * SERVED OVER A REAL SOCKET, as `arcade-pagination-engine.test.ts` and + * `arcade-malformed-listing-engine.test.ts` are and for their reason: the rest of the adapter suite + * stubs the SDK's resource PROTOTYPES and so decides for itself what the adapter is handed, which + * cannot see anything that happens between the wire and the reader. Here the SDK parses the body + * and builds its own pages, so what these assertions read is what a deployment would. + */ + +const account: AccountRef = { + holder: "person", + userId: "u1", + vendorUserId: "vendor-u1", +}; + +type Engine = { port: number; stop: () => void }; + +/** The rows `/v1/tools` serves, set per test. One short page ends the listing. */ +let serving: unknown[] = []; + +function startEngine(): Engine { + const server = Bun.serve({ + port: 0, + fetch(request) { + const url = new URL(request.url); + const limit = Number(url.searchParams.get("limit") ?? "100"); + const offset = Number(url.searchParams.get("offset") ?? "0"); + if (url.pathname === "/v1/tools") { + const page = serving.slice(offset, offset + limit); + return Response.json({ + items: page, + offset, + limit, + page_count: page.length, + }); + } + return new Response("not found", { status: 404 }); + }, + }); + return { port: server.port, stop: () => server.stop(true) }; +} + +let running: Engine | null = null; +const wasBaseURL = process.env.ARCADE_BASE_URL; + +function engine(rows: unknown[]): void { + serving = rows; + running = startEngine(); + process.env.ARCADE_BASE_URL = `http://localhost:${running.port}`; +} + +afterEach(() => { + running?.stop(); + running = null; + serving = []; + useArcadeClient(null); + if (wasBaseURL === undefined) delete process.env.ARCADE_BASE_URL; + else process.env.ARCADE_BASE_URL = wasBaseURL; +}); + +/** One listed action, with whatever `metadata` and `requirements` the case is about. */ +const toolRow = ( + name: string, + metadata: unknown, + requirements: unknown = { + authorization: { + provider_id: "google", + oauth2: { scopes: [] }, + token_status: "completed", + }, + }, +) => ({ + qualified_name: `Gmail.${name}`, + description: "", + toolkit: { name: "Gmail", description: "" }, + input: { parameters: [] }, + metadata, + requirements, +}); + +const listed = async () => { + const { actions } = createArcadeClient("never-dialled"); + useArcadeClient(actions); + return await listTools({ url: "arcade://Gmail" }); +}; + +describe("an empty behavior object is the vendor saying nothing, not saying safe", () => { + test("a behavior object stating neither flag is read as the closed verdict", async () => { + engine([toolRow("EmptyBehavior", { behavior: {} })]); + + expect(await listed()).toMatchObject([ + { + name: "EmptyBehavior", + vendorName: "Gmail.EmptyBehavior", + effect: "write", + destructive: true, + }, + ]); + }); + + test("a behavior object carrying only unrelated keys says nothing either", async () => { + engine([toolRow("Idempotent", { behavior: { idempotent: true } })]); + + expect(await listed()).toMatchObject([ + { + name: "Idempotent", + vendorName: "Gmail.Idempotent", + effect: "write", + destructive: true, + }, + ]); + }); + + test("an empty behavior does not count towards classifiedCount", async () => { + engine([ + toolRow("EmptyBehavior", { behavior: {} }), + toolRow("Annotated", { + behavior: { read_only: true, destructive: false }, + }), + ]); + const { broker } = createArcadeClient("never-dialled"); + + const apps = await broker.listApps(); + expect(apps.length).toBe(1); + expect(apps[0]?.actionCount).toBe(2); + // ONE of the two: the empty container is an action Arcade has not classified, which is exactly + // what the coverage warning exists to name. + expect(apps[0]?.classifiedCount).toBe(1); + }); + + test("a stated behaviour is still read, in both directions", async () => { + engine([ + toolRow("Read", { behavior: { read_only: true } }), + toolRow("Write", { behavior: { destructive: false, read_only: false } }), + toolRow("Delete", { behavior: { destructive: true } }), + ]); + + expect(await listed()).toMatchObject([ + { + name: "Read", + vendorName: "Gmail.Read", + effect: "read", + destructive: false, + }, + { + name: "Write", + vendorName: "Gmail.Write", + effect: "write", + destructive: false, + }, + { + name: "Delete", + vendorName: "Gmail.Delete", + effect: "write", + destructive: true, + }, + ]); + }); +}); + +describe("a secrets requirement that is not a list is unreadable, not satisfied", () => { + const withSecrets = (secrets: unknown) => + toolRow( + "Send", + { behavior: { read_only: true } }, + { + secrets, + authorization: { + provider_id: "google", + oauth2: { scopes: [] }, + token_status: "completed", + }, + }, + ); + + test("an empty secrets object does not answer authorized", async () => { + engine([withSecrets({})]); + const { broker } = createArcadeClient("never-dialled"); + + expect(await broker.grantsFor({ account, toolkit: "Gmail" })).toEqual([ + { + action: "Gmail.Send", + state: "unknown", + reason: + "Arcade listed this action's deployment secrets as something other than a list, so whether any is unset could not be read.", + }, + ]); + }); + + test("no secrets field at all is still no secrets required", async () => { + engine([toolRow("Send", { behavior: { read_only: true } })]); + const { broker } = createArcadeClient("never-dialled"); + + expect(await broker.grantsFor({ account, toolkit: "Gmail" })).toEqual([ + { + action: "Gmail.Send", + state: "authorized", + scopes: [], + authorization: "held", + }, + ]); + }); + + test("a listed secret is still read, met or unset", async () => { + engine([withSecrets([{ key: "GITHUB_SERVER_URL", met: false }])]); + const { broker } = createArcadeClient("never-dialled"); + + expect(await broker.grantsFor({ account, toolkit: "Gmail" })).toEqual([ + { + action: "Gmail.Send", + state: "needs-operator", + missing: ["GITHUB_SERVER_URL"], + }, + ]); + }); +}); + +/** + * THE DEFECT: EVERY ARCADE ACTION WAS UNCALLABLE BY EVERY MODEL, AND NOTHING SAID SO. + * + * Arcade's listing answers `qualified_name` — `Gmail.ListEmails` — and `mcp_tools.name` used to be + * recorded as exactly that. `toolNameFor` then spliced it into `mcp__arcade-Gmail__Gmail.ListEmails` + * and the model API refused the request: a tool name may only match `^[a-zA-Z0-9_-]+$`, and the dot + * does not. Because a request carries EVERY tool together, one granted Arcade action failed the + * WHOLE call — `Invalid 'tools[47].name'` — so a Bot holding one Arcade tool could not answer + * anything at all. + * + * It survived every test in this tree because no test ever asked whether the name it recorded was a + * name a model could be offered. These do. + */ +describe("an Arcade action is recorded under a name a model may be offered", () => { + test("the toolkit prefix is dropped, and the vendor's own spelling is kept beside it", async () => { + engine([toolRow("ListEmails", { behavior: { read: true } })]); + + expect(await listed()).toMatchObject([ + { name: "ListEmails", vendorName: "Gmail.ListEmails" }, + ]); + }); + + test("every listed name is one the model API accepts", async () => { + engine([ + toolRow("ListEmails", null), + toolRow("SendEmail", null), + toolRow("TrashEmail", null), + ]); + + /* + * THE PATTERN ITSELF, not a sample of names somebody thought of. This is the whole of what the + * model API will take, and `name` is spliced into a tool name unchanged — so a listing that + * passes here is a request that is not refused for its names. + */ + for (const tool of await listed()) { + expect(tool.name).toMatch(/^[a-zA-Z0-9_-]+$/); + } + }); + + test("a qualified name that is not this toolkit's is left whole", async () => { + /* + * ONLY THE VENDOR'S OWN PREFIX IS REMOVED. A listing that qualifies an action with some other + * name is not something to repair by guessing: the name is kept as it stands and the guard in + * `storableTools` is what refuses it, by name, where it has a provenance. + */ + engine([{ ...toolRow("Other", null), qualified_name: "Elsewhere.Other" }]); + + expect(await listed()).toMatchObject([ + { name: "Elsewhere.Other", vendorName: "Elsewhere.Other" }, + ]); + }); +}); diff --git a/server/tests/arcade-enablement-facts.test.ts b/server/tests/arcade-enablement-facts.test.ts new file mode 100644 index 000000000..75b854d8c --- /dev/null +++ b/server/tests/arcade-enablement-facts.test.ts @@ -0,0 +1,171 @@ +import { afterEach, describe, expect, test } from "bun:test"; +import Arcade from "@arcadeai/arcadejs"; +import fixture from "./fixtures/arcade-catalogue.json"; +import { createArcadeClient } from "../src/plugins/arcade-adapter"; +import type { BrokerApp } from "../src/plugins/broker"; + +/** + * The three enablement facts `listApps` measures beside `actionCount`: how many actions Arcade + * classified, how many distinct non-empty scope sets they ask for, and how many carry a scope. + * + * MEASURED INSIDE THE EXISTING FOLD. `listApps` already pages `tools.list` to the end and folds + * every tool into a per-toolkit `actionCount` before discarding the tools; these three are counted + * before that discard. No second listing, no extra vendor call — which `asked` asserts below. + */ +type Methods = Record unknown>; +const toolsProto = (): Methods => + Object.getPrototypeOf( + new Arcade({ apiKey: "never-dialled" }).tools, + ) as Methods; + +const restores: (() => void)[] = []; +function stub( + on: Methods, + name: string, + impl: (...args: unknown[]) => unknown, +) { + const was = on[name]; + on[name] = impl; + restores.push(() => { + on[name] = was; + }); +} +afterEach(() => { + while (restores.length) restores.pop()?.(); +}); + +/** Serves one page of `items` and records every offset asked for. */ +function serving(items: unknown[]): { asked: number[] } { + const asked: number[] = []; + stub(toolsProto(), "list", (...args: unknown[]) => { + const q = args[0] as { offset: number }; + asked.push(q.offset); + return Promise.resolve( + q.offset === 0 + ? { items, total_count: items.length } + : { items: [], total_count: items.length }, + ); + }); + return { asked }; +} + +const listed = async () => + await createArcadeClient("never-dialled").broker.listApps(); + +const appOf = (apps: BrokerApp[], slug: string): BrokerApp => { + const app = apps.find((a) => a.slug === slug); + if (!app) throw new Error(`no app ${slug} in the directory`); + return app; +}; + +/** + * THE FIXTURE IS EVIDENCE ABOUT WHAT ARCADE RETURNS, so it is read and never appended to. Its five + * tools are verbatim live shapes: three classified toolkits, one unclassified one, and inside that + * one the mixed case (one action with a scope, one with an empty `oauth2` block). + */ +const FIXTURE_TOOLS = Object.values( + fixture.tools as Record, +) as unknown[]; + +describe("listApps measures the enablement facts from the fixture", () => { + test("classifiedCount equals actionCount where Arcade published a behavior", async () => { + const { asked } = serving(FIXTURE_TOOLS); + const apps = await listed(); + // No second listing: one short page ended it. + expect(asked).toEqual([0]); + for (const slug of ["Apollo", "Asana", "Attio"]) { + const app = appOf(apps, slug); + expect(app.classifiedCount).toBe(app.actionCount); + } + }); + + test("classifiedCount is 0 for a toolkit Arcade published no behavior for", async () => { + serving(FIXTURE_TOOLS); + const app = appOf(await listed(), "AirtableApi"); + expect(app.actionCount).toBe(2); + // NEVER THE `Api` SUFFIX: the zero comes from `metadata: null` on both of its actions. + expect(app.classifiedCount).toBe(0); + }); + + test("permissionCount is 0 where no action carries an oauth2 block at all", async () => { + serving(FIXTURE_TOOLS); + const app = appOf(await listed(), "Apollo"); + expect(app.permissionCount).toBe(0); + expect(app.scopedActionCount).toBe(0); + }); + + test("permissionCount is 1 for a toolkit whose actions share one scope set", async () => { + serving(FIXTURE_TOOLS); + const apps = await listed(); + for (const slug of ["Asana", "Attio"]) { + const app = appOf(apps, slug); + expect(app.permissionCount).toBe(1); + expect(app.scopedActionCount).toBe(1); + expect(app.actionCount).toBe(1); + } + }); + + /** + * THE MIXED CASE, and the reason `scopedActionCount` exists. `AirtableApi` publishes + * `AddBaseCollaborator` with `workspacesAndBases:write` and `ListBases` with an EMPTY `oauth2` + * block. Without the third number this reads as one permission covering both actions; with it, + * the second is what it is — covered by any approval at all, and not separately approvable. + */ + test("a scopeless action joins no permission group", async () => { + serving(FIXTURE_TOOLS); + const app = appOf(await listed(), "AirtableApi"); + expect(app.actionCount).toBe(2); + expect(app.permissionCount).toBe(1); + expect(app.scopedActionCount).toBe(1); + }); +}); + +/** + * `permissionCount > 1` IS A PURE COUNTING PROPERTY AND NEEDS NO REALISM, so it is constructed + * here rather than appended to the fixture. The fixture's value is that it is what Arcade actually + * returned; a second append makes that claim slightly less true while the file still carries it. + */ +describe("listApps counts distinct scope sets", () => { + const scoped = (name: string, scopes: string[]) => ({ + qualified_name: `Constructed.${name}`, + toolkit: { name: "Constructed", description: "constructed" }, + metadata: { behavior: { read_only: true, destructive: false } }, + requirements: { + authorization: { provider_type: "oauth2", oauth2: { scopes } }, + }, + }); + + test("two distinct scope sets answer permissionCount 2", async () => { + const tools = [scoped("One", ["a", "b"]), scoped("Two", ["c"])]; + serving(tools); + const app = appOf(await listed(), "Constructed"); + expect(app.actionCount).toBe(2); + expect(app.permissionCount).toBe(2); + expect(app.scopedActionCount).toBe(2); + expect(app.classifiedCount).toBe(2); + }); + + /** SORTED BEFORE JOINED: `[a,b]` and `[b,a]` are the same permission, asked for twice. */ + test("the same scopes in a different order are ONE permission", async () => { + const tools = [scoped("One", ["a", "b"]), scoped("Two", ["b", "a"])]; + serving(tools); + const app = appOf(await listed(), "Constructed"); + expect(app.actionCount).toBe(2); + expect(app.permissionCount).toBe(1); + expect(app.scopedActionCount).toBe(2); + }); + + /** Three actions, two sets, one of them reordered: the order never adds a permission. */ + test("sorting does not collapse genuinely different sets", async () => { + const tools = [ + scoped("One", ["a", "b"]), + scoped("Two", ["b", "a"]), + scoped("Three", ["a", "c"]), + ]; + serving(tools); + const app = appOf(await listed(), "Constructed"); + expect(app.actionCount).toBe(3); + expect(app.permissionCount).toBe(2); + expect(app.scopedActionCount).toBe(3); + }); +}); diff --git a/server/tests/arcade-errors.test.ts b/server/tests/arcade-errors.test.ts new file mode 100644 index 000000000..d986c592b --- /dev/null +++ b/server/tests/arcade-errors.test.ts @@ -0,0 +1,218 @@ +import { afterEach, describe, expect, test } from "bun:test"; +import { + callTool, + isAuthorizationRequired, + listTools, + useArcadeClient, + type ArcadeFailure, +} from "../src/plugins/arcade"; +import { MAX_RESULT_CHARS } from "../src/plugins/mcp"; + +afterEach(() => useArcadeClient(null)); + +const connection = { url: "arcade://Gmail", actorId: "u1" }; +const URL_IN_BODY = "https://github.com/login/oauth/authorize?state=SECRET"; + +function failing(failure: unknown) { + useArcadeClient({ + listTools: async () => { + throw new Error("not listing"); + }, + execute: async () => { + throw failure; + }, + }); +} + +describe("isAuthorizationRequired", () => { + test("keys on the body's error name", () => { + expect( + isAuthorizationRequired({ + status: 403, + name: "tool_authorization_required", + message: "authorization required", + }), + ).toBe(true); + }); + + test("the name alone is enough: it never reads the status", () => { + expect( + isAuthorizationRequired({ + status: undefined, + name: "tool_authorization_required", + message: undefined, + }), + ).toBe(true); + }); + + test("a 403 is not an authorization prompt", () => { + for (const name of ["permission_denied", undefined, "rate_limited"]) { + expect(isAuthorizationRequired({ status: 403, name, message: "x" })).toBe( + false, + ); + } + }); +}); + +describe("callTool failures", () => { + test("an authorization-required failure names the action callTool was given", async () => { + failing({ + status: 403, + name: "tool_authorization_required", + message: `authorization required ${URL_IN_BODY}`, + } satisfies ArcadeFailure); + const result = await callTool(connection, "Gmail.SendEmail", {}); + expect(result.isError).toBe(true); + expect(result.text).toBe( + "Gmail.SendEmail has not been authorized on this account yet. Authorize it in Settings → Connected accounts and ask again.", + ); + expect(result.text).not.toContain("http"); + expect(result.text).not.toContain("SECRET"); + }); + + test("the action comes from the call site, not from anything on the error", async () => { + failing({ + status: 403, + name: "tool_authorization_required", + message: "m", + toolName: "Other.Thing", + }); + const result = await callTool(connection, "Slack.Post", {}); + expect(result.text.startsWith("Slack.Post has not been authorized")).toBe( + true, + ); + }); + + test("permission_denied at 403 is NOT an authorize prompt", async () => { + failing({ status: 403, name: "permission_denied", message: "key revoked" }); + const result = await callTool(connection, "Gmail.SendEmail", {}); + expect(result.isError).toBe(true); + expect(result.text).not.toContain("has not been authorized"); + expect(result.text).not.toContain("Connected accounts"); + expect(result.text).not.toContain("http"); + }); + + test("a throw that is not an ArcadeFailure is handled", async () => { + for (const thrown of [new Error("boom"), "string", null, undefined, 42]) { + failing(thrown); + const result = await callTool(connection, "Gmail.SendEmail", {}); + expect(result.isError).toBe(true); + expect(result.text).not.toContain("has not been authorized"); + } + }); +}); + +describe("listTools failures", () => { + test("a vendor error on the listing path does not leak the vendor's message", async () => { + const vendor = new Error( + '403 {"name":"permission_denied","message":"LEAKME key sk-123"}', + ); + useArcadeClient({ + listTools: async () => { + throw vendor; + }, + execute: async () => { + throw new Error("no"); + }, + }); + const error = await listTools(connection).then( + () => null, + (e: Error) => e, + ); + expect(error).not.toBeNull(); + expect(error!.message).not.toContain("LEAKME"); + expect(error!.message).not.toContain("sk-123"); + expect(error!.message).toContain("Gmail"); + expect(error!.cause).toBe(vendor); + }); +}); + +function answering(answer: unknown) { + useArcadeClient({ + listTools: async () => { + throw new Error("not listing"); + }, + execute: async () => answer as never, + }); +} + +describe("callTool successes", () => { + test("a 200 carrying an authorization envelope leaks neither the url nor the token", async () => { + answering({ + success: true, + output: { + value: { ok: 1 }, + authorization: { + url: "https://example.test/auth?state=SECRET", + context: { token: "tok-LEAKME" }, + }, + }, + }); + const result = await callTool(connection, "Gmail.SendEmail", {}); + expect(result.text).not.toContain("http"); + expect(result.text).not.toContain("SECRET"); + expect(result.text).not.toContain("LEAKME"); + expect(result.text).toBe( + "Gmail.SendEmail has not been authorized on this account yet. Authorize it in Settings → Connected accounts and ask again.", + ); + expect(result.isError).toBe(true); + }); + + test("an Arcade-reported failure is an error, in this deployment's words", async () => { + answering({ success: false, output: { error: { message: "LEAKME" } } }); + const result = await callTool(connection, "Gmail.SendEmail", {}); + expect(result.isError).toBe(true); + expect(result.text).toBe("Arcade could not run Gmail.SendEmail."); + expect(result.text).not.toContain("LEAKME"); + }); + + test("a plain success returns output.value and nothing else from the envelope", async () => { + answering({ + success: true, + execution_id: "exec-LEAKME", + duration: 12.5, + output: { value: { rows: [1, 2] } }, + }); + const result = await callTool(connection, "Gmail.SendEmail", {}); + expect(result.isError).toBe(false); + expect(result.text).toBe(JSON.stringify({ rows: [1, 2] }, null, 2)); + expect(result.text).not.toContain("execution_id"); + expect(result.text).not.toContain("exec-LEAKME"); + expect(result.text).not.toContain("duration"); + }); +}); + +/** + * A tool result is read by a model and copied into the audit row, so an unbounded one is the vendor + * — or whoever wrote the mailbox it read — deciding how much of our context window to spend and how + * large a durable record grows. `composio.ts`'s `cap()` is the convention this follows: BOTH answers + * go through it, the result and the refusal, and `truncated` is the field that says it happened. + */ +describe("callTool caps what a model is shown", () => { + test("an enormous result is cut and says it was cut", async () => { + const enormous = "x".repeat(MAX_RESULT_CHARS + 5_000); + answering({ success: true, output: { value: enormous } }); + const result = await callTool(connection, "Gmail.ReadEmail", {}); + expect(result.isError).toBe(false); + expect(result.truncated).toBe(true); + expect(result.text.length).toBeLessThan(enormous.length); + expect(result.text.endsWith("[truncated]")).toBe(true); + }); + + test("a result that fits is untouched and reports no truncation", async () => { + answering({ success: true, output: { value: { rows: [1, 2] } } }); + const result = await callTool(connection, "Gmail.ReadEmail", {}); + expect(result.truncated).toBe(false); + expect(result.text).toBe(JSON.stringify({ rows: [1, 2] }, null, 2)); + }); + + test("a refusal is capped too: it carries a vendor-listed action name", async () => { + const enormousName = "Gmail.".padEnd(MAX_RESULT_CHARS + 2_000, "N"); + answering({ success: false, output: { error: { message: "m" } } }); + const result = await callTool(connection, enormousName, {}); + expect(result.isError).toBe(true); + expect(result.truncated).toBe(true); + expect(result.text.length).toBeLessThan(enormousName.length); + expect(result.text.endsWith("[truncated]")).toBe(true); + }); +}); diff --git a/server/tests/arcade-grants-route.test.ts b/server/tests/arcade-grants-route.test.ts new file mode 100644 index 000000000..53f07999a --- /dev/null +++ b/server/tests/arcade-grants-route.test.ts @@ -0,0 +1,320 @@ +// server/tests/arcade-grants-route.test.ts +/** + * `GET /api/plugins/servers/:id/grants`: what an account holds at an app, action by action. + * + * THE IDENTITY SENT UPSTREAM IS WHAT IS ASSERTED, never what rendered. The stub broker records the + * `account` each `grantsFor` call receives, and cases 1 and 2 read THAT. A route that asked about + * the viewer for a Shared app would render a perfectly plausible answer. + * + * SCOPING. `audit_events` is append-only and nothing here is cleaned between cases, so every case + * mints its own `run()`: a fresh `suite+counter` suffix on the toolkit, the app id, the viewer and + * the shared identity. The captured calls are filtered to THIS case's toolkit, and the "mint + * refused" check reads `audit_events` and `pending_authorizations` through `inArray` on this case's + * own names only, so a minted attempt by any other case could not satisfy or redden it. + */ +import { afterAll, describe, expect, test } from "bun:test"; +import { randomUUID } from "node:crypto"; +import { inArray } from "drizzle-orm"; +import { createApp } from "../src/app"; +import { createAuditStore } from "../src/audit"; +import { loadConfig } from "../src/config"; +import { createDatabase } from "../src/db/client"; +import { + auditEvents, + mcpServers, + pendingAuthorizations, +} from "../src/db/schema"; +import type { ConnectedAppBroker, GrantState } from "../src/plugins/broker"; +import type { AccountRef } from "../src/plugins/shared-accounts"; +import { createPluginStore } from "../src/plugins/store"; +import { TEST_POOL, testDatabaseUrl } from "./support/database"; +import { testEnvironment } from "./support/environment"; + +const database = createDatabase(testDatabaseUrl(), TEST_POOL); +const suite = randomUUID().slice(0, 8); +let counter = 0; + +type Provider = "arcade" | "composio"; +let calls: { toolkit: string; account: AccountRef }[] = []; +let mints: string[] = []; +let answer: (q: { + toolkit: string; + account: AccountRef; +}) => Promise = async () => []; + +const recordGrants: ConnectedAppBroker["grantsFor"] = async (q) => { + calls.push(q); + return answer(q); +}; + +/** Declares the correlated flow and mints an authorization id: Arcade's shape. */ +const arcadeBroker: ConnectedAppBroker = { + grantIsLocal: false, + authProviderOf: async () => "google", + authorizations: { + status: async () => ({ status: "pending", userId: null, scopes: [] }), + confirmReturn: async () => ({ mismatch: true }), + }, + grantsFor: recordGrants, + listApps: async () => [], + ensureAuthConfig: async () => "standing", + deleteAuthConfig: async () => {}, + authorize: async (request) => { + mints.push(request.toolkit); + return { + redirectUrl: "https://vendor.example/consent?bearer=1", + authorizationId: "ar_1", + }; + }, + isConnected: async () => true, + revoke: async () => true, + connectionFields: async () => [], + connectWithFields: async () => ({ accountId: "ca_1" }), + revokeAccount: async () => {}, + accountName: async () => null, +}; + +/** Declares no flow, mints no authorization id, and still answers `grantsFor`. */ +const composioBroker: ConnectedAppBroker = { + grantIsLocal: false, + authProviderOf: async () => "google", + authorizations: null, + grantsFor: recordGrants, + listApps: async () => [], + ensureAuthConfig: async () => "standing", + deleteAuthConfig: async () => {}, + authorize: async (request) => { + mints.push(request.toolkit); + return { + redirectUrl: "https://vendor.example/consent?bearer=1", + authorizationId: null, + }; + }, + isConnected: async () => true, + revoke: async () => true, + connectionFields: async () => [], + connectWithFields: async () => ({ accountId: "ca_1" }), + revokeAccount: async () => {}, + accountName: async () => null, +}; + +const brokerFor = (provider: Provider) => + provider === "arcade" ? arcadeBroker : composioBroker; + +function build(who: string, role: "admin" | "user", provider: Provider) { + const broker = brokerFor(provider); + const auditStore = createAuditStore(database); + const pluginStore = createPluginStore({ + brokerProvider: provider, + database, + auditStore, + credentials: {} as never, + encryptionKey: "x".repeat(44), + policy: () => ({ mode: "enforce", deny: [], allow: ["true"] }), + broker, + deploymentId: `acme-${suite}`, + }); + const args = new Array(createApp.length) as unknown as Parameters< + typeof createApp + >; + args[0] = loadConfig( + testEnvironment({ OPENBOT_APP_URL: "https://app.example" }), + ); + args[1] = { + handler: () => new Response(null, { status: 204 }), + api: { + getSession: async () => ({ + user: { id: who, email: `${who}@example.test`, name: "Person" }, + }), + }, + } as never; + args[2] = { rolesForUser: async () => [role] } as never; + args[12] = auditStore; + args[14] = pluginStore; + args[29] = { broker, provider }; + return createApp(...args); +} + +const ids: string[] = []; +const toolkits: string[] = []; +const viewers: string[] = []; + +/** This case's own names. Nothing another case writes can share one. */ +async function run(mode: "personal" | "shared", provider: Provider = "arcade") { + counter += 1; + const tag = `${suite}${counter}`; + const names = { + id: `grants-${tag}`, + toolkit: `Gmail${tag}`, + viewer: `viewer-${tag}`, + sharedIdentity: `openbot-deployment:acme:${tag}`, + }; + ids.push(names.id); + toolkits.push(names.toolkit); + viewers.push(names.viewer); + await database.insert(mcpServers).values({ + id: names.id, + title: "Gmail", + vendor: provider === "arcade" ? "Arcade" : "Composio", + url: `${provider}://${names.toolkit}`, + provenance: provider, + authScheme: "OAUTH2", + accountMode: mode, + sharedVendorUserId: mode === "shared" ? names.sharedIdentity : null, + }); + calls = []; + mints = []; + answer = async () => []; + return names; +} + +const grants = ( + who: string, + role: "admin" | "user", + id: string, + provider: Provider = "arcade", +) => + build(who, role, provider).request( + `http://openbot.test/api/plugins/servers/${id}/grants`, + ); + +afterAll(async () => { + await database.delete(mcpServers).where(inArray(mcpServers.id, ids)); + await database.$client.close(); +}); + +describe("whose identity is asked about", () => { + test("a personal app asks upstream as the viewer", async () => { + const n = await run("personal"); + answer = async () => [ + { + action: "Gmail.ListEmails", + state: "authorized", + scopes: ["a"], + authorization: "held", + }, + ]; + const response = await grants(n.viewer, "user", n.id); + expect(response.status).toBe(200); + const mine = calls.filter((c) => c.toolkit === n.toolkit); + expect(mine.map((c) => c.account)).toEqual([ + { holder: "person", userId: n.viewer, vendorUserId: n.viewer }, + ]); + }); + + test("a shared app asks upstream as the app's identity, never the viewer", async () => { + const n = await run("shared"); + const response = await grants(n.viewer, "admin", n.id); + expect(response.status).toBe(200); + const mine = calls.filter((c) => c.toolkit === n.toolkit); + expect(mine.map((c) => c.account)).toEqual([ + { holder: "deployment", vendorUserId: n.sharedIdentity }, + ]); + expect(JSON.stringify(mine)).not.toContain(n.viewer); + }); + + test("a non-admin reads a shared app's status (200) but is refused the mint (403)", async () => { + const n = await run("shared"); + const read = await grants(n.viewer, "user", n.id); + expect(read.status).toBe(200); + expect( + calls.filter((c) => c.toolkit === n.toolkit).map((c) => c.account), + ).toEqual([{ holder: "deployment", vendorUserId: n.sharedIdentity }]); + + const mint = await build(n.viewer, "user", "arcade").request( + `http://openbot.test/api/plugins/servers/${n.id}/authorize`, + { + method: "POST", + headers: { "content-type": "application/json" }, + body: JSON.stringify({ action: "Gmail.ListEmails" }), + }, + ); + expect(mint.status).toBe(403); + // Scoped to this case's own app and viewer: nothing was minted or recorded for them. + expect(mints.filter((t) => t === n.toolkit)).toEqual([]); + const attempts = await database + .select() + .from(pendingAuthorizations) + .where(inArray(pendingAuthorizations.actorId, [n.viewer])); + expect(attempts).toEqual([]); + const trail = await database + .select() + .from(auditEvents) + .where(inArray(auditEvents.targetId, [n.toolkit, n.id])); + expect(trail.filter((e) => e.eventType.includes("authoriz"))).toEqual([]); + }); +}); + +describe("what the states say", () => { + test("blocked only by a deployment secret: needs-operator, naming it", async () => { + const n = await run("personal"); + answer = async () => [ + { + action: "Github.ListRepos", + state: "needs-operator", + missing: ["GITHUB_SERVER_URL"], + }, + ]; + const body = (await (await grants(n.viewer, "user", n.id)).json()) as { + actions: GrantState[]; + }; + expect(body.actions).toEqual([ + { + action: "Github.ListRepos", + state: "needs-operator", + missing: ["GITHUB_SERVER_URL"], + }, + ]); + }); + + test("blocked by consent: needs-consent carrying its scopes", async () => { + const n = await run("personal"); + answer = async () => [ + { + action: "Gmail.SendEmail", + state: "needs-consent", + scopes: ["gmail.send"], + }, + ]; + const body = (await (await grants(n.viewer, "user", n.id)).json()) as { + actions: GrantState[]; + }; + expect(body.actions).toEqual([ + { + action: "Gmail.SendEmail", + state: "needs-consent", + scopes: ["gmail.send"], + }, + ]); + }); + + test("a listing that cannot be read is unknown, never needs-consent", async () => { + const n = await run("personal"); + answer = async () => { + throw new Error(`vendor said no: token gho_secret_${suite}`); + }; + const response = await grants(n.viewer, "user", n.id); + expect(response.status).toBe(200); + const text = await response.text(); + const body = JSON.parse(text) as { actions: GrantState[] }; + expect(body.actions.length).toBeGreaterThan(0); + for (const entry of body.actions) expect(entry.state).toBe("unknown"); + expect(text).not.toContain("needs-consent"); + expect(text).not.toContain("gho_secret"); + }); +}); + +test("a Composio deployment answers this route successfully", async () => { + const n = await run("personal", "composio"); + answer = async () => [ + { action: "GMAIL_FETCH", state: "needs-consent", scopes: [] }, + ]; + const response = await grants(n.viewer, "user", n.id, "composio"); + expect(response.status).toBe(200); + expect(await response.json()).toEqual({ + actions: [{ action: "GMAIL_FETCH", state: "needs-consent", scopes: [] }], + }); + expect( + calls.filter((c) => c.toolkit === n.toolkit).map((c) => c.account), + ).toEqual([{ holder: "person", userId: n.viewer, vendorUserId: n.viewer }]); +}); diff --git a/server/tests/arcade-journey.integration.test.ts b/server/tests/arcade-journey.integration.test.ts new file mode 100644 index 000000000..37b41c8ce --- /dev/null +++ b/server/tests/arcade-journey.integration.test.ts @@ -0,0 +1,1163 @@ +// server/tests/arcade-journey.integration.test.ts +/** + * THE WHOLE ARCADE DEPLOYMENT, END TO END, THROUGH `createApp`. + * + * Select Arcade → browse the catalogue → enable an app → discover its actions → load the + * connected-accounts index → authorize one action → come back through the verifier → execute a + * call → disconnect. Every other Arcade suite checks one of those against its own factory; this one + * is the only place they are checked against EACH OTHER, which is where a vendor's name written by + * hand in one step and read by a parser in the next shows up. + * + * SO EVERY ASSERTION IS A PERSISTED FACT AND NEVER A STATUS CODE. A 201 says a route answered; what + * the journey turns on is the ROW it left — `arcade://GoogleCalendar-…` with its capitals intact, + * an `mcp_tools` row carrying the vendor's own `behavior`, a `pending_authorizations` row holding + * the resolved identity, a `brokered_connections` row stamped `arcade`, an audit entry naming the + * action and the scopes, and — on disconnect — the absence of all of them. + * + * AND THE SECOND HALF IS THE MERGE GATE. Two apps are switched to Shared, and the whole of what + * keeps them apart is that each holds its own minted identity: the two sit under ONE auth provider + * at the vendor, which is the configuration where a shared identity would be invisible until + * somebody pressed Disconnect on one app and lost the other. That is exercised THROUGH THE PRODUCT + * here — the mint the vendor was sent, the rows, the sibling preview and the disconnect — rather + * than inferred from the unique indexes. + * + * NOTHING IS DIALLED. The vendor is stubbed at the SDK PROTOTYPE, the seam every other Arcade + * adapter suite uses (`new Arcade({ apiKey })` opens no socket), so the REAL adapter and the REAL + * transport run: `listApps`, `authProviderOf`, `authorize`, `auth.status`, `auth.confirmUser`, + * `admin.userConnections` and `tools.execute` are this deployment's own code throughout, and only + * the wire is fake. + * + * THE FIXTURE IS EVIDENCE AND THE TOOLKITS ARE A CASE. `arcade-catalogue.json` is read for the one + * thing only a recording can be trusted about — the exact `metadata` a read, a write, a destructive + * and an UNANNOTATED action are published with — and nothing is appended to it. The toolkits themselves are + * constructed here, because the journey needs two apps sharing ONE auth provider, which is the + * live `Gmail`/`GoogleCalendar`-under-`google` shape the adapter's own docblock describes and which + * no single recorded page carries. + * + * WHY NO `execute` UNDER A SHARED APP'S IDENTITY IS DRIVEN HERE: coverage, not scope. The identity + * hop is already pinned by name at `gate-grant-is-local.test.ts:183` ("a vendor-held grant on a + * Shared app still runs as the app's shared identity"), which drives `connectionTokenFor`'s + * `broker && !broker.grantIsLocal -> resolved.ref.vendorUserId` with a deployment ref; that ref + * itself comes from `store.accountRefFor`, which this suite drives four times over. A shared execute + * would add only provider-agnostic gate machinery, owned by `shared-gated-mode.integration.test.ts`. + * If that test is deleted, this is the gap to re-check. + * + * `events.length === 1` IS A PER-ACTOR FACT, NOT A SYSTEM INVARIANT. `ON CONFLICT (actor_id)` proves + * one actor cannot overlap himself. Two DIFFERENT admins pressing Authorize on the same Shared app + * hold two attempt rows, both minting under the one shared vendor identity, and both completions + * run: the connection upsert is idempotent so the row stays single, but the trail takes two + * `mcp.account_connected` rows for one connection. That is consistent with D10 ("at most one + * authorization in flight PER ACTOR") and is arguably the honest trail. + * + * THE TWO `describe` BLOCKS ARE ORDER-COUPLED: the merge-gate describe relies on the first having + * enabled and connected both apps, and fails if run alone with `--test-name-pattern "two + * separately-shared"`. That failure is not a defect. + */ +import { afterAll, beforeAll, describe, expect, test } from "bun:test"; +import { randomUUID } from "node:crypto"; +import Arcade from "@arcadeai/arcadejs"; +import { and, eq, inArray } from "drizzle-orm"; +import { createApp } from "../src/app"; +import { createAuditStore } from "../src/audit"; +import { loadConfig } from "../src/config"; +import { createDatabase } from "../src/db/client"; +import { + agents, + auditEvents, + brokeredConnections, + mcpServers, + mcpTools, + pendingAuthorizations, + pluginGrants, +} from "../src/db/schema"; +import { createAccountModeSwitch } from "../src/plugins/account-mode"; +import { useArcadeClient } from "../src/plugins/arcade"; +import { createArcadeClient } from "../src/plugins/arcade-adapter"; +import type { ConnectedAppBroker } from "../src/plugins/broker"; +import { createSharedUseStore } from "../src/plugins/shared-use-store"; +import { createPluginStore } from "../src/plugins/store"; +import fixture from "./fixtures/arcade-catalogue.json"; +import { TEST_POOL, testDatabaseUrl } from "./support/database"; +import { removePeople, seedPeople } from "./support/people"; +import { testEnvironment } from "./support/environment"; + +const database = createDatabase(testDatabaseUrl(), TEST_POOL); + +const suite = randomUUID().slice(0, 8); +/** + * Two toolkits whose CAPITALS CARRY MEANING. `GoogleCalendar-…` is the name a lowercasing step + * anywhere between the picker and the transport would destroy, and the suite suffix is what makes + * `audit_events` — which is append-only and cannot be cleaned between tests — answer about this run + * and no other. + */ +const MAIL = `Gmail-${suite}`; +const DIARY = `GoogleCalendar-${suite}`; +const MAIL_ROW = `arcade-${MAIL}`; +const DIARY_ROW = `arcade-${DIARY}`; +const SEND = `${MAIL}.SendEmail`; +const DELETE_EVENT = `${DIARY}.DeleteEvent`; + +/** + * ONE AUTH PROVIDER FOR BOTH TOOLKITS, which is the whole point of the pair. + * + * `provider` is the BROKER (`arcade`); this is the VENDOR'S OAuth provider, and one Google + * configuration serves Gmail and GoogleCalendar both. Deliberately nothing like either toolkit + * name, so anything deriving one from the other fails here. + */ +const AUTH_PROVIDER = "google"; + +/** + * AND THE CONFIGURATION OF IT THE CONNECTIONS ARE ACTUALLY HELD UNDER, which is a THIRD name. + * + * A tool listing's `provider_id` is the provider TYPE (`google`); a user-connection row's + * `provider_id` is the provider INSTANCE — an operator's configuration of that type, which is what + * the live project answers (`google-openbot`, `arcade-google`, `cpk-poc`). Spelled differently + * here on purpose: a journey whose vendor used one spelling on both sides would be green against + * an adapter that compares the two raw strings and finds nothing on every real deployment. + */ +const AUTH_PROVIDER_INSTANCE = `${AUTH_PROVIDER}-openbot`; + +const ADMIN = `arcade-journey-${suite}`; +const BOT = `bot-${suite}`; +const APP_URL = "https://app.example"; +/** A stand-in for the live `gho_…` the vendor's status reply carries beside the three fields. */ +const LIVE_TOKEN = `gho_live_access_token_${suite}`; + +const SCOPES: Record = { + [`${MAIL}.ListEmails`]: ["https://www.googleapis.com/auth/gmail.readonly"], + [SEND]: ["https://www.googleapis.com/auth/gmail.send"], + [`${MAIL}.TrashEmail`]: ["https://www.googleapis.com/auth/gmail.modify"], + [`${DIARY}.ListEvents`]: [ + "https://www.googleapis.com/auth/calendar.readonly", + ], + [DELETE_EVENT]: ["https://www.googleapis.com/auth/calendar.events"], +}; + +/** + * The `metadata` shapes, READ OUT OF THE RECORDING rather than written here — the whole object and + * not just its `behavior`, so what the fold reads is the shape the vendor publishes. What a vendor + * actually publishes is the one thing a hand-written literal cannot be trusted about, and it is + * exactly what `classify` reads. + * + * `unclassified` IS A RECORDED `metadata: null`, AND IT IS WHAT MAKES THE COUNTS DISCRIMINATING. It + * classifies to the SAME closed `{ write, destructive }` verdict a genuinely destructive action + * does, so a toolkit whose every action is annotated cannot tell `classifiedCount` apart from + * `actionCount` — the coverage warning that exists to name unannotated actions would be green + * against a count that simply echoed the other. + */ +const recorded = fixture.tools as unknown as Record< + string, + { metadata: unknown } +>; +const METADATA = { + read: recorded.read.metadata, + write: recorded.write.metadata, + destructive: recorded.destructive.metadata, + unclassified: recorded.unclassified.metadata, +}; + +function action( + toolkit: string, + name: string, + metadata: unknown, +): Record { + const qualified = `${toolkit}.${name}`; + return { + fully_qualified_name: `${qualified}@1.0.0`, + qualified_name: qualified, + name, + description: `${name} at ${toolkit}`, + toolkit: { name: toolkit, description: `Arcade tools for ${toolkit}` }, + input: { + parameters: [ + { + name: "q", + required: true, + description: "What to act on.", + value_schema: { val_type: "string" }, + }, + ], + }, + requirements: { + /* + * TRUE FOR EVERYBODY, AND NOTHING MAY READ IT. `requirements.met` answers true on a listing + * asked without a `user_id`, which is every listing on this journey bar `grantsFor`'s. A step + * that read it would record this run as connected to everything before a single consent, and + * the journey below would still be green — so it is set true here on purpose. + */ + met: true, + authorization: { + id: `arcade-${AUTH_PROVIDER}`, + provider_id: AUTH_PROVIDER, + provider_type: "oauth2", + oauth2: { scopes: SCOPES[qualified] ?? [] }, + status: "inactive", + }, + }, + metadata, + }; +} + +/** + * `DraftEmail` carries the recorded `metadata: null` AND NO SCOPES, which is the live + * `Github`-shaped action: an `oauth2` block with an empty scope list, where the connection itself + * is the grant. It is what separates all four of the picker's counts from one another. + */ +const CATALOGUE: Record[] = [ + action(MAIL, "ListEmails", METADATA.read), + action(MAIL, "SendEmail", METADATA.write), + action(MAIL, "TrashEmail", METADATA.destructive), + action(MAIL, "DraftEmail", METADATA.unclassified), + action(DIARY, "ListEvents", METADATA.read), + action(DIARY, "DeleteEvent", METADATA.destructive), +]; + +/** + * The same listed action as the vendor publishes it when asked ABOUT an identity: with that + * identity's own `token_status` — `completed` once it has consented, `not_started` before. + * + * `token_status` AND NOT `status`. The authorization's `status` is the AUTH PROVIDER's standing + * (`inactive` / "Provider not found" in `fixtures/arcade-catalogue.json`), the same for everybody; + * this fixture once flipped it to `active` to mean "this person consented", and the grants screen + * read it that way — which is the K2 (A7c) defect: every action of a configured provider drawn as + * held. The catalogue listing (no `user_id`) carries no `token_status`, as the live one does not. + */ +function askedAbout( + item: Record, + consented: boolean, +): Record { + const requirements = item.requirements as Record; + const authorization = requirements.authorization as Record; + return { + ...item, + requirements: { + ...requirements, + authorization: { + ...authorization, + token_status: consented ? "completed" : "not_started", + }, + }, + }; +} + +/* ------------------------------------------------------------------ the vendor, at its own wire */ + +type VendorConnection = { + id: string; + connection_id: string; + provider_id: string; + user_id: string; + provider_user_info: { name: string }; +}; + +/** What the vendor holds. One row per (identity, auth provider), which is how Arcade keys them. */ +let vendorConnections: VendorConnection[] = []; +let authorizeCalls: Record[] = []; +const executeCalls: Record[] = []; +const deleted: string[] = []; +let mints = 0; +/** Every mint, by its `ar_…` id, and the newest one per identity for the return leg to name. */ +const minted = new Map(); +const newestMint = new Map(); + +type Methods = Record unknown>; +const protoOf = (pick: (client: Arcade) => unknown): Methods => + Object.getPrototypeOf(pick(new Arcade({ apiKey: "never-dialled" }))); + +const restores: (() => void)[] = []; +function stub( + pick: (client: Arcade) => unknown, + name: string, + impl: (...args: unknown[]) => unknown, +) { + const on = protoOf(pick); + const was = on[name]; + on[name] = impl; + restores.push(() => { + on[name] = was; + }); +} + +/** The vendor's connection for one identity under this journey's single auth provider. */ +function holdConnection(userId: string) { + if (vendorConnections.some((row) => row.user_id === userId)) return; + const n = vendorConnections.length + 1; + vendorConnections.push({ + id: `at_${n}`, + connection_id: `ac_${n}`, + provider_id: AUTH_PROVIDER_INSTANCE, + user_id: userId, + provider_user_info: { name: `Account ${n}` }, + }); +} + +function installVendor() { + stub( + (client) => client.tools, + "list", + (...args: unknown[]) => { + const query = (args[0] ?? {}) as { + toolkit?: string; + limit?: number; + offset?: number; + user_id?: string; + }; + const items = CATALOGUE.filter( + (item) => + !query.toolkit || + (item.toolkit as { name: string }).name === query.toolkit, + ).map((item) => + /* + * A LISTING ASKED ABOUT SOMEBODY ANSWERS ABOUT THEM, which is the only difference the + * `user_id` makes and the whole of what `grantsFor` is reading. `met` stays true on every + * item either way (see `action`), so a step reading it instead of the authorization's own + * `token_status` would report this run as holding every grant before a single consent. + */ + query.user_id + ? askedAbout( + item, + vendorConnections.some((r) => r.user_id === query.user_id), + ) + : item, + ); + const offset = query.offset ?? 0; + const limit = query.limit ?? items.length; + return Promise.resolve({ + items: items.slice(offset, offset + limit), + total_count: items.length, + }); + }, + ); + + stub( + (client) => client.tools, + "authorize", + (...args: unknown[]) => { + const request = args[0] as { tool_name: string; user_id: string }; + authorizeCalls.push({ ...request }); + mints += 1; + const id = `ar_${mints}`; + minted.set(id, { + userId: request.user_id, + scopes: SCOPES[request.tool_name] ?? [], + }); + newestMint.set(request.user_id, id); + return Promise.resolve({ + id, + // A BEARER CAPABILITY. It goes to the caller and nowhere else; the suite checks that + // nothing else it touches ever carries it. + url: `https://vendor.example/consent/${id}?secret=bearer-capability`, + status: "pending", + }); + }, + ); + + stub( + (client) => client.tools, + "execute", + (...args: unknown[]) => { + const request = args[0] as { + tool_name: string; + input: Record; + user_id: string; + }; + executeCalls.push({ ...request }); + return Promise.resolve({ + success: true, + output: { value: { ran: request.tool_name } }, + }); + }, + ); + + stub( + (client) => client.auth, + "confirmUser", + (...args: unknown[]) => { + const request = args[0] as { flow_id: string; user_id: string }; + // The consent finished at the vendor BEFORE this deployment looked, which is the true order. + holdConnection(request.user_id); + return Promise.resolve({ + auth_id: newestMint.get(request.user_id) ?? "ar_unknown", + }); + }, + ); + + stub( + (client) => client.auth, + "status", + (...args: unknown[]) => { + const { id } = args[0] as { id: string }; + const mint = minted.get(id); + /* + * DELIBERATELY WIDER THAN THE SEAM. The live reply carries a working provider access token + * and the person's whole profile beside the three fields the adapter narrows to, and the + * point of sending them here is that nothing downstream can be carrying either. + */ + return Promise.resolve({ + id, + status: "completed", + user_id: mint?.userId ?? "", + scopes: mint?.scopes ?? [], + context: { token: LIVE_TOKEN, user_info: { email: "person@vendor" } }, + url: `https://vendor.example/consent/${id}?secret=bearer-capability`, + }); + }, + ); + + /* + * THE PROJECT'S CONFIGURED AUTH PROVIDERS, in the live shape: `id` is the INSTANCE and + * `provider_id` is the TYPE. This is the listing that bridges a toolkit's type to the instance + * ids its connection rows carry; `cpk-poc` is here so the bridge has something to exclude. + */ + stub( + (client) => client.admin.authProviders, + "list", + () => + Promise.resolve({ + items: [ + { id: "cpk-poc", provider_id: "github", type: "oauth2" }, + { + id: AUTH_PROVIDER_INSTANCE, + provider_id: AUTH_PROVIDER, + type: "oauth2", + }, + ], + total_count: 2, + }), + ); + + stub( + (client) => client.admin.userConnections, + "list", + (...args: unknown[]) => { + const { user_id: userId } = args[0] as { user_id: string }; + const rows = vendorConnections.filter((row) => row.user_id === userId); + // A PAGE, as the real `list` resolves to. `connectionsFor` pages the listing itself: the + // SDK's own auto-pagination stops after page one when the engine omits `total_count`. + return Promise.resolve({ + items: rows, + offset: 0, + total_count: rows.length, + }); + }, + ); + + stub( + (client) => client.admin.userConnections, + "delete", + (...args: unknown[]) => { + const id = args[0] as string; + deleted.push(id); + vendorConnections = vendorConnections.filter( + (row) => row.connection_id !== id, + ); + return Promise.resolve(); + }, + ); +} + +/* --------------------------------------------------------------------- the deployment, as booted */ + +let broker: ConnectedAppBroker; + +/** + * The deployment as `createApp` builds it. + * + * Positional, by index rather than by a run of `undefined`s, for the reason + * `shared-wiring.integration.test.ts` gives: a parameter added in the middle then moves a type + * error onto the wrong index here rather than shifting an argument silently. + */ +function build() { + const auditStore = createAuditStore(database); + const pluginStore = createPluginStore({ + brokerProvider: "arcade", + database, + auditStore, + credentials: {} as never, + encryptionKey: "x".repeat(44), + policy: () => ({ mode: "enforce", deny: [], allow: ["true"] }), + broker, + deploymentId: `acme-${suite}`, + }); + const use = createSharedUseStore(database, "arcade"); + const modes = createAccountModeSwitch({ + store: pluginStore, + sharedUse: use, + teamRules: undefined, + deploymentId: `acme-${suite}`, + audit: auditStore, + }); + const args = new Array(createApp.length) as unknown as Parameters< + typeof createApp + >; + args[0] = loadConfig(testEnvironment({ OPENBOT_APP_URL: APP_URL })); + args[1] = { + handler: () => new Response(null, { status: 204 }), + api: { + getSession: async () => ({ + user: { id: ADMIN, email: `${ADMIN}@example.test`, name: "Admin" }, + }), + }, + } as never; + args[2] = { rolesForUser: async () => ["admin"] } as never; + args[12] = auditStore; + args[14] = pluginStore; + args[29] = { broker, provider: "arcade" } as never; + args[34] = { shared: { modes, use } } as never; + return createApp(...args); +} + +const api = (path: string, init?: RequestInit) => + build().request(`http://openbot.test/api/plugins${path}`, init); + +const send = (method: string, path: string, body: unknown) => + api(path, { + method, + headers: { "content-type": "application/json" }, + body: JSON.stringify(body), + }); + +/* -------------------------------------------------------------------------------- what persisted */ + +async function serverRow(id: string) { + const [row] = await database + .select() + .from(mcpServers) + .where(eq(mcpServers.id, id)); + return row ?? null; +} + +async function toolRows(serverId: string) { + return ( + await database + .select({ + name: mcpTools.name, + /* Both spellings, because the split between them is the thing under test: `name` is what a + grant and an offered tool name are built from, `vendorName` what Arcade is called by. */ + vendorName: mcpTools.vendorName, + effect: mcpTools.effect, + destructive: mcpTools.destructive, + }) + .from(mcpTools) + .where(eq(mcpTools.serverId, serverId)) + ).sort((left, right) => (left.name < right.name ? -1 : 1)); +} + +async function connectionsOf(app: string) { + return await database + .select() + .from(brokeredConnections) + .where(eq(brokeredConnections.app, app)); +} + +/** + * The trail for one app and one event type, OLDEST FIRST — and the order is asked for rather than + * inherited. + * + * `.at(-1)` below means "the disconnect this test just caused", which a `SELECT` with no `ORDER BY` + * does not answer: PostgreSQL may return the rows of an unordered read in any order it likes, and + * what it actually returns is roughly heap order. Insertion order and time order agree on a table + * only ever appended to by one test, which is why this read passed locally and failed on CI — there + * the last row back was the PERSONAL disconnect from the describe above, so a Shared app's audit + * entry was read as a person ending their own account, and the assertion reported a defect in the + * product that the product had not committed. + * + * `createdAt` is the only key that can carry this: `id` is a random UUID, so it sorts arbitrarily. + * The disconnects it separates arrive on their own requests and so in their own transactions, which + * is what makes their `now()` values distinct. + */ +async function eventsOn(app: string, eventType: string) { + return await database + .select() + .from(auditEvents) + .where( + and(eq(auditEvents.targetId, app), eq(auditEvents.eventType, eventType)), + ) + .orderBy(auditEvents.createdAt); +} + +async function attemptRow() { + const [row] = await database + .select() + .from(pendingAuthorizations) + .where(eq(pendingAuthorizations.actorId, ADMIN)); + return row ?? null; +} + +/** + * One whole consent: mint through the product, come back through the verifier. + * + * THE TWO HALVES ARE ONE OBJECT BECAUSE THE ATTEMPT KEY IS ONE ROW. `pending_authorizations` is + * keyed on the actor, so a second mint by the same person while the first is live is answered 409 + * and NOTHING GOES OUT — a return leg driven from a fresh `consent()` call would be verifying the + * EARLIER mint while reading as though it had just made one. So a mint is handed back with its own + * return leg attached, and the suite completes the mint it actually made. + */ +async function consent(serverRowId: string, actionName: string) { + const minting = await send("POST", `/servers/${serverRowId}/authorize`, { + action: actionName, + }); + const body = (await minting.json()) as { authorizationUrl?: string }; + return { + minting, + authorizationUrl: body.authorizationUrl, + returning: () => + api(`/arcade/verify?flow_id=flow-${encodeURIComponent(actionName)}`), + }; +} + +beforeAll(async () => { + // The administrator walking this journey is a real `users` row, because the attempt rows minted + // along the way key to one on `actor_id` (with `user_id` held equal to it) and cascade from it. + await seedPeople(database, [ADMIN]); + installVendor(); + const client = createArcadeClient("never-dialled"); + broker = client.broker; + useArcadeClient(client.actions); + await database.insert(agents).values({ + id: BOT, + name: "Helper", + type: "built_in", + configuration: {}, + }); +}); + +afterAll(async () => { + useArcadeClient(null); + while (restores.length) restores.pop()?.(); + await database + .delete(pendingAuthorizations) + .where(eq(pendingAuthorizations.actorId, ADMIN)); + await database + .delete(brokeredConnections) + .where(inArray(brokeredConnections.app, [MAIL, DIARY])); + await database + .delete(mcpServers) + .where(inArray(mcpServers.id, [MAIL_ROW, DIARY_ROW])); + await database.delete(agents).where(eq(agents.id, BOT)); + await removePeople(database, [ADMIN]); + await database.$client.close(); +}); + +describe("an Arcade deployment, from the picker to the disconnect", () => { + /** The personal leg's one mint, completed by the verifier test below. See {@link consent}. */ + let personal: Awaited> | null = null; + + test("the catalogue an administrator chooses from is Arcade's own", async () => { + const response = await api("/composio/apps"); + expect(response.status).toBe(200); + const { apps } = (await response.json()) as { + apps: Record[]; + }; + const mail = apps.find((app) => app.slug === MAIL); + const diary = apps.find((app) => app.slug === DIARY); + + /* + * COUNTED ACROSS THE FULL LISTING, and the toolkit names come back exactly as published. The + * four counts are four different numbers here on purpose: `DraftEmail` is annotated by nobody + * and asks for no scopes, so a count derived from any of the others is wrong about one of them. + */ + expect(mail).toMatchObject({ + slug: MAIL, + name: MAIL, + actionCount: 4, + classifiedCount: 3, + scopedActionCount: 3, + permissionCount: 3, + enabled: false, + }); + expect(diary).toMatchObject({ + slug: DIARY, + actionCount: 2, + classifiedCount: 2, + enabled: false, + }); + }); + + test("enabling an app writes an arcade row whose url keeps the vendor's case", async () => { + /* + * THE LOWERCASED TOOLKIT IS NOT AN APP ARCADE LISTS, and enabling it would write a second row + * at `arcade://gmail-…` that every later call resolves against and that reaches nothing. The + * directory is what the slug is checked against rather than a pattern, so this is that check + * read through the one listing both halves of the picker share. + */ + const folded = await send("POST", "/composio/apps", { + slug: MAIL.toLowerCase(), + }); + expect(folded.status).toBe(400); + expect(await serverRow(`arcade-${MAIL.toLowerCase()}`)).toBeNull(); + + for (const toolkit of [MAIL, DIARY]) { + const response = await send("POST", "/composio/apps", { slug: toolkit }); + expect([response.status, toolkit]).toEqual([201, toolkit]); + } + + for (const [toolkit, rowId] of [ + [MAIL, MAIL_ROW], + [DIARY, DIARY_ROW], + ]) { + const row = await serverRow(rowId); + expect(row).toMatchObject({ + id: rowId, + // THE BROKER, spelled as the column spells it — never derived at the call site. + provenance: "arcade", + vendor: "Arcade", + url: `arcade://${toolkit}`, + accountMode: "personal", + }); + // CASE INTACT. `GoogleCalendar-…` lowercased reaches nothing at Arcade, and this is the one + // place the name crosses from the vendor's catalogue into a column. + expect(row?.url).not.toBe(row?.url.toLowerCase()); + expect(row?.authScheme).not.toBeNull(); + } + + // And the picker now says so, through the same parser the transport dials with. + const { apps } = (await (await api("/composio/apps")).json()) as { + apps: { slug: string; enabled: boolean }[]; + }; + expect( + apps + .filter((app) => [MAIL, DIARY].includes(app.slug)) + .map((app) => app.enabled), + ).toEqual([true, true]); + }); + + test("discovery records the effect and the destructive flag the vendor published", async () => { + for (const rowId of [MAIL_ROW, DIARY_ROW]) { + const response = await send("POST", `/servers/${rowId}/refresh`, {}); + expect([response.status, rowId]).toEqual([200, rowId]); + } + + /* + * TWICE, because an administrator presses Refresh twice and the second press must replace what + * the first recorded rather than add to it: a duplicated `mcp_tools` row is an action a model is + * offered twice and a grant that names two rows. + */ + const again = await send("POST", `/servers/${MAIL_ROW}/refresh`, {}); + expect(again.status).toBe(200); + + expect(await toolRows(MAIL_ROW)).toEqual([ + // NOTHING SAID, SO IT FAILS CLOSED: an unannotated action is approved like a deletion. + { + name: "DraftEmail", + vendorName: `${MAIL}.DraftEmail`, + effect: "write", + destructive: true, + }, + { + name: "ListEmails", + vendorName: `${MAIL}.ListEmails`, + effect: "read", + destructive: false, + }, + { + name: "SendEmail", + vendorName: `${MAIL}.SendEmail`, + effect: "write", + destructive: false, + }, + { + name: "TrashEmail", + vendorName: `${MAIL}.TrashEmail`, + effect: "write", + destructive: true, + }, + ]); + expect(await toolRows(DIARY_ROW)).toEqual([ + { + name: "DeleteEvent", + vendorName: `${DIARY}.DeleteEvent`, + effect: "write", + destructive: true, + }, + { + name: "ListEvents", + vendorName: `${DIARY}.ListEvents`, + effect: "read", + destructive: false, + }, + ]); + }); + + test("the connected-accounts index answers, and claims no account nobody made", async () => { + const response = await api("/connections"); + expect(response.status).toBe(200); + const { connections } = (await response.json()) as { + connections: { serverId: string }[]; + }; + expect( + connections.filter((row) => [MAIL_ROW, DIARY_ROW].includes(row.serverId)), + ).toEqual([]); + }); + + test("the account page says what is held before a consent, and reads no met flag to say it", async () => { + const { actions } = (await ( + await api(`/servers/${MAIL_ROW}/grants`) + ).json()) as { actions: { action: string; state: string }[] }; + + /* + * NOTHING IS HELD, AND `requirements.met` IS TRUE FOR EVERY ONE OF THESE ACTIONS. The two sit + * in the same object and behave oppositely, and this is the assertion that tells them apart: a + * read of `met` answers `authorized` for all four before anybody has consented to anything, + * and the only visible consequence would be a page offering to call somebody else's mailbox. + */ + expect(actions.map((entry) => [entry.action, entry.state]).sort()).toEqual([ + [`${MAIL}.DraftEmail`, "needs-consent"], + [`${MAIL}.ListEmails`, "needs-consent"], + [`${MAIL}.SendEmail`, "needs-consent"], + [`${MAIL}.TrashEmail`, "needs-consent"], + ]); + }); + + test("authorizing one action claims an attempt holding the RESOLVED identity", async () => { + /* + * THE SAME ACTION IN LOWER CASE IS NOT AN ACTION THIS APP PUBLISHES, and that is the discovery + * above read back through the authorize route's own `===`. It is checked BEFORE the real mint + * so that nothing has been claimed: a route that folded case here would mint a consent for an + * action name that reaches nothing at Arcade, and the 400 is what says the stored names kept + * their capitals all the way from the catalogue. + */ + const folded = await send("POST", `/servers/${MAIL_ROW}/authorize`, { + action: SEND.toLowerCase(), + }); + expect(folded.status).toBe(400); + // NOTHING WENT OUT AND NOTHING WAS CLAIMED, which is what makes the mint below the first one. + expect(authorizeCalls).toEqual([]); + expect(await attemptRow()).toBeNull(); + + personal = await consent(MAIL_ROW, SEND); + const { minting, authorizationUrl } = personal; + expect(minting.status).toBe(200); + expect(authorizationUrl).toBe( + "https://vendor.example/consent/ar_1?secret=bearer-capability", + ); + + /* + * WHAT WENT OUT, AND NOTHING ELSE WENT WITH IT. `next_uri` is declared by the SDK and refused by + * the API for every value, so the mint carries exactly two fields. + */ + expect(authorizeCalls).toEqual([{ tool_name: SEND, user_id: ADMIN }]); + + const attempt = await attemptRow(); + expect(attempt).toMatchObject({ + serverId: MAIL_ROW, + action: SEND, + holder: "person", + userId: ADMIN, + vendorUserId: ADMIN, + authId: "ar_1", + completedAt: null, + outcome: null, + }); + }); + + test("the verifier writes one arcade connection and one audit entry naming the action and the scopes", async () => { + // THE RETURN LEG OF THE MINT THE TEST ABOVE MADE, and of no other: see {@link consent}. + const response = await personal?.returning(); + expect(response?.status).toBe(303); + // STILL ONE MINT. A second one here would mean the return leg was verifying somebody else's. + expect(authorizeCalls).toEqual([{ tool_name: SEND, user_id: ADMIN }]); + expect(response?.headers.get("location")).toBe( + `${APP_URL}/settings/connected-accounts/${MAIL_ROW}?action=${encodeURIComponent(SEND)}`, + ); + + const connections = await connectionsOf(MAIL); + expect(connections.length).toBe(1); + expect(connections[0]).toMatchObject({ + provider: "arcade", + app: MAIL, + holder: "person", + userId: ADMIN, + vendorUserId: ADMIN, + verified: true, + }); + + const events = await eventsOn(MAIL, "mcp.account_connected"); + expect(events.length).toBe(1); + expect(events[0]?.payload).toMatchObject({ + action: SEND, + scope: "https://www.googleapis.com/auth/gmail.send", + // THE BROKER'S ANSWER, read off the listing and never derived from `Gmail-…`. + authProvider: AUTH_PROVIDER, + }); + // NOTHING FROM THE STATUS REPLY TRAVELS. It carries a live provider access token. + expect(JSON.stringify(events[0]?.payload)).not.toContain(LIVE_TOKEN); + expect(JSON.stringify(events[0]?.payload)).not.toContain("vendor.example"); + + expect(await attemptRow()).toMatchObject({ outcome: "completed" }); + + /* + * AND THE INDEX NOW DRAWS IT, as the row the completion wrote rather than merely as an id: + * `verified` is what the consent earned and `probe` is what nothing was spent on, and a page + * reading one as the other is the pair `brokeredConnectionsFor` exists to keep apart. + */ + const { connections: listed } = (await ( + await api("/connections") + ).json()) as { + connections: { serverId: string; holder: string; verified: boolean }[]; + }; + expect( + listed.filter((row) => [MAIL_ROW, DIARY_ROW].includes(row.serverId)), + ).toMatchObject([{ serverId: MAIL_ROW, holder: "person", verified: true }]); + + // AND THE ACCOUNT PAGE NOW READS THE CONSENT BACK OFF THE VENDOR, under this identity. + const { actions } = (await ( + await api(`/servers/${MAIL_ROW}/grants`) + ).json()) as { actions: { action: string; state: string }[] }; + expect(new Set(actions.map((entry) => entry.state))).toEqual( + new Set(["authorized"]), + ); + }); + + test("a call goes out as the identity this deployment resolved", async () => { + await database.insert(pluginGrants).values({ + kind: "mcp", + ref: `${MAIL_ROW}/${SEND}`, + agentId: BOT, + grantedBy: ADMIN, + }); + + const response = await send("POST", "/call", { + ref: `${MAIL_ROW}/${SEND}`, + agentId: BOT, + args: { q: "hello" }, + }); + expect(response.status).toBe(200); + expect(await response.json()).toMatchObject({ isError: false }); + + expect(executeCalls).toEqual([ + { tool_name: SEND, input: { q: "hello" }, user_id: ADMIN }, + ]); + }); + + test("a second app on the same identity is its own connection", async () => { + const response = await (await consent(DIARY_ROW, DELETE_EVENT)).returning(); + expect(response.status).toBe(303); + + const diary = await connectionsOf(DIARY); + expect(diary.length).toBe(1); + expect(diary[0]).toMatchObject({ + provider: "arcade", + holder: "person", + vendorUserId: ADMIN, + }); + // One identity, one auth provider: the vendor holds ONE connection serving both apps. + expect(vendorConnections.map((row) => row.user_id)).toEqual([ADMIN]); + }); + + test("disconnecting ends every app that revocation ends, and says so on the trail", async () => { + // The warning an administrator is shown before the press, from the store and never derived here. + const preview = await api(`/servers/${MAIL_ROW}/connection/siblings`); + expect(await preview.json()).toEqual({ siblings: [DIARY], unanswered: 0 }); + + const response = await api(`/servers/${MAIL_ROW}/connection`, { + method: "DELETE", + }); + expect(response.status).toBe(200); + expect(await response.json()).toEqual({ vendorRevocationRequested: true }); + + // EVERY LOCAL ROW ENDED. A row left for the diary would claim an account the vendor no longer + // holds, which is the other way to lie. + expect(await connectionsOf(MAIL)).toEqual([]); + expect(await connectionsOf(DIARY)).toEqual([]); + expect(vendorConnections).toEqual([]); + // THE `ac_…` connection_id, never the `at_…` id the listing prints first. + expect(deleted).toEqual(["ac_1"]); + + const mailEvents = await eventsOn(MAIL, "mcp.account_disconnected"); + const diaryEvents = await eventsOn(DIARY, "mcp.account_disconnected"); + expect(mailEvents.length).toBe(1); + expect(diaryEvents.length).toBe(1); + expect(mailEvents[0]?.payload).toMatchObject({ + server: MAIL, + owner: ADMIN, + reason: "self", + vendorRevocationRequested: true, + unansweredSiblings: 0, + }); + // The sibling's row names the app whose disconnect ended it. + expect(diaryEvents[0]?.payload).toMatchObject({ + server: DIARY, + endedWith: MAIL, + }); + + // AND THE INDEX CLAIMS NEITHER OF THEM ANY MORE, which is where somebody would otherwise be + // shown a Connected row over an account Arcade no longer holds. + const { connections } = (await (await api("/connections")).json()) as { + connections: { serverId: string }[]; + }; + expect( + connections.filter((row) => [MAIL_ROW, DIARY_ROW].includes(row.serverId)), + ).toEqual([]); + }); +}); + +/** + * THE MERGE GATE. + * + * Two apps, both Shared, both under ONE auth provider at the vendor. The only thing keeping their + * accounts apart is that each app holds its OWN minted identity, and the test of that is the + * product: what the mint was sent, what the rows say, what the sibling preview answers, and what + * survives a disconnect. + */ +describe("two separately-shared apps", () => { + let mailIdentity = ""; + let diaryIdentity = ""; + + test("each gets its own deployment identity when it is switched to Shared", async () => { + for (const rowId of [MAIL_ROW, DIARY_ROW]) { + const response = await send("PUT", `/servers/${rowId}/account-mode`, { + mode: "shared", + confirm: true, + }); + expect([response.status, rowId]).toEqual([200, rowId]); + expect(await response.json()).toMatchObject({ changed: true }); + } + + mailIdentity = (await serverRow(MAIL_ROW))?.sharedVendorUserId ?? ""; + diaryIdentity = (await serverRow(DIARY_ROW))?.sharedVendorUserId ?? ""; + + expect(mailIdentity).toStartWith(`openbot-deployment:acme-${suite}:`); + expect(diaryIdentity).toStartWith(`openbot-deployment:acme-${suite}:`); + // SEPARATE. A shared identity here is the defect this whole describe exists to catch. + expect(mailIdentity).not.toBe(diaryIdentity); + + // And the index draws a Shared app whether or not anything is connected to it yet. + const { connections } = (await (await api("/connections")).json()) as { + connections: { serverId: string; holder: string; connected: boolean }[]; + }; + expect( + connections.filter((row) => [MAIL_ROW, DIARY_ROW].includes(row.serverId)), + ).toMatchObject([ + { serverId: MAIL_ROW, holder: "deployment", connected: false }, + { serverId: DIARY_ROW, holder: "deployment", connected: false }, + ]); + }); + + test("each app's consent is minted and recorded under its own identity", async () => { + authorizeCalls = []; + + for (const [rowId, actionName, identity, app] of [ + [MAIL_ROW, SEND, mailIdentity, MAIL], + [DIARY_ROW, DELETE_EVENT, diaryIdentity, DIARY], + ] as const) { + const minting = await consent(rowId, actionName); + expect(minting.minting.status).toBe(200); + + const attempt = await attemptRow(); + expect(attempt).toMatchObject({ + serverId: rowId, + action: actionName, + holder: "deployment", + userId: null, + vendorUserId: identity, + }); + + const response = await minting.returning(); + expect(response.status).toBe(303); + /* + * AND IT LANDS WHERE THE ACTION IS READ, which for a deployment-held account is the same + * settings page a personal one lands on. It used to go to `/admin/plugins/:key`, the screen + * the Authorize was pressed from — but that route reads no `?action=` and draws no grant + * list, so the Shared-app flow ended on a page that said nothing about the consent just + * given. + */ + expect(response.headers.get("location")).toBe( + `${APP_URL}/settings/connected-accounts/${rowId}?action=${encodeURIComponent(actionName)}`, + ); + + const connections = await connectionsOf(app); + expect(connections.length).toBe(1); + expect(connections[0]).toMatchObject({ + provider: "arcade", + holder: "deployment", + userId: null, + vendorUserId: identity, + verified: true, + }); + } + + // WHAT THE VENDOR WAS SENT, per app, which is where a shared identity would show first. + expect(authorizeCalls).toEqual([ + { tool_name: SEND, user_id: mailIdentity }, + { tool_name: DELETE_EVENT, user_id: diaryIdentity }, + ]); + // TWO CONNECTIONS AT THE VENDOR under ONE auth provider, kept apart by identity alone. + expect(vendorConnections.map((row) => row.user_id)).toEqual([ + mailIdentity, + diaryIdentity, + ]); + expect(new Set(vendorConnections.map((row) => row.provider_id)).size).toBe( + 1, + ); + + /* + * AND THE INDEX DRAWS EACH APP'S OWN ACCOUNT, which is the merge gate at the one place it is + * VISIBLE. Both rows stand at once, under one auth provider at the vendor, so the name beside + * each is read through `accountName` for THAT app's identity — an account-name lookup that + * asked by provider alone would answer both rows with the first identity's account, and + * somebody would be shown the wrong team mailbox on a page offering to disconnect it. + */ + const { connections } = (await (await api("/connections")).json()) as { + connections: { + serverId: string; + holder: string; + connected: boolean; + verified: boolean; + displayName: string | null; + }[]; + }; + expect( + connections.filter((row) => [MAIL_ROW, DIARY_ROW].includes(row.serverId)), + ).toMatchObject([ + { + serverId: MAIL_ROW, + holder: "deployment", + connected: true, + verified: true, + displayName: "Account 1", + }, + { + serverId: DIARY_ROW, + holder: "deployment", + connected: true, + verified: true, + displayName: "Account 2", + }, + ]); + }); + + test("ending one leaves the other standing, and nothing says otherwise", async () => { + // NOT SIBLINGS, though they share an auth provider: the identities differ. + const preview = await api(`/servers/${MAIL_ROW}/connection/siblings`); + expect(await preview.json()).toEqual({ siblings: [], unanswered: 0 }); + + const before = (await eventsOn(DIARY, "mcp.account_disconnected")).length; + + const response = await api(`/servers/${MAIL_ROW}/connection`, { + method: "DELETE", + }); + expect(response.status).toBe(200); + + expect(await connectionsOf(MAIL)).toEqual([]); + const diary = await connectionsOf(DIARY); + expect(diary.length).toBe(1); + expect(diary[0]).toMatchObject({ vendorUserId: diaryIdentity }); + expect(vendorConnections.map((row) => row.user_id)).toEqual([ + diaryIdentity, + ]); + + // The diary was not disconnected, so nothing on the trail says it was. + expect((await eventsOn(DIARY, "mcp.account_disconnected")).length).toBe( + before, + ); + const mailEvents = await eventsOn(MAIL, "mcp.account_disconnected"); + expect(mailEvents.length).toBe(2); + expect(mailEvents.at(-1)?.payload).toMatchObject({ + server: MAIL, + owner: "deployment", + reason: "admin", + unansweredSiblings: 0, + }); + }); +}); diff --git a/server/tests/arcade-listing.test.ts b/server/tests/arcade-listing.test.ts new file mode 100644 index 000000000..44f402772 --- /dev/null +++ b/server/tests/arcade-listing.test.ts @@ -0,0 +1,141 @@ +import { afterEach, describe, expect, test } from "bun:test"; +import fixture from "./fixtures/arcade-catalogue.json"; +import { listTools, useArcadeClient } from "../src/plugins/arcade"; + +afterEach(() => useArcadeClient(null)); + +type Query = { toolkit: string; limit: number; offset: number }; + +function pagesOf(total: number) { + return async ({ offset, limit }: { offset: number; limit: number }) => { + const items = Array.from( + { length: Math.max(0, Math.min(limit, total - offset)) }, + (_, i) => ({ + qualified_name: `GithubApi.Tool${offset + i}`, + description: "", + input: { parameters: [] }, + }), + ); + return { items }; // NO total_count + }; +} + +/** Records every query the client was sent, so assertions are on what went OUT. */ +function recording(answer: (q: Query) => Promise<{ items: unknown[] }>) { + const sent: Record[] = []; + useArcadeClient({ + listTools: async (q) => { + sent.push({ ...q }); + return answer(q); + }, + execute: async () => { + throw new Error("listing must not execute anything"); + }, + }); + return sent; +} + +describe("listTools scopes", () => { + /* + * `requirements.authorization.oauth2.scopes` is READ. `requirements.met` is NEVER read. They sit in + * the same object and behave oppositely: `met` is a per-person claim that answers true for + * everybody when asked without a `user_id`; `scopes` is a static property of the action. + * Every tool below says `met: true`, and nothing about the answer may carry it. + */ + test("reads oauth2.scopes and never requirements.met", async () => { + const behavior = { read_only: true, destructive: false }; + recording(async () => ({ + items: [ + { + qualified_name: "Gmail.ArchiveEmail", + description: "Archive", + input: { parameters: [] }, + requirements: { + met: true, + authorization: { + status: "active", + oauth2: { + scopes: ["https://www.googleapis.com/auth/gmail.modify"], + }, + }, + }, + metadata: { behavior }, + }, + { + qualified_name: "Gmail.Plain", + description: "", + input: { parameters: [] }, + requirements: { met: true }, + metadata: { behavior }, + }, + ], + })); + const tools = await listTools({ url: "arcade://Mixed" }); + expect(tools[0].scopes).toEqual([ + "https://www.googleapis.com/auth/gmail.modify", + ]); + expect(tools[1].scopes).toEqual([]); + expect(JSON.stringify(tools)).not.toContain('"met"'); + }); +}); + +describe("listTools against the captured catalogue", () => { + /* + * The captured fixture carries TWO tools with `requirements.met: true` (Asana.AttachFileToTask and + * Attio.RemoveFromList), so the "no met" assertion here is strictly stronger than the one the + * hand-built tools above give it. + */ + test("keeps scopes intact, reads an unscoped oauth2 as none, and never carries met", async () => { + const entries = Object.values( + (fixture as { tools: Record }).tools, + ); + recording(async () => ({ items: entries })); + const tools = await listTools({ url: "arcade://Captured" }); + const byName = (n: string) => tools.find((t) => t.name === n); + + expect(byName("Attio.RemoveFromList")?.scopes).toEqual([ + "call_recording:read", + "list_configuration:read-write", + "list_entry:read-write", + "meeting:read", + "note:read-write", + "object_configuration:read-write", + "record_permission:read-write", + "task:read-write", + "user_management:read", + ]); + expect(byName("AirtableApi.ListBases")?.scopes).toEqual([]); + expect(JSON.stringify(tools)).not.toContain('"met"'); + }); +}); + +describe("listTools pagination", () => { + test("stops on a short page, with no total_count", async () => { + const sent = recording(async (q) => pagesOf(250)(q)); + const tools = await listTools({ url: "arcade://GithubApi" }); + expect(tools).toHaveLength(250); + expect(new Set(tools.map((t) => t.name)).size).toBe(250); + expect(sent.map((q) => q.offset)).toEqual([0, 100, 200]); + }); +}); + +describe("listTools identity", () => { + test("no request carried a user_id", async () => { + const sent = recording(async (q) => pagesOf(250)(q)); + await listTools({ url: "arcade://GithubApi" }); + expect(sent.length).toBeGreaterThan(0); + for (const q of sent) { + expect("user_id" in q).toBe(false); + expect(q.toolkit).toBe("GithubApi"); + } + }); +}); + +describe("listTools runaway guard", () => { + test("a vendor that ignores offset and always returns full pages throws", async () => { + recording(async () => pagesOf(100)({ offset: 0, limit: 100 })); + await expect(listTools({ url: "arcade://Runaway" })).rejects.toThrow( + /never ended/, + ); + }); +}); diff --git a/server/tests/arcade-live.test.ts b/server/tests/arcade-live.test.ts new file mode 100644 index 000000000..15d0978b7 --- /dev/null +++ b/server/tests/arcade-live.test.ts @@ -0,0 +1,757 @@ +import { afterAll, describe, expect, test } from "bun:test"; +import Arcade, { APIError } from "@arcadeai/arcadejs"; +import { classify } from "../src/plugins/arcade"; +import { + createArcadeClient, + normalizeArcadeError, +} from "../src/plugins/arcade-adapter"; +import { mintDeploymentVendorUserId } from "../src/plugins/shared-accounts"; + +/** + * The real Arcade, so the shapes this transport is written against are the shapes it gets. + * + * WRITTEN BLIND, AND SINCE RUN ONCE. Nothing in this branch had contacted Arcade when this file was + * authored; one live run has happened since. It came back 9 passed / 3 failed, and not one was the + * vendor's: `next_uri` died on bun's 5000ms default without measuring anything, GATE 4 asserted the + * wrong spelling of `provider_id` (which is also how it hid a real product defect in the connection + * filter, fixed separately), and GATE 2 asserted an assumption the wire does not support. All three + * are corrected here: the gates now say what was measured, every dialling case carries an explicit + * timeout, and each comment records the verbatim observation rather than the expectation it + * replaced. A live run remains a separate, human-authorised step. + * + * WHY THIS EXISTS AT ALL. A stub asserts what its author believed; this asserts what the vendor does. + * `composio-live.test.ts` is the pattern, and its argument carries over whole. + * + * WRITTEN AGAINST THE VENDOR'S TYPES, WITH NO `as never`. `server/tsconfig.json` does not include + * `tests`, so nothing in the build type-checks this file, and a cast here would erase the only place + * the real `@arcadeai/arcadejs` surface is named. Every call is typed by the SDK itself; where a + * value is narrowed it is narrowed by a runtime check that says what was missing, never by a cast + * asserting it was there. + * + * SKIPPED WITHOUT A KEY. Run it deliberately, through the package script, which refuses to exit 0 + * when the key is empty (a skipped suite would otherwise look like a passed one): + * + * ARCADE_API_KEY=... bun run test:live-arcade + * + * WHAT YOU MUST SET UP FIRST (the consent cases need a person and a browser) + * - The Arcade project's CUSTOM USER VERIFIER URL must point at this machine: + * `http://localhost:${ARCADE_LIVE_VERIFIER_PORT:-8765}/`. The suite listens there, as the stand-in + * for the product's own verifier route, and reads what Arcade sends it. Restore the setting after. + * - You will be shown ONE authorization URL on stderr and must open it and consent. It is a bearer + * capability for a throwaway user id; it is printed to you, the caller, and goes nowhere else. + * - Optional: ARCADE_LIVE_TOOLKIT (default `Github`; the toolkit whose blast radius is measured and + * whose action is consented to), ARCADE_LIVE_ACTION (the qualified action to mint for; default the + * first listed read-only action), ARCADE_LIVE_CONSENT_TIMEOUT_S (default 300). + * + * WHAT THIS CREATES AND MUTATES IN THE ARCADE PROJECT THE KEY BELONGS TO (this is PRODUCTION if the + * key is) + * - ONE authorization attempt (`ar_...`) per successful mint, for ONE throwaway user id of the shape + * `openbot-deployment:live-arcade:`. Several mints are attempted: the `next_uri` cases are + * expected to be refused, and if one is ever accepted it creates an attempt too. + * - ONE completed CONSENT by YOU, at the third party (Github by default), and so ONE user-connection + * (`ac_...`) under that throwaway user id in Arcade. It is the only durable write. + * - Everything else is a read: tool listings, user-connection listings, `auth.status`. + * - A deliberate wrong-user `confirm_user` (the `user_mismatch` case); it is expected to be refused. + * + * WHAT IT DELETES AFTERWARDS: every user-connection for that one throwaway user id, in the delete case + * and again in `afterAll` if an earlier case failed first. It never lists or deletes anyone else's. + * + * WHAT IT CANNOT CLEAN UP, and you must: + * - The grant at the third party. Deleting an Arcade connection does not necessarily revoke your + * consent there; remove the OAuth app authorization from the provider's own settings page. + * - The `ar_...` attempt records. The SDK has no call to delete one; they expire on their own. + * - If the run is killed before `afterAll`, the connection survives. Its user id is printed first so + * it can be found and deleted in the Arcade dashboard. + * + * NEVER PRINTED: anything from an `auth.status` response beyond `status`, `user_id` and `scopes`. The + * response carries `context.token`, a live provider access token, and the person's profile. This file + * reads three fields out of it and drops the object, as the adapter does. + * + * NEVER NORMALIZED: toolkit and action names keep Arcade's own case throughout. + * + * THE FOUR MERGE-GATE QUESTIONS are named cases, `GATE 1` to `GATE 4`. Each prints one line starting + * `GATE n` and says in a comment what each outcome means. A human reads those lines. + * + * THREE FENCED FACTS THAT LOOK LIKE BUGS AND ARE MEASUREMENTS; this suite proves them, never "fixes" + * them: (1) `next_uri` is never sent to `tools.authorize`; (2) `admin.userConnections.delete` takes + * `connection_id` (`ac_...`), not the `id` (`at_...`) listed first; (3) `listTools` reads + * `requirements.authorization.oauth2.scopes`, never `requirements.met`. + */ +const key = process.env.ARCADE_API_KEY?.trim(); +const live = process.env.OPENBOT_LIVE_ARCADE === "1" && Boolean(key); + +const PORT = Number(process.env.ARCADE_LIVE_VERIFIER_PORT ?? "8765"); +const TOOLKIT = process.env.ARCADE_LIVE_TOOLKIT?.trim() || "Github"; +const CONSENT_TIMEOUT_S = Number( + process.env.ARCADE_LIVE_CONSENT_TIMEOUT_S ?? "300", +); + +/** + * EVERY CASE THAT DIALS ARCADE CARRIES AN EXPLICIT TIMEOUT, because bun's per-test default is 5000ms + * and a vendor round-trip is nothing like a unit test's. This is measured, not defensive: the first + * live run of this file failed `next_uri is refused for every value` on duration alone — + * `[5001.03ms] ^ this test timed out after 5000ms` — five sequential refusals against a 5s budget, + * so the case measured nothing it was written to measure. The consent case already carried its own + * (it waits through a 300s consent); every other dialling case now does too, to the same pattern: a + * trailing argument to `test`, and a trailing `options` argument to `afterAll`. + * + * Generous rather than tuned. A timeout here is a runaway guard, not a performance assertion — a + * slow but correct vendor must not be reported as a wrong one. + */ +const VENDOR_TIMEOUT_MS = 60_000; + +/** `auth.status` is POLLED, so its bound is the poll's own, not one round-trip's. */ +const STATUS_POLLS = 6; +const STATUS_POLL_INTERVAL_MS = 2_000; +const STATUS_TIMEOUT_MS = STATUS_POLLS * (STATUS_POLL_INTERVAL_MS + 10_000); + +/** The Google family: two toolkits that, on Arcade, are expected to share one auth provider. */ +const GOOGLE_TOOLKITS = ["Gmail", "GoogleCalendar"]; + +/** One throwaway person, so nothing here can touch an account that belongs to somebody. */ +const USER = mintDeploymentVendorUserId("live-arcade"); +const ACCOUNT = { holder: "deployment" as const, vendorUserId: USER }; +/** A user id that is not the attempt's, for the `user_mismatch` case. */ +const OTHER_USER = mintDeploymentVendorUserId("live-arcade-other"); + +const say = (line: string) => process.stdout.write(`${line}\n`); + +/** Constructed lazily: Bun evaluates a skipped describe's body, and the constructor throws keyless. */ +const arcade = () => new Arcade({ apiKey: key }); + +/** A precondition that was not met is stated, not asserted into existence. */ +function need(value: T | null | undefined, what: string): T { + if (value === null || value === undefined || value === "") { + throw new Error( + `Precondition not met: ${what}. Nothing after this point was exercised.`, + ); + } + return value; +} + +/** Every item of a toolkit's listing, for one user, paged by the SDK. */ +async function listToolkit(client: Arcade, toolkit: string, userId?: string) { + const items: Arcade.ToolDefinition[] = []; + for await (const item of client.tools.list({ + toolkit, + user_id: userId, + limit: 100, + })) { + items.push(item); + } + return items; +} + +/** `met` ACROSS A WHOLE TOOLKIT: what was granted, as against what was asked for. */ +const metCount = (items: Arcade.ToolDefinition[]) => + items.filter((item) => item.requirements?.met === true).length; + +const providersOf = (items: Arcade.ToolDefinition[]) => [ + ...new Set( + items + .map((item) => item.requirements?.authorization?.provider_id) + .filter((p): p is string => typeof p === "string"), + ), +]; + +/** The one failure an SDK call is allowed to be expected to throw. */ +async function failureOf(call: () => Promise): Promise { + let thrown: unknown; + try { + await call(); + } catch (error) { + thrown = error; + } + if (thrown === undefined) { + throw new Error( + "The call was expected to be refused and it succeeded. Whatever it created now exists in the project.", + ); + } + if (!(thrown instanceof APIError)) { + throw new Error( + `The call failed, but not with an SDK APIError (${thrown instanceof Error ? thrown.name : typeof thrown}), so no wire answer was read.`, + ); + } + return thrown; +} + +/** The state the consent sequence hands from one case to the next. */ +const run: { + action?: string; + baselineMet?: number; + total?: number; + authorizationId?: string; + url?: string; + callbackKeys?: string[]; + flowId?: string; + connectionId?: string; + rowId?: string; + grantedScopes?: string[]; +} = {}; + +describe.skipIf(!live)("Arcade, for real", () => { + afterAll(async () => { + if (!live) return; + // Best effort, and only ever this run's own user id. + const client = arcade(); + for await (const row of client.admin.userConnections.list({ + user_id: USER, + })) { + if (row.connection_id) { + await client.admin.userConnections + .delete(row.connection_id) + .catch(() => {}); + } + } + }, VENDOR_TIMEOUT_MS); + + test("the throwaway user id is printed before anything is created", () => { + say(`ARCADE LIVE user id for this run: ${USER}`); + say( + `ARCADE LIVE toolkit measured: ${TOOLKIT}; verifier listens on :${PORT}`, + ); + expect(Number.isInteger(PORT)).toBe(true); + }); + + /** + * GATE 1 — WHAT `provider_id` ACTUALLY MEANS ON A GOOGLE-FAMILY TOOLKIT. + * + * Pure read; nothing created. Prints, for `Gmail` and `GoogleCalendar`, the distinct provider ids + * their listings name. + * - ONE shared id, DIFFERENT from both toolkit names (e.g. `google`): `provider_id` is an + * auth-provider configuration. D26's sibling set is non-empty in production: revoking Gmail also + * removes the Calendar connection. + * - Each toolkit names a provider EQUAL to its own name: `provider_id` is effectively the toolkit. + * The sibling set is empty in production. + * The design is safe under both readings (it reads the field, never derives it); the outcome only + * decides whether D26's sibling code is ever exercised. No offline fixture names a toolkit's + * provider differently from the toolkit, which is why only this can tell. + */ + test( + "GATE 1: what provider_id means on Gmail and GoogleCalendar", + async () => { + const client = arcade(); + const seen: Record = {}; + for (const toolkit of GOOGLE_TOOLKITS) { + const items = await listToolkit(client, toolkit); + need( + items.length > 0 ? items : null, + `Arcade listed no ${toolkit} action, so its provider could not be read`, + ); + seen[toolkit] = providersOf(items); + } + const all = new Set(Object.values(seen).flat()); + const sharedAndDistinct = + all.size === 1 && !GOOGLE_TOOLKITS.some((name) => all.has(name)); + const equalToToolkit = GOOGLE_TOOLKITS.every((name) => + seen[name]?.every((p) => p === name), + ); + say( + `GATE 1 provider ids by toolkit: ${JSON.stringify(seen)} -> ` + + (sharedAndDistinct + ? "ONE shared provider, named differently from the toolkits: D26's sibling set IS non-empty in production" + : equalToToolkit + ? "each toolkit names a provider equal to itself: D26's sibling set is empty in production" + : "MIXED: read the ids above and decide by hand"), + ); + // Whichever reading holds, every toolkit must name exactly one provider, or authProviderOf + // answers null and every connection under it reads as absent. + for (const toolkit of GOOGLE_TOOLKITS) { + expect(seen[toolkit]?.length).toBe(1); + } + }, + VENDOR_TIMEOUT_MS, + ); + + test( + "the action to consent to is read from the listing, and the baseline is clean", + async () => { + const client = arcade(); + const items = await listToolkit(client, TOOLKIT, USER); + run.total = items.length; + need( + items.length > 0 ? items : null, + `Arcade listed no ${TOOLKIT} action`, + ); + run.action = + process.env.ARCADE_LIVE_ACTION?.trim() || + items.find((item) => { + const verdict = classify(item.metadata); + return verdict.effect === "read" && !verdict.destructive; + })?.qualified_name; + need( + run.action, + `${TOOLKIT} lists no read-only action and ARCADE_LIVE_ACTION is unset`, + ); + // A fresh user id has granted nothing. If anything already reads `met`, the "before" is not a + // baseline and the "after" would measure nothing. + run.baselineMet = metCount(items); + say( + `BLAST RADIUS baseline for ${TOOLKIT}: met ${run.baselineMet} of ${items.length} (action to mint: ${run.action})`, + ); + expect(run.baselineMet).toBe(0); + }, + VENDOR_TIMEOUT_MS, + ); + + /** + * FENCED FACT 1: `next_uri` IS REFUSED FOR EVERY VALUE, so the adapter never sends it. + * Every value must answer 500 `invalid next URI`. If ANY is accepted, the fence is stale: report + * it, do not start sending one. + * + * FIVE SEQUENTIAL ROUND-TRIPS, hence a timeout of five times the single-call budget. This case is + * why {@link VENDOR_TIMEOUT_MS} exists: on the first live run it died at 5001ms against bun's + * default, measuring none of the five. + */ + test( + "next_uri is refused for every value", + async () => { + const client = arcade(); + const action = need(run.action, "no action was chosen"); + const values = [ + "https://app.example.com/settings/connected-accounts", + `http://localhost:${PORT}/`, + "https://cloud.arcade.dev", + "http://localhost:3000/", + "/relative/path", + ]; + for (const next_uri of values) { + const refusal = await failureOf(() => + client.tools.authorize({ + tool_name: action, + user_id: USER, + next_uri, + }), + ); + expect([next_uri, refusal.status]).toEqual([next_uri, 500]); + expect(normalizeArcadeError(refusal)?.message ?? "").toMatch( + /invalid next uri/i, + ); + } + }, + 5 * VENDOR_TIMEOUT_MS, + ); + + /** + * THE CONSENT: mint through OUR adapter, wait for the callback at a local stand-in for the + * verifier, and keep only the flow id. A person is needed here. + */ + test( + "a mint through the adapter, and a callback carrying flow_id ONLY", + async () => { + const { broker } = createArcadeClient(need(key, "no ARCADE_API_KEY")); + const action = need(run.action, "no action was chosen"); + + let resolveCallback: (url: URL) => void = () => {}; + const callback = new Promise((resolve) => { + resolveCallback = resolve; + }); + const server = Bun.serve({ + port: PORT, + fetch(request) { + resolveCallback(new URL(request.url)); + return new Response("Consent received. You can close this tab."); + }, + }); + try { + const minted = await broker.authorize({ + account: ACCOUNT, + toolkit: TOOLKIT, + action, + returnUrl: `http://localhost:${PORT}/`, + }); + run.authorizationId = minted.authorizationId ?? undefined; + expect(run.authorizationId).toMatch(/^ar_/); + // To the caller, on stderr, once. Never to a log, an audit row or a `cause`. + process.stderr.write( + `\nOPEN THIS URL AND CONSENT (throwaway user ${USER}):\n${minted.redirectUrl}\n\n`, + ); + + const timeout = new Promise((_, reject) => + setTimeout( + () => + reject( + new Error( + `No callback reached localhost:${PORT} in ${CONSENT_TIMEOUT_S}s. Is the project's custom verifier URL pointed at it, and was the consent completed?`, + ), + ), + CONSENT_TIMEOUT_S * 1000, + ), + ); + const arrived = await Promise.race([callback, timeout]); + run.callbackKeys = [...arrived.searchParams.keys()]; + run.flowId = arrived.searchParams.get("flow_id") ?? undefined; + say( + `CALLBACK query parameters received: ${run.callbackKeys.join(",")}`, + ); + // `flow_id` and nothing else: no user id, no auth id, no state to compare against. + expect(run.callbackKeys).toEqual(["flow_id"]); + need(run.flowId, "the callback carried no flow_id"); + } finally { + server.stop(true); + } + }, + (CONSENT_TIMEOUT_S + 30) * 1000, + ); + + /** + * GATE 2 — THE `user_mismatch` WIRE SHAPE. MEASURED, AND THE ANSWER IS THAT THERE ISN'T ONE. + * + * This case used to assert the ASSUMED shape, `{ mismatch: true }`. The first live run measured + * what Arcade actually answers a wrong-user `confirm_user`, verbatim: + * + * ``` + * GATE 2 raw confirm_user as wrong user: status=400 name=coordinator_error message=Bad request + * GATE 2 confirmReturn as wrong user: THREW Error + * ``` + * + * A GENERIC 400 CARRYING NOTHING THAT IDENTIFIES A MISMATCH. `coordinator_error` / "Bad request" + * is the same answer a malformed flow id gets, so the `{ mismatch: true }` contract is UNREACHABLE + * THROUGH THE LIVE API TODAY: `normalizeArcadeError` cannot match it without treating EVERY bad + * request as "this handle belongs to somebody else", which is a worse failure than the + * degradation. MEASURED-UNREACHABLE, NOT DEAD: the product keeps the `{ mismatch: true }` branch — + * it costs nothing and starts working the day Arcade distinguishes the case, which is what would + * make it reachable (a distinct error name, code or body field for a user mismatch). + * + * THIS IS A UX DEGRADATION AND NOT A HOLE, which is why the product is not being changed to chase + * it. `confirmReturn` throws, the return-leg route's `catch` turns that into `vendor-unavailable` + * rather than `not-your-authorization` — a vaguer sentence for the person, and nothing written + * either way — and the leg stays bound by D24's `auth_id` comparison, which is an exact equality + * over one id space and is unaffected by any of this. + * + * SO THIS CASE ASSERTS THE MEASUREMENT: the vendor refuses, and it refuses in a way that makes + * `confirmReturn` throw. If it ever stops throwing, THAT is the news — either Arcade now names the + * mismatch (make the branch reachable and assert it) or Arcade accepts any user for a flow, in + * which case D24's `auth_id` comparison is the ONLY thing binding the callback to its attempt. + * Both outcomes are printed below rather than hidden behind the assertion. + * + * Run BEFORE the correct confirm; if a mismatch burns the flow id the next case says so. + */ + test( + "GATE 2: the user_mismatch wire shape", + async () => { + const flowId = need(run.flowId, "no flow_id was captured"); + const client = arcade(); + let raw = "ACCEPTED (no refusal)"; + try { + await client.auth.confirmUser({ flow_id: flowId, user_id: OTHER_USER }); + } catch (error) { + const failure = normalizeArcadeError(error); + raw = `status=${failure?.status} name=${failure?.name} message=${failure?.message}`; + } + const { broker } = createArcadeClient(need(key, "no ARCADE_API_KEY")); + const flow = need( + broker.authorizations, + "the adapter has no authorizations", + ); + let through = ""; + try { + const answer = await flow.confirmReturn({ + handle: flowId, + vendorUserId: OTHER_USER, + }); + through = + "authorizationId" in answer + ? `ACCEPTED, authorization ${answer.authorizationId}` + : "{ mismatch: true }"; + } catch (error) { + through = `THREW ${error instanceof Error ? error.name : typeof error}`; + } + say(`GATE 2 raw confirm_user as wrong user: ${raw}`); + say(`GATE 2 confirmReturn as wrong user: ${through}`); + say( + `GATE 2 ${ + through.startsWith("THREW") + ? "the mismatch is NOT distinguishable on the wire: the product refuses the return leg with vendor-unavailable, and the auth_id comparison does the binding" + : through === "{ mismatch: true }" + ? "the mismatch IS distinguishable now: the { mismatch: true } branch is reachable, so assert it here instead" + : "ARCADE ACCEPTED A WRONG USER FOR THIS FLOW: the auth_id comparison is the ONLY thing binding the callback to its attempt" + }`, + ); + // The vendor must refuse SOMEHOW; an acceptance is the one outcome that is news about the + // binding rather than about the error shape. + expect(raw).not.toBe("ACCEPTED (no refusal)"); + // And it refuses indistinguishably, so the adapter throws. See the docblock: measured, not assumed. + expect(through.startsWith("THREW")).toBe(true); + }, + VENDOR_TIMEOUT_MS, + ); + + test( + "confirm_user returns the mint's own ar_ id as auth_id", + async () => { + const flowId = need( + run.flowId, + "no flow_id was captured (if GATE 2 ran, a mismatch may have consumed it)", + ); + const answer = await arcade().auth.confirmUser({ + flow_id: flowId, + user_id: USER, + }); + expect(answer.auth_id).toBe(need(run.authorizationId, "no mint id")); + expect(answer.auth_id).toMatch(/^ar_/); + }, + VENDOR_TIMEOUT_MS, + ); + + test( + "auth.status reaches completed and names the attempt's user_id", + async () => { + const id = need(run.authorizationId, "no mint id"); + const { broker } = createArcadeClient(need(key, "no ARCADE_API_KEY")); + const flow = need( + broker.authorizations, + "the adapter has no authorizations", + ); + let last = ""; + // Only the three narrowed fields are ever held; the token-carrying response never leaves the adapter. + for (let i = 0; i < STATUS_POLLS; i += 1) { + const seen = await flow.status(id); + last = seen.status; + if (seen.status === "completed") { + expect(seen.userId).toBe(USER); + run.grantedScopes = seen.scopes; + say( + `AUTH STATUS completed; granted scopes: ${seen.scopes.join(" ") || "(none listed)"}`, + ); + return; + } + await new Promise((r) => setTimeout(r, STATUS_POLL_INTERVAL_MS)); + } + throw new Error( + `auth.status never reached completed; last status was ${last}.`, + ); + }, + STATUS_TIMEOUT_MS, + ); + + /** + * THE BLAST-RADIUS MEASUREMENT. `met` across the WHOLE toolkit, from the clean baseline taken above. + * Distinct REQUESTED scopes are NOT a substitute: they show what was asked for and never what was + * granted. One read-only consent that flips every action to `met: true` means a single approval + * granted the whole toolkit (Github measured 43 of 43). Prints `met before -> after of total`. + */ + test( + "blast radius: met across the whole toolkit, before and after one consent", + async () => { + const items = await listToolkit(arcade(), TOOLKIT, USER); + const after = metCount(items); + say( + `BLAST RADIUS ${TOOLKIT}: met ${run.baselineMet} -> ${after} of ${items.length} after consenting to ONE action (${run.action})`, + ); + expect(after).toBeGreaterThan(need(run.baselineMet ?? 0, "no baseline")); + }, + VENDOR_TIMEOUT_MS, + ); + + /** + * GATE 3 — PER-ACTION ISOLATION THROUGH OUR VERIFIER, on a scoped provider (the spec's "Unproven"). + * + * Reads what the adapter reports for every action of the toolkit after the one consent. An action + * is a VIOLATION when it reports `authorized` although it asks for scopes the consent never granted. + * - ZERO violations: per-action grants isolate; consenting to one action does not authorize a + * broader one. + * - Any violation: the grant is wider than the action it was minted for. The consent screen + * under-describes it, and the per-action design needs the blast-radius wording instead. + * On a toolkit whose actions carry no scopes (Github), isolation cannot be measured and this says + * so, which is a result: use ARCADE_LIVE_TOOLKIT=Gmail for a scoped provider. + */ + test( + "GATE 3: per-action isolation through our verifier", + async () => { + const { broker } = createArcadeClient(need(key, "no ARCADE_API_KEY")); + const grants = await broker.grantsFor({ + account: ACCOUNT, + toolkit: TOOLKIT, + }); + const granted = new Set(run.grantedScopes ?? []); + const scoped = grants.filter( + (g) => g.state === "authorized" || g.state === "needs-consent", + ); + const violations = scoped.filter( + (g) => + g.state === "authorized" && + g.scopes.length > 0 && + g.scopes.some((scope) => !granted.has(scope)), + ); + const withScopes = scoped.filter((g) => g.scopes.length > 0).length; + say( + `GATE 3 ${TOOLKIT}: ${grants.filter((g) => g.state === "authorized").length} of ${grants.length} actions authorized; ${withScopes} carry scopes; ` + + `${violations.length} authorized beyond the granted scopes` + + (withScopes === 0 + ? " -> NOT MEASURABLE on this toolkit (no action carries scopes); rerun on a scoped one" + : violations.length === 0 + ? " -> isolation HOLDS" + : ` -> isolation FAILS: ${violations.map((v) => v.action).join(", ")}`), + ); + expect(violations).toEqual([]); + }, + VENDOR_TIMEOUT_MS, + ); + + /** + * GATE 4 — `provider_id` MEANS TWO DIFFERENT THINGS ON TWO OBJECTS, and the list filter takes the + * second one. THIS CASE USED TO ASSERT THE WRONG THING, AND THAT IS WHY A PRODUCT DEFECT HID. + * + * It filtered this user's connections by the TOOLKIT'S PROVIDER TYPE, found nothing, and printed + * `provider "google": exact 0, upper 0, lower 0 -> filter does not take this provider id`. That + * conclusion was wrong. The filter takes a provider id perfectly well; the type is simply not the + * id a connection is filed under. Direct probing of the live API measured the two meanings: + * + * - on a TOOL LISTING, `requirements.authorization.provider_id` is the provider TYPE: `"google"`; + * - on a USER CONNECTION ROW, `provider_id` is the provider INSTANCE id — an operator's + * configuration of a type: `"google-openbot"`, `"cpk-poc"`, `"arcade-google"`; + * - on an AUTH-PROVIDER CONFIG (`admin.authProviders.list()`), `id` is the INSTANCE and + * `provider_id` is the TYPE, which is the only bridge between the two. Verbatim: + * + * ``` + * {"id":"cpk-poc", "provider_id":"github", "type":"oauth2", "status":"active"} + * {"id":"google-openbot", "provider_id":"google", "type":"oauth2", "status":"active"} + * {"id":"arcade-google", "provider_id":"google", "type":"oauth2", "status":"active"} + * ``` + * + * A connection row carries NO vendor-type field to compare against instead. Its full key set, + * verbatim: `id`, `provider_type`, `connection_id`, `connection_status`, `scopes`, `user_id`, + * `provider_id`, `provider_description`, `provider_user_info` — and `provider_type` is `"oauth2"`, + * the auth SCHEME, not the vendor. The instance id is the only link there is. + * + * SO THE FIRST THING THIS PRINTS IS THE CONSENTED CONNECTION'S OWN `provider_id`, VERBATIM. It is + * the single most valuable line in the run and its absence is what made today's result ambiguous + * for an hour: `exact 0` reads as a broken filter until you can see what the row actually says. + * + * Then: resolve the toolkit's type to its configured INSTANCE ids, assert the connection is found + * by instance, and measure the filter's case handling against the instance — the value a filter + * would really be given — rather than against a value nothing is filed under. + * - exact finds the row, the others do not: the server filter is CASE-SENSITIVE; the client-side + * fold is required and must stay. + * - all three find it: case-INSENSITIVE; the fold is redundant but harmless. + * - exact finds nothing even by instance: THEN the filter is not to be trusted, and that is a + * finding about the filter rather than about the spelling. + */ + test( + "GATE 4: provider_id is a TYPE on a listing and an INSTANCE on a connection", + async () => { + const client = arcade(); + const items = await listToolkit(client, TOOLKIT); + const providerType = need( + providersOf(items)[0], + `${TOOLKIT} names no provider_id`, + ); + + const rows = []; + for await (const row of client.admin.userConnections.list({ + user_id: USER, + })) { + rows.push(row); + } + const row = need(rows[0], "the throwaway user holds no connection"); + // VERBATIM, and nothing else off the row: this is the measurement. + say( + `GATE 4 connection provider_id VERBATIM: ${JSON.stringify(row.provider_id)}` + + ` (provider_type ${JSON.stringify(row.provider_type)} — the auth scheme, not the vendor);` + + ` ${TOOLKIT} tool listing names provider_id ${JSON.stringify(providerType)}`, + ); + + const configs = (await client.admin.authProviders.list()).items; + if (!Array.isArray(configs)) { + throw new Error( + "admin.authProviders.list() answered without an `items` array, so the provider INSTANCE ids of the toolkit's type could not be resolved.", + ); + } + const instances = configs + .filter( + (config) => + config.provider_id?.toLowerCase() === providerType.toLowerCase(), + ) + .map((config) => config.id) + .filter((id): id is string => typeof id === "string" && id !== ""); + say( + `GATE 4 instances configured for type "${providerType}": ${instances.join(", ") || "(none)"}`, + ); + const instance = need( + instances.find( + (id) => id.toLowerCase() === row.provider_id?.toLowerCase(), + ), + `the connection's provider_id ${JSON.stringify(row.provider_id)} matches no configured instance of type ${providerType}`, + ); + + const count = async (provider_id: string) => { + let n = 0; + for await (const found of client.admin.userConnections.list({ + user_id: USER, + provider_id, + })) { + void found; + n += 1; + } + return n; + }; + const exact = await count(instance); + const upper = await count(instance.toUpperCase()); + const lower = await count(instance.toLowerCase()); + say( + `GATE 4 instance "${instance}" (of type "${providerType}"): exact ${exact}, upper ${upper}, lower ${lower} -> ` + + (exact === 0 + ? "the filter does not even take the INSTANCE id; do not trust it" + : upper === exact && lower === exact + ? "server filter is CASE-INSENSITIVE" + : "server filter is CASE-SENSITIVE (keep the client-side fold)"), + ); + expect(exact).toBeGreaterThan(0); + + const { broker } = createArcadeClient(need(key, "no ARCADE_API_KEY")); + // The adapter's `authProviderOf` reads the TOOL LISTING, so its answer is the TYPE, and the + // adapter expands that into the instance set before it touches a connection row. + expect(await broker.authProviderOf?.(TOOLKIT)).toBe(providerType); + expect( + await broker.isConnected({ account: ACCOUNT, toolkit: TOOLKIT }), + ).toBe(true); + }, + VENDOR_TIMEOUT_MS, + ); + + /** + * FENCED FACT 2: delete takes `connection_id` (`ac_...`); the `id` (`at_...`) listed first answers + * 500. Run against this run's one throwaway connection, then it is really deleted. + */ + test( + "delete takes connection_id, and the at_ id answers 500", + async () => { + const client = arcade(); + const rows = []; + for await (const row of client.admin.userConnections.list({ + user_id: USER, + })) { + rows.push(row); + } + const row = need(rows[0], "the throwaway user holds no connection"); + run.connectionId = need( + row.connection_id, + "the row carries no connection_id", + ); + run.rowId = need(row.id, "the row carries no id"); + expect(run.connectionId).toMatch(/^ac_/); + expect(run.rowId).toMatch(/^at_/); + + const refusal = await failureOf(() => + client.admin.userConnections.delete(need(run.rowId, "no id")), + ); + expect(refusal.status).toBe(500); + + await client.admin.userConnections.delete(run.connectionId); + const left = []; + for await (const remaining of client.admin.userConnections.list({ + user_id: USER, + })) { + left.push(remaining); + } + expect(left).toEqual([]); + + const { broker } = createArcadeClient(need(key, "no ARCADE_API_KEY")); + expect( + await broker.isConnected({ account: ACCOUNT, toolkit: TOOLKIT }), + ).toBe(false); + }, + VENDOR_TIMEOUT_MS, + ); +}); diff --git a/server/tests/arcade-malformed-listing-engine.test.ts b/server/tests/arcade-malformed-listing-engine.test.ts new file mode 100644 index 000000000..cd031eaee --- /dev/null +++ b/server/tests/arcade-malformed-listing-engine.test.ts @@ -0,0 +1,307 @@ +import { afterEach, describe, expect, test } from "bun:test"; +import { listTools, useArcadeClient } from "../src/plugins/arcade"; +import { createArcadeClient } from "../src/plugins/arcade-adapter"; +import type { AccountRef } from "../src/plugins/shared-accounts"; + +/** + * EVERY "Arcade did not answer with a list" SENTENCE, AGAINST A REAL HTTP ENGINE. + * + * These guards cannot be tested in the style of the rest of the adapter suite, which stubs the + * SDK's resource PROTOTYPES and so decides for itself what the adapter is handed. The defect they + * exist for lives BETWEEN the wire and the adapter: `OffsetPage`'s constructor does + * `this.items = body.items || []`, so an answer that carries no `items` at all reaches a reader of + * the PAGE OBJECT as an empty array — a malformed listing wearing an empty one's clothes. A stub + * that hands the adapter its own object never manufactures that default, so a test in that style + * passes whether the guard reads the page or the body it was built from. + * + * So, as in `arcade-pagination-engine.test.ts`, the engine here serves real JSON over a real socket + * through `ARCADE_BASE_URL` and the SDK builds its own pages. + * + * TWO UNREADABLE BODIES, NOT ONE, because they reach the guard down DIFFERENT routes and only the + * first was ever covered: + * + * - `{"error": "nope"}` — a well-formed JSON object, 200, with no `items`: what an engine + * answering an error shape on the success path sends. The SDK parses it, so the page's `body` IS + * a record and the guard reads a real body that simply has no list on it. + * - `OK` with `content-type: text/html` and a 200 — a proxy's courtesy + * page wearing a real answer's status. `defaultParseResponse` hands a STRING to the page + * constructor, so there is no record to read anywhere; the honest body is unreadable and the only + * `items` in existence are the ones `OffsetPage`'s constructor manufactured. A reader that falls + * back to the page object for want of a record therefore answers `[]` — "the vendor says there + * are none" — for a body it never read, and `revoke` returns `false` with no DELETE spent. That + * is the live defect, reached through the branch the JSON case above can never enter. + */ + +const account: AccountRef = { + holder: "person", + userId: "u1", + vendorUserId: "vendor-u1", +}; + +/** Which of the three listings answers the malformed body, or none of them. */ +type Malformed = "tools" | "connections" | "authProviders" | "none"; + +/** WHICH unreadable body that listing answers with. See this file's opening note. */ +type Unreadable = "json-without-items" | "not-json"; + +type Engine = { port: number; stop: () => void }; + +const MALFORMED = { error: "nope" }; + +/** The unreadable answer, served with the 200 of a real one either way. */ +const unreadable = (kind: Unreadable): Response => + kind === "json-without-items" + ? Response.json(MALFORMED) + : new Response("OK", { + status: 200, + headers: { "content-type": "text/html; charset=utf-8" }, + }); + +/** A live connection row held under the `google-openbot` INSTANCE of the `google` provider. */ +const connectionRow = () => ({ + id: "at_0", + connection_id: "ac_0", + connection_status: "active", + provider_id: "google-openbot", + provider_type: "oauth2", + provider_user_info: { name: "person 0" }, + scopes: [], + user_id: account.vendorUserId, +}); + +const toolRow = (toolkit: string) => ({ + qualified_name: `${toolkit}.Action0`, + description: "", + toolkit: { name: toolkit, description: "" }, + input: { parameters: [] }, + requirements: { + authorization: { provider_id: "google", oauth2: { scopes: [] } }, + }, +}); + +function startEngine(malformed: Malformed, kind: Unreadable): Engine { + const server = Bun.serve({ + port: 0, + fetch(request) { + const url = new URL(request.url); + const limit = Number(url.searchParams.get("limit") ?? "100"); + const offset = Number(url.searchParams.get("offset") ?? "0"); + + // The DELETE, always available, so "no DELETE was spent" is a statement about the adapter. + if (url.pathname.startsWith("/v1/admin/user_connections/")) { + return new Response(null, { status: 204 }); + } + + if (url.pathname === "/v1/admin/user_connections") { + if (malformed === "connections") return unreadable(kind); + const items = + malformed === "none" && offset === 0 ? [connectionRow()] : []; + return Response.json({ + items, + offset, + limit, + page_count: items.length, + }); + } + if (url.pathname === "/v1/admin/auth_providers") { + if (malformed === "authProviders") return unreadable(kind); + return Response.json({ + items: [ + { id: "google-openbot", provider_id: "google", type: "oauth2" }, + ], + offset: 0, + limit, + page_count: 1, + total_count: 1, + }); + } + if (url.pathname === "/v1/tools") { + if (malformed === "tools") return unreadable(kind); + const toolkit = url.searchParams.get("toolkit") ?? "Gmail"; + const page = offset === 0 ? [toolRow(toolkit)] : []; + return Response.json({ + items: page, + offset, + limit, + page_count: page.length, + }); + } + return new Response("not found", { status: 404 }); + }, + }); + // `Bun.serve().port` is `number | undefined`. Refuse loudly rather than coercing: a stub that + // never bound a port would send every request of this file to a nonsense address, and the + // refusals below would then "hold" because nothing reached a vendor at all. + const { port } = server; + if (port === undefined) + throw new Error("the stub vendor did not bind a port"); + return { port, stop: () => server.stop(true) }; +} + +let running: Engine | null = null; +const wasBaseURL = process.env.ARCADE_BASE_URL; + +function engine( + malformed: Malformed, + kind: Unreadable = "json-without-items", +): void { + running = startEngine(malformed, kind); + process.env.ARCADE_BASE_URL = `http://localhost:${running.port}`; +} + +afterEach(() => { + running?.stop(); + running = null; + useArcadeClient(null); + if (wasBaseURL === undefined) delete process.env.ARCADE_BASE_URL; + else process.env.ARCADE_BASE_URL = wasBaseURL; +}); + +describe("a listing with no items refuses rather than reading as empty", () => { + test("listApps refuses a tool listing that is not a list", async () => { + engine("tools"); + const { broker } = createArcadeClient("never-dialled"); + + await expect(broker.listApps()).rejects.toThrow( + /Arcade did not answer with a tool list/, + ); + }); + + test("grantsFor refuses a tool listing that is not a list", async () => { + engine("tools"); + const { broker } = createArcadeClient("never-dialled"); + + await expect( + broker.grantsFor({ account, toolkit: "Gmail" }), + ).rejects.toThrow(/Arcade did not answer with an action list for Gmail/); + }); + + test("isConnected refuses a tool listing that is not a list", async () => { + // Through `authProviderOf`, the one unpaged listing in the adapter. + engine("tools"); + const { broker } = createArcadeClient("never-dialled"); + + await expect( + broker.isConnected({ account, toolkit: "Gmail" }), + ).rejects.toThrow( + /Arcade did not answer with an action list for Gmail, so the auth provider/, + ); + }); + + test("the transport refuses a tool listing that is not a list", async () => { + engine("tools"); + const { actions } = createArcadeClient("never-dialled"); + useArcadeClient(actions); + + await expect(listTools({ url: "arcade://Gmail" })).rejects.toThrow( + /Arcade did not answer with an action list for Gmail\. Nothing was refreshed/, + ); + }); + + test("isConnected refuses an auth-provider listing that is not a list", async () => { + engine("authProviders"); + const { broker } = createArcadeClient("never-dialled"); + + await expect( + broker.isConnected({ account, toolkit: "Gmail" }), + ).rejects.toThrow(/Arcade did not answer with an auth-provider list/); + }); + + test("isConnected refuses a connection listing that is not a list", async () => { + engine("connections"); + const { broker } = createArcadeClient("never-dialled"); + + await expect( + broker.isConnected({ account, toolkit: "Gmail" }), + ).rejects.toThrow(/Arcade did not answer with a connection list/); + }); + + test("revoke refuses a connection listing that is not a list", async () => { + engine("connections"); + const { broker } = createArcadeClient("never-dialled"); + + await expect(broker.revoke({ account, toolkit: "Gmail" })).rejects.toThrow( + /Arcade did not answer with a connection list/, + ); + }); +}); + +/** + * THE SAME SENTENCES, OFF A BODY THAT IS NOT JSON AT ALL. + * + * Every case above serves a body the SDK successfully PARSES, so the page carries a readable + * record and a reader that takes the page's own `items` when it finds no record never has to + * decide anything. A non-JSON 200 is the branch where that decision is actually made: the parsed + * body is a STRING, no record exists, and `OffsetPage`'s manufactured `items: []` is the only list + * on the object. The rule these pin is that AN UNREADABLE BODY IS NOT AN EMPTY PAGE — it refuses + * in the same sentence a body with no `items` refuses in, because the two are the same fact about + * what this deployment was told. + */ +describe("a listing whose body is not JSON refuses rather than reading as empty", () => { + test("listApps refuses a non-JSON tool listing", async () => { + engine("tools", "not-json"); + const { broker } = createArcadeClient("never-dialled"); + + await expect(broker.listApps()).rejects.toThrow( + /Arcade did not answer with a tool list/, + ); + }); + + test("the transport refuses a non-JSON tool listing", async () => { + engine("tools", "not-json"); + const { actions } = createArcadeClient("never-dialled"); + useArcadeClient(actions); + + await expect(listTools({ url: "arcade://Gmail" })).rejects.toThrow( + /Arcade did not answer with an action list for Gmail\. Nothing was refreshed/, + ); + }); + + test("isConnected refuses a non-JSON auth-provider listing", async () => { + engine("authProviders", "not-json"); + const { broker } = createArcadeClient("never-dialled"); + + await expect( + broker.isConnected({ account, toolkit: "Gmail" }), + ).rejects.toThrow(/Arcade did not answer with an auth-provider list/); + }); + + test("isConnected refuses a non-JSON connection listing", async () => { + engine("connections", "not-json"); + const { broker } = createArcadeClient("never-dialled"); + + await expect( + broker.isConnected({ account, toolkit: "Gmail" }), + ).rejects.toThrow(/Arcade did not answer with a connection list/); + }); + + test("revoke refuses a non-JSON connection listing rather than answering false", async () => { + // THE LIVE DEFECT'S EXACT SIGNATURE: `false` with no DELETE spent, while the caller deletes + // the local row anyway and a live grant at the vendor is left with nothing naming it. + engine("connections", "not-json"); + const { broker } = createArcadeClient("never-dialled"); + + await expect(broker.revoke({ account, toolkit: "Gmail" })).rejects.toThrow( + /Arcade did not answer with a connection list/, + ); + }); +}); + +/** + * THE COMPATIBILITY CASE THE PAGE FALLBACK EXISTS FOR, PINNED SO IT CANNOT BE DELETED WITH IT. + * + * `admin.authProviders.list` returns a plain `APIPromise` — the parsed + * body ITSELF, never a page — so it has no `body` property to read through and its own properties + * are the honest ones. Nothing was manufactured for it, so reading it directly is not a guess. + * `authProviderInstances` is the only reader of it, and `isConnected` answering TRUE here is the + * whole chain saying so: the `google` type resolved to the `google-openbot` INSTANCE off that + * body, and the connection row matched it. + */ +describe("a listing that is its own body is still read", () => { + test("isConnected reads the auth-provider configuration off a plain APIPromise", async () => { + engine("none"); + const { broker } = createArcadeClient("never-dialled"); + + expect(await broker.isConnected({ account, toolkit: "Gmail" })).toBe(true); + }); +}); diff --git a/server/tests/arcade-pagination-engine.test.ts b/server/tests/arcade-pagination-engine.test.ts new file mode 100644 index 000000000..63ed9053e --- /dev/null +++ b/server/tests/arcade-pagination-engine.test.ts @@ -0,0 +1,595 @@ +import { afterEach, describe, expect, test } from "bun:test"; +import { listTools, useArcadeClient } from "../src/plugins/arcade"; +import { createArcadeClient } from "../src/plugins/arcade-adapter"; +import type { AccountRef } from "../src/plugins/shared-accounts"; + +/** + * THE ADAPTER AGAINST A REAL HTTP ENGINE, BECAUSE NOTHING LESS CAN SEE THIS CLASS OF DEFECT. + * + * The rest of the adapter suite stubs the SDK's resource PROTOTYPES and hands the adapter a bare + * async generator in place of a `PagePromise`. That substitution is exactly what hides the bug this + * file is about: the real `OffsetPage` constructor does `this.total_count = body.total_count || 0` + * and `nextPageRequestOptions()` returns `null` on a falsy total, so an engine that OMITS + * `total_count` ends the SDK's own auto-pagination after page one AND disables every + * `seen < total` cross-check — while a hand-written generator paginates perfectly and reports + * whatever total the fixture chose to carry. + * + * So these tests serve real JSON over a real socket through `ARCADE_BASE_URL` and let the SDK build + * its own pages. `new Arcade({ apiKey })` reads that variable at construction, which is why the + * server is started BEFORE `createArcadeClient`. + */ + +const account: AccountRef = { + holder: "person", + userId: "u1", + vendorUserId: "vendor-u1", +}; + +type EngineOptions = { + /** How many connection rows the engine holds. */ + connections: number; + /** Send `total_count` on the connection listing at all? */ + connectionTotal: boolean; + /** Serve this many connection rows and no more, while still reporting the full `total_count`. */ + connectionTruncateAt?: number; + /** + * The `connection_status` each row carries, row by row: a string is sent verbatim, `null` OMITS + * the field as the wire may (the SDK declares it optional), and a row this does not reach carries + * the live `"active"` the live API answers with. + */ + connectionStatuses?: (string | null)[]; + /** + * ANSWER EVERY CONNECTION PAGE FULL, FOREVER: no short page and no `total_count`, so nothing in + * the answer ever says the listing is over. This is the engine a runaway guard exists for. + */ + connectionsNeverEnd?: boolean; + /** The toolkit listing claims this many actions... */ + toolsClaimed?: number; + /** ...and serves only this many, dropping `total_count` from the short final page. */ + toolsServed?: number; + /** + * The `total_count` the toolkit listing reports on every page AFTER the first, when that differs + * from the first page's claim — a vendor revising its count downward mid-listing. + */ + toolsLaterTotal?: number; + /** + * How many auth-provider configurations the project holds. Only the LAST of them is the `google` + * instance the connection rows are held under; the rest are filler of another type. Left unset, + * the engine answers the single-config listing the other tests here want. + */ + authProviders?: number; + /** + * The action listing DISAGREES WITH ITSELF ABOUT ITS AUTH PROVIDER from this index on: actions + * before it carry `requirements.authorization.provider_id: "google"`, actions from here on carry + * {@link toolLaterProvider}. Set past the first page, it is invisible to any reader that stops + * at page one. + */ + toolProviderSplitAt?: number; + /** The provider id the actions from {@link toolProviderSplitAt} on carry. */ + toolLaterProvider?: string; +}; + +type Engine = { + port: number; + /** Every path+query the SDK asked for, in order. */ + requests: string[]; + stop: () => void; +}; + +const connectionRow = (n: number, status: string | null = "active") => ({ + id: `at_${n}`, + connection_id: `ac_${n}`, + // OMITTED when the engine says `null`, as the wire may omit it. + ...(status === null ? {} : { connection_status: status }), + // A provider INSTANCE id, never a provider type: see arcade-adapter-connections.test.ts. + provider_id: "google-openbot", + provider_type: "oauth2", + provider_user_info: { name: `person ${n}` }, + scopes: [], + user_id: account.vendorUserId, +}); + +const toolRow = (toolkit: string, n: number, provider = "google") => ({ + qualified_name: `${toolkit}.Action${n}`, + description: "", + toolkit: { name: toolkit, description: "" }, + input: { parameters: [] }, + requirements: { + authorization: { provider_id: provider, oauth2: { scopes: [] } }, + }, +}); + +/** The provider id action `n` of the listing carries, per {@link EngineOptions.toolProviderSplitAt}. */ +function toolProviderOf(options: EngineOptions, n: number): string { + const split = options.toolProviderSplitAt; + if (split === undefined || n < split) return "google"; + return options.toolLaterProvider ?? "microsoft"; +} + +/** + * The project's auth-provider configurations, with the ONE that matters LAST. + * + * `id` is the provider INSTANCE and `provider_id` the TYPE, as the live project spells them. The + * filler carries type `github`, so a reader that stops before the end of this listing finds no + * `google` instance at all and answers "not connected" for a person who is. + */ +const authProviderRows = (count: number) => + Array.from({ length: count }, (_, n) => + n === count - 1 + ? { id: "google-openbot", provider_id: "google", type: "oauth2" } + : { id: `filler-${n}`, provider_id: "github", type: "oauth2" }, + ); + +function statusOf(options: EngineOptions, n: number): string | null { + const listed = options.connectionStatuses?.[n]; + return listed === undefined ? "active" : listed; +} + +function startEngine(options: EngineOptions): Engine { + const requests: string[] = []; + const rows = Array.from({ length: options.connections }, (_, n) => + // `undefined` (unlisted) is the live default; `null` means OMIT the field, so it is kept apart. + connectionRow(n, statusOf(options, n)), + ); + const served = options.connectionTruncateAt ?? rows.length; + const server = Bun.serve({ + port: 0, + fetch(request) { + const url = new URL(request.url); + requests.push(url.pathname + url.search); + const offset = Number(url.searchParams.get("offset") ?? "0"); + const limit = Number(url.searchParams.get("limit") ?? "100"); + + if (url.pathname.startsWith("/v1/admin/user_connections/")) { + return new Response(null, { status: 204 }); + } + if (url.pathname === "/v1/admin/user_connections") { + if (options.connectionsNeverEnd) { + return Response.json({ + items: Array.from({ length: limit }, (_, n) => + connectionRow(offset + n), + ), + offset, + limit, + page_count: limit, + }); + } + const page = rows.slice(offset, Math.min(offset + limit, served)); + const body: Record = { + items: page, + offset, + limit, + page_count: page.length, + }; + if (options.connectionTotal) body.total_count = rows.length; + return Response.json(body); + } + if (url.pathname === "/v1/admin/auth_providers") { + if (options.authProviders === undefined) { + return Response.json({ + items: [ + { id: "google-openbot", provider_id: "google", type: "oauth2" }, + ], + offset: 0, + limit, + page_count: 1, + total_count: 1, + }); + } + // PAGED, AND WITH NO `total_count`: a short page is the only thing that ends this listing, + // so a reader that does not advance its own offset never reaches the last configuration. + const page = authProviderRows(options.authProviders).slice( + offset, + offset + limit, + ); + return Response.json({ + items: page, + offset, + limit, + page_count: page.length, + }); + } + if (url.pathname === "/v1/tools") { + const toolkit = url.searchParams.get("toolkit") ?? "Gmail"; + const claimed = options.toolsClaimed ?? 1; + const toolsServed = options.toolsServed ?? claimed; + const page: unknown[] = []; + for (let n = offset; n < Math.min(offset + limit, toolsServed); n++) { + page.push(toolRow(toolkit, n, toolProviderOf(options, n))); + } + const body: Record = { + items: page, + offset, + limit, + page_count: page.length, + }; + // The short final page DROPS the field — which is what defeats a cross-check that keeps + // the LAST page's total rather than the highest one reported. A later page may also REVISE + // the count downward, which defeats the same cross-check without dropping anything. + if (page.length === limit) { + body.total_count = + offset === 0 ? claimed : (options.toolsLaterTotal ?? claimed); + } + return Response.json(body); + } + return new Response("not found", { status: 404 }); + }, + }); + return { port: server.port, requests, stop: () => server.stop(true) }; +} + +let running: Engine | null = null; +const wasBaseURL = process.env.ARCADE_BASE_URL; + +function engine(options: EngineOptions): Engine { + running = startEngine(options); + process.env.ARCADE_BASE_URL = `http://localhost:${running.port}`; + return running; +} + +afterEach(() => { + running?.stop(); + running = null; + useArcadeClient(null); + if (wasBaseURL === undefined) delete process.env.ARCADE_BASE_URL; + else process.env.ARCADE_BASE_URL = wasBaseURL; +}); + +const deletes = (e: Engine) => + e.requests.filter((r) => r.startsWith("/v1/admin/user_connections/")); + +describe("the connection listing is read to its end, not to the SDK's", () => { + test("revoke deletes every connection when the engine omits total_count", async () => { + // 250 rows at a page size of 100: three pages, and NO `total_count` anywhere. The SDK's own + // auto-pagination gives up after the first of them. + const e = engine({ connections: 250, connectionTotal: false }); + const { broker } = createArcadeClient("never-dialled"); + + expect(await broker.revoke({ account, toolkit: "Gmail" })).toBe(true); + expect(deletes(e).length).toBe(250); + }); + + test("a truncated connection listing throws rather than reading as success or as nothing", async () => { + // The engine reports 250 and serves 100: a short second page, which ends the listing, and a + // `total_count` that says it should not have. + const e = engine({ + connections: 250, + connectionTotal: true, + connectionTruncateAt: 100, + }); + const { broker } = createArcadeClient("never-dialled"); + + await expect(broker.revoke({ account, toolkit: "Gmail" })).rejects.toThrow( + /listed 100 of 250 connections/, + ); + await expect( + broker.isConnected({ account, toolkit: "Gmail" }), + ).rejects.toThrow(/listed 100 of 250 connections/); + await expect( + broker.accountName({ account, toolkit: "Gmail" }), + ).rejects.toThrow(/listed 100 of 250 connections/); + // NOT ONE DELETE WAS SPENT on a listing that could not be trusted to be the whole of it. + expect(deletes(e).length).toBe(0); + }); + + test("isConnected and accountName read the whole listing", async () => { + engine({ connections: 250, connectionTotal: false }); + const { broker } = createArcadeClient("never-dialled"); + + expect(await broker.isConnected({ account, toolkit: "Gmail" })).toBe(true); + expect(await broker.accountName({ account, toolkit: "Gmail" })).toBe( + "person 0", + ); + }); +}); + +/** + * A LISTING THAT NEVER SAYS IT IS OVER IS NOT A COMPLETE ONE, AND THE RUNAWAY GUARD IS WHAT SAYS SO. + * + * Every other test here reaches a short page eventually, so the `maxPages` bound and the sentence + * behind it were never once reached: deleting the `unending` throw outright left the whole arcade + * suite green. What the throw prevents is the worst reading of all — a listing cut off at the bound + * presenting as the whole of itself, which is `isConnected` answering off an arbitrary 10,000-row + * prefix and `revoke` reporting success having deleted a prefix of somebody's connections. + * + * Only a real engine can pose the question: the SDK's own pagination stops at page one here (no + * `total_count`), and a hand-written generator ends when its fixture array does. + */ +describe("a listing that never ends is refused rather than cut off at the bound", () => { + test("isConnected refuses a connection listing that answers full pages forever", async () => { + const e = engine({ + connections: 0, + connectionTotal: false, + connectionsNeverEnd: true, + }); + const { broker } = createArcadeClient("never-dialled"); + + await expect( + broker.isConnected({ account, toolkit: "Gmail" }), + ).rejects.toThrow(/connection list never ended after 100 pages/); + // The bound is a bound: it asked 100 times and stopped. + expect( + e.requests.filter((r) => r.startsWith("/v1/admin/user_connections?")) + .length, + ).toBe(100); + }); + + test("revoke spends no delete on a listing that never ended", async () => { + const e = engine({ + connections: 0, + connectionTotal: false, + connectionsNeverEnd: true, + }); + const { broker } = createArcadeClient("never-dialled"); + + await expect(broker.revoke({ account, toolkit: "Gmail" })).rejects.toThrow( + /connection list never ended after 100 pages/, + ); + expect(deletes(e).length).toBe(0); + }); +}); + +/** + * THE AUTH-PROVIDER LISTING IS PAGED TOO, AND ONLY A REAL ENGINE ASKS IT TO BE. + * + * This is the one listing whose paging parameters travel INSIDE a `query` wrapper + * (`list({ query: { limit, offset } })`), and the one no test ever gave a second page: every + * fixture and every engine here answered a single configuration. So freezing its offset at zero — + * or sending no paging parameters at all — changed nothing any test could see, while on a project + * holding more than 100 configurations it means every person connected under an instance past the + * first page reads as not connected at all. + */ +describe("the auth-provider listing is read past its first page", () => { + test("a connection held under an instance on the second page is still found", async () => { + const e = engine({ + connections: 1, + connectionTotal: false, + // 150 configurations: a full page, then a short one carrying the `google` instance. + authProviders: 150, + }); + const { broker } = createArcadeClient("never-dialled"); + + expect(await broker.isConnected({ account, toolkit: "Gmail" })).toBe(true); + // Two pages were asked for, and the second one by offset — the SDK really does put the + // wrapper's fields on the query string. + expect( + e.requests.filter((r) => r.startsWith("/v1/admin/auth_providers")), + ).toEqual([ + "/v1/admin/auth_providers?limit=100&offset=0", + "/v1/admin/auth_providers?limit=100&offset=100", + ]); + }); +}); + +/** + * `connection_status` IS THE ROW'S OWN ANSWER TO "IS THIS USABLE", AND THE POSITIVE READS TAKE IT. + * + * A row's EXISTENCE used to be the whole of the answer, so a connection the vendor was reporting as + * no longer usable — expired, revoked at the provider, pending, failed — read as `isConnected: true` + * with a name beside it, and the only way to find out was a tool call failing later with nothing on + * the screen to explain it. + * + * The three cases below are the three halves of the design: a reported-dead row is not a connection, + * a row the vendor said NOTHING about is still one (the field is optional on the wire, and reading + * silence as dead would un-connect everybody against any engine that omits it), and `revoke` acts on + * BOTH — a dead row is still a row to delete, and leaving it would be debris nobody can reach. + */ +describe("a connection the vendor reports as dead is not a live connection", () => { + test("isConnected and accountName refuse a row whose connection_status is not live", async () => { + engine({ + connections: 1, + connectionTotal: false, + connectionStatuses: ["expired"], + }); + const { broker } = createArcadeClient("never-dialled"); + + expect(await broker.isConnected({ account, toolkit: "Gmail" })).toBe(false); + expect(await broker.accountName({ account, toolkit: "Gmail" })).toBe(null); + }); + + test("a live row beside a dead one answers for the live one", async () => { + engine({ + connections: 2, + connectionTotal: false, + connectionStatuses: ["expired", "active"], + }); + const { broker } = createArcadeClient("never-dialled"); + + expect(await broker.isConnected({ account, toolkit: "Gmail" })).toBe(true); + // `person 0`'s row is the dead one, so its name must not be the one shown. + expect(await broker.accountName({ account, toolkit: "Gmail" })).toBe( + "person 1", + ); + }); + + test("a row carrying no connection_status at all still reads as connected", async () => { + engine({ + connections: 1, + connectionTotal: false, + connectionStatuses: [null], + }); + const { broker } = createArcadeClient("never-dialled"); + + expect(await broker.isConnected({ account, toolkit: "Gmail" })).toBe(true); + expect(await broker.accountName({ account, toolkit: "Gmail" })).toBe( + "person 0", + ); + }); + + test("revoke still deletes a dead row, and says it asked", async () => { + const e = engine({ + connections: 2, + connectionTotal: false, + connectionStatuses: ["expired", "active"], + }); + const { broker } = createArcadeClient("never-dialled"); + + expect(await broker.revoke({ account, toolkit: "Gmail" })).toBe(true); + expect(deletes(e).length).toBe(2); + }); +}); + +describe("the action listing's total_count cross-check survives a short final page", () => { + test("the transport refuses a listing truncated at 250 of 300", async () => { + engine({ + connections: 0, + connectionTotal: true, + toolsClaimed: 300, + toolsServed: 250, + }); + const { actions } = createArcadeClient("never-dialled"); + useArcadeClient(actions); + + await expect(listTools({ url: "arcade://Gmail" })).rejects.toThrow( + /listed 250 of 300 actions for Gmail/, + ); + }); + + test("a complete listing is still accepted", async () => { + engine({ + connections: 0, + connectionTotal: true, + toolsClaimed: 250, + toolsServed: 250, + }); + const { actions } = createArcadeClient("never-dialled"); + useArcadeClient(actions); + + expect((await listTools({ url: "arcade://Gmail" })).length).toBe(250); + }); + + // THE CATALOGUE'S TWO CASES ARE SCALED ×10 FROM THE TRANSPORT'S: `listApps` reads the directory in + // pages of 1000 (`DIRECTORY_PAGE_SIZE`), so 250-of-300 would be ONE short page with the total + // dropped from it — no second page and nothing to cross-check, which is not the case under test. + // At 2500-of-3000 page one carries the claim and the rest are fetched AHEAD, concurrently, so + // these also hold that fetching ahead did not weaken the incompleteness check. + test("the catalogue refuses a truncated listing too", async () => { + engine({ + connections: 0, + connectionTotal: true, + toolsClaimed: 3000, + toolsServed: 2500, + }); + const { broker } = createArcadeClient("never-dialled"); + + await expect(broker.listApps()).rejects.toThrow( + /listed 2500 of 3000 actions, so its app catalogue is incomplete/, + ); + }); + + test("a later page revising the count DOWN does not erase the first page's claim", async () => { + // Page one claims 3000, page two revises it to 2500, and 2500 is all the engine serves. Keeping + // the LAST total any page reported — rather than the highest — makes the truncation agree with + // itself and the listing commits as a complete one. + engine({ + connections: 0, + connectionTotal: true, + toolsClaimed: 3000, + toolsServed: 2500, + toolsLaterTotal: 2500, + }); + const { broker } = createArcadeClient("never-dialled"); + + await expect(broker.listApps()).rejects.toThrow( + /listed 2500 of 3000 actions, so its app catalogue is incomplete/, + ); + }); + + test("grantsFor pages past the first page", async () => { + engine({ + connections: 0, + connectionTotal: true, + toolsClaimed: 250, + toolsServed: 250, + }); + const { broker } = createArcadeClient("never-dialled"); + + expect((await broker.grantsFor({ account, toolkit: "Gmail" })).length).toBe( + 250, + ); + }); +}); + +/** + * THE ACTION LISTING BEHIND THE AUTH-PROVIDER READ IS PAGED TOO, AND ONLY A REAL ENGINE ASKS IT TO. + * + * `authProviderOf` read ONE request with no `limit`, no `offset` and no loop, on the argument that + * every tool in a toolkit shares its auth provider, so a further page could only repeat the first. + * Against a real engine that is false in exactly the way that matters: a 150-action `Gmail` listing + * whose first 100 actions sit under `google` and whose last 50 sit under `microsoft` answered + * `google` off one unpaged request — CONFIDENTLY, from a window the VENDOR chose, since the request + * carried no `limit` at all. The function's own guard (the distinct provider ids, anything but + * exactly one answering unanswered) was reading a prefix, so it could never fire. + * + * It cannot be seen by stubbing the SDK's prototypes: a hand-written generator serves the whole + * fixture whatever the caller asked for, so the missing `limit`/`offset` and the missing loop both + * vanish into the stub. + */ +describe("the auth provider is read off the WHOLE action listing", () => { + test("a toolkit whose later pages name another provider refuses, naming both", async () => { + const e = engine({ + connections: 1, + connectionTotal: false, + toolsClaimed: 150, + toolsServed: 150, + // The first page is uniformly `google`; the short second page is `microsoft`. + toolProviderSplitAt: 100, + }); + const { broker } = createArcadeClient("never-dialled"); + + // UNANSWERED, AND THE THREE CALLERS REFUSE RATHER THAN ANSWER IT. They used to spell it as no + // rows — not connected, no name, `revoke` false with NO DELETE SPENT — and that reading is the + // defect `arcade-revoke-invariant.test.ts` pins: `false` means "there was nothing to withdraw", + // a claim about the vendor's side, while `store.ts` deletes the local row on it and a live + // grant is left at the vendor that nothing names. A listing naming two providers was not read; + // it is refused, in this deployment's own sentence, with both providers in it. + const refusal = /names 2 different auth providers \(google, microsoft\)/; + await expect( + broker.isConnected({ account, toolkit: "Gmail" }), + ).rejects.toThrow(refusal); + await expect( + broker.accountName({ account, toolkit: "Gmail" }), + ).rejects.toThrow(refusal); + await expect(broker.revoke({ account, toolkit: "Gmail" })).rejects.toThrow( + refusal, + ); + expect(deletes(e).length).toBe(0); + }); + + test("the provider read asks for pages by limit and offset", async () => { + const e = engine({ + connections: 1, + connectionTotal: false, + toolsClaimed: 150, + toolsServed: 150, + }); + const { broker } = createArcadeClient("never-dialled"); + + // One provider across all 150 actions, so the toolkit still resolves and the person reads as + // connected — but it took two requests, and the window is this file's own page size rather than + // whatever the vendor happens to default to. + expect(await broker.isConnected({ account, toolkit: "Gmail" })).toBe(true); + expect(e.requests.filter((r) => r.startsWith("/v1/tools"))).toEqual([ + "/v1/tools?toolkit=Gmail&limit=100&offset=0", + "/v1/tools?toolkit=Gmail&limit=100&offset=100", + ]); + }); + + test("a truncated action listing refuses rather than answering a provider off a prefix", async () => { + const e = engine({ + connections: 1, + connectionTotal: false, + toolsClaimed: 300, + toolsServed: 250, + }); + const { broker } = createArcadeClient("never-dialled"); + + await expect( + broker.isConnected({ account, toolkit: "Gmail" }), + ).rejects.toThrow(/listed 250 of 300 actions for Gmail/); + await expect(broker.revoke({ account, toolkit: "Gmail" })).rejects.toThrow( + /listed 250 of 300 actions for Gmail/, + ); + expect(deletes(e).length).toBe(0); + }); +}); diff --git a/server/tests/arcade-provider-check.test.ts b/server/tests/arcade-provider-check.test.ts new file mode 100644 index 000000000..09d959011 --- /dev/null +++ b/server/tests/arcade-provider-check.test.ts @@ -0,0 +1,94 @@ +// server/tests/arcade-provider-check.test.ts +import { afterAll, describe, expect, test } from "bun:test"; +import { randomUUID } from "node:crypto"; +import { sql } from "drizzle-orm"; +import { createDatabase } from "../src/db/client"; +import { brokeredConnections } from "../src/db/schema/plugins"; +import { checkRoster } from "./support/constraints"; +import { TEST_POOL, testDatabaseUrl } from "./support/database"; + +const database = createDatabase(testDatabaseUrl(), TEST_POOL); +const app = `arcade-check-${randomUUID().slice(0, 8)}`; + +/** The constraint a failed insert names, read from the driver's cause rather than drizzle's wrapper. */ +const outcome = (run: () => PromiseLike) => + Promise.resolve() + .then(run) + .then( + () => "inserted", + (error: Error) => + String((error.cause as Error | undefined)?.message ?? error.message), + ); + +afterAll(async () => { + await database.execute( + sql`delete from brokered_connections where app = ${app}`, + ); + await database.$client.close(); +}); + +describe("brokered_connections.provider", () => { + test("an arcade row inserts", async () => { + expect( + await outcome(() => + database.insert(brokeredConnections).values({ + provider: "arcade", + app, + holder: "deployment", + vendorUserId: `openbot-deployment:arcade:${app}`, + }), + ), + ).toBe("inserted"); + }); + + /** + * The roster, not a sample of it. + * + * The two tests around this one insert one legal value and one junk value, and both of them stay + * green through a migration that quietly admits a THIRD provider: `arcade` still inserts, `nope` + * is still refused, and nothing anywhere reads what the constraint now permits. A provider the + * broker has no adapter for is a row `assertActivatable` counts and no code can serve, so the + * roster is pinned here, read back from the database rather than from the migration that wrote + * it. Growing it is a deliberate act that has to come through this line. + */ + test("the CHECK admits exactly the two providers the broker implements", async () => { + expect( + await checkRoster(database, "brokered_connections_provider_check"), + ).toEqual(["arcade", "composio"]); + }); + + test("an unknown provider is refused by the CHECK", async () => { + expect( + await outcome(() => + database.insert(brokeredConnections).values({ + provider: "nope" as "arcade", + app, + holder: "deployment", + vendorUserId: "v", + }), + ), + ).toMatch(/brokered_connections_provider_check/); + }); + + /** + * A row with no provider cannot exist, which is what makes the startup activation count sound. + * + * The count behind `assertActivatable` (server/src/index.ts) asks for the rows that are + * `ne(provider, )`. A SQL inequality never matches NULL, so a nullable + * `provider` would make exactly the ambiguous rows invisible to the guard that exists to see + * them. It is not nullable, and this is the test that keeps it so: drop the NOT NULL and this + * fails, which is the warning that the guard's predicate has to grow an `IS NULL` arm. + */ + test("a row with no provider is refused by NOT NULL, so no row hides from the count", async () => { + expect( + await outcome(() => + database.insert(brokeredConnections).values({ + provider: null as unknown as "arcade", + app, + holder: "deployment", + vendorUserId: "v", + }), + ), + ).toMatch(/null value in column "provider"/); + }); +}); diff --git a/server/tests/arcade-revoke-invariant.test.ts b/server/tests/arcade-revoke-invariant.test.ts new file mode 100644 index 000000000..e3e81d3c6 --- /dev/null +++ b/server/tests/arcade-revoke-invariant.test.ts @@ -0,0 +1,331 @@ +// server/tests/arcade-revoke-invariant.test.ts +/** + * ONE OUTCOME INVARIANT ON `revoke`, STATED ONCE AND ASKED OF EVERY VENDOR RESPONSE SHAPE. + * + * The live defect this seam has already suffered — and which two review rounds have now reached by + * four separate routes — is always the same OUTCOME, never the same mechanism: + * + * `revoke` ANSWERS `false` WITH NO DELETE SPENT AT THE VENDOR, while the caller deletes the + * local `brokered_connections` row anyway — leaving a live grant at the vendor that no row + * this deployment holds any longer names. + * + * Every existing test on this seam pins a MECHANISM: "the pager loops", "the fallback returns the + * parsed body", "the status allowlist refuses". A mechanism test passes for every shape it was + * written against and says nothing about the next one, so each new vendor response shape re-opens + * the same defect through whichever mechanism does not yet cover it. This file pins the OUTCOME + * instead, so a shape nobody anticipated is caught by an assertion rather than in production. + * + * THE INVARIANT, from `broker.ts:712-717` ("A PARTIAL ASK IS A FAILURE RATHER THAN A TRUE … It + * must throw, so that the row this deployment holds … is still standing when they press disconnect + * a second time"): + * + * 1. `revoke` NEVER answers `false` without a DELETE having been spent at the vendor. `false` + * means "there was nothing to withdraw", and that is a claim about the vendor's side which + * only a listing read WHOLE can support. + * 2. Where the connection listing was UNVERIFIABLE — not readable as the whole of itself — it + * does not answer at all. It throws. An answer either way is a guess, and both guesses are + * destructive: `false` orphans a live grant, `true` reports a partial ask as a clean success. + * + * ALL SEVEN SHAPES BELOW ARE UNVERIFIABLE LISTINGS, so for all seven the required outcome is the + * same: THROW. None of them may answer. The seven are enumerated verbatim from round-2 findings + * and each reaches the listing through a different door, which is the point — the assertion does + * not know or care which door. + * + * SERVED OVER A REAL SOCKET, for `arcade-pagination-engine.test.ts`'s reason: the rest of the + * adapter suite stubs SDK resource PROTOTYPES, and `OffsetPage`'s constructor manufactures + * `items: []` and `total_count: 0` for fields the vendor never sent. A hand-built stub cannot pose + * any of these seven questions, because the shapes ARE what the wire carried. + * + * DRIVEN THROUGH THE BROKER SEAM — the public `ConnectedAppBroker.revoke` — and never through an + * adapter internal. The invariant is a property of the seam; a test that reached `connectionsFor` + * directly would be pinning a mechanism again. + */ +import { afterEach, describe, expect, test } from "bun:test"; +import { useArcadeClient } from "../src/plugins/arcade"; +import { createArcadeClient } from "../src/plugins/arcade-adapter"; +import type { AccountRef } from "../src/plugins/shared-accounts"; + +const account: AccountRef = { + holder: "person", + userId: "u1", + vendorUserId: "vendor-u1", +}; + +/** The seven shapes, each named by what the VENDOR SENT rather than by what breaks. */ +type Shape = + /** 1. a non-JSON 200 response to the connection listing. */ + | "listing-is-not-json" + /** 2. a 204 / `content-length: 0` response on a paged endpoint. */ + | "listing-is-204" + /** 3. a body whose JSON is the literal `null`. */ + | "listing-is-json-null" + /** 4. `items: [null]` on the user-connections listing. */ + | "listing-item-is-null" + /** 5. `total_count` sent as a JSON string rather than a number, on a TRUNCATED listing. */ + | "total-count-is-a-string" + /** 6. a toolkit whose actions name ZERO provider ids. */ + | "toolkit-names-no-provider" + /** 7. a toolkit whose actions name TWO OR MORE provider ids. */ + | "toolkit-names-two-providers"; + +const CONNECTION_PAGE_SIZE = 100; + +/** A live, attributable user-connection row: the thing a DELETE would be spent on. */ +const connectionRow = (n: number) => ({ + id: `at_${n}`, + connection_id: `ac_${n}`, + connection_status: "active", + // A provider INSTANCE id, never a provider type — see `connectionsFor`'s comment. + provider_id: "google-openbot", + provider_type: "oauth2", + provider_user_info: { name: `person ${n}` }, + scopes: [], + user_id: account.vendorUserId, +}); + +/** One listed action, carrying the provider ids `authProviderOf` reads off the listing itself. */ +const toolRow = (toolkit: string, n: number, providers: string[]) => ({ + qualified_name: `${toolkit}.Action${n}`, + description: "", + toolkit: { name: toolkit, description: "" }, + input: { parameters: [] }, + requirements: { + authorization: + providers.length === 0 + ? // ZERO provider ids: the authorization block is there, the id is not. + { oauth2: { scopes: [] } } + : { + provider_id: providers[n % providers.length], + oauth2: { scopes: [] }, + }, + }, +}); + +/** Which provider ids this shape's action listing names. */ +function providersFor(shape: Shape): string[] { + if (shape === "toolkit-names-no-provider") return []; + if (shape === "toolkit-names-two-providers") return ["google", "microsoft"]; + return ["google"]; +} + +type Engine = { port: number; requests: string[]; stop: () => void }; + +/** + * The vendor, serving ONE shape. + * + * Everything the shape does not name answers the HEALTHY listing the live API answers with, so each + * test varies exactly one thing and the DELETE path is always open: a `revoke` that wanted to spend + * a DELETE here could always have spent one, which is what makes "no DELETE reached the vendor" a + * statement about the adapter rather than about the stub. + */ +function startEngine(shape: Shape): Engine { + const requests: string[] = []; + // Shape 5's truncation: 250 rows claimed, 100 served. The claim is the only thing that could say + // the listing is short, and it arrives as a STRING. + const truncated = shape === "total-count-is-a-string"; + const rows = Array.from({ length: truncated ? 250 : 3 }, (_, n) => + connectionRow(n), + ); + const served = truncated ? 100 : rows.length; + + const server = Bun.serve({ + port: 0, + fetch(request) { + const url = new URL(request.url); + requests.push(`${request.method} ${url.pathname}${url.search}`); + const offset = Number(url.searchParams.get("offset") ?? "0"); + const limit = Number( + url.searchParams.get("limit") ?? String(CONNECTION_PAGE_SIZE), + ); + + // THE DELETE, always available and always counted. + if (url.pathname.startsWith("/v1/admin/user_connections/")) { + return new Response(null, { status: 204 }); + } + + if (url.pathname === "/v1/admin/user_connections") { + if (shape === "listing-is-not-json") { + // 1. A 200 that is not JSON at all — a proxy's courtesy page, served with the status of + // a real answer. + return new Response("OK", { + status: 200, + headers: { "content-type": "text/html; charset=utf-8" }, + }); + } + if (shape === "listing-is-204") { + // 2. 204 with no body and `content-length: 0` on a PAGED endpoint. Nothing in it says + // how many connections exist; it says only that the vendor sent no list. + return new Response(null, { status: 204 }); + } + if (shape === "listing-is-json-null") { + // 3. Well-formed JSON whose whole value is `null`. + return new Response("null", { + status: 200, + headers: { "content-type": "application/json" }, + }); + } + if (shape === "listing-item-is-null") { + // 4. A list with a hole in it. One row is unreadable, and the other two are real + // connections a DELETE is owed to. + return Response.json({ + items: [null, connectionRow(0), connectionRow(1)], + offset, + limit, + page_count: 3, + total_count: 3, + }); + } + const page = rows.slice(offset, Math.min(offset + limit, served)); + const body: Record = { + items: page, + offset, + limit, + page_count: page.length, + }; + // 5. The cross-check's only input, sent as a STRING. `reportedTotalOf` keeps numbers only, + // so "the vendor did not say" and "the vendor said 250" collapse into one answer. + body.total_count = truncated ? String(rows.length) : rows.length; + return Response.json(body); + } + + if (url.pathname === "/v1/admin/auth_providers") { + return Response.json({ + items: [ + { id: "google-openbot", provider_id: "google", type: "oauth2" }, + { + id: "arcade-microsoft", + provider_id: "microsoft", + type: "oauth2", + }, + ], + offset: 0, + limit, + page_count: 2, + total_count: 2, + }); + } + + if (url.pathname === "/v1/tools") { + const toolkit = url.searchParams.get("toolkit") ?? "Gmail"; + const providers = providersFor(shape); + const page = + offset === 0 + ? Array.from({ length: 4 }, (_, n) => + toolRow(toolkit, n, providers), + ) + : []; + return Response.json({ + items: page, + offset, + limit, + page_count: page.length, + total_count: 4, + }); + } + + return new Response("not found", { status: 404 }); + }, + }); + // `Bun.serve().port` is `number | undefined`. Refuse loudly rather than coercing: a stub that + // never bound a port would otherwise send every request of this file to a nonsense address and + // the invariant below would "hold" for the wrong reason. + const { port } = server; + if (port === undefined) + throw new Error("the stub vendor did not bind a port"); + return { port, requests, stop: () => server.stop(true) }; +} + +let running: Engine | null = null; +const wasBaseURL = process.env.ARCADE_BASE_URL; + +function engine(shape: Shape): Engine { + running = startEngine(shape); + // `new Arcade({ apiKey })` reads this at construction, so the server starts FIRST. + process.env.ARCADE_BASE_URL = `http://localhost:${running.port}`; + return running; +} + +afterEach(() => { + running?.stop(); + running = null; + useArcadeClient(null); + if (wasBaseURL === undefined) delete process.env.ARCADE_BASE_URL; + else process.env.ARCADE_BASE_URL = wasBaseURL; +}); + +/** How many DELETEs actually reached the vendor. Half the invariant is counted here. */ +const deletesSpent = (e: Engine): number => + e.requests.filter( + (r) => r.startsWith("DELETE ") && r.includes("/v1/admin/user_connections/"), + ).length; + +type Outcome = + | { kind: "returned"; value: boolean } + | { kind: "threw"; message: string }; + +type Broker = ReturnType["broker"]; + +async function revokeOutcome(broker: Broker): Promise { + try { + return { + kind: "returned", + value: await broker.revoke({ account, toolkit: "Gmail" }), + }; + } catch (error) { + return { + kind: "threw", + message: error instanceof Error ? error.message : String(error), + }; + } +} + +/** The seven shapes, with the sentence each one is enumerated under. */ +const SHAPES: [Shape, string][] = [ + ["listing-is-not-json", "a non-JSON 200 response to the connection listing"], + ["listing-is-204", "a 204 / content-length: 0 response on a paged endpoint"], + ["listing-is-json-null", "a body whose JSON is the literal null"], + ["listing-item-is-null", "items: [null] on the user-connections listing"], + [ + "total-count-is-a-string", + "total_count sent as a JSON string rather than a number", + ], + [ + "toolkit-names-no-provider", + "a toolkit whose actions name zero provider ids", + ], + [ + "toolkit-names-two-providers", + "a toolkit whose actions name two or more provider ids", + ], +]; + +describe("revoke never answers off a listing it could not read whole", () => { + for (const [shape, sentence] of SHAPES) { + test(sentence, async () => { + const e = engine(shape); + const { broker } = createArcadeClient("never-dialled"); + + const outcome = await revokeOutcome(broker); + const deletes = deletesSpent(e); + const answered = + outcome.kind === "threw" + ? "threw" + : `returned ${String(outcome.value)}`; + + // (1) `false` IS A CLAIM ABOUT THE VENDOR'S SIDE and may never be made for free. Asserted + // first and on its own, because this is the live defect's exact signature: `false` plus + // zero DELETEs, with the caller deleting the local row regardless. + const orphansAGrant = answered === "returned false" && deletes === 0; + expect({ shape, orphansAGrant }).toEqual({ shape, orphansAGrant: false }); + + // (2) AND THE LISTING WAS UNVERIFIABLE IN EVERY ONE OF THE SEVEN, so no answer is available + // at all. `broker.ts:712-717`: an unreadable or partial ask must THROW, so the local row + // survives to name the app on the second press of Disconnect. + expect({ shape, answered, deletesSpent: deletes }).toEqual({ + shape, + answered: "threw", + deletesSpent: deletes, + }); + }); + } +}); diff --git a/server/tests/arcade-sibling-collateral.test.ts b/server/tests/arcade-sibling-collateral.test.ts new file mode 100644 index 000000000..81e82e1a9 --- /dev/null +++ b/server/tests/arcade-sibling-collateral.test.ts @@ -0,0 +1,522 @@ +// server/tests/arcade-sibling-collateral.test.ts +import { afterAll, afterEach, describe, expect, test } from "bun:test"; +import { randomUUID } from "node:crypto"; +import { and, asc, eq, inArray, sql } from "drizzle-orm"; +import { createAuditStore } from "../src/audit"; +import { createDatabase } from "../src/db/client"; +import { auditEvents, brokeredConnections, mcpServers } from "../src/db/schema"; +import { createAccountModeSwitch } from "../src/plugins/account-mode"; +import type { ConnectedAppBroker } from "../src/plugins/broker"; +import { createSharedUseStore } from "../src/plugins/shared-use-store"; +import { createPluginStore } from "../src/plugins/store"; +import { TEST_POOL, testDatabaseUrl } from "./support/database"; + +/* + * SCOPING. `audit_events` is append-only and `brokered_connections` is long-lived, so every + * assertion here is keyed on names THIS TEST ALONE writes: each test mints its own `run()` — a + * fresh suffix on every app and every vendor identity it touches — and reads rows and the trail + * only by those. A "did not happen" assertion is therefore one only this test could have falsified. + */ +const database = createDatabase(testDatabaseUrl(), TEST_POOL); + +/* The pool this file opened, given back. `bun test` runs every file in one process and nothing + * reaps an idle connection, so a pool held to the end of the run is two connections the rest of + * the suite cannot have. */ +afterAll(async () => { + await database.$client.close(); +}); +const suite = randomUUID().slice(0, 8); + +const providerOf = (toolkit: string) => + toolkit.startsWith("Slack-") ? "slack" : "google"; + +const broker: ConnectedAppBroker = { + grantIsLocal: false, + authorizations: { + status: async () => { + throw new Error("nothing here polls an authorization"); + }, + confirmReturn: async () => { + throw new Error("nothing here confirms a return leg"); + }, + }, + authProviderOf: async (toolkit) => providerOf(toolkit), + grantsFor: async () => [], + listApps: async () => [], + ensureAuthConfig: async () => "standing", + deleteAuthConfig: async () => {}, + authorize: async () => ({ + redirectUrl: "https://vendor.example/consent", + authorizationId: "ar_1", + }), + isConnected: async () => true, + revoke: async () => true, + connectionFields: async () => [], + connectWithFields: async () => ({ accountId: "ca_1" }), + revokeAccount: async () => {}, + accountName: async () => "acme", +}; + +const store = createPluginStore({ + brokerProvider: "arcade", + database, + auditStore: createAuditStore(database), + credentials: {} as never, + encryptionKey: "x".repeat(44), + policy: () => ({ mode: "enforce" as const, deny: [], allow: ["true"] }), + broker, + deploymentId: "acme", + sharedUse: async () => ({ allowed: true }), +}); +const modes = createAccountModeSwitch({ + store, + sharedUse: createSharedUseStore(database, "arcade"), + deploymentId: "acme", + audit: createAuditStore(database), + teamRules: undefined, +}); + +const apps: string[] = []; +let n = 0; +/** This test's own names: nothing another test writes can share one. */ +function run() { + n += 1; + const tag = `${suite}${n}`; + const names = { + gmail: `Gmail-${tag}`, + calendar: `GoogleCalendar-${tag}`, + slack: `Slack-${tag}`, + person: `person-${tag}`, + }; + apps.push(names.gmail, names.calendar, names.slack); + return names; +} +async function server( + app: string, + mode: "personal" | "shared", + authScheme = "OAUTH2", +) { + await database.insert(mcpServers).values({ + id: app, + title: app, + vendor: "Arcade", + url: `arcade://${app}`, + provenance: "arcade", + authScheme, + accountMode: mode, + }); +} +async function hold( + app: string, + vendorUserId: string, + holder: "person" | "deployment" = "person", +) { + await database.insert(brokeredConnections).values({ + provider: "arcade", + app, + holder, + userId: holder === "person" ? vendorUserId : null, + vendorUserId, + }); +} +const rowsFor = async (names: string[]) => + ( + await database + .select({ app: brokeredConnections.app }) + .from(brokeredConnections) + .where(inArray(brokeredConnections.app, names)) + .orderBy(asc(brokeredConnections.app)) + ).map((row) => row.app); +const trailFor = (names: string[]) => + database + .select({ + app: auditEvents.targetId, + payload: sql>`payload`, + }) + .from(auditEvents) + .where( + and( + eq(auditEvents.eventType, "mcp.account_disconnected"), + inArray(auditEvents.targetId, names), + ), + ) + .orderBy(asc(auditEvents.targetId)); + +afterEach(async () => { + if (apps.length) { + await database + .delete(brokeredConnections) + .where(inArray(brokeredConnections.app, apps)); + await database.delete(mcpServers).where(inArray(mcpServers.id, apps)); + } + apps.length = 0; +}); + +describe("the Personal to Shared switch", () => { + test("ends a sibling app's connection too, and removes and audits its row", async () => { + const t = run(); + await server(t.gmail, "personal"); + await hold(t.gmail, t.person); + await hold(t.calendar, t.person); // same identity, same provider: ended with Gmail + await hold(t.slack, t.person); // another provider: not touched + + const result = await modes.switchMode({ + serverId: t.gmail, + mode: "shared", + by: "admin", + confirm: true, + }); + + expect(result).toEqual({ changed: true, revoked: 1 }); + expect(await rowsFor([t.gmail, t.calendar, t.slack])).toEqual([t.slack]); + const trail = await trailFor([t.gmail, t.calendar, t.slack]); + expect(trail.map((event) => event.app)).toEqual( + [t.calendar, t.gmail].sort(), + ); + const sibling = trail.find((event) => event.app === t.calendar); + expect(sibling?.payload).toMatchObject({ + reason: "mode_switched", + endedWith: t.gmail, + owner: t.person, + }); + }); + + test("a Shared app's switch back leaves another Shared app on the same provider alone", async () => { + const t = run(); + await server(t.gmail, "shared"); + // Two Shared apps, one provider, but each its OWN minted identity: no shared connection. + await hold(t.gmail, `deployment-${t.gmail}`, "deployment"); + await hold(t.calendar, `deployment-${t.calendar}`, "deployment"); + + const result = await modes.switchMode({ + serverId: t.gmail, + mode: "personal", + by: "admin", + confirm: true, + }); + + expect(result).toEqual({ changed: true, revoked: 1 }); + expect(await rowsFor([t.gmail, t.calendar])).toEqual([t.calendar]); + expect((await trailFor([t.gmail, t.calendar])).map((e) => e.app)).toEqual([ + t.gmail, + ]); + }); +}); + +describe("removing an app", () => { + test("ends a sibling app's connection too, and removes and audits its row", async () => { + const t = run(); + await server(t.gmail, "personal"); + await hold(t.gmail, t.person); + await hold(t.calendar, t.person); + await hold(t.slack, t.person); + + await store.removeServer(t.gmail, "admin"); + + expect(await rowsFor([t.gmail, t.calendar, t.slack])).toEqual([t.slack]); + const trail = await trailFor([t.gmail, t.calendar, t.slack]); + expect(trail.map((event) => event.app)).toEqual( + [t.calendar, t.gmail].sort(), + ); + const sibling = trail.find((event) => event.app === t.calendar); + expect(sibling?.payload).toMatchObject({ + reason: "mcp_server_removed", + endedWith: t.gmail, + owner: t.person, + unansweredSiblings: 0, + }); + }); + + /* + * THE BOUND, AND THE ONLY WAY IT IS VISIBLE. `authProviderOf` is a live `tools.list` per call on + * Arcade and free on Composio (`async (toolkit) => toolkit`), so no behavioural assertion on + * either provider can show the removal asking for it once per PERSON. Counting the calls on a + * stub can: four people holding the same three apps is sixteen resolutions unmemoized, and the + * memo threaded through this one removal brings it to one per DISTINCT TOOLKIT. + */ + test("resolves each toolkit's auth provider once for the whole removal, not once per person", async () => { + const t = run(); + const people = [1, 2, 3, 4].map((i) => `${t.person}-${i}`); + await server(t.gmail, "personal"); + for (const person of people) { + await hold(t.gmail, person); + await hold(t.calendar, person); + await hold(t.slack, person); + } + const asked: string[] = []; + const counting: ConnectedAppBroker = { + ...broker, + authProviderOf: async (toolkit) => { + asked.push(toolkit); + return providerOf(toolkit); + }, + }; + const countingStore = createPluginStore({ + brokerProvider: "arcade", + database, + auditStore: createAuditStore(database), + credentials: {} as never, + encryptionKey: "x".repeat(44), + policy: () => ({ mode: "enforce" as const, deny: [], allow: ["true"] }), + broker: counting, + deploymentId: "acme", + sharedUse: async () => ({ allowed: true }), + }); + + await countingStore.removeServer(t.gmail, "admin"); + + // One ask per distinct toolkit across the rows walked — three — however many people hold them. + expect([...new Set(asked)].sort()).toEqual( + [t.calendar, t.gmail, t.slack].sort(), + ); + expect(asked.length).toBe(3); + // And the removal itself is unchanged: every person's Gmail and Calendar gone, Slack standing. + expect(await rowsFor([t.gmail, t.calendar, t.slack])).toEqual( + people.map(() => t.slack), + ); + }); + + test("a revoke that answers false does not delete or audit a sibling as ended", async () => { + const t = run(); + await server(t.gmail, "personal"); + await hold(t.gmail, t.person); + await hold(t.calendar, t.person); + const unresolved: ConnectedAppBroker = { + ...broker, + revoke: async () => false, + }; + const falseStore = createPluginStore({ + brokerProvider: "arcade", + database, + auditStore: createAuditStore(database), + credentials: {} as never, + encryptionKey: "x".repeat(44), + policy: () => ({ mode: "enforce" as const, deny: [], allow: ["true"] }), + broker: unresolved, + deploymentId: "acme", + sharedUse: async () => ({ allowed: true }), + }); + + await falseStore.removeServer(t.gmail, "admin"); + + // The vendor was not shown to have ended Calendar: its row stands and nothing claims it ended. + expect(await rowsFor([t.gmail, t.calendar])).toEqual([t.calendar]); + const trail = await trailFor([t.gmail, t.calendar]); + expect(trail.map((event) => event.app)).toEqual([t.gmail]); + expect(trail[0]?.payload).toMatchObject({ + vendorRevocationRequested: false, + }); + }); + + /* + * RULE 1 OF `clearEndedSiblings`, on the third act that cascades. Calendar shares Gmail's identity + * and auth provider, so `resolveSiblings` names it — but this deployment holds a KEY for it, and + * the one OAuth revoke a removal asks for never ended a key. Its row is the only way left to + * reach that live account, so it stands, and the trail claims nothing about it. + */ + test("a KEY sibling's row SURVIVES the removal, and nothing is written about it", async () => { + const t = run(); + await server(t.gmail, "personal"); + await server(t.calendar, "personal", "API_KEY"); + await hold(t.gmail, t.person); + await hold(t.calendar, t.person); + + await store.removeServer(t.gmail, "admin"); + + expect(await rowsFor([t.gmail, t.calendar])).toEqual([t.calendar]); + expect( + (await trailFor([t.gmail, t.calendar])).map((event) => event.app), + ).toEqual([t.gmail]); + }); + + test("a partial vendor failure throws and leaves every row standing", async () => { + const t = run(); + await server(t.gmail, "personal"); + await hold(t.gmail, t.person); + await hold(t.calendar, t.person); + const failing = createPluginStore({ + brokerProvider: "arcade", + database, + auditStore: createAuditStore(database), + credentials: {} as never, + encryptionKey: "x".repeat(44), + policy: () => ({ mode: "enforce" as const, deny: [], allow: ["true"] }), + broker: { + ...broker, + revoke: async () => { + throw new Error("vendor down"); + }, + }, + deploymentId: "acme", + sharedUse: async () => ({ allowed: true }), + }); + + await expect(failing.removeServer(t.gmail, "admin")).rejects.toThrow( + "vendor down", + ); + + expect(await rowsFor([t.gmail, t.calendar])).toEqual( + [t.calendar, t.gmail].sort(), + ); + expect(await trailFor([t.gmail, t.calendar])).toEqual([]); + }); +}); + +describe("offboarding a person", () => { + /* + * CRITERION. Every app the vendor ended as part of this offboarding is recorded as one the + * vendor was asked about, and names the grant it went with. + * + * THE BROKER HERE IS ARCADE'S OWN SHAPE: one connection per (identity, auth provider). The + * first revoke on a provider ends it and answers true; a second, for a sibling app on the same + * connection, answers that there was nothing left to end. Passing that second answer through + * untouched files the sibling as a grant nobody asked about, on the one trail that is supposed + * to say whether the person's access was really withdrawn. + */ + test("records a sibling app as revoked, naming the app whose revoke ended it", async () => { + const t = run(); + await hold(t.gmail, t.person); + await hold(t.calendar, t.person); // same identity, same provider: ended with Gmail + await hold(t.slack, t.person); // its own provider: asked and answered on its own + + const ended = new Set(); + const arcade: ConnectedAppBroker = { + ...broker, + revoke: async ({ account, toolkit }) => { + const connection = `${account.vendorUserId}:${providerOf(toolkit)}`; + if (ended.has(connection)) return false; + ended.add(connection); + return true; + }, + }; + const arcadeStore = createPluginStore({ + brokerProvider: "arcade", + database, + auditStore: createAuditStore(database), + credentials: {} as never, + encryptionKey: "x".repeat(44), + policy: () => ({ mode: "enforce" as const, deny: [], allow: ["true"] }), + broker: arcade, + deploymentId: "acme", + sharedUse: async () => ({ allowed: true }), + }); + + expect(await arcadeStore.retireConnectionsFor(t.person, "admin")).toEqual({ + retired: 3, + }); + expect(await rowsFor([t.gmail, t.calendar, t.slack])).toEqual([]); + + const trail = await trailFor([t.gmail, t.calendar, t.slack]); + const row = (app: string) => trail.find((event) => event.app === app); + // The app whose revoke ended the Google connection, and the one on its own provider: both + // asked directly, neither ended with anything else. + expect(row(t.gmail)?.payload).toMatchObject({ + reason: "person_removed", + vendorRevocationRequested: true, + }); + expect(row(t.gmail)?.payload.endedWith).toBeUndefined(); + expect(row(t.slack)?.payload).toMatchObject({ + vendorRevocationRequested: true, + }); + expect(row(t.slack)?.payload.endedWith).toBeUndefined(); + // And the sibling, whose own ask answered false because Gmail's had already ended it. + expect(row(t.calendar)?.payload).toMatchObject({ + reason: "person_removed", + vendorRevocationRequested: true, + endedWith: t.gmail, + unansweredSiblings: 0, + }); + }); +}); + +/* + * WHAT THE TRAIL SAYS ABOUT A KEY APP, on the two acts that used to decide it for themselves (round + * 2, K5: A5b, A5c, L5-a). A key is a credential this deployment holds; no consent revoke at the + * vendor reaches it, so no `mcp.account_disconnected` row may say a vendor was asked to withdraw + * one — the reading `disconnectBrokered` already writes — nor that an OAuth sibling's revoke ended + * it. The ROWS were already right on both acts; these hold what the trail says about why. + */ +describe("the trail about a KEY app", () => { + /** A store over `revoke`, otherwise the file's own broker. */ + const storeWith = (revoke: ConnectedAppBroker["revoke"]) => + createPluginStore({ + brokerProvider: "arcade", + database, + auditStore: createAuditStore(database), + credentials: {} as never, + encryptionKey: "x".repeat(44), + policy: () => ({ mode: "enforce" as const, deny: [], allow: ["true"] }), + broker: { ...broker, revoke }, + deploymentId: "acme", + sharedUse: async () => ({ allowed: true }), + }); + /** The one trail row for `app`, or a failure naming what is missing. */ + async function onlyRowFor(app: string): Promise> { + const rows = await trailFor([app]); + if (rows.length !== 1 || !rows[0]) { + throw new Error( + `expected one trail row for ${app}, found ${rows.length}`, + ); + } + return rows[0].payload; + } + + test("offboarding: an OAuth sibling's revoke is not named as what ended a KEY app", async () => { + const t = run(); + await server(t.gmail, "personal"); + await server(t.calendar, "personal", "API_KEY"); + await hold(t.gmail, t.person); + await hold(t.calendar, t.person); + // Arcade's shape: Gmail is asked first, ends the Google connection and answers true; the KEY + // app's own ask then finds nothing and answers false. + const ended = new Set(); + const arcadeStore = storeWith(async ({ account, toolkit }) => { + const connection = `${account.vendorUserId}:${providerOf(toolkit)}`; + if (ended.has(connection)) return false; + ended.add(connection); + return true; + }); + + await arcadeStore.retireConnectionsFor(t.person, "admin"); + + expect(await onlyRowFor(t.calendar)).toEqual({ + actor: "admin", + server: t.calendar, + owner: t.person, + reason: "person_removed", + vendorRevocationRequested: false, + }); + }); + + test("offboarding: a KEY app's own revoke answering true is not filed as a vendor withdrawal", async () => { + const t = run(); + await server(t.calendar, "personal", "API_KEY"); + await hold(t.calendar, t.person); + + await storeWith(async () => true).retireConnectionsFor(t.person, "admin"); + + expect(await onlyRowFor(t.calendar)).toEqual({ + actor: "admin", + server: t.calendar, + owner: t.person, + reason: "person_removed", + vendorRevocationRequested: false, + }); + }); + + test("removing a KEY app: its own revoke answering true is not filed as a vendor withdrawal", async () => { + const t = run(); + await server(t.calendar, "personal", "API_KEY"); + await hold(t.calendar, t.person); + + await storeWith(async () => true).removeServer(t.calendar, "admin"); + + expect(await onlyRowFor(t.calendar)).toEqual({ + actor: "admin", + server: t.calendar, + owner: t.person, + reason: "mcp_server_removed", + vendorRevocationRequested: false, + }); + }); +}); diff --git a/server/tests/arcade-siblings.test.ts b/server/tests/arcade-siblings.test.ts new file mode 100644 index 000000000..9d2dde38e --- /dev/null +++ b/server/tests/arcade-siblings.test.ts @@ -0,0 +1,260 @@ +// server/tests/arcade-siblings.test.ts +import { afterAll, afterEach, describe, expect, test } from "bun:test"; +import { randomUUID } from "node:crypto"; +import { inArray } from "drizzle-orm"; +import { createAuditStore } from "../src/audit"; +import { createDatabase } from "../src/db/client"; +import { brokeredConnections } from "../src/db/schema"; +import type { ConnectedAppBroker } from "../src/plugins/broker"; +import { createComposioClient } from "../src/plugins/composio-adapter"; +import { mintDeploymentVendorUserId } from "../src/plugins/shared-accounts"; +import { connectionSiblings, createPluginStore } from "../src/plugins/store"; +import { TEST_POOL, testDatabaseUrl } from "./support/database"; + +const database = createDatabase(testDatabaseUrl(), TEST_POOL); + +/* The pool this file opened, given back. `bun test` runs every file in one process and nothing + * reaps an idle connection, so a pool held to the end of the run is two connections the rest of + * the suite cannot have. */ +afterAll(async () => { + await database.$client.close(); +}); +const suite = randomUUID().slice(0, 8); +const gmail = `Gmail-${suite}`; +const calendar = `GoogleCalendar-${suite}`; +const slack = `Slack-${suite}`; +const lonely = `Lonely-${suite}`; + +// Which vendor auth provider each app's connection is held under, as the adapter reads it off the +// vendor's own listing. Gmail and Calendar are Google; Slack is Slack — and NONE of them is named +// after its toolkit, which is the fact the resolver must not be able to guess its way around. +const providerOf: Record = { + [gmail]: "google", + [calendar]: "google", + [slack]: "slack", + [lonely]: "google", +}; +/** Every toolkit the store asked about, in order. The pre-filter is what this pins. */ +const asked: string[] = []; + +const broker: ConnectedAppBroker = { + grantIsLocal: false, + authorizations: { + status: async () => { + throw new Error("nothing here polls an authorization"); + }, + confirmReturn: async () => { + throw new Error("nothing here confirms a return leg"); + }, + }, + authProviderOf: async (toolkit) => { + asked.push(toolkit); + return providerOf[toolkit] ?? null; + }, + grantsFor: async () => [], + listApps: async () => [], + ensureAuthConfig: async () => "standing", + deleteAuthConfig: async () => {}, + authorize: async () => ({ + redirectUrl: "https://vendor.example/consent", + authorizationId: "ar_1", + }), + isConnected: async () => true, + revoke: async () => true, + connectionFields: async () => [], + connectWithFields: async () => ({ accountId: "ca_1" }), + revokeAccount: async () => {}, + accountName: async () => "acme", +}; + +const store = createPluginStore({ + brokerProvider: "arcade", + database, + auditStore: createAuditStore(database), + credentials: {} as never, + encryptionKey: "x".repeat(44), + policy: () => ({ mode: "enforce" as const, deny: [], allow: ["true"] }), + broker, +}); + +const seeded: string[] = []; +async function holdShared(app: string, vendorUserId: string) { + seeded.push(app); + await database.insert(brokeredConnections).values({ + provider: "arcade", + app, + holder: "deployment", + vendorUserId, + }); +} +async function holdPersonal(app: string, userId: string) { + seeded.push(app); + await database.insert(brokeredConnections).values({ + provider: "arcade", + app, + holder: "person", + userId, + vendorUserId: userId, + }); +} + +afterEach(async () => { + if (seeded.length) + await database + .delete(brokeredConnections) + .where(inArray(brokeredConnections.app, seeded)); + seeded.length = 0; + asked.length = 0; +}); + +/** + * THE PAIR, ASSERTED ON THE PURE FUNCTION, WHICH IS WHERE IT IS NOW THE ONLY THING ASSERTING IT. + * + * `siblingApps` pre-filters its scan on the asking identity in SQL, so a footprint on another + * identity never reaches `connectionSiblings` through that door any more and a store-level test can + * no longer tell the identity check from the `WHERE`. The rule itself has not moved — the apps that + * share a connection are the apps sharing BOTH the vendor identity and the auth provider — so the + * proof moves here, where deleting the `vendorUserId` equality reddens it. + */ +describe("connectionSiblings keys on the pair and never the provider alone", () => { + test("two shared Google apps with different minted identities are not siblings", () => { + const gmailIdentity = mintDeploymentVendorUserId(`acme-${suite}`); + const calendarIdentity = mintDeploymentVendorUserId(`acme-${suite}`); + expect(gmailIdentity).not.toBe(calendarIdentity); + + expect( + connectionSiblings( + { app: gmail, vendorUserId: gmailIdentity, authProvider: "google" }, + [ + { app: gmail, vendorUserId: gmailIdentity, authProvider: "google" }, + { + app: calendar, + vendorUserId: calendarIdentity, + authProvider: "google", + }, + ], + ), + ).toEqual([]); + }); + + test("one identity on one provider is siblings, case-folded on the provider alone", () => { + expect( + connectionSiblings( + { app: gmail, vendorUserId: "u", authProvider: "google" }, + [ + { app: calendar, vendorUserId: "u", authProvider: "GOOGLE" }, + { app: slack, vendorUserId: "u", authProvider: "slack" }, + ], + ), + ).toEqual([calendar]); + }); +}); + +describe("revocation siblings are keyed on (vendor identity, auth provider)", () => { + test("two Shared apps on the same provider with DIFFERENT minted identities are not siblings", async () => { + const gmailIdentity = mintDeploymentVendorUserId(`acme-${suite}`); + const calendarIdentity = mintDeploymentVendorUserId(`acme-${suite}`); + expect(gmailIdentity).not.toBe(calendarIdentity); + await holdShared(gmail, gmailIdentity); + await holdShared(calendar, calendarIdentity); + + expect( + await store.siblingApps({ + toolkit: gmail, + account: { holder: "deployment", vendorUserId: gmailIdentity }, + }), + ).toEqual({ siblings: [], unanswered: 0 }); + }); + + test("two apps genuinely sharing the pair are siblings, and an app on another provider is not", async () => { + const userId = `person-${suite}`; + await holdPersonal(gmail, userId); + await holdPersonal(calendar, userId); + await holdPersonal(slack, userId); + + expect( + await store.siblingApps({ + toolkit: gmail, + account: { holder: "person", userId, vendorUserId: userId }, + }), + ).toEqual({ siblings: [calendar], unanswered: 0 }); + }); + + test("an app with no co-tenant has an empty list, never itself", async () => { + const userId = `solo-${suite}`; + await holdPersonal(lonely, userId); + + expect( + await store.siblingApps({ + toolkit: lonely, + account: { holder: "person", userId, vendorUserId: userId }, + }), + ).toEqual({ siblings: [], unanswered: 0 }); + }); + + /** + * THE PRE-FILTER, AND A CALL COUNT IS THE ONLY THING THAT PINS IT. Resolving the auth provider is + * a VENDOR CALL per app, made on a screen somebody is waiting on (the Disconnect confirmation), + * and a scan that resolved every brokered row of the deployment and only then discarded the rows + * on other identities would be unbounded in the one dimension that grows. The answer is identical + * either way — `connectionSiblings` discards exactly those rows — so nothing but the count can + * tell the two implementations apart. + */ + test("resolves the auth provider ONLY for rows on the asking identity", async () => { + const mine = `mine-${suite}`; + const theirs = `theirs-${suite}`; + await holdPersonal(gmail, mine); + await holdPersonal(calendar, mine); + await holdPersonal(slack, theirs); + await holdShared(lonely, mintDeploymentVendorUserId(`acme-${suite}`)); + + expect( + await store.siblingApps({ + toolkit: gmail, + account: { holder: "person", userId: mine, vendorUserId: mine }, + }), + ).toEqual({ siblings: [calendar], unanswered: 0 }); + + // The asking toolkit, plus its own two rows. Never `slack`, never `lonely`. + expect(asked.toSorted()).toEqual([calendar, gmail, gmail].toSorted()); + }); +}); + +/** + * COMPOSIO'S EMPTY ANSWER IS THE TRUTH ABOUT COMPOSIO. Its connections are per auth config and an + * auth config is per toolkit, so each app is its own auth provider and no two apps ever share one + * connection — however many apps one identity holds. Asserted through the store rather than only + * on the broker, because the empty list is what a disconnect screen will render. + */ +describe("siblingApps under Composio", () => { + const composioStore = createPluginStore({ + brokerProvider: "composio", + database, + auditStore: createAuditStore(database), + credentials: {} as never, + encryptionKey: "x".repeat(44), + policy: () => ({ mode: "enforce" as const, deny: [], allow: ["true"] }), + broker: createComposioClient("never-dialled").broker, + }); + + test("an identity holding several apps has no siblings at any of them", async () => { + const userId = `composio-${suite}`; + for (const app of [gmail, calendar, slack]) { + seeded.push(app); + await database.insert(brokeredConnections).values({ + provider: "composio", + app, + holder: "person", + userId, + vendorUserId: userId, + }); + } + + expect( + await composioStore.siblingApps({ + toolkit: gmail, + account: { holder: "person", userId, vendorUserId: userId }, + }), + ).toEqual({ siblings: [], unanswered: 0 }); + }); +}); diff --git a/server/tests/arcade-toolkit-listing-deadline-engine.test.ts b/server/tests/arcade-toolkit-listing-deadline-engine.test.ts new file mode 100644 index 000000000..2a2f4ae30 --- /dev/null +++ b/server/tests/arcade-toolkit-listing-deadline-engine.test.ts @@ -0,0 +1,340 @@ +import { afterEach, describe, expect, test } from "bun:test"; +import { useArcadeClient } from "../src/plugins/arcade"; +import { createArcadeClient } from "../src/plugins/arcade-adapter"; +import { withVendorDeadline } from "../src/plugins/route-groups/context"; +import type { AccountRef } from "../src/plugins/shared-accounts"; + +/** + * ONE LARGE TOOLKIT MUST BE READABLE INSIDE ITS DEADLINE: THE GRANTS SCREEN AND DISCONNECT. + * + * The sibling of `arcade-directory-deadline-engine.test.ts`. That file holds the WHOLE directory to + * the deadline; this one holds the PER-TOOLKIT action listing — read by `grantsFor` (the grants + * screen) and by `authProvidersNamedBy` (behind `authProviderOf`, `isConnected` and `revoke`) — to + * the same deadline, at the size of the largest toolkit Arcade publishes. + * + * MEASURED against the live directory (8,320 tools across 129 toolkits): `GithubApi` has **818** + * actions. Read 100 at a time, one after another, that is 9 sequential pages at ~1.19 s each, + * ~10.7 s — past the 10 s `VENDOR_CALL_TIMEOUT_MS` every one of those routes is wrapped in. The + * grants screen for one of the most likely apps anybody adds could not load, and Disconnect for it + * could not even start. + * + * Time is scaled ×10 as in the directory test; the RATIO between page latency and deadline is the + * live one: + * + * | measured live | here (÷10) | + * |----------------------------------------|--------------| + * | `GithubApi` 818 actions | 818 (same) | + * | ~1.19 s per page at limit ≤ 100 | 119 ms | + * | ~1.8 s per page at limit 250…1000 | 180 ms | + * | limit above 1000 REJECTED, empty body | same | + * | `VENDOR_CALL_TIMEOUT_MS` 10,000 ms | 1,000 ms | + * + * The admin listings and the DELETE on the Disconnect path were not measured separately; they are + * served at the same small-page latency, which is the conservative reading. + */ + +const SCALE = 10; +/** `route-groups/context.ts`'s `VENDOR_CALL_TIMEOUT_MS`, scaled. */ +const DEADLINE_MS = 10_000 / SCALE; +/** The measured largest toolkit in Arcade's directory. */ +const GITHUB_API = 818; +const TOOLKIT = "GithubApi"; + +const account: AccountRef = { + holder: "person", + userId: "u1", + vendorUserId: "vendor-u1", +}; + +const toolRow = (n: number) => ({ + qualified_name: `${TOOLKIT}.Action${n}`, + description: "", + toolkit: { name: TOOLKIT, description: "" }, + input: { parameters: [] }, + requirements: { + authorization: { provider_id: "github", oauth2: { scopes: [] } }, + }, +}); + +type Asked = { + toolkit: string | null; + userId: string | null; + limit: number; + offset: number; + /** How many tool-listing requests were in flight when this one arrived, itself included. */ + inFlightAtStart: number; + /** How many tool-listing requests had already been ANSWERED when this one arrived. */ + answeredBefore: number; +}; + +type Engine = { + /** Every request to `/v1/tools`, in arrival order. */ + asked: Asked[]; + maxInFlight: () => number; + deletes: () => number; + stop: () => void; +}; + +type EngineOptions = { + /** What `total_count` says on every page of the action listing. */ + claimed: number; + /** How many actions the engine actually serves, which may be fewer — or more — than it claims. */ + served?: number; + /** Per-request latency in ms at limit ≤ 100, and above it. Defaults are the live ones, ÷10. */ + latency?: { small: number; large: number }; +}; + +const sleep = (ms: number) => + new Promise((resolve) => setTimeout(resolve, ms)); + +function startEngine(options: EngineOptions): Engine { + const asked: Asked[] = []; + const latency = options.latency ?? { + small: 1190 / SCALE, + large: 1800 / SCALE, + }; + const served = options.served ?? options.claimed; + let inFlight = 0; + let peak = 0; + let answered = 0; + let deleted = 0; + const server = Bun.serve({ + port: 0, + async fetch(request) { + const url = new URL(request.url); + const offset = Number(url.searchParams.get("offset") ?? "0"); + const limit = Number(url.searchParams.get("limit") ?? "25"); + + if (url.pathname.startsWith("/v1/admin/user_connections/")) { + await sleep(latency.small); + deleted += 1; + return new Response(null, { status: 204 }); + } + if (url.pathname === "/v1/admin/user_connections") { + await sleep(latency.small); + const items = + offset === 0 + ? [ + { + id: "at_1", + connection_id: "ac_1", + connection_status: "active", + provider_id: "github-openbot", + provider_type: "oauth2", + provider_user_info: { name: "person one" }, + scopes: [], + user_id: account.vendorUserId, + }, + ] + : []; + return Response.json({ + items, + offset, + limit, + page_count: items.length, + total_count: 1, + }); + } + if (url.pathname === "/v1/admin/auth_providers") { + await sleep(latency.small); + const items = + offset === 0 + ? [{ id: "github-openbot", provider_id: "github", type: "oauth2" }] + : []; + return Response.json({ + items, + offset, + limit, + page_count: items.length, + total_count: 1, + }); + } + if (url.pathname !== "/v1/tools") + return new Response("not found", { status: 404 }); + + inFlight += 1; + peak = Math.max(peak, inFlight); + asked.push({ + toolkit: url.searchParams.get("toolkit"), + userId: url.searchParams.get("user_id"), + limit, + offset, + inFlightAtStart: inFlight, + answeredBefore: answered, + }); + try { + // MEASURED: limit=5000 answered an EMPTY response in ~0.17 s. A page size past the + // vendor's ceiling must fail here exactly as it fails live. + if (limit > 1000) { + await sleep(170 / SCALE); + return new Response("", { status: 200 }); + } + await sleep(limit <= 100 ? latency.small : latency.large); + const items = []; + for (let n = offset; n < Math.min(offset + limit, served); n++) + items.push(toolRow(n)); + return Response.json({ + items, + offset, + limit, + page_count: items.length, + total_count: options.claimed, + }); + } finally { + inFlight -= 1; + answered += 1; + } + }, + }); + process.env.ARCADE_BASE_URL = `http://localhost:${server.port}`; + return { + asked, + maxInFlight: () => peak, + deletes: () => deleted, + stop: () => server.stop(true), + }; +} + +let running: Engine | null = null; +const wasBaseURL = process.env.ARCADE_BASE_URL; + +function engine(options: EngineOptions): Engine { + running = startEngine(options); + return running; +} + +afterEach(() => { + running?.stop(); + running = null; + useArcadeClient(null); + if (wasBaseURL === undefined) delete process.env.ARCADE_BASE_URL; + else process.env.ARCADE_BASE_URL = wasBaseURL; +}); + +/** Each broker member exactly as its route calls it: under the vendor deadline. */ +const underDeadline = ( + run: (broker: ReturnType["broker"]) => Promise, +) => + withVendorDeadline( + () => run(createArcadeClient("never-dialled").broker), + DEADLINE_MS, + ); + +const grants = () => + underDeadline((broker) => broker.grantsFor({ account, toolkit: TOOLKIT })); + +/** The offsets asked for after page one, in offset order. */ +const restOffsets = (e: Engine) => + e.asked + .slice(1) + .map((one) => one.offset) + .sort((a, b) => a - b); + +describe("the largest Arcade toolkit is read inside the vendor deadline", () => { + test("the grants screen lists all 818 GithubApi actions before the deadline", async () => { + const e = engine({ claimed: GITHUB_API }); + const started = performance.now(); + + const held = await grants(); + + const took = performance.now() - started; + expect(held.length).toBe(GITHUB_API); + expect(took).toBeLessThan(DEADLINE_MS); + // Still nine pages of 100 — the page size did not change, only when the pages are asked for. + expect(e.asked.length).toBe(9); + for (const one of e.asked) { + expect(one.toolkit).toBe(TOOLKIT); + expect(one.userId).toBe(account.vendorUserId); + expect(one.limit).toBe(100); + } + }); + + test("page one is asked for alone, then the other eight pages at once", async () => { + const e = engine({ claimed: GITHUB_API }); + + await grants(); + + // Page one first, alone — its `total_count` is what says how many pages follow. + expect(e.asked[0]).toMatchObject({ + limit: 100, + offset: 0, + inFlightAtStart: 1, + answeredBefore: 0, + }); + expect(restOffsets(e)).toEqual([100, 200, 300, 400, 500, 600, 700, 800]); + // ...all asked for AFTER page one answered and BEFORE any of them answered: one wave. + for (const one of e.asked.slice(1)) expect(one.answeredBefore).toBe(1); + expect(e.maxInFlight()).toBe(8); + }); + + test("the auth-provider read behind authProviderOf finishes before the deadline too", async () => { + const e = engine({ claimed: GITHUB_API }); + + expect( + await underDeadline((broker) => broker.authProviderOf(TOOLKIT)), + ).toBe("github"); + expect(e.asked.length).toBe(9); + // The catalogue read carries no person: it is the same listing for everybody. + for (const one of e.asked) expect(one.userId).toBeNull(); + expect(restOffsets(e)).toEqual([100, 200, 300, 400, 500, 600, 700, 800]); + expect(e.maxInFlight()).toBe(8); + }); + + test("Disconnect on GithubApi — the action listing, then the connection lifecycle — fits the deadline", async () => { + const e = engine({ claimed: GITHUB_API }); + + expect( + await underDeadline((broker) => + broker.revoke({ account, toolkit: TOOLKIT }), + ), + ).toBe(true); + expect(e.deletes()).toBe(1); + }); + + test("a bigger toolkit is still fetched at most eight pages at a time", async () => { + // 2,000 actions: 20 pages after the first, so the bound — not the toolkit — decides the peak. + const e = engine({ claimed: 2000, latency: { small: 5, large: 20 } }); + + expect((await grants()).length).toBe(2000); + expect(e.asked.length).toBe(21); + expect(e.maxInFlight()).toBe(8); + }); +}); + +describe("fetching a toolkit ahead does not weaken the incompleteness check", () => { + test("a toolkit that claims 818 and serves 750 is refused, on the grants screen and on Disconnect", async () => { + const e = engine({ claimed: GITHUB_API, served: 750 }); + + await expect(grants()).rejects.toThrow( + /listed 750 of 818 actions for GithubApi, so what this account holds there could not be read in full/, + ); + await expect( + underDeadline((broker) => broker.revoke({ account, toolkit: TOOLKIT })), + ).rejects.toThrow( + /listed 750 of 818 actions for GithubApi, so the auth provider/, + ); + expect(e.deletes()).toBe(0); + }); + + test("a short page in the MIDDLE ends the listing, and the pages fetched past it are not counted", async () => { + // The page at offset 400 holds 50 rows; the four pages fetched ahead past it hold nothing. + engine({ claimed: GITHUB_API, served: 450 }); + + await expect(grants()).rejects.toThrow(/listed 450 of 818 actions/); + }); + + test("a total that UNDER-reports is read on past, sequentially, to the real end", async () => { + // Claims 300, serves 818: the prefetch covers offsets 100…300, all full, so the listing must + // go on asking — a short page ends it, never the total. + const e = engine({ + claimed: 300, + served: GITHUB_API, + latency: { small: 5, large: 20 }, + }); + + expect((await grants()).length).toBe(GITHUB_API); + expect(e.asked.map((one) => one.offset).sort((a, b) => a - b)).toEqual([ + 0, 100, 200, 300, 400, 500, 600, 700, 800, + ]); + }); +}); diff --git a/server/tests/arcade-transport-registry.test.ts b/server/tests/arcade-transport-registry.test.ts new file mode 100644 index 000000000..fc19cb7db --- /dev/null +++ b/server/tests/arcade-transport-registry.test.ts @@ -0,0 +1,39 @@ +import { describe, expect, test } from "bun:test"; +import * as arcade from "../src/plugins/arcade"; +import type { BrokerProvider } from "../src/plugins/access"; +import type { + CuratedTransportKind, + TransportKind, +} from "../src/plugins/transport"; +import { transportFor } from "../src/plugins/transport"; + +/* + * The type half is checked by `tsc`, not bun: this file is named in `server/tsconfig.json`'s + * `include` (the store-provider-required precedent), because a `@ts-expect-error` under the + * unchecked `server/tests` would assert nothing. Run `bun run typecheck`. + */ +// @ts-expect-error a catalogue entry must not name the arcade broker's transport +const arcadeIsNotCurated: CuratedTransportKind = "arcade"; +// @ts-expect-error nor the composio broker's +const composioIsNotCurated: CuratedTransportKind = "composio"; +const arcadeIsAKind: TransportKind = "arcade"; +// BrokerProvider is the compiler's claim about TransportKind, not a comment's. +const brokerIsAKind: TransportKind = "arcade" satisfies BrokerProvider; + +describe("arcade transport registration", () => { + test("transportFor('arcade') is the arcade module and needs no credential", () => { + const t = transportFor("arcade"); + expect(t).toBe(arcade as unknown as typeof t); + expect(t.listNeedsCredential).toBe(false); + }); + + test("the kind constants are the literals", () => { + const kinds: string[] = [ + arcadeIsNotCurated, + composioIsNotCurated, + arcadeIsAKind, + brokerIsAKind, + ]; + expect(kinds).toEqual(["arcade", "composio", "arcade", "arcade"]); + }); +}); diff --git a/server/tests/arcade-transport.test.ts b/server/tests/arcade-transport.test.ts new file mode 100644 index 000000000..d4a43ec3f --- /dev/null +++ b/server/tests/arcade-transport.test.ts @@ -0,0 +1,35 @@ +import { describe, expect, test } from "bun:test"; +import { listNeedsCredential, toolkitOf } from "../src/plugins/arcade"; + +/** The Arcade transport's boundary, asserted with no network and no database. */ +describe("toolkitOf", () => { + test("case is preserved: Gmail and gmail are distinct apps", () => { + expect(toolkitOf("arcade://Gmail")).toBe("Gmail"); + expect(toolkitOf("arcade://gmail")).toBe("gmail"); + expect(toolkitOf("arcade://Gmail")).not.toBe(toolkitOf("arcade://gmail")); + }); + + test("a url that is not arcade:// answers null", () => { + expect(toolkitOf("composio://gmail")).toBeNull(); + expect(toolkitOf("https://arcade.dev")).toBeNull(); + expect(toolkitOf("")).toBeNull(); + }); + + test("padding and trailing slashes answer the bare toolkit", () => { + expect(toolkitOf("arcade://Gmail/")).toBe("Gmail"); + expect(toolkitOf("arcade://Gmail//")).toBe("Gmail"); + expect(toolkitOf("arcade://Gmail/ ")).toBe("Gmail"); + expect(toolkitOf("arcade:// Gmail ")).toBe("Gmail"); + }); + + test("a path segment is not an app", () => { + expect(toolkitOf("arcade://Gmail/messages")).toBeNull(); + expect(toolkitOf("arcade://")).toBeNull(); + }); +}); + +describe("listNeedsCredential", () => { + test("a listing is the deployment's, not somebody's", () => { + expect(listNeedsCredential).toBe(false); + }); +}); diff --git a/server/tests/arcade-unreadable-body-engine.test.ts b/server/tests/arcade-unreadable-body-engine.test.ts new file mode 100644 index 000000000..3f8174c86 --- /dev/null +++ b/server/tests/arcade-unreadable-body-engine.test.ts @@ -0,0 +1,239 @@ +// server/tests/arcade-unreadable-body-engine.test.ts +/** + * WHAT A BODY THIS DEPLOYMENT COULD NOT READ ANSWERS WITH — THE REFUSAL, NEVER A `TypeError`. + * + * `arcade-revoke-invariant.test.ts` pins the OUTCOME on three of these shapes: a 204 with + * `content-length: 0`, a body whose JSON is the literal `null`, and `items: [null]` on the + * user-connections listing. All three satisfied it BY ACCIDENT before this file existed — the + * adapter did not refuse them, it crashed on an unguarded cast with + * `TypeError: null is not an object`, and a crash is technically "not answering". + * + * That is worth its own file for two reasons the invariant cannot state: + * + * 1. AN ACCIDENT IS ONE TIDY-UP AWAY FROM THE LIVE DEFECT. The cast that crashed is exactly the + * kind a reviewer waves a `?? []` through as defensive hygiene — and with one, all three + * shapes become `revoke` answering `false` with no DELETE spent while the caller deletes the + * local row, which is what `broker.ts:712-717` forbids and what `28b13e4a` already fixed once + * on this branch. Asserting the SENTENCE, and not merely that something was thrown, is what + * makes that tidy-up fail a test instead of passing review. + * 2. A RAW `TypeError` IS THE WRONG OPERATOR EXPERIENCE. It carries a vendor stack trace where + * this deployment's sentence belongs and is indistinguishable in the logs from a programmer + * error here. + * + * SERVED OVER A REAL SOCKET, for the invariant file's reason: these shapes ARE what the wire + * carried, and a hand-built stub cannot pose them — `OffsetPage`'s constructor is the thing that + * raises on two of the three, and a stub never passes through it. + */ +import { afterEach, describe, expect, test } from "bun:test"; +import { useArcadeClient } from "../src/plugins/arcade"; +import { createArcadeClient } from "../src/plugins/arcade-adapter"; +import type { AccountRef } from "../src/plugins/shared-accounts"; + +const account: AccountRef = { + holder: "person", + userId: "u1", + vendorUserId: "vendor-u1", +}; + +/** A live, attributable user-connection row: the thing a DELETE would be spent on. */ +const connectionRow = (n: number) => ({ + id: `at_${n}`, + connection_id: `ac_${n}`, + connection_status: "active", + provider_id: "google-openbot", + provider_type: "oauth2", + provider_user_info: { name: `person ${n}` }, + scopes: [], + user_id: account.vendorUserId, +}); + +const toolRow = (toolkit: string, n: number) => ({ + qualified_name: `${toolkit}.Action${n}`, + description: "", + toolkit: { name: toolkit, description: "" }, + input: { parameters: [] }, + requirements: { + authorization: { provider_id: "google", oauth2: { scopes: [] } }, + }, +}); + +/** What the connection listing answers. Everything else is the healthy live listing. */ +type Shape = + /** A 204 with `content-length: 0` on a PAGED endpoint. */ + | "listing-is-204" + /** A 200 whose whole JSON value is `null`. */ + | "listing-is-json-null" + /** A list with a hole in it: one unreadable row beside two real connections. */ + | "listing-item-is-null"; + +type Engine = { port: number; requests: string[]; stop: () => void }; + +function startEngine(shape: Shape): Engine { + const requests: string[] = []; + const server = Bun.serve({ + port: 0, + fetch(request) { + const url = new URL(request.url); + requests.push(`${request.method} ${url.pathname}`); + const offset = Number(url.searchParams.get("offset") ?? "0"); + const limit = Number(url.searchParams.get("limit") ?? "100"); + + // THE DELETE, always available and always counted, so "no DELETE was spent" is a statement + // about the adapter rather than about the stub. + if (url.pathname.startsWith("/v1/admin/user_connections/")) { + return new Response(null, { status: 204 }); + } + + if (url.pathname === "/v1/admin/user_connections") { + if (shape === "listing-is-204") + return new Response(null, { status: 204 }); + if (shape === "listing-is-json-null") { + return new Response("null", { + status: 200, + headers: { "content-type": "application/json" }, + }); + } + return Response.json({ + items: [null, connectionRow(0), connectionRow(1)], + offset, + limit, + page_count: 3, + total_count: 3, + }); + } + + if (url.pathname === "/v1/admin/auth_providers") { + return Response.json({ + items: [ + { id: "google-openbot", provider_id: "google", type: "oauth2" }, + ], + offset: 0, + limit, + page_count: 1, + total_count: 1, + }); + } + + if (url.pathname === "/v1/tools") { + const toolkit = url.searchParams.get("toolkit") ?? "Gmail"; + const page = + offset === 0 + ? Array.from({ length: 4 }, (_, n) => toolRow(toolkit, n)) + : []; + return Response.json({ + items: page, + offset, + limit, + page_count: page.length, + total_count: 4, + }); + } + + return new Response("not found", { status: 404 }); + }, + }); + const { port } = server; + if (port === undefined) + throw new Error("the stub vendor did not bind a port"); + return { port, requests, stop: () => server.stop(true) }; +} + +let running: Engine | null = null; +const wasBaseURL = process.env.ARCADE_BASE_URL; + +function engine(shape: Shape): Engine { + running = startEngine(shape); + // `new Arcade({ apiKey })` reads this at construction, so the server starts FIRST. + process.env.ARCADE_BASE_URL = `http://localhost:${running.port}`; + return running; +} + +afterEach(() => { + running?.stop(); + running = null; + useArcadeClient(null); + if (wasBaseURL === undefined) delete process.env.ARCADE_BASE_URL; + else process.env.ARCADE_BASE_URL = wasBaseURL; +}); + +type Thrown = { name: string; message: string }; + +async function revokeError(): Promise { + const { broker } = createArcadeClient("never-dialled"); + try { + const value = await broker.revoke({ account, toolkit: "Gmail" }); + // An ANSWER is the failure this file exists to catch, so it is reported as one rather than + // left to a later assertion on an error that is not there. + return { name: "returned", message: `revoke answered ${String(value)}` }; + } catch (error) { + return { + name: error instanceof Error ? error.constructor.name : "non-error", + message: error instanceof Error ? error.message : String(error), + }; + } +} + +/** + * The refusal sentence each shape is owed, VERBATIM. Written out rather than imported, because an + * assertion that re-derives the sentence from the code under test asserts nothing about it. + */ +const EMPTY_BODY_REFUSAL = + "Arcade answered the connection listing for Gmail with no body this deployment could read — an empty response, or one whose JSON is the literal null — so what it says is not known here."; +const HOLE_IN_LISTING_REFUSAL = + "Arcade's connection list carried nothing where a connection belongs, so what this account holds at Gmail could not be read."; + +describe("a vendor body this deployment cannot read answers with a refusal", () => { + const cases: [Shape, string, string][] = [ + [ + "listing-is-204", + "a 204 / content-length: 0 response on a paged endpoint", + EMPTY_BODY_REFUSAL, + ], + [ + "listing-is-json-null", + "a body whose JSON is the literal null", + EMPTY_BODY_REFUSAL, + ], + [ + "listing-item-is-null", + "items: [null] on the user-connections listing", + HOLE_IN_LISTING_REFUSAL, + ], + ]; + + for (const [shape, sentence, refusal] of cases) { + test(`${sentence} refuses, and says so`, async () => { + const e = engine(shape); + const thrown = await revokeError(); + + // THE SENTENCE AND NOT MERELY "IT THREW". Before this fix every one of these three raised + // `TypeError: null is not an object`, which passes any "did it throw" assertion while + // telling an operator nothing and leaving the invariant resting on a crash. + expect({ shape, ...thrown }).toEqual({ + shape, + name: "Error", + message: refusal, + }); + + // AND NOTHING WAS WITHDRAWN ON THE WAY TO SAYING IT: a listing that could not be read whole + // is not grounds for spending a DELETE on the rows that happened to be legible. + expect(e.requests.filter((r) => r.startsWith("DELETE "))).toEqual([]); + }); + } + + test("a TypeError is never what escapes", async () => { + for (const shape of [ + "listing-is-204", + "listing-is-json-null", + "listing-item-is-null", + ] as Shape[]) { + engine(shape); + const thrown = await revokeError(); + expect({ shape, name: thrown.name }).toEqual({ shape, name: "Error" }); + expect(thrown.message).not.toContain("is not an object"); + running?.stop(); + running = null; + useArcadeClient(null); + } + }); +}); diff --git a/server/tests/arcade-unreadable-total-engine.test.ts b/server/tests/arcade-unreadable-total-engine.test.ts new file mode 100644 index 000000000..0ed00f06f --- /dev/null +++ b/server/tests/arcade-unreadable-total-engine.test.ts @@ -0,0 +1,255 @@ +// server/tests/arcade-unreadable-total-engine.test.ts +/** + * THE TRUNCATION CROSS-CHECK IS ONLY AS GOOD AS THE VALUE IT READS. + * + * `pagedItems` ends a listing on a short page and then asks one further question — did the vendor + * claim more rows than arrived? — and that question has exactly one input: `total_count`. The + * reading of that field used to be `typeof raw === "number" ? raw : undefined`, which answered + * "the vendor did not say" for every shape that is not a JavaScript number. A vendor serving 100 + * of 250 connections under `"total_count": "250"` therefore had the cross-check switched off, and + * `revoke` DELETED 100, ANSWERED `true`, AND LEFT 150 GRANTS LIVE — a partial withdrawal reported + * to the operator as a clean success, which is the one outcome `broker.ts`'s `revoke` contract + * forbids outright. + * + * This file pins the three readings the field now has, through the public broker seam: + * + * - a plain decimal integer, string or number alike, IS the vendor saying a number, and the + * cross-check fires on it; + * - anything else the vendor SENT is unreadable and REFUSES, so the check can never be disabled + * again by a value nobody anticipated; + * - an ABSENT field still means "the vendor did not say", because `total_count` is optional on + * the wire and every listing here ends on a short page. + * + * SERVED OVER A REAL SOCKET, for `arcade-pagination-engine.test.ts`'s reason: `OffsetPage`'s + * constructor manufactures `total_count: 0` for a field the vendor never sent, so only the wire + * can pose these questions. + */ +import { afterEach, describe, expect, test } from "bun:test"; +import { useArcadeClient } from "../src/plugins/arcade"; +import { createArcadeClient } from "../src/plugins/arcade-adapter"; +import type { AccountRef } from "../src/plugins/shared-accounts"; + +const account: AccountRef = { + holder: "person", + userId: "u1", + vendorUserId: "vendor-u1", +}; + +const CONNECTION_PAGE_SIZE = 100; + +const connectionRow = (n: number) => ({ + id: `at_${n}`, + connection_id: `ac_${n}`, + connection_status: "active", + provider_id: "google-openbot", + provider_type: "oauth2", + provider_user_info: { name: `person ${n}` }, + scopes: [], + user_id: account.vendorUserId, +}); + +const toolRow = (toolkit: string, n: number) => ({ + qualified_name: `${toolkit}.Action${n}`, + description: "", + toolkit: { name: toolkit, description: "" }, + input: { parameters: [] }, + requirements: { + authorization: { provider_id: "google", oauth2: { scopes: [] } }, + }, +}); + +type Engine = { port: number; requests: string[]; stop: () => void }; + +/** + * The vendor, serving `held` connection rows but only the first `served` of them, and reporting + * the holding as `total` — whatever shape `total` is in. `undefined` omits the field entirely. + */ +function startEngine(held: number, served: number, total: unknown): Engine { + const requests: string[] = []; + const rows = Array.from({ length: held }, (_, n) => connectionRow(n)); + + const server = Bun.serve({ + port: 0, + fetch(request) { + const url = new URL(request.url); + requests.push(`${request.method} ${url.pathname}`); + const offset = Number(url.searchParams.get("offset") ?? "0"); + const limit = Number( + url.searchParams.get("limit") ?? String(CONNECTION_PAGE_SIZE), + ); + + if (url.pathname.startsWith("/v1/admin/user_connections/")) { + return new Response(null, { status: 204 }); + } + + if (url.pathname === "/v1/admin/user_connections") { + const page = rows.slice(offset, Math.min(offset + limit, served)); + const body: Record = { + items: page, + offset, + limit, + page_count: page.length, + }; + // The one varying thing. `undefined` disappears from the JSON, which is the vendor that + // never sent the field at all. + if (total !== undefined) body.total_count = total; + return Response.json(body); + } + + if (url.pathname === "/v1/admin/auth_providers") { + return Response.json({ + items: [ + { id: "google-openbot", provider_id: "google", type: "oauth2" }, + ], + offset: 0, + limit, + page_count: 1, + total_count: 1, + }); + } + + if (url.pathname === "/v1/tools") { + const toolkit = url.searchParams.get("toolkit") ?? "Gmail"; + const page = + offset === 0 + ? Array.from({ length: 4 }, (_, n) => toolRow(toolkit, n)) + : []; + return Response.json({ + items: page, + offset, + limit, + page_count: page.length, + total_count: 4, + }); + } + + return new Response("not found", { status: 404 }); + }, + }); + const { port } = server; + if (port === undefined) + throw new Error("the stub vendor did not bind a port"); + return { port, requests, stop: () => server.stop(true) }; +} + +let running: Engine | null = null; +const wasBaseURL = process.env.ARCADE_BASE_URL; + +function engine(held: number, served: number, total: unknown): Engine { + running = startEngine(held, served, total); + process.env.ARCADE_BASE_URL = `http://localhost:${running.port}`; + return running; +} + +afterEach(() => { + running?.stop(); + running = null; + useArcadeClient(null); + if (wasBaseURL === undefined) delete process.env.ARCADE_BASE_URL; + else process.env.ARCADE_BASE_URL = wasBaseURL; +}); + +const deletesSpent = (e: Engine): number => + e.requests.filter( + (r) => r.startsWith("DELETE ") && r.includes("/v1/admin/user_connections/"), + ).length; + +type Outcome = + | { kind: "returned"; value: boolean } + | { kind: "threw"; message: string }; + +async function revokeOutcome( + broker: ReturnType["broker"], +): Promise { + try { + return { + kind: "returned", + value: await broker.revoke({ account, toolkit: "Gmail" }), + }; + } catch (error) { + return { + kind: "threw", + message: error instanceof Error ? error.message : String(error), + }; + } +} + +describe("a total_count the vendor sent is read, or refused, but never ignored", () => { + /** + * THE DEFECT ITSELF. 250 held, 100 served, the claim spelled as a string. Before the fix this + * answered `true` after 100 DELETEs; the cross-check must fire instead, and it must fire BEFORE + * any DELETE is spent, so the local row survives to name the app on a second press. + */ + test("a numeric string is the vendor saying a number, and the cross-check fires on it", async () => { + const e = engine(250, 100, "250"); + const { broker } = createArcadeClient("never-dialled"); + + const outcome = await revokeOutcome(broker); + + expect(outcome.kind).toBe("threw"); + if (outcome.kind !== "threw") return; + expect(outcome.message).toBe( + "Arcade listed 100 of 250 connections, so what this account holds at Gmail could not be read in full.", + ); + expect(deletesSpent(e)).toBe(0); + }); + + /** The same spelling on a WHOLE listing is not an error: it reads as the number it is. */ + test("a numeric string on a whole listing revokes normally", async () => { + const e = engine(3, 3, "3"); + const { broker } = createArcadeClient("never-dialled"); + + expect(await revokeOutcome(broker)).toEqual({ + kind: "returned", + value: true, + }); + expect(deletesSpent(e)).toBe(3); + }); + + /** + * EVERY OTHER VALUE THE VENDOR SENT REFUSES. Each of these would, under a lenient reading, go + * back to answering "the vendor did not say" and re-open the defect above verbatim — so the + * refusal is the assertion, and the listing underneath is a WHOLE one to make the point that it + * is the claim about the length, not the list, that could not be read. + */ + const unreadable: [string, unknown, string][] = [ + ["a word", "many", '"many"'], + ["the literal null", null, "null"], + ["an object", { count: 3 }, "an object"], + ["a boolean", true, "true"], + ["a negative", -1, "-1"], + ["a fraction", 1.5, "1.5"], + ["an exponent spelling", "1e3", '"1e3"'], + ["an empty string", "", '""'], + ]; + for (const [name, value, shown] of unreadable) { + test(`total_count as ${name} refuses rather than disabling the cross-check`, async () => { + const e = engine(3, 3, value); + const { broker } = createArcadeClient("never-dialled"); + + const outcome = await revokeOutcome(broker); + + expect(outcome.kind).toBe("threw"); + if (outcome.kind !== "threw") return; + expect(outcome.message).toBe( + `Arcade reported its connection list's total_count as ${shown}, which is not a count, so whether what this account holds at Gmail was listed in full could not be checked.`, + ); + expect(deletesSpent(e)).toBe(0); + }); + } + + /** + * AND AN ABSENT FIELD IS STILL SILENCE. `total_count` is optional on the wire; refusing for its + * absence would take every engine that omits it offline, which is the opposite mistake. + */ + test("an omitted total_count still means the vendor did not say", async () => { + const e = engine(3, 3, undefined); + const { broker } = createArcadeClient("never-dialled"); + + expect(await revokeOutcome(broker)).toEqual({ + kind: "returned", + value: true, + }); + expect(deletesSpent(e)).toBe(3); + }); +}); diff --git a/server/tests/arcade-vendor-error-engine.test.ts b/server/tests/arcade-vendor-error-engine.test.ts new file mode 100644 index 000000000..1145057ff --- /dev/null +++ b/server/tests/arcade-vendor-error-engine.test.ts @@ -0,0 +1,206 @@ +// server/tests/arcade-vendor-error-engine.test.ts +/** + * WHAT A REFUSAL FROM ARCADE LOOKS LIKE BY THE TIME SOMEBODY READS IT. + * + * Two properties, measured on every door the adapter opens to the vendor: + * + * 1. WHAT IS THROWN IS AN `Error`. A bare object has no `message` and no stack, and + * `reasonWithoutStatement` — the one door every log line in `routes.ts` copies a reason through + * — answers `String(thrown)` for a non-`Error`, which is the literal text `[object Object]`. + * The one log line written at the moment a tool call failed then carries no information at all. + * + * 2. NOTHING THE VENDOR WROTE IS IN IT. The SDK's `APIError` builds its own `message` as + * `${status} ${body.message ?? JSON.stringify(body)}` (`core/error.js`, `makeMessage`), so an + * `APIError` left to escape puts the vendor's response body — which on this vendor's auth paths + * can carry a bearer url — into whatever log, admin page or error answer quotes the message. + * This PR's second subject claim is that such a thing never reaches a log, an error body, an + * audit row or a model, so the vendor's words stop at this adapter and this deployment's own + * sentence goes on from there. + * + * AND THE DEPENDENTS OF THE REFUSAL STILL WORK, which is the other half of the same test: the + * normalized `status` that `routes.ts` keys its discard-or-keep decision on, the body's `error.name` + * that `callTool` keys the authorize prompt on, and the `user_mismatch` answer `confirmReturn` + * reads, are all still reachable through `normalizeArcadeError`. + * + * SERVED OVER A REAL SOCKET, as `arcade-pagination-engine.test.ts` is and for its reason: the rest + * of the adapter suite stubs SDK resource PROTOTYPES, which hands the adapter a hand-built + * rejection rather than the error the SDK itself builds out of a real response — and the error the + * SDK builds is the whole subject here. + */ +import { afterEach, describe, expect, test } from "bun:test"; +import { reasonWithoutStatement } from "../src/db/query-failure"; +import { callTool, useArcadeClient } from "../src/plugins/arcade"; +import { + createArcadeClient, + normalizeArcadeError, +} from "../src/plugins/arcade-adapter"; +import type { AccountRef } from "../src/plugins/shared-accounts"; + +const account: AccountRef = { + holder: "person", + userId: "u1", + vendorUserId: "vendor-u1", +}; + +/** A bearer capability in the vendor's prose: whoever reads it can attach an account. */ +const BEARER = + "https://cloud.arcade.dev/auth/callback?flow=flow-abc&secret=SECRET-BEARER-f00d"; +/** The vendor's own sentence, which this deployment never repeats. */ +const VENDOR_PROSE = `tool not authorized; send the person to ${BEARER}`; + +type Engine = { port: number; requests: string[]; stop: () => void }; + +/** + * Every endpoint the adapter can reach, refusing with 403 and Arcade's own body shape + * (`{ name, message }` — the shape `normalizeArcadeError` reads). 403 and not 500: the SDK retries + * 5xx twice with backoff, and nothing here is about retries. + */ +function startEngine(): Engine { + const requests: string[] = []; + const refusal = () => + Response.json( + { name: "tool_authorization_required", message: VENDOR_PROSE }, + { status: 403 }, + ); + const server = Bun.serve({ + port: 0, + fetch(request) { + const url = new URL(request.url); + requests.push(url.pathname); + return refusal(); + }, + }); + return { port: server.port, requests, stop: () => server.stop(true) }; +} + +let running: Engine | null = null; +const wasBaseURL = process.env.ARCADE_BASE_URL; + +function engine(): Engine { + running = startEngine(); + process.env.ARCADE_BASE_URL = `http://localhost:${running.port}`; + return running; +} + +afterEach(() => { + running?.stop(); + running = null; + useArcadeClient(null); + if (wasBaseURL === undefined) delete process.env.ARCADE_BASE_URL; + else process.env.ARCADE_BASE_URL = wasBaseURL; +}); + +/** What a log line would carry, read through the door every log line in `routes.ts` reads through. */ +const asLogged = (thrown: unknown): string => reasonWithoutStatement(thrown); + +async function refusalFrom(run: () => Promise): Promise { + try { + await run(); + } catch (error) { + return error; + } + throw new Error("the engine refused and the adapter did not."); +} + +describe("a refusal from Arcade is an Error this deployment wrote", () => { + const doors: [ + string, + (c: ReturnType) => Promise, + ][] = [ + [ + "execute", + ({ actions }) => + actions.execute({ + tool_name: "Gmail.SendEmail", + input: {}, + user_id: account.vendorUserId, + }), + ], + [ + "listTools", + ({ actions }) => + actions.listTools({ toolkit: "Gmail", limit: 100, offset: 0 }), + ], + ["listApps", ({ broker }) => broker.listApps()], + [ + "authorize", + ({ broker }) => broker.authorize({ account, action: "Gmail.SendEmail" }), + ], + [ + "isConnected", + ({ broker }) => broker.isConnected({ account, toolkit: "Gmail" }), + ], + [ + "accountName", + ({ broker }) => broker.accountName({ account, toolkit: "Gmail" }), + ], + ["revoke", ({ broker }) => broker.revoke({ account, toolkit: "Gmail" })], + ["revokeAccount", ({ broker }) => broker.revokeAccount("ac_1")], + [ + "grantsFor", + ({ broker }) => broker.grantsFor({ account, toolkit: "Gmail" }), + ], + ["authProviderOf", ({ broker }) => broker.authProviderOf("Gmail")], + [ + "authorizations.status", + ({ broker }) => + broker.authorizations?.status("ar_1") ?? + Promise.reject(new Error("no status member")), + ], + [ + "authorizations.confirmReturn", + ({ broker }) => + broker.authorizations?.confirmReturn({ + handle: "flow-abc", + vendorUserId: account.vendorUserId, + }) ?? Promise.reject(new Error("no confirmReturn member")), + ], + ]; + + for (const [door, call] of doors) { + test(`${door} throws an Error carrying no vendor words`, async () => { + engine(); + const client = createArcadeClient("never-dialled"); + const thrown = await refusalFrom(() => call(client)); + + // 1. AN `Error`, so a log line has something to say. + expect(thrown).toBeInstanceOf(Error); + expect(asLogged(thrown)).not.toBe("[object Object]"); + expect(asLogged(thrown).length).toBeGreaterThan(0); + + // 2. NOTHING THE VENDOR WROTE, at any depth a reader can reach. + expect(asLogged(thrown)).not.toContain(BEARER); + expect(asLogged(thrown)).not.toContain(VENDOR_PROSE); + expect( + JSON.stringify(thrown, Object.keys(thrown as object)), + ).not.toContain("SECRET-BEARER"); + let cause: unknown = (thrown as { cause?: unknown }).cause; + for (let depth = 0; depth < 8 && cause !== undefined; depth += 1) { + expect(asLogged(cause)).not.toContain(BEARER); + cause = (cause as { cause?: unknown }).cause; + } + + // 3. AND THE STATUS `routes.ts` KEYS ITS DECISION ON IS STILL READABLE: an answered status is + // what tells a definite refusal from a connection that may have started a flow. + expect(normalizeArcadeError(thrown)?.status).toBe(403); + }); + } + + test("the body's error.name still reaches callTool's authorize sentence", async () => { + engine(); + const { actions } = createArcadeClient("never-dialled"); + useArcadeClient(actions); + + const result = await callTool( + { url: "arcade://Gmail", actorId: account.vendorUserId }, + "Gmail.SendEmail", + {}, + ); + expect(result.isError).toBe(true); + expect(result.text).toBe( + "Gmail.SendEmail has not been authorized on this account yet. Authorize it in Settings → Connected accounts and ask again.", + ); + // AND THE VENDOR'S WORDS ARE NOT IN WHAT A MODEL IS HANDED. + expect(result.text).not.toContain(BEARER); + }); +}); diff --git a/server/tests/arcade-vendor-read-contract.test.ts b/server/tests/arcade-vendor-read-contract.test.ts new file mode 100644 index 000000000..5535ddd45 --- /dev/null +++ b/server/tests/arcade-vendor-read-contract.test.ts @@ -0,0 +1,698 @@ +// server/tests/arcade-vendor-read-contract.test.ts +/** + * HOW EVERY ARCADE VENDOR-FIELD READER TREATS A VALUE IT CANNOT READ — one row per reader × shape. + * + * The class this guards is K2: a reader on an AUTHORIZATION decision that fails OPEN. C2 gave the + * `requirements.authorization` block one tri-state reading, `authorizationRequirementOf` — + * `none | unreadable(field, shape) | required` — and C2b held `authProvidersNamedBy` to it. The + * sibling readers never got it: each picked its own default for a field it could not read, and + * the default it picked was the permissive one. A missing `token_status` reads as authorized (A7c), + * an unreadable scopes block reads as "the connection is the grant" (C2c), a `connection_status` + * that is present but not text reads as live (A7b), and the mint's allowlist test could not fail + * on a missing `.trim().toLowerCase()` (D6). The tests never presented the shapes that show it. + * + * THE RULE THE TABLE STATES — the one `vendorStatusOf` / `requiredScopesOf` / + * `authorizationRequirementOf` in `server/src/plugins/arcade.ts` implement. Absent (`missing`, + * `undefined`, `null`) reads as the field's documented default. A value that is PRESENT BUT NOT THE + * SHAPE THE FIELD HAS is unreadable, and unreadable FAILS CLOSED: the grants screen says `unknown`, + * a listing refuses, a connection is not live, a mint is refused. Never authorized, never live, + * never `[]`-as-grant, never a redirect. + * + * TWO READINGS THIS TABLE ONCE HELD APART, SETTLED (K2). `null` is ABSENCE on every field — C2's + * reading, which the vendor's own `requirements: null` evidences — so `connection_status: null` is + * live like a missing one, not "a value sent" (the A7b row that said otherwise is withdrawn). And a + * BLANK STRING is UNREADABLE on every decision field — C2b's reading of a blank `provider_id` — so + * `connection_status: ""` is not live (the source's "absent or empty reads as live" is withdrawn). + * + * EACH ROW IS DRIVEN THROUGH THE READER'S PUBLIC DOOR — `broker.grantsFor`, `broker.listApps`, + * the transport's `listTools`, `broker.isConnected`, `broker.authorize` — over SDK prototype + * stubs, so nothing here needs a production export and the verdict is the one a caller sees. + * + * ROWS ARE KEYED `reader · field · shape`, never `path:line`. The reader is a binding name checked + * below to still exist in its file; the field is the vendor's own path. Neither moves when + * somebody rewraps a comment, which is the collision a line-keyed list has had three waves running. + * + * KNOWN-WRONG ROWS ARE DEBT, NOT SPECIFICATION — the discipline of `typecheck-baseline.txt`. + * Every row's `want` is the RIGHT answer. Where production answers something else today, the row + * is listed in {@link KNOWN_FAIL_OPEN} with what it answers NOW and the finding that owns it. The + * check is equality both ways: an enforced row must answer `want`; a debt row must answer exactly + * its recorded `now` — so it can neither drift to a third answer unseen nor be FIXED without its + * entry being deleted. Fixing a reader and deleting its entries is always correct. ADDING an entry + * is not: a new entry means a reader that fails open was written today, and the gate exists to + * say so. Editing a `want` to match what production does is the one move this file forbids. + */ +import { afterEach, describe, expect, test } from "bun:test"; +import { readFileSync } from "node:fs"; +import { join } from "node:path"; +import Arcade from "@arcadeai/arcadejs"; +import { listTools, useArcadeClient } from "../src/plugins/arcade"; +import { createArcadeClient } from "../src/plugins/arcade-adapter"; +import type { AccountRef } from "../src/plugins/shared-accounts"; + +// --------------------------------------------------------------------------------------------- +// Harness: SDK prototype stubs, installed BEFORE construction; `new Arcade({ apiKey })` dials +// nothing. +// --------------------------------------------------------------------------------------------- + +type Methods = Record unknown>; +const protoOf = (pick: (c: Arcade) => unknown): Methods => + Object.getPrototypeOf( + pick(new Arcade({ apiKey: "never-dialled" })), + ) as Methods; + +const restores: (() => void)[] = []; +function stub( + pick: (c: Arcade) => unknown, + name: string, + impl: (...args: unknown[]) => unknown, +) { + const on = protoOf(pick); + const was = on[name]; + on[name] = impl; + restores.push(() => { + on[name] = was; + }); +} +afterEach(() => { + while (restores.length) restores.pop()?.(); + useArcadeClient(null); +}); + +const account: AccountRef = { + holder: "person", + userId: "u1", + vendorUserId: "vendor-u1", +}; + +/** + * What a call answered, or the fact that it refused. + * + * A CRASH IS NOT A REFUSAL. A `TypeError` off a hole the reader dereferenced is reported as + * `crashes`, so a row whose right answer is `refuses` cannot be satisfied by the reader falling + * over — nor by this harness doing so. + */ +async function settle( + run: () => Promise, + read: (value: T) => string, +): Promise { + let value: T; + try { + value = await run(); + } catch (error) { + return error instanceof TypeError || error instanceof ReferenceError + ? `crashes: ${(error as Error).message}` + : "refuses"; + } + return read(value); +} + +// --------------------------------------------------------------------------------------------- +// The shapes. `missing` deletes the key; every other shape sets it. +// --------------------------------------------------------------------------------------------- + +const MISSING = Symbol("missing"); +const SHAPES: { label: string; value: unknown }[] = [ + { label: "missing", value: MISSING }, + { label: "undefined", value: undefined }, + { label: "null", value: null }, + { label: "{}", value: {} }, + { label: "false", value: false }, + { label: "0", value: 0 }, + { label: "[]", value: [] }, + { label: '""', value: "" }, +]; + +/** `base` with `value` placed at `path` (or the last key deleted, for `MISSING`). */ +function placed( + base: Record, + path: string[], + value: unknown, +): Record { + const root = structuredClone(base); + let at = root; + for (const key of path.slice(0, -1)) { + at = at[key] as Record; + } + const last = path[path.length - 1]; + if (value === MISSING) delete at[last]; + else at[last] = value; + return root; +} + +// --------------------------------------------------------------------------------------------- +// The readers, each through its public door. `observe` turns a vendor value at the reader's field +// into a VERDICT string; the vocabulary is per reader and spelled out on each. +// --------------------------------------------------------------------------------------------- + +type Reader = { + /** The binding that does the read — checked below to still be defined in `file`. */ + name: string; + file: "server/src/plugins/arcade-adapter.ts" | "server/src/plugins/arcade.ts"; + /** The door the verdict is read through. */ + door: string; + observe: (edit: Edit) => Promise; +}; + +/** What a row does to the reader's base object: place one hostile value (and maybe a neighbour). */ +type Edit = (base: Record) => Record; + +/** A grant read as ` []`, or `unknown`/`needs-operator`, or `refuses`. */ +function grantVerdict(grants: { state: string; scopes?: string[] }[]): string { + if (grants.length !== 1) return `${grants.length} grants`; + const [grant] = grants; + return grant.scopes === undefined + ? grant.state + : `${grant.state} [${grant.scopes.join(",")}]`; +} + +/** The listing row the grants and catalogue readers see, with a held, scoped authorization. */ +const LISTED = { + qualified_name: "Github.SetStarred", + fully_qualified_name: "Github.SetStarred@1.0.0", + name: "SetStarred", + toolkit: { name: "Github", description: "" }, + metadata: { behavior: { read_only: true, destructive: false } }, + requirements: { + met: true, + secrets: [], + authorization: { + provider_id: "github", + status: "active", + token_status: "completed", + oauth2: { scopes: ["repo"] }, + }, + }, +}; + +const GRANT_STATE_OF: Reader = { + name: "grantStateOf", + file: "server/src/plugins/arcade-adapter.ts", + door: "broker.grantsFor", + observe: (edit) => { + const item = edit(LISTED); + stub( + (c) => c.tools, + "list", + () => Promise.resolve({ items: [item] }), + ); + return settle( + () => + createArcadeClient("never-dialled").broker.grantsFor({ + toolkit: "Github", + account, + }), + grantVerdict, + ); + }, +}; + +/** The one app's scope standing: `scoped` / `unscoped`, or `refuses`. */ +const CATALOGUE_SCOPES_OF: Reader = { + name: "scopesOf", + file: "server/src/plugins/arcade-adapter.ts", + door: "broker.listApps", + observe: (edit) => { + const item = edit(LISTED); + stub( + (c) => c.tools, + "list", + () => Promise.resolve({ items: [item], total_count: 1 }), + ); + return settle( + () => createArcadeClient("never-dialled").broker.listApps(), + (apps) => { + if (apps.length !== 1) return `${apps.length} apps`; + return (apps[0].scopedActionCount ?? 0) > 0 ? "scoped" : "unscoped"; + }, + ); + }, +}; + +/** The listed tool's `scopes` as `scopes []`, or `refuses`. */ +const TRANSPORT_SCOPES_OF: Reader = { + name: "scopesOf", + file: "server/src/plugins/arcade.ts", + door: "listTools", + observe: (edit) => { + const item = edit(LISTED); + useArcadeClient({ + listTools: () => Promise.resolve({ items: [item] }), + execute: () => Promise.reject(new Error("not under test")), + }); + return settle( + () => listTools({ url: "arcade://Github" }), + (tools) => + tools.length === 1 + ? `scopes [${tools[0].scopes.join(",")}]` + : `${tools.length} tools`, + ); + }, +}; + +/** The connection: `live` / `not-live`, or `refuses`. */ +const CONNECTION_IS_LIVE: Reader = { + name: "connectionIsLive", + file: "server/src/plugins/arcade-adapter.ts", + door: "broker.isConnected", + observe: (edit) => { + const row = edit({ + id: "at_1", + connection_id: "ac_1", + provider_id: "cpk-poc", + connection_status: "active", + provider_user_info: { name: "Ada" }, + }); + stub( + (c) => c.tools, + "list", + () => + Promise.resolve({ + items: [ + { + qualified_name: "Github.A", + requirements: { authorization: { provider_id: "github" } }, + }, + ], + total_count: 1, + }), + ); + stub( + (c) => c.admin.authProviders, + "list", + () => + Promise.resolve({ + items: [{ id: "cpk-poc", provider_id: "github" }], + total_count: 1, + }), + ); + stub( + (c) => c.admin.userConnections, + "list", + (query) => + Promise.resolve( + (query as { user_id?: unknown }).user_id === account.vendorUserId + ? { items: [row], total_count: 1 } + : { items: [], total_count: 0 }, + ), + ); + return settle( + () => + createArcadeClient("never-dialled").broker.isConnected({ + account, + toolkit: "Github", + }), + (live) => (live ? "live" : "not-live"), + ); + }, +}; + +/** The mint: `consent-next` when handed on, `refuses: already` for a held grant, else `refuses`. */ +const MINT_STATUS: Reader = { + name: "MINT_AWAITS_CONSENT_STATUSES", + file: "server/src/plugins/arcade-adapter.ts", + door: "broker.authorize", + observe: async (edit) => { + const answer = edit({ + id: "ar_mint1", + url: "https://consent.example/go", + status: "pending", + }); + stub( + (c) => c.tools, + "authorize", + () => Promise.resolve(answer), + ); + try { + const minted = await createArcadeClient("never-dialled").broker.authorize( + { + account, + toolkit: "Gmail", + action: "Gmail.SendEmail", + returnUrl: "https://openbot.example/settings/plugins", + }, + ); + return minted.redirectUrl === "https://consent.example/go" + ? "consent-next" + : "handed on elsewhere"; + } catch (error) { + if (error instanceof TypeError) return `crashes: ${error.message}`; + return /already/i.test(String((error as Error).message)) + ? "refuses: already" + : "refuses"; + } + }, +}; + +// --------------------------------------------------------------------------------------------- +// The table. +// --------------------------------------------------------------------------------------------- + +type Row = { + reader: Reader; + /** The vendor field the reader reads, as a path from the object the door hands it. */ + field: string[]; + /** The shape label, or for a normalization row the quoted text. */ + shape: string; + value: unknown; + /** A neighbouring field set first, so a fallback through it cannot answer the row. */ + beside?: { path: string[]; value: unknown }; + /** THE RIGHT ANSWER. Never edited to match production; see the header. */ + want: string; + why: string; +}; + +const keyOf = (row: Row): string => + `${row.reader.name} (${row.reader.file.split("/").pop()}) · ${row.field.join(".")} · ${row.shape}`; + +/** Absent → `absent`; the rest → `unreadable`. Labels as {@link SHAPES} spells them. */ +function sweep( + reader: Reader, + field: string[], + answers: { + absent: string; + unreadable: string; + /** Shapes that are READABLE at this field and so answer `absent`, not `unreadable`. */ + readableAsAbsent?: string[]; + }, + why: string, +): Row[] { + const absentShapes = new Set([ + "missing", + "undefined", + "null", + ...(answers.readableAsAbsent ?? []), + ]); + return SHAPES.map(({ label, value }) => ({ + reader, + field, + shape: label, + value, + want: absentShapes.has(label) ? answers.absent : answers.unreadable, + why, + })); +} + +const AUTH = ["requirements", "authorization"]; +const BESIDE_INACTIVE = '" Completed " beside status "inactive"'; + +const ROWS: Row[] = [ + // grantStateOf — token_status, beside `status: "active"` (the fallback A7c names). `status` is + // the auth PROVIDER's standing, not this account's grant, so no token_status is no answer. + ...sweep( + GRANT_STATE_OF, + [...AUTH, "token_status"], + { absent: "unknown", unreadable: "unknown" }, + "what this account holds is token_status; nothing readable there is not a grant", + ), + // grantStateOf — the scopes the grant covers, beside `token_status: "completed"`. + ...sweep( + GRANT_STATE_OF, + [...AUTH, "oauth2", "scopes"], + { + absent: "authorized []", + unreadable: "unknown", + readableAsAbsent: ["[]"], + }, + "an unreadable scope list is not 'the connection is the grant'", + ), + ...sweep( + GRANT_STATE_OF, + [...AUTH, "oauth2"], + { + absent: "authorized []", + unreadable: "unknown", + readableAsAbsent: ["{}"], + }, + "an oauth2 block that is not an object is not 'no scopes'", + ), + // scopesOf (adapter) — feeds listApps' scopedActionCount/permissionCount. + ...sweep( + CATALOGUE_SCOPES_OF, + [...AUTH, "oauth2", "scopes"], + { absent: "unscoped", unreadable: "refuses", readableAsAbsent: ["[]"] }, + "the catalogue refuses what it cannot read, as requiresAuthorization already does", + ), + ...sweep( + CATALOGUE_SCOPES_OF, + [...AUTH, "oauth2"], + { absent: "unscoped", unreadable: "refuses", readableAsAbsent: ["{}"] }, + "the catalogue refuses what it cannot read, as requiresAuthorization already does", + ), + // scopesOf (arcade.ts) — the tool `scopes` the gate reads; `[]` there means "connection is the + // grant", so an unreadable block must not become it. + ...sweep( + TRANSPORT_SCOPES_OF, + AUTH, + { absent: "scopes []", unreadable: "refuses", readableAsAbsent: ["{}"] }, + "authorizationRequirementOf's reading: absent is none, a non-object is unreadable", + ), + ...sweep( + TRANSPORT_SCOPES_OF, + [...AUTH, "oauth2"], + { absent: "scopes []", unreadable: "refuses", readableAsAbsent: ["{}"] }, + "an oauth2 block that is not an object is not 'no scopes'", + ), + ...sweep( + TRANSPORT_SCOPES_OF, + [...AUTH, "oauth2", "scopes"], + { absent: "scopes []", unreadable: "refuses", readableAsAbsent: ["[]"] }, + "an unreadable scope list is not 'the connection is the grant'", + ), + // connectionIsLive — absent is live ("silence is not a no", documented in the source, and so is + // an empty string); present but not text is the vendor saying something this cannot read. + // `null` is absence here as on every field, and a blank string is unreadable as on every + // decision field — see the header's "settled". + ...sweep( + CONNECTION_IS_LIVE, + ["connection_status"], + { absent: "live", unreadable: "not-live" }, + "present but not text (or blank) is not 'no status'", + ), + // The mint's own `status` (L2-b): absent is silence and the url stands; anything present that is + // not status text is NOT handed to a browser as a live redirect. + ...sweep( + MINT_STATUS, + ["status"], + { absent: "consent-next", unreadable: "refuses" }, + "a bearer url beside a status nobody could read is not a consent screen to send somebody to", + ), + // A scope list holding something that is not a scope is not the narrower list without it. + ...( + [ + [GRANT_STATE_OF, "unknown"], + [CATALOGUE_SCOPES_OF, "refuses"], + [TRANSPORT_SCOPES_OF, "refuses"], + ] as const + ).flatMap(([reader, want]) => + ( + [ + ['["repo",5]', ["repo", 5]], + ['["repo",""]', ["repo", ""]], + ['["repo",null]', ["repo", null]], + ] as const + ).map( + ([shape, value]): Row => ({ + reader, + field: [...AUTH, "oauth2", "scopes"], + shape, + value, + want, + why: "a partly unreadable scope list read as the readable part is a narrower grant than the one described", + }), + ), + ), + + // Readable controls: the reader still READS. Without these a reader that answered the + // permissive default for everything would pass every absent row above. + ...( + [ + [ + GRANT_STATE_OF, + [...AUTH, "oauth2", "scopes"], + ["repo"], + "authorized [repo]", + ], + [ + GRANT_STATE_OF, + [...AUTH, "token_status"], + "pending", + "needs-consent [repo]", + ], + [CATALOGUE_SCOPES_OF, [...AUTH, "oauth2", "scopes"], ["repo"], "scoped"], + [ + TRANSPORT_SCOPES_OF, + [...AUTH, "oauth2", "scopes"], + ["repo"], + "scopes [repo]", + ], + [CONNECTION_IS_LIVE, ["connection_status"], "active", "live"], + [MINT_STATUS, ["status"], "pending", "consent-next"], + ] as const + ).map( + ([reader, field, value, want]): Row => ({ + reader, + field: [...field], + shape: `readable ${JSON.stringify(value)}`, + value, + want, + why: "a positive control: the readable value is still read", + }), + ), + + // Normalization: case, whitespace, and every allowlist member. + { + reader: GRANT_STATE_OF, + field: [...AUTH, "token_status"], + shape: BESIDE_INACTIVE, + value: " Completed ", + beside: { path: [...AUTH, "status"], value: "inactive" }, + want: "authorized [repo]", + why: "a case or a space the vendor changes must not change an answer about an account", + }, + { + reader: GRANT_STATE_OF, + field: [...AUTH, "token_status"], + shape: '"NOT_STARTED"', + value: "NOT_STARTED", + want: "needs-consent [repo]", + why: "a case or a space the vendor changes must not change an answer about an account", + }, + { + reader: CONNECTION_IS_LIVE, + field: ["connection_status"], + shape: '" ACTIVE "', + value: " ACTIVE ", + want: "live", + why: "folded and trimmed", + }, + { + reader: CONNECTION_IS_LIVE, + field: ["connection_status"], + shape: '"Expired"', + value: "Expired", + want: "not-live", + why: "an allowlist: any spelling but the live one is not live", + }, + { + reader: MINT_STATUS, + field: ["status"], + shape: '"not_started"', + value: "not_started", + want: "consent-next", + why: "half the allowlist, and the one a first-time mint answers (D6)", + }, + { + reader: MINT_STATUS, + field: ["status"], + shape: '" Pending "', + value: " Pending ", + want: "consent-next", + why: "the only status row that FAILS when the trim/lowercase is deleted (D6)", + }, + { + reader: MINT_STATUS, + field: ["status"], + shape: '" NOT_STARTED "', + value: " NOT_STARTED ", + want: "consent-next", + why: "folded and trimmed, on the other allowlist member (D6)", + }, + { + reader: MINT_STATUS, + field: ["status"], + shape: '" Completed "', + value: " Completed ", + want: "refuses: already", + why: "the held-grant sentence, which only a normalized read reaches (D6)", + }, +]; + +// --------------------------------------------------------------------------------------------- +// THE DEBT. Delete an entry when its reader is fixed; never add one. See the header. +// --------------------------------------------------------------------------------------------- + +/** + * EMPTY SINCE K2: the 43 entries L2 recorded (A7c ×10, C2c ×28, A7b ×5) were paid by giving every + * reader the one reading in `server/src/plugins/arcade.ts`. An entry added here is a reader that + * fails open written after that, which is what this gate exists to say. + */ +const KNOWN_FAIL_OPEN: Record = {}; + +// --------------------------------------------------------------------------------------------- +// The checks. +// --------------------------------------------------------------------------------------------- + +const REPO = join(import.meta.dir, "..", ".."); + +describe("every vendor-field reader is still where the table says", () => { + const readers = [ + ...new Map( + ROWS.map((r) => [`${r.reader.file}#${r.reader.name}`, r.reader]), + ).values(), + ]; + for (const reader of readers) { + test(`${reader.name} is bound in ${reader.file}`, () => { + const source = readFileSync(join(REPO, reader.file), "utf8"); + const binding = new RegExp( + `(?:^|\\n)\\s*(?:export\\s+)?(?:async\\s+)?(?:function|const)\\s+${reader.name}\\b`, + ); + expect(binding.test(source)).toBe(true); + }); + } +}); + +describe("the debt list is honest", () => { + test("every KNOWN_FAIL_OPEN entry names a row in the table", () => { + const keys = new Set(ROWS.map(keyOf)); + expect(Object.keys(KNOWN_FAIL_OPEN).filter((k) => !keys.has(k))).toEqual( + [], + ); + }); + + test("no debt entry records the right answer as its wrong one", () => { + const wants = new Map(ROWS.map((r) => [keyOf(r), r.want])); + expect( + Object.entries(KNOWN_FAIL_OPEN) + .filter(([key, debt]) => wants.get(key) === debt.now) + .map(([key]) => key), + ).toEqual([]); + }); + + test("row keys are unique", () => { + const keys = ROWS.map(keyOf); + expect(keys.length).toBe(new Set(keys).size); + }); +}); + +describe("a vendor field this deployment cannot read fails closed", () => { + for (const row of ROWS) { + const key = keyOf(row); + const debt = KNOWN_FAIL_OPEN[key]; + const label = debt + ? `[debt ${debt.finding.split(":")[0]}] ${key} — answers ${debt.now}, should answer ${row.want}` + : `${key} → ${row.want} (via ${row.reader.door})`; + test(label, async () => { + const observed = await row.reader.observe((base) => + placed( + row.beside ? placed(base, row.beside.path, row.beside.value) : base, + row.field, + row.value, + ), + ); + const expected = debt ? debt.now : row.want; + const diagnosis = + observed === expected + ? "as recorded" + : debt && observed === row.want + ? "FIXED: delete this row's KNOWN_FAIL_OPEN entry" + : debt + ? "debt changed to a third answer" + : "differs from the right answer"; + expect({ key, observed, diagnosis }).toEqual({ + key, + observed: expected, + diagnosis: "as recorded", + }); + }); + } +}); diff --git a/server/tests/arcade-verify.test.ts b/server/tests/arcade-verify.test.ts new file mode 100644 index 000000000..808184f6a --- /dev/null +++ b/server/tests/arcade-verify.test.ts @@ -0,0 +1,1847 @@ +// server/tests/arcade-verify.test.ts +/** + * The verifier: a browser coming back from a brokered per-action consent, refused or completed. + * + * ALMOST EVERY ASSERTION HERE IS "NOTHING WAS WRITTEN", which is the shape where a broken + * implementation looks exactly like a passing one. So no case infers that from a status code: + * each one QUERIES `brokered_connections` for a row belonging to this suite's app, and + * `audit_events` for the `mcp.account_connected` entry the completion transaction files, and + * requires both to be empty. The app name is suite-scoped, so a count of zero is a fact about this + * run. + * + * NOR DOES ANY CASE INFER A REFUSAL FROM "IT REDIRECTED". Every exit from this route answers a + * `Location` — the criterion `/oauth/callback` already holds itself to — so a test that checked the + * 303 alone would pass for every refusal including the wrong one. Each refusal names the reason code + * its `?authorized=` parameter has to carry, one for one, and the codes are asserted once AS A SET + * so a new one cannot appear without this file going red. + * + * AND IT DRIVES THROUGH `createApp`, NOT THROUGH `createPluginRoutes`. A route that is built but + * never mounted answers 404 in production while its own factory test passes — the failure every + * Shared-app surface had before `shared-wiring.integration.test.ts` was written. + */ +import { afterAll, beforeEach, describe, expect, test } from "bun:test"; +import { randomUUID } from "node:crypto"; +import { getCookies } from "better-auth/cookies"; +import { and, asc, eq, inArray, like, sql } from "drizzle-orm"; +import { createApp } from "../src/app"; +import { createAuditStore } from "../src/audit"; +import { createAuth } from "../src/auth/index"; +import { loadConfig } from "../src/config"; +import { createDatabase } from "../src/db/client"; +import { + auditEvents, + brokeredConnections, + mcpServers, + pendingAuthorizations, +} from "../src/db/schema"; +import type { BrokerProvider } from "../src/plugins/access"; +import type { ConnectedAppBroker } from "../src/plugins/broker"; +import { AUTHORIZATION_REFUSALS } from "../src/plugins/routes"; +import type { AccountRef } from "../src/plugins/shared-accounts"; +import { createPluginStore } from "../src/plugins/store"; +import { testDatabaseUrl } from "./support/database"; +import { removePeople, seedPeople } from "./support/people"; +import { testEnvironment } from "./support/environment"; + +/* + * SIX CONNECTIONS RATHER THAN THE SHARED `TEST_POOL` OF TWO, because the race below drives two + * completion TRANSACTIONS at once through two whole apps, and the second blocks on the first's row + * lock while holding its own connection. `support/database.ts` says a file wanting a different pool + * asks for one itself. + */ +const database = createDatabase(testDatabaseUrl(), { max: 6 }); +const suite = randomUUID().slice(0, 8); +const APP = `arcade-verify-${suite}`; +/** + * ONE APP PER TEST, because `audit_events` is APPEND-ONLY and cannot be cleaned between them. A + * fixed name would let a completion's event be counted by the next case's "nothing was written", + * which is the exact assertion this suite is built on. The app is keyed on its toolkit, so a fresh + * toolkit per test is a fresh everything. + */ +let TOOLKIT = ""; +let apps = 0; +const ACTOR = `verifier-${suite}`; +const STRANGER = `stranger-${suite}`; +const SHARED_IDENTITY = `shared-${suite}`; +const ACTION = "Gmail.ListEmails"; +const MINTED = "ar_minted_for_this_attempt"; +const APP_URL = "https://app.example"; +/** A stand-in for the live `gho_…` the vendor's own status reply carries beside the three fields. */ +const TOKEN = `gho_live_access_token_${suite}`; +/** The profile address the same reply carries, which is no more the route's to repeat. */ +const EMAIL = "person@example.test"; + +/** Every call this suite lets reach the seam. A refusal that spends one is a refusal too late. */ +let confirmCalls: { handle: string; vendorUserId: string }[] = []; +let statusCalls: string[] = []; +let revokeCalls: { account: AccountRef; toolkit: string }[] = []; +/** What the next `confirmReturn` answers, or throws. Set per test. */ +let confirmAnswer: () => Promise< + { authorizationId: string } | { mismatch: true } +> = async () => ({ authorizationId: MINTED }); +/** + * What the next status read answers. DELIBERATELY WIDER THAN THE SEAM in one case below: the + * vendor's real reply carries a live access token and a full profile, and the point of that case is + * that nothing this route touches can carry either anywhere. + */ +let statusAnswer: () => Promise<{ + status: string; + userId: string | null; + scopes: string[]; +}> = async () => ({ + status: "completed", + userId: ACTOR, + scopes: ["gmail.read"], +}); +let revokeAnswer: () => Promise = async () => true; +/** + * What auth provider the app's connections are held under. NEVER THE TOOLKIT NAME: the two coincide + * only where an operator named their provider configuration after the app, so a route deriving one + * from the other would pass here and be wrong where it shipped. + */ +let authProviderAnswer: (toolkit: string) => Promise = + async () => "google"; + +/** + * A broker that DECLARES the correlated authorization flow, which is the only thing this route's + * gate reads. Every member is declared because the seam requires a broker to SAY what it runs; see + * `ConnectedAppBroker.authorizations` and `.grantIsLocal`. + */ +const broker: ConnectedAppBroker = { + grantIsLocal: false, + /* + * PER TOOLKIT, because which apps share one connection is the question `(identity, auth + * provider)` answers and a stub that gave every app the same provider could not pose it: an app + * on ANOTHER provider, held by the same identity and not ended by this revoke, is the control + * for the sibling cases below. + */ + /* + * NOT `async`, so a case below can make this throw SYNCHRONOUSLY — the shape a broker method + * that validates its argument before it returns a promise has. Every other case hands back a + * promise exactly as before. + */ + authProviderOf: (toolkit) => authProviderAnswer(toolkit), + authorizations: { + status: async (id) => { + statusCalls.push(id); + return statusAnswer(); + }, + confirmReturn: async (query) => { + confirmCalls.push(query); + return confirmAnswer(); + }, + }, + grantsFor: async () => [], + listApps: async () => [], + ensureAuthConfig: async () => "standing", + deleteAuthConfig: async () => {}, + authorize: async () => ({ + redirectUrl: "https://vendor.example/consent?secret=bearer-capability", + authorizationId: MINTED, + }), + isConnected: async () => true, + revoke: async (request) => { + revokeCalls.push(request); + return revokeAnswer(); + }, + connectionFields: async () => [], + connectWithFields: async () => ({ accountId: "ca_1" }), + revokeAccount: async () => {}, + accountName: async () => null, +}; + +/** + * The deployment as `createApp` builds it, with a session for `who` or none at all. + * + * Positional, by index rather than by a run of `undefined`s, for the reason + * `shared-wiring.integration.test.ts` gives: a parameter added in the middle then moves a type error + * onto the wrong index here rather than shifting an argument silently. + */ +function build( + who: string | null, + options: { + roles?: string[]; + brokerBag?: + | { broker: ConnectedAppBroker; provider: BrokerProvider } + | undefined; + /** A handle whose behaviour one case alters; everything else runs on the suite's own. */ + database?: typeof database; + /** + * Makes the ONE store read that happens before the completion throw. Not a broken `database` + * handle, because that read is a plain `select` the rest of the deployment's boot shares — the + * case is about this route's own call, so this replaces exactly that method. + */ + attemptReadThrows?: boolean; + /** Makes the guard's ROLE read throw, which is a store read outside the handler's own code. */ + roleReadThrows?: boolean; + /** + * Hands the route an attempt row whose `(holder, user_id)` pair the TABLE would refuse. + * + * Injected at the store rather than inserted, because `pending_authorizations_holder_check` + * holds that pair in the database and these combinations cannot be written at all — which is + * the point. The route reads the pair out of a row and aims a REVOCATION with it, so what it + * does with a pair it should never see is a fact about the route and not about the table, and + * the only way to ask is to put the row in its hand. + */ + attemptAs?: { holder?: string; userId?: string | null }; + /** + * What the COMPLETION does, and the two values are not the same failure. + * + * `rolls-back` throws instead of writing — the transaction never ran, so nothing exists. + * `commits-then-throws` runs the real transaction to completion and THEN rejects, which is a + * connection lost on the way back from a COMMIT the server already applied: the grant is + * written down and the caller is told only that something failed. The route may not answer + * those two the same way, and no broken `database` handle can pose the second — a handle that + * breaks the transaction rolls it back, which is the first. + */ + completion?: "rolls-back" | "commits-then-throws"; + } = {}, +) { + const handle = options.database ?? database; + const auditStore = createAuditStore(handle); + const pluginStore = createPluginStore({ + brokerProvider: "arcade", + database: handle, + auditStore, + credentials: {} as never, + encryptionKey: "x".repeat(44), + policy: () => ({ mode: "enforce", deny: [], allow: ["true"] }), + broker, + deploymentId: `acme-${suite}`, + }); + const args = new Array(createApp.length) as unknown as Parameters< + typeof createApp + >; + args[0] = loadConfig(testEnvironment({ OPENBOT_APP_URL: APP_URL })); + args[1] = { + handler: () => new Response(null, { status: 204 }), + api: { + getSession: async () => + who === null + ? null + : { user: { id: who, email: `${who}@example.test`, name: "Person" } }, + }, + } as never; + args[2] = { + rolesForUser: async () => { + if (options.roleReadThrows) throw new Error("injected role read failure"); + return options.roles ?? ["user"]; + }, + } as never; + args[12] = auditStore; + args[14] = options.attemptReadThrows + ? { + ...pluginStore, + authorizationAttemptFor: async () => { + throw new Error("injected attempt read failure"); + }, + } + : options.attemptAs + ? { + ...pluginStore, + authorizationAttemptFor: async (actorId: string) => { + const row = await pluginStore.authorizationAttemptFor(actorId); + return row === null + ? null + : ({ ...row, ...options.attemptAs } as typeof row); + }, + } + : options.completion + ? { + ...pluginStore, + completeAuthorizationAttempt: async ( + input: Parameters< + typeof pluginStore.completeAuthorizationAttempt + >[0], + ) => { + if (options.completion === "commits-then-throws") { + await pluginStore.completeAuthorizationAttempt(input); + } + throw completionFailure(); + }, + } + : pluginStore; + args[29] = + "brokerBag" in options ? options.brokerBag : { broker, provider: "arcade" }; + return createApp(...args); +} + +function verify( + who: string | null, + query: string, + options?: Parameters[1], +) { + return build(who, options).request( + `http://openbot.test/api/plugins/arcade/verify${query}`, + ); +} + +/** Where a refusal lands: the LIST, with the reason as an opaque code and no sentence. */ +const refusedTo = (reason: string) => + `${APP_URL}/settings/connected-accounts?authorized=${reason}`; + +/** Where a completion lands: the app's own page, built from the attempt row's `server_id`. */ +const LANDING = `${APP_URL}/settings/connected-accounts/${APP}?action=${encodeURIComponent(ACTION)}`; + +/** + * A refusal, named by its code and not merely by the fact that something redirected. + * + * The transport is the same for all of them, so a check that stopped at the 303 would pass for + * every one including whichever one is wrong. The code is the whole of the discrimination the + * status codes used to carry — and `?connected=`, which belongs to the Composio callback, is never + * along for the ride. + */ +async function expectRefusal(response: Response, reason: string) { + expect(response.status).toBe(303); + expect(response.headers.get("location")).toBe(refusedTo(reason)); + expect(response.headers.get("location")).not.toContain("connected="); +} + +/** What the completion transaction would have left behind. Queried, never inferred from a status. */ +async function written() { + const connections = await database + .select() + .from(brokeredConnections) + .where(eq(brokeredConnections.app, TOOLKIT)); + const events = await database + .select() + .from(auditEvents) + .where( + and( + eq(auditEvents.targetId, TOOLKIT), + eq(auditEvents.eventType, "mcp.account_connected"), + ), + ); + return { connections, events }; +} + +async function expectNothingWritten() { + const { connections, events } = await written(); + expect({ + connections: connections.length, + successEvents: events.length, + }).toEqual({ connections: 0, successEvents: 0 }); +} + +/** + * EVERY STRING A VALUE CARRIES, however deeply it is buried, and not `String(value)`. + * + * A console argument is not a string, an audit row is not a string, and a response is not a string. + * `String({ token })` is `"[object Object]"`, so a confinement check that flattened each argument + * that way would read a leaked credential as six harmless characters — and the vendor status reply + * the D31 case feeds through carries its token inside `context: { token }`, which is exactly the + * shape that flattening hides. `JSON.stringify` is better but still blind to a `Map`, a `Set`, an + * `Error`'s message, a key that IS the secret, and anything that renders itself through its own + * `toString`. So the value is WALKED: array and set members, map keys and values, own property + * names and their values, an error's message, name, stack and cause, and the rendering of any + * object that renders as something other than its default tag. + */ +function harvest(value: unknown, into: string[], seen: Set): void { + if (value === null || value === undefined) return; + if (typeof value === "string") { + into.push(value); + return; + } + if (typeof value !== "object" && typeof value !== "function") { + into.push(String(value)); + return; + } + const object = value as object; + if (seen.has(object)) return; + seen.add(object); + // Anything with a `toString` of its own: an Error, a URL, a Buffer, a class that renders itself. + try { + const rendered = String(object); + if (rendered !== Object.prototype.toString.call(object)) + into.push(rendered); + } catch { + // A value that refuses to render still has its properties walked below. + } + if (value instanceof Error) { + into.push(value.name, value.message, value.stack ?? ""); + harvest((value as { cause?: unknown }).cause, into, seen); + } + if (Array.isArray(value) || value instanceof Set) { + for (const item of value) harvest(item, into, seen); + } + if (value instanceof Map) { + for (const [key, item] of value) { + harvest(key, into, seen); + harvest(item, into, seen); + } + } + for (const key of Reflect.ownKeys(object)) { + if (typeof key === "string") into.push(key); + try { + harvest((object as Record)[key], into, seen); + } catch { + // A throwing getter hides nothing the other properties do not already show. + } + } +} + +/** + * Where a secret shows up inside a value, as the strings that carry it — EMPTY when it is confined. + * Returned rather than asserted so a failure names the leaking string instead of saying `false`. + */ +function mentionsOf(value: unknown, secret: string): string[] { + const found: string[] = []; + harvest(value, found, new Set()); + return found.filter((text) => text.includes(secret)); +} + +/** A whole answer as the browser would receive it: every header, and the body, never one field. */ +async function asDelivered(response: Response) { + const copy = response.clone(); + return { headers: [...copy.headers], body: await copy.text() }; +} + +/** The attempt row itself, which is what every "nothing was written" case is really about. */ +async function attemptRow(actorId = ACTOR) { + const [row] = await database + .select() + .from(pendingAuthorizations) + .where(eq(pendingAuthorizations.actorId, actorId)); + return row ?? null; +} + +/** + * One live attempt for `ACTOR`, written directly so its age and its `auth_id` are the test's to + * choose. `createdAt` is a JS `Date`, which carries only milliseconds — the same precision + * `claimAuthorizationAttempt` truncates the column to — so a value read back out compares exactly. + */ +async function giveAttempt(options: { + authId: string | null; + ageMinutes: number; +}) { + const createdAt = new Date( + Math.floor(Date.now() / 1000) * 1000 - options.ageMinutes * 60_000, + ); + await database.insert(pendingAuthorizations).values({ + actorId: ACTOR, + serverId: APP, + action: ACTION, + holder: "person", + userId: ACTOR, + vendorUserId: ACTOR, + authId: options.authId, + createdAt, + }); + return createdAt; +} + +beforeEach(async () => { + /* + * The people the attempts below belong to. `pending_authorizations.actor_id` and `.user_id` key + * to `users` and cascade, so `giveAttempt` cannot write a row for somebody who does not exist. + * Seeded per case rather than once, because a case that deletes the person to watch the cascade + * would otherwise leave the rest of the file without one. + */ + await seedPeople(database, [ACTOR, STRANGER]); + confirmCalls = []; + statusCalls = []; + revokeCalls = []; + confirmAnswer = async () => ({ authorizationId: MINTED }); + statusAnswer = async () => ({ + status: "completed", + userId: ACTOR, + scopes: ["gmail.read"], + }); + revokeAnswer = async () => true; + authProviderAnswer = async () => "google"; + apps += 1; + TOOLKIT = `Gmail-${suite}-${apps}`; + await database + .delete(pendingAuthorizations) + .where(eq(pendingAuthorizations.actorId, ACTOR)); + await database.delete(mcpServers).where(eq(mcpServers.id, APP)); + await database.insert(mcpServers).values({ + id: APP, + title: "Gmail", + vendor: "Arcade", + url: `arcade://${TOOLKIT}`, + provenance: "arcade", + authScheme: "OAUTH2", + accountMode: "personal", + }); +}); + +afterAll(async () => { + await database + .delete(pendingAuthorizations) + .where(eq(pendingAuthorizations.actorId, ACTOR)); + await database + .delete(brokeredConnections) + .where(like(brokeredConnections.app, `Gmail-${suite}-%`)); + await database.delete(mcpServers).where(eq(mcpServers.id, APP)); + await removePeople(database, [ACTOR, STRANGER]); + await database.$client.close(); +}); + +/** + * THE CLOSED SET, ASSERTED ONCE AND AS A SET. + * + * Each refusal below names one of these, so the list and the cases hold each other up: a code added + * to the route without a case here fails this, and a case naming a code the route cannot send fails + * its own `Location`. + */ +test("the reasons the verifier can refuse with are a closed set", () => { + expect([...AUTHORIZATION_REFUSALS]).toEqual([ + "no-broker", + "not-supported", + "missing-handle", + "no-attempt", + "vendor-unavailable", + "not-your-authorization", + "not-finished", + "authorization-failed", + "context-changed", + "not-recorded", + ]); +}); + +describe("a return leg this deployment will not complete", () => { + test("an empty flow_id is refused without the vendor being asked", async () => { + await giveAttempt({ authId: MINTED, ageMinutes: 1 }); + await expectRefusal(await verify(ACTOR, "?flow_id="), "missing-handle"); + expect(confirmCalls).toEqual([]); + await expectNothingWritten(); + }); + + test("a missing flow_id is refused without the vendor being asked", async () => { + await giveAttempt({ authId: MINTED, ageMinutes: 1 }); + await expectRefusal(await verify(ACTOR, ""), "missing-handle"); + expect(confirmCalls).toEqual([]); + await expectNothingWritten(); + }); + + test("a whitespace-only flow_id is refused without the vendor being asked", async () => { + await giveAttempt({ authId: MINTED, ageMinutes: 1 }); + await expectRefusal( + await verify(ACTOR, "?flow_id=%20%20%09"), + "missing-handle", + ); + expect(confirmCalls).toEqual([]); + await expectNothingWritten(); + }); + + test("no attempt at all is refused", async () => { + await expectRefusal(await verify(ACTOR, "?flow_id=flow-abc"), "no-attempt"); + expect(confirmCalls).toEqual([]); + await expectNothingWritten(); + }); + + test("an attempt past the fifteen-minute TTL is refused", async () => { + await giveAttempt({ authId: MINTED, ageMinutes: 20 }); + await expectRefusal(await verify(ACTOR, "?flow_id=flow-abc"), "no-attempt"); + expect(confirmCalls).toEqual([]); + await expectNothingWritten(); + }); + + test("an attempt whose mint never answered an id is refused", async () => { + await giveAttempt({ authId: null, ageMinutes: 1 }); + await expectRefusal(await verify(ACTOR, "?flow_id=flow-abc"), "no-attempt"); + expect(confirmCalls).toEqual([]); + await expectNothingWritten(); + }); + + /** + * THE LATE CALLBACK. The vendor confirms, honestly, an authorization that is not the one this + * deployment is holding — the read attempt that expired arriving behind the send attempt that + * replaced it. The replacement must be left EXACTLY as it was, so the row itself is read back + * rather than the answer being trusted to imply it. + */ + test("a confirmation naming a different attempt refuses and leaves the row untouched", async () => { + const createdAt = await giveAttempt({ authId: MINTED, ageMinutes: 1 }); + confirmAnswer = async () => ({ authorizationId: "ar_some_other_attempt" }); + + await expectRefusal( + await verify(ACTOR, "?flow_id=flow-abc"), + "not-your-authorization", + ); + expect(confirmCalls).toEqual([{ handle: "flow-abc", vendorUserId: ACTOR }]); + expect(statusCalls).toEqual([]); + + const row = await attemptRow(); + expect(row?.completedAt).toBeNull(); + expect(row?.outcome).toBeNull(); + expect(row?.authId).toBe(MINTED); + expect(row?.createdAt.getTime()).toBe(createdAt.getTime()); + await expectNothingWritten(); + }); + + /** + * The vendor saying the handle is somebody else's. MOCKED-ONLY: the SDK declares no error shape + * for this, so the adapter's detection is an assumption until a live probe runs. A passing test + * here is not proof the path works — what it pins is that the route refuses cleanly and writes + * nothing when the seam DOES answer this way. + */ + test("a handle the vendor says is somebody else's refuses", async () => { + await giveAttempt({ authId: MINTED, ageMinutes: 1 }); + confirmAnswer = async () => ({ mismatch: true }); + + await expectRefusal( + await verify(ACTOR, "?flow_id=flow-abc"), + "not-your-authorization", + ); + + const row = await attemptRow(); + expect(row?.completedAt).toBeNull(); + expect(row?.outcome).toBeNull(); + expect(row?.authId).toBe(MINTED); + await expectNothingWritten(); + }); + + /** + * Somebody else's browser, or the same person signed in as somebody else. The attempt is keyed on + * the signed-in person and is never found from the handle, so there is nothing to correlate to. + */ + test("coming back signed in as a different person refuses", async () => { + await giveAttempt({ authId: MINTED, ageMinutes: 1 }); + await expectRefusal( + await verify(STRANGER, "?flow_id=flow-abc"), + "no-attempt", + ); + expect(confirmCalls).toEqual([]); + + const row = await attemptRow(); + expect(row?.completedAt).toBeNull(); + expect(row?.authId).toBe(MINTED); + await expectNothingWritten(); + }); + + /** + * THE VENDOR NOT ANSWERING THE CONFIRMATION AT ALL. Nothing of its reply travels with the + * refusal — not its sentence, not its body, not the error — because a reply on this leg can carry + * an authorization url, which is a bearer capability. + */ + test("a vendor that will not answer the confirmation refuses and writes nothing", async () => { + await giveAttempt({ authId: MINTED, ageMinutes: 1 }); + confirmAnswer = async () => { + throw new Error("vendor down: https://vendor.example/consent?secret=x"); + }; + + const [response, said] = await heard(() => + verify(ACTOR, "?flow_id=flow-abc"), + ); + await expectRefusal(response, "vendor-unavailable"); + expect(response.headers.get("location")).not.toContain("vendor.example"); + + const row = await attemptRow(); + expect(row?.completedAt).toBeNull(); + expect(row?.outcome).toBeNull(); + await expectNothingWritten(); + + /* + * AND AN OPERATOR IS LEFT A LINE. This refusal and the status one share a sentence at the + * browser, so without this the two are indistinguishable in the only place anybody could tell + * them apart — and they are not equally serious. This one ran before the confirmation, so no + * completed consent is implied by reaching it, and the line says so. + */ + const line = lines(said).find((text) => + text.includes("arcade-return-confirmation-unknown"), + ); + expect(line).toBeDefined(); + expect(line).toContain(`"authorizationId":"${MINTED}"`); + // The vendor's own words stay out of it, exactly as they stay out of the redirect above. + expect(line).not.toContain("vendor.example"); + }); +}); + +describe("a return leg with no session", () => { + /** + * NOT 401 JSON. The caller is a person's browser on a top-level navigation with a just-completed + * consent behind it, and the handle has to survive the trip so signing back in as the same person + * can resume. + */ + test("is sent to sign-in with its flow_id, not answered with an error object", async () => { + await giveAttempt({ authId: MINTED, ageMinutes: 1 }); + const response = await verify(null, "?flow_id=flow%2Fabc"); + expect(response.status).toBe(303); + expect(response.headers.get("location")).toBe( + `${APP_URL}/sign?flow_id=flow%2Fabc`, + ); + expect(confirmCalls).toEqual([]); + await expectNothingWritten(); + }); +}); + +describe("a return leg with a session whose role was removed", () => { + /** + * THE ONE EXIT WITH NO `Location`, AND IT IS STATED RATHER THAN INHERITED. The guard that refused + * here is the guard `/api/me` answers from, so this session cannot reliably load the landing page + * either: it would be sent to `/sign` or into an error boundary, which is the dead end this + * branch exists to avoid. + */ + test("is told so with a 403, not sent to a sign-in that cannot help", async () => { + await giveAttempt({ authId: MINTED, ageMinutes: 1 }); + const response = await verify(ACTOR, "?flow_id=flow-abc", { roles: [] }); + expect(response.status).not.toBe(303); + expect(response.status).toBe(403); + expect(response.headers.get("location")).toBeNull(); + expect(await response.json()).toHaveProperty("error"); + expect(confirmCalls).toEqual([]); + await expectNothingWritten(); + }); +}); + +/** + * THE CRITERION HELD WHERE IT WAS NOT HELD: a throw BEFORE the completion. + * + * The case further down pins a throw INSIDE the completion transaction, and that is the only place + * anything pinned one — which is how the two awaited reads that happen EARLIER came to sit outside + * the blanket `try`. A throw from either ended the request as Hono's default bodyless 500, with no + * `Location` at all, for somebody who had just finished a consent at another company. There is no + * `app.onError` on this app to turn that into anything else. + * + * `not-recorded` IS THE CODE FOR BOTH, because it is what the criterion requires and because it is + * true: nothing was recorded. Neither case adds an exit, so the closed set above is unchanged. + */ +describe("a store that throws before anything could be written", () => { + test("the attempt read throwing still answers a Location", async () => { + await giveAttempt({ authId: MINTED, ageMinutes: 1 }); + await expectRefusal( + await verify(ACTOR, "?flow_id=flow-abc", { attemptReadThrows: true }), + "not-recorded", + ); + // The vendor was never asked, and the row is left exactly as it was. + expect(confirmCalls).toEqual([]); + expect(statusCalls).toEqual([]); + const row = await attemptRow(); + expect(row?.completedAt).toBeNull(); + expect(row?.outcome).toBeNull(); + await expectNothingWritten(); + }); + + /** + * THE GUARD'S OWN READS ARE INSIDE THE `try` TOO, and this does not disturb the 403 above: that + * branch RETURNS a response, and a `catch` sees throws and not returns. + */ + test("the guard's role read throwing still answers a Location", async () => { + await giveAttempt({ authId: MINTED, ageMinutes: 1 }); + await expectRefusal( + await verify(ACTOR, "?flow_id=flow-abc", { roleReadThrows: true }), + "not-recorded", + ); + expect(confirmCalls).toEqual([]); + await expectNothingWritten(); + }); +}); + +describe("a deployment whose broker runs no correlated authorization flow", () => { + test("a broker declaring authorizations: null refuses as not supported", async () => { + await giveAttempt({ authId: MINTED, ageMinutes: 1 }); + await expectRefusal( + await verify(ACTOR, "?flow_id=flow-abc", { + brokerBag: { + broker: { ...broker, authorizations: null }, + provider: "composio", + }, + }), + "not-supported", + ); + expect(confirmCalls).toEqual([]); + await expectNothingWritten(); + }); + + test("no broker bag at all refuses as no broker", async () => { + await giveAttempt({ authId: MINTED, ageMinutes: 1 }); + await expectRefusal( + await verify(ACTOR, "?flow_id=flow-abc", { brokerBag: undefined }), + "no-broker", + ); + expect(confirmCalls).toEqual([]); + await expectNothingWritten(); + }); + + test("the gate does not answer before the session is checked", async () => { + const response = await verify(null, "?flow_id=flow-abc", { + brokerBag: undefined, + }); + expect(response.status).toBe(303); + expect(response.headers.get("location")).toBe( + `${APP_URL}/sign?flow_id=flow-abc`, + ); + }); +}); + +describe("what the authorization's own status decides", () => { + /** + * A TIMEOUT IS NEITHER A SUCCESS NOR A FAILURE, and the proof is that the attempt is still + * completable afterwards: the second call below finishes the very same row. A refusal that closed + * it would leave somebody who came back to the link with nothing to finish. + */ + test("still pending at the bound refuses and LEAVES THE ATTEMPT STANDING", async () => { + const createdAt = await giveAttempt({ authId: MINTED, ageMinutes: 1 }); + statusAnswer = async () => ({ + status: "pending", + userId: ACTOR, + scopes: [], + }); + + await expectRefusal( + await verify(ACTOR, "?flow_id=flow-abc"), + "not-finished", + ); + // BOUNDED, and the bound is small: never the SDK's unbounded wait. + expect(statusCalls.length).toBeGreaterThan(1); + expect(statusCalls.length).toBeLessThanOrEqual(5); + expect(statusCalls.every((id) => id === MINTED)).toBe(true); + + const standing = await attemptRow(); + expect(standing?.completedAt).toBeNull(); + expect(standing?.outcome).toBeNull(); + expect(standing?.authId).toBe(MINTED); + expect(standing?.createdAt.getTime()).toBe(createdAt.getTime()); + await expectNothingWritten(); + + // AND IT COMPLETES AFTERWARDS, which is the whole claim. + statusAnswer = async () => ({ + status: "completed", + userId: ACTOR, + scopes: ["gmail.read"], + }); + const finished = await verify(ACTOR, "?flow_id=flow-abc"); + expect(finished.headers.get("location")).toBe(LANDING); + const after = await attemptRow(); + expect(after?.outcome).toBe("completed"); + expect(after?.completedAt).not.toBeNull(); + const { connections } = await written(); + expect(connections.length).toBe(1); + }, 30_000); + + test("a failed authorization refuses and the ROW is marked failed", async () => { + await giveAttempt({ authId: MINTED, ageMinutes: 1 }); + statusAnswer = async () => ({ + status: "failed", + userId: ACTOR, + scopes: [], + }); + + await expectRefusal( + await verify(ACTOR, "?flow_id=flow-abc"), + "authorization-failed", + ); + expect(statusCalls).toEqual([MINTED]); + + const row = await attemptRow(); + expect(row?.outcome).toBe("failed"); + expect(row?.completedAt).not.toBeNull(); + expect(row?.authId).toBe(MINTED); + await expectNothingWritten(); + }); + + test("a status naming a different identity refuses and the ROW is marked failed", async () => { + await giveAttempt({ authId: MINTED, ageMinutes: 1 }); + statusAnswer = async () => ({ + status: "completed", + userId: `somebody-else-${suite}`, + scopes: ["gmail.read"], + }); + + await expectRefusal( + await verify(ACTOR, "?flow_id=flow-abc"), + "not-your-authorization", + ); + + const row = await attemptRow(); + expect(row?.outcome).toBe("failed"); + expect(row?.completedAt).not.toBeNull(); + await expectNothingWritten(); + }); + + test("a vendor that will not answer the status refuses and leaves the row standing", async () => { + await giveAttempt({ authId: MINTED, ageMinutes: 1 }); + statusAnswer = async () => { + throw new Error(`vendor down, token ${TOKEN}`); + }; + + const [response, said] = await heard(() => + verify(ACTOR, "?flow_id=flow-abc"), + ); + await expectRefusal(response, "vendor-unavailable"); + // THE WHOLE ANSWER: the vendor's failure carries the token in its message, so a check of + // `Location` alone would miss it riding another header or the body. + expect(mentionsOf(await asDelivered(response), TOKEN)).toEqual([]); + + const row = await attemptRow(); + expect(row?.completedAt).toBeNull(); + expect(row?.outcome).toBeNull(); + await expectNothingWritten(); + + /* + * AND THE ONE UNKNOWN THAT CAN SIT OVER A LIVE GRANT IS SAID OUT LOUD. + * + * Everything before this point passed: the handle was confirmed and it named this mint, and the + * person is here because a consent screen sent them. So the likeliest state behind the throw is + * a consent that COMPLETED at the vendor with nothing here recording it. Silent, that is a live + * grant nobody knows to look for. + */ + const line = lines(said).find((text) => + text.includes("arcade-completion-status-unknown"), + ); + expect(line).toBeDefined(); + expect(line).toContain(`"authorizationId":"${MINTED}"`); + + /* + * AND THE LOG IS HELD TO THE SAME BAR AS THE RESPONSE (D31). A status reply on this leg carries + * a LIVE PROVIDER ACCESS TOKEN, so a line written about a status failure is exactly where one + * would escape — and a log is not a lesser destination than a redirect. The refusal above + * already proves the response is clean; this proves the line beside it is. + */ + expect(mentionsOf(line ?? "", TOKEN)).toEqual([]); + }); + + /** + * D5: A VENDOR THAT ACCEPTS AND NEVER ANSWERS. The one above throws, which every bounded loop + * survives; this one does neither — it takes the call and goes quiet, which is what a hung socket + * actually looks like. + * + * A BOUND ON THE POLL COUNT IS NOT A BOUND. Five unbounded waits are unbounded, so the loop + * condition is never reached, the handler never returns, and the browser is held open for as long + * as the vendor cares to hold it — the exact case `settledStatus`'s own docblock claims to + * prevent. The assertion is therefore not about a status code: it is that the request COMPLETES. + * + * AND THE TEST CANNOT HANG THE SUITE EVEN WHEN THE FIX IS GONE. The request is raced against this + * case's own watchdog and the watchdog ANSWERS rather than throwing, so a regression fails here + * with "it never answered" instead of running the suite into its timeout with no diagnosis. The + * watchdog is longer than the route's worst case (five polls at two seconds with four one-second + * pauses) and shorter than this case's own timeout, which is the whole of what it has to be. + */ + test("a vendor that ACCEPTS AND NEVER ANSWERS still completes, refusing", async () => { + await giveAttempt({ authId: MINTED, ageMinutes: 1 }); + // Never settles and never rejects: the vendor is holding the connection open. + statusAnswer = () => new Promise(() => {}); + + let watchdog: ReturnType | undefined; + const hung = new Promise<"never answered">((resolve) => { + watchdog = setTimeout(() => resolve("never answered"), 20_000); + }); + const answered = await Promise.race([ + verify(ACTOR, "?flow_id=flow-abc"), + hung, + ]).finally(() => { + if (watchdog !== undefined) clearTimeout(watchdog); + }); + + expect(answered).not.toBe("never answered"); + const response = answered as Response; + await expectRefusal(response, "vendor-unavailable"); + // The suite-wide promise: nothing of the vendor's rides out on any header or in the body. + expect(mentionsOf(await asDelivered(response), TOKEN)).toEqual([]); + + /* + * AND THE ROW IS LEFT STANDING, as it is for every other "we could not read the status" exit. + * A consent that may well have finished at the vendor must still be finishable by somebody who + * comes back to the link. + */ + const row = await attemptRow(); + expect(row?.completedAt).toBeNull(); + expect(row?.outcome).toBeNull(); + expect(row?.authId).toBe(MINTED); + await expectNothingWritten(); + }, 30_000); +}); + +/** + * D28: a consent whose account context moved on is not completed into the present. + * + * The app is switched to Shared between the mint and the callback, which mints a fresh deployment + * identity. The attempt names the person's own identity, which is now retired. + */ +describe("a consent whose account context has moved on", () => { + /** The connection the CURRENT identity already holds, which this refusal must not touch. */ + async function giveCurrentAccountAConnection() { + await database.insert(brokeredConnections).values({ + provider: "arcade", + app: TOOLKIT, + holder: "deployment", + userId: null, + vendorUserId: SHARED_IDENTITY, + verified: true, + }); + } + + async function switchToShared() { + await database + .update(mcpServers) + .set({ accountMode: "shared", sharedVendorUserId: SHARED_IDENTITY }) + .where(eq(mcpServers.id, APP)); + } + + /** A connection this identity holds for one app, as the row this deployment keeps for it. */ + async function hold(app: string, vendorUserId: string) { + await database.insert(brokeredConnections).values({ + provider: "arcade", + app, + holder: "person", + userId: vendorUserId, + vendorUserId, + }); + } + + /** + * Which of these apps this deployment still records a connection for ON ONE IDENTITY, in name + * order. Keyed on the identity because the whole question here is which identity's rows went: + * the retired one's, and never the account that is live now. + */ + const rowsFor = async (names: string[], vendorUserId: string) => + ( + await database + .select({ app: brokeredConnections.app }) + .from(brokeredConnections) + .where( + and( + inArray(brokeredConnections.app, names), + eq(brokeredConnections.vendorUserId, vendorUserId), + ), + ) + .orderBy(asc(brokeredConnections.app)) + ).map((row) => row.app); + + /** What the trail says ended, by app, with the payload a reader would be answered with. */ + const disconnectsFor = (names: string[]) => + database + .select({ + app: auditEvents.targetId, + payload: sql>`payload`, + }) + .from(auditEvents) + .where( + and( + eq(auditEvents.eventType, "mcp.account_disconnected"), + inArray(auditEvents.targetId, names), + ), + ) + .orderBy(asc(auditEvents.targetId)); + + test("refuses, withdraws the RETIRED identity's grant and leaves the CURRENT account alone", async () => { + await giveAttempt({ authId: MINTED, ageMinutes: 1 }); + await switchToShared(); + await giveCurrentAccountAConnection(); + + await expectRefusal( + await verify(ACTOR, "?flow_id=flow-abc"), + "context-changed", + ); + + // THE RETIRED IDENTITY, AND ONLY IT. A connection is keyed on the identity, and the retired one + // is not the current one, so this cannot reach the account that is live now. + expect(revokeCalls).toEqual([ + { + account: { holder: "person", userId: ACTOR, vendorUserId: ACTOR }, + toolkit: TOOLKIT, + }, + ]); + + // AND THE CURRENT ACCOUNT'S ROW IS STILL THERE, untouched and still the deployment's. + const { connections, events } = await written(); + expect(connections.length).toBe(1); + expect(connections[0]?.holder).toBe("deployment"); + expect(connections[0]?.vendorUserId).toBe(SHARED_IDENTITY); + expect(events.length).toBe(0); + + // THE CONSENT COMPLETED AND THIS DEPLOYMENT ENDED IT: neither a decline nor an unknown. + const row = await attemptRow(); + expect(row?.outcome).toBe("withdrawn"); + expect(row?.completedAt).not.toBeNull(); + expect(row?.authId).toBe(MINTED); + }); + + test("a revoke that answers false, which an unresolved auth provider does, is not a withdrawal", async () => { + await giveAttempt({ authId: MINTED, ageMinutes: 1 }); + await switchToShared(); + revokeAnswer = async () => false; + + await expectRefusal( + await verify(ACTOR, "?flow_id=flow-abc"), + "context-changed", + ); + + // `false` is "nothing found OR could not work out what to withdraw"; a possibly-live grant + // reads that as "we do not know". Scoped to this test: the row is keyed on ACTOR, which + // beforeEach clears, and TOOLKIT is unique per test. + const row = await attemptRow(); + expect(revokeCalls.length).toBe(1); + expect(row?.outcome).toBe("unreconciled"); + expect(row?.completedAt).not.toBeNull(); + expect(row?.authId).toBe(MINTED); + await expectNothingWritten(); + }); + + test("a withdrawal this deployment could not make keeps the attempt as unreconciled", async () => { + await giveAttempt({ authId: MINTED, ageMinutes: 1 }); + await switchToShared(); + revokeAnswer = async () => { + throw new Error("the vendor refused the revoke"); + }; + + await expectRefusal( + await verify(ACTOR, "?flow_id=flow-abc"), + "context-changed", + ); + + // A grant we know about and could not end is worth a row somebody can act on. + const row = await attemptRow(); + expect(row?.outcome).toBe("unreconciled"); + expect(row?.completedAt).not.toBeNull(); + expect(row?.authId).toBe(MINTED); + await expectNothingWritten(); + }); + + /* + * G3: THE ONE REVOKE ABOVE ENDS MORE THAN THE APP IT NAMES, AND THE ROWS HERE HAVE TO SAY SO. + * + * On Arcade a connection is keyed `(identity, auth provider)`, so withdrawing the retired + * identity's app ends every app of that identity sharing the provider. A sibling's row left + * standing is this deployment claiming a live connection for an app the vendor has already + * disconnected: the person sees it listed as connected and it fails on first use. + * + * The apps are named off this test's own suite-scoped toolkit, so the suite's `like` cleanup + * takes them and no other case can see them. + */ + const siblingApp = () => `${TOOLKIT}+calendar`; + const otherProviderApp = () => `${TOOLKIT}+slack`; + + test("the apps the same revoke ended lose their rows too, and the trail names what ended them", async () => { + await giveAttempt({ authId: MINTED, ageMinutes: 1 }); + await switchToShared(); + await giveCurrentAccountAConnection(); + // The retired identity holds the app this consent was for and two more: one on the SAME auth + // provider, which this revoke ends with it, and one on another, which it cannot reach. + await hold(TOOLKIT, ACTOR); + await hold(siblingApp(), ACTOR); + await hold(otherProviderApp(), ACTOR); + authProviderAnswer = async (toolkit) => + toolkit.endsWith("+slack") ? "slack" : "google"; + + await expectRefusal( + await verify(ACTOR, "?flow_id=flow-abc"), + "context-changed", + ); + + // STILL ONE ASK, AND STILL ONLY THE RETIRED IDENTITY'S: the siblings are what that ask ends, + // not more calls to make. + expect(revokeCalls).toEqual([ + { + account: { holder: "person", userId: ACTOR, vendorUserId: ACTOR }, + toolkit: TOOLKIT, + }, + ]); + + // The retired identity's two apps on the ended connection are gone from this deployment's + // records; the app on another provider is untouched. + expect( + await rowsFor([TOOLKIT, siblingApp(), otherProviderApp()], ACTOR), + ).toEqual([otherProviderApp()]); + + // AND THE CURRENT ACCOUNT'S ROW IS STILL THERE: a connection is keyed on the identity. + const { connections } = await written(); + expect(connections.length).toBe(1); + expect(connections[0]?.holder).toBe("deployment"); + expect(connections[0]?.vendorUserId).toBe(SHARED_IDENTITY); + + const trail = await disconnectsFor([ + TOOLKIT, + siblingApp(), + otherProviderApp(), + ]); + expect(trail.map((event) => event.app)).toEqual( + [TOOLKIT, siblingApp()].sort(), + ); + // The sibling's row names the app whose withdrawal ended it, and claims the vendor WAS asked: + // `vendorRevocationRequested: false` would say nobody asked about an account that is gone. + expect( + trail.find((event) => event.app === siblingApp())?.payload, + ).toMatchObject({ + reason: "context_changed", + endedWith: TOOLKIT, + unansweredSiblings: 0, + vendorRevocationRequested: true, + owner: ACTOR, + }); + // The asked app's own row names no other app beside it: it was ended by its own ask. + const asked = trail.find((event) => event.app === TOOLKIT)?.payload; + expect(asked).toMatchObject({ + reason: "context_changed", + vendorRevocationRequested: true, + owner: ACTOR, + }); + expect(asked).not.toHaveProperty("endedWith"); + + const row = await attemptRow(); + expect(row?.outcome).toBe("withdrawn"); + }); + + test("a revoke that answers false clears nothing and claims no collateral", async () => { + await giveAttempt({ authId: MINTED, ageMinutes: 1 }); + await switchToShared(); + await hold(TOOLKIT, ACTOR); + await hold(siblingApp(), ACTOR); + revokeAnswer = async () => false; + + await expectRefusal( + await verify(ACTOR, "?flow_id=flow-abc"), + "context-changed", + ); + + // "Nothing found, or we could not work out what to withdraw": no row may be cleared and no + // app claimed ended on the strength of an answer nobody got. + expect(await rowsFor([TOOLKIT, siblingApp()], ACTOR)).toEqual( + [TOOLKIT, siblingApp()].sort(), + ); + expect(await disconnectsFor([TOOLKIT, siblingApp()])).toEqual([]); + expect((await attemptRow())?.outcome).toBe("unreconciled"); + }); + + /* + * B6a: A REVOKE THAT THROWS IS AN OUTCOME NOBODY KNOWS, NOT AN ANSWER OF `false`. + * + * The seam deletes every connection it found and only then throws if any delete failed, so this + * throw arrives with part of the withdrawal already done at the vendor. The route used to read + * it as `false` in a bare `catch` and say nothing: the attempt went `unreconciled`, the rows here + * stood, and an operator had no way to learn that this deployment and the vendor may now + * disagree about whether the connection exists. + */ + test("a revoke that withdrew part and then threw clears nothing, and leaves an operator a line", async () => { + await giveAttempt({ authId: MINTED, ageMinutes: 1 }); + await switchToShared(); + await hold(TOOLKIT, ACTOR); + await hold(siblingApp(), ACTOR); + revokeAnswer = async () => { + throw new Error("Arcade revoke failed for 1 of 3 connections."); + }; + + const [response, said] = await heard(() => + verify(ACTOR, "?flow_id=flow-abc"), + ); + await expectRefusal(response, "context-changed"); + + // NOT READ AS A WITHDRAWAL: nothing cleared, nothing claimed on the trail, kept as unknown. + expect(await rowsFor([TOOLKIT, siblingApp()], ACTOR)).toEqual( + [TOOLKIT, siblingApp()].sort(), + ); + expect(await disconnectsFor([TOOLKIT, siblingApp()])).toEqual([]); + expect((await attemptRow())?.outcome).toBe("unreconciled"); + + // AND SAID OUT LOUD, with what an operator needs to find the disagreement and settle it. + const line = lines(said).find((text) => + text.includes("arcade-context-withdrawal-unknown"), + ); + expect(line).toBeDefined(); + expect(line).toContain(`"authorizationId":"${MINTED}"`); + // Quoted as the field, because the sibling's name carries TOOLKIT as its prefix. + expect(line).toContain(`"app":"${TOOLKIT}"`); + // CONTAINED RATHER THAN EQUAL: siblings are read off every row this identity holds, and earlier + // cases in this file leave theirs until `afterAll`. + expect( + (JSON.parse(line ?? "{}") as { siblings?: string[] }).siblings, + ).toContain(siblingApp()); + expect(line).toContain("Arcade revoke failed for 1 of 3 connections."); + }); + + test("a sibling set this deployment could not resolve stops the revoke rather than widening it", async () => { + await giveAttempt({ authId: MINTED, ageMinutes: 1 }); + await switchToShared(); + await hold(TOOLKIT, ACTOR); + await hold(siblingApp(), ACTOR); + authProviderAnswer = async () => { + throw new Error("the vendor would not say which provider holds this"); + }; + + await expectRefusal( + await verify(ACTOR, "?flow_id=flow-abc"), + "context-changed", + ); + + // Ending apps this deployment cannot then name is the failure this is about, so nothing is + // asked of the vendor at all and the grant is left as a row somebody can act on. + expect(revokeCalls).toEqual([]); + expect(await rowsFor([TOOLKIT, siblingApp()], ACTOR)).toEqual( + [TOOLKIT, siblingApp()].sort(), + ); + expect((await attemptRow())?.outcome).toBe("unreconciled"); + }); + + /** + * AND THE SAME OUTCOME REACHED BY THE OTHER ROAD SAYS SO TOO. + * + * `arcade-context-withdrawal-unknown` covers the revoke RAISING. This resolution sits one step in + * front of it and decides whether that revoke is attempted at all, so an unresolved sibling set + * closes the attempt `unreconciled` without the revoke ever running — the same row on the trail, + * reached differently, and for a while with no line against it. An operator saw `unreconciled` + * and nothing saying why. + */ + test("a sibling set that could not be resolved leaves an operator a line too", async () => { + await giveAttempt({ authId: MINTED, ageMinutes: 1 }); + await switchToShared(); + await hold(TOOLKIT, ACTOR); + authProviderAnswer = async () => { + throw new Error("the vendor would not say which provider holds this"); + }; + + const [response, said] = await heard(() => + verify(ACTOR, "?flow_id=flow-abc"), + ); + await expectRefusal(response, "context-changed"); + + expect(revokeCalls).toEqual([]); + expect((await attemptRow())?.outcome).toBe("unreconciled"); + + const line = lines(said).find((text) => + text.includes("arcade-sibling-resolution-unknown"), + ); + expect(line).toBeDefined(); + expect(line).toContain(`"authorizationId":"${MINTED}"`); + expect(line).toContain(`"app":"${TOOLKIT}"`); + expect(line).toContain( + "the vendor would not say which provider holds this", + ); + }); +}); + +/** + * D4: AN ATTEMPT THAT CANNOT SAY WHOSE ACCOUNT IT IS FOR IS REFUSED, NEVER READ AS THE + * DEPLOYMENT'S. + * + * The holder distinction IS the authorization model: a `person` attempt belongs to one signed-in + * human and a `deployment` attempt to the installation. The route used to rebuild the attempt's + * account with a ternary whose else-branch swallowed every pair it did not recognise — so a + * `person` row carrying no user id came out as `{ holder: "deployment" }` and the D28 withdrawal + * was then AIMED AT THE DEPLOYMENT'S ACCOUNT. A revoke pointed one holder out is a disconnect + * somebody asked for that ends the installation's connection, or the installation's connection + * ended on one person's behalf; from the browser both look exactly like success. + * + * EVERY PAIR HERE IS ONE THE DATABASE ALREADY REFUSES — `pending_authorizations_holder_check` is + * asserted directly in `arcade-attempt-constraints.test.ts` — so these rows reach the route only + * because the store is replaced. That is deliberate and it is the whole argument: the state is + * unreachable through the table, and an unreachable state must therefore be a REFUSAL in the code + * rather than a silent re-reading, because a re-reading is what a corrupt or hand-edited row, a + * future second writer, or a store that is not this one would turn into a wrong act with no trace. + * + * The app is switched to Shared in each case so the run would reach the withdrawal: these tests + * assert the vendor was never asked at all, which is strictly stronger than asserting it was asked + * correctly. + */ +describe("an attempt whose holder and user id do not agree", () => { + async function switchToShared() { + await database + .update(mcpServers) + .set({ accountMode: "shared", sharedVendorUserId: SHARED_IDENTITY }) + .where(eq(mcpServers.id, APP)); + } + + /** The pairs `(holder = 'person' AND user_id IS NOT NULL) OR (deployment AND user_id IS NULL)` excludes. */ + const illegal: [string, { holder?: string; userId?: string | null }][] = [ + ["a person attempt with no user id", { holder: "person", userId: null }], + [ + "a person attempt whose user id is the empty string", + { holder: "person", userId: "" }, + ], + [ + "a deployment attempt carrying a user id", + { holder: "deployment", userId: ACTOR }, + ], + ["an attempt whose holder is not one of the two", { holder: "llama" }], + ]; + + for (const [name, attemptAs] of illegal) { + test(`${name} is refused, and nothing is revoked`, async () => { + await giveAttempt({ authId: MINTED, ageMinutes: 1 }); + await switchToShared(); + + const response = await verify(ACTOR, "?flow_id=flow-abc", { attemptAs }); + + /* + * THE WHOLE FINDING, AND IT IS ASSERTED FIRST ON PURPOSE. The refusal code below is the + * symptom; what the defect DID was aim a revocation, so a failure here has to name the + * account that was reached rather than a redirect that was wrong. No account was rebuilt, so + * no revocation was aimed anywhere — least of all at the deployment's. + */ + expect(revokeCalls).toEqual([]); + // Nor was a single vendor call spent on a row that can never complete. + expect(confirmCalls).toEqual([]); + expect(statusCalls).toEqual([]); + + await expectRefusal(response, "no-attempt"); + + // AND NOTHING WAS WRITTEN OR CLOSED: the row stands until its TTL, as it does for the other + // attempt that can never complete (a null `auth_id`). + const row = await attemptRow(); + expect(row?.outcome).toBeNull(); + expect(row?.completedAt).toBeNull(); + await expectNothingWritten(); + }); + } +}); + +describe("a return leg that completes", () => { + test("lands on the app's own page, built from the ATTEMPT ROW", async () => { + await giveAttempt({ authId: MINTED, ageMinutes: 1 }); + + const response = await verify(ACTOR, "?flow_id=flow-abc"); + expect(response.status).toBe(303); + /* + * FROM THE ATTEMPT ROW'S `server_id`, NEVER FROM A `next_uri`: the vendor refuses every value + * at mint, and what `confirm_user` answers is the vendor's own success page rather than ours. + * No notice parameter either — the row it comes back to now reads Connected, which is the same + * news told by the thing it is news about. + */ + expect(response.headers.get("location")).toBe(LANDING); + expect(response.headers.get("location")).not.toContain("authorized="); + + const { connections, events } = await written(); + expect(connections.length).toBe(1); + expect(connections[0]?.userId).toBe(ACTOR); + expect(connections[0]?.verified).toBe(true); + expect(events.length).toBe(1); + // The action the attempt was for and the scopes the vendor granted, which is ALL of the + // vendor's answer that is written anywhere. + expect(events[0]?.payload).toMatchObject({ + action: ACTION, + scope: "gmail.read", + // THE BROKER'S ANSWER, NOT THE TOOLKIT NAME. The stub answers a provider that is deliberately + // nothing like `Gmail-…`, so a route deriving one from the other fails here. + authProvider: "google", + }); + + const row = await attemptRow(); + expect(row?.outcome).toBe("completed"); + expect(row?.completedAt).not.toBeNull(); + }); + + /** + * A DEPLOYMENT-HELD ACCOUNT LANDS ON THE SAME SCREEN, which is the branch that had no test and + * so shipped pointing at `/admin/plugins/:key` — a route with no `validateSearch` for `action`, + * no landing notice and no grant list. The whole Shared-app flow, the one case whose Authorize + * is admin-only, finished a consent at the vendor and came back to a page that said nothing + * about it. The destination is asserted CHARACTER FOR CHARACTER against the settings landing, + * including the single `?`, because that is the only address any screen reads `?action=` off. + */ + test("a consent the DEPLOYMENT holds lands on the same settings page, not on admin", async () => { + await database + .update(mcpServers) + .set({ accountMode: "shared", sharedVendorUserId: SHARED_IDENTITY }) + .where(eq(mcpServers.id, APP)); + await database.insert(pendingAuthorizations).values({ + actorId: ACTOR, + serverId: APP, + action: ACTION, + holder: "deployment", + userId: null, + vendorUserId: SHARED_IDENTITY, + authId: MINTED, + createdAt: new Date(Math.floor(Date.now() / 1000) * 1000), + }); + statusAnswer = async () => ({ + status: "completed", + userId: SHARED_IDENTITY, + scopes: ["gmail.read"], + }); + + const response = await verify(ACTOR, "?flow_id=flow-abc", { + roles: ["admin"], + }); + expect(response.status).toBe(303); + expect(response.headers.get("location")).toBe(LANDING); + expect(response.headers.get("location")).not.toContain("/admin/"); + // One query parameter, so the appended `?action=` cannot have met a path that already had one. + expect(response.headers.get("location")?.split("?").length).toBe(2); + + // AND IT IS THE DEPLOYMENT'S GRANT THAT WAS WRITTEN, so this is the holder whose landing is + // being asserted and not a personal one dressed up as it. + const { connections } = await written(); + expect(connections.length).toBe(1); + expect(connections[0]?.holder).toBe("deployment"); + expect(connections[0]?.userId).toBeNull(); + expect(connections[0]?.vendorUserId).toBe(SHARED_IDENTITY); + + const row = await attemptRow(); + expect(row?.outcome).toBe("completed"); + }); + + /** + * A VENDOR THAT DOES NOT SAY WHICH AUTH PROVIDER IT IS records that it did not say, and the + * consent still completes: the grant is already live at the vendor, and an audit label is not + * worth refusing it over. Guessing the toolkit name here is the thing the seam forbids. + */ + test("an auth provider the vendor will not name is recorded as unnamed, and still completes", async () => { + await giveAttempt({ authId: MINTED, ageMinutes: 1 }); + authProviderAnswer = async () => null; + + const response = await verify(ACTOR, "?flow_id=flow-abc"); + expect(response.headers.get("location")).toBe(LANDING); + + const { connections, events } = await written(); + expect(connections.length).toBe(1); + expect(events[0]?.payload).toMatchObject({ authProvider: "" }); + }); + + /** + * AND ONE THAT THROWS BEFORE IT EVEN ANSWERS IS THE SAME ANSWER. The route reads the provider as + * `withVendorDeadline(...).catch(() => null)`, and a synchronous throw used to leave the helper + * before its promise existed — so the `.catch` was never reached, the throw took the whole + * completion down with it, and the deadline's timer was left armed behind it. An audit label is + * no more worth refusing a live consent over when the vendor fails fast than when it fails slow. + */ + test("an auth provider lookup that throws synchronously is recorded as unnamed, and still completes", async () => { + await giveAttempt({ authId: MINTED, ageMinutes: 1 }); + authProviderAnswer = () => { + throw new Error("refused before it asked"); + }; + + const response = await verify(ACTOR, "?flow_id=flow-abc"); + expect(response.headers.get("location")).toBe(LANDING); + + const { connections, events } = await written(); + expect(connections.length).toBe(1); + expect(events.length).toBe(1); + expect(events[0]?.payload).toMatchObject({ authProvider: "" }); + expect((await attemptRow())?.outcome).toBe("completed"); + }); + + /** + * TWO CALLBACKS AT ONCE, with `Promise.all` and never a sequential replay: a replay proves only + * that the row was already consumed, while the race is what the conditional UPDATE exists for. + * The loser answers exactly as the winner does, so a duplicate is a no-op rather than an error + * somebody has to explain. + */ + test("two CONCURRENT callbacks write exactly one connection and one audit event", async () => { + await giveAttempt({ authId: MINTED, ageMinutes: 1 }); + + const [first, second] = await Promise.all([ + verify(ACTOR, "?flow_id=flow-abc"), + verify(ACTOR, "?flow_id=flow-abc"), + ]); + + expect(first.status).toBe(303); + expect(second.status).toBe(303); + expect(first.headers.get("location")).toBe(LANDING); + expect(second.headers.get("location")).toBe(LANDING); + + const { connections, events } = await written(); + expect({ connections: connections.length, events: events.length }).toEqual({ + connections: 1, + events: 1, + }); + }); + + /** + * A FAILURE BETWEEN THE CONNECTION WRITE AND THE AUDIT WRITE PERSISTS NEITHER. + * + * Injected at the DATABASE HANDLE rather than at the store's `auditStore` option, because the + * audit write that has to be atomic with the connection write is the one bound to the + * transaction — the same reason `arcade-completion-transaction.integration.test.ts` gives. And it + * is driven through the route, so the route's own promise — no exit without a `Location` — is + * held to on the path where its own store throws. + */ + test("a failure between the two writes persists NEITHER, and still answers a Location", async () => { + await giveAttempt({ authId: MINTED, ageMinutes: 1 }); + + const brokenAuditDatabase = new Proxy(database, { + get(target, property, receiver) { + if (property !== "transaction") { + const value = Reflect.get(target, property, receiver); + return typeof value === "function" ? value.bind(target) : value; + } + return (work: (tx: unknown) => Promise) => + target.transaction((transaction) => + work( + new Proxy(transaction, { + get(txTarget, txProperty, txReceiver) { + if (txProperty === "insert") { + return (table: unknown) => { + if (table === auditEvents) + throw new Error("injected audit failure"); + return txTarget.insert(table as never); + }; + } + const value = Reflect.get(txTarget, txProperty, txReceiver); + return typeof value === "function" + ? value.bind(txTarget) + : value; + }, + }), + ), + ); + }, + }) as typeof database; + + await expectRefusal( + await verify(ACTOR, "?flow_id=flow-abc", { + database: brokenAuditDatabase, + }), + "not-recorded", + ); + + // BOTH TABLES, because "it answered" is not evidence that nothing was written. + await expectNothingWritten(); + + // And the attempt is still claimable, because its UPDATE was in the same transaction. + const row = await attemptRow(); + expect(row?.completedAt).toBeNull(); + expect(row?.outcome).toBeNull(); + }); + + /** + * SPEC D31. The vendor's own status reply carries a LIVE PROVIDER ACCESS TOKEN and the person's + * full profile beside the three fields the seam narrows it to. A status response LOOKS LIKE + * METADATA, which is how the throwaway harness that proved this flow came to write the token to a + * file on its first run. So this case hands the route a reply carrying one and requires that it + * reaches no log line, no audit payload, no connection row and no `Location`. + */ + test("nothing the status answered reaches a log line or an audit row", async () => { + await giveAttempt({ authId: MINTED, ageMinutes: 1 }); + statusAnswer = async () => + ({ + status: "completed", + userId: ACTOR, + scopes: ["gmail.read"], + token: TOKEN, + context: { token: TOKEN }, + user_info: { email: EMAIL }, + }) as never; + + /** + * THE ARGUMENTS THEMSELVES, not a rendering of them: a token logged inside an object is the + * case this test constructs, and it is the case any flattening would hide. See `harvest`. + */ + const said: unknown[][] = []; + const before = globalThis.console; + const hear = (...args: unknown[]) => said.push(args); + globalThis.console = { + ...before, + log: hear, + info: hear, + warn: hear, + error: hear, + debug: hear, + } as typeof console; + let response: Response; + try { + response = await verify(ACTOR, "?flow_id=flow-abc"); + } finally { + globalThis.console = before; + } + + expect(response.status).toBe(303); + expect(mentionsOf(said, TOKEN)).toEqual([]); + expect(mentionsOf(said, EMAIL)).toEqual([]); + + // THE WHOLE ANSWER, because a credential that misses `Location` can still ride another header + // or the body the browser is handed on the way to it. + const delivered = await asDelivered(response); + expect(mentionsOf(delivered, TOKEN)).toEqual([]); + expect(mentionsOf(delivered, EMAIL)).toEqual([]); + + const { connections, events } = await written(); + expect(mentionsOf(events, TOKEN)).toEqual([]); + expect(mentionsOf(events, EMAIL)).toEqual([]); + expect(mentionsOf(connections, TOKEN)).toEqual([]); + expect(mentionsOf(connections, EMAIL)).toEqual([]); + }); +}); + +/** + * THE THROW A COMPLETION REALLY FAILS WITH, SHAPED AS DRIZZLE SHAPES IT. + * + * Not a bare `new Error("boom")`, because the thing the log line has to be careful about is exactly + * what a bare error does not carry. drizzle wraps a failed statement as an error whose OWN message + * is `Failed query: ` plus `params: `, with the driver's + * complaint on `cause` — and the values bound by this particular statement are the granted scopes + * and the account. This one carries the suite's live access token and the person's address in the + * same places, so a log line that quoted `.message` would print both, and `reasonWithoutStatement` + * is the only reason it does not. + */ +function completionFailure(): Error { + return Object.assign( + new Error( + `Failed query: insert into "brokered_connections" ... params: ${TOKEN}, ${EMAIL}`, + ), + { + query: 'insert into "brokered_connections" ...', + params: [TOKEN, EMAIL], + cause: new Error("canceling statement due to statement timeout"), + }, + ); +} + +/** + * Everything the deployment said while the request ran, AS THE ARGUMENTS THEMSELVES. + * + * Not `args.map(String).join(" ")`, for the reason `harvest` gives at length: a value logged inside + * an object flattens to `[object Object]`, which is the shape a leak hides in. + */ +async function heard(work: () => T | Promise): Promise<[T, unknown[][]]> { + const said: unknown[][] = []; + const before = globalThis.console; + const hear = (...args: unknown[]) => said.push(args); + globalThis.console = { + ...before, + log: hear, + info: hear, + warn: hear, + error: hear, + debug: hear, + } as typeof console; + try { + return [await work(), said]; + } finally { + globalThis.console = before; + } +} + +/** Every line the run produced, as the JSON each one is written as. */ +const lines = (said: unknown[][]): string[] => + said.map((args) => args.map((arg) => String(arg)).join(" ")); + +/** + * A COMPLETION THAT COULD NOT REPORT ITSELF, WHICH IS TWO DIFFERENT FACTS AND WAS ONE ANSWER. + * + * This leg is the only one in this file where a grant can be LIVE AT THE VENDOR while this + * deployment holds nothing — the person consented at the vendor before anything here was asked. + * The handler's blanket `catch` answered `not-recorded` for every throw inside it and logged + * nothing at all, so the two halves of that were both wrong at once: a completion that HAD + * committed was reported to the person as not recorded, and a completion that had genuinely been + * lost left an operator no trace to act on. + */ +describe("a completion the deployment could not report", () => { + test("one that rolled back refuses as not-recorded AND leaves an operator a line", async () => { + await giveAttempt({ authId: MINTED, ageMinutes: 1 }); + + const [response, said] = await heard(() => + verify(ACTOR, "?flow_id=flow-abc", { completion: "rolls-back" }), + ); + + await expectRefusal(response, "not-recorded"); + // The sentence is true, and these two are what make it so. + await expectNothingWritten(); + const row = await attemptRow(); + expect(row?.completedAt).toBeNull(); + + /* + * AND IT WAS SAID OUT LOUD. The vendor's grant is live with nothing here recording it, and the + * `ar_…` is what lets an operator find that flow at the vendor and end it — the same thing + * `arcade-mint-not-recorded` carries at the other end of this lifecycle. + */ + const line = lines(said).find((text) => + text.includes("arcade-completion-not-recorded"), + ); + expect(line).toBeDefined(); + expect(line).toContain(MINTED); + expect(line).toContain(ACTION); + expect(line).toContain(APP); + // The driver's complaint, which is the useful half and names nothing anybody sent. + expect(line).toContain("canceling statement due to statement timeout"); + }); + + /** + * AND NOT ONE WORD OF THE VENDOR'S IN IT. The error this completion fails with carries the live + * access token and the person's address where drizzle puts them, which is the one shape this + * route's logging has to survive; the status reply behind it carries them too. + */ + test("the line it leaves carries no token, no address and no scope list", async () => { + await giveAttempt({ authId: MINTED, ageMinutes: 1 }); + statusAnswer = async () => + ({ + status: "completed", + userId: ACTOR, + scopes: ["gmail.read"], + token: TOKEN, + context: { token: TOKEN }, + user_info: { email: EMAIL }, + }) as never; + + const [response, said] = await heard(() => + verify(ACTOR, "?flow_id=flow-abc", { completion: "rolls-back" }), + ); + + await expectRefusal(response, "not-recorded"); + expect( + lines(said).find((text) => + text.includes("arcade-completion-not-recorded"), + ), + ).toBeDefined(); + expect(mentionsOf(said, TOKEN)).toEqual([]); + expect(mentionsOf(said, EMAIL)).toEqual([]); + expect(mentionsOf(await asDelivered(response), TOKEN)).toEqual([]); + }); + + /** + * THE FALSE NEGATIVE, WHICH IS THE HALF THAT COSTS THE PERSON SOMETHING. + * + * The transaction committed and the call rejected anyway — a connection lost on the way back + * from a COMMIT the server had already applied. The grant is live at the vendor AND written down + * here. Told `not-recorded`, this person starts over and mints a second consent at the vendor + * against a connection they already hold; the route has to ask the row the completion serializes + * on instead of reading the throw as a verdict. + */ + test("one that committed and then threw lands the person, and never says not-recorded", async () => { + await giveAttempt({ authId: MINTED, ageMinutes: 1 }); + + const [response, said] = await heard(() => + verify(ACTOR, "?flow_id=flow-abc", { completion: "commits-then-throws" }), + ); + + expect(response.status).toBe(303); + expect(response.headers.get("location")).toBe(LANDING); + expect(response.headers.get("location")).not.toContain("authorized="); + + // Because it IS recorded, which is the whole of why the sentence above would have been a lie. + const { connections, events } = await written(); + expect({ connections: connections.length, events: events.length }).toEqual({ + connections: 1, + events: 1, + }); + const row = await attemptRow(); + expect(row?.outcome).toBe("completed"); + + // And an operator is told, because a write that cannot report itself is still worth knowing. + const line = lines(said).find((text) => + text.includes("arcade-completion-unacknowledged"), + ); + expect(line).toBeDefined(); + expect(line).toContain(MINTED); + expect(mentionsOf(said, TOKEN)).toEqual([]); + }); + + /** + * AND THE BLANKET `catch` SPEAKS TOO. It stands over the reads that happen before the completion, + * and it used to swallow every one of them in silence — a `Location` for the person and nothing + * whatever for whoever has to work out why this route started refusing everybody. Its line says + * which side of the completion it came from, because that is the one thing the person's refusal + * code cannot distinguish. + */ + test("a throw before the completion is logged as well as answered", async () => { + await giveAttempt({ authId: MINTED, ageMinutes: 1 }); + + const [response, said] = await heard(() => + verify(ACTOR, "?flow_id=flow-abc", { attemptReadThrows: true }), + ); + + await expectRefusal(response, "not-recorded"); + const line = lines(said).find((text) => + text.includes("arcade-verify-failed"), + ); + expect(line).toBeDefined(); + expect(line).toContain('"recorded":false'); + await expectNothingWritten(); + }); +}); + +/** + * THE COOKIE POLICY THIS ROUTE DEPENDS ON, AND NOTHING ELSE IN THE SUITE WOULD REPORT IT. + * + * `SameSite=Lax` is the one value that lets the session cookie travel on a top-level cross-site GET + * navigation, which is exactly the leg a person makes coming back from the broker's consent screen. + * `Strict` withholds it there and nowhere else: the verifier would find no session and send + * everybody to sign-in, every other route would keep working, and no other test would fail. So the + * policy is asserted through the deployment's OWN auth configuration — `getCookies` is what Better + * Auth itself uses to build the attributes, so an override added under `advanced` is read here the + * same way the browser would read it. + */ +test("the session cookie is SameSite=Lax, which is what lets it survive the return leg", () => { + const config = loadConfig(testEnvironment({ OPENBOT_APP_URL: APP_URL })); + const auth = createAuth(config, database); + expect(getCookies(auth.options).sessionToken.attributes.sameSite).toBe("lax"); +}); diff --git a/server/tests/assertion-shape.test.ts b/server/tests/assertion-shape.test.ts new file mode 100644 index 000000000..5c3caa97c --- /dev/null +++ b/server/tests/assertion-shape.test.ts @@ -0,0 +1,1150 @@ +// server/tests/assertion-shape.test.ts +/** + * ASSERTIONS THAT CANNOT FAIL ON THEIR OWN SUBJECT, read off the source rather than run. + * + * Two review rounds turned up some two dozen assertions that pass whatever the code under test + * does. Nothing in this repo could have caught them: `server/tests` is outside `tsc`, the lint set + * carries no floating-assertion rule, and the red-green protocol proves that ONE assertion can + * fail, never its siblings. So a test can be green because it asserts nothing, and stay green + * forever, and no gate in the repo has an opinion about it. + * + * Six of those families have a SYNTACTIC shape — visible in the text, with nothing executed: + * + * (a) a `.rejects` / `.resolves` neither awaited nor returned. The matcher runs on a promise + * nobody waits for; the test ends first and the rejection lands in no assertion. + * (b) a `?.` in an `expect(…)` subject under a matcher that `undefined` satisfies + * (`toBeUndefined`, `toBeFalsy`, `not.toBeDefined`, `toBe(undefined)`). If the subject is + * null the chain short-circuits to exactly the value being asserted, so the assertion holds + * whether or not the subject ever existed. + * (c) a `toEqual` whose EXPECTED literal holds an `undefined` value. Measured on bun 1.4.2: + * `expect({}).toEqual({ a: undefined })` passes — an expected-`undefined` key asserts + * nothing, so those keys are decoration. + * (d) a test every one of whose assertions is lexically inside an `if`, with no `throw` outside + * the branches. When no branch is taken the test asserts nothing and still passes. + * (e) a module-level `const`/`let` written by a stub and never read anywhere — a value recorded + * so carefully that nothing ever looks at it. + * (f) `JSON.stringify(x, Object.keys(x))`. The replacer array applies at EVERY depth, and a + * plain `Error` has no own enumerable keys, so the whole thing is `"{}"` and any + * `.not.toContain(secret)` over it passes on an empty string. + * + * WHY (b) IS THE STRICT SUBSET. `expect(row?.x).not.toBeNull()` is the same family — it passes + * when `row` is undefined — and the repo holds about 130 of them. This guard takes only the + * sites where the short-circuit value IS the asserted value, which is the form that can never + * fail rather than the form that is merely weak. The wider family is noted for the audit, not + * policed here, because a guard whose allow-list is 130 lines long is a wall and not a guard. + * + * WHY IT LANDS WITH AN ALLOW-LIST. Fixing the offenders here would hide them from the fix cycle + * that owns them, and a guard that fails on arrival gets disabled rather than obeyed. So every + * offence this scan finds today is listed below with its finding id, and ONE ground covers every + * entry: it predates the guard and belongs to the fix cycle. The list is checked both ways — an + * unlisted offence fails, and so does a listed one the fix cycle has already cleared, so the list + * shrinks as the fixes land and cannot quietly rot. + * + * HOW IT READS THE SOURCE. Through `support/source-scan.ts`, the shared scanner, and not a sixth + * private copy of the enumerator: `sourceFiles` walks recursively, and `stripComments` blanks a + * comment WHERE IT STANDS, which is what lets this file work in byte offsets at all — every + * position in the stripped text is the position in the file, so a reported line is the line a + * reader is sent to. Matching is by offset rather than by line because these shapes are longer + * than lines: a `toEqual` literal or an `if` block runs past any join limit. `logicalLines` + * supplies the quoted expression in the message, where a wrapped expression should read as one. + * + * The positive controls below plant each shape in a fixture tree on disk and run the WHOLE scan + * over it — walk, strip, match — rather than handing a string to a matcher. A control that only + * feeds the matcher proves the matcher; the enumerator is where the other guards in this repo + * went blind. + */ +import { afterAll, beforeAll, expect, test } from "bun:test"; +import { + mkdirSync, + mkdtempSync, + readFileSync, + rmSync, + writeFileSync, +} from "node:fs"; +import { tmpdir } from "node:os"; +import { join } from "node:path"; +import { + logicalLines, + sourceFiles, + stripComments, +} from "./support/source-scan"; + +/** Which of the six shapes an offence is. */ +export type Shape = "a" | "b" | "c" | "d" | "e" | "f"; + +/** One offence: where it is, which shape, and the expression as the file reads it. */ +export type Offence = { + file: string; + line: number; + shape: Shape; + text: string; +}; + +function blankLiterals(text: string): string { + let out = ""; + let i = 0; + while (i < text.length) { + const c = text[i]; + if (c === '"' || c === "'" || c === "`") { + out += c; + let j = i + 1; + while (j < text.length) { + if (text[j] === "\\") { + out += " "; + j += 2; + continue; + } + if (text[j] === c) break; + if (c !== "`" && text[j] === "\n") break; + // A `${…}` hole is CODE, and a value read only there is still read. + if (c === "`" && text[j] === "$" && text[j + 1] === "{") { + let depth = 0; + const from = j; + for (; j < text.length; j++) { + if (text[j] === "{") depth++; + else if (text[j] === "}") { + depth--; + if (depth === 0) { + j++; + break; + } + } + } + out += text.slice(from, j); + continue; + } + out += text[j] === "\n" ? "\n" : " "; + j++; + } + if (j < text.length && text[j] === c) { + out += c; + j++; + } + i = j; + continue; + } + out += c; + i++; + } + return out; +} + +const OPEN: Record = { "(": ")", "[": "]", "{": "}" }; +function closerOf(code: string, open: number): number { + const stack: string[] = []; + for (let i = open; i < code.length; i++) { + const c = code[i]; + if (OPEN[c]) stack.push(OPEN[c]); + else if (c === ")" || c === "]" || c === "}") { + if (stack.pop() !== c) return -1; + if (stack.length === 0) return i; + } + } + return -1; +} + +function lineOf(code: string, index: number): number { + let n = 1; + for (let i = 0; i < index && i < code.length; i++) if (code[i] === "\n") n++; + return n; +} + +function statementStart(code: string, index: number): number { + let depth = 0; + for (let i = index - 1; i >= 0; i--) { + const c = code[i]; + if (c === ")" || c === "]") depth++; + else if (c === "(" || c === "[") { + if (depth > 0) depth--; + } else if (depth === 0 && (c === ";" || c === "{" || c === "}")) + return i + 1; + } + return 0; +} + +function statementEnd(code: string, index: number): number { + let depth = 0; + for (let i = index; i < code.length; i++) { + const c = code[i]; + if (c === "(" || c === "[" || c === "{") depth++; + else if (c === ")" || c === "]" || c === "}") { + if (depth > 0) depth--; + else return i; + } else if (depth === 0 && c === ";") return i; + } + return code.length; +} + +function topLevelArgs(inner: string): string[] { + const args: string[] = []; + let depth = 0; + let start = 0; + for (let i = 0; i < inner.length; i++) { + const c = inner[i]; + if (OPEN[c]) depth++; + else if (c === ")" || c === "]" || c === "}") depth--; + else if (c === "," && depth === 0) { + args.push(inner.slice(start, i)); + start = i + 1; + } + } + args.push(inner.slice(start)); + return args.map((a) => a.trim()); +} + +const MUTATORS = [ + "push", + "pop", + "shift", + "unshift", + "splice", + "add", + "set", + "delete", + "clear", + "fill", + "sort", +]; + +/** Matchers that `undefined` satisfies. */ +const UNDEFINED_PASSES = /^(?:toBeUndefined|toBeFalsy|toBeNil|toBeNullish)$/; + +type Range = { start: number; end: number }; + +export function offencesIn(file: string, source: string): Offence[] { + const stripped = stripComments(source); + const code = blankLiterals(stripped); + const found: Offence[] = []; + // The logical line an offence sits in, for the message: a wrapped expression reads as one. + const joined = logicalLines(stripped); + const quote = (line: number) => { + let best = ""; + for (const l of joined) { + if (l.line > line) break; + best = l.text; + } + return best.trim().replace(/\s+/g, " ").slice(0, 110); + }; + const at = (index: number, shape: Shape) => { + const line = lineOf(code, index); + found.push({ file, line, shape, text: quote(line) }); + }; + + const expects: { index: number; open: number; close: number }[] = []; + for (const m of code.matchAll(/\bexpect\s*\(/g)) { + const index = m.index as number; + const open = index + m[0].length - 1; + const close = closerOf(code, open); + if (close > 0) expects.push({ index, open, close }); + } + + // (a) a floating .rejects / .resolves + for (const m of code.matchAll(/\.(?:rejects|resolves)\b/g)) { + const i = m.index as number; + const start = statementStart(code, i); + const head = code.slice(start, i); + const own = head.lastIndexOf("expect"); + if (own < 0) continue; + const prefix = head.slice(0, own); + if (/\b(?:await|return|yield)\b/.test(prefix)) continue; + if (/=>\s*$/.test(prefix)) continue; + at(start + (head.length - head.trimStart().length), "a"); + } + + // (b) `?.` in the subject, under a matcher `undefined` satisfies + for (const e of expects) { + if (!code.slice(e.open + 1, e.close).includes("?.")) continue; + const chain = /^((?:\s*\.\s*[A-Za-z_$][\w$]*)+)\s*\(/.exec( + code.slice(e.close + 1), + ); + if (!chain) continue; + const parts = chain[1] + .split(".") + .map((p) => p.trim()) + .filter(Boolean); + if (parts.includes("rejects") || parts.includes("resolves")) continue; + const matcher = parts[parts.length - 1]; + const negated = parts.includes("not"); + const argOpen = e.close + 1 + chain[0].length - 1; + const argClose = closerOf(code, argOpen); + const arg = argClose > 0 ? code.slice(argOpen + 1, argClose).trim() : ""; + const undefinedIsThePass = negated + ? matcher === "toBeDefined" + : UNDEFINED_PASSES.test(matcher) || arg === "undefined"; + if (undefinedIsThePass) at(e.index, "b"); + } + + // (c) toEqual over an expected literal holding `undefined` + for (const m of code.matchAll(/\btoEqual\s*\(/g)) { + const open = (m.index as number) + m[0].length - 1; + const close = closerOf(code, open); + if (close < 0) continue; + if (/:\s*undefined\s*[,}]/.test(code.slice(open + 1, close))) + at(m.index as number, "c"); + } + + // guarded regions: the statement an `if` controls + const guards: Range[] = []; + for (const m of code.matchAll(/(? e.index > open && e.index < close); + if (inside.length === 0) continue; + const unguarded = (i: number) => + !guards.some((g) => g.start > open && i > g.start && i < g.end); + // An explicit `throw` outside every branch is a failure path of its own. + const throws = [...code.matchAll(/(? + (t.index as number) > open && + (t.index as number) < close && + unguarded(t.index as number), + ); + if (throws) continue; + if ( + inside.every((e) => + guards.some( + (g) => g.start > open && e.index > g.start && e.index < g.end, + ), + ) + ) + at(m.index as number, "d"); + } + + // (e) a module-level recorder nothing asserts. + // + // "Never read by an expect" is widened to "never read at all", which is the same set and one a + // reader can check: a value read somewhere else is at least wired to something, and the shape + // this looks for is the stub that records into a variable no line of the file ever opens. + for (const m of code.matchAll( + /^(?:const|let)\s+([A-Za-z_$][\w$]*)\s*(?::[^=;]*)?=\s*(?:\[\s*\]|\{\s*\}|false|true|0|null|""|'')\s*;/gm, + )) { + const name = m[1]; + const decl = m.index as number; + let writes = 0; + let reads = 0; + for (const u of code.matchAll(new RegExp(`\\b${name}\\b`, "g"))) { + const i = u.index as number; + if (i === decl + m[0].indexOf(name)) continue; + const prev = code[i - 1] ?? " "; + if (/[\w$]/.test(prev)) continue; + // `.name` is somebody else's property; `...name` is a read of this one. + if (prev === "." && code[i - 2] !== ".") continue; + // Only a value nobody consumes is a write: `x.push(y);` is, `for (… of x.splice(0))` is not. + const before = code.slice(0, i).trimEnd(); + const statementPosition = before === "" || /[;{}]$/.test(before); + let j = i + name.length; + let mutator = false; + for (;;) { + const rest = code.slice(j); + const prop = /^\s*\.\s*([A-Za-z_$][\w$]*)/.exec(rest); + if (prop) { + mutator = MUTATORS.includes(prop[1]); + j += prop[0].length; + continue; + } + const idx = /^\s*\[[^\]]*\]/.exec(rest); + if (idx) { + mutator = false; + j += idx[0].length; + continue; + } + break; + } + const after = code.slice(j); + const assigned = /^\s*=[^=>]/.test(after); + const called = mutator && /^\s*\(/.test(after); + if (statementPosition && (assigned || called)) writes++; + else reads++; + } + if (writes > 0 && reads === 0) at(decl, "e"); + } + + // (f) JSON.stringify(x, Object.keys(x)) + for (const m of code.matchAll(/\bJSON\.stringify\s*\(/g)) { + const open = (m.index as number) + m[0].length - 1; + const close = closerOf(code, open); + if (close < 0) continue; + const args = topLevelArgs(code.slice(open + 1, close)); + if (args.length >= 2 && /^Object\.keys\s*\(/.test(args[1])) + at(m.index as number, "f"); + } + + return found.sort( + (x, y) => x.line - y.line || x.shape.localeCompare(y.shape), + ); +} + +const REPO = join(import.meta.dir, "..", ".."); +const ROOTS = ["server/tests", "app/tests"]; +const EXTENSIONS = [".ts", ".tsx"]; + +/** Every offence under `root`, with each file named relative to `from`. */ +export function scanTree(root: string, from = root): Offence[] { + const found: Offence[] = []; + for (const file of sourceFiles(root, EXTENSIONS)) { + const named = file.startsWith(`${from}/`) + ? file.slice(from.length + 1) + : file; + found.push(...offencesIn(named, readFileSync(file, "utf8"))); + } + return found; +} + +/** + * An offence this guard does NOT fail on. + * + * One ground covers every entry below and no other ground is accepted: the offence predates this + * guard, so it is fix-cycle work rather than a licence. `finding` names the review that found it, + * or marks it as one this scan turned up that the review rounds did not. `why` quotes the + * expression, so an entry can be read without opening the file. + */ +type Allowed = { + file: string; + line: number; + shape: Shape; + finding: string; + why: string; +}; + +const key = (o: { file: string; line: number; shape: Shape }) => + `${o.file}:${o.line}:${o.shape}`; + +/** + * THE STANDING OFFENDERS, as of the commit that added this file. + * + * Three further round-2 findings are NOT here, because they have no syntactic shape and this scan + * cannot see them — they stay with the fix cycle on the review's word alone: + * - `server/tests/composio-adapter.test.ts:8484` — a literal pinned two lines above its own + * assertion, which is a reading of the file rather than a shape in it. + * - `server/tests/arcade-live.test.ts:542` — `need(x ?? 0, …)` cannot throw, because the `??` + * supplies the value whose absence `need` exists to refuse. + * - `server/tests/server-side-tools.integration.test.ts:196-200` — an audit-event assertion + * scoped to no run, which is a question about the query and not about the syntax. + * And one round-2 finding is not reproduced: `plugin-user-credential.integration.test.ts:475` was + * reported as shape (a), but that test's `.rejects` (at :489-491) IS awaited. Its sibling at :361 + * is the real one and is listed below. + */ +const ALLOW: Allowed[] = [ + { + file: "app/tests/auth-client.test.ts", + line: 83, + shape: "a", + finding: "round 2 — auth-client.test.ts, six sites", + why: 'expect(signInWith("okta", refuse)).rejects.toThrow( "That provider is not configured.", );', + }, + { + file: "app/tests/auth-client.test.ts", + line: 97, + shape: "a", + finding: "round 2 — auth-client.test.ts, six sites", + why: 'test("names the provider when the client says nothing", async () => { const refuse = async () => ({ error: {} ', + }, + { + file: "app/tests/auth-client.test.ts", + line: 101, + shape: "a", + finding: "round 2 — auth-client.test.ts, six sites", + why: 'test("resolves quietly when the redirect is under way", async () => { expect( signInWith("google", async () =>', + }, + { + file: "app/tests/auth-client.test.ts", + line: 162, + shape: "a", + finding: "round 2 — auth-client.test.ts, six sites", + why: 'expect( signInWithEmailDomain("someone@company.com", refuse), ).rejects.toThrow("That domain is registered to ', + }, + { + file: "app/tests/auth-client.test.ts", + line: 170, + shape: "a", + finding: "round 2 — auth-client.test.ts, six sites", + why: 'test("says no provider is registered when the client says nothing", async () => { const refuse = async () => (', + }, + { + file: "app/tests/auth-client.test.ts", + line: 176, + shape: "a", + finding: "round 2 — auth-client.test.ts, six sites", + why: 'test("resolves quietly when the redirect is under way", async () => { expect( signInWithEmailDomain("someone@c', + }, + { + file: "server/tests/audit-initiator.integration.test.ts", + line: 291, + shape: "a", + finding: "NEW (round 2 did not find this)", + why: "expect(reattribute()).rejects.toThrow();", + }, + { + file: "server/tests/component-store.integration.test.ts", + line: 149, + shape: "a", + finding: "NEW (round 2 did not find this)", + why: 'test("withholding a component that does not exist is an error, not a silent row", async () => { expect( store.', + }, + { + file: "server/tests/component-store.integration.test.ts", + line: 372, + shape: "a", + finding: "NEW (round 2 did not find this)", + why: 'test("revoking from a component that does not exist is an error, not a silent no-op", async () => { expect(sto', + }, + { + file: "server/tests/component-store.integration.test.ts", + line: 404, + shape: "a", + finding: "NEW (round 2 did not find this)", + why: 'test("a function this build does not ship cannot be run", async () => { expect(store.callFunction(`nothing_${s', + }, + { + file: "server/tests/computer-client.test.ts", + line: 263, + shape: "a", + finding: "NEW (round 2 did not find this)", + why: 'test("is its own condition, not an unavailable computer", async () => { expect( timingOut().click({ ref: "e5",', + }, + { + file: "server/tests/computer-client.test.ts", + line: 305, + shape: "a", + finding: "NEW (round 2 did not find this)", + why: 'test("is a person holding the wheel when the computer says so", async () => { expect( refusing({ error: "A per', + }, + { + file: "server/tests/computer-client.test.ts", + line: 316, + shape: "a", + finding: "NEW (round 2 did not find this)", + why: 'test("is a stale snapshot when it does not", async () => { expect( refusing({ error: "Snapshot 3 is not the cu', + }, + { + file: "server/tests/computer-client.test.ts", + line: 334, + shape: "a", + finding: "NEW (round 2 did not find this)", + why: 'expect( refusing(body).click({ ref: "e1", snapshotId: 1 }), ).rejects.toBeInstanceOf(StaleSnapshotError);', + }, + { + file: "server/tests/computer-client.test.ts", + line: 342, + shape: "a", + finding: "NEW (round 2 did not find this)", + why: 'test("a 409 with no body at all is still a refusal, not a crash", async () => { const bodyless = clientWith(()', + }, + { + file: "server/tests/computer-supervisor.test.ts", + line: 64, + shape: "a", + finding: "NEW (round 2 did not find this)", + why: 'expect(client.locate("sales")).rejects.toThrow(SupervisorError);', + }, + { + file: "server/tests/computer-supervisor.test.ts", + line: 74, + shape: "a", + finding: "NEW (round 2 did not find this)", + why: 'expect(client.locate("bad id")).rejects.toThrow( "A bot id may contain only letters.", );', + }, + { + file: "server/tests/computer-supervisor.test.ts", + line: 88, + shape: "a", + finding: "NEW (round 2 did not find this)", + why: 'expect(client.locate("sales")).rejects.toThrow(/could not be reached/);', + }, + { + file: "server/tests/people-last-sign-in.integration.test.ts", + line: 127, + shape: "a", + finding: "NEW (round 2 did not find this)", + why: 'expect( stampSignIn(broken, "anybody", SIGNED_IN_AT), ).resolves.toBeUndefined();', + }, + { + file: "server/tests/plugin-user-credential.integration.test.ts", + line: 369, + shape: "a", + finding: "round 2 — plugin-user-credential.integration.test.ts:361", + why: 'describe("a person who has not connected", () => { test("is refused, and told to connect rather than told it b', + }, + { + file: "app/tests/bot-setup.test.tsx", + line: 178, + shape: "b", + finding: "NEW (round 2 did not find this)", + why: "expect(updates[0]?.endpoint).toBeUndefined();", + }, + { + file: "app/tests/voice-archive.test.ts", + line: 98, + shape: "b", + finding: "NEW (round 2 did not find this)", + why: "expect(records[0]?.saveState).toBeUndefined();", + }, + { + file: "app/tests/voice-archive.test.ts", + line: 149, + shape: "b", + finding: "NEW (round 2 did not find this)", + why: 'expect((await loadVoiceArchive("channel-1"))[0]?.saveState).toBeUndefined();', + }, + { + file: "server/tests/agent-endpoint.test.ts", + line: 483, + shape: "b", + finding: "NEW (round 2 did not find this)", + why: "expect(forwarded.forwardedProps?.openbotRun).toBeUndefined();", + }, + { + file: "server/tests/agent-escalation.test.ts", + line: 78, + shape: "b", + finding: "NEW (round 2 did not find this)", + why: "expect(written[0]?.initiator).toBe(undefined);", + }, + { + file: "server/tests/agent-handoff.test.ts", + line: 366, + shape: "b", + finding: "NEW (round 2 did not find this)", + why: "expect(plain.events[0]?.initiator).toBe(undefined);", + }, + { + file: "server/tests/approvals-interactive.integration.test.ts", + line: 229, + shape: "b", + finding: "NEW (round 2 did not find this)", + why: "expect(continued[0]?.error).toBeUndefined();", + }, + { + file: "server/tests/approvals-policy.test.ts", + line: 715, + shape: "b", + finding: "NEW (round 2 did not find this)", + why: "expect(continued[0]?.error).toBeUndefined();", + }, + { + file: "server/tests/arcade-adapter-errors.test.ts", + line: 63, + shape: "b", + finding: "round 2 — arcade-adapter-errors.test.ts:62-66", + why: 'test("a connection failure keeps status undefined", () => { expect( normalizeArcadeError(new APIConnectionErro', + }, + { + file: "server/tests/arcade-sibling-collateral.test.ts", + line: 417, + shape: "b", + finding: "NEW (round 2 did not find this)", + why: "expect(row(t.gmail)?.payload.endedWith).toBeUndefined();", + }, + { + file: "server/tests/arcade-sibling-collateral.test.ts", + line: 421, + shape: "b", + finding: "NEW (round 2 did not find this)", + why: "expect(row(t.slack)?.payload.endedWith).toBeUndefined();", + }, + { + file: "server/tests/audit-export.test.ts", + line: 181, + shape: "b", + finding: "NEW (round 2 did not find this)", + why: "expect(seen[0]?.cursor).toBeUndefined();", + }, + { + file: "server/tests/computer-gateway.test.ts", + line: 381, + shape: "b", + finding: "NEW (round 2 did not find this)", + why: "expect(rows[0]?.actorUserId).toBeUndefined();", + }, + { + file: "server/tests/computer-gateway.test.ts", + line: 443, + shape: "b", + finding: "NEW (round 2 did not find this)", + why: "expect(rows[0]?.payload.element).toBeUndefined();", + }, + { + file: "server/tests/computer-gateway.test.ts", + line: 646, + shape: "b", + finding: "NEW (round 2 did not find this)", + why: "expect(rows.at(-1)?.payload.element).toBeUndefined();", + }, + { + file: "server/tests/computer-provider.test.ts", + line: 356, + shape: "b", + finding: "NEW (round 2 did not find this)", + why: 'expect(await provider.sessionOf?.("sales")).toBeUndefined();', + }, + { + file: "server/tests/computer-provider.test.ts", + line: 365, + shape: "b", + finding: "NEW (round 2 did not find this)", + why: 'expect(await provider.sessionOf?.("sales")).toBeUndefined();', + }, + { + file: "server/tests/computer-sandbox.test.ts", + line: 78, + shape: "b", + finding: "NEW (round 2 did not find this)", + why: 'expect( await providerWith(suspended).sessionOf?.("knowledge"), ).toBeUndefined();', + }, + { + file: "server/tests/headless-components.integration.test.ts", + line: 349, + shape: "b", + finding: "NEW (round 2 did not find this)", + why: "expect(bar?.hidden).toBeUndefined();", + }, + { + file: "server/tests/headless-components.test.ts", + line: 197, + shape: "b", + finding: "NEW (round 2 did not find this)", + why: "expect(bar?.hidden).toBeUndefined();", + }, + { + file: "server/tests/identity-retire.integration.test.ts", + line: 124, + shape: "b", + finding: "NEW (round 2 did not find this)", + why: "expect(audit.rows[0]?.actorUserId).toBeUndefined();", + }, + { + file: "server/tests/identity-retire.integration.test.ts", + line: 247, + shape: "b", + finding: "NEW (round 2 did not find this)", + why: "expect(audit.rows[0]?.actorUserId).toBeUndefined();", + }, + { + file: "server/tests/mcp-listing.test.ts", + line: 168, + shape: "b", + finding: "NEW (round 2 did not find this)", + why: "expect(fetch?.effect).toBeUndefined();", + }, + { + file: "server/tests/mcp-listing.test.ts", + line: 179, + shape: "b", + finding: "NEW (round 2 did not find this)", + why: "expect(search?.effect).toBeUndefined();", + }, + { + file: "server/tests/mcp-listing.test.ts", + line: 180, + shape: "b", + finding: "NEW (round 2 did not find this)", + why: "expect(search?.destructive).toBeUndefined();", + }, + { + file: "server/tests/picked-harness-auth.test.ts", + line: 290, + shape: "b", + finding: "NEW (round 2 did not find this)", + why: 'test("a plan\'s installed picked harness authenticates without advertising a bundled Bot", async () => { const ', + }, + { + file: "server/tests/picked-harness-auth.test.ts", + line: 355, + shape: "b", + finding: "NEW (round 2 did not find this)", + why: "expect(result.config.managedAgent?.endpoint).toBeUndefined();", + }, + { + file: "server/tests/plugin-catalogue.test.ts", + line: 210, + shape: "b", + finding: "NEW (round 2 did not find this)", + why: "expect(entry?.transport).toBeUndefined();", + }, + { + file: "server/tests/shared-computer-run.integration.test.ts", + line: 264, + shape: "b", + finding: "NEW (round 2 did not find this)", + why: 'expect((await snapshots.load("bot-1"))?.session).toBeUndefined();', + }, + { + file: "server/tests/tenant-package.test.ts", + line: 358, + shape: "b", + finding: "NEW (round 2 did not find this)", + why: "expect(tenantPackage.agents[1]?.avatarSeed).toBeUndefined();", + }, + { + file: "server/tests/tool-selection.integration.test.ts", + line: 834, + shape: "b", + finding: "NEW (round 2 did not find this)", + why: "expect(run?.forwardedProps?.openbotRun).toBeUndefined();", + }, + { + file: "app/tests/user-preferences.test.tsx", + line: 75, + shape: "c", + finding: "NEW (round 2 did not find this)", + why: 'test("loads preferences from the account and renders the saved emphasis", async () => { const { view } = setup', + }, + { + file: "server/tests/agent-handoff.test.ts", + line: 620, + shape: "c", + finding: "NEW (round 2 did not find this)", + why: ').toEqual([ { eventType: "agent.handoff_offered", reason: undefined }, { eventType: "agent.handoff_refused", r', + }, + { + file: "server/tests/agent-test-connection-headers.test.ts", + line: 12, + shape: "c", + finding: "NEW (round 2 did not find this)", + why: 'describe("parseConnectionHeaders", () => { test("absent headers stay absent", () => { expect(parseConnectionHe', + }, + { + file: "server/tests/arcade-adapter-errors.test.ts", + line: 55, + shape: "c", + finding: "round 2 — arcade-adapter-errors.test.ts:50-60", + why: ").toEqual({", + }, + { + file: "server/tests/composio-adapter.test.ts", + line: 5412, + shape: "c", + finding: "NEW (round 2 did not find this)", + why: 'expect( await actions.listActions("gmail", { limit: WHOLE_LISTING }), ).toEqual([ { slug: "GMAIL_FETCH_EMAILS"', + }, + { + file: "server/tests/composio-adapter.test.ts", + line: 5458, + shape: "c", + finding: "NEW (round 2 did not find this)", + why: 'expect( await actions.listActions("gmail", { limit: WHOLE_LISTING }), ).toEqual([ { slug: "GMAIL_FETCH_EMAILS"', + }, + { + file: "server/tests/computer-gateway.test.ts", + line: 808, + shape: "c", + finding: "NEW (round 2 did not find this)", + why: 'expect(result).toEqual({ isolation: "per-bot", computers: [ { botId: "bot-proxied",', + }, + { + file: "server/tests/demonstrations.test.ts", + line: 294, + shape: "c", + finding: "NEW (round 2 did not find this)", + why: 'expect(created).toEqual([ { ownerUserId: "owner", agentId: "bot", instruction: demonstrationRoutineInstruction', + }, + { + file: "server/tests/routine-runner.test.ts", + line: 169, + shape: "c", + finding: "NEW (round 2 did not find this)", + why: 'expect(recorded.finished).toEqual([ { runId: RUN_ID, status: "succeeded", error: undefined }, ]);', + }, + { + file: "server/tests/routine-runner.test.ts", + line: 272, + shape: "c", + finding: "NEW (round 2 did not find this)", + why: 'expect(recorded.finished).toEqual([ { runId: RUN_ID, status: "succeeded", error: undefined }, ]);', + }, + { + file: "app/tests/connected-accounts-authorized-notice.test.tsx", + line: 101, + shape: "d", + finding: "round 2 — connected-accounts-authorized-notice.test.tsx:101-113", + why: 'test.each([ "no-attempt", "toString", "constructor", "__proto__",', + }, + { + file: "app/tests/connected-account-grants.test.tsx", + line: 124, + shape: "e", + finding: "NEW (round 2 did not find this)", + why: "const siblingReads: string[] = [];", + }, + /* + * `server/tests/arcade-attempt-store.integration.test.ts:81` — `const actors: string[] = []`, + * written and never read — is GONE rather than renumbered. The list it collects is now read by + * the `removePeople` in that file's `afterAll`: `pending_authorizations.actor_id` keys to `users` + * and cascades, so the ids the suite invents are people it has to create and then take away, and + * the collection that was decorative is now what the cleanup runs on. + */ + { + file: "server/tests/arcade-disconnect-cascade.test.ts", + // Moved from 36 by round 2's A5 fix, which added three tests above it; the offence is the + // same one and is re-keyed rather than re-found. + line: 39, + shape: "e", + finding: "round 2 — arcade-disconnect-cascade.test.ts:36,60", + why: "const revoked: string[] = [];", + }, + { + file: "server/tests/arcade-grants-route.test.ts", + line: 139, + shape: "e", + finding: "NEW (round 2 did not find this)", + why: "const toolkits: string[] = [];", + }, + { + file: "server/tests/arcade-grants-route.test.ts", + line: 140, + shape: "e", + finding: "NEW (round 2 did not find this)", + why: "const viewers: string[] = [];", + }, + { + file: "server/tests/enterprise-controls.integration.test.ts", + line: 59, + shape: "e", + finding: "NEW (round 2 did not find this)", + why: "const stopped: string[] = []; — pushed to at :65, cleared at :718, read nowhere; the `.stopped` at :704 and :720 is the response's own field", + }, + { + file: "server/tests/arcade-vendor-error-engine.test.ts", + line: 175, + shape: "f", + finding: "round 2 — arcade-vendor-error-engine.test.ts:174", + why: 'expect( JSON.stringify(thrown, Object.keys(thrown as object)), ).not.toContain("SECRET-BEARER");', + }, +]; + +/** One offence per line, the way a reader wants to see it. */ +const report = ( + offences: { shape: Shape; file: string; line: number; text: string }[], +) => offences.map((o) => `(${o.shape}) ${o.file}:${o.line} ${o.text}`).sort(); + +/* THE GUARD ITSELF. */ + +for (const root of ROOTS) { + test(`${root} grows no assertion shape the fix cycle does not already own`, () => { + const allowed = new Set(ALLOW.map(key)); + const scanned = scanTree(join(REPO, root), REPO); + expect(report(scanned.filter((o) => !allowed.has(key(o))))).toEqual([]); + // And the walk reached the tree at all: a scan of nothing reports nothing. + expect(sourceFiles(join(REPO, root), EXTENSIONS).length).toBeGreaterThan( + 20, + ); + }); +} + +test("the allow-list holds no offence the fix cycle has already cleared", () => { + const found = new Set( + ROOTS.flatMap((root) => scanTree(join(REPO, root), REPO)).map(key), + ); + const stale = ALLOW.filter((entry) => !found.has(key(entry))); + // A fixed offence must leave the list with its fix, or the list stops meaning anything. + expect(stale.map((entry) => `${key(entry)} ${entry.finding}`)).toEqual([]); +}); + +/* POSITIVE CONTROLS. + * + * Each plants one shape in a file on disk, at a nesting and an extension the real trees have, and + * runs the WHOLE scan over the fixture root. A control that hands a string to the matcher proves + * the matcher; this one has to survive the walk and the stripper to be seen at all. */ + +let FIXTURES = ""; + +/** Write `text` at `rel` under the fixture root, creating the directories it needs. */ +function fixture(rel: string, text: string): void { + const full = join(FIXTURES, rel); + mkdirSync(join(full, ".."), { recursive: true }); + writeFileSync(full, text, "utf8"); +} + +/** The one offence of a shape in the fixture tree, or a failure naming what the scan did see. */ +function planted(shape: Shape): Offence { + const hits = scanTree(FIXTURES).filter((o) => o.shape === shape); + expect(report(hits)).toHaveLength(1); + return hits[0]; +} + +beforeAll(() => { + FIXTURES = mkdtempSync(join(tmpdir(), "assertion-shape-")); + + fixture( + "a/floating.ts", + `test("the refusal is refused", () => { + expect(refuse()).rejects.toThrow(Boom); +}); +`, + ); + + fixture( + "nested/deep/b/chain.ts", + `test("a connection failure keeps status undefined", () => { + expect(normalize(failure)?.status).toBeUndefined(); +}); +`, + ); + + fixture( + "c/equal.tsx", + `test("an error with no body leaves name undefined", () => { + expect(read()).toEqual({ + status: 500, + name: undefined, + }); +}); +`, + ); + + fixture( + "d/guarded.tsx", + `test("a sentence or nothing, never an object", () => { + const notice = noticeFor(value); + if (notice !== null) expect(typeof notice).toBe("string"); +}); +`, + ); + + fixture( + "e/recorder.ts", + `const revoked: string[] = []; + +const broker = { + revoke: async (toolkit: string) => { + revoked.push(toolkit); + return true; + }, +}; + +test("a retired identity's apps are all revoked", async () => { + await disconnect(broker); + expect(true).toBe(true); +}); +`, + ); + + fixture( + "deep/down/f/stringify.ts", + `test("nothing the vendor wrote survives the log", () => { + expect(JSON.stringify(thrown, Object.keys(thrown))).not.toContain("SECRET"); +}); +`, + ); + + // The same six, written the way the fix cycle will write them. + fixture( + "clean/fixed.ts", + `const seen: string[] = []; + +const broker = { + revoke: async (toolkit: string) => { + seen.push(toolkit); + return true; + }, +}; + +test("the refusal is refused", async () => { + await expect(refuse()).rejects.toThrow(Boom); +}); + +test("a connection failure keeps status undefined", () => { + const normalized = need(normalize(failure), "nothing normalized"); + expect(normalized.status).toBeUndefined(); +}); + +test("an error with no body leaves name undefined", () => { + expect(read()).toEqual({ status: 500 }); + expect(read()).not.toHaveProperty("name"); +}); + +test("a sentence or nothing, never an object", () => { + const notice = noticeFor(value); + expect(notice === null || typeof notice === "string").toBe(true); +}); + +test("a retired identity's apps are all revoked", async () => { + await disconnect(broker); + expect(seen).toEqual(["gmail"]); +}); + +test("nothing the vendor wrote survives the log", () => { + expect(JSON.stringify(thrown, ["message", "name"])).not.toContain("SECRET"); +}); +`, + ); +}); + +afterAll(() => { + if (FIXTURES) rmSync(FIXTURES, { recursive: true, force: true }); +}); + +test("(a) a discarded .rejects is seen, two directories down and all", () => { + const offence = planted("a"); + expect(`${offence.file}:${offence.line}`).toBe("a/floating.ts:2"); + expect(offence.text).toContain("expect(refuse()).rejects.toThrow(Boom);"); +}); + +test("(b) a `?.` subject under a matcher undefined satisfies is seen", () => { + const offence = planted("b"); + expect(`${offence.file}:${offence.line}`).toBe("nested/deep/b/chain.ts:2"); + expect(offence.text).toContain( + "expect(normalize(failure)?.status).toBeUndefined()", + ); +}); + +test("(c) an expected-undefined key in a toEqual literal is seen", () => { + // Four physical lines, which is the reason this scan works in offsets and not in lines. + const offence = planted("c"); + expect(`${offence.file}:${offence.line}`).toBe("c/equal.tsx:2"); + expect(offence.text).toContain("name: undefi"); +}); + +test("(d) a test whose every assertion sits inside an `if` is seen", () => { + const offence = planted("d"); + expect(`${offence.file}:${offence.line}`).toBe("d/guarded.tsx:1"); + expect(offence.text).toContain("const notice = noticeFor(value);"); +}); + +test("(e) a recorder nothing ever reads is seen", () => { + const offence = planted("e"); + expect(`${offence.file}:${offence.line}`).toBe("e/recorder.ts:1"); + expect(offence.text).toContain("const revoked: string[] = [];"); +}); + +test("(f) JSON.stringify(x, Object.keys(x)) is seen", () => { + const offence = planted("f"); + expect(`${offence.file}:${offence.line}`).toBe("deep/down/f/stringify.ts:2"); + expect(offence.text).toContain("JSON.stringify(thrown, Object.keys(thrown))"); +}); + +/* NEGATIVE CONTROL. The same six written correctly, in a file the walk reaches, so a detector + * that fires on everything fails here rather than passing six tests and one audit. */ + +test("the fixed counterparts of all six are reported as nothing", () => { + expect( + report(scanTree(FIXTURES).filter((o) => o.file.startsWith("clean/"))), + ).toEqual([]); + // And the file was genuinely read, rather than missed by the walk. + expect( + sourceFiles(FIXTURES, EXTENSIONS).map((f) => f.slice(FIXTURES.length + 1)), + ).toContain("clean/fixed.ts"); +}); diff --git a/server/tests/bot-access.test.ts b/server/tests/bot-access.test.ts index af8ef8113..96304a59c 100644 --- a/server/tests/bot-access.test.ts +++ b/server/tests/bot-access.test.ts @@ -359,6 +359,7 @@ describe("calling a tool as a Bot", () => { function app(actorId: string) { const called: string[] = []; const store = { + brokerProvider: "composio" as const, callTool: async (input: { ref: string; botId: string }) => { called.push(`${input.ref}@${input.botId}`); return { ok: true }; diff --git a/server/tests/broker-authorization-pairing.test.ts b/server/tests/broker-authorization-pairing.test.ts new file mode 100644 index 000000000..697a7fb2b --- /dev/null +++ b/server/tests/broker-authorization-pairing.test.ts @@ -0,0 +1,254 @@ +import { describe, expect, test } from "bun:test"; +import { readdirSync, readFileSync } from "node:fs"; +import { join } from "node:path"; + +/** + * THE PAIRING INVARIANT, asserted over every `ConnectedAppBroker` literal in the tree. + * + * A broker with `authorizations === null` answers `authorizationId: null`; a broker with a + * non-null `authorizations` answers a non-null `authorizationId` on a successful mint. It is the + * one way spec D24's binding (the attempt's `ar_…` equals the callback's `auth_id`) rots without a + * type error: an adapter grows a flow surface and forgets the mint id. + * + * A literal is found by its `authorize` member — the one member every broker must have — and is + * confirmed a broker by a `grantIsLocal` or `authorizations` sibling at the same indent. This reads + * source text because the stubs are module-local and `server/tests` is outside `tsc`, so nothing + * else can see them all. + * + * EVERY HEURISTIC HERE FAILS LOUD, NEVER QUIET. A guard that decides for itself which code to look + * at is only as good as that decision, and a decision that silently drops the one adapter the + * invariant exists for reads exactly like a pass. So: the shape this scan cannot read throws + * instead of being skipped ({@link answersOf}), a broker-shaped literal with no `authorize` throws, + * and {@link coverage} asserts by name that the production adapters are among the literals this + * file actually checks rather than merely among the ones it found. + */ +const ROOT = join(import.meta.dir, ".."); +const SELF = "broker-authorization-pairing.test.ts"; +/** + * THE WHOLE OF `src` AND `tests`, RECURSIVELY. A hand-listed directory is the same silent miss as a + * hand-tuned heuristic: a broker literal written one directory over would simply not be asserted, + * and that reads as a pass. + */ +const sources = (dir: string): string[] => + readdirSync(dir, { withFileTypes: true }).flatMap((e) => + e.isDirectory() + ? sources(join(dir, e.name)) + : e.name.endsWith(".ts") && e.name !== SELF + ? [join(dir, e.name)] + : [], + ); +const files = [...sources(join(ROOT, "tests")), ...sources(join(ROOT, "src"))]; + +type Literal = { + where: string; + authorizations: "null" | "flow"; + /** The object literals this `authorize` can ANSWER WITH; see {@link answersOf}. */ + answers: string[]; +}; + +const indentOf = (l: string) => /^\s*/.exec(l)![0].length; + +/** + * A member line of an object literal: `name:`, `name(`, `async name(`, or the shorthand `name,`. + * The shorthand matters for the member AFTER `authorize`, which is where its body ends. + */ +const MEMBER = /^\s*(async\s+)?\w+\??\s*([(:]|,\s*$|$)/; + +/** The lines of the object literal whose members sit at `indent`, and which of them are members. */ +function blockAt(lines: string[], at: number, indent: number) { + let from = at; + while ( + from > 0 && + (lines[from - 1]!.trim() === "" || indentOf(lines[from - 1]!) >= indent) + ) + from--; + let to = at; + while ( + to < lines.length - 1 && + (lines[to + 1]!.trim() === "" || indentOf(lines[to + 1]!) >= indent) + ) + to++; + const block = lines.slice(from, to + 1); + const members = block + .map((l, i) => ({ l, i })) + .filter(({ l }) => indentOf(l) === indent && MEMBER.test(l)); + const named = (name: string) => + members.findIndex(({ l }) => + new RegExp(`^\\s*(async\\s+)?${name}\\s*([(:]|,\\s*$|$)`).test(l), + ); + return { from, block, members, named }; +} + +/** + * Comments are prose: `authorizationId` in a sentence is not an answer. The `//` strip refuses a + * `//` that follows a colon so that a `"https://…"` inside a returned literal survives — eating it + * would unbalance the braces this reads next. + */ +const stripComments = (s: string) => + s.replace(/\/\*[\s\S]*?\*\//g, " ").replace(/(^|[^:])\/\/[^\n]*/g, "$1"); + +/** + * The object literals an `authorize` body can ANSWER WITH: `return {…}` and the concise `=> ({…})`. + * Scoping to these is what keeps the seam's own `authorizationId: string | null` annotation, a + * local `const authorizationId`, or a sentence in a comment from reading as an answer — and what + * lets a shorthand `return { redirectUrl, authorizationId }` be read as the answer it is. + * + * `=> {` is a function body, not an answer; its `return`s are found by the `return` pass. + */ +function answersOf(body: string): string[] { + const src = stripComments(body); + const out: string[] = []; + for (const m of src.matchAll(/\breturn\b|=>\s*\(/g)) { + let i = m.index + m[0].length; + while (i < src.length && /[\s(]/.test(src[i]!)) i++; + if (src[i] !== "{") continue; + let depth = 0; + for (let j = i; j < src.length; j++) { + if (src[j] === "{") depth++; + else if (src[j] === "}" && --depth === 0) { + out.push(src.slice(i, j + 1)); + break; + } + } + } + return out; +} + +function literalsIn(file: string): Literal[] { + const lines = readFileSync(file, "utf8").split("\n"); + const out: Literal[] = []; + lines.forEach((line, at) => { + const m = /^(\s*)(async\s+)?authorize\s*[(:]/.exec(line); + if (!m) return; + const indent = m[1]!.length; + const { from, block, members, named } = blockAt(lines, at, indent); + const g = named("grantIsLocal"); + const a = named("authorizations"); + // An `authorize` with neither sibling is somebody else's member — a vendor client's own + // `authorize`, say — and not the seam this invariant is about. + if (g < 0 && a < 0) return; + // The seam's own interface declares these members too (`grantIsLocal: boolean;`). A declaration + // is not a broker: the pairing lives in the literals that implement it, and a `;`-terminated + // member is how a declaration gives itself away. + if ( + [g, a].some((i) => i >= 0 && /;\s*$/.test(block[members[i]!.i]!.trim())) + ) + return; + const z = named("authorize"); + // The one literal that omits `authorizations` is composio-grants-for's deliberate + // does-not-compile witness, which is then spread with `authorizations: null` — so an omission + // is read as the null it is completed with there. That reading is the strict one: it demands + // `authorizationId: null`, so a literal that omits the member AND mints an id fails loudly. + const aLine = a < 0 ? "authorizations: null" : block[members[a]!.i]!; + const end = z + 1 < members.length ? members[z + 1]!.i : block.length; + const body = block.slice(members[z]!.i, end).join("\n"); + const answers = answersOf(body); + // A SHAPE THIS CANNOT READ THROWS. `redirectUrl` in the body with no answer carrying it means + // the mint is assembled somewhere this scan does not look, and silently skipping it is how a + // guard comes to assert nothing. + if ( + /\bredirectUrl\b/.test(stripComments(body)) && + !answers.some((ans) => /\bredirectUrl\b/.test(ans)) + ) { + throw new Error( + `${file.slice(ROOT.length + 1)}:${from + members[z]!.i + 1}: this authorize names redirectUrl but answers with a shape this guard cannot read; teach answersOf() the shape rather than leaving the literal unchecked.`, + ); + } + out.push({ + where: `${file.slice(ROOT.length + 1)}:${from + members[z]!.i + 1}`, + authorizations: /authorizations:\s*null\b/.test(aLine) ? "null" : "flow", + answers, + }); + }); + return out; +} + +/** + * Every declared `grantIsLocal` on a broker-shaped literal must have landed in {@link literalsIn}'s + * net. This is the net's own guard: the scan anchors on `authorize`, so a broker literal that grew + * one without the other would otherwise go unexamined and read as a pass. + */ +function unreachedIn(file: string): string[] { + const lines = readFileSync(file, "utf8").split("\n"); + const out: string[] = []; + lines.forEach((line, at) => { + const m = /^(\s*)grantIsLocal\s*:\s*(true|false)\s*[,}]/.exec(line); + if (!m) return; + const { from, named } = blockAt(lines, at, m[1]!.length); + // `{ key, grantIsLocal: true }` in a deployment config is not a broker. + if (named("authorizations") < 0) return; + if (named("authorize") >= 0) return; + /* + * A `stubBroker({ … })` WITHOUT an `authorize` IS NOT UNEXAMINED, it is unable to mint. + * + * This net exists because `literalsIn` anchors on `authorize`, so a hand-written literal that + * declared the pair without one would slip past unchecked and read as a pass. The factory + * inverts that risk: a member it is not given does not quietly answer a plausible shape, it + * RECORDS THE CALL AND THROWS. So an omitted `authorize` here cannot mint an id, there is no + * pairing to check, and flagging it would demand the caller write out a member whose whole + * purpose is to be absent. + * + * The exemption is narrow on purpose: a `stubBroker` call that DOES provide `authorize` still + * carries that member on its own line, so `literalsIn` finds and examines it exactly as it + * does any other literal. Only the cannot-mint case is skipped. + */ + if (/\bstubBroker\s*\(/.test(lines[from - 1] ?? "")) return; + out.push(`${file.slice(ROOT.length + 1)}:${at + 1}`); + }); + return out; +} + +/** `none` is no `authorizationId` at all, which answers neither surface. */ +function idOf(answer: string): "none" | "null" | "value" { + const m = /\bauthorizationId\b\s*(?::\s*([^,}\n]+))?/.exec(answer); + if (!m) return "none"; + if (m[1] === undefined) return "value"; // the shorthand `{ …, authorizationId }` + return /^null\s*$/.test(m[1]) ? "null" : "value"; +} + +const literals = files.flatMap(literalsIn); +/** The literals actually asserted over: the ones whose `authorize` answers a url to visit. */ +const minting = literals + .map((l) => ({ + ...l, + answers: l.answers.filter((a) => /\bredirectUrl\b/.test(a)), + })) + .filter((l) => l.answers.length > 0); +const coverage = minting.map((l) => l.where); + +describe("authorizations and authorizationId are declared as a pair", () => { + test("the scan reaches every broker-shaped literal", () => { + expect(files.flatMap(unreachedIn)).toEqual([]); + }); + + test("the production adapters are among the literals CHECKED", () => { + // Not merely among the ones found: the Arcade adapter is the one production broker with a + // non-null `authorizations`, so if it is not here the flow half of this invariant is asserted + // for nothing but stubs. + expect( + coverage.some((p) => p.startsWith("src/plugins/arcade-adapter.ts")), + ).toBe(true); + expect( + coverage.some((p) => + p.startsWith("src/plugins/composio-client/consent.ts"), + ), + ).toBe(true); + // A floor that notices this scan collapsing, not a count to keep up to date; it sits just under + // what the tree holds today (28) rather than at a third of it. + expect(minting.length).toBeGreaterThanOrEqual(25); + // BOTH BRANCHES MUST BE INHABITED. An empty one is a branch asserted for nothing, which is the + // state this guard was in when its only non-null-`authorizations` literal was being skipped. + expect(minting.some((l) => l.authorizations === "null")).toBe(true); + expect(minting.some((l) => l.authorizations === "flow")).toBe(true); + }); + + for (const literal of minting) { + test(literal.where, () => { + const want = literal.authorizations === "null" ? "null" : "value"; + for (const answer of literal.answers) { + const said = answer.replace(/\s+/g, " "); + expect(`${idOf(answer)} in ${said}`).toBe(`${want} in ${said}`); + } + }); + } +}); diff --git a/server/tests/broker-return-url-voice.test.ts b/server/tests/broker-return-url-voice.test.ts new file mode 100644 index 000000000..c60fc808a --- /dev/null +++ b/server/tests/broker-return-url-voice.test.ts @@ -0,0 +1,114 @@ +import { describe, expect, test } from "bun:test"; +import { + BrokerReturnUrlError, + brokerReturnUrl, + brokerSentence, +} from "../src/plugins/broker"; + +/** + * Which provider a refused return address names, and who its remedy is written for. + * + * The sentences used to spell `Composio` as a literal, on a function that took no provider at all + * — so an Arcade deployment, which is the only kind that reaches the authorize route this refusal + * guards, told a person a failure involving a vendor it does not use. They also handed that person + * `OPENBOT_APP_URL`, which is an environment variable nobody but an operator can set. + * + * So these pin both halves, exactly as `broker-unconfigured-voice.test.ts` pins them for the + * unconfigured sentence: what reaches the person names no vendor and no setting (spec D11), and + * the operator's own sentence names the ACTIVE provider and the variable that fixes it. Neither + * quotes the address, which is the property the seam test already held and this must not loosen. + * + * ARITY IS A RUNTIME ASSERTION, NOT `@ts-expect-error`: `server/tests` is outside `tsc`, so an + * expect-error written here would assert nothing, and `Function.length` falls the moment the + * provider is made optional or defaulted back to Composio. + */ + +/** Every way a return address can be refused, with the address that provokes it. */ +const REFUSALS = [ + { kind: "never built", address: " " }, + { kind: "not a web address", address: "openbot.example.com/settings/x" }, +] as const; + +function refusalOf(address: string, provider: "composio" | "arcade") { + try { + brokerReturnUrl(address, provider); + } catch (error) { + if (error instanceof BrokerReturnUrlError) return error; + throw error; + } + throw new Error(`${address} was not refused`); +} + +describe("brokerReturnUrl, as a person reads it", () => { + for (const { kind, address } of REFUSALS) { + test(`an address ${kind} names no vendor and no setting`, () => { + for (const provider of ["composio", "arcade"] as const) { + const error = refusalOf(address, provider); + expect(error.message).not.toMatch(/composio|arcade/i); + expect(error.message).not.toMatch(/OPENBOT_APP_URL|API_KEY/); + // The route answers with this one, so it is the one that must be safe. + expect(brokerSentence(error)).toBe(error.message); + } + }); + + test(`an address ${kind} reads the same on either provider`, () => { + expect(refusalOf(address, "composio").message).toBe( + refusalOf(address, "arcade").message, + ); + }); + } + + test("the two mistakes stay two sentences", () => { + expect(refusalOf(" ", "arcade").message).not.toBe( + refusalOf("openbot.example.com/settings/x", "arcade").message, + ); + }); +}); + +describe("brokerReturnUrl, as an operator reads it", () => { + test("an Arcade deployment is told Arcade and never Composio", () => { + for (const { address } of REFUSALS) { + const { operatorMessage } = refusalOf(address, "arcade"); + expect(operatorMessage).toContain("Arcade"); + expect(operatorMessage).not.toMatch(/composio/i); + } + }); + + test("a Composio deployment is told Composio and never Arcade", () => { + for (const { address } of REFUSALS) { + const { operatorMessage } = refusalOf(address, "composio"); + expect(operatorMessage).toContain("Composio"); + expect(operatorMessage).not.toMatch(/arcade/i); + } + }); + + test("the remedy is named to the only reader who can apply it", () => { + for (const { address } of REFUSALS) { + expect(refusalOf(address, "arcade").operatorMessage).toContain( + "OPENBOT_APP_URL", + ); + } + }); + + test("neither sentence quotes the address it refused", () => { + const address = + "openbot-tenant-42.internal.corp/settings/connected-accounts/9f3c"; + const error = refusalOf(address, "arcade"); + + for (const sentence of [error.message, error.operatorMessage]) { + expect(sentence).not.toContain(address); + expect(sentence).not.toContain("openbot-tenant-42.internal.corp"); + expect(sentence).not.toContain("/settings/connected-accounts/9f3c"); + } + }); +}); + +describe("brokerReturnUrl's signature", () => { + test("cannot be called without a provider", () => { + expect(brokerReturnUrl.length).toBe(2); + expect(() => + // biome-ignore lint/suspicious/noExplicitAny: the omission is the point + (brokerReturnUrl as any)(" "), + ).toThrow(); + }); +}); diff --git a/server/tests/broker-stub-ratchet.test.ts b/server/tests/broker-stub-ratchet.test.ts new file mode 100644 index 000000000..3814450ff --- /dev/null +++ b/server/tests/broker-stub-ratchet.test.ts @@ -0,0 +1,262 @@ +// server/tests/broker-stub-ratchet.test.ts +/** + * Ratchet: no NEW test double gets past the broker or credential type by a cast, and no NEW + * `revokeAccount` stub silently succeeds. + * + * WHY THIS EXISTS. `typecheck:tests` (CL-4) type-checks `server/tests` and fails on any new error, + * but a cast is not an error. `{ … } as unknown as ConnectedAppBroker` and `{} as + * ConnectedAppBroker` compile while omitting `revoke` and `revokeAccount`; `{ broker } as never` + * compiles while omitting everything. Each one makes the type's guarantee vanish exactly as the + * broken `import type` that round-2 C8 fixed did — the same defect by a different mechanism, and + * one the compiler gate is structurally blind to. A `revokeAccount: async () => {}` stub is the + * runtime half of the same drift: it type-checks, and answers "done" for a revoke that never + * happened, on the seam this PR's Claim 2 is about. + * + * THE LISTS BELOW ARE A RECORD OF DEBT, in the discipline of `typecheck-baseline.txt`: every entry + * is a real stub the compiler cannot see, not a stub that is fine. Removing one by fixing it is + * always correct — and REQUIRED, because the comparison is equality both ways, so a fixed site + * left on the list goes red and names itself for deletion. Adding one is not: a new cast means a + * double written today escapes the type, and the honest alternative exists + * (`support/stub-broker.ts`, whose unprovided members throw and record). The migration of the + * recorded sites onto that factory is deferred to the fix cycle (convergence audit, K3); this + * file only reads them. + * + * KEYED BY PATH + QUOTED EXPRESSION, NEVER `path:line`. A line-keyed list goes red when somebody + * adds an import above a stub, and a guard that fails for a reason unrelated to what it guards is + * one people learn to re-baseline without reading (`assertion-shape.test.ts` collided this way in + * three consecutive waves; `sole-definition.test.ts`, keyed like this, never has). Two identical + * expressions in one file appear as that entry twice — duplicates are significant. + * + * WHAT THE PATTERNS SEE, AND WHAT THEY DO NOT. Comments are blanked by the shared scanner, so a + * docblock quoting a cast is prose. Matching runs over the whole stripped file with `\s+`, so a + * cast wrapped across lines is still one cast. NOT seen: a cast to a local alias of the broker type + * whose name does not end in `Broker` (`type B = ConnectedAppBroker; x as unknown as B`), a stub + * erased by `as never` whose line names no broker (`deps as never` where `deps` holds one), and a + * no-op `revokeAccount` written through a named function (`revokeAccount: noop`). Widening to those + * would flag every `as never` in the suite; the escape hatch is review, and the factory. + */ +import { expect, test } from "bun:test"; +import { readFileSync } from "node:fs"; +import { join } from "node:path"; +import { sourceFiles, stripComments } from "./support/source-scan"; + +const REPO = join(import.meta.dir, "../.."); + +/** + * This file is not scanned: its lists QUOTE every recorded site, and its matcher contract spells + * the offences it must catch, so scanning it would report its own records as new stubs. + */ +const SELF = import.meta.path; +const ROOT = "server/tests"; + +/** The seam types a double must not be cast to. A name ending in `Broker` covers every alias. */ +const SEAM_TYPE = + "(?:[A-Z][\\w$]*)?(?:Broker|CredentialStore|CredentialSecretReader|CredentialStatusReader|CredentialAdminService)"; + +/** + * A type assertion TO a seam type: `as X`, `as unknown as X`, `as any as X`, `as never as X`, and + * the wrapped forms `as Partial` / `as unknown as Pick`. `{} as X` is `as X`. + */ +export const CAST_TO_SEAM = new RegExp( + `\\bas\\s+(?:(?:unknown|any|never)\\s+as\\s+)?(?:[\\w$]+\\s*<\\s*)?${SEAM_TYPE}(?![\\w$])`, + "g", +); + +/** + * A broker ERASED rather than cast: an expression that names a broker — the `broker` key or + * binding, or any identifier ending in `Broker` — asserted to `never`, `any` or `unknown`, within + * the same statement. The span stops at a `;` or a line break, so an unrelated `as never` further + * down the file is not attributed to it. + */ +export const ERASED_BROKER = + /\b(?:broker|[a-z][\w$]*Broker)\b[^;\n]*?\bas\s+(?:never|any|unknown)\b(?!\s+as\b)/g; + +/** A `revokeAccount` that succeeds and does nothing: the silent no-op. */ +export const NOOP_REVOKE_ACCOUNT = + /\brevokeAccount\s*(?::\s*(?:async\s*)?(?:\([^)]*\)|[\w$]+)\s*(?::\s*[^=]+?)?=>\s*(?:\{\s*\}|undefined\b|void\s+0\b|Promise\.resolve\(\s*\))|(?:async\s+)?\([^)]*\)\s*(?::\s*[^{]+?)?\{\s*\})/g; + +/** + * Every match of `re` across the test tree, as `path :: expression`. + * + * The expression is the whole physical line(s) the match spans, whitespace collapsed, so it reads + * as the stub a reviewer would see and survives reindentation. + */ +export function sitesOf(re: RegExp, root = ROOT): string[] { + const out: string[] = []; + for (const file of sourceFiles(join(REPO, root), [".ts", ".tsx"])) { + if (file === SELF) continue; + const text = stripComments(readFileSync(file, "utf8")); + for (const match of text.matchAll(re)) { + out.push( + `${file.slice(REPO.length + 1)} :: ${expressionAt(text, match)}`, + ); + } + } + return out.sort(); +} + +function expressionAt(text: string, match: RegExpMatchArray): string { + const at = match.index ?? 0; + const from = text.lastIndexOf("\n", at) + 1; + const end = text.indexOf("\n", at + match[0].length); + return text + .slice(from, end === -1 ? text.length : end) + .replace(/\s+/g, " ") + .trim(); +} + +/** + * Casts past the broker type on record. Round-2 C8a's report counted six; the scan finds EIGHT — + * `store-account-ref.integration` and `store-vendor-vocabulary` were not in that count. Each one + * compiles whatever it omits, so none is checked against the seam; all are deferred to the fix + * cycle (K3). + */ +const KNOWN_CASTS: string[] = [ + "server/tests/directory-vendor-sentences.test.ts :: } as unknown as ComposioBroker;", + "server/tests/routes-arcade-urls.test.ts :: } as unknown as ComposioBroker;", + "server/tests/routes-vendor-vocabulary.test.ts :: } as unknown as ComposioBroker;", + "server/tests/store-account-ref.integration.test.ts :: } as unknown as ConnectedAppBroker;", + "server/tests/store-provider-required.test.ts :: const broker = {} as ConnectedAppBroker;", + "server/tests/store-toolkit-dispatch.test.ts :: const broker = {} as ConnectedAppBroker;", + "server/tests/store-vendor-vocabulary.test.ts :: } as unknown as ConnectedAppBroker;", + "server/tests/vendor-deadline-sync-throw.test.ts :: } as unknown as ComposioBroker;", +]; + +/** Brokers erased to `never` on record. Same defect, wider: nothing of the seam is checked. */ +const KNOWN_ERASED: string[] = [ + 'server/tests/arcade-journey.integration.test.ts :: args[29] = { broker, provider: "arcade" } as never;', + "server/tests/plugin-routes.test.ts :: listApps ? ({ broker: { listApps } } as never) : undefined,", + 'server/tests/provider-selection.test.ts :: const arcadeBroker = { tag: "arcade-broker" } as never;', + 'server/tests/provider-selection.test.ts :: const composioBroker = { tag: "composio-broker" } as never;', +]; + +/** + * Silent no-op `revokeAccount` stubs on record. Round-2 C8c counted 21; the scan finds 22. Deferred + * to the fix cycle (K1/K3). + */ +const KNOWN_NOOP_REVOKES: string[] = [ + "server/tests/account-mode.integration.test.ts :: revokeAccount: async () => {},", + "server/tests/arcade-attempt-store.integration.test.ts :: revokeAccount: async () => {},", + "server/tests/arcade-authorize-cancel.test.ts :: revokeAccount: async () => {},", + "server/tests/arcade-authorize-route.test.ts :: revokeAccount: async () => {},", + "server/tests/arcade-completion-transaction.integration.test.ts :: revokeAccount: async () => {},", + "server/tests/arcade-disconnect-cascade.test.ts :: revokeAccount: async () => {},", + "server/tests/arcade-disconnect-route.test.ts :: revokeAccount: async () => {},", + "server/tests/arcade-grants-route.test.ts :: revokeAccount: async () => {},", + "server/tests/arcade-grants-route.test.ts :: revokeAccount: async () => {},", + "server/tests/arcade-sibling-collateral.test.ts :: revokeAccount: async () => {},", + "server/tests/arcade-siblings.test.ts :: revokeAccount: async () => {},", + "server/tests/arcade-verify.test.ts :: revokeAccount: async () => {},", + "server/tests/composio-grants-for.test.ts :: revokeAccount: async () => {},", + "server/tests/gate-foreign-provenance-call.test.ts :: revokeAccount: async () => {},", + "server/tests/gate-grant-is-local.test.ts :: revokeAccount: async () => {},", + "server/tests/remove-server-foreign-provenance.test.ts :: revokeAccount: async () => {},", + "server/tests/shared-brokered-routes.test.ts :: revokeAccount: async () => {},", + "server/tests/shared-brokered-store.integration.test.ts :: revokeAccount: async () => {},", + "server/tests/shared-gated-mode.integration.test.ts :: revokeAccount: async () => {},", + "server/tests/shared-wiring.integration.test.ts :: revokeAccount: async () => {},", + "server/tests/store-account-ref.integration.test.ts :: revokeAccount: async () => {},", + "server/tests/store-vendor-vocabulary.test.ts :: revokeAccount: async () => {},", +]; + +test("no new cast past the broker or credential type", () => { + // Equality both ways: a NEW site is a double written today that escapes the type; a site that + // is GONE was fixed, and its entry must be deleted above so the record burns down. + expect(sitesOf(CAST_TO_SEAM)).toEqual([...KNOWN_CASTS].sort()); +}); + +test("no new broker erased to never, any or unknown", () => { + const erased = sitesOf(ERASED_BROKER).filter( + (site) => !new RegExp(CAST_TO_SEAM.source).test(site), + ); + expect(erased).toEqual([...KNOWN_ERASED].sort()); +}); + +test("no new silent no-op revokeAccount stub", () => { + expect(sitesOf(NOOP_REVOKE_ACCOUNT)).toEqual([...KNOWN_NOOP_REVOKES].sort()); +}); + +/* + * THE MATCHER CONTRACT. The real-tree comparisons above prove the lists are current; these prove + * the patterns are read the way the lists assume — that a cast is matched when it is one and a + * typed binding or a `satisfies` is not. Without them the ratchet could be green because a pattern + * matches nothing at all. + */ +const B = "ConnectedAppBroker"; +const C = "CredentialStore"; +const RA = "revokeAccount"; +const BK = "broker"; + +function matches(re: RegExp, text: string): boolean { + return new RegExp(re.source).test(text); +} + +test("a cast to a seam type is matched; a typed binding, a satisfies or a near-name is not", () => { + const casts = [ + `} as unknown as ${B};`, + `const broker = {} as ${B};`, + `} as ${B};`, + `x as any as ${B}`, + `x as never as Composio${"Broker"}`, + `x as Partial<${B}>`, + `x as unknown as Pick<${B}, "revoke">`, + `} as\n unknown as\n ${B};`, + `credentials: {} as ${C},`, + `x as unknown as HostAccess${"Broker"}`, + ]; + for (const text of casts) + expect([text, matches(CAST_TO_SEAM, text)]).toEqual([text, true]); + const notCasts = [ + `const broker: ${B} = {`, + `} satisfies ${B};`, + `import type { ${B} } from "../src/plugins/broker";`, + `x as ${"Broker"}edProbe`, + `x as ${"Broker"}App`, + `alias as const`, + `has ${B}`, + ]; + for (const text of notCasts) + expect([text, matches(CAST_TO_SEAM, text)]).toEqual([text, false]); +}); + +test("an erased broker is matched; an erased unrelated value is not", () => { + const erased = [ + `args[29] = { ${BK}, provider: "arcade" } as never;`, + `listApps ? ({ ${BK}: { listApps } } as never) : undefined,`, + `const composio${"Broker"} = { tag: "x" } as never;`, + `const deps = { ${BK}: stub } as any;`, + ]; + for (const text of erased) + expect([text, matches(ERASED_BROKER, text)]).toEqual([text, true]); + const notErased = [ + `(brokerReturnUrl as any)(" "),`, + `new (${"Broker"}UnconfiguredError as any)()`, + `credentials: {} as never,`, + `${BK},\n credentials: {} as never,`, + `const ${BK} = make(); const y = z as never;`, + ]; + for (const text of notErased) + expect([text, matches(ERASED_BROKER, text)]).toEqual([text, false]); +}); + +test("a silent revokeAccount is matched; one that records or throws is not", () => { + const silent = [ + ` ${RA}: async () => {},`, + ` ${RA}: async (_id) => {},`, + ` ${RA}: async (id: string) => {\n },`, + ` ${RA}: async () => undefined,`, + ` ${RA}: () => Promise.resolve(),`, + ` async ${RA}() {},`, + ` ${RA}(_id: string) {}`, + ]; + for (const text of silent) + expect([text, matches(NOOP_REVOKE_ACCOUNT, text)]).toEqual([text, true]); + const honest = [ + ` ${RA}: async (id) => {\n asks.push(id);\n },`, + ` ${RA}: unasked("revoke one account"),`, + ` ${RA}: async () => {\n throw new Error("no");\n },`, + ` await ${BK}.${RA}("ca_1");`, + ]; + for (const text of honest) + expect([text, matches(NOOP_REVOKE_ACCOUNT, text)]).toEqual([text, false]); +}); diff --git a/server/tests/broker-unconfigured-voice.test.ts b/server/tests/broker-unconfigured-voice.test.ts new file mode 100644 index 000000000..269e79dae --- /dev/null +++ b/server/tests/broker-unconfigured-voice.test.ts @@ -0,0 +1,53 @@ +import { describe, expect, test } from "bun:test"; +import { BrokerUnconfiguredError } from "../src/plugins/broker"; + +/** + * Which provider an "unconfigured broker" sentence names, and who it is written for. + * + * The constructor used to DEFAULT to Composio, so a call site that passed nothing put + * `COMPOSIO_API_KEY` on an Arcade deployment's screen. The parameter is required now and these pin + * both halves: the operator's sentence names the ACTIVE provider's variable, and a person's names + * no vendor and no variable at all (spec D11) because they can set neither. + * + * NO-ARGUMENT PIN IS A RUNTIME ASSERTION, NOT `@ts-expect-error`: `server/tests` is outside `tsc`, + * so an expect-error written here would assert nothing. `Function.length` counts the parameters + * before the first default, so it falls the moment a default is reintroduced; the second assertion + * is the behaviour that makes an omission loud rather than a Composio sentence. + */ +const COMPOSIO_OPERATOR = + "Composio is not configured for this deployment, so nothing was asked. Set COMPOSIO_API_KEY to make the brokered apps available; until it is set there is nothing to connect, nothing to grant and no Composio tool for a Bot to call, and the admin Plugins page shows one row under More apps that goes nowhere."; + +describe("BrokerUnconfiguredError", () => { + test("a Composio operator reads the exact existing sentence", () => { + expect(new BrokerUnconfiguredError("composio", "operator").message).toBe( + COMPOSIO_OPERATOR, + ); + }); + + test("an Arcade operator is told Arcade's variable and never Composio's", () => { + const message = new BrokerUnconfiguredError("arcade", "operator").message; + expect(message).toContain("Arcade"); + expect(message).toContain("ARCADE_API_KEY"); + expect(message).not.toMatch(/composio/i); + expect(message).not.toContain("COMPOSIO_API_KEY"); + }); + + test("a person is told no vendor and no variable, on either provider", () => { + for (const provider of ["composio", "arcade"] as const) { + const message = new BrokerUnconfiguredError(provider, "person").message; + expect(message).not.toMatch(/composio|arcade/i); + expect(message).not.toMatch(/API_KEY/); + } + expect(new BrokerUnconfiguredError("composio", "person").message).toBe( + new BrokerUnconfiguredError("arcade", "person").message, + ); + }); + + test("the constructor cannot be called with nothing", () => { + expect(BrokerUnconfiguredError.length).toBe(2); + expect( + // biome-ignore lint/suspicious/noExplicitAny: the omission is the point + () => new (BrokerUnconfiguredError as any)(), + ).toThrow(); + }); +}); diff --git a/server/tests/brokered-account-mode-backfill.integration.test.ts b/server/tests/brokered-account-mode-backfill.integration.test.ts new file mode 100644 index 000000000..20bb0e23a --- /dev/null +++ b/server/tests/brokered-account-mode-backfill.integration.test.ts @@ -0,0 +1,123 @@ +import { describe, expect, test } from "bun:test"; +import { inArray, sql } from "drizzle-orm"; +import { createDatabase } from "../src/db/client"; +import { mcpServers } from "../src/db/schema"; +import { TEST_POOL, testDatabaseUrl } from "./support/database"; + +/** + * The migration that gives an existing deployment's dead apps an answer, run against a real + * database. + * + * WHAT IT REPAIRS. `addBrokeredApp` settles `account_mode` on the INSERT and — from the change this + * migration ships beside — after the upsert as well. Its CONFLICT arm never did, so an enable that + * landed on a row which was not brokered converted it and left this column null. `accountFor` + * refuses a call against such a row as ambiguous, so the app is enabled, listed, connectable, and + * declines every call it is asked for. + * + * WHY A MIGRATION AND NOT THE WRITER ALONE. An app that is already enabled cannot be added again + * without being removed first — the Plugins page's Add is a switch, and switching it off takes the + * app and every connection on it — so the repair in `addBrokeredApp` can never reach a row that is + * already in this state. Without this file every deployment that is already broken stays broken. + * + * Found through `_journal.json` rather than by filename, for `last-sign-in-backfill`'s reason: the + * number in front of a migration is not stable across a rebase, and a migration left out of the + * journal never runs at all. So the journal entry is what is asserted and the SQL is read from + * whatever file it names. + */ +const JOURNAL = (await Bun.file( + new URL("../drizzle/meta/_journal.json", import.meta.url), +).json()) as { entries: { idx: number; tag: string }[] }; + +const entry = JOURNAL.entries.find((candidate) => + candidate.tag.endsWith("_settle_brokered_account_mode"), +); + +const database = createDatabase(testDatabaseUrl(), TEST_POOL); + +const PREFIX = "acctmode-backfill-"; + +/** Thrown to unwind the transaction, so the backfill never touches the rows of the database it ran against. */ +class Rollback extends Error {} + +describe("the account-mode backfill migration", () => { + test("is registered in the journal, so it runs", () => { + expect(entry).toBeDefined(); + }); + + test("settles every brokered app with an account and nothing else", async () => { + const migration = await Bun.file( + new URL(`../drizzle/${entry?.tag}.sql`, import.meta.url), + ).text(); + + /** + * One row per case the predicate decides, named for what it is. + * + * `unreadable` is the one worth saying out loud: a null `auth_scheme` is NOT a no-auth app — + * `schemeKind` calls it `unreadable` and `accountFor` treats it as having an account — so it + * is refused exactly as `consent` is and needs the mode just as much. `custom` and + * `first-party` are the two provenances that have no account to hold at all. + */ + const rows = [ + { id: `${PREFIX}consent`, provenance: "composio", scheme: "OAUTH2" }, + { id: `${PREFIX}key`, provenance: "composio", scheme: "API_KEY" }, + { id: `${PREFIX}arcade`, provenance: "arcade", scheme: "OAUTH2" }, + { id: `${PREFIX}unreadable`, provenance: "composio", scheme: null }, + { id: `${PREFIX}noauth`, provenance: "composio", scheme: "NO_AUTH" }, + { id: `${PREFIX}custom`, provenance: "custom", scheme: null }, + { id: `${PREFIX}firstparty`, provenance: "first-party", scheme: null }, + ] as const; + const chosen = `${PREFIX}chosen`; + const ids = [...rows.map((candidate) => candidate.id), chosen]; + const observed = new Map(); + + try { + await database.transaction(async (tx) => { + for (const candidate of rows) { + await tx.insert(mcpServers).values({ + id: candidate.id, + title: candidate.id, + vendor: "Composio", + url: `composio://${candidate.id}`, + provenance: candidate.provenance, + authScheme: candidate.scheme, + }); + } + // An administrator who already chose Shared, which nothing here may overrule. + await tx.insert(mcpServers).values({ + id: chosen, + title: chosen, + vendor: "Composio", + url: `composio://${chosen}`, + provenance: "composio", + authScheme: "OAUTH2", + accountMode: "shared", + }); + + for (const statement of migration.split("--> statement-breakpoint")) { + if (statement.trim()) await tx.execute(sql.raw(statement)); + } + + const after = await tx + .select({ id: mcpServers.id, accountMode: mcpServers.accountMode }) + .from(mcpServers) + .where(inArray(mcpServers.id, ids)); + for (const row of after) observed.set(row.id, row.accountMode); + + throw new Rollback(); + }); + } catch (error) { + if (!(error instanceof Rollback)) throw error; + } + + expect(Object.fromEntries(observed)).toEqual({ + [`${PREFIX}consent`]: "personal", + [`${PREFIX}key`]: "personal", + [`${PREFIX}arcade`]: "personal", + [`${PREFIX}unreadable`]: "personal", + [`${PREFIX}noauth`]: null, + [`${PREFIX}custom`]: null, + [`${PREFIX}firstparty`]: null, + [chosen]: "shared", + }); + }); +}); diff --git a/server/tests/brokered-app-provider.integration.test.ts b/server/tests/brokered-app-provider.integration.test.ts new file mode 100644 index 000000000..1ea6b2162 --- /dev/null +++ b/server/tests/brokered-app-provider.integration.test.ts @@ -0,0 +1,333 @@ +/** + * `addBrokeredApp` composes the row's url, id, provenance and vendor label from the store's + * provider, and the add-by-URL path reserves both brokers' id namespaces. + * + * Case is never normalised: Arcade's toolkit names are case-sensitive, so `arcade://Gmail` and + * `arcade://gmail` are distinct apps. + */ +import { afterAll, afterEach, expect, test } from "bun:test"; +import { eq, like, or } from "drizzle-orm"; +import { createAuditStore } from "../src/audit"; +import { createDatabase } from "../src/db/client"; +import { brokeredConnections, mcpServers } from "../src/db/schema"; +import type { BrokerConnection } from "../src/plugins/broker"; +import type { BrokerProvider } from "../src/plugins/access"; +import type { ComposioBroker } from "../src/plugins/broker"; +import { + CustomServerRefusedError, + createPluginStore, +} from "../src/plugins/store"; +import { TEST_POOL, testDatabaseUrl } from "./support/database"; + +const database = createDatabase(testDatabaseUrl(), TEST_POOL); + +async function clean() { + await database + .delete(brokeredConnections) + .where(like(brokeredConnections.app, "bap%")); + await database + .delete(mcpServers) + .where( + or( + like(mcpServers.id, "arcade-bap%"), + like(mcpServers.id, "composio-bap%"), + ), + ); +} +afterEach(clean); +afterAll(async () => { + await clean(); + await database.$client.close(); +}); + +/** + * Every broker member this file does not expect production to reach, by the name it was asked as. + * + * EACH ONE THROWS AND RECORDS, because a throw is only as loud as the path that receives it: a + * `catch` around the call swallows it and the test passes on a broker that was never there. That is + * how three members of `ConnectedAppBroker` — `revokeAccount` among them — were absent from this + * stub without a single test noticing. The check below reads the record after every test, so a + * reach is a red whether or not production let the throw out. + */ +const reached: string[] = []; +const unasked = (what: string) => async (): Promise => { + reached.push(what); + throw new Error(`asked the broker to ${what}`); +}; +afterEach(() => { + expect(reached.splice(0)).toEqual([]); +}); + +function storeFor( + provider: BrokerProvider, + ensure: "created" | "standing" = "created", +) { + const broker: ComposioBroker = { + // This stub stands in for Composio, whose grant is held locally; see `ConnectedAppBroker.grantIsLocal`. + grantIsLocal: true, + // Nothing here asks what auth provider a connection is held under. + authProviderOf: async () => null, + // Nothing here reads either member; both are declared because the seam requires a broker to + // SAY what it runs — see `ConnectedAppBroker.authorizations`. + authorizations: null, + grantsFor: unasked("read grants"), + listApps: unasked("list"), + ensureAuthConfig: async () => ensure, + deleteAuthConfig: unasked("delete"), + authorize: unasked("authorize"), + isConnected: unasked("check"), + revoke: unasked("revoke"), + // Nothing here draws a connect form, connects with typed fields or undoes one account. All three + // are declared so the stub is a `ConnectedAppBroker` rather than a partial one, and all three + // fail if reached. + connectionFields: unasked("read connection fields"), + connectWithFields: unasked("connect with typed fields"), + revokeAccount: unasked("revoke one account"), + accountName: async () => null, + }; + return createPluginStore({ + brokerProvider: provider, + database, + auditStore: createAuditStore(database), + credentials: { + readSecret: async () => null, + create: async () => { + throw new Error("vault"); + }, + updateSecret: async () => { + throw new Error("vault"); + }, + revoke: async () => { + throw new Error("vault"); + }, + }, + encryptionKey: "x".repeat(44), + policy: () => ({ mode: "enforce", deny: [], allow: ["true"] }), + broker, + }); +} + +const consent: BrokerConnection = { kind: "consent" }; + +async function row(id: string) { + const [found] = await database + .select() + .from(mcpServers) + .where(eq(mcpServers.id, id)); + return found; +} + +test("an Arcade store enables an arcade:// toolkit under an arcade- id, case kept", async () => { + const store = storeFor("arcade"); + const record = await store.addBrokeredApp({ + slug: "bapGmail", + title: "Gmail", + by: "admin@example.com", + connection: consent, + }); + expect(record.id).toBe("arcade-bapGmail"); + expect(record.url).toBe("arcade://bapGmail"); + expect(record.provenance).toBe("arcade"); + const stored = await row("arcade-bapGmail"); + expect(stored?.vendor).toBe("Arcade"); + expect(stored?.provenance).toBe("arcade"); + expect(await row("composio-bapGmail")).toBeUndefined(); + + // Distinct apps: the lower-case spelling is its own row, not the same one. + await store.addBrokeredApp({ + slug: "bapgmail", + title: "gmail", + by: "admin@example.com", + connection: consent, + }); + expect((await row("arcade-bapgmail"))?.url).toBe("arcade://bapgmail"); + expect((await row("arcade-bapGmail"))?.url).toBe("arcade://bapGmail"); +}); + +test("a Composio store still enables a composio:// app under a composio- id", async () => { + const store = storeFor("composio"); + const record = await store.addBrokeredApp({ + slug: "bapslack", + title: "Slack", + by: "admin@example.com", + connection: consent, + }); + expect(record.id).toBe("composio-bapslack"); + expect(record.url).toBe("composio://bapslack"); + expect(record.provenance).toBe("composio"); + expect((await row("composio-bapslack"))?.vendor).toBe("Composio"); + expect(await row("arcade-bapslack")).toBeUndefined(); +}); + +test("each store refuses a slug its own parser cannot read, naming its own vendor", async () => { + await expect( + storeFor("arcade").addBrokeredApp({ + slug: "bap.Dotted", + title: "x", + by: "admin@example.com", + connection: consent, + }), + ).rejects.toThrow(/^bap\.Dotted is not a name an Arcade app can have\./); + await expect( + storeFor("composio").addBrokeredApp({ + slug: "bap dotted", + title: "x", + by: "admin@example.com", + connection: consent, + }), + ).rejects.toThrow(/^bap dotted is not a name a Composio app can have\./); + expect(await row("arcade-bap.Dotted")).toBeUndefined(); + expect(await row("composio-bap dotted")).toBeUndefined(); +}); + +test("re-enabling over a connected Arcade app keeps the recorded scheme", async () => { + // The connection check reads the STORE'S provider: a composio filter would see no connection + // here, treat the re-add as free to rewrite, and move the scheme under a live account. + const store = storeFor("arcade", "created"); + await store.addBrokeredApp({ + slug: "bapkept", + title: "Kept", + by: "admin@example.com", + connection: { kind: "fields", authScheme: "API_KEY" } as BrokerConnection, + }); + const before = (await row("arcade-bapkept"))?.authScheme; + await database.insert(brokeredConnections).values({ + provider: "arcade", + app: "bapkept", + holder: "deployment", + vendorUserId: "deployment", + }); + await store.addBrokeredApp({ + slug: "bapkept", + title: "Kept", + by: "admin@example.com", + connection: consent, + }); + expect((await row("arcade-bapkept"))?.authScheme).toBe(before ?? null); +}); + +for (const provider of ["composio", "arcade"] as const) { + for (const prefix of ["composio-", "arcade-"]) { + test(`a ${provider} store refuses a URL-added server named ${prefix}x`, async () => { + const id = `${prefix}bapx`; + const vendor = prefix === "arcade-" ? "Arcade" : "Composio"; + await expect( + storeFor(provider).addCustomServer({ + id, + title: "Collector", + url: "https://collector.example/mcp", + by: "admin@example.com", + }), + ).rejects.toThrow( + new CustomServerRefusedError( + `Names beginning ${prefix} belong to the ${vendor} apps this deployment enables, so ${id} is not a name a server added by URL can take. Choose another.`, + ).message, + ); + expect(await row(id)).toBeUndefined(); + }); + } +} + +/** + * WHOSE ACCOUNT AN ENABLED APP IS REACHED THROUGH, WHICH IS A QUESTION A ROW IS NEVER ALLOWED TO + * LEAVE THIS METHOD WITHOUT AN ANSWER TO. + * + * `accountFor` refuses a call against a brokered row whose `account_mode` is null as `ambiguous` — + * the app is enabled, listed and connectable, and every call it is asked for is declined. So the + * state these three tests are about is not a tidiness one: it is an app that cannot be used. + * + * The two that would fail without the fix are the two the writer used to miss. `addBrokeredApp` + * settles the column on its INSERT only; its CONFLICT arm converts a row that was NOT brokered + * into one that is, and the guard that followed asked `schemeKind(recorded) === "none"` — "was + * this a no-auth app a moment ago" — which a row that was not brokered at all answers `null` to, + * and a null is `unreadable`, not `none`. The whole block was additionally gated on the auth + * config having just been CREATED, so a second press of Add could never repair what the first + * left. + */ +test("converting a row that was not brokered settles whose account the app is", async () => { + await database.insert(mcpServers).values({ + id: "composio-bapconv", + title: "Typed", + vendor: "typed.example", + url: "https://typed.example/mcp", + provenance: "custom", + addedBy: "admin@example.com", + }); + + await storeFor("composio", "created").addBrokeredApp({ + slug: "bapconv", + title: "Converted", + by: "admin@example.com", + connection: consent, + }); + + const stored = await row("composio-bapconv"); + // The conversion itself, so a failure below is read as the mode and not as the upsert. + expect(stored?.provenance).toBe("composio"); + expect(stored?.url).toBe("composio://bapconv"); + expect(stored?.accountMode).toBe("personal"); +}); + +test("re-enabling an app that never said whose account it is settles it", async () => { + // The state a deployment is already in, written down: brokered, scheme recorded, mode null. + await database.insert(mcpServers).values({ + id: "composio-bapstuck", + title: "Stuck", + vendor: "Composio", + url: "composio://bapstuck", + provenance: "composio", + authScheme: "OAUTH2", + addedBy: "admin@example.com", + }); + + // `standing`: the auth config is already there, which is what every press of Add after the first + // one meets, and what used to skip the whole block. + await storeFor("composio", "standing").addBrokeredApp({ + slug: "bapstuck", + title: "Stuck", + by: "admin@example.com", + connection: consent, + }); + + expect((await row("composio-bapstuck"))?.accountMode).toBe("personal"); +}); + +test("re-enabling leaves an administrator's Shared choice alone", async () => { + await database.insert(mcpServers).values({ + id: "composio-bapshared", + title: "Shared", + vendor: "Composio", + url: "composio://bapshared", + provenance: "composio", + authScheme: "OAUTH2", + accountMode: "shared", + sharedVendorUserId: "openbot-deployment:test:abc", + addedBy: "admin@example.com", + }); + + await storeFor("composio", "standing").addBrokeredApp({ + slug: "bapshared", + title: "Shared", + by: "admin@example.com", + connection: consent, + }); + + const stored = await row("composio-bapshared"); + expect(stored?.accountMode).toBe("shared"); + expect(stored?.sharedVendorUserId).toBe("openbot-deployment:test:abc"); +}); + +test("an app with no account to hold is left saying so", async () => { + await storeFor("composio", "created").addBrokeredApp({ + slug: "bapnoauth", + title: "Hacker News", + by: "admin@example.com", + connection: { kind: "no-auth" }, + }); + + const stored = await row("composio-bapnoauth"); + expect(stored?.authScheme).toBe("NO_AUTH"); + // `schemeKind` `none`: there is no account, so there is no mode, and the column says that rather + // than claiming one. + expect(stored?.accountMode).toBeNull(); +}); diff --git a/server/tests/brokered-provenance.test.ts b/server/tests/brokered-provenance.test.ts new file mode 100644 index 000000000..3cf8f0533 --- /dev/null +++ b/server/tests/brokered-provenance.test.ts @@ -0,0 +1,133 @@ +// server/tests/brokered-provenance.test.ts +/** + * Guard: no plugin module outside the three VOCABULARY modules may spell a brokered vendor's name — + * in a provenance or provider comparison, or in a url scheme it builds. + * + * `access.ts`, `composio.ts` and `arcade.ts` are the exempt files. `access.ts` is where the shared + * vocabulary lives — {@link BrokerProvider}, {@link brokeredProvenance}, `TOOLKIT_OF` and + * `BROKERED_PROFILE`, which is why the scheme literals are there and not in `store.ts`. The other + * two are each one broker's own module, and a module whose whole job is to speak one vendor's + * protocol has to be able to spell that vendor's scheme and define that vendor's parser. Neither + * trips the provenance patterns today, and neither is exempt from anything it does not need: + * widening the list is what makes the scheme pattern absolute everywhere else, instead of a pattern + * with a per-line escape hatch — and an escape hatch in a guard is the thing that gets used the + * second time without the argument being made again. + * + * COMMENT LINES ARE SKIPPED, DELIBERATELY AND NARROWLY. A line whose trimmed start is `*`, `//` or + * `/*` is not scanned. `store.ts` alone carries about a dozen `composio://` mentions inside + * docblocks — "a row called `gmail` at `composio://slack`" and the like — which are explanation of + * why a rule exists, not an instance of breaking it. A SCHEME NAMED IN PROSE IS DOCUMENTATION; A + * SCHEME NAMED IN AN EXPRESSION IS A DECISION. The skip is on the line's syntactic position and + * nothing else, so it cannot grow: the alternative — loosening the pattern until the docblocks stop + * matching — would also stop it matching the thing it is for, which is a string carrying a scheme. + * + * The offenders are collected into a list and compared against `[]` rather than asserted one file at + * a time, so a new site has to be argued for here rather than quietly allowed. + * + * THE FOURTH PATTERN FAMILY IS THE PARSER CALL, AND IT IS ARMED. A direct call to a vendor module's + * own parser — `toolkitOf(url)` rather than `toolkitOfFor(provider, url)` — is the same mistake as a + * spelled scheme, reached one step further in: it does not name a vendor, it IS one, and it answers + * null for every url the other broker mints rather than failing. What that bought on an Arcade + * deployment was four different wrong answers from one wrong parser, none of which read as a parser + * problem — an app refused as "not reached through a broker", a directory offering to enable what + * was already enabled, a connect route falling past its own brokered branch, and an authorize, + * grants and disconnect that all refused a connected app. + * + * WHAT THE ARMED PATTERN NOW GUARANTEES: outside the three vocabulary modules, no plugin module + * calls `toolkitOf` at all. Every brokered url in `src/plugins` is parsed through + * `toolkitOfFor(provider, url)`, with the provider handed in rather than sniffed — so adding a + * broker changes the dispatch table in `access.ts` and nothing else, and a module that reaches past + * the dispatch for one vendor's parser is named here before it ships. The only lines the pattern + * still matches are the definitions themselves, in the three exempt modules it does not scan. + */ +import { expect, test } from "bun:test"; +import { readFileSync } from "node:fs"; +import { basename, join } from "node:path"; +import { logicalLines, sourceFiles } from "./support/source-scan"; + +const PLUGINS_DIR = join(import.meta.dir, "../src/plugins"); + +/** The modules allowed to speak a broker's vocabulary. Every other plugin module asks them. */ +const VOCABULARY = new Set(["access.ts", "composio.ts", "arcade.ts"]); + +const PATTERNS: RegExp[] = [ + /provenance\s*[!=]==\s*"(composio|arcade)"/, + /brokeredConnections\.provider\s*,\s*"(composio|arcade)"/, + /provider:\s*"(composio|arcade)"/, + // `eq(mcpServers.provenance, "composio")`: the drizzle spelling of the same mistake as the + // `provenance === "composio"` pattern above. A guard catching one spelling of a mistake and not + // the other is worse than none, because it is read as coverage. + /(mcpServers|\w+)\.provenance\s*,\s*"(composio|arcade)"/, + // A scheme spelled into a string — the construction half. `composio://${toolkit}` in `store.ts` + // is what dropped every Arcade connection off the settings page and what sent an Arcade + // deployment's probe to Composio; the scheme comes out of `BROKERED_PROFILE` now. + /["'`](composio|arcade):\/\//, + // A vendor module's own parser called directly, not the dispatch. `toolkitOf(url)` reads one + // broker's scheme and answers null for the other's, so a module holding the active provider must + // ask `toolkitOfFor(provider, url)` instead. + /\btoolkitOf\s*\(/, +]; + +/** A line of prose rather than a line of code. See the docblock: the skip is narrow on purpose. */ +function isComment(line: string): boolean { + const start = line.trimStart(); + return ( + start.startsWith("*") || start.startsWith("//") || start.startsWith("/*") + ); +} + +test("no plugin module hard-codes a brokered vendor name outside the vocabulary modules", () => { + const offenders: string[] = []; + // The shared scanner's walk and line-splitting. RECURSIVE: a `src/plugins//x.ts` was + // unscanned before, and the exemption is by FILE NAME, so a `plugins//access.ts` is not + // quietly exempt either. LOGICAL lines: a scheme prettier wrapped off its own `=` is one + // decision, and reading it per physical line saw half of it. The comment skip is unchanged and + // still narrow — only a line that STARTS as prose is spared. + const files = sourceFiles(PLUGINS_DIR, [".ts"]).filter( + (f) => !VOCABULARY.has(basename(f)), + ); + for (const file of files) { + for (const { line, text } of logicalLines(readFileSync(file, "utf8"))) { + if (isComment(text)) continue; + if (PATTERNS.some((re) => re.test(text))) { + offenders.push(`${file.slice(PLUGINS_DIR.length + 1)}:${line}`); + } + } + } + expect(offenders).toEqual([]); +}); + +/** + * And the comment skip does not also skip code, which is the one way this guard could go quietly + * useless. Each line below is an offender the scan must still name, including the ones that carry a + * comment — a trailing `//` does not make a line prose, and only a line that STARTS as prose is + * skipped. + */ +test("the comment skip takes prose and leaves every expression", () => { + const code = [ + // Interpolation is spelled by concatenation here only so the linter does not read a template + // placeholder inside a plain string as a mistake; what the pattern sees is the same line. + `const url = \`composio://$\{toolkit}\`;`, + `const url = \`arcade://$\{toolkit}\`; // the scheme`, + ' return { url: "composio://gmail" };', + '\tif (row.provenance === "arcade") return null;', + 'const u = "composio://" + toolkit; /* trailing block */', + " const toolkit = row ? toolkitOf(row.url) : null;", + ]; + const prose = [ + " * a row called `gmail` at `composio://slack` would decide a Slack confirm", + "// `arcade://Gmail` and `arcade://gmail` are distinct apps.", + "/* `composio://` is the scheme the rows are minted at. */", + ' * `provenance === "composio"` was the comparison this replaced.', + " * `enabled` comes off `toolkitOf(url)` and never off the row's id.", + ]; + for (const line of code) { + expect(isComment(line)).toBe(false); + expect(PATTERNS.some((re) => re.test(line))).toBe(true); + } + for (const line of prose) { + // Prose that WOULD match: the skip is what spares it, not a gap in the patterns. + expect(PATTERNS.some((re) => re.test(line))).toBe(true); + expect(isComment(line)).toBe(true); + } +}); diff --git a/server/tests/component-grants-skills-validation.test.ts b/server/tests/component-grants-skills-validation.test.ts index 5728a6d5c..f616bd604 100644 --- a/server/tests/component-grants-skills-validation.test.ts +++ b/server/tests/component-grants-skills-validation.test.ts @@ -2,7 +2,7 @@ import { describe, expect, test } from "bun:test"; import type { MiddlewareHandler } from "hono"; import { Hono } from "hono"; import type { AppVariables } from "../src/auth/guards"; -import type { BotAccessCheck } from "../src/plugins/routes"; +import type { BotAccessCheck } from "../src/agents/profile-policy"; import { createPluginRoutes } from "../src/plugins/routes"; import type { PluginStore } from "../src/plugins/store"; import { createComponentRoutes } from "../src/components/routes"; @@ -23,6 +23,7 @@ const canUseBot: BotAccessCheck = async () => true; function pluginAppWith(calls: { skills: unknown[] }) { const store = { + brokerProvider: "composio" as const, installSkill: async (input: unknown) => { calls.skills.push(input); return { ok: true }; diff --git a/server/tests/composio-adapter.test.ts b/server/tests/composio-adapter.test.ts index e80987a9c..19a7423ba 100644 --- a/server/tests/composio-adapter.test.ts +++ b/server/tests/composio-adapter.test.ts @@ -218,8 +218,210 @@ const BY_HAND_GMAIL = { status: "ENABLED", }; +/* + * THE VENDOR DOUBLES BELOW HONOUR THE QUERY THEY ARE HANDED, and that is half of what this file + * claims about every method that reads a listing. + * + * A double that hands back its rows whatever it was asked cannot tell a correct question from a + * wrong one. Every listing here used to be one: `connectedAccounts.list` answered `ca_1` to any + * person, any app and any set of statuses, and `authConfigs.list` answered gmail's config to a + * question about any app or about none. So the adapter asking about the WRONG PERSON, dropping a + * filter, or reading ANOTHER APP's configs passed every test that was not itself an assertion on + * the query's exact shape — and those were four tests, each of which pinned a query that happened + * to name `user_1` for both of the person's ids. `composio-grants-for.test.ts` and + * `arcade-adapter-connections.test.ts` closed the same blindness in their own files; this is that + * correction for the rest of the Composio adapter. + * + * So each listing double answers as the vendor does: a filter it is given narrows the rows, a + * filter it is NOT given does not — an account listing with no `userIds` is every person's, which + * is the defect at its worst — and every fixture carries rows the right question must leave out. + */ + +/** + * The person every fixture here acts for, in the vendor's spelling. + * + * DIFFERENT FROM THE LOCAL `user_1` ON PURPOSE. `AccountRef` carries both, and every listing, + * link and creation goes out under `vendorUserId`; with the two spelled alike a call made under the + * local id read exactly like the right one. + */ +const VENDOR_USER = "composio_user_1"; + +/** The vendor's account statuses, so a fixture naming one it does not publish is a type error. */ +type AccountStatus = + | "INITIALIZING" + | "INITIATED" + | "ACTIVE" + | "FAILED" + | "EXPIRED" + | "INACTIVE" + | "REVOKED"; + +/** + * A connected account as Composio holds it: the row it would send, and the facts its listing is + * filtered on, kept apart so the routing facts cannot reach the adapter as fields of the row. + * + * Every fact defaults to this file's ordinary case — {@link VENDOR_USER}'s ACTIVE, private gmail + * account on {@link OUR_GMAIL} — so a fixture spells only the fact it is about. `page` is the page + * of the listing the row sits on, for the tests about reading every page. + */ +type HeldAccount = { + row: unknown; + userId?: string; + toolkit?: string; + status?: AccountStatus; + authConfigId?: string; + shared?: boolean; + page?: number; +}; + +/** What the adapter asked an account listing, as the tests below assert it by name. */ +type AccountQuery = { + userIds?: string[]; + toolkitSlugs?: string[]; + statuses?: string[]; + accountType?: string; + authConfigIds?: string[]; + limit?: number; + cursor?: string; +}; + +/** + * Accounts no question about {@link VENDOR_USER}'s gmail may return, whichever method is asking. + * + * One per filter the adapter is responsible for: somebody else's; one filed under the LOCAL id, + * which is a real vendor identity the moment anybody is ever given it; another app's; and a + * tombstone, which neither the gate nor the withdrawal counts. A listing that drops a filter, or + * asks under the wrong id, hands one of these back — and every test below then answers about it. + */ +const NOT_THIS_PERSONS_GMAIL: HeldAccount[] = [ + { row: { id: "ca_somebody_else" }, userId: "composio_user_2" }, + { row: { id: "ca_under_the_local_id" }, userId: "user_1" }, + { row: { id: "ca_another_app" }, toolkit: "slack" }, + { row: { id: "ca_tombstone" }, status: "REVOKED" }, +]; + +/** + * And one the WITHDRAWAL may not reach although the gate counts it: this person's own account on a + * config an operator built by hand. `isConnected` asks of every config, so it is connected; `revoke` + * is scoped to configs this deployment made, so it is not this deployment's to delete. + */ +const ON_AN_OPERATORS_CONFIG: HeldAccount = { + row: { id: "ca_on_an_operators_config" }, + authConfigId: BY_HAND_GMAIL.id, +}; + +/** Every account a question about {@link VENDOR_USER}'s gmail grants by THIS deployment must leave out. */ +const DECOYS: HeldAccount[] = [ + ...NOT_THIS_PERSONS_GMAIL, + ON_AN_OPERATORS_CONFIG, +]; + +/** + * `connectedAccounts.list` as Composio answers it, with the queries it was asked. + * + * A filter that is present narrows; one that is absent does not, which is the vendor's own reading + * (`accountType` defaults to private accounts only). Pages are `page_`, and a cursor is offered + * while any matching row sits on a later page. + */ +function accountListing( + held: HeldAccount[], + decoys: HeldAccount[] = DECOYS, +): { list: (query: unknown) => Promise; asked: AccountQuery[] } { + const asked: AccountQuery[] = []; + const list = async (query: unknown) => { + const q = query as AccountQuery; + asked.push(q); + const matching = [...held, ...decoys].filter( + (account) => + (q.userIds === undefined || + q.userIds.includes(account.userId ?? VENDOR_USER)) && + (q.toolkitSlugs === undefined || + q.toolkitSlugs.includes(account.toolkit ?? "gmail")) && + (q.statuses === undefined || + q.statuses.includes(account.status ?? "ACTIVE")) && + (q.authConfigIds === undefined || + q.authConfigIds.includes(account.authConfigId ?? OUR_GMAIL.id)) && + (q.accountType === "ALL" || account.shared !== true), + ); + const page = q.cursor === undefined ? 1 : Number(q.cursor.slice(5)); + const later = matching.some((account) => (account.page ?? 1) > page); + return { + items: matching + .filter((account) => (account.page ?? 1) === page) + .map((account) => account.row), + nextCursor: later ? `page_${page + 1}` : null, + }; + }; + return { list, asked }; +} + +/** The ordinary case: these rows are {@link VENDOR_USER}'s ACTIVE gmail accounts on our config. */ +function heldAccounts(rows: unknown[]) { + return accountListing(rows.map((row) => ({ row }))).list; +} + +/** + * Another app's config of ours, which a question about any other app must leave out. + * + * ITS ID SORTS FIRST, so an adapter that read the project's whole config listing — no `toolkit` — + * or another app's would take this one wherever it picks the first of ours. + */ +const OUR_SLACK = { + id: "ac_0_slack_ours", + name: "Slack (OpenBot)", + status: "ENABLED", +}; + +/** + * `authConfigs.list` as Composio answers it: scoped to the `toolkit` asked about, and the whole + * project's configs — {@link OUR_SLACK} among them — to a listing that names none. + */ +function configListing(toolkit: string, rows: unknown[]) { + const asked: unknown[] = []; + const byToolkit: Record = { + slack: [OUR_SLACK], + [toolkit]: rows, + }; + const list = async (query: unknown) => { + asked.push(query); + const named = (query as { toolkit?: string }).toolkit; + return { + items: + named === undefined + ? Object.values(byToolkit).flat() + : (byToolkit[named] ?? []), + }; + }; + return { list, asked }; +} + +/** One app's configs, for a double that does not need the queries back. */ +function configsOf(toolkit: string, rows: unknown[]) { + return configListing(toolkit, rows).list; +} + +/** + * `tools.list` as Composio answers it: one app's actions to a listing naming that app, another + * app's to a listing naming that one, and every app's to a listing naming none. + */ +function actionsOf(toolkit: string, rows: unknown[]) { + const byToolkit: Record = { + slack: [{ slug: "SLACK_SEND_MESSAGE", toolkit: { slug: "slack" } }], + [toolkit]: rows, + }; + return async (query: unknown) => { + const named = (query as { toolkit_slug?: string }).toolkit_slug; + return { + items: + named === undefined + ? Object.values(byToolkit).flat() + : (byToolkit[named] ?? []), + }; + }; +} + /** That listing as a vendor double, since every withdrawing fixture below needs the same one. */ -const ourGmailConfig = async () => ({ items: [OUR_GMAIL] }); +const ourGmailConfig = configsOf("gmail", [OUR_GMAIL]); /** * The three sentences `authorize` can refuse with, told apart by the remedy each one prescribes. @@ -343,24 +545,23 @@ describe("the page size this file is written against", () => { describe("listing an app's actions", () => { test("the caller's page reaches the vendor, so the vendor's default never applies", async () => { const asked: unknown[] = []; + const gmailActions = actionsOf("gmail", [ + { + slug: "GMAIL_FETCH_EMAILS", + name: "Fetch emails", + description: "Fetch emails from Gmail.", + input_parameters: { type: "object", properties: {} }, + tags: ["readOnlyHint"], + version: "20260903_00", + toolkit: { slug: "gmail" }, + }, + ]); const { actions } = buildComposioClient( fakeVendor({ tools: { list: async (query: unknown) => { asked.push(query); - return { - items: [ - { - slug: "GMAIL_FETCH_EMAILS", - name: "Fetch emails", - description: "Fetch emails from Gmail.", - input_parameters: { type: "object", properties: {} }, - tags: ["readOnlyHint"], - version: "20260903_00", - toolkit: { slug: "gmail" }, - }, - ], - }; + return gmailActions(query); }, }, }), @@ -487,6 +688,11 @@ describe("the app catalogue", () => { logo: "https://logos.composio.dev/gmail.png", categories: ["Productivity", "Email"], actionCount: 63, + // Composio measures none of the three, so each is an explicit null: "not measured", which is + // a different fact from "measured, and none" and must never be read through a `?? 0`. + classifiedCount: null, + permissionCount: null, + scopedActionCount: null, connection: NO_SCHEME, }, { @@ -496,6 +702,11 @@ describe("the app catalogue", () => { logo: null, categories: [], actionCount: 0, + // Composio measures none of the three, so each is an explicit null: "not measured", which is + // a different fact from "measured, and none" and must never be read through a `?? 0`. + classifiedCount: null, + permissionCount: null, + scopedActionCount: null, connection: NO_SCHEME, }, ]); @@ -531,6 +742,11 @@ describe("holding the catalogue", () => { logo: null, categories: [], actionCount: 63, + // Composio measures none of the three, so each is an explicit null: "not measured", which is + // a different fact from "measured, and none" and must never be read through a `?? 0`. + classifiedCount: null, + permissionCount: null, + scopedActionCount: null, connection: NO_SCHEME, }; @@ -602,6 +818,11 @@ describe("holding the catalogue", () => { logo: null, categories: [], actionCount: 12, + // Composio measures none of the three, so each is an explicit null: "not measured", which is + // a different fact from "measured, and none" and must never be read through a `?? 0`. + classifiedCount: null, + permissionCount: null, + scopedActionCount: null, connection: NO_SCHEME, }, ]); @@ -873,23 +1094,16 @@ describe("executing an action", () => { describe("beginning one person's connection", () => { test("the link carries the page this deployment sends them back to", async () => { const linked: unknown[] = []; - const listed: unknown[] = []; + const { list, asked: listed } = configListing("linear", [ + { + id: "ac_this_deployments", + name: "Linear (OpenBot)", + status: "ENABLED", + }, + ]); const { broker } = buildComposioClient( fakeVendor({ - authConfigs: { - list: async (query: unknown) => { - listed.push(query); - return { - items: [ - { - id: "ac_this_deployments", - name: "Linear (OpenBot)", - status: "ENABLED", - }, - ], - }; - }, - }, + authConfigs: { list }, connectedAccounts: { link: async (...call: unknown[]) => { linked.push(call); @@ -900,7 +1114,11 @@ describe("beginning one person's connection", () => { ); const begun = await broker.authorize({ - account: { holder: "person", userId: "user_1", vendorUserId: "user_1" }, + account: { + holder: "person", + userId: "user_1", + vendorUserId: VENDOR_USER, + }, toolkit: "linear", returnUrl: "https://openbot.test/settings/connected-accounts/composio-linear", @@ -914,7 +1132,7 @@ describe("beginning one person's connection", () => { ]); expect(linked).toEqual([ [ - "user_1", + VENDOR_USER, "ac_this_deployments", { callbackUrl: @@ -924,6 +1142,8 @@ describe("beginning one person's connection", () => { ]); expect(begun).toEqual({ redirectUrl: "https://backend.composio.dev/s/a-link", + // Declared null: Composio's return leg is correlated by sealed state, not by a broker id. + authorizationId: null, }); }); @@ -938,7 +1158,7 @@ describe("beginning one person's connection", () => { const linked: unknown[] = []; const { broker } = buildComposioClient( fakeVendor({ - authConfigs: { list: async () => ({ items: [] }) }, + authConfigs: { list: configsOf("linear", []) }, connectedAccounts: { link: async (...call: unknown[]) => { linked.push(call); @@ -949,7 +1169,11 @@ describe("beginning one person's connection", () => { ); const refused = broker.authorize({ - account: { holder: "person", userId: "user_1", vendorUserId: "user_1" }, + account: { + holder: "person", + userId: "user_1", + vendorUserId: VENDOR_USER, + }, toolkit: "linear", returnUrl: "https://openbot.test/settings/connected-accounts/composio-linear", @@ -998,7 +1222,7 @@ describe("telling this deployment's auth configs from anybody else's", () => { const linked: unknown[] = []; const { broker } = buildComposioClient( fakeVendor({ - authConfigs: { list: async () => ({ items: MIXED }) }, + authConfigs: { list: configsOf("linear", MIXED) }, connectedAccounts: { link: async (...call: unknown[]) => { linked.push(call); @@ -1009,7 +1233,11 @@ describe("telling this deployment's auth configs from anybody else's", () => { ); await broker.authorize({ - account: { holder: "person", userId: "user_1", vendorUserId: "user_1" }, + account: { + holder: "person", + userId: "user_1", + vendorUserId: VENDOR_USER, + }, toolkit: "linear", returnUrl: "https://openbot.test/settings/connected-accounts/x", }); @@ -1019,7 +1247,7 @@ describe("telling this deployment's auth configs from anybody else's", () => { // the hand-made one is not a mistake a later call can correct. expect(linked).toEqual([ [ - "user_1", + VENDOR_USER, "ac_ours", { callbackUrl: "https://openbot.test/settings/connected-accounts/x" }, ], @@ -1031,7 +1259,7 @@ describe("telling this deployment's auth configs from anybody else's", () => { const { broker } = buildComposioClient( fakeVendor({ authConfigs: { - list: async () => ({ items: [BY_HAND] }), + list: configsOf("linear", [BY_HAND]), }, connectedAccounts: { link: async (...call: unknown[]) => { @@ -1043,7 +1271,11 @@ describe("telling this deployment's auth configs from anybody else's", () => { ); const refused = broker.authorize({ - account: { holder: "person", userId: "user_1", vendorUserId: "user_1" }, + account: { + holder: "person", + userId: "user_1", + vendorUserId: VENDOR_USER, + }, toolkit: "linear", returnUrl: "https://openbot.test/settings/connected-accounts/x", }); @@ -1066,7 +1298,7 @@ describe("telling this deployment's auth configs from anybody else's", () => { // Both of ours go — leaving one behind would leave live grants — and the hand-made // one stands. The listing arrives spare-first, so the order asserted below is the sort's // and not the vendor's. - list: async () => ({ items: MIXED }), + list: configsOf("linear", MIXED), delete: async (...call: unknown[]) => { deleted.push(call); }, @@ -1098,7 +1330,7 @@ describe("telling this deployment's auth configs from anybody else's", () => { const { broker } = buildComposioClient( fakeVendor({ authConfigs: { - list: async () => ({ items: MIXED }), + list: configsOf("linear", MIXED), delete: async (id: string) => { if (id === "ac_ours_spare") { throw new Error("Composio refused that one."); @@ -1125,9 +1357,9 @@ describe("telling this deployment's auth configs from anybody else's", () => { * grants on it, same accounts connected against it; the one field that changed is the * only one this file writes and the only one it can recognise itself by. */ - list: async () => ({ - items: [{ id: "ac_ours", name: "Linear", status: "ENABLED" }], - }), + list: configsOf("linear", [ + { id: "ac_ours", name: "Linear", status: "ENABLED" }, + ]), delete: async (...call: unknown[]) => { deleted.push(call); }, @@ -1174,12 +1406,10 @@ describe("telling this deployment's auth configs from anybody else's", () => { const { broker } = buildComposioClient( fakeVendor({ authConfigs: { - list: async () => ({ - items: [ - { id: "ac_theirs", name: "Linear", status: "ENABLED" }, - { id: "ac_nameless", status: "ENABLED" }, - ], - }), + list: configsOf("linear", [ + { id: "ac_theirs", name: "Linear", status: "ENABLED" }, + { id: "ac_nameless", status: "ENABLED" }, + ]), delete: async (...call: unknown[]) => { deleted.push(call); }, @@ -1251,7 +1481,7 @@ describe("telling this deployment's auth configs from anybody else's", () => { const { broker } = buildComposioClient( fakeVendor({ authConfigs: { - list: async () => ({ items: [OURS, OURS, OURS_SPARE] }), + list: configsOf("linear", [OURS, OURS, OURS_SPARE]), delete: async (id: string) => { if (id === "ac_ours_spare") { throw new Error("Composio refused that one."); @@ -1363,9 +1593,10 @@ describe("telling this deployment's auth configs from anybody else's", () => { const { broker } = buildComposioClient( fakeVendor({ authConfigs: { - list: async () => ({ - items: [{ id: "ac_nameless", status: "ENABLED" }, OURS], - }), + list: configsOf("linear", [ + { id: "ac_nameless", status: "ENABLED" }, + OURS, + ]), }, connectedAccounts: { link: async (...call: unknown[]) => { @@ -1377,13 +1608,17 @@ describe("telling this deployment's auth configs from anybody else's", () => { ); await broker.authorize({ - account: { holder: "person", userId: "user_1", vendorUserId: "user_1" }, + account: { + holder: "person", + userId: "user_1", + vendorUserId: VENDOR_USER, + }, toolkit: "linear", returnUrl: RETURN_URL, }); expect(linked).toEqual([ - ["user_1", "ac_ours", { callbackUrl: RETURN_URL }], + [VENDOR_USER, "ac_ours", { callbackUrl: RETURN_URL }], ]); }); @@ -1398,7 +1633,7 @@ describe("telling this deployment's auth configs from anybody else's", () => { const { broker } = buildComposioClient( fakeVendor({ authConfigs: { - list: async () => ({ items: [{ id: "ac_nameless" }] }), + list: configsOf("linear", [{ id: "ac_nameless" }]), }, connectedAccounts: { link: async (...call: unknown[]) => { @@ -1411,7 +1646,11 @@ describe("telling this deployment's auth configs from anybody else's", () => { const refusal = await failureOf( broker.authorize({ - account: { holder: "person", userId: "user_1", vendorUserId: "user_1" }, + account: { + holder: "person", + userId: "user_1", + vendorUserId: VENDOR_USER, + }, toolkit: "linear", returnUrl: RETURN_URL, }), @@ -1445,7 +1684,7 @@ describe("telling this deployment's auth configs from anybody else's", () => { const { broker } = buildComposioClient( fakeVendor({ authConfigs: { - list: async () => ({ items: [{ id: "ac_nameless" }] }), + list: configsOf("linear", [{ id: "ac_nameless" }]), create: async (...call: unknown[]) => { created.push(call); return CREATED; @@ -1486,7 +1725,7 @@ describe("telling this deployment's auth configs from anybody else's", () => { const { broker } = buildComposioClient( fakeVendor({ authConfigs: { - list: async () => ({ items: [] }), + list: configsOf("linear", []), delete: async (...call: unknown[]) => { deleted.push(call); }, @@ -1505,11 +1744,9 @@ describe("telling this deployment's auth configs from anybody else's", () => { authConfigs: { // Disabled configs are asked for, because this listing is what decides whether to create. // A listing that omitted them would find nothing and create the split it exists to stop. - list: async () => ({ - items: [ - { id: "ac_ours", name: "Linear (OpenBot)", status: "DISABLED" }, - ], - }), + list: configsOf("linear", [ + { id: "ac_ours", name: "Linear (OpenBot)", status: "DISABLED" }, + ]), create: async (...call: unknown[]) => { created.push(call); }, @@ -1531,11 +1768,9 @@ describe("telling this deployment's auth configs from anybody else's", () => { const { broker } = buildComposioClient( fakeVendor({ authConfigs: { - list: async () => ({ - items: [ - { id: "ac_ours", name: "Linear (OpenBot)", status: "DISABLED" }, - ], - }), + list: configsOf("linear", [ + { id: "ac_ours", name: "Linear (OpenBot)", status: "DISABLED" }, + ]), }, connectedAccounts: { link: async (...call: unknown[]) => { @@ -1547,7 +1782,11 @@ describe("telling this deployment's auth configs from anybody else's", () => { ); const refused = broker.authorize({ - account: { holder: "person", userId: "user_1", vendorUserId: "user_1" }, + account: { + holder: "person", + userId: "user_1", + vendorUserId: VENDOR_USER, + }, toolkit: "linear", returnUrl: "https://openbot.test/settings/connected-accounts/x", }); @@ -1579,12 +1818,10 @@ describe("telling this deployment's auth configs from anybody else's", () => { const { broker } = buildComposioClient( fakeVendor({ authConfigs: { - list: async () => ({ - items: [ - { id: "ac_a", name: "Linear (OpenBot)", status: "DISABLED" }, - { id: "ac_b", name: "Linear (OpenBot)", status: "PENDING" }, - ], - }), + list: configsOf("linear", [ + { id: "ac_a", name: "Linear (OpenBot)", status: "DISABLED" }, + { id: "ac_b", name: "Linear (OpenBot)", status: "PENDING" }, + ]), }, connectedAccounts: { link: async (...call: unknown[]) => { @@ -1598,7 +1835,11 @@ describe("telling this deployment's auth configs from anybody else's", () => { const refusal = await failureOf( broker.authorize({ - account: { holder: "person", userId: "user_1", vendorUserId: "user_1" }, + account: { + holder: "person", + userId: "user_1", + vendorUserId: VENDOR_USER, + }, toolkit: "linear", returnUrl: RETURN_URL, }), @@ -1619,7 +1860,7 @@ describe("telling this deployment's auth configs from anybody else's", () => { const { broker } = buildComposioClient( fakeVendor({ authConfigs: { - list: async () => ({ items: [BY_HAND] }), + list: configsOf("linear", [BY_HAND]), create: async (...call: unknown[]) => { created.push(call); return CREATED; @@ -1665,7 +1906,7 @@ describe("the config each kind of app is enabled with", () => { const { broker } = buildComposioClient( fakeVendor({ authConfigs: { - list: async () => ({ items: [] }), + list: configsOf("linear_mcp", []), create: async (...call: unknown[]) => { created.push(call); return CREATED; @@ -1704,7 +1945,7 @@ describe("the config each kind of app is enabled with", () => { const { broker } = buildComposioClient( fakeVendor({ authConfigs: { - list: async () => ({ items: [] }), + list: configsOf("perplexityai", []), create: async (...call: unknown[]) => { created.push(call); return CREATED; @@ -1772,7 +2013,7 @@ describe("the config each kind of app is enabled with", () => { const { broker } = buildComposioClient( fakeVendor({ authConfigs: { - list: async () => ({ items: [] }), + list: configsOf("docusign", []), }, }), ); @@ -1818,7 +2059,7 @@ describe("withdrawing one person's grants", () => { fakeVendor({ authConfigs: { list: ourGmailConfig }, connectedAccounts: { - list: async () => ({ items: [{ id: "ca_1" }] }), + list: heldAccounts([{ id: "ca_1" }]), delete: async (...call: unknown[]) => { deleted.push(call); return WITHDRAWN; @@ -1829,7 +2070,11 @@ describe("withdrawing one person's grants", () => { expect( await broker.revoke({ - account: { holder: "person", userId: "user_1", vendorUserId: "user_1" }, + account: { + holder: "person", + userId: "user_1", + vendorUserId: VENDOR_USER, + }, toolkit: "gmail", }), ).toBe(true); @@ -1841,7 +2086,7 @@ describe("withdrawing one person's grants", () => { fakeVendor({ authConfigs: { list: ourGmailConfig }, connectedAccounts: { - list: async () => ({ items: [{ id: "ca_1" }] }), + list: heldAccounts([{ id: "ca_1" }]), // A 200 whose body says the account was not deleted. The flag went out, Composio read // the request and answered it — this is the vendor declining, not failing. delete: async () => ({ success: false }), @@ -1860,7 +2105,11 @@ describe("withdrawing one person's grants", () => { */ const refusal = await failureOf( broker.revoke({ - account: { holder: "person", userId: "user_1", vendorUserId: "user_1" }, + account: { + holder: "person", + userId: "user_1", + vendorUserId: VENDOR_USER, + }, toolkit: "gmail", }), ); @@ -1878,7 +2127,7 @@ describe("withdrawing one person's grants", () => { fakeVendor({ authConfigs: { list: ourGmailConfig }, connectedAccounts: { - list: async () => ({ items: [{ id: "ca_1" }] }), + list: heldAccounts([{ id: "ca_1" }]), /* * `success` IS REQUIRED IN THE DECLARATION AND ABSENT ON THIS WIRE, which is the shape * the check has to survive rather than the one it is for. `@composio/client` parses the @@ -1892,7 +2141,11 @@ describe("withdrawing one person's grants", () => { const refusal = await failureOf( broker.revoke({ - account: { holder: "person", userId: "user_1", vendorUserId: "user_1" }, + account: { + holder: "person", + userId: "user_1", + vendorUserId: VENDOR_USER, + }, toolkit: "gmail", }), ); @@ -1926,7 +2179,7 @@ describe("withdrawing one person's grants", () => { fakeVendor({ authConfigs: { list: ourGmailConfig }, connectedAccounts: { - list: async () => ({ items: [{ id: "ca_1" }] }), + list: heldAccounts([{ id: "ca_1" }]), delete: async () => "deleted", }, }), @@ -1934,7 +2187,11 @@ describe("withdrawing one person's grants", () => { const refusal = await failureOf( broker.revoke({ - account: { holder: "person", userId: "user_1", vendorUserId: "user_1" }, + account: { + holder: "person", + userId: "user_1", + vendorUserId: VENDOR_USER, + }, toolkit: "gmail", }), ); @@ -1948,22 +2205,22 @@ describe("withdrawing one person's grants", () => { }); test("the listing asks about every state a grant can be hiding in", async () => { - const asked: unknown[] = []; + // Nothing of this person's to withdraw — only the accounts every filter must leave out. + const { list, asked } = accountListing([]); const { broker } = buildComposioClient( fakeVendor({ authConfigs: { list: ourGmailConfig }, - connectedAccounts: { - list: async (query: unknown) => { - asked.push(query); - return { items: [] }; - }, - }, + connectedAccounts: { list }, }), ); expect( await broker.revoke({ - account: { holder: "person", userId: "user_1", vendorUserId: "user_1" }, + account: { + holder: "person", + userId: "user_1", + vendorUserId: VENDOR_USER, + }, toolkit: "gmail", }), ).toBe(false); @@ -1984,7 +2241,7 @@ describe("withdrawing one person's grants", () => { */ expect(asked).toEqual([ { - userIds: ["user_1"], + userIds: [VENDOR_USER], toolkitSlugs: ["gmail"], statuses: [ "INITIALIZING", @@ -2002,21 +2259,22 @@ describe("withdrawing one person's grants", () => { }); test("being connected is a narrower question, and asked as one", async () => { - const asked: unknown[] = []; + // SHARED, so the `true` below is only reachable through `accountType: "ALL"`: the vendor's + // default is private accounts only, and a listing that dropped it would answer `false` here. + const { list, asked } = accountListing([ + { row: { id: "ca_1" }, shared: true }, + ]); const { broker } = buildComposioClient( - fakeVendor({ - connectedAccounts: { - list: async (query: unknown) => { - asked.push(query); - return { items: [{ id: "ca_1" }] }; - }, - }, - }), + fakeVendor({ connectedAccounts: { list } }), ); expect( await broker.isConnected({ - account: { holder: "person", userId: "user_1", vendorUserId: "user_1" }, + account: { + holder: "person", + userId: "user_1", + vendorUserId: VENDOR_USER, + }, toolkit: "gmail", }), ).toBe(true); @@ -2025,7 +2283,7 @@ describe("withdrawing one person's grants", () => { // but `accountType: "ALL"` all the same, because a shared account is a connected account. expect(asked).toEqual([ { - userIds: ["user_1"], + userIds: [VENDOR_USER], toolkitSlugs: ["gmail"], statuses: ["ACTIVE"], accountType: "ALL", @@ -2035,10 +2293,18 @@ describe("withdrawing one person's grants", () => { }); test("nobody with no account for the app is answered no", async () => { + /* + * NOT AN EMPTY LISTING, WHICH ANSWERS `false` TO EVERY QUESTION, RIGHT OR WRONG. The vendor + * holds somebody else's gmail account, one filed under this person's LOCAL id, this person's + * account for another app, a revoked one and an expired one — and an adapter that asked about + * the wrong person, or dropped any filter, finds one of them and opens the gate. + */ + const { list, asked } = accountListing( + [{ row: { id: "ca_expired" }, status: "EXPIRED" }], + NOT_THIS_PERSONS_GMAIL, + ); const { broker } = buildComposioClient( - fakeVendor({ - connectedAccounts: { list: async () => ({ items: [] }) }, - }), + fakeVendor({ connectedAccounts: { list } }), () => 1_000_000, ); @@ -2050,10 +2316,16 @@ describe("withdrawing one person's grants", () => { */ expect( await broker.isConnected({ - account: { holder: "person", userId: "user_1", vendorUserId: "user_1" }, + account: { + holder: "person", + userId: "user_1", + vendorUserId: VENDOR_USER, + }, toolkit: "gmail", }), ).toBe(false); + // And it was a question that was asked, rather than a `false` reached without one. + expect(asked.map((query) => query.userIds)).toEqual([[VENDOR_USER]]); }); /** @@ -2086,11 +2358,19 @@ describe("withdrawing one person's grants", () => { ); await broker.isConnected({ - account: { holder: "person", userId: "user_1", vendorUserId: "user_1" }, + account: { + holder: "person", + userId: "user_1", + vendorUserId: VENDOR_USER, + }, toolkit: "gmail", }); await broker.isConnected({ - account: { holder: "person", userId: "user_1", vendorUserId: "user_1" }, + account: { + holder: "person", + userId: "user_1", + vendorUserId: VENDOR_USER, + }, toolkit: "gmail", }); @@ -2103,9 +2383,7 @@ describe("withdrawing one person's grants", () => { fakeVendor({ authConfigs: { list: ourGmailConfig }, connectedAccounts: { - list: async () => ({ - items: [{ id: "ca_1" }, { id: "ca_2" }, { id: "ca_3" }], - }), + list: heldAccounts([{ id: "ca_1" }, { id: "ca_2" }, { id: "ca_3" }]), delete: async (id: string) => { if (id === "ca_2") throw new Error("Composio refused that one."); deleted.push(id); @@ -2116,7 +2394,11 @@ describe("withdrawing one person's grants", () => { ); const refused = broker.revoke({ - account: { holder: "person", userId: "user_1", vendorUserId: "user_1" }, + account: { + holder: "person", + userId: "user_1", + vendorUserId: VENDOR_USER, + }, toolkit: "gmail", }); @@ -2131,7 +2413,7 @@ describe("withdrawing one person's grants", () => { fakeVendor({ authConfigs: { list: ourGmailConfig }, connectedAccounts: { - list: async () => ({ items: [{ id: "ca_1" }, { id: "ca_2" }] }), + list: heldAccounts([{ id: "ca_1" }, { id: "ca_2" }]), delete: async (id: string) => { if (id === "ca_2") throw new Error("Composio refused that one."); return WITHDRAWN; @@ -2149,7 +2431,11 @@ describe("withdrawing one person's grants", () => { */ await expect( broker.revoke({ - account: { holder: "person", userId: "user_1", vendorUserId: "user_1" }, + account: { + holder: "person", + userId: "user_1", + vendorUserId: VENDOR_USER, + }, toolkit: "gmail", }), ).rejects.toBeInstanceOf(BrokerRefusalError); @@ -2176,9 +2462,7 @@ describe("withdrawing one person's grants", () => { fakeVendor({ authConfigs: { list: ourGmailConfig }, connectedAccounts: { - list: async () => ({ - items: [{ id: "ca_1" }, { id: null }, { id: "ca_3" }], - }), + list: heldAccounts([{ id: "ca_1" }, { id: null }, { id: "ca_3" }]), delete: async (id: string) => { deleted.push(id); return WITHDRAWN; @@ -2190,7 +2474,11 @@ describe("withdrawing one person's grants", () => { const failure = await failureOf( broker.revoke({ - account: { holder: "person", userId: "user_1", vendorUserId: "user_1" }, + account: { + holder: "person", + userId: "user_1", + vendorUserId: VENDOR_USER, + }, toolkit: "gmail", }), ); @@ -2234,12 +2522,10 @@ describe("withdrawing one person's grants", () => { const { broker } = buildComposioClient( fakeVendor({ authConfigs: { - list: async () => ({ - items: [{ id: "ac_gmail_nameless" }, OUR_GMAIL], - }), + list: configsOf("gmail", [{ id: "ac_gmail_nameless" }, OUR_GMAIL]), }, connectedAccounts: { - list: async () => ({ items: [{ id: "ca_1" }] }), + list: heldAccounts([{ id: "ca_1" }]), delete: async (id: string) => { deleted.push(id); return WITHDRAWN; @@ -2251,7 +2537,11 @@ describe("withdrawing one person's grants", () => { const failure = await failureOf( broker.revoke({ - account: { holder: "person", userId: "user_1", vendorUserId: "user_1" }, + account: { + holder: "person", + userId: "user_1", + vendorUserId: VENDOR_USER, + }, toolkit: "gmail", }), ); @@ -2302,18 +2592,20 @@ describe("withdrawing one person's grants", () => { const { broker } = buildComposioClient( fakeVendor({ authConfigs: { - list: async () => ({ - items: [{ id: "ac_gmail_nameless" }, OUR_GMAIL], - }), + list: configsOf("gmail", [{ id: "ac_gmail_nameless" }, OUR_GMAIL]), }, - connectedAccounts: { list: async () => ({ items: [] }) }, + connectedAccounts: { list: heldAccounts([]) }, }), () => 1_000_000, ); const failure = await failureOf( broker.revoke({ - account: { holder: "person", userId: "user_1", vendorUserId: "user_1" }, + account: { + holder: "person", + userId: "user_1", + vendorUserId: VENDOR_USER, + }, toolkit: "gmail", }), ); @@ -2343,14 +2635,18 @@ describe("withdrawing one person's grants", () => { test("an account the vendor described without an id still counts as connected", async () => { const { broker } = buildComposioClient( fakeVendor({ - connectedAccounts: { list: async () => ({ items: [{}] }) }, + connectedAccounts: { list: heldAccounts([{}]) }, }), () => 1_000_000, ); expect( await broker.isConnected({ - account: { holder: "person", userId: "user_1", vendorUserId: "user_1" }, + account: { + holder: "person", + userId: "user_1", + vendorUserId: VENDOR_USER, + }, toolkit: "gmail", }), ).toBe(true); @@ -2375,20 +2671,19 @@ describe("withdrawing one person's grants", () => { * deleted everything it found answers this test's `true` just as confidently. */ test("the withdrawal asks only about accounts on configs this deployment made", async () => { - const scoped: unknown[] = []; const deleted: string[] = []; + // {@link DECOYS} carries this person's own gmail account on the operator's config, so an + // unscoped question hands it back and the delete below names it. + const { list, asked } = accountListing([{ row: { id: "ca_1" } }]); const { broker } = buildComposioClient( fakeVendor({ authConfigs: { // An operator's beside ours, which is the state the whole guard is about. Out of the // vendor's order, so a reader that took the first row would take the wrong one. - list: async () => ({ items: [BY_HAND_GMAIL, OUR_GMAIL] }), + list: configsOf("gmail", [BY_HAND_GMAIL, OUR_GMAIL]), }, connectedAccounts: { - list: async (query: unknown) => { - scoped.push((query as { authConfigIds?: unknown }).authConfigIds); - return { items: [{ id: "ca_1" }] }; - }, + list, delete: async (id: string) => { deleted.push(id); return WITHDRAWN; @@ -2399,14 +2694,18 @@ describe("withdrawing one person's grants", () => { expect( await broker.revoke({ - account: { holder: "person", userId: "user_1", vendorUserId: "user_1" }, + account: { + holder: "person", + userId: "user_1", + vendorUserId: VENDOR_USER, + }, toolkit: "gmail", }), ).toBe(true); // The operator's config is not in the question, so no account on it can be in the answer and // none of them can reach the delete. - expect(scoped).toEqual([[OUR_GMAIL.id]]); + expect(asked.map((query) => query.authConfigIds)).toEqual([[OUR_GMAIL.id]]); expect(deleted).toEqual(["ca_1"]); }); @@ -2426,12 +2725,16 @@ describe("withdrawing one person's grants", () => { */ test("a person's accounts are not listed where Composio holds no config for the app", async () => { const { broker } = buildComposioClient( - fakeVendor({ authConfigs: { list: async () => ({ items: [] }) } }), + fakeVendor({ authConfigs: { list: configsOf("gmail", []) } }), ); expect( await broker.revoke({ - account: { holder: "person", userId: "user_1", vendorUserId: "user_1" }, + account: { + holder: "person", + userId: "user_1", + vendorUserId: VENDOR_USER, + }, toolkit: "gmail", }), ).toBe(false); @@ -2461,13 +2764,17 @@ describe("withdrawing one person's grants", () => { test("an app whose configs no longer carry this deployment's name is not a quiet disconnection", async () => { const { broker } = buildComposioClient( fakeVendor({ - authConfigs: { list: async () => ({ items: [BY_HAND_GMAIL] }) }, + authConfigs: { list: configsOf("gmail", [BY_HAND_GMAIL]) }, }), ); const refusal = await failureOf( broker.revoke({ - account: { holder: "person", userId: "user_1", vendorUserId: "user_1" }, + account: { + holder: "person", + userId: "user_1", + vendorUserId: VENDOR_USER, + }, toolkit: "gmail", }), ); @@ -2508,7 +2815,7 @@ describe("withdrawing one person's grants", () => { fakeVendor({ authConfigs: { list: ourGmailConfig }, connectedAccounts: { - list: async () => ({ items: [{ id: "ca_1" }] }), + list: heldAccounts([{ id: "ca_1" }]), delete: async (id: string) => { deleted.push(id); return answer; @@ -2522,7 +2829,7 @@ describe("withdrawing one person's grants", () => { account: { holder: "person", userId: "user_1", - vendorUserId: "user_1", + vendorUserId: VENDOR_USER, }, toolkit: "gmail", }), @@ -2554,10 +2861,10 @@ describe("withdrawing one person's grants", () => { fakeVendor({ authConfigs: { list: ourGmailConfig }, connectedAccounts: { - list: async (query: unknown) => - (query as { cursor?: string }).cursor === undefined - ? { items: [{ id: "ca_1" }], nextCursor: "page_2" } - : { items: [{ id: "ca_1" }], nextCursor: null }, + list: accountListing([ + { row: { id: "ca_1" }, page: 1 }, + { row: { id: "ca_1" }, page: 2 }, + ]).list, delete: async (id: string) => { if (deleted.includes(id)) { throw new Error( @@ -2573,7 +2880,11 @@ describe("withdrawing one person's grants", () => { expect( await broker.revoke({ - account: { holder: "person", userId: "user_1", vendorUserId: "user_1" }, + account: { + holder: "person", + userId: "user_1", + vendorUserId: VENDOR_USER, + }, toolkit: "gmail", }), ).toBe(true); @@ -2593,9 +2904,7 @@ describe("withdrawing one person's grants", () => { fakeVendor({ authConfigs: { list: ourGmailConfig }, connectedAccounts: { - list: async () => ({ - items: [{ id: "ca_1" }, { id: "ca_1" }, { id: "ca_2" }], - }), + list: heldAccounts([{ id: "ca_1" }, { id: "ca_1" }, { id: "ca_2" }]), delete: async (id: string) => { if (id === "ca_2") throw new Error("Composio refused this one."); return WITHDRAWN; @@ -2607,7 +2916,11 @@ describe("withdrawing one person's grants", () => { const failure = await failureOf( broker.revoke({ - account: { holder: "person", userId: "user_1", vendorUserId: "user_1" }, + account: { + holder: "person", + userId: "user_1", + vendorUserId: VENDOR_USER, + }, toolkit: "gmail", }), ); @@ -2632,7 +2945,7 @@ describe("withdrawing one person's grants", () => { fakeVendor({ authConfigs: { list: ourGmailConfig }, connectedAccounts: { - list: async () => ({ items: [{}, { id: "ca_refused" }] }), + list: heldAccounts([{}, { id: "ca_refused" }]), delete: refuse("this account's withdrawal"), }, }), @@ -2641,7 +2954,11 @@ describe("withdrawing one person's grants", () => { const failure = await failureOf( broker.revoke({ - account: { holder: "person", userId: "user_1", vendorUserId: "user_1" }, + account: { + holder: "person", + userId: "user_1", + vendorUserId: VENDOR_USER, + }, toolkit: "gmail", }), ); @@ -2675,12 +2992,10 @@ describe("withdrawing one person's grants", () => { const { broker } = buildComposioClient( fakeVendor({ authConfigs: { - list: async () => ({ - items: [ - { id: "ac_theirs", name: "Gmail", status: "ENABLED" }, - { id: "ac_nameless", status: "ENABLED" }, - ], - }), + list: configsOf("gmail", [ + { id: "ac_theirs", name: "Gmail", status: "ENABLED" }, + { id: "ac_nameless", status: "ENABLED" }, + ]), }, connectedAccounts: { delete: async (id: string) => { @@ -2694,7 +3009,11 @@ describe("withdrawing one person's grants", () => { const failure = await failureOf( broker.revoke({ - account: { holder: "person", userId: "user_1", vendorUserId: "user_1" }, + account: { + holder: "person", + userId: "user_1", + vendorUserId: VENDOR_USER, + }, toolkit: "gmail", }), ); @@ -2728,7 +3047,11 @@ describe("refusals a route can tell from an outage", () => { const error = await broker .authorize({ - account: { holder: "person", userId: "user_1", vendorUserId: "user_1" }, + account: { + holder: "person", + userId: "user_1", + vendorUserId: VENDOR_USER, + }, toolkit: "linear", returnUrl: "https://openbot.test/settings/connected-accounts/x", }) @@ -2759,7 +3082,11 @@ describe("refusals a route can tell from an outage", () => { const error = await broker .authorize({ - account: { holder: "person", userId: "user_1", vendorUserId: "user_1" }, + account: { + holder: "person", + userId: "user_1", + vendorUserId: VENDOR_USER, + }, toolkit: "linear", returnUrl: "https://openbot.test/settings/connected-accounts/x", }) @@ -2872,6 +3199,11 @@ describe("a catalogue that might be a fragment", () => { logo: null, categories: ["Productivity"], actionCount: 63, + // Composio measures none of the three, so each is an explicit null: "not measured", which is + // a different fact from "measured, and none" and must never be read through a `?? 0`. + classifiedCount: null, + permissionCount: null, + scopedActionCount: null, connection: NO_SCHEME, }, ]); @@ -3038,6 +3370,12 @@ describe("what a vendor failure becomes on its way out of the seam", () => { because: "Minting the link failed with nothing said. Nobody was sent anywhere and nothing was attached, so trying again is the whole of the advice.", }, + { + method: "grantsFor", + kind: "an outage", + because: + "The account listing did not answer. Nothing is granted or spent by asking what somebody holds, and the page this fills in has the route's own advice — the deployment's key, the vendor's status page — to show instead.", + }, { method: "isConnected", kind: "an outage", @@ -3090,6 +3428,20 @@ describe("what a vendor failure becomes on its way out of the seam", () => { GENUINE_OUTAGES.map((outage) => `${outage.method}/${outage.kind}`), ); + /** + * The seam methods that REACH NO VENDOR, named here rather than quietly filtered. + * + * `authProviderOf` answers from the shape of Composio itself — a connection is made against an + * auth config and an auth config is per toolkit, so a toolkit IS its own auth provider — and it + * therefore asks nobody anything. A row in the table below would have to invent a vendor call for + * it to break on, which would assert something about the fake and nothing about the method. + * + * NAMING IT IS WHAT KEEPS THE COMPLETENESS TEST HONEST IN BOTH DIRECTIONS: the next method added + * to this seam is covered by the table or appears on this list on purpose, and the test below + * then checks that what is on this list genuinely dials nothing. + */ + const DIALS_NOTHING = new Set(["authProviderOf"]); + /** * Every method of the seam, with the vendor call that decides its answer aimed at the throw. * @@ -3139,12 +3491,27 @@ describe("what a vendor failure becomes on its way out of the seam", () => { account: { holder: "person", userId: "user_1", - vendorUserId: "user_1", + vendorUserId: VENDOR_USER, }, toolkit: "linear", returnUrl: RETURN_URL, }), }, + { + // The account listing is the first of the three `grantsFor` reads, and the only one a + // failure here can reach: the config listing and the action listing come after it. + method: "grantsFor", + vendor: (raise) => ({ connectedAccounts: { list: raise } }), + ask: ({ broker }) => + broker.grantsFor({ + account: { + holder: "person", + userId: "user_1", + vendorUserId: VENDOR_USER, + }, + toolkit: "gmail", + }), + }, { method: "isConnected", vendor: (raise) => ({ connectedAccounts: { list: raise } }), @@ -3153,7 +3520,7 @@ describe("what a vendor failure becomes on its way out of the seam", () => { account: { holder: "person", userId: "user_1", - vendorUserId: "user_1", + vendorUserId: VENDOR_USER, }, toolkit: "gmail", }), @@ -3166,7 +3533,7 @@ describe("what a vendor failure becomes on its way out of the seam", () => { account: { holder: "person", userId: "user_1", - vendorUserId: "user_1", + vendorUserId: VENDOR_USER, }, toolkit: "gmail", }), @@ -3178,7 +3545,7 @@ describe("what a vendor failure becomes on its way out of the seam", () => { // deployment's to end before it asks for any account at all. authConfigs: { list: ourGmailConfig }, connectedAccounts: { - list: async () => ({ items: [{ id: "ca_1" }] }), + list: heldAccounts([{ id: "ca_1" }]), delete: raise, }, }), @@ -3187,7 +3554,7 @@ describe("what a vendor failure becomes on its way out of the seam", () => { account: { holder: "person", userId: "user_1", - vendorUserId: "user_1", + vendorUserId: VENDOR_USER, }, toolkit: "gmail", }), @@ -3215,7 +3582,7 @@ describe("what a vendor failure becomes on its way out of the seam", () => { account: { holder: "person", userId: "user_1", - vendorUserId: "user_1", + vendorUserId: VENDOR_USER, }, toolkit: "linear", authScheme: "API_KEY", @@ -3264,9 +3631,35 @@ describe("what a vendor failure becomes on its way out of the seam", () => { // projection arrives in this set, and the table that does not cover it fails here rather than // being the one door nobody thought to probe. const seam = buildComposioClient(fakeVendor({})); + // Methods only: `grantIsLocal` is a declared property of the broker, not a door to probe. + const methodsOf = (part: object) => + Object.entries(part) + .filter(([, member]) => typeof member === "function") + .map(([name]) => name); expect( - [...Object.keys(seam.broker), ...Object.keys(seam.actions)].sort(), + [...methodsOf(seam.broker), ...methodsOf(seam.actions)] + .filter((name) => !DIALS_NOTHING.has(name as SeamMethod)) + .sort(), ).toEqual(SEAM_CASES.map((seamCase) => seamCase.method).sort()); + // Whatever is not a method must be acknowledged by name, so a new non-function member of the + // broker is a decision somebody makes rather than a thing the filter above silently drops. + expect( + Object.entries(seam.broker) + .filter(([, member]) => typeof member !== "function") + .map(([name]) => name), + ).toEqual(["grantIsLocal", "authorizations"]); + }); + + /** + * The other direction of {@link DIALS_NOTHING}: what is excused from the table must genuinely + * have nothing to fail at. The vendor here has no methods at all, so any call out of this seam + * would raise rather than answer. + */ + test("a method excused from the table reaches no vendor at all", async () => { + const { broker } = buildComposioClient(fakeVendor({})); + + expect([...DIALS_NOTHING]).toEqual(["authProviderOf"]); + expect(await broker.authProviderOf("gmail")).toBe("gmail"); }); for (const seamCase of SEAM_CASES) { @@ -3364,7 +3757,11 @@ describe("each vendor condition reaches the reader as its own remedy", () => { () => 1_000_000, ); return broker.authorize({ - account: { holder: "person", userId: "user_1", vendorUserId: "user_1" }, + account: { + holder: "person", + userId: "user_1", + vendorUserId: VENDOR_USER, + }, toolkit: "linear", returnUrl: RETURN_URL, }); @@ -3593,9 +3990,7 @@ describe("what the delete loop keeps of the failures it meets", () => { fakeVendor({ authConfigs: { list: ourGmailConfig }, connectedAccounts: { - list: async () => ({ - items: [{ id: "ca_1" }, { id: "ca_2" }, { id: "ca_3" }], - }), + list: heldAccounts([{ id: "ca_1" }, { id: "ca_2" }, { id: "ca_3" }]), delete: async (id: string) => { if (id !== "ca_1") throw new Error(`Composio refused ${id}.`); return WITHDRAWN; @@ -3607,7 +4002,11 @@ describe("what the delete loop keeps of the failures it meets", () => { const failure = await failureOf( broker.revoke({ - account: { holder: "person", userId: "user_1", vendorUserId: "user_1" }, + account: { + holder: "person", + userId: "user_1", + vendorUserId: VENDOR_USER, + }, toolkit: "gmail", }), ); @@ -3627,7 +4026,7 @@ describe("what the delete loop keeps of the failures it meets", () => { fakeVendor({ authConfigs: { list: ourGmailConfig }, connectedAccounts: { - list: async () => ({ items: [{ id: "ca_1" }, { id: "ca_2" }] }), + list: heldAccounts([{ id: "ca_1" }, { id: "ca_2" }]), delete: async (id: string) => { if (id === "ca_2") throw new Error("Composio refused that one."); return WITHDRAWN; @@ -3639,7 +4038,11 @@ describe("what the delete loop keeps of the failures it meets", () => { const failure = await failureOf( broker.revoke({ - account: { holder: "person", userId: "user_1", vendorUserId: "user_1" }, + account: { + holder: "person", + userId: "user_1", + vendorUserId: VENDOR_USER, + }, toolkit: "gmail", }), ); @@ -3669,9 +4072,7 @@ describe("what the delete loop keeps of the failures it meets", () => { fakeVendor({ authConfigs: { list: ourGmailConfig }, connectedAccounts: { - list: async () => ({ - items: [{ id: "ca_1" }, { id: "ca_2" }, { id: "ca_3" }], - }), + list: heldAccounts([{ id: "ca_1" }, { id: "ca_2" }, { id: "ca_3" }]), delete: async (id: string) => { if (id === "ca_2") { throw new TypeError( @@ -3688,7 +4089,11 @@ describe("what the delete loop keeps of the failures it meets", () => { const failure = await failureOf( broker.revoke({ - account: { holder: "person", userId: "user_1", vendorUserId: "user_1" }, + account: { + holder: "person", + userId: "user_1", + vendorUserId: VENDOR_USER, + }, toolkit: "gmail", }), ); @@ -3707,7 +4112,7 @@ describe("what the delete loop keeps of the failures it meets", () => { const { broker } = buildComposioClient( fakeVendor({ authConfigs: { - list: async () => ({ items: [OURS, OURS_SPARE] }), + list: configsOf("linear", [OURS, OURS_SPARE]), delete: async (id: string) => { throw new Error(`Composio refused ${id}.`); }, @@ -3858,7 +4263,7 @@ describe("a vendor listing that is not the shape it is declared to be", () => { account: { holder: "person", userId: "user_1", - vendorUserId: "user_1", + vendorUserId: VENDOR_USER, }, toolkit: "linear", returnUrl: RETURN_URL, @@ -3909,7 +4314,7 @@ describe("a vendor listing that is not the shape it is declared to be", () => { account: { holder: "person", userId: "user_1", - vendorUserId: "user_1", + vendorUserId: VENDOR_USER, }, toolkit: "gmail", }), @@ -4016,18 +4421,16 @@ describe("a listing that arrived with a cursor still outstanding", () => { ]; test("every page of this person's accounts is read, and every account on them withdrawn", async () => { - const asked: unknown[] = []; const deleted: string[] = []; + const { list, asked } = accountListing([ + { row: { id: "ca_1" }, page: 1 }, + { row: { id: "ca_2" }, page: 2 }, + ]); const { broker } = buildComposioClient( fakeVendor({ authConfigs: { list: ourGmailConfig }, connectedAccounts: { - list: async (query: unknown) => { - asked.push(query); - return (query as { cursor?: string }).cursor === undefined - ? { items: [{ id: "ca_1" }], nextCursor: "page_2" } - : { items: [{ id: "ca_2" }], nextCursor: null }; - }, + list, delete: async (id: string) => { deleted.push(id); return WITHDRAWN; @@ -4038,7 +4441,11 @@ describe("a listing that arrived with a cursor still outstanding", () => { expect( await broker.revoke({ - account: { holder: "person", userId: "user_1", vendorUserId: "user_1" }, + account: { + holder: "person", + userId: "user_1", + vendorUserId: VENDOR_USER, + }, toolkit: "gmail", }), ).toBe(true); @@ -4051,7 +4458,7 @@ describe("a listing that arrived with a cursor still outstanding", () => { // where it left off — which is the half a reader cannot infer from the rows that came back. expect(asked).toEqual([ { - userIds: ["user_1"], + userIds: [VENDOR_USER], toolkitSlugs: ["gmail"], statuses: REVOCABLE_STATUSES, accountType: "ALL", @@ -4059,7 +4466,7 @@ describe("a listing that arrived with a cursor still outstanding", () => { limit: WHOLE_LISTING, }, { - userIds: ["user_1"], + userIds: [VENDOR_USER], toolkitSlugs: ["gmail"], statuses: REVOCABLE_STATUSES, accountType: "ALL", @@ -4074,10 +4481,8 @@ describe("a listing that arrived with a cursor still outstanding", () => { const { broker } = buildComposioClient( fakeVendor({ connectedAccounts: { - list: async (query: unknown) => - (query as { cursor?: string }).cursor === undefined - ? { items: [], nextCursor: "page_2" } - : { items: [{ id: "ca_2" }], nextCursor: null }, + // Page one holds only the accounts this question must leave out. + list: accountListing([{ row: { id: "ca_2" }, page: 2 }]).list, }, }), ); @@ -4087,7 +4492,11 @@ describe("a listing that arrived with a cursor still outstanding", () => { // tells the gate in `./access` that they may not act through one they can. expect( await broker.isConnected({ - account: { holder: "person", userId: "user_1", vendorUserId: "user_1" }, + account: { + holder: "person", + userId: "user_1", + vendorUserId: VENDOR_USER, + }, toolkit: "gmail", }), ).toBe(true); @@ -4152,7 +4561,7 @@ describe("a listing that arrived with a cursor still outstanding", () => { account: { holder: "person", userId: "user_1", - vendorUserId: "user_1", + vendorUserId: VENDOR_USER, }, toolkit: "gmail", }), @@ -4185,7 +4594,11 @@ describe("a listing that arrived with a cursor still outstanding", () => { const failure = await failureOf( broker.isConnected({ - account: { holder: "person", userId: "user_1", vendorUserId: "user_1" }, + account: { + holder: "person", + userId: "user_1", + vendorUserId: VENDOR_USER, + }, toolkit: "gmail", }), ); @@ -4249,7 +4662,11 @@ describe("a listing that arrived with a cursor still outstanding", () => { ); await broker.authorize({ - account: { holder: "person", userId: "user_1", vendorUserId: "user_1" }, + account: { + holder: "person", + userId: "user_1", + vendorUserId: VENDOR_USER, + }, toolkit: "linear", returnUrl: RETURN_URL, }); @@ -4257,7 +4674,7 @@ describe("a listing that arrived with a cursor still outstanding", () => { // Reading one page here answers "this deployment has no config for linear" and sends an // administrator to remove and re-add an app whose config is sitting on page two. expect(linked).toEqual([ - ["user_1", "ac_ours", { callbackUrl: RETURN_URL }], + [VENDOR_USER, "ac_ours", { callbackUrl: RETURN_URL }], ]); }); @@ -4282,7 +4699,11 @@ describe("a listing that arrived with a cursor still outstanding", () => { const refusal = await failureOf( broker.revoke({ - account: { holder: "person", userId: "user_1", vendorUserId: "user_1" }, + account: { + holder: "person", + userId: "user_1", + vendorUserId: VENDOR_USER, + }, toolkit: "gmail", }), ); @@ -4356,7 +4777,7 @@ describe("a listing that arrived with a cursor still outstanding", () => { account: { holder: "person", userId: "user_1", - vendorUserId: "user_1", + vendorUserId: VENDOR_USER, }, toolkit: "gmail", }), @@ -4422,7 +4843,11 @@ describe("a listing that arrived with a cursor still outstanding", () => { const refusal = await failureOf( broker.revoke({ - account: { holder: "person", userId: "user_1", vendorUserId: "user_1" }, + account: { + holder: "person", + userId: "user_1", + vendorUserId: VENDOR_USER, + }, toolkit: "gmail", }), ); @@ -4472,7 +4897,11 @@ describe("a listing that arrived with a cursor still outstanding", () => { const refusal = await failureOf( broker.revoke({ - account: { holder: "person", userId: "user_1", vendorUserId: "user_1" }, + account: { + holder: "person", + userId: "user_1", + vendorUserId: VENDOR_USER, + }, toolkit: "gmail", }), ); @@ -4660,7 +5089,11 @@ describe("a vendor answer that is one object rather than a listing", () => { */ const refusal = await failureOf( broker.authorize({ - account: { holder: "person", userId: "user_1", vendorUserId: "user_1" }, + account: { + holder: "person", + userId: "user_1", + vendorUserId: VENDOR_USER, + }, toolkit: "linear", returnUrl: RETURN_URL, }), @@ -4969,7 +5402,7 @@ describe("what a malformed field of a row actually costs", () => { const { actions } = buildComposioClient( fakeVendor({ tools: { - list: async () => ({ items: [{ slug: "GMAIL_FETCH_EMAILS" }] }), + list: actionsOf("gmail", [{ slug: "GMAIL_FETCH_EMAILS" }]), }, }), ); @@ -5008,16 +5441,14 @@ describe("what a malformed field of a row actually costs", () => { const { actions } = buildComposioClient( fakeVendor({ tools: { - list: async () => ({ - items: [ - { - slug: "GMAIL_FETCH_EMAILS", - description: null, - input_parameters: null, - version: null, - }, - ], - }), + list: actionsOf("gmail", [ + { + slug: "GMAIL_FETCH_EMAILS", + description: null, + input_parameters: null, + version: null, + }, + ]), }, }), ); @@ -5189,7 +5620,11 @@ describe("what a malformed field of a row actually costs", () => { const refusal = await failureOf( broker.authorize({ - account: { holder: "person", userId: "user_1", vendorUserId: "user_1" }, + account: { + holder: "person", + userId: "user_1", + vendorUserId: VENDOR_USER, + }, toolkit: "linear", returnUrl: RETURN_URL, }), @@ -5240,7 +5675,11 @@ describe("what a malformed field of a row actually costs", () => { const refusal = await failureOf( broker.authorize({ - account: { holder: "person", userId: "user_1", vendorUserId: "user_1" }, + account: { + holder: "person", + userId: "user_1", + vendorUserId: VENDOR_USER, + }, toolkit: "linear", returnUrl: RETURN_URL, }), @@ -5284,7 +5723,11 @@ describe("what a malformed field of a row actually costs", () => { const refusal = await failureOf( broker.authorize({ - account: { holder: "person", userId: "user_1", vendorUserId: "user_1" }, + account: { + holder: "person", + userId: "user_1", + vendorUserId: VENDOR_USER, + }, toolkit: "linear", returnUrl: RETURN_URL, }), @@ -5317,7 +5760,11 @@ describe("what a malformed field of a row actually costs", () => { const refusal = await failureOf( broker.connectWithFields({ - account: { holder: "person", userId: "user_1", vendorUserId: "user_1" }, + account: { + holder: "person", + userId: "user_1", + vendorUserId: VENDOR_USER, + }, toolkit: "linear", authScheme: "API_KEY", values: { generic_api_key: "pplx-secret" }, @@ -5358,7 +5805,11 @@ describe("what a malformed field of a row actually costs", () => { const refusal = await failureOf( broker.authorize({ - account: { holder: "person", userId: "user_1", vendorUserId: "user_1" }, + account: { + holder: "person", + userId: "user_1", + vendorUserId: VENDOR_USER, + }, toolkit: "linear", returnUrl: RETURN_URL, }), @@ -5396,7 +5847,11 @@ describe("what a malformed field of a row actually costs", () => { ); await broker.authorize({ - account: { holder: "person", userId: "user_1", vendorUserId: "user_1" }, + account: { + holder: "person", + userId: "user_1", + vendorUserId: VENDOR_USER, + }, toolkit: "linear", returnUrl: RETURN_URL, }); @@ -5408,7 +5863,9 @@ describe("what a malformed field of a row actually costs", () => { * Connect and an administrator pressing Remove, who need not be answered by the same process, * container or build of ICU. This pair is the one that tells the two orders apart. */ - expect(linked).toEqual([["user_1", "ac_B", { callbackUrl: RETURN_URL }]]); + expect(linked).toEqual([ + [VENDOR_USER, "ac_B", { callbackUrl: RETURN_URL }], + ]); }); test("a created config the answer does not name is reported as possibly standing", async () => { @@ -5510,7 +5967,7 @@ describe("what a malformed field of a row actually costs", () => { account: { holder: "person", userId: "user_1", - vendorUserId: "user_1", + vendorUserId: VENDOR_USER, }, toolkit: "linear", returnUrl: RETURN_URL, @@ -5578,11 +6035,9 @@ describe("a field Composio padded with whitespace", () => { const { broker } = buildComposioClient( fakeVendor({ authConfigs: { - list: async () => ({ - items: [ - { id: " ac_ours ", name: "Linear (OpenBot)", status: "ENABLED" }, - ], - }), + list: configsOf("linear", [ + { id: " ac_ours ", name: "Linear (OpenBot)", status: "ENABLED" }, + ]), delete: async (...call: unknown[]) => { deleted.push(call); }, @@ -5603,7 +6058,7 @@ describe("a field Composio padded with whitespace", () => { fakeVendor({ authConfigs: { list: ourGmailConfig }, connectedAccounts: { - list: async () => ({ items: [{ id: " ca_1 " }] }), + list: heldAccounts([{ id: " ca_1 " }]), delete: async (...call: unknown[]) => { deleted.push(call); return WITHDRAWN; @@ -5614,7 +6069,11 @@ describe("a field Composio padded with whitespace", () => { expect( await broker.revoke({ - account: { holder: "person", userId: "user_1", vendorUserId: "user_1" }, + account: { + holder: "person", + userId: "user_1", + vendorUserId: VENDOR_USER, + }, toolkit: "gmail", }), ).toBe(true); @@ -5689,7 +6148,7 @@ describe("a field Composio padded with whitespace", () => { test("a padded consent page is the address this person is sent to, without the padding", async () => { const { broker } = buildComposioClient( fakeVendor({ - authConfigs: { list: async () => ({ items: [OURS] }) }, + authConfigs: { list: configsOf("linear", [OURS]) }, connectedAccounts: { link: async () => ({ redirectUrl: " https://backend.composio.dev/s/a-link ", @@ -5700,13 +6159,19 @@ describe("a field Composio padded with whitespace", () => { ); const begun = await broker.authorize({ - account: { holder: "person", userId: "user_1", vendorUserId: "user_1" }, + account: { + holder: "person", + userId: "user_1", + vendorUserId: VENDOR_USER, + }, toolkit: "linear", returnUrl: RETURN_URL, }); expect(begun).toEqual({ redirectUrl: "https://backend.composio.dev/s/a-link", + // Declared null: Composio's return leg is correlated by sealed state, not by a broker id. + authorizationId: null, }); }); @@ -5722,7 +6187,7 @@ describe("a field Composio padded with whitespace", () => { const linked: unknown[] = []; const { broker } = buildComposioClient( fakeVendor({ - authConfigs: { list: async () => ({ items: [OURS] }) }, + authConfigs: { list: configsOf("linear", [OURS]) }, connectedAccounts: { link: async (...call: unknown[]) => { linked.push(call); @@ -5735,7 +6200,11 @@ describe("a field Composio padded with whitespace", () => { const refusal = await failureOf( broker.authorize({ - account: { holder: "person", userId: "user_1", vendorUserId: "user_1" }, + account: { + holder: "person", + userId: "user_1", + vendorUserId: VENDOR_USER, + }, toolkit: "linear", returnUrl: RETURN_URL, }), @@ -5763,11 +6232,9 @@ describe("a field Composio padded with whitespace", () => { const { broker } = buildComposioClient( fakeVendor({ authConfigs: { - list: async () => ({ - items: [ - { id: "ac_ours", name: "Linear (OpenBot)", status: " ENABLED " }, - ], - }), + list: configsOf("linear", [ + { id: "ac_ours", name: "Linear (OpenBot)", status: " ENABLED " }, + ]), }, connectedAccounts: { link: async (...call: unknown[]) => { @@ -5780,16 +6247,22 @@ describe("a field Composio padded with whitespace", () => { ); const begun = await broker.authorize({ - account: { holder: "person", userId: "user_1", vendorUserId: "user_1" }, + account: { + holder: "person", + userId: "user_1", + vendorUserId: VENDOR_USER, + }, toolkit: "linear", returnUrl: RETURN_URL, }); expect(begun).toEqual({ redirectUrl: "https://backend.composio.dev/s/a-link", + // Declared null: Composio's return leg is correlated by sealed state, not by a broker id. + authorizationId: null, }); expect(linked).toEqual([ - ["user_1", "ac_ours", { callbackUrl: RETURN_URL }], + [VENDOR_USER, "ac_ours", { callbackUrl: RETURN_URL }], ]); }); @@ -5799,11 +6272,9 @@ describe("a field Composio padded with whitespace", () => { const { broker } = buildComposioClient( fakeVendor({ authConfigs: { - list: async () => ({ - items: [ - { id: "ac_ours", name: "Linear (OpenBot)", status: " ENABLED " }, - ], - }), + list: configsOf("linear", [ + { id: "ac_ours", name: "Linear (OpenBot)", status: " ENABLED " }, + ]), }, connectedAccounts: { create: async (body: unknown) => { @@ -5816,7 +6287,11 @@ describe("a field Composio padded with whitespace", () => { expect( await broker.connectWithFields({ - account: { holder: "person", userId: "user_1", vendorUserId: "user_1" }, + account: { + holder: "person", + userId: "user_1", + vendorUserId: VENDOR_USER, + }, toolkit: "linear", authScheme: "API_KEY", values: { generic_api_key: "pplx-secret" }, @@ -5836,11 +6311,9 @@ describe("a field Composio padded with whitespace", () => { const { broker } = buildComposioClient( fakeVendor({ authConfigs: { - list: async () => ({ - items: [ - { id: "ac_ours", name: "Linear (OpenBot)", status: " DISABLED " }, - ], - }), + list: configsOf("linear", [ + { id: "ac_ours", name: "Linear (OpenBot)", status: " DISABLED " }, + ]), }, }), () => 1_000_000, @@ -5848,7 +6321,11 @@ describe("a field Composio padded with whitespace", () => { const refusal = await failureOf( broker.authorize({ - account: { holder: "person", userId: "user_1", vendorUserId: "user_1" }, + account: { + holder: "person", + userId: "user_1", + vendorUserId: VENDOR_USER, + }, toolkit: "linear", returnUrl: RETURN_URL, }), @@ -6039,7 +6516,7 @@ describe("the key becoming a vendor, and which delete that vendor carries", () = account: { holder: "person", userId: "user_1", - vendorUserId: "user_1", + vendorUserId: VENDOR_USER, }, toolkit: "gmail", }), @@ -6097,7 +6574,10 @@ describe("the key becoming a vendor, and which delete that vendor carries", () = }; const minted: unknown[][] = []; - let begun: { redirectUrl: string } | null = null; + let begun: { + redirectUrl: string; + authorizationId: string | null; + } | null = null; try { // The config listing is what carries the auth config's id to the link, so it answers with the // one this deployment made — the id that must arrive SECOND. @@ -6112,7 +6592,11 @@ describe("the key becoming a vendor, and which delete that vendor carries", () = const { broker } = createComposioClient("never-dialled"); begun = await broker.authorize({ - account: { holder: "person", userId: "user_1", vendorUserId: "user_1" }, + account: { + holder: "person", + userId: "user_1", + vendorUserId: VENDOR_USER, + }, toolkit: "gmail", returnUrl: RETURN_URL, }); @@ -6123,10 +6607,12 @@ describe("the key becoming a vendor, and which delete that vendor carries", () = // The person, then the config, then the callback — and the whole list rather than a field of // it, because the defect this is written for is an order and not a value. expect(minted).toEqual([ - ["user_1", OUR_GMAIL.id, { callbackUrl: RETURN_URL }], + [VENDOR_USER, OUR_GMAIL.id, { callbackUrl: RETURN_URL }], ]); expect(begun).toEqual({ redirectUrl: "https://backend.composio.dev/s/a-link", + // Declared null: Composio's return leg is correlated by sealed state, not by a broker id. + authorizationId: null, }); }); }); @@ -7759,7 +8245,7 @@ describe("connecting one person with the secret they typed", () => { const asked: unknown[] = []; const { broker } = buildComposioClient( fakeVendor({ - authConfigs: { list: async () => ({ items: [OURS] }) }, + authConfigs: { list: configsOf("linear", [OURS]) }, connectedAccounts: { create: async (body: unknown) => { asked.push(body); @@ -7771,7 +8257,11 @@ describe("connecting one person with the secret they typed", () => { expect( await broker.connectWithFields({ - account: { holder: "person", userId: "user_1", vendorUserId: "user_1" }, + account: { + holder: "person", + userId: "user_1", + vendorUserId: VENDOR_USER, + }, toolkit: "linear", authScheme: "API_KEY", values: { generic_api_key: TYPED_SECRET, subdomain: "acme" }, @@ -7789,7 +8279,7 @@ describe("connecting one person with the secret they typed", () => { { auth_config: { id: OURS.id }, connection: { - user_id: "user_1", + user_id: VENDOR_USER, state: { authScheme: "API_KEY", val: { @@ -7820,7 +8310,7 @@ describe("connecting one person with the secret they typed", () => { const asked: unknown[] = []; const { broker } = buildComposioClient( fakeVendor({ - authConfigs: { list: async () => ({ items: [OURS] }) }, + authConfigs: { list: configsOf("linear", [OURS]) }, connectedAccounts: { create: async (body: unknown) => { asked.push(body); @@ -7831,7 +8321,11 @@ describe("connecting one person with the secret they typed", () => { ); await broker.connectWithFields({ - account: { holder: "person", userId: "user_1", vendorUserId: "user_1" }, + account: { + holder: "person", + userId: "user_1", + vendorUserId: VENDOR_USER, + }, toolkit: "linear", authScheme: "API_KEY", values: { generic_api_key: TYPED_SECRET, status: "INITIALIZING" }, @@ -7841,7 +8335,7 @@ describe("connecting one person with the secret they typed", () => { { auth_config: { id: OURS.id }, connection: { - user_id: "user_1", + user_id: VENDOR_USER, state: { authScheme: "API_KEY", // The word this deployment sets, whatever arrived beside it under the same name. @@ -7886,7 +8380,7 @@ describe("connecting one person with the secret they typed", () => { const { broker } = buildComposioClient( fakeVendor({ - authConfigs: { list: async () => ({ items: [OURS] }) }, + authConfigs: { list: configsOf("linear", [OURS]) }, connectedAccounts: { create: async () => { throw raised; @@ -7897,7 +8391,11 @@ describe("connecting one person with the secret they typed", () => { const refusal = await failureOf( broker.connectWithFields({ - account: { holder: "person", userId: "user_1", vendorUserId: "user_1" }, + account: { + holder: "person", + userId: "user_1", + vendorUserId: VENDOR_USER, + }, toolkit: "linear", authScheme: "API_KEY", values: { generic_api_key: TYPED_SECRET }, @@ -7921,14 +8419,18 @@ describe("connecting one person with the secret they typed", () => { test("a reply with no account id is refused rather than answered as a connection", async () => { const { broker } = buildComposioClient( fakeVendor({ - authConfigs: { list: async () => ({ items: [OURS] }) }, + authConfigs: { list: configsOf("linear", [OURS]) }, connectedAccounts: { create: async () => ({ status: "ACTIVE" }) }, }), ); const refusal = await failureOf( broker.connectWithFields({ - account: { holder: "person", userId: "user_1", vendorUserId: "user_1" }, + account: { + holder: "person", + userId: "user_1", + vendorUserId: VENDOR_USER, + }, toolkit: "linear", authScheme: "API_KEY", values: { generic_api_key: TYPED_SECRET }, @@ -7951,13 +8453,17 @@ describe("connecting one person with the secret they typed", () => { fakeVendor({ // The create is left at `fakeVendor`'s refusal, which is what says the value typed in went // nowhere: a call that was made would name itself here rather than answering. - authConfigs: { list: async () => ({ items: [BY_HAND] }) }, + authConfigs: { list: configsOf("linear", [BY_HAND]) }, }), ); const refusal = await failureOf( broker.connectWithFields({ - account: { holder: "person", userId: "user_1", vendorUserId: "user_1" }, + account: { + holder: "person", + userId: "user_1", + vendorUserId: VENDOR_USER, + }, toolkit: "linear", authScheme: "API_KEY", values: { generic_api_key: TYPED_SECRET }, @@ -7990,11 +8496,9 @@ describe("connecting one person with the secret they typed", () => { * back with an account that cannot work. */ authConfigs: { - list: async () => ({ - items: [ - { id: "ac_ours", name: "Linear (OpenBot)", status: "DISABLED" }, - ], - }), + list: configsOf("linear", [ + { id: "ac_ours", name: "Linear (OpenBot)", status: "DISABLED" }, + ]), }, connectedAccounts: { create: async (body: unknown) => { @@ -8007,7 +8511,11 @@ describe("connecting one person with the secret they typed", () => { const refusal = await failureOf( broker.connectWithFields({ - account: { holder: "person", userId: "user_1", vendorUserId: "user_1" }, + account: { + holder: "person", + userId: "user_1", + vendorUserId: VENDOR_USER, + }, toolkit: "linear", authScheme: "API_KEY", values: { generic_api_key: TYPED_SECRET }, @@ -8038,12 +8546,10 @@ describe("connecting one person with the secret they typed", () => { const { broker } = buildComposioClient( fakeVendor({ authConfigs: { - list: async () => ({ - items: [ - { id: "ac_a", name: "Linear (OpenBot)", status: "DISABLED" }, - { id: "ac_b", name: "Linear (OpenBot)", status: "PENDING" }, - ], - }), + list: configsOf("linear", [ + { id: "ac_a", name: "Linear (OpenBot)", status: "DISABLED" }, + { id: "ac_b", name: "Linear (OpenBot)", status: "PENDING" }, + ]), }, connectedAccounts: { create: async (body: unknown) => { @@ -8056,7 +8562,11 @@ describe("connecting one person with the secret they typed", () => { const refusal = await failureOf( broker.connectWithFields({ - account: { holder: "person", userId: "user_1", vendorUserId: "user_1" }, + account: { + holder: "person", + userId: "user_1", + vendorUserId: VENDOR_USER, + }, toolkit: "linear", authScheme: "API_KEY", values: { generic_api_key: TYPED_SECRET }, @@ -8076,7 +8586,7 @@ describe("connecting one person with the secret they typed", () => { const { broker } = buildComposioClient( fakeVendor({ authConfigs: { - list: async () => ({ items: [{ id: "ac_nameless" }] }), + list: configsOf("linear", [{ id: "ac_nameless" }]), }, connectedAccounts: { create: async (body: unknown) => { @@ -8089,7 +8599,11 @@ describe("connecting one person with the secret they typed", () => { const refusal = await failureOf( broker.connectWithFields({ - account: { holder: "person", userId: "user_1", vendorUserId: "user_1" }, + account: { + holder: "person", + userId: "user_1", + vendorUserId: VENDOR_USER, + }, toolkit: "linear", authScheme: "API_KEY", values: { generic_api_key: TYPED_SECRET }, @@ -8316,20 +8830,42 @@ describe("accounts named by holder", () => { const person = { holder: "person" as const, userId: "user_1", - vendorUserId: "user_1", + vendorUserId: VENDOR_USER, }; + /** + * Accounts named the way a wrong question would find them, each carrying a name of its own so + * that the name an answer comes back with says which question was asked. + */ + const NAMED_ELSEWHERE: HeldAccount[] = [ + { + row: { id: "ca_person", data: { displayName: "a person's github" } }, + toolkit: "github", + }, + { + row: { id: "ca_local", data: { displayName: "under the local id" } }, + userId: "user_1", + toolkit: "github", + }, + { + row: { id: "ca_gmail", data: { displayName: "the deployment's gmail" } }, + userId: deployment.vendorUserId, + }, + ]; + test("the deployment's account is asked for under its vendor id, never a person's", async () => { - const asked: unknown[] = []; - const { broker } = buildComposioClient( - fakeVendor({ - connectedAccounts: { - list: async (query: unknown) => { - asked.push(query); - return { items: [{ id: "ca_1" }] }; - }, + const { list, asked } = accountListing( + [ + { + row: { id: "ca_1" }, + userId: deployment.vendorUserId, + toolkit: "github", }, - }), + ], + NAMED_ELSEWHERE, + ); + const { broker } = buildComposioClient( + fakeVendor({ connectedAccounts: { list } }), ); expect( await broker.isConnected({ account: deployment, toolkit: "github" }), @@ -8339,43 +8875,77 @@ describe("accounts named by holder", () => { ]); }); + /* + * NOT CONNECTED, WHILE THE VENDOR HOLDS A GITHUB ACCOUNT UNDER THIS PERSON'S LOCAL ID. The `false` + * is what tells a question asked under `userId` from one asked under `vendorUserId`: with the two + * spelled alike, as they were here, the assertion on `userIds` could not tell them apart either. + */ test("a person's account is asked for under their vendor id", async () => { - const asked: unknown[] = []; + const { list, asked } = accountListing( + [], + NAMED_ELSEWHERE.filter((account) => account.userId === "user_1"), + ); const { broker } = buildComposioClient( - fakeVendor({ - connectedAccounts: { - list: async (query: unknown) => { - asked.push(query); - return { items: [] }; - }, - }, - }), + fakeVendor({ connectedAccounts: { list } }), ); expect( await broker.isConnected({ account: person, toolkit: "github" }), ).toBe(false); - expect(asked).toEqual([expect.objectContaining({ userIds: ["user_1"] })]); + expect(asked).toEqual([ + expect.objectContaining({ userIds: [VENDOR_USER] }), + ]); + }); + + /* + * THE NAME IS READ OFF THIS PERSON'S ACCOUNT FOR THIS APP, which nothing here asked of a person. + * Every name test below is the deployment's; a person's name read under their local id, or off + * another app's account, is a name a settings page shows them for an account that is not theirs. + */ + test("a person's account name is read off their own account for that app", async () => { + const { list, asked } = accountListing( + [ + { + row: { id: "ca_mine", data: { displayName: "ada@example.test" } }, + toolkit: "github", + }, + ], + NAMED_ELSEWHERE.slice(1), + ); + const { broker } = buildComposioClient( + fakeVendor({ connectedAccounts: { list } }), + ); + expect( + await broker.accountName({ account: person, toolkit: "github" }), + ).toBe("ada@example.test"); + expect(asked.map((query) => [query.userIds, query.toolkitSlugs])).toEqual([ + [[VENDOR_USER], ["github"]], + ]); }); test("only the display name leaves a listing that carries the account's tokens", async () => { const { broker } = buildComposioClient( fakeVendor({ connectedAccounts: { - list: async () => ({ - items: [ + list: accountListing( + [ { - id: "ca_1", - data: { - displayName: "acme-bot", - access_token: "gho_SECRET", - refresh_token: "r_SECRET", - client_secret: "cs_SECRET", - id_token: "eyJ.SECRET", + row: { + id: "ca_1", + data: { + displayName: "acme-bot", + access_token: "gho_SECRET", + refresh_token: "r_SECRET", + client_secret: "cs_SECRET", + id_token: "eyJ.SECRET", + }, + state: { val: { access_token: "gho_SECRET" } }, }, - state: { val: { access_token: "gho_SECRET" } }, + userId: deployment.vendorUserId, + toolkit: "github", }, ], - }), + NAMED_ELSEWHERE, + ).list, }, }), ); @@ -8391,9 +8961,21 @@ describe("accounts named by holder", () => { const { broker } = buildComposioClient( fakeVendor({ connectedAccounts: { - list: async () => ({ - items: [{ id: "ca_1", data: { id_token: "eyJhbGciOi.e30.x" } }], - }), + // Beside a person's NAMED gmail account, so a question asked under anybody but the + // deployment's id answers with somebody's name rather than with none. + list: accountListing( + [ + { + row: { id: "ca_1", data: { id_token: "eyJhbGciOi.e30.x" } }, + userId: deployment.vendorUserId, + }, + ], + [ + { + row: { id: "ca_p", data: { displayName: "a person's gmail" } }, + }, + ], + ).list, }, }), ); @@ -8403,7 +8985,11 @@ describe("accounts named by holder", () => { }); test("an unconfigured broker names the provider it is missing", () => { - expect(new BrokerUnconfiguredError("Acme").message).toMatch(/Acme/); - expect(new BrokerUnconfiguredError().message).toMatch(/COMPOSIO_API_KEY/); + expect(new BrokerUnconfiguredError("arcade", "operator").message).toMatch( + /Arcade/, + ); + expect(new BrokerUnconfiguredError("composio", "operator").message).toMatch( + /COMPOSIO_API_KEY/, + ); }); }); diff --git a/server/tests/composio-broker-seam.test.ts b/server/tests/composio-broker-seam.test.ts index 0c8a72bdd..b06d1f367 100644 --- a/server/tests/composio-broker-seam.test.ts +++ b/server/tests/composio-broker-seam.test.ts @@ -5,6 +5,7 @@ import { brokerReturnUrl, brokerSentence, } from "../src/plugins/broker"; +import { createComposioClient } from "../src/plugins/composio-adapter"; /** * The broker seam's three decisions, asserted with no network and no database. @@ -23,7 +24,7 @@ import { describe("brokerSentence", () => { test("reports the unconfigured deployment in the error's own words", () => { - const error = new BrokerUnconfiguredError(); + const error = new BrokerUnconfiguredError("composio", "operator"); expect(error.message).toContain("COMPOSIO_API_KEY"); expect(brokerSentence(error)).toBe(error.message); @@ -44,16 +45,21 @@ describe("brokerSentence", () => { * unvalidated environment string, so `string` really is the strongest promise it can make and the * check belongs here rather than in the type. * - * Each refusal is asserted by the half of its sentence that only it says. Both name - * `OPENBOT_APP_URL`, because both are fixed there, so a test that asked only for the setting would - * pass just as well if the two branches collapsed into one — and they are two different mistakes: - * an address nobody built, and a configured one that cannot work. + * Each refusal is asserted by the half of its sentence that only it says, because they are two + * different mistakes — an address nobody built, and a configured one that cannot work — and a test + * that asked only for what both say would pass just as well if the branches collapsed into one. + * + * WHICH SENTENCE EACH READER GETS IS PINNED IN `broker-return-url-voice.test.ts` AND NOT HERE. This + * file is about which addresses are refused; that one is about whose vocabulary the refusal is + * written in — a person's, naming no vendor and no variable, and an operator's, naming both. */ describe("brokerReturnUrl", () => { test("refuses an address that was never built", () => { - expect(() => brokerReturnUrl("")).toThrow(/built no address/); - expect(() => brokerReturnUrl(" ")).toThrow(/built no address/); - expect(() => brokerReturnUrl("")).toThrow(BrokerReturnUrlError); + expect(() => brokerReturnUrl("", "composio")).toThrow(/built no address/); + expect(() => brokerReturnUrl(" ", "composio")).toThrow( + /built no address/, + ); + expect(() => brokerReturnUrl("", "composio")).toThrow(BrokerReturnUrlError); }); test("refuses an address no browser could come back through", () => { @@ -63,7 +69,9 @@ describe("brokerReturnUrl", () => { "/settings/connected-accounts/x", "javascript:alert(1)", ]) { - expect(() => brokerReturnUrl(unusable)).toThrow(/not a web address/); + expect(() => brokerReturnUrl(unusable, "composio")).toThrow( + /not a web address/, + ); } }); @@ -84,20 +92,24 @@ describe("brokerReturnUrl", () => { * that the message is safe to show them — so the address must be absent from it as a whole and * in its parts, and the value asked about has to be one no sentence here mentions for its own * reasons. + * + * THE SETTING IS NO LONGER ASKED OF THIS SENTENCE, because this is the one the ROUTE ANSWERS and + * the route is `requireUser`: `OPENBOT_APP_URL` is an operator's remedy, and the assertion that + * an operator is still given it lives on `operatorMessage` in the voice test. */ - test("says which setting fixes it, and never quotes the address", () => { + test("never quotes the address it refused", () => { const address = "openbot-tenant-42.internal.corp/settings/connected-accounts/9f3c"; let thrown: unknown; try { - brokerReturnUrl(address); + brokerReturnUrl(address, "composio"); } catch (error) { thrown = error; } const sentence = brokerSentence(thrown); - expect(sentence).toContain("OPENBOT_APP_URL"); + expect(sentence).not.toBeNull(); expect(sentence).not.toContain(address); expect(sentence).not.toContain("openbot-tenant-42.internal.corp"); expect(sentence).not.toContain("/settings/connected-accounts/9f3c"); @@ -105,11 +117,14 @@ describe("brokerReturnUrl", () => { test("hands back the address a configured deployment built", () => { expect( - brokerReturnUrl("https://openbot.test/settings/connected-accounts/x"), + brokerReturnUrl( + "https://openbot.test/settings/connected-accounts/x", + "composio", + ), ).toBe("https://openbot.test/settings/connected-accounts/x"); - expect(brokerReturnUrl("http://localhost:3001/admin/plugins/x")).toBe( - "http://localhost:3001/admin/plugins/x", - ); + expect( + brokerReturnUrl("http://localhost:3001/admin/plugins/x", "composio"), + ).toBe("http://localhost:3001/admin/plugins/x"); }); /** @@ -139,7 +154,98 @@ describe("brokerReturnUrl", () => { "https://openbot.test/settings/\tconnected-accounts/x", "https://openbot.test/settings\r/connected-accounts/x", ]) { - expect(brokerReturnUrl(disguised)).toBe(intended); + expect(brokerReturnUrl(disguised, "composio")).toBe(intended); + } + }); +}); + +/** + * `grantIsLocal` is a DECLARED PROPERTY of the broker, read off the object and never derived from + * a vendor's name. Composio holds the grant in this deployment, so it declares true — which is the + * behaviour it always had, made explicit. + */ +describe("grantIsLocal", () => { + test("Composio declares that its grant is held by this deployment", () => { + expect(createComposioClient("never-dialled").broker.grantIsLocal).toBe( + true, + ); + }); + + /** + * `authorizations` is the same kind of value one field along: a DECLARED capability, read with a + * presence test — `if (!broker.authorizations)` — and never with a vendor name. Composio runs no + * correlated, pollable authorization flow, and saying so is not the same as leaving the field + * out: an omission would make the field optional in practice, which is the failed-open shape + * `grantIsLocal` exists to close. + */ + test("Composio declares no correlated authorization flow", () => { + expect(createComposioClient("never-dialled").broker.authorizations).toBe( + null, + ); + }); + + /** + * THE STUB IS INSTALLED BEFORE THE CLIENT IS CONSTRUCTED, AND THAT ORDER IS THE WHOLE TEST. + * + * `@composio/client` binds its transport once, in its constructor — `this.fetch = options.fetch + * ?? Shims.getDefaultFetch()` (`client.mjs:122`), and `getDefaultFetch` returns whatever + * `globalThis.fetch` is at that moment. This file used to construct the client on the line above + * the assignment, so the SDK held the real `fetch` and the stub below governed nothing: every run + * of this case reached `https://backend.composio.dev/api/v3.1/auth_configs` over the network, and + * the test passed anyway because the vendor's refusal of an unknown key also fails to mention + * `action`. Constructing after the assignment is what makes the stub the transport. + * + * `server/scripts/test-network-guard.ts` is the floor under this, and the two are not + * alternatives: the guard turns a call that escapes into a failure, and this ordering is what + * keeps the case asserting what it is about rather than tripping the guard. + */ + test("a broker handed an action it cannot use ignores it rather than throwing", async () => { + const original = globalThis.fetch; + // No network: an empty config listing, so `authorize` stops at its own refusal for having no + // config to connect against. What is asserted is that `action` was not what stopped it. + globalThis.fetch = (async () => + new Response(JSON.stringify({ items: [] }), { + status: 200, + headers: { "content-type": "application/json" }, + })) as unknown as typeof fetch; + try { + const { broker } = createComposioClient("never-dialled"); + const attempt = await broker + .authorize({ + account: { holder: "person", userId: "u", vendorUserId: "u" }, + toolkit: "linear", + returnUrl: "https://openbot.test/settings/connected-accounts/x", + action: "LINEAR_CREATE_ISSUE", + }) + .then( + () => "resolved", + (error: unknown) => (error instanceof Error ? error.message : ""), + ); + expect(attempt).not.toMatch(/action/i); + } finally { + globalThis.fetch = original; } }); }); + +/** + * `authProviderOf` is the third declared value on this seam, and Composio's answer is a REAL one. + * + * A Composio connection is made against an auth config, and an auth config is per toolkit — so the + * toolkit IS its own auth provider there, and the set of apps sharing a connection with it is + * consequently always empty. That is the truth about Composio rather than a degradation of it, the + * same "degenerate is not absent" `grantsFor` already turns on. A throw would be the alternative, + * and it would force a presence test into every consumer and a provider branch into a disconnect + * path. + */ +describe("authProviderOf", () => { + test("Composio answers the toolkit itself, dialling nothing", async () => { + const { broker } = createComposioClient("never-dialled"); + + expect(await broker.authProviderOf("gmail")).toBe("gmail"); + // Case carried through untouched, as every toolkit spelling on this seam is. + expect(await broker.authProviderOf("GoogleCalendar")).toBe( + "GoogleCalendar", + ); + }); +}); diff --git a/server/tests/composio-connection-kinds.test.ts b/server/tests/composio-connection-kinds.test.ts index 1d1dd9635..7d41fd320 100644 --- a/server/tests/composio-connection-kinds.test.ts +++ b/server/tests/composio-connection-kinds.test.ts @@ -659,6 +659,14 @@ const credentialsStub: CredentialSecretReader & CredentialStore = { let brokerAsks: string[] = []; const broker: ConnectedAppBroker = { + // This stub stands in for Composio, whose grant is held locally; see `ConnectedAppBroker.grantIsLocal`. + grantIsLocal: true, + // Nothing here asks what auth provider a connection is held under. + authProviderOf: async () => null, + // Nothing here reads either member; both are declared because the seam requires a broker to + // SAY what it runs — see `ConnectedAppBroker.authorizations`. + authorizations: null, + grantsFor: async () => [], listApps: async () => { throw new Error("nothing here lists the catalogue"); }, @@ -667,7 +675,10 @@ const broker: ConnectedAppBroker = { }, authorize: async (request) => { brokerAsks.push(`authorize:${request.toolkit}`); - return { redirectUrl: `https://composio.test/${request.toolkit}/consent` }; + return { + redirectUrl: `https://composio.test/${request.toolkit}/consent`, + authorizationId: null, + }; }, isConnected: async (request) => { brokerAsks.push( @@ -709,6 +720,7 @@ const broker: ConnectedAppBroker = { }; const store = createPluginStore({ + brokerProvider: "composio", database, auditStore: createAuditStore(database), broker, @@ -749,7 +761,7 @@ const connectApp = new Hono().route( encryptionKey: "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=", personHasAccess: async () => true, }, - { broker }, + { broker, provider: "composio" }, ), ); @@ -802,6 +814,7 @@ async function publishProbe(serverId: string): Promise { await database.insert(mcpTools).values({ serverId, name: PROBE_ACTION, + vendorName: PROBE_ACTION, description: "Says who the key belongs to.", effect: "read", version: PROBE_VERSION, diff --git a/server/tests/composio-connections.test.ts b/server/tests/composio-connections.test.ts index 42f626ab8..ed8267efd 100644 --- a/server/tests/composio-connections.test.ts +++ b/server/tests/composio-connections.test.ts @@ -680,6 +680,14 @@ let vendorHolds: string[] = []; let configWasStanding = false; const broker: ComposioBroker = { + // This stub stands in for Composio, whose grant is held locally; see `ConnectedAppBroker.grantIsLocal`. + grantIsLocal: true, + // Nothing here asks what auth provider a connection is held under. + authProviderOf: async () => null, + // Nothing here reads either member; both are declared because the seam requires a broker to + // SAY what it runs — see `ConnectedAppBroker.authorizations`. + authorizations: null, + grantsFor: unasked("read grants"), listApps: unasked("list the catalogue"), ensureAuthConfig: async (config) => { // Named by app AND kind, because the kind is what decides which config is created: an enable @@ -776,6 +784,7 @@ const broker: ComposioBroker = { }; const store = createPluginStore({ + brokerProvider: "composio", database, auditStore, broker, @@ -933,6 +942,7 @@ async function addApp() { await database.insert(mcpTools).values({ serverId: toolkit, name: actionName, + vendorName: actionName, description: "Fetch some items.", effect: "read", version: "20260903_00", @@ -984,6 +994,7 @@ async function addProbedApp(options: { withProbe?: boolean } = {}) { await database.insert(mcpTools).values({ serverId: probedId, name: probeAction, + vendorName: probeAction, description: "Says who the key belongs to.", effect: "read", version: probeVersion, @@ -1010,6 +1021,7 @@ async function addCheckableApp(slug: string): Promise { await database.insert(mcpTools).values({ serverId: `composio-${slug}`, name: probeAction, + vendorName: probeAction, description: "Says who the key belongs to.", effect: "read", version: probeVersion, @@ -1037,6 +1049,7 @@ async function addRenamedApp() { await database.insert(mcpTools).values({ serverId: renamedProbedId, name: renamedProbeAction, + vendorName: renamedProbeAction, description: "Says who the key belongs to.", effect: "read", version: probeVersion, @@ -2126,6 +2139,7 @@ test("the probe skips an argument-less write for the read that sorts after it", serverId: probeAppId, // Sorts first, asks for nothing, and charges somebody money. The whole test. name: "STRIPE_CREATE_BILLING_METER_EVENT_SESSION", + vendorName: "STRIPE_CREATE_BILLING_METER_EVENT_SESSION", description: "Creates a billing meter event session.", effect: "write", version: "20260903_00", @@ -2133,6 +2147,7 @@ test("the probe skips an argument-less write for the read that sorts after it", { serverId: probeAppId, name: "STRIPE_RETRIEVE_BALANCE", + vendorName: "STRIPE_RETRIEVE_BALANCE", description: "Retrieves the balance.", effect: "read", version: "20260903_00", @@ -2171,6 +2186,7 @@ test("an app whose only read takes an argument has no probe", async () => { await database.insert(mcpTools).values({ serverId: probeAppId, name: "APP_GET_PROJECT", + vendorName: "APP_GET_PROJECT", description: "Reads one project, by id.", effect: "read", inputSchema: { @@ -2232,6 +2248,7 @@ test.each([ await database.insert(mcpTools).values({ serverId: probeAppId, name: "APP_GET_PROJECT", + vendorName: "APP_GET_PROJECT", description: "Reads one project.", effect: "read", inputSchema, @@ -2261,6 +2278,7 @@ test("an action whose composed schema requires nothing is still a probe candidat await database.insert(mcpTools).values({ serverId: probeAppId, name: "APP_GET_ME", + vendorName: "APP_GET_ME", description: "Reads the current account.", effect: "read", inputSchema: { @@ -2303,6 +2321,7 @@ test("an app whose only safe read has no recorded version has no probe", async ( await database.insert(mcpTools).values({ serverId: probedId, name: probeAction, + vendorName: probeAction, description: "Says who the key belongs to, at no version anybody recorded.", effect: "read", version: null, @@ -2354,6 +2373,7 @@ test("the chooser passes over a versionless read for the one it could call", asy serverId: probeAppId, // Sorts first, is the preferred shape, and carries nothing to call it at. name: "THIN_GET_ME", + vendorName: "THIN_GET_ME", description: "Says who the key belongs to.", effect: "read", version: null, @@ -2361,6 +2381,7 @@ test("the chooser passes over a versionless read for the one it could call", asy { serverId: probeAppId, name: "THIN_LIST_PROJECTS", + vendorName: "THIN_LIST_PROJECTS", description: "Lists the projects.", effect: "read", version: "20260903_00", @@ -2407,6 +2428,7 @@ test("the probe skips a read the vendor also calls destructive", async () => { serverId: probeAppId, // Sorts first, asks for nothing, and Composio itself says calling it destroys something. name: "APP_ARCHIVE_EVERYTHING", + vendorName: "APP_ARCHIVE_EVERYTHING", description: "Archives the lot.", effect: "read", destructive: true, @@ -2415,6 +2437,7 @@ test("the probe skips a read the vendor also calls destructive", async () => { { serverId: probeAppId, name: "APP_LIST_PROJECTS", + vendorName: "APP_LIST_PROJECTS", description: "Lists the projects.", effect: "read", destructive: false, @@ -2474,6 +2497,7 @@ test("the probe prefers the identity read over the read that sorts first", async // Sorts first and is perfectly safe, which is what makes it the wrong answer rather than an // unsafe one: this is a test about which of two good candidates is chosen. name: "ZOO_ALL_ANIMALS", + vendorName: "ZOO_ALL_ANIMALS", description: "Lists the animals.", effect: "read", version: "20260903_00", @@ -2481,6 +2505,7 @@ test("the probe prefers the identity read over the read that sorts first", async { serverId: probeAppId, name: "ZOO_GET_ME", + vendorName: "ZOO_GET_ME", description: "Says who the key belongs to.", effect: "read", version: "20260903_00", @@ -2618,6 +2643,7 @@ test("an action listed after the fact does not rewrite what a key was checked wi await database.insert(mcpTools).values({ serverId: probedId, name: probeAction, + vendorName: probeAction, description: "Says who the key belongs to.", effect: "read", version: probeVersion, @@ -2682,6 +2708,7 @@ test("a key nothing was spent on becomes checkable when the app publishes someth await database.insert(mcpTools).values({ serverId: probedId, name: probeAction, + vendorName: probeAction, description: "Says who the key belongs to.", effect: "read", version: probeVersion, @@ -2786,6 +2813,7 @@ test("a probe never spends a key on the action of a row the composed id would hi await database.insert(mcpTools).values({ serverId: decoyId, name: decoyAction, + vendorName: decoyAction, description: "Reads something belonging to another app entirely.", effect: "read", version: probeVersion, @@ -2828,6 +2856,7 @@ test("a consent connection records no action, because none was spent", async () await database.insert(mcpTools).values({ serverId: probedId, name: probeAction, + vendorName: probeAction, description: "Says who the account belongs to.", effect: "read", version: probeVersion, @@ -3757,6 +3786,7 @@ test("a duplicate row recording no-auth does not take the gate off an app", asyn await database.insert(mcpTools).values({ serverId: noAuthTwinId, name: actionName, + vendorName: actionName, description: "Fetch some items.", effect: "read", version: "20260903_00", @@ -4685,6 +4715,7 @@ test("a re-check against a consent connection refuses rather than spending its d await database.insert(mcpTools).values({ serverId: probedId, name: probeAction, + vendorName: probeAction, description: "Says who the account belongs to.", effect: "read", version: probeVersion, diff --git a/server/tests/composio-grants-for.test.ts b/server/tests/composio-grants-for.test.ts new file mode 100644 index 000000000..e8d893734 --- /dev/null +++ b/server/tests/composio-grants-for.test.ts @@ -0,0 +1,698 @@ +import { describe, expect, test } from "bun:test"; +import type { + AuthorizationFlow, + ConnectedAppBroker, + GrantState, +} from "../src/plugins/broker"; +import { + type ComposioVendor, + buildComposioClient, +} from "../src/plugins/composio-adapter"; + +/** + * `grantsFor` through Composio, whose answer is DEGENERATE AND IS STILL AN ANSWER. + * + * The seam asks one question both providers answer: what does this account hold at this app. + * Composio's auth config fixes the scope set when it is created, so every action in a toolkit + * shares one state and one scope list — and reporting that state once per action is the honest + * rendering of a toolkit-wide grant, not a stub standing in for a missing implementation. The + * assertions below are therefore about SAMENESS as much as about the state: one entry per action, + * the same verdict on each, and the scopes read off this deployment's own config rather than + * invented per action. + * + * THE FAKE VENDOR BELOW FILTERS, AND THAT IS THE OTHER HALF OF WHAT THIS FILE CLAIMS. A fake that + * hands back every fixture row whatever it was asked for cannot tell a correct question from a + * wrong one, so a suite built on one asserts the SHAPE of `grantsFor`'s answer while leaving the + * three things that make the answer this person's — which person, which statuses count as + * connected, and which app — entirely unguarded. Every listing here therefore honours the query it + * is given, and every test below carries at least one row the query must leave out. + * + * This file is named in `server/tsconfig.json`'s `include`, because the last describe is a TYPE + * test and a `@ts-expect-error` inside an unchecked directory asserts nothing at all. + */ + +/** A vendor method nothing in a given test should reach, which says so rather than answering. */ +const refuse = (what: string) => async (): Promise => { + throw new Error(`${what} should not have been called in this test.`); +}; + +/** + * The person every fixture here asks about. + * + * THE TWO IDS DIFFER, which they did not when this file was written. `userId` is this deployment's + * own id for somebody and `vendorUserId` is the id Composio knows them by; spelling both as + * `user_1` made the two interchangeable in every assertion here, so a listing asked with the local + * id — which is not an id Composio has ever seen — read exactly like one asked with the vendor's. + */ +const ACCOUNT = { + holder: "person", + userId: "user_1", + vendorUserId: "composio_user_1", +} as const; + +/** Somebody else at this deployment, whose rows no question about {@link ACCOUNT} may return. */ +const OTHER_PERSON = "composio_user_2"; + +/** + * The vendor's account statuses, spelled here because the adapter keeps its copy private. + * + * Written as a union rather than as `string` so that a fixture naming a status the vendor does not + * publish is a type error here instead of a row that silently matches nothing and leaves the test + * it belongs to passing for the wrong reason. + */ +type AccountStatus = + | "INITIALIZING" + | "INITIATED" + | "ACTIVE" + | "FAILED" + | "EXPIRED" + | "INACTIVE" + | "REVOKED"; + +/** + * A connected account as the vendor holds it: the row it would send, and the three facts the + * listing is filtered on. The two are kept apart so that the routing facts cannot leak into the + * row and be read by the adapter as fields the vendor sent. + */ +type AccountFixture = { + row: { id?: unknown; data?: unknown; authConfig?: unknown }; + userId: string; + status: AccountStatus; + toolkit: string; + /** + * The id of the auth config this account was minted against, which the listing filters + * `authConfigIds` on and which the row carries as `authConfig.id` — as `@composio/core` 0.18.1 + * builds every row (`src/utils/transformers/connectedAccounts.ts:55-62`). Written once here so + * the filter and the row cannot disagree; a row that spells its own `authConfig` keeps it, which + * is how a test hands over one Composio described unreadably. + */ + config: string; +}; + +/** An auth config as the vendor holds it, beside the app whose listing returns it. */ +type ConfigFixture = { + row: { id?: unknown; name?: unknown; status?: unknown; scopes?: unknown }; + toolkit: string; +}; + +/** A published action, beside the app whose listing returns it. */ +type ActionFixture = { row: { slug: string }; toolkit: string }; + +/** + * A vendor answering the three listings `grantsFor` reads, and refusing everything else. + * + * The three are the whole of the implementation's reach: whether this person holds an account for + * the app, which of this deployment's own auth configs stand for it (and what scopes they carry), + * and which actions the app publishes. A fourth call is a change in what the method does, and it + * names itself here rather than passing. + * + * EACH LISTING HONOURS ITS QUERY. `connectedAccounts.list` is filtered by `userIds`, `statuses` + * and `toolkitSlugs`; `authConfigs.list` by `toolkit`; `tools.list` by `toolkit_slug`. Those are + * the parameters that carry the whole of the scope isolation this file is about, and a fake that + * ignored them would answer "yes, connected, here are the scopes" to a question about the wrong + * person, about a half-finished consent, or about another app entirely. + */ +function vendorWith(parts: { + accounts: AccountFixture[]; + configs: ConfigFixture[]; + actions: ActionFixture[]; +}): ComposioVendor { + return { + tools: { + list: async (query) => ({ + items: parts.actions + .filter((action) => action.toolkit === query.toolkit_slug) + .map((action) => action.row), + next_cursor: null, + }), + getRawComposioToolBySlug: refuse("tools.getRawComposioToolBySlug"), + execute: refuse("tools.execute"), + }, + toolkits: { + list: refuse("toolkits.list"), + retrieve: refuse("toolkits.retrieve"), + }, + authConfigs: { + list: async (query) => ({ + items: parts.configs + .filter((config) => config.toolkit === query.toolkit) + .map((config) => config.row), + nextCursor: null, + }), + create: refuse("authConfigs.create"), + delete: refuse("authConfigs.delete"), + }, + connectedAccounts: { + list: async (query) => ({ + items: parts.accounts + .filter( + (account) => + query.userIds.includes(account.userId) && + query.toolkitSlugs.includes(account.toolkit) && + // `some` rather than `includes` only because the query's element type is the + // adapter's own private union: the comparison is the same one. + query.statuses.some((status) => status === account.status) && + // Absent means every config, which is what the vendor does with no filter at all. + (query.authConfigIds === undefined || + query.authConfigIds.includes(account.config)), + ) + .map((account) => + "authConfig" in account.row + ? account.row + : { ...account.row, authConfig: { id: account.config } }, + ), + nextCursor: null, + }), + link: refuse("connectedAccounts.link"), + create: refuse("connectedAccounts.create"), + delete: refuse("connectedAccounts.delete"), + }, + }; +} + +/** This deployment's own gmail config, which is where a gmail answer's scopes must come from. */ +const OUR_GMAIL_CONFIG: ConfigFixture = { + row: { + id: "ac_1", + name: "gmail (OpenBot)", + status: "ENABLED", + scopes: ["gmail.readonly", "gmail.send"], + }, + toolkit: "gmail", +}; + +/** + * A gmail config an operator made by hand in Composio's dashboard, carrying a scope nothing here + * chose. + * + * IT IS IN EVERY GMAIL FIXTURE BELOW ON PURPOSE. The configs listing is scoped to the project + * rather than to this deployment, so this row comes back beside ours on every read, and the only + * thing telling the two apart is the `(OpenBot)` suffix. Without such a row present, `grantsFor` + * reading `held` instead of `ours` answers identically to `grantsFor` reading `ours` — which is to + * say the suite could not see the distinction it is named after. `gmail.modify` appears nowhere + * else in this file, so it names which side of the filter an answer came from. + */ +const OPERATORS_GMAIL_CONFIG: ConfigFixture = { + row: { + id: "ac_0", + name: "gmail hand-made by an operator", + status: "ENABLED", + scopes: ["gmail.modify"], + }, + toolkit: "gmail", +}; + +describe("Composio's grantsFor", () => { + test("answers one state per action, the same one for each, carrying the config's scopes", async () => { + const { broker } = buildComposioClient( + vendorWith({ + accounts: [ + { + row: { id: "ca_1" }, + userId: ACCOUNT.vendorUserId, + status: "ACTIVE", + toolkit: "gmail", + config: "ac_1", + }, + ], + configs: [OPERATORS_GMAIL_CONFIG, OUR_GMAIL_CONFIG], + actions: [ + { row: { slug: "GMAIL_FETCH_EMAILS" }, toolkit: "gmail" }, + { row: { slug: "GMAIL_SEND_EMAIL" }, toolkit: "gmail" }, + { row: { slug: "GMAIL_CREATE_LABEL" }, toolkit: "gmail" }, + ], + }), + ); + + const grants = await broker.grantsFor({ + toolkit: "gmail", + account: ACCOUNT, + }); + + expect(grants).toEqual([ + { + action: "GMAIL_FETCH_EMAILS", + state: "authorized", + scopes: ["gmail.readonly", "gmail.send"], + authorization: "held", + }, + { + action: "GMAIL_SEND_EMAIL", + state: "authorized", + scopes: ["gmail.readonly", "gmail.send"], + authorization: "held", + }, + { + action: "GMAIL_CREATE_LABEL", + state: "authorized", + scopes: ["gmail.readonly", "gmail.send"], + authorization: "held", + }, + ]); + // The sameness is the claim, asserted on its own so that a per-action answer invented here + // fails even if each entry happens to be well-formed. + expect(new Set(grants.map((grant) => grant.state))).toEqual( + new Set(["authorized"]), + ); + // And the operator's scope is named rather than merely absent from the list above, so that a + // reader can see which of the two configs this answer was allowed to read. + // `scopes` lives on two of {@link GrantState}'s four members, so the narrowing is part of the + // claim: a grant that arrived as `needs-operator` or `unknown` carries no scope list at all + // and would make this assertion vacuous by having nothing to look through. + expect( + grants.flatMap((grant) => + "scopes" in grant ? grant.scopes : [`no scopes on a ${grant.state}`], + ), + ).not.toContain("gmail.modify"); + }); + + test("answers needs-consent for each action where this person has connected nothing", async () => { + const { broker } = buildComposioClient( + vendorWith({ + accounts: [], + configs: [ + { + row: { + id: "ac_1", + name: "gmail (OpenBot)", + status: "ENABLED", + scopes: ["gmail.readonly"], + }, + toolkit: "gmail", + }, + OPERATORS_GMAIL_CONFIG, + ], + actions: [ + { row: { slug: "GMAIL_FETCH_EMAILS" }, toolkit: "gmail" }, + { row: { slug: "GMAIL_SEND_EMAIL" }, toolkit: "gmail" }, + ], + }), + ); + + expect( + await broker.grantsFor({ toolkit: "gmail", account: ACCOUNT }), + ).toEqual([ + { + action: "GMAIL_FETCH_EMAILS", + state: "needs-consent", + scopes: ["gmail.readonly"], + }, + { + action: "GMAIL_SEND_EMAIL", + state: "needs-consent", + scopes: ["gmail.readonly"], + }, + ]); + }); + + /** + * SOMEBODY ELSE'S CONNECTION IS NOT THIS PERSON'S, and the only thing that makes it so is the + * `userIds` the listing is asked with. This is the gate `./access` leans on before running an + * action, so reading it off the wrong person is a call made under a grant its caller never gave. + */ + test("answers needs-consent where the only account for the app belongs to somebody else", async () => { + const { broker } = buildComposioClient( + vendorWith({ + accounts: [ + { + row: { id: "ca_other" }, + userId: OTHER_PERSON, + status: "ACTIVE", + toolkit: "gmail", + config: "ac_1", + }, + ], + configs: [OUR_GMAIL_CONFIG, OPERATORS_GMAIL_CONFIG], + actions: [{ row: { slug: "GMAIL_FETCH_EMAILS" }, toolkit: "gmail" }], + }), + ); + + expect( + await broker.grantsFor({ toolkit: "gmail", account: ACCOUNT }), + ).toEqual([ + { + action: "GMAIL_FETCH_EMAILS", + state: "needs-consent", + scopes: ["gmail.readonly", "gmail.send"], + }, + ]); + }); + + /** + * A GRANT THAT NO LONGER OPENS ANYTHING, OR NEVER DID, IS NOT A CONNECTION — see `CONNECTED` in + * the adapter, which is `["ACTIVE"]` and nothing else. Each row below is a state the vendor will + * hand back to a listing that forgot to ask, and each one of them reported as `authorized` tells + * a person their app is wired up and then fails every call they make with it. + */ + test.each([ + ["INITIATED" as const], + ["EXPIRED" as const], + ["INACTIVE" as const], + ["REVOKED" as const], + ["FAILED" as const], + ["INITIALIZING" as const], + ])( + "answers needs-consent where this person's only account is %s", + async (status) => { + const { broker } = buildComposioClient( + vendorWith({ + accounts: [ + { + row: { id: "ca_1" }, + userId: ACCOUNT.vendorUserId, + status, + toolkit: "gmail", + config: "ac_1", + }, + ], + configs: [OUR_GMAIL_CONFIG, OPERATORS_GMAIL_CONFIG], + actions: [{ row: { slug: "GMAIL_FETCH_EMAILS" }, toolkit: "gmail" }], + }), + ); + + expect( + await broker.grantsFor({ toolkit: "gmail", account: ACCOUNT }), + ).toEqual([ + { + action: "GMAIL_FETCH_EMAILS", + state: "needs-consent", + scopes: ["gmail.readonly", "gmail.send"], + }, + ]); + }, + ); + + /** + * ONE APP'S ANSWER IS ABOUT THAT APP. All three listings carry the toolkit, and all three of them + * are wrong in a different way without it: another app's account makes this one read connected, + * another app's config lends this one scopes nobody granted here, and another app's actions + * arrive as entries in a grant list for an app that does not publish them. + */ + test("reads the account, the config and the actions of the app asked about and no other", async () => { + const { broker } = buildComposioClient( + vendorWith({ + accounts: [ + { + row: { id: "ca_slack" }, + userId: ACCOUNT.vendorUserId, + status: "ACTIVE", + toolkit: "slack", + config: "ac_2", + }, + ], + configs: [ + OUR_GMAIL_CONFIG, + OPERATORS_GMAIL_CONFIG, + { + row: { + id: "ac_2", + name: "slack (OpenBot)", + status: "ENABLED", + scopes: ["slack.chat.write"], + }, + toolkit: "slack", + }, + ], + actions: [ + { row: { slug: "GMAIL_FETCH_EMAILS" }, toolkit: "gmail" }, + { row: { slug: "SLACK_SEND_MESSAGE" }, toolkit: "slack" }, + ], + }), + ); + + // This person is connected to slack and not to gmail, and the gmail answer says so without + // borrowing slack's action or slack's scope. + expect( + await broker.grantsFor({ toolkit: "gmail", account: ACCOUNT }), + ).toEqual([ + { + action: "GMAIL_FETCH_EMAILS", + state: "needs-consent", + scopes: ["gmail.readonly", "gmail.send"], + }, + ]); + expect( + await broker.grantsFor({ toolkit: "slack", account: ACCOUNT }), + ).toEqual([ + { + action: "SLACK_SEND_MESSAGE", + state: "authorized", + scopes: ["slack.chat.write"], + authorization: "held", + }, + ]); + }); + + /** + * THE SCOPES ARE THE CONFIG THE CONNECTION WAS MINTED AGAINST, WHICH NEED NOT BE OURS. + * + * `isConnected` — the gate `./access` asks before running an action — counts an account on any + * config, because the call that runs an action names the person and the toolkit, not the + * account. So a person whose only gmail account sits on an operator's hand-made config CAN act, + * and `authorized` is the truth about them. What they hold is that config's scope set: answering + * `authorized` with THIS deployment's scopes describes a grant they never made. Narrowing the + * state to our configs instead would tell them to consent to an app the gate already lets them + * use — the two read-only seam members disagreeing about one person. + */ + test("answers authorized with the operator's config's scopes where that is the only config this person is connected on", async () => { + const { broker } = buildComposioClient( + vendorWith({ + accounts: [ + { + row: { id: "ca_op" }, + userId: ACCOUNT.vendorUserId, + status: "ACTIVE", + toolkit: "gmail", + config: "ac_0", + }, + ], + configs: [OUR_GMAIL_CONFIG, OPERATORS_GMAIL_CONFIG], + actions: [{ row: { slug: "GMAIL_FETCH_EMAILS" }, toolkit: "gmail" }], + }), + ); + + expect( + await broker.grantsFor({ toolkit: "gmail", account: ACCOUNT }), + ).toEqual([ + { + action: "GMAIL_FETCH_EMAILS", + state: "authorized", + scopes: ["gmail.modify"], + authorization: "held", + }, + ]); + // And the gate agrees, which is the consistency the state is measured for. + expect( + await broker.isConnected({ toolkit: "gmail", account: ACCOUNT }), + ).toBe(true); + }); + + test("answers authorized with every scope this person holds where they are connected on both configs", async () => { + const { broker } = buildComposioClient( + vendorWith({ + accounts: [ + { + row: { id: "ca_op" }, + userId: ACCOUNT.vendorUserId, + status: "ACTIVE", + toolkit: "gmail", + config: "ac_0", + }, + { + row: { id: "ca_ours" }, + userId: ACCOUNT.vendorUserId, + status: "ACTIVE", + toolkit: "gmail", + config: "ac_1", + }, + ], + configs: [OUR_GMAIL_CONFIG, OPERATORS_GMAIL_CONFIG], + actions: [{ row: { slug: "GMAIL_FETCH_EMAILS" }, toolkit: "gmail" }], + }), + ); + + expect( + await broker.grantsFor({ toolkit: "gmail", account: ACCOUNT }), + ).toEqual([ + { + action: "GMAIL_FETCH_EMAILS", + state: "authorized", + scopes: ["gmail.modify", "gmail.readonly", "gmail.send"], + authorization: "held", + }, + ]); + }); + + /** + * A CONFIG NOBODY CAN NAME LENDS NO SCOPES — neither ours nor anybody's. An account whose + * `authConfig` Composio described unreadably is still an ACTIVE account, so the state is + * `authorized`; what it was minted against is not something this deployment can read, and the + * answer says nothing about it rather than borrowing this deployment's scope set. The same + * report-not-refuse posture `scopesOf` takes for a config publishing no scopes at all. + */ + test("lends no config's scopes to an account whose config Composio did not name", async () => { + const { broker } = buildComposioClient( + vendorWith({ + accounts: [ + { + row: { id: "ca_blank", authConfig: { id: 7 } }, + userId: ACCOUNT.vendorUserId, + status: "ACTIVE", + toolkit: "gmail", + config: "ac_1", + }, + ], + configs: [OUR_GMAIL_CONFIG, OPERATORS_GMAIL_CONFIG], + actions: [{ row: { slug: "GMAIL_FETCH_EMAILS" }, toolkit: "gmail" }], + }), + ); + + expect( + await broker.grantsFor({ toolkit: "gmail", account: ACCOUNT }), + ).toEqual([ + { + action: "GMAIL_FETCH_EMAILS", + state: "authorized", + scopes: [], + authorization: "held", + }, + ]); + }); + + /** + * A config publishing no scope set is an empty list rather than a refusal, because this method + * REPORTS rather than acts: Composio publishes no scopes for a key-scheme config at all, and an + * app whose grant cannot be described scope by scope is still an app this person is connected to. + */ + test("carries an empty scope list where the config publishes none", async () => { + const { broker } = buildComposioClient( + vendorWith({ + accounts: [ + { + row: { id: "ca_1" }, + userId: ACCOUNT.vendorUserId, + status: "ACTIVE", + toolkit: "firecrawl", + config: "ac_1", + }, + ], + configs: [ + { + row: { id: "ac_1", name: "firecrawl (OpenBot)", status: "ENABLED" }, + toolkit: "firecrawl", + }, + { + row: { + id: "ac_0", + name: "firecrawl hand-made by an operator", + status: "ENABLED", + scopes: ["firecrawl.everything"], + }, + toolkit: "firecrawl", + }, + ], + actions: [{ row: { slug: "FIRECRAWL_SCRAPE" }, toolkit: "firecrawl" }], + }), + ); + + expect( + await broker.grantsFor({ toolkit: "firecrawl", account: ACCOUNT }), + ).toEqual([ + { + action: "FIRECRAWL_SCRAPE", + state: "authorized", + scopes: [], + authorization: "held", + }, + ]); + }); +}); + +/** + * `authorizations` is a DECLARED value, and Composio's declaration is `null`. + * + * Read with a presence test and never with a vendor name: the point of the field is that the + * broker says what it runs, on the object it hands over. + */ +describe("Composio's authorizations", () => { + test("declares null rather than offering a flow it does not run", () => { + const { broker } = buildComposioClient( + vendorWith({ accounts: [], configs: [], actions: [] }), + ); + + expect(broker.authorizations).toBeNull(); + }); +}); + +/** + * THE NULLABILITY IS ONLY WORTH ANYTHING IF OMITTING THE FIELD FAILS, which is a claim about the + * type and therefore a claim only `tsc` can settle — hence this file in `server/tsconfig.json`. + * + * An optional-shaped capability is the exact shape that failed open at `store.ts:1631`: nine broker + * stubs omitted `grantIsLocal`, the gate's exemption read `undefined`, and a call ran for somebody + * who had connected nothing. The two assertions below are the two halves of that — a literal + * missing `authorizations` must not compile, and a literal declaring it `null` must. + */ +describe("the declared sub-surface", () => { + /** Every member of the seam except `authorizations`, which is what the two tests vary. */ + const members = { + grantIsLocal: true, + // Nothing here asks what auth provider a connection is held under. + authProviderOf: async () => null, + grantsFor: async (): Promise => [], + listApps: async () => [], + ensureAuthConfig: async () => "not-needed" as const, + deleteAuthConfig: async () => {}, + authorize: async () => ({ + redirectUrl: "https://openbot.test/x", + authorizationId: null, + }), + isConnected: async () => false, + revoke: async () => false, + connectionFields: async () => [], + connectWithFields: async () => ({ accountId: "ca_1" }), + revokeAccount: async () => {}, + accountName: async () => null, + }; + + test("a broker literal omitting authorizations does not compile", () => { + // @ts-expect-error `authorizations` is required: a broker must SAY whether it runs a + // correlated, pollable authorization flow, and an omission is not an answer. + const omitted: ConnectedAppBroker = members; + const declared: ConnectedAppBroker = { ...members, authorizations: null }; + + expect(omitted.grantIsLocal).toBe(true); + expect(declared.authorizations).toBeNull(); + }); + + /** + * THE OTHER HALF, AND IT IS ABOUT THE BROKER RATHER THAN ABOUT THE FLOW. This used to read + * `expect(flow).not.toBeNull()` on an object literal three lines above it — true of every object + * ever written, and silent on the one thing the test is named for: that a broker which RUNS the + * flow carries it on the declared field, where a route's presence test finds it and reaches the + * two members through it. + */ + test("a broker that runs the flow declares the sub-surface instead", async () => { + const flow: AuthorizationFlow = { + status: async () => ({ status: "completed", userId: null, scopes: [] }), + confirmReturn: async () => ({ mismatch: true }), + }; + + const declared: ConnectedAppBroker = { ...members, authorizations: flow }; + + // The presence test a route makes, and then the flow itself, reached only through the field. + expect(declared.authorizations).not.toBeNull(); + expect(declared.authorizations).toBe(flow); + expect(await declared.authorizations?.status("auth_1")).toEqual({ + status: "completed", + userId: null, + scopes: [], + }); + expect( + await declared.authorizations?.confirmReturn({ + handle: "flow_1", + vendorUserId: ACCOUNT.vendorUserId, + }), + ).toEqual({ mismatch: true }); + }); +}); diff --git a/server/tests/config.test.ts b/server/tests/config.test.ts index 7e5b1ddbe..e037d7659 100644 --- a/server/tests/config.test.ts +++ b/server/tests/config.test.ts @@ -1201,3 +1201,19 @@ test("a Composio key is read when set and absent when not", () => { .composioApiKey, ).toBe("ak_example"); }); + +test("an Arcade key and a broker provider are read, and an unknown provider is refused", () => { + const unset = loadConfig(baseEnvironment); + expect(unset).toHaveProperty("arcadeApiKey", undefined); + expect(unset).toHaveProperty("brokerProvider", undefined); + const set = loadConfig({ + ...baseEnvironment, + ARCADE_API_KEY: " arc_example ", + OPENBOT_BROKER_PROVIDER: " arcade ", + }); + expect(set.arcadeApiKey).toBe("arc_example"); + expect(set.brokerProvider).toBe("arcade"); + expect(() => + loadConfig({ ...baseEnvironment, OPENBOT_BROKER_PROVIDER: "zapier" }), + ).toThrow(/OPENBOT_BROKER_PROVIDER must be "composio" or "arcade"/); +}); diff --git a/server/tests/demonstrations-store.integration.test.ts b/server/tests/demonstrations-store.integration.test.ts index 863c9da5c..2579167b8 100644 --- a/server/tests/demonstrations-store.integration.test.ts +++ b/server/tests/demonstrations-store.integration.test.ts @@ -32,6 +32,7 @@ const other = `${prefix}-other`; const bot = `${prefix}-bot`; const skillSlug = `demo-${randomUUID().slice(0, 8)}`; const plugins = createPluginStore({ + brokerProvider: "composio", database, auditStore: createAuditStore(database), credentials: createCredentialStore(database), diff --git a/server/tests/directory-vendor-sentences.test.ts b/server/tests/directory-vendor-sentences.test.ts new file mode 100644 index 000000000..c5fac8d21 --- /dev/null +++ b/server/tests/directory-vendor-sentences.test.ts @@ -0,0 +1,133 @@ +// server/tests/directory-vendor-sentences.test.ts +/** + * The three sentences the Arcade directory screen renders, in the active broker's own name. + * + * `apps.error.message` wins over the client's fallback, so a server sentence that spells Composio + * is what an Arcade operator reads. The directory read, the enable path's directory failure and its + * not-listed refusal each name the vendor and (for the first two) its key setting; the vendor and + * the setting come off the active provider's profile. + * + * THE COMPOSIO RENDERINGS ARE ASSERTED AS EXACT STRINGS. A regex would pass against a reworded + * sentence, and rewording a Composio sentence is the one thing this change must not do. + */ +import { describe, expect, test } from "bun:test"; +import { Hono, type MiddlewareHandler } from "hono"; +import type { AppVariables } from "../src/auth/guards"; +import type { BrokerProvider } from "../src/plugins/access"; +import type { ComposioBroker } from "../src/plugins/broker"; +import { createPluginRoutes } from "../src/plugins/routes"; +import type { PluginStore } from "../src/plugins/store"; + +function deployment(provider: BrokerProvider, listApps: () => Promise) { + const broker = { + grantIsLocal: true, + authProviderOf: async () => null, + authorizations: null, + authorize: async () => { + throw new Error("never asked"); + }, + listApps, + } as unknown as ComposioBroker; + const signedIn: MiddlewareHandler<{ Variables: AppVariables }> = async ( + context, + next, + ) => { + context.set("actor", { + id: "admin-1", + email: "admin@example.test", + role: "admin", + } as never); + await next(); + }; + const app = new Hono().route( + "/api/plugins", + createPluginRoutes( + { + brokerProvider: provider, + serverUrls: async () => [], + } as unknown as PluginStore, + signedIn, + async () => true, + { + publicUrl: "https://openbot.example", + appUrl: "https://app.example", + encryptionKey: `${"A".repeat(43)}=`, + personHasAccess: async () => true, + }, + { broker, provider }, + ), + ); + const url = "http://openbot.test/api/plugins/composio/apps"; + return { + read: () => app.request(url), + enable: (slug: string) => + app.request(url, { + method: "POST", + headers: { "content-type": "application/json" }, + body: JSON.stringify({ slug }), + }), + }; +} + +const down = async (): Promise => { + throw new Error("socket hang up"); +}; +const empty = async (): Promise => [] as never; + +const EXPECTED: Record< + BrokerProvider, + { unavailable: string; notListed: string } +> = { + composio: { + unavailable: + "Composio would not answer with its app directory, and said nothing about why. Check that COMPOSIO_API_KEY is this project's key, and check Composio's status if it persists.", + notListed: "nope is not an app Composio lists for this deployment.", + }, + arcade: { + unavailable: + "Arcade would not answer with its app directory, and said nothing about why. Check that ARCADE_API_KEY is this project's key, and check Arcade's status if it persists.", + notListed: "nope is not an app Arcade lists for this deployment.", + }, +}; + +for (const provider of ["composio", "arcade"] as const) { + describe(`a ${provider} deployment names its own vendor`, () => { + test("the directory read", async () => { + const response = await deployment(provider, down).read(); + expect(response.status).toBe(502); + expect(((await response.json()) as { error: string }).error).toBe( + EXPECTED[provider].unavailable, + ); + }); + test("the enable path when the directory is down", async () => { + const response = await deployment(provider, down).enable("gmail"); + expect(response.status).toBe(502); + expect(((await response.json()) as { error: string }).error).toBe( + EXPECTED[provider].unavailable, + ); + }); + test("the enable path when the app is not listed", async () => { + const response = await deployment(provider, empty).enable("nope"); + expect(response.status).toBe(400); + expect(((await response.json()) as { error: string }).error).toBe( + EXPECTED[provider].notListed, + ); + }); + }); +} + +describe("an Arcade operator is never told about Composio", () => { + test("none of the three sentences mentions it", async () => { + const it = deployment("arcade", down); + const none = deployment("arcade", empty); + const bodies = [ + await (await it.read()).text(), + await (await it.enable("gmail")).text(), + await (await none.enable("nope")).text(), + ]; + for (const body of bodies) { + expect(body).toMatch(/Arcade/); + expect(body).not.toMatch(/composio/i); + } + }); +}); diff --git a/server/tests/fixture-identity-distinct.test.ts b/server/tests/fixture-identity-distinct.test.ts new file mode 100644 index 000000000..9fc377931 --- /dev/null +++ b/server/tests/fixture-identity-distinct.test.ts @@ -0,0 +1,421 @@ +// server/tests/fixture-identity-distinct.test.ts +/** + * Guard: an account fixture's LOCAL id and its VENDOR id are not the same value. + * + * WHY THIS EXISTS. An account ref carries two ids for two different people-in-two-systems: + * `userId` is who the person is HERE, `vendorUserId` is who the broker knows them as. A broker that + * asks the vendor under `userId` is asking about somebody else. Round 2's A8a found every one of the + * 79 person fixtures in `composio-adapter.test.ts` spelling both as `"user_1"` — so no test could + * tell the two apart, and five planted wrong-identity defects (`revoke`, `isConnected`, + * `accountName`, `authorize`, `connectWithFields` each asking under `account.userId`) passed 245 of + * 245 tests. A8a separated the ids and the same plants now redden 1 to 18 tests each. Nothing + * stopped the collapse coming back; this does. + * + * WHAT IT SEES. Every object literal, in every `.ts`/`.tsx` file under the scanned roots, that + * names BOTH fields of a pair in {@link PAIRS}. The two values are compared after resolving + * same-file `const` bindings, so `vendorUserId: VENDOR_USER` with `const VENDOR_USER = "user_1"` + * beside `userId: "user_1"` IS a collapse — that is A8a's exact shape, and a purely textual compare + * would miss it. Shorthand (`{ userId, vendorUserId: userId }`) is read as the name it binds. + * + * WHAT IT DOES NOT SEE — the stated boundary, so nobody reads this as wider than it is: + * - a value imported from another file is compared by NAME, not resolved; + * - a `let`, a parameter, or a name bound more than once in the file is compared by name, not + * value (two different parameters that receive the same string at runtime are invisible); + * - an object built by spread (`{ ...base, vendorUserId: x }`) or by assignment after the fact — + * only literals naming both fields are read; + * - raw SQL (`INSERT … (user_id, vendor_user_id) VALUES …`) — strings are not parsed; + * - production code: `server/src` is not scanned. See the note on `accountRefFor` below. + * + * NOT EVERY COLLAPSE IS A DEFECT, WHICH IS WHY THIS IS A RATCHET AND NOT A BAN. Production's + * `accountRefFor` (`server/src/plugins/store.ts`) answers a Personal app with + * `{ holder: "person", userId: actorId, vendorUserId: actorId }` — for a person, the vendor identity + * IS the local id today. A store-level test that seeds a `brokered_connections` row or expects that + * ref is right to collapse the two: it mirrors what production writes. A test that hands an account + * STRAIGHT TO A BROKER is not — the broker's whole job there is to pick the right field, and a + * collapsed fixture makes that choice untestable. The scan cannot tell those apart, so every + * collapse standing today is recorded in {@link KNOWN_COLLAPSES}, keyed by path + quoted expression + * with a count (never `path:line` — the line-keyed ALLOW list in `assertion-shape.test.ts` collided + * three waves running; `sole-definition.test.ts`'s path-keyed list never has). Equality both ways: + * + * - MORE fails: a new collapse anywhere — including any file with no entry at all, which is + * every broker-adapter suite today. Separate the ids; if the new site truly mirrors + * `accountRefFor`'s person ref, raise that entry's count and say so in the commit. + * - FEWER fails: a collapse was separated, so the list is stale. Lower or delete the entry. + * + * A SECOND RULE, ACROSS FIXTURES. Within one file, no literal id may be a local id in one fixture + * and a vendor id in another. Two crossed fixtures are as blind as one collapsed one: a broker that + * asks under the wrong field finds the other fixture's account and the test passes. + */ +import { expect, test } from "bun:test"; +import { existsSync, readFileSync } from "node:fs"; +import { join } from "node:path"; +import ts from "typescript"; +import { sourceFiles } from "./support/source-scan"; + +const REPO = join(import.meta.dir, "../.."); + +/** Where fixtures live. Production is deliberately absent — see the module comment. */ +const ROOTS = ["server/tests", "app/tests"]; + +/** One row per pair of fields that name the same person in two systems. Add pairs as rows. */ +const PAIRS: readonly { local: string; vendor: string }[] = [ + { local: "userId", vendor: "vendorUserId" }, + { local: "user_id", vendor: "vendor_user_id" }, +]; + +/** + * Collapses standing at `f4f6974b`, by file, as `" | ": count`. + * + * RECORDED, NOT BLESSED. These are of three kinds, and only the first two are harmless: + * + * - ROWS seeded the way production writes them (`brokered_connections`, `pending_authorizations` + * for a person, vendor id = actor id), and refs a fake `accountRefFor` answers in that shape. + * - EXPECTATIONS of what a route handed a broker spy, after the real `accountRefFor` collapsed + * the two — right for as long as production does. + * - REFS FED STRAIGHT TO A STORE METHOD OR A BROKER — the A8a shape one layer up. The store reads + * `account.vendorUserId` to find rows, and with both ids equal nothing in these files can tell + * if it read `userId` instead. Known: `composio-connections.test.ts` (`askerId` into + * `connectBrokeredWithFields`, `recheckBrokeredConnection`, `confirmBrokeredConnection`, + * `disconnectBrokered`, `probeBrokeredConnection`), `composio-connection-kinds.test.ts` + * (`PERSON_ACCOUNT`), `arcade-disconnect-cascade.test.ts` (`disconnectBrokered`), + * `arcade-siblings.test.ts` (`siblingApps`), `store-vendor-vocabulary.test.ts` + * (`recheckBrokeredConnection`), and `composio-broker-seam.test.ts` / + * `test-network-guard.test.ts` (`broker.authorize`, whose subject there is transport, not + * identity). Separating these is fix-cycle work; when one is separated this list goes red + * until its entry is lowered, which is the point. + * + * Every broker-adapter suite (`composio-adapter`, `arcade-adapter*`, `arcade-*-engine`, + * `composio-grants-for`, …) has NO entry, so its allowance is zero. + */ +const KNOWN_COLLAPSES: Record> = { + "server/tests/account-mode.integration.test.ts": { + "`p1-${suite}` | `p1-${suite}`": 1, + "`p2-${suite}` | `p2-${suite}`": 1, + }, + "server/tests/arcade-authorize-route.test.ts": { + "actor | actor": 1, + }, + "server/tests/arcade-disconnect-cascade.test.ts": { + "userId | userId": 2, + }, + "server/tests/arcade-grants-route.test.ts": { + "n.viewer | n.viewer": 2, + }, + "server/tests/arcade-journey.integration.test.ts": { + "ADMIN | ADMIN": 2, + }, + "server/tests/arcade-siblings.test.ts": { + "mine | mine": 1, + "userId | userId": 5, + }, + "server/tests/arcade-verify.test.ts": { + "ACTOR | ACTOR": 3, + "vendorUserId | vendorUserId": 1, + }, + "server/tests/composio-broker-seam.test.ts": { + '"u" | "u"': 1, + }, + "server/tests/composio-connection-kinds.test.ts": { + "person | person": 14, + }, + "server/tests/composio-connections.test.ts": { + '"" | ""': 3, + "askerId | askerId": 59, + "leaverId | leaverId": 4, + }, + "server/tests/memory-defaults.integration.test.ts": { + "owner | owner": 1, + }, + "server/tests/plugin-routes.test.ts": { + "ADMIN.id | ADMIN.id": 1, + "DEV_ACTOR.id | DEV_ACTOR.id": 1, + "actorId | actorId": 1, + }, + "server/tests/plugin-store.integration.test.ts": { + '"" | ""': 2, + '"user-a" | "user-a"': 1, + '"user-b" | "user-b"': 1, + '"user_asker" | "user_asker"': 2, + '"user_leaver" | "user_leaver"': 4, + "userId | userId": 14, + }, + "server/tests/remove-server-foreign-provenance.test.ts": { + "userId | userId": 1, + }, + "server/tests/routes-arcade-urls.test.ts": { + '"admin-1" | "admin-1"': 1, + "actorId | actorId": 1, + }, + "server/tests/routes-vendor-vocabulary.test.ts": { + "actorId | actorId": 1, + }, + "server/tests/shared-brokered-schema.integration.test.ts": { + "`a-${suite}` | `a-${suite}`": 2, + "`b-${suite}` | `b-${suite}`": 1, + }, + "server/tests/shared-brokered-store.integration.test.ts": { + "asker | asker": 2, + }, + "server/tests/store-scheme-sites.test.ts": { + "userId | userId": 1, + }, + "server/tests/store-vendor-vocabulary.test.ts": { + '"person-1" | "person-1"': 2, + }, + "server/tests/test-network-guard.test.ts": { + '"u" | "u"': 1, + }, + "server/tests/vendor-deadline-sync-throw.test.ts": { + "actorId | actorId": 1, + }, +}; + +/** A literal that was a local id in one fixture and a vendor id in another, by file. */ +const KNOWN_CROSSINGS: Record = {}; + +type Site = { + path: string; + local: string; + vendor: string; + localValue: string; + vendorValue: string; +}; + +/** Every `const NAME = ` in the file whose NAME is bound exactly once there. */ +function constBindings(source: ts.SourceFile): Map { + const seen = new Map(); + const init = new Map(); + const bind = (name: ts.BindingName) => { + if (ts.isIdentifier(name)) + seen.set(name.text, (seen.get(name.text) ?? 0) + 1); + else + for (const el of name.elements) + if (!ts.isOmittedExpression(el)) bind(el.name); + }; + const visit = (node: ts.Node) => { + if (ts.isVariableDeclaration(node)) { + bind(node.name); + const isConst = + ts.isVariableDeclarationList(node.parent) && + (node.parent.flags & ts.NodeFlags.Const) !== 0; + if (isConst && ts.isIdentifier(node.name) && node.initializer) { + init.set(node.name.text, node.initializer); + } + } else if (ts.isParameter(node)) bind(node.name); + else if ( + (ts.isFunctionDeclaration(node) || ts.isClassDeclaration(node)) && + node.name + ) { + bind(node.name); + } + ts.forEachChild(node, visit); + }; + visit(source); + for (const [name, count] of seen) if (count > 1) init.delete(name); + return init; +} + +/** The value an expression stands for, as far as one file can say: a quoted string, or its text. */ +function resolve( + expr: ts.Expression, + source: ts.SourceFile, + consts: Map, + depth = 0, +): string { + if (depth > 8) return expr.getText(source); + if ( + ts.isParenthesizedExpression(expr) || + ts.isAsExpression(expr) || + ts.isSatisfiesExpression(expr) || + ts.isNonNullExpression(expr) + ) { + return resolve(expr.expression, source, consts, depth + 1); + } + if (ts.isStringLiteral(expr) || ts.isNoSubstitutionTemplateLiteral(expr)) { + return JSON.stringify(expr.text); + } + if (ts.isIdentifier(expr)) { + const bound = consts.get(expr.text); + return bound ? resolve(bound, source, consts, depth + 1) : expr.text; + } + if (ts.isTemplateExpression(expr)) { + const parts = [expr.head.text]; + for (const span of expr.templateSpans) { + parts.push(`\${${resolve(span.expression, source, consts, depth + 1)}}`); + parts.push(span.literal.text); + } + return `\`${parts.join("")}\``; + } + return expr.getText(source).replace(/\s+/g, " "); +} + +/** Every object literal in `text` that names both fields of a pair, with both values resolved. */ +function pairSites(path: string, text: string): Site[] { + const kind = path.endsWith(".tsx") ? ts.ScriptKind.TSX : ts.ScriptKind.TS; + const source = ts.createSourceFile( + path, + text, + ts.ScriptTarget.Latest, + true, + kind, + ); + const consts = constBindings(source); + const out: Site[] = []; + const field = (node: ts.ObjectLiteralExpression, key: string) => + node.properties.find( + (p) => + p.name !== undefined && + (ts.isIdentifier(p.name) || ts.isStringLiteral(p.name)) && + p.name.text === key, + ); + const readField = ( + p: ts.ObjectLiteralElementLike, + ): [string, string] | undefined => { + if (ts.isPropertyAssignment(p)) { + return [ + p.initializer.getText(source).replace(/\s+/g, " "), + resolve(p.initializer, source, consts), + ]; + } + if (ts.isShorthandPropertyAssignment(p)) { + return [p.name.text, resolve(p.name, source, consts)]; + } + return undefined; + }; + const visit = (node: ts.Node) => { + if (ts.isObjectLiteralExpression(node)) { + for (const { local, vendor } of PAIRS) { + const l = field(node, local); + const v = field(node, vendor); + const lv = l && readField(l); + const vv = v && readField(v); + if (lv && vv) { + out.push({ + path, + local: lv[0], + vendor: vv[0], + localValue: lv[1], + vendorValue: vv[1], + }); + } + } + } + ts.forEachChild(node, visit); + }; + visit(source); + return out; +} + +function scan(): Site[] { + const out: Site[] = []; + for (const root of ROOTS) { + const full = join(REPO, root); + if (!existsSync(full)) continue; + for (const file of sourceFiles(full, [".ts", ".tsx"])) { + out.push( + ...pairSites(file.slice(REPO.length + 1), readFileSync(file, "utf8")), + ); + } + } + return out; +} + +const isCollapse = (s: Site) => s.localValue === s.vendorValue; +const isLiteral = (v: string) => v.startsWith('"'); + +/** Collapses by file, as `" | ": count`. */ +function collapsesOf(sites: Site[]): Record> { + const out: Record> = {}; + for (const s of sites.filter(isCollapse)) { + const byExpr = out[s.path] ?? {}; + out[s.path] = byExpr; + const key = `${s.local} | ${s.vendor}`; + byExpr[key] = (byExpr[key] ?? 0) + 1; + } + return out; +} + +/** Literal ids used as a local id in one distinct fixture and a vendor id in another, by file. */ +function crossingsOf(sites: Site[]): Record { + const byFile = new Map< + string, + { locals: Set; vendors: Set } + >(); + for (const s of sites) { + if (isCollapse(s)) continue; + const f = byFile.get(s.path) ?? { locals: new Set(), vendors: new Set() }; + byFile.set(s.path, f); + if (isLiteral(s.localValue)) f.locals.add(s.localValue); + if (isLiteral(s.vendorValue)) f.vendors.add(s.vendorValue); + } + const out: Record = {}; + for (const [path, { locals, vendors }] of byFile) { + const both = [...locals].filter((v) => vendors.has(v)).sort(); + if (both.length > 0) out[path] = both; + } + return out; +} + +const sites = scan(); + +test("the scan reaches the fixtures it claims to cover", () => { + // An enumerator that silently stopped seeing files would turn every rule below green. + // A8a's suite alone holds 79 person fixtures naming both ids. + const adapter = sites.filter( + (s) => s.path === "server/tests/composio-adapter.test.ts", + ); + expect(adapter.length).toBeGreaterThanOrEqual(79); + expect(new Set(sites.map((s) => s.path)).size).toBeGreaterThanOrEqual(40); +}); + +test("no account fixture names its local id and its vendor id as the same value, beyond the record", () => { + expect(collapsesOf(sites)).toEqual(KNOWN_COLLAPSES); +}); + +test("no literal id is a local id in one fixture and a vendor id in another, beyond the record", () => { + expect(crossingsOf(sites)).toEqual(KNOWN_CROSSINGS); +}); + +test("positive control: A8a's collapse, spelled through a const, is seen", () => { + const collapsed = pairSites( + "x.test.ts", + `const VENDOR_USER = "user_1"; + broker.revoke({ account: { holder: "person", userId: "user_1", vendorUserId: VENDOR_USER } });`, + ); + expect(collapsesOf(collapsed)).toEqual({ + "x.test.ts": { '"user_1" | VENDOR_USER': 1 }, + }); + const separated = pairSites( + "x.test.ts", + `const VENDOR_USER = "composio_user_1"; + broker.revoke({ account: { holder: "person", userId: "user_1", vendorUserId: VENDOR_USER } });`, + ); + expect(collapsesOf(separated)).toEqual({}); +}); + +test("positive control: shorthand, snake_case, and crossed fixtures are seen", () => { + const sitesOf = pairSites( + "y.test.ts", + `function hold(vendorUserId: string) { return { userId: vendorUserId, vendorUserId }; } + const row = { user_id: \`u-\${suite}\`, vendor_user_id: \`u-\${suite}\` }; + const a = { userId: "alice", vendorUserId: "v_alice" }; + const b = { userId: "v_alice", vendorUserId: "v_bob" };`, + ); + expect(collapsesOf(sitesOf)).toEqual({ + "y.test.ts": { + "vendorUserId | vendorUserId": 1, + "`u-${suite}` | `u-${suite}`": 1, + }, + }); + expect(crossingsOf(sitesOf)).toEqual({ "y.test.ts": ['"v_alice"'] }); +}); + +test("negative control: a name bound twice is not resolved through either binding", () => { + // Two `const id` in different scopes: resolving either would invent a collapse or hide one. + const sitesOf = pairSites( + "z.test.ts", + `{ const id = "a"; } { const id = "b"; } + const ref = { userId: "a", vendorUserId: id };`, + ); + expect(collapsesOf(sitesOf)).toEqual({}); +}); diff --git a/server/tests/fixtures/arcade-catalogue.json b/server/tests/fixtures/arcade-catalogue.json new file mode 100644 index 000000000..8b920da5a --- /dev/null +++ b/server/tests/fixtures/arcade-catalogue.json @@ -0,0 +1,458 @@ +{ + "note": "Captured from the live Arcade catalogue on 2026-09-15, read-only. Shapes are verbatim; identifiers that could be project-specific are redacted. Regenerate rather than hand-edit.", + "tools": { + "read": { + "fully_qualified_name": "Apollo.EnrichOrganization@0.1.0", + "qualified_name": "Apollo.EnrichOrganization", + "name": "EnrichOrganization", + "description": "Turn a company domain into firmographics (industry, size, revenue, funding,\nlocation) so a rep can qualify and size an account. Consumes one enrichment\ncredit on a match; when the plan is out of credits the result reports\nstatus=insufficient_credits rather than failing.", + "toolkit": { + "name": "Apollo", + "description": "Arcade tools designed for LLMs to interact with Apollo.io sales intelligence", + "version": "0.1.0" + }, + "input": { + "parameters": [ + { + "name": "domain", + "required": true, + "description": "Company domain to look up, such as apollo.io. A full URL or www prefix is accepted and normalized.", + "value_schema": { + "val_type": "string" + }, + "inferrable": true + } + ] + }, + "output": { + "available_modes": [ + "value", + "error" + ], + "description": "The matched company, or found=False when no match.", + "value_schema": { + "val_type": "json", + "properties": { + "status": { + "val_type": "string", + "enum": [ + "ok", + "insufficient_credits" + ] + }, + "found": { + "val_type": "boolean" + }, + "id": { + "val_type": "string" + }, + "name": { + "val_type": "string" + }, + "domain": { + "val_type": "string" + }, + "industry": { + "val_type": "string" + }, + "estimated_num_employees": { + "val_type": "integer" + }, + "annual_revenue": { + "val_type": "integer", + "nullable": true + }, + "total_funding": { + "val_type": "integer", + "nullable": true + }, + "founded_year": { + "val_type": "integer", + "nullable": true + }, + "location": { + "val_type": "string" + }, + "phone": { + "val_type": "string", + "nullable": true + } + }, + "required_keys": [ + "annual_revenue", + "domain", + "estimated_num_employees", + "found", + "founded_year", + "id", + "industry", + "location", + "name", + "phone", + "status", + "total_funding" + ] + } + }, + "requirements": { + "met": false, + "secrets": [ + { + "key": "APOLLO_API_KEY", + "met": false, + "status_reason": "Secret APOLLO_API_KEY not found" + } + ] + }, + "metadata": { + "classification": { + "service_domains": [ + "crm" + ] + }, + "behavior": { + "operations": [ + "read" + ], + "read_only": true, + "destructive": false, + "idempotent": true, + "open_world": true + } + } + }, + "write": { + "fully_qualified_name": "Asana.AttachFileToTask@1.2.2", + "qualified_name": "Asana.AttachFileToTask", + "name": "AttachFileToTask", + "description": "Attaches a file to an Asana task\n\nProvide exactly one of file_content_str, file_content_base64, or file_content_url, never more\nthan one.\n\n- Use file_content_str for text files (will be encoded using file_encoding)\n- Use file_content_base64 for binary files like images, PDFs, etc.\n- Use file_content_url if the file is hosted on an external URL", + "toolkit": { + "name": "Asana", + "description": "Arcade tools designed for LLMs to interact with Asana", + "version": "1.2.2" + }, + "input": { + "parameters": [ + { + "name": "task_id", + "required": true, + "description": "The ID of the task to attach the file to.", + "value_schema": { + "val_type": "string" + }, + "inferrable": true + }, + { + "name": "file_name", + "required": true, + "description": "The name of the file to attach with format extension. E.g. 'Image.png' or 'Report.pdf'.", + "value_schema": { + "val_type": "string" + }, + "inferrable": true + }, + { + "name": "file_content_str", + "required": false, + "description": "The string contents of the file to attach. Use this if the file is a text file. Defaults to None.", + "value_schema": { + "val_type": "string" + }, + "inferrable": true + }, + { + "name": "file_content_base64", + "required": false, + "description": "The base64-encoded binary contents of the file. Use this for binary files like images or PDFs. Defaults to None.", + "value_schema": { + "val_type": "string" + }, + "inferrable": true + }, + { + "name": "file_content_url", + "required": false, + "description": "The URL of the file to attach. Use this if the file is hosted on an external URL. Defaults to None.", + "value_schema": { + "val_type": "string" + }, + "inferrable": true + }, + { + "name": "file_encoding", + "required": false, + "description": "The encoding of the file to attach. Only used with file_content_str. Defaults to 'utf-8'.", + "value_schema": { + "val_type": "string" + }, + "inferrable": true + } + ] + }, + "output": { + "available_modes": [ + "value", + "error" + ], + "description": "The task with the file attached.", + "value_schema": { + "val_type": "json" + } + }, + "requirements": { + "met": true, + "authorization": { + "id": "arcade-asana", + "provider_id": "asana", + "provider_type": "oauth2", + "oauth2": { + "scopes": [ + "default" + ] + }, + "status": "active" + } + }, + "metadata": { + "classification": { + "service_domains": [ + "project_management" + ] + }, + "behavior": { + "operations": [ + "create" + ], + "read_only": false, + "destructive": false, + "idempotent": false, + "open_world": true + } + } + }, + "destructive": { + "fully_qualified_name": "Attio.RemoveFromList@1.1.3", + "qualified_name": "Attio.RemoveFromList", + "name": "RemoveFromList", + "description": "Remove a record from an Attio list.\n\nNote: Use the entry_id, not the record_id. Get entry_id from get_list_entries.", + "toolkit": { + "name": "Attio", + "description": "Arcade tools designed for LLMs to interact with Attio CRM", + "version": "1.1.3" + }, + "input": { + "parameters": [ + { + "name": "list_id", + "required": true, + "description": "List UUID", + "value_schema": { + "val_type": "string" + }, + "inferrable": true + }, + { + "name": "entry_id", + "required": true, + "description": "Entry UUID (not record ID)", + "value_schema": { + "val_type": "string" + }, + "inferrable": true + } + ] + }, + "output": { + "available_modes": [ + "value", + "error" + ], + "description": "Removal confirmation", + "value_schema": { + "val_type": "json" + } + }, + "requirements": { + "met": true, + "authorization": { + "id": "arcade-attio", + "provider_id": "attio", + "provider_type": "oauth2", + "oauth2": { + "scopes": [ + "call_recording:read", + "list_configuration:read-write", + "list_entry:read-write", + "meeting:read", + "note:read-write", + "object_configuration:read-write", + "record_permission:read-write", + "task:read-write", + "user_management:read" + ] + }, + "status": "active" + } + }, + "metadata": { + "classification": { + "service_domains": [ + "crm" + ] + }, + "behavior": { + "operations": [ + "delete" + ], + "read_only": false, + "destructive": true, + "idempotent": true, + "open_world": true + } + } + }, + "unclassified": { + "fully_qualified_name": "AirtableApi.AddBaseCollaborator@0.4.1", + "qualified_name": "AirtableApi.AddBaseCollaborator", + "name": "AddBaseCollaborator", + "description": "Add a collaborator to an Airtable base.\n\n Use this tool to add a new collaborator to a specified Airtable base. It facilitates inviting one collaborator at a time.\n\n Note: Understanding the request schema is necessary to properly create\n the stringified JSON input object for execution.\n\nThis operation also requires path parameters.\n\n Modes:\n - GET_REQUEST_SCHEMA: Returns the schema. Only call if you don't\n already have it. Do NOT call repeatedly if you already received\n the schema.\n - EXECUTE: Performs the operation with the provided request body\n JSON.\n Note: You must also provide the required path parameters when executing.\n\n If you need the schema, call with mode='get_request_schema' ONCE, then execute.\n ", + "toolkit": { + "name": "AirtableApi", + "description": "Tools that enable LLMs to interact directly with the airtable API.", + "version": "0.4.1" + }, + "input": { + "parameters": [ + { + "name": "mode", + "required": true, + "description": "Operation mode: 'get_request_schema' returns the OpenAPI spec for the request body, 'execute' performs the actual operation", + "value_schema": { + "val_type": "string", + "enum": [ + "get_request_schema", + "execute" + ] + }, + "inferrable": true + }, + { + "name": "base_id", + "required": false, + "description": "The ID of the Airtable base to which the collaborator will be added. Required when mode is 'execute', ignored when mode is 'get_request_schema'.", + "value_schema": { + "val_type": "string" + }, + "inferrable": true + }, + { + "name": "request_body", + "required": false, + "description": "Stringified JSON representing the request body. Required when mode is 'execute', ignored when mode is 'get_request_schema'", + "value_schema": { + "val_type": "string" + }, + "inferrable": true + } + ] + }, + "output": { + "available_modes": [ + "value", + "error" + ], + "description": "Response from the API endpoint 'add-base-collaborator'.", + "value_schema": { + "val_type": "json" + } + }, + "requirements": { + "met": false, + "authorization": { + "id": "arcade-airtable", + "provider_type": "oauth2", + "oauth2": { + "scopes": [ + "workspacesAndBases:write" + ] + }, + "status": "inactive", + "status_reason": "Provider not found" + } + } + }, + "unscoped": { + "fully_qualified_name": "AirtableApi.ListBases@0.4.1", + "qualified_name": "AirtableApi.ListBases", + "name": "ListBases", + "description": "Appended to the recorded response: a generated action whose oauth2 requirement declares no scopes.", + "toolkit": { + "name": "AirtableApi", + "description": "Tools that enable LLMs to interact directly with the airtable API.", + "version": "0.4.1" + }, + "input": { + "parameters": [ + { + "name": "mode", + "required": true, + "description": "Operation mode: 'get_request_schema' returns the OpenAPI spec for the request body, 'execute' performs the actual operation", + "value_schema": { + "val_type": "string", + "enum": [ + "get_request_schema", + "execute" + ] + }, + "inferrable": true + }, + { + "name": "base_id", + "required": false, + "description": "The ID of the Airtable base to which the collaborator will be added. Required when mode is 'execute', ignored when mode is 'get_request_schema'.", + "value_schema": { + "val_type": "string" + }, + "inferrable": true + }, + { + "name": "request_body", + "required": false, + "description": "Stringified JSON representing the request body. Required when mode is 'execute', ignored when mode is 'get_request_schema'", + "value_schema": { + "val_type": "string" + }, + "inferrable": true + } + ] + }, + "output": { + "available_modes": [ + "value", + "error" + ], + "description": "Response from the API endpoint 'add-base-collaborator'.", + "value_schema": { + "val_type": "json" + } + }, + "requirements": { + "met": false, + "authorization": { + "id": "arcade-airtable", + "provider_type": "oauth2", + "oauth2": {}, + "status": "inactive", + "status_reason": "Provider not found" + } + } + } + }, + "page_envelope": { + "limit": 2, + "offset": 0, + "page_count": 2, + "total_count": 8258, + "items": [] + } +} diff --git a/server/tests/gate-foreign-provenance-call.test.ts b/server/tests/gate-foreign-provenance-call.test.ts new file mode 100644 index 000000000..5e10cb00b --- /dev/null +++ b/server/tests/gate-foreign-provenance-call.test.ts @@ -0,0 +1,152 @@ +// server/tests/gate-foreign-provenance-call.test.ts +import { + afterAll, + afterEach, + beforeEach, + describe, + expect, + test, +} from "bun:test"; +import { randomUUID } from "node:crypto"; +import { eq } from "drizzle-orm"; +import { createAuditStore } from "../src/audit"; +import { createDatabase } from "../src/db/client"; +import { + agents, + brokeredConnections, + mcpServers, + mcpTools, +} from "../src/db/schema"; +import type { ConnectedAppBroker } from "../src/plugins/broker"; +import { useComposioClient } from "../src/plugins/composio"; +import { createPluginStore } from "../src/plugins/store"; +import { TEST_POOL, testDatabaseUrl } from "./support/database"; + +/* + * THE EXEMPTION BELONGS TO THE BROKER THAT HOLDS THE GRANT, NOT TO WHICHEVER ONE IS CONFIGURED. + * + * `connectionTokenFor` waives the local connection row where the ACTIVE broker declares the grant + * is the vendor's — Arcade checks per action, per call, at the vendor, so a local row would be a + * weaker second copy of that check. A row minted at the OTHER broker is not covered by that + * promise: nothing checks it at Arcade, because it is not an Arcade app. Read off the active + * broker, the waiver crossed over to it and let a Composio app be called with no consent row of + * any kind — on a deployment that cannot connect, check or disconnect that app at all. + */ +const database = createDatabase(testDatabaseUrl(), TEST_POOL); + +afterAll(async () => { + await database.$client.close(); +}); + +const suite = randomUUID().slice(0, 8); +const foreign = `left-over-gh-${suite}`; +const bot = `bot-${suite}`; +const admin = `admin-${suite}`; +const asker = `asker-${suite}`; + +/** Arcade's shape: the grant is the vendor's, so no local row is demanded of its own apps. */ +const brokerStub: ConnectedAppBroker = { + grantIsLocal: false, + authorizations: null, + authProviderOf: async () => null, + grantsFor: async () => [], + listApps: async () => [], + ensureAuthConfig: async () => "standing", + deleteAuthConfig: async () => {}, + authorize: async () => ({ + redirectUrl: "https://vendor.example/consent", + authorizationId: null, + }), + isConnected: async () => true, + revoke: async () => true, + connectionFields: async () => [], + connectWithFields: async () => ({ accountId: "ca_1" }), + revokeAccount: async () => {}, + accountName: async () => "acme-bot", +}; + +const store = createPluginStore({ + brokerProvider: "arcade", + database, + auditStore: createAuditStore(database), + credentials: {} as never, + encryptionKey: "x".repeat(44), + policy: () => ({ mode: "enforce" as const, deny: [], allow: ["true"] }), + broker: brokerStub, + deploymentId: `acme-${suite}`, + sharedUse: async () => ({ allowed: true }), +}); + +/** The ids the Composio transport was handed, which is where a call that went out is visible. */ +function recordingTransport(sentAs: string[]) { + useComposioClient({ + listActions: async () => [], + execute: async ({ userId }) => { + sentAs.push(userId); + return { successful: true, data: {}, error: null } as never; + }, + }); +} + +async function clean() { + await database + .delete(brokeredConnections) + .where(eq(brokeredConnections.app, foreign)); + await database.delete(mcpServers).where(eq(mcpServers.id, foreign)); + await database.delete(agents).where(eq(agents.id, bot)); +} + +beforeEach(async () => { + await clean(); + await database + .insert(agents) + .values({ id: bot, name: "Helper", type: "built_in", configuration: {} }); +}); +afterEach(async () => { + useComposioClient(null); + await clean(); +}); + +describe("a brokered row minted at the other broker", () => { + test("is not waved through by the configured broker's vendor-held grant", async () => { + const sentAs: string[] = []; + recordingTransport(sentAs); + // A row left behind by a deployment that used to broker through Composio. Nothing here can + // connect it, check it or end it: this deployment's broker is Arcade. + await database.insert(mcpServers).values({ + id: foreign, + title: "Left-over GitHub", + vendor: "Composio", + url: `composio://${foreign}`, + provenance: "composio", + authScheme: "OAUTH2", + accountMode: "personal", + }); + await database.insert(mcpTools).values({ + serverId: foreign, + name: "GITHUB_LIST_ISSUES", + vendorName: "GITHUB_LIST_ISSUES", + description: "List issues.", + effect: "read", + version: "1", + }); + await store.grant( + "mcp", + `${foreign}/GITHUB_LIST_ISSUES`, + bot, + `${admin}@example.test`, + ); + + await expect( + store.callTool({ + ref: `${foreign}/GITHUB_LIST_ISSUES`, + args: {}, + botId: bot, + actorId: asker, + }), + ).rejects.toThrow( + "You have not connected your Left-over GitHub account. Connect it in Settings and ask again.", + ); + expect(sentAs).toEqual([]); + }); +}); diff --git a/server/tests/gate-grant-is-local.test.ts b/server/tests/gate-grant-is-local.test.ts new file mode 100644 index 000000000..2fa1906e4 --- /dev/null +++ b/server/tests/gate-grant-is-local.test.ts @@ -0,0 +1,220 @@ +// server/tests/gate-grant-is-local.test.ts +import { + afterAll, + afterEach, + beforeEach, + describe, + expect, + test, +} from "bun:test"; +import { randomUUID } from "node:crypto"; +import { eq } from "drizzle-orm"; +import { createAuditStore } from "../src/audit"; +import { createDatabase } from "../src/db/client"; +import { + agents, + brokeredConnections, + mcpServers, + mcpTools, +} from "../src/db/schema"; +import type { ConnectedAppBroker } from "../src/plugins/broker"; +import { useComposioClient } from "../src/plugins/composio"; +import { createPluginStore } from "../src/plugins/store"; +import { TEST_POOL, testDatabaseUrl } from "./support/database"; + +const database = createDatabase(testDatabaseUrl(), TEST_POOL); + +/* The pool this file opened, given back. `bun test` runs every file in one process and nothing + * reaps an idle connection, so a pool held to the end of the run is two connections the rest of + * the suite cannot have. */ +afterAll(async () => { + await database.$client.close(); +}); +const suite = randomUUID().slice(0, 8); +const shared = `team-gh-${suite}`; +const personal = `my-gh-${suite}`; +const bot = `bot-${suite}`; +const admin = `admin-${suite}`; +const asker = `asker-${suite}`; +const VENDOR_ID = `openbot-deployment:acme-${suite}:R`; + +/* + * THE ONE VARIABLE IN THIS FILE IS A DECLARED PROPERTY, NOT A VENDOR NAME. + * + * Every store below is built with `brokerProvider: "composio"`, over Composio's own url scheme, + * provenance and transport. The only thing that differs between the refusing case and the + * proceeding one is `grantIsLocal` on the broker object — which is the assertion that the gate in + * `connectionTokenFor` reads the property and could not be reading the vendor's name, because the + * name is identical in all three tests. + */ +const brokerStub: Omit = { + // Nothing here reads either member; both are declared because the seam requires a broker to + // SAY what it runs — see `ConnectedAppBroker.authorizations`. + authorizations: null, + // Nothing here asks what auth provider a connection is held under. + authProviderOf: async () => null, + grantsFor: async () => [], + listApps: async () => [], + ensureAuthConfig: async () => "standing", + deleteAuthConfig: async () => {}, + authorize: async () => ({ + redirectUrl: "https://vendor.example/consent", + authorizationId: null, + }), + isConnected: async () => true, + revoke: async () => true, + connectionFields: async () => [], + connectWithFields: async () => ({ accountId: "ca_1" }), + revokeAccount: async () => {}, + accountName: async () => "acme-bot", +}; + +const policy = { mode: "enforce" as const, deny: [], allow: ["true"] }; +const credentialsStub = {} as never; + +/** The ids the transport was actually handed, which is the only place identity is observable. */ +function recordingTransport(sentAs: string[]) { + useComposioClient({ + listActions: async () => [], + execute: async ({ userId }) => { + sentAs.push(userId); + return { successful: true, data: {}, error: null } as never; + }, + }); +} + +function storeWith(grantIsLocal: boolean) { + return createPluginStore({ + brokerProvider: "composio", + database, + auditStore: createAuditStore(database), + credentials: credentialsStub, + encryptionKey: "x".repeat(44), + policy: () => policy, + broker: { ...brokerStub, grantIsLocal }, + deploymentId: `acme-${suite}`, + sharedUse: async () => ({ allowed: true }), + }); +} + +/** An app at its own url, with one action and NO connection row anywhere. */ +async function seed(app: string, mode: "shared" | "personal") { + await database.insert(mcpServers).values({ + id: app, + title: "Team GitHub", + vendor: "Composio", + url: `composio://${app}`, + provenance: "composio", + authScheme: "OAUTH2", + accountMode: mode, + sharedVendorUserId: mode === "shared" ? VENDOR_ID : null, + }); + await database.insert(mcpTools).values({ + serverId: app, + name: "GITHUB_LIST_ISSUES", + vendorName: "GITHUB_LIST_ISSUES", + description: "List issues.", + effect: "read", + version: "1", + }); +} + +async function clean() { + for (const app of [shared, personal]) { + await database + .delete(brokeredConnections) + .where(eq(brokeredConnections.app, app)); + await database.delete(mcpServers).where(eq(mcpServers.id, app)); + } + await database.delete(agents).where(eq(agents.id, bot)); +} + +beforeEach(async () => { + await clean(); + await database + .insert(agents) + .values({ id: bot, name: "Helper", type: "built_in", configuration: {} }); +}); +afterEach(async () => { + useComposioClient(null); + await clean(); +}); + +describe("connectionTokenFor asks the broker where the grant lives", () => { + test("a local grant with no connection row refuses in today's words", async () => { + const sentAs: string[] = []; + recordingTransport(sentAs); + const store = storeWith(true); + await seed(shared, "shared"); + await store.grant( + "mcp", + `${shared}/GITHUB_LIST_ISSUES`, + bot, + `${admin}@example.test`, + ); + + await expect( + store.callTool({ + ref: `${shared}/GITHUB_LIST_ISSUES`, + args: {}, + botId: bot, + actorId: asker, + }), + ).rejects.toThrow( + "Team GitHub is shared across this deployment and no account is connected to it yet. Ask an administrator to connect it.", + ); + expect(sentAs).toEqual([]); + }); + + test("a vendor-held grant with no connection row lets the call through", async () => { + const sentAs: string[] = []; + recordingTransport(sentAs); + const store = storeWith(false); + await seed(personal, "personal"); + await store.grant( + "mcp", + `${personal}/GITHUB_LIST_ISSUES`, + bot, + `${admin}@example.test`, + ); + + const answer = await store.callTool({ + ref: `${personal}/GITHUB_LIST_ISSUES`, + args: {}, + botId: bot, + actorId: asker, + }); + expect(answer.isError).toBe(false); + expect(sentAs).toEqual([asker]); + }); + + /* + * THE ASSERTION THAT THIS REMOVED A PRECONDITION AND NOT AN AUTHORIZATION. + * + * A Shared app still acts as the deployment, whoever asks and whether or not a row exists. The + * identity is derived from the app's mode exactly as before — the asker cannot name it — so what + * the transport is handed is the app's `shared_vendor_user_id`, never `asker`. + */ + test("a vendor-held grant on a Shared app still runs as the app's shared identity", async () => { + const sentAs: string[] = []; + recordingTransport(sentAs); + const store = storeWith(false); + await seed(shared, "shared"); + await store.grant( + "mcp", + `${shared}/GITHUB_LIST_ISSUES`, + bot, + `${admin}@example.test`, + ); + + const answer = await store.callTool({ + ref: `${shared}/GITHUB_LIST_ISSUES`, + args: {}, + botId: bot, + actorId: asker, + }); + expect(answer.isError).toBe(false); + expect(sentAs).toEqual([VENDOR_ID]); + expect(sentAs).not.toContain(asker); + }); +}); diff --git a/server/tests/google-drive-rest.test.ts b/server/tests/google-drive-rest.test.ts index 198928ce1..1370edf2c 100644 --- a/server/tests/google-drive-rest.test.ts +++ b/server/tests/google-drive-rest.test.ts @@ -360,6 +360,30 @@ describe("reading a file asks Drive what it is first", () => { // One call: the metadata lookup. No download followed it. expect(calls).toHaveLength(1); }); + + /* + * A type Google never defined is declined like any other unreadable one. + * + * Whoever uploaded the file chose the type string, so the export table is asked a question by + * somebody outside this deployment. Looked up in a plain object, `toString` is answered with + * `Object.prototype.toString` — truthy, so the file is treated as an exportable editor format: + * the refusal above is skipped and `?mimeType=function toString() { [native code] }` is sent to + * Google in its place. + */ + test("a made-up type borrowed from Object.prototype is not an exportable format", async () => { + for (const mimeType of ["toString", "constructor", "valueOf"]) { + const calls = stubFetch({ id: "odd1", name: "Odd", mimeType }); + + const result = await callTool(connection, "read_file_content", { + fileId: "odd1", + }); + + expect(result.isError).toBe(true); + expect(result.text).toContain(mimeType); + // One call: the metadata lookup. No export followed it. + expect(calls).toHaveLength(1); + } + }); }); /* diff --git a/server/tests/headless-components.test.ts b/server/tests/headless-components.test.ts index 1d102516d..d6758971b 100644 --- a/server/tests/headless-components.test.ts +++ b/server/tests/headless-components.test.ts @@ -91,6 +91,33 @@ describe("headless components mirror the compiled gallery", () => { } }); + /** + * The report name arrives from a model, so it is as much somebody else's string as a query + * parameter is, and the map it looks up must answer with what was put in it and nothing a plain + * object inherits. An object lookup answers `report: "toString"` with `Object.prototype.toString` + * — truthy, so it passes the `functionName ?` guard — and that function is then handed to the + * grant check as the data function this component reads, and to `callComponentFunction` as a + * function name. Both copies of the map, the app's and the server's mirror, are asserted here. + */ + test("a borrowed Object.prototype member is not a report and reads nothing", () => { + const activity = ACTIVITY.find( + (entry) => entry.name === "showActivityReport", + ); + const mirror = HEADLESS_COMPONENTS.find( + (spec) => spec.name === "showActivityReport", + ); + for (const report of [ + "toString", + "constructor", + "__proto__", + "valueOf", + "hasOwnProperty", + ]) { + expect(activity?.reads?.({ report })).toEqual([]); + expect(mirror?.reads?.({ report })).toEqual([]); + } + }); + test("the table's cross-field rule is enforced headlessly too", () => { const table = HEADLESS_COMPONENTS.find((spec) => spec.name === "showTable"); expect( @@ -111,10 +138,15 @@ describe("headless components mirror the compiled gallery", () => { test("arguments a headless turn accepts draw the real chart with the app's renderer", async () => { const appRequire = createRequire(join(import.meta.dir, "../../app/")); - const { createElement } = appRequire("react") as typeof import("react"); + // The TYPES come from the app's install for the same reason the values do: `server` has no + // React. A bare `typeof import("react")` does not resolve from here, and an unresolved type + // import is not an error bun can see — it silently makes both casts `any`. + const { createElement } = appRequire( + "react", + ) as typeof import("../../app/node_modules/@types/react"); const { renderToStaticMarkup } = appRequire( "react-dom/server", - ) as typeof import("react-dom/server"); + ) as typeof import("../../app/node_modules/@types/react-dom/server"); const args = { title: "Open issues by team", points: [ diff --git a/server/tests/intelligence-entitlement-check.test.ts b/server/tests/intelligence-entitlement-check.test.ts index f053d409e..de63d1a0a 100644 --- a/server/tests/intelligence-entitlement-check.test.ts +++ b/server/tests/intelligence-entitlement-check.test.ts @@ -71,6 +71,20 @@ describe("what Intelligence's entitlement answer means for this deployment", () entitlementWarning(notReady("unavailable", "SOMETHING_NEW"))?.fix, ).toContain("memory"); }); + + /* + * The code is Intelligence's string, not ours, so a code borrowed from `Object.prototype` is as + * unknown as any other and deserves the same sentence. Looked up in a plain object, `toString` is + * answered with a function, which is truthy and so wins the `||` fallback — leaving `fix` a + * function where a sentence belongs, and a warning that says nothing wherever it is shown. + */ + test("a code borrowed from Object.prototype is unknown like any other", () => { + for (const code of ["toString", "constructor", "valueOf"]) { + const fix = entitlementWarning(notReady("unavailable", code))?.fix; + expect(typeof fix).toBe("string"); + expect(fix).toContain("memory"); + } + }); }); describe("reporting it at boot", () => { diff --git a/server/tests/mcp-grant-removal.integration.test.ts b/server/tests/mcp-grant-removal.integration.test.ts index 70b4f0ad8..e359f980a 100644 --- a/server/tests/mcp-grant-removal.integration.test.ts +++ b/server/tests/mcp-grant-removal.integration.test.ts @@ -23,6 +23,14 @@ const keptRef = `${keptServerId}/${keptAction}`; const botId = `agent_grant_removal_${suite}`; const broker: ConnectedAppBroker = { + // This stub stands in for Composio, whose grant is held locally; see `ConnectedAppBroker.grantIsLocal`. + grantIsLocal: true, + // Nothing here asks what auth provider a connection is held under. + authProviderOf: async () => null, + // Nothing here reads either member; both are declared because the seam requires a broker to + // SAY what it runs — see `ConnectedAppBroker.authorizations`. + authorizations: null, + grantsFor: async () => [], listApps: async () => [], ensureAuthConfig: async () => undefined, deleteAuthConfig: async () => undefined, @@ -47,6 +55,7 @@ const auditStore = { }; const store = createPluginStore({ + brokerProvider: "composio", database, auditStore, credentials: { diff --git a/server/tests/memory-defaults.integration.test.ts b/server/tests/memory-defaults.integration.test.ts index 1029f9bf3..ef43f30d7 100644 --- a/server/tests/memory-defaults.integration.test.ts +++ b/server/tests/memory-defaults.integration.test.ts @@ -38,6 +38,9 @@ const plugins = createPluginStore({ auditStore: createAuditStore(database), credentials: createCredentialStore(database), encryptionKey: Buffer.alloc(32, 7).toString("base64"), + // This suite's apps are `composio://` rows with `provenance: "composio"`, and the store has no + // default for this: it dispatches the toolkit read on it, so the fixtures name their own broker. + brokerProvider: "composio", policy: () => ({ mode: "enforce", deny: [], allow: ["true"] }), callVendor: async () => ({ text: "[]", isError: false }), }); @@ -150,30 +153,35 @@ beforeAll(async () => { { serverId: app, name: "LINEAR_GET_ISSUE", + vendorName: "LINEAR_GET_ISSUE", effect: "read", inputSchema: { type: "object", required: ["id"] }, }, { serverId: app, name: "LINEAR_LIST_LABELS", + vendorName: "LINEAR_LIST_LABELS", effect: "read", inputSchema: { type: "object" }, }, { serverId: app, name: "LINEAR_CREATE_ISSUE", + vendorName: "LINEAR_CREATE_ISSUE", effect: "write", inputSchema: { type: "object" }, }, { serverId: app, name: "LINEAR_LIST_ISSUES", + vendorName: "LINEAR_LIST_ISSUES", effect: "read", inputSchema: { type: "object" }, }, { serverId: unconnected, name: "NOTES_LIST", + vendorName: "NOTES_LIST", effect: "read", inputSchema: { type: "object" }, }, diff --git a/server/tests/memory-store.integration.test.ts b/server/tests/memory-store.integration.test.ts index de733595b..00c8079a8 100644 --- a/server/tests/memory-store.integration.test.ts +++ b/server/tests/memory-store.integration.test.ts @@ -27,6 +27,7 @@ let vendorText = let vendorError = false; const calls: { actorId?: string; botId?: string }[] = []; const plugins = createPluginStore({ + brokerProvider: "composio", database, auditStore: createAuditStore(database), credentials: createCredentialStore(database), @@ -82,12 +83,14 @@ beforeAll(async () => { { serverId: server, name: "read_documents", + vendorName: "read_documents", effect: "read", inputSchema: {}, }, { serverId: server, name: "write_document", + vendorName: "write_document", effect: "write", inputSchema: {}, }, diff --git a/server/tests/migrate-teardown.test.ts b/server/tests/migrate-teardown.test.ts new file mode 100644 index 000000000..d6a8bd9ca --- /dev/null +++ b/server/tests/migrate-teardown.test.ts @@ -0,0 +1,58 @@ +import { describe, expect, mock, test } from "bun:test"; +import type { Sql } from "postgres"; +import { runMigrations } from "../scripts/migrate"; +import { MigrationsOutOfReachError } from "../src/db/apply-migrations"; + +/** + * The migration runner releases its connection in a `finally`, and an awaited rejection there + * REPLACES whatever was already in flight. The error the run exists to deliver — the refusal that + * names the migrations a database walked past — must survive a release that fails. + * + * No database: a connection whose `end` rejects is the whole subject, and a real one does not + * reject on demand. + */ + +const REFUSAL = + "refusing to migrate: 0057_example is stamped earlier than a migration this database has applied"; + +function connectionWhoseEndRejects(failure: Error) { + const end = mock(async () => { + throw failure; + }); + return { client: { end } as unknown as Sql, end }; +} + +async function settle(run: Promise): Promise { + return run.then( + () => "resolved", + (error: unknown) => error, + ); +} + +describe("runMigrations teardown", () => { + test("a rejecting release does not replace the out-of-reach refusal", async () => { + const { client, end } = connectionWhoseEndRejects( + new Error("write CONNECTION_ENDED"), + ); + const refuse = async () => { + throw new MigrationsOutOfReachError(REFUSAL); + }; + + const outcome = await settle(runMigrations(client, "unused", refuse)); + + expect(outcome).toBeInstanceOf(MigrationsOutOfReachError); + expect((outcome as Error).message).toBe(REFUSAL); + expect(end).toHaveBeenCalledTimes(1); + }); + + test("a rejecting release after a clean run is still a failure", async () => { + const teardown = new Error("write CONNECTION_ENDED"); + const { client, end } = connectionWhoseEndRejects(teardown); + const migrate = async () => {}; + + const outcome = await settle(runMigrations(client, "unused", migrate)); + + expect(outcome).toBe(teardown); + expect(end).toHaveBeenCalledTimes(1); + }); +}); diff --git a/server/tests/migration-journal.test.ts b/server/tests/migration-journal.test.ts index 42ddf52ee..922f5f6d1 100644 --- a/server/tests/migration-journal.test.ts +++ b/server/tests/migration-journal.test.ts @@ -16,6 +16,14 @@ import { readdir, readFile } from "node:fs/promises"; * and the only symptom was an integration test failing with `relation "skill_tools" does not exist`. * * Nothing else in the build would have caught that, which is why this is a test rather than a note. + * + * WHAT THIS FILE CANNOT SEE, so that nobody reads it as covering more than it does: every check + * here reads ONE journal and asks whether it agrees with itself. The same swallowing happens + * between journals — a merge that renumbers a branch's migrations gives the migrations it merged in + * a `when` older than the stamp a pre-merge database has already recorded, and those are skipped on + * that database while this file, and a fresh database, and CI, all stay green. That half lives in + * `migration-reach.test.ts` and in the guard it tests, which runs against the database rather than + * against the folder, because it is the only place the evidence exists. */ type Entry = { idx: number; tag: string; when: number }; @@ -37,6 +45,8 @@ type Snapshot = { name: string; columns?: Record; indexes?: Record; + /** The predicate, not merely the name: see {@link checkDisagreements}. */ + checkConstraints?: Record; } >; }; @@ -144,6 +154,205 @@ test("column declarations exclude the cast on a quoted JSON default", () => { }); }); +/** + * The text between a `(` and the `)` that closes it, with nested parentheses and quoted strings + * kept whole. + * + * A CHECK body cannot be matched by a regular expression, because every interesting one ends in + * `IN ('a', 'b')` and the paren that closes the list is not the paren that closes the check. A + * lazy `\(.*?\)` therefore truncates exactly the predicates whose roster is the thing worth + * guarding. `open` is the index OF the opening paren. + */ +const balanced = (sql: string, open: number): string => { + let depth = 0; + for (let at = open; at < sql.length; at += 1) { + const character = sql[at]; + if (character === "'") { + // A postgres string literal, in which parens mean nothing. '' inside one is an escaped quote, + // and falls out of this loop for free: it closes and immediately reopens. + at += 1; + while (at < sql.length && sql[at] !== "'") at += 1; + continue; + } + if (character === "(") depth += 1; + else if (character === ")") { + depth -= 1; + if (depth === 0) return sql.slice(open + 1, at); + } + } + return sql.slice(open + 1); +}; + +/** Two spellings of one predicate are one predicate; only the whitespace is free to differ. */ +const normalised = (expression: string) => + expression.trim().replace(/\s+/g, " "); + +type Check = { table: string; name: string; value: string }; + +/** + * Every CHECK the migration declares, in both spellings postgres allows. + * + * `generate` writes them inline inside `CREATE TABLE` for a new table and as `ALTER TABLE ... ADD + * CONSTRAINT` for an existing one, so a reader of only one spelling is blind to half the + * migrations in the folder — and `0057` is in the half that would have been missed. + */ +const checksIn = (sql: string): Check[] => { + const found: Check[] = []; + + for (const match of sql.matchAll( + /ALTER TABLE "([^"]+)" ADD CONSTRAINT "([^"]+)" CHECK\s*\(/gi, + )) { + const open = match.index + match[0].length - 1; + found.push({ + table: match[1]!, + name: match[2]!, + value: normalised(balanced(sql, open)), + }); + } + + for (const table of sql.matchAll( + /CREATE TABLE (?:IF NOT EXISTS )?"([^"]+)"\s*\(/gi, + )) { + const body = balanced(sql, table.index + table[0].length - 1); + for (const match of body.matchAll(/CONSTRAINT "([^"]+)" CHECK\s*\(/gi)) { + const open = match.index + match[0].length - 1; + found.push({ + table: table[1]!, + name: match[1]!, + value: normalised(balanced(body, open)), + }); + } + } + + return found; +}; + +/** Constraints the migration drops by name, whatever kind they are; only checks are asked about. */ +const constraintsDropped = (sql: string) => + quoted( + sql, + /ALTER TABLE "([^"]+)" DROP CONSTRAINT (?:IF EXISTS )?"([^"]+)"/gi, + ).map(([table, name]) => `${table}.${name}`); + +const checksOf = (snapshot: Snapshot, table: string) => + new Map( + Object.values(tableIn(snapshot, table)?.checkConstraints ?? {}).map( + (check) => [check.name, normalised(check.value)], + ), + ); + +/** + * What the migration does to the CHECK constraints, against what the snapshots say happened. + * + * THE NAME IS NOT THE PREDICATE, and a CHECK is nothing but its predicate. Widening a roster — + * `IN ('composio', 'arcade')` grown one more member — leaves the constraint present, named the + * same, and refusing every value anybody wrote a test about, so a test that inserts a junk row and + * reads back the name of what refused it stays green through the mutation. The snapshot beside the + * migration is the only artifact that records the predicate itself, and until this check existed + * nothing compared the two: the pair could disagree about what the database is allowed to hold and + * every test in this file went on agreeing. + * + * Read in both directions, like the tables above. A snapshot that records a predicate no statement + * writes leaves `generate` diffing against a constraint no database has; a statement no snapshot + * records has the next `generate` re-emit it, and `ADD CONSTRAINT` is not conditional. + */ +const checkDisagreements = ( + sql: string, + before: Snapshot, + after: Snapshot, + droppedTables: string[], +) => { + const added = checksIn(sql); + const dropped = new Set(constraintsDropped(sql)); + const problems: string[] = []; + const tables = new Set([ + ...tableNames(before), + ...tableNames(after), + ...added.map((check) => check.table), + ]); + + for (const table of tables) { + const was = checksOf(before, table); + const is = checksOf(after, table); + const writes = new Map( + added + .filter((check) => check.table === table) + .map((check) => [check.name, check.value]), + ); + + for (const [name, value] of is) + if (was.get(name) !== value && writes.get(name) !== value) + problems.push( + was.has(name) + ? `the snapshot changes CHECK "${name}" on "${table}", the migration never writes that predicate` + : `the snapshot adds CHECK "${name}" on "${table}", the migration never adds that predicate`, + ); + + for (const [name, value] of writes) + if (is.get(name) !== value) + problems.push( + `the migration adds CHECK "${name}" on "${table}", the snapshot does not record that predicate`, + ); + + for (const [name, value] of was) + if ( + is.get(name) !== value && + !dropped.has(`${table}.${name}`) && + !droppedTables.includes(table) + ) + problems.push( + `the snapshot ${is.has(name) ? "changes" : "drops"} CHECK "${name}" on "${table}", the migration never drops it`, + ); + + for (const name of was.keys()) + if (dropped.has(`${table}.${name}`) && is.get(name) === was.get(name)) + problems.push( + `the migration drops CHECK "${name}" on "${table}", the snapshot still has it unchanged`, + ); + } + + return problems; +}; + +test("a CHECK body is read past the parentheses of its own roster", () => { + expect( + checksIn( + `ALTER TABLE "t" ADD CONSTRAINT "t_check" CHECK ("t"."c" IN ('a', 'b'));`, + ), + ).toEqual([{ table: "t", name: "t_check", value: `"t"."c" IN ('a', 'b')` }]); +}); + +test("a CHECK declared inside CREATE TABLE is read as the table's own", () => { + expect( + checksIn( + `CREATE TABLE "t" (\n\t"c" text NOT NULL,\n\tCONSTRAINT "t_check" CHECK ("t"."c" IN ('a'))\n);`, + ), + ).toEqual([{ table: "t", name: "t_check", value: `"t"."c" IN ('a')` }]); +}); + +test("a widened roster disagrees with the snapshot that records the narrow one", () => { + const snapshot = (value: string): Snapshot => ({ + tables: { + "public.t": { + name: "t", + checkConstraints: { t_check: { name: "t_check", value } }, + }, + }, + }); + + expect( + checkDisagreements( + `ALTER TABLE "t" DROP CONSTRAINT "t_check";--> statement-breakpoint\nALTER TABLE "t" ADD CONSTRAINT "t_check" CHECK ("t"."c" IN ('a', 'b', 'c'));`, + snapshot(`"t"."c" IN ('a')`), + snapshot(`"t"."c" IN ('a', 'b')`), + [], + ), + ).toEqual([ + `the snapshot changes CHECK "t_check" on "t", the migration never writes that predicate`, + `the migration adds CHECK "t_check" on "t", the snapshot does not record that predicate`, + ]); +}); + const everyIndexName = (snapshot: Snapshot) => new Set( Object.values(snapshot.tables ?? {}).flatMap((table) => @@ -292,6 +501,8 @@ const disagreements = (sql: string, before: Snapshot, after: Snapshot) => { `the migration drops index "${index}", the snapshot still has it`, ); + problems.push(...checkDisagreements(sql, before, after, dropped)); + return problems; }; diff --git a/server/tests/migration-reach.integration.test.ts b/server/tests/migration-reach.integration.test.ts new file mode 100644 index 000000000..d9fe56317 --- /dev/null +++ b/server/tests/migration-reach.integration.test.ts @@ -0,0 +1,500 @@ +import { afterAll, describe, expect, test } from "bun:test"; +import { mkdtemp, mkdir, writeFile } from "node:fs/promises"; +import { tmpdir } from "node:os"; +import { join } from "node:path"; +import postgres from "postgres"; +import { + applyMigrations, + MIGRATIONS_JOURNAL, + type MigrationsJournal, + MigrationsOutOfReachError, +} from "../src/db/apply-migrations"; +import { testDatabaseUrl } from "./support/database"; + +/** + * The renumber, run for real, because the whole defect is what a real migrator does to a real + * database and nothing short of one can show it. + * + * A database is created per case and dropped afterwards. A schema inside the shared test database + * would not do: the migrator's own bookkeeping lives in one table (`MIGRATIONS_JOURNAL`), and these + * cases are entirely about what that one table already contains, so they need a database whose + * contents nothing else wrote. + * + * The migrations below are two statements long on purpose. The journal that matters here is the + * sequence of stamps, not the SQL, and this file has no business taking seconds to re-run the + * fifty-odd real ones twice per case. + */ + +const server = new URL(testDatabaseUrl()); +const administrative = new URL(server.href); +administrative.pathname = "/postgres"; + +const created: string[] = []; + +async function throwawayDatabase(): Promise { + const name = `openbot_reach_${Math.random().toString(36).slice(2, 10)}`; + const admin = postgres(administrative.href, { max: 1, onnotice: () => {} }); + try { + await admin.unsafe(`CREATE DATABASE "${name}"`); + } finally { + await admin.end({ timeout: 5 }); + } + created.push(name); + const url = new URL(server.href); + url.pathname = `/${name}`; + return url.href; +} + +afterAll(async () => { + const admin = postgres(administrative.href, { max: 1, onnotice: () => {} }); + try { + for (const name of created) { + await admin.unsafe(`DROP DATABASE IF EXISTS "${name}" WITH (FORCE)`); + } + } finally { + await admin.end({ timeout: 5 }); + } +}); + +type Entry = { tag: string; when: number; sql: string }; + +/** A migration folder on disk, in the shape `readMigrationFiles` insists on. */ +async function folderOf(entries: Entry[]): Promise { + const directory = await mkdtemp(join(tmpdir(), "migration-reach-")); + await mkdir(join(directory, "meta"), { recursive: true }); + for (const entry of entries) { + await writeFile(join(directory, `${entry.tag}.sql`), entry.sql); + } + await writeFile( + join(directory, "meta", "_journal.json"), + JSON.stringify({ + version: "7", + dialect: "postgresql", + entries: entries.map((entry, idx) => ({ + idx, + version: "7", + when: entry.when, + tag: entry.tag, + breakpoints: true, + })), + }), + ); + return directory; +} + +const first: Entry = { + tag: "0000_first", + when: 1_000_000, + sql: 'CREATE TABLE "first" ("id" text PRIMARY KEY);\n', +}; + +/** The branch's own migration, as it shipped before the merge renumbered it. */ +const asShipped: Entry = { + tag: "0001_branch", + when: 3_000_000, + sql: 'CREATE TABLE "branch" ("id" text PRIMARY KEY);\n', +}; + +const exists = async (client: postgres.Sql, table: string) => { + const [row] = await client<{ present: string | null }[]>` + select to_regclass(${`public.${table}`})::text as present + `; + return row?.present !== null && row?.present !== undefined; +}; + +describe("a database that ran a branch before the branch was merged", () => { + test("is refused, rather than migrated past the work it cannot reach", async () => { + const url = await throwawayDatabase(); + const client = postgres(url, { max: 1, onnotice: () => {} }); + try { + await applyMigrations(client, await folderOf([first, asShipped])); + expect(await exists(client, "branch")).toBe(true); + + /* + * The merge: main's migration takes the number the branch's had, stamped when main's author + * generated it — before the branch shipped — and the branch's work is restamped after both. + * The unguarded migrator runs `0002`, walks past `0001`, and reports success. + */ + const merged = await folderOf([ + first, + { + tag: "0001_from_main", + when: 2_000_000, + sql: 'CREATE TABLE "from_main" ("id" text PRIMARY KEY);\n', + }, + { + ...asShipped, + tag: "0002_branch_renumbered", + when: 4_000_000, + sql: 'ALTER TABLE "branch" ADD COLUMN "renumbered" boolean;\n', + }, + ]); + + const refusal = await applyMigrations(client, merged).then( + () => undefined, + (error: unknown) => error, + ); + expect(refusal).toBeInstanceOf(MigrationsOutOfReachError); + expect((refusal as Error).message).toContain( + "0001_from_main (stamped 2000000)", + ); + + // And refused before anything ran, rather than part way through: the database is exactly as + // the branch left it, which is the state an operator can reason about. + expect(await exists(client, "from_main")).toBe(false); + const [row] = await client<{ count: string }[]>` + select count(*)::text as count + from ${client(MIGRATIONS_JOURNAL.migrationsSchema)}.${client(MIGRATIONS_JOURNAL.migrationsTable)} + `; + expect(row?.count).toBe("2"); + } finally { + await client.end({ timeout: 5 }); + } + }); + + test("is refused before the statement that would have failed on it", async () => { + /* + * The other half, and the one that at least announces itself. Where the renumbered migration + * recreates a table the branch already created, the unguarded migrator dies on `CREATE TABLE` + * with a duplicate — after having skipped the migration below the mark, so that the obvious + * hand repair (drop the table, run again) is what turns a loud failure into a silent one. + */ + const url = await throwawayDatabase(); + const client = postgres(url, { max: 1, onnotice: () => {} }); + try { + await applyMigrations(client, await folderOf([first, asShipped])); + + const merged = await folderOf([ + first, + { + tag: "0001_from_main", + when: 2_000_000, + sql: 'CREATE TABLE "from_main" ("id" text PRIMARY KEY);\n', + }, + { ...asShipped, tag: "0002_branch_renumbered", when: 4_000_000 }, + ]); + + await expect(applyMigrations(client, merged)).rejects.toThrow( + MigrationsOutOfReachError, + ); + } finally { + await client.end({ timeout: 5 }); + } + }); +}); + +describe("a journal kept somewhere other than the default", () => { + /* + * The check and the migrator must read and write the same bookkeeping table. Were the check to + * look somewhere fixed while the migrator honoured its configuration, the check would find no + * table, conclude nothing had been applied, and let the migrator walk past the unreachable + * migration exactly as if there were no check at all. + */ + const elsewhere: MigrationsJournal = { + migrationsSchema: "c4_journal", + migrationsTable: "applied_migrations", + }; + + test("is the table the check reads, so a renumber is still refused", async () => { + const url = await throwawayDatabase(); + const client = postgres(url, { max: 1, onnotice: () => {} }); + try { + await applyMigrations( + client, + await folderOf([first, asShipped]), + elsewhere, + ); + + const merged = await folderOf([ + first, + { + tag: "0001_from_main", + when: 2_000_000, + sql: 'CREATE TABLE "from_main" ("id" text PRIMARY KEY);\n', + }, + { + ...asShipped, + tag: "0002_branch_renumbered", + when: 4_000_000, + sql: 'ALTER TABLE "branch" ADD COLUMN "renumbered" boolean;\n', + }, + ]); + + const refusal = await applyMigrations(client, merged, elsewhere).then( + () => undefined, + (error: unknown) => error, + ); + expect(refusal).toBeInstanceOf(MigrationsOutOfReachError); + expect(await exists(client, "from_main")).toBe(false); + + // And the repair the refusal prescribes is SQL against the table it actually read. + const message = (refusal as Error).message; + expect(message).toContain( + 'insert into "c4_journal"."applied_migrations" (hash, created_at)', + ); + expect(message).not.toContain(MIGRATIONS_JOURNAL.migrationsTable); + + // And the bookkeeping is where it was configured to be, and nowhere else. + const [row] = await client<{ count: string }[]>` + select count(*)::text as count + from ${client(elsewhere.migrationsSchema)}.${client(elsewhere.migrationsTable)} + `; + expect(row?.count).toBe("2"); + const [fallback] = await client<{ present: string | null }[]>` + select to_regclass(format('%I.%I', ${MIGRATIONS_JOURNAL.migrationsSchema}::text, ${MIGRATIONS_JOURNAL.migrationsTable}::text))::text as present + `; + expect(fallback?.present).toBeNull(); + } finally { + await client.end({ timeout: 5 }); + } + }); +}); + +describe("an ordinary database", () => { + test("migrates from empty and then forward, without being refused", async () => { + const url = await throwawayDatabase(); + const client = postgres(url, { max: 1, onnotice: () => {} }); + try { + await applyMigrations(client, await folderOf([first])); + await applyMigrations( + client, + await folderOf([ + first, + { + tag: "0001_next", + when: 2_000_000, + sql: 'CREATE TABLE "next" ("id" text PRIMARY KEY);\n', + }, + ]), + ); + + expect(await exists(client, "next")).toBe(true); + } finally { + await client.end({ timeout: 5 }); + } + }); +}); + +/** + * Two migrators against one database, interleaved at every point one of them talks to it. + * + * The reach check is a read, and the migrator's own decision is a second, later read of the same + * table. If anything can commit between them, the check's verdict is about a database that no + * longer exists by the time the migrator acts on it. The case that matters is a rival running a + * DIFFERENT journal — an operator's `db:migrate` from a checkout, a second release's Job, a Job pod + * the controller started twice while an older one is still running — that records a stamp above a + * migration this run still has pending. The check passed before that stamp existed; the migrator + * reads it afterwards and walks past the migration, and the run reports success over a table that is + * not there. That is the exact outcome the reach check exists to prevent, arrived at through the gap + * between the two reads. + * + * So the rival is started at the k-th database call this run makes, for every k, through a client + * that pauses there. The pause ends when the rival has either finished or is visibly waiting on a + * lock — waiting for it to FINISH would deadlock against a migrator that correctly holds one. + * Whatever order results, a run that resolves must have applied everything in its folder: being + * refused, or failing loudly, is an acceptable outcome; reporting success over a skipped migration + * is not. + */ +describe("a migrator racing another migrator with a different journal", () => { + const fromMain: Entry = { + tag: "0001_from_main", + when: 2_000_000, + sql: 'CREATE TABLE "from_main" ("id" text PRIMARY KEY);\n', + }; + const rivalOnly: Entry = { + tag: "0001_rival", + when: 3_000_000, + sql: 'CREATE TABLE "rival" ("id" text PRIMARY KEY);\n', + }; + + type Gate = { count: number; at: number; hit: Promise | undefined }; + + /** + * `client`, except that its `at`-th call into the database first waits for `pause()`. + * + * Every way a caller reaches the server is counted — a tagged query, `unsafe`, `begin`, + * `savepoint`, and the connection a `begin` or `savepoint` hands to its callback — so a pause can + * land between ANY two statements, including those issued inside a transaction. + */ + function pausing( + client: T, + gate: Gate, + pause: () => Promise, + ): T { + const before = (): Promise => { + gate.count += 1; + if (gate.count !== gate.at) return Promise.resolve(); + gate.hit = pause(); + return gate.hit; + }; + /* + * A lazy thenable: the query is built, and so sent, only once the pause is over, and only in + * the form — awaited, or `.values()` — that the caller actually asked for. + */ + const deferred = (build: () => unknown) => { + const waited = before(); + return { + // biome-ignore lint/suspicious/noThenProperty: it stands in for a query, which is awaitable + then: ( + resolve: (value: unknown) => unknown, + reject: (error: unknown) => unknown, + ) => waited.then(() => build()).then(resolve, reject), + values: () => + waited.then(() => + (build() as { values: () => Promise }).values(), + ), + }; + }; + return new Proxy(client, { + apply: (target, _this, args) => + deferred(() => + Reflect.apply( + target as (...a: unknown[]) => unknown, + undefined, + args, + ), + ), + get: (target, property, receiver) => { + const value = Reflect.get(target, property, receiver) as unknown; + if (typeof value !== "function") return value; + const method = value as (...args: unknown[]) => unknown; + if (property === "unsafe") { + return (...args: unknown[]) => deferred(() => method(...args)); + } + if (property === "begin" || property === "savepoint") { + return (...args: unknown[]) => { + const fn = args.pop() as (sql: unknown) => unknown; + return before().then(() => + method(...args, (inner: object) => + fn(pausing(inner, gate, pause)), + ), + ); + }; + } + return value; + }, + }); + } + + test("never reports success over a migration a rival's stamp put out of its reach", async () => { + let pausesExercised = 0; + for (let at = 1; ; at += 1) { + const url = await throwawayDatabase(); + const setup = postgres(url, { max: 1, onnotice: () => {} }); + const ours = postgres(url, { max: 1, onnotice: () => {} }); + const rival = postgres(url, { + max: 1, + onnotice: () => {}, + connection: { application_name: "migration-rival" }, + }); + try { + await applyMigrations(setup, await folderOf([first])); + const ourFolder = await folderOf([first, fromMain]); + const rivalFolder = await folderOf([first, rivalOnly]); + + let rivalRun: Promise | undefined; + let rivalSettled = false; + const gate: Gate = { count: 0, at, hit: undefined }; + const pause = async () => { + rivalRun = applyMigrations(rival, rivalFolder).then( + () => { + rivalSettled = true; + return "applied" as const; + }, + (error: unknown) => { + rivalSettled = true; + return error; + }, + ); + // Finished, or parked behind a lock: either way it has had every chance to get in first. + const deadline = Date.now() + 10_000; + while (!rivalSettled) { + const [row] = await setup<{ waiting: boolean }[]>` + select exists ( + select 1 from pg_stat_activity + where application_name = 'migration-rival' + and wait_event_type = 'Lock' + ) as waiting + `; + if (row?.waiting) break; + if (Date.now() > deadline) { + throw new Error( + `the rival migrator neither finished nor waited on a lock (paused at call ${at})`, + ); + } + await new Promise((resolve) => setTimeout(resolve, 20)); + } + }; + + const outcome = await applyMigrations( + pausing(ours, gate, pause), + ourFolder, + ).then( + () => "applied" as const, + (error: unknown) => error, + ); + if (gate.hit === undefined) break; // every call this run makes has had a rival in front of it + await gate.hit; + const rivalOutcome = await rivalRun; + pausesExercised += 1; + + // Refused or failed is acceptable. Applied means applied. + if (outcome === "applied") { + expect({ + pausedAtCall: at, + fromMainExists: await exists(setup, "from_main"), + }).toEqual({ pausedAtCall: at, fromMainExists: true }); + } + if (rivalOutcome === "applied") { + expect({ + pausedAtCall: at, + rivalExists: await exists(setup, "rival"), + }).toEqual({ pausedAtCall: at, rivalExists: true }); + } + } finally { + await ours.end({ timeout: 5 }); + await rival.end({ timeout: 5 }); + await setup.end({ timeout: 5 }); + } + } + /* + * A harness whose pause never landed would pass vacuously. Every run makes at least the two + * reads of the check and the migrator's own statements; each of them must have been tried. + */ + expect(pausesExercised).toBeGreaterThanOrEqual(4); + }, 120_000); +}); + +describe("a database whose migrations table holds a NULL created_at", () => { + test("is refused, rather than migrated from the start again", async () => { + /* + * drizzle reads `order by created_at desc limit 1`; Postgres sorts NULLs first, so the planted + * row is the mark, `Number(null)` is 0, and the unguarded migrator re-runs `0000_first` and dies + * on `relation "first" already exists`. The guard must pick the same row and refuse first. + */ + const url = await throwawayDatabase(); + const client = postgres(url, { max: 1, onnotice: () => {} }); + try { + const folder = await folderOf([first, asShipped]); + await applyMigrations(client, folder); + await client` + insert into ${client(MIGRATIONS_JOURNAL.migrationsSchema)}.${client(MIGRATIONS_JOURNAL.migrationsTable)} (hash, created_at) + values ('hand-written', null) + `; + + const refusal = await applyMigrations(client, folder).then( + () => undefined, + (error: unknown) => error, + ); + expect(refusal).toBeInstanceOf(MigrationsOutOfReachError); + expect((refusal as Error).message).toContain( + "1 applied row has a NULL created_at", + ); + expect((refusal as Error).message).toContain( + "0000_first (stamped 1000000)", + ); + } finally { + await client.end({ timeout: 5 }); + } + }); +}); diff --git a/server/tests/migration-reach.test.ts b/server/tests/migration-reach.test.ts new file mode 100644 index 000000000..349589b03 --- /dev/null +++ b/server/tests/migration-reach.test.ts @@ -0,0 +1,389 @@ +import { describe, expect, test } from "bun:test"; +import { createHash } from "node:crypto"; +import { mkdtemp, writeFile } from "node:fs/promises"; +import { tmpdir } from "node:os"; +import { join } from "node:path"; +import { + type AppliedMigration, + type FolderMigration, + type MigrationsJournal, + migrationsOutOfReach, + migratorHighWaterMark, + outOfReachRefusal, + readMigrationFolder, +} from "../src/db/migration-reach"; +import { MIGRATIONS_JOURNAL } from "../src/db/apply-migrations"; + +/** + * The check that `migration-journal.test.ts` cannot make. + * + * That file reads one journal and asks whether it is internally consistent — stamps increasing, a + * file for every entry, a snapshot for every file. Every one of those passed over the defect this + * file exists for, because the defect is not inside the journal. It is between the journal in the + * repository and the stamps that a PREVIOUS journal already wrote into a running database: the + * merge that renumbered this branch's migrations gave main's `0053_identity_links` a `when` older + * than the stamp a pre-merge database had already recorded for the branch's own work, and the + * migrator skips what it finds below the newest stamp without a word. `migrate` printed + * `{"type":"migrations-applied","status":"ok"}` while `identity_links` and + * `identity_link_challenges` did not exist. + * + * No journal, read alone, can show that. So the check lives in the migrator's path instead, and + * this is its test. + */ + +const migration = ( + tag: string, + when: number, + hash: string, +): FolderMigration => ({ tag, when, hash }); + +const applied = (hash: string, createdAt: number | null): AppliedMigration => ({ + hash, + createdAt, +}); + +describe("migrations out of reach", () => { + test("finds none on a database the migrator has never touched", () => { + const folder = [ + migration("0000_first", 1000, "a"), + migration("0001_second", 2000, "b"), + ]; + + expect(migrationsOutOfReach(folder, [])).toEqual([]); + }); + + test("finds none when the database is simply behind the folder", () => { + const folder = [ + migration("0000_first", 1000, "a"), + migration("0001_second", 2000, "b"), + migration("0002_third", 3000, "c"), + ]; + + // The normal case, and the one that must never be refused: two applied, one pending. + expect( + migrationsOutOfReach(folder, [applied("a", 1000), applied("b", 2000)]), + ).toEqual([]); + }); + + test("finds none when the database is exactly up to date", () => { + const folder = [ + migration("0000_first", 1000, "a"), + migration("0001_second", 2000, "b"), + ]; + + expect( + migrationsOutOfReach(folder, [applied("a", 1000), applied("b", 2000)]), + ).toEqual([]); + }); + + test("names a migration stamped below the mark that has never been applied", () => { + /* + * The renumber, in miniature. The database ran a branch whose migration was stamped 3000; the + * merge then brought in a migration from main stamped 2000 and restamped the branch's work + * 4000. The migrator compares against 3000, so 2000 is walked past, 4000 runs, and the run is + * reported as a success that applied everything. + */ + const folder = [ + migration("0000_first", 1000, "a"), + migration("0001_from_main", 2000, "main"), + migration("0002_branch_renumbered", 4000, "renumbered"), + ]; + const database = [applied("a", 1000), applied("branch-as-shipped", 3000)]; + + expect(migrationsOutOfReach(folder, database)).toEqual([ + migration("0001_from_main", 2000, "main"), + ]); + }); + + test("names a migration stamped exactly on the mark", () => { + /* + * The comparison the migrator makes is `recorded < when`, so a migration stamped exactly at the + * mark is skipped as surely as one stamped below it. Off by one here would be a check that + * passes a database it cannot bring up to date. + */ + const folder = [ + migration("0000_first", 1000, "a"), + migration("0001_tied", 2000, "tied"), + ]; + + expect(migrationsOutOfReach(folder, [applied("a", 2000)])).toEqual([ + migration("0001_tied", 2000, "tied"), + ]); + }); + + test("names every unreachable migration, not just the first", () => { + const folder = [ + migration("0001_one", 1000, "one"), + migration("0002_two", 2000, "two"), + migration("0003_three", 5000, "three"), + ]; + + expect( + migrationsOutOfReach(folder, [applied("something-else", 3000)]), + ).toEqual([ + migration("0001_one", 1000, "one"), + migration("0002_two", 2000, "two"), + ]); + }); + + test("is not fooled by a migration whose file has been rewritten", () => { + // Applied under one hash, present in the folder under another: the database ran different SQL + // from the file that now claims to be it, and the difference will never be applied. + const folder = [migration("0000_first", 1000, "rewritten")]; + + expect(migrationsOutOfReach(folder, [applied("original", 1000)])).toEqual([ + migration("0000_first", 1000, "rewritten"), + ]); + }); +}); + +describe("the row the migrator reads", () => { + /* + * The guard is only as good as its agreement with the migrator about WHICH applied row is the + * mark. drizzle reads `order by created_at desc limit 1`, and Postgres sorts NULLs first in a + * descending order: one NULL `created_at` is the row it reads, `Number(null)` is 0, and every + * migration in the folder looks unapplied. `Math.max` over the stamps picks the newest real one + * instead, finds nothing out of reach, and waves through a run that dies re-creating the first + * type the database already has (`type "agent_type" already exists`). + */ + test("is a NULL created_at, however many real stamps sit below it", () => { + const folder = [ + migration("0000_first", 1000, "a"), + migration("0001_second", 2000, "b"), + ]; + const database = [ + applied("a", 1000), + applied("b", 2000), + applied("hand-written", null), + ]; + + expect(migratorHighWaterMark(database)).toBe(0); + expect(migrationsOutOfReach(folder, database)).toEqual(folder); + }); + + test("is the newest stamp when no created_at is NULL", () => { + expect( + migratorHighWaterMark([applied("a", 1000), applied("b", 2000)]), + ).toBe(2000); + }); + + test("does not exist on a database the migrator has never touched", () => { + expect(migratorHighWaterMark([])).toBeUndefined(); + }); + + test("refuses every applied migration the shipped folder would run a second time", async () => { + const folder = await readMigrationFolder( + new URL("../drizzle/", import.meta.url).pathname, + ); + const database = [ + ...folder.map((entry) => applied(entry.hash, entry.when)), + applied("hand-written", null), + ]; + + expect( + migrationsOutOfReach(folder, database).map((entry) => entry.tag), + ).toEqual(folder.map((entry) => entry.tag)); + }); + + test("says that a NULL created_at is the mark, and names what would run twice", () => { + const folder = [ + migration("0000_first", 1000, "a"), + migration("0001_second", 2000, "b"), + ]; + const database = [ + applied("a", 1000), + applied("b", 2000), + applied("hand-written", null), + ]; + const text = outOfReachRefusal( + migrationsOutOfReach(folder, database), + folder, + database, + MIGRATIONS_JOURNAL, + ); + + expect(text).toContain("1 applied row has a NULL created_at"); + expect(text).toContain("would run them a second time"); + expect(text).toContain("0000_first (stamped 1000)"); + expect(text).toContain("0001_second (stamped 2000)"); + expect(text).not.toContain("would skip"); + }); +}); + +describe("the refusal", () => { + const folder = [ + migration("0000_first", 1000, "a"), + migration("0001_from_main", 2000, "main"), + migration("0002_branch_renumbered", 4000, "renumbered"), + ]; + const database = [applied("a", 1000), applied("branch-as-shipped", 3000)]; + const text = outOfReachRefusal( + migrationsOutOfReach(folder, database), + folder, + database, + MIGRATIONS_JOURNAL, + ); + + test("names the migration that cannot be reached", () => { + expect(text).toContain("0001_from_main (stamped 2000)"); + }); + + test("names the mark that puts it out of reach", () => { + expect(text).toContain("stamped 3000"); + }); + + test("says that the database ran a journal this folder no longer has", () => { + expect(text).toContain("1 applied migration is not in this folder at all"); + }); + + test("says that nothing was applied", () => { + expect(text).toContain("Nothing has been applied."); + }); +}); + +describe("the refusal, for a journal kept somewhere other than the default", () => { + /* + * The repair instructions are SQL an operator pastes into psql. They must name the table the + * check read — never a spelling of the default that the configuration no longer guarantees. + */ + const elsewhere: MigrationsJournal = { + migrationsSchema: "c4_journal", + migrationsTable: "applied_migrations", + }; + const folder = [ + migration("0000_first", 1000, "a"), + migration("0001_from_main", 2000, "main"), + migration("0002_branch_renumbered", 4000, "renumbered"), + ]; + + test("tells the operator to record a skipped migration in that table", () => { + const database = [applied("a", 1000), applied("branch-as-shipped", 3000)]; + const text = outOfReachRefusal( + migrationsOutOfReach(folder, database), + folder, + database, + elsewhere, + ); + + expect(text).toContain( + 'insert into "c4_journal"."applied_migrations" (hash, created_at)', + ); + expect(text).not.toContain("__drizzle_migrations"); + }); + + test("tells the operator to repair a NULL created_at in that table", () => { + const database = [ + applied("a", 1000), + applied("main", 2000), + applied("hand-written", null), + ]; + const text = outOfReachRefusal( + migrationsOutOfReach(folder, database), + folder, + database, + elsewhere, + ); + + expect(text).toContain("1 applied row has a NULL created_at"); + expect(text).toContain('update "c4_journal"."applied_migrations" set'); + expect(text).not.toContain("__drizzle_migrations"); + }); + + test("quotes a name that would otherwise need it", () => { + const database = [applied("a", 1000), applied("branch-as-shipped", 3000)]; + const text = outOfReachRefusal( + migrationsOutOfReach(folder, database), + folder, + database, + { migrationsSchema: "Ops", migrationsTable: 'odd"name' }, + ); + + expect(text).toContain('insert into "Ops"."odd""name" (hash, created_at)'); + }); +}); + +describe("reading a migration folder", () => { + test("hashes the whole file the way the migrator does", async () => { + const directory = await mkdtemp(join(tmpdir(), "migration-reach-")); + const sql = 'CREATE TABLE "one" ("id" text);\n'; + await writeFile(join(directory, "0000_one.sql"), sql); + await Bun.write( + join(directory, "meta", "_journal.json"), + JSON.stringify({ + version: "7", + dialect: "postgresql", + entries: [ + { + idx: 0, + version: "7", + when: 1000, + tag: "0000_one", + breakpoints: true, + }, + ], + }), + ); + + expect(await readMigrationFolder(directory)).toEqual([ + { + tag: "0000_one", + when: 1000, + // Whole file, before any `--> statement-breakpoint` split, which is what + // `drizzle-orm/migrator` records and therefore what the database holds. + hash: createHash("sha256").update(sql).digest("hex"), + }, + ]); + }); +}); + +describe("the migrations this repository ships", () => { + test("reach a database that has never been migrated", async () => { + const folder = await readMigrationFolder( + new URL("../drizzle/", import.meta.url).pathname, + ); + + expect(migrationsOutOfReach(folder, [])).toEqual([]); + }); + + test("reach a database that is up to date with them", async () => { + const folder = await readMigrationFolder( + new URL("../drizzle/", import.meta.url).pathname, + ); + + expect( + migrationsOutOfReach( + folder, + folder.map((entry) => applied(entry.hash, entry.when)), + ), + ).toEqual([]); + }); + + test("do not reach a database that ran the arcade branch before it was merged", async () => { + /* + * The incident, pinned, because it is the only shape of this failure anybody has actually met. + * + * Before the merge, the arcade work shipped as `0053_adorable_frank_castle` (1791773482676) and + * `0054_spicy_wallflower` (1791774497487). The merge renumbered it to `0057_arcade_provider` + * (1791908858814) and put main's `0053_identity_links` (1791547580808) in its place — a stamp + * OLDER than what such a database had already recorded. Everything up to `0052` is byte for + * byte the same file on both sides of the merge, so those rows are built from this folder. + * + * The expected answer is one name, and it is the migration whose two tables were missing from + * the reproduction: `identity_links` and `identity_link_challenges`. + */ + const folder = await readMigrationFolder( + new URL("../drizzle/", import.meta.url).pathname, + ); + const asShipped = [ + ...folder + .filter((entry) => entry.when <= 1791396757748) + .map((entry) => applied(entry.hash, entry.when)), + applied("0053_adorable_frank_castle", 1791773482676), + applied("0054_spicy_wallflower", 1791774497487), + ]; + + expect( + migrationsOutOfReach(folder, asShipped).map((entry) => entry.tag), + ).toEqual(["0053_identity_links"]); + }); +}); diff --git a/server/tests/pending-authorization-audit-ledger.test.ts b/server/tests/pending-authorization-audit-ledger.test.ts new file mode 100644 index 000000000..461c0129f --- /dev/null +++ b/server/tests/pending-authorization-audit-ledger.test.ts @@ -0,0 +1,788 @@ +// server/tests/pending-authorization-audit-ledger.test.ts +/** + * Guard: every write to `pending_authorizations` has a RECORDED AUDIT DECISION. It names the event + * it files, or it is recorded as debt, or it carries a waiver that argues why no event fits. + * + * WHY THIS EXISTS. This PR's subject is attributable consent: a mint/claim/complete lifecycle whose + * return leg is bound to the attempt the signed-in person actually minted. Round 2 wave 3 (B5e) + * counted the transitions that lifecycle can make and found that one in nine filed an audit row. + * Nothing had ever forced the question "which event?" when a write was added, so the question was + * never asked. This ledger asks it. A new write site with no entry below fails, and so does an + * entry whose site is gone. Adding an unaudited transition is now something somebody does on + * purpose and writes down. + * + * THREE DISPOSITIONS, AND TWO OF THEM MUST NOT BE CONFUSED. + * + * - `audited`: names an event in `auditEventTypes` and the function that files it. The guard + * checks that the named function contains that event literal. When the filer is not the writer + * itself, it also checks that a call to the filer sits next to the write. + * - `debt`: this transition SHOULD be audited and is not. That is a finding, and it carries the + * finding id. It follows the `typecheck-baseline.txt` discipline: converting a debt row into + * `audited` and deleting the debt is always correct. Adding one is not. {@link DEBT_CEILING} + * pins the count so a new debt row has to be argued for in the same diff that adds it. + * - `waived`: NO audit event is appropriate here. That is a judgement, and the reason is written + * down. "It is not audited today" is never a waiver. That is debt. + * + * HOW IT IS KEYED, AND WHY NOT `path:line`. `assertion-shape.test.ts` is keyed by line and collided + * in three consecutive waves. Here: + * + * - A write STATEMENT is keyed by its enclosing function's name plus the quoted write + * expression. A migration is keyed by its file name instead. + * - A CALL SITE of a writing method is keyed by file + method + ordinal (source order). An anchor + * string confirms that each ordinal is still the transition the ledger says it is. The nearest + * same-method call to the anchor must be this one. + * - A CASCADE is keyed by its constraint name. + * + * Moving code around, rewrapping a comment or adding a line above changes none of these keys. + * + * WHAT GREEN MEANS, AND WHAT IT DOES NOT. Read this before trusting it. + * + * 1. IT CHECKS THE DECLARATION, NOT THE FIRING. For `audited` rows it checks that the event exists, + * that the named filer files it, and that the filer is called beside the write. It does not + * prove the event fires on every path through that write, or that the payload is clean (no + * bearer consent url, no live `auth_id`). The behavioural plants for that are in + * `arcade-authorize-cancel.test.ts` (B5b) and the completion tests. + * 2. IT CANNOT SEE A TRANSITION THAT WRITES NOTHING. B2c is the example: a cancel that LOST the + * race to a completion deletes no row, so no scan of write sites can find it. Such non-writes + * are listed BY HAND in {@link NON_WRITES}. The guard only checks that each listed one still + * exists where it says, so the list cannot go stale silently. It DISCOVERS NOTHING. A new + * silent branch that writes nothing stays invisible here. + * 3. IT SEES WRITES SPELLED THROUGH THE DRIZZLE SYMBOL OR THE LITERAL TABLE NAME. A table name + * assembled at runtime (`sql.raw`, string concatenation) or a writer method passed by + * reference is outside it. An aliased import of the table symbol, and a writer method named + * without being called, are both refused outright rather than missed. + * 4. CASCADES ARE READ FROM `server/drizzle/*.sql`, which is what the database runs. A schema + * edit with no migration is a different defect, and this guard does not look for it. + */ +import { expect, test } from "bun:test"; +import { existsSync, readFileSync } from "node:fs"; +import { basename, join } from "node:path"; +import { auditEventTypes } from "../src/audit"; +import { sourceFiles, stripComments } from "./support/source-scan"; + +const REPO = join(import.meta.dir, "../.."); + +/** TypeScript trees that can hold a write. Tests are excluded by file name below. */ +const TS_ROOTS = [ + "server/src", + "server/scripts", + "scripts", + "worker", + "shared", +]; +const MIGRATIONS = "server/drizzle"; + +type AuditEvent = (typeof auditEventTypes)[number]; + +type Disposition = + | { audited: AuditEvent; filedBy: string } + | { debt: string; note: string } + | { waived: string }; + +type Transition = { name: string } & Disposition; + +/* + * ─── THE LEDGER ────────────────────────────────────────────────────────────────────────────── + */ + +/** + * Every statement that writes the table, keyed ` :: `. + * + * A row whose transitions depend on who called it says so: `decidedAtCallers`. That is not a pass. + * It obliges every call of that function to appear in {@link CALL_SITES} with its own disposition, + * and the guard enforces that. + */ +const STATEMENTS: Record< + string, + { decidedAtCallers: true } | { transitions: Transition[] } +> = { + // The claim INSERT and the ON CONFLICT re-claim of an expired or settled row are one statement. + // Their dispositions are recorded at the one call site. + "claimAuthorizationAttempt :: INSERT INTO pending_authorizations": { + decidedAtCallers: true, + }, + "recordAuthorizationMint :: .update(pendingAuthorizations)": { + decidedAtCallers: true, + }, + // One DELETE behind three different endings: two mint-failure clean-ups and the person's cancel. + "discardAuthorizationAttempt :: .delete(pendingAuthorizations)": { + decidedAtCallers: true, + }, + // The one statement behind failed, unreconciled and withdrawn; see DELEGATIONS. + "closeAuthorizationAttempt :: .update(pendingAuthorizations)": { + decidedAtCallers: true, + }, + "completeAuthorizationAttempt :: UPDATE pending_authorizations": { + decidedAtCallers: true, + }, + '0060_pending_authorization_person_keys.sql :: DELETE FROM "pending_authorizations"': + { + transitions: [ + { + name: "orphan purge before the person keys were added", + waived: + "A one-shot data migration that removes attempts whose actor or person row was ALREADY deleted. It is not a lifecycle event of any live attempt. There is no actor to attribute it to, and nobody can ever complete these rows: the person they would bind to does not exist. It runs at deploy, before the application exists to file anything. An event here would say that a migration ran, and the migration history already says that.", + }, + ], + }, +}; + +/** + * Store-internal delegation: `from` is called ONLY by the listed wrappers. Every call of a wrapper + * then needs a {@link CALL_SITES} row. If any other function calls `from`, that call is undeclared + * and fails. + */ +const DELEGATIONS: Record = { + closeAuthorizationAttempt: [ + "failAuthorizationAttempt", + "markAuthorizationUnreconciled", + "markAuthorizationWithdrawn", + ], +}; + +/** + * Every call of a writing method, keyed ` :: `, IN SOURCE ORDER. Each entry has an + * `anchor`: a string near the call that names the branch. The call nearest the anchor must be that + * ordinal, so two calls cannot swap transitions without the guard noticing. + */ +const CALL_SITES: Record< + string, + { anchor: string; transitions: Transition[] }[] +> = { + "server/src/plugins/route-groups/connections.ts :: claimAuthorizationAttempt": + [ + { + anchor: "if (!claim.claimed)", + transitions: [ + { + name: "claim (a person starts an authorization)", + debt: "B5e", + note: "The moment a signed-in person starts a consent leaves no row on the trail, so nothing records who started which attempt.", + }, + { + name: "expiry overwrite (re-claim silently replaces an expired or settled attempt)", + debt: "B5e", + note: "An attempt that expired while still live is never recorded as having ended. The next claim's ON CONFLICT DO UPDATE erases it.", + }, + ], + }, + ], + "server/src/plugins/route-groups/connections.ts :: discardAuthorizationAttempt": + [ + { + anchor: "arcade-refused-attempt-not-cleared", + transitions: [ + { + name: "discard after the vendor refused the mint", + debt: "B5e", + note: "A started attempt ends with only a console line on cleanup failure. A refusal on a consent lifecycle should be on the trail, as `mcp.callback_refused` and `session.refused` are elsewhere.", + }, + ], + }, + { + anchor: "arcade-mint-not-recorded", + transitions: [ + { + name: "discard after the mint succeeded but could not be recorded", + debt: "B5e", + note: "A flow is LIVE at the vendor and the only record is the `arcade-mint-not-recorded` console line. This is the strongest case for an event in the ledger.", + }, + ], + }, + { + anchor: "const cancelled = await store.discardAuthorizationAttempt", + transitions: [ + { + name: "withdrawn by the person (cancel)", + audited: "mcp.authorization_cancelled", + filedBy: "recordAuthorizationCancelled", + }, + ], + }, + ], + "server/src/plugins/route-groups/connections.ts :: recordAuthorizationMint": [ + { + anchor: "authId: minted.authorizationId", + transitions: [ + { + name: "mint recorded (attempt bound to the vendor's authorization)", + debt: "B5e", + note: "The binding the return leg is checked against is written without a trail row. The `false` this call can answer is its own hand-listed transition in NON_WRITES.", + }, + ], + }, + ], + "server/src/plugins/route-groups/connections.ts :: failAuthorizationAttempt": + [ + { + anchor: 'settled.status === "failed"', + transitions: [ + { + name: "failed (the vendor reported the consent failed)", + debt: "B5e", + note: "A terminal verdict on the attempt with no trail row.", + }, + ], + }, + { + anchor: "settled.userId !== attempt.vendorUserId", + transitions: [ + { + name: "failed (the consent completed for an identity that is not the attempt's)", + debt: "B5e", + note: "A return leg that came back bound to somebody else is the exact attribution failure this lifecycle exists to refuse, and the refusal leaves no row.", + }, + ], + }, + ], + "server/src/plugins/route-groups/connections.ts :: markAuthorizationWithdrawn": + [ + { + anchor: "if (withdrawn)", + transitions: [ + { + name: "withdrawn (context changed; the vendor withdrew the retired grant)", + debt: "B5e", + note: "Only indirectly audited. `clearWithdrawnAccount` files `mcp.account_disconnected` rows for what it cleared, but the verdict on the attempt itself is not filed.", + }, + ], + }, + ], + "server/src/plugins/route-groups/connections.ts :: markAuthorizationUnreconciled": + [ + { + anchor: "else await store.markAuthorizationUnreconciled", + transitions: [ + { + name: "unreconciled (context changed; withdrawing the retired grant was not confirmed)", + debt: "B5e", + note: "The case where a grant may still be live at the vendor, and the only record is a console line.", + }, + ], + }, + ], + "server/src/plugins/route-groups/connections.ts :: completeAuthorizationAttempt": + [ + { + anchor: "recorded = true", + transitions: [ + { + name: "completed", + audited: "mcp.account_connected", + filedBy: "completeAuthorizationAttempt", + }, + ], + }, + ], +}; + +/** Every foreign key that deletes rows of this table when its parent goes, keyed by constraint. */ +const CASCADES: Record = { + pending_authorizations_server_id_mcp_servers_id_fk: { + name: "cascade delete when the app's server row is removed", + debt: "B5e", + note: "`removeServer` files `configuration.changed` (`mcp_server_removed`) and names the grants it released. It does not name an in-flight attempt, which may already be consented at the vendor.", + }, + pending_authorizations_actor_id_users_id_fk: { + name: "cascade delete when the attempt's actor is deleted", + debt: "B5e", + note: "`retireConnectionsFor` files rows for the connections it retires. An attempt that dies with its actor, possibly minted and live at the vendor, is not among them.", + }, + // `pending_authorizations_user_id_users_id_fk` was a third row here (debt B5e) until `0062` + // dropped it: with nothing making `user_id` equal `actor_id`, it let one person's deletion take an + // attempt a DIFFERENT person had started. `pending_authorizations_user_is_actor_check` now holds + // the equality and the actor key above is the only cascade from `users`. Removed with the key, + // and DEBT_CEILING lowered with it — not relabelled. +}; + +/** + * Transitions that WRITE NOTHING and so cannot be found by a scan. They are listed by hand, and + * each is checked only for still existing at its anchor. See boundary 2 in the file header. + */ +const NON_WRITES: Record< + string, + { file: string; anchor: string } & Transition +> = { + "cancel that lost the race to a completion": { + file: "server/src/plugins/route-groups/connections.ts", + anchor: "That authorization finished before it could be cancelled", + name: "cancel refused because the attempt had already completed", + debt: "B2c", + note: "The person asked to retract consent and the consent stood. The 409 tells them, and the trail records nothing about the request. The discard deleted nothing, so no write site exists for this guard to find.", + }, + "mint that found its attempt already cancelled": { + file: "server/src/plugins/route-groups/connections.ts", + anchor: + "That authorization was cancelled before the app's vendor finished starting it", + name: "mint declined because the attempt was cancelled while the vendor was minting (B5d)", + waived: + "This branch ends no attempt: the attempt it would describe was already ended by the person's cancel, and that cancel filed `mcp.authorization_cancelled` for it. A second row would record the same withdrawal twice. What the branch adds is a refusal to hand out the consent url, and that url, like the `ar_...`, must never reach the trail.", + }, +}; + +/** + * The most debt rows the ledger may hold: transitions plus cascades plus non-writes. This may only + * go DOWN. A fix that converts a row lowers it in the same diff. A new debt row has to raise it, + * and that edit is the record that somebody decided to add one. + */ +const DEBT_CEILING = 12; + +/* + * ─── THE SCAN ──────────────────────────────────────────────────────────────────────────────── + */ + +/** A named function, method or `const x = async` binding, i.e. what "enclosing function" means. */ +const DEFINITION = + /(?:\basync\s+(?:function\s*\*?\s*)?([A-Za-z_$][\w$]*)\s*\(|\b(?:const|let|var)\s+([A-Za-z_$][\w$]*)\s*=\s*(?:async\b|function\b)|\bfunction\s*\*?\s*([A-Za-z_$][\w$]*)\s*\()/g; + +type Definition = { name: string; at: number }; + +function definitionsIn(code: string): Definition[] { + const out: Definition[] = []; + for (const m of code.matchAll(DEFINITION)) { + const name = m[1] ?? m[2] ?? m[3]; + if (name && name !== "function") out.push({ name, at: m.index ?? 0 }); + } + return out; +} + +function enclosing(defs: Definition[], at: number): string { + let name = ""; + for (const def of defs) { + if (def.at > at) break; + name = def.name; + } + return name; +} + +/** From a definition's header to the next definition: the text the function's body lives in. */ +function spanOf(code: string, defs: Definition[], name: string): string { + const index = defs.findIndex((def) => def.name === name); + if (index === -1) return ""; + return code.slice(defs[index].at, defs[index + 1]?.at ?? code.length); +} + +function lineAt(code: string, at: number): number { + return code.slice(0, at).split("\n").length; +} + +/** Not a test, not a declaration file. */ +function isSource(path: string): boolean { + return !/\.(test|spec)\.tsx?$|\.d\.ts$/.test(path); +} + +type Scanned = { path: string; code: string; defs: Definition[] }; + +function scanTs(): Scanned[] { + const out: Scanned[] = []; + for (const root of TS_ROOTS) { + const full = join(REPO, root); + if (!existsSync(full)) continue; + for (const file of sourceFiles(full, [".ts", ".tsx"])) { + if (!isSource(file) || file.includes("/node_modules/")) continue; + const code = stripComments(readFileSync(file, "utf8")); + out.push({ + path: file.slice(REPO.length + 1), + code, + defs: definitionsIn(code), + }); + } + } + return out; +} + +/** The SQL of every migration with `--` line comments blanked, per file. */ +function scanSql(): { file: string; sql: string }[] { + return sourceFiles(join(REPO, MIGRATIONS), [".sql"]).map((file) => ({ + file: basename(file), + sql: readFileSync(file, "utf8").replace(/--(?!>)[^\n]*/g, ""), + })); +} + +/** A write through the drizzle symbol, a raw statement or an interpolated symbol. */ +const TS_WRITE = + /\.\s*(insert|update|delete)\s*\(\s*pendingAuthorizations\s*\)|\b(INSERT\s+INTO|UPDATE|DELETE\s+FROM|TRUNCATE(?:\s+TABLE)?)\s+(?:"?pending_authorizations"?|\$\{\s*pendingAuthorizations\s*\})(?![\w])/gi; + +const SQL_WRITE = + /\b(INSERT\s+INTO|UPDATE|DELETE\s+FROM|TRUNCATE(?:\s+TABLE)?)\s+("?pending_authorizations"?)(?![\w])/gi; + +/** How an interpolated table symbol is spelled in a key: the `${…}` of a `sql` template. */ +const INTERPOLATED = `$${"{"}pendingAuthorizations}`; + +/** The ledger key of one TypeScript write: the enclosing function and the write, normalized. */ +function tsWriteKey(defs: Definition[], match: RegExpMatchArray): string { + const expression = match[1] + ? `.${match[1].toLowerCase()}(pendingAuthorizations)` + : `${match[2].toUpperCase().replace(/\s+/g, " ")} ${ + match[0].includes(INTERPOLATED.slice(0, 2)) + ? INTERPOLATED + : "pending_authorizations" + }`; + return `${enclosing(defs, match.index ?? 0)} :: ${expression}`; +} + +function findWriteStatements( + files: Scanned[], + migrations: { file: string; sql: string }[], +): string[] { + const out: string[] = []; + for (const { code, defs } of files) { + for (const match of code.matchAll(TS_WRITE)) + out.push(tsWriteKey(defs, match)); + } + for (const { file, sql } of migrations) { + for (const match of sql.matchAll(SQL_WRITE)) { + // CREATE TABLE and ALTER TABLE are DDL; only DML is a transition. + out.push( + `${file} :: ${match[1].toUpperCase().replace(/\s+/g, " ")} ${match[2]}`, + ); + } + } + return out.sort(); +} + +/** Every `ON DELETE` other than `restrict`/`no action` on a foreign key OF this table. */ +function findCascades(migrations: { file: string; sql: string }[]): string[] { + const live = new Set(); + for (const { sql } of migrations) { + for (const stmt of sql.split(/;|-->\s*statement-breakpoint/)) { + const add = + /ALTER\s+TABLE\s+"?pending_authorizations"?\s+ADD\s+CONSTRAINT\s+"([^"]+)"\s+FOREIGN\s+KEY[\s\S]*ON\s+DELETE\s+(cascade|set\s+null|set\s+default)/i.exec( + stmt, + ); + if (add) live.add(add[1]); + const drop = + /ALTER\s+TABLE\s+"?pending_authorizations"?\s+DROP\s+CONSTRAINT\s+(?:IF\s+EXISTS\s+)?"([^"]+)"/i.exec( + stmt, + ); + if (drop) live.delete(drop[1]); + // A foreign key declared inline in CREATE TABLE. + if (/CREATE\s+TABLE\s+"?pending_authorizations"?/i.test(stmt)) { + for (const inline of stmt.matchAll( + /CONSTRAINT\s+"([^"]+)"\s+FOREIGN\s+KEY[^,]*ON\s+DELETE\s+(?:cascade|set\s+null|set\s+default)/gi, + )) { + live.add(inline[1]); + } + } + } + } + return [...live].sort(); +} + +/** Writer method names whose calls are transitions: statement sites decided at callers, plus wrappers. */ +function writerMethods(): string[] { + const names = new Set(); + for (const [key, entry] of Object.entries(STATEMENTS)) { + if ("decidedAtCallers" in entry) names.add(key.split(" :: ")[0]); + } + for (const [from, via] of Object.entries(DELEGATIONS)) { + names.delete(from); + for (const wrapper of via) names.add(wrapper); + } + return [...names].sort(); +} + +type Call = { path: string; method: string; line: number; enclosing: string }; + +/** + * Every call of `names`, and every non-call mention of them (a method passed by reference is + * a write the ledger cannot follow, so it is reported rather than missed). + */ +function findCalls( + files: Scanned[], + names: string[], +): { calls: Call[]; references: string[] } { + const calls: Call[] = []; + const references: string[] = []; + for (const { path, code, defs } of files) { + for (const method of names) { + for (const m of code.matchAll( + new RegExp(`(? + "transitions" in entry ? entry.transitions : [], + ), + ...Object.values(CALL_SITES).flatMap((sites) => + sites.flatMap((site) => site.transitions), + ), + ...Object.values(CASCADES), + ...Object.values(NON_WRITES), + ]; +} + +/* + * ─── THE CHECKS ────────────────────────────────────────────────────────────────────────────── + */ + +/** How far, in lines, an anchor or a filer call may sit from the write it belongs to. */ +const ANCHOR_WINDOW = 20; + +const files = scanTs(); +const migrations = scanSql(); + +test("every write statement against pending_authorizations is in the ledger, and every ledger statement still exists", () => { + expect(findWriteStatements(files, migrations)).toEqual( + Object.keys(STATEMENTS).sort(), + ); +}); + +test("the table symbol is never imported under another name, which would hide its writes", () => { + const aliased = files + .filter(({ code }) => + /\bpendingAuthorizations\s+as\s+[\w$]+|=\s*pendingAuthorizations\s*[;,\n]/.test( + code, + ), + ) + .map(({ path }) => path); + expect(aliased).toEqual([]); +}); + +test("every cascade that deletes attempts is in the ledger", () => { + expect(findCascades(migrations)).toEqual(Object.keys(CASCADES).sort()); +}); + +test("store-internal delegation goes only through the declared wrappers", () => { + for (const [from, via] of Object.entries(DELEGATIONS)) { + const { calls } = findCalls(files, [from]); + expect(calls.map((call) => call.enclosing).sort()).toEqual([...via].sort()); + } +}); + +test("every call of a writing method has a disposition, in source order, at its anchor", () => { + const methods = writerMethods(); + const { calls, references } = findCalls(files, methods); + // A writer passed by reference escapes the call-site count; refuse it rather than miss it. + expect(references).toEqual([]); + + const grouped = new Map(); + for (const call of calls) { + const key = `${call.path} :: ${call.method}`; + grouped.set(key, [...(grouped.get(key) ?? []), call]); + } + expect([...grouped.keys()].sort()).toEqual(Object.keys(CALL_SITES).sort()); + + for (const [key, sites] of Object.entries(CALL_SITES)) { + const found = (grouped.get(key) ?? []).sort((a, b) => a.line - b.line); + expect({ key, count: found.length }).toEqual({ key, count: sites.length }); + const [path] = key.split(" :: "); + const lines = (files.find((file) => file.path === path)?.code ?? "").split( + "\n", + ); + sites.forEach((site, ordinal) => { + expect({ + key, + ordinal, + transitions: site.transitions.length > 0, + }).toEqual({ + key, + ordinal, + transitions: true, + }); + // The call NEAREST to some occurrence of the anchor must be this ordinal. + const nearestToAnchor = lines.flatMap((text, index) => { + if (!text.includes(site.anchor)) return []; + const line = index + 1; + const nearest = found.reduce( + (best, call, i) => + Math.abs(call.line - line) < Math.abs(found[best].line - line) + ? i + : best, + 0, + ); + return Math.abs(found[nearest].line - line) <= ANCHOR_WINDOW + ? [nearest] + : []; + }); + expect({ + key, + ordinal, + anchor: site.anchor, + at: nearestToAnchor.includes(ordinal), + }).toEqual({ key, ordinal, anchor: site.anchor, at: true }); + + // An audited transition whose filer is not the writer must call the filer beside the write. + for (const transition of site.transitions) { + if (!("audited" in transition)) continue; + if (transition.filedBy === key.split(" :: ")[1]) continue; + const call = found[ordinal]; + const window = lines + .slice(Math.max(0, call.line - 1), call.line - 1 + ANCHOR_WINDOW) + .join("\n"); + expect({ + transition: transition.name, + filerCalledAfterWrite: new RegExp( + `(? { + for (const transition of dispositionsOf()) { + if (!("audited" in transition)) continue; + expect(auditEventTypes).toContain(transition.audited); + const filers = files.filter(({ defs }) => + defs.some((def) => def.name === transition.filedBy), + ); + const filesIt = filers.map(({ code, defs }) => + spanOf(code, defs, transition.filedBy).includes( + `eventType: "${transition.audited}"`, + ), + ); + expect({ + transition: transition.name, + filesIt: filesIt.includes(true), + }).toEqual({ + transition: transition.name, + filesIt: true, + }); + } +}); + +test("a waiver argues, and a debt names its finding", () => { + const all = dispositionsOf(); + // A reason, not a label. "unaudited", "todo" and "n/a" are debt pretending to be judgement. + const thinWaivers = all.flatMap((t) => + "waived" in t && + (t.waived.length <= 80 || + /^(todo|n\/?a|unaudited|none|tbd)\b/i.test(t.waived)) + ? [t.name] + : [], + ); + expect(thinWaivers).toEqual([]); + const unnamedDebts = all.flatMap((t) => + "debt" in t && (!/^[A-Z]\d+[a-z]?$/.test(t.debt) || t.note.length <= 20) + ? [t.name] + : [], + ); + expect(unnamedDebts).toEqual([]); +}); + +test("debt only goes down", () => { + const debts = dispositionsOf().filter((t) => "debt" in t).length; + // Equality, not <=: a converted row must lower the ceiling in the same diff, so it cannot + // quietly make room for a new debt elsewhere. + expect(debts).toBe(DEBT_CEILING); +}); + +test("every hand-listed non-write still exists where the ledger says", () => { + for (const [key, entry] of Object.entries(NON_WRITES)) { + const code = files.find((file) => file.path === entry.file)?.code ?? ""; + expect({ key, present: code.includes(entry.anchor) }).toEqual({ + key, + present: true, + }); + } +}); + +/* + * ─── THE SCANNER'S OWN CONTROLS ────────────────────────────────────────────────────────────── + * The checks above prove the ledger matches the tree. These prove the scanner would SEE a write + * spelled each way it claims to, so a green above cannot mean "the pattern matches nothing". + */ + +test("the scanner sees every spelling of a write it claims to, and no read", () => { + const plant = (code: string): Scanned => ({ + path: "planted.ts", + code, + defs: definitionsIn(code), + }); + const writes = [ + "async a() { await db.insert(pendingAuthorizations).values({}); }", + "async b() { await db\n .update( pendingAuthorizations )\n .set({}); }", + "async c() { await tx.delete(pendingAuthorizations); }", + "async d() { await db.execute(sql`INSERT INTO pending_authorizations (x) VALUES (1)`); }", + "async e() { await db.execute(sql`update pending_authorizations set x = 1`); }", + 'async f() { await db.execute(sql`DELETE FROM "pending_authorizations" WHERE 1`); }', + `async g() { await db.execute(sql\`DELETE FROM ${INTERPOLATED} WHERE 1\`); }`, + "const h = async () => { await db.execute(sql`TRUNCATE pending_authorizations`); };", + ]; + expect(findWriteStatements(writes.map(plant), [])).toEqual([ + "a :: .insert(pendingAuthorizations)", + "b :: .update(pendingAuthorizations)", + "c :: .delete(pendingAuthorizations)", + "d :: INSERT INTO pending_authorizations", + "e :: UPDATE pending_authorizations", + "f :: DELETE FROM pending_authorizations", + `g :: DELETE FROM ${INTERPOLATED}`, + "h :: TRUNCATE pending_authorizations", + ]); + const reads = [ + "async r() { await db.select().from(pendingAuthorizations); }", + "async s() { await db.execute(sql`SELECT * FROM pending_authorizations`); }", + "async t() { await db.update(pendingAuthorizationsArchive).set({}); }", + "async u() { await db.execute(sql`UPDATE pending_authorizations_log SET x = 1`); }", + ]; + expect(findWriteStatements(reads.map(plant), [])).toEqual([]); + expect( + findWriteStatements( + [], + [ + { + file: "9999_x.sql", + sql: 'CREATE TABLE "pending_authorizations" (x text);\nDELETE FROM "pending_authorizations" WHERE true;', + }, + ], + ), + ).toEqual(['9999_x.sql :: DELETE FROM "pending_authorizations"']); +}); + +test("the cascade scan sees an added cascade and forgets a dropped one", () => { + expect( + findCascades([ + { + file: "1.sql", + sql: 'ALTER TABLE "pending_authorizations" ADD CONSTRAINT "k1" FOREIGN KEY ("a") REFERENCES "public"."x"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint\nALTER TABLE "pending_authorizations" ADD CONSTRAINT "k2" FOREIGN KEY ("b") REFERENCES "public"."y"("id") ON DELETE set null ON UPDATE no action;--> statement-breakpoint\nALTER TABLE "pending_authorizations" ADD CONSTRAINT "k3" FOREIGN KEY ("c") REFERENCES "public"."z"("id") ON DELETE restrict ON UPDATE no action;', + }, + { + file: "2.sql", + sql: 'ALTER TABLE "pending_authorizations" DROP CONSTRAINT "k1";', + }, + ]), + ).toEqual(["k2"]); +}); + +test("a writer called, passed by reference, or defined are told apart", () => { + const code = [ + "async discardAuthorizationAttempt(input) {}", + "await store.discardAuthorizationAttempt({ a: 1 });", + "await store\n .discardAuthorizationAttempt({ a: 1 });", + "promise.then(store.discardAuthorizationAttempt);", + ].join("\n"); + const { calls, references } = findCalls( + [{ path: "p.ts", code, defs: definitionsIn(code) }], + ["discardAuthorizationAttempt"], + ); + expect(calls.map((call) => call.line)).toEqual([2, 4]); + expect(references).toEqual(["p.ts:5 discardAuthorizationAttempt"]); +}); diff --git a/server/tests/plugin-call-args-validation.test.ts b/server/tests/plugin-call-args-validation.test.ts index 607d59257..fe5fc9ce5 100644 --- a/server/tests/plugin-call-args-validation.test.ts +++ b/server/tests/plugin-call-args-validation.test.ts @@ -2,7 +2,7 @@ import { describe, expect, test } from "bun:test"; import type { MiddlewareHandler } from "hono"; import { Hono } from "hono"; import type { AppVariables } from "../src/auth/guards"; -import type { BotAccessCheck } from "../src/plugins/routes"; +import type { BotAccessCheck } from "../src/agents/profile-policy"; import { createPluginRoutes } from "../src/plugins/routes"; import type { PluginStore } from "../src/plugins/store"; @@ -27,6 +27,7 @@ const canUseBot: BotAccessCheck = async () => true; describe("POST /api/plugins/call args", () => { function appWith(calls: unknown[]) { const store = { + brokerProvider: "composio" as const, callTool: async (input: unknown) => { calls.push(input); return { ok: true }; diff --git a/server/tests/plugin-connect-route.test.ts b/server/tests/plugin-connect-route.test.ts index aa995c3e5..11518a312 100644 --- a/server/tests/plugin-connect-route.test.ts +++ b/server/tests/plugin-connect-route.test.ts @@ -41,6 +41,8 @@ function app(store: { }) { const routes = createPluginRoutes( { + // The provider these rows belong to, which the routes read rather than guess. + brokerProvider: "composio" as const, /* * The read that decides whether this is a brokered row, which the handler makes before * anything about the consent flow. None of these vendors is one: a brokered app is reached diff --git a/server/tests/plugin-credential-binding.integration.test.ts b/server/tests/plugin-credential-binding.integration.test.ts index 68faea352..5d5eef8f5 100644 --- a/server/tests/plugin-credential-binding.integration.test.ts +++ b/server/tests/plugin-credential-binding.integration.test.ts @@ -49,6 +49,7 @@ const LEGITIMATE_URL = "https://legit.vendor.example/mcp"; const CHOSEN_URL = "https://collector.attacker.example/mcp"; const store = createPluginStore({ + brokerProvider: "composio", database, auditStore: createAuditStore(database), credentials: { diff --git a/server/tests/plugin-credential-rotation.integration.test.ts b/server/tests/plugin-credential-rotation.integration.test.ts index a0751e631..c6a5209e2 100644 --- a/server/tests/plugin-credential-rotation.integration.test.ts +++ b/server/tests/plugin-credential-rotation.integration.test.ts @@ -33,6 +33,7 @@ const serverId = "google-drive"; const personId = `plugin_rotation_person_${suite}`; const store = createPluginStore({ + brokerProvider: "composio", database, auditStore: createAuditStore(database), credentials: createCredentialStore(database), diff --git a/server/tests/plugin-curated-credential.integration.test.ts b/server/tests/plugin-curated-credential.integration.test.ts index 0ef97ac5b..44ea8a58a 100644 --- a/server/tests/plugin-curated-credential.integration.test.ts +++ b/server/tests/plugin-curated-credential.integration.test.ts @@ -31,6 +31,7 @@ import { TEST_POOL, testDatabaseUrl } from "./support/database"; const database = createDatabase(testDatabaseUrl(), TEST_POOL); const store = createPluginStore({ + brokerProvider: "composio", database, auditStore: createAuditStore(database), credentials: { diff --git a/server/tests/plugin-grants-validation.test.ts b/server/tests/plugin-grants-validation.test.ts index 30580cb2c..8038b0b30 100644 --- a/server/tests/plugin-grants-validation.test.ts +++ b/server/tests/plugin-grants-validation.test.ts @@ -1,7 +1,7 @@ import { describe, expect, test } from "bun:test"; import type { MiddlewareHandler } from "hono"; import type { AppVariables } from "../src/auth/guards"; -import type { BotAccessCheck } from "../src/plugins/routes"; +import type { BotAccessCheck } from "../src/agents/profile-policy"; import { createPluginRoutes } from "../src/plugins/routes"; import type { PluginStore } from "../src/plugins/store"; @@ -21,6 +21,7 @@ function appWith( bots: string[] = ["bot-1"], ) { const store = { + brokerProvider: "composio" as const, serverExists: async (serverId: string) => { calls.serverLookups?.push(serverId); return servers.includes(serverId); @@ -358,6 +359,7 @@ describe("POST /api/plugins/call", () => { describe("POST /api/plugins/skills", () => { function skillsApp(calls: { installs: unknown[] }) { const store = { + brokerProvider: "composio" as const, grant: async () => ({ ok: true }), callTool: async () => ({ ok: true }), skillOwner: async () => null, diff --git a/server/tests/plugin-logos.integration.test.ts b/server/tests/plugin-logos.integration.test.ts index 0c05c4b42..7625cff3a 100644 --- a/server/tests/plugin-logos.integration.test.ts +++ b/server/tests/plugin-logos.integration.test.ts @@ -4,7 +4,7 @@ import { eq } from "drizzle-orm"; import { createDatabase } from "../src/db/client"; import { mcpServers } from "../src/db/schema"; import type { BrokerApp } from "../src/plugins/broker"; -import { backfillComposioLogos } from "../src/plugins/logos"; +import { backfillBrokeredLogos } from "../src/plugins/logos"; import { TEST_POOL, testDatabaseUrl } from "./support/database"; const database = createDatabase(testDatabaseUrl(), TEST_POOL); @@ -17,13 +17,17 @@ afterAll(async () => { await database.$client.close(); }); -async function server(logo: string | null, provenance = "composio") { +async function server( + logo: string | null, + provenance = "composio", + urlOf = (id: string) => `composio://${id}`, +) { const id = `logo-${randomUUID()}`; await database.insert(mcpServers).values({ id, title: "Example", vendor: "Composio", - url: `composio://${id}`, + url: urlOf(id), provenance, logo, authScheme: "API_KEY", @@ -39,6 +43,9 @@ function app(slug: string): BrokerApp { logo: "https://example.com/logo.svg", categories: [], actionCount: 0, + classifiedCount: null, + permissionCount: null, + scopedActionCount: null, connection: { kind: "fields", authScheme: "API_KEY" }, }; } @@ -54,7 +61,7 @@ test("fills existing brokered apps by their URL, preserving existing logos and s const missing = await server(null); const existing = await server("https://example.com/existing.svg"); const custom = await server(null, "custom"); - await backfillComposioLogos(database, { + await backfillBrokeredLogos(database, "composio", { listApps: async () => [app(missing), app(existing), app(custom)], }); expect((await row(missing))?.logo).toBe("https://example.com/logo.svg"); @@ -66,7 +73,7 @@ test("fills existing brokered apps by their URL, preserving existing logos and s test("catalogue errors preserve the saved app and propagate to the startup warning", async () => { const id = await server(null); await expect( - backfillComposioLogos(database, { + backfillBrokeredLogos(database, "composio", { listApps: async () => { throw new Error("Catalogue unavailable"); }, @@ -75,3 +82,20 @@ test("catalogue errors preserve the saved app and propagate to the startup warni expect((await row(id))?.logo).toBeNull(); expect((await row(id))?.authScheme).toBe("API_KEY"); }); + +test("an arcade-provenanced row is filled when the call passes arcade", async () => { + const id = await server(null, "arcade", () => "arcade://Gmail"); + await backfillBrokeredLogos(database, "arcade", { + listApps: async () => [app("Gmail")], + }); + expect((await row(id))?.logo).toBe("https://example.com/logo.svg"); +}); + +// This is what fails if the backfill is ever made provider-agnostic by widening the slice and trying both parsers; see `access.ts`'s `TOOLKIT_OF`. +test("the same arcade row is left untouched when the call passes composio", async () => { + const id = await server(null, "arcade", () => "arcade://Gmail"); + await backfillBrokeredLogos(database, "composio", { + listApps: async () => [app("Gmail")], + }); + expect((await row(id))?.logo).toBeNull(); +}); diff --git a/server/tests/plugin-oauth-callback.test.ts b/server/tests/plugin-oauth-callback.test.ts index 641eaf0ff..8f3da276f 100644 --- a/server/tests/plugin-oauth-callback.test.ts +++ b/server/tests/plugin-oauth-callback.test.ts @@ -63,6 +63,7 @@ function app(input: { oauthClientFor?: () => Promise<{ clientId: string; clientSecret: string }>; }) { const store = { + brokerProvider: "composio" as const, // The brokered read the connect handler makes before anything about the consent flow. This // deployment has no brokered rows, so it answers nothing and the flow below is untouched. serverAddress: async () => undefined, diff --git a/server/tests/plugin-routes.integration.test.ts b/server/tests/plugin-routes.integration.test.ts index 7f3c421d8..f4b1ae4e6 100644 --- a/server/tests/plugin-routes.integration.test.ts +++ b/server/tests/plugin-routes.integration.test.ts @@ -26,6 +26,7 @@ import { testEnvironment } from "./support/environment"; const database = createDatabase(testDatabaseUrl(), TEST_POOL); const store = createPluginStore({ + brokerProvider: "composio", database, auditStore: createAuditStore(database), credentials: { diff --git a/server/tests/plugin-routes.test.ts b/server/tests/plugin-routes.test.ts index 5222e1ca7..7b3af389d 100644 --- a/server/tests/plugin-routes.test.ts +++ b/server/tests/plugin-routes.test.ts @@ -21,6 +21,14 @@ import { } from "../src/plugins/store"; import { testEnvironment } from "./support/environment"; +/** + * The sentence a PERSON is shown where no broker is configured, written out rather than imported + * from the class that makes it: a test that read it back from the source would pass whatever the + * source said. Identical on both providers, and it names no vendor and no setting. + */ +const PERSON_UNCONFIGURED = + "Connected apps are not set up for this deployment, so nothing was asked. An administrator can set them up."; + /** * The handful of reads one route makes, typed against the store that really answers them. * @@ -40,7 +48,9 @@ import { testEnvironment } from "./support/environment"; * the silence: see {@link UP_TO_PLUGIN_STORE}. */ function pluginStore(reads: Partial): PluginStore { - return reads as PluginStore; + // Every real store is built with the provider its rows belong to; the routes read it and never + // guess one, so a stand-in says which deployment it is standing in for. + return { brokerProvider: "composio", ...reads } as PluginStore; } /** @@ -748,6 +758,9 @@ const DIRECTORY: BrokerApp[] = [ logo: "https://example.com/slack.svg", categories: ["communication"], actionCount: 63, + classifiedCount: null, + permissionCount: null, + scopedActionCount: null, connection: { kind: "consent" }, }, { @@ -757,6 +770,9 @@ const DIRECTORY: BrokerApp[] = [ logo: null, categories: ["communication"], actionCount: 24, + classifiedCount: null, + permissionCount: null, + scopedActionCount: null, connection: { kind: "consent" }, }, { @@ -766,6 +782,9 @@ const DIRECTORY: BrokerApp[] = [ logo: null, categories: ["project-management"], actionCount: 18, + classifiedCount: null, + permissionCount: null, + scopedActionCount: null, connection: { kind: "consent" }, }, { @@ -781,6 +800,9 @@ const DIRECTORY: BrokerApp[] = [ logo: null, categories: ["documents"], actionCount: 31, + classifiedCount: null, + permissionCount: null, + scopedActionCount: null, connection: { kind: "unsupported", reason: @@ -1887,7 +1909,7 @@ function brokeredApp( // address it was asked with was this deployment's own. authorized.push(request); if (deployment.authorizeThrows) throw deployment.authorizeThrows; - return { redirectUrl }; + return { redirectUrl, authorizationId: null }; }, connectionFields: async (request: { toolkit: string; @@ -2152,7 +2174,9 @@ describe("connecting a brokered app", () => { const response = await connect({}); expect(response.status).toBe(503); - expect((await response.json()).error).toContain("COMPOSIO_API_KEY"); + const refusal = (await response.json()).error as string; + expect(refusal).toBe(PERSON_UNCONFIGURED); + expect(refusal).not.toMatch(/composio|COMPOSIO_API_KEY/i); }); test("the address Composio sends somebody back to is built here, never taken from the request", async () => { @@ -3038,10 +3062,15 @@ describe("confirming and ending a brokered connection", () => { expect(confirmResponse.status).toBe(503); expect(disconnectResponse.status).toBe(503); - expect((await confirmResponse.json()).error).toContain("COMPOSIO_API_KEY"); - expect((await disconnectResponse.json()).error).toContain( - "COMPOSIO_API_KEY", - ); + // A PERSON'S route: no vendor, no variable they cannot set (spec D11). + for (const refusal of [ + (await confirmResponse.json()).error as string, + (await disconnectResponse.json()).error as string, + ]) { + expect(refusal).toBe(PERSON_UNCONFIGURED); + expect(refusal).not.toContain("COMPOSIO_API_KEY"); + expect(refusal).not.toMatch(/composio/i); + } expect(confirmed).toEqual([]); expect(disconnected).toEqual([]); }); @@ -3189,7 +3218,9 @@ describe("re-checking a brokered connection", () => { const response = await recheck(); expect(response.status).toBe(503); - expect((await response.json()).error).toContain("COMPOSIO_API_KEY"); + const refusal = (await response.json()).error as string; + expect(refusal).toBe(PERSON_UNCONFIGURED); + expect(refusal).not.toMatch(/composio|COMPOSIO_API_KEY/i); expect(rechecked).toEqual([]); }); diff --git a/server/tests/plugin-servers-validation.test.ts b/server/tests/plugin-servers-validation.test.ts index 7481ee4e3..7a926844a 100644 --- a/server/tests/plugin-servers-validation.test.ts +++ b/server/tests/plugin-servers-validation.test.ts @@ -1,12 +1,13 @@ import { describe, expect, test } from "bun:test"; import type { MiddlewareHandler } from "hono"; import type { AppVariables } from "../src/auth/guards"; -import type { BotAccessCheck } from "../src/plugins/routes"; +import type { BotAccessCheck } from "../src/agents/profile-policy"; import { createPluginRoutes } from "../src/plugins/routes"; import type { PluginStore } from "../src/plugins/store"; function appWith(calls: { addServer: unknown[]; addCustomServer: unknown[] }) { const store = { + brokerProvider: "composio" as const, addServer: async (input: unknown) => { // Mirror the real store: it dereferences `input.credentialId?.trim()`, so a // non-string credential id throws a TypeError that used to escape as a 500. @@ -153,6 +154,7 @@ describe("POST /api/plugins/servers/custom", () => { describe("POST /api/plugins/servers/:id/oauth-client", () => { function oauthApp(registered: unknown[]) { const store = { + brokerProvider: "composio" as const, registerOAuthClient: async (input: unknown) => { registered.push(input); }, diff --git a/server/tests/plugin-store.integration.test.ts b/server/tests/plugin-store.integration.test.ts index 12e46dd96..586ab8d3d 100644 --- a/server/tests/plugin-store.integration.test.ts +++ b/server/tests/plugin-store.integration.test.ts @@ -159,6 +159,7 @@ const credentialsStub = { }; const store = createPluginStore({ + brokerProvider: "composio", database, auditStore: createAuditStore(database), credentials: credentialsStub, @@ -434,7 +435,12 @@ beforeAll(async () => { .onConflictDoNothing(); await database .insert(mcpTools) - .values({ serverId, name: toolName, description: "Search files." }) + .values({ + serverId, + name: toolName, + vendorName: toolName, + description: "Search files.", + }) .onConflictDoNothing(); /* * A second tool on the SAME server, granted to nobody. @@ -449,6 +455,7 @@ beforeAll(async () => { .values({ serverId, name: siblingToolName, + vendorName: siblingToolName, description: "A tool on the same server that nobody was granted.", }) .onConflictDoNothing(); @@ -1176,6 +1183,7 @@ describe("a grant on a tool the vendor no longer lists", () => { .values({ serverId, name: withdrawnName, + vendorName: withdrawnName, description: "Listed by the vendor when the grant was made.", }) .onConflictDoNothing(); @@ -1331,6 +1339,7 @@ describe("refresh token rotation", () => { }; const rotationStore = createPluginStore({ + brokerProvider: "composio", database, auditStore: createAuditStore(database), credentials: vault, @@ -1361,6 +1370,7 @@ describe("refresh token rotation", () => { */ function replica(exchange: (refreshToken: string) => Promise) { return createPluginStore({ + brokerProvider: "composio", database, auditStore: createAuditStore(database), credentials: vault, @@ -1541,6 +1551,7 @@ describe("refresh token rotation", () => { .values({ serverId: rotationServerId, name: rotationToolName, + vendorName: rotationToolName, description: "Search pages.", }) .onConflictDoNothing(); @@ -2411,6 +2422,7 @@ describe("a dynamic client the vendor has evicted", () => { }; const dynamicStore = createPluginStore({ + brokerProvider: "composio", database, auditStore: createAuditStore(database), credentials: vault, @@ -2432,6 +2444,7 @@ describe("a dynamic client the vendor has evicted", () => { * complete a consent flow. */ const storeWithNoRedirect = createPluginStore({ + brokerProvider: "composio", database, auditStore: createAuditStore(database), credentials: vault, @@ -2599,6 +2612,7 @@ describe("a dynamic client the vendor has evicted", () => { .values({ serverId: dynamicServerId, name: dynamicToolName, + vendorName: dynamicToolName, description: "Search pages.", }) .onConflictDoNothing(); @@ -2884,6 +2898,7 @@ describe("a dynamic client the vendor has evicted", () => { * a stub asserting the value the real code is assumed to produce. */ const storeWithRealRegistration = createPluginStore({ + brokerProvider: "composio", database, auditStore: createAuditStore(database), credentials: vault, @@ -4060,6 +4075,7 @@ async function freshStore(options: { broker?: ComposioBroker } = {}) { }; const store = createPluginStore({ + brokerProvider: "composio", database, auditStore, credentials: credentialsStub, @@ -4118,6 +4134,7 @@ async function seedComposioGmail( await database.insert(mcpTools).values({ serverId: "gmail", name: "GMAIL_FETCH_EMAILS", + vendorName: "GMAIL_FETCH_EMAILS", description: "Fetch emails.", effect: "read", version: options.version === undefined ? "20260903_00" : options.version, @@ -4989,6 +5006,7 @@ test("an action's effect, destructive marker and version round-trip", async () = { serverId: "gmail", name: "GMAIL_FETCH_EMAILS", + vendorName: "GMAIL_FETCH_EMAILS", description: "Fetch emails.", effect: "read", destructive: false, @@ -4997,6 +5015,7 @@ test("an action's effect, destructive marker and version round-trip", async () = { serverId: "gmail", name: "GMAIL_DELETE_MESSAGE", + vendorName: "GMAIL_DELETE_MESSAGE", description: "Delete a message.", effect: "write", destructive: true, @@ -5044,6 +5063,7 @@ test("an action listed before these columns existed reads as unclassified and un await database.insert(mcpTools).values({ serverId: "notion", name: "notion-fetch", + vendorName: "notion-fetch", description: "Fetch a page.", }); @@ -5597,6 +5617,7 @@ describe("a row that resolves to two servers at once", () => { await database.insert(mcpTools).values({ serverId: "notion", name: "notion-fetch", + vendorName: "notion-fetch", description: "Fetch a page.", }); await database.insert(agents).values({ @@ -6115,6 +6136,7 @@ describe("a listing this database would not have taken", () => { }); const failing = createPluginStore({ + brokerProvider: "composio", database: refusing, auditStore: { insert: async () => {} }, credentials: credentialsStub, @@ -6250,6 +6272,7 @@ describe("a query of this deployment's own that failed", () => { }, }); const failing = createPluginStore({ + brokerProvider: "composio", database: refusing, auditStore: { insert: async () => {} }, credentials: credentialsStub, @@ -6380,6 +6403,7 @@ describe("a query of this deployment's own that failed", () => { * throw is classify it, which is the property. */ const failing = createPluginStore({ + brokerProvider: "composio", database, auditStore: { insert: async (event) => { @@ -6534,6 +6558,7 @@ test("an app with nothing recorded against it can be refreshed to no actions at test("an audit write that fails is not recorded as the vendor misbehaving", async () => { const database = await freshDatabase(); const failing = createPluginStore({ + brokerProvider: "composio", database, auditStore: { insert: async (event) => { @@ -6612,6 +6637,14 @@ test("enabling an app writes a brokered row, and asks for its auth config first" throw new Error(`enabling an app asked the broker to ${what}`); }; const broker: ComposioBroker = { + // This stub stands in for Composio, whose grant is held locally; see `ConnectedAppBroker.grantIsLocal`. + grantIsLocal: true, + // Nothing here asks what auth provider a connection is held under. + authProviderOf: async () => null, + // Nothing here reads either member; both are declared because the seam requires a + // broker to SAY what it runs — see `ConnectedAppBroker.authorizations`. + authorizations: null, + grantsFor: unasked("read grants"), listApps: unasked("list the catalogue"), ensureAuthConfig: async (config) => { asked.push(config); @@ -6632,6 +6665,12 @@ test("enabling an app writes a brokered row, and asks for its auth config first" authorize: unasked("begin somebody's connection"), isConnected: unasked("check somebody's connection"), revoke: unasked("withdraw somebody's grant"), + // Enabling an app draws no connect form, connects nobody and undoes no account. All three are + // declared so the stub is a `ConnectedAppBroker` rather than a partial one, and all three fail + // if reached. + connectionFields: unasked("read an app's connection fields"), + connectWithFields: unasked("connect somebody with typed fields"), + revokeAccount: unasked("undo one account"), accountName: async () => null, }; @@ -6785,6 +6824,15 @@ function brokerSpy(answers: { return { order, broker: { + // This stub stands in for Composio, whose grant is held locally; see `ConnectedAppBroker.grantIsLocal`. + grantIsLocal: true, + // A broker that does not say what auth provider a connection is held under, which is what + // the sibling resolution has to treat as "we do not know" rather than as "none". + authProviderOf: async () => null, + // Nothing here reads either member; both are declared because the seam requires a + // broker to SAY what it runs — see `ConnectedAppBroker.authorizations`. + authorizations: null, + grantsFor: unasked("read grants"), listApps: unasked("list the catalogue"), ensureAuthConfig: asked( "ensureAuthConfig", @@ -7731,6 +7779,7 @@ test("a destructive action says so in the list the screens read", async () => { await database.insert(mcpTools).values({ serverId: "gmail", name: "GMAIL_DELETE_MESSAGE", + vendorName: "GMAIL_DELETE_MESSAGE", description: "Delete a message.", effect: "write", destructive: true, @@ -7812,6 +7861,7 @@ describe("a vault read that fails on a query of this deployment's own", () => { * left it somewhere else cannot decide whether this call gets as far as the vault. */ const faultStore = createPluginStore({ + brokerProvider: "composio", database, auditStore: createAuditStore(database), credentials: createCredentialStore( @@ -7875,6 +7925,7 @@ describe("a vault read that fails on a query of this deployment's own", () => { await database.insert(mcpTools).values({ serverId: faultServerId, name: faultToolName, + vendorName: faultToolName, description: "Do something.", }); await faultStore.grant("mcp", faultRef, faultBotId, "admin@openbot.local"); diff --git a/server/tests/plugin-user-credential.integration.test.ts b/server/tests/plugin-user-credential.integration.test.ts index b425e64d8..6265f53f3 100644 --- a/server/tests/plugin-user-credential.integration.test.ts +++ b/server/tests/plugin-user-credential.integration.test.ts @@ -92,6 +92,7 @@ let toolWasAlreadyAdvertised = false; const credentialIds: string[] = []; const store = createPluginStore({ + brokerProvider: "composio", database, auditStore: createAuditStore(database), credentials: { @@ -283,7 +284,12 @@ beforeAll(async () => { .onConflictDoNothing(); await database .insert(mcpTools) - .values({ serverId, name: toolName, description: "Search files." }) + .values({ + serverId, + name: toolName, + vendorName: toolName, + description: "Search files.", + }) .onConflictDoNothing(); // The Bot holds the tool throughout. Everything here is about the person, not the grant. diff --git a/server/tests/plugins-page-provider.test.ts b/server/tests/plugins-page-provider.test.ts new file mode 100644 index 000000000..cb05c567d --- /dev/null +++ b/server/tests/plugins-page-provider.test.ts @@ -0,0 +1,179 @@ +import { describe, expect, test } from "bun:test"; +import { createApp } from "../src/app"; +import { DEV_ACTOR } from "../src/auth/dev-actor"; +import { loadConfig } from "../src/config"; +import type { BrokerProvider } from "../src/plugins/access"; +import type { PluginStore } from "../src/plugins/store"; +import { testEnvironment } from "./support/environment"; + +/** A stand-in for the deployment's vendor key. It must never appear in the page payload. */ +const VENDOR_KEY = "vendor-key-sentinel-0123456789"; + +/** `createApp`'s positions 4-14, which this surface does not supply. */ +const UP_TO_PLUGIN_STORE = [ + undefined, + undefined, + undefined, + undefined, + undefined, + undefined, + undefined, + undefined, + undefined, + undefined, + undefined, +] as const; + +/** `createApp`'s positions 16-29, between the plugin store and the broker. */ +const UP_TO_BROKER = [ + undefined, + undefined, + undefined, + undefined, + undefined, + undefined, + undefined, + undefined, + undefined, + undefined, + undefined, + undefined, + undefined, + undefined, +] as const; + +async function pageFor( + composio?: { + broker: unknown; + provider: BrokerProvider; + }, + /** + * Which provider the STORE was built for, which is where the page now takes the name from. + * + * The two are the same value on any deployment the wiring builds — but they are not the same + * question, and a deployment with both keys set and `OPENBOT_BROKER_PROVIDER` unset has a store + * and no broker at all. `provider-undecided.test.ts` is that case; here it defaults to the + * Composio deployment these cases are written about. + */ + rowsBelongTo: BrokerProvider = "composio", +) { + const store = { + brokerProvider: rowsBelongTo, + listServers: async () => [], + listSkills: async () => [], + } as unknown as PluginStore; + const app = createApp( + loadConfig(testEnvironment()), + { + handler: () => new Response(null, { status: 204 }), + api: { getSession: async () => ({ user: DEV_ACTOR }) }, + } as never, + { rolesForUser: async () => [] }, + ...UP_TO_PLUGIN_STORE, + store, + ...UP_TO_BROKER, + composio as never, + ); + const response = await app.request("http://openbot.test/api/plugins"); + expect(response.status).toBe(200); + return (await response.json()) as Record; +} + +describe("the Plugins page names the active provider", () => { + test("an Arcade deployment serves arcade", async () => { + const page = await pageFor( + { + broker: { key: VENDOR_KEY }, + provider: "arcade", + }, + "arcade", + ); + expect(page.provider).toBe("arcade"); + }); + + test("a Composio deployment serves composio", async () => { + const page = await pageFor({ + broker: { key: VENDOR_KEY }, + provider: "composio", + }); + expect(page.provider).toBe("composio"); + expect(page.composioConfigured).toBe(true); + }); + + test("a deployment with no broker still serves composio", async () => { + const page = await pageFor(undefined); + expect(page.provider).toBe("composio"); + expect(page.composioConfigured).toBe(false); + }); + + test("the name travels, the key and anything derived from it do not", async () => { + const page = await pageFor( + { + broker: { key: VENDOR_KEY, grantIsLocal: true }, + provider: "arcade", + }, + "arcade", + ); + expect(Object.keys(page).sort()).toEqual( + [ + "botsMayCallBack", + "catalogue", + "authorizesPerAction", + "composioConfigured", + "provider", + "redirectUri", + "servers", + "skills", + ].sort(), + ); + const body = JSON.stringify(page); + expect(body).not.toContain(VENDOR_KEY); + expect(body).not.toContain("grantIsLocal"); + }); +}); + +/* + * THE PER-ACTION CAPABILITY, which is a different question from the vendor's name and is answered + * by a presence test on what the broker declared. The two happen to agree on today's brokers; these + * cases pin that the payload follows the DECLARATION, because the routes behind the buttons the + * flag draws (`/servers/:id/authorize`, `/arcade/verify`) gate on that same expression. + */ +describe("the Plugins page declares whether the broker authorizes per action", () => { + test("a broker with an authorization flow serves true", async () => { + const page = await pageFor({ + broker: { key: VENDOR_KEY, authorizations: { verify: () => {} } }, + provider: "arcade", + }); + expect(page.authorizesPerAction).toBe(true); + }); + + test("a Composio deployment serves false", async () => { + const page = await pageFor({ + broker: { key: VENDOR_KEY, authorizations: null }, + provider: "composio", + }); + expect(page.authorizesPerAction).toBe(false); + }); + + test("a deployment with no broker serves false", async () => { + const page = await pageFor(undefined); + expect(page.authorizesPerAction).toBe(false); + }); + + /* + * WHERE THE NAME AND THE CAPABILITY DISAGREE, and the capability wins. This is the deployment the + * name comparison got wrong: `provider` still says arcade, because that is what the copy is + * written from, and the flag says false, because `/servers/:id/authorize` would refuse it 503. + */ + test("a broker named arcade with no flow serves arcade and false", async () => { + const page = await pageFor( + { + broker: { key: VENDOR_KEY, authorizations: null }, + provider: "arcade", + }, + "arcade", + ); + expect(page.provider).toBe("arcade"); + expect(page.authorizesPerAction).toBe(false); + }); +}); diff --git a/server/tests/proactive-store.integration.test.ts b/server/tests/proactive-store.integration.test.ts index de3e36f8b..bdf47cc13 100644 --- a/server/tests/proactive-store.integration.test.ts +++ b/server/tests/proactive-store.integration.test.ts @@ -30,6 +30,7 @@ const server = `${prefix}-connector`; const ref = `${server}/list_issues`; const auditStore = createAuditStore(database); const plugins = createPluginStore({ + brokerProvider: "composio", database, auditStore, credentials: createCredentialStore(database), @@ -70,6 +71,7 @@ beforeAll(async () => { await database.insert(mcpTools).values({ serverId: server, name: "list_issues", + vendorName: "list_issues", effect: "read", inputSchema: {}, }); diff --git a/server/tests/provider-selection.test.ts b/server/tests/provider-selection.test.ts new file mode 100644 index 000000000..a73c3b030 --- /dev/null +++ b/server/tests/provider-selection.test.ts @@ -0,0 +1,298 @@ +import { describe, expect, test } from "bun:test"; +import { + activeProvider, + assertActivatable, + BrokerRefusalError, + brokerSentence, +} from "../src/plugins/broker"; +import { selectProviderWiring } from "../src/plugins/provider-wiring"; + +/** + * Which broker is active, decided from configuration alone: no network, no database. + * + * Both keys set is legal and expected, since ending an account at the old vendor needs its key. + */ +describe("activeProvider", () => { + test("exactly one key set selects that provider", () => { + expect(activeProvider({ composioApiKey: "c" })).toBe("composio"); + expect(activeProvider({ arcadeApiKey: "a" })).toBe("arcade"); + }); + + test("both keys set: brokerProvider decides", () => { + const keys = { composioApiKey: "c", arcadeApiKey: "a" }; + expect(activeProvider({ ...keys, brokerProvider: "composio" })).toBe( + "composio", + ); + expect(activeProvider({ ...keys, brokerProvider: "arcade" })).toBe( + "arcade", + ); + }); + + test("both keys set with brokerProvider unset selects nothing", () => { + expect(activeProvider({ composioApiKey: "c", arcadeApiKey: "a" })).toBe( + null, + ); + }); + + test("neither key set selects nothing", () => { + expect(activeProvider({})).toBe(null); + expect(activeProvider({ brokerProvider: "arcade" })).toBe(null); + }); + + /** + * A key is a CREDENTIAL, so a key of nothing is no key. `ARCADE_API_KEY=` with nothing after it, + * or a value that is all whitespace, is an operator typo rather than a configured provider, and + * selecting on it builds a vendor client on an empty credential. `../src/config` happens to trim + * today, but that is one distant guard and not this function's answer, so the config values here + * are constructed directly to put the blank key in front of `activeProvider` itself. + */ + test("an empty or whitespace-only key is not a configured provider", () => { + expect(activeProvider({ arcadeApiKey: "" })).toBe(null); + expect(activeProvider({ composioApiKey: "" })).toBe(null); + expect(activeProvider({ arcadeApiKey: " " })).toBe(null); + expect(activeProvider({ composioApiKey: "\t\n " })).toBe(null); + }); + + test("a blank key beside a real one leaves the real one unambiguous", () => { + expect(activeProvider({ composioApiKey: "c", arcadeApiKey: "" })).toBe( + "composio", + ); + expect(activeProvider({ composioApiKey: " ", arcadeApiKey: "a" })).toBe( + "arcade", + ); + }); + + test("a brokerProvider whose key is blank is refused, like one that is unset", () => { + expect(activeProvider({ arcadeApiKey: "", brokerProvider: "arcade" })).toBe( + null, + ); + expect( + activeProvider({ + composioApiKey: "c", + arcadeApiKey: " ", + brokerProvider: "arcade", + }), + ).toBe(null); + }); + + test("a brokerProvider whose key is unset is refused, not selected", () => { + expect( + activeProvider({ composioApiKey: "c", brokerProvider: "arcade" }), + ).toBe(null); + expect( + activeProvider({ arcadeApiKey: "a", brokerProvider: "composio" }), + ).toBe(null); + }); +}); + +/** + * The activation refusal keys on ROWS, never on keys: no database, no key, no vendor package. + */ +describe("assertActivatable", () => { + test("rows for the other provider refuse activation, naming the sunset flow", () => { + let caught: unknown; + try { + assertActivatable("arcade", 3); + } catch (e) { + caught = e; + } + expect(caught).toBeInstanceOf(BrokerRefusalError); + const sentence = brokerSentence(caught); + expect(sentence).toContain("sunset"); + expect(sentence).toContain("Composio"); + }); + + test("zero rows for the other provider lets activation proceed", () => { + expect(() => assertActivatable("arcade", 0)).not.toThrow(); + expect(() => assertActivatable("composio", 0)).not.toThrow(); + }); + + /** + * A count that is not a count refuses, and never reaches the sentence a person reads. + * + * `NaN <= 0` is false, so before this was guarded a NaN sailed past the "nothing to refuse" test + * and landed in the refusal as the literal words "NaN brokered connections". The refusal must say + * that the count could not be taken, which is the true thing, and must never print the sentinel. + */ + test("a count that is not a whole number of rows refuses, without printing itself", () => { + for (const unusable of [ + Number.NaN, + Number.POSITIVE_INFINITY, + -1, + 1.5, + ] as const) { + let caught: unknown; + try { + assertActivatable("arcade", unusable); + } catch (e) { + caught = e; + } + expect(caught).toBeInstanceOf(BrokerRefusalError); + const sentence = brokerSentence(caught) ?? ""; + expect(sentence).toContain("could not be counted"); + expect(sentence).not.toContain(String(unusable)); + expect(sentence).not.toContain("brokered connections still belong"); + } + }); + + test("one row for the other provider refuses, in the other direction and in the singular", () => { + let caught: unknown; + try { + assertActivatable("composio", 1); + } catch (e) { + caught = e; + } + expect(caught).toBeInstanceOf(BrokerRefusalError); + const sentence = brokerSentence(caught); + expect(sentence).toContain("Composio cannot be activated"); + expect(sentence).toContain("1 brokered connection still belongs to Arcade"); + expect(sentence).toContain("sunset"); + }); +}); + +/** + * The entrypoint's decision, extracted so no test boots the server: which transport client is + * installed, which broker is passed on, and what happens to a named provider whose key is unset. + * Fake factories stand in for the vendor constructors, so nothing here can make a request. + */ +describe("selectProviderWiring", () => { + function factories() { + const calls: string[] = []; + const composioActions = { tag: "composio-actions" } as never; + const arcadeActions = { tag: "arcade-actions" } as never; + const composioBroker = { tag: "composio-broker" } as never; + const arcadeBroker = { tag: "arcade-broker" } as never; + return { + calls, + composioActions, + arcadeActions, + composioBroker, + arcadeBroker, + create: { + composio: (key: string) => { + calls.push(`composio:${key.length}`); + return { actions: composioActions, broker: composioBroker }; + }, + arcade: (key: string) => { + calls.push(`arcade:${key.length}`); + return { actions: arcadeActions, broker: arcadeBroker }; + }, + }, + }; + } + + test("only the Arcade key installs the Arcade client and leaves the Composio seam null", () => { + const f = factories(); + const wiring = selectProviderWiring({ arcadeApiKey: "a" }, f.create); + expect(wiring.provider).toBe("arcade"); + expect(wiring.install.arcade).toBe(f.arcadeActions); + expect(wiring.install.composio).toBeNull(); + expect(wiring.broker).toBe(f.arcadeBroker); + expect(f.calls).toEqual(["arcade:1"]); + }); + + test("only the Composio key is today's behaviour: its client, its broker, Arcade null", () => { + const f = factories(); + const wiring = selectProviderWiring({ composioApiKey: "c" }, f.create); + expect(wiring.provider).toBe("composio"); + expect(wiring.install.composio).toBe(f.composioActions); + expect(wiring.install.arcade).toBeNull(); + expect(wiring.broker).toBe(f.composioBroker); + expect(f.calls).toEqual(["composio:1"]); + }); + + test("both keys with nothing named is refused, not degraded to no broker", () => { + const f = factories(); + expect(() => + selectProviderWiring( + { composioApiKey: "c", arcadeApiKey: "a" }, + f.create, + ), + ).toThrow( + /COMPOSIO_API_KEY.*ARCADE_API_KEY.*OPENBOT_BROKER_PROVIDER|OPENBOT_BROKER_PROVIDER.*COMPOSIO_API_KEY.*ARCADE_API_KEY/s, + ); + expect(f.calls).toEqual([]); + }); + + test("the refusal for two keys names neither key's value", () => { + const f = factories(); + let caught: unknown; + try { + selectProviderWiring( + { composioApiKey: "composio-secret", arcadeApiKey: "arcade-secret" }, + f.create, + ); + } catch (e) { + caught = e; + } + expect(caught).toBeInstanceOf(Error); + const sentence = (caught as Error).message; + expect(sentence).not.toContain("composio-secret"); + expect(sentence).not.toContain("arcade-secret"); + expect(sentence).toContain("OPENBOT_BROKER_PROVIDER"); + }); + + test("both keys with a provider named installs only the named one", () => { + const f = factories(); + const wiring = selectProviderWiring( + { composioApiKey: "c", arcadeApiKey: "a", brokerProvider: "arcade" }, + f.create, + ); + expect(wiring.provider).toBe("arcade"); + expect(wiring.install.composio).toBeNull(); + expect(wiring.install.arcade).toBe(f.arcadeActions); + expect(f.calls).toEqual(["arcade:1"]); + }); + + test("no keys at all is a legal no-broker deployment", () => { + const f = factories(); + const wiring = selectProviderWiring({}, f.create); + expect(wiring.provider).toBeNull(); + expect(wiring.broker).toBeNull(); + expect(wiring.install).toEqual({ composio: null, arcade: null }); + }); + + test("a blank key builds no client at all", () => { + const f = factories(); + const wiring = selectProviderWiring({ arcadeApiKey: "" }, f.create); + expect(wiring.provider).toBeNull(); + expect(wiring.broker).toBeNull(); + expect(wiring.install).toEqual({ composio: null, arcade: null }); + expect(f.calls).toEqual([]); + const g = factories(); + const composio = selectProviderWiring({ composioApiKey: " " }, g.create); + expect(composio.provider).toBeNull(); + expect(g.calls).toEqual([]); + }); + + test("a named provider whose key is blank is surfaced, not built from nothing", () => { + const f = factories(); + expect(() => + selectProviderWiring( + { arcadeApiKey: "", brokerProvider: "arcade" }, + f.create, + ), + ).toThrow(/ARCADE_API_KEY/); + expect(f.calls).toEqual([]); + }); + + test("a named provider whose key is unset is surfaced, not treated as no broker", () => { + const f = factories(); + expect(() => + selectProviderWiring( + { composioApiKey: "c", brokerProvider: "arcade" }, + f.create, + ), + ).toThrow(/OPENBOT_BROKER_PROVIDER=arcade.*ARCADE_API_KEY/); + expect(() => + selectProviderWiring( + { arcadeApiKey: "a", brokerProvider: "composio" }, + f.create, + ), + ).toThrow(/OPENBOT_BROKER_PROVIDER=composio.*COMPOSIO_API_KEY/); + expect(() => + selectProviderWiring({ brokerProvider: "arcade" }, f.create), + ).toThrow(/ARCADE_API_KEY/); + expect(f.calls).toEqual([]); + }); +}); diff --git a/server/tests/provider-undecided.test.ts b/server/tests/provider-undecided.test.ts new file mode 100644 index 000000000..dab94381b --- /dev/null +++ b/server/tests/provider-undecided.test.ts @@ -0,0 +1,163 @@ +// server/tests/provider-undecided.test.ts +/** + * "Which provider" has THREE ways of having no answer, and none of them is "Composio is active". + * + * `activeProvider` answers null when no key is set, when both keys are set and + * `OPENBOT_BROKER_PROVIDER` names neither, and when the variable names a provider whose key is + * unset. The entrypoint and the plugins routes both used to flatten all three with `?? "composio"`, + * so a deployment part-way through a migration — both keys set, variable not yet set, which + * `docs/plugins/arcade.md` calls legal — read its live Arcade rows through Composio's filter and + * Composio's url parser. Those connections showed as absent and could not be revoked. + * + * What is asserted here: the three causes are told apart at the source; a deployment whose + * configuration cannot name a provider takes the name from the rows it actually holds; rows + * belonging to BOTH providers with nothing active is refused rather than resolved; and the plugins + * routes read the one name the stores were built with instead of deciding a second time. + */ +import { describe, expect, test } from "bun:test"; +import { Hono, type MiddlewareHandler } from "hono"; +import type { AppVariables } from "../src/auth/guards"; +import type { AccountModeSwitch } from "../src/plugins/account-mode"; +import { providerDecision } from "../src/plugins/broker"; +import { storedProvider } from "../src/plugins/provider-wiring"; +import { createPluginRoutes } from "../src/plugins/routes"; +import type { SharedUseStore } from "../src/plugins/shared-use-store"; +import type { PluginStore } from "../src/plugins/store"; + +describe("the three causes of an undecided provider are told apart", () => { + test("no key at all is its own cause", () => { + expect(providerDecision({})).toEqual({ kind: "unconfigured" }); + }); + + test("one key and no variable is that provider, active", () => { + expect(providerDecision({ arcadeApiKey: "k" })).toEqual({ + kind: "active", + provider: "arcade", + }); + }); + + test("both keys with nothing named is ambiguous, not Composio", () => { + expect( + providerDecision({ composioApiKey: "c", arcadeApiKey: "a" }), + ).toEqual({ kind: "ambiguous", configured: ["composio", "arcade"] }); + }); + + test("a named provider whose key is unset is its own cause", () => { + expect( + providerDecision({ composioApiKey: "c", brokerProvider: "arcade" }), + ).toEqual({ kind: "misnamed", named: "arcade" }); + }); +}); + +describe("a deployment that cannot name a provider takes the name from its rows", () => { + test("both keys, nothing named, Arcade rows: the rows are read as Arcade", () => { + const decision = providerDecision({ + composioApiKey: "c", + arcadeApiKey: "a", + }); + expect(storedProvider(decision, ["arcade"])).toBe("arcade"); + }); + + test("a key withdrawn after the fact still reads its own rows", () => { + expect(storedProvider(providerDecision({}), ["arcade"])).toBe("arcade"); + }); + + test("an active provider is the answer whatever the rows say", () => { + expect( + storedProvider(providerDecision({ composioApiKey: "c" }), ["composio"]), + ).toBe("composio"); + }); + + test("rows at both vendors and nothing active is refused, never resolved", () => { + const decision = providerDecision({ + composioApiKey: "c", + arcadeApiKey: "a", + }); + expect(() => storedProvider(decision, ["composio", "arcade"])).toThrow( + /OPENBOT_BROKER_PROVIDER/, + ); + }); +}); + +/** + * The routes read the name the stores were built with. The case is the migration state exactly: no + * broker is wired (neither key is active), so the `composio` bag the routes take is absent, and the + * store holds Arcade rows. + */ +describe("the plugins routes read one name, not a second answer", () => { + function arcadeDeploymentWithNoBroker() { + const switched: Array<{ serverId: string; mode: string }> = []; + const store = { + brokerProvider: "arcade" as const, + serverAddress: async (serverId: string) => + serverId === "brokered-gmail" + ? { + id: "brokered-gmail", + title: "Gmail", + url: "arcade://Gmail", + authScheme: "OAUTH2", + } + : undefined, + listServers: async () => [], + listSkills: async () => [], + } as unknown as PluginStore; + + const modes = { + switchMode: async (input: { serverId: string; mode: string }) => { + switched.push({ serverId: input.serverId, mode: input.mode }); + return { ended: [], approved: [] }; + }, + forgetRule: async () => {}, + } as unknown as AccountModeSwitch; + + const signedIn: MiddlewareHandler<{ Variables: AppVariables }> = async ( + context, + next, + ) => { + context.set("actor", { + id: "admin-1", + email: "admin@example.test", + role: "admin", + } as never); + await next(); + }; + + const app = new Hono().route( + "/api/plugins", + createPluginRoutes( + store, + signedIn, + async () => true, + undefined, + undefined, + { modes, use: {} as unknown as SharedUseStore }, + ), + ); + return { app, switched }; + } + + test("an Arcade row is read with Arcade's parser though no broker is wired", async () => { + const it = arcadeDeploymentWithNoBroker(); + const response = await it.app.request( + "http://openbot.test/api/plugins/servers/brokered-gmail/account-mode", + { + method: "PUT", + headers: { "content-type": "application/json" }, + body: JSON.stringify({ mode: "shared" }), + }, + ); + expect(response.status).toBe(200); + expect(it.switched).toEqual([ + { serverId: "brokered-gmail", mode: "shared" }, + ]); + }); + + test("and the page names Arcade rather than Composio", async () => { + const it = arcadeDeploymentWithNoBroker(); + const response = await it.app.request("http://openbot.test/api/plugins"); + expect(response.status).toBe(200); + expect(((await response.json()) as { provider: string }).provider).toBe( + "arcade", + ); + }); +}); diff --git a/server/tests/remote-bot-handoff.integration.test.ts b/server/tests/remote-bot-handoff.integration.test.ts index 9116b5dd4..6ff4a5e14 100644 --- a/server/tests/remote-bot-handoff.integration.test.ts +++ b/server/tests/remote-bot-handoff.integration.test.ts @@ -35,6 +35,14 @@ const ACTOR = `remote-handoff-actor-${suite}`; const ALL = [REMOTE, BUILT_IN, OTHER_REMOTE]; const broker: ConnectedAppBroker = { + // This stub stands in for Composio, whose grant is held locally; see `ConnectedAppBroker.grantIsLocal`. + grantIsLocal: true, + // Nothing here asks what auth provider a connection is held under. + authProviderOf: async () => null, + // Nothing here reads either member; both are declared because the seam requires a broker to + // SAY what it runs — see `ConnectedAppBroker.authorizations`. + authorizations: null, + grantsFor: async () => [], listApps: async () => [], ensureAuthConfig: async () => undefined, deleteAuthConfig: async () => undefined, @@ -48,6 +56,7 @@ const broker: ConnectedAppBroker = { const auditStore = createAuditStore(database); const store = createPluginStore({ + brokerProvider: "composio", database, auditStore, credentials: { diff --git a/server/tests/remove-server-foreign-provenance.test.ts b/server/tests/remove-server-foreign-provenance.test.ts new file mode 100644 index 000000000..4fa14eb11 --- /dev/null +++ b/server/tests/remove-server-foreign-provenance.test.ts @@ -0,0 +1,210 @@ +// server/tests/remove-server-foreign-provenance.test.ts +import { afterAll, afterEach, describe, expect, test } from "bun:test"; +import { randomUUID } from "node:crypto"; +import { and, asc, eq, inArray, sql } from "drizzle-orm"; +import { createAuditStore } from "../src/audit"; +import { createDatabase } from "../src/db/client"; +import { auditEvents, brokeredConnections, mcpServers } from "../src/db/schema"; +import type { ConnectedAppBroker } from "../src/plugins/broker"; +import { createPluginStore } from "../src/plugins/store"; +import { TEST_POOL, testDatabaseUrl } from "./support/database"; + +/* + * WHAT A ROW LEFT BEHIND BY THE OTHER BROKER IS REMOVED AS. + * + * `mcp_servers.provenance` records which broker a row was minted at, and a deployment that has + * switched broker — or a restore, or a hand edit — holds rows whose provenance is NOT the + * configured provider. `removeServer` read three different answers to "which vendor is this": the + * app slug off the ROW's provenance, the connection rows off the CONFIGURED provider, and the + * revocation off the ACTIVE broker. So a foreign row's slug was handed to the wrong vendor while + * the deletes beneath it matched nothing, and the removal reported success either way. + * + * SCOPING. `audit_events` is append-only and `brokered_connections` is long-lived, so every + * assertion is keyed on names this file alone writes. + */ +const database = createDatabase(testDatabaseUrl(), TEST_POOL); + +afterAll(async () => { + await database.$client.close(); +}); + +const suite = randomUUID().slice(0, 8); +const apps: string[] = []; +let n = 0; + +function run() { + n += 1; + const tag = `${suite}${n}`; + return { app: `Gmail-${tag}`, person: `person-${tag}` }; +} + +/** Everything the broker was asked, by name, so "which vendor was asked" is an assertion. */ +function recorder() { + const asked: { revoked: string[]; configsDeleted: string[] } = { + revoked: [], + configsDeleted: [], + }; + const broker: ConnectedAppBroker = { + grantIsLocal: true, + authorizations: { + status: async () => { + throw new Error("nothing here polls an authorization"); + }, + confirmReturn: async () => { + throw new Error("nothing here confirms a return leg"); + }, + }, + authProviderOf: async (toolkit) => toolkit, + grantsFor: async () => [], + listApps: async () => [], + ensureAuthConfig: async () => "standing", + deleteAuthConfig: async (toolkit) => { + asked.configsDeleted.push(toolkit); + }, + authorize: async () => ({ + redirectUrl: "https://vendor.example/consent", + authorizationId: "ar_1", + }), + isConnected: async () => true, + revoke: async (input) => { + asked.revoked.push(input.toolkit); + return true; + }, + connectionFields: async () => [], + connectWithFields: async () => ({ accountId: "ca_1" }), + revokeAccount: async () => {}, + accountName: async () => "acme", + }; + return { asked, broker }; +} + +/** A store whose configured provider is Composio: the only vendor it can reach. */ +function composioStore(broker: ConnectedAppBroker) { + return createPluginStore({ + brokerProvider: "composio", + database, + auditStore: createAuditStore(database), + credentials: {} as never, + encryptionKey: "x".repeat(44), + policy: () => ({ mode: "enforce" as const, deny: [], allow: ["true"] }), + broker, + deploymentId: "acme", + sharedUse: async () => ({ allowed: true }), + }); +} + +async function server(id: string, provenance: string, url: string) { + apps.push(id); + await database.insert(mcpServers).values({ + id, + title: id, + vendor: provenance === "arcade" ? "Arcade" : "Composio", + url, + provenance, + authScheme: "OAUTH2", + accountMode: "personal", + }); +} + +async function hold(provider: string, app: string, userId: string) { + apps.push(app); + await database.insert(brokeredConnections).values({ + provider, + app, + holder: "person", + userId, + vendorUserId: userId, + }); +} + +const rowsFor = async (names: string[]) => + ( + await database + .select({ + provider: brokeredConnections.provider, + app: brokeredConnections.app, + }) + .from(brokeredConnections) + .where(inArray(brokeredConnections.app, names)) + .orderBy(asc(brokeredConnections.app)) + ).map((row) => `${row.provider}:${row.app}`); + +const trailFor = (names: string[]) => + database + .select({ + app: auditEvents.targetId, + payload: sql>`payload`, + }) + .from(auditEvents) + .where( + and( + eq(auditEvents.eventType, "mcp.account_disconnected"), + inArray(auditEvents.targetId, names), + ), + ) + .orderBy(asc(auditEvents.targetId)); + +afterEach(async () => { + if (apps.length) { + await database + .delete(brokeredConnections) + .where(inArray(brokeredConnections.app, apps)); + await database.delete(mcpServers).where(inArray(mcpServers.id, apps)); + } + apps.length = 0; +}); + +describe("removing a server whose provenance is not the configured provider", () => { + test("asks no vendor about it and still takes that broker's own rows away", async () => { + const t = run(); + const { asked, broker } = recorder(); + await server(t.app, "arcade", `arcade://${t.app}`); + await hold("arcade", t.app, t.person); + await hold("arcade", t.app, `${t.person}-2`); + + await composioStore(broker).removeServer(t.app, "admin"); + + // The configured vendor is Composio and this app is not one of its: it is asked nothing at all. + expect(asked.revoked).toEqual([]); + expect(asked.configsDeleted).toEqual([]); + // And the rows the row's OWN broker left behind are gone, rather than standing under a + // removal that reported success. + expect(await rowsFor([t.app])).toEqual([]); + // Each is written down as ended with nothing claimed of a vendor nobody could ask. + const trail = await trailFor([t.app]); + expect(trail.length).toBe(2); + for (const event of trail) { + expect(event.payload).toMatchObject({ + reason: "mcp_server_removed", + vendorRevocationRequested: false, + }); + } + // The server row itself goes, as it always did. + expect( + await database + .select({ id: mcpServers.id }) + .from(mcpServers) + .where(eq(mcpServers.id, t.app)), + ).toEqual([]); + }); + + test("a row of the configured provider's own is still revoked at the vendor", async () => { + const t = run(); + const slug = t.app.toLowerCase(); + const { asked, broker } = recorder(); + await server(slug, "composio", `composio://${slug}`); + await hold("composio", slug, t.person); + + await composioStore(broker).removeServer(slug, "admin"); + + expect(asked.revoked).toEqual([slug]); + expect(asked.configsDeleted).toEqual([slug]); + expect(await rowsFor([slug])).toEqual([]); + const trail = await trailFor([slug]); + expect(trail.length).toBe(1); + expect(trail[0]?.payload).toMatchObject({ + reason: "mcp_server_removed", + vendorRevocationRequested: true, + }); + }); +}); diff --git a/server/tests/routes-arcade-urls.test.ts b/server/tests/routes-arcade-urls.test.ts new file mode 100644 index 000000000..4d0c3ca88 --- /dev/null +++ b/server/tests/routes-arcade-urls.test.ts @@ -0,0 +1,284 @@ +// server/tests/routes-arcade-urls.test.ts +/** + * The four places `routes.ts` reads which app a brokered row is, asked on BOTH brokers. + * + * Every one of them parsed the url with Composio's own `toolkitOf`, which answers null for + * `arcade://Gmail` by design — the two parsers are deliberately not interchangeable, which is the + * whole argument of `TOOLKIT_OF` in `access.ts`. So on an Arcade deployment the account-mode switch + * refused a brokered app as "not reached through a broker", the directory reported every enabled + * app as not enabled, the connect route fell past its brokered branch in silence, and + * `brokeredAccountFor` — step one of authorize, grants and disconnect — refused a perfectly + * connected app before any account was resolved. + * + * EACH CASE IS ASSERTED ON BOTH PROVIDERS, from one harness, and the Composio half is the evidence + * that nothing about that deployment moved: the same route, the same status, the same body, the + * same toolkit reaching the store. The Arcade half is what was red. + * + * ARCADE CASE IS NOT NORMALIZED ANYWHERE HERE. The row is `arcade://Gmail` and what every + * assertion expects back is `Gmail`, because `arcade://Gmail` and `arcade://gmail` are distinct + * apps. + */ +import { describe, expect, test } from "bun:test"; +import { Hono, type MiddlewareHandler } from "hono"; +import type { AppVariables } from "../src/auth/guards"; +import type { AccountModeSwitch } from "../src/plugins/account-mode"; +import type { BrokerProvider } from "../src/plugins/access"; +import type { BrokerApp, ComposioBroker } from "../src/plugins/broker"; +import { createPluginRoutes } from "../src/plugins/routes"; +import type { AccountRef } from "../src/plugins/shared-accounts"; +import type { SharedUseStore } from "../src/plugins/shared-use-store"; +import type { PluginStore } from "../src/plugins/store"; + +/** The row each provider holds for the same app, spelled the way that provider spells it. */ +const ROW: Record = { + composio: { url: "composio://gmail", toolkit: "gmail" }, + arcade: { url: "arcade://Gmail", toolkit: "Gmail" }, +}; + +const SERVER_ID = "brokered-gmail"; + +/** One directory entry, named as the provider under test names the app. */ +function directoryApp(slug: string): BrokerApp { + return { + slug, + name: "Gmail", + description: "Mail", + logo: null, + categories: [], + actionCount: 3, + classifiedCount: null, + permissionCount: null, + scopedActionCount: null, + connection: { kind: "consent" }, + }; +} + +/** + * The plugins surface wired to one provider, with every toolkit that reached the broker or the + * store recorded. + * + * Stubs rather than a database: what is under test is which parser read the row's url, and that is + * decided in the route before any of these are called. + */ +function deployment(provider: BrokerProvider) { + const row = ROW[provider]; + const confirmed: Array<{ toolkit: string; account: AccountRef }> = []; + const authorized: Array<{ toolkit: string }> = []; + const switched: Array<{ serverId: string; mode: string }> = []; + + const store = { + brokerProvider: provider, + serverAddress: async (serverId: string) => + serverId === SERVER_ID + ? { + id: SERVER_ID, + title: "Gmail", + url: row.url, + authScheme: "OAUTH2", + } + : undefined, + serverUrls: async () => [row.url], + accountRefFor: async (_serverId: string, actorId: string) => ({ + ref: { + holder: "person" as const, + userId: actorId, + vendorUserId: actorId, + }, + title: "Gmail", + mode: "personal" as const, + }), + brokeredConnection: async () => null, + confirmBrokeredConnection: async (input: { + toolkit: string; + account: AccountRef; + }) => { + confirmed.push({ toolkit: input.toolkit, account: input.account }); + return { connected: true }; + }, + listSkills: async () => [], + } as unknown as PluginStore; + + const broker = { + grantIsLocal: true, + // Nothing here asks what auth provider a connection is held under. + authProviderOf: async () => null, + authorizations: null, + listApps: async () => [directoryApp(row.toolkit)], + authorize: async (input: { toolkit: string }) => { + authorized.push({ toolkit: input.toolkit }); + return { + redirectUrl: "https://vendor.example/consent", + authorizationId: null, + }; + }, + } as unknown as ComposioBroker; + + const modes = { + switchMode: async (input: { serverId: string; mode: string }) => { + switched.push({ serverId: input.serverId, mode: input.mode }); + return { ended: [], approved: [] }; + }, + forgetRule: async () => {}, + } as unknown as AccountModeSwitch; + + const signedIn: MiddlewareHandler<{ Variables: AppVariables }> = async ( + context, + next, + ) => { + context.set("actor", { + id: "admin-1", + email: "admin@example.test", + role: "admin", + } as never); + await next(); + }; + + const app = new Hono().route( + "/api/plugins", + createPluginRoutes( + store, + signedIn, + async () => true, + { + publicUrl: "https://openbot.example", + appUrl: "https://app.example", + encryptionKey: `${"A".repeat(43)}=`, + personHasAccess: async () => true, + }, + { broker, provider }, + { modes, use: {} as unknown as SharedUseStore }, + ), + ); + + return { + confirmed, + authorized, + switched, + toolkit: row.toolkit, + confirm: () => + app.request( + `http://openbot.test/api/plugins/servers/${SERVER_ID}/connection/confirm`, + { + method: "POST", + headers: { "content-type": "application/json" }, + body: JSON.stringify({}), + }, + ), + accountMode: () => + app.request( + `http://openbot.test/api/plugins/servers/${SERVER_ID}/account-mode`, + { + method: "PUT", + headers: { "content-type": "application/json" }, + body: JSON.stringify({ mode: "shared" }), + }, + ), + directory: () => + app.request("http://openbot.test/api/plugins/composio/apps"), + connect: () => + app.request( + `http://openbot.test/api/plugins/servers/${SERVER_ID}/connect`, + { + method: "POST", + headers: { "content-type": "application/json" }, + body: JSON.stringify({}), + }, + ), + }; +} + +const PROVIDERS: BrokerProvider[] = ["arcade", "composio"]; + +for (const provider of PROVIDERS) { + describe(`a ${provider} deployment reads its own urls`, () => { + test("brokeredAccountFor resolves an account rather than refusing", async () => { + const it = deployment(provider); + const response = await it.confirm(); + expect(response.status).toBe(200); + expect(await response.json()).toEqual({ connected: true }); + expect(it.confirmed).toEqual([ + { + toolkit: it.toolkit, + account: { + holder: "person", + userId: "admin-1", + vendorUserId: "admin-1", + }, + }, + ]); + }); + + test("the account-mode switch accepts the row", async () => { + const it = deployment(provider); + const response = await it.accountMode(); + expect(response.status).toBe(200); + expect(it.switched).toEqual([{ serverId: SERVER_ID, mode: "shared" }]); + }); + + test("the directory reports the app as enabled", async () => { + const it = deployment(provider); + const response = await it.directory(); + expect(response.status).toBe(200); + const body = (await response.json()) as { + apps: Array<{ slug: string; enabled: boolean }>; + }; + expect(body.apps.map((app) => [app.slug, app.enabled])).toEqual([ + [it.toolkit, true], + ]); + }); + + test("the connect route takes the brokered branch", async () => { + const it = deployment(provider); + const response = await it.connect(); + expect(response.status).toBe(200); + expect(await response.json()).toEqual({ + authorizationUrl: "https://vendor.example/consent", + }); + expect(it.authorized).toEqual([{ toolkit: it.toolkit }]); + }); + }); +} + +/** + * And the Composio deployment's four answers are byte for byte what they were before the parse was + * dispatched, which is what makes this a replacement of a parser rather than a change of behaviour. + * Pinned as raw response text, so a reordered key or a reworded sentence fails here rather than + * being noticed by inspection. + */ +describe("a Composio deployment answers byte for byte what it did", () => { + const EXPECTED: Record< + "confirm" | "accountMode" | "directory" | "connect", + string + > = { + confirm: '{"connected":true}', + accountMode: '{"ended":[],"approved":[]}', + directory: + '{"apps":[{"slug":"gmail","name":"Gmail","description":"Mail","logo":null,"categories":[],"actionCount":3,"classifiedCount":null,"permissionCount":null,"scopedActionCount":null,"connection":{"kind":"consent"},"enabled":true}]}', + connect: '{"authorizationUrl":"https://vendor.example/consent"}', + }; + + for (const route of Object.keys(EXPECTED) as Array) { + test(`${route} is unchanged`, async () => { + const response = await deployment("composio")[route](); + expect(response.status).toBe(200); + expect(await response.text()).toBe(EXPECTED[route]); + }); + } + + /** + * And the Arcade deployment's answers are the same text, the app's own name apart — which is the + * one thing that differs between two deployments holding the same app at two brokers. + */ + test("and Arcade answers the same, the app's name apart", async () => { + for (const route of ["confirm", "accountMode", "connect"] as const) { + const response = await deployment("arcade")[route](); + expect(response.status).toBe(200); + expect(await response.text()).toBe(EXPECTED[route]); + } + const directory = await deployment("arcade").directory(); + expect(directory.status).toBe(200); + expect(await directory.text()).toBe( + EXPECTED.directory.replace('"slug":"gmail"', '"slug":"Gmail"'), + ); + }); +}); diff --git a/server/tests/routes-vendor-vocabulary.test.ts b/server/tests/routes-vendor-vocabulary.test.ts new file mode 100644 index 000000000..917072097 --- /dev/null +++ b/server/tests/routes-vendor-vocabulary.test.ts @@ -0,0 +1,322 @@ +// server/tests/routes-vendor-vocabulary.test.ts +/** + * THE SENTENCES `routes.ts` HANDS A PERSON NAME THE BROKER THIS DEPLOYMENT ACTUALLY RUNS. + * + * Every refusal on the brokered surface used to spell the literal "Composio" — the app that could + * not be removed, the app that could not be enabled, the six ways a key app's connect can fail, the + * consent that could not be minted, and the confirm, re-check and disconnect tails. On an Arcade + * deployment each of them named a vendor this deployment has no key for and never talks to, and + * sent the reader to check a key that does not exist. + * + * ASSERTED ON BOTH PROVIDERS FROM ONE HARNESS, the way `routes-arcade-urls.test.ts` asserts its + * four reads. The Arcade half is what was red: the sentence must name Arcade and must not contain + * the word Composio anywhere. The Composio half is the evidence that nothing about that deployment + * moved — the same sentence, word for word, as before. + */ +import { describe, expect, test } from "bun:test"; +import { Hono, type MiddlewareHandler } from "hono"; +import type { AppVariables } from "../src/auth/guards"; +import type { BrokerProvider } from "../src/plugins/access"; +import type { AccountModeSwitch } from "../src/plugins/account-mode"; +import type { + BrokerApp, + BrokerField, + ComposioBroker, +} from "../src/plugins/broker"; +import { createPluginRoutes } from "../src/plugins/routes"; +import type { SharedUseStore } from "../src/plugins/shared-use-store"; +import type { PluginStore } from "../src/plugins/store"; + +/** The row each provider holds for the same app, spelled the way that provider spells it. */ +const ROW: Record = { + composio: { url: "composio://gmail", toolkit: "gmail" }, + arcade: { url: "arcade://Gmail", toolkit: "Gmail" }, +}; + +/** The vendor name a deployment on each provider is entitled to read. */ +const VENDOR: Record = { + composio: "Composio", + arcade: "Arcade", +}; + +const SERVER_ID = "brokered-gmail"; +const TITLE = "Gmail"; + +/** A failure with no vendor sentence and no authored broker sentence, so the route's own generic is read. */ +const opaque = () => new Error("opaque"); + +function directoryApp(slug: string): BrokerApp { + return { + slug, + name: TITLE, + description: "Mail", + logo: null, + categories: [], + actionCount: 3, + classifiedCount: null, + permissionCount: null, + scopedActionCount: null, + connection: { kind: "consent" }, + }; +} + +function field(name: string, required: boolean): BrokerField { + return { name, label: name, help: "", required, secret: true }; +} + +type Wiring = { + /** What the row says its authorization config was created as. */ + authScheme?: string | null; + /** Whether this deployment knows its own public address. */ + appUrl?: string | undefined; + /** What the broker publishes for a key app's form, or a throw. */ + fields?: () => Promise; + /** Every store or broker call the route makes on the way out, by name. */ + throwing?: Partial< + Record< + | "removeServer" + | "addBrokeredApp" + | "connectBrokeredWithFields" + | "authorize" + | "confirmBrokeredConnection" + | "recheckBrokeredConnection" + | "disconnectBrokered", + true + > + >; +}; + +function deployment(provider: BrokerProvider, wiring: Wiring = {}) { + const row = ROW[provider]; + const raise = (name: keyof NonNullable) => { + if (wiring.throwing?.[name]) throw opaque(); + }; + + const store = { + // The routes take the provider from the store rather than deciding a second + // time, so a stand-in store has to name it like the real one does. + brokerProvider: provider, + serverAddress: async (serverId: string) => + serverId === SERVER_ID + ? { + id: SERVER_ID, + title: TITLE, + url: row.url, + authScheme: + wiring.authScheme === undefined ? "OAUTH2" : wiring.authScheme, + } + : undefined, + serverUrls: async () => [row.url], + accountRefFor: async (_serverId: string, actorId: string) => ({ + ref: { + holder: "person" as const, + userId: actorId, + vendorUserId: actorId, + }, + title: TITLE, + mode: "personal" as const, + }), + brokeredConnection: async () => null, + removeServer: async () => { + raise("removeServer"); + }, + addBrokeredApp: async () => { + raise("addBrokeredApp"); + return {} as never; + }, + connectBrokeredWithFields: async () => { + raise("connectBrokeredWithFields"); + return {} as never; + }, + confirmBrokeredConnection: async () => { + raise("confirmBrokeredConnection"); + return { connected: true }; + }, + recheckBrokeredConnection: async () => { + raise("recheckBrokeredConnection"); + return { verified: true }; + }, + disconnectBrokered: async () => { + raise("disconnectBrokered"); + return { vendorRevocationRequested: true }; + }, + listSkills: async () => [], + } as unknown as PluginStore; + + const broker = { + grantIsLocal: true, + authProviderOf: async () => null, + authorizations: null, + listApps: async () => [directoryApp(row.toolkit)], + connectionFields: async () => + wiring.fields ? await wiring.fields() : ([] as BrokerField[]), + authorize: async () => { + raise("authorize"); + return { + redirectUrl: "https://vendor.example/consent", + authorizationId: null, + }; + }, + } as unknown as ComposioBroker; + + const modes = { + switchMode: async () => ({ ended: [], approved: [] }), + forgetRule: async () => {}, + } as unknown as AccountModeSwitch; + + const signedIn: MiddlewareHandler<{ Variables: AppVariables }> = async ( + context, + next, + ) => { + context.set("actor", { + id: "admin-1", + email: "admin@example.test", + role: "admin", + } as never); + await next(); + }; + + const app = new Hono().route( + "/api/plugins", + createPluginRoutes( + store, + signedIn, + async () => true, + { + publicUrl: "https://openbot.example", + appUrl: "appUrl" in wiring ? wiring.appUrl : "https://app.example", + encryptionKey: `${"A".repeat(43)}=`, + personHasAccess: async () => true, + }, + { broker, provider }, + { modes, use: {} as unknown as SharedUseStore }, + ), + ); + + const post = (path: string, body: unknown = {}) => + app.request(`http://openbot.test${path}`, { + method: "POST", + headers: { "content-type": "application/json" }, + body: JSON.stringify(body), + }); + + return { + toolkit: row.toolkit, + remove: () => + app.request(`http://openbot.test/api/plugins/servers/${SERVER_ID}`, { + method: "DELETE", + }), + enable: () => post("/api/plugins/composio/apps", { slug: row.toolkit }), + connect: (body?: unknown) => + post(`/api/plugins/servers/${SERVER_ID}/connect`, body ?? {}), + confirm: () => post(`/api/plugins/servers/${SERVER_ID}/connection/confirm`), + recheck: () => post(`/api/plugins/servers/${SERVER_ID}/connection/recheck`), + disconnect: () => + app.request( + `http://openbot.test/api/plugins/servers/${SERVER_ID}/connection`, + { method: "DELETE" }, + ), + }; +} + +/** Every sentence this file pins, as the request that produces it. */ +const CASES: Record Promise> = { + "removing an app that would not finish": (provider) => + deployment(provider, { throwing: { removeServer: true } }).remove(), + "enabling an app the broker would not enable": (provider) => + deployment(provider, { throwing: { addBrokeredApp: true } }).enable(), + "a key app whose form the broker would not publish": (provider) => + deployment(provider, { + authScheme: "API_KEY", + fields: () => Promise.reject(opaque()), + }).connect(), + "a key app that publishes no boxes at all": (provider) => + deployment(provider, { + authScheme: "API_KEY", + fields: async () => [], + }).connect({ values: {} }), + "a key app that publishes only optional boxes": (provider) => + deployment(provider, { + authScheme: "API_KEY", + fields: async () => [field("workspace", false)], + }).connect({ values: {} }), + "a submission that is not the published form": (provider) => + deployment(provider, { + authScheme: "API_KEY", + fields: async () => [field("api_key", true)], + }).connect({ values: { nonsense: "x" } }), + "a submission missing a required box": (provider) => + deployment(provider, { + authScheme: "API_KEY", + fields: async () => [field("api_key", true)], + }).connect({ values: { api_key: " " } }), + "a key the store could not connect with": (provider) => + deployment(provider, { + authScheme: "API_KEY", + fields: async () => [field("api_key", true)], + throwing: { connectBrokeredWithFields: true }, + }).connect({ values: { api_key: "secret" } }), + "a row whose scheme this deployment cannot read": (provider) => + deployment(provider, { authScheme: "SOMETHING_ELSE" }).connect(), + "a consent on a deployment with no app URL": (provider) => + deployment(provider, { appUrl: undefined }).connect(), + "a consent the broker would not begin": (provider) => + deployment(provider, { throwing: { authorize: true } }).connect(), + "a confirm the broker would not answer": (provider) => + deployment(provider, { + throwing: { confirmBrokeredConnection: true }, + }).confirm(), + "a re-check the broker would not answer": (provider) => + deployment(provider, { + throwing: { recheckBrokeredConnection: true }, + }).recheck(), + "a disconnect the broker would not finish": (provider) => + deployment(provider, { + throwing: { disconnectBrokered: true }, + }).disconnect(), +}; + +async function sentenceOf( + provider: BrokerProvider, + name: keyof typeof CASES, +): Promise { + const response = await CASES[name](provider); + const body = (await response.json()) as { error?: unknown }; + expect(typeof body.error).toBe("string"); + return body.error as string; +} + +describe("an Arcade deployment's refusals name Arcade and never Composio", () => { + for (const name of Object.keys(CASES)) { + test(name, async () => { + const sentence = await sentenceOf("arcade", name); + expect(sentence).not.toContain("Composio"); + expect(sentence).toContain(VENDOR.arcade); + }); + } +}); + +describe("and a Composio deployment reads exactly what it read before", () => { + for (const name of Object.keys(CASES)) { + test(name, async () => { + const sentence = await sentenceOf("composio", name); + expect(sentence).not.toContain("Arcade"); + expect(sentence).toContain(VENDOR.composio); + }); + } +}); + +/** + * And the two sentences differ in NOTHING but the vendor's name — which is what says the fix was a + * substitution rather than a rewrite. Written as the Arcade sentence with "Arcade" put back to + * "Composio", compared against the Composio deployment's own answer. + */ +describe("the two deployments' sentences differ only in the vendor's name", () => { + for (const name of Object.keys(CASES)) { + test(name, async () => { + const arcade = await sentenceOf("arcade", name); + const composio = await sentenceOf("composio", name); + expect(arcade.replaceAll("Arcade", "Composio")).toBe(composio); + }); + } +}); diff --git a/server/tests/server-side-tools.integration.test.ts b/server/tests/server-side-tools.integration.test.ts index 9d55f437e..fd6ec6819 100644 --- a/server/tests/server-side-tools.integration.test.ts +++ b/server/tests/server-side-tools.integration.test.ts @@ -13,7 +13,7 @@ import { } from "../src/db/schema"; import { createPluginStore } from "../src/plugins/store"; import { grantedTools, REFUSAL_MARKER } from "../src/plugins/tools"; -import type { ActionPolicy } from "../src/policy/engine"; +import type { ActionPolicy } from "../src/computer/policy"; import { TEST_POOL, testDatabaseUrl } from "./support/database"; /** @@ -41,6 +41,7 @@ const ref = `${serverId}/${toolName}`; let policy: ActionPolicy = { mode: "enforce", deny: [], allow: ["true"] }; const store = createPluginStore({ + brokerProvider: "composio", database, auditStore: createAuditStore(database), credentials: { readSecret: async () => null }, @@ -93,6 +94,7 @@ beforeAll(async () => { .values({ serverId, name: toolName, + vendorName: toolName, description: "Search the notes.", inputSchema: { type: "object", diff --git a/server/tests/shared-accounts.test.ts b/server/tests/shared-accounts.test.ts index c8355ac5f..417aeb95d 100644 --- a/server/tests/shared-accounts.test.ts +++ b/server/tests/shared-accounts.test.ts @@ -54,6 +54,32 @@ describe("accountFor", () => { }); }); +describe("accountFor for an Arcade row", () => { + const arcade = (accountMode: string | null) => ({ + ...brokered(accountMode), + provenance: "arcade", + }); + + test("a personal Arcade row resolves to the credential actor's own account", () => { + expect(accountFor(arcade("personal"), "user_a")).toEqual({ + kind: "person", + userId: "user_a", + }); + }); + + test("a shared Arcade row resolves to the deployment's account", () => { + expect(accountFor(arcade("shared"), "user_a")).toEqual({ + kind: "deployment", + }); + }); + + test("a non-brokered row still has no account", () => { + expect( + accountFor({ ...brokered("personal"), provenance: "manual" }, "user_a"), + ).toEqual({ kind: "none" }); + }); +}); + describe("asAccountMode", () => { test("reads the two modes and nothing else", () => { expect(asAccountMode("personal")).toBe("personal"); diff --git a/server/tests/shared-brokered-routes.test.ts b/server/tests/shared-brokered-routes.test.ts index ad74e3667..48fe44857 100644 --- a/server/tests/shared-brokered-routes.test.ts +++ b/server/tests/shared-brokered-routes.test.ts @@ -28,6 +28,9 @@ const authorizedFor: string[] = []; const returnUrlsSeen: string[] = []; let connectWithFieldsCalls = 0; const revokedFor: string[] = []; +// Whether retiring the ask-before-write rule fails. One test makes it, to reach the removal +// route's clean-up branch — the removal itself has already happened at the vendor by then. +let revokeRuleThrows = false; const rules: { id: string; botId: string; @@ -39,13 +42,24 @@ const rules: { }[] = []; const broker: ConnectedAppBroker = { + // This stub stands in for Composio, whose grant is held locally; see `ConnectedAppBroker.grantIsLocal`. + grantIsLocal: true, + // Nothing here asks what auth provider a connection is held under. + authProviderOf: async () => null, + // Nothing here reads either member; both are declared because the seam requires a broker to + // SAY what it runs — see `ConnectedAppBroker.authorizations`. + authorizations: null, + grantsFor: async () => [], listApps: async () => [], ensureAuthConfig: async () => "standing", deleteAuthConfig: async () => {}, authorize: async ({ account, returnUrl }) => { authorizedFor.push(account.vendorUserId); returnUrlsSeen.push(returnUrl); - return { redirectUrl: "https://vendor.example/consent" }; + return { + redirectUrl: "https://vendor.example/consent", + authorizationId: null, + }; }, isConnected: async () => true, revoke: async ({ account }) => { @@ -63,6 +77,7 @@ const broker: ConnectedAppBroker = { function appAs(role: "admin" | "user", id = `${role}-${suite}`) { const store = createPluginStore({ + brokerProvider: "composio", database, auditStore: createAuditStore(database), credentials: {} as never, @@ -71,7 +86,7 @@ function appAs(role: "admin" | "user", id = `${role}-${suite}`) { broker, deploymentId: `acme-${suite}`, }); - const sharedUseStore = createSharedUseStore(database); + const sharedUseStore = createSharedUseStore(database, "composio"); const modes = createAccountModeSwitch({ store, sharedUse: sharedUseStore, @@ -85,6 +100,8 @@ function appAs(role: "admin" | "user", id = `${role}-${suite}`) { }, teamRules: async () => rules as never, revokeTeamRule: async (_by, ruleId) => { + if (revokeRuleThrows) + throw new Error("Failed query: update team_rules"); const rule = rules.find((row) => row.id === ruleId); if (rule) rule.revokedAt = new Date(); }, @@ -109,7 +126,7 @@ function appAs(role: "admin" | "user", id = `${role}-${suite}`) { encryptionKey: `${"A".repeat(43)}=`, personHasAccess: async () => true, }, - { broker }, + { broker, provider: "composio" }, { modes, use: sharedUseStore }, ), ); @@ -121,6 +138,7 @@ beforeEach(async () => { connectWithFieldsCalls = 0; revokedFor.length = 0; rules.length = 0; + revokeRuleThrows = false; await database.insert(mcpServers).values({ id: app, title: "Team GitHub", @@ -352,6 +370,7 @@ describe("granting a shared app's action", () => { await database.insert(mcpTools).values({ serverId: app, name: "GITHUB_CREATE_ISSUE", + vendorName: "GITHUB_CREATE_ISSUE", description: "x", effect: "write", version: "1", @@ -375,7 +394,7 @@ describe("granting a shared app's action", () => { }); expect(response.status).toBe(200); expect( - await createSharedUseStore(database).approvalFor(botId, app), + await createSharedUseStore(database, "composio").approvalFor(botId, app), ).toEqual({ audience: "team", outsideInput: false, members: [] }); }); @@ -391,7 +410,7 @@ describe("granting a shared app's action", () => { }), }); expect( - await createSharedUseStore(database).approvalFor(botId, app), + await createSharedUseStore(database, "composio").approvalFor(botId, app), ).toEqual({ audience: "owner", outsideInput: false, members: [] }); }); @@ -508,4 +527,49 @@ describe("removing a Shared app", () => { expect(response.status).toBe(200); expect(rules.filter((rule) => rule.revokedAt === null)).toEqual([]); }); + + /* + * THE CLEAN-UP RUNS AFTER SOMETHING IRREVERSIBLE. `removeServer` has already revoked every + * account AT THE VENDOR and deleted the rows, and a second Remove finds no app — so a fault + * retiring the leftover rule must not come back as the framework's bodyless 500 telling an + * administrator the removal failed. + */ + test("a rule that cannot be retired does not turn a completed removal into a bodyless 500", async () => { + await database + .update(mcpServers) + .set({ accountMode: "personal", sharedVendorUserId: null }) + .where(eq(mcpServers.id, app)); + await appAs("admin").request(`/api/plugins/servers/${app}/account-mode`, { + method: "PUT", + headers: { "content-type": "application/json" }, + body: JSON.stringify({ mode: "shared", confirm: true }), + }); + expect(rules.filter((rule) => rule.revokedAt === null)).toHaveLength(1); + + revokeRuleThrows = true; + const said: string[] = []; + const realError = console.error; + console.error = (...args: unknown[]) => { + said.push(args.map(String).join(" ")); + }; + let response: Response; + try { + response = await appAs("admin").request(`/api/plugins/servers/${app}`, { + method: "DELETE", + }); + } finally { + console.error = realError; + } + expect(response.status).toBe(200); + expect(await response.json()).toEqual({ ok: true }); + // The removal really did happen, which is why it is answered as one. + expect( + await database.select().from(mcpServers).where(eq(mcpServers.id, app)), + ).toEqual([]); + const line = said.find((line) => + line.includes("shared-rule-not-forgotten"), + ); + expect(line).toBeDefined(); + expect(line).toContain(app); + }); }); diff --git a/server/tests/shared-brokered-store.integration.test.ts b/server/tests/shared-brokered-store.integration.test.ts index 59d2e912e..eaa7614ac 100644 --- a/server/tests/shared-brokered-store.integration.test.ts +++ b/server/tests/shared-brokered-store.integration.test.ts @@ -32,10 +32,21 @@ const duplicate = `zz-dup-${suite}`; const revoked: string[] = []; const broker: ConnectedAppBroker = { + // This stub stands in for Composio, whose grant is held locally; see `ConnectedAppBroker.grantIsLocal`. + grantIsLocal: true, + // Nothing here asks what auth provider a connection is held under. + authProviderOf: async () => null, + // Nothing here reads either member; both are declared because the seam requires a broker to + // SAY what it runs — see `ConnectedAppBroker.authorizations`. + authorizations: null, + grantsFor: async () => [], listApps: async () => [], ensureAuthConfig: async () => "standing", deleteAuthConfig: async () => {}, - authorize: async () => ({ redirectUrl: "https://vendor.example/consent" }), + authorize: async () => ({ + redirectUrl: "https://vendor.example/consent", + authorizationId: null, + }), isConnected: async () => true, revoke: async ({ account }) => { revoked.push(account.vendorUserId); @@ -52,6 +63,7 @@ const credentialsStub = {} as never; function freshStore() { return createPluginStore({ + brokerProvider: "composio", database, auditStore: createAuditStore(database), credentials: credentialsStub, @@ -80,6 +92,7 @@ async function seedShared( await database.insert(mcpTools).values({ serverId: app, name: "GITHUB_LIST_ISSUES", + vendorName: "GITHUB_LIST_ISSUES", description: "List issues.", effect: "read", version: "1", @@ -223,6 +236,95 @@ describe("a shared app", () => { expect(rows).toEqual([{ connectedBy: "admin-b" }]); }); + /* + * THE SUPERSEDE IS CONDITIONAL, AND THAT IS ITS OWN GUARD. A confirm or re-check that names no + * administrator must not blank out the one an earlier connect recorded. + */ + test("a write that names no administrator keeps the one already recorded", async () => { + const store = freshStore(); + await store.recordBrokeredConnection({ + toolkit: app, + account: { holder: "deployment", vendorUserId: VENDOR_ID }, + connectedBy: "admin-a", + verified: true, + probeAction: null, + }); + await store.recordBrokeredConnection({ + toolkit: app, + account: { holder: "deployment", vendorUserId: VENDOR_ID }, + verified: false, + probeAction: null, + }); + const rows = await database + .select({ connectedBy: brokeredConnections.connectedBy }) + .from(brokeredConnections) + .where(eq(brokeredConnections.app, app)); + expect(rows).toEqual([{ connectedBy: "admin-a" }]); + }); + + /* + * THE ROW NAMES THE IDENTITY THE LATEST CONNECTION WAS MADE UNDER. Calls go out under the row's + * `vendor_user_id`, so a reconnect under a new identity that rewrote the verdict and kept the old + * id sent every later call to the account the verdict was not about. + */ + test.each(["deployment", "person"] as const)( + "a %s reconnect under a NEW vendor identity moves the row to it", + async (holder) => { + const store = freshStore(); + const as = (vendorUserId: string) => + holder === "deployment" + ? { holder, vendorUserId } + : { holder, userId: asker, vendorUserId }; + await store.recordBrokeredConnection({ + toolkit: app, + account: as(`old-${suite}`), + connectedBy: "admin-a", + verified: true, + probeAction: null, + }); + await store.recordBrokeredConnection({ + toolkit: app, + account: as(`new-${suite}`), + connectedBy: "admin-b", + verified: true, + probeAction: null, + }); + const rows = await database + .select({ vendorUserId: brokeredConnections.vendorUserId }) + .from(brokeredConnections) + .where(eq(brokeredConnections.app, app)); + expect(rows).toEqual([{ vendorUserId: `new-${suite}` }]); + }, + ); + + /* + * AND A RE-CHECK NEVER RE-POINTS IT. The `only` branch records a check of a connection that + * exists; it is not evidence of a grant under any identity, so it may not move the row's. + */ + test("a re-check write under another identity leaves the row's identity alone", async () => { + const store = freshStore(); + await store.recordBrokeredConnection({ + toolkit: app, + account: { holder: "deployment", vendorUserId: VENDOR_ID }, + connectedBy: "admin-a", + verified: true, + probeAction: null, + }); + const { wrote } = await store.recordBrokeredConnection({ + toolkit: app, + account: { holder: "deployment", vendorUserId: `other-${suite}` }, + verified: false, + probeAction: "GITHUB_LIST_ISSUES", + only: "a row that is still there", + }); + expect(wrote).toBe(true); + const rows = await database + .select({ vendorUserId: brokeredConnections.vendorUserId }) + .from(brokeredConnections) + .where(eq(brokeredConnections.app, app)); + expect(rows).toEqual([{ vendorUserId: VENDOR_ID }]); + }); + test("removing the app revokes the deployment account too", async () => { const store = freshStore(); await seedShared(store, true); @@ -234,6 +336,7 @@ describe("a shared app", () => { const events: { eventType: string; payload: Record }[] = []; const store = createPluginStore({ + brokerProvider: "composio", database, auditStore: { insert: async (event) => void events.push(event as never) }, credentials: credentialsStub, @@ -266,6 +369,7 @@ describe("a shared app", () => { test("with no audience gate configured, a shared call is refused rather than allowed", async () => { const store = createPluginStore({ + brokerProvider: "composio", database, auditStore: createAuditStore(database), credentials: credentialsStub, @@ -357,6 +461,7 @@ describe("a duplicate row at an app's url", () => { await database.insert(mcpTools).values({ serverId: duplicate, name: "GITHUB_LIST_ISSUES", + vendorName: "GITHUB_LIST_ISSUES", description: "List issues.", effect: "read", version: "1", @@ -374,6 +479,7 @@ describe("a duplicate row at an app's url", () => { const events: { eventType: string; payload: Record }[] = []; const store = createPluginStore({ + brokerProvider: "composio", database, auditStore: { insert: async (event) => void events.push(event as never) }, credentials: credentialsStub, @@ -419,6 +525,7 @@ describe("a duplicate row at an app's url", () => { const events: { eventType: string; payload: Record }[] = []; const store = createPluginStore({ + brokerProvider: "composio", database, auditStore: { insert: async (event) => void events.push(event as never) }, credentials: credentialsStub, @@ -473,6 +580,7 @@ describe("a duplicate row at an app's url", () => { test("asks the approval gate under the app's id for a write granted through it", async () => { const gateSaw: { toolRef: string; scope: string }[] = []; const store = createPluginStore({ + brokerProvider: "composio", database, auditStore: createAuditStore(database), credentials: credentialsStub, @@ -494,6 +602,7 @@ describe("a duplicate row at an app's url", () => { await database.insert(mcpTools).values({ serverId: duplicate, name: "GITHUB_CREATE_ISSUE", + vendorName: "GITHUB_CREATE_ISSUE", description: "Create an issue.", effect: "write", version: "1", diff --git a/server/tests/shared-gated-mode.integration.test.ts b/server/tests/shared-gated-mode.integration.test.ts index 9bc2ac084..1d0a6e46e 100644 --- a/server/tests/shared-gated-mode.integration.test.ts +++ b/server/tests/shared-gated-mode.integration.test.ts @@ -24,10 +24,21 @@ const asker = `asker-${suite}`; const VENDOR_ID = `openbot-deployment:acme-${suite}:R`; const broker: ConnectedAppBroker = { + // This stub stands in for Composio, whose grant is held locally; see `ConnectedAppBroker.grantIsLocal`. + grantIsLocal: true, + // Nothing here asks what auth provider a connection is held under. + authProviderOf: async () => null, + // Nothing here reads either member; both are declared because the seam requires a broker to + // SAY what it runs — see `ConnectedAppBroker.authorizations`. + authorizations: null, + grantsFor: async () => [], listApps: async () => [], ensureAuthConfig: async () => "standing", deleteAuthConfig: async () => {}, - authorize: async () => ({ redirectUrl: "https://vendor.example/consent" }), + authorize: async () => ({ + redirectUrl: "https://vendor.example/consent", + authorizationId: null, + }), isConnected: async () => true, revoke: async () => true, connectionFields: async () => [], @@ -53,6 +64,7 @@ async function seed() { await database.insert(mcpTools).values({ serverId: app, name: "GITHUB_LIST_ISSUES", + vendorName: "GITHUB_LIST_ISSUES", description: "List issues.", effect: "read", version: "1", @@ -97,6 +109,7 @@ describe("connectionTokenFor's gatedMode guard", () => { }, }); const store = createPluginStore({ + brokerProvider: "composio", database, auditStore: createAuditStore(database), credentials: credentialsStub, diff --git a/server/tests/shared-use-arcade-urls.test.ts b/server/tests/shared-use-arcade-urls.test.ts new file mode 100644 index 000000000..cc5946a57 --- /dev/null +++ b/server/tests/shared-use-arcade-urls.test.ts @@ -0,0 +1,119 @@ +// server/tests/shared-use-arcade-urls.test.ts +import { afterAll, beforeEach, describe, expect, test } from "bun:test"; +import { randomUUID } from "node:crypto"; +import { eq, inArray } from "drizzle-orm"; +import { createDatabase } from "../src/db/client"; +import { + agentProfiles, + agents, + mcpServers, + pluginGrants, + users, +} from "../src/db/schema"; +import type { BrokerProvider } from "../src/plugins/access"; +import { createSharedUseStore } from "../src/plugins/shared-use-store"; +import { TEST_POOL, testDatabaseUrl } from "./support/database"; + +const database = createDatabase(testDatabaseUrl(), TEST_POOL); +const suite = randomUUID().slice(0, 8); +const id = (name: string) => `${name}-${suite}`; + +/** Two rows at one app url, the lower id first, and a Bot granted through the HIGHER one only. */ +const lowId = id("a-row"); +const highId = id("b-row"); +const bot = id("bot"); +const owner = id("owner"); + +const spec: Record = { + composio: { toolkit: `gmail${suite}`, scheme: "composio://" }, + arcade: { toolkit: `Gmail${suite}`, scheme: "arcade://" }, +}; + +async function cleanup() { + await database.delete(agents).where(eq(agents.id, bot)); + await database + .delete(mcpServers) + .where(inArray(mcpServers.id, [lowId, highId])); + await database.delete(users).where(eq(users.id, owner)); +} + +async function seed(provider: BrokerProvider) { + const url = `${spec[provider].scheme}${spec[provider].toolkit}`; + await database.insert(users).values({ + id: owner, + email: `${owner}@example.test`, + name: "owner", + emailVerified: true, + groups: [], + }); + for (const rowId of [lowId, highId]) + await database.insert(mcpServers).values({ + id: rowId, + title: `Team ${rowId}`, + vendor: provider, + url, + provenance: provider, + authScheme: "OAUTH2", + accountMode: "shared", + sharedVendorUserId: "openbot-deployment:x:R", + }); + await database + .insert(agents) + .values({ id: bot, name: "Triage", type: "built_in", configuration: {} }); + await database.insert(agentProfiles).values({ + agentId: bot, + ownerUserId: owner, + visibility: "private", + title: "Triage", + roleDescription: "Triage", + avatarSeed: "x", + }); + await database.insert(pluginGrants).values({ + kind: "mcp", + ref: `${highId}/ACTION`, + agentId: bot, + grantedBy: "admin@example.test", + }); +} + +beforeEach(cleanup); +afterAll(cleanup); +/* The pool this file opened, given back. `bun test` runs every file in one process and nothing + * reaps an idle connection, so a pool held to the end of the run is two connections the rest of + * the suite cannot have. */ +afterAll(async () => { + await database.$client.close(); +}); + +for (const provider of ["arcade", "composio"] as const) { + describe(`shared use urls under ${provider}`, () => { + test("two rows at one url are ONE app and the lower id answers", async () => { + await seed(provider); + const store = createSharedUseStore(database, provider); + expect(await store.appIdOf(highId)).toBe(lowId); + expect(await store.appIdOf(lowId)).toBe(lowId); + }); + + test("sharedAppsHeldBy lists the app, under the answering row", async () => { + await seed(provider); + const store = createSharedUseStore(database, provider); + const held = await store.sharedAppsHeldBy(bot); + expect(held.map((app) => app.serverId)).toEqual([lowId]); + }); + + test("botsHolding finds a Bot granted through the sibling row", async () => { + await seed(provider); + const store = createSharedUseStore(database, provider); + expect(await store.botsHolding(lowId)).toEqual([bot]); + expect(await store.botsHolding(highId)).toEqual([bot]); + }); + + test("an approval filed through either row is one fact", async () => { + await seed(provider); + const store = createSharedUseStore(database, provider); + expect(await store.approvalFor(bot, highId)).toEqual( + await store.approvalFor(bot, lowId), + ); + }); + }); +} diff --git a/server/tests/shared-use-store.integration.test.ts b/server/tests/shared-use-store.integration.test.ts index 534d04eb3..8c226408b 100644 --- a/server/tests/shared-use-store.integration.test.ts +++ b/server/tests/shared-use-store.integration.test.ts @@ -27,7 +27,7 @@ const suite = randomUUID().slice(0, 8); const id = (name: string) => `${name}-${suite}`; const app = id("gh"); const bot = id("bot"); -const store = createSharedUseStore(database); +const store = createSharedUseStore(database, "composio"); const gate = createSharedUseGate(store, createAuditStore(database)); async function seedUser(name: string, groups: string[] = []) { diff --git a/server/tests/shared-wiring.integration.test.ts b/server/tests/shared-wiring.integration.test.ts index 52da8351c..614ba2fd7 100644 --- a/server/tests/shared-wiring.integration.test.ts +++ b/server/tests/shared-wiring.integration.test.ts @@ -25,10 +25,21 @@ const suite = randomUUID().slice(0, 8); const app = `wired-${suite}`; const broker: ConnectedAppBroker = { + // This stub stands in for Composio, whose grant is held locally; see `ConnectedAppBroker.grantIsLocal`. + grantIsLocal: true, + // Nothing here asks what auth provider a connection is held under. + authProviderOf: async () => null, + // Nothing here reads either member; both are declared because the seam requires a broker to + // SAY what it runs — see `ConnectedAppBroker.authorizations`. + authorizations: null, + grantsFor: async () => [], listApps: async () => [], ensureAuthConfig: async () => "standing", deleteAuthConfig: async () => {}, - authorize: async () => ({ redirectUrl: "https://vendor.example/consent" }), + authorize: async () => ({ + redirectUrl: "https://vendor.example/consent", + authorizationId: null, + }), isConnected: async () => true, revoke: async () => true, connectionFields: async () => [], @@ -40,6 +51,7 @@ const broker: ConnectedAppBroker = { function build(options: { shared: boolean }) { const auditStore = createAuditStore(database); const pluginStore = createPluginStore({ + brokerProvider: "composio", database, auditStore, credentials: {} as never, @@ -48,7 +60,7 @@ function build(options: { shared: boolean }) { broker, deploymentId: `acme-${suite}`, }); - const use = createSharedUseStore(database); + const use = createSharedUseStore(database, "composio"); const modes = createAccountModeSwitch({ store: pluginStore, sharedUse: use, diff --git a/server/tests/skill-ownership.integration.test.ts b/server/tests/skill-ownership.integration.test.ts index 273105315..33049383d 100644 --- a/server/tests/skill-ownership.integration.test.ts +++ b/server/tests/skill-ownership.integration.test.ts @@ -23,6 +23,7 @@ const database = createDatabase(testDatabaseUrl(), TEST_POOL); const policy: ActionPolicy = { mode: "enforce", deny: [], allow: ["true"] }; const store = createPluginStore({ + brokerProvider: "composio", database, auditStore: createAuditStore(database), credentials: { readSecret: async () => null }, @@ -94,6 +95,7 @@ afterAll(async () => { bobSkill, deploymentSkill, `written-${suite}`, + `catalogue-${suite}`, ]), ); await database @@ -162,6 +164,43 @@ describe("editing keeps ownership", () => { expect(await store.skillOwner(aliceSkill)).toBe(alice); }); + + /* + * A SHIPPED SKILL SOMEBODY EDITED IS NO LONGER THE CATALOGUE'S. `origin = 'catalogue'` is what the + * package seed overwrites at every boot, so a re-save that left it standing handed the edit to the + * next boot to throw away. Seeded the way `tenant-package.ts` seeds it, then saved the way the + * route saves it — which names no origin. + */ + test("saving over a catalogue skill makes it the deployment's own", async () => { + const slug = `catalogue-${suite}`; + await database.insert(skills).values({ + id: slug, + slug, + ownerUserId: null, + title: "Shipped", + summary: "", + instructions: "As shipped.", + origin: "catalogue", + installedBy: null, + }); + + await store.installSkill({ + slug, + title: "Edited here", + summary: "", + instructions: "As an administrator rewrote it.", + ownerUserId: null, + by: "admin@example.test", + }); + + const [row] = await database + .select({ origin: skills.origin, installedBy: skills.installedBy }) + .from(skills) + .where(inArray(skills.slug, [slug])); + expect(row?.origin).toBe("yours"); + // Who first installed it is a first-write fact, and a re-save does not rewrite it. + expect(row?.installedBy).toBeNull(); + }); }); /** diff --git a/server/tests/skill-tools.integration.test.ts b/server/tests/skill-tools.integration.test.ts index f50e74685..449e35fe2 100644 --- a/server/tests/skill-tools.integration.test.ts +++ b/server/tests/skill-tools.integration.test.ts @@ -29,6 +29,7 @@ const database = createDatabase(testDatabaseUrl(), TEST_POOL); const policy: ActionPolicy = { mode: "enforce", deny: [], allow: ["true"] }; const store = createPluginStore({ + brokerProvider: "composio", database, auditStore: createAuditStore(database), credentials: { readSecret: async () => null }, @@ -70,10 +71,16 @@ beforeAll(async () => { await database .insert(mcpTools) .values([ - { serverId: server, name: "search", description: "Find things." }, + { + serverId: server, + name: "search", + vendorName: "search", + description: "Find things.", + }, { serverId: server, name: "delete_everything", + vendorName: "delete_everything", description: "Do not.", }, ]) diff --git a/server/tests/skill-uninstall-grants.integration.test.ts b/server/tests/skill-uninstall-grants.integration.test.ts index 562f4fd23..53fc0c5bb 100644 --- a/server/tests/skill-uninstall-grants.integration.test.ts +++ b/server/tests/skill-uninstall-grants.integration.test.ts @@ -20,6 +20,7 @@ const database = createDatabase(testDatabaseUrl(), TEST_POOL); const policy: ActionPolicy = { mode: "enforce", deny: [], allow: ["true"] }; const store = createPluginStore({ + brokerProvider: "composio", database, auditStore: createAuditStore(database), credentials: { readSecret: async () => null }, diff --git a/server/tests/sole-definition.test.ts b/server/tests/sole-definition.test.ts new file mode 100644 index 000000000..14f73724e --- /dev/null +++ b/server/tests/sole-definition.test.ts @@ -0,0 +1,553 @@ +// server/tests/sole-definition.test.ts +/** + * Guard: a decision that has been named once has EXACTLY ONE DEFINITION in this repo. + * + * WHY THIS EXISTS. The recurring defect across both review rounds is not a wrong line; it is a + * right line that never reached its siblings. A fix lands at the site the reviewer pointed at, the + * same decision stays spelled out two files away, and the next round finds it again. A round-1 DRY + * sweep already REPORTED exactly this — `scopesOf` written four times, the brokered-provenance test + * written in three places — and a report is not a check: nothing failed, so nothing changed, and + * the duplicates are all still here to be read below. + * + * So the report is made BINDING. Each entry in {@link TRACKED} names a decision and every spelling + * it currently answers to; the scan collects every definition of those spellings across the repo's + * sources and compares the list against what is recorded. A symbol with no entry in + * {@link KNOWN_DUPLICATES} must have exactly one definition. A symbol with an entry must have + * exactly the definitions recorded there — not fewer and not more. Both directions matter: + * + * - MORE fails the day somebody re-spells a tracked decision in a fifth file, which is the defect + * this exists to stop. + * - FEWER fails the day the fix cycle collapses a duplicate, which is not a regression but does + * mean the list is now stale. The failure says so and names the site to delete. That is how the + * list burns down to empty instead of quietly outliving the debt it records. + * + * LANDING GREEN IS DELIBERATE. Every duplicate standing today is recorded in {@link KNOWN_DUPLICATES} + * with the finding that owns it, so this guard is green on arrival and collapsing the duplicates + * stays with the fix cycle where a reviewer can see each merge argued for. A guard that lands red + * gets skipped; a guard that lands green and goes red on the next re-spelling gets read. + * + * WHAT THE PATTERN SEES, AND WHAT IT DOES NOT. A definition is a `function`, `const`, `let`, `var` + * or `class` binding of the name, through the shared scanner so comments are blanked (a `{@link + * scopesOf}` in a docblock is prose, not a home) and a prettier-wrapped definition is still one + * line. It does NOT see a name bound as an object property (`{ scopesOf: (x) => … }`), a method, or + * a re-export alias: those spellings do not occur for the tracked names today, and widening the + * pattern speculatively would buy false positives on every unrelated `scopesOf:` key. The names + * list is the escape hatch instead — a decision re-spelled under a NEW name, like `isBrokered` for + * `brokeredProvenance`, is added as an alias of the decision it duplicates, which is the only + * reason an alias list exists at all. + * + * TEST FILES ARE NOT SCANNED. A `const lookup = async (hash) => …` inside a test is a fixture with + * a short life and a local meaning, not a second home for a production decision. + */ +import { expect, test } from "bun:test"; +import { existsSync, readFileSync } from "node:fs"; +import { join } from "node:path"; +import { + logicalLines, + sourceFiles, + stripComments, +} from "./support/source-scan"; + +const REPO = join(import.meta.dir, "../.."); + +/** The source trees a production decision can live in. Tests are excluded below, by file name. */ +const ROOTS = [ + "app/src", + "server/src", + "shared", + "worker", + "scripts", + "desktop/src", + "mobile/src", +]; + +/** + * A decision, every name it is currently spelled under, and — for one that is NOT in + * {@link KNOWN_DUPLICATES} — the single file that is its home. + * + * The home is written down rather than inferred so the failure reads as a diff of two file lists: + * "expected [lookup.ts], received [lookup.ts, access.ts]" names the offending file, where a bare + * length assertion would only say "expected 1, received 2" and leave the reader to go find it. + */ +type Tracked = { decision: string; names: string[]; home?: string }; + +const TRACKED: Tracked[] = [ + /* + * Is this row's provenance a broker's? Spelled as a named predicate twice and open-coded as the + * same two-arm literal comparison a third time, under a different name, on the page that lists + * the accounts those rows produce. + */ + { + decision: "brokered-provenance", + names: ["brokeredProvenance", "isBrokered"], + }, + /* + * The scopes a grant/tool/config carries, read out of a shape whose field is not guaranteed. + * Four definitions, three of them in the plugins directory. + */ + { decision: "scopes-of", names: ["scopesOf"] }, + /* + * The prototype-safe keyed read extracted by CL-6. Tracked from the day it lands, so the table + * lookup never acquires a second home the way the two above did. + */ + { + decision: "keyed-lookup", + names: ["keyedLookup"], + home: "app/src/lib/lookup.ts", + }, + /* + * Decisions this cycle made single-source, tracked by NAME from here on (lever L5). Each had + * exactly one definition when this landed. A name entry stops the decision being re-DEFINED under + * the same name; a re-spelling of its BODY under another name is what {@link SPELLED} below is for. + */ + /* The three sibling-cascade rules, extracted in round 2 (A5) and routed to by all callers (A5a). */ + { + decision: "sibling-cascade-rules", + names: ["clearEndedSiblings"], + home: "server/src/plugins/plugin-store/context.ts", + }, + /* + * Rule 1's one spelling, the sibling judgement without the delete, and the asked app's trail + * claim — the three K5 made single-source so the trail and the deletion judge a key app once. + */ + { + decision: "consent-revoke-reaches", + names: ["consentRevokeReaches"], + home: "server/src/plugins/plugin-store/context.ts", + }, + { + decision: "siblings-ended-by", + names: ["siblingsEndedBy"], + home: "server/src/plugins/plugin-store/context.ts", + }, + { + decision: "vendor-revocation-claim", + names: ["vendorRevocationClaim"], + home: "server/src/plugins/plugin-store/context.ts", + }, + /* Which apps a revoke ends besides the one it names: "the one place that answers it". */ + { + decision: "sibling-resolution", + names: ["resolveSiblings"], + home: "server/src/plugins/plugin-store/context.ts", + }, + /* Whether an app is a key, consent or neither, read off `mcp_servers`; every rule 1 asks it. */ + { + decision: "brokered-app-kind", + names: ["brokeredAppKind"], + home: "server/src/plugins/plugin-store/context.ts", + }, + /* The migrator's journal table, named once (C4). Its literal spellings are in SPELLED below. */ + { + decision: "migrations-journal", + names: ["MIGRATIONS_JOURNAL"], + home: "server/src/db/apply-migrations.ts", + }, + /* The migrator's high-water mark, "the single source for the mark" (C3). */ + { + decision: "migrator-high-water-mark", + names: ["migratorHighWaterMark"], + home: "server/src/db/migration-reach.ts", + }, +]; + +/** + * The duplicates standing when this guard landed, each with the finding that owns collapsing it. + * + * Keyed by decision. The list is the debt, written down: when a finding below is fixed, its sites + * come out of this list in the same commit, and the guard goes red if they do not. + */ +const KNOWN_DUPLICATES: Record< + string, + { finding: string; why: string; sites: string[] } +> = { + "brokered-provenance": { + finding: "round-1 DRY sweep (`brokeredProvenance` defined 2x) + G-series", + why: "One predicate for the app and one for the server, plus the same two-arm literal open-coded as `isBrokered` on the connected-accounts page; collapsing them is a cross-package move the fix cycle owns.", + sites: [ + "app/src/lib/plugins/provider-vocabulary.ts", + "app/src/routes/_authed/settings/connected-accounts/index.tsx", + "server/src/plugins/access.ts", + ], + }, + "scopes-of": { + finding: "round-1 DRY sweep (`scopesOf` defined 4x)", + why: "Four readers of the same `scopes` field with four input shapes; merging them means agreeing one shape, which is a behavioural decision and stays in the fix cycle.", + sites: [ + "app/src/lib/plugins/grants.ts", + "server/src/plugins/arcade-adapter.ts", + "server/src/plugins/arcade.ts", + "server/src/plugins/composio-vendor.ts", + ], + }, +}; + +/** A binding of `name`, not a call of it and not a mention of it in prose. */ +function definitionPattern(name: string): RegExp { + return new RegExp( + `(?:^|[^.\\w$])(?:export\\s+)?(?:default\\s+)?(?:async\\s+)?(?:function\\s*\\*?|const|let|var|class)\\s+${name}(?![\\w$])`, + ); +} + +/** Not a test, not a type declaration: a file a production decision can be defined in. */ +function isSource(path: string): boolean { + return !/\.(test|spec)\.tsx?$|\.d\.ts$/.test(path); +} + +/** + * Every source file in the repo where one of `names` is bound, one entry per binding. + * + * PATHS, NOT `path:line`, on purpose. A list carrying line numbers goes red when somebody rewraps + * a comment three functions above a definition, and a guard that fails for a reason unrelated to + * what it guards is one people learn to re-baseline without reading. A second definition in the + * SAME file still shows up, as that path listed twice. + */ +function definitionsOf(names: string[]): string[] { + const patterns = names.map(definitionPattern); + const out: string[] = []; + for (const root of ROOTS) { + const full = join(REPO, root); + if (!existsSync(full)) continue; + for (const file of sourceFiles(full, [".ts", ".tsx"])) { + if (!isSource(file)) continue; + for (const { text } of logicalLines(readFileSync(file, "utf8"))) { + if (patterns.some((re) => re.test(text))) { + out.push(file.slice(REPO.length + 1)); + } + } + } + } + return out.sort(); +} + +for (const { decision, names, home } of TRACKED) { + test(`"${decision}" has one definition, or exactly the duplicates on record`, () => { + const found = definitionsOf(names); + const known = KNOWN_DUPLICATES[decision]; + if (known) { + // Recorded debt. Equality both ways: a new re-spelling fails, and so does a collapse that + // did not also delete the site from the list above. + expect(found).toEqual([...known.sites].sort()); + return; + } + // No recorded debt: one home, and the diff names any file that became a second one. + expect(found).toEqual(home ? [home] : []); + }); +} + +/** + * Every spelling the name scan must catch, and every one it must not. + * + * The guard's own positive control plants a duplicate in a real file, which proves the walk reaches + * it. This proves the other half: that what the walk hands the pattern is read as a definition when + * it is one and as a call when it is not. Without this, the guard could be green because the + * pattern matches nothing at all. + */ +test("a definition is matched, and a call or a mention is not", () => { + const re = definitionPattern("keyedLookup"); + const definitions = [ + "function keyedLookup(map, key) {", + "export function keyedLookup(map, key) {", + " const keyedLookup = (map, key) => map.get(key);", + "export const keyedLookup = (m, k) => m.get(k);", + "let keyedLookup;", + "var keyedLookup = 1;", + "class keyedLookup {}", + "export async function keyedLookup(m, k) {", + ]; + for (const line of definitions) expect(re.test(line)).toBe(true); + const notDefinitions = [ + " return keyedLookup(MARKS, key) ?? IconPlug;", + 'import { keyedLookup } from "@/lib/lookup";', + "const mark = utils.keyedLookup(MARKS, key);", + " * see {@link keyedLookup} for why this is a Map", + "const keyedLookupTable = new Map();", + "function keyedLookupTable() {}", + ]; + for (const line of notDefinitions) expect(re.test(line)).toBe(false); +}); + +/* + * ─── SPELLINGS: a decision re-written under no name at all (lever L5, class K5) ─────────────────── + * + * The name table above catches a decision DEFINED twice. It cannot catch the shape this cycle kept + * re-opening: a rule or a name made single-source in one place and then written out again, inline, + * somewhere that never binds a name to it — `retireConnectionsFor` re-spelling the sibling rules + * `clearEndedSiblings` owns (A5b), `removeServer` deciding a key app's revoke answer its own way + * where `disconnectBrokered` already had (A5c), a migrations-table name chosen by a tool's default + * where `MIGRATIONS_JOURNAL` had already chosen it (C4n). + * + * So each entry below is a decision and the TEXT that spells it: a pattern matched against every + * logical line of every source file, comments stripped first, so prose that DESCRIBES the rule (and + * this codebase describes its rules at length) is not a spelling of it. The comparison is the one + * the name table makes, in the same two directions and keyed the same way — by PATH, a file listed + * once per logical line that spells the decision — against either the home or the debt on record. + * + * WHAT A PATH KEY CANNOT SAY. Two spellings in one file are that path listed twice; which of the two + * is the home is not something a path can carry. For A5c the second spelling was in the SAME file as + * the first (`plugin-store/connections.ts`; both A5b and A5c were in `plugins/store.ts` before #784 + * split it; K5 collapsed both into `context.ts`), so the guard holds the COUNT: a second spelling + * anywhere, the home's own file included, goes red; collapsing one goes red until the list drops a + * line. Moving the + * spelling from the owning function into a sibling function of the same file does not. That is the + * price of not going red on a rewrapped comment, and the same price the name table already pays. + */ + +/** + * The name table's roots, plus the two places a MIGRATION decision is made that a production + * runtime decision is not: the server's own scripts (`server/scripts/migrate.ts` is what a + * deployment runs) and `server/drizzle.config.ts` (what `drizzle-kit` reads). The name table's own + * {@link ROOTS} miss both; widening it is left to whoever owns that list. + */ +const SPELLING_ROOTS = [...ROOTS, "server/scripts", "server/drizzle.config.ts"]; + +/** Every source file under each root; a root that is a file is itself. */ +function spellingFiles(): string[] { + const out: string[] = []; + for (const root of SPELLING_ROOTS) { + const full = join(REPO, root); + if (!existsSync(full)) continue; + if (/\.tsx?$/.test(full)) out.push(full); + else out.push(...sourceFiles(full, [".ts", ".tsx"])); + } + return out.filter(isSource); +} + +/** + * A decision, the text that spells it, and — for one with no entry in + * {@link KNOWN_SECOND_SPELLINGS} — the paths of its home, once per logical line that spells it. + * + * The home is a LIST because a decision can rightly take more than one LOGICAL line in its own + * file. (The journal's schema and table are two physical lines but one logical line: a line ending + * in `,` is joined to the next by {@link logicalLines}, so the object counts once.) + */ +type Spelled = { decision: string; patterns: RegExp[]; home: string[] }; + +const SPELLED: Spelled[] = [ + /* + * The migrator's journal, as a literal. `MIGRATIONS_JOURNAL` is the one place a schema or table + * name is written; anything else either reads that object or is a second answer to the question + * the reach check and `migrate()` must answer identically (C4). + */ + { + decision: "migrations-journal-literal", + patterns: [ + /__drizzle_migrations/, + /\bmigrations(?:Schema|Table)\s*:\s*["'`]/, + // drizzle-kit's own spelling of the same two fields, in a `migrations: { … }` config block. + /\bmigrations\s*:\s*\{[^}]*\b(?:schema|table)\s*:\s*["'`]/, + ], + home: ["server/src/db/apply-migrations.ts"], + }, + /* + * THE SIBLING-CASCADE RULES: which of a revoke's siblings it ended. Spelled as a walk over a + * {@link resolveSiblings} answer, because every spelling of the three rules is one — rule 1 and + * rule 3 are each a `continue` inside that walk, rule 2 the guard before it. `siblingsEndedBy` + * is the one walk (rules 1 and 2); `clearEndedSiblings` adds rule 3 and the delete over its + * answer, and `retireConnectionsFor` files `endedWith` from the same answer (K5). A site that + * needs the rules asks one of those rather than walking the set itself. + */ + { + decision: "sibling-cascade-walk", + patterns: [ + /\bfor\s*\(\s*(?:const|let|var)\s+[\w$]+\s+of\s+[^;]*\bsiblings\b/, + // A MEMBER `.siblings` only: a bare `siblings` local is also how `shared-use-store.ts` names + // the rows of one app at one url, which is not a revoke's answer and not this decision. + /\.siblings\s*(?:\?\.|\.)\s*(?:forEach|map|flatMap|filter|reduce|some|every|find)\s*\(/, + ], + home: ["server/src/plugins/plugin-store/context.ts"], + }, + /* + * WHAT THE TRAIL SAYS WAS ASKED OF THE VENDOR, for the app an act was ABOUT. A key app's answer + * is `false` — nothing was asked of any vendor about a credential this deployment holds — and + * `vendorRevocationClaim` spells that once, as a payload fragment every writer of an asked app's + * row spreads (`disconnectBrokered`, `removeServer`, `retireConnectionsFor`; K5 moved the home + * here from `disconnectBrokered`'s `askedIsKey ? false : ended`). A writer that computes + * the field from anything else is a second answer to the same question. A constant `true` or + * `false` is not a computation and is not matched: `clearEndedSiblings` writes `true` on rows + * rule 1 has already kept key apps out of, and the vault loops write `false` about secrets. + */ + { + decision: "key-app-revoke-answer", + patterns: [ + /\bvendorRevocationRequested\s*[:=]\s*(?!true\b|false\b|boolean\b)\S/, + ], + home: ["server/src/plugins/plugin-store/context.ts"], + }, +]; + +/** + * The second spellings standing when L5 landed, each with the open finding that owns collapsing it. + * + * THE SAME DISCIPLINE AS `typecheck-baseline.txt`: every site past the home is a real defect, not a + * thing that is fine. Collapsing one and deleting its line is always correct, and the guard goes red + * until the line is deleted. Adding a line is not: a new site is code written today re-spelling a + * decision somebody already made, and this exists to say so. + */ +const KNOWN_SECOND_SPELLINGS: Record< + string, + { finding: string; why: string; sites: string[] } +> = { + /* + * EMPTY SINCE ROUND 2, K5. Both entries L5 landed with were collapsed into one home each in + * `plugin-store/context.ts`: "sibling-cascade-walk" (A5b — `retireConnectionsFor`'s own walk, + * without rule 1) now asks `siblingsEndedBy`, and "key-app-revoke-answer" (A5c, L5-a — + * `removeServer` and `retireConnectionsFor` passing a key app's raw vendor answer through) now + * asks `vendorRevocationClaim`, as `disconnectBrokered` does. A new entry here is a new defect. + */ +}; + +/** Every source file in which one of `patterns` matches a logical line, comments stripped. */ +function spellingsOf(patterns: RegExp[]): string[] { + const out: string[] = []; + for (const file of spellingFiles()) { + const code = stripComments(readFileSync(file, "utf8")); + for (const { text } of logicalLines(code)) { + if (patterns.some((re) => re.test(text))) { + out.push(file.slice(REPO.length + 1)); + } + } + } + return out.sort(); +} + +for (const { decision, patterns, home } of SPELLED) { + test(`"${decision}" is spelled only at its home, or exactly the second spellings on record`, () => { + const found = spellingsOf(patterns); + const known = KNOWN_SECOND_SPELLINGS[decision]; + // Recorded debt: equality both ways, as for the name table. With none, the home and only it. + expect(found).toEqual([...(known ? known.sites : home)].sort()); + }); +} + +/* + * ─── IMPLICIT SPELLINGS: a consumer that names nothing, and so takes a tool's default ──────────── + * + * No pattern can match text that is not there. `drizzle.config.ts` names no migrations table, so + * `drizzle-kit migrate` uses drizzle-kit's OWN default — which happens today to be the same schema + * and table `MIGRATIONS_JOURNAL` names, and which nothing in this repository decides. That is a + * second spelling the literal scan above is blind to by construction (C4n), and the day either side + * changes, the reach check reads one table and the CLI writes another. + * + * So the condition is stated the other way round: every file that hands migrations to a migrator — + * imports `drizzle-kit`, or a `drizzle-orm//migrator` — must REFERENCE the constant in code. + * One that does not is taking somebody else's default. Consumers are discovered, not listed, so a + * new migrator entry point is held to this the day it lands. + */ +const JOURNAL_CONSUMER = + /\bfrom\s+["'](?:drizzle-kit|drizzle-orm\/[\w-]+\/migrator)["']/; +const JOURNAL_REFERENCE = /\bMIGRATIONS_JOURNAL\b/; + +/** Consumers that take a default instead of naming the journal, recorded as the debt they are. */ +const KNOWN_DEFAULT_TAKERS: { finding: string; sites: string[] } = { + finding: "C4n (round 2, wave 3) — open", + sites: ["server/drizzle.config.ts"], +}; + +/** Every migrator consumer whose CODE (comments stripped) never mentions the journal constant. */ +function defaultTakers(): string[] { + const out: string[] = []; + for (const file of spellingFiles()) { + const code = stripComments(readFileSync(file, "utf8")); + if (JOURNAL_CONSUMER.test(code) && !JOURNAL_REFERENCE.test(code)) { + out.push(file.slice(REPO.length + 1)); + } + } + return out.sort(); +} + +test("every migrator consumer names MIGRATIONS_JOURNAL, or is a default-taker on record", () => { + expect(defaultTakers()).toEqual([...KNOWN_DEFAULT_TAKERS.sites].sort()); +}); + +/** + * The spelling patterns' own positive and negative controls, for the reason the name pattern has + * one: a guard can be green because its pattern matches nothing at all. + */ +test("a spelling is matched, and a mention, a read or a type is not", () => { + const cases: Record = { + "migrations-journal-literal": { + spells: [ + ' migrationsTable: "__drizzle_migrations",', + ' migrationsSchema: "drizzle",', + 'migrations: { schema: "drizzle", table: "journal" },', + "select * from drizzle.__drizzle_migrations", + ], + doesNot: [ + " migrationsSchema: string;", + " migrations: { schema: MIGRATIONS_JOURNAL.migrationsSchema },", + "from client(MIGRATIONS_JOURNAL.migrationsTable)", + ], + }, + "sibling-cascade-walk": { + spells: [ + "for (const app of new Set(input.siblings)) {", + "for (const app of endedBesides.get(entry.toolkit)?.siblings ?? []) {", + "for (let app of siblings) {", + "resolved.siblings.forEach((app) => {", + "input.siblings.filter((app) => app !== toolkit)", + ], + doesNot: [ + "await clearEndedSiblings({ siblings, account, endedWith: toolkit });", + "siblings: input.siblings,", + "const { siblings, unanswered } = await resolveSiblings(x);", + "for (const connection of brokered) {", + "const ids = siblings.map((sibling) => sibling.id);", + ], + }, + "key-app-revoke-answer": { + spells: [ + "const vendorRevocationRequested = askedIsKey ? false : ended;", + "vendorRevocationRequested: vendorRevocationRequested[index] ?? false,", + "vendorRevocationRequested: connection.requested || Boolean(endedBy),", + "vendorRevocationRequested: ended,", + ], + doesNot: [ + "vendorRevocationRequested: true,", + "vendorRevocationRequested: false,", + "}): Promise<{ vendorRevocationRequested: boolean }> {", + "const vendorRevocationRequested: boolean[] = [];", + "vendorRevocationRequested?: boolean;", + "return { vendorRevocationRequested };", + ], + }, + }; + for (const { decision, patterns } of SPELLED) { + const { spells, doesNot } = cases[decision] ?? { spells: [], doesNot: [] }; + // Every entry has controls: an entry added without them fails here rather than going unproven. + expect(spells.length).toBeGreaterThan(0); + for (const line of spells) { + expect({ + decision, + line, + hit: patterns.some((re) => re.test(line)), + }).toEqual({ + decision, + line, + hit: true, + }); + } + for (const line of doesNot) { + expect({ + decision, + line, + hit: patterns.some((re) => re.test(line)), + }).toEqual({ + decision, + line, + hit: false, + }); + } + } + expect( + JOURNAL_CONSUMER.test('import { defineConfig } from "drizzle-kit";'), + ).toBe(true); + expect( + JOURNAL_CONSUMER.test( + 'import { migrate } from "drizzle-orm/postgres-js/migrator";', + ), + ).toBe(true); + expect( + JOURNAL_CONSUMER.test('import { drizzle } from "drizzle-orm/postgres-js";'), + ).toBe(false); +}); diff --git a/server/tests/storable-tool-names.test.ts b/server/tests/storable-tool-names.test.ts new file mode 100644 index 000000000..010db3b1a --- /dev/null +++ b/server/tests/storable-tool-names.test.ts @@ -0,0 +1,101 @@ +import { describe, expect, test } from "bun:test"; +import { + OFFERABLE_TOOL_NAME, + PluginInvariantError, + storableTools, + toolNameFor, +} from "../src/plugins/plugin-store/model"; + +/** + * THE ONE SEAM EVERY TRANSPORT'S LISTING CROSSES ON ITS WAY INTO THE DATABASE, asked the question + * nothing used to ask it: is this a name a model can actually be offered? + * + * The defect that put this here was Arcade's, but the hole was general. `mcp_tools.name` is spliced + * into `mcp____` and handed to the model API, which takes `^[a-zA-Z0-9_-]+$` and + * nothing else — and no code between the vendor's listing and that request ever looked. A dotted + * `Gmail.ListEmails` was recorded, offered, and refused as `Invalid 'tools[47].name'`: a 400 on the + * whole request, naming an index, mentioning neither the app nor the action nor the refresh that + * recorded it. Whoever read that had nothing to act on. + */ +describe("a listing may not record a name the model API would refuse", () => { + const listed = (name: string) => [{ name, description: "", inputSchema: {} }]; + + test("a dotted name is refused, and the sentence names the app and the action", () => { + expect(() => + storableTools("arcade-Gmail", listed("Gmail.ListEmails")), + ).toThrow(PluginInvariantError); + + /* + * THE TWO THINGS A READER NEEDS, checked rather than assumed: which app published it and what + * it was called. The old failure carried neither. + */ + try { + storableTools("arcade-Gmail", listed("Gmail.ListEmails")); + throw new Error("expected a refusal"); + } catch (error) { + expect((error as Error).message).toContain("arcade-Gmail"); + expect((error as Error).message).toContain("Gmail.ListEmails"); + // And says what was NOT done, because a refused refresh leaves the held actions standing. + expect((error as Error).message).toContain("kept"); + } + }); + + test("the names the other transports publish are untouched", () => { + /* + * COMPOSIO AND MCP PASS AS THEY STAND, which is what makes this guard safe to add to a live + * deployment: the only non-alphanumeric character in any name those transports publish is `_`. + * A guard that refused them would take every working connector down with it. + */ + const rows = storableTools("gmail", listed("GMAIL_FETCH_EMAILS")); + + expect(rows).toMatchObject([ + { name: "GMAIL_FETCH_EMAILS", vendorName: "GMAIL_FETCH_EMAILS" }, + ]); + }); + + test("a transport that draws no distinction records the same string twice", () => { + /* + * ABSENCE MEANS "THE SAME NAME", AND IS RECORDED AS THE SAME NAME rather than as a null the + * readers would each have to remember to fall back from. Every read of `vendorName` is a call + * about to be made or a gate about to be answered; a tri-state there is a branch each one could + * get wrong separately. + */ + expect(storableTools("notes", listed("search"))).toMatchObject([ + { name: "search", vendorName: "search" }, + ]); + }); + + test("a transport's own spelling is kept when it gives one", () => { + const rows = storableTools("arcade-Gmail", [ + { + name: "ListEmails", + vendorName: "Gmail.ListEmails", + description: "", + inputSchema: {}, + }, + ]); + + expect(rows).toMatchObject([ + { name: "ListEmails", vendorName: "Gmail.ListEmails" }, + ]); + }); + + test("what survives the guard is an offered name the API accepts", () => { + /* + * THE GUARD'S WHOLE POINT, stated as the property rather than as a list of cases. The prefix and + * the separator are themselves made of accepted characters, so a `name` that passes is an + * offered name that passes — and that is the implication worth pinning, because it is the one + * the guard is relied on for. + */ + for (const name of [ + "search", + "GMAIL_FETCH_EMAILS", + "ListEmails", + "a-b_C9", + ]) { + const [row] = storableTools("server-id", listed(name)); + expect(OFFERABLE_TOOL_NAME.test(row!.name)).toBe(true); + expect(toolNameFor(`server-id/${row!.name}`)).toMatch(/^[a-zA-Z0-9_-]+$/); + } + }); +}); diff --git a/server/tests/store-account-ref.integration.test.ts b/server/tests/store-account-ref.integration.test.ts new file mode 100644 index 000000000..e4b901db5 --- /dev/null +++ b/server/tests/store-account-ref.integration.test.ts @@ -0,0 +1,136 @@ +// server/tests/store-account-ref.integration.test.ts +// +// THE STORE READS A STORED `(holder, user_id)` PAIR AS THE ACCOUNT IT NAMES, OR REFUSES. +// +// `asAccountRef` is the one reading, and its point is the `null`: a row that names no account this +// deployment may act in must stop the act rather than be rebuilt as some other account. `store.ts` +// had two readings of its own — one that absorbed an unreadable pair into `{ holder: "deployment" }` +// and one that minted `{ holder: "person", userId: "" }` — and both of them fed a REVOKE and an +// audit row. `brokered_connections_holder_check` is `(person AND user_id IS NOT NULL) OR +// (deployment AND user_id IS NULL)`, and `''` satisfies `IS NOT NULL`, so the person-with-no-user +// row IS writable and is what both tests below seed. +import { afterEach, describe, expect, test } from "bun:test"; +import { randomUUID } from "node:crypto"; +import { eq, inArray } from "drizzle-orm"; +import { createAuditStore } from "../src/audit"; +import { createDatabase } from "../src/db/client"; +import { brokeredConnections, mcpServers } from "../src/db/schema"; +import type { ConnectedAppBroker } from "../src/plugins/broker"; +import type { AccountRef } from "../src/plugins/shared-accounts"; +import { createPluginStore, PluginInvariantError } from "../src/plugins/store"; +import { TEST_POOL, testDatabaseUrl } from "./support/database"; + +const database = createDatabase(testDatabaseUrl(), TEST_POOL); +const suite = randomUUID().slice(0, 8); +const app = `nobody-gh-${suite}`; + +/** Every account the broker was ASKED to end, whole, so a wrong holder is visible in the failure. */ +const asked: AccountRef[] = []; +const broker = { + grantIsLocal: true, + authProviderOf: async () => null, + authorizations: null, + grantsFor: async () => [], + listApps: async () => [], + ensureAuthConfig: async () => "standing", + deleteAuthConfig: async () => {}, + authorize: async () => ({ + redirectUrl: "https://vendor.example/consent", + authorizationId: null, + }), + isConnected: async () => true, + revoke: async ({ account }: { account: AccountRef }) => { + asked.push(account); + return true; + }, + connectionFields: async () => [], + connectWithFields: async () => ({ accountId: "ca_1" }), + revokeAccount: async () => {}, + accountName: async () => "acme-bot", +} as unknown as ConnectedAppBroker; + +function freshStore() { + return createPluginStore({ + brokerProvider: "composio", + database, + auditStore: createAuditStore(database), + credentials: {} as never, + encryptionKey: "x".repeat(44), + policy: () => ({ mode: "enforce" as const, deny: [], allow: ["true"] }), + broker, + deploymentId: `acme-${suite}`, + }); +} + +/** A person row carrying no user id — written as `''`, which the table's CHECK does not stop. */ +async function seedPersonWithNoUser() { + await database.insert(mcpServers).values({ + id: app, + title: "Team GitHub", + vendor: "Composio", + url: `composio://${app}`, + provenance: "composio", + authScheme: "OAUTH2", + }); + await database.insert(brokeredConnections).values({ + provider: "composio", + app, + holder: "person", + userId: "", + vendorUserId: `vendor-${suite}`, + }); +} + +afterEach(async () => { + asked.length = 0; + await database + .delete(brokeredConnections) + .where(eq(brokeredConnections.app, app)); + await database.delete(mcpServers).where(inArray(mcpServers.id, [app])); +}); + +describe("a stored pair that names nobody", () => { + test("stops `removeServer` before the vendor is asked to end anybody's account", async () => { + const store = freshStore(); + await seedPersonWithNoUser(); + + const outcome = await store.removeServer(app, "admin@example.test").then( + () => "removed", + (error: unknown) => error, + ); + + expect(asked).toEqual([]); + expect(outcome).toBeInstanceOf(PluginInvariantError); + const rows = await database + .select({ app: brokeredConnections.app }) + .from(brokeredConnections) + .where(eq(brokeredConnections.app, app)); + expect(rows).toHaveLength(1); + }); + + test("stops the mode switch's read before it hands the account to a revoke", async () => { + const store = freshStore(); + await seedPersonWithNoUser(); + + // The sequence `account-mode.ts` runs: read every account on the app, then end each one. + const outcome = await (async () => { + const on = await store.accountsOn(app); + if (!on) return "not brokered"; + for (const account of on.accounts) { + await store.disconnectBrokered({ + toolkit: on.toolkit, + account, + by: "admin@example.test", + reason: "mode_switched", + }); + } + return "ended"; + })().then( + (answer) => answer, + (error: unknown) => error, + ); + + expect(asked).toEqual([]); + expect(outcome).toBeInstanceOf(PluginInvariantError); + }); +}); diff --git a/server/tests/store-provider-required.test.ts b/server/tests/store-provider-required.test.ts new file mode 100644 index 000000000..b3a147f61 --- /dev/null +++ b/server/tests/store-provider-required.test.ts @@ -0,0 +1,224 @@ +import { afterAll, afterEach, describe, expect, test } from "bun:test"; +import { randomUUID } from "node:crypto"; +import { and, eq } from "drizzle-orm"; +import { createAuditStore } from "../src/audit"; +import { createDatabase } from "../src/db/client"; +import { brokeredConnections, mcpServers } from "../src/db/schema"; +import { BROKERED_PROFILE, type BrokerProvider } from "../src/plugins/access"; +import type { ConnectedAppBroker } from "../src/plugins/broker"; +import { createPluginStore } from "../src/plugins/store"; +import { TEST_POOL, testDatabaseUrl } from "./support/database"; + +/* + * `brokerProvider` is REQUIRED on `PluginStoreOptions`, and this file is the pin for both halves of + * what that buys. + * + * THE TYPE HALF IS CHECKED BY `tsc`, NOT BY BUN. This one file is named in `server/tsconfig.json`'s + * `include` for exactly that reason: `server/tests` as a whole is outside the program, so a + * `@ts-expect-error` written here would otherwise be read by nothing and assert nothing while + * looking like it asserted something. Run `bun run typecheck` to run that half. + */ +const database = createDatabase(testDatabaseUrl(), TEST_POOL); +const suite = randomUUID().slice(0, 8); +const serverIds: string[] = []; +const apps: string[] = []; + +afterEach(async () => { + for (const id of serverIds.splice(0)) + await database.delete(mcpServers).where(eq(mcpServers.id, id)); + for (const app of apps.splice(0)) + await database + .delete(brokeredConnections) + .where(eq(brokeredConnections.app, app)); +}); +afterAll(async () => { + await database.$client.close(); +}); + +const broker = {} as ConnectedAppBroker; + +const base = { + database, + auditStore: createAuditStore(database), + credentials: {} as never, + encryptionKey: "x".repeat(44), + policy: () => ({ mode: "enforce" as const, deny: [], allow: ["true"] }), + broker, + deploymentId: `acme-${suite}`, +}; + +function storeFor(brokerProvider: BrokerProvider) { + return createPluginStore({ ...base, brokerProvider }); +} + +/* + * THE TYPE PIN. Omitting `brokerProvider` must not compile. If the field ever goes back to being + * optional this line stops erroring and `tsc` fails on the unused directive instead, so the pin + * cannot rot into silence in either direction. + */ +// @ts-expect-error - brokerProvider is required: a store must name the broker it is for. +const _withoutProvider: unknown = () => createPluginStore(base); + +describe("the store reads and writes its own provider's slice", () => { + test("an arcade store writes arcade rows that only an arcade store reads back", async () => { + const app = `Gmail${suite}`; + const id = `required-${suite}-${randomUUID().slice(0, 6)}`; + await database.insert(mcpServers).values({ + id, + title: "Example", + vendor: BROKERED_PROFILE.arcade.vendor, + url: `arcade://${app}`, + provenance: "arcade", + authScheme: "OAUTH2", + }); + serverIds.push(id); + apps.push(app); + + await storeFor("arcade").recordBrokeredConnection({ + toolkit: app, + account: { + holder: "person", + userId: `user-${suite}`, + vendorUserId: `vendor-${suite}`, + }, + verified: true, + probeAction: null, + }); + + const rows = await database + .select({ + provider: brokeredConnections.provider, + userId: brokeredConnections.userId, + }) + .from(brokeredConnections) + .where(eq(brokeredConnections.app, app)); + expect(rows).toHaveLength(1); + expect(rows[0]?.provider).toBe("arcade"); + + const seen = await storeFor("arcade").accountsOn(id); + expect(seen?.toolkit).toBe(app); + expect(seen?.accounts).toEqual([ + { + holder: "person", + userId: `user-${suite}`, + vendorUserId: `vendor-${suite}`, + }, + ]); + }); + + test("a composio store writes composio rows and does not see the arcade ones", async () => { + const app = `gmail${suite}`; + const id = `required-${suite}-${randomUUID().slice(0, 6)}`; + await database.insert(mcpServers).values({ + id, + title: "Example", + vendor: BROKERED_PROFILE.composio.vendor, + url: `composio://${app}`, + provenance: "composio", + authScheme: "OAUTH2", + }); + serverIds.push(id); + apps.push(app); + + // An arcade row already filed under the same app name, which a composio store must not read. + await database.insert(brokeredConnections).values({ + provider: "arcade", + app, + holder: "person", + userId: `other-${suite}`, + vendorUserId: `othervendor-${suite}`, + }); + + await storeFor("composio").recordBrokeredConnection({ + toolkit: app, + account: { + holder: "person", + userId: `user-${suite}`, + vendorUserId: `vendor-${suite}`, + }, + verified: true, + probeAction: null, + }); + + const written = await database + .select({ userId: brokeredConnections.userId }) + .from(brokeredConnections) + .where( + and( + eq(brokeredConnections.app, app), + eq(brokeredConnections.provider, "composio"), + ), + ); + expect(written).toHaveLength(1); + expect(written[0]?.userId).toBe(`user-${suite}`); + + const seen = await storeFor("composio").accountsOn(id); + expect(seen?.accounts).toEqual([ + { + holder: "person", + userId: `user-${suite}`, + vendorUserId: `vendor-${suite}`, + }, + ]); + }); + /* + * THE MIRROR OF THE TEST ABOVE, and it is here because half a cross-provider guard is not one. + * The slice is keyed on the store's own provider in both directions, so a composio row sitting + * under an arcade store's app must be as invisible as the arcade row is to a composio store. + */ + test("an arcade store writes arcade rows and does not see the composio ones", async () => { + const app = `Notion${suite}`; + const id = `required-${suite}-${randomUUID().slice(0, 6)}`; + await database.insert(mcpServers).values({ + id, + title: "Example", + vendor: BROKERED_PROFILE.arcade.vendor, + url: `arcade://${app}`, + provenance: "arcade", + authScheme: "OAUTH2", + }); + serverIds.push(id); + apps.push(app); + + // A composio row already filed under the same app name, which an arcade store must not read. + await database.insert(brokeredConnections).values({ + provider: "composio", + app, + holder: "person", + userId: `other-${suite}`, + vendorUserId: `othervendor-${suite}`, + }); + + await storeFor("arcade").recordBrokeredConnection({ + toolkit: app, + account: { + holder: "person", + userId: `user-${suite}`, + vendorUserId: `vendor-${suite}`, + }, + verified: true, + probeAction: null, + }); + + const written = await database + .select({ userId: brokeredConnections.userId }) + .from(brokeredConnections) + .where( + and( + eq(brokeredConnections.app, app), + eq(brokeredConnections.provider, "arcade"), + ), + ); + expect(written).toHaveLength(1); + expect(written[0]?.userId).toBe(`user-${suite}`); + + const seen = await storeFor("arcade").accountsOn(id); + expect(seen?.accounts).toEqual([ + { + holder: "person", + userId: `user-${suite}`, + vendorUserId: `vendor-${suite}`, + }, + ]); + }); +}); diff --git a/server/tests/store-scheme-sites.test.ts b/server/tests/store-scheme-sites.test.ts new file mode 100644 index 000000000..443a9d76a --- /dev/null +++ b/server/tests/store-scheme-sites.test.ts @@ -0,0 +1,295 @@ +/** + * `store.ts`'s last vendor-scheme sites, read through the shared record instead of a literal. + * + * Four of them, and they fail differently: the connections listing drops every row on a non-Composio + * broker, the probe dials a vendor this deployment may hold no key for, the screen-name reservation + * covers only one of the two static routes, and `shared-use-store.ts` spells the scheme a second + * time. Each has its own test below, and each Composio behaviour is asserted unchanged beside it. + */ +import { afterAll, afterEach, expect, test } from "bun:test"; +import { randomUUID } from "node:crypto"; +import { readFileSync } from "node:fs"; +import { join } from "node:path"; +import { inArray, like } from "drizzle-orm"; +import { createAuditStore } from "../src/audit"; +import { createDatabase } from "../src/db/client"; +import { + brokeredConnections, + mcpServers, + mcpTools, + users, +} from "../src/db/schema"; +import { BROKERED_PROFILE, type BrokerProvider } from "../src/plugins/access"; +import type { BrokerConnection } from "../src/plugins/broker"; +import { + CustomServerRefusedError, + createPluginStore, +} from "../src/plugins/store"; +import { TEST_POOL, testDatabaseUrl } from "./support/database"; +import { stripComments } from "./support/source-scan"; +import { stubBroker } from "./support/stub-broker"; + +const database = createDatabase(testDatabaseUrl(), TEST_POOL); +const suite = randomUUID().slice(0, 8); + +/** Every row this file writes is named `sss…`, so the cleanup can take the whole family. */ +const tag = (name: string) => `sss${name}${suite}`; + +async function clean() { + await database.delete(mcpTools).where(like(mcpTools.serverId, "%sss%")); + await database + .delete(brokeredConnections) + .where(like(brokeredConnections.app, "%sss%")); + await database.delete(mcpServers).where(like(mcpServers.id, "%sss%")); + // The screen names themselves: a refusal that regressed would leave a row behind, and the row + // would then make every later run of those tests fail for the wrong reason. + await database + .delete(mcpServers) + .where(inArray(mcpServers.id, ["composio", "arcade"])); + await database.delete(users).where(like(users.id, "%sss%")); +} +afterEach(clean); +afterAll(async () => { + await clean(); + await database.$client.close(); +}); + +/** + * The broker, built by `stubBroker`: every member this file does not provide THROWS AND RECORDS. + * + * A throw is only as loud as the path that receives it: a `catch` around the call swallows it and + * the test passes on a broker that was never there. That is how three members of + * `ConnectedAppBroker` — `revokeAccount` among them — were absent from this stub without a single + * test noticing (round-2 C8a). The check below reads the record after every test, so a reach is a + * red whether or not production let the throw out. Only what these paths actually reach is + * provided; nothing here reads grants, lists, deletes, authorizes, checks, revokes, draws a connect + * form, connects with typed fields or undoes one account. + */ +const stub = stubBroker({ + grantIsLocal: true, + // Nothing here reads it; declared because the seam requires a broker to SAY what it runs — see + // `ConnectedAppBroker.authorizations`. + authorizations: null, + // Nothing here asks what auth provider a connection is held under. + authProviderOf: async () => null, + ensureAuthConfig: async () => "created", + accountName: async () => null, +}); +afterEach(() => { + stub.expectNothingUnprovidedReached(); +}); + +function storeFor(provider: BrokerProvider) { + const broker = stub.broker; + return createPluginStore({ + brokerProvider: provider, + database, + auditStore: createAuditStore(database), + credentials: { + readSecret: async () => null, + create: async () => { + throw new Error("vault"); + }, + updateSecret: async () => { + throw new Error("vault"); + }, + revoke: async () => { + throw new Error("vault"); + }, + }, + encryptionKey: "x".repeat(44), + policy: () => ({ mode: "enforce", deny: [], allow: ["true"] }), + broker, + }); +} + +const consent: BrokerConnection = { kind: "consent" }; + +/** The app slug each broker's rows are written at here; Arcade's case is never normalised. */ +const APP: Record = { + composio: tag("gmail"), + arcade: tag("Gmail"), +}; + +async function seedApp(provider: BrokerProvider, serverId: string) { + await database.insert(mcpServers).values({ + id: serverId, + title: "Gmail", + vendor: BROKERED_PROFILE[provider].vendor, + url: `${BROKERED_PROFILE[provider].scheme}${APP[provider]}`, + provenance: provider, + authScheme: "API_KEY", + }); +} + +async function seedPersonConnection(provider: BrokerProvider, userId: string) { + await database.insert(users).values({ + id: userId, + email: `${userId}@example.test`, + name: "asker", + emailVerified: true, + groups: [], + }); + await database.insert(brokeredConnections).values({ + provider, + app: APP[provider], + holder: "person", + userId, + vendorUserId: userId, + }); +} + +/* (a) The record itself, in the one module allowed to spell a scheme. */ +test("BROKERED_PROFILE lives in access.ts and answers for both brokers", () => { + expect(BROKERED_PROFILE.composio).toEqual({ + scheme: "composio://", + idPrefix: "composio-", + vendor: "Composio", + envVar: "COMPOSIO_API_KEY", + }); + expect(BROKERED_PROFILE.arcade).toEqual({ + scheme: "arcade://", + idPrefix: "arcade-", + vendor: "Arcade", + envVar: "ARCADE_API_KEY", + }); +}); + +/* (b) The connections listing resolves each app at the ACTIVE broker's scheme. */ +for (const provider of ["composio", "arcade"] as const) { + test(`brokeredConnectionsFor names the ${provider} row at the ${provider} scheme`, async () => { + const serverId = tag(`${provider}row`); + const userId = tag(`${provider}user`); + await seedApp(provider, serverId); + await seedPersonConnection(provider, userId); + + const rows = await storeFor(provider).brokeredConnectionsFor(userId); + expect(rows.map((row) => row.serverId)).toEqual([serverId]); + }); +} + +test("brokeredConnectionsFor drops a connection whose app has no row at that scheme", async () => { + // The other broker's row is not this broker's app: a scheme read off a literal would have found + // it anyway on Composio, and found nothing at all on Arcade. + const userId = tag("crossuser"); + await seedApp("composio", tag("composiorow")); + await seedPersonConnection("arcade", userId); + expect(await storeFor("arcade").brokeredConnectionsFor(userId)).toEqual([]); +}); + +/* (c) The probe refuses on a broker whose check nobody has written, rather than dialling Composio. */ +async function probeOn(provider: BrokerProvider) { + const serverId = tag(`${provider}probe`); + await seedApp(provider, serverId); + await database.insert(mcpTools).values({ + serverId, + name: "GMAIL_GET_ME", + vendorName: "GMAIL_GET_ME", + description: "Who this key belongs to", + inputSchema: {}, + effect: "read", + destructive: false, + version: "20260101_00", + }); + return await storeFor(provider).probeBrokeredConnection({ + toolkit: APP[provider], + account: { holder: "person", userId: tag("probeuser"), vendorUserId: "v" }, + }); +} + +test("the probe refuses on Arcade rather than dialling Composio", async () => { + const probed = await probeOn("arcade"); + expect(probed).toEqual({ + outcome: "unreachable", + probe: null, + attempted: "GMAIL_GET_ME", + sentence: + "This deployment brokers its apps through Arcade, and the only connection check this deployment knows how to make is Composio's. Nothing was asked about this connection, so nothing is recorded about it.", + }); +}); + +test("the probe on Composio still reaches the Composio transport", async () => { + const probed = await probeOn("composio"); + // No client is installed in a test process, so the transport refuses before it dials — which is + // the point: the sentence is the TRANSPORT'S, not the refusal above. + expect(probed.outcome).toBe("unreachable"); + expect(probed).toHaveProperty("attempted", "GMAIL_GET_ME"); + expect((probed as { sentence: string }).sentence).toContain( + "Composio is not configured for this deployment", + ); +}); + +/* (d) Both brokers' screen names are reserved, each refused in its own sentence. */ +for (const [id, vendor] of [ + ["composio", "Composio"], + ["arcade", "Arcade"], +] as const) { + for (const provider of ["composio", "arcade"] as const) { + test(`a ${provider} store refuses a server hand-typed as ${id}`, async () => { + await expect( + storeFor(provider).addCustomServer({ + id, + title: "Collector", + url: "https://collector.example/mcp", + by: "admin@example.com", + }), + ).rejects.toThrow( + new CustomServerRefusedError( + `${id} is the name of this deployment's own ${vendor} screen, so a server added there could never be opened. Choose another.`, + ).message, + ); + const [found] = await database + .select({ id: mcpServers.id }) + .from(mcpServers) + .where(inArray(mcpServers.id, ["composio", "arcade"])); + expect(found).toBeUndefined(); + }); + } +} + +test("the brokered id-prefix refusal is untouched by the screen-name one", async () => { + // Six lines apart and about different things: `arcade` is a screen, `arcade-x` is a namespace. + await expect( + storeFor("composio").addCustomServer({ + id: "arcade-x", + title: "Collector", + url: "https://collector.example/mcp", + by: "admin@example.com", + }), + ).rejects.toThrow( + "Names beginning arcade- belong to the Arcade apps this deployment enables", + ); +}); + +/* (e) One table, one spelling: `shared-use-store.ts` reads the record rather than rebuilding it. */ +test("shared-use-store derives its scheme from BROKERED_PROFILE and nowhere else", () => { + const source = readFileSync( + join(import.meta.dir, "../src/plugins/shared-use-store.ts"), + "utf8", + ); + // The shared stripper, which blanks a comment where it stands instead of dropping the line it + // sits on: a trailing `// note` used to take its own code with it, so the assertion below could + // have failed on a line that carries the derivation it is looking for. + const code = stripComments(source); + expect(code).toContain("BROKERED_PROFILE[provider].scheme"); + // The local derivation 4.5 could not avoid, now that the record is reachable. + expect(code).not.toMatch(/\$\{provider\}:\/\//); +}); + +/* And `addBrokeredApp` keeps writing at the record's scheme, which is where the record came from. */ +for (const provider of ["composio", "arcade"] as const) { + test(`addBrokeredApp still writes a ${provider} row at the record's scheme`, async () => { + const record = await storeFor(provider).addBrokeredApp({ + slug: APP[provider], + title: "Gmail", + by: "admin@example.com", + connection: consent, + }); + expect(record.url).toBe( + `${BROKERED_PROFILE[provider].scheme}${APP[provider]}`, + ); + expect(record.id).toBe( + `${BROKERED_PROFILE[provider].idPrefix}${APP[provider]}`, + ); + }); +} diff --git a/server/tests/store-toolkit-dispatch.test.ts b/server/tests/store-toolkit-dispatch.test.ts new file mode 100644 index 000000000..d4cf1b7f3 --- /dev/null +++ b/server/tests/store-toolkit-dispatch.test.ts @@ -0,0 +1,103 @@ +import { afterAll, afterEach, describe, expect, test } from "bun:test"; +import { randomUUID } from "node:crypto"; +import { eq } from "drizzle-orm"; +import { createAuditStore } from "../src/audit"; +import { createDatabase } from "../src/db/client"; +import { brokeredConnections, mcpServers } from "../src/db/schema"; +import { BROKERED_PROFILE, type BrokerProvider } from "../src/plugins/access"; +import type { ConnectedAppBroker } from "../src/plugins/broker"; +import { createPluginStore } from "../src/plugins/store"; +import { TEST_POOL, testDatabaseUrl } from "./support/database"; + +/* + * `store.ts` reads the app out of a row's url through the provider's own parser, dispatched in + * `access.ts` and keyed on the store's `brokerProvider`. These drive `accountsOn`, which reads the + * toolkit off a row's url and answers nothing for a url that names no app at this store's broker. + */ +const database = createDatabase(testDatabaseUrl(), TEST_POOL); +const suite = randomUUID().slice(0, 8); +const serverIds: string[] = []; +const connectionApps: string[] = []; + +afterEach(async () => { + for (const id of serverIds.splice(0)) + await database.delete(mcpServers).where(eq(mcpServers.id, id)); + for (const app of connectionApps.splice(0)) + await database + .delete(brokeredConnections) + .where(eq(brokeredConnections.app, app)); +}); +afterAll(async () => { + await database.$client.close(); +}); + +const broker = {} as ConnectedAppBroker; + +function storeFor(brokerProvider: BrokerProvider) { + return createPluginStore({ + database, + auditStore: createAuditStore(database), + credentials: {} as never, + encryptionKey: "x".repeat(44), + policy: () => ({ mode: "enforce" as const, deny: [], allow: ["true"] }), + broker, + brokerProvider, + deploymentId: `acme-${suite}`, + }); +} + +async function seed(provenance: BrokerProvider, url: string, app: string) { + const id = `dispatch-${suite}-${randomUUID().slice(0, 6)}`; + await database.insert(mcpServers).values({ + id, + title: "Example", + // What production mints: the broker's label out of `BROKERED_PROFILE`, never the lower-case + // provider key. The provenance column is the provider key; the vendor column never is. + vendor: BROKERED_PROFILE[provenance].vendor, + url, + provenance, + authScheme: "OAUTH2", + }); + serverIds.push(id); + await database.insert(brokeredConnections).values({ + provider: provenance, + app, + holder: "person", + userId: `user-${suite}`, + vendorUserId: `vendor-${suite}`, + }); + connectionApps.push(app); + return id; +} + +describe("the toolkit a row names is read by the store's own provider", () => { + test("an arcade://Gmail row resolves to Gmail with case intact under arcade", async () => { + const id = await seed("arcade", `arcade://Gmail`, `Gmail`); + const answer = await storeFor("arcade").accountsOn(id); + expect(answer?.toolkit).toBe("Gmail"); + expect(answer?.accounts).toHaveLength(1); + }); + + test("the same row under composio names no app and is refused, not mis-parsed", async () => { + const id = await seed("arcade", `arcade://Gmail`, `Gmail`); + expect(await storeFor("composio").accountsOn(id)).toBeNull(); + }); + + test("a composio://gmail row under composio is unchanged", async () => { + const id = await seed("composio", `composio://gmail`, `gmail`); + const answer = await storeFor("composio").accountsOn(id); + expect(answer?.toolkit).toBe("gmail"); + expect(answer?.accounts).toHaveLength(1); + }); + + /* + * THE MIRROR OF THE REFUSAL ABOVE. The dispatch is a table with an entry per provider, so a guard + * proved in one direction only is a guard proved for one entry only: an arcade store reading a + * `composio://` row has to answer nothing for the same reason, and nothing about the first case + * says the second one holds. + */ + test("a composio://gmail row under arcade names no app and is refused, not mis-parsed", async () => { + const id = await seed("composio", `composio://gmail`, `gmail`); + expect(await storeFor("arcade").accountsOn(id)).toBeNull(); + }); +}); diff --git a/server/tests/store-vendor-vocabulary.test.ts b/server/tests/store-vendor-vocabulary.test.ts new file mode 100644 index 000000000..e0f08f035 --- /dev/null +++ b/server/tests/store-vendor-vocabulary.test.ts @@ -0,0 +1,261 @@ +// server/tests/store-vendor-vocabulary.test.ts +/** + * THE SENTENCES `store.ts` HANDS A PERSON NAME THE BROKER THIS DEPLOYMENT ACTUALLY RUNS. + * + * Two of the store's refusals spelled the literal "Composio" into prose a reader acts on: the name + * collision an administrator meets when they add a server by URL over a brokered row, and the + * retry a person is told to make when a re-check could not be made. Both reach a browser — the + * first as a 400 off `CustomServerRefusedError`, the second as a 400 off `PluginRefusedError` — + * and on an Arcade deployment both named a vendor this deployment holds no key for. + * + * ONE DATABASE, TWO STORES, because the only thing under test is which vocabulary a store built on + * one provider reads. Rows are inserted rather than enabled through `addBrokeredApp`: what these + * refusals read off a row is its provenance, its url and its scheme, and enabling for real would + * put a vendor listing in front of an assertion that has nothing to do with one. + */ +import { afterAll, afterEach, describe, expect, test } from "bun:test"; +import { randomUUID } from "node:crypto"; +import { inArray } from "drizzle-orm"; +import { createAuditStore } from "../src/audit"; +import { createDatabase } from "../src/db/client"; +import { + agents, + brokeredConnections, + mcpServers, + mcpTools, +} from "../src/db/schema"; +import type { BrokerProvider } from "../src/plugins/access"; +import type { ConnectedAppBroker } from "../src/plugins/broker"; +import { createPluginStore } from "../src/plugins/store"; +import { TEST_POOL, testDatabaseUrl } from "./support/database"; + +const database = createDatabase(testDatabaseUrl(), TEST_POOL); + +afterAll(async () => { + await database.$client.close(); +}); + +const suite = randomUUID().slice(0, 8); + +/** Nothing here reaches a vendor: every refusal under test is decided off the row. */ +const broker = { + grantIsLocal: false, + authorizations: null, + authProviderOf: async () => null, + grantsFor: async () => [], + listApps: async () => [], + ensureAuthConfig: async () => "standing", + deleteAuthConfig: async () => {}, + authorize: async () => ({ + redirectUrl: "https://vendor.example/consent", + authorizationId: null, + }), + isConnected: async () => true, + revoke: async () => true, + connectionFields: async () => [], + connectWithFields: async () => ({ accountId: "ca_1" }), + revokeAccount: async () => {}, + accountName: async () => null, +} as unknown as ConnectedAppBroker; + +function storeOn(provider: BrokerProvider) { + return createPluginStore({ + brokerProvider: provider, + database, + auditStore: createAuditStore(database), + credentials: {} as never, + encryptionKey: "x".repeat(44), + policy: () => ({ mode: "enforce" as const, deny: [], allow: ["true"] }), + broker, + }); +} + +const STORE: Record> = { + composio: storeOn("composio"), + arcade: storeOn("arcade"), +}; + +const VENDOR: Record = { + composio: "Composio", + arcade: "Arcade", +}; + +const seededServers: string[] = []; +const seededApps: string[] = []; + +/** A brokered app as its provider spells it, inserted whole. */ +async function brokeredApp(provider: BrokerProvider, toolkit: string) { + // NOT the `${provider}-` id `addBrokeredApp` composes: an id in a broker's reserved namespace is + // refused by its own guard before `requireNotBrokered` is ever asked, and that is a different + // refusal with a different sentence. + const id = `held-${toolkit.toLowerCase()}`; + seededServers.push(id); + await database.insert(mcpServers).values({ + id, + title: toolkit, + vendor: VENDOR[provider], + url: `${provider}://${toolkit}`, + provenance: provider, + authScheme: "API_KEY", + }); + return id; +} + +afterEach(async () => { + if (seededServers.length) { + await database + .delete(mcpTools) + .where(inArray(mcpTools.serverId, seededServers)); + await database + .delete(mcpServers) + .where(inArray(mcpServers.id, seededServers)); + } + if (seededApps.length) + await database + .delete(brokeredConnections) + .where(inArray(brokeredConnections.app, seededApps)); + seededServers.length = 0; + seededApps.length = 0; +}); + +/** + * ADDING A SERVER BY URL OVER A BROKERED ROW. The refusal names the vendor whose accounts are + * standing behind that row, which is the vendor the administrator has to go and remove the app + * from. + */ +describe("the brokered-name collision names the active vendor", () => { + for (const provider of ["arcade", "composio"] as BrokerProvider[]) { + test(`on ${provider}`, async () => { + const toolkit = `Gmail${suite}`; + const id = await brokeredApp(provider, toolkit); + + const refused = await STORE[provider] + .addCustomServer({ + id, + title: "Collector", + url: "https://collector.example/mcp", + by: "admin@example.test", + }) + .then( + () => null, + (error: Error) => error.message, + ); + + expect(refused).not.toBeNull(); + expect(refused).toContain(VENDOR[provider]); + expect(refused).not.toContain( + VENDOR[provider === "arcade" ? "composio" : "arcade"], + ); + }); + } +}); + +/** + * A RE-CHECK THAT COULD NOT BE MADE. The probe itself has no second implementation yet and says so + * in its own words; what this pins is the RETRY the person is told to make, which is about the + * vendor this deployment is waiting on and not about the one the probe was written for. + */ +describe("the re-check retry names the active vendor", () => { + test("on arcade", async () => { + const toolkit = `Slack${suite}`; + const id = await brokeredApp("arcade", toolkit); + seededApps.push(toolkit); + await database.insert(mcpTools).values({ + serverId: id, + name: `${toolkit}.WhoAmI`, + vendorName: `${toolkit}.WhoAmI`, + description: "Says who the key belongs to.", + effect: "read", + version: "1.0", + }); + await database.insert(brokeredConnections).values({ + provider: "arcade", + app: toolkit, + holder: "person", + userId: "person-1", + vendorUserId: "person-1", + }); + + const refused = await STORE.arcade + .recheckBrokeredConnection({ + toolkit, + account: { + holder: "person", + userId: "person-1", + vendorUserId: "person-1", + }, + by: "person-1", + }) + .then( + () => null, + (error: Error) => error.message, + ); + + expect(refused).toContain( + "pressing Re-check again when Arcade is answering", + ); + expect(refused).not.toContain("when Composio is answering"); + }); +}); + +/** + * A BROKERED ROW WHOSE URL NAMES NO APP. Nothing in the product writes one — a hand edit or an old + * backup does — and the invariant it raises reaches an operator as a 409 off `isDeploymentFault`. + * It named the wrong vendor on an Arcade deployment, which is the same defect wearing an + * invariant's clothes. + */ +describe("the brokered-credential invariant names the active vendor", () => { + test("on arcade", async () => { + const id = `held-orphan-${suite}`; + const botId = `bot-${suite}`; + const action = "Orphan.Read"; + seededServers.push(id); + await database.insert(agents).values({ + id: botId, + name: "Helper", + type: "built_in", + configuration: {}, + }); + await database.insert(mcpServers).values({ + id, + title: "Orphan", + vendor: "Arcade", + // Brokered provenance, and a url that names no app at all. + url: "https://orphan.example/mcp", + provenance: "arcade", + authScheme: "API_KEY", + accountMode: "personal", + }); + await database.insert(mcpTools).values({ + serverId: id, + name: action, + vendorName: action, + description: "Reads something.", + effect: "read", + version: "1.0", + }); + await STORE.arcade.grant( + "mcp", + `${id}/${action}`, + botId, + "admin@example.test", + ); + + const raised = await STORE.arcade + .callTool({ + ref: `${id}/${action}`, + args: {}, + botId, + actorId: "person-1", + }) + .then( + () => null, + (error: Error) => error.message, + ); + + expect(raised).toContain("Arcade"); + expect(raised).not.toContain("Composio"); + + await database.delete(agents).where(inArray(agents.id, [botId])); + }); +}); diff --git a/server/tests/stub-broker.test.ts b/server/tests/stub-broker.test.ts new file mode 100644 index 000000000..adc95d5e8 --- /dev/null +++ b/server/tests/stub-broker.test.ts @@ -0,0 +1,117 @@ +// server/tests/stub-broker.test.ts +/** + * Contract test for `support/stub-broker.ts`: an unprovided member fails loudly, a swallowed reach + * is still caught, a provided member is used and recorded, and the declarations cannot be skipped. + */ +import { expect, test } from "bun:test"; +import type { ConnectedAppBroker } from "../src/plugins/broker"; +import { + type BrokerMethod, + stubBroker, + unprovidedMessage, +} from "./support/stub-broker"; + +/** Every method of the seam, spelled out so a member the factory forgot is a test failure too. */ +const METHODS: BrokerMethod[] = [ + "grantsFor", + "authProviderOf", + "listApps", + "ensureAuthConfig", + "deleteAuthConfig", + "authorize", + "isConnected", + "revoke", + "connectionFields", + "connectWithFields", + "revokeAccount", + "accountName", +]; + +const account = { + holder: "person", + userId: "u_1", + vendorUserId: "v_1", +} as const; + +test("every method the test did not provide throws, and records that it was reached", () => { + const stub = stubBroker({ grantIsLocal: true, authorizations: null }); + for (const name of METHODS) { + const member = stub.broker[name] as unknown as () => unknown; + expect(() => member()).toThrow(unprovidedMessage(name)); + } + expect(stub.unprovided).toEqual(METHODS); + expect(stub.calls).toEqual([]); +}); + +test("the stub has exactly the seam's members, no more and no fewer", () => { + const stub = stubBroker({ grantIsLocal: false, authorizations: null }); + expect(Object.keys(stub.broker).sort()).toEqual( + ["grantIsLocal", "authorizations", ...METHODS].sort(), + ); +}); + +test("a reach that production SWALLOWS is still caught by the after-each check", async () => { + const stub = stubBroker({ grantIsLocal: true, authorizations: null }); + // The shape round-2 C8a planted in `store.ts`: a revoke whose failure is caught and dropped. + // A throw alone passes here; the record is what makes it a red. + try { + await stub.broker.revokeAccount("ca_1"); + } catch {} + expect(() => stub.expectNothingUnprovidedReached()).toThrow(); + // The check clears the record, so one reach is reported once. + expect(() => stub.expectNothingUnprovidedReached()).not.toThrow(); +}); + +test("a fire-and-forget .catch cannot swallow it: the throw is synchronous", () => { + const stub = stubBroker({ grantIsLocal: true, authorizations: null }); + expect(() => stub.broker.revokeAccount("ca_1").catch(() => {})).toThrow( + unprovidedMessage("revokeAccount"), + ); +}); + +test("a provided member is the one called, and every call to it is recorded", async () => { + const revoked: string[] = []; + const stub = stubBroker({ + grantIsLocal: true, + authorizations: null, + revokeAccount: async (id) => { + revoked.push(id); + }, + accountName: async () => "Ada", + }); + await stub.broker.revokeAccount("ca_1"); + expect(await stub.broker.accountName({ account, toolkit: "gmail" })).toBe( + "Ada", + ); + expect(revoked).toEqual(["ca_1"]); + expect(stub.calls).toEqual([ + { member: "revokeAccount", args: ["ca_1"] }, + { member: "accountName", args: [{ account, toolkit: "gmail" }] }, + ]); + stub.expectNothingUnprovidedReached(); +}); + +test("the declarations are passed through as given, never defaulted", () => { + const stub = stubBroker({ grantIsLocal: false, authorizations: null }); + expect(stub.broker.grantIsLocal).toBe(false); + expect(stub.broker.authorizations).toBeNull(); +}); + +/* + * THE TYPE PINS. These fail `typecheck:tests` if the factory ever starts defaulting a declaration or + * accepting a member of the wrong shape — and fail it the other way, on an unused directive, if the + * error they expect goes away. + */ +// @ts-expect-error - grantIsLocal is a declaration the test must make. +const _withoutGrantIsLocal = () => stubBroker({ authorizations: null }); +// @ts-expect-error - authorizations is a declaration the test must make, even when it is null. +const _withoutAuthorizations = () => stubBroker({ grantIsLocal: true }); +const _wrongShape = () => + stubBroker({ + grantIsLocal: true, + authorizations: null, + // @ts-expect-error - revokeAccount answers Promise, not a boolean. + revokeAccount: () => true, + }); +const _typedAsSeam: () => ConnectedAppBroker = () => + stubBroker({ grantIsLocal: true, authorizations: null }).broker; diff --git a/server/tests/support/constraints.ts b/server/tests/support/constraints.ts new file mode 100644 index 000000000..93d16da63 --- /dev/null +++ b/server/tests/support/constraints.ts @@ -0,0 +1,43 @@ +// server/tests/support/constraints.ts +// +// What a CHECK constraint ACTUALLY says in the database the tests are pointed at. +// +// A test that inserts a junk value and reads back the name of the constraint that refused it says +// two things: the constraint exists, and it refuses that one value. It says nothing about the +// roster, so widening one — `IN ('composio', 'arcade')` grown a third member nobody reviewed — +// leaves every such test green. That is a real failure mode and not a hypothetical: it is what a +// mutation of `0057_arcade_provider.sql` did, with the schema guards all passing. +// +// So ask postgres for the predicate itself. `pg_get_constraintdef` renders what the server stores, +// whatever spelling the migration used to write it, which also means the comparison survives +// `IN (...)` being recorded as `= ANY (ARRAY[...])`. +import { sql } from "drizzle-orm"; +import type { createDatabase } from "../../src/db/client"; + +type Database = ReturnType; + +/** + * The string literals a CHECK constraint names, sorted, so a test can pin the roster exactly. + * + * Throws when no CHECK of that name exists, because a renamed or missing constraint is the louder + * half of the same mistake and must not read as an empty roster that an `toEqual([])` could match. + */ +export const checkRoster = async ( + database: Database, + constraint: string, +): Promise => { + const rows = await database.execute(sql` + SELECT pg_get_constraintdef(oid) AS definition + FROM pg_constraint + WHERE conname = ${constraint} AND contype = 'c' + `); + const definition = rows[0]?.definition as string | undefined; + if (!definition) { + throw new Error( + `no CHECK constraint named "${constraint}" in this database; it was renamed, dropped, or its migration never ran`, + ); + } + return [...definition.matchAll(/'((?:[^']|'')*)'/g)] + .map((match) => match[1]!.replace(/''/g, "'")) + .sort(); +}; diff --git a/server/tests/support/people.ts b/server/tests/support/people.ts new file mode 100644 index 000000000..57cb83107 --- /dev/null +++ b/server/tests/support/people.ts @@ -0,0 +1,60 @@ +// server/tests/support/people.ts +// +// `users` rows for the ids a test is about. +// +// Several tables name `users.id` and carry the foreign key that says so, and `pending_authorizations` +// is now one of them — both `actor_id` and `user_id` cascade from it. A test that invented an actor +// id and inserted an attempt under it was relying on a column that named a table and did not hold +// anybody to it; once the key exists, the row the test is actually about cannot be written until the +// person it names exists. That is the constraint doing its job, not the test being awkward, so the +// seeding lives in one place rather than being spelled eight different ways across the arcade files. +import { sql } from "drizzle-orm"; +// `../../src`, not `../src`: this file is one level deeper than the test files it serves. The +// sibling `constraints.ts` has the shallow spelling, which resolves to nothing and silently leaves +// its `Database` as `any` — it is in `typecheck-baseline.txt` as debt, and not a spelling to copy. +import type { createDatabase } from "../../src/db/client"; + +type Database = ReturnType; + +/** + * Make sure a `users` row exists for each id, inventing the rest of the person. + * + * Idempotent on the id, because a suite that seeds the same actor in `beforeAll` and again inside a + * case should not fail on the second call — and because `email` is unique, so the email is derived + * from the id rather than from a counter that two files would collide on. + * + * Does NOT clean up after itself: the caller owns the lifetime, and the cascade this exists for + * means deleting the person is also how a caller deletes everything hanging off them. + */ +export const seedPeople = async ( + database: Database, + ids: readonly string[], +): Promise => { + const unique = [...new Set(ids)].filter((id) => id.length > 0); + if (unique.length === 0) return; + for (const id of unique) { + await database.execute(sql` + INSERT INTO users (id, email, name, email_verified) + VALUES (${id}, ${`${id}@example.invalid`}, ${id}, true) + ON CONFLICT (id) DO NOTHING + `); + } +}; + +/** One person, for the common case where a test names exactly one. */ +export const seedPerson = async ( + database: Database, + id: string, +): Promise => seedPeople(database, [id]); + +/** Remove the people a test seeded, taking everything keyed to them with it. */ +export const removePeople = async ( + database: Database, + ids: readonly string[], +): Promise => { + const unique = [...new Set(ids)].filter((id) => id.length > 0); + if (unique.length === 0) return; + for (const id of unique) { + await database.execute(sql`DELETE FROM users WHERE id = ${id}`); + } +}; diff --git a/server/tests/support/source-scan.test.ts b/server/tests/support/source-scan.test.ts new file mode 100644 index 000000000..db402af9b --- /dev/null +++ b/server/tests/support/source-scan.test.ts @@ -0,0 +1,145 @@ +// server/tests/support/source-scan.test.ts +/** + * Contract test for the shared scanner, written against the ENUMERATOR rather than the matcher. + * + * Every guard that grew its own copy of these primitives also grew a positive control, and every + * one of those controls plants its offender in a file the enumerator already visits. A control + * sited that way can only ever prove the pattern matches; it is structurally incapable of noticing + * that the walk never reached the file, that the extension filter excluded it, that the line number + * it reported was off by the height of a block comment, or that the offending expression was + * wrapped across two physical lines. So the cases below are the ones no guard's own control can + * reach: they build a fixture tree on disk, with nesting, extensions and formatting the real + * sources may grow at any time, and ask the util what it sees. + */ +import { afterAll, beforeAll, expect, test } from "bun:test"; +import { mkdirSync, mkdtempSync, rmSync, writeFileSync } from "node:fs"; +import { tmpdir } from "node:os"; +import { join } from "node:path"; +import { logicalLines, sourceFiles, stripComments } from "./source-scan"; + +let root = ""; + +/** Write `text` at `rel` under the fixture root, creating the directories it needs. */ +function fixture(rel: string, text: string): string { + const full = join(root, rel); + mkdirSync(join(full, ".."), { recursive: true }); + writeFileSync(full, text, "utf8"); + return full; +} + +/** Paths relative to the fixture root, so an assertion reads as the tree it describes. */ +function scan(exts: string[]): string[] { + return sourceFiles(root, exts).map((p) => p.slice(root.length + 1)); +} + +const ALL = [".ts", ".tsx", ".js", ".jsx", ".mjs"]; + +beforeAll(() => { + root = mkdtempSync(join(tmpdir(), "source-scan-")); + fixture("top.ts", "export const a = 1;\n"); + fixture("plain.js", "export const b = 2;\n"); + fixture("widget.jsx", "export const C = () => null;\n"); + fixture("module.mjs", "export const d = 4;\n"); + fixture("notes.md", "not source\n"); + fixture("nested/deep/buried.ts", "export const e = 5;\n"); + fixture("nested/index.ts", "export const f = 6;\n"); + fixture("other/index.ts", "export const g = 7;\n"); +}); + +afterAll(() => { + if (root) rmSync(root, { recursive: true, force: true }); +}); + +/* 1-4: WHAT THE WALK REACHES. Each of these is a file a non-recursive, .ts-only enumerator drops + * on the floor while its guard reports green. */ + +test("a .js file is enumerated", () => { + expect(scan(ALL)).toContain("plain.js"); + // And the extension list is honoured, so a guard that asks for .ts only still gets .ts only. + expect(scan([".ts"])).not.toContain("plain.js"); +}); + +test("a .jsx file is enumerated", () => { + expect(scan(ALL)).toContain("widget.jsx"); + expect(scan([".tsx"])).not.toContain("widget.jsx"); +}); + +test("an .mjs file is enumerated", () => { + expect(scan(ALL)).toContain("module.mjs"); + expect(scan(ALL)).not.toContain("notes.md"); +}); + +test("a file in a nested subdirectory is enumerated", () => { + expect(scan(ALL)).toContain(join("nested", "deep", "buried.ts")); + // The whole point: the directory the old enumerators stopped at holds more than it shows. + expect(scan(ALL).length).toBeGreaterThan(5); +}); + +/* 5: WHAT A LINE IS. */ + +test("a prettier-wrapped expression is one logical line", () => { + const src = [ + "const keep =", + " typeof search.x ===", + ' "string";', + "const other = 1;", + ].join("\n"); + const lines = logicalLines(src); + const wrapped = lines[0]; + expect(wrapped.line).toBe(1); + expect(wrapped.text).toMatch(/typeof\s+search\.x\s*===\s*"string"/); + // And it did not swallow the statement after it. + expect(lines[1]).toEqual({ line: 4, text: "const other = 1;" }); +}); + +/* 6-8: WHAT THE STRIPPER LEAVES BEHIND. */ + +test("a trailing comment does not remove its own code line", () => { + const src = 'const url = "composio://gmail"; // the scheme\n'; + const stripped = stripComments(src); + expect(stripped).toContain('const url = "composio://gmail";'); + expect(stripped).not.toContain("the scheme"); + // A stripper that drops the whole line would have failed its guard on a line holding no offence. + expect(logicalLines(stripped)[0].text.trim()).toBe( + 'const url = "composio://gmail";', + ); +}); + +test("a block comment spanning lines preserves subsequent line numbers", () => { + const src = [ + "/*", + " * three lines of prose", + " */", + 'const url = "arcade://gmail";', + ].join("\n"); + const stripped = stripComments(src); + expect(stripped.split("\n").length).toBe(4); + const offender = logicalLines(stripped).find((l) => + /arcade:\/\//.test(l.text), + ); + // 4, as the file reads it — not 1, which is what blanking a block comment to "" reports. + expect(offender?.line).toBe(4); +}); + +test("a same-line offence after whitespace is still visible", () => { + const src = ' /* why */ const url = "arcade://gmail"; /* trailing */\n'; + const stripped = stripComments(src); + expect(stripped).toContain('const url = "arcade://gmail";'); + expect(stripped).not.toContain("why"); + expect(stripped).not.toContain("trailing"); + // Columns are preserved too, so the code sits where it sat. + expect(stripped.split("\n")[0].length).toBe(src.length - 1); + expect(logicalLines(stripped)[0].line).toBe(1); +}); + +/* 9: WHAT A FILE IS CALLED. */ + +test("a duplicate-name decoy does not collide", () => { + const found = scan(ALL).filter((p) => p.endsWith("index.ts")); + expect(found.sort()).toEqual([ + join("nested", "index.ts"), + join("other", "index.ts"), + ]); + // Two distinct files with one basename: an enumerator keyed on the name would report one. + expect(new Set(found).size).toBe(2); +}); diff --git a/server/tests/support/source-scan.ts b/server/tests/support/source-scan.ts new file mode 100644 index 000000000..ad776a671 --- /dev/null +++ b/server/tests/support/source-scan.ts @@ -0,0 +1,168 @@ +// server/tests/support/source-scan.ts +/** + * The four primitives every text-scanning guard needs, in one place: enumerate the files, strip the + * comments, split into lines a pattern can be matched against. + * + * WHY THIS EXISTS. Five guards each grew their own copy of these, and every copy had the same shape + * of blind spot — not in the pattern it matches, but in the text it ever gets to see: + * + * - a NON-RECURSIVE `readdirSync`, so a rule stated over a directory silently stops at the first + * subdirectory somebody adds. {@link sourceFiles} walks. + * - a comment stripper that replaces a block comment with `""`, NEWLINES AND ALL, so every line + * after it is reported at the wrong number — or one that drops whole lines, which turns a + * trailing `// note` into the removal of the code it trails and can fail a guard on a line that + * holds no offence. {@link stripComments} blanks a comment in place: same bytes out as in, minus + * the comment, with every newline where it was. + * - a per-PHYSICAL-line match, so a prettier-wrapped `typeof search.x ===\n"string"` is two lines + * to the guard and one expression to the compiler, and the guard sees neither half. + * {@link logicalLines} joins a wrapped expression back up and reports the line it STARTED on. + * + * Each guard's positive control plants its offender in a file the enumerator already visits, which + * is exactly why none of these were caught by the controls: a control sited that way proves the + * matcher and says nothing about the enumerator. `source-scan.test.ts` is the contract test for the + * enumerator half, over fixtures it writes itself. + */ +import { readdirSync } from "node:fs"; +import { join } from "node:path"; + +/** + * Every file under `root` whose name ends in one of `exts`, RECURSIVELY, sorted. + * + * Sorted so an offender list is stable, and recursive so `src/plugins//x.ts` is scanned the day + * it lands rather than the day somebody notices. Symlinks are not followed (a `node_modules` link is + * not source). + */ +export function sourceFiles(root: string, exts: string[]): string[] { + const out: string[] = []; + for (const entry of readdirSync(root, { withFileTypes: true })) { + const full = join(root, entry.name); + if (entry.isDirectory()) out.push(...sourceFiles(full, exts)); + else if (exts.some((ext) => entry.name.endsWith(ext))) out.push(full); + } + return out.sort(); +} + +/** + * Line and block comments removed, EVERY OTHER BYTE POSITION LEFT ALONE. + * + * A comment is overwritten with spaces and its newlines are kept, so line numbers — and columns — + * are those of the real file. String literals are copied through untouched, so a `"// not a + * comment"` or an `"https://host"` inside a string survives; a single- or double-quoted string is + * taken to end at a newline, as it does in the language. Regex literals are not parsed, which is the + * known limit: a regex holding `//` or `/*` can still be read as a comment. + */ +export function stripComments(text: string): string { + let out = ""; + let i = 0; + while (i < text.length) { + const c = text[i]; + if (c === '"' || c === "'" || c === "`") { + let j = i + 1; + while (j < text.length) { + if (text[j] === "\\") { + j += 2; + continue; + } + if (text[j] === c) { + j++; + break; + } + if (c !== "`" && text[j] === "\n") break; + j++; + } + out += text.slice(i, j); + i = j; + } else if (c === "/" && text[i + 1] === "/") { + while (i < text.length && text[i] !== "\n") { + out += " "; + i++; + } + } else if (c === "/" && text[i + 1] === "*") { + const end = text.indexOf("*/", i + 2); + const stop = end === -1 ? text.length : end + 2; + for (; i < stop; i++) out += text[i] === "\n" ? "\n" : " "; + } else { + out += c; + i++; + } + } + return out; +} + +/** A logical line, and the 1-based PHYSICAL line it started on. */ +export type LogicalLine = { line: number; text: string }; + +/** Brackets opened and not closed on this line, strings skipped. */ +function bracketDelta(line: string): number { + let delta = 0; + let i = 0; + while (i < line.length) { + const c = line[i]; + if (c === '"' || c === "'" || c === "`") { + i++; + while (i < line.length && line[i] !== c) i += line[i] === "\\" ? 2 : 1; + i++; + continue; + } + if (c === "(" || c === "[") delta++; + else if (c === ")" || c === "]") delta--; + i++; + } + return delta; +} + +/** Ends on something that cannot end a statement, so the expression continues on the next line. */ +const DANGLING = /(?:=>|[-+*%<>=!&|?:.,^~])$/; + +/** + * The most physical lines one logical line may absorb. + * + * A wrapped EXPRESSION is short — prettier breaks at 80 columns, so the two or three lines of a + * `typeof x ===` / `"string"` or an `eq(` / arg / arg / `)` are the whole population this exists + * for. A bracket, by contrast, can stay open for the length of a route handler, and joining a + * hundred-line `routes.get("/", …)` into one line would report every offence inside it at the + * handler's first line and splice its docblocks onto its code. So the join stops here and the + * remaining lines start a new logical line: a long call is read as the many lines it is written on, + * which is what the old per-physical-line scan did anyway. + */ +const MAX_JOIN = 5; + +/** + * Physical lines joined back into the expressions they were wrapped out of. + * + * Prettier breaks a long expression at an operator or inside a bracket, so `typeof search.x ===` + * and `"string"` are one decision written on two lines. A guard matching per physical line sees + * neither half and reports green. Lines are joined with a single space while a bracket is open or + * the line ends dangling, for at most {@link MAX_JOIN} physical lines; `{` and `}` are NOT counted, + * so a block body stays many logical lines rather than collapsing into one. Comments do not get a + * vote on where a logical line ends — their brackets and their trailing operators are discounted, + * though their text is kept in the joined line, since whether prose is an offence is the caller's + * rule and not this function's. The reported `line` is where the logical line STARTED, which is the + * line a reader is sent to. + */ +export function logicalLines(text: string): LogicalLine[] { + const out: LogicalLine[] = []; + const physical = text.split("\n"); + let start = 0; + let buffer = ""; + let depth = 0; + let open = false; + for (let i = 0; i < physical.length; i++) { + const raw = physical[i]; + if (!open) { + start = i; + buffer = raw; + depth = 0; + } else { + buffer += ` ${raw.trim()}`; + } + const code = stripComments(raw); + depth += bracketDelta(code); + open = depth > 0 || DANGLING.test(code.trimEnd()); + if (open && i - start + 1 >= MAX_JOIN) open = false; + if (open && i < physical.length - 1) continue; + out.push({ line: start + 1, text: buffer }); + open = false; + } + return out; +} diff --git a/server/tests/support/stub-broker.ts b/server/tests/support/stub-broker.ts new file mode 100644 index 000000000..16aadc51e --- /dev/null +++ b/server/tests/support/stub-broker.ts @@ -0,0 +1,117 @@ +// server/tests/support/stub-broker.ts +/** + * A `ConnectedAppBroker` test double whose every member the test did not provide FAILS LOUDLY. + * + * WHY THIS EXISTS. Broker stubs drifted from the seam in two ways, and the type checker saw + * neither: + * + * - CAST PAST THE TYPE. `{ … } as unknown as ConnectedAppBroker` or `{} as ConnectedAppBroker` + * makes a stub that omits `revoke` and `revokeAccount` compile. The compiler's guarantee is + * gone exactly as it was when a broken `import type` degraded the type to `any` (round-2 C8). + * `broker-stub-ratchet.test.ts` stops new casts; this factory is what to write instead. + * - A PLAUSIBLE DEFAULT. `revokeAccount: async () => {}` type-checks and answers "done" for a + * revoke that never happened. A test can then pass on a fiction, and the revoke seam is the + * one this PR's Claim 2 is about. + * + * So the factory takes the members a test actually means, and everything else becomes a member + * that RECORDS that it was reached and THROWS. This hoists round-2 C8a's `unasked` pattern into one + * place: a throw alone is only as loud as the path that receives it — a `catch` in production + * swallows it and the test passes — which is why each reach is also recorded, and + * {@link BrokerStub.expectNothingUnprovidedReached} (run it in an `afterEach`) reads the record. + * + * WHAT THE SIGNATURE FORCES. + * + * - `grantIsLocal` and `authorizations` are REQUIRED. They are declarations, not behaviour; the + * seam makes a broker SAY them (see `ConnectedAppBroker.authorizations`), and a factory that + * defaulted them would reintroduce the plausible-default defect one field along. + * - Every method is optional, and an omitted one throws. There is no default that returns a + * value, on purpose: a test that needs `revokeAccount` to succeed writes that, in its own file, + * where a reviewer reads it. + * - The result is built as a `ConnectedAppBroker` OBJECT LITERAL with no cast, so adding a member + * to the seam fails `typecheck:tests` here until the factory learns it, instead of every stub + * in the suite silently lacking it. + * + * Every call to a PROVIDED member is recorded too, in {@link BrokerStub.calls}, so an honest stub + * that wants to assert "revokeAccount was asked for ca_1" does not have to hand-roll a recorder. + */ +import { expect } from "bun:test"; +import type { ConnectedAppBroker } from "../../src/plugins/broker"; + +/** The members a broker DECLARES rather than does. Required: there is no honest default. */ +type Declared = "grantIsLocal" | "authorizations"; + +/** What a test hands {@link stubBroker}: the declarations, plus whichever methods it means. */ +export type StubBrokerInput = Pick & + Partial>; + +/** The name of a broker method, i.e. every member that is not a declaration. */ +export type BrokerMethod = Exclude; + +export type BrokerStub = { + /** The double itself, typed as the seam with no cast. */ + broker: ConnectedAppBroker; + /** Every call to a member the test PROVIDED, in order. */ + calls: Array<{ member: BrokerMethod; args: unknown[] }>; + /** Every call to a member the test did NOT provide, in order — each of which also threw. */ + unprovided: BrokerMethod[]; + /** Asserts no unprovided member was reached since the last check, and clears the record. */ + expectNothingUnprovidedReached(): void; +}; + +/** The sentence an unprovided member throws, exported so a test can match it exactly. */ +export function unprovidedMessage(member: BrokerMethod): string { + return `stubBroker: production reached broker.${member}, which this test did not provide`; +} + +export function stubBroker(input: StubBrokerInput): BrokerStub { + const calls: BrokerStub["calls"] = []; + const unprovided: BrokerMethod[] = []; + + /** + * The provided member, recorded; or, when absent, a member that records and throws. + * + * The throw is SYNCHRONOUS. Every broker method returns a promise, so an `await` sees it the + * same as a rejection, while a fire-and-forget `.catch(() => {})` cannot swallow it. + */ + function member unknown>( + name: BrokerMethod, + provided: F | undefined, + ): ((...args: Parameters) => ReturnType) | (() => never) { + if (provided === undefined) { + return () => { + unprovided.push(name); + throw new Error(unprovidedMessage(name)); + }; + } + return (...args: Parameters) => { + calls.push({ member: name, args }); + return provided(...args) as ReturnType; + }; + } + + const broker: ConnectedAppBroker = { + grantIsLocal: input.grantIsLocal, + authorizations: input.authorizations, + grantsFor: member("grantsFor", input.grantsFor), + authProviderOf: member("authProviderOf", input.authProviderOf), + listApps: member("listApps", input.listApps), + ensureAuthConfig: member("ensureAuthConfig", input.ensureAuthConfig), + deleteAuthConfig: member("deleteAuthConfig", input.deleteAuthConfig), + authorize: member("authorize", input.authorize), + isConnected: member("isConnected", input.isConnected), + revoke: member("revoke", input.revoke), + connectionFields: member("connectionFields", input.connectionFields), + connectWithFields: member("connectWithFields", input.connectWithFields), + revokeAccount: member("revokeAccount", input.revokeAccount), + accountName: member("accountName", input.accountName), + }; + + return { + broker, + calls, + unprovided, + expectNothingUnprovidedReached() { + expect(unprovided.splice(0)).toEqual([]); + }, + }; +} diff --git a/server/tests/test-network-guard.test.ts b/server/tests/test-network-guard.test.ts new file mode 100644 index 000000000..c17e9640d --- /dev/null +++ b/server/tests/test-network-guard.test.ts @@ -0,0 +1,450 @@ +import { describe, expect, test } from "bun:test"; +import dgram from "node:dgram"; +import http, { request as namedHttpRequest } from "node:http"; +import http2 from "node:http2"; +import https, { get as namedHttpsGet } from "node:https"; +import net from "node:net"; +import tls from "node:tls"; +import { createComposioClient } from "../src/plugins/composio-adapter"; + +/** + * The guard that makes a live vendor call impossible, asserted rather than assumed — ONE ENTRY + * POINT AT A TIME. + * + * `server/scripts/test-network-guard.ts` runs from the preload, before any test file is imported. + * Its first version patched `globalThis.fetch` and `http(s).request` only, and this file asserted + * it through `fetch` only, so it stayed green while `https.get` returned 200 from example.com and + * `Bun.fetch` was not guarded at all. A guard is exactly as wide as the entry points its test + * plants a call through, so every entry point a test file could open a connection with is planted + * below, separately, and each one must end in a refusal the GUARD recorded during THAT call. + * + * Why the record rather than the error: a refusal does not always reach the caller as itself (the + * Composio SDK retries and says "Connection error.", and a native `Bun.fetch` sees the refusing + * proxy's 403), and an error alone cannot tell a guarded call from a dialled one that failed. Why + * only the entries recorded during the call: the record is process-wide, so a check against the + * whole of it would be satisfied by whichever earlier test happened to be refused. + * + * example.com is the far side throughout: the assertion is that NOTHING is dialled, so the address + * should be one no product code would ever have reason to reach. + */ + +const FAR = "example.com"; + +/** Runs one planted call and returns what it came to and what the guard recorded while it ran. */ +async function plant( + call: () => unknown, +): Promise<{ outcome: string; refused: string[] }> { + const record = globalThis.openbotTestNetworkRefusals; + if (!record) throw new Error("the network guard did not install its record"); + const before = record.length; + let outcome: string; + try { + const value = await call(); + outcome = + value instanceof Response + ? `response ${value.status} ${value.headers.get("x-openbot-test-network-guard") ?? "unguarded"}` + : "returned"; + } catch (error) { + outcome = `threw: ${error instanceof Error ? error.message : String(error)}`; + } + return { outcome, refused: record.slice(before) }; +} + +const refusedCall = "Tests do not use the network"; + +/** + * What a caller of a NATIVE fetch sees when the refusing proxy turns it away. That text is not the + * guard's: over https the runtime reports the proxy's 403 itself, and how it words it differs by + * platform and version (macOS bun 1.4.2 hands back the guard's own 403 response; CI's Linux runner + * throws "Proxy refused to open a tunnel: 403 Forbidden"). So the outcome is pinned only as far as + * the guard owns it: EITHER the guard's own 403, carrying its header, OR a throw — never a response + * the guard did not write. A call that had really been dialled ends in such a response (the red at + * the C7 base was "response 404 unguarded"). That the GUARD stopped it is then asserted on the + * guard's record, which its proxy writes only when the request was handed to it. + */ +const refusedByProxy = /^(response 403 refused|threw: .+)$/s; + +/** Each entry point, the call it plants, the outcome the caller sees and the target recorded. */ +const entryPoints: Array<[string, () => unknown, string | RegExp, string]> = [ + [ + "globalThis.fetch", + () => fetch(`https://${FAR}/x`), + refusedCall, + `https://${FAR}/x`, + ], + [ + "Bun.fetch", + () => Bun.fetch(`https://${FAR}/x`), + refusedByProxy, + `https://${FAR}`, + ], + [ + "Bun.fetch over http", + () => Bun.fetch(`http://${FAR}/x`), + refusedByProxy, + `http://${FAR}/x`, + ], + [ + "undici fetch", + () => + (require("undici") as { fetch: typeof fetch }).fetch(`https://${FAR}/x`), + refusedByProxy, + `https://${FAR}`, + ], + [ + "undici request", + async () => { + const { statusCode, headers } = await ( + require("undici") as { + request: (url: string) => Promise<{ + statusCode: number; + headers: Record; + }>; + } + ).request(`https://${FAR}/x`); + return new Response(null, { status: statusCode, headers }); + }, + refusedByProxy, + `https://${FAR}`, + ], + ["http.request", () => http.request(`http://${FAR}/x`), refusedCall, FAR], + [ + "https.request", + () => https.request({ hostname: FAR, path: "/x" }), + refusedCall, + FAR, + ], + ["http.get", () => http.get(`http://${FAR}/x`), refusedCall, FAR], + ["https.get", () => https.get(`https://${FAR}/x`), refusedCall, FAR], + [ + "named import of https.get", + () => namedHttpsGet(`https://${FAR}/x`), + refusedCall, + FAR, + ], + [ + "http.ClientRequest", + () => new http.ClientRequest(`http://${FAR}/x`), + refusedCall, + FAR, + ], + ["net.connect", () => net.connect(80, FAR), refusedCall, `socket ${FAR}`], + [ + "net.Socket#connect", + () => new net.Socket().connect({ host: FAR, port: 80 }), + refusedCall, + `socket ${FAR}`, + ], + [ + "tls.connect", + () => tls.connect(443, FAR, { servername: FAR }), + refusedCall, + `socket ${FAR}`, + ], + [ + "Bun.connect", + () => Bun.connect({ hostname: FAR, port: 80, socket: { data() {} } }), + refusedCall, + `socket ${FAR}`, + ], + [ + "http2.connect", + () => http2.connect(`https://${FAR}`), + refusedCall, + `http2 ${FAR}`, + ], + [ + "WebSocket", + () => new WebSocket(`wss://${FAR}/x`), + refusedCall, + `wss://${FAR}/x`, + ], + [ + "ws WebSocket", + () => + new (require("ws") as { WebSocket: typeof WebSocket }).WebSocket( + `wss://${FAR}/x`, + ), + refusedCall, + `wss://${FAR}/x`, + ], + [ + "dgram send", + () => { + const socket = dgram.createSocket("udp4"); + try { + socket.send("x", 9, FAR); + } finally { + socket.close(); + } + }, + refusedCall, + `udp ${FAR}`, + ], + [ + "Bun.udpSocket send", + async () => { + const socket = await Bun.udpSocket({}); + try { + socket.send("x", 9, FAR); + } finally { + socket.close(); + } + }, + refusedCall, + `udp ${FAR}`, + ], +]; + +describe("the test network guard refuses a host that is not loopback, through", () => { + test.each(entryPoints)("%s", async (_name, call, seen, target) => { + const { outcome, refused } = await plant(call); + + // A string is matched as a substring, a pattern as itself. + expect(outcome).toMatch(seen); + expect(refused).toEqual([target]); + }); +}); + +describe("the test network guard lets the suite reach what the suite owns", () => { + test("a loopback HTTP server, through fetch, Bun.fetch and node:http", async () => { + const server = Bun.serve({ port: 0, fetch: () => new Response("local") }); + try { + const { outcome, refused } = await plant(async () => { + const answers = [ + await (await fetch(`http://127.0.0.1:${server.port}/`)).text(), + await (await Bun.fetch(`http://localhost:${server.port}/`)).text(), + await new Promise((resolve, reject) => { + http + .get(`http://127.0.0.1:${server.port}/`, (response) => { + let body = ""; + response.on("data", (chunk) => (body += chunk)); + response.on("end", () => resolve(body)); + }) + .on("error", reject); + }), + ]; + return answers.join(","); + }); + + expect(outcome).toBe("returned"); + expect(refused).toEqual([]); + } finally { + await server.stop(true); + } + }); + + test("a loopback socket, through net.connect", async () => { + const listener = net.createServer((socket) => socket.end("local")); + await new Promise((resolve) => + listener.listen(0, "127.0.0.1", resolve), + ); + const { port } = listener.address() as net.AddressInfo; + try { + const { outcome, refused } = await plant( + () => + new Promise((resolve, reject) => { + const socket = net.connect(port, "127.0.0.1"); + let body = ""; + socket.on("data", (chunk) => (body += chunk)); + socket.on("end", () => resolve(body)); + socket.on("error", reject); + }), + ); + + expect(outcome).toBe("returned"); + expect(refused).toEqual([]); + } finally { + listener.close(); + } + }); + + /** + * The database is the one far NAME a raw socket may reach without its lookup being checked, + * because it is deployment configuration rather than a vendor. `home.arpa` (RFC 8375) never + * resolves in public DNS, so the connection fails in DNS — and the point is that it got as far as + * DNS instead of being refused. Not `.invalid`: that is a special-use name the guard lets through + * on its own terms, so a case aimed at one could not tell whether the database allowance exists. + */ + test("the configured database host, through a raw socket", async () => { + const configured = process.env.TEST_DATABASE_URL; + process.env.TEST_DATABASE_URL = + "postgres://u:p@db.openbot.home.arpa:5432/x"; + try { + const { outcome, refused } = await plant( + () => + new Promise((_resolve, reject) => { + net.connect(5432, "db.openbot.home.arpa").on("error", reject); + }), + ); + + expect(outcome).not.toContain(refusedCall); + expect(refused).toEqual([]); + } finally { + if (configured === undefined) delete process.env.TEST_DATABASE_URL; + else process.env.TEST_DATABASE_URL = configured; + } + }); +}); + +/** + * A suite whose SUBJECT is the socket layer — `agent-computer`'s egress filter, which proves it + * pins the address it checked, falls back, and gives up on one that never answers — has to open + * sockets at addresses that are not loopback. The guard lets through only what cannot be a vendor: + * a literal address the public internet does not route, and a reserved special-use name (RFC 6761) + * ONLY when what it resolves to is such an address. Each allowance is planted next to the far + * address it must still refuse, so widening it into "anything goes" turns these red. + */ +describe("the test network guard judges a socket by the address it reaches", () => { + /** A `lookup` that answers one address, in both shapes the runtime asks for (Bun asks `all`). */ + function answering(address: string): net.LookupFunction { + return (( + _host: string, + options: { all?: boolean } | undefined, + callback: (...args: unknown[]) => void, + ) => + options?.all + ? callback(null, [{ address, family: 4 }]) + : callback(null, address, 4)) as unknown as net.LookupFunction; + } + + /** Settles on connect, on a short wait (an unroutable address may hang), or rejects on error. */ + function dial(open: () => net.Socket): Promise { + return new Promise((resolve, reject) => { + const socket = open(); + const timer = setTimeout(() => { + socket.destroy(); + resolve("pending"); + }, 200); + socket.once("connect", () => { + clearTimeout(timer); + const reached = `connected ${socket.remoteAddress}`; + socket.destroy(); + resolve(reached); + }); + socket.once("error", (error) => { + clearTimeout(timer); + socket.destroy(); + reject(error); + }); + }); + } + + test("an unroutable private address is let through; a public one and the metadata service are not", async () => { + const privately = await plant(() => + dial(() => net.connect({ host: "10.255.255.1", port: 9 })), + ); + expect(privately.outcome).not.toContain(refusedCall); + expect(privately.refused).toEqual([]); + + const publicly = await plant(() => + dial(() => net.connect({ host: "93.184.215.14", port: 80 })), + ); + expect(publicly.outcome).toContain(refusedCall); + expect(publicly.refused).toEqual(["socket 93.184.215.14"]); + + const metadata = await plant(() => + dial(() => net.connect({ host: "169.254.169.254", port: 80 })), + ); + expect(metadata.outcome).toContain(refusedCall); + expect(metadata.refused).toEqual(["socket 169.254.169.254"]); + }); + + test("a .test name is let through when its lookup answers loopback", async () => { + const listener = net.createServer((socket) => socket.end()); + await new Promise((resolve) => + listener.listen(0, "127.0.0.1", resolve), + ); + const { port } = listener.address() as net.AddressInfo; + try { + let reached = ""; + const { refused } = await plant(async () => { + reached = await dial(() => + net.connect({ + host: "pinned.example.test", + port, + lookup: answering("127.0.0.1"), + }), + ); + }); + + expect(reached).toBe("connected 127.0.0.1"); + expect(refused).toEqual([]); + } finally { + listener.close(); + } + }); + + /* + * A reserved name is only reserved in PUBLIC DNS: a `lookup` option (or /etc/hosts) can map it to + * any address at all, which is exactly how a test could smuggle a vendor's address past a + * name-based allowance. Planted through the socket and through a named `node:http` import, which + * the request-layer patch does not reach and which therefore meets only the socket guard. + */ + const smuggle = answering("93.184.215.14"); + + test.each<[string, () => Promise]>([ + [ + "net.connect", + () => + dial(() => + net.connect({ + host: "smuggled.example.test", + port: 80, + lookup: smuggle, + }), + ), + ], + [ + "a named import of http.request", + () => + new Promise((resolve, reject) => { + namedHttpRequest({ + host: "smuggled.example.test", + port: 80, + lookup: smuggle, + }) + .on("response", () => resolve("answered")) + .on("error", reject) + .end(); + }), + ], + ])( + "a .test name whose lookup answers a public address is refused, through %s", + async (_name, call) => { + const { outcome, refused } = await plant(call); + + expect(outcome).toContain(refusedCall); + expect(refused).toEqual([ + "socket smuggled.example.test resolved to 93.184.215.14", + ]); + }, + ); +}); + +/** + * The case the guard was written for, in the shape that defeated the per-file stub: the vendor + * client is constructed with no stub in sight, and its own bound transport is the guard. + */ +test("the test network guard is in force for a vendor SDK that binds its own transport", async () => { + const { broker } = createComposioClient("never-dialled"); + + const { outcome, refused } = await plant(() => + broker.authorize({ + account: { holder: "person", userId: "u", vendorUserId: "u" }, + toolkit: "linear", + returnUrl: "https://openbot.test/settings/connected-accounts/x", + }), + ); + + expect(outcome).not.toBe("returned"); + /* + * ASSERTED ON THE GUARD'S OWN RECORD RATHER THAN THE MESSAGE, because the SDK retries the + * rejected transport and reports "Connection error." — the same sentence a real outage gives, + * so a test that read it could not tell a guarded call from a dialled one that failed. + */ + expect(refused.length).toBeGreaterThan(0); + expect( + refused.every((target) => target.includes("backend.composio.dev")), + ).toBe(true); +}); diff --git a/server/tests/ts-expect-error-coverage.test.ts b/server/tests/ts-expect-error-coverage.test.ts new file mode 100644 index 000000000..453313d62 --- /dev/null +++ b/server/tests/ts-expect-error-coverage.test.ts @@ -0,0 +1,74 @@ +// server/tests/ts-expect-error-coverage.test.ts +/** + * Guard: every test file under `server/tests` that carries a ts-expect-error directive must be named + * in `server/tsconfig.json`'s `include`. + * + * AN UNINCLUDED DIRECTIVE IS NOT A WEAKER ASSERTION, IT IS NO ASSERTION. The directive says "the next + * line must fail to compile", and the only thing that ever checks that is `tsc`. `include` names + * `src`, `scripts` and a handful of test files, and the rest of `tests` is type-checked by nothing, + * so a directive in a file not named there sits in the source asserting nothing while reading to the + * next maintainer as coverage. The wrong-way-round call it guards can compile cleanly for good and no + * one hears about it. + * + * So the convention is: a test file whose subject is a TYPE is named in `include`, one file and not + * the directory (see the comment in the tsconfig). This guard is what makes that enforceable rather + * than remembered. It fails naming each file that is not covered, as `file:line`. + * + * Like `brokered-provenance.test.ts` it reads text and imports nothing from the code it guards. The + * tsconfig is JSONC (its comments are the point), so the comments are stripped with a scan that + * respects strings before it is parsed. + */ +import { expect, test } from "bun:test"; +import { readFileSync } from "node:fs"; +import { join, relative, resolve } from "node:path"; +import { sourceFiles, stripComments } from "./support/source-scan"; + +const SERVER_DIR = resolve(import.meta.dir, ".."); +const TESTS_DIR = join(SERVER_DIR, "tests"); + +/** The directive, in either comment form. A bare mention in prose does not match. */ +const DIRECTIVE = /(\/\/|\/\*)\s*@ts-expect-error\b/; + +function readInclude(): string[] { + const raw = readFileSync(join(SERVER_DIR, "tsconfig.json"), "utf8"); + // The shared stripper does the JSONC: it leaves string contents (and their slashes) alone, and + // blanks a comment in place rather than deleting it, which JSON.parse does not care about and a + // reader comparing the text to the file does. + const include = JSON.parse(stripComments(raw)).include; + if (!Array.isArray(include)) throw new Error("tsconfig.json has no include"); + return include.map((p: string) => resolve(SERVER_DIR, p)); +} + +/** Covered when named exactly, or when it sits under an included directory. */ +function isCovered(file: string, include: string[]): boolean { + return include.some((p) => file === p || file.startsWith(`${p}/`)); +} + +test("every test file carrying a ts-expect-error directive is named in tsconfig include", () => { + const include = readInclude(); + const offenders: string[] = []; + // The shared scanner's walk. Its comment stripper is used above for the JSONC and deliberately + // NOT here: the directive IS a comment, and it binds to the physical line below it, so this is + // the one scan that stays on physical lines rather than logical ones. + for (const file of sourceFiles(TESTS_DIR, [".ts", ".tsx"])) { + if (isCovered(file, include)) continue; + readFileSync(file, "utf8") + .split("\n") + .forEach((line, i) => { + if (DIRECTIVE.test(line)) { + offenders.push(`${relative(SERVER_DIR, file)}:${i + 1}`); + } + }); + } + expect(offenders).toEqual([]); +}); + +test("the directive pattern takes both comment forms and leaves prose", () => { + // The fixtures are assembled so this file does not itself contain the directive it scans for. + const d = "@ts-expect" + "-error"; + expect(DIRECTIVE.test(` // ${d} the call`)).toBe(true); + expect(DIRECTIVE.test(`x(); /* ${d} */`)).toBe(true); + expect( + DIRECTIVE.test(" * the ts-expect-error directive is checked by tsc"), + ).toBe(false); +}); diff --git a/server/tests/typecheck-baseline.txt b/server/tests/typecheck-baseline.txt new file mode 100644 index 000000000..5c8009619 --- /dev/null +++ b/server/tests/typecheck-baseline.txt @@ -0,0 +1,280 @@ +# Frozen type errors in `server/tests`, as reported by +# bunx tsc --noEmit -p server/tsconfig.tests.json +# One line per error: :: error TS: . Column and the indented +# elaboration lines are dropped so the baseline does not churn on reformatting. +# +# This file is a RECORD OF DEBT, not a list of things that are fine. Every line is a real defect +# that the suite could not see because it was never type-checked. Fixing one and deleting its +# line is always correct. ADDING a line is not: a new error means code written today is wrong, +# and the gate exists to say so. Regenerate with `bun scripts/typecheck-tests.ts --update` only +# after a deliberate decision that the new entries are pre-existing debt being surfaced rather +# than debt being created. +# +# Sorted. Duplicates are significant: a repeated line means that many identical errors. +server/tests/account-mode.integration.test.ts:373: error TS2769: No overload matches this call. +server/tests/admin-people-credentials-validation.test.ts:53: error TS2556: A spread argument must either have a tuple type or be passed to a rest parameter. +server/tests/agent-auth-header.test.ts:21: error TS2741: Property 'updateSecret' is missing in type '{ create: () => Promise<{ id: string; revokedAt: null; }>; rotate: (input: CredentialStoreValue & { previousCredentialId: string; }) => Promise<{ id: string; revokedAt: null; }>; revoke: () => Promise<...>; isLive: (id: string) => Promise<...>; findLiveByKey: () => Promise<...>; }' but required in type 'CredentialStore'. +server/tests/agent-endpoint.test.ts:129: error TS2741: Property 'preconnect' is missing in type '() => Promise' but required in type 'typeof fetch'. +server/tests/agent-endpoint.test.ts:142: error TS2741: Property 'preconnect' is missing in type '() => Promise' but required in type 'typeof fetch'. +server/tests/agent-endpoint.test.ts:154: error TS2741: Property 'preconnect' is missing in type '() => Promise' but required in type 'typeof fetch'. +server/tests/agent-endpoint.test.ts:166: error TS2741: Property 'preconnect' is missing in type '() => Promise' but required in type 'typeof fetch'. +server/tests/agent-endpoint.test.ts:179: error TS2741: Property 'preconnect' is missing in type '() => Promise' but required in type 'typeof fetch'. +server/tests/agent-endpoint.test.ts:192: error TS2741: Property 'preconnect' is missing in type '(_url: URL | RequestInfo, init: RequestInit | BunFetchRequestInit | undefined) => Promise' but required in type 'typeof fetch'. +server/tests/agent-endpoint.test.ts:200: error TS2769: No overload matches this call. +server/tests/agent-endpoint.test.ts:223: error TS7006: Parameter 'value' implicitly has an 'any' type. +server/tests/agent-endpoint.test.ts:235: error TS2769: No overload matches this call. +server/tests/agent-endpoint.test.ts:245: error TS7006: Parameter 'value' implicitly has an 'any' type. +server/tests/agent-handoff-endtoend.integration.test.ts:117: error TS2345: Argument of type '{ desk: HandoffDesk; from: { botId: string; actorId: string; runId: string; threadId: string; depth: number; }; hasSomebodyToAsk: true; maxDepth: number; }' is not assignable to parameter of type '{ desk: HandoffDesk; from: RunAssertion; hasSomebodyToAsk: boolean; maxDepth: number; maxPerRun: number; approvalGate?: ApprovalGate | undefined; privateShare?: PrivateShareGate | undefined; }'. +server/tests/agent-handoff-endtoend.integration.test.ts:173: error TS2345: Argument of type '{ desk: HandoffDesk; from: { botId: string; actorId: string; runId: string; threadId: string; depth: number; }; hasSomebodyToAsk: true; maxDepth: number; }' is not assignable to parameter of type '{ desk: HandoffDesk; from: RunAssertion; hasSomebodyToAsk: boolean; maxDepth: number; maxPerRun: number; approvalGate?: ApprovalGate | undefined; privateShare?: PrivateShareGate | undefined; }'. +server/tests/agent-handoff-endtoend.integration.test.ts:217: error TS2345: Argument of type '{ desk: HandoffDesk; from: { botId: string; actorId: string; runId: string; threadId: string; depth: number; }; hasSomebodyToAsk: true; maxDepth: number; }' is not assignable to parameter of type '{ desk: HandoffDesk; from: RunAssertion; hasSomebodyToAsk: boolean; maxDepth: number; maxPerRun: number; approvalGate?: ApprovalGate | undefined; privateShare?: PrivateShareGate | undefined; }'. +server/tests/agent-handoff-endtoend.integration.test.ts:45: error TS2554: Expected 2-3 arguments, but got 1. +server/tests/agent-handoff-endtoend.integration.test.ts:94: error TS2769: No overload matches this call. +server/tests/agent-handoff-tool.test.ts:107: error TS2345: Argument of type '{ desk: HandoffDesk; from: { botId: string; actorId: string; runId: string; threadId: string; depth: number; }; hasSomebodyToAsk: true; maxDepth: number; }' is not assignable to parameter of type '{ desk: HandoffDesk; from: RunAssertion; hasSomebodyToAsk: boolean; maxDepth: number; maxPerRun: number; approvalGate?: ApprovalGate | undefined; privateShare?: PrivateShareGate | undefined; }'. +server/tests/agent-handoff-tool.test.ts:78: error TS2345: Argument of type '{ desk: HandoffDesk; from: { depth: number; botId: string; actorId: string; runId: string; threadId: string; }; hasSomebodyToAsk: true; maxDepth: number; }' is not assignable to parameter of type '{ desk: HandoffDesk; from: RunAssertion; hasSomebodyToAsk: boolean; maxDepth: number; maxPerRun: number; approvalGate?: ApprovalGate | undefined; privateShare?: PrivateShareGate | undefined; }'. +server/tests/agent-handoff.integration.test.ts:34: error TS2554: Expected 2-3 arguments, but got 1. +server/tests/agent-handoff.integration.test.ts:80: error TS2769: No overload matches this call. +server/tests/agent-profile-policy.test.ts:14: error TS2322: Type '{ id: string; name: string; title: string; roleDescription: string; avatarSeed: string; visibility: AgentVisibility; ownerUserId: string | null; ... 7 more ...; hasCallbackToken?: boolean | undefined; }' is not assignable to type 'AgentProfile'. +server/tests/agent-routes.test.ts:36: error TS2322: Type '{ id: string; name: string; title: string; roleDescription: string; avatarSeed: string; visibility: AgentVisibility; ownerUserId: string | null; ... 7 more ...; hasCallbackToken?: boolean | undefined; }' is not assignable to type 'AgentProfile'. +server/tests/agent-routes.test.ts:563: error TS2769: No overload matches this call. +server/tests/agent-routes.test.ts:58: error TS2739: Type '{ list(receivedActor: AgentActor, hidden: boolean | undefined): Promise; get(receivedActor: AgentActor, id: string): Promise<...>; ... 6 more ...; softDelete(receivedActor: AgentActor, id: string): Promise<...>; }' is missing the following properties from type 'AgentProfileStore': issueCallbackToken, revokeCallbackToken, agentForCallbackToken +server/tests/agent-routes.test.ts:703: error TS2769: No overload matches this call. +server/tests/approvals-frontend.test.ts:79: error TS18048: 'message.toolCalls' is possibly 'undefined'. +server/tests/approvals-interactive.integration.test.ts:57: error TS2741: Property 'preconnect' is missing in type '(url: URL | RequestInfo, init: RequestInit | BunFetchRequestInit | undefined) => Promise' but required in type 'typeof fetch'. +server/tests/approvals-native.test.ts:9: error TS2345: Argument of type '(_url: URL | RequestInfo, init: RequestInit | BunFetchRequestInit | undefined) => Promise' is not assignable to parameter of type 'typeof fetch'. +server/tests/approvals-policy.test.ts:702: error TS2353: Object literal may only specify known properties, and 'id' does not exist in type '{ kind: "person"; }'. +server/tests/approvals-question-resume.integration.test.ts:250: error TS2741: Property 'resumeWaiting' is missing in type 'Pick' but required in type 'Pick'. +server/tests/approvals-question-resume.integration.test.ts:261: error TS2741: Property 'resumeWaiting' is missing in type 'Pick' but required in type 'Pick'. +server/tests/approvals.test.ts:155: error TS2322: Type 'Promise<{ id: string; ownerUserId: string; botId: string; toolRef: string; effect: string; scope: string; revokedAt: Date | null; createdAt: Date; }[]>' is not assignable to type 'Promise'. +server/tests/approvals.test.ts:296: error TS2741: Property 'preconnect' is missing in type '() => Promise' but required in type 'typeof fetch'. +server/tests/arcade-authorize-status-engine.test.ts:58: error TS2322: Type 'number | undefined' is not assignable to type 'number'. +server/tests/arcade-confirm-engine.test.ts:41: error TS2322: Type 'number | undefined' is not assignable to type 'number'. +server/tests/arcade-connection-kind-engine.test.ts:85: error TS2322: Type 'number | undefined' is not assignable to type 'number'. +server/tests/arcade-connection-kind-engine.test.ts:87: error TS2322: Type 'Engine | null' is not assignable to type 'Engine'. +server/tests/arcade-empty-vendor-structures-engine.test.ts:51: error TS2322: Type 'number | undefined' is not assignable to type 'number'. +server/tests/arcade-pagination-engine.test.ts:218: error TS2322: Type 'number | undefined' is not assignable to type 'number'. +server/tests/arcade-vendor-error-engine.test.ts:127: error TS2345: Argument of type '{ account: { holder: "person"; userId: string; vendorUserId: string; }; action: string; }' is not assignable to parameter of type '{ account: AccountRef; toolkit: string; returnUrl: string; action?: string | undefined; }'. +server/tests/arcade-vendor-error-engine.test.ts:73: error TS2322: Type 'number | undefined' is not assignable to type 'number'. +server/tests/attachment-routes.test.ts:1121: error TS2322: Type 'Response | Promise' is not assignable to type 'Promise'. +server/tests/attachment-routes.test.ts:1159: error TS2322: Type 'Response | Promise' is not assignable to type 'Promise'. +server/tests/attachment-routes.test.ts:2223: error TS2339: Property 'then' does not exist on type 'Response | Promise'. +server/tests/attachment-routes.test.ts:2224: error TS7006: Parameter 'value' implicitly has an 'any' type. +server/tests/attachment-routes.test.ts:957: error TS2339: Property 'then' does not exist on type 'Response | Promise'. +server/tests/attachment-routes.test.ts:958: error TS7006: Parameter 'value' implicitly has an 'any' type. +server/tests/attachment-store.test.ts:300: error TS2322: Type 'Uint8Array' is not assignable to type 'BlobPart'. +server/tests/attachment-store.test.ts:325: error TS2322: Type 'Uint8Array' is not assignable to type 'BlobPart'. +server/tests/attachment-store.test.ts:350: error TS2322: Type 'Uint8Array' is not assignable to type 'BlobPart'. +server/tests/audit.test.ts:203: error TS2322: Type '(query: AuditEventQuery) => Promise<{ events: { id: string; eventType: string; targetType: string; targetId: string; actorUserId: string; payload: { itemCount: number; }; createdAt: string; }[]; nextCursor: string; }>' is not assignable to type '(query: AuditEventQuery) => Promise<{ events: AuditEvent[]; nextCursor?: string | undefined; }>'. +server/tests/bot-lifecycle-audit.test.ts:184: error TS2769: No overload matches this call. +server/tests/bot-lifecycle-audit.test.ts:301: error TS2345: Argument of type '{ revoke: (id: string) => Promise; }' is not assignable to parameter of type 'Pick'. +server/tests/bot-lifecycle-audit.test.ts:315: error TS2345: Argument of type '{ revoke: (id: string) => Promise; }' is not assignable to parameter of type 'Pick'. +server/tests/bot-lifecycle-audit.test.ts:326: error TS2345: Argument of type '{ revoke: (id: string) => Promise; }' is not assignable to parameter of type 'Pick'. +server/tests/bot-lifecycle-audit.test.ts:335: error TS2345: Argument of type '{ revoke: (id: string) => Promise; }' is not assignable to parameter of type 'Pick'. +server/tests/brokered-app-provider.integration.test.ts:92: error TS2322: Type '{ readSecret: () => Promise; create: () => Promise; updateSecret: () => Promise; revoke: () => Promise; }' is not assignable to type 'CredentialSecretReader & CredentialStore'. +server/tests/channel-routes.test.ts:385: error TS2769: No overload matches this call. +server/tests/channel-routes.test.ts:86: error TS2322: Type '(receivedActor: AgentActor, id: string) => Promise' is not assignable to type '(actor: AgentActor, channelId: string) => Promise'. +server/tests/channel-routes.test.ts:919: error TS2769: No overload matches this call. +server/tests/channel-summary.integration.test.ts:350: error TS2769: No overload matches this call. +server/tests/component-catalogue-entries.test.ts:22: error TS2769: No overload matches this call. +server/tests/component-catalogue.test.ts:21: error TS2769: No overload matches this call. +server/tests/component-decision-functions.test.ts:32: error TS2769: No overload matches this call. +server/tests/component-decision.test.ts:30: error TS2769: No overload matches this call. +server/tests/composio-connection-kinds.test.ts:1909: error TS2769: No overload matches this call. +server/tests/composio-connection-kinds.test.ts:1911: error TS7053: Element implicitly has an 'any' type because expression of type 'any' can't be used to index type 'Record<"key" | "none" | "consent" | "unreadable", Cell>'. +server/tests/composio-connection-kinds.test.ts:1925: error TS2769: No overload matches this call. +server/tests/composio-connection-kinds.test.ts:1927: error TS7053: Element implicitly has an 'any' type because expression of type 'any' can't be used to index type 'Record<"nothing" | "answered" | "unreachable" | "complained", Cell>'. +server/tests/composio-connection-kinds.test.ts:327: error TS2769: No overload matches this call. +server/tests/composio-connection-kinds.test.ts:481: error TS2769: No overload matches this call. +server/tests/composio-connections.test.ts:4438: error TS2769: No overload matches this call. +server/tests/composio-connections.test.ts:4920: error TS2345: Argument of type '{ url: string; provenance: string; vendor: string; }' is not assignable to parameter of type '{ provenance: string; url: string; authScheme: string | null; accountMode?: string | null | undefined; }'. +server/tests/computer-client.test.ts:139: error TS2769: No overload matches this call. +server/tests/computer-download-routes.test.ts:36: error TS2345: Argument of type '(actor: AuthenticatedActor, botId: string) => Promise' is not assignable to parameter of type 'BotAccessCheck'. +server/tests/computer-gateway.test.ts:1147: error TS2554: Expected 1 arguments, but got 3. +server/tests/computer-gateway.test.ts:519: error TS2353: Object literal may only specify known properties, and 'text' does not exist in type 'WriteFileInput'. +server/tests/computer-gateway.test.ts:841: error TS2769: No overload matches this call. +server/tests/computer-policy.test.ts:235: error TS2345: Argument of type '{ tool: { name: string; }; bot: { id: string; }; actor: { id: string; }; page: { url: string; host: string; }; key: string; }' is not assignable to parameter of type 'PolicyContext'. +server/tests/computer-policy.test.ts:245: error TS2345: Argument of type '{ tool: { name: string; }; bot: { id: string; }; actor: { id: string; }; page: { url: string; host: string; }; key: string; }' is not assignable to parameter of type 'PolicyContext'. +server/tests/computer-policy.test.ts:261: error TS2322: Type '{ tool: { name: string; }; bot: { id: string; }; page: { url: string; host: string; }; actor: { id: string; }; element?: { ref: string; role: string; name: string; type?: string; } | undefined; ... 5 more ...; initiator?: { ...; } | undefined; }' is not assignable to type 'PolicyContext'. +server/tests/computer-policy.test.ts:351: error TS2741: Property 'initiator' is missing in type '{ tool: { name: string; }; bot: { id: string; }; actor: { id: string; }; page: { url: string; host: string; }; intent: "navigate"; }' but required in type 'PolicyContext'. +server/tests/computer-policy.test.ts:409: error TS2741: Property 'initiator' is missing in type '{ tool: { name: string; }; bot: { id: string; }; actor: { id: string; }; page: { url: string; host: string; }; element: { ref: string; role: string; name: string; type: string; }; key: string; file: { path: string; name: string; extension: string; }; mcp: { ...; }; }' but required in type 'PolicyContext'. +server/tests/computer-policy.test.ts:465: error TS2741: Property 'initiator' is missing in type '{ tool: { name: string; }; bot: { id: string; }; actor: { id: string; }; page: { url: string; host: string; }; intent: "run_command"; command: string; }' but required in type 'PolicyContext'. +server/tests/computer-policy.test.ts:539: error TS2741: Property 'initiator' is missing in type '{ tool: { name: string; }; bot: { id: string; }; actor: { id: string; }; page: { url: string; host: string; }; intent: "activate"; element: { ref: string; role: string; name: string; type: string; }; key: string; file: { ...; }; command: string; mcp: { ...; }; }' but required in type 'PolicyContext'. +server/tests/computer-policy.test.ts:551: error TS2741: Property 'initiator' is missing in type '{ tool: { name: string; }; bot: { id: string; }; actor: { id: string; }; page: { url: string; host: string; }; intent: "read_tool"; element: { ref: string; role: string; name: string; type: string; }; key: string; file: { ...; }; command: string; mcp: { ...; }; }' but required in type 'PolicyContext'. +server/tests/computer-policy.test.ts:640: error TS2345: Argument of type '{ tool: { name: string; }; bot: { id: string; }; actor: { id: string; }; page: { url: string; host: string; }; intent: "activate"; key: string; element: { ref: string; role: string; name: string; type: string; }; file: { ...; }; command: string; mcp: { ...; }; }' is not assignable to parameter of type 'PolicyContext'. +server/tests/computer-policy.test.ts:662: error TS2345: Argument of type '{ tool: { name: string; }; bot: { id: string; }; actor: { id: string; }; page: { url: string; host: string; }; key: string; element: { ref: string; role: string; name: string; type: string; }; file: { path: string; name: string; extension: string; }; command: string; mcp: { ...; }; }' is not assignable to parameter of type 'PolicyContext'. +server/tests/computer-provider.test.ts:418: error TS2345: Argument of type '{ provider: "sandbox"; namespace: string; idleAfterMs: number; templateFile: string; }' is not assignable to parameter of type 'ComputerConfig'. +server/tests/copilot.test.ts:1090: error TS2339: Property 'prompt' does not exist on type 'BuiltInAgentConfiguration'. +server/tests/copilot.test.ts:1128: error TS2339: Property 'prompt' does not exist on type 'BuiltInAgentConfiguration'. +server/tests/copilot.test.ts:1208: error TS2339: Property 'prompt' does not exist on type 'BuiltInAgentConfiguration'. +server/tests/copilot.test.ts:1236: error TS2339: Property 'prompt' does not exist on type 'BuiltInAgentConfiguration'. +server/tests/copilot.test.ts:1294: error TS2322: Type '{ id: string; name: string; type: "remote_ag_ui"; endpoint: string; }' is not assignable to type 'RegisteredAgent'. +server/tests/copilot.test.ts:1338: error TS2353: Object literal may only specify known properties, and 'type' does not exist in type 'FixtureFileResponse | ResponseFactory'. +server/tests/copilot.test.ts:154: error TS2353: Object literal may only specify known properties, and 'type' does not exist in type 'FixtureFileResponse | ResponseFactory'. +server/tests/copilot.test.ts:158: error TS2739: Type '{ id: string; name: string; type: "built_in"; systemPrompt: string; }[]' is missing the following properties from type 'Promise': then, catch, finally, [Symbol.toStringTag] +server/tests/copilot.test.ts:371: error TS2322: Type '{ id: string; name: string; type: "remote_ag_ui"; endpoint: string; }' is not assignable to type 'RegisteredAgent'. +server/tests/copilot.test.ts:412: error TS2322: Type '{ id: string; name: string; type: "remote_ag_ui"; endpoint: string; }' is not assignable to type 'RegisteredAgent'. +server/tests/copilot.test.ts:450: error TS2345: Argument of type '{ id: string; name: string; type: "remote_ag_ui"; endpoint: string; }[]' is not assignable to parameter of type 'RegisteredAgent[]'. +server/tests/copilot.test.ts:469: error TS2345: Argument of type '{ id: string; name: string; type: "remote_ag_ui"; endpoint: string; }[]' is not assignable to parameter of type 'RegisteredAgent[]'. +server/tests/copilot.test.ts:502: error TS2322: Type 'Promise<{ id: string; name: string; type: "remote_ag_ui"; endpoint: string; }[]>' is not assignable to type 'Promise'. +server/tests/copilot.test.ts:549: error TS2345: Argument of type '{ id: string; name: string; type: "remote_ag_ui"; endpoint: string; }[]' is not assignable to parameter of type 'RegisteredAgent[]'. +server/tests/copilot.test.ts:554: error TS2345: Argument of type '{ id: string; name: string; type: "remote_ag_ui"; endpoint: string; }[]' is not assignable to parameter of type 'RegisteredAgent[]'. +server/tests/copilot.test.ts:601: error TS2322: Type 'Promise<{ id: string; name: string; type: "remote_ag_ui"; endpoint: string; }[]>' is not assignable to type 'Promise'. +server/tests/copilot.test.ts:722: error TS2345: Argument of type '() => never' is not assignable to parameter of type 'typeof fetch'. +server/tests/credentials.test.ts:139: error TS2345: Argument of type '{ encryptionKey: string; store: { create: () => Promise<{ id: string; revokedAt: null; }>; updateSecret: () => Promise; rotate: (input: { previousCredentialId: string; }) => Promise<...>; revoke: (id: string) => Promise<...>; }; auditStore: { ...; }; }' is not assignable to parameter of type 'CredentialService'. +server/tests/credentials.test.ts:148: error TS2345: Argument of type '{ encryptionKey: string; store: { create: () => Promise<{ id: string; revokedAt: null; }>; updateSecret: () => Promise; rotate: (input: { previousCredentialId: string; }) => Promise<...>; revoke: (id: string) => Promise<...>; }; auditStore: { ...; }; }' is not assignable to parameter of type 'CredentialService'. +server/tests/credentials.test.ts:192: error TS2345: Argument of type '{ encryptionKey: string; store: { create: () => Promise; rotate: () => Promise; revoke: () => Promise; }; auditStore: { insert: (event: unknown) => Promise<...>; }; }' is not assignable to parameter of type 'CredentialService'. +server/tests/credentials.test.ts:705: error TS2345: Argument of type '{ list: () => Promise<{ id: string; kind: "model"; provider: string; keyId: string; metadata: { label: string; }; revokedAt: null; }[]>; }' is not assignable to parameter of type 'CredentialAdminService'. +server/tests/credentials.test.ts:752: error TS2345: Argument of type '{ list: () => Promise; create: (input: CredentialInput) => Promise<{ id: string; kind: "model" | "agent" | "connector" | "mcp" | "mcp_oauth_client" | "mcp_user_token"; provider: string; keyId: string; metadata: Record<...>; revokedAt: null; }>; }' is not assignable to parameter of type 'CredentialAdminService'. +server/tests/delivery-router.test.ts:121: error TS2322: Type '{ findBinding: (_source: string, realm: string, identity: string, address?: string) => Promise<{ ownerUserId: string; channelId: string; agentId: string; threadId: string; id: string; ... 6 more ...; optedOutAt?: Date | null; } | null>; ... 15 more ...; botIdentity: (agentId: string) => Promise<...>; }' is not assignable to type 'RouterStore'. +server/tests/delivery-router.test.ts:204: error TS2322: Type 'Promise' is not assignable to type 'Promise'. +server/tests/delivery-router.test.ts:217: error TS2322: Type '{ findBinding: (_source: string, realm: string, identity: string, address?: string) => Promise<{ ownerUserId: string; channelId: string; agentId: string; threadId: string; id: string; ... 6 more ...; optedOutAt?: Date | null; } | null>; ... 15 more ...; botIdentity: (agentId: string) => Promise<...>; }' is not assignable to type 'RouterStore'. +server/tests/delivery-router.test.ts:310: error TS2322: Type '{ findBinding: (_source: string, realm: string, identity: string, address?: string) => Promise<{ ownerUserId: string; channelId: string; agentId: string; threadId: string; id: string; ... 6 more ...; optedOutAt?: Date | null; } | null>; ... 15 more ...; botIdentity: (agentId: string) => Promise<...>; }' is not assignable to type 'RouterStore'. +server/tests/delivery-router.test.ts:356: error TS2322: Type '{ findBinding: (_source: string, realm: string, identity: string, address?: string) => Promise<{ ownerUserId: string; channelId: string; agentId: string; threadId: string; id: string; ... 6 more ...; optedOutAt?: Date | null; } | null>; ... 15 more ...; botIdentity: (agentId: string) => Promise<...>; }' is not assignable to type 'RouterStore'. +server/tests/delivery-router.test.ts:398: error TS2322: Type 'Promise<{ id: string; ownerUserId: string; token: string; projectId: string; platform: "ios"; enabled: boolean; }[]>' is not assignable to type 'Promise'. +server/tests/delivery-router.test.ts:401: error TS2322: Type '{ findBinding: (_source: string, realm: string, identity: string, address?: string) => Promise<{ ownerUserId: string; channelId: string; agentId: string; threadId: string; id: string; ... 6 more ...; optedOutAt?: Date | null; } | null>; ... 15 more ...; botIdentity: (agentId: string) => Promise<...>; }' is not assignable to type 'RouterStore'. +server/tests/delivery-routes.test.ts:87: error TS2322: Type '(input: Omit) => Promise<{ identity: string; agentId: string; threadId: string; ownerUserId: string; channelId: string; transport: BindingTransport; ... 5 more ...; enabled: boolean; }>' is not assignable to type '(input: Omit) => Promise<{ identity: string; id: string; createdAt: Date; agentId: string; threadId: string; ownerUserId: string; ... 6 more ...; optedOutAt: Date | null; }>'. +server/tests/delivery-routes.test.ts:95: error TS2322: Type 'Promise' is not assignable to type 'Promise<{ transport: BindingTransport; identity: string; realm: string; address: string; mentionId: string | null; enabled: boolean; optedOutAt: Date | null; createdAt: Date; ... 4 more ...; id: string; }>'. +server/tests/delivery-turn.test.ts:70: error TS2322: Type 'string | ContentPart[]' is not assignable to type 'string'. +server/tests/dictation-routes.test.ts:30: error TS2739: Type 'Response & TypedResponse<{ error: string; }, 401, "json">' is missing the following properties from type 'Promise': then, catch, finally, [Symbol.toStringTag] +server/tests/encrypt-sso-config.test.ts:139: error TS2554: Expected 0 arguments, but got 1. +server/tests/encrypt-sso-config.test.ts:74: error TS2554: Expected 0 arguments, but got 1. +server/tests/encrypt-sso-config.test.ts:85: error TS2554: Expected 0 arguments, but got 1. +server/tests/enterprise-controls.integration.test.ts:144: error TS2769: No overload matches this call. +server/tests/enterprise-controls.integration.test.ts:147: error TS2345: Argument of type '(context: Parameters>[1]>[0], next: () => Promise) => Promise<...>' is not assignable to parameter of type 'MiddlewareHandler<{ Variables: AppVariables; }>'. +server/tests/enterprise-controls.integration.test.ts:148: error TS2345: Argument of type '(context: Parameters>[1]>[0], next: () => Promise) => Promise<...>' is not assignable to parameter of type 'MiddlewareHandler<{ Variables: AppVariables; }>'. +server/tests/google-drive-rest.test.ts:108: error TS2345: Argument of type '{ provenance: string; url: string; }' is not assignable to parameter of type '{ provenance: string; url: string; authScheme: string | null; accountMode?: string | null | undefined; }'. +server/tests/google-drive-rest.test.ts:122: error TS2345: Argument of type '{ provenance: string; url: string; }' is not assignable to parameter of type '{ provenance: string; url: string; authScheme: string | null; accountMode?: string | null | undefined; }'. +server/tests/group-conversations.integration.test.ts:361: error TS2339: Property 'serverId' does not exist on type 'object'. +server/tests/headless-components.integration.test.ts:12: error TS6142: Module '../../app/src/components/gallery/charts' was resolved to 'app/src/components/gallery/charts.tsx', but '--jsx' is not set. +server/tests/headless-components.integration.test.ts:180: error TS2741: Property 'preconnect' is missing in type '(url: URL | RequestInfo, init: RequestInit | BunFetchRequestInit | undefined) => Promise' but required in type 'typeof fetch'. +server/tests/headless-components.integration.test.ts:273: error TS7006: Parameter 'entry' implicitly has an 'any' type. +server/tests/headless-components.integration.test.ts:290: error TS2352: Conversion of type 'BaseEvent' to type '{ delta: string; }' may be a mistake because neither type sufficiently overlaps with the other. If this was intentional, convert the expression to 'unknown' first. +server/tests/headless-components.integration.test.ts:58: error TS7031: Binding element 'description' implicitly has an 'any' type. +server/tests/headless-components.integration.test.ts:58: error TS7031: Binding element 'kind' implicitly has an 'any' type. +server/tests/headless-components.integration.test.ts:58: error TS7031: Binding element 'name' implicitly has an 'any' type. +server/tests/headless-components.integration.test.ts:58: error TS7031: Binding element 'title' implicitly has an 'any' type. +server/tests/headless-components.test.ts:104: error TS7006: Parameter 'entry' implicitly has an 'any' type. +server/tests/headless-components.test.ts:10: error TS6142: Module '../../app/src/components/gallery/quote' was resolved to 'app/src/components/gallery/quote.tsx', but '--jsx' is not set. +server/tests/headless-components.test.ts:11: error TS6142: Module '../../app/src/components/gallery/table' was resolved to 'app/src/components/gallery/table.tsx', but '--jsx' is not set. +server/tests/headless-components.test.ts:5: error TS6142: Module '../../app/src/components/gallery/activity' was resolved to 'app/src/components/gallery/activity.tsx', but '--jsx' is not set. +server/tests/headless-components.test.ts:6: error TS6142: Module '../../app/src/components/gallery/cards' was resolved to 'app/src/components/gallery/cards.tsx', but '--jsx' is not set. +server/tests/headless-components.test.ts:7: error TS6142: Module '../../app/src/components/gallery/charts' was resolved to 'app/src/components/gallery/charts.tsx', but '--jsx' is not set. +server/tests/headless-components.test.ts:8: error TS6142: Module '../../app/src/components/gallery/decisions' was resolved to 'app/src/components/gallery/decisions.tsx', but '--jsx' is not set. +server/tests/headless-components.test.ts:9: error TS6142: Module '../../app/src/components/gallery/form' was resolved to 'app/src/components/gallery/form.tsx', but '--jsx' is not set. +server/tests/headless-tools.test.ts:127: error TS2322: Type '(context: { ownerUserId: string; agentId: string; initiator: { kind: string; id?: string | undefined; }; }) => Promise' is not assignable to type '(input: { ownerUserId: string; agentId: string; initiator: AuditInitiator; threadId: string; runId: string; }) => Promise'. +server/tests/headless-tools.test.ts:298: error TS2741: Property 'preconnect' is missing in type '(url: URL | RequestInfo, init: RequestInit | BunFetchRequestInit | undefined) => Promise' but required in type 'typeof fetch'. +server/tests/health.test.ts:140: error TS2345: Argument of type '{ handler: () => Response; }' is not assignable to parameter of type 'AuthService'. +server/tests/identity-provider-audit.test.ts:28: error TS2322: Type 'Promise' is not assignable to type 'Promise'. +server/tests/identity-provider-audit.test.ts:95: error TS7006: Parameter 'event' implicitly has an 'any' type. +server/tests/intelligence-authentication.test.ts:113: error TS2769: No overload matches this call. +server/tests/intelligence-authentication.test.ts:97: error TS2769: No overload matches this call. +server/tests/learning-ensure-container.test.ts:34: error TS2322: Type '{ probes: number; probe: () => Promise; project: () => Promise<{ organizationSlug: string; projectSlug: string; }>; }' is not assignable to type 'KeyIntelligence & { probes: number; }'. +server/tests/learning-routes.test.ts:61: error TS2322: Type '{ "content-type": string; origin: string; } | { "content-type": string; origin?: undefined; }' is not assignable to type 'HeadersInit | undefined'. +server/tests/mcp-grant-removal.integration.test.ts:35: error TS2322: Type 'Promise' is not assignable to type 'Promise'. +server/tests/mcp-grant-removal.integration.test.ts:61: error TS2322: Type '{ readSecret: () => Promise; create: () => Promise; updateSecret: () => Promise; revoke: () => Promise; }' is not assignable to type 'CredentialSecretReader & CredentialStore'. +server/tests/memory-runtime.test.ts:19: error TS2344: Type 'BaseEvent' does not satisfy the constraint 'readonly unknown[]'. +server/tests/memory-store.integration.test.ts:172: error TS2769: No overload matches this call. +server/tests/model-providers.test.ts:353: error TS2345: Argument of type '(input: URL | RequestInfo, init: RequestInit | BunFetchRequestInit | undefined) => Promise' is not assignable to parameter of type 'typeof fetch'. +server/tests/model-providers.test.ts:41: error TS2769: No overload matches this call. +server/tests/passwords-sign-in.test.ts:864: error TS2353: Object literal may only specify known properties, and 'code' does not exist in type '{ username?: string | undefined; password: string; save?: boolean | undefined; }'. +server/tests/people-routes.test.ts:84: error TS2322: Type 'Response | Promise' is not assignable to type 'Promise'. +server/tests/plan-model.test.ts:156: error TS2769: No overload matches this call. +server/tests/plan-model.test.ts:271: error TS2345: Argument of type '(id: string) => Promise<{ name: string; description: string; parameters: ZodObject<{ query: ZodString; }, $strip>; ref: { kind: string; serverId: string; toolName: string; }; execute: (args: unknown) => Promise<...>; }[]>' is not assignable to parameter of type 'LoadToolsForBot'. +server/tests/plugin-catalogue.test.ts:92: error TS2531: Object is possibly 'null'. +server/tests/plugin-curated-credential.integration.test.ts:37: error TS2322: Type '{ readSecret: () => Promise; create: () => Promise; revoke: () => Promise; }' is not assignable to type 'CredentialSecretReader & CredentialStore'. +server/tests/plugin-oauth-callback.test.ts:157: error TS2769: No overload matches this call. +server/tests/plugin-routes.integration.test.ts:32: error TS2322: Type '{ readSecret: () => Promise; create: () => Promise; revoke: () => Promise; }' is not assignable to type 'CredentialSecretReader & CredentialStore'. +server/tests/plugin-routes.test.ts:1071: error TS2769: No overload matches this call. +server/tests/plugin-routes.test.ts:125: error TS2739: Type '{ id: string; title: string; vendor: string; url: string; summary: string; docsUrl: string; provenance: string; hasCredential: false; toolsRefreshedAt: null; lastError: null; addedBy: null; dynamicClient: false; authScheme: null; tools: never[]; withdrawn: never[]; }' is missing the following properties from type 'ServerRecord': logo, accountMode, sharedVendorConnected +server/tests/plugin-routes.test.ts:1775: error TS2322: Type '(serverId: string) => Promise<{ id: string; title: string; url: string; authScheme: string | null; accountMode?: "shared"; } | undefined>' is not assignable to type '(serverId: string) => Promise'. +server/tests/plugin-routes.test.ts:1784: error TS2322: Type '(serverId: string, actorId: string) => Promise<{ refusal: string; readonly ref?: undefined; title?: undefined; mode?: undefined; } | { ref: { holder: "deployment"; vendorUserId: string; userId?: undefined; }; title: string; mode: "shared"; refusal?: undefined; } | { ...; }>' is not assignable to type '(serverId: string, actorId: string) => Promise<{ ref: AccountRef; title: string; mode: "personal" | "shared"; appId: string; } | { refusal: string; }>'. +server/tests/plugin-store.integration.test.ts:165: error TS2322: Type '{ readSecret: () => Promise; create: () => Promise; updateSecret: () => Promise; revoke: (id: string) => Promise; }' is not assignable to type 'CredentialSecretReader & CredentialStore'. +server/tests/plugin-store.integration.test.ts:4081: error TS2322: Type '{ readSecret: () => Promise; create: () => Promise; updateSecret: () => Promise; revoke: (id: string) => Promise; }' is not assignable to type 'CredentialSecretReader & CredentialStore'. +server/tests/plugin-store.integration.test.ts:4989: error TS2339: Property 'payload' does not exist on type '{ eventType: string; targetId?: string | undefined; }'. +server/tests/plugin-store.integration.test.ts:5769: error TS2345: Argument of type '{ provenance: string; url: string; }' is not assignable to parameter of type '{ provenance: string; url: string; authScheme: string | null; accountMode?: string | null | undefined; }'. +server/tests/plugin-store.integration.test.ts:5778: error TS2345: Argument of type '{ provenance: string; url: string; }' is not assignable to parameter of type '{ provenance: string; url: string; authScheme: string | null; accountMode?: string | null | undefined; }'. +server/tests/plugin-store.integration.test.ts:6142: error TS2322: Type '{ readSecret: () => Promise; create: () => Promise; updateSecret: () => Promise; revoke: (id: string) => Promise; }' is not assignable to type 'CredentialSecretReader & CredentialStore'. +server/tests/plugin-store.integration.test.ts:6271: error TS2556: A spread argument must either have a tuple type or be passed to a rest parameter. +server/tests/plugin-store.integration.test.ts:6278: error TS2322: Type '{ readSecret: () => Promise; create: () => Promise; updateSecret: () => Promise; revoke: (id: string) => Promise; }' is not assignable to type 'CredentialSecretReader & CredentialStore'. +server/tests/plugin-store.integration.test.ts:6413: error TS2322: Type '{ readSecret: () => Promise; create: () => Promise; updateSecret: () => Promise; revoke: (id: string) => Promise; }' is not assignable to type 'CredentialSecretReader & CredentialStore'. +server/tests/plugin-store.integration.test.ts:6573: error TS2322: Type '{ readSecret: () => Promise; create: () => Promise; updateSecret: () => Promise; revoke: (id: string) => Promise; }' is not assignable to type 'CredentialSecretReader & CredentialStore'. +server/tests/plugin-store.integration.test.ts:6752: error TS2345: Argument of type '{ slug: string; title: string; by: string; }' is not assignable to parameter of type '{ slug: string; title: string; logo?: string | null | undefined; by: string; connection: BrokerConnection; }'. +server/tests/plugin-store.integration.test.ts:6837: error TS2322: Type '(request: { toolkit: string; name: string; }) => Promise' is not assignable to type '(config: { toolkit: string; name: string; connection: BrokerConnection; }) => Promise'. +server/tests/plugin-store.integration.test.ts:7039: error TS2345: Argument of type 'string | null' is not assignable to parameter of type 'string'. +server/tests/plugin-store.integration.test.ts:7363: error TS2322: Type '() => Promise' is not assignable to type '(config: { toolkit: string; name: string; }) => Promise'. +server/tests/plugin-store.integration.test.ts:7366: error TS2345: Argument of type '(string | null)[]' is not assignable to parameter of type 'string[]'. +server/tests/plugin-store.integration.test.ts:7370: error TS2345: Argument of type '(string | null)[]' is not assignable to parameter of type 'string[]'. +server/tests/plugin-user-credential.integration.test.ts:98: error TS2322: Type '{ readSecret: (id: string) => Promise<{ encryptedValue: string; revokedAt: Date | null; }>; create: () => Promise; updateSecret: () => Promise; revoke: (id: string) => Promise<...>; }' is not assignable to type 'CredentialSecretReader & CredentialStore'. +server/tests/policy-dry-run.test.ts:24: error TS2739: Type '{ id: string; actorUserId: null; eventType: string; targetType: string; targetId: string; createdAt: string; payload: Record; }' is missing the following properties from type 'AuditEvent': initiatorKind, initiatorId +server/tests/remote-approval-context.test.ts:11: error TS2345: Argument of type '(input: RunAgentInput) => Observable<{ type: string; threadId: string; runId: string; } | { type: string; snapshot: { real: string; }; } | { type: string; toolCallId: string; toolCallName: string; parentMessageId: string; } | { ...; } | { ...; } | { ...; } | { ...; }>' is not assignable to parameter of type '(input: RunAgentInput) => Observable'. +server/tests/remote-bot-handoff.integration.test.ts:128: error TS2769: No overload matches this call. +server/tests/remote-bot-handoff.integration.test.ts:47: error TS2322: Type 'Promise' is not assignable to type 'Promise'. +server/tests/remote-bot-handoff.integration.test.ts:62: error TS2322: Type '{ readSecret: () => Promise; create: () => Promise; updateSecret: () => Promise; revoke: () => Promise; }' is not assignable to type 'CredentialSecretReader & CredentialStore'. +server/tests/remote-bot-handoff.integration.test.ts:81: error TS2554: Expected 2-3 arguments, but got 1. +server/tests/remote-coordination.integration.test.ts:42: error TS2769: No overload matches this call. +server/tests/remove-server-foreign-provenance.test.ts:112: error TS2769: No overload matches this call. +server/tests/responsibility-triggers.test.ts:529: error TS2353: Object literal may only specify known properties, and 'agentId' does not exist in type 'ResolvedTrigger'. +server/tests/routes-vendor-vocabulary.test.ts:225: error TS2322: Type 'Response | Promise' is not assignable to type 'Promise'. +server/tests/routes-vendor-vocabulary.test.ts:227: error TS2322: Type 'Response | Promise' is not assignable to type 'Promise'. +server/tests/routes-vendor-vocabulary.test.ts:229: error TS2322: Type 'Response | Promise' is not assignable to type 'Promise'. +server/tests/routes-vendor-vocabulary.test.ts:234: error TS2322: Type 'Response | Promise' is not assignable to type 'Promise'. +server/tests/routes-vendor-vocabulary.test.ts:239: error TS2322: Type 'Response | Promise' is not assignable to type 'Promise'. +server/tests/routes-vendor-vocabulary.test.ts:244: error TS2322: Type 'Response | Promise' is not assignable to type 'Promise'. +server/tests/routes-vendor-vocabulary.test.ts:249: error TS2322: Type 'Response | Promise' is not assignable to type 'Promise'. +server/tests/routes-vendor-vocabulary.test.ts:254: error TS2322: Type 'Response | Promise' is not assignable to type 'Promise'. +server/tests/routes-vendor-vocabulary.test.ts:260: error TS2322: Type 'Response | Promise' is not assignable to type 'Promise'. +server/tests/routes-vendor-vocabulary.test.ts:262: error TS2322: Type 'Response | Promise' is not assignable to type 'Promise'. +server/tests/routes-vendor-vocabulary.test.ts:264: error TS2322: Type 'Response | Promise' is not assignable to type 'Promise'. +server/tests/routes-vendor-vocabulary.test.ts:266: error TS2322: Type 'Response | Promise' is not assignable to type 'Promise'. +server/tests/routes-vendor-vocabulary.test.ts:270: error TS2322: Type 'Response | Promise' is not assignable to type 'Promise'. +server/tests/routes-vendor-vocabulary.test.ts:274: error TS2322: Type 'Response | Promise' is not assignable to type 'Promise'. +server/tests/routine-routes.test.ts:45: error TS2739: Type '{ create(): Promise; listFor(ownerUserId: string): Promise; update(): Promise; remove(ownerUserId: string, id: string): Promise<...>; ... 9 more ...; consecutiveFailures(): Promise<...>; }' is missing the following properties from type 'RoutineStore': startManualRun, listRuns, reapAbandonedRuns, markUnschedulable +server/tests/routine-run-now.test.ts:80: error TS2322: Type '() => Promise<({ id: string; status: null; startedAt: Date; finishedAt: null; error: null; } | { id: string; status: "failed"; startedAt: Date; finishedAt: Date; error: string; })[]>' is not assignable to type '(ownerUserId: string, id: string, limit?: number | undefined) => Promise'. +server/tests/routine-runner.test.ts:111: error TS2739: Type '{ create: () => never; list: () => never; setPinned: () => never; markRead: () => never; softDelete: () => never; get(actor: AgentActor, channelId: string): Promise; recordActivity(actor: AgentActor, channelId: string, activity: ChannelActivity): Promise<...>; }' is missing the following properties from type 'ChannelStore': direct, signalBusy, signalChannelBusy +server/tests/routine-runner.test.ts:40: error TS2741: Property 'lastMessageAt' is missing in type '{ id: string; name: string; agentIds: string[]; threadId: string; active: true; }' but required in type 'AgentChannel'. +server/tests/routine-runner.test.ts:79: error TS2740: Type '{ create: () => never; listFor: () => never; update: () => never; remove: () => never; dueRoutines: () => never; advanceNextRun: () => never; insertRun: () => never; runContext(runId: string): Promise; finishRun(runId: string, status: RoutineRunOutcome, error: string | undefined): Promise<....' is missing the following properties from type 'RoutineStore': startManualRun, listRuns, routineForFiring, reapAbandonedRuns, and 3 more. +server/tests/routing-routes.test.ts:106: error TS2345: Argument of type '(input: { id: string; name: string; roleDescription: string; visibility: AgentVisibility; }) => AgentProfile' is not assignable to parameter of type '(value: { id: string; name: string; roleDescription: string; visibility: string; }, index: number, array: { id: string; name: string; roleDescription: string; visibility: string; }[]) => AgentProfile'. +server/tests/routing-service.test.ts:500: error TS2339: Property 'names' does not exist on type 'CoworkerRouteResult'. +server/tests/routing-service.test.ts:501: error TS2339: Property 'names' does not exist on type 'CoworkerRouteResult'. +server/tests/routing-service.test.ts:594: error TS2339: Property 'names' does not exist on type 'CoworkerRouteResult'. +server/tests/routing-service.test.ts:595: error TS2339: Property 'names' does not exist on type 'CoworkerRouteResult'. +server/tests/schema.test.ts:196: error TS2677: A type predicate's type must be assignable to its parameter's type. +server/tests/schema.test.ts:201: error TS2345: Argument of type '(table: T) => T["_"]["name"]' is not assignable to parameter of type '(value: PgTableWithColumns<{ name: "capability_settings"; schema: undefined; columns: { scopeKind: PgColumn<{ name: "scope_kind"; tableName: "capability_settings"; dataType: "string"; columnType: "PgText"; data: "organization" | "role" | "group"; ... 9 more ...; generated: undefined; }, {}, { ...; }>; ... 4 more ......'. +server/tests/schema.test.ts:202: error TS2345: Argument of type '(table: T) => T["_"]["name"]' is not assignable to parameter of type '(value: PgTableWithColumns<{ name: "capability_settings"; schema: undefined; columns: { scopeKind: PgColumn<{ name: "scope_kind"; tableName: "capability_settings"; dataType: "string"; columnType: "PgText"; data: "organization" | "role" | "group"; ... 9 more ...; generated: undefined; }, {}, { ...; }>; ... 4 more ......'. +server/tests/schema.test.ts:203: error TS2345: Argument of type '(table: T) => T["_"]["name"]' is not assignable to parameter of type '(value: PgTableWithColumns<{ name: "capability_settings"; schema: undefined; columns: { scopeKind: PgColumn<{ name: "scope_kind"; tableName: "capability_settings"; dataType: "string"; columnType: "PgText"; data: "organization" | "role" | "group"; ... 9 more ...; generated: undefined; }, {}, { ...; }>; ... 4 more ......'. +server/tests/schema.test.ts:206: error TS2345: Argument of type 'PgTableWithColumns<{ name: "capability_settings"; schema: undefined; columns: { scopeKind: PgColumn<{ name: "scope_kind"; tableName: "capability_settings"; dataType: "string"; columnType: "PgText"; data: "organization" | "role" | "group"; ... 9 more ...; generated: undefined; }, {}, { ...; }>; ... 4 more ...; update...' is not assignable to parameter of type 'PgTable'. +server/tests/schema.test.ts:208: error TS2345: Argument of type 'PgTableWithColumns<{ name: "capability_settings"; schema: undefined; columns: { scopeKind: PgColumn<{ name: "scope_kind"; tableName: "capability_settings"; dataType: "string"; columnType: "PgText"; data: "organization" | "role" | "group"; ... 9 more ...; generated: undefined; }, {}, { ...; }>; ... 4 more ...; update...' is not assignable to parameter of type 'Table>>'. +server/tests/server-side-tools.integration.test.ts:47: error TS2322: Type '{ readSecret: () => Promise; }' is not assignable to type 'CredentialSecretReader & CredentialStore'. +server/tests/settings-instructions-routes.test.ts:236: error TS2339: Property 'then' does not exist on type 'Response | Promise'. +server/tests/settings-instructions-routes.test.ts:236: error TS7006: Parameter 'response' implicitly has an 'any' type. +server/tests/settings-instructions-routes.test.ts:241: error TS2339: Property 'then' does not exist on type 'Response | Promise'. +server/tests/settings-instructions-routes.test.ts:241: error TS7006: Parameter 'response' implicitly has an 'any' type. +server/tests/settings-instructions-routes.test.ts:305: error TS2339: Property 'then' does not exist on type 'Response | Promise'. +server/tests/settings-instructions-routes.test.ts:305: error TS7006: Parameter 'response' implicitly has an 'any' type. +server/tests/settings-instructions-routes.test.ts:314: error TS2339: Property 'then' does not exist on type 'Response | Promise'. +server/tests/settings-instructions-routes.test.ts:314: error TS7006: Parameter 'response' implicitly has an 'any' type. +server/tests/skill-ownership.integration.test.ts:29: error TS2322: Type '{ readSecret: () => Promise; }' is not assignable to type 'CredentialSecretReader & CredentialStore'. +server/tests/skill-tools.integration.test.ts:35: error TS2322: Type '{ readSecret: () => Promise; }' is not assignable to type 'CredentialSecretReader & CredentialStore'. +server/tests/skill-uninstall-grants.integration.test.ts:26: error TS2322: Type '{ readSecret: () => Promise; }' is not assignable to type 'CredentialSecretReader & CredentialStore'. +server/tests/store-scheme-sites.test.ts:88: error TS2322: Type '{ readSecret: () => Promise; create: () => Promise; updateSecret: () => Promise; revoke: () => Promise; }' is not assignable to type 'CredentialSecretReader & CredentialStore'. +server/tests/tenant-package.test.ts:1440: error TS2698: Spread types may only be created from object types. +server/tests/tenant-package.test.ts:1518: error TS2698: Spread types may only be created from object types. +server/tests/thread-routes.test.ts:22: error TS2769: No overload matches this call. +server/tests/tool-selection.integration.test.ts:248: error TS2353: Object literal may only specify known properties, and 'type' does not exist in type 'FixtureFileResponse | ResponseFactory'. +server/tests/tool-selection.integration.test.ts:251: error TS2353: Object literal may only specify known properties, and 'type' does not exist in type 'FixtureFileResponse | ResponseFactory'. +server/tests/tool-selection.integration.test.ts:454: error TS2353: Object literal may only specify known properties, and 'type' does not exist in type 'FixtureFileResponse | ResponseFactory'. +server/tests/tool-selection.integration.test.ts:648: error TS2345: Argument of type '() => string | undefined' is not assignable to parameter of type 'SignRun'. +server/tests/tool-selection.integration.test.ts:875: error TS2353: Object literal may only specify known properties, and 'type' does not exist in type 'FixtureFileResponse | ResponseFactory'. +server/tests/tool-selection.integration.test.ts:906: error TS2353: Object literal may only specify known properties, and 'type' does not exist in type 'FixtureFileResponse | ResponseFactory'. +server/tests/tool-selection.integration.test.ts:936: error TS2353: Object literal may only specify known properties, and 'type' does not exist in type 'FixtureFileResponse | ResponseFactory'. +server/tests/user-preferences.integration.test.ts:60: error TS2769: No overload matches this call. +server/tests/voice-routes.test.ts:13: error TS2741: Property 'pinned' is missing in type '{ id: string; name: string; title: string; roleDescription: string; avatarSeed: string; visibility: "public"; ownerUserId: null; systemOwned: false; hidden: false; deletedAt: null; endpoint: null; hasAuth: false; hasCallbackToken: false; }' but required in type 'AgentProfile'. +server/tests/voice-routes.test.ts:161: error TS2739: Type 'Response & TypedResponse<{ error: string; }, 401, "json">' is missing the following properties from type 'Promise': then, catch, finally, [Symbol.toStringTag] +server/tests/voice-routes.test.ts:79: error TS2739: Type 'Response & TypedResponse<{ error: string; }, 401, "json">' is missing the following properties from type 'Promise': then, catch, finally, [Symbol.toStringTag] +server/tests/voice-session-preview.integration.test.ts:88: error TS2769: No overload matches this call. +server/tests/voice-session-routes.test.ts:162: error TS2739: Type 'Response & TypedResponse<{ error: string; }, 401, "json">' is missing the following properties from type 'Promise': then, catch, finally, [Symbol.toStringTag] +server/tests/voice-session-store.integration.test.ts:123: error TS2345: Argument of type '`page-${string}`' is not assignable to parameter of type '`${string}-${string}-${string}-${string}-${string}`'. +server/tests/voice-sessions.test.ts:43: error TS2741: Property 'preconnect' is missing in type '(_url: URL | RequestInfo, init: RequestInit | BunFetchRequestInit | undefined) => Promise' but required in type 'typeof fetch'. +server/tests/voice-sessions.test.ts:85: error TS2741: Property 'preconnect' is missing in type '() => Promise' but required in type 'typeof fetch'. +server/tests/web-research.test.ts:281: error TS2339: Property 'get' does not exist on type 'never'. +server/tests/web-research.test.ts:289: error TS2339: Property 'get' does not exist on type 'never'. +server/tests/web-research.test.ts:290: error TS2339: Property 'get' does not exist on type 'never'. diff --git a/server/tests/vendor-deadline-sync-throw.test.ts b/server/tests/vendor-deadline-sync-throw.test.ts new file mode 100644 index 000000000..5350c4395 --- /dev/null +++ b/server/tests/vendor-deadline-sync-throw.test.ts @@ -0,0 +1,183 @@ +// server/tests/vendor-deadline-sync-throw.test.ts +/** + * A vendor call that throws BEFORE it returns a promise still has its deadline cleared. + * + * `withVendorDeadline` arms a ten-second timer and then races it against the call. Built inline as + * `Promise.race([call(signal), deadline])`, a call that throws SYNCHRONOUSLY threw out of the + * helper before the race existed: no `.finally` was ever attached, so the timer stayed armed, and + * ten seconds after the person had been answered it aborted nothing anybody was waiting on and + * rejected a promise nobody held — an unhandled rejection in a deployment that had already replied. + * + * REACHABLE, NOT HYPOTHETICAL. The Composio connect route builds its return address INSIDE the + * deadline's callback, and `brokerReturnUrl` throws synchronously on an `OPENBOT_APP_URL` with its + * scheme left off — `app.example` rather than `https://app.example`. The route still answers its + * refusal (the throw lands in the handler's `try`), which is why nothing on the response shows it; + * what shows it is the timer, so the timer is what this asserts on. + * + * HOW THE TIMER IS WATCHED. Only timers armed for the deadline's own bound are captured, and they + * are captured WITHOUT being scheduled, so this file does not wait ten seconds to see one fire. Any + * capture the route did not clear is then fired by hand, which is exactly what the event loop would + * have done, and the rejection it produces is caught by an `unhandledRejection` listener rather + * than taking the test runner with it. + */ +import { afterEach, beforeEach, expect, test } from "bun:test"; +import { Hono, type MiddlewareHandler } from "hono"; +import type { AppVariables } from "../src/auth/guards"; +import type { AccountModeSwitch } from "../src/plugins/account-mode"; +import type { ComposioBroker } from "../src/plugins/broker"; +import { createPluginRoutes } from "../src/plugins/routes"; +import type { SharedUseStore } from "../src/plugins/shared-use-store"; +import type { PluginStore } from "../src/plugins/store"; + +/** `VENDOR_CALL_TIMEOUT_MS` in `routes.ts`. Not exported, and a timer of any other length is not this one. */ +const VENDOR_CALL_TIMEOUT_MS = 10_000; +const SERVER_ID = "brokered-gmail"; + +type Captured = { fire: () => void; cleared: boolean }; + +const realSetTimeout = globalThis.setTimeout; +const realClearTimeout = globalThis.clearTimeout; +let captured: Captured[] = []; +let unhandled: unknown[] = []; +const onUnhandled = (reason: unknown) => { + unhandled.push(reason); +}; + +beforeEach(() => { + captured = []; + unhandled = []; + process.on("unhandledRejection", onUnhandled); + globalThis.setTimeout = (( + handler: (...args: unknown[]) => void, + ms?: number, + ...args: unknown[] + ) => { + if (ms !== VENDOR_CALL_TIMEOUT_MS) + return realSetTimeout(handler, ms, ...args); + const entry: Captured = { fire: () => handler(...args), cleared: false }; + captured.push(entry); + return entry as unknown as ReturnType; + }) as typeof setTimeout; + globalThis.clearTimeout = ((handle: unknown) => { + const entry = captured.find((candidate) => candidate === handle); + if (entry) entry.cleared = true; + else realClearTimeout(handle as ReturnType); + }) as typeof clearTimeout; +}); + +afterEach(() => { + globalThis.setTimeout = realSetTimeout; + globalThis.clearTimeout = realClearTimeout; + process.off("unhandledRejection", onUnhandled); +}); + +/** A Composio deployment whose app URL was configured without its scheme. */ +function deployment() { + const authorized: string[] = []; + const store = { + brokerProvider: "composio", + serverAddress: async (serverId: string) => + serverId === SERVER_ID + ? { + id: SERVER_ID, + title: "Gmail", + url: "composio://gmail", + authScheme: "OAUTH2", + } + : undefined, + serverUrls: async () => ["composio://gmail"], + accountRefFor: async (_serverId: string, actorId: string) => ({ + ref: { + holder: "person" as const, + userId: actorId, + vendorUserId: actorId, + }, + title: "Gmail", + mode: "personal" as const, + }), + brokeredConnection: async () => null, + listSkills: async () => [], + } as unknown as PluginStore; + + const broker = { + grantIsLocal: true, + authProviderOf: async () => null, + authorizations: null, + listApps: async () => [], + authorize: async (input: { toolkit: string }) => { + authorized.push(input.toolkit); + return { + redirectUrl: "https://vendor.example/consent", + authorizationId: null, + }; + }, + } as unknown as ComposioBroker; + + const signedIn: MiddlewareHandler<{ Variables: AppVariables }> = async ( + context, + next, + ) => { + context.set("actor", { + id: "person-1", + email: "person@example.test", + role: "user", + } as never); + await next(); + }; + + const app = new Hono().route( + "/api/plugins", + createPluginRoutes( + store, + signedIn, + async () => true, + { + publicUrl: "https://openbot.example", + // THE MISTAKE: no scheme, so `brokerReturnUrl` throws as the callback's argument is built. + appUrl: "app.example", + encryptionKey: `${"A".repeat(43)}=`, + personHasAccess: async () => true, + }, + { broker, provider: "composio" }, + { + modes: {} as unknown as AccountModeSwitch, + use: {} as unknown as SharedUseStore, + }, + ), + ); + return { + authorized, + connect: () => + app.request( + `http://openbot.test/api/plugins/servers/${SERVER_ID}/connect`, + { + method: "POST", + headers: { "content-type": "application/json" }, + body: JSON.stringify({}), + }, + ), + }; +} + +test("a return address that throws while the call is built leaves no deadline armed", async () => { + const it = deployment(); + const response = await it.connect(); + + // The refusal itself is unchanged: answered, not a 500, and the vendor never asked. + expect(response.status).toBeGreaterThanOrEqual(400); + expect(response.status).not.toBe(500); + expect(it.authorized).toEqual([]); + + // The deadline WAS armed — otherwise the next assertion is about nothing. + expect(captured.length).toBe(1); + const leftArmed = captured.filter((entry) => !entry.cleared).length; + + // Fire whatever was not cleared, as the event loop would have ten seconds later. + for (const entry of captured) if (!entry.cleared) entry.fire(); + await new Promise((resolve) => realSetTimeout(resolve, 0)); + + // It was cleared, so nothing is left to fire after the person has been answered... + expect(leftArmed).toBe(0); + // ...and nothing rejects later with nobody holding the promise. + expect(unhandled).toEqual([]); +}); diff --git a/server/tsconfig.json b/server/tsconfig.json index cbd77e392..851563469 100644 --- a/server/tsconfig.json +++ b/server/tsconfig.json @@ -28,5 +28,30 @@ // type-checked and turning it on surfaces a few hundred years of accumulated `any`. It is what let // a test pass an options object where a connection string belongs and hear nothing back. Its own // change, because it is a sweep and not a fix. - "include": ["src", "scripts", "../scripts/composio-smoke.ts"] + // + // `tests/store-provider-required.test.ts` IS NAMED HERE, ONE FILE AND NOT THE DIRECTORY, for the + // same reason `composio-smoke.ts` is: it is the only test in the tree whose subject is a TYPE. + // `createPluginStore` without `brokerProvider` must not compile, and the `@ts-expect-error` that + // says so is checked by `tsc` or by nothing at all — inside an unchecked `server/tests` it would + // read as an assertion while asserting nothing, which is precisely the silence this pin exists to + // close. Naming the directory is still the sweep described above and still not this change. + "include": [ + "src", + "scripts", + "../scripts/composio-smoke.ts", + "tests/store-provider-required.test.ts", + // `tests/composio-grants-for.test.ts` FOR THE SAME REASON, one seam member along: its last + // describe is a TYPE test. A broker literal omitting `authorizations` must not compile, and the + // `@ts-expect-error` that says so is checked by `tsc` or by nothing at all. + "tests/composio-grants-for.test.ts", + "tests/arcade-transport-registry.test.ts", + "tests/db-client-address.test.ts", + // `tests/stub-broker.test.ts` FOR THE SAME REASON, and it is the reason `stubBroker` exists: + // the factory's promise is that a broker built through it carries NO cast, so a member added to + // `ConnectedAppBroker` breaks the stub here instead of silently becoming `any`. Three + // `@ts-expect-error`s state that promise — a stub missing `grantIsLocal`, one missing + // `authorizations`, and one whose `revokeAccount` answers the wrong type must each fail to + // compile. Checked by `tsc` or by nothing at all. + "tests/stub-broker.test.ts" + ] } diff --git a/server/tsconfig.tests.json b/server/tsconfig.tests.json new file mode 100644 index 000000000..cccb285e9 --- /dev/null +++ b/server/tsconfig.tests.json @@ -0,0 +1,19 @@ +{ + // The test tree, type-checked. `server/tsconfig.json` deliberately leaves `tests` out — see the + // comment there — so `bun run typecheck` reports CLEAN while real type errors sit in the suite: + // broken `import type` paths that silently degrade a value to `any`, stubs missing methods the + // interface requires, `number | undefined` passed where `number` is required. bun erases types + // rather than checking them, so running the suite never catches any of it. + // + // This config EXTENDS the project's own, so the test tree is checked under exactly the options + // `src` is checked under. Checking these files with an ad-hoc `tsc` invocation and hand-written + // flags is unsound: it drags `src` in under the wrong options and emits a flood of errors that + // are artefacts of the flags rather than defects. + // + // `include` is not merged by `extends`, it is replaced, so the inherited entries are repeated + // here with `tests` added. The errors that already exist are frozen in + // `server/tests/typecheck-baseline.txt`, and the gate fails only on an error that is not in it — + // see `scripts/typecheck-tests.ts`. + "extends": "./tsconfig.json", + "include": ["src", "scripts", "../scripts/composio-smoke.ts", "tests"] +} diff --git a/tests/compose.test.ts b/tests/compose.test.ts index 314034286..8871209c2 100644 --- a/tests/compose.test.ts +++ b/tests/compose.test.ts @@ -447,7 +447,16 @@ test("runs migrations after PostgreSQL becomes healthy", () => { expect(compose).toContain("migrate:"); expect(compose).toContain("condition: service_healthy"); - expect(compose).toContain('"drizzle-kit", "migrate"'); + /* + * THE SERVER'S OWN MIGRATOR, NOT `drizzle-kit migrate`, AND THE DIFFERENCE IS THE POINT. + * + * `drizzle-kit` will skip a migration stamped below what the database has already recorded and + * still report success — the exact outcome `server/src/db/migration-reach.ts` exists to refuse, + * and a developer's database is one of the places it happens. `compose.yml` says the same thing + * at the service itself. Asserting the command here is what stops the stack quietly going back + * to the migrator that cannot see that case. + */ + expect(compose).toContain('"bun", "scripts/migrate.ts"'); }); test("builds the deployment image with Playwright's Chromium payload only", () => {