diff --git a/.dockerignore b/.dockerignore index c80bfe4d..6641a3a8 100644 --- a/.dockerignore +++ b/.dockerignore @@ -1,3 +1,4 @@ +# Copyright 2026 Firefly Software Foundation. SPDX-License-Identifier: Apache-2.0 .git .venv .forge diff --git a/.gitattributes b/.gitattributes index b24b40a9..f628fd9a 100644 --- a/.gitattributes +++ b/.gitattributes @@ -1 +1,2 @@ +# Copyright 2026 Firefly Software Foundation. SPDX-License-Identifier: Apache-2.0 studio/public/licenses/markdown-LICENSES.txt whitespace=-blank-at-eof diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 2ebb3826..3f6060b9 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -1,3 +1,4 @@ +# Copyright 2026 Firefly Software Foundation. SPDX-License-Identifier: Apache-2.0 name: Verify on: push: diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml index e6878f02..8c55f649 100644 --- a/.github/workflows/docs.yml +++ b/.github/workflows/docs.yml @@ -1,3 +1,4 @@ +# Copyright 2026 Firefly Software Foundation. SPDX-License-Identifier: Apache-2.0 name: Documentation on: push: diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 901ef422..3f06c453 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -1,3 +1,4 @@ +# Copyright 2026 Firefly Software Foundation. SPDX-License-Identifier: Apache-2.0 name: Release on: push: diff --git a/.gitignore b/.gitignore index 3fb7bf8c..a18fb65b 100644 --- a/.gitignore +++ b/.gitignore @@ -1,3 +1,4 @@ +# Copyright 2026 Firefly Software Foundation. SPDX-License-Identifier: Apache-2.0 .venv/ .forge/ .env diff --git a/.prettierignore b/.prettierignore index 0b7ae3a8..03b9fd2b 100644 --- a/.prettierignore +++ b/.prettierignore @@ -1,2 +1,3 @@ +# Copyright 2026 Firefly Software Foundation. SPDX-License-Identifier: Apache-2.0 # Preserve checksummed licensed framework knowledge sources. src/firefly_forge/resources/knowledge/ diff --git a/CHANGELOG.md b/CHANGELOG.md index f7af6131..545aae53 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,5 +1,7 @@ # Changelog + + ## 0.1.0 — 2026-10-11 - Introduce the Firefly Forge software factory, PyFly control plane and web Studio. diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md index 0c193353..2eeab50d 100644 --- a/CONTRIBUTING.md +++ b/CONTRIBUTING.md @@ -1,5 +1,7 @@ # Contributing + + Open an issue describing the behavior and how to reproduce it. Keep changes focused and match existing conventions. Use Python 3.13+, Node.js 22+ and Git. ```sh diff --git a/Dockerfile b/Dockerfile index b4bbf7b8..ab070753 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,3 +1,4 @@ +# Copyright 2026 Firefly Software Foundation. SPDX-License-Identifier: Apache-2.0 FROM node:22-bookworm-slim AS studio WORKDIR /build/studio COPY studio/package*.json ./ diff --git a/Makefile b/Makefile index 2b658e78..e4fe19d9 100644 --- a/Makefile +++ b/Makefile @@ -1,3 +1,4 @@ +# Copyright 2026 Firefly Software Foundation. SPDX-License-Identifier: Apache-2.0 .PHONY: check python-check studio-check docs docs-check docs-pages-check package serve check: python-check studio-check docs-check diff --git a/README.md b/README.md index 80d87bca..c3826740 100644 --- a/README.md +++ b/README.md @@ -1,5 +1,7 @@ # firefly forge + + ![firefly forge: from brief to verified software](assets/banner.svg) firefly forge is the Firefly software factory. Describe a product's users, journeys and acceptance checks, connect its repositories, then choose a stack and coding provider. Review the implementation, actual checks and retained evidence before publishing a pull request. diff --git a/SECURITY.md b/SECURITY.md index a5a6c15d..884ea89f 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -1,7 +1,17 @@ # Security -Report vulnerabilities privately through GitHub Security Advisories for this repository. Include the affected release, a reproduction and the expected trust boundary. Do not publish working credentials or sensitive customer source. + -Forge 0.1 is a single-operator development factory. A token grants access to repository source, generated code, worker commands and publication. Run it on a dedicated trusted development host, bind to loopback, and use TLS/access controls when exposing it remotely. CLI sandboxes and confined Agentic file tools do not constitute a multi-tenant operating-system sandbox for verification commands. Never connect an untrusted repository to a host holding unrelated production credentials. +Report vulnerabilities privately through GitHub Security Advisories for this repository. Include the affected release, a reproduction with synthetic data and the expected trust boundary. Exclude working credentials, private logs and sensitive customer source. -Secrets use environment configuration and Git credential helpers. Generated artifacts exclude private paths. Interrupted runs require an explicit retry. Pull-request publication requires passing verification; Forge never merges generated changes. +firefly forge is a software factory with native pyfly authentication, project permissions, PostgreSQL persistence and one execution leader. Shared installations use Keycloak OIDC, an exact API audience and protected server sessions. Explicit local bootstrap is restricted to its configured loopback mode. Current identity, project and repository authority must permit execution and later effects; a queued request does not renew that authority. + +Host coding and verification execute with the service account's filesystem and process access and require current administrator authority. Project users need an available isolated runner. Use a dedicated service identity and private retained storage. Confined file tools and a coding CLI's permission controls do not establish operating-system isolation for the complete factory. Keep unrelated production credentials and host sockets out of project execution environments. + +Owner-private configuration files and immutable credential revisions protect selected service secrets through filesystem permissions. Connection OAuth credentials are separately encrypted in PostgreSQL under the installation's shared encryption key. Browser consent, token exchange, refresh and scoped resource use have retained policy, actor, project and effect checks. Unknown provider responses require reconciliation. Local disconnect stops factory use and erases active tokens; provider-side authorization must be revoked separately. + +The implemented local OAuth service requires explicit development settings, different literal factory/provider hosts and its fixed read-only resource. Vendor OAuth templates remain inactive until their provider contracts and scoped adapters are admitted. Schema discovery, exact review and repository/tool grants remain mandatory even after consent. Current authorization also applies when returning cached tool receipts. + +Write-ahead intents and receipts retain execution evidence. A database rollback, restart or timeout cannot establish that an external effect did not happen. Observe the exact remote outcome before another publication, deployment or knowledge write. Passing checks and matching source evidence precede delivery; forge does not merge generated changes automatically. + +Keep factory PostgreSQL, private credential revisions, source workspaces, flycanon data and original objects in a consistent backup. Test restoration and unresolved-effect recovery in an isolated installation. Production cluster isolation, live vendor integrations and generated-product deployment need their own acceptance evidence. See the [security guide](docs/security.md) and [factory infrastructure guide](docs/factory-infrastructure.md). diff --git a/compose.yaml b/compose.yaml index 24d3d12d..a8768fab 100644 --- a/compose.yaml +++ b/compose.yaml @@ -1,3 +1,4 @@ +# Copyright 2026 Firefly Software Foundation. SPDX-License-Identifier: Apache-2.0 services: forge: build: . diff --git a/docs/agent-integrations.md b/docs/agent-integrations.md index 1205f081..761b3c60 100644 --- a/docs/agent-integrations.md +++ b/docs/agent-integrations.md @@ -4,6 +4,8 @@ description: Operate forge through the Python SDK, CLI and MCP with authenticate # Operate products from Python, the CLI or MCP + + The Python client, CLI and MCP tools call the same authenticated factory API. Project operations, source inspections, product conversations and worker questions use the factory's permissions, revisions and durable receipts. The clients use the running factory and its execution lease. Set `FORGE_URL` to the running factory and provide `FORGE_API_TOKEN` through your operator environment. Source-control credentials remain in the factory's application or OAuth configuration; do not put the operator token in an issue comment or product brief. diff --git a/docs/agent-lifecycle.md b/docs/agent-lifecycle.md index d8cd36d2..bdc18cb8 100644 --- a/docs/agent-lifecycle.md +++ b/docs/agent-lifecycle.md @@ -4,6 +4,8 @@ description: Inspect participants, skills, knowledge access and handoffs through # Agent lifecycle + + Use **Agents & skills** to follow work from a product decision through source delivery and application operation. The lifecycle catalog distinguishes AI dialogue, a run-selected coding provider, and deterministic services. A participant describes an implemented service or instruction binding; it is not evidence that a model session or external action has occurred. diff --git a/docs/agent-roles.md b/docs/agent-roles.md index 5acee0e2..d620f8e5 100644 --- a/docs/agent-roles.md +++ b/docs/agent-roles.md @@ -4,6 +4,8 @@ description: Configure factory roles and community skill instructions, with expl # Factory roles and community skills + + A role assigns responsibility to an actual factory stage. It does not create a separate model session. The default implementation uses one selected coding provider, deterministic planning and source checks, real repository verification, and an optional explicitly configured assurance reviewer. ## Responsibilities and execution diff --git a/docs/api.md b/docs/api.md index 3e0866e6..99598cde 100644 --- a/docs/api.md +++ b/docs/api.md @@ -169,4 +169,4 @@ Provider configuration accepts `{"values":{"model":"MODEL","api_key":"PRIVATE_KE Project policies accept `{"skills":["implementation","verification","security"]}`. Omitting `skills` when creating a run uses project defaults; an explicit empty array selects no optional policies. Core framework integration, source safety and verification cannot be disabled. -See [SCM](scm.md) for repository discovery, OAuth redirects and grants; [knowledge](knowledge.md) for source selection and project scopes; and [deployment](deployment.md) for target commands, source checks and rollback requests. +See [connected accounts](connected-accounts.md#api-and-client-contract) for typed service policy, client registration, browser consent and effect receipts; [SCM](scm.md) for repository discovery, OAuth redirects and grants; [knowledge](knowledge.md) for source selection and project scopes; and [deployment](deployment.md) for target commands, source checks and rollback requests. diff --git a/docs/architecture.md b/docs/architecture.md index 59a99b7c..9ddcd7a7 100644 --- a/docs/architecture.md +++ b/docs/architecture.md @@ -22,7 +22,7 @@ The factory itself uses [pyfly](https://fireflyframework.org/frameworks/python/)
The same services support a combined process and split admission/execution. Read the arrows as responsibility boundaries; coding providers, Git and knowledge services produce effects outside a database transaction.
-`create_runtime()` constructs the native `PyFlyApplication`, registers `ForgeBeans` and the typed controllers/repositories, then lets the container inject their dependencies. `create_application()` adds the Starlette adapter, request limits, trusted-host middleware and Studio's static build. The worker uses the runtime without an HTTP listener. +`create_runtime()` constructs the native `PyFlyApplication`, registers `FactoryConfiguration` and the typed controllers/repositories, then resolves their registered dependencies through the container. Domain services also retain explicit collaborators and test seams; this does not establish that every construction path is container-owned. `create_application()` adds the Starlette adapter, request limits, trusted-host middleware and Studio's static build. The worker uses the runtime without an HTTP listener. | Layer | Concrete implementation | Contract | | --- | --- | --- | @@ -35,7 +35,36 @@ The factory itself uses [pyfly](https://fireflyframework.org/frameworks/python/) Lifecycle ordering initializes `Store` before topology and execution consumers. The engine acquires ownership before recovering retained work. Worker supervision watches coding, delivery, deployment, campaign, channel and application-observation consumers. A stopped required consumer degrades execution readiness; shutdown closes dispatch and drains effects before releasing ownership. See [runtime roles](runtime-roles.md). -Source: [`api.py`](https://github.com/fireflyframework/firefly-forge/blob/main/src/firefly_forge/api.py) (`ForgeBeans`, `create_runtime`, `create_application`), [`worker_runtime.py`](https://github.com/fireflyframework/firefly-forge/blob/main/src/firefly_forge/worker_runtime.py) (`WorkerSupervision`). +### Native knowledge services + +`FactoryConfiguration.knowledge_connection()` injects the private `ConfigurationStore` into `KnowledgeConnection`. `knowledge_manager()` injects `Store`, `Engine`, `Journal`, that connection and `KnowledgeFirst`; it connects the same manager to execution and native knowledge-first tools. `KnowledgeController` uses typed pyfly mappings for configuration, authentication tests, scoped search, source indexing and verified memory. `KnowledgeUploads` has its own injected repository for retained source-upload evidence. + +The connection owns authenticated SDK transport and TLS trust. The manager chooses the frozen connection revision, confines repository scope and handles source/canonical receipts. `KnowledgeFirst` combines those cited references with eligible PostgreSQL procedure outcomes before considering configured web search. It cannot treat a search hit as an approved procedure. + +Flycanon's server runs in a separate environment, with its own migration and ingestion worker. Installing the Python SDK into forge supplies the client; the managed server image installs the released server independently. No flyquery bean, controller, client dependency or analytics worker is registered in this runtime. + +Source: [`api.py`](https://github.com/fireflyframework/firefly-forge/blob/main/src/firefly_forge/api.py) (`FactoryConfiguration`, `create_runtime`, `create_application`), [`worker_runtime.py`](https://github.com/fireflyframework/firefly-forge/blob/main/src/firefly_forge/worker_runtime.py) (`WorkerSupervision`). + +### Connection OAuth and resource custody + +`FactoryConfiguration` registers `OAuthProviderPolicies`, `ConnectionOAuth`, `OAuthResources` and the external MCP registry as separate native beans. Policy admission fixes the issuer, endpoints, resource and scope. The connection service binds client registration and browser attempts to the current actor and immutable revision; it uses public pyfly OAuth client and PKCE APIs. PostgreSQL stores encrypted credentials, grant families, effects and append-only events. + +`OAuthResources` signs a project/resource binding and rechecks current policy, registration, grant family/revision, expiry and project authority before dispatch. A schema review and exact repository/tool grant remain mandatory. Current authorization also protects cached broker receipts: a completed result cannot bypass a withdrawn policy or revoked grant. + +
+ + + Admit a fixed service, retain client registration, authorize in the browser, record token effects, bind the exact project resource, and review schemas and tool grants before broker dispatch. + + +[Open full diagram](diagrams/architecture-oauth.svg) · [Portrait layout](diagrams/architecture-oauth-narrow.svg) + +
Consent retains an account grant. Current resource custody, exact schemas and project tool admission remain separate checks.
+
+ +The implemented local service is administrator-only and requires explicit development flags, literal loopback addresses and different factory/provider hosts. The native browser qualification used IPv4 for forge and IPv6 for the owned stock pyfly service. GitHub, Figma, Sentry, Grafana and external Playwright OAuth retain their provider prerequisites. [Connected accounts](connected-accounts.md) explains the actual wizard, typed API and separate MCP admission steps. + +Source: [`oauth_provider_policies.py`](https://github.com/fireflyframework/firefly-forge/blob/main/src/firefly_forge/oauth_provider_policies.py), [`connection_oauth.py`](https://github.com/fireflyframework/firefly-forge/blob/main/src/firefly_forge/connection_oauth.py), [`oauth_resources.py`](https://github.com/fireflyframework/firefly-forge/blob/main/src/firefly_forge/oauth_resources.py), [`mcp_registry.py`](https://github.com/fireflyframework/firefly-forge/blob/main/src/firefly_forge/mcp_registry.py). ## PostgreSQL records and transaction boundaries @@ -219,7 +248,7 @@ Pinned community skills are instruction adaptations with retained source, hash a | Official Codex / Claude Code | The official CLI's native tools and permission controls | A Python role tool list is advisory; it is not the CLI sandbox. | | Native browser QA | Fresh Docker context, declared local origin and bounded actions | Layout diagnostics and screenshots require actual visual/interaction review. | | Internet search | Explicit Brave or Tavily selection, retained credential revision and domain restrictions | Bounded cited results are untrusted references; no key goes to the model. | -| Factory MCP | 96 authenticated operator tools in `mcp_server.py` | These API tools are distinct from a coding model's workspace tools. | +| Factory MCP | 108 authenticated operator tools in `mcp_server.py` | These API tools are distinct from a coding model's workspace tools. | Flycanon retrieves `forge-` project context and shared framework references. Required retrieval failure prevents coding continuation. The retained citations/context digest support recovery. A ProductProject does not automatically create an aggregated memory workspace across its repositories. @@ -231,6 +260,12 @@ Source: [`agent_roles.py`](https://github.com/fireflyframework/firefly-forge/blo The [learning architecture](learning.md) defines exact reuse eligibility, evidence-backed local procedure outcomes, observed failed checks and typed question/tool/review associations. Its diagrams separate PostgreSQL decision authority from flycanon retrieval and show where native fireflyframework-agentic workers provide proposals. The initial implementation adds scoped PostgreSQL records, native knowledge-first tools and explicit one-shot flycanon projection. Automatic retrieval from projected learning namespaces, classified negative repair controls and sharing between projects remain open; their contracts do not establish runtime acceptance. +### Structured analytics boundary + +The optional [flyquery](https://github.com/fireflyframework/flyquery) architecture would query explicit, versioned project snapshots through an independently authorized service. It would never receive a direct connection to the factory ledger, retained private directory or flycanon database. Query results remain untrusted analytical evidence; factory records and cited canonical memory retain their existing authority. + +The [structured analytics design](structured-knowledge.md) records the assessed pipeline, known execution gaps, proposed native service boundaries and required authorization, snapshot and write-ahead checks. This release has no forge adapter or managed flyquery deployment. + ## Runner ownership, collection and takeover
diff --git a/docs/assets/native-oauth/client-desktop-light.png b/docs/assets/native-oauth/client-desktop-light.png new file mode 100644 index 00000000..9bb7764e Binary files /dev/null and b/docs/assets/native-oauth/client-desktop-light.png differ diff --git a/docs/assets/native-oauth/client-mobile-light.png b/docs/assets/native-oauth/client-mobile-light.png new file mode 100644 index 00000000..0367f08b Binary files /dev/null and b/docs/assets/native-oauth/client-mobile-light.png differ diff --git a/docs/assets/native-oauth/guide-desktop-dark.png b/docs/assets/native-oauth/guide-desktop-dark.png new file mode 100644 index 00000000..1d99771e Binary files /dev/null and b/docs/assets/native-oauth/guide-desktop-dark.png differ diff --git a/docs/assets/native-oauth/provenance.json b/docs/assets/native-oauth/provenance.json new file mode 100644 index 00000000..cf4c4e5d --- /dev/null +++ b/docs/assets/native-oauth/provenance.json @@ -0,0 +1,48 @@ +{ + "schema_version": 1, + "copyright": "Copyright 2026 Firefly Software Foundation", + "license": "Apache-2.0", + "software_version": "0.2.4", + "capture_scope": "Four source-bound actual Studio captures from an isolated API-only factory and owned stock public pyfly authorization/MCP service; synthetic project and repository data.", + "backend_commit": "52fec10e96396de2281445bc3f9a9382bd302bdd", + "backend_tree": "a910d97dca102fe4f6e78efedc8d92194ffcc29b", + "studio_commit": "52fec10e96396de2281445bc3f9a9382bd302bdd", + "pyfly_distribution": "26.10.3", + "factory_transport": "actual IPv4 TCP uvicorn", + "provider_transport": "actual IPv6 TCP uvicorn, stock public pyfly authorization server and MCP server", + "functional_qualification": "PASS", + "security_cookie_boundary": "PASS", + "public_evidence_secret_scan": true, + "wal_chain_verified": true, + "cached_receipt_replay_prevented": true, + "withdrawn_policy_cached_receipt_denied": true, + "capture_count": 4, + "source_hash_count": 245, + "source_hash_manifest_sha256": "87aab748a7560c505af3fee437967eb581a4542886ff43a0e061075323a2f9c3", + "capture_identities": [ + { + "path": "client-desktop-light.png", + "source_capture": "client-registration-1440-light.png", + "sha256": "091bec3188ec5ffd0130083c19944ad5d6fa36cda60f4e68b620f68e7cc7f64a" + }, + { + "path": "client-mobile-light.png", + "source_capture": "client-registration-390-light.png", + "sha256": "70e00c3fbace0d7c6554cf8550cec9c33522a1e3561026cdad3b64bde1ce9ff7" + }, + { + "path": "guide-desktop-dark.png", + "source_capture": "client-registration-guide-scrolled-1200-dark.png", + "sha256": "e0dc9c0fbf95d8de27432a394212276d661bf34963934561487392d1777c8d07" + }, + { + "path": "state-desktop-dark.png", + "source_capture": "connection-state-1440-dark.png", + "sha256": "b330bf8b6212fb3b0b6f6cde7c45aceac3a1a8e36e82b07e8533a4646ea89096" + } + ], + "qualification_receipt_sha256": "6a864aa8ddaf84406db5b0402074a2b5ca33cabdf7472ab27b256a00c984ed5c", + "cloud_deployments": 0, + "external_provider_calls": 0, + "qualification_scope": "Local bootstrap and owned services; Studio consent forms are distinct from native API MCP setup and in-process broker resource dispatch. Vendor accounts, production federation and complete factory acceptance require separate evidence." +} diff --git a/docs/assets/native-oauth/state-desktop-dark.png b/docs/assets/native-oauth/state-desktop-dark.png new file mode 100644 index 00000000..46c08a9b Binary files /dev/null and b/docs/assets/native-oauth/state-desktop-dark.png differ diff --git a/docs/assets/screenshots/connect-coding-ai-desktop-dark.png b/docs/assets/screenshots/connect-coding-ai-desktop-dark.png index ee97daef..53d15476 100644 Binary files a/docs/assets/screenshots/connect-coding-ai-desktop-dark.png and b/docs/assets/screenshots/connect-coding-ai-desktop-dark.png differ diff --git a/docs/assets/screenshots/connect-coding-ai-desktop-light.png b/docs/assets/screenshots/connect-coding-ai-desktop-light.png index b3112cb7..b3109b04 100644 Binary files a/docs/assets/screenshots/connect-coding-ai-desktop-light.png and b/docs/assets/screenshots/connect-coding-ai-desktop-light.png differ diff --git a/docs/assets/screenshots/connect-coding-ai-mobile-dark.png b/docs/assets/screenshots/connect-coding-ai-mobile-dark.png index 632776e2..c5981b1a 100644 Binary files a/docs/assets/screenshots/connect-coding-ai-mobile-dark.png and b/docs/assets/screenshots/connect-coding-ai-mobile-dark.png differ diff --git a/docs/assets/screenshots/connect-coding-ai-mobile-light.png b/docs/assets/screenshots/connect-coding-ai-mobile-light.png index 1125ec6e..5e3e3ba5 100644 Binary files a/docs/assets/screenshots/connect-coding-ai-mobile-light.png and b/docs/assets/screenshots/connect-coding-ai-mobile-light.png differ diff --git a/docs/assets/screenshots/connect-knowledge-desktop-dark.png b/docs/assets/screenshots/connect-knowledge-desktop-dark.png index 281128ea..152a9181 100644 Binary files a/docs/assets/screenshots/connect-knowledge-desktop-dark.png and b/docs/assets/screenshots/connect-knowledge-desktop-dark.png differ diff --git a/docs/assets/screenshots/connect-knowledge-desktop-light.png b/docs/assets/screenshots/connect-knowledge-desktop-light.png index 0b593c40..37361037 100644 Binary files a/docs/assets/screenshots/connect-knowledge-desktop-light.png and b/docs/assets/screenshots/connect-knowledge-desktop-light.png differ diff --git a/docs/assets/screenshots/connect-knowledge-mobile-dark.png b/docs/assets/screenshots/connect-knowledge-mobile-dark.png index 4d6e5a69..d476ba60 100644 Binary files a/docs/assets/screenshots/connect-knowledge-mobile-dark.png and b/docs/assets/screenshots/connect-knowledge-mobile-dark.png differ diff --git a/docs/assets/screenshots/connect-knowledge-mobile-light.png b/docs/assets/screenshots/connect-knowledge-mobile-light.png index 120d787f..d94c7860 100644 Binary files a/docs/assets/screenshots/connect-knowledge-mobile-light.png and b/docs/assets/screenshots/connect-knowledge-mobile-light.png differ diff --git a/docs/assets/screenshots/connect-repositories-desktop-dark.png b/docs/assets/screenshots/connect-repositories-desktop-dark.png index 186cd661..ccb5cf11 100644 Binary files a/docs/assets/screenshots/connect-repositories-desktop-dark.png and b/docs/assets/screenshots/connect-repositories-desktop-dark.png differ diff --git a/docs/assets/screenshots/connect-repositories-desktop-light.png b/docs/assets/screenshots/connect-repositories-desktop-light.png index 3bf3254b..14dde7da 100644 Binary files a/docs/assets/screenshots/connect-repositories-desktop-light.png and b/docs/assets/screenshots/connect-repositories-desktop-light.png differ diff --git a/docs/assets/screenshots/connect-repositories-mobile-dark.png b/docs/assets/screenshots/connect-repositories-mobile-dark.png index 3c7c8628..8aa8afe5 100644 Binary files a/docs/assets/screenshots/connect-repositories-mobile-dark.png and b/docs/assets/screenshots/connect-repositories-mobile-dark.png differ diff --git a/docs/assets/screenshots/connect-repositories-mobile-light.png b/docs/assets/screenshots/connect-repositories-mobile-light.png index c2d321b1..3c94d221 100644 Binary files a/docs/assets/screenshots/connect-repositories-mobile-light.png and b/docs/assets/screenshots/connect-repositories-mobile-light.png differ diff --git a/docs/assets/screenshots/connect-workspace-desktop-dark.png b/docs/assets/screenshots/connect-workspace-desktop-dark.png index 4201e625..c2f8cc3a 100644 Binary files a/docs/assets/screenshots/connect-workspace-desktop-dark.png and b/docs/assets/screenshots/connect-workspace-desktop-dark.png differ diff --git a/docs/assets/screenshots/connect-workspace-desktop-light.png b/docs/assets/screenshots/connect-workspace-desktop-light.png index c9846d57..d8a06b19 100644 Binary files a/docs/assets/screenshots/connect-workspace-desktop-light.png and b/docs/assets/screenshots/connect-workspace-desktop-light.png differ diff --git a/docs/assets/screenshots/connect-workspace-mobile-dark.png b/docs/assets/screenshots/connect-workspace-mobile-dark.png index 00f348d3..b0a09d39 100644 Binary files a/docs/assets/screenshots/connect-workspace-mobile-dark.png and b/docs/assets/screenshots/connect-workspace-mobile-dark.png differ diff --git a/docs/assets/screenshots/connect-workspace-mobile-light.png b/docs/assets/screenshots/connect-workspace-mobile-light.png index db37792d..12e6d18f 100644 Binary files a/docs/assets/screenshots/connect-workspace-mobile-light.png and b/docs/assets/screenshots/connect-workspace-mobile-light.png differ diff --git a/docs/assets/screenshots/evidence-artifacts-desktop-dark.png b/docs/assets/screenshots/evidence-artifacts-desktop-dark.png index 4adaee52..53f13cf6 100644 Binary files a/docs/assets/screenshots/evidence-artifacts-desktop-dark.png and b/docs/assets/screenshots/evidence-artifacts-desktop-dark.png differ diff --git a/docs/assets/screenshots/evidence-artifacts-desktop-light.png b/docs/assets/screenshots/evidence-artifacts-desktop-light.png index e98e8fcb..207629e8 100644 Binary files a/docs/assets/screenshots/evidence-artifacts-desktop-light.png and b/docs/assets/screenshots/evidence-artifacts-desktop-light.png differ diff --git a/docs/assets/screenshots/evidence-artifacts-mobile-dark.png b/docs/assets/screenshots/evidence-artifacts-mobile-dark.png index add7260c..5b076244 100644 Binary files a/docs/assets/screenshots/evidence-artifacts-mobile-dark.png and b/docs/assets/screenshots/evidence-artifacts-mobile-dark.png differ diff --git a/docs/assets/screenshots/evidence-artifacts-mobile-light.png b/docs/assets/screenshots/evidence-artifacts-mobile-light.png index 61c4bc73..585651e4 100644 Binary files a/docs/assets/screenshots/evidence-artifacts-mobile-light.png and b/docs/assets/screenshots/evidence-artifacts-mobile-light.png differ diff --git a/docs/assets/screenshots/evidence-changes-desktop-dark.png b/docs/assets/screenshots/evidence-changes-desktop-dark.png index 56b9df06..5da06e78 100644 Binary files a/docs/assets/screenshots/evidence-changes-desktop-dark.png and b/docs/assets/screenshots/evidence-changes-desktop-dark.png differ diff --git a/docs/assets/screenshots/evidence-changes-desktop-light.png b/docs/assets/screenshots/evidence-changes-desktop-light.png index 71cf2f47..44d068f6 100644 Binary files a/docs/assets/screenshots/evidence-changes-desktop-light.png and b/docs/assets/screenshots/evidence-changes-desktop-light.png differ diff --git a/docs/assets/screenshots/evidence-changes-mobile-dark.png b/docs/assets/screenshots/evidence-changes-mobile-dark.png index d08a3229..645d8490 100644 Binary files a/docs/assets/screenshots/evidence-changes-mobile-dark.png and b/docs/assets/screenshots/evidence-changes-mobile-dark.png differ diff --git a/docs/assets/screenshots/evidence-changes-mobile-light.png b/docs/assets/screenshots/evidence-changes-mobile-light.png index 86507184..8dc6fd97 100644 Binary files a/docs/assets/screenshots/evidence-changes-mobile-light.png and b/docs/assets/screenshots/evidence-changes-mobile-light.png differ diff --git a/docs/assets/screenshots/evidence-plan-desktop-dark.png b/docs/assets/screenshots/evidence-plan-desktop-dark.png index 7d5d5f6d..f8e8eeaa 100644 Binary files a/docs/assets/screenshots/evidence-plan-desktop-dark.png and b/docs/assets/screenshots/evidence-plan-desktop-dark.png differ diff --git a/docs/assets/screenshots/evidence-plan-desktop-light.png b/docs/assets/screenshots/evidence-plan-desktop-light.png index 321111fa..464798b8 100644 Binary files a/docs/assets/screenshots/evidence-plan-desktop-light.png and b/docs/assets/screenshots/evidence-plan-desktop-light.png differ diff --git a/docs/assets/screenshots/evidence-plan-mobile-dark.png b/docs/assets/screenshots/evidence-plan-mobile-dark.png index 0d49d2fe..14617d99 100644 Binary files a/docs/assets/screenshots/evidence-plan-mobile-dark.png and b/docs/assets/screenshots/evidence-plan-mobile-dark.png differ diff --git a/docs/assets/screenshots/evidence-plan-mobile-light.png b/docs/assets/screenshots/evidence-plan-mobile-light.png index 1c73dc40..d4546a64 100644 Binary files a/docs/assets/screenshots/evidence-plan-mobile-light.png and b/docs/assets/screenshots/evidence-plan-mobile-light.png differ diff --git a/docs/assets/screenshots/evidence-verification-desktop-dark.png b/docs/assets/screenshots/evidence-verification-desktop-dark.png index 2c73780f..3596d9d5 100644 Binary files a/docs/assets/screenshots/evidence-verification-desktop-dark.png and b/docs/assets/screenshots/evidence-verification-desktop-dark.png differ diff --git a/docs/assets/screenshots/evidence-verification-desktop-light.png b/docs/assets/screenshots/evidence-verification-desktop-light.png index 67564576..0e05c775 100644 Binary files a/docs/assets/screenshots/evidence-verification-desktop-light.png and b/docs/assets/screenshots/evidence-verification-desktop-light.png differ diff --git a/docs/assets/screenshots/evidence-verification-mobile-dark.png b/docs/assets/screenshots/evidence-verification-mobile-dark.png index 50cb1d91..7f922303 100644 Binary files a/docs/assets/screenshots/evidence-verification-mobile-dark.png and b/docs/assets/screenshots/evidence-verification-mobile-dark.png differ diff --git a/docs/assets/screenshots/evidence-verification-mobile-light.png b/docs/assets/screenshots/evidence-verification-mobile-light.png index 09b8d7a7..674221f6 100644 Binary files a/docs/assets/screenshots/evidence-verification-mobile-light.png and b/docs/assets/screenshots/evidence-verification-mobile-light.png differ diff --git a/docs/assets/screenshots/external-catalog-desktop-dark.png b/docs/assets/screenshots/external-catalog-desktop-dark.png index 1b65dffb..fdea9ea4 100644 Binary files a/docs/assets/screenshots/external-catalog-desktop-dark.png and b/docs/assets/screenshots/external-catalog-desktop-dark.png differ diff --git a/docs/assets/screenshots/external-catalog-desktop-light.png b/docs/assets/screenshots/external-catalog-desktop-light.png index 852a6c02..6e7867ae 100644 Binary files a/docs/assets/screenshots/external-catalog-desktop-light.png and b/docs/assets/screenshots/external-catalog-desktop-light.png differ diff --git a/docs/assets/screenshots/external-catalog-mobile-dark.png b/docs/assets/screenshots/external-catalog-mobile-dark.png index 97e52104..f58c01de 100644 Binary files a/docs/assets/screenshots/external-catalog-mobile-dark.png and b/docs/assets/screenshots/external-catalog-mobile-dark.png differ diff --git a/docs/assets/screenshots/external-catalog-mobile-light.png b/docs/assets/screenshots/external-catalog-mobile-light.png index 43658276..436e7e10 100644 Binary files a/docs/assets/screenshots/external-catalog-mobile-light.png and b/docs/assets/screenshots/external-catalog-mobile-light.png differ diff --git a/docs/assets/screenshots/external-connection-desktop-dark.png b/docs/assets/screenshots/external-connection-desktop-dark.png index 960f59ef..fc14341e 100644 Binary files a/docs/assets/screenshots/external-connection-desktop-dark.png and b/docs/assets/screenshots/external-connection-desktop-dark.png differ diff --git a/docs/assets/screenshots/external-connection-desktop-light.png b/docs/assets/screenshots/external-connection-desktop-light.png index a73a7a62..212337c1 100644 Binary files a/docs/assets/screenshots/external-connection-desktop-light.png and b/docs/assets/screenshots/external-connection-desktop-light.png differ diff --git a/docs/assets/screenshots/external-connection-mobile-dark.png b/docs/assets/screenshots/external-connection-mobile-dark.png index 55e74017..353fe83d 100644 Binary files a/docs/assets/screenshots/external-connection-mobile-dark.png and b/docs/assets/screenshots/external-connection-mobile-dark.png differ diff --git a/docs/assets/screenshots/external-connection-mobile-light.png b/docs/assets/screenshots/external-connection-mobile-light.png index 13ea0bfd..deef6896 100644 Binary files a/docs/assets/screenshots/external-connection-mobile-light.png and b/docs/assets/screenshots/external-connection-mobile-light.png differ diff --git a/docs/assets/screenshots/external-discovery-desktop-dark.png b/docs/assets/screenshots/external-discovery-desktop-dark.png index 92ae877e..4996aa47 100644 Binary files a/docs/assets/screenshots/external-discovery-desktop-dark.png and b/docs/assets/screenshots/external-discovery-desktop-dark.png differ diff --git a/docs/assets/screenshots/external-discovery-desktop-light.png b/docs/assets/screenshots/external-discovery-desktop-light.png index e9b666d5..61233497 100644 Binary files a/docs/assets/screenshots/external-discovery-desktop-light.png and b/docs/assets/screenshots/external-discovery-desktop-light.png differ diff --git a/docs/assets/screenshots/external-discovery-mobile-dark.png b/docs/assets/screenshots/external-discovery-mobile-dark.png index 25c3a18f..de5b6700 100644 Binary files a/docs/assets/screenshots/external-discovery-mobile-dark.png and b/docs/assets/screenshots/external-discovery-mobile-dark.png differ diff --git a/docs/assets/screenshots/external-discovery-mobile-light.png b/docs/assets/screenshots/external-discovery-mobile-light.png index 3f113fd1..6ad03659 100644 Binary files a/docs/assets/screenshots/external-discovery-mobile-light.png and b/docs/assets/screenshots/external-discovery-mobile-light.png differ diff --git a/docs/assets/screenshots/external-figma-account-scope-desktop-dark.png b/docs/assets/screenshots/external-figma-account-scope-desktop-dark.png index 0bae842c..b34d3ff1 100644 Binary files a/docs/assets/screenshots/external-figma-account-scope-desktop-dark.png and b/docs/assets/screenshots/external-figma-account-scope-desktop-dark.png differ diff --git a/docs/assets/screenshots/external-figma-account-scope-desktop-light.png b/docs/assets/screenshots/external-figma-account-scope-desktop-light.png index 26fc57fb..73d9e153 100644 Binary files a/docs/assets/screenshots/external-figma-account-scope-desktop-light.png and b/docs/assets/screenshots/external-figma-account-scope-desktop-light.png differ diff --git a/docs/assets/screenshots/external-figma-account-scope-detail-desktop-dark.png b/docs/assets/screenshots/external-figma-account-scope-detail-desktop-dark.png index 2ac1491b..1974a9e5 100644 Binary files a/docs/assets/screenshots/external-figma-account-scope-detail-desktop-dark.png and b/docs/assets/screenshots/external-figma-account-scope-detail-desktop-dark.png differ diff --git a/docs/assets/screenshots/external-figma-account-scope-detail-desktop-light.png b/docs/assets/screenshots/external-figma-account-scope-detail-desktop-light.png index 3747b826..8a8be96a 100644 Binary files a/docs/assets/screenshots/external-figma-account-scope-detail-desktop-light.png and b/docs/assets/screenshots/external-figma-account-scope-detail-desktop-light.png differ diff --git a/docs/assets/screenshots/external-figma-account-scope-detail-mobile-dark.png b/docs/assets/screenshots/external-figma-account-scope-detail-mobile-dark.png index dc6f57b5..434a9e30 100644 Binary files a/docs/assets/screenshots/external-figma-account-scope-detail-mobile-dark.png and b/docs/assets/screenshots/external-figma-account-scope-detail-mobile-dark.png differ diff --git a/docs/assets/screenshots/external-figma-account-scope-detail-mobile-light.png b/docs/assets/screenshots/external-figma-account-scope-detail-mobile-light.png index 5b372744..c33f93e9 100644 Binary files a/docs/assets/screenshots/external-figma-account-scope-detail-mobile-light.png and b/docs/assets/screenshots/external-figma-account-scope-detail-mobile-light.png differ diff --git a/docs/assets/screenshots/external-figma-account-scope-mobile-dark.png b/docs/assets/screenshots/external-figma-account-scope-mobile-dark.png index fed1ab43..2d0a6fa9 100644 Binary files a/docs/assets/screenshots/external-figma-account-scope-mobile-dark.png and b/docs/assets/screenshots/external-figma-account-scope-mobile-dark.png differ diff --git a/docs/assets/screenshots/external-figma-account-scope-mobile-light.png b/docs/assets/screenshots/external-figma-account-scope-mobile-light.png index 2676b88d..9d16ad04 100644 Binary files a/docs/assets/screenshots/external-figma-account-scope-mobile-light.png and b/docs/assets/screenshots/external-figma-account-scope-mobile-light.png differ diff --git a/docs/assets/screenshots/external-figma-availability-desktop-dark.png b/docs/assets/screenshots/external-figma-availability-desktop-dark.png index 303b2c80..be2df65d 100644 Binary files a/docs/assets/screenshots/external-figma-availability-desktop-dark.png and b/docs/assets/screenshots/external-figma-availability-desktop-dark.png differ diff --git a/docs/assets/screenshots/external-figma-availability-desktop-light.png b/docs/assets/screenshots/external-figma-availability-desktop-light.png index f6b48fa3..13a97274 100644 Binary files a/docs/assets/screenshots/external-figma-availability-desktop-light.png and b/docs/assets/screenshots/external-figma-availability-desktop-light.png differ diff --git a/docs/assets/screenshots/external-figma-availability-mobile-dark.png b/docs/assets/screenshots/external-figma-availability-mobile-dark.png index 33994609..5b3d5b47 100644 Binary files a/docs/assets/screenshots/external-figma-availability-mobile-dark.png and b/docs/assets/screenshots/external-figma-availability-mobile-dark.png differ diff --git a/docs/assets/screenshots/external-figma-availability-mobile-light.png b/docs/assets/screenshots/external-figma-availability-mobile-light.png index b1df90a7..2d19b137 100644 Binary files a/docs/assets/screenshots/external-figma-availability-mobile-light.png and b/docs/assets/screenshots/external-figma-availability-mobile-light.png differ diff --git a/docs/assets/screenshots/external-figma-factory-setup-desktop-dark.png b/docs/assets/screenshots/external-figma-factory-setup-desktop-dark.png index 50f00622..705ea2f4 100644 Binary files a/docs/assets/screenshots/external-figma-factory-setup-desktop-dark.png and b/docs/assets/screenshots/external-figma-factory-setup-desktop-dark.png differ diff --git a/docs/assets/screenshots/external-figma-factory-setup-desktop-light.png b/docs/assets/screenshots/external-figma-factory-setup-desktop-light.png index a538b5e9..80cd7e0b 100644 Binary files a/docs/assets/screenshots/external-figma-factory-setup-desktop-light.png and b/docs/assets/screenshots/external-figma-factory-setup-desktop-light.png differ diff --git a/docs/assets/screenshots/external-figma-factory-setup-mobile-dark.png b/docs/assets/screenshots/external-figma-factory-setup-mobile-dark.png index 8e9e89e9..735e6ffb 100644 Binary files a/docs/assets/screenshots/external-figma-factory-setup-mobile-dark.png and b/docs/assets/screenshots/external-figma-factory-setup-mobile-dark.png differ diff --git a/docs/assets/screenshots/external-figma-factory-setup-mobile-light.png b/docs/assets/screenshots/external-figma-factory-setup-mobile-light.png index 26200286..c1736700 100644 Binary files a/docs/assets/screenshots/external-figma-factory-setup-mobile-light.png and b/docs/assets/screenshots/external-figma-factory-setup-mobile-light.png differ diff --git a/docs/assets/screenshots/external-figma-requirements-desktop-dark.png b/docs/assets/screenshots/external-figma-requirements-desktop-dark.png index da9f029d..cfa8de76 100644 Binary files a/docs/assets/screenshots/external-figma-requirements-desktop-dark.png and b/docs/assets/screenshots/external-figma-requirements-desktop-dark.png differ diff --git a/docs/assets/screenshots/external-figma-requirements-desktop-light.png b/docs/assets/screenshots/external-figma-requirements-desktop-light.png index d74d76e3..21d4d326 100644 Binary files a/docs/assets/screenshots/external-figma-requirements-desktop-light.png and b/docs/assets/screenshots/external-figma-requirements-desktop-light.png differ diff --git a/docs/assets/screenshots/external-figma-requirements-mobile-dark.png b/docs/assets/screenshots/external-figma-requirements-mobile-dark.png index ea2e14ce..cba941db 100644 Binary files a/docs/assets/screenshots/external-figma-requirements-mobile-dark.png and b/docs/assets/screenshots/external-figma-requirements-mobile-dark.png differ diff --git a/docs/assets/screenshots/external-figma-requirements-mobile-light.png b/docs/assets/screenshots/external-figma-requirements-mobile-light.png index 97289638..cc3577db 100644 Binary files a/docs/assets/screenshots/external-figma-requirements-mobile-light.png and b/docs/assets/screenshots/external-figma-requirements-mobile-light.png differ diff --git a/docs/assets/screenshots/external-grafana-account-scope-desktop-dark.png b/docs/assets/screenshots/external-grafana-account-scope-desktop-dark.png index 94087a8e..47d09144 100644 Binary files a/docs/assets/screenshots/external-grafana-account-scope-desktop-dark.png and b/docs/assets/screenshots/external-grafana-account-scope-desktop-dark.png differ diff --git a/docs/assets/screenshots/external-grafana-account-scope-desktop-light.png b/docs/assets/screenshots/external-grafana-account-scope-desktop-light.png index 11b948b3..00e723e6 100644 Binary files a/docs/assets/screenshots/external-grafana-account-scope-desktop-light.png and b/docs/assets/screenshots/external-grafana-account-scope-desktop-light.png differ diff --git a/docs/assets/screenshots/external-grafana-account-scope-detail-desktop-dark.png b/docs/assets/screenshots/external-grafana-account-scope-detail-desktop-dark.png index f4c63e76..115571b5 100644 Binary files a/docs/assets/screenshots/external-grafana-account-scope-detail-desktop-dark.png and b/docs/assets/screenshots/external-grafana-account-scope-detail-desktop-dark.png differ diff --git a/docs/assets/screenshots/external-grafana-account-scope-detail-desktop-light.png b/docs/assets/screenshots/external-grafana-account-scope-detail-desktop-light.png index b2391a9b..967e2340 100644 Binary files a/docs/assets/screenshots/external-grafana-account-scope-detail-desktop-light.png and b/docs/assets/screenshots/external-grafana-account-scope-detail-desktop-light.png differ diff --git a/docs/assets/screenshots/external-grafana-account-scope-detail-mobile-dark.png b/docs/assets/screenshots/external-grafana-account-scope-detail-mobile-dark.png index d9711207..e9a12cb8 100644 Binary files a/docs/assets/screenshots/external-grafana-account-scope-detail-mobile-dark.png and b/docs/assets/screenshots/external-grafana-account-scope-detail-mobile-dark.png differ diff --git a/docs/assets/screenshots/external-grafana-account-scope-detail-mobile-light.png b/docs/assets/screenshots/external-grafana-account-scope-detail-mobile-light.png index 74dc0939..711fed4c 100644 Binary files a/docs/assets/screenshots/external-grafana-account-scope-detail-mobile-light.png and b/docs/assets/screenshots/external-grafana-account-scope-detail-mobile-light.png differ diff --git a/docs/assets/screenshots/external-grafana-account-scope-mobile-dark.png b/docs/assets/screenshots/external-grafana-account-scope-mobile-dark.png index c598e67e..1943b7b3 100644 Binary files a/docs/assets/screenshots/external-grafana-account-scope-mobile-dark.png and b/docs/assets/screenshots/external-grafana-account-scope-mobile-dark.png differ diff --git a/docs/assets/screenshots/external-grafana-account-scope-mobile-light.png b/docs/assets/screenshots/external-grafana-account-scope-mobile-light.png index e113b701..616cb14b 100644 Binary files a/docs/assets/screenshots/external-grafana-account-scope-mobile-light.png and b/docs/assets/screenshots/external-grafana-account-scope-mobile-light.png differ diff --git a/docs/assets/screenshots/external-grafana-availability-desktop-dark.png b/docs/assets/screenshots/external-grafana-availability-desktop-dark.png index 211c37e7..99d022cd 100644 Binary files a/docs/assets/screenshots/external-grafana-availability-desktop-dark.png and b/docs/assets/screenshots/external-grafana-availability-desktop-dark.png differ diff --git a/docs/assets/screenshots/external-grafana-availability-desktop-light.png b/docs/assets/screenshots/external-grafana-availability-desktop-light.png index 2aabe8a6..3b6c5b47 100644 Binary files a/docs/assets/screenshots/external-grafana-availability-desktop-light.png and b/docs/assets/screenshots/external-grafana-availability-desktop-light.png differ diff --git a/docs/assets/screenshots/external-grafana-availability-mobile-dark.png b/docs/assets/screenshots/external-grafana-availability-mobile-dark.png index 19cde0be..d6cbedb9 100644 Binary files a/docs/assets/screenshots/external-grafana-availability-mobile-dark.png and b/docs/assets/screenshots/external-grafana-availability-mobile-dark.png differ diff --git a/docs/assets/screenshots/external-grafana-availability-mobile-light.png b/docs/assets/screenshots/external-grafana-availability-mobile-light.png index 0360e539..9b0f18fc 100644 Binary files a/docs/assets/screenshots/external-grafana-availability-mobile-light.png and b/docs/assets/screenshots/external-grafana-availability-mobile-light.png differ diff --git a/docs/assets/screenshots/external-grafana-factory-setup-desktop-dark.png b/docs/assets/screenshots/external-grafana-factory-setup-desktop-dark.png index 218141f8..aaf01938 100644 Binary files a/docs/assets/screenshots/external-grafana-factory-setup-desktop-dark.png and b/docs/assets/screenshots/external-grafana-factory-setup-desktop-dark.png differ diff --git a/docs/assets/screenshots/external-grafana-factory-setup-desktop-light.png b/docs/assets/screenshots/external-grafana-factory-setup-desktop-light.png index cbb8add3..c7a34984 100644 Binary files a/docs/assets/screenshots/external-grafana-factory-setup-desktop-light.png and b/docs/assets/screenshots/external-grafana-factory-setup-desktop-light.png differ diff --git a/docs/assets/screenshots/external-grafana-factory-setup-mobile-dark.png b/docs/assets/screenshots/external-grafana-factory-setup-mobile-dark.png index 111ac446..bbe9a3a8 100644 Binary files a/docs/assets/screenshots/external-grafana-factory-setup-mobile-dark.png and b/docs/assets/screenshots/external-grafana-factory-setup-mobile-dark.png differ diff --git a/docs/assets/screenshots/external-grafana-factory-setup-mobile-light.png b/docs/assets/screenshots/external-grafana-factory-setup-mobile-light.png index 16e34b09..1625a832 100644 Binary files a/docs/assets/screenshots/external-grafana-factory-setup-mobile-light.png and b/docs/assets/screenshots/external-grafana-factory-setup-mobile-light.png differ diff --git a/docs/assets/screenshots/external-grafana-requirements-desktop-dark.png b/docs/assets/screenshots/external-grafana-requirements-desktop-dark.png index 1448ae90..9b4cab7a 100644 Binary files a/docs/assets/screenshots/external-grafana-requirements-desktop-dark.png and b/docs/assets/screenshots/external-grafana-requirements-desktop-dark.png differ diff --git a/docs/assets/screenshots/external-grafana-requirements-desktop-light.png b/docs/assets/screenshots/external-grafana-requirements-desktop-light.png index d3fab59b..e508c749 100644 Binary files a/docs/assets/screenshots/external-grafana-requirements-desktop-light.png and b/docs/assets/screenshots/external-grafana-requirements-desktop-light.png differ diff --git a/docs/assets/screenshots/external-grafana-requirements-mobile-dark.png b/docs/assets/screenshots/external-grafana-requirements-mobile-dark.png index 00271cc0..8dcf197c 100644 Binary files a/docs/assets/screenshots/external-grafana-requirements-mobile-dark.png and b/docs/assets/screenshots/external-grafana-requirements-mobile-dark.png differ diff --git a/docs/assets/screenshots/external-grafana-requirements-mobile-light.png b/docs/assets/screenshots/external-grafana-requirements-mobile-light.png index dce572a9..0937d7d6 100644 Binary files a/docs/assets/screenshots/external-grafana-requirements-mobile-light.png and b/docs/assets/screenshots/external-grafana-requirements-mobile-light.png differ diff --git a/docs/assets/screenshots/external-granted-desktop-dark.png b/docs/assets/screenshots/external-granted-desktop-dark.png index 6435eb07..d7e2fcaf 100644 Binary files a/docs/assets/screenshots/external-granted-desktop-dark.png and b/docs/assets/screenshots/external-granted-desktop-dark.png differ diff --git a/docs/assets/screenshots/external-granted-desktop-light.png b/docs/assets/screenshots/external-granted-desktop-light.png index 08393c39..8de57853 100644 Binary files a/docs/assets/screenshots/external-granted-desktop-light.png and b/docs/assets/screenshots/external-granted-desktop-light.png differ diff --git a/docs/assets/screenshots/external-granted-mobile-dark.png b/docs/assets/screenshots/external-granted-mobile-dark.png index 8ee01ff4..5616e749 100644 Binary files a/docs/assets/screenshots/external-granted-mobile-dark.png and b/docs/assets/screenshots/external-granted-mobile-dark.png differ diff --git a/docs/assets/screenshots/external-granted-mobile-light.png b/docs/assets/screenshots/external-granted-mobile-light.png index 6e6d26d4..af7b3bef 100644 Binary files a/docs/assets/screenshots/external-granted-mobile-light.png and b/docs/assets/screenshots/external-granted-mobile-light.png differ diff --git a/docs/assets/screenshots/external-playwright-account-scope-desktop-dark.png b/docs/assets/screenshots/external-playwright-account-scope-desktop-dark.png index e876dacc..011737c2 100644 Binary files a/docs/assets/screenshots/external-playwright-account-scope-desktop-dark.png and b/docs/assets/screenshots/external-playwright-account-scope-desktop-dark.png differ diff --git a/docs/assets/screenshots/external-playwright-account-scope-desktop-light.png b/docs/assets/screenshots/external-playwright-account-scope-desktop-light.png index b53a12eb..96600796 100644 Binary files a/docs/assets/screenshots/external-playwright-account-scope-desktop-light.png and b/docs/assets/screenshots/external-playwright-account-scope-desktop-light.png differ diff --git a/docs/assets/screenshots/external-playwright-account-scope-detail-desktop-dark.png b/docs/assets/screenshots/external-playwright-account-scope-detail-desktop-dark.png index 447888a1..a70fba2b 100644 Binary files a/docs/assets/screenshots/external-playwright-account-scope-detail-desktop-dark.png and b/docs/assets/screenshots/external-playwright-account-scope-detail-desktop-dark.png differ diff --git a/docs/assets/screenshots/external-playwright-account-scope-detail-desktop-light.png b/docs/assets/screenshots/external-playwright-account-scope-detail-desktop-light.png index 3d713cc0..be582f29 100644 Binary files a/docs/assets/screenshots/external-playwright-account-scope-detail-desktop-light.png and b/docs/assets/screenshots/external-playwright-account-scope-detail-desktop-light.png differ diff --git a/docs/assets/screenshots/external-playwright-account-scope-detail-mobile-dark.png b/docs/assets/screenshots/external-playwright-account-scope-detail-mobile-dark.png index bf70dc62..df5b9638 100644 Binary files a/docs/assets/screenshots/external-playwright-account-scope-detail-mobile-dark.png and b/docs/assets/screenshots/external-playwright-account-scope-detail-mobile-dark.png differ diff --git a/docs/assets/screenshots/external-playwright-account-scope-detail-mobile-light.png b/docs/assets/screenshots/external-playwright-account-scope-detail-mobile-light.png index 0485ca5b..9dc9cd1c 100644 Binary files a/docs/assets/screenshots/external-playwright-account-scope-detail-mobile-light.png and b/docs/assets/screenshots/external-playwright-account-scope-detail-mobile-light.png differ diff --git a/docs/assets/screenshots/external-playwright-account-scope-mobile-dark.png b/docs/assets/screenshots/external-playwright-account-scope-mobile-dark.png index e4a6e3bc..56d1382b 100644 Binary files a/docs/assets/screenshots/external-playwright-account-scope-mobile-dark.png and b/docs/assets/screenshots/external-playwright-account-scope-mobile-dark.png differ diff --git a/docs/assets/screenshots/external-playwright-account-scope-mobile-light.png b/docs/assets/screenshots/external-playwright-account-scope-mobile-light.png index 7695eb76..28384451 100644 Binary files a/docs/assets/screenshots/external-playwright-account-scope-mobile-light.png and b/docs/assets/screenshots/external-playwright-account-scope-mobile-light.png differ diff --git a/docs/assets/screenshots/external-playwright-availability-desktop-dark.png b/docs/assets/screenshots/external-playwright-availability-desktop-dark.png index c31f0ea2..520804c4 100644 Binary files a/docs/assets/screenshots/external-playwright-availability-desktop-dark.png and b/docs/assets/screenshots/external-playwright-availability-desktop-dark.png differ diff --git a/docs/assets/screenshots/external-playwright-availability-desktop-light.png b/docs/assets/screenshots/external-playwright-availability-desktop-light.png index a8073ca2..3cfad1d2 100644 Binary files a/docs/assets/screenshots/external-playwright-availability-desktop-light.png and b/docs/assets/screenshots/external-playwright-availability-desktop-light.png differ diff --git a/docs/assets/screenshots/external-playwright-availability-mobile-dark.png b/docs/assets/screenshots/external-playwright-availability-mobile-dark.png index f7c3941f..85561cd5 100644 Binary files a/docs/assets/screenshots/external-playwright-availability-mobile-dark.png and b/docs/assets/screenshots/external-playwright-availability-mobile-dark.png differ diff --git a/docs/assets/screenshots/external-playwright-availability-mobile-light.png b/docs/assets/screenshots/external-playwright-availability-mobile-light.png index 0bcd917d..d11e5eee 100644 Binary files a/docs/assets/screenshots/external-playwright-availability-mobile-light.png and b/docs/assets/screenshots/external-playwright-availability-mobile-light.png differ diff --git a/docs/assets/screenshots/external-playwright-factory-setup-desktop-dark.png b/docs/assets/screenshots/external-playwright-factory-setup-desktop-dark.png index 0e0c35d1..2ff9536e 100644 Binary files a/docs/assets/screenshots/external-playwright-factory-setup-desktop-dark.png and b/docs/assets/screenshots/external-playwright-factory-setup-desktop-dark.png differ diff --git a/docs/assets/screenshots/external-playwright-factory-setup-desktop-light.png b/docs/assets/screenshots/external-playwright-factory-setup-desktop-light.png index afe6a1b9..c0d72975 100644 Binary files a/docs/assets/screenshots/external-playwright-factory-setup-desktop-light.png and b/docs/assets/screenshots/external-playwright-factory-setup-desktop-light.png differ diff --git a/docs/assets/screenshots/external-playwright-factory-setup-mobile-dark.png b/docs/assets/screenshots/external-playwright-factory-setup-mobile-dark.png index a5b3b34e..c6fa1bd3 100644 Binary files a/docs/assets/screenshots/external-playwright-factory-setup-mobile-dark.png and b/docs/assets/screenshots/external-playwright-factory-setup-mobile-dark.png differ diff --git a/docs/assets/screenshots/external-playwright-factory-setup-mobile-light.png b/docs/assets/screenshots/external-playwright-factory-setup-mobile-light.png index 1375eb43..c3b348e9 100644 Binary files a/docs/assets/screenshots/external-playwright-factory-setup-mobile-light.png and b/docs/assets/screenshots/external-playwright-factory-setup-mobile-light.png differ diff --git a/docs/assets/screenshots/external-playwright-requirements-desktop-dark.png b/docs/assets/screenshots/external-playwright-requirements-desktop-dark.png index 85aef773..99740b6c 100644 Binary files a/docs/assets/screenshots/external-playwright-requirements-desktop-dark.png and b/docs/assets/screenshots/external-playwright-requirements-desktop-dark.png differ diff --git a/docs/assets/screenshots/external-playwright-requirements-desktop-light.png b/docs/assets/screenshots/external-playwright-requirements-desktop-light.png index be996d0e..61ab65ff 100644 Binary files a/docs/assets/screenshots/external-playwright-requirements-desktop-light.png and b/docs/assets/screenshots/external-playwright-requirements-desktop-light.png differ diff --git a/docs/assets/screenshots/external-playwright-requirements-mobile-dark.png b/docs/assets/screenshots/external-playwright-requirements-mobile-dark.png index 2f36d966..cb8e6518 100644 Binary files a/docs/assets/screenshots/external-playwright-requirements-mobile-dark.png and b/docs/assets/screenshots/external-playwright-requirements-mobile-dark.png differ diff --git a/docs/assets/screenshots/external-playwright-requirements-mobile-light.png b/docs/assets/screenshots/external-playwright-requirements-mobile-light.png index a4bc2399..fd7b7d95 100644 Binary files a/docs/assets/screenshots/external-playwright-requirements-mobile-light.png and b/docs/assets/screenshots/external-playwright-requirements-mobile-light.png differ diff --git a/docs/assets/screenshots/external-project-desktop-dark.png b/docs/assets/screenshots/external-project-desktop-dark.png index 9208d870..a9e03103 100644 Binary files a/docs/assets/screenshots/external-project-desktop-dark.png and b/docs/assets/screenshots/external-project-desktop-dark.png differ diff --git a/docs/assets/screenshots/external-project-desktop-light.png b/docs/assets/screenshots/external-project-desktop-light.png index 931987a6..0cca4a74 100644 Binary files a/docs/assets/screenshots/external-project-desktop-light.png and b/docs/assets/screenshots/external-project-desktop-light.png differ diff --git a/docs/assets/screenshots/external-project-fields-desktop-dark.png b/docs/assets/screenshots/external-project-fields-desktop-dark.png index 9208d870..a9e03103 100644 Binary files a/docs/assets/screenshots/external-project-fields-desktop-dark.png and b/docs/assets/screenshots/external-project-fields-desktop-dark.png differ diff --git a/docs/assets/screenshots/external-project-fields-desktop-light.png b/docs/assets/screenshots/external-project-fields-desktop-light.png index 931987a6..0cca4a74 100644 Binary files a/docs/assets/screenshots/external-project-fields-desktop-light.png and b/docs/assets/screenshots/external-project-fields-desktop-light.png differ diff --git a/docs/assets/screenshots/external-project-fields-mobile-dark.png b/docs/assets/screenshots/external-project-fields-mobile-dark.png index be40d304..dc9a47b2 100644 Binary files a/docs/assets/screenshots/external-project-fields-mobile-dark.png and b/docs/assets/screenshots/external-project-fields-mobile-dark.png differ diff --git a/docs/assets/screenshots/external-project-fields-mobile-light.png b/docs/assets/screenshots/external-project-fields-mobile-light.png index 9bfcdb91..e7477110 100644 Binary files a/docs/assets/screenshots/external-project-fields-mobile-light.png and b/docs/assets/screenshots/external-project-fields-mobile-light.png differ diff --git a/docs/assets/screenshots/external-project-mobile-dark.png b/docs/assets/screenshots/external-project-mobile-dark.png index be40d304..dc9a47b2 100644 Binary files a/docs/assets/screenshots/external-project-mobile-dark.png and b/docs/assets/screenshots/external-project-mobile-dark.png differ diff --git a/docs/assets/screenshots/external-project-mobile-light.png b/docs/assets/screenshots/external-project-mobile-light.png index 9bfcdb91..e7477110 100644 Binary files a/docs/assets/screenshots/external-project-mobile-light.png and b/docs/assets/screenshots/external-project-mobile-light.png differ diff --git a/docs/assets/screenshots/external-project-roles-detail-desktop-dark.png b/docs/assets/screenshots/external-project-roles-detail-desktop-dark.png index def907c6..1ce05611 100644 Binary files a/docs/assets/screenshots/external-project-roles-detail-desktop-dark.png and b/docs/assets/screenshots/external-project-roles-detail-desktop-dark.png differ diff --git a/docs/assets/screenshots/external-project-roles-detail-desktop-light.png b/docs/assets/screenshots/external-project-roles-detail-desktop-light.png index 5b05e32a..77fa2799 100644 Binary files a/docs/assets/screenshots/external-project-roles-detail-desktop-light.png and b/docs/assets/screenshots/external-project-roles-detail-desktop-light.png differ diff --git a/docs/assets/screenshots/external-project-roles-detail-mobile-dark.png b/docs/assets/screenshots/external-project-roles-detail-mobile-dark.png index b7e98cef..7bdd5d86 100644 Binary files a/docs/assets/screenshots/external-project-roles-detail-mobile-dark.png and b/docs/assets/screenshots/external-project-roles-detail-mobile-dark.png differ diff --git a/docs/assets/screenshots/external-project-roles-detail-mobile-light.png b/docs/assets/screenshots/external-project-roles-detail-mobile-light.png index cdb7516f..354258a6 100644 Binary files a/docs/assets/screenshots/external-project-roles-detail-mobile-light.png and b/docs/assets/screenshots/external-project-roles-detail-mobile-light.png differ diff --git a/docs/assets/screenshots/external-review-confirmation-detail-desktop-dark.png b/docs/assets/screenshots/external-review-confirmation-detail-desktop-dark.png index 4c32c128..b1c4cab7 100644 Binary files a/docs/assets/screenshots/external-review-confirmation-detail-desktop-dark.png and b/docs/assets/screenshots/external-review-confirmation-detail-desktop-dark.png differ diff --git a/docs/assets/screenshots/external-review-confirmation-detail-desktop-light.png b/docs/assets/screenshots/external-review-confirmation-detail-desktop-light.png index 794167a6..d38b4290 100644 Binary files a/docs/assets/screenshots/external-review-confirmation-detail-desktop-light.png and b/docs/assets/screenshots/external-review-confirmation-detail-desktop-light.png differ diff --git a/docs/assets/screenshots/external-review-confirmation-detail-mobile-dark.png b/docs/assets/screenshots/external-review-confirmation-detail-mobile-dark.png index 15ef9844..c13ed42e 100644 Binary files a/docs/assets/screenshots/external-review-confirmation-detail-mobile-dark.png and b/docs/assets/screenshots/external-review-confirmation-detail-mobile-dark.png differ diff --git a/docs/assets/screenshots/external-review-confirmation-detail-mobile-light.png b/docs/assets/screenshots/external-review-confirmation-detail-mobile-light.png index ddde2e77..a99eab05 100644 Binary files a/docs/assets/screenshots/external-review-confirmation-detail-mobile-light.png and b/docs/assets/screenshots/external-review-confirmation-detail-mobile-light.png differ diff --git a/docs/assets/screenshots/external-review-overview-desktop-dark.png b/docs/assets/screenshots/external-review-overview-desktop-dark.png index f17b6dc9..d4e0c776 100644 Binary files a/docs/assets/screenshots/external-review-overview-desktop-dark.png and b/docs/assets/screenshots/external-review-overview-desktop-dark.png differ diff --git a/docs/assets/screenshots/external-review-overview-desktop-light.png b/docs/assets/screenshots/external-review-overview-desktop-light.png index cebdf18b..b5cd0ef6 100644 Binary files a/docs/assets/screenshots/external-review-overview-desktop-light.png and b/docs/assets/screenshots/external-review-overview-desktop-light.png differ diff --git a/docs/assets/screenshots/external-review-overview-mobile-dark.png b/docs/assets/screenshots/external-review-overview-mobile-dark.png index c3e09075..6eca93da 100644 Binary files a/docs/assets/screenshots/external-review-overview-mobile-dark.png and b/docs/assets/screenshots/external-review-overview-mobile-dark.png differ diff --git a/docs/assets/screenshots/external-review-overview-mobile-light.png b/docs/assets/screenshots/external-review-overview-mobile-light.png index 8463d3c7..0c956c40 100644 Binary files a/docs/assets/screenshots/external-review-overview-mobile-light.png and b/docs/assets/screenshots/external-review-overview-mobile-light.png differ diff --git a/docs/assets/screenshots/external-review-schema-detail-desktop-dark.png b/docs/assets/screenshots/external-review-schema-detail-desktop-dark.png index 54c22d6e..e3439811 100644 Binary files a/docs/assets/screenshots/external-review-schema-detail-desktop-dark.png and b/docs/assets/screenshots/external-review-schema-detail-desktop-dark.png differ diff --git a/docs/assets/screenshots/external-review-schema-detail-desktop-light.png b/docs/assets/screenshots/external-review-schema-detail-desktop-light.png index abb97990..bc3d3ace 100644 Binary files a/docs/assets/screenshots/external-review-schema-detail-desktop-light.png and b/docs/assets/screenshots/external-review-schema-detail-desktop-light.png differ diff --git a/docs/assets/screenshots/external-review-schema-detail-mobile-dark.png b/docs/assets/screenshots/external-review-schema-detail-mobile-dark.png index 0d9f40fe..ad7a98b5 100644 Binary files a/docs/assets/screenshots/external-review-schema-detail-mobile-dark.png and b/docs/assets/screenshots/external-review-schema-detail-mobile-dark.png differ diff --git a/docs/assets/screenshots/external-review-schema-detail-mobile-light.png b/docs/assets/screenshots/external-review-schema-detail-mobile-light.png index d8ef9554..961d331a 100644 Binary files a/docs/assets/screenshots/external-review-schema-detail-mobile-light.png and b/docs/assets/screenshots/external-review-schema-detail-mobile-light.png differ diff --git a/docs/assets/screenshots/external-sentry-account-scope-desktop-dark.png b/docs/assets/screenshots/external-sentry-account-scope-desktop-dark.png index bb83cabe..17db2279 100644 Binary files a/docs/assets/screenshots/external-sentry-account-scope-desktop-dark.png and b/docs/assets/screenshots/external-sentry-account-scope-desktop-dark.png differ diff --git a/docs/assets/screenshots/external-sentry-account-scope-desktop-light.png b/docs/assets/screenshots/external-sentry-account-scope-desktop-light.png index b29ca6f9..c2ac6f73 100644 Binary files a/docs/assets/screenshots/external-sentry-account-scope-desktop-light.png and b/docs/assets/screenshots/external-sentry-account-scope-desktop-light.png differ diff --git a/docs/assets/screenshots/external-sentry-account-scope-detail-desktop-dark.png b/docs/assets/screenshots/external-sentry-account-scope-detail-desktop-dark.png index b513cb18..e346d96f 100644 Binary files a/docs/assets/screenshots/external-sentry-account-scope-detail-desktop-dark.png and b/docs/assets/screenshots/external-sentry-account-scope-detail-desktop-dark.png differ diff --git a/docs/assets/screenshots/external-sentry-account-scope-detail-desktop-light.png b/docs/assets/screenshots/external-sentry-account-scope-detail-desktop-light.png index 70d14a54..7795bdd4 100644 Binary files a/docs/assets/screenshots/external-sentry-account-scope-detail-desktop-light.png and b/docs/assets/screenshots/external-sentry-account-scope-detail-desktop-light.png differ diff --git a/docs/assets/screenshots/external-sentry-account-scope-detail-mobile-dark.png b/docs/assets/screenshots/external-sentry-account-scope-detail-mobile-dark.png index 269be1cd..a8fd127b 100644 Binary files a/docs/assets/screenshots/external-sentry-account-scope-detail-mobile-dark.png and b/docs/assets/screenshots/external-sentry-account-scope-detail-mobile-dark.png differ diff --git a/docs/assets/screenshots/external-sentry-account-scope-detail-mobile-light.png b/docs/assets/screenshots/external-sentry-account-scope-detail-mobile-light.png index 281325c7..ed024040 100644 Binary files a/docs/assets/screenshots/external-sentry-account-scope-detail-mobile-light.png and b/docs/assets/screenshots/external-sentry-account-scope-detail-mobile-light.png differ diff --git a/docs/assets/screenshots/external-sentry-account-scope-mobile-dark.png b/docs/assets/screenshots/external-sentry-account-scope-mobile-dark.png index 6d57a5eb..219f89b7 100644 Binary files a/docs/assets/screenshots/external-sentry-account-scope-mobile-dark.png and b/docs/assets/screenshots/external-sentry-account-scope-mobile-dark.png differ diff --git a/docs/assets/screenshots/external-sentry-account-scope-mobile-light.png b/docs/assets/screenshots/external-sentry-account-scope-mobile-light.png index 53344d7b..02d012d2 100644 Binary files a/docs/assets/screenshots/external-sentry-account-scope-mobile-light.png and b/docs/assets/screenshots/external-sentry-account-scope-mobile-light.png differ diff --git a/docs/assets/screenshots/external-sentry-availability-desktop-dark.png b/docs/assets/screenshots/external-sentry-availability-desktop-dark.png index 02069865..caaa6f55 100644 Binary files a/docs/assets/screenshots/external-sentry-availability-desktop-dark.png and b/docs/assets/screenshots/external-sentry-availability-desktop-dark.png differ diff --git a/docs/assets/screenshots/external-sentry-availability-desktop-light.png b/docs/assets/screenshots/external-sentry-availability-desktop-light.png index 47a3ad89..a9280af9 100644 Binary files a/docs/assets/screenshots/external-sentry-availability-desktop-light.png and b/docs/assets/screenshots/external-sentry-availability-desktop-light.png differ diff --git a/docs/assets/screenshots/external-sentry-availability-mobile-dark.png b/docs/assets/screenshots/external-sentry-availability-mobile-dark.png index 64684500..391d9068 100644 Binary files a/docs/assets/screenshots/external-sentry-availability-mobile-dark.png and b/docs/assets/screenshots/external-sentry-availability-mobile-dark.png differ diff --git a/docs/assets/screenshots/external-sentry-availability-mobile-light.png b/docs/assets/screenshots/external-sentry-availability-mobile-light.png index 60142d9e..dc4a9e10 100644 Binary files a/docs/assets/screenshots/external-sentry-availability-mobile-light.png and b/docs/assets/screenshots/external-sentry-availability-mobile-light.png differ diff --git a/docs/assets/screenshots/external-sentry-factory-setup-desktop-dark.png b/docs/assets/screenshots/external-sentry-factory-setup-desktop-dark.png index 45bf4348..b95d52ff 100644 Binary files a/docs/assets/screenshots/external-sentry-factory-setup-desktop-dark.png and b/docs/assets/screenshots/external-sentry-factory-setup-desktop-dark.png differ diff --git a/docs/assets/screenshots/external-sentry-factory-setup-desktop-light.png b/docs/assets/screenshots/external-sentry-factory-setup-desktop-light.png index 0f1b4a94..d53ece01 100644 Binary files a/docs/assets/screenshots/external-sentry-factory-setup-desktop-light.png and b/docs/assets/screenshots/external-sentry-factory-setup-desktop-light.png differ diff --git a/docs/assets/screenshots/external-sentry-factory-setup-mobile-dark.png b/docs/assets/screenshots/external-sentry-factory-setup-mobile-dark.png index 658d7899..7450efb2 100644 Binary files a/docs/assets/screenshots/external-sentry-factory-setup-mobile-dark.png and b/docs/assets/screenshots/external-sentry-factory-setup-mobile-dark.png differ diff --git a/docs/assets/screenshots/external-sentry-factory-setup-mobile-light.png b/docs/assets/screenshots/external-sentry-factory-setup-mobile-light.png index 322e4919..8018569f 100644 Binary files a/docs/assets/screenshots/external-sentry-factory-setup-mobile-light.png and b/docs/assets/screenshots/external-sentry-factory-setup-mobile-light.png differ diff --git a/docs/assets/screenshots/external-sentry-requirements-desktop-dark.png b/docs/assets/screenshots/external-sentry-requirements-desktop-dark.png index e9a870e7..14bec18a 100644 Binary files a/docs/assets/screenshots/external-sentry-requirements-desktop-dark.png and b/docs/assets/screenshots/external-sentry-requirements-desktop-dark.png differ diff --git a/docs/assets/screenshots/external-sentry-requirements-desktop-light.png b/docs/assets/screenshots/external-sentry-requirements-desktop-light.png index 8d74f00a..888f6232 100644 Binary files a/docs/assets/screenshots/external-sentry-requirements-desktop-light.png and b/docs/assets/screenshots/external-sentry-requirements-desktop-light.png differ diff --git a/docs/assets/screenshots/external-sentry-requirements-mobile-dark.png b/docs/assets/screenshots/external-sentry-requirements-mobile-dark.png index 191e91b6..f23cb11c 100644 Binary files a/docs/assets/screenshots/external-sentry-requirements-mobile-dark.png and b/docs/assets/screenshots/external-sentry-requirements-mobile-dark.png differ diff --git a/docs/assets/screenshots/external-sentry-requirements-mobile-light.png b/docs/assets/screenshots/external-sentry-requirements-mobile-light.png index 7cacc0e4..92c0f8a6 100644 Binary files a/docs/assets/screenshots/external-sentry-requirements-mobile-light.png and b/docs/assets/screenshots/external-sentry-requirements-mobile-light.png differ diff --git a/docs/assets/screenshots/factory-overview-desktop-dark.png b/docs/assets/screenshots/factory-overview-desktop-dark.png index 0f1bfb30..addfe3b4 100644 Binary files a/docs/assets/screenshots/factory-overview-desktop-dark.png and b/docs/assets/screenshots/factory-overview-desktop-dark.png differ diff --git a/docs/assets/screenshots/factory-overview-desktop-light.png b/docs/assets/screenshots/factory-overview-desktop-light.png index 987759e0..5af84a8a 100644 Binary files a/docs/assets/screenshots/factory-overview-desktop-light.png and b/docs/assets/screenshots/factory-overview-desktop-light.png differ diff --git a/docs/assets/screenshots/factory-overview-mobile-dark.png b/docs/assets/screenshots/factory-overview-mobile-dark.png index 8834fb5c..f51cd381 100644 Binary files a/docs/assets/screenshots/factory-overview-mobile-dark.png and b/docs/assets/screenshots/factory-overview-mobile-dark.png differ diff --git a/docs/assets/screenshots/factory-overview-mobile-light.png b/docs/assets/screenshots/factory-overview-mobile-light.png index d6ee22e5..fa125fb6 100644 Binary files a/docs/assets/screenshots/factory-overview-mobile-light.png and b/docs/assets/screenshots/factory-overview-mobile-light.png differ diff --git a/docs/assets/screenshots/product-behavior-desktop-dark.png b/docs/assets/screenshots/product-behavior-desktop-dark.png index 44739c41..51ff80ad 100644 Binary files a/docs/assets/screenshots/product-behavior-desktop-dark.png and b/docs/assets/screenshots/product-behavior-desktop-dark.png differ diff --git a/docs/assets/screenshots/product-behavior-desktop-light.png b/docs/assets/screenshots/product-behavior-desktop-light.png index c010453d..2f722c10 100644 Binary files a/docs/assets/screenshots/product-behavior-desktop-light.png and b/docs/assets/screenshots/product-behavior-desktop-light.png differ diff --git a/docs/assets/screenshots/product-behavior-mobile-dark.png b/docs/assets/screenshots/product-behavior-mobile-dark.png index d504f746..dbec6d3b 100644 Binary files a/docs/assets/screenshots/product-behavior-mobile-dark.png and b/docs/assets/screenshots/product-behavior-mobile-dark.png differ diff --git a/docs/assets/screenshots/product-behavior-mobile-light.png b/docs/assets/screenshots/product-behavior-mobile-light.png index 2b626b16..8f3d7a4b 100644 Binary files a/docs/assets/screenshots/product-behavior-mobile-light.png and b/docs/assets/screenshots/product-behavior-mobile-light.png differ diff --git a/docs/assets/screenshots/product-context-desktop-dark.png b/docs/assets/screenshots/product-context-desktop-dark.png index 8466badc..095a1b3c 100644 Binary files a/docs/assets/screenshots/product-context-desktop-dark.png and b/docs/assets/screenshots/product-context-desktop-dark.png differ diff --git a/docs/assets/screenshots/product-context-desktop-light.png b/docs/assets/screenshots/product-context-desktop-light.png index 659d898d..48827e77 100644 Binary files a/docs/assets/screenshots/product-context-desktop-light.png and b/docs/assets/screenshots/product-context-desktop-light.png differ diff --git a/docs/assets/screenshots/product-context-mobile-dark.png b/docs/assets/screenshots/product-context-mobile-dark.png index ab3f4dc6..bc9f252a 100644 Binary files a/docs/assets/screenshots/product-context-mobile-dark.png and b/docs/assets/screenshots/product-context-mobile-dark.png differ diff --git a/docs/assets/screenshots/product-context-mobile-light.png b/docs/assets/screenshots/product-context-mobile-light.png index 57ea55be..0ad3efd3 100644 Binary files a/docs/assets/screenshots/product-context-mobile-light.png and b/docs/assets/screenshots/product-context-mobile-light.png differ diff --git a/docs/assets/screenshots/product-feature-mapping-desktop-dark.png b/docs/assets/screenshots/product-feature-mapping-desktop-dark.png index 6f08bd3d..eb3f968f 100644 Binary files a/docs/assets/screenshots/product-feature-mapping-desktop-dark.png and b/docs/assets/screenshots/product-feature-mapping-desktop-dark.png differ diff --git a/docs/assets/screenshots/product-feature-mapping-desktop-light.png b/docs/assets/screenshots/product-feature-mapping-desktop-light.png index b44ae5d3..5f5fd5b7 100644 Binary files a/docs/assets/screenshots/product-feature-mapping-desktop-light.png and b/docs/assets/screenshots/product-feature-mapping-desktop-light.png differ diff --git a/docs/assets/screenshots/product-feature-mapping-mobile-dark.png b/docs/assets/screenshots/product-feature-mapping-mobile-dark.png index 51873cbe..122e9f53 100644 Binary files a/docs/assets/screenshots/product-feature-mapping-mobile-dark.png and b/docs/assets/screenshots/product-feature-mapping-mobile-dark.png differ diff --git a/docs/assets/screenshots/product-feature-mapping-mobile-light.png b/docs/assets/screenshots/product-feature-mapping-mobile-light.png index 92e2360f..aa5ff71d 100644 Binary files a/docs/assets/screenshots/product-feature-mapping-mobile-light.png and b/docs/assets/screenshots/product-feature-mapping-mobile-light.png differ diff --git a/docs/assets/screenshots/product-features-desktop-dark.png b/docs/assets/screenshots/product-features-desktop-dark.png index ef15c8ec..0faf7f98 100644 Binary files a/docs/assets/screenshots/product-features-desktop-dark.png and b/docs/assets/screenshots/product-features-desktop-dark.png differ diff --git a/docs/assets/screenshots/product-features-desktop-light.png b/docs/assets/screenshots/product-features-desktop-light.png index 6f61813d..9de500cc 100644 Binary files a/docs/assets/screenshots/product-features-desktop-light.png and b/docs/assets/screenshots/product-features-desktop-light.png differ diff --git a/docs/assets/screenshots/product-features-mobile-dark.png b/docs/assets/screenshots/product-features-mobile-dark.png index 9b809b70..a0d9f7be 100644 Binary files a/docs/assets/screenshots/product-features-mobile-dark.png and b/docs/assets/screenshots/product-features-mobile-dark.png differ diff --git a/docs/assets/screenshots/product-features-mobile-light.png b/docs/assets/screenshots/product-features-mobile-light.png index 421fbdf1..ebae3342 100644 Binary files a/docs/assets/screenshots/product-features-mobile-light.png and b/docs/assets/screenshots/product-features-mobile-light.png differ diff --git a/docs/assets/screenshots/product-integrations-desktop-dark.png b/docs/assets/screenshots/product-integrations-desktop-dark.png index d0d59a02..d80042cc 100644 Binary files a/docs/assets/screenshots/product-integrations-desktop-dark.png and b/docs/assets/screenshots/product-integrations-desktop-dark.png differ diff --git a/docs/assets/screenshots/product-integrations-desktop-light.png b/docs/assets/screenshots/product-integrations-desktop-light.png index fcfc14ea..ab7a2a88 100644 Binary files a/docs/assets/screenshots/product-integrations-desktop-light.png and b/docs/assets/screenshots/product-integrations-desktop-light.png differ diff --git a/docs/assets/screenshots/product-integrations-mobile-dark.png b/docs/assets/screenshots/product-integrations-mobile-dark.png index 40e5a90b..8c528128 100644 Binary files a/docs/assets/screenshots/product-integrations-mobile-dark.png and b/docs/assets/screenshots/product-integrations-mobile-dark.png differ diff --git a/docs/assets/screenshots/product-integrations-mobile-light.png b/docs/assets/screenshots/product-integrations-mobile-light.png index d81a661b..13b18699 100644 Binary files a/docs/assets/screenshots/product-integrations-mobile-light.png and b/docs/assets/screenshots/product-integrations-mobile-light.png differ diff --git a/docs/assets/screenshots/product-journeys-desktop-dark.png b/docs/assets/screenshots/product-journeys-desktop-dark.png index b94cf376..ab23ccef 100644 Binary files a/docs/assets/screenshots/product-journeys-desktop-dark.png and b/docs/assets/screenshots/product-journeys-desktop-dark.png differ diff --git a/docs/assets/screenshots/product-journeys-desktop-light.png b/docs/assets/screenshots/product-journeys-desktop-light.png index dc1d36ce..76604b9f 100644 Binary files a/docs/assets/screenshots/product-journeys-desktop-light.png and b/docs/assets/screenshots/product-journeys-desktop-light.png differ diff --git a/docs/assets/screenshots/product-journeys-mobile-dark.png b/docs/assets/screenshots/product-journeys-mobile-dark.png index 63afb2c4..c282fc7e 100644 Binary files a/docs/assets/screenshots/product-journeys-mobile-dark.png and b/docs/assets/screenshots/product-journeys-mobile-dark.png differ diff --git a/docs/assets/screenshots/product-journeys-mobile-light.png b/docs/assets/screenshots/product-journeys-mobile-light.png index 0f68e398..45ead0ec 100644 Binary files a/docs/assets/screenshots/product-journeys-mobile-light.png and b/docs/assets/screenshots/product-journeys-mobile-light.png differ diff --git a/docs/assets/screenshots/product-review-desktop-dark.png b/docs/assets/screenshots/product-review-desktop-dark.png index fd0a2bb0..0a05b73e 100644 Binary files a/docs/assets/screenshots/product-review-desktop-dark.png and b/docs/assets/screenshots/product-review-desktop-dark.png differ diff --git a/docs/assets/screenshots/product-review-desktop-light.png b/docs/assets/screenshots/product-review-desktop-light.png index e6ac6bdb..485ce735 100644 Binary files a/docs/assets/screenshots/product-review-desktop-light.png and b/docs/assets/screenshots/product-review-desktop-light.png differ diff --git a/docs/assets/screenshots/product-review-mobile-dark.png b/docs/assets/screenshots/product-review-mobile-dark.png index e19e0059..627e3ccf 100644 Binary files a/docs/assets/screenshots/product-review-mobile-dark.png and b/docs/assets/screenshots/product-review-mobile-dark.png differ diff --git a/docs/assets/screenshots/product-review-mobile-light.png b/docs/assets/screenshots/product-review-mobile-light.png index 993dc467..615691b4 100644 Binary files a/docs/assets/screenshots/product-review-mobile-light.png and b/docs/assets/screenshots/product-review-mobile-light.png differ diff --git a/docs/assets/screenshots/run-brief-desktop-dark.png b/docs/assets/screenshots/run-brief-desktop-dark.png index 799e5916..f413c94d 100644 Binary files a/docs/assets/screenshots/run-brief-desktop-dark.png and b/docs/assets/screenshots/run-brief-desktop-dark.png differ diff --git a/docs/assets/screenshots/run-brief-desktop-light.png b/docs/assets/screenshots/run-brief-desktop-light.png index 7b0bc5db..0addef0b 100644 Binary files a/docs/assets/screenshots/run-brief-desktop-light.png and b/docs/assets/screenshots/run-brief-desktop-light.png differ diff --git a/docs/assets/screenshots/run-brief-mobile-dark.png b/docs/assets/screenshots/run-brief-mobile-dark.png index 4de9d1b5..5d595b35 100644 Binary files a/docs/assets/screenshots/run-brief-mobile-dark.png and b/docs/assets/screenshots/run-brief-mobile-dark.png differ diff --git a/docs/assets/screenshots/run-brief-mobile-light.png b/docs/assets/screenshots/run-brief-mobile-light.png index 8bf297b1..a1767841 100644 Binary files a/docs/assets/screenshots/run-brief-mobile-light.png and b/docs/assets/screenshots/run-brief-mobile-light.png differ diff --git a/docs/assets/screenshots/run-checks-desktop-dark.png b/docs/assets/screenshots/run-checks-desktop-dark.png index a9f74db7..f129b575 100644 Binary files a/docs/assets/screenshots/run-checks-desktop-dark.png and b/docs/assets/screenshots/run-checks-desktop-dark.png differ diff --git a/docs/assets/screenshots/run-checks-desktop-light.png b/docs/assets/screenshots/run-checks-desktop-light.png index 7de8ac1d..dc8b0ed4 100644 Binary files a/docs/assets/screenshots/run-checks-desktop-light.png and b/docs/assets/screenshots/run-checks-desktop-light.png differ diff --git a/docs/assets/screenshots/run-checks-mobile-dark.png b/docs/assets/screenshots/run-checks-mobile-dark.png index f8acc7be..82003836 100644 Binary files a/docs/assets/screenshots/run-checks-mobile-dark.png and b/docs/assets/screenshots/run-checks-mobile-dark.png differ diff --git a/docs/assets/screenshots/run-checks-mobile-light.png b/docs/assets/screenshots/run-checks-mobile-light.png index 49ad4fdc..df3f51f6 100644 Binary files a/docs/assets/screenshots/run-checks-mobile-light.png and b/docs/assets/screenshots/run-checks-mobile-light.png differ diff --git a/docs/assets/screenshots/run-context-desktop-dark.png b/docs/assets/screenshots/run-context-desktop-dark.png index 8f6bdbbe..38c94d8a 100644 Binary files a/docs/assets/screenshots/run-context-desktop-dark.png and b/docs/assets/screenshots/run-context-desktop-dark.png differ diff --git a/docs/assets/screenshots/run-context-desktop-light.png b/docs/assets/screenshots/run-context-desktop-light.png index 72fcfacf..74d85eaf 100644 Binary files a/docs/assets/screenshots/run-context-desktop-light.png and b/docs/assets/screenshots/run-context-desktop-light.png differ diff --git a/docs/assets/screenshots/run-context-mobile-dark.png b/docs/assets/screenshots/run-context-mobile-dark.png index 85b1316a..841984b5 100644 Binary files a/docs/assets/screenshots/run-context-mobile-dark.png and b/docs/assets/screenshots/run-context-mobile-dark.png differ diff --git a/docs/assets/screenshots/run-context-mobile-light.png b/docs/assets/screenshots/run-context-mobile-light.png index fdb1b640..f86ab002 100644 Binary files a/docs/assets/screenshots/run-context-mobile-light.png and b/docs/assets/screenshots/run-context-mobile-light.png differ diff --git a/docs/assets/screenshots/run-foundation-desktop-dark.png b/docs/assets/screenshots/run-foundation-desktop-dark.png index ec9c2b76..a1ebff1a 100644 Binary files a/docs/assets/screenshots/run-foundation-desktop-dark.png and b/docs/assets/screenshots/run-foundation-desktop-dark.png differ diff --git a/docs/assets/screenshots/run-foundation-desktop-light.png b/docs/assets/screenshots/run-foundation-desktop-light.png index ace8f2cd..d6229b64 100644 Binary files a/docs/assets/screenshots/run-foundation-desktop-light.png and b/docs/assets/screenshots/run-foundation-desktop-light.png differ diff --git a/docs/assets/screenshots/run-foundation-mobile-dark.png b/docs/assets/screenshots/run-foundation-mobile-dark.png index 4e0fc691..edca4ec2 100644 Binary files a/docs/assets/screenshots/run-foundation-mobile-dark.png and b/docs/assets/screenshots/run-foundation-mobile-dark.png differ diff --git a/docs/assets/screenshots/run-foundation-mobile-light.png b/docs/assets/screenshots/run-foundation-mobile-light.png index 8efd4e9a..14d15af7 100644 Binary files a/docs/assets/screenshots/run-foundation-mobile-light.png and b/docs/assets/screenshots/run-foundation-mobile-light.png differ diff --git a/docs/assets/screenshots/run-policies-desktop-dark.png b/docs/assets/screenshots/run-policies-desktop-dark.png index d0c2a55e..50aaa349 100644 Binary files a/docs/assets/screenshots/run-policies-desktop-dark.png and b/docs/assets/screenshots/run-policies-desktop-dark.png differ diff --git a/docs/assets/screenshots/run-policies-desktop-light.png b/docs/assets/screenshots/run-policies-desktop-light.png index f1b80e91..792aa8fe 100644 Binary files a/docs/assets/screenshots/run-policies-desktop-light.png and b/docs/assets/screenshots/run-policies-desktop-light.png differ diff --git a/docs/assets/screenshots/run-policies-mobile-dark.png b/docs/assets/screenshots/run-policies-mobile-dark.png index ed54a326..3ee6845a 100644 Binary files a/docs/assets/screenshots/run-policies-mobile-dark.png and b/docs/assets/screenshots/run-policies-mobile-dark.png differ diff --git a/docs/assets/screenshots/run-policies-mobile-light.png b/docs/assets/screenshots/run-policies-mobile-light.png index 5b2fa5c5..540d7554 100644 Binary files a/docs/assets/screenshots/run-policies-mobile-light.png and b/docs/assets/screenshots/run-policies-mobile-light.png differ diff --git a/docs/assets/screenshots/run-review-desktop-dark.png b/docs/assets/screenshots/run-review-desktop-dark.png index 925b1aa7..b4e3726c 100644 Binary files a/docs/assets/screenshots/run-review-desktop-dark.png and b/docs/assets/screenshots/run-review-desktop-dark.png differ diff --git a/docs/assets/screenshots/run-review-desktop-light.png b/docs/assets/screenshots/run-review-desktop-light.png index 471f5b93..d6f7062d 100644 Binary files a/docs/assets/screenshots/run-review-desktop-light.png and b/docs/assets/screenshots/run-review-desktop-light.png differ diff --git a/docs/assets/screenshots/run-review-mobile-dark.png b/docs/assets/screenshots/run-review-mobile-dark.png index 170f2023..46821508 100644 Binary files a/docs/assets/screenshots/run-review-mobile-dark.png and b/docs/assets/screenshots/run-review-mobile-dark.png differ diff --git a/docs/assets/screenshots/run-review-mobile-light.png b/docs/assets/screenshots/run-review-mobile-light.png index f78593ba..cf3b6c01 100644 Binary files a/docs/assets/screenshots/run-review-mobile-light.png and b/docs/assets/screenshots/run-review-mobile-light.png differ diff --git a/docs/assets/screenshots/run-review-provider-desktop-dark.png b/docs/assets/screenshots/run-review-provider-desktop-dark.png index a9f74db7..f129b575 100644 Binary files a/docs/assets/screenshots/run-review-provider-desktop-dark.png and b/docs/assets/screenshots/run-review-provider-desktop-dark.png differ diff --git a/docs/assets/screenshots/run-review-provider-desktop-light.png b/docs/assets/screenshots/run-review-provider-desktop-light.png index 7de8ac1d..dc8b0ed4 100644 Binary files a/docs/assets/screenshots/run-review-provider-desktop-light.png and b/docs/assets/screenshots/run-review-provider-desktop-light.png differ diff --git a/docs/assets/screenshots/run-review-provider-mobile-dark.png b/docs/assets/screenshots/run-review-provider-mobile-dark.png index 052bbb45..4a044125 100644 Binary files a/docs/assets/screenshots/run-review-provider-mobile-dark.png and b/docs/assets/screenshots/run-review-provider-mobile-dark.png differ diff --git a/docs/assets/screenshots/run-review-provider-mobile-light.png b/docs/assets/screenshots/run-review-provider-mobile-light.png index 0c217a5b..b7cf748b 100644 Binary files a/docs/assets/screenshots/run-review-provider-mobile-light.png and b/docs/assets/screenshots/run-review-provider-mobile-light.png differ diff --git a/docs/assets/screenshots/search-access-desktop-dark.png b/docs/assets/screenshots/search-access-desktop-dark.png index b8b645f0..d91f6f06 100644 Binary files a/docs/assets/screenshots/search-access-desktop-dark.png and b/docs/assets/screenshots/search-access-desktop-dark.png differ diff --git a/docs/assets/screenshots/search-access-desktop-light.png b/docs/assets/screenshots/search-access-desktop-light.png index eee997b4..32a5273b 100644 Binary files a/docs/assets/screenshots/search-access-desktop-light.png and b/docs/assets/screenshots/search-access-desktop-light.png differ diff --git a/docs/assets/screenshots/search-access-mobile-dark.png b/docs/assets/screenshots/search-access-mobile-dark.png index e2a6f09d..4a427442 100644 Binary files a/docs/assets/screenshots/search-access-mobile-dark.png and b/docs/assets/screenshots/search-access-mobile-dark.png differ diff --git a/docs/assets/screenshots/search-access-mobile-light.png b/docs/assets/screenshots/search-access-mobile-light.png index 1eab5e9f..fb49ef8f 100644 Binary files a/docs/assets/screenshots/search-access-mobile-light.png and b/docs/assets/screenshots/search-access-mobile-light.png differ diff --git a/docs/assets/screenshots/search-provider-desktop-dark.png b/docs/assets/screenshots/search-provider-desktop-dark.png index af68750c..ede9299d 100644 Binary files a/docs/assets/screenshots/search-provider-desktop-dark.png and b/docs/assets/screenshots/search-provider-desktop-dark.png differ diff --git a/docs/assets/screenshots/search-provider-desktop-light.png b/docs/assets/screenshots/search-provider-desktop-light.png index 3620fbd0..b0282540 100644 Binary files a/docs/assets/screenshots/search-provider-desktop-light.png and b/docs/assets/screenshots/search-provider-desktop-light.png differ diff --git a/docs/assets/screenshots/search-provider-mobile-dark.png b/docs/assets/screenshots/search-provider-mobile-dark.png index 2e5db5a2..80015043 100644 Binary files a/docs/assets/screenshots/search-provider-mobile-dark.png and b/docs/assets/screenshots/search-provider-mobile-dark.png differ diff --git a/docs/assets/screenshots/search-provider-mobile-light.png b/docs/assets/screenshots/search-provider-mobile-light.png index 49837bb3..926d8ab0 100644 Binary files a/docs/assets/screenshots/search-provider-mobile-light.png and b/docs/assets/screenshots/search-provider-mobile-light.png differ diff --git a/docs/assets/screenshots/search-review-desktop-dark.png b/docs/assets/screenshots/search-review-desktop-dark.png index 798888c5..87bbd168 100644 Binary files a/docs/assets/screenshots/search-review-desktop-dark.png and b/docs/assets/screenshots/search-review-desktop-dark.png differ diff --git a/docs/assets/screenshots/search-review-desktop-light.png b/docs/assets/screenshots/search-review-desktop-light.png index d73e9daa..a1421b3c 100644 Binary files a/docs/assets/screenshots/search-review-desktop-light.png and b/docs/assets/screenshots/search-review-desktop-light.png differ diff --git a/docs/assets/screenshots/search-review-mobile-dark.png b/docs/assets/screenshots/search-review-mobile-dark.png index d4f0d72f..33d5ec20 100644 Binary files a/docs/assets/screenshots/search-review-mobile-dark.png and b/docs/assets/screenshots/search-review-mobile-dark.png differ diff --git a/docs/assets/screenshots/search-review-mobile-light.png b/docs/assets/screenshots/search-review-mobile-light.png index d805ef83..eac97872 100644 Binary files a/docs/assets/screenshots/search-review-mobile-light.png and b/docs/assets/screenshots/search-review-mobile-light.png differ diff --git a/docs/assets/screenshots/search-saved-desktop-dark.png b/docs/assets/screenshots/search-saved-desktop-dark.png index a81ec5ee..60336f5b 100644 Binary files a/docs/assets/screenshots/search-saved-desktop-dark.png and b/docs/assets/screenshots/search-saved-desktop-dark.png differ diff --git a/docs/assets/screenshots/search-saved-desktop-light.png b/docs/assets/screenshots/search-saved-desktop-light.png index d7bcecb8..d2ccf4b2 100644 Binary files a/docs/assets/screenshots/search-saved-desktop-light.png and b/docs/assets/screenshots/search-saved-desktop-light.png differ diff --git a/docs/assets/screenshots/search-saved-mobile-dark.png b/docs/assets/screenshots/search-saved-mobile-dark.png index 723acce3..0683340d 100644 Binary files a/docs/assets/screenshots/search-saved-mobile-dark.png and b/docs/assets/screenshots/search-saved-mobile-dark.png differ diff --git a/docs/assets/screenshots/search-saved-mobile-light.png b/docs/assets/screenshots/search-saved-mobile-light.png index 45fa9ce0..0b13ba8e 100644 Binary files a/docs/assets/screenshots/search-saved-mobile-light.png and b/docs/assets/screenshots/search-saved-mobile-light.png differ diff --git a/docs/assets/screenshots/walkthrough-manifest.json b/docs/assets/screenshots/walkthrough-manifest.json index e47f4fe9..f8bae369 100644 --- a/docs/assets/screenshots/walkthrough-manifest.json +++ b/docs/assets/screenshots/walkthrough-manifest.json @@ -8,8 +8,8 @@ "producer_sha256": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/connect-workspace-desktop-light.png", "stage": "connect-workspace", "theme": "light", @@ -19,7 +19,7 @@ "width": 1440, "height": 900 }, - "sha256": "628f4ee1bb43bddc509ad79cdad7c71d7c9e0aaad512a7f0161d2ca6d9407cb2", + "sha256": "f0fe4d67ab224e1e9fac7ee0f101b69a8ab230f038f1c138c594dd8ebc78dec2", "action": { "label": "Continue", "top": 713.078125, @@ -40,8 +40,8 @@ "producer_sha256": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/connect-coding-ai-desktop-light.png", "stage": "connect-coding-ai", "theme": "light", @@ -51,7 +51,7 @@ "width": 1440, "height": 900 }, - "sha256": "f865f863bb4c654f742b953a9bd1677210277dcaa6b50ca44b9a84b8ee384437", + "sha256": "9b3e6974577cb9b0c3ab387ad4caef30845053128b6111186c42d0e5c69375cf", "action": { "label": "Continue", "top": 713.078125, @@ -72,8 +72,8 @@ "producer_sha256": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/connect-repositories-desktop-light.png", "stage": "connect-repositories", "theme": "light", @@ -83,7 +83,7 @@ "width": 1440, "height": 900 }, - "sha256": "3d86410a6ef26c293cba72c42b9e260a49bfbe74d2d1dcdb2a81614efcd11a91", + "sha256": "28b5be609809b3173e8b5dbe0ba6686c623a2652e7de0142f87768dc118bf4b3", "action": { "label": "Continue to knowledge", "top": 713.078125, @@ -104,8 +104,8 @@ "producer_sha256": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/connect-knowledge-desktop-light.png", "stage": "connect-knowledge", "theme": "light", @@ -115,7 +115,7 @@ "width": 1440, "height": 900 }, - "sha256": "592fbc6ac89663eb782bc6477ff98c46f5f86d1a887c76a5e0937a6170f90872", + "sha256": "2d8075e3737d10f53ebac53eed72664929c57c9d9132d4d0efb6e539b48e7ea4", "action": { "label": "Open production floor", "top": 713.078125, @@ -136,8 +136,8 @@ "producer_sha256": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/product-context-desktop-light.png", "stage": "product-context", "theme": "light", @@ -147,7 +147,7 @@ "width": 1440, "height": 900 }, - "sha256": "ffd734d9b2358abfc68e8a0e9fce99ec2568b1e4f7a26753144a624d2b46da1e", + "sha256": "970f36e9c3ce1cda91a413bdf767299c1ee2ad6c38da8bef6c101d959dc0e0a7", "action": { "label": "Continue", "top": 738.15625, @@ -168,8 +168,8 @@ "producer_sha256": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/product-journeys-desktop-light.png", "stage": "product-journeys", "theme": "light", @@ -179,7 +179,7 @@ "width": 1440, "height": 900 }, - "sha256": "0800531e8cf7f689077c994cf065066c45035d43cdc8644489ba2f5bc577398b", + "sha256": "3afb3ac6e7a5d975843296e5fe1ede41a824578040beafe8201880fe2f0ebdeb", "action": { "label": "Continue", "top": 738.15625, @@ -200,8 +200,8 @@ "producer_sha256": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/product-features-desktop-light.png", "stage": "product-features", "theme": "light", @@ -211,7 +211,7 @@ "width": 1440, "height": 900 }, - "sha256": "cec844c23ea11d6fd66cffe35bf01134502c4aea2b50fc401abb9f556bada0de", + "sha256": "93f652c4033702e7d8668620ceed0e51de2a62cf89fbb3f9a0e0ebcf935c0d3a", "action": { "label": "Continue", "top": 738.15625, @@ -232,8 +232,8 @@ "producer_sha256": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/product-integrations-desktop-light.png", "stage": "product-integrations", "theme": "light", @@ -243,7 +243,7 @@ "width": 1440, "height": 900 }, - "sha256": "e8b9f965d6a3c59734ee2417acc3cb76bb11e3f71d4abfc7e052239f04997105", + "sha256": "a329c77209d31a3e8507e6bddc590b7ec81eb57431cca96e3912d615e66ebdca", "action": { "label": "Review definition", "top": 738.15625, @@ -264,8 +264,8 @@ "producer_sha256": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/product-review-desktop-light.png", "stage": "product-review", "theme": "light", @@ -275,7 +275,7 @@ "width": 1440, "height": 900 }, - "sha256": "1a41a5ffaa7455fc508fc3efb8081a347beb9f14018ca43a9b59dd8fb2a72172", + "sha256": "e7e6a402a4d6dd1ac9681a6995dd43c8061880ef04c83a72807fd4494bf7c19a", "action": { "label": "Save draft definition", "top": 738.15625, @@ -296,8 +296,8 @@ "producer_sha256": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/run-brief-desktop-light.png", "stage": "run-brief", "theme": "light", @@ -307,7 +307,7 @@ "width": 1440, "height": 900 }, - "sha256": "3a4e13770d05f032cc9db1c3d03be3e52e14da31e9bd1000aa8cfa4d0e001ded", + "sha256": "e96acb5df5fdbf037fdd5d8881973000751fbdad92fbde310ab70bb9da59e2d2", "action": { "label": "Continue", "top": 713.078125, @@ -328,8 +328,8 @@ "producer_sha256": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/run-foundation-desktop-light.png", "stage": "run-foundation", "theme": "light", @@ -339,7 +339,7 @@ "width": 1440, "height": 900 }, - "sha256": "d043d25dd8e08ac21060da6ba2d161f55a334fd2e492513d83aa13e5c6624bce", + "sha256": "85f82b1f2676f5251200c1b3832d0bcaa3017f8f62ea97ab7efb99f022cdfd05", "action": { "label": "Continue", "top": 713.078125, @@ -360,8 +360,8 @@ "producer_sha256": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/run-checks-desktop-light.png", "stage": "run-checks", "theme": "light", @@ -371,7 +371,7 @@ "width": 1440, "height": 900 }, - "sha256": "0a71661a53d89947f34713acfa09806a104fe277439df0ac2c9f79ffe91ab2bd", + "sha256": "a4eb7fce9abecd283d952dd286705cdb10a7ef74e4b0722ff18db738a5c6a1ae", "action": { "label": "Review run", "top": 713.078125, @@ -392,8 +392,8 @@ "producer_sha256": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/run-review-desktop-light.png", "stage": "run-review", "theme": "light", @@ -403,7 +403,7 @@ "width": 1440, "height": 900 }, - "sha256": "15a32bed406a58bfb7a545a4d5545da809257e6bace07369faec6424d710db1c", + "sha256": "acefada663364b9047a88def4f6d4b7adfdef3bbfa560daa71943a02f7c8aa8a", "action": { "label": "Start building", "top": 713.078125, @@ -424,8 +424,8 @@ "producer_sha256": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/factory-overview-desktop-light.png", "stage": "factory-overview", "theme": "light", @@ -435,7 +435,7 @@ "width": 1440, "height": 900 }, - "sha256": "057e0e3b2a33d566045e0ccf9744f7ed01bae6b6127f5ef985698ab4d0dc59dc", + "sha256": "9dedeabb511dba6f7b1327efa582a40a7ebc89b0e0e452345475edf44c8f105f", "action": null, "captured_action": null }, @@ -444,8 +444,8 @@ "producer_sha256": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/evidence-changes-desktop-light.png", "stage": "evidence-changes", "theme": "light", @@ -455,7 +455,7 @@ "width": 1440, "height": 900 }, - "sha256": "e38641bfa597f9a8b288b0daf37023df724ce2765829d36c95543c3bfe549d4b", + "sha256": "416cd2c7b009014ea0f1bd9b8b962365356b97264d035922baa4e0cf9d1358f9", "action": null, "captured_action": null }, @@ -464,8 +464,8 @@ "producer_sha256": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/evidence-verification-desktop-light.png", "stage": "evidence-verification", "theme": "light", @@ -475,7 +475,7 @@ "width": 1440, "height": 900 }, - "sha256": "e85e763314ab3cf054970a175b3f007a10d365134a3df6cdb8f3534a07cc3442", + "sha256": "52ab863e7cacda6a0bc3c9a6bdbf5158ad432f6b78ef280c2e0b2d91ae809739", "action": null, "captured_action": null }, @@ -484,8 +484,8 @@ "producer_sha256": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/evidence-plan-desktop-light.png", "stage": "evidence-plan", "theme": "light", @@ -495,7 +495,7 @@ "width": 1440, "height": 900 }, - "sha256": "0ef0125075ef9460d3dde87a73e5775e08280a3f20dd0b94c493e318a7913a48", + "sha256": "86f0f6d05932aff97bd36acc255f533ade23379e6244b3cb73f10d0bdd33b3c9", "action": null, "captured_action": null }, @@ -504,8 +504,8 @@ "producer_sha256": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/evidence-artifacts-desktop-light.png", "stage": "evidence-artifacts", "theme": "light", @@ -515,7 +515,7 @@ "width": 1440, "height": 900 }, - "sha256": "0a2a7f2abda20044d74a12fb3a4437f5ba53bdee1a1a78634b1db0e507fee02e", + "sha256": "8c87ae6cb546bbd53c9afa0aae573017d0ff064e744f0d5b1c61372c1bfa46d1", "action": null, "captured_action": null }, @@ -524,8 +524,8 @@ "producer_sha256": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/connect-workspace-desktop-dark.png", "stage": "connect-workspace", "theme": "dark", @@ -535,7 +535,7 @@ "width": 1440, "height": 900 }, - "sha256": "3839a8b00139b8926819aeb5dcb57ed30295049253e43f061e109716870360f8", + "sha256": "839b74a9baee19fd96c34541cab550002ab7754a13d5efb2a3f41387f4bc5199", "action": { "label": "Continue", "top": 713.078125, @@ -556,8 +556,8 @@ "producer_sha256": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/connect-coding-ai-desktop-dark.png", "stage": "connect-coding-ai", "theme": "dark", @@ -567,7 +567,7 @@ "width": 1440, "height": 900 }, - "sha256": "c9f219dce72c0b588c425ab71a2118a7c954f90a6766b1de6ea0e75cd9033663", + "sha256": "5b7d3d8d87c53ba12af1e7913e919720b7ee20525bdf48ca832437bd766eab3e", "action": { "label": "Continue", "top": 713.078125, @@ -588,8 +588,8 @@ "producer_sha256": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/connect-repositories-desktop-dark.png", "stage": "connect-repositories", "theme": "dark", @@ -599,7 +599,7 @@ "width": 1440, "height": 900 }, - "sha256": "8e39ae1968ca14ab13f76915702e3af8ccd7f0d97af523c8856ca171a3b202b5", + "sha256": "d036a5a47bbffc57a79b410596d4486811cf69b9074bd403467763ae8a62c9c9", "action": { "label": "Continue to knowledge", "top": 713.078125, @@ -620,8 +620,8 @@ "producer_sha256": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/connect-knowledge-desktop-dark.png", "stage": "connect-knowledge", "theme": "dark", @@ -631,7 +631,7 @@ "width": 1440, "height": 900 }, - "sha256": "e2b5ae859ac84b18ef8860a3e2435e32981659afc83ca46b6306cd2e6186f702", + "sha256": "500cef95f081189f0cdf55febe9dfec8af65fd07f6a3ca1fcdf7dc09ec27ca4c", "action": { "label": "Open production floor", "top": 713.078125, @@ -652,8 +652,8 @@ "producer_sha256": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/product-context-desktop-dark.png", "stage": "product-context", "theme": "dark", @@ -663,7 +663,7 @@ "width": 1440, "height": 900 }, - "sha256": "850efc376272755678f2798e25497f180fa61629ae4735bf56c0b572869caae1", + "sha256": "77819327ea3cac3a7528a636a614057844c03aa0f2e8bafc26bd9d2d875e788f", "action": { "label": "Continue", "top": 738.15625, @@ -684,8 +684,8 @@ "producer_sha256": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/product-journeys-desktop-dark.png", "stage": "product-journeys", "theme": "dark", @@ -695,7 +695,7 @@ "width": 1440, "height": 900 }, - "sha256": "bc7cfa47d37c3cdaf68da6cafc8d204641463b7c4ab7dd3eb460d757aa501108", + "sha256": "650701dfbd13f2c647a1f0867b26b5cc8e7f06bbaf85a46e15d7d45cffe42d5b", "action": { "label": "Continue", "top": 738.15625, @@ -716,8 +716,8 @@ "producer_sha256": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/product-features-desktop-dark.png", "stage": "product-features", "theme": "dark", @@ -727,7 +727,7 @@ "width": 1440, "height": 900 }, - "sha256": "e56b82e6638cf6be9bb93f51b0de0753f25c186d3df60a4dc1a2debbe7176f18", + "sha256": "b2ddcc2b6c8f5471329adc5faaf9115015fa41ec91af1b63c0ff6fc3be076a91", "action": { "label": "Continue", "top": 738.15625, @@ -748,8 +748,8 @@ "producer_sha256": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/product-integrations-desktop-dark.png", "stage": "product-integrations", "theme": "dark", @@ -759,7 +759,7 @@ "width": 1440, "height": 900 }, - "sha256": "f870c703c048b6e43073a6e2b031722c33c948acce84d46cf103a1a3823767b8", + "sha256": "99f04401871823bde86b18936bbfbe6285527f4b9511cd7284028c44bc5b18c9", "action": { "label": "Review definition", "top": 738.15625, @@ -780,8 +780,8 @@ "producer_sha256": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/product-review-desktop-dark.png", "stage": "product-review", "theme": "dark", @@ -791,7 +791,7 @@ "width": 1440, "height": 900 }, - "sha256": "94f9475d6f231c9d3e1f8865ca688472d5f0be93117f6e50899cc144036afd75", + "sha256": "94b910a37db457ea296a815ba68597067200c497e3aa6ae28407267c48ad853f", "action": { "label": "Save draft definition", "top": 738.15625, @@ -812,8 +812,8 @@ "producer_sha256": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/run-brief-desktop-dark.png", "stage": "run-brief", "theme": "dark", @@ -823,7 +823,7 @@ "width": 1440, "height": 900 }, - "sha256": "95f9109473186b6a49580d847d8b77b5eb49eced884557025188e148de630f5a", + "sha256": "ce9c2fe15c6384e87346e9fab32da450b49c265df20f99bf924c37bd32a78a2d", "action": { "label": "Continue", "top": 713.078125, @@ -844,8 +844,8 @@ "producer_sha256": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/run-foundation-desktop-dark.png", "stage": "run-foundation", "theme": "dark", @@ -855,7 +855,7 @@ "width": 1440, "height": 900 }, - "sha256": "8de69ed179abef588d6e00fbe96f97dff39fe0833e57d56c243e8c3ad078893e", + "sha256": "48e2613820883e6b5e60fb2cb0e4ccc804ccd16f3c9a15e10f90021c543c2845", "action": { "label": "Continue", "top": 713.078125, @@ -876,8 +876,8 @@ "producer_sha256": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/run-checks-desktop-dark.png", "stage": "run-checks", "theme": "dark", @@ -887,7 +887,7 @@ "width": 1440, "height": 900 }, - "sha256": "e68117f1cf170fbe9be161cf25d39ca67bce4b6da2967caee75f34fa2891782f", + "sha256": "55ffdc7ee0287aac4588adca440ffa2d360bc08695c5f3d61bde1028e2fe8c3b", "action": { "label": "Review run", "top": 713.078125, @@ -908,8 +908,8 @@ "producer_sha256": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/run-review-desktop-dark.png", "stage": "run-review", "theme": "dark", @@ -919,7 +919,7 @@ "width": 1440, "height": 900 }, - "sha256": "e57381cfcc390c9b12bf1c4502b40fc1251d149b01a481e3c3c2e5c0f305cbb4", + "sha256": "dfc66d7fbdb2d47fc98a44ad1141e8b5c281ceaf6de34117ea99431e6bca0afe", "action": { "label": "Start building", "top": 713.078125, @@ -940,8 +940,8 @@ "producer_sha256": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/factory-overview-desktop-dark.png", "stage": "factory-overview", "theme": "dark", @@ -951,7 +951,7 @@ "width": 1440, "height": 900 }, - "sha256": "5a0b8d5f58422d53cfe6db8563c3356125be5d8db03e04dc0a65adf58a5dcac1", + "sha256": "4c7609fae537daa5e516bd4eb6c60e3bda02b49659f11ed58962210f8066dbc3", "action": null, "captured_action": null }, @@ -960,8 +960,8 @@ "producer_sha256": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/evidence-changes-desktop-dark.png", "stage": "evidence-changes", "theme": "dark", @@ -971,7 +971,7 @@ "width": 1440, "height": 900 }, - "sha256": "8d9cf0565fbad708ef5c91943b77de11a3c621921e26e550d3653a31de781b79", + "sha256": "833bf3977e9fc06a13fd91792e63ab25eb5108f702c35756c3a9cd9bd3c748ff", "action": null, "captured_action": null }, @@ -980,8 +980,8 @@ "producer_sha256": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/evidence-verification-desktop-dark.png", "stage": "evidence-verification", "theme": "dark", @@ -991,7 +991,7 @@ "width": 1440, "height": 900 }, - "sha256": "6890e909df0250106f9f002df72870a756702a05bce5c6d07ecd298a07f4180a", + "sha256": "714730d8e53784a97062e2fc1d90e3bc6bbf2f0b8cdac9566e63bf809daa7007", "action": null, "captured_action": null }, @@ -1000,8 +1000,8 @@ "producer_sha256": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/evidence-plan-desktop-dark.png", "stage": "evidence-plan", "theme": "dark", @@ -1011,7 +1011,7 @@ "width": 1440, "height": 900 }, - "sha256": "d574904a45f10f8d06872696ed5ea771a2beff18f6d741ec6148fa8b4acee968", + "sha256": "bb279a90222fb86d15b928806dff3c27980eae862221f4db93f3fb17c138fec6", "action": null, "captured_action": null }, @@ -1020,8 +1020,8 @@ "producer_sha256": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/evidence-artifacts-desktop-dark.png", "stage": "evidence-artifacts", "theme": "dark", @@ -1031,7 +1031,7 @@ "width": 1440, "height": 900 }, - "sha256": "ee611ee45993c8022bed43ff98c41b41c9a818ff71a67633209d56b00b3f179a", + "sha256": "679559be27277b3623645579314939c29e8414ff041440ae13b9347c18f0468d", "action": null, "captured_action": null }, @@ -1040,8 +1040,8 @@ "producer_sha256": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/connect-workspace-mobile-light.png", "stage": "connect-workspace", "theme": "light", @@ -1051,7 +1051,7 @@ "width": 390, "height": 844 }, - "sha256": "4488f637bb79d47bc589bab94960c5796338c324469f73cc4cd8048ca79d9023", + "sha256": "c1f7bf7942e4df91eb63d45efac923f6f2485a7496ead4f623686b032170a9ae", "action": { "label": "Continue", "top": 693.078125, @@ -1072,8 +1072,8 @@ "producer_sha256": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/connect-coding-ai-mobile-light.png", "stage": "connect-coding-ai", "theme": "light", @@ -1083,7 +1083,7 @@ "width": 390, "height": 844 }, - "sha256": "537af149565645683ab9915493120390ca412a496bc116c1514ccfb1b2d220f1", + "sha256": "b327f7177afc68c8f5bc41885b76b01b7c333b28b4144225fcc4d5b265debc90", "action": { "label": "Continue", "top": 693.078125, @@ -1104,8 +1104,8 @@ "producer_sha256": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/connect-repositories-mobile-light.png", "stage": "connect-repositories", "theme": "light", @@ -1115,7 +1115,7 @@ "width": 390, "height": 844 }, - "sha256": "94297adcdc888aa08b5855debcba865eee092f07fc28cffff81ae50f35d2c052", + "sha256": "29356eaad96b63f600410688e8602396f47c40eb28e05cbdb4a943f0955f60dd", "action": { "label": "Continue to knowledge", "top": 585.921875, @@ -1136,8 +1136,8 @@ "producer_sha256": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/connect-knowledge-mobile-light.png", "stage": "connect-knowledge", "theme": "light", @@ -1147,7 +1147,7 @@ "width": 390, "height": 844 }, - "sha256": "921422f7f272b43d78a535e3feb5ab5b4d722a9bf7ee2a037f8b588a4f05b9a8", + "sha256": "67546c8584f1a46a95b5c589941d6dba4740fe9b3f65435f76ba83a9083ba0d6", "action": { "label": "Open production floor", "top": 693.078125, @@ -1168,8 +1168,8 @@ "producer_sha256": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/product-context-mobile-light.png", "stage": "product-context", "theme": "light", @@ -1179,7 +1179,7 @@ "width": 390, "height": 844 }, - "sha256": "97055be879620ad0c50703cb1ae1086a93e179ab368693124b2919b4ecc90791", + "sha256": "8b8905f57c027c4c2a1eb709af0f4c91425021e29b10398cf38bc8701c6e5e06", "action": { "label": "Continue", "top": 714.09375, @@ -1200,8 +1200,8 @@ "producer_sha256": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/product-journeys-mobile-light.png", "stage": "product-journeys", "theme": "light", @@ -1211,7 +1211,7 @@ "width": 390, "height": 844 }, - "sha256": "ce74ca656a49eeaca19f8181a2f5b5e1515d2e394ff10e84daaad1d6d82b4185", + "sha256": "f11c384e5768097aab678995a0bb3919e946aba4805f9d96595856ddfcbf481e", "action": { "label": "Continue", "top": 729.6875, @@ -1232,8 +1232,8 @@ "producer_sha256": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/product-features-mobile-light.png", "stage": "product-features", "theme": "light", @@ -1243,7 +1243,7 @@ "width": 390, "height": 844 }, - "sha256": "0a01722b3479ccc8b717e2a162a5a004566d87b5c527745f806eca1aafbf2332", + "sha256": "ec67f1183c34bc9b5dd953faff9cef8cc6121a05d33f8dca406a668a45418a6a", "action": { "label": "Continue", "top": 713.71875, @@ -1264,8 +1264,8 @@ "producer_sha256": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/product-integrations-mobile-light.png", "stage": "product-integrations", "theme": "light", @@ -1275,7 +1275,7 @@ "width": 390, "height": 844 }, - "sha256": "70e98d50d9e1a2a9aa4827a2c6400a6e85b72825b5521b3c982f1d97223d5f15", + "sha256": "58d3d41b52c2f937752ce28f49d757cc25b52c4116a23b40c0fa68926968f3bf", "action": { "label": "Review definition", "top": 617.828125, @@ -1296,8 +1296,8 @@ "producer_sha256": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/product-review-mobile-light.png", "stage": "product-review", "theme": "light", @@ -1307,7 +1307,7 @@ "width": 390, "height": 844 }, - "sha256": "0948ddbd1c296ff4c33501208823b2d59287a9f1e1e306e97ce44bbd4509705d", + "sha256": "fb989b447cff394e69aa397f0b17e219f1bd6cc08662b393a0fbb9097426d213", "action": { "label": "Save draft definition", "top": 714.046875, @@ -1328,8 +1328,8 @@ "producer_sha256": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/run-brief-mobile-light.png", "stage": "run-brief", "theme": "light", @@ -1339,7 +1339,7 @@ "width": 390, "height": 844 }, - "sha256": "b6ccf332269dae68c82d351df9f119086c28d40a940f9fd085a6e6b2119771b2", + "sha256": "a5e1b4ae324027a4b171e4d455a25e013a55f797652c4b71e192b9360938879f", "action": { "label": "Continue", "top": 693.078125, @@ -1360,8 +1360,8 @@ "producer_sha256": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/run-foundation-mobile-light.png", "stage": "run-foundation", "theme": "light", @@ -1371,7 +1371,7 @@ "width": 390, "height": 844 }, - "sha256": "bdea8acf7fcf8a71b681bdb81246c4f860c6762f08041fd23c935a83f7cded84", + "sha256": "a6b34b16e45603f9c4b104c523c4768781ebb84f6ece811ed1c6ce1769c62a83", "action": { "label": "Continue", "top": 693.078125, @@ -1392,8 +1392,8 @@ "producer_sha256": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/run-checks-mobile-light.png", "stage": "run-checks", "theme": "light", @@ -1403,7 +1403,7 @@ "width": 390, "height": 844 }, - "sha256": "abe012708f5bf907fe69e8d0608729eb5e92f7f360cf2d8f82bea26c816525ec", + "sha256": "8da23b36661a5f8733e9eed2322d040fcc82c56599a0e82479693c6caff32bae", "action": { "label": "Review run", "top": 693.078125, @@ -1424,8 +1424,8 @@ "producer_sha256": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/run-review-mobile-light.png", "stage": "run-review", "theme": "light", @@ -1435,7 +1435,7 @@ "width": 390, "height": 844 }, - "sha256": "ceeb658578e362f284dc6f97e1f4c94a5a88c8192d06ded1bd92ed049deac8e5", + "sha256": "e2c3659ac0f30386dd9edeecdeb1e36954db57276160306f5c71a2e6c83d9d34", "action": { "label": "Start building", "top": 693.078125, @@ -1456,8 +1456,8 @@ "producer_sha256": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/factory-overview-mobile-light.png", "stage": "factory-overview", "theme": "light", @@ -1467,7 +1467,7 @@ "width": 390, "height": 844 }, - "sha256": "6c5ca6b40fd0268b6e9b528e2f640efa590d01d93c614da92597d6f3ea56d8c1", + "sha256": "a2a35138a7b754f8f6e211cef246a66f7bfd2763bb0b708058ccc3654883c0d5", "action": null, "captured_action": null }, @@ -1476,8 +1476,8 @@ "producer_sha256": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/evidence-changes-mobile-light.png", "stage": "evidence-changes", "theme": "light", @@ -1487,7 +1487,7 @@ "width": 390, "height": 844 }, - "sha256": "d16720e2a076b963a5953242b7583b73932425189389e077c022324b6be47998", + "sha256": "2d362dcd4b81e2c1ccfadf84f1721b3df09eedc42e3364a1438530d4a16f1793", "action": null, "captured_action": null }, @@ -1496,8 +1496,8 @@ "producer_sha256": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/evidence-verification-mobile-light.png", "stage": "evidence-verification", "theme": "light", @@ -1507,7 +1507,7 @@ "width": 390, "height": 844 }, - "sha256": "0e3573bdb4f1831e96a5836a6f7d79d9c0f230f66a15112fab84e23eabd8ee3a", + "sha256": "ab3e42afce1109e7911167a736f8fe319c2bd0f0ff3947d1b4dd66d8a75c02db", "action": null, "captured_action": null }, @@ -1516,8 +1516,8 @@ "producer_sha256": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/evidence-plan-mobile-light.png", "stage": "evidence-plan", "theme": "light", @@ -1527,7 +1527,7 @@ "width": 390, "height": 844 }, - "sha256": "808251c9a1a38b03336a646557c55fa155a51932809d95371be2922e5a42118b", + "sha256": "6332c01926d5cdbb6968bcfc62d559e2e1b6867e2e7f4b09cbcedd793ddd5c38", "action": null, "captured_action": null }, @@ -1536,8 +1536,8 @@ "producer_sha256": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/evidence-artifacts-mobile-light.png", "stage": "evidence-artifacts", "theme": "light", @@ -1547,7 +1547,7 @@ "width": 390, "height": 844 }, - "sha256": "bd086962f0dee1600eb4c5c3771530e7d3fe605170152270b3c89e5e4ddcafd1", + "sha256": "11696346adfdf78382ef0e012ecb509b0d877ed3586656e59888d8e048adad45", "action": null, "captured_action": null }, @@ -1556,8 +1556,8 @@ "producer_sha256": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/connect-workspace-mobile-dark.png", "stage": "connect-workspace", "theme": "dark", @@ -1567,7 +1567,7 @@ "width": 390, "height": 844 }, - "sha256": "25ba9b7be4235d8f96533cbfe3e08638dfbaf8eca0a444344d83fae637a62df0", + "sha256": "a0b8ad9336e8ea30db9500c34a9296657412f9f026b88bce3f316568e5c6c341", "action": { "label": "Continue", "top": 693.078125, @@ -1588,8 +1588,8 @@ "producer_sha256": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/connect-coding-ai-mobile-dark.png", "stage": "connect-coding-ai", "theme": "dark", @@ -1599,7 +1599,7 @@ "width": 390, "height": 844 }, - "sha256": "468532e856a3f642577325549ece8c30aefa906758c1922d47f122e87d57e98e", + "sha256": "5df003c07120104c2374d69af71c7e52810d36f23af2f9113d6cb17aca2edbe1", "action": { "label": "Continue", "top": 693.078125, @@ -1620,8 +1620,8 @@ "producer_sha256": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/connect-repositories-mobile-dark.png", "stage": "connect-repositories", "theme": "dark", @@ -1631,7 +1631,7 @@ "width": 390, "height": 844 }, - "sha256": "6e9b3ee62a256173f4930f68c40d27d43299d5afb48f98dd39824b02fff5efe8", + "sha256": "3fcdf044b1fc14d02fcc09953949cc3d98a35553167f1f24ccf654eb14557408", "action": { "label": "Continue to knowledge", "top": 585.921875, @@ -1652,8 +1652,8 @@ "producer_sha256": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/connect-knowledge-mobile-dark.png", "stage": "connect-knowledge", "theme": "dark", @@ -1663,7 +1663,7 @@ "width": 390, "height": 844 }, - "sha256": "e0a0057285dd29b5c432540e638fe9ee1f151cfd850d2c03c8163db93cbb9467", + "sha256": "4c4c77c5fcf65e72e1674daab9aa2f558eb816cbf76e4f08978858320ae00bd3", "action": { "label": "Open production floor", "top": 693.078125, @@ -1684,8 +1684,8 @@ "producer_sha256": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/product-context-mobile-dark.png", "stage": "product-context", "theme": "dark", @@ -1695,7 +1695,7 @@ "width": 390, "height": 844 }, - "sha256": "914c6c5605044ecf8e395cb39fad34225af74030695a75fd73cf63481cc04583", + "sha256": "1ae06f63ee7e4c8333dd893341998ca536282f51c28803242dd6e94de4ac9786", "action": { "label": "Continue", "top": 714.09375, @@ -1716,8 +1716,8 @@ "producer_sha256": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/product-journeys-mobile-dark.png", "stage": "product-journeys", "theme": "dark", @@ -1727,7 +1727,7 @@ "width": 390, "height": 844 }, - "sha256": "e54ad613793c4c930d5bb1e8551285c79b031a5548cf0eca78acdd7c263f9781", + "sha256": "bbe829e16ff1a2ddb3426e6d653c4f81536f3fa921be43bf2a75c2c0a7c21702", "action": { "label": "Continue", "top": 729.6875, @@ -1748,8 +1748,8 @@ "producer_sha256": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/product-features-mobile-dark.png", "stage": "product-features", "theme": "dark", @@ -1759,7 +1759,7 @@ "width": 390, "height": 844 }, - "sha256": "5b016862f55c1364bdf25778628319b50e136b38fd2e26a97f790eea8a332118", + "sha256": "f51e611d48b070b2d8e9a6d0aff71b0ea4cba9afd00d49ac9c2afc60f8c319df", "action": { "label": "Continue", "top": 713.71875, @@ -1780,8 +1780,8 @@ "producer_sha256": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/product-integrations-mobile-dark.png", "stage": "product-integrations", "theme": "dark", @@ -1791,7 +1791,7 @@ "width": 390, "height": 844 }, - "sha256": "15e13ad235eff082efb1e7058b7d6a249e9dc69e25dce15fe2cc0ee648e7f2fd", + "sha256": "df8649d5cdda4806ec91ebbcd198ff18b8e3d542f8924c5319d9abe83b296ca3", "action": { "label": "Review definition", "top": 617.828125, @@ -1812,8 +1812,8 @@ "producer_sha256": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/product-review-mobile-dark.png", "stage": "product-review", "theme": "dark", @@ -1823,7 +1823,7 @@ "width": 390, "height": 844 }, - "sha256": "06f3b3bf1b7e3609f7131534460489a89c524b6261f03b138811ce70afa05a3f", + "sha256": "7578c47061873ae4be51ccd4121ef3ba135dc8ce41d70b6f24e8f262d84fab6e", "action": { "label": "Save draft definition", "top": 714.046875, @@ -1844,8 +1844,8 @@ "producer_sha256": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/run-brief-mobile-dark.png", "stage": "run-brief", "theme": "dark", @@ -1855,7 +1855,7 @@ "width": 390, "height": 844 }, - "sha256": "4434f33c3b2005325746deb1e601c10175f0738fe97476bfdb4700092eb81cb8", + "sha256": "26e40f765428219a02b1046d78004f21c690fbe73c40e486cfcfaad79f550629", "action": { "label": "Continue", "top": 693.078125, @@ -1876,8 +1876,8 @@ "producer_sha256": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/run-foundation-mobile-dark.png", "stage": "run-foundation", "theme": "dark", @@ -1887,7 +1887,7 @@ "width": 390, "height": 844 }, - "sha256": "670bb894e91904ccdef9fbcb2381a0daf8eddc1b9886d733c608a3848cf03bc7", + "sha256": "24e716858a7249c05b6769d91610a141a98de30103b7270c52fe99a3dff75b79", "action": { "label": "Continue", "top": 693.078125, @@ -1908,8 +1908,8 @@ "producer_sha256": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/run-checks-mobile-dark.png", "stage": "run-checks", "theme": "dark", @@ -1919,7 +1919,7 @@ "width": 390, "height": 844 }, - "sha256": "16b1052aa173409a3cc93aaa36781fe8a078e5d13aab2a5be4963835e290937d", + "sha256": "d428078a50a600c354b8cf1ffc5e2ed85e9aefb8040dad9f36898c014eb5ae39", "action": { "label": "Review run", "top": 693.078125, @@ -1940,8 +1940,8 @@ "producer_sha256": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/run-review-mobile-dark.png", "stage": "run-review", "theme": "dark", @@ -1951,7 +1951,7 @@ "width": 390, "height": 844 }, - "sha256": "6f7f9718dd1247b8b3f42d2d88a62adc15798a3d362208e52919920c5983151a", + "sha256": "5c6a104169ad9876dfdd0924ab21f0a07bd384a09274d59c08a52bf2fc202158", "action": { "label": "Start building", "top": 693.078125, @@ -1972,8 +1972,8 @@ "producer_sha256": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/factory-overview-mobile-dark.png", "stage": "factory-overview", "theme": "dark", @@ -1983,7 +1983,7 @@ "width": 390, "height": 844 }, - "sha256": "ba255ef5d1e7b5a9120c443d936c2edecba6dd17b4d90eeb39b7f8f8da9b3e5b", + "sha256": "8f3d32c9a89a09836b54ad81788615e394883575c93fbdb6e1c7a300516c1b2e", "action": null, "captured_action": null }, @@ -1992,8 +1992,8 @@ "producer_sha256": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/evidence-changes-mobile-dark.png", "stage": "evidence-changes", "theme": "dark", @@ -2003,7 +2003,7 @@ "width": 390, "height": 844 }, - "sha256": "532b243931ef1d98a1a29722be1f1be22a812e47d106e91b6c86692555c573bf", + "sha256": "fcc7a361da37ca3aa37d624d211f3e50b279471f74c4b81fe82ee1b1a51a0264", "action": null, "captured_action": null }, @@ -2012,8 +2012,8 @@ "producer_sha256": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/evidence-verification-mobile-dark.png", "stage": "evidence-verification", "theme": "dark", @@ -2023,7 +2023,7 @@ "width": 390, "height": 844 }, - "sha256": "ae329d2afd9b42b2756e41fc1a68b13d3e20ba54a4a17b02a615764dee694ceb", + "sha256": "5537db49e2400943ffb9afd8abf70ef190c2e2678ffb5554ecd537e029fe3d3b", "action": null, "captured_action": null }, @@ -2032,8 +2032,8 @@ "producer_sha256": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/evidence-plan-mobile-dark.png", "stage": "evidence-plan", "theme": "dark", @@ -2043,7 +2043,7 @@ "width": 390, "height": 844 }, - "sha256": "92642e25f05d7f5ded5ed9098380cee3572f429e6a06e0cfc0460c7ba120d0b9", + "sha256": "4aa28055364d83df5fadca1e3bec47705c022e19e4cba1cd4cb23217cb155465", "action": null, "captured_action": null }, @@ -2052,8 +2052,8 @@ "producer_sha256": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/evidence-artifacts-mobile-dark.png", "stage": "evidence-artifacts", "theme": "dark", @@ -2063,7 +2063,7 @@ "width": 390, "height": 844 }, - "sha256": "1ba8d2af956388dd5e8aef0c1258f27043017e8a531680c28679afb741ccd476", + "sha256": "b41be1b247bb43c53c4caafc79c30f2f2f6bab56c4f898c24c32f3e1867ef222", "action": null, "captured_action": null }, @@ -2072,8 +2072,8 @@ "producer_sha256": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/run-context-desktop-light.png", "stage": "run-context", "theme": "light", @@ -2083,7 +2083,7 @@ "width": 1440, "height": 900 }, - "sha256": "85aa21d8bddb77da568497f44eafd09937829c7c30037206fd01f56e7b78ea91", + "sha256": "1b8207763a42666608fa317d4d7a050808188984d04d3cb46157ad77c8b6f63e", "action": null, "captured_action": null }, @@ -2092,8 +2092,8 @@ "producer_sha256": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/run-context-desktop-dark.png", "stage": "run-context", "theme": "dark", @@ -2103,7 +2103,7 @@ "width": 1440, "height": 900 }, - "sha256": "0725bdf26b3176930d82e157c64f75034176a868093e939e9caa6970f5794282", + "sha256": "ff855ee8641133a275a667a2252138a2e5e9a37992e5a0f5b11d55859da4c7fb", "action": null, "captured_action": null }, @@ -2112,8 +2112,8 @@ "producer_sha256": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/run-context-mobile-light.png", "stage": "run-context", "theme": "light", @@ -2123,7 +2123,7 @@ "width": 390, "height": 844 }, - "sha256": "301d4faed3631ccb5caa65bdcf3a3787718466a1803b1112b1b928b51c4f1cf7", + "sha256": "163445471099d7d317ad8a7f8b21a00eeccd8ac6c3b4d2896e56d5f8e6f1b6a3", "action": null, "captured_action": null }, @@ -2132,8 +2132,8 @@ "producer_sha256": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/run-context-mobile-dark.png", "stage": "run-context", "theme": "dark", @@ -2143,7 +2143,7 @@ "width": 390, "height": 844 }, - "sha256": "919b4ddda4846fe83cc6cd29df55ed10791d2e0d020a5d879fb9dd15f61e4764", + "sha256": "b3d90fd1cf73eb5b1c37d572083d2519ab84ca53334d1e30a897f3fa1e6b31fc", "action": null, "captured_action": null }, @@ -2152,8 +2152,8 @@ "producer_sha256": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/product-behavior-desktop-light.png", "stage": "product-behavior", "theme": "light", @@ -2163,7 +2163,7 @@ "width": 1440, "height": 900 }, - "sha256": "23b0de532efe50ec23104dbb432bba0518ba16d09d6c88ff1d11c1d8edb85c7f", + "sha256": "20aef9103511a17c4b7aef692f11e5d8ee74af74f2840e07dbedf079b47d9586", "action": { "label": "Continue", "top": 738.15625, @@ -2184,8 +2184,8 @@ "producer_sha256": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/product-behavior-desktop-dark.png", "stage": "product-behavior", "theme": "dark", @@ -2195,7 +2195,7 @@ "width": 1440, "height": 900 }, - "sha256": "b6fdb23d70b983ddbfa15e577551cdafb1836c51d9054a5c8ec9c5e9f3b5a518", + "sha256": "ccd491b144949d22f8db254971260ff9fed21ff4acab9529f7e1cca650f87c27", "action": { "label": "Continue", "top": 738.15625, @@ -2216,8 +2216,8 @@ "producer_sha256": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/product-behavior-mobile-light.png", "stage": "product-behavior", "theme": "light", @@ -2227,7 +2227,7 @@ "width": 390, "height": 844 }, - "sha256": "87d69216ab93674d28081eb076c10d9a4d0647c1d19d3a0e6a2a56d253184c10", + "sha256": "ea2647cd3142b84c92b0b2b55b20e70c322465b4b8a5ed38040c59b2edc42b99", "action": { "label": "Continue", "top": 714.046875, @@ -2248,8 +2248,8 @@ "producer_sha256": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/product-behavior-mobile-dark.png", "stage": "product-behavior", "theme": "dark", @@ -2259,7 +2259,7 @@ "width": 390, "height": 844 }, - "sha256": "1bde597ca8130a528e24448640841ceca58d6323345496661059c0f70313ab63", + "sha256": "14a7bdb609034d24b0217079ba71205a0f27853167df1aa300d5c7822e86c2e9", "action": { "label": "Continue", "top": 714.046875, @@ -2280,8 +2280,8 @@ "producer_sha256": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/product-feature-mapping-desktop-light.png", "stage": "product-feature-mapping", "theme": "light", @@ -2291,7 +2291,7 @@ "width": 1440, "height": 900 }, - "sha256": "9626320ac01a74f7fcdc931dee6c4b5cf10656f330d8dccba16519293e3ac94a", + "sha256": "cb0943130c853bb79b9fb33fd3cf6366025da5399581edbc162c7277cf479f1b", "action": { "label": "Continue", "top": 738.15625, @@ -2312,8 +2312,8 @@ "producer_sha256": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/run-review-provider-desktop-light.png", "stage": "run-review-provider", "theme": "light", @@ -2323,7 +2323,7 @@ "width": 1440, "height": 900 }, - "sha256": "0a71661a53d89947f34713acfa09806a104fe277439df0ac2c9f79ffe91ab2bd", + "sha256": "a4eb7fce9abecd283d952dd286705cdb10a7ef74e4b0722ff18db738a5c6a1ae", "action": { "label": "Review run", "top": 713.078125, @@ -2344,8 +2344,8 @@ "producer_sha256": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/product-feature-mapping-desktop-dark.png", "stage": "product-feature-mapping", "theme": "dark", @@ -2355,7 +2355,7 @@ "width": 1440, "height": 900 }, - "sha256": "5c9f779025029508fb1d7d3ae4b373cad2eaffca405679658667ba2be9449121", + "sha256": "770b4348f36e89fc24f6421dce4355ea90d83402718bea0339e67495edf2bcff", "action": { "label": "Continue", "top": 738.15625, @@ -2376,8 +2376,8 @@ "producer_sha256": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/run-review-provider-desktop-dark.png", "stage": "run-review-provider", "theme": "dark", @@ -2387,7 +2387,7 @@ "width": 1440, "height": 900 }, - "sha256": "e68117f1cf170fbe9be161cf25d39ca67bce4b6da2967caee75f34fa2891782f", + "sha256": "55ffdc7ee0287aac4588adca440ffa2d360bc08695c5f3d61bde1028e2fe8c3b", "action": { "label": "Review run", "top": 713.078125, @@ -2408,8 +2408,8 @@ "producer_sha256": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/run-policies-desktop-light.png", "stage": "run-policies", "theme": "light", @@ -2419,7 +2419,7 @@ "width": 1440, "height": 900 }, - "sha256": "95b2f8d5a67b432c9554e4a9f04f74def9d684833c8939aecd3e43b8a89529cb", + "sha256": "412af39dde3912fe7c35f4452a18885586dd8524b39a4be459f06be63ed2744b", "action": { "label": "Review run", "top": 713.078125, @@ -2440,8 +2440,8 @@ "producer_sha256": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/run-policies-desktop-dark.png", "stage": "run-policies", "theme": "dark", @@ -2451,7 +2451,7 @@ "width": 1440, "height": 900 }, - "sha256": "998f18b088f9f0fc616d3cc8545f0de74a7995ccbf2c2d1eb4aaf3fb12771fcc", + "sha256": "f4033eef57e671fa4d34fe4beb260e0108f7ac43a53510d7e2aa15c56ec159b5", "action": { "label": "Review run", "top": 713.078125, @@ -2472,8 +2472,8 @@ "producer_sha256": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/product-feature-mapping-mobile-light.png", "stage": "product-feature-mapping", "theme": "light", @@ -2483,7 +2483,7 @@ "width": 390, "height": 844 }, - "sha256": "9dee0cabf662733fe02bf35aa4855407d322cabb751120646f7c50797027c2fd", + "sha256": "47489168f8cf065d2b5e8f274d2e3ebb1e31631aba2f2a30e80ae26b31461074", "action": { "label": "Continue", "top": 714.046875, @@ -2504,8 +2504,8 @@ "producer_sha256": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/run-review-provider-mobile-light.png", "stage": "run-review-provider", "theme": "light", @@ -2515,7 +2515,7 @@ "width": 390, "height": 844 }, - "sha256": "1ce8c363419981030b6eb5e9fddca9ac0f6a73eb3381d5cfcca1e4f4a6cb16f4", + "sha256": "24854de547fc5d435922128ee1ee6cd477f9de685e812b44cee139c16a87cc7f", "action": { "label": "Review run", "top": 693.078125, @@ -2536,8 +2536,8 @@ "producer_sha256": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/run-policies-mobile-light.png", "stage": "run-policies", "theme": "light", @@ -2547,7 +2547,7 @@ "width": 390, "height": 844 }, - "sha256": "f953026d052c2220e5b5ca1334bca56345c9778e72284bd5054a4be0e4056398", + "sha256": "88efcca86a776c128cc1ad87556f97e9fad383f413ed100849b49efbaccfbef3", "action": { "label": "Review run", "top": 693.078125, @@ -2568,8 +2568,8 @@ "producer_sha256": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/product-feature-mapping-mobile-dark.png", "stage": "product-feature-mapping", "theme": "dark", @@ -2579,7 +2579,7 @@ "width": 390, "height": 844 }, - "sha256": "90cdb5a4681956284376773017e46a03eb8a082e998f4e7f2d390f8e67c968c2", + "sha256": "7a819e4d90fc49ca4f30077202f0fa711143a25b4432710a40b53a2f04b43267", "action": { "label": "Continue", "top": 714.046875, @@ -2600,8 +2600,8 @@ "producer_sha256": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/run-review-provider-mobile-dark.png", "stage": "run-review-provider", "theme": "dark", @@ -2611,7 +2611,7 @@ "width": 390, "height": 844 }, - "sha256": "f927557ef5bff3e4cfc4e7b60f2b0b6fd2fe0af1bb33be845886b6d56a9e6028", + "sha256": "471ae6ad1b32b4a542ef370b16fa3f0dc8b60fda9167de9a41ca8e8df50160dc", "action": { "label": "Review run", "top": 693.078125, @@ -2632,8 +2632,8 @@ "producer_sha256": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/run-policies-mobile-dark.png", "stage": "run-policies", "theme": "dark", @@ -2643,7 +2643,7 @@ "width": 390, "height": 844 }, - "sha256": "3d5939c2650a2f2408d64e02db882ba13ac66535fdb78b7b9a5eef34ad97e2ca", + "sha256": "c9bcd31933267874e10fb054e1264786d7b941deab9242421a8db3591bc5ab9d", "action": { "label": "Review run", "top": 693.078125, @@ -2664,8 +2664,8 @@ "producer_sha256": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/search-provider-desktop-light.png", "stage": "search-provider", "theme": "light", @@ -2675,7 +2675,7 @@ "width": 1440, "height": 900 }, - "sha256": "7875a5fae720db2d2e7fdead7bccbc133e35c6b2d69fc66c08fdf5472f53210f", + "sha256": "b4f2f257fd937395c9a3dbe5f3ebd5907f2e011cb9da6017c03d58eec6b81b65", "action": { "label": "Continue", "top": 498.15625, @@ -2696,8 +2696,8 @@ "producer_sha256": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/search-access-desktop-light.png", "stage": "search-access", "theme": "light", @@ -2707,7 +2707,7 @@ "width": 1440, "height": 900 }, - "sha256": "edb99bb0220a1b7eb688af65db3432978df22bbdcc10ecff43f3e0895632e651", + "sha256": "2635b3fe57b24c53d993a0c684b0fc952e7b7b1433ac68fa8c7a8ef6e051d82d", "action": { "label": "Continue", "top": 672.03125, @@ -2728,8 +2728,8 @@ "producer_sha256": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/search-review-desktop-light.png", "stage": "search-review", "theme": "light", @@ -2739,7 +2739,7 @@ "width": 1440, "height": 900 }, - "sha256": "99549e2cfb1fa2b2ab22d13b37b696145076384af669724e7457dd4f8e4d9c4b", + "sha256": "81a4e9d428259bd000468efdca90658b1ddc850c9e17557fcffe737070757a23", "action": { "label": "Save search settings", "top": 591.953125, @@ -2760,8 +2760,8 @@ "producer_sha256": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/search-saved-desktop-light.png", "stage": "search-saved", "theme": "light", @@ -2771,7 +2771,7 @@ "width": 1440, "height": 900 }, - "sha256": "bfbfde888ff3194b488bb2096cbe0e2b687b8871d04b520a905a80a146bc0280", + "sha256": "e40dd74b32846a0fbe776b5e9001945972a835bcfa9aee2983e7efa00d59287a", "action": { "label": "Test saved connection", "top": 501.78125, @@ -2792,8 +2792,8 @@ "producer_sha256": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/search-provider-desktop-dark.png", "stage": "search-provider", "theme": "dark", @@ -2803,7 +2803,7 @@ "width": 1440, "height": 900 }, - "sha256": "336aacdb17a67b0083be3839bccbd086d526a6fcc66bbc109523e84c80769e68", + "sha256": "a5003b512c60c1b85b311961877f84c7c3bf111fedb17361535cc1157aab3373", "action": { "label": "Continue", "top": 498.15625, @@ -2824,8 +2824,8 @@ "producer_sha256": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/search-access-desktop-dark.png", "stage": "search-access", "theme": "dark", @@ -2835,7 +2835,7 @@ "width": 1440, "height": 900 }, - "sha256": "207d7d9df709783c4ed2a27d6ec32c89572ecdb95c0b154a6ced465a9a8b1ece", + "sha256": "079f81bc6b0bb251974e8f7e48704ce1cada1bc4f72b59fd9ff32ebe6f47830c", "action": { "label": "Continue", "top": 672.03125, @@ -2856,8 +2856,8 @@ "producer_sha256": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/search-review-desktop-dark.png", "stage": "search-review", "theme": "dark", @@ -2867,7 +2867,7 @@ "width": 1440, "height": 900 }, - "sha256": "2be894c8c378d036d55ed6267ac8453bcaa1beb6cd1f09ab54624eafc8eda1ad", + "sha256": "a501fda55cf7e627040d5b6638b83323da776e19d5311ca6ed8ef5675e48b966", "action": { "label": "Save search settings", "top": 591.953125, @@ -2888,8 +2888,8 @@ "producer_sha256": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/search-saved-desktop-dark.png", "stage": "search-saved", "theme": "dark", @@ -2899,7 +2899,7 @@ "width": 1440, "height": 900 }, - "sha256": "cd0fc162950a4524d007110b1f5689531771683ecbb4cb55d719fdb3f8e5bead", + "sha256": "2030117939271fc493b5d8d6a2c3c7b3e360d37823c4d20fe90828036fb15b97", "action": { "label": "Test saved connection", "top": 501.78125, @@ -2920,8 +2920,8 @@ "producer_sha256": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/search-provider-mobile-light.png", "stage": "search-provider", "theme": "light", @@ -2931,7 +2931,7 @@ "width": 390, "height": 844 }, - "sha256": "bfa2c400fd1f7791566cb5afb0f0313012fda06743fe9a8ef2297144c540daf1", + "sha256": "126127b5adc75801c3003d50f1bbd459b82624ba464ae4b5e31d5ed493a63e9b", "action": { "label": "Continue", "top": 505.359375, @@ -2952,8 +2952,8 @@ "producer_sha256": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/search-access-mobile-light.png", "stage": "search-access", "theme": "light", @@ -2963,7 +2963,7 @@ "width": 390, "height": 844 }, - "sha256": "9bfbda0e1dbacbf79e599829c1900f82a1494fa1ae5fab9ec15e48a536c24ea3", + "sha256": "3ed46b8cffe139585dbdb9e8b21a2d479508b1777806ac5ee601c9cc0327f1e4", "action": { "label": "Continue", "top": 716.015625, @@ -2984,8 +2984,8 @@ "producer_sha256": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/search-review-mobile-light.png", "stage": "search-review", "theme": "light", @@ -2995,7 +2995,7 @@ "width": 390, "height": 844 }, - "sha256": "c12f375e500ad535231d218a75d23cdc88a67505dab9d39325870e65e263bdc5", + "sha256": "22c02a914e247cf226c0b857a464501d070b38e1415c49002e8adde26015fe34", "action": { "label": "Save search settings", "top": 622.921875, @@ -3016,8 +3016,8 @@ "producer_sha256": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/search-saved-mobile-light.png", "stage": "search-saved", "theme": "light", @@ -3027,7 +3027,7 @@ "width": 390, "height": 844 }, - "sha256": "04ac898571bccb14b5caaa4c5ccd269bfb1d608d78c64c1e67b23c6d79341067", + "sha256": "c67ceee75afa80c41aaff126aa7cad4bda48cbb892d9fe3306cbb05ba9be9230", "action": { "label": "Test saved connection", "top": 733.015625, @@ -3048,8 +3048,8 @@ "producer_sha256": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/search-provider-mobile-dark.png", "stage": "search-provider", "theme": "dark", @@ -3059,7 +3059,7 @@ "width": 390, "height": 844 }, - "sha256": "9b62e114030cd7e4b7a361d5a2874f68c17bb975a7591a2b5d07472b9200b57b", + "sha256": "9fa284d2860c1bf037e18ad1ee0c21200a419139c78ba331e6129963d29894ee", "action": { "label": "Continue", "top": 505.359375, @@ -3080,8 +3080,8 @@ "producer_sha256": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/search-access-mobile-dark.png", "stage": "search-access", "theme": "dark", @@ -3091,7 +3091,7 @@ "width": 390, "height": 844 }, - "sha256": "e53f62b804882e6e3082862ab017c5138d664dccfa27e5a8603425418a76be9d", + "sha256": "31333889e07ed068b934aba0c195d776714753fa5c37f85785d786e11ea2e917", "action": { "label": "Continue", "top": 716.015625, @@ -3112,8 +3112,8 @@ "producer_sha256": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/search-review-mobile-dark.png", "stage": "search-review", "theme": "dark", @@ -3123,7 +3123,7 @@ "width": 390, "height": 844 }, - "sha256": "c53b44a01b808c7c4a2b11416fa6d1c6670c47ab323707e194a6f991089e8e8d", + "sha256": "53811117cab3749fe08b7d4a83ea413521414eee7b02d220fa5b51730c250341", "action": { "label": "Save search settings", "top": 622.921875, @@ -3144,8 +3144,8 @@ "producer_sha256": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/search-saved-mobile-dark.png", "stage": "search-saved", "theme": "dark", @@ -3155,7 +3155,7 @@ "width": 390, "height": 844 }, - "sha256": "2feb2eea6b56cece1438764726517c87a03495a46279edee140a617197c2f56b", + "sha256": "c36a510f04456686b445499afbb6ddc4cbf9ab5a91f02971e6466ab92544019e", "action": { "label": "Test saved connection", "top": 733.015625, @@ -3173,11 +3173,11 @@ }, "external-catalog-desktop-light.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-catalog-desktop-light.png", "stage": "external-catalog", "theme": "light", @@ -3187,17 +3187,17 @@ "width": 1440, "height": 900 }, - "sha256": "997e20ff225c2d904e1b041fe9c109dce1407956748dfb05dbd6363ed3365372", + "sha256": "9c6a7c16d4a2911a174099bb5b64113eab1914e4196ab3a3a09e34c2a3f8f8f4", "action": null, "captured_action": null }, "external-connection-desktop-light.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-connection-desktop-light.png", "stage": "external-connection", "theme": "light", @@ -3207,7 +3207,7 @@ "width": 1440, "height": 900 }, - "sha256": "5823361c4b2516cc4a47172eddb1c968e23bfce117b30158d43959a9eafd96d0", + "sha256": "f0a13ebae650d3ee7e12dc5b44fdee970ee431bebed93f8cfdf6c2c33c25945e", "action": { "label": "Save connection and continue", "top": 713.078125, @@ -3225,11 +3225,11 @@ }, "external-discovery-desktop-light.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-discovery-desktop-light.png", "stage": "external-discovery", "theme": "light", @@ -3239,7 +3239,7 @@ "width": 1440, "height": 900 }, - "sha256": "58f48f41dc638d88def4f691b649722f579834f4c28f5f7c955d751b392b771a", + "sha256": "ac38ccb06adc1073389e7c1544d76794622e83ac9b5e806adcb52f2e1becd38e", "action": { "label": "Discover schemas (remote request)", "top": 713.078125, @@ -3257,11 +3257,11 @@ }, "external-review-overview-desktop-light.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-review-overview-desktop-light.png", "stage": "external-review-overview", "theme": "light", @@ -3271,7 +3271,7 @@ "width": 1440, "height": 900 }, - "sha256": "05e45a8da592e4d7c4bd10bb30f8edd19cce37d7a60b7a615456c61003b0c387", + "sha256": "0438ae029e9cb5198b949b8fad98ffa3210da1748f7e704ad34a283d24625178", "action": { "label": "Record schema review", "top": 713.078125, @@ -3289,11 +3289,11 @@ }, "external-review-schema-detail-desktop-light.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-review-schema-detail-desktop-light.png", "stage": "external-review-schema-detail", "theme": "light", @@ -3303,7 +3303,7 @@ "width": 1440, "height": 900 }, - "sha256": "7c171c1f220af6931bf530daf26598912610552da676bd7a192d9d546573801b", + "sha256": "76620862bfac2f4f4e5c3e707e2398be8bae37425f42061594b1a7ec15884b50", "action": { "label": "Record schema review", "top": 713.078125, @@ -3321,11 +3321,11 @@ }, "external-review-confirmation-detail-desktop-light.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-review-confirmation-detail-desktop-light.png", "stage": "external-review-confirmation-detail", "theme": "light", @@ -3335,7 +3335,7 @@ "width": 1440, "height": 900 }, - "sha256": "8abc4f198f477a6a88e34db9bcd9b27698db6b7406cc0d7087cda41a82a15706", + "sha256": "b65ca1e90bce925c7c01f15277f480d2010ca55fc4012f9ce358c64e2cce96e2", "action": { "label": "Record schema review", "top": 713.078125, @@ -3353,11 +3353,11 @@ }, "external-project-desktop-light.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-project-desktop-light.png", "stage": "external-project", "theme": "light", @@ -3367,7 +3367,7 @@ "width": 1440, "height": 900 }, - "sha256": "5055b762ff369b1e7deb032e8e2a2e489cd0e41ba15e7b86bc21805c219da257", + "sha256": "3fcb28065556900af797766a1d5607026f18f83c9d6dc7e2fa2c3cc2290ee33c", "action": { "label": "Grant project access", "top": 713.078125, @@ -3385,11 +3385,11 @@ }, "external-project-fields-desktop-light.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-project-fields-desktop-light.png", "stage": "external-project-fields", "theme": "light", @@ -3399,7 +3399,7 @@ "width": 1440, "height": 900 }, - "sha256": "5055b762ff369b1e7deb032e8e2a2e489cd0e41ba15e7b86bc21805c219da257", + "sha256": "3fcb28065556900af797766a1d5607026f18f83c9d6dc7e2fa2c3cc2290ee33c", "action": { "label": "Grant project access", "top": 713.078125, @@ -3417,11 +3417,11 @@ }, "external-project-roles-detail-desktop-light.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-project-roles-detail-desktop-light.png", "stage": "external-project-roles-detail", "theme": "light", @@ -3431,7 +3431,7 @@ "width": 1440, "height": 900 }, - "sha256": "d892fe733b1f17ecbe038ccac16640ece592a4730dec7310c8fccfed3589d745", + "sha256": "d17e1aedd27dff92a1f6e310287c7c27afce8b578b4f47799bca0f9bdba7211f", "action": { "label": "Grant project access", "top": 713.078125, @@ -3449,11 +3449,11 @@ }, "external-granted-desktop-light.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-granted-desktop-light.png", "stage": "external-granted", "theme": "light", @@ -3463,7 +3463,7 @@ "width": 1440, "height": 900 }, - "sha256": "8196aed74bfb1c909e3b94722dedbe93e2a5874fd6a8857e97358ecb5344033d", + "sha256": "61f581f615585d1b48b3ec9ff43cc60b24b913751d468f7369922df33a173fd6", "action": { "label": "Revoke access", "top": 741.984375, @@ -3481,11 +3481,11 @@ }, "external-figma-requirements-desktop-light.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-figma-requirements-desktop-light.png", "stage": "external-figma-requirements", "theme": "light", @@ -3495,7 +3495,7 @@ "width": 1440, "height": 900 }, - "sha256": "aceac2623dfcf97c1d451f1847b65863f24ef2dfb16dd173cacf66b27e283e68", + "sha256": "34300fc469fb7b53b368b2a3034e34de55b8112c8b299fc8749b181168a96dd0", "action": { "label": "Continue", "top": 713.078125, @@ -3513,11 +3513,11 @@ }, "external-figma-account-scope-desktop-light.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-figma-account-scope-desktop-light.png", "stage": "external-figma-account-scope", "theme": "light", @@ -3527,7 +3527,7 @@ "width": 1440, "height": 900 }, - "sha256": "5a27589847fc8a7b8571a11f68f821855dec2d8dcae6736aac7fd4a2036fe5f6", + "sha256": "4d07661f8d05e34e61f4ca9d502b7d625c0ce3bb6a0393914d3194ad84a4880d", "action": { "label": "Continue", "top": 713.078125, @@ -3545,11 +3545,11 @@ }, "external-figma-account-scope-detail-desktop-light.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-figma-account-scope-detail-desktop-light.png", "stage": "external-figma-account-scope-detail", "theme": "light", @@ -3559,7 +3559,7 @@ "width": 1440, "height": 900 }, - "sha256": "f2a88f2fc315ac9cf3fbc4bc759e324c2f199d5a0b1dc553890540b15a4f8801", + "sha256": "076a761cef0ac68227c4cf84b0334e16609445df737b4d87626afd989029a6b8", "action": { "label": "Continue", "top": 713.078125, @@ -3577,11 +3577,11 @@ }, "external-figma-factory-setup-desktop-light.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-figma-factory-setup-desktop-light.png", "stage": "external-figma-factory-setup", "theme": "light", @@ -3591,7 +3591,7 @@ "width": 1440, "height": 900 }, - "sha256": "ebd47c9325e4969fd842e642c915669e76c154a4dcd4f74a55f0d5ee91de1108", + "sha256": "34612041f806b6a6b59539c712d3064974e92266c46581c6cc966d3f15a955b4", "action": { "label": "Continue", "top": 713.078125, @@ -3609,11 +3609,11 @@ }, "external-figma-availability-desktop-light.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-figma-availability-desktop-light.png", "stage": "external-figma-availability", "theme": "light", @@ -3623,7 +3623,7 @@ "width": 1440, "height": 900 }, - "sha256": "896369497bbd42dec7c702edb6bcb33426563c991ab6d20ce3e46b16583e507b", + "sha256": "2220bb210619ae5c1affadce83a535c063769ab74060d3ab8faed7b744060489", "action": { "label": "Connection unavailable", "top": 713.078125, @@ -3641,11 +3641,11 @@ }, "external-sentry-requirements-desktop-light.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-sentry-requirements-desktop-light.png", "stage": "external-sentry-requirements", "theme": "light", @@ -3655,7 +3655,7 @@ "width": 1440, "height": 900 }, - "sha256": "b3b1fd10dc030fc1dbb2b0dcaece3dbde5772ea5ec78dc36c6c310319b3fb0d0", + "sha256": "28a038593f99b945f848253af648b77e0934e70b076f1ab68354d97f497d989a", "action": { "label": "Continue", "top": 713.078125, @@ -3673,11 +3673,11 @@ }, "external-sentry-account-scope-desktop-light.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-sentry-account-scope-desktop-light.png", "stage": "external-sentry-account-scope", "theme": "light", @@ -3687,7 +3687,7 @@ "width": 1440, "height": 900 }, - "sha256": "b5e91d021e2b49ffa7b395aae3207395ed122b94cfddf913afa74aa939a1332f", + "sha256": "023a225fff0e70b195f2b17ad1d1924082c323fa79364baec424bd782491a50a", "action": { "label": "Continue", "top": 713.078125, @@ -3705,11 +3705,11 @@ }, "external-sentry-account-scope-detail-desktop-light.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-sentry-account-scope-detail-desktop-light.png", "stage": "external-sentry-account-scope-detail", "theme": "light", @@ -3719,7 +3719,7 @@ "width": 1440, "height": 900 }, - "sha256": "f2339a19a8e1ff67ade3246edf69d75657f460ec161251ea107a83af35a1ca53", + "sha256": "f24d2f8e1ea01086f6457dc88ca48444e82e70f99977b8af3960fe4f98d28cad", "action": { "label": "Continue", "top": 713.078125, @@ -3737,11 +3737,11 @@ }, "external-sentry-factory-setup-desktop-light.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-sentry-factory-setup-desktop-light.png", "stage": "external-sentry-factory-setup", "theme": "light", @@ -3751,7 +3751,7 @@ "width": 1440, "height": 900 }, - "sha256": "456f33b4bd8eb02869774394b8fcb89c1c72b91c14646e4ef877b01451e82f39", + "sha256": "39c3099dfb07aad8dfdc2c6cf3416646e8380e6bb14c5dd1a2c28323c7d723e4", "action": { "label": "Continue", "top": 713.078125, @@ -3769,11 +3769,11 @@ }, "external-sentry-availability-desktop-light.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-sentry-availability-desktop-light.png", "stage": "external-sentry-availability", "theme": "light", @@ -3783,7 +3783,7 @@ "width": 1440, "height": 900 }, - "sha256": "2b6c17e53358341540d179b090f9b3a7f06a122cafa19c0184242e8ec9f65441", + "sha256": "55b7f09e1ebafe2882efc38a45f4de706805fb7568f237dcd6b78bca1ec40c77", "action": { "label": "Connection unavailable", "top": 713.078125, @@ -3801,11 +3801,11 @@ }, "external-grafana-requirements-desktop-light.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-grafana-requirements-desktop-light.png", "stage": "external-grafana-requirements", "theme": "light", @@ -3815,7 +3815,7 @@ "width": 1440, "height": 900 }, - "sha256": "4272570f78c196f6835d5625b045ca27080b06e5bdd9a6dc0951f86055c6a933", + "sha256": "7b0ae24c1b04749539b6cd4816922fb501bc0c6f23db2c5018f20f583bec473e", "action": { "label": "Continue", "top": 713.078125, @@ -3833,11 +3833,11 @@ }, "external-grafana-account-scope-desktop-light.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-grafana-account-scope-desktop-light.png", "stage": "external-grafana-account-scope", "theme": "light", @@ -3847,7 +3847,7 @@ "width": 1440, "height": 900 }, - "sha256": "f597179cdaede08695310ca3d113638a2d546790de43b32b257eebf84931bd93", + "sha256": "3a5f4539ebc7e5ad545a3c0960971d756a45c33ddf2c1f74517979c79d9f7816", "action": { "label": "Continue", "top": 713.078125, @@ -3865,11 +3865,11 @@ }, "external-grafana-account-scope-detail-desktop-light.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-grafana-account-scope-detail-desktop-light.png", "stage": "external-grafana-account-scope-detail", "theme": "light", @@ -3879,7 +3879,7 @@ "width": 1440, "height": 900 }, - "sha256": "ba62a118dae79088e275b97ad07d2632c92517952f2cb4606de4f062836b4991", + "sha256": "93e4481ffb925a73d3ff7836dca151adb471e37faf05e804240780b04e5bb4ce", "action": { "label": "Continue", "top": 713.078125, @@ -3897,11 +3897,11 @@ }, "external-grafana-factory-setup-desktop-light.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-grafana-factory-setup-desktop-light.png", "stage": "external-grafana-factory-setup", "theme": "light", @@ -3911,7 +3911,7 @@ "width": 1440, "height": 900 }, - "sha256": "026a8ecd70790f0168c6bec9265f18e16187d17a8e325ba58b6f960071e84cf6", + "sha256": "b2a7137b8aae6846654fc85bfed2ed69f5d5003af26fa3a9ef535d877a659d8b", "action": { "label": "Continue", "top": 713.078125, @@ -3929,11 +3929,11 @@ }, "external-grafana-availability-desktop-light.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-grafana-availability-desktop-light.png", "stage": "external-grafana-availability", "theme": "light", @@ -3943,7 +3943,7 @@ "width": 1440, "height": 900 }, - "sha256": "e6845feeefefbff4f9500db8435a97221052bb9c846a1a5f7924e6765d41b359", + "sha256": "5ec1e8c703847b1bbb92ebd5801ed11ede192fdb4cfedc8cc94b5bc930207e32", "action": { "label": "Connection unavailable", "top": 713.078125, @@ -3961,11 +3961,11 @@ }, "external-playwright-requirements-desktop-light.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-playwright-requirements-desktop-light.png", "stage": "external-playwright-requirements", "theme": "light", @@ -3975,7 +3975,7 @@ "width": 1440, "height": 900 }, - "sha256": "f3c694738b1fa72c83dfd65ce0621dd9d83830616f7060d3a101254060f90f8d", + "sha256": "6a5afd78e7e9f58d1cca748e7917745a495a25313238317612478b30b6f17eb0", "action": { "label": "Continue", "top": 713.078125, @@ -3993,11 +3993,11 @@ }, "external-playwright-account-scope-desktop-light.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-playwright-account-scope-desktop-light.png", "stage": "external-playwright-account-scope", "theme": "light", @@ -4007,7 +4007,7 @@ "width": 1440, "height": 900 }, - "sha256": "dcbafeffc7c503e9c5b787634653b782eb7434c6fac870f4ade4a378f1cce756", + "sha256": "56d40abf7c1ef7545a0e7df6bd82d963e1242c00aeaae469b77f761420461b11", "action": { "label": "Continue", "top": 713.078125, @@ -4025,11 +4025,11 @@ }, "external-playwright-account-scope-detail-desktop-light.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-playwright-account-scope-detail-desktop-light.png", "stage": "external-playwright-account-scope-detail", "theme": "light", @@ -4039,7 +4039,7 @@ "width": 1440, "height": 900 }, - "sha256": "e8e0f74ce1cc33475fd8a049e41cc4ceaa74ed00c63571d739cf55ce11d6d1cb", + "sha256": "70e6f36bdb94e7fd61d2ce40aefcc849d10db1df513188482ae7257ac8678f2d", "action": { "label": "Continue", "top": 713.078125, @@ -4057,11 +4057,11 @@ }, "external-playwright-factory-setup-desktop-light.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-playwright-factory-setup-desktop-light.png", "stage": "external-playwright-factory-setup", "theme": "light", @@ -4071,7 +4071,7 @@ "width": 1440, "height": 900 }, - "sha256": "9b44f5e9772f39b740c2c3892069f9727e2f672033c6cb38e7380edfc516f92a", + "sha256": "fd19622e6bb6b4054c930e2d2220aff911d1e8e08b366cf84224c210fe4856ea", "action": { "label": "Continue", "top": 713.078125, @@ -4089,11 +4089,11 @@ }, "external-playwright-availability-desktop-light.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-playwright-availability-desktop-light.png", "stage": "external-playwright-availability", "theme": "light", @@ -4103,7 +4103,7 @@ "width": 1440, "height": 900 }, - "sha256": "ef6551c093f86e8d7b5fa3b41dd1335fc4c82f9a92cb22f145ce690d4329b0e7", + "sha256": "38655048cbe10f6c54fd34cc0c85533e277b41eb1e8f6786f87bcf95f930d81a", "action": { "label": "External template unavailable", "top": 713.078125, @@ -4121,11 +4121,11 @@ }, "external-catalog-desktop-dark.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-catalog-desktop-dark.png", "stage": "external-catalog", "theme": "dark", @@ -4135,17 +4135,17 @@ "width": 1440, "height": 900 }, - "sha256": "ef2c6eadff1bf490a54f59982603777fad3804af65f530b7b4fe4fdc6e71762b", + "sha256": "5f9d30f83b013e56d11c66eb23a99f4dbb4a46c8a560d15b5264f96e7f018a2d", "action": null, "captured_action": null }, "external-connection-desktop-dark.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-connection-desktop-dark.png", "stage": "external-connection", "theme": "dark", @@ -4155,7 +4155,7 @@ "width": 1440, "height": 900 }, - "sha256": "54ef648d06d0d2975e1a096f44af770a903cf568b763ebca1bfe298108e4487a", + "sha256": "de28b53a80b1a24604cd15ba717547533f321293fac3a37a41e593aec722abfd", "action": { "label": "Save connection and continue", "top": 713.078125, @@ -4173,11 +4173,11 @@ }, "external-discovery-desktop-dark.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-discovery-desktop-dark.png", "stage": "external-discovery", "theme": "dark", @@ -4187,7 +4187,7 @@ "width": 1440, "height": 900 }, - "sha256": "3275ac4ad1579bf13ddb6855e322c63e2befb5e2ceb6e21929ad5c70413bdad8", + "sha256": "a77e7d1ad1ed7baea5d486d023b51f65f21ee7cdb4c83316b75b9f5761961b09", "action": { "label": "Discover schemas (remote request)", "top": 713.078125, @@ -4205,11 +4205,11 @@ }, "external-review-overview-desktop-dark.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-review-overview-desktop-dark.png", "stage": "external-review-overview", "theme": "dark", @@ -4219,7 +4219,7 @@ "width": 1440, "height": 900 }, - "sha256": "a2872b1f6f5cc13ac6978e533b71482fd1749dee8f71e30d6d4ad65ffd8f2667", + "sha256": "cd14fc54cfe733e1020baddc0b2426b84edef8f18db8690ddf02af9ff33260af", "action": { "label": "Record schema review", "top": 713.078125, @@ -4237,11 +4237,11 @@ }, "external-review-schema-detail-desktop-dark.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-review-schema-detail-desktop-dark.png", "stage": "external-review-schema-detail", "theme": "dark", @@ -4251,7 +4251,7 @@ "width": 1440, "height": 900 }, - "sha256": "c3e1e542f64c00c5402486c91c33f88acefbc257b19051ea0b4e858cbedf80cb", + "sha256": "3f2634c5581f268e4e78a63e31010e098bc09dbba7253b0f66676c207729a0ab", "action": { "label": "Record schema review", "top": 713.078125, @@ -4269,11 +4269,11 @@ }, "external-review-confirmation-detail-desktop-dark.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-review-confirmation-detail-desktop-dark.png", "stage": "external-review-confirmation-detail", "theme": "dark", @@ -4283,7 +4283,7 @@ "width": 1440, "height": 900 }, - "sha256": "ceae386fc7cd4c0f00f77d8e6694d54e9bdeaccb0f2c07bf0d528f24e81a5f33", + "sha256": "baf69c024d5a181840f774fce8f8f435965b85b015094432189f4b0a26f7e225", "action": { "label": "Record schema review", "top": 713.078125, @@ -4301,11 +4301,11 @@ }, "external-project-desktop-dark.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-project-desktop-dark.png", "stage": "external-project", "theme": "dark", @@ -4315,7 +4315,7 @@ "width": 1440, "height": 900 }, - "sha256": "6f04ea33cfcf7aa47723382fef508f4ad952c19bc943e942dee0478075406ff4", + "sha256": "435a63d8420c8a58dcd90777d070abd3747260c7b5f39cdc4bbabdc6e4aa2fdb", "action": { "label": "Grant project access", "top": 713.078125, @@ -4333,11 +4333,11 @@ }, "external-project-fields-desktop-dark.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-project-fields-desktop-dark.png", "stage": "external-project-fields", "theme": "dark", @@ -4347,7 +4347,7 @@ "width": 1440, "height": 900 }, - "sha256": "6f04ea33cfcf7aa47723382fef508f4ad952c19bc943e942dee0478075406ff4", + "sha256": "435a63d8420c8a58dcd90777d070abd3747260c7b5f39cdc4bbabdc6e4aa2fdb", "action": { "label": "Grant project access", "top": 713.078125, @@ -4365,11 +4365,11 @@ }, "external-project-roles-detail-desktop-dark.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-project-roles-detail-desktop-dark.png", "stage": "external-project-roles-detail", "theme": "dark", @@ -4379,7 +4379,7 @@ "width": 1440, "height": 900 }, - "sha256": "d3d28193f71baefe16107aca3357142e8f3017c70b346a7deb57c85a4e5f0e1d", + "sha256": "4794303bb7334a8e94a1378d8cbef057da457b71a33a4617b1fd5fee8881934b", "action": { "label": "Grant project access", "top": 713.078125, @@ -4397,11 +4397,11 @@ }, "external-granted-desktop-dark.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-granted-desktop-dark.png", "stage": "external-granted", "theme": "dark", @@ -4411,7 +4411,7 @@ "width": 1440, "height": 900 }, - "sha256": "e43631941d4e26b9c944b1ce2c317dbc7c1ce94f0f06e065adb798f9c8ff4ee8", + "sha256": "74b33b9aa38a25ddc4a85b5a7933f4c175507add8f72ac34ea48471ccb7e1796", "action": { "label": "Revoke access", "top": 741.984375, @@ -4429,11 +4429,11 @@ }, "external-figma-requirements-desktop-dark.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-figma-requirements-desktop-dark.png", "stage": "external-figma-requirements", "theme": "dark", @@ -4443,7 +4443,7 @@ "width": 1440, "height": 900 }, - "sha256": "58ca43672976356c4e7a0c36fe290949cfb075d2f477155b217f2aee67a0ca54", + "sha256": "eb0c8392454f194508f92d68aae796266f067e689afbcad6058d8114fb26624e", "action": { "label": "Continue", "top": 713.078125, @@ -4461,11 +4461,11 @@ }, "external-figma-account-scope-desktop-dark.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-figma-account-scope-desktop-dark.png", "stage": "external-figma-account-scope", "theme": "dark", @@ -4475,7 +4475,7 @@ "width": 1440, "height": 900 }, - "sha256": "98ff95bfa62a76c559ffeef37a9f7621e003daa7cc0a04fb9341619f2b49c86c", + "sha256": "be710f0ccf93683cf258f2d03b70616347d5095445f2b76b84d3e6830e9cdec3", "action": { "label": "Continue", "top": 713.078125, @@ -4493,11 +4493,11 @@ }, "external-figma-account-scope-detail-desktop-dark.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-figma-account-scope-detail-desktop-dark.png", "stage": "external-figma-account-scope-detail", "theme": "dark", @@ -4507,7 +4507,7 @@ "width": 1440, "height": 900 }, - "sha256": "fa1430d9bce3c90b053c71407a99e3707162a29f68ae250e35b3d0e993397a5e", + "sha256": "c6b5522781ff0fb3fe645cc464640a89171030d7bd0598980adc2de7eb5e73cd", "action": { "label": "Continue", "top": 713.078125, @@ -4525,11 +4525,11 @@ }, "external-figma-factory-setup-desktop-dark.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-figma-factory-setup-desktop-dark.png", "stage": "external-figma-factory-setup", "theme": "dark", @@ -4539,7 +4539,7 @@ "width": 1440, "height": 900 }, - "sha256": "1fb013cc75b45bc78acc092567714516ec34a9dbceca1bb12c3ddb4a2a414c85", + "sha256": "b58b6e48ac66acce8f367c55ee41647eb93769d915e0aa9c49ac7236f1c8611e", "action": { "label": "Continue", "top": 713.078125, @@ -4557,11 +4557,11 @@ }, "external-figma-availability-desktop-dark.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-figma-availability-desktop-dark.png", "stage": "external-figma-availability", "theme": "dark", @@ -4571,7 +4571,7 @@ "width": 1440, "height": 900 }, - "sha256": "9a6cc917d5f29002b6349640d32a828bf85ccaf849df1e328aab2523dea5fa00", + "sha256": "28c149ed9a9f8593462c9d30fec6f98a8e2f0d60c08435b96e5e3c8960235e65", "action": { "label": "Connection unavailable", "top": 713.078125, @@ -4589,11 +4589,11 @@ }, "external-sentry-requirements-desktop-dark.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-sentry-requirements-desktop-dark.png", "stage": "external-sentry-requirements", "theme": "dark", @@ -4603,7 +4603,7 @@ "width": 1440, "height": 900 }, - "sha256": "542678a676a67ad05e8c942788402c7b54b22153a74816da55c57e537a9875da", + "sha256": "488f085ded8e3a1d7f23f49c2f550d0d6b27fca5ae744a6a9113115b873b0639", "action": { "label": "Continue", "top": 713.078125, @@ -4621,11 +4621,11 @@ }, "external-sentry-account-scope-desktop-dark.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-sentry-account-scope-desktop-dark.png", "stage": "external-sentry-account-scope", "theme": "dark", @@ -4635,7 +4635,7 @@ "width": 1440, "height": 900 }, - "sha256": "007c07aeec103f6dfcd0fd0273e60a71f75266ad3268e0f99ea414a5e6b70e23", + "sha256": "c70859b9755ff26da129b276f72ca3a922492bcf996522dc80d3a0ffe83a9644", "action": { "label": "Continue", "top": 713.078125, @@ -4653,11 +4653,11 @@ }, "external-sentry-account-scope-detail-desktop-dark.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-sentry-account-scope-detail-desktop-dark.png", "stage": "external-sentry-account-scope-detail", "theme": "dark", @@ -4667,7 +4667,7 @@ "width": 1440, "height": 900 }, - "sha256": "9ef8abc22e99383cfc352e7cee61f551dd29f45667e5d204e6a64dec87c390e7", + "sha256": "cc8b54a027ad299f75b252298a7bb5637795111db94120929f87adcfbe0b0a7f", "action": { "label": "Continue", "top": 713.078125, @@ -4685,11 +4685,11 @@ }, "external-sentry-factory-setup-desktop-dark.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-sentry-factory-setup-desktop-dark.png", "stage": "external-sentry-factory-setup", "theme": "dark", @@ -4699,7 +4699,7 @@ "width": 1440, "height": 900 }, - "sha256": "8f12e606e5fbd37bb940c6856225c112ddc86f8a14562e268501eadb0f4cd521", + "sha256": "15a589d5bc9a711fe83d30b508c06ef0ffb690bc8ccfa07905699613551ad0c1", "action": { "label": "Continue", "top": 713.078125, @@ -4717,11 +4717,11 @@ }, "external-sentry-availability-desktop-dark.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-sentry-availability-desktop-dark.png", "stage": "external-sentry-availability", "theme": "dark", @@ -4731,7 +4731,7 @@ "width": 1440, "height": 900 }, - "sha256": "8b0d558d78369985dae3d0242ce70f142c7baba1f8c7656578e3b387b86eba1d", + "sha256": "76f2d78e6e4b630d4d5105a3b593424af948d9cee710bcad0307c79bb73c2671", "action": { "label": "Connection unavailable", "top": 713.078125, @@ -4749,11 +4749,11 @@ }, "external-grafana-requirements-desktop-dark.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-grafana-requirements-desktop-dark.png", "stage": "external-grafana-requirements", "theme": "dark", @@ -4763,7 +4763,7 @@ "width": 1440, "height": 900 }, - "sha256": "c3da3e740295560a902557964def58b37acc3e6b1a64e847256c080584d1f41f", + "sha256": "d0a8af9b5fd924957bb1113354efd9b4901df950855854de4ac1f12adce7f1b6", "action": { "label": "Continue", "top": 713.078125, @@ -4781,11 +4781,11 @@ }, "external-grafana-account-scope-desktop-dark.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-grafana-account-scope-desktop-dark.png", "stage": "external-grafana-account-scope", "theme": "dark", @@ -4795,7 +4795,7 @@ "width": 1440, "height": 900 }, - "sha256": "f2e38a89d9eec94630303423665c517d62af3af3d805aa4517d7d9cadf844f6e", + "sha256": "8ef98c40bd00dde73921070bc3ecb2bef5ef7b64c014844dd9e0f1d6bee7a03e", "action": { "label": "Continue", "top": 713.078125, @@ -4813,11 +4813,11 @@ }, "external-grafana-account-scope-detail-desktop-dark.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-grafana-account-scope-detail-desktop-dark.png", "stage": "external-grafana-account-scope-detail", "theme": "dark", @@ -4827,7 +4827,7 @@ "width": 1440, "height": 900 }, - "sha256": "e689eb6308428c256ca59663d0939442b6d45e3ec1cd811f5042ece3caa0646a", + "sha256": "8f893156497948ea3bb34212709ee2cf3ab1d64e9247d8bb390d3f689e6761c3", "action": { "label": "Continue", "top": 713.078125, @@ -4845,11 +4845,11 @@ }, "external-grafana-factory-setup-desktop-dark.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-grafana-factory-setup-desktop-dark.png", "stage": "external-grafana-factory-setup", "theme": "dark", @@ -4859,7 +4859,7 @@ "width": 1440, "height": 900 }, - "sha256": "3f9f8ff12f9abb14202db06a593f6b2b40bbeaade3236225e94258d36314ffaa", + "sha256": "250e3790d475c050e033dffaffcca922a7a274d2edc53f18dc182850c4c43d41", "action": { "label": "Continue", "top": 713.078125, @@ -4877,11 +4877,11 @@ }, "external-grafana-availability-desktop-dark.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-grafana-availability-desktop-dark.png", "stage": "external-grafana-availability", "theme": "dark", @@ -4891,7 +4891,7 @@ "width": 1440, "height": 900 }, - "sha256": "e1322dfc3af0addce67e089a2130321e4566197e0cba2091f8d34b4a59c09d23", + "sha256": "9ba63ae3a3148503bea55e950939ae0de92967fc9872d2e9492dd79024eaa6ec", "action": { "label": "Connection unavailable", "top": 713.078125, @@ -4909,11 +4909,11 @@ }, "external-playwright-requirements-desktop-dark.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-playwright-requirements-desktop-dark.png", "stage": "external-playwright-requirements", "theme": "dark", @@ -4923,7 +4923,7 @@ "width": 1440, "height": 900 }, - "sha256": "6a085f99f1f64bdac96b52a087d1cb93fd17cc30e0d7cdaffbed04125f9f9f8a", + "sha256": "bfbd2e61b4fc2efd093ac055de87924ed9d04eeaf223c01a042043f27ba4b8d7", "action": { "label": "Continue", "top": 713.078125, @@ -4941,11 +4941,11 @@ }, "external-playwright-account-scope-desktop-dark.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-playwright-account-scope-desktop-dark.png", "stage": "external-playwright-account-scope", "theme": "dark", @@ -4955,7 +4955,7 @@ "width": 1440, "height": 900 }, - "sha256": "76b288ce534f5c42f584002cd45472772526bdf5b3cf62dc5e1c5369ed78bddc", + "sha256": "6d67f9536cc6470f9106a9b044ee5f9774bd1e61d45238bdcb93998ff3b2c1c2", "action": { "label": "Continue", "top": 713.078125, @@ -4973,11 +4973,11 @@ }, "external-playwright-account-scope-detail-desktop-dark.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-playwright-account-scope-detail-desktop-dark.png", "stage": "external-playwright-account-scope-detail", "theme": "dark", @@ -4987,7 +4987,7 @@ "width": 1440, "height": 900 }, - "sha256": "9f3c92b550e510718918f5011237764f69764c3b0dd15651968390f5fa02d28d", + "sha256": "156436b430e17ce899af0e40e06f4bcf702cd6c1dff84f1eeba4f7c4bbb4b894", "action": { "label": "Continue", "top": 713.078125, @@ -5005,11 +5005,11 @@ }, "external-playwright-factory-setup-desktop-dark.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-playwright-factory-setup-desktop-dark.png", "stage": "external-playwright-factory-setup", "theme": "dark", @@ -5019,7 +5019,7 @@ "width": 1440, "height": 900 }, - "sha256": "0cdd69bbe9c0c874ab5c30591c0f77a0b28f7ccc01bf9599b4a3757533505c7a", + "sha256": "e241f8988e74b6d0c27d3957f217d8f42264784b3d5e835fc4176eeb2a676882", "action": { "label": "Continue", "top": 713.078125, @@ -5037,11 +5037,11 @@ }, "external-playwright-availability-desktop-dark.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-playwright-availability-desktop-dark.png", "stage": "external-playwright-availability", "theme": "dark", @@ -5051,7 +5051,7 @@ "width": 1440, "height": 900 }, - "sha256": "7246883cc262d0d44ba0ecefd3a4effe1b7e025e829fc04d4a542eb05f159694", + "sha256": "233f8e893f7ce7a7d4df7375fa412f3b993ea8d68862c98ae43b4d645aaeebd2", "action": { "label": "External template unavailable", "top": 713.078125, @@ -5069,11 +5069,11 @@ }, "external-catalog-mobile-light.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-catalog-mobile-light.png", "stage": "external-catalog", "theme": "light", @@ -5083,17 +5083,17 @@ "width": 390, "height": 844 }, - "sha256": "19bb222e9b5694e066a94ea4d3ac6519a28c08a91fcdadff82372a38a0bd385c", + "sha256": "42a2dedb1e080fa1df8df4a933b4c25311be0d0949574725e3beed38054f8a05", "action": null, "captured_action": null }, "external-connection-mobile-light.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-connection-mobile-light.png", "stage": "external-connection", "theme": "light", @@ -5103,7 +5103,7 @@ "width": 390, "height": 844 }, - "sha256": "fe19cf97f61dddc005480f1fb1a9d3b703c598e6c822573aa87661bcfc5b7ca2", + "sha256": "7f0c606fcc12fa7cd0b91b0aa7eca510e16df27b757e118b76cf1b86d942c47c", "action": { "label": "Save connection and continue", "top": 693.5, @@ -5121,11 +5121,11 @@ }, "external-discovery-mobile-light.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-discovery-mobile-light.png", "stage": "external-discovery", "theme": "light", @@ -5135,7 +5135,7 @@ "width": 390, "height": 844 }, - "sha256": "19cd6f72c216ed841cfc94d026c2a612c3cc518a3942af750dcf68bb400625e4", + "sha256": "ce645c6569db330b68eb07a0c01ace2e619776babe6a9721610d5acb51083fbd", "action": { "label": "Discover schemas (remote request)", "top": 695, @@ -5153,11 +5153,11 @@ }, "external-review-overview-mobile-light.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-review-overview-mobile-light.png", "stage": "external-review-overview", "theme": "light", @@ -5167,7 +5167,7 @@ "width": 390, "height": 844 }, - "sha256": "39f8aeaca64eb409b1db908d15b557f57673db27491c53e31dcdf4234a6b0727", + "sha256": "07879b51e9cf3fa565b0250f22691bf428b037ba0c6d9a8948da1706f4818393", "action": { "label": "Record schema review", "top": 693.5, @@ -5185,11 +5185,11 @@ }, "external-review-schema-detail-mobile-light.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-review-schema-detail-mobile-light.png", "stage": "external-review-schema-detail", "theme": "light", @@ -5199,7 +5199,7 @@ "width": 390, "height": 844 }, - "sha256": "5f6b71815ae95e3d0a234c21a899aa35af9382ee02e3624cbaed0a976633e432", + "sha256": "6d6553387960bd2ca91ea812529a0a1fa711da72852250c71d3f95a3cc4050ca", "action": { "label": "Record schema review", "top": 693.5, @@ -5217,11 +5217,11 @@ }, "external-review-confirmation-detail-mobile-light.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-review-confirmation-detail-mobile-light.png", "stage": "external-review-confirmation-detail", "theme": "light", @@ -5231,7 +5231,7 @@ "width": 390, "height": 844 }, - "sha256": "d01fb0f87fba5e848443ba44b8d0f354173403bd6755b3677f76412a9295af41", + "sha256": "99d5a5a97ac642271756ce4a9c6f82ad0489bf75146e2d6b6b7afc9a0dae6fc2", "action": { "label": "Record schema review", "top": 693.5, @@ -5249,11 +5249,11 @@ }, "external-project-mobile-light.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-project-mobile-light.png", "stage": "external-project", "theme": "light", @@ -5263,7 +5263,7 @@ "width": 390, "height": 844 }, - "sha256": "f654327178a53514bb39b74b62380d2b05a409ae1a33ba76a780d744bdd28d90", + "sha256": "9b01bc54c572719a8291d36188321228c6da5a92274aabd8150149f7d7ced653", "action": { "label": "Grant project access", "top": 693.5, @@ -5281,11 +5281,11 @@ }, "external-project-fields-mobile-light.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-project-fields-mobile-light.png", "stage": "external-project-fields", "theme": "light", @@ -5295,7 +5295,7 @@ "width": 390, "height": 844 }, - "sha256": "f654327178a53514bb39b74b62380d2b05a409ae1a33ba76a780d744bdd28d90", + "sha256": "9b01bc54c572719a8291d36188321228c6da5a92274aabd8150149f7d7ced653", "action": { "label": "Grant project access", "top": 693.5, @@ -5313,11 +5313,11 @@ }, "external-project-roles-detail-mobile-light.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-project-roles-detail-mobile-light.png", "stage": "external-project-roles-detail", "theme": "light", @@ -5327,7 +5327,7 @@ "width": 390, "height": 844 }, - "sha256": "0fa230386d29d99ac471f21ede6ee48c65b3707b93863e3dd73fca345703787a", + "sha256": "85af8d771adcf6f98bf52461eafbebc58ee74192f51891b71f2b5da619fa0660", "action": { "label": "Grant project access", "top": 693.5, @@ -5345,11 +5345,11 @@ }, "external-granted-mobile-light.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-granted-mobile-light.png", "stage": "external-granted", "theme": "light", @@ -5359,7 +5359,7 @@ "width": 390, "height": 844 }, - "sha256": "05d76a0dae888baaa395ea4e4812cce19f0fb953c583aa61915537d4e1e6289d", + "sha256": "4c766e67e55481bc196562a22a2116040b4b1c1346d0cd3aa3ab63d6a733e2be", "action": { "label": "Revoke access", "top": 713.984375, @@ -5377,11 +5377,11 @@ }, "external-figma-requirements-mobile-light.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-figma-requirements-mobile-light.png", "stage": "external-figma-requirements", "theme": "light", @@ -5391,7 +5391,7 @@ "width": 390, "height": 844 }, - "sha256": "0dc94a01ed18f035751df2ab46c1c5c42842957b2af679f67d5ea53b67d4b924", + "sha256": "510200a8484ca149febb561fd85fe148b59fb50243f07a2c507855e2c5e12ced", "action": { "label": "Continue", "top": 693.5, @@ -5409,11 +5409,11 @@ }, "external-figma-account-scope-mobile-light.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-figma-account-scope-mobile-light.png", "stage": "external-figma-account-scope", "theme": "light", @@ -5423,7 +5423,7 @@ "width": 390, "height": 844 }, - "sha256": "750f3576477a9c04d87ee3a892165835a748adb74a4e1a93f0063e01ec3493e7", + "sha256": "cea58dca8a20fb1816dea5a6ef0bfae23c883da722fa8a120cab7776b8851110", "action": { "label": "Continue", "top": 693.5, @@ -5441,11 +5441,11 @@ }, "external-figma-account-scope-detail-mobile-light.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-figma-account-scope-detail-mobile-light.png", "stage": "external-figma-account-scope-detail", "theme": "light", @@ -5455,7 +5455,7 @@ "width": 390, "height": 844 }, - "sha256": "d108a1294b278fc04cdf5900ac81b9cb1e2d8c7f41f01ff3e3e7791f9488c7c4", + "sha256": "c3077b9d1f9d8bad2e7fd39a5f4562b65883a253b21143d470174af94583c236", "action": { "label": "Continue", "top": 693.5, @@ -5473,11 +5473,11 @@ }, "external-figma-factory-setup-mobile-light.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-figma-factory-setup-mobile-light.png", "stage": "external-figma-factory-setup", "theme": "light", @@ -5487,7 +5487,7 @@ "width": 390, "height": 844 }, - "sha256": "e0c2eb3f9b49f9989da899db1248bff4c3c40589b0d4e7969e7e806cdba625e0", + "sha256": "1d7c2ad809bd8937a490bdb1a2dbff83efd10e615266d369f1cce19162441524", "action": { "label": "Continue", "top": 693.5, @@ -5505,11 +5505,11 @@ }, "external-figma-availability-mobile-light.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-figma-availability-mobile-light.png", "stage": "external-figma-availability", "theme": "light", @@ -5519,7 +5519,7 @@ "width": 390, "height": 844 }, - "sha256": "dac3371b54a8c9bbff0bc1dd3929058bb90cb245684f50c4b8bed56ac7bb020a", + "sha256": "bd39c026840760285aac5e9c784f9bebf28b66d7f00c1ab0423e05a15249f2f0", "action": { "label": "Connection unavailable", "top": 693.5, @@ -5537,11 +5537,11 @@ }, "external-sentry-requirements-mobile-light.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-sentry-requirements-mobile-light.png", "stage": "external-sentry-requirements", "theme": "light", @@ -5551,7 +5551,7 @@ "width": 390, "height": 844 }, - "sha256": "fcead1d782fc8e6dca5ee9ad45307d417c197f11e9510b6e5c4cf2318ed95bd7", + "sha256": "84ef9712a7280ac5951e215a1bf5a20e5575d0df034250d587f8c0f6650db384", "action": { "label": "Continue", "top": 693.5, @@ -5569,11 +5569,11 @@ }, "external-sentry-account-scope-mobile-light.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-sentry-account-scope-mobile-light.png", "stage": "external-sentry-account-scope", "theme": "light", @@ -5583,7 +5583,7 @@ "width": 390, "height": 844 }, - "sha256": "27fbcf6ed7a14be95061741e2193c98b22fb393d72ad04c0da4ada7fe2f2414b", + "sha256": "852108d2ca4d2b7c070cc0d9bbce3790f50148cbd80dab1c8b8735a6d9f555a8", "action": { "label": "Continue", "top": 693.5, @@ -5601,11 +5601,11 @@ }, "external-sentry-account-scope-detail-mobile-light.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-sentry-account-scope-detail-mobile-light.png", "stage": "external-sentry-account-scope-detail", "theme": "light", @@ -5615,7 +5615,7 @@ "width": 390, "height": 844 }, - "sha256": "8ec824ead7863d64e1b9a342014643a39f6fc22400f43573e46dbeffd62380ef", + "sha256": "d1c38a88e599e40cfe38656e7131266137ce05cba30d12131a303180befa60c6", "action": { "label": "Continue", "top": 693.5, @@ -5633,11 +5633,11 @@ }, "external-sentry-factory-setup-mobile-light.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-sentry-factory-setup-mobile-light.png", "stage": "external-sentry-factory-setup", "theme": "light", @@ -5647,7 +5647,7 @@ "width": 390, "height": 844 }, - "sha256": "c0b85524c09ad33a480f0d1e498ad0d225ddfcb8be51975729195c4dee48553d", + "sha256": "51e4f8b7a1b00e35cc5a4b996a6e63e9fa282b8bc78fbb2a852591af487e6d84", "action": { "label": "Continue", "top": 693.5, @@ -5665,11 +5665,11 @@ }, "external-sentry-availability-mobile-light.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-sentry-availability-mobile-light.png", "stage": "external-sentry-availability", "theme": "light", @@ -5679,7 +5679,7 @@ "width": 390, "height": 844 }, - "sha256": "88df69caea8a47b1d8901f3d33919037a7012ed354ec63f6ee8ca8ab86c8ad36", + "sha256": "fa202815e79d441d6ce1b49831944147dca7ec047044f282042141c5c4c7a230", "action": { "label": "Connection unavailable", "top": 693.5, @@ -5697,11 +5697,11 @@ }, "external-grafana-requirements-mobile-light.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-grafana-requirements-mobile-light.png", "stage": "external-grafana-requirements", "theme": "light", @@ -5711,7 +5711,7 @@ "width": 390, "height": 844 }, - "sha256": "c96699140d640bed753094e77f1d3c00cf3771b60f676908e4489a0d75a78c36", + "sha256": "33bf1c317bc576db60a78230066e693fd5cebcf02334193c8cd3d7d46f20d85f", "action": { "label": "Continue", "top": 693.5, @@ -5729,11 +5729,11 @@ }, "external-grafana-account-scope-mobile-light.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-grafana-account-scope-mobile-light.png", "stage": "external-grafana-account-scope", "theme": "light", @@ -5743,7 +5743,7 @@ "width": 390, "height": 844 }, - "sha256": "8192aeefcc285fae6d9d9842b66f7c4ba5e1e252fb2470508debd0da648f1efa", + "sha256": "b55143b192d98b3752bc4c3aa5401196a067e356a68104f87662556d31fcf207", "action": { "label": "Continue", "top": 693.5, @@ -5761,11 +5761,11 @@ }, "external-grafana-account-scope-detail-mobile-light.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-grafana-account-scope-detail-mobile-light.png", "stage": "external-grafana-account-scope-detail", "theme": "light", @@ -5775,7 +5775,7 @@ "width": 390, "height": 844 }, - "sha256": "48685463a2b687ed6adc282d250f0ffa835bf433ca47250a30841a5689eb1366", + "sha256": "970087922d73c6dd4fb1c63546a285aaea693d8ed0c642f43ee757f8ac6972f2", "action": { "label": "Continue", "top": 693.5, @@ -5793,11 +5793,11 @@ }, "external-grafana-factory-setup-mobile-light.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-grafana-factory-setup-mobile-light.png", "stage": "external-grafana-factory-setup", "theme": "light", @@ -5807,7 +5807,7 @@ "width": 390, "height": 844 }, - "sha256": "48113968369cdae480084bfc836b1a98c7824ec12cda7683dec626033b56796d", + "sha256": "f905da9c0215b3799f1e3e931caf89c5e5bcbc1284f8eec3a7c6d6e05e9c58bc", "action": { "label": "Continue", "top": 693.5, @@ -5825,11 +5825,11 @@ }, "external-grafana-availability-mobile-light.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-grafana-availability-mobile-light.png", "stage": "external-grafana-availability", "theme": "light", @@ -5839,7 +5839,7 @@ "width": 390, "height": 844 }, - "sha256": "07291f6863f0873304b73a2cc6e76aa7cb289ebc3aa842427f80af0dc7fe2b58", + "sha256": "10a4b002829aafdca710a461a7f5b705f2806052005c506acc13ad819e84882e", "action": { "label": "Connection unavailable", "top": 693.5, @@ -5857,11 +5857,11 @@ }, "external-playwright-requirements-mobile-light.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-playwright-requirements-mobile-light.png", "stage": "external-playwright-requirements", "theme": "light", @@ -5871,7 +5871,7 @@ "width": 390, "height": 844 }, - "sha256": "6febf994d9d4ac7af7307a2d08c125fe4c0abfe56de5c3dba244f9f687917a54", + "sha256": "5c27ed444b9122be82b5986afcf19fe2fc79e4d1686428617fc60360b5ac2ca1", "action": { "label": "Continue", "top": 693.5, @@ -5889,11 +5889,11 @@ }, "external-playwright-account-scope-mobile-light.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-playwright-account-scope-mobile-light.png", "stage": "external-playwright-account-scope", "theme": "light", @@ -5903,7 +5903,7 @@ "width": 390, "height": 844 }, - "sha256": "b0965ff89c729d6760253ac6dea8696bbc71a1dfc7d4a111eea17259d316e9ac", + "sha256": "9555256cf4a91fef6242ec93df8a3e0f2e63c79a375c37e012661826ee98b452", "action": { "label": "Continue", "top": 693.5, @@ -5921,11 +5921,11 @@ }, "external-playwright-account-scope-detail-mobile-light.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-playwright-account-scope-detail-mobile-light.png", "stage": "external-playwright-account-scope-detail", "theme": "light", @@ -5935,7 +5935,7 @@ "width": 390, "height": 844 }, - "sha256": "194bfb41e35af52a5e2e697b46ae53264cac181ae2bc8f69181781639f92741d", + "sha256": "3fe5afcc7f3f24fb58c2f2528da4b7f1bc44e3e552533a06e821cae7e6b1af2f", "action": { "label": "Continue", "top": 693.5, @@ -5953,11 +5953,11 @@ }, "external-playwright-factory-setup-mobile-light.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-playwright-factory-setup-mobile-light.png", "stage": "external-playwright-factory-setup", "theme": "light", @@ -5967,7 +5967,7 @@ "width": 390, "height": 844 }, - "sha256": "dc024a4c35fc101a6a300b4b51daa6ed1444b293d6bee5bbc19c2e5833bd242b", + "sha256": "205d0f973f1fdab22e94f2ba3f41435ddc1ac976809f58e1df064f0c0ae380a7", "action": { "label": "Continue", "top": 693.5, @@ -5985,11 +5985,11 @@ }, "external-playwright-availability-mobile-light.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-playwright-availability-mobile-light.png", "stage": "external-playwright-availability", "theme": "light", @@ -5999,7 +5999,7 @@ "width": 390, "height": 844 }, - "sha256": "54144c1e9cf07cdf50c64597708f7968ea484fea3ebb680563d5ed8fc0891b27", + "sha256": "afbb147aeb4deb54fbe2a9b369c080a7771b89aa179312b7da3dae6d98c779eb", "action": { "label": "External template unavailable", "top": 693.5, @@ -6017,11 +6017,11 @@ }, "external-catalog-mobile-dark.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-catalog-mobile-dark.png", "stage": "external-catalog", "theme": "dark", @@ -6031,17 +6031,17 @@ "width": 390, "height": 844 }, - "sha256": "8578e0b87aa6f18f086fe3598dd9d722f4dd22c307d0a8209961e15549f88464", + "sha256": "8c6c51ecffc2d3d2cc94c64dac38366a05748b152de574bb46622c60ed57fd8a", "action": null, "captured_action": null }, "external-connection-mobile-dark.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-connection-mobile-dark.png", "stage": "external-connection", "theme": "dark", @@ -6051,7 +6051,7 @@ "width": 390, "height": 844 }, - "sha256": "547e946df99348e376752cb10a48b81a1b822364e91f8cff9e5542809e41860c", + "sha256": "c5186934707e4580882f0fb0e52f580db00751be6c6c94eab070a8b580b15229", "action": { "label": "Save connection and continue", "top": 693.5, @@ -6069,11 +6069,11 @@ }, "external-discovery-mobile-dark.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-discovery-mobile-dark.png", "stage": "external-discovery", "theme": "dark", @@ -6083,7 +6083,7 @@ "width": 390, "height": 844 }, - "sha256": "0f5f60bdca0c2267bfec116eab6b62fec7d7f0fc30e8cba24508c7879b2ea2cb", + "sha256": "a39d5c77ddfc92a46a1ce9c757d637a6c56d7fa79ed8b0f441e796021fb9d295", "action": { "label": "Discover schemas (remote request)", "top": 695, @@ -6101,11 +6101,11 @@ }, "external-review-overview-mobile-dark.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-review-overview-mobile-dark.png", "stage": "external-review-overview", "theme": "dark", @@ -6115,7 +6115,7 @@ "width": 390, "height": 844 }, - "sha256": "263f2604926e5c79c789bc38ca89b74511b384541473cc0acc2b3adb0dfde54d", + "sha256": "6c5e982ff96a5925e55bea339a37509694923489964bf0476d6e6c0a17994e08", "action": { "label": "Record schema review", "top": 693.5, @@ -6133,11 +6133,11 @@ }, "external-review-schema-detail-mobile-dark.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-review-schema-detail-mobile-dark.png", "stage": "external-review-schema-detail", "theme": "dark", @@ -6147,7 +6147,7 @@ "width": 390, "height": 844 }, - "sha256": "f6b7c7ec8000e26528982a56b01133ebd604d6fa411cd2d7062d6e634307fcba", + "sha256": "32c45f76d09cc3995791488079f289a7943a7fdf819c6954e736f57f341d611c", "action": { "label": "Record schema review", "top": 693.5, @@ -6165,11 +6165,11 @@ }, "external-review-confirmation-detail-mobile-dark.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-review-confirmation-detail-mobile-dark.png", "stage": "external-review-confirmation-detail", "theme": "dark", @@ -6179,7 +6179,7 @@ "width": 390, "height": 844 }, - "sha256": "ce8e854d56ec15d8d708736b8e730b08372ba3aa1fa4f31b4978c61974cd1a3e", + "sha256": "a210993b16fa3455c1d6eae95ae4e24118d0dcfe0a1704797ba4ad2e68de666b", "action": { "label": "Record schema review", "top": 693.5, @@ -6197,11 +6197,11 @@ }, "external-project-mobile-dark.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-project-mobile-dark.png", "stage": "external-project", "theme": "dark", @@ -6211,7 +6211,7 @@ "width": 390, "height": 844 }, - "sha256": "1bb427bc3c8e76a491fffd241fada7a1a07bd567d29853c16b11f0e95489ea69", + "sha256": "22941ba0f0f7e4d0f5fa59a05effb8c5520058f2b1b2b35d553f8b964c335d87", "action": { "label": "Grant project access", "top": 693.5, @@ -6229,11 +6229,11 @@ }, "external-project-fields-mobile-dark.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-project-fields-mobile-dark.png", "stage": "external-project-fields", "theme": "dark", @@ -6243,7 +6243,7 @@ "width": 390, "height": 844 }, - "sha256": "1bb427bc3c8e76a491fffd241fada7a1a07bd567d29853c16b11f0e95489ea69", + "sha256": "22941ba0f0f7e4d0f5fa59a05effb8c5520058f2b1b2b35d553f8b964c335d87", "action": { "label": "Grant project access", "top": 693.5, @@ -6261,11 +6261,11 @@ }, "external-project-roles-detail-mobile-dark.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-project-roles-detail-mobile-dark.png", "stage": "external-project-roles-detail", "theme": "dark", @@ -6275,7 +6275,7 @@ "width": 390, "height": 844 }, - "sha256": "34cef16481143c16d32267049903fade78ea0c9a60843d833ea43e7a7725a553", + "sha256": "b3a9663c569c7b2e7321492e77551a76731e57530466fde537903d2b3d731db3", "action": { "label": "Grant project access", "top": 693.5, @@ -6293,11 +6293,11 @@ }, "external-granted-mobile-dark.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-granted-mobile-dark.png", "stage": "external-granted", "theme": "dark", @@ -6307,7 +6307,7 @@ "width": 390, "height": 844 }, - "sha256": "9129cdf15e95985d0fdd04eb87fe76759fb7fb7f8f1dfa8a96366a08461fd0eb", + "sha256": "69a8d79a9b81d07753a30d81ff9cb411b90820ee0cfc0da4499c13e9442fdeef", "action": { "label": "Revoke access", "top": 713.984375, @@ -6325,11 +6325,11 @@ }, "external-figma-requirements-mobile-dark.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-figma-requirements-mobile-dark.png", "stage": "external-figma-requirements", "theme": "dark", @@ -6339,7 +6339,7 @@ "width": 390, "height": 844 }, - "sha256": "2868a7d1834d29e7bc24270374b35b262cd04064f3af46546ebffbae4637ef1e", + "sha256": "e5f6b5bb040af2c18c8400c638fe2ec83100b70a12e2cb42bac7ce8480ef410a", "action": { "label": "Continue", "top": 693.5, @@ -6357,11 +6357,11 @@ }, "external-figma-account-scope-mobile-dark.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-figma-account-scope-mobile-dark.png", "stage": "external-figma-account-scope", "theme": "dark", @@ -6371,7 +6371,7 @@ "width": 390, "height": 844 }, - "sha256": "03c905160b924931307875bda3f795a0b28e420f68be984774939614e8582e21", + "sha256": "c63a53d23ddc913b5f258f2f34969afb3f24502c7d2bd3c571b4667745697f7f", "action": { "label": "Continue", "top": 693.5, @@ -6389,11 +6389,11 @@ }, "external-figma-account-scope-detail-mobile-dark.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-figma-account-scope-detail-mobile-dark.png", "stage": "external-figma-account-scope-detail", "theme": "dark", @@ -6403,7 +6403,7 @@ "width": 390, "height": 844 }, - "sha256": "67f759ab7bd98f3115430a6d8224f0e094dce7d704f833aea21358e42233fe73", + "sha256": "88aff78270e9dbeebceaea0bafbfc2274ca07bc5de0c086be00f391818761f49", "action": { "label": "Continue", "top": 693.5, @@ -6421,11 +6421,11 @@ }, "external-figma-factory-setup-mobile-dark.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-figma-factory-setup-mobile-dark.png", "stage": "external-figma-factory-setup", "theme": "dark", @@ -6435,7 +6435,7 @@ "width": 390, "height": 844 }, - "sha256": "2ef66f29c87b3fe8f720e8ecf8aef9ab7eb436cb242d2cbba94d5fee06d21622", + "sha256": "91313e1449f75cd2b05a91cd43b7763121d4e40919e7b670030e7814dce6f473", "action": { "label": "Continue", "top": 693.5, @@ -6453,11 +6453,11 @@ }, "external-figma-availability-mobile-dark.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-figma-availability-mobile-dark.png", "stage": "external-figma-availability", "theme": "dark", @@ -6467,7 +6467,7 @@ "width": 390, "height": 844 }, - "sha256": "64711d35cccd4fdfdc0941a2e2ea503bdb9cb60cd0b77729cdbe13aff7e63ce1", + "sha256": "d3574684b58999afcae07794e05726b06295c2a6b0b805d22d6568fc31acf300", "action": { "label": "Connection unavailable", "top": 693.5, @@ -6485,11 +6485,11 @@ }, "external-sentry-requirements-mobile-dark.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-sentry-requirements-mobile-dark.png", "stage": "external-sentry-requirements", "theme": "dark", @@ -6499,7 +6499,7 @@ "width": 390, "height": 844 }, - "sha256": "379c734567ed998280a7c14aa8a756d038985dd4b497a7404c950e91f2a763bf", + "sha256": "d1198f5f86a77f10cf0d8185f52747d7604616d73ded7ba14ebc42610625dd5f", "action": { "label": "Continue", "top": 693.5, @@ -6517,11 +6517,11 @@ }, "external-sentry-account-scope-mobile-dark.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-sentry-account-scope-mobile-dark.png", "stage": "external-sentry-account-scope", "theme": "dark", @@ -6531,7 +6531,7 @@ "width": 390, "height": 844 }, - "sha256": "81d33e554e6f7e72dd05246bf08f088dd6c868736d8132c8c5ba647992a69670", + "sha256": "09f9fc4ff2958f3fd59a4ec205c30c887351806f200f57b4f17fe3a53d09082a", "action": { "label": "Continue", "top": 693.5, @@ -6549,11 +6549,11 @@ }, "external-sentry-account-scope-detail-mobile-dark.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-sentry-account-scope-detail-mobile-dark.png", "stage": "external-sentry-account-scope-detail", "theme": "dark", @@ -6563,7 +6563,7 @@ "width": 390, "height": 844 }, - "sha256": "f9a8cde4ffdedf19e0bff252bd8006306e42e4e7004b0925f3ed7c5179d02765", + "sha256": "489e6671b9db3b8ff44e4f5e8f03ab4f01b9a640384c9a13fe33af3d56077afb", "action": { "label": "Continue", "top": 693.5, @@ -6581,11 +6581,11 @@ }, "external-sentry-factory-setup-mobile-dark.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-sentry-factory-setup-mobile-dark.png", "stage": "external-sentry-factory-setup", "theme": "dark", @@ -6595,7 +6595,7 @@ "width": 390, "height": 844 }, - "sha256": "5ce11c47fea8d7d1baccd26e3d7795fa6119061d6e0f8b81289d3bf998e08f1d", + "sha256": "6b06442ab18ae2238f9a1fb8175368d88dbeaae74e48aabf67dc8dc3673cd751", "action": { "label": "Continue", "top": 693.5, @@ -6613,11 +6613,11 @@ }, "external-sentry-availability-mobile-dark.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-sentry-availability-mobile-dark.png", "stage": "external-sentry-availability", "theme": "dark", @@ -6627,7 +6627,7 @@ "width": 390, "height": 844 }, - "sha256": "441c020bbb551df0135ee024812c67c18e78edbc12ccf50f0439c7599fe5c3cf", + "sha256": "5a72730c65d1445d3444f1c4f53ddb92b0dc78aae532e449bf8f8fa98ebe9a10", "action": { "label": "Connection unavailable", "top": 693.5, @@ -6645,11 +6645,11 @@ }, "external-grafana-requirements-mobile-dark.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-grafana-requirements-mobile-dark.png", "stage": "external-grafana-requirements", "theme": "dark", @@ -6659,7 +6659,7 @@ "width": 390, "height": 844 }, - "sha256": "0bc433a7c2510867e3e14a9439be1bf6e57fe9a1eeb45f8ce6373e078814e3ae", + "sha256": "c278f05f30981fd94f068dc02c506d4f1d6b00226afb2852708cf2aa5f7212b8", "action": { "label": "Continue", "top": 693.5, @@ -6677,11 +6677,11 @@ }, "external-grafana-account-scope-mobile-dark.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-grafana-account-scope-mobile-dark.png", "stage": "external-grafana-account-scope", "theme": "dark", @@ -6691,7 +6691,7 @@ "width": 390, "height": 844 }, - "sha256": "17f84a4bd6ccf4d7694db4bbdef6acd5e8d1ab6154167a05834bf8929a6bf9d5", + "sha256": "221feeb3794da39b3e09195da613616dad57cd8fa58ea56cccd26541e0864bcf", "action": { "label": "Continue", "top": 693.5, @@ -6709,11 +6709,11 @@ }, "external-grafana-account-scope-detail-mobile-dark.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-grafana-account-scope-detail-mobile-dark.png", "stage": "external-grafana-account-scope-detail", "theme": "dark", @@ -6723,7 +6723,7 @@ "width": 390, "height": 844 }, - "sha256": "7771608925c56e1b564b14e707535147f0fc8f76bdbad4f82249c6e42a2a089d", + "sha256": "83067e207fdb19ea12048202490df4990370f1bc7b7915cd1090161eecb10def", "action": { "label": "Continue", "top": 693.5, @@ -6741,11 +6741,11 @@ }, "external-grafana-factory-setup-mobile-dark.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-grafana-factory-setup-mobile-dark.png", "stage": "external-grafana-factory-setup", "theme": "dark", @@ -6755,7 +6755,7 @@ "width": 390, "height": 844 }, - "sha256": "bc3dec337c856acf3b46b5bbb178e92270c5745cdb1d87c6a6e95bf89ee57c1f", + "sha256": "c6b14b701e047a0bf3c9cbdc06e68b0662b2e3b0c41f89ebb4aacd33dc0cbf98", "action": { "label": "Continue", "top": 693.5, @@ -6773,11 +6773,11 @@ }, "external-grafana-availability-mobile-dark.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-grafana-availability-mobile-dark.png", "stage": "external-grafana-availability", "theme": "dark", @@ -6787,7 +6787,7 @@ "width": 390, "height": 844 }, - "sha256": "35631b96f5e3cd366339ef297275fa719593c1ad209b6ad78463cd5b15d6c2ec", + "sha256": "54485d26b3434c8199a49801b0ff884ffcc31098f2d49b99de75b451e795d22c", "action": { "label": "Connection unavailable", "top": 693.5, @@ -6805,11 +6805,11 @@ }, "external-playwright-requirements-mobile-dark.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-playwright-requirements-mobile-dark.png", "stage": "external-playwright-requirements", "theme": "dark", @@ -6819,7 +6819,7 @@ "width": 390, "height": 844 }, - "sha256": "9659e0410cbbabafecd17d71f45b982faa1672868d8b62ade0011c5557936849", + "sha256": "027c4b43c4115da6d492adbe166a9bbfcb3fda5413785e644c72769d8dea8320", "action": { "label": "Continue", "top": 693.5, @@ -6837,11 +6837,11 @@ }, "external-playwright-account-scope-mobile-dark.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-playwright-account-scope-mobile-dark.png", "stage": "external-playwright-account-scope", "theme": "dark", @@ -6851,7 +6851,7 @@ "width": 390, "height": 844 }, - "sha256": "010a96707b156b09273ab7775e6ce74a1477a41bc94ca1f1282e2c47e92b58db", + "sha256": "74bbe32a2ee53d8e64f20bacedd748d566d157be4c0ec30d1cfeb1aec3e109b4", "action": { "label": "Continue", "top": 693.5, @@ -6869,11 +6869,11 @@ }, "external-playwright-account-scope-detail-mobile-dark.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-playwright-account-scope-detail-mobile-dark.png", "stage": "external-playwright-account-scope-detail", "theme": "dark", @@ -6883,7 +6883,7 @@ "width": 390, "height": 844 }, - "sha256": "22420144cf84360d46131898d312441f0fb87aebd57adf2905c3302d623bdd29", + "sha256": "2df935ab3f18e70421e34d53af507293801bb5002d4c6f89bbfe59288be1f9eb", "action": { "label": "Continue", "top": 693.5, @@ -6901,11 +6901,11 @@ }, "external-playwright-factory-setup-mobile-dark.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-playwright-factory-setup-mobile-dark.png", "stage": "external-playwright-factory-setup", "theme": "dark", @@ -6915,7 +6915,7 @@ "width": 390, "height": 844 }, - "sha256": "f62980d7251e8ed6544a3b6aacbcdf42039db710cd320d6f59cf258ccc2c1998", + "sha256": "0ee3161fc8a7bd9e79fda50f08ade0c0f7f58a94d15d305a8fb7e2a368a6c312", "action": { "label": "Continue", "top": 693.5, @@ -6933,11 +6933,11 @@ }, "external-playwright-availability-mobile-dark.png": { "producer": "studio/tests/external-tools.spec.ts", - "producer_sha256": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d", + "producer_sha256": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca", "capture_helpers_digest": "4ccf76b2891af475e93d6fcf73da8546be4b4c7a8f657aa1147576d74cb50516", "capture_config_sha256": "bfa5562f1fa0460f54b1f77dea146f18b641976822f65d6ac91e5bb9033ee278", - "studio_version": "0.2.3", - "frontend_digest": "bf096426ab05b996804ae59d905d11b4b235c9b42e197bf7afe78535eddfad44", + "studio_version": "0.2.4", + "frontend_digest": "3d4912c855caff9b3d0f20522382c10a606a29e7c9c39189c3a0226896eab3df", "path": "assets/screenshots/external-playwright-availability-mobile-dark.png", "stage": "external-playwright-availability", "theme": "dark", @@ -6947,7 +6947,7 @@ "width": 390, "height": 844 }, - "sha256": "778b273562ed66a131af04294dd6d5f83f5795bbfad579bd3b99db94e6ed3060", + "sha256": "2190e778bab2b58d3b3ac6a4f62df7f655fca3d69d0fe7100afacdc098587315", "action": { "label": "External template unavailable", "top": 693.5, @@ -6966,17 +6966,21 @@ }, "frontend": { "studio/src/Administration.css": "30984c9d04d6f9dc0b1e149f170f55f1e4583a6a938310031ad33d163f596545", - "studio/src/Administration.tsx": "170b4c276afd85ea927b27f2affc47d0999c25e4bc43a9bccbee5ecc73fc938a", + "studio/src/Administration.tsx": "d922cd051d7d9d4e3bce9121d0c2dbf27f5df4a456da45c5faf3346d7148c99a", "studio/src/AgentLifecycle.css": "74ce7234104212c2b3b8dc7134835fee9d254731b946e8345201e7bc1f158523", "studio/src/AgentLifecycle.tsx": "a1ac71a1a575cfad4376ba8b0ab53615014aefe72cfb1b0c8809500e1ebab8bc", - "studio/src/App.tsx": "ac01b7e7a28ca6d535a2517cea860a106867344dbe85537fb90dd40df0353ba9", + "studio/src/App.tsx": "1be64daaa0b6a598e4ccaa6b553fa177e1926647daa8c72e4fd6ef93483d6454", "studio/src/AssistantRecovery.tsx": "43281aeabf7bf695b4a853ef9bb4ec7411ddfb3bc8b6f9fcc6d51d40d9d1883f", "studio/src/AssistantSources.test.tsx": "cc30b5f3773c3dee98be14439c407e69cd63467e152a4e69ea983383b36315ef", "studio/src/AssistantSources.tsx": "b3113072e9c50df3998475daad907648a0b1ec4ce69d767c94e884b64cbd9ab9", + "studio/src/BrowserConnections.css": "475baba9969d0430c404149051fefc6b05c02a23c6c75132bc3a54d07e391e7d", + "studio/src/BrowserConnections.tsx": "15d7d24d48c8f9c3fb5f6b0429e4dc260b8553df63aca19b362fd90d20e1d66b", "studio/src/ChannelBootstrap.tsx": "689daf8773a18b2aa14b5503697b046bcddd85e3bbb0a3cd0502bfa5f307ee52", "studio/src/CloudRecipe.tsx": "c479e8882fda28821507b9723f6c83c3cef0b2ffeb816665e5cb9fbd114d048a", "studio/src/Collaboration.tsx": "482dd5464d5b7a038ac7caf15478c7b0ca976fe72f1cf66be0f7007a5d575c80", "studio/src/Configuration.tsx": "efd330687f3eeb5c2ee4abe7f523e8f79827b6986e8921e4c26a0a8b716d0506", + "studio/src/ConnectionOAuthSettings.test.ts": "f4a4471d6105b35fd1b54dc10151d0b42d2374214a15c7335addbfa8f4755a91", + "studio/src/ConnectionOAuthSettings.ts": "f97b905f3989e77f84a2a158d14230bdb8c9ac6fb954a58fabdd6b1e16661018", "studio/src/ConversationFiles.css": "0e06359ab1f89bbcc13c18ed8c44837110e1317f69248b2195ec0a25f7e794ec", "studio/src/ConversationFiles.test.ts": "8affe38c4b494002505b467baf30e78481ece4a0250a44088b73854e80384d4c", "studio/src/ConversationFiles.tsx": "d824ea07abc371548d60fd4555c1f8f35caf7c51dbed7167a3cee752eec9e8f5", @@ -7013,6 +7017,9 @@ "studio/src/KnowledgeUploads.tsx": "e6af6a4c271e24bd12a89c96c2dfba43ac9e673c9e3826cc3b1f865274c80594", "studio/src/MobileNavigation.css": "937434cce3813b5b4cab50d2e39f2fc526226b7f65a9b45457607b52d93784db", "studio/src/MobileNavigation.tsx": "3ade52eecbdd037b74f6f4daf9c640662c5820f116b36dc324a0523ce8eb5e1c", + "studio/src/OAuthServiceConfiguration.tsx": "339556b28f67f8058f8404d0c8680cbca080699bafb35fed1a73a51124f58c38", + "studio/src/OAuthServicePolicy.test.ts": "42306ddf25f31e294776e9842ddc21803164337f024f2c5c787eec5182cbb842", + "studio/src/OAuthServicePolicy.ts": "1d3b5f28142e4d45724d1becf9900f21b563b70a385a3357edbf28b94350ce19", "studio/src/Operations.tsx": "797b3d71345a6a30e93be64c162204af2c66c6f615203932d6011448dbf6dced", "studio/src/ProcessEditor.tsx": "de0fa743caaeb6b2395aede624e5f9ecd03bfbcf4918c3dc66bc01b7f1b67e8c", "studio/src/ProductAssistant.tsx": "b64aec0fd15ace8b91d2f2ad33edfd21b72219ea894a40ebe71ae0bdd92bdb93", @@ -7080,9 +7087,9 @@ "studio/public/licenses/markdown-LICENSES.txt": "c963152bef753cf47cc4c18ef25c26c45c0c0b351e538bf2e7bc5b63d81fce2f", "studio/public/licenses/three-LICENSE.txt": "8b378ebe60e2fe500158cb0ac71cb5e8b7d92953c2abcc63a0eb90499653b5bc", "studio/index.html": "9cb93a750f86ad497d1e1d9b9fa249d6dac6ee979890ec9b90897081546ba2f6", - "studio/package.json": "c0f2edea63c51e71a575e6082c7871b612b4b94a8a9b32d198af29ce809d8f6f" + "studio/package.json": "9c662217fa06e606ae3b019e6338b4dfb6abcca548b9c48cbb93b48799cd4599" }, - "studio_version": "0.2.3", + "studio_version": "0.2.4", "capture_helpers": { "studio/tests/walkthrough-capture.ts": "3bcc44af683067d09145aed3b4447eb59b50e03fb587650d7b759a69788773f9", "studio/tests/navigation.ts": "bc1f571617b33fc1d62cc0579b378d8e6c631d2ae1eb97504de555d71c9af012", @@ -7090,7 +7097,7 @@ }, "capture_producers": { "studio/tests/docs-walkthrough.spec.ts": "8a579b17382106dc9ab77386f78e1d6ad764ae880ef593860f16b0d2b7594c9f", - "studio/tests/external-tools.spec.ts": "ae932da775b87ab1cedbf8dd26f41afe9927a1ee0bfa6e17868e4e99ebf6994d" + "studio/tests/external-tools.spec.ts": "dbd33f0d092451c240a253f897aa4a4c38ee32636a250b5c75fea339979396ca" }, "capture_config": { "path": "studio/playwright.docs.config.ts", diff --git a/docs/assistant-files.md b/docs/assistant-files.md index af33f9d9..87c0df61 100644 --- a/docs/assistant-files.md +++ b/docs/assistant-files.md @@ -4,6 +4,8 @@ description: Attach documents and images to product conversations and retain sou # Use files in an AI conversation + + Attach customer notes, integration contracts or a wireframe when discussing a product with the assistant. Files belong to the conversation where you upload them. Each model turn records the exact selected files and their hashes alongside its response. ## Upload, select and send diff --git a/docs/connected-accounts.md b/docs/connected-accounts.md new file mode 100644 index 00000000..8ebd6651 --- /dev/null +++ b/docs/connected-accounts.md @@ -0,0 +1,150 @@ +--- +title: Authorize connected accounts +description: Configure the owned local OAuth service, register a client, complete browser consent and inspect scoped MCP admission, refresh, disconnect and uncertain effects. +--- + + +# Authorize a connected account + +Open **Administration → Connected accounts** as a current factory administrator. This page configures the owned local repository service, registers its client, opens browser consent and shows the retained connection state. Account authorization is followed by separate MCP schema review and project/tool grants. + +The four native captures below show Studio 0.2.4 at its recorded source revision, during an isolated API-only qualification with an owned provider and synthetic data. The broader walkthrough uses its separately identified API fixtures. The execution warning reflects that API-only topology; worker readiness is a separate check. + +The supported `local-repository-tools` provider is for explicit local development. GitHub, Figma, Sentry, Grafana and external Playwright OAuth remain at **Prerequisite required**. Native GitHub App SCM, the fixed GitHub token MCP adapter and the native BrowserRunner retain their own setup paths. + +## Prepare the local service + +Start an owned authorization server and MCP service that implement the admitted contract. The factory does not create that service or register the provider's client automatically. The native qualification used stock public pyfly 26.10.3 authorization-server and MCP APIs with synthetic repository data. + +The factory needs an existing PostgreSQL installation, an authenticated administrator session and these explicit development settings: + +```sh +export FORGE_OAUTH_LOCAL_DEVELOPMENT=1 +export FORGE_OIDC_ALLOW_LOOPBACK_HTTP=true +export FORGE_BROWSER_ORIGIN="http://127.0.0.1:8787" +``` + +Use the actual factory port. The provider must use the other literal loopback host, for example `http://[::1]:8501`, with an unprivileged port from 1024 through 65535. Cookies are shared across ports on the same host. Changing only the port does not isolate the factory session; the server rejects an enabled same-host policy before contacting the provider. + +The local policy fixes these values: + +| Field | Admitted value | +| --- | --- | +| Provider | `local-repository-tools` | +| Issuer | The selected canonical literal-loopback origin | +| Authorization endpoint | Origin plus `/oauth2/authorize` | +| Token endpoint | Origin plus `/oauth2/token` | +| Protected resource | Origin plus `/mcp/readonly` | +| Scope | `repository:read` | + +No arbitrary endpoint, discovery URL or scope can be supplied by the client registration form. Remote/shared installations require their production identity and network configuration; these flags do not authorize a vendor OAuth service. + +## 1. Admit the owned service + +Choose **Configure local service**, select the other loopback host and enter the provider port. Review the issuer, fixed resource and scope, then save. The setup retains an expected revision and stable request identity. A conflicting settings revision requires reading current configuration before another change. + +**Save service configuration** saves policy in PostgreSQL. It does not make a provider request or prove the service is reachable. The returned directory determines whether client registration is available. If the browser cannot retain a pending request in session storage, setup blocks the save so an earlier uncertain request cannot be replaced silently. + +## 2. Register the client and project + +Choose **Set up a connection** and the admitted local service. Enter a connection name and the provider's actual client ID, choose the intended project, and select public or confidential client authentication. A confidential client uses its authorized secret and supported client authentication method. Secret fields are write-only; the server retains presence information without returning the value. + +Register the callback shown for that exact connection in the provider's client configuration. Saving a registration retains its client/policy/project revision. It does not complete consent or enable tools. + +
+ +![Native local client registration](assets/native-oauth/client-desktop-light.png) + +
Actual Studio registration form against the isolated native factory and owned stock pyfly service. The selected project and client are synthetic. This frame does not establish vendor account acceptance.
+
+ +
+Inspect registration on a phone + +
+ +![Native local client registration on a phone](assets/native-oauth/client-mobile-light.png) + +
The same source-bound native registration journey at phone width. Scroll the fields to inspect the remaining registration controls.
+
+
+ +## 3. Complete consent in your browser + +Review the issuer, resource, scope and project, then select **Open browser consent** in the signed-in factory browser. The server prepares a five-minute handoff, checks the browser session and redirects to the exact authorization endpoint. State, S256 PKCE, issuer and a callback-scoped HttpOnly nonce bind the response to its actor and registration revision. + +An API bearer or service identity cannot complete browser consent. CLI, SDK and factory MCP clients can prepare a continuation link for the authenticated browser; they cannot exchange the user's authorization code as an operator tool. + +On return, inspect the current state. `authorized_unverified` means a grant was retained. The connection summary keeps `agent_ready: false`; it does not certify a successful tool call or approve an adapter. + +## 4. Admit MCP access separately + +The local adapter has the same four fixed repository-read tool names as the GitHub adapter: `get_file_contents`, `get_commit`, `list_commits` and `list_branches`. Before dispatch: + +1. Link the exact authorized connection to `local-repository-tools` and its selected project through the authenticated MCP API/client contract. +2. Request schema discovery explicitly. It contacts the owned resource and remains distinct from tool execution. +3. Review the exact returned schema digest and select the needed fixed read tools. +4. Grant the selected project, registered HTTPS GitHub repository, exact tools, implementation roles and `implement` stage. +5. Grant the worker's `external_mcp` capability, admit a run and inspect its actual broker receipt. + +The factory derives the permitted owner/repository from the registered source. A policy, schema review or account cannot grant another repository. OAuthResources rechecks policy revision, grant family, expiry and current project authority before resource dispatch. Current authorization also guards cached receipts. + +This MCP admission sequence is available through the API, SDK, CLI and factory MCP. The native browser qualification used browser API requests for linking, discovery, review and grants, then the in-process native broker for the real HTTP tool calls and persisted WAL. Those actions were separate from the clicked Connected accounts forms. + +See [external tool admission](external-tools.md#connect-review-and-grant) for the schema and repository-grant contract. + +## 5. Refresh, withdraw or disconnect + +**Refresh** in the directory reads current factory state. **Request refresh** sends a recorded token refresh when the current server summary permits it. The browser retains the request identity until the exact receipt settles the outcome. A lost provider response leaves an unknown effect; refreshing the page cannot establish that the provider did nothing. + +Withdrawing the local policy or changing its revision stops further resource use, including cached receipt reuse. The page shows that the policy is no longer current while leaving eligible local disconnect available. + +
+ +![Native retained connection state](assets/native-oauth/state-desktop-dark.png) + +
Actual native state with a retained grant, its exact local resource and repository-read scope. Tools remain unavailable until their separate admission and grants are complete.
+
+ +Choose **Disconnect**, review the consequence, then **Disconnect locally**. This erases the retained active tokens and stops factory use. Remote authorization must be revoked separately in the provider account. Existing remote effects cannot be undone by clearing local credentials. + +An unknown exchange or refresh blocks another authorization attempt until observed recovery permits it. Explicit supersession records the exact unknown effect identities, expected registration revision and acknowledgement that the old outcome remains unknown. It creates a new admission; it does not turn an uncertain provider call into a failed call. + +
+ +![Native connection setup guidance](assets/native-oauth/guide-desktop-dark.png) + +
Source-bound native client guidance, naturally scrolled to the credential and tool-grant explanation. The reviewed journey includes keyboard navigation and reachable actions; the full factory and vendor integrations retain separate acceptance requirements.
+
+ +## API and client contract + +All routes below are under `/api/v1`. Administration requires current server authority. Registration uses typed `OAuthConnectionInput`; the local policy uses strict `OAuthProviderPolicyInput`, including `expected_revision` and a 32-character request identity. Summaries and effect receipts expose readiness and observed outcomes without token values. + +| Action | Route | +| --- | --- | +| Current local policies | `GET /oauth-provider-policies` | +| Admit or withdraw local service | `PUT /oauth-provider-policies/local-repository-tools` | +| Provider prerequisites | `GET /connection-oauth/providers` | +| Retained connections | `GET /connection-oauth` | +| Register client | `PUT /connection-oauth/{name}` | +| Current connection | `GET /connection-oauth/{name}` | +| Prepare browser handoff | `POST /connection-oauth/{name}/prepare` | +| Browser continuation and callback | `GET /connection-oauth/{name}/continue` and `/callback` | +| Exact effect receipt | `GET /connection-oauth/{name}/effects/{request_id}` | +| Recorded refresh | `POST /connection-oauth/{name}/refresh` | +| Local disconnect | `POST /connection-oauth/{name}/disconnect` | +| Explicit unknown-outcome supersession | `POST /connection-oauth/{name}/supersede` | +| Link authorized MCP resource | `PUT /tools/mcp/{connector}/oauth` | + +`ForgeClient` exposes policy, connection, receipt, refresh, disconnect, supersession and MCP-link methods. The `forge connections oauth` CLI group and the corresponding factory MCP tools use those same routes. Use owner-private secret files for CLI/tool registration; keep secrets out of arguments, product briefs and project images. Browser-only routes retain their session and callback contracts in every client path. + +## Retained custody and operating limits + +Connection OAuth has its own encrypted PostgreSQL registration/grant records, effect intents, receipts and append-only events. Keep those with the shared encryption key and the factory's consistent backup. An unavailable or changed context is a recovery error. + +Credential admission retains purpose-bound fingerprints for historical secret representations. Its bounded history permits at most 1,024 evidence rows and 16,384 representations. Code/refresh effects reserve capacity before provider dispatch; exhausted or inconsistent history blocks new admission. Plan a reviewed retention checkpoint rather than deleting unresolved history or weakening credential checks. + +The native qualification exercised real IPv4/IPv6 TCP, stock public pyfly, two token grants and two HTTP MCP calls, plus retained WAL and denial of cached receipts after withdrawal. Its screenshots show the owned local journey. Production OIDC federation, hosted vendor accounts, paid providers, cluster deployment and complete factory acceptance were not exercised by that receipt. + +Source: [typed policy controller](https://github.com/fireflyframework/firefly-forge/blob/main/src/firefly_forge/oauth_provider_policy_controllers.py), [connection controller](https://github.com/fireflyframework/firefly-forge/blob/main/src/firefly_forge/connection_oauth_controllers.py), [resource custody](https://github.com/fireflyframework/firefly-forge/blob/main/src/firefly_forge/oauth_resources.py). Native image identities and qualification scope are retained in [capture provenance](assets/native-oauth/provenance.json). diff --git a/docs/design-review.md b/docs/design-review.md index 9b8c7128..795e380d 100644 --- a/docs/design-review.md +++ b/docs/design-review.md @@ -4,6 +4,8 @@ description: Review wireframes by customer journey and retain approved design re # Review customer journey wireframes + + Generate references before implementation so customers and developers can check each journey, its acceptance criteria, and the shared layout. forge renders a deterministic wireframe from the current product definition and project brand kit. The result is a review template, not an AI-generated finished product or proof of final visual acceptance. The product wizard shows every journey at desktop and mobile sizes in light and dark themes. Review all four frames for every screen before acknowledging the bundle. If the customer definition, reviewed architecture, or project brand changes, generate and review a new bundle. diff --git a/docs/diagrams/architecture-components-narrow.svg b/docs/diagrams/architecture-components-narrow.svg index 80f30a03..8668c35e 100644 --- a/docs/diagrams/architecture-components-narrow.svg +++ b/docs/diagrams/architecture-components-narrow.svg @@ -91,4 +91,4 @@ INCLUDING ANY GENERAL, SPECIAL, INDIRECT, INCIDENTAL, OR CONSEQUENTIAL DAMAGES, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF THE USE OR INABILITY TO USE THE FONT SOFTWARE OR FROM OTHER DEALINGS IN THE FONT SOFTWARE. -Native services behindthe factoryClients submit contracts; theexecution leader owns effects.01Operator surfacesStudio, CLI, ForgeClient and 89factory MCP tools useauthenticated contracts.02Identity and project accessOperatorAuth validatesidentity. AccessRoutes checksthe requested resource andoperation.03Typed controllersNative pyfly REST mappings bindinputs. Admission servicesfreeze the run's selectedinputs.04Execution servicesEngine, Journal and deliveryconsumers coordinate retainedwork under one leader.05Typed repositoriesStore usesSessionProvider.unit(). Nativerepositories persist entitiesin the selected schema.06Durable state and effectsPostgreSQL owns records.Private storage ownscredentials, Git workspaces andartifacts.Default combined process or splitAPI replicas with one executionleader. \ No newline at end of file +Native services behindthe factoryClients submit contracts; theexecution leader owns effects.01Operator surfacesStudio, CLI, ForgeClient and108 factory MCP tools useauthenticated contracts.02Identity and project accessOperatorAuth validatesidentity. AccessRoutes checksthe requested resource andoperation.03Typed controllersNative pyfly REST mappings bindinputs. Admission servicesfreeze the run's selectedinputs.04Execution servicesEngine, Journal and deliveryconsumers coordinate retainedwork under one leader.05Typed repositoriesStore usesSessionProvider.unit(). Nativerepositories persist entitiesin the selected schema.06Durable state and effectsPostgreSQL owns records.Private storage ownscredentials, Git workspaces andartifacts.Default combined process or splitAPI replicas with one executionleader. \ No newline at end of file diff --git a/docs/diagrams/architecture-components.svg b/docs/diagrams/architecture-components.svg index 5686a0f8..868c0659 100644 --- a/docs/diagrams/architecture-components.svg +++ b/docs/diagrams/architecture-components.svg @@ -91,4 +91,4 @@ INCLUDING ANY GENERAL, SPECIAL, INDIRECT, INCIDENTAL, OR CONSEQUENTIAL DAMAGES, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF THE USE OR INABILITY TO USE THE FONT SOFTWARE OR FROM OTHER DEALINGS IN THE FONT SOFTWARE. -Native services behind the factoryClients submit contracts; the execution leader owns effects.01Operator surfacesStudio, CLI, ForgeClient and 89 factory MCPtools use authenticated contracts.02Identity and project accessOperatorAuth validates identity. AccessRouteschecks the requested resource and operation.03Typed controllersNative pyfly REST mappings bind inputs.Admission services freeze the run's selectedinputs.04Execution servicesEngine, Journal and delivery consumerscoordinate retained work under one leader.05Typed repositoriesStore uses SessionProvider.unit(). Nativerepositories persist entities in the selectedschema.06Durable state and effectsPostgreSQL owns records. Private storage ownscredentials, Git workspaces and artifacts.Default combined process or split API replicas with one execution leader. \ No newline at end of file +Native services behind the factoryClients submit contracts; the execution leader owns effects.01Operator surfacesStudio, CLI, ForgeClient and 108 factory MCPtools use authenticated contracts.02Identity and project accessOperatorAuth validates identity. AccessRouteschecks the requested resource and operation.03Typed controllersNative pyfly REST mappings bind inputs.Admission services freeze the run's selectedinputs.04Execution servicesEngine, Journal and delivery consumerscoordinate retained work under one leader.05Typed repositoriesStore uses SessionProvider.unit(). Nativerepositories persist entities in the selectedschema.06Durable state and effectsPostgreSQL owns records. Private storage ownscredentials, Git workspaces and artifacts.Default combined process or split API replicas with one execution leader. \ No newline at end of file diff --git a/docs/diagrams/architecture-oauth-narrow.svg b/docs/diagrams/architecture-oauth-narrow.svg new file mode 100644 index 00000000..7506c56a --- /dev/null +++ b/docs/diagrams/architecture-oauth-narrow.svg @@ -0,0 +1,94 @@ +OAuth consent and project resource custodyAccount authorization precedes exact schema review and project tool admission.Copyright 2019 The Manrope Project Authors (https://github.com/sharanda/manrope) + +This Font Software is licensed under the SIL Open Font License, Version 1.1. +This license is copied below, and is also available with a FAQ at: +http://scripts.sil.org/OFL + + +----------------------------------------------------------- +SIL OPEN FONT LICENSE Version 1.1 - 26 February 2007 +----------------------------------------------------------- + +PREAMBLE +The goals of the Open Font License (OFL) are to stimulate worldwide +development of collaborative font projects, to support the font creation +efforts of academic and linguistic communities, and to provide a free and +open framework in which fonts may be shared and improved in partnership +with others. + +The OFL allows the licensed fonts to be used, studied, modified and +redistributed freely as long as they are not sold by themselves. The +fonts, including any derivative works, can be bundled, embedded, +redistributed and/or sold with any software provided that any reserved +names are not used by derivative works. The fonts and derivatives, +however, cannot be released under any other type of license. The +requirement for fonts to remain under this license does not apply +to any document created using the fonts or their derivatives. + +DEFINITIONS +"Font Software" refers to the set of files released by the Copyright +Holder(s) under this license and clearly marked as such. This may +include source files, build scripts and documentation. + +"Reserved Font Name" refers to any names specified as such after the +copyright statement(s). + +"Original Version" refers to the collection of Font Software components as +distributed by the Copyright Holder(s). + +"Modified Version" refers to any derivative made by adding to, deleting, +or substituting -- in part or in whole -- any of the components of the +Original Version, by changing formats or by porting the Font Software to a +new environment. + +"Author" refers to any designer, engineer, programmer, technical +writer or other person who contributed to the Font Software. + +PERMISSION & CONDITIONS +Permission is hereby granted, free of charge, to any person obtaining +a copy of the Font Software, to use, study, copy, merge, embed, modify, +redistribute, and sell modified and unmodified copies of the Font +Software, subject to the following conditions: + +1) Neither the Font Software nor any of its individual components, +in Original or Modified Versions, may be sold by itself. + +2) Original or Modified Versions of the Font Software may be bundled, +redistributed and/or sold with any software, provided that each copy +contains the above copyright notice and this license. These can be +included either as stand-alone text files, human-readable headers or +in the appropriate machine-readable metadata fields within text or +binary files as long as those fields can be easily viewed by the user. + +3) No Modified Version of the Font Software may use the Reserved Font +Name(s) unless explicit written permission is granted by the corresponding +Copyright Holder. This restriction only applies to the primary font name as +presented to the users. + +4) The name(s) of the Copyright Holder(s) or the Author(s) of the Font +Software shall not be used to promote, endorse or advertise any +Modified Version, except to acknowledge the contribution(s) of the +Copyright Holder(s) and the Author(s) or with their explicit written +permission. + +5) The Font Software, modified or unmodified, in part or in whole, +must be distributed entirely under this license, and must not be +distributed under any other license. The requirement for fonts to +remain under this license does not apply to any document created +using the Font Software. + +TERMINATION +This license becomes null and void if any of the above conditions are +not met. + +DISCLAIMER +THE FONT SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, +EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTIES OF +MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT +OF COPYRIGHT, PATENT, TRADEMARK, OR OTHER RIGHT. IN NO EVENT SHALL THE +COPYRIGHT HOLDER BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, +INCLUDING ANY GENERAL, SPECIAL, INDIRECT, INCIDENTAL, OR CONSEQUENTIAL +DAMAGES, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING +FROM, OUT OF THE USE OR INABILITY TO USE THE FONT SOFTWARE OR FROM +OTHER DEALINGS IN THE FONT SOFTWARE. +OAuth consent andproject resourcecustodyAccount authorization precedesexact schema review and projecttool admission.01Admit the serviceNative policy fixes issuer,endpoints, resource and scope.Local development usesdifferent literal loopbackhosts.02Register the clientCurrent administrator authorityand expected revision bind theclient to its selected projectand retained policy.03Authorize in the browserSingle-use state, issuer,browser nonce and S256 PKCEbind consent to the actor andimmutable registration.04Retain token effectsPostgreSQL records intentbefore exchange or refresh.Encrypted grants and exactreceipts retain observedoutcomes.05Bind the project resourceOAuthResources rechecks policy,grant family, expiry andcurrent project authoritybefore resource use.06Review and grant toolsExact discovered schemas,repository/tool grants andfrozen role permission precedebroker dispatch and receiptreuse.Five vendor OAuth templates remainblocked; the owned local servicehas four read tools. \ No newline at end of file diff --git a/docs/diagrams/architecture-oauth.svg b/docs/diagrams/architecture-oauth.svg new file mode 100644 index 00000000..91bb2b66 --- /dev/null +++ b/docs/diagrams/architecture-oauth.svg @@ -0,0 +1,94 @@ +OAuth consent and project resource custodyAccount authorization precedes exact schema review and project tool admission.Copyright 2019 The Manrope Project Authors (https://github.com/sharanda/manrope) + +This Font Software is licensed under the SIL Open Font License, Version 1.1. +This license is copied below, and is also available with a FAQ at: +http://scripts.sil.org/OFL + + +----------------------------------------------------------- +SIL OPEN FONT LICENSE Version 1.1 - 26 February 2007 +----------------------------------------------------------- + +PREAMBLE +The goals of the Open Font License (OFL) are to stimulate worldwide +development of collaborative font projects, to support the font creation +efforts of academic and linguistic communities, and to provide a free and +open framework in which fonts may be shared and improved in partnership +with others. + +The OFL allows the licensed fonts to be used, studied, modified and +redistributed freely as long as they are not sold by themselves. The +fonts, including any derivative works, can be bundled, embedded, +redistributed and/or sold with any software provided that any reserved +names are not used by derivative works. The fonts and derivatives, +however, cannot be released under any other type of license. The +requirement for fonts to remain under this license does not apply +to any document created using the fonts or their derivatives. + +DEFINITIONS +"Font Software" refers to the set of files released by the Copyright +Holder(s) under this license and clearly marked as such. This may +include source files, build scripts and documentation. + +"Reserved Font Name" refers to any names specified as such after the +copyright statement(s). + +"Original Version" refers to the collection of Font Software components as +distributed by the Copyright Holder(s). + +"Modified Version" refers to any derivative made by adding to, deleting, +or substituting -- in part or in whole -- any of the components of the +Original Version, by changing formats or by porting the Font Software to a +new environment. + +"Author" refers to any designer, engineer, programmer, technical +writer or other person who contributed to the Font Software. + +PERMISSION & CONDITIONS +Permission is hereby granted, free of charge, to any person obtaining +a copy of the Font Software, to use, study, copy, merge, embed, modify, +redistribute, and sell modified and unmodified copies of the Font +Software, subject to the following conditions: + +1) Neither the Font Software nor any of its individual components, +in Original or Modified Versions, may be sold by itself. + +2) Original or Modified Versions of the Font Software may be bundled, +redistributed and/or sold with any software, provided that each copy +contains the above copyright notice and this license. These can be +included either as stand-alone text files, human-readable headers or +in the appropriate machine-readable metadata fields within text or +binary files as long as those fields can be easily viewed by the user. + +3) No Modified Version of the Font Software may use the Reserved Font +Name(s) unless explicit written permission is granted by the corresponding +Copyright Holder. This restriction only applies to the primary font name as +presented to the users. + +4) The name(s) of the Copyright Holder(s) or the Author(s) of the Font +Software shall not be used to promote, endorse or advertise any +Modified Version, except to acknowledge the contribution(s) of the +Copyright Holder(s) and the Author(s) or with their explicit written +permission. + +5) The Font Software, modified or unmodified, in part or in whole, +must be distributed entirely under this license, and must not be +distributed under any other license. The requirement for fonts to +remain under this license does not apply to any document created +using the Font Software. + +TERMINATION +This license becomes null and void if any of the above conditions are +not met. + +DISCLAIMER +THE FONT SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, +EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTIES OF +MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT +OF COPYRIGHT, PATENT, TRADEMARK, OR OTHER RIGHT. IN NO EVENT SHALL THE +COPYRIGHT HOLDER BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, +INCLUDING ANY GENERAL, SPECIAL, INDIRECT, INCIDENTAL, OR CONSEQUENTIAL +DAMAGES, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING +FROM, OUT OF THE USE OR INABILITY TO USE THE FONT SOFTWARE OR FROM +OTHER DEALINGS IN THE FONT SOFTWARE. +OAuth consent and project resource custodyAccount authorization precedes exact schema review and project tool admission.01Admit the serviceNative policy fixes issuer, endpoints,resource and scope. Local development usesdifferent literal loopback hosts.02Register the clientCurrent administrator authority and expectedrevision bind the client to its selectedproject and retained policy.03Authorize in the browserSingle-use state, issuer, browser nonce andS256 PKCE bind consent to the actor andimmutable registration.04Retain token effectsPostgreSQL records intent before exchange orrefresh. Encrypted grants and exact receiptsretain observed outcomes.05Bind the project resourceOAuthResources rechecks policy, grant family,expiry and current project authority beforeresource use.06Review and grant toolsExact discovered schemas, repository/toolgrants and frozen role permission precedebroker dispatch and receipt reuse.Five vendor OAuth templates remain blocked; the owned local service has four read tools. \ No newline at end of file diff --git a/docs/diagrams/architecture.svg b/docs/diagrams/architecture.svg index 5686a0f8..868c0659 100644 --- a/docs/diagrams/architecture.svg +++ b/docs/diagrams/architecture.svg @@ -91,4 +91,4 @@ INCLUDING ANY GENERAL, SPECIAL, INDIRECT, INCIDENTAL, OR CONSEQUENTIAL DAMAGES, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF THE USE OR INABILITY TO USE THE FONT SOFTWARE OR FROM OTHER DEALINGS IN THE FONT SOFTWARE. -Native services behind the factoryClients submit contracts; the execution leader owns effects.01Operator surfacesStudio, CLI, ForgeClient and 89 factory MCPtools use authenticated contracts.02Identity and project accessOperatorAuth validates identity. AccessRouteschecks the requested resource and operation.03Typed controllersNative pyfly REST mappings bind inputs.Admission services freeze the run's selectedinputs.04Execution servicesEngine, Journal and delivery consumerscoordinate retained work under one leader.05Typed repositoriesStore uses SessionProvider.unit(). Nativerepositories persist entities in the selectedschema.06Durable state and effectsPostgreSQL owns records. Private storage ownscredentials, Git workspaces and artifacts.Default combined process or split API replicas with one execution leader. \ No newline at end of file +Native services behind the factoryClients submit contracts; the execution leader owns effects.01Operator surfacesStudio, CLI, ForgeClient and 108 factory MCPtools use authenticated contracts.02Identity and project accessOperatorAuth validates identity. AccessRouteschecks the requested resource and operation.03Typed controllersNative pyfly REST mappings bind inputs.Admission services freeze the run's selectedinputs.04Execution servicesEngine, Journal and delivery consumerscoordinate retained work under one leader.05Typed repositoriesStore uses SessionProvider.unit(). Nativerepositories persist entities in the selectedschema.06Durable state and effectsPostgreSQL owns records. Private storage ownscredentials, Git workspaces and artifacts.Default combined process or split API replicas with one execution leader. \ No newline at end of file diff --git a/docs/external-tools-tour.md b/docs/external-tools-tour.md index 2c3cc286..b8abd19e 100644 --- a/docs/external-tools-tour.md +++ b/docs/external-tools-tour.md @@ -7,7 +7,7 @@ description: Follow the GitHub setup wizard, review exact tool schemas, grant pr # Configure external tools in Studio -Open Administration, then External tools to manage a connection and its project permissions. Follow the GitHub setup below, or inspect the requirements for another provider. +Open Administration, then External tools to manage a connection and its project permissions. Follow the GitHub setup below, or inspect the requirements for another provider. For the implemented local OAuth policy and browser consent wizard, use [Connected accounts](connected-accounts.md). Screenshots use controlled fixtures.[^captures] Select an image to open the full capture; its theme follows the page appearance. diff --git a/docs/external-tools.md b/docs/external-tools.md index e1e155a3..548f8034 100644 --- a/docs/external-tools.md +++ b/docs/external-tools.md @@ -4,6 +4,8 @@ description: Configure reviewed external MCP connections, approve tool schemas a # External tools + + forge can expose reviewed external tools to a native agentic or Bridge worker. A factory administrator controls the connection, schema review and project grant. Credentials remain in the control plane; the project image and worker arguments receive no API key. External MCP complements the native source-control, flycanon and browser integrations. It does not replace them. Direct Codex and Claude CLI execution uses the CLI's own authority and does not inherit these Python tool grants. @@ -16,6 +18,7 @@ All templates start disabled. The catalog separates an unmet prerequisite from a | Connector | Current execution boundary | | --- | --- | +| Local repository tools | Explicit development-only native OAuth binding to the fixed local `repository:read` resource. The four read tools still require exact schema review and project/repository grants; see [connected accounts](connected-accounts.md). | | GitHub | Fixed `https://api.githubcopilot.com/mcp/readonly` endpoint. Reviewed `get_file_contents`, `get_commit`, `list_commits` and `list_branches` tools can read the repository assigned to the run. | | Sentry | Template only. A project-scoped adapter and reviewed server skill constraints are still required. The current upstream issue tool can enrich results through Seer and related data; forge does not admit those calls. | | Figma | Template only. Figma requires an approved client or waitlist admission and an authorized OAuth connection. Registering a template does not satisfy those requirements. | @@ -28,7 +31,7 @@ The initial GitHub adapter accepts bounded text results. Binary blocks and resou The same actions are available through the authenticated API, Python SDK, operator CLI and forge's own MCP server. Only a factory administrator can change external connections or grants. Project ownership alone does not authorize the use of a platform credential. -1. **Configure the connection.** Supply a narrowly scoped authorized credential in an owner-private file. No arbitrary URL or executable is accepted. +1. **Configure the connection.** Supply a narrowly scoped authorized credential in an owner-private file. The token adapter accepts its fixed GitHub endpoint. The separate local OAuth adapter requires its admitted literal-loopback policy; neither accepts an arbitrary URL or executable. 2. **Discover the schemas.** This makes an explicit bounded remote request. Discovery never runs a tool or grants it to an agent. 3. **Review the exact digest.** Select only the known read tools you need. Remote descriptions, instructions and `readOnlyHint` annotations cannot grant permission. 4. **Grant a project repository.** Select a registered repository belonging to the product, exact tools, implementation roles and the `implement` stage. diff --git a/docs/factory-infrastructure.md b/docs/factory-infrastructure.md index bb10d454..fc40e50f 100644 --- a/docs/factory-infrastructure.md +++ b/docs/factory-infrastructure.md @@ -16,6 +16,12 @@ Start with the [local stack](installation.md#run-the-complete-local-stack). Use [Open the infrastructure diagram](diagrams/factory-infrastructure.svg) · [Portrait layout](diagrams/factory-infrastructure-narrow.svg) +## Required and optional services + +The managed stack installs [flycanon](https://github.com/fireflyframework/flycanon) as a separate released server, alongside forge's SDK client. Its PostgreSQL, original-object volume, local embedding model, migration job and ingestion worker are part of the supplied Compose topology. The default factory depends on completed knowledge initialization before startup. + +[flyquery](https://github.com/fireflyframework/flyquery) is an assessed optional analytics service. The supplied stack has no flyquery image, database, credentials, adapter or setup wizard. Do not connect it to factory PostgreSQL or mount factory private storage. A future deployment needs its own identity, explicit snapshot objects and isolated execution environment after the [structured analytics admission checks](structured-knowledge.md#checks-before-enabling-an-adapter) pass. + ## 1. Choose the runtime and owners Assign an owner for the factory, identity, knowledge service, storage and backups. Record the intended recovery time and acceptable data loss. A development machine and a production installation should have different databases, credentials and private directories. diff --git a/docs/identity.md b/docs/identity.md index c356cf36..b932ff7e 100644 --- a/docs/identity.md +++ b/docs/identity.md @@ -4,6 +4,8 @@ description: Configure OIDC sign-in and durable server sessions, then enforce cu # Sign-in and server identity + + firefly forge authenticates people through Keycloak using an authorization code and PKCE. The browser receives an opaque session cookie. ID tokens, access tokens and refresh tokens stay on the server, encrypted in PostgreSQL. Authentication identifies the caller. Project memberships determine which products that caller can access. A new identity receives no project memberships automatically; a matching email address does not grant access. diff --git a/docs/knowledge.md b/docs/knowledge.md index 93d46108..ac71998c 100644 --- a/docs/knowledge.md +++ b/docs/knowledge.md @@ -5,7 +5,27 @@ description: Configure required flycanon retrieval, inspect citations and retain # Retrieve knowledge and retain verified project memory -Flycanon is part of the managed forge installation. The official [Flycanon Python SDK](https://github.com/fireflyframework/flycanon/releases/tag/v26.10.0) retrieves framework references, selected codebase context and verified project memory from its authenticated service. A fresh managed installation enables required knowledge and automatic verified memory. Existing configured installations retain their saved choices and queued snapshots. +[flycanon](https://github.com/fireflyframework/flycanon) is part of the managed forge installation. The official [Flycanon Python SDK](https://github.com/fireflyframework/flycanon/releases/tag/v26.10.0) retrieves framework references, selected codebase context and verified project memory from its authenticated service. A fresh managed installation enables required knowledge and automatic verified memory. Existing configured installations retain their saved choices and queued snapshots. + +## Service responsibilities + +| Service | Responsibility | Authority | +| --- | --- | --- | +| forge PostgreSQL and journal | Run admission, project permissions, verified source/check evidence and learning eligibility | Current factory records authorize work and retain observed outcomes. | +| flycanon | Cited framework manuals, admitted project documents and canonical versions of verified memory | Source/chunk/version receipts establish provenance within the selected workspace. | +| flyquery, assessed optional integration | Questions over explicit structured snapshots, such as check durations or procedure outcomes | No forge adapter, managed service or configuration screen is implemented. | + +A structured query result cannot change a run's status, approve source, satisfy a delivery gate or create verified memory. [Structured analytics architecture](structured-knowledge.md) defines the proposed flyquery boundary and its admission prerequisites. Keep flycanon required for the managed factory. + +## Set up knowledge from a fresh installation + +1. Complete [installation and identity setup](installation.md#run-the-complete-local-stack), then start the supplied Compose stack. Bootstrap, database migration, model download and framework initialization have separate outcomes. +2. Check that `knowledge-initialize` completed successfully. It verifies embedding-backed retrieval; Flycanon's version health check alone cannot establish this. +3. Sign in to Studio and open **Knowledge**. Review the saved address, tenant, shared framework workspace, required retrieval and automatic memory settings. +4. Select **Check knowledge access**, then choose the registered repository under **Try a project search**. Inspect the expected framework or project citation, including its workspace and source identity. +5. Run a small project with executable acceptance checks. Inspect its source/checkpoint evidence, index an explicit verified path when needed, then retrieve its saved memory from the same repository scope. + +Studio's Knowledge setup is a settings form followed by an authentication check, project search and source explorer. **Save knowledge settings** retains configuration; **Check knowledge access** tests platform authentication. Neither button installs a server or downloads an embedding model. The private CA is configured through the API; the current form has no CA input. There is no flyquery setup wizard. ## Structured learning evidence diff --git a/docs/model-profiles.md b/docs/model-profiles.md index 5ad57434..2bc4977c 100644 --- a/docs/model-profiles.md +++ b/docs/model-profiles.md @@ -4,6 +4,8 @@ description: Assign configured models to product dialogue, implementation and re # Choose models for specific tasks + + Use named model profiles when planning, coding and reviewing should use different models or credentials. A profile belongs to one real provider: direct Firefly Agentic API, an optional compatible bridge, Codex CLI or Claude Code CLI. Direct API profiles do not require a bridge. The provider's existing connection configuration and a named profile are separate. New profiles copy nonsecret connection defaults. They inherit a provider credential only when you explicitly set `inherit_credentials: true`; otherwise supply the profile's own credential. Updating one profile does not edit another profile or the server's process environment. diff --git a/docs/product-definition.md b/docs/product-definition.md index 2d9a4850..eb9b9036 100644 --- a/docs/product-definition.md +++ b/docs/product-definition.md @@ -4,6 +4,8 @@ description: Define customers, journeys, features and integration contracts, the # Define the product and customer + + A brief describes a change. A product definition gives the agent a durable customer contract: who needs it, what problem it solves, how the journey works, and which acceptance and security checks determine success. Save the definition at `PUT /api/v1/repositories/ID/product`. Every save creates an immutable revision; `GET` returns the latest revision with its digest and creation time. diff --git a/docs/product-lifecycle.md b/docs/product-lifecycle.md index e23ea766..12b5fe4c 100644 --- a/docs/product-lifecycle.md +++ b/docs/product-lifecycle.md @@ -4,6 +4,8 @@ description: Evolve product features and integration contracts while preserving # Evolve a product without replacing its definition + + A product can contain several customer journeys, features and integrations. Each feature has a stable ID, expected behavior, failure paths and references to the product's acceptance criteria. An integration connects those features to a named owned service or a third-party system. Incremental changes preserve the existing product definition. A request names its base revision and digest, upserts or removes specific contract IDs, and optionally appends journeys, acceptance criteria or user stories. Existing acceptance numbers and untouched features remain unchanged. diff --git a/docs/project-campaigns.md b/docs/project-campaigns.md index 63f8d543..17ca1dcf 100644 --- a/docs/project-campaigns.md +++ b/docs/project-campaigns.md @@ -4,6 +4,8 @@ description: Coordinate product components through a dependency graph, immutable # Deliver a product across components + + A delivery campaign coordinates the configured components of one product project. It admits every child run together, then releases components as their dependencies finish. Different repositories can run in parallel; the factory keeps one active run per repository. Before launch, configure each component's source root, stack, dependency list and executable verification commands. Choose the coding provider and, when needed, a separate review provider. A campaign does not infer a customer's requirements or replace a reviewed product definition. diff --git a/docs/release-notes.md b/docs/release-notes.md index 143bd111..2e173489 100644 --- a/docs/release-notes.md +++ b/docs/release-notes.md @@ -5,6 +5,18 @@ description: Review firefly forge release changes, runtime requirements and the # firefly forge release notes +## 0.2.4 + +Connected accounts now provides an administrator flow for the owned local repository service: admit its fixed policy, register a client and project, complete browser consent, inspect state, request refresh and disconnect locally. The native foundation uses public pyfly 26.10.3 OAuth client and S256 PKCE APIs. Different literal factory/provider hosts protect browser cookies; a same-host policy is rejected before provider contact. See [connected-account setup](connected-accounts.md). + +PostgreSQL retains encrypted registration/grant context, stable request identities and token-effect receipts. Unknown exchange or rotating-refresh responses block replay. Historical credential evidence reserves its bounded custody capacity before dispatch. Scoped resource use and cached tool receipts recheck current policy, grant family, expiry and project authority. Schema discovery, exact review, repository/tool grants and the worker capability remain separate admissions. The supported local adapter has four fixed repository-read tools; GitHub, Figma, Sentry, Grafana and external Playwright OAuth remain at their vendor prerequisites. + +Native runtime composition uses `FactoryConfiguration`, typed controllers/repositories and injected service collaborators. The [architecture guide](architecture.md) documents knowledge, OAuth resource custody, the ledger and write-ahead boundaries without claiming every domain construction path is container-owned. The Studio walkthrough retains 228 fixture captures tied to its exact frontend and package version. Native OAuth captures keep their own source identities and local qualification scope. + +The authoritative [flycanon](https://github.com/fireflyframework/flycanon) repository and the optional [flyquery](https://github.com/fireflyframework/flyquery) repository are now under `fireflyframework`. Forge's SDK and managed server installation use the canonical flycanon release URLs. Required flycanon retrieval and canonical verified memory remain implemented; [structured analytics](structured-knowledge.md) documents a proposed snapshot-based flyquery integration, its assessed safety gaps and admission checks. Forge has no flyquery adapter or managed service. + +The native local qualification exercised actual Studio forms, a stock public pyfly authorization/MCP service, token refresh, disconnect, scoped resource calls and retained WAL. MCP linking, discovery, review and project grants used native API requests; resource dispatch used the native in-process broker. This evidence does not establish hosted vendor accounts, production identity federation, paid models, cluster deployment or complete factory acceptance. Release packaging and exact-source CI have their own checks. + ## 0.2.3 Repository-scoped learning records retain their question, source tree, checks and review evidence in PostgreSQL. Native knowledge-first tools can reuse an exact eligible local outcome. Cached reuse holds a shared lock on the selected record and rechecks its policy, expiry and current execution authority before returning it. Explicit invalidation preserves the historical receipt. Submission to flycanon is a separate, single-dispatch action; uncertain submission requires observation rather than another write. Automatic retrieval from projected learning namespaces, classified repair controls and sharing between projects remain open. See [learning](learning.md). diff --git a/docs/repository-workflow.md b/docs/repository-workflow.md index 4d64161f..dde22514 100644 --- a/docs/repository-workflow.md +++ b/docs/repository-workflow.md @@ -4,6 +4,8 @@ description: Use repository conversations to define products, request changes an # Work from your repository + + forge accepts trusted commands from GitHub issue and pull request comments, GitLab issue and merge request notes, and Bitbucket Cloud pull request comments. A command queues the same verified factory run used by Studio. Each run has its own workspace and branch, and retains the initiating receipt and issue identity. | Provider | Inbound verification | Supported conversations | diff --git a/docs/security.md b/docs/security.md index fe84f169..ba7c8954 100644 --- a/docs/security.md +++ b/docs/security.md @@ -17,7 +17,9 @@ Studio uses an opaque HttpOnly session cookie and native CSRF protection; it doe ## Protect credentials -Saved credentials and immutable run revisions are plaintext files with mode `0600` inside a mode `0700` configuration directory. Secret GET responses report presence only. Empty secret fields preserve saved values; explicit clearing removes them. This is owner-level filesystem protection, not encryption at rest. +File-backed service credentials and immutable run revisions are plaintext files with mode `0600` inside a mode `0700` configuration directory. Secret GET responses report presence only. Empty secret fields preserve saved values; explicit clearing removes them. This is owner-level filesystem protection, not encryption at rest. + +Connection OAuth client secrets and grant tokens are separately encrypted in PostgreSQL, bound to their connection and revision context. Historical credential fingerprints remain available for admission checks after rotation or local disconnect. Capacity is reserved before code/refresh dispatch; exhausted custody history blocks new admission. Preserve the shared encryption key with the installation backup. [Connected accounts](connected-accounts.md) explains browser consent, policy withdrawal, exact effect receipts and local disconnect. Configured credentials, URI passwords and private keys are redacted from evidence. Source containing a configured credential is rejected before delivery. Worker and verification processes receive filtered environments excluding the database URL and unrelated server secrets. Git credentials are supplied only to authorized Git operations, through ephemeral askpass configuration, never credential-bearing repository URLs or global Git settings. diff --git a/docs/structured-knowledge.md b/docs/structured-knowledge.md new file mode 100644 index 00000000..9ee42a41 --- /dev/null +++ b/docs/structured-knowledge.md @@ -0,0 +1,86 @@ +--- +description: Review the optional flyquery analytics design, its assessed SQL pipeline and the authorization, snapshot, execution and recovery checks required for a forge adapter. +--- + + +# Design structured project analytics + +[flyquery](https://github.com/fireflyframework/flyquery) answers natural-language questions over structured datasets using schema retrieval, generated SQL and DuckDB execution. It could help inspect project check outcomes, procedure reuse, durations or failure categories. forge currently has no flyquery dependency, native adapter, managed deployment or configuration screen. The design below is a proposed integration, with explicit conditions for enabling it. + +[flycanon](https://github.com/fireflyframework/flycanon) remains the required service for cited framework guidance, project documents and canonical verified memory. forge PostgreSQL and the journal retain execution authority. flyquery's query history and proposed SQL examples have separate meanings: they cannot approve a procedure, mark a run verified or replace source/checkpoint receipts. + +## Assessed flyquery pipeline + +The assessed `QueryService` retrieves and reranks schema context, grounds the question, then either compiles declared semantic metrics or asks a generation agent for SQL. `AstClassifier` classifies the candidate, `ScopeGuard` checks its operation and dataset access, and `TableResolver` resolves registered Parquet snapshots. `DuckDBExecutor` runs the statement, with bounded critic attempts after execution errors. An explainer prepares the answer. The service retains query/results and may propose an example for later review. + +Assessment of [revision `7b02792`](https://github.com/fireflyframework/flyquery/tree/7b0279258dce31d1718da44d58f729a15529c5b0) found two admission blockers: + +| Component | Observed behavior | Required before forge use | +| --- | --- | --- | +| AST classification and scope guard | A `SELECT` using `read_csv_auto` produced no registered table references and passed with query-read scope and an empty dataset allowlist. Actual DuckDB execution read a synthetic, unregistered local file. | Reject external-file and network table functions, unknown references and unsupported AST forms before execution. Every data reference must resolve to an explicitly authorized snapshot. | +| DuckDB execution | A fresh in-process connection applies memory and thread settings and caps returned rows. The executor does not enforce the declared `default_statement_timeout_ms`. | Enforce real wall time and cancellation in an isolated process, with operating-system resource limits and confined snapshot access. | + +A separate in-memory DuckDB connection does not isolate the host filesystem or network. A row cap bounds the response, not the work needed to compute it. Keep the proposed forge integration disabled until those boundaries are repaired and tested through the actual query path, including critic-generated revisions. + +Source: [`QueryService`](https://github.com/fireflyframework/flyquery/blob/7b0279258dce31d1718da44d58f729a15529c5b0/src/flyquery/core/services/query/query_service.py), [`AstClassifier`](https://github.com/fireflyframework/flyquery/blob/7b0279258dce31d1718da44d58f729a15529c5b0/src/flyquery/core/services/execution/ast_classifier.py), [`ScopeGuard`](https://github.com/fireflyframework/flyquery/blob/7b0279258dce31d1718da44d58f729a15529c5b0/src/flyquery/core/services/execution/scope_guard.py), [`DuckDBExecutor`](https://github.com/fireflyframework/flyquery/blob/7b0279258dce31d1718da44d58f729a15529c5b0/src/flyquery/core/services/execution/duckdb_executor.py). + +## Proposed data and service boundaries + +An operator would enable analytics for an explicit project and purpose after reviewing its data policy. The adapter would export a bounded, immutable snapshot from authorized factory records. It would exclude private settings, tokens, raw command logs, unrestricted source content and unrelated projects. Approved columns could include run identity, source tree, check identity, outcome, duration and verification time. + +Each snapshot would retain its schema version, project and repository identities, source/checkpoint references, export time, content digest and retention policy. A flyquery dataset would belong to that exact project scope. A query would name its snapshot version so a later dataset update could not change the meaning of a retained answer. Combining repositories in one project would require an explicit authorized snapshot; registration in a `ProductProject` alone would not authorize aggregation. + +The proposed native pyfly services would have these responsibilities: + +| Proposed service | Responsibility | +| --- | --- | +| Analytics connection | Private endpoint, TLS trust and scoped service credential transport; no browser-supplied identity headers as authority. | +| Snapshot service | Current project authorization, approved column selection, immutable snapshot creation and retained export receipts. | +| Query service | Frozen snapshot/configuration references, bounded question, current dataset grants and cancellation. | +| Analytics controller | Typed request/response models, project read authorization and actual readiness/result evidence. | + +These names describe responsibilities to implement. They are not registered beans in `ForgeBeans`. The adapter should follow the existing native knowledge pattern: inject private configuration and typed repositories, centralize transport, and keep authority checks in server code. + +```mermaid +flowchart TD + A[Authorized project request] --> B[Bounded immutable snapshot] + B --> C[Retained export intent] + C --> D[Scoped flyquery dataset] + D --> E[Observe admission receipt] + E --> F[Authorized snapshot query] + F --> G[SQL validation and isolated execution] + G --> H[Retained query and result evidence] + H --> I[Analytical answer with provenance] +``` + +This is the proposed analytics sequence. Current flycanon retrieval and memory operate through the [implemented knowledge lifecycle](knowledge.md). + +## Write-ahead effects and recovery + +Snapshot upload and remote query admission would each need their own retained intent, stable request identity and observed receipt. Before either effect, an execution worker would recheck ownership and the requesting actor's project authority. A receipt would identify the exact remote tenant, workspace, dataset, snapshot, query and result digest that were observed. + +A connection timeout after submission leaves an unknown outcome. Recovery would inspect the retained remote identity before another submission. It must preserve the original snapshot and configuration references, including after an endpoint or workspace setting changes. A local timeout cannot establish that a remote query stopped, and a request identity cannot establish server idempotency unless the selected route enforces it. + +A read query can still create remote query history, result objects, example proposals or provider costs. Treat those effects explicitly in the admission policy and recovery contract. No analytics result should be automatically promoted into flycanon memory. Promotion would require reviewed source evidence, existing factory verification gates and separate flycanon admission/canonical receipts. + +## Proposed setup and readiness + +A future Studio setup flow should let an administrator select an authorized HTTPS endpoint, tenant, exact project dataset, immutable snapshot and bounded execution policy. Credentials would be write-only. Its service check would establish authentication; a separate small scoped query would establish permitted snapshot retrieval and actual cancellation/resource behavior. + +Saving settings must report configured state. Ready state would require retained evidence from the selected service and project scope. Authentication, snapshot admission, query execution and result provenance need separate visible outcomes. Updating configuration would affect newly admitted work; it must preserve queued snapshots and unresolved intents. + +The current **Knowledge** form configures flycanon only. Use [knowledge setup](knowledge.md#set-up-knowledge-from-a-fresh-installation) for the implemented installation. Adding an endpoint or environment variable cannot activate the proposed flyquery adapter. + +## Checks before enabling an adapter + +Use isolated test datasets and synthetic files for qualification. Required checks include: + +1. The actual query path rejects file/network table functions, unknown tables, unsupported AST forms and attempts to escape the allowed dataset. Revalidate every critic-produced SQL revision. +2. Project and repository permissions are enforced at admission and execution, including revoked membership, expired grants and cross-project dataset identities. +3. Execution has observed wall-time cancellation, memory/CPU limits, bounded output and no access to factory storage, host sockets or ambient service credentials. +4. Snapshot admission is idempotent for its stable identity and content digest. Conflicting content is rejected; lost responses reconcile without duplicate uploads. +5. Restart and worker-ownership loss retain uncertain query/export outcomes. A result cannot be accepted under a different snapshot, source tree or configuration revision. +6. Answers expose query, SQL, snapshot, schema and result provenance. Aggregated analytics do not alter canonical memory, learning eligibility or delivery authority. +7. Retention, deletion and backup preserve or remove dataset objects together with their metadata and retained references. + +Record source revision, executor configuration, test receipts and remaining provider/deployment acceptance separately. Passing SQL unit tests alone cannot establish an authorized forge integration or a production deployment. diff --git a/docs/tooling-prerequisites.md b/docs/tooling-prerequisites.md index 7b871c3b..7c18ec33 100644 --- a/docs/tooling-prerequisites.md +++ b/docs/tooling-prerequisites.md @@ -4,9 +4,11 @@ description: Check which tools a factory phase can use, prepare each provider's # Prepare the tools your project needs + + Start with the task, then enable the tools it needs. A product conversation, an implementation worker and an application health probe have different permissions. Adding a provider to the catalog does not authorize an account, grant a project or prove that a tool call worked. -The native agent registry has twelve handlers. The factory's own MCP server has 96 operator tools for the authenticated API. Those operator tools manage factory resources; they are not automatically available inside an implementation worker. +The native agent registry has twelve handlers. The factory's own MCP server has 108 operator tools for the authenticated API. Those operator tools manage factory resources; they are not automatically available inside an implementation worker. ## Follow the phase boundary @@ -61,19 +63,13 @@ Signing in to forge identifies the operator. Authorizing a provider grants acces See [factory identity](identity.md) and [SCM application setup](scm.md) for the implemented flows. Direct coding-provider and Bridge configuration is separate from external MCP authorization. -### Required external OAuth connection flow - -Providers that require OAuth need a complete control-plane connection flow before they can be enabled. This is an implementation requirement, not an available connection wizard contract in the current MCP adapter. +### Implemented connection OAuth foundation -1. **Register the approved application.** Admit the provider's issuer, authorization/token endpoints, protected resource, scopes and client ID. Keep any client secret write-only. The exact callback must belong to the configured forge origin; provider discovery must not grant permission to an arbitrary URL. A changed issuer, token host or client registration needs a newly admitted matching credential; an old client secret cannot be forwarded to that new host. -2. **Authorize in the browser.** Bind an expiring, single-use PostgreSQL attempt to the current actor, browser and connection revision. Require S256 PKCE. A provider error, changed connection, mismatched issuer or consumed state must leave the connection unavailable. -3. **Retain the grant privately.** Encrypt tokens server-side and validate the granted scopes, token type, expiry and resource binding according to the admitted provider contract. Login-session tokens must never be copied into the provider grant or project image. -4. **Manage its lifetime.** Record refresh/rotation intents and outcomes under a shared database fence. A lost token response requires reauthorization or explicit reconciliation; rotating refresh tokens cannot be blindly replayed. Recheck current actor, project and tool authority, and make disconnect/revocation stop future calls. -5. **Expose the same controls to clients.** The API, SDK, CLI, factory MCP and visual wizard must share readiness, authorization, reconnect and disconnect behavior. OAuth completion still needs exact schema review and the selected project/tool grant. +**Connected accounts** provides the native administrator flow for service policy, client registration, browser consent, current state, refresh and local disconnect. The supported `local-repository-tools` policy requires explicit development settings and fixes the service paths and `repository:read` scope. Five vendor OAuth entries remain at their prerequisite state. Saving an account registration cannot enable an agent tool. -The foundation must reuse public pyfly OAuth acquisition and PKCE APIs, factory identity/current-access checks and PostgreSQL persistence. The pinned framework still needs a reviewed public refresh/resource/client-authentication extension before a general external OAuth flow can be claimed; private transport calls are not a supported substitute. It must preserve existing login/SCM flows and queued configuration revisions. It does not create vendor client approval, enable unsupported tools or register accounts automatically. +The foundation uses public pyfly OAuth acquisition, refresh, resource/client-authentication and S256 PKCE APIs. Single-use PostgreSQL attempts bind the actor, browser and registration revision. Encrypted server-side grants retain their resource, scope, expiry and family. Exchange and refresh use retained effects and exact request receipts; unknown responses block replay. Current policy and project authority are checked again for resource calls and cached broker receipts. -The [MCP authorization specification](https://modelcontextprotocol.io/specification/2025-11-25/basic/authorization) describes protected-resource metadata, authorization-server discovery and resource-bound access. [S256 PKCE](https://www.rfc-editor.org/rfc/rfc7636) and the [OAuth security best current practice](https://www.rfc-editor.org/rfc/rfc9700) inform the connection controls. Until this flow and the provider adapter are qualified, keep the affected connector at its prerequisite state. +Follow the [connected-account guide](connected-accounts.md) for the actual wizard, development prerequisites and API/SDK/CLI/MCP contracts. An authorized account still needs the separate MCP link, explicit discovery, exact schema review, repository/tool grant and worker capability. The local adapter admits the four fixed repository-read tools. Vendor approval and scoped adapters remain separate requirements. ## GitHub diff --git a/docs/user-administration.md b/docs/user-administration.md index c43e7a5f..c251da5b 100644 --- a/docs/user-administration.md +++ b/docs/user-administration.md @@ -4,6 +4,8 @@ description: Manage factory users, project roles and invitations through readabl # Manage users and invitations + + Factory administrators can suspend registered identities and, when a dedicated Keycloak service client is configured, provision new accounts. Project membership remains a separate action. Creating an account or matching an email address grants no project access. The administration API accepts no passwords, administrator roles or project-role shortcuts. Keycloak owns credential setup and account verification. Browser administrators authenticate through the normal [identity flow](identity.md). diff --git a/infrastructure/ci/bitbucket/.forge-ci/README.md b/infrastructure/ci/bitbucket/.forge-ci/README.md index e169490b..200c361c 100644 --- a/infrastructure/ci/bitbucket/.forge-ci/README.md +++ b/infrastructure/ci/bitbucket/.forge-ci/README.md @@ -1,5 +1,7 @@ # Reviewed product CI + + These templates execute on trusted Linux x86_64 CI runners. Install through a reviewed branch and configure your provider's protected main branch, runner and registry permissions. `make check` and a root Dockerfile must be real project gates; missing files or tools fail the pipeline. diff --git a/infrastructure/ci/bitbucket/.forge-ci/bootstrap.sh b/infrastructure/ci/bitbucket/.forge-ci/bootstrap.sh index c614707f..5350803f 100644 --- a/infrastructure/ci/bitbucket/.forge-ci/bootstrap.sh +++ b/infrastructure/ci/bitbucket/.forge-ci/bootstrap.sh @@ -1,4 +1,5 @@ #!/usr/bin/env bash +# Copyright 2026 Firefly Software Foundation. SPDX-License-Identifier: Apache-2.0 set -euo pipefail [ "$(uname -m)" = x86_64 ] || { echo 'Use a trusted Linux x86_64 CI runner'; exit 1; } sudo_cmd=() diff --git a/infrastructure/ci/bitbucket/.forge-ci/check.sh b/infrastructure/ci/bitbucket/.forge-ci/check.sh index 5cd18938..f518f2b2 100644 --- a/infrastructure/ci/bitbucket/.forge-ci/check.sh +++ b/infrastructure/ci/bitbucket/.forge-ci/check.sh @@ -1,4 +1,5 @@ #!/usr/bin/env bash +# Copyright 2026 Firefly Software Foundation. SPDX-License-Identifier: Apache-2.0 set -euo pipefail export PATH="$PWD/.forge-ci/bin:$PATH" mkdir -p security diff --git a/infrastructure/ci/github/.forge-ci/README.md b/infrastructure/ci/github/.forge-ci/README.md index e169490b..200c361c 100644 --- a/infrastructure/ci/github/.forge-ci/README.md +++ b/infrastructure/ci/github/.forge-ci/README.md @@ -1,5 +1,7 @@ # Reviewed product CI + + These templates execute on trusted Linux x86_64 CI runners. Install through a reviewed branch and configure your provider's protected main branch, runner and registry permissions. `make check` and a root Dockerfile must be real project gates; missing files or tools fail the pipeline. diff --git a/infrastructure/ci/github/.forge-ci/bootstrap.sh b/infrastructure/ci/github/.forge-ci/bootstrap.sh index bdf99839..fbac2423 100644 --- a/infrastructure/ci/github/.forge-ci/bootstrap.sh +++ b/infrastructure/ci/github/.forge-ci/bootstrap.sh @@ -1,4 +1,5 @@ #!/usr/bin/env bash +# Copyright 2026 Firefly Software Foundation. SPDX-License-Identifier: Apache-2.0 set -euo pipefail [ "$(uname -m)" = x86_64 ] || { echo 'Use a trusted Linux x86_64 CI runner'; exit 1; } sudo_cmd=() diff --git a/infrastructure/ci/github/.forge-ci/check.sh b/infrastructure/ci/github/.forge-ci/check.sh index 325a3431..049ba465 100644 --- a/infrastructure/ci/github/.forge-ci/check.sh +++ b/infrastructure/ci/github/.forge-ci/check.sh @@ -1,4 +1,5 @@ #!/usr/bin/env bash +# Copyright 2026 Firefly Software Foundation. SPDX-License-Identifier: Apache-2.0 set -euo pipefail export PATH="$PWD/.forge-ci/bin:$PATH" mkdir -p security diff --git a/infrastructure/ci/gitlab/.forge-ci/README.md b/infrastructure/ci/gitlab/.forge-ci/README.md index e169490b..200c361c 100644 --- a/infrastructure/ci/gitlab/.forge-ci/README.md +++ b/infrastructure/ci/gitlab/.forge-ci/README.md @@ -1,5 +1,7 @@ # Reviewed product CI + + These templates execute on trusted Linux x86_64 CI runners. Install through a reviewed branch and configure your provider's protected main branch, runner and registry permissions. `make check` and a root Dockerfile must be real project gates; missing files or tools fail the pipeline. diff --git a/infrastructure/ci/gitlab/.forge-ci/bootstrap.sh b/infrastructure/ci/gitlab/.forge-ci/bootstrap.sh index bdf99839..fbac2423 100644 --- a/infrastructure/ci/gitlab/.forge-ci/bootstrap.sh +++ b/infrastructure/ci/gitlab/.forge-ci/bootstrap.sh @@ -1,4 +1,5 @@ #!/usr/bin/env bash +# Copyright 2026 Firefly Software Foundation. SPDX-License-Identifier: Apache-2.0 set -euo pipefail [ "$(uname -m)" = x86_64 ] || { echo 'Use a trusted Linux x86_64 CI runner'; exit 1; } sudo_cmd=() diff --git a/infrastructure/ci/gitlab/.forge-ci/check.sh b/infrastructure/ci/gitlab/.forge-ci/check.sh index 325a3431..049ba465 100644 --- a/infrastructure/ci/gitlab/.forge-ci/check.sh +++ b/infrastructure/ci/gitlab/.forge-ci/check.sh @@ -1,4 +1,5 @@ #!/usr/bin/env bash +# Copyright 2026 Firefly Software Foundation. SPDX-License-Identifier: Apache-2.0 set -euo pipefail export PATH="$PWD/.forge-ci/bin:$PATH" mkdir -p security diff --git a/infrastructure/examples/aws/inventory.py b/infrastructure/examples/aws/inventory.py index a57b0edf..82971b00 100644 --- a/infrastructure/examples/aws/inventory.py +++ b/infrastructure/examples/aws/inventory.py @@ -1,3 +1,4 @@ +# Copyright 2026 Firefly Software Foundation. SPDX-License-Identifier: Apache-2.0 import json,subprocess from pathlib import Path host=json.loads(subprocess.check_output(['tofu','-chdir=.forge-deployment','output','-json','host'])) diff --git a/infrastructure/examples/azure/inventory.py b/infrastructure/examples/azure/inventory.py index a57b0edf..82971b00 100644 --- a/infrastructure/examples/azure/inventory.py +++ b/infrastructure/examples/azure/inventory.py @@ -1,3 +1,4 @@ +# Copyright 2026 Firefly Software Foundation. SPDX-License-Identifier: Apache-2.0 import json,subprocess from pathlib import Path host=json.loads(subprocess.check_output(['tofu','-chdir=.forge-deployment','output','-json','host'])) diff --git a/infrastructure/examples/digitalocean/inventory.py b/infrastructure/examples/digitalocean/inventory.py index a57b0edf..82971b00 100644 --- a/infrastructure/examples/digitalocean/inventory.py +++ b/infrastructure/examples/digitalocean/inventory.py @@ -1,3 +1,4 @@ +# Copyright 2026 Firefly Software Foundation. SPDX-License-Identifier: Apache-2.0 import json,subprocess from pathlib import Path host=json.loads(subprocess.check_output(['tofu','-chdir=.forge-deployment','output','-json','host'])) diff --git a/infrastructure/examples/gcp/inventory.py b/infrastructure/examples/gcp/inventory.py index a57b0edf..82971b00 100644 --- a/infrastructure/examples/gcp/inventory.py +++ b/infrastructure/examples/gcp/inventory.py @@ -1,3 +1,4 @@ +# Copyright 2026 Firefly Software Foundation. SPDX-License-Identifier: Apache-2.0 import json,subprocess from pathlib import Path host=json.loads(subprocess.check_output(['tofu','-chdir=.forge-deployment','output','-json','host'])) diff --git a/mkdocs.yml b/mkdocs.yml index f0483dfd..759f8fe6 100644 --- a/mkdocs.yml +++ b/mkdocs.yml @@ -1,3 +1,4 @@ +# Copyright 2026 Firefly Software Foundation. SPDX-License-Identifier: Apache-2.0 site_name: firefly forge site_url: https://fireflyframework.github.io/firefly-forge/ site_description: Build and verify software with Firefly's software factory. @@ -98,6 +99,7 @@ nav: - Agent tools: agent-tools.md - Tool and provider prerequisites: tooling-prerequisites.md - External tool setup walkthrough: external-tools-tour.md + - Authorize connected accounts: connected-accounts.md - Configure internet search: search-providers.md - Tool invocation evidence: tool-broker.md - Reviewed external tools: external-tools.md @@ -112,6 +114,7 @@ nav: - Connect Git repositories: scm.md - Repository conversations: repository-workflow.md - Cited knowledge and memory: knowledge.md + - Structured analytics architecture: structured-knowledge.md - Learning and knowledge reuse: learning.md - DevSecOps pipelines: devsecops.md - Operations: diff --git a/pyproject.toml b/pyproject.toml index d0d0118d..b5d704b5 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -1,10 +1,11 @@ +# Copyright 2026 Firefly Software Foundation. SPDX-License-Identifier: Apache-2.0 [build-system] requires = ["hatchling>=1.28"] build-backend = "hatchling.build" [project] name = "firefly-forge" -version = "0.2.3" +version = "0.2.4" description = "Firefly software factory: brief to verified product with interchangeable coding agents" readme = "README.md" requires-python = ">=3.13" @@ -22,7 +23,7 @@ dependencies = [ "filelock>=3.20,<5", "cryptography>=50.0.2,<51", "PyYAML>=6.0.3,<7", - "pyfly[data-relational,oauth2-client,postgresql,security,web] @ https://github.com/fireflyframework/fireflyframework-pyfly/releases/download/v26.10.02/pyfly-26.10.2-py3-none-any.whl", + "pyfly[data-relational,oauth2-client,postgresql,security,web] @ https://github.com/fireflyframework/fireflyframework-pyfly/releases/download/v26.10.03/pyfly-26.10.3-py3-none-any.whl", "fireflyframework-agentic @ https://github.com/fireflyframework/fireflyframework-agentic/releases/download/v26.09.0/fireflyframework_agentic-26.9.0-py3-none-any.whl", "flycanon-sdk @ https://github.com/fireflyframework/flycanon/releases/download/v26.10.0/flycanon_sdk-26.10.0-py3-none-any.whl", "fonttools[woff]>=4.62,<5", @@ -55,7 +56,7 @@ path = "scripts/build_hook.py" "studio/dist" = "studio/dist" [tool.hatch.build] -exclude = ["**/node_modules/**", "**/.venv/**", "**/__pycache__/**", "**/*.tsbuildinfo", "**/.codex/**", "**/AGENTS.md", "**/CLAUDE.md", "**/.env", "**/test-results/**", "**/playwright-report/**", "**/.forge/**", "/dist/**", "/build/**"] +exclude = ["**/node_modules/**", "**/.venv/**", "**/__pycache__/**", "**/*.tsbuildinfo", "**/.codex/**", "**/AGENTS.md", "**/CLAUDE.md", "**/.env", "**/test-results/**", "**/playwright-report/**", "**/.forge/**", "/dist/**", "/build/**", "**/work/**"] [tool.pytest.ini_options] testpaths = ["tests"] diff --git a/scripts/build_architecture_diagrams.py b/scripts/build_architecture_diagrams.py index 6fab5c96..de099247 100644 --- a/scripts/build_architecture_diagrams.py +++ b/scripts/build_architecture_diagrams.py @@ -29,7 +29,7 @@ "title": "Native services behind the factory", "subtitle": "Clients submit contracts; the execution leader owns effects.", "cards": [ - ("Operator surfaces", "Studio, CLI, ForgeClient and 89 factory MCP tools use authenticated contracts."), + ("Operator surfaces", "Studio, CLI, ForgeClient and 108 factory MCP tools use authenticated contracts."), ( "Identity and project access", "OperatorAuth validates identity. AccessRoutes checks the requested resource and operation.", @@ -50,6 +50,20 @@ ], "footer": "Default combined process or split API replicas with one execution leader.", }, + "architecture-oauth": { + "icon": "identity", + "title": "OAuth consent and project resource custody", + "subtitle": "Account authorization precedes exact schema review and project tool admission.", + "cards": [ + ("Admit the service", "Native policy fixes issuer, endpoints, resource and scope. Local development uses different literal loopback hosts."), + ("Register the client", "Current administrator authority and expected revision bind the client to its selected project and retained policy."), + ("Authorize in the browser", "Single-use state, issuer, browser nonce and S256 PKCE bind consent to the actor and immutable registration."), + ("Retain token effects", "PostgreSQL records intent before exchange or refresh. Encrypted grants and exact receipts retain observed outcomes."), + ("Bind the project resource", "OAuthResources rechecks policy, grant family, expiry and current project authority before resource use."), + ("Review and grant tools", "Exact discovered schemas, repository/tool grants and frozen role permission precede broker dispatch and receipt reuse."), + ], + "footer": "Five vendor OAuth templates remain blocked; the owned local service has four read tools.", + }, "architecture-ledger": { "icon": "database", "title": "Records that connect a run to its evidence", diff --git a/scripts/docs-browser/architecture.spec.mjs b/scripts/docs-browser/architecture.spec.mjs index 57a630f6..dc13c4f8 100644 --- a/scripts/docs-browser/architecture.spec.mjs +++ b/scripts/docs-browser/architecture.spec.mjs @@ -19,7 +19,7 @@ for (const width of [1440, 375]) theme === "dark" ? "slate" : "default", ); const figures = page.locator(".forge-architecture-diagram"); - await expect(figures).toHaveCount(8); + await expect(figures).toHaveCount(9); for (const summary of await page .locator(".forge-gallery > summary") .all()) { @@ -63,7 +63,7 @@ test("diagram text stays inside its canvas and does not overlap other labels", a const links = await page .locator(".forge-architecture-diagram a") .evaluateAll((nodes) => [...new Set(nodes.map((node) => node.href))]); - expect(links).toHaveLength(16); + expect(links).toHaveLength(18); for (const link of links) { await page.goto(link); const collisions = await page.evaluate(async () => { diff --git a/scripts/docs-browser/connected-accounts.spec.mjs b/scripts/docs-browser/connected-accounts.spec.mjs new file mode 100644 index 00000000..b35b22a6 --- /dev/null +++ b/scripts/docs-browser/connected-accounts.spec.mjs @@ -0,0 +1,51 @@ +/* Copyright 2026 Firefly Software Foundation. SPDX-License-Identifier: Apache-2.0 + * https://www.apache.org/licenses/LICENSE-2.0 */ +import { createRequire } from "node:module"; +import { readyImages } from "./image-readiness.mjs"; +const { test, expect } = createRequire( + new URL("../../studio/package.json", import.meta.url), +)("@playwright/test"); + +for (const width of [1440, 390, 375]) + for (const theme of ["light", "dark"]) + test(`native connected-account guide fits ${width}px ${theme}`, async ({ + page, + }) => { + await page.setViewportSize({ width, height: 900 }); + await page.emulateMedia({ colorScheme: theme, reducedMotion: "reduce" }); + await page.goto("/connected-accounts/"); + await expect(page.locator("body")).toHaveAttribute( + "data-md-color-scheme", + theme === "dark" ? "slate" : "default", + ); + const article = page.locator("article"); + await expect(article).toContainText("API-only qualification"); + await expect(article).toContainText("Prerequisite required"); + for (const summary of await article + .locator(".forge-gallery > summary") + .all()) { + await summary.focus(); + await page.keyboard.press("Enter"); + await expect(summary.locator("..")).toHaveAttribute("open", ""); + } + const images = article.locator(".forge-shot img"); + await expect(images).toHaveCount(4); + for (const image of await images.all()) { + await image.scrollIntoViewIfNeeded(); + await readyImages(image); + const bounds = await image.evaluate((element) => ({ + left: element.getBoundingClientRect().left, + right: element.getBoundingClientRect().right, + width: element.getBoundingClientRect().width, + naturalWidth: element.naturalWidth, + })); + expect(bounds.left).toBeGreaterThanOrEqual(0); + expect(bounds.right).toBeLessThanOrEqual(width); + expect(bounds.width).toBeLessThanOrEqual(bounds.naturalWidth); + } + expect( + await page.evaluate( + () => document.documentElement.scrollWidth <= innerWidth, + ), + ).toBe(true); + }); diff --git a/src/firefly_forge/__init__.py b/src/firefly_forge/__init__.py index e5b0a2f7..18ecade7 100644 --- a/src/firefly_forge/__init__.py +++ b/src/firefly_forge/__init__.py @@ -1,4 +1,4 @@ # Copyright 2026 Firefly Software Foundation. SPDX-License-Identifier: Apache-2.0 """Firefly Forge software factory.""" -__version__ = "0.2.3" +__version__ = "0.2.4" diff --git a/src/firefly_forge/agent_role_controllers.py b/src/firefly_forge/agent_role_controllers.py index 83da99dc..3b7f0c72 100644 --- a/src/firefly_forge/agent_role_controllers.py +++ b/src/firefly_forge/agent_role_controllers.py @@ -34,8 +34,10 @@ def __init__( self.runners = runners @get_mapping("/agent-roles") - def catalog(self) -> dict[str, Any]: - return {**self.roles.current(), "community_skills": community_catalog(), "tools": self.roles.tools()} + async def catalog(self) -> dict[str, Any]: + result = {**self.roles.current(), "community_skills": community_catalog(), "tools": self.roles.tools()} + await self.store.admit_credentials(result) + return result async def _lifecycle(self, repository_id: str | None = None) -> dict[str, Any]: repo = await self.store.repository(repository_id) if repository_id else None @@ -70,7 +72,7 @@ async def _lifecycle(self, repository_id: str | None = None) -> dict[str, Any]: assistant_policy=self.store.policies.current(), tools=tools, ) - self.store.reject_credentials(result) + await self.store.admit_credentials(result) actor = CURRENT_PRINCIPAL.get() access = ProjectAccess(self.store) admin = await access.current_administrator(actor) if actor else False @@ -93,7 +95,8 @@ async def project_lifecycle(self, id: PathVar[str]) -> dict[str, Any]: return await self._lifecycle(id) @put_mapping("/agent-roles") - def save(self, body: Body[RoleDocument]) -> dict[str, Any]: + async def save(self, body: Body[RoleDocument]) -> dict[str, Any]: + await self.store.admit_credentials(body.model_dump(mode="json")) return self.roles.save(body) @get_mapping("/runs/{id}/worker-messages") diff --git a/src/firefly_forge/agentic_runtime.py b/src/firefly_forge/agentic_runtime.py index bcb72ecb..6cc4977e 100644 --- a/src/firefly_forge/agentic_runtime.py +++ b/src/firefly_forge/agentic_runtime.py @@ -83,13 +83,30 @@ async def invoke(*args: Any, **kwargs: Any) -> Any: for key, value in kwargs.items() }, ] + if context.credential_admission is not None: + await context.credential_admission(arguments) if contains_known_credential(arguments, context.credential_registry()): raise ValueError("Native tool arguments cannot contain configured credentials") try: - return safe_data(await handler(*args, **kwargs)) + result = await handler(*args, **kwargs) + if context.credential_admission is not None: + public = result.return_value if isinstance(result, ToolReturn) else result + await context.credential_admission(public) + return safe_data(result) except SearchProviderError as exc: - raise SearchProviderError(exc.provider, exc.kind, safe_data(str(exc)), status=exc.status) from None + message = safe_data(str(exc)) + if context.credential_admission is not None: + try: + await context.credential_admission(message) + except ValueError: + message = "Provider error details withheld by credential admission" + raise SearchProviderError(exc.provider, exc.kind, message, status=exc.status) from None except (ValueError, OSError) as exc: + if context.credential_admission is not None: + try: + await context.credential_admission(str(exc)) + except ValueError: + raise ValueError("Native tool error details withheld by credential admission") from None raise ValueError(safe_data(str(exc))) from None return invoke @@ -208,13 +225,24 @@ async def browser_journey(plan: BrowserJourney) -> Any: ) return ToolReturn(report, content=content) - def image_history(messages: list[Any]) -> list[Any]: + async def image_history(messages: list[Any]) -> list[Any]: bounded = bounded_image_history(messages) attached_ids.clear() + text = [] for message in bounded: for part in message.parts: + content = getattr(part, "content", None) + arguments = getattr(part, "args", None) + if isinstance(content, (str, dict)): + text.append(content) + elif isinstance(content, list): + text.extend(item for item in content if isinstance(item, str)) + if isinstance(arguments, (str, dict)): + text.append(arguments) if isinstance(part, UserPromptPart) and not isinstance(part.content, str): attached_ids.update(item.identifier for item in part.content if isinstance(item, BinaryContent)) + if context.credential_admission is not None: + await context.credential_admission(text) return bounded async def internet_search( @@ -354,6 +382,8 @@ async def write_source(path: str, content: str) -> str: if isinstance(cause, (SearchProviderError, ToolReconciliationRequired)): raise cause from None raise + if context.credential_admission is not None: + await context.credential_admission(result.output.model_dump(mode="json")) feedback = result.output.worker_feedback if not tools.files_written and (feedback is None or feedback.disposition not in {"blocked", "clarification"}): raise RuntimeError("Firefly Agentic returned without writing any project source") diff --git a/src/firefly_forge/api.py b/src/firefly_forge/api.py index 9b9a20ae..f4c82729 100644 --- a/src/firefly_forge/api.py +++ b/src/firefly_forge/api.py @@ -1,5 +1,5 @@ # Copyright 2026 Firefly Software Foundation. SPDX-License-Identifier: Apache-2.0 -"""Authenticated PyFly API and Studio host for a single trusted factory operator.""" +"""Native pyfly API, shared sessions and project-scoped Studio host.""" from __future__ import annotations @@ -8,6 +8,7 @@ from contextlib import asynccontextmanager from pathlib import Path from typing import Any +from urllib.parse import urlsplit from pydantic import BaseModel, SecretStr from pyfly.container import bean, configuration, service @@ -57,6 +58,9 @@ ForgeWebhookInboxRepository, ) from firefly_forge.configuration import ConfigurationStore, ProviderConfiguration, redact_secrets +from firefly_forge.connection_oauth import ConnectionOAuth +from firefly_forge.connection_oauth_controllers import ConnectionOAuthController, ConnectionOAuthPrivacy +from firefly_forge.connection_oauth_persistence import OAuthConnectionRepository from firefly_forge.controllers import ( CatalogController, DeploymentController, @@ -110,6 +114,10 @@ from firefly_forge.model_profile_controllers import ModelProfileController from firefly_forge.model_profiles import ModelProfiles from firefly_forge.models import RepositoryInput, RunInput +from firefly_forge.oauth_provider_policies import OAuthProviderPolicies +from firefly_forge.oauth_provider_policy_controllers import OAuthProviderPolicyController +from firefly_forge.oauth_provider_policy_persistence import OAuthProviderPolicyRepository +from firefly_forge.oauth_resources import OAuthResources from firefly_forge.operations import DeploymentManager, DeploymentRequest, DeploymentTarget from firefly_forge.persistence import ( ForgeDeploymentRepository, @@ -414,6 +422,38 @@ def identity_service( def project_access(self, store: Store, records: ForgeMembershipRepository) -> ProjectAccess: return ProjectAccess(store, records) + @bean + def oauth_provider_policies(self, store: Store, records: OAuthProviderPolicyRepository) -> OAuthProviderPolicies: + available = ( + os.getenv("FORGE_OAUTH_LOCAL_DEVELOPMENT") == "1" + and self.identity_configuration.allow_loopback_http + and urlsplit(self.identity_configuration.browser_origin).hostname in {"127.0.0.1", "::1"} + ) + return OAuthProviderPolicies( + store, + records, + local_development_available=available, + browser_origin=self.identity_configuration.browser_origin, + ) + + @bean + def connection_oauth( + self, + store: Store, + identity: IdentityService, + records: OAuthConnectionRepository, + policies: OAuthProviderPolicies, + ) -> ConnectionOAuth: + return ConnectionOAuth( + store, + encryption_key=identity.encryption_key, + browser_origin=identity.configuration()["browser_origin"] or "", + records=records, + allow_loopback_http=identity.config.allow_loopback_http, + policy_lookup=policies.lookup, + policy_directory=policies.directory, + ) + @bean def ledger( self, @@ -424,6 +464,8 @@ def ledger( event_records: ForgeEventRepository, deployment_records: ForgeDeploymentRepository, product_records: ForgeProductDefinitionRepository, + campaign_records: ForgeCampaignRepository, + campaign_children: ForgeCampaignChildRepository, ) -> Store: return Store( self.data_dir / "factory.db", @@ -434,6 +476,8 @@ def ledger( event_records=event_records, deployment_records=deployment_records, product_records=product_records, + campaign_records=campaign_records, + campaign_children=campaign_children, ) @bean @@ -489,6 +533,7 @@ def coordinator( external_mcp.credential_registry = lambda: engine.credential_registry() store.runners, store.task_router = runners, routing search.credential_registry = lambda: engine.credential_registry() + search.credential_admission = store.admit_credentials tool_broker.credential_registry = lambda: engine.credential_registry() journal.credential_registry = lambda: engine.credential_registry() store.credential_registry = lambda: engine.credential_registry() @@ -499,12 +544,16 @@ def assurance(self, store: Store, journal: Journal) -> Assurance: return Assurance(store, self.data_dir / "reviews", journal) @bean - def product_projects(self, store: Store, records: ForgeProjectRepository) -> Projects: - return Projects(store, records) + def product_projects( + self, store: Store, records: ForgeProjectRepository, revisions: ForgeProjectRevisionRepository + ) -> Projects: + return Projects(store, records, revisions) @bean - def reverse_engineering(self, store: Store, projects: Projects, connections: SCMConnections) -> ReverseEngineering: - return ReverseEngineering(store, projects, self.data_dir / "analyses", connections) + def reverse_engineering( + self, store: Store, projects: Projects, connections: SCMConnections, records: ForgeAnalysisRepository + ) -> ReverseEngineering: + return ReverseEngineering(store, projects, self.data_dir / "analyses", connections, records=records) @bean def reviewed_analysis_context( @@ -526,6 +575,10 @@ def product_assistant( engine: Engine, analysis_context: ReviewedAnalysisContext, attachments: AssistantAttachments, + projects: Projects, + records: ForgeAssistantSessionRepository, + turns: ForgeAssistantTurnRepository, + events: ForgeAssistantEventRepository, ) -> ProductAssistant: return ProductAssistant( store, @@ -534,6 +587,10 @@ def product_assistant( analysis_context=analysis_context, credential_registry=lambda: engine.credential_registry(), attachments=attachments, + projects=projects, + records=records, + turns=turns, + events=events, ) @bean @@ -612,8 +669,12 @@ def knowledge_first( return KnowledgeFirst(store, journal, ledger, broker, search) @bean - def external_mcp_registry(self, private: ConfigurationStore) -> ExternalMCPRegistry: - return ExternalMCPRegistry(private) + def oauth_resources(self, connections: ConnectionOAuth, access: ProjectAccess) -> OAuthResources: + return OAuthResources(connections, access) + + @bean + def external_mcp_registry(self, private: ConfigurationStore, resources: OAuthResources) -> ExternalMCPRegistry: + return ExternalMCPRegistry(private, resources=resources) @bean def tool_invocation_broker( @@ -644,8 +705,12 @@ def project_campaigns( records: ForgeCampaignRepository, children: ForgeCampaignChildRepository, events: ForgeCampaignEventRepository, + projects: Projects, + project_records: ForgeProjectRepository, ) -> ProjectCampaigns: - return ProjectCampaigns(store, engine, journal, records, children, events) + return ProjectCampaigns( + store, engine, journal, records, children, events, projects=projects, project_records=project_records + ) @bean def provider_configuration(self, store: Store) -> ConfigurationStore: @@ -666,10 +731,11 @@ def deployment_manager( auth: OperatorAuth, profiles: ModelProfiles, users: UserAdministration, + oauth: ConnectionOAuth, ) -> DeploymentManager: manager = DeploymentManager(store, engine, journal) manager.secret_registries.extend([search, external_mcp]) - manager.secret_registries.extend([auth, profiles, users]) + manager.secret_registries.extend([auth, profiles, users, oauth]) return manager @bean @@ -784,6 +850,11 @@ class Application: container = runtime.context.container container.register_instance(FactoryConfiguration, FactoryConfiguration(data_dir, token, identity, role)) for component in [ + OAuthProviderPolicyRepository, + OAuthProviderPolicyController, + OAuthConnectionRepository, + ConnectionOAuthController, + ConnectionOAuthPrivacy, ForgeRuntimeTopologyRepository, ForgeExecutionRequestRepository, ForgeExecutionRequestEventRepository, diff --git a/src/firefly_forge/assistant_attachments.py b/src/firefly_forge/assistant_attachments.py index c5af3e9a..b09c625a 100644 --- a/src/firefly_forge/assistant_attachments.py +++ b/src/firefly_forge/assistant_attachments.py @@ -78,8 +78,8 @@ def __init__( self.decoder = decoder or decode_attachment self.credential_registry: Callable[[], dict[str, str]] = dict - def _guard(self, value: Any) -> None: - self.store.reject_credentials(value) + async def _guard(self, value: Any) -> None: + await self.store.admit_credentials(value) if contains_known_credential(value, self.credential_registry()): raise ValueError("Remove configured credentials from conversation attachments") @@ -101,7 +101,7 @@ async def _parent( await access.require_repository(actor, repository_id, permission) return row - def _public(self, row: ForgeAssistantAttachmentEntity) -> Data: + async def _public(self, row: ForgeAssistantAttachmentEntity) -> Data: result = {key: copy.deepcopy(value) for key, value in row.data.items() if key in PUBLIC_FIELDS} if any( result.get(key) != value @@ -116,10 +116,10 @@ def _public(self, row: ForgeAssistantAttachmentEntity) -> Data: }.items() ): raise ValueError("Attachment metadata integrity check failed") - self._guard(result) + await self._guard(result) return result - def _verified(self, row: ForgeAssistantAttachmentEntity) -> Data: + async def _verified(self, row: ForgeAssistantAttachmentEntity) -> Data: if row.status != "ready": raise ValueError("Only ready attachments can enter model context") if ( @@ -137,7 +137,7 @@ def _verified(self, row: ForgeAssistantAttachmentEntity) -> Data: raise ValueError("Attachment image hash check failed") elif row.kind != "document" or row.canonical_image is not None or row.image_sha256 is not None: raise ValueError("Attachment content type integrity check failed") - result = self._public(row) + result = await self._public(row) if ( len(row.extracted_text) > MAX_TEXT or result["text_chars"] != len(row.extracted_text) @@ -145,30 +145,30 @@ def _verified(self, row: ForgeAssistantAttachmentEntity) -> Data: or row.data.get("text_sha256") != hashlib.sha256(row.extracted_text.encode()).hexdigest() ): raise ValueError("Attachment text hash, limits or metadata do not match") - self._guard([row.extracted_text, row.raw_bytes.decode("utf8", errors="ignore")]) + await self._guard([row.extracted_text, row.raw_bytes.decode("utf8", errors="ignore")]) return result - def _replay(self, row: ForgeAssistantAttachmentEntity, filename: str, sha256: str) -> Data: + async def _replay(self, row: ForgeAssistantAttachmentEntity, filename: str, sha256: str) -> Data: if row.filename != filename or row.sha256 != sha256: raise ValueError("Attachment replay conflicts with the original filename or content") - return self._verified(row) + return await self._verified(row) async def admit(self, repository_id: str, session_id: str, request: AttachmentInput) -> Data: request = AttachmentInput.model_validate(request) - self._guard(request.filename) + await self._guard(request.filename) try: raw = base64.b64decode(request.content_base64, validate=True) except (ValueError, binascii.Error): raise ValueError("Upload valid base64 file content") from None if not raw or len(raw) > MAX_BYTES: raise ValueError("Upload a nonempty file of at most 1 MB") - self._guard(raw.decode("utf8", errors="ignore")) + await self._guard(raw.decode("utf8", errors="ignore")) sha256 = hashlib.sha256(raw).hexdigest() async with self.store._unit(): parent = await self._parent(repository_id, session_id, write=True) existing = await self.records.request(parent.id, request.request_id) if existing is not None: - return self._replay(existing, request.filename, sha256) + return await self._replay(existing, request.filename, sha256) if await self.records.count_for_session(parent.id) >= 20: raise ValueError("This conversation already contains twenty attachments") try: @@ -193,7 +193,7 @@ async def admit(self, repository_id: str, session_id: str, request: AttachmentIn and (not isinstance(image, bytes) or not image or len(image) > MAX_BYTES) ): raise ValueError("Attachment decoder returned invalid bounded content") - self._guard(content) + await self._guard(content) identifier_value = uuid4() metadata = { "id": identifier_value.hex, @@ -209,15 +209,15 @@ async def admit(self, repository_id: str, session_id: str, request: AttachmentIn "created_at": now(), "text_sha256": hashlib.sha256(content[:MAX_TEXT].encode()).hexdigest(), } - self._guard(metadata) + await self._guard(metadata) async with self.store._unit(): parent = await self._parent(repository_id, session_id, write=True, lock=True) existing = await self.records.request(parent.id, request.request_id) if existing is not None: - return self._replay(existing, request.filename, sha256) + return await self._replay(existing, request.filename, sha256) if await self.records.count_for_session(parent.id) >= 20: raise ValueError("This conversation already contains twenty attachments") - self._guard([metadata, content, raw.decode("utf8", errors="ignore")]) + await self._guard([metadata, content, raw.decode("utf8", errors="ignore")]) row = ForgeAssistantAttachmentEntity( id=identifier_value, session_id=parent.id, @@ -234,12 +234,12 @@ async def admit(self, repository_id: str, session_id: str, request: AttachmentIn data=metadata, ) await self.records.save(row) - return self._public(row) + return await self._public(row) async def list(self, repository_id: str, session_id: str) -> list[Data]: async with self.store._unit(): parent = await self._parent(repository_id, session_id) - return [self._public(row) for row in await self.records.for_session(parent.id)] + return [await self._public(row) for row in await self.records.for_session(parent.id)] async def get(self, repository_id: str, session_id: str, attachment_id: str) -> Data: async with self.store._unit(): @@ -247,7 +247,7 @@ async def get(self, repository_id: str, session_id: str, attachment_id: str) -> selected = await self.records.metadata(parent.id, identifier(attachment_id)) if selected is None: raise KeyError("Attachment not found in this conversation") - return self._public(selected) + return await self._public(selected) async def freeze(self, repository_id: str, session_id: str, ids: builtins.list[str]) -> builtins.list[Data]: if len(ids) > 8 or len(set(ids)) != len(ids): @@ -265,7 +265,7 @@ async def freeze(self, repository_id: str, session_id: str, ids: builtins.list[s row = selected[key] result.append( { - **self._verified(row), + **(await self._verified(row)), "text": row.extracted_text, "image": row.canonical_image, "image_sha256": row.image_sha256, diff --git a/src/firefly_forge/channel_actions.py b/src/firefly_forge/channel_actions.py index 10f0d6ad..d2b1580f 100644 --- a/src/firefly_forge/channel_actions.py +++ b/src/firefly_forge/channel_actions.py @@ -553,7 +553,7 @@ async def receive(self, provider: str, raw: bytes, headers: Mapping[str, str]) - data["repository_ids"].append((await self._register(provider, grant, settings))["id"]) else: event = normalized_event(provider, body, headers) - self.store.reject_credentials(event["text"]) + await self.store.admit_credentials(event["text"]) if event["actor"] not in settings["trusted_actors"]: reason = "untrusted_actor" else: diff --git a/src/firefly_forge/channel_products.py b/src/firefly_forge/channel_products.py index 03a9fd47..48868a6d 100644 --- a/src/firefly_forge/channel_products.py +++ b/src/firefly_forge/channel_products.py @@ -105,7 +105,7 @@ async def authorize(self, repo: Data, command: Any, receipt_id: str | None) -> D or current_origin["name"] != repo["name"] ): raise ValueError("Signed origin no longer matches its exact connected repository") - self.store.reject_credentials(command.model_dump(exclude_none=True)) + await self.store.admit_credentials(command.model_dump(exclude_none=True)) if command.action == "roles" and command.operation == "configure": self.store.roles.snapshot(ProjectRoles.model_validate(command.roles), self.store.policies.selection()) project = await self.projects.project(command.project_id) if command.project_id else None @@ -411,7 +411,7 @@ async def _proposal_reference( + json.dumps(turn["reply"].get("proposal"), indent=2) + "\n```\n", } - self.store.reject_credentials(sources) + await self.store.admit_credentials(sources) digest = hashlib.sha256(json.dumps(sources, sort_keys=True).encode()).hexdigest() async def intent(value: Data) -> None: diff --git a/src/firefly_forge/cli.py b/src/firefly_forge/cli.py index 77b3d320..280fcfe2 100644 --- a/src/firefly_forge/cli.py +++ b/src/firefly_forge/cli.py @@ -815,6 +815,181 @@ def external_mcp() -> None: """Review external tool connections and project grants as a factory administrator.""" +@main.group("connections") +def connections() -> None: + """Manage external connection authorization in the factory control plane.""" + + +@connections.group("oauth") +def connection_oauth() -> None: + """Prepare browser consent and inspect durable OAuth connection state.""" + + +@connection_oauth.command("policy-list") +def oauth_policy_list() -> None: + """Read the current server-owned provider admission policy.""" + with client() as connection: + display(connection.oauth_provider_policies()) + + +@connection_oauth.command("local-policy") +@click.option("--origin", required=True) +@click.option("--enable/--disable", default=True) +@click.option("--expected-revision", type=click.IntRange(0, 2_147_483_646), required=True) +@click.option("--request-id", required=True) +def local_oauth_policy(origin: str, enable: bool, expected_revision: int, request_id: str) -> None: + """Admit the fixed local repository service under the server's development gates.""" + with client() as connection: + display( + connection.configure_local_oauth_provider_policy( + { + "enabled": enable, + "local_origin": origin, + "expected_revision": expected_revision, + "request_id": request_id, + } + ) + ) + + +@connection_oauth.command("providers") +def connection_oauth_providers() -> None: + with client() as connection: + display(connection.connection_oauth_providers()) + + +@connection_oauth.command("show") +@click.argument("name") +def connection_oauth_show(name: str) -> None: + with client() as connection: + display(connection.connection_oauth(name)) + + +@connection_oauth.command("list") +@click.option("--project-id") +def connection_oauth_list(project_id: str | None) -> None: + """List the server-owned connection directory and available actions.""" + with client() as connection: + display(connection.connection_oauth_connections(project_id)) + + +@connection_oauth.command("effect") +@click.argument("name") +@click.option("--request-id", required=True) +def connection_oauth_effect(name: str, request_id: str) -> None: + """Observe one exact request receipt without repeating its provider call.""" + with client() as connection: + display(connection.connection_oauth_effect(name, request_id)) + + +@connection_oauth.command("configure") +@click.argument("name") +@click.option("--provider", required=True) +@click.option("--client-id", required=True) +@click.option( + "--authentication", type=click.Choice(["client_secret_post", "client_secret_basic"]), default="client_secret_post" +) +@click.option("--project-id") +@click.option("--public-client", is_flag=True, default=None) +@click.option("--client-secret-file", type=click.Path(exists=True, dir_okay=False, path_type=Path)) +def connection_oauth_configure( + name: str, + provider: str, + client_id: str, + authentication: str, + project_id: str | None, + public_client: bool | None, + client_secret_file: Path | None, +) -> None: + request = { + "provider": provider, + "client_id": client_id, + "authentication": authentication, + "project_id": project_id, + "public_client": public_client, + } + if client_secret_file: + request["client_secret"] = private_secret_file(client_secret_file) + with client() as connection: + display(connection.configure_connection_oauth(name, request)) + + +@connection_oauth.command("supersede") +@click.argument("name") +@click.option("--expected-revision", type=click.IntRange(min=1), required=True) +@click.option("--unknown-effect-id", multiple=True, required=True) +@click.option("--reason", required=True) +@click.option("--acknowledge-unknown", is_flag=True, required=True) +@click.option("--provider", required=True) +@click.option("--client-id", required=True) +@click.option( + "--authentication", type=click.Choice(["client_secret_post", "client_secret_basic"]), default="client_secret_post" +) +@click.option("--project-id") +@click.option("--public-client", is_flag=True, default=None) +@click.option("--client-secret-file", type=click.Path(exists=True, dir_okay=False, path_type=Path)) +def connection_oauth_supersede( + name: str, + expected_revision: int, + unknown_effect_id: tuple[str, ...], + reason: str, + acknowledge_unknown: bool, + provider: str, + client_id: str, + authentication: str, + project_id: str | None, + public_client: bool | None, + client_secret_file: Path | None, +) -> None: + """Start a new admission while preserving the explicitly acknowledged unknown history.""" + registration = { + "provider": provider, + "client_id": client_id, + "authentication": authentication, + "project_id": project_id, + "public_client": public_client, + } + if client_secret_file: + registration["client_secret"] = private_secret_file(client_secret_file) + with client() as connection: + display( + connection.supersede_connection_oauth( + name, + { + "expected_revision": expected_revision, + "unknown_effect_ids": list(unknown_effect_id), + "reason": reason, + "acknowledge_unknown": acknowledge_unknown, + "registration": registration, + }, + ) + ) + + +@connection_oauth.command("prepare") +@click.argument("name") +def connection_oauth_prepare(name: str) -> None: + """Return a short-lived link to open in your authenticated factory browser.""" + with client() as connection: + display(connection.prepare_connection_oauth(name)) + + +@connection_oauth.command("refresh") +@click.argument("name") +@click.option("--request-id", required=True) +def connection_oauth_refresh(name: str, request_id: str) -> None: + with client() as connection: + display(connection.refresh_connection_oauth(name, request_id)) + + +@connection_oauth.command("disconnect") +@click.argument("name") +def connection_oauth_disconnect(name: str) -> None: + """Disconnect locally; remote provider revocation remains a separate action.""" + with client() as connection: + display(connection.disconnect_connection_oauth(name)) + + @external_mcp.command("catalog") def external_mcp_catalog() -> None: with client() as connection: @@ -836,6 +1011,21 @@ def configure_external_mcp(connector: str, enable: bool, key_file: Path | None, ) +@external_mcp.command("oauth") +@click.argument("connector", type=click.Choice(["github", "local-repository-tools"])) +@click.option("--connection", "connection_name", required=True) +@click.option("--project-id", required=True) +@click.option("--enable/--disable", default=True) +def link_external_mcp_oauth(connector: str, connection_name: str, project_id: str, enable: bool) -> None: + """Link an already authorized native connection; no token is exported.""" + with client() as connection: + display( + connection.link_external_mcp_oauth( + connector, {"connection_name": connection_name, "project_id": project_id, "enabled": enable} + ) + ) + + @external_mcp.command("discover") @click.argument("connector") def discover_external_mcp(connector: str) -> None: diff --git a/src/firefly_forge/client.py b/src/firefly_forge/client.py index 5f344290..995ea0fc 100644 --- a/src/firefly_forge/client.py +++ b/src/firefly_forge/client.py @@ -4,6 +4,7 @@ from __future__ import annotations import base64 +import re from pathlib import Path from typing import TYPE_CHECKING, Any, Literal, Self from uuid import UUID @@ -580,6 +581,67 @@ def search_configuration(self) -> dict[str, Any]: def external_mcp_catalog(self) -> list[dict[str, Any]]: return list(self.request("GET", "tools/mcp")) + @staticmethod + def _oauth_name(name: str) -> str: + if name == "providers" or not re.fullmatch(r"[a-z][a-z0-9-]{0,63}", name): + raise ValueError("Invalid OAuth connection name") + return name + + def oauth_provider_policies(self) -> dict[str, Any]: + return dict(self.request("GET", "oauth-provider-policies")) + + def configure_local_oauth_provider_policy(self, request: dict[str, Any]) -> dict[str, Any]: + from firefly_forge.oauth_provider_policy_models import OAuthProviderPolicyInput + + payload = OAuthProviderPolicyInput.model_validate(request).model_dump() + return dict(self.request("PUT", "oauth-provider-policies/local-repository-tools", json=payload)) + + def connection_oauth_providers(self) -> list[dict[str, Any]]: + return list(self.request("GET", "connection-oauth/providers")) + + def connection_oauth_connections(self, project_id: str | None = None) -> list[dict[str, Any]]: + if project_id is not None and not re.fullmatch(r"[a-f0-9]{32}", project_id): + raise ValueError("Select an exact project identifier") + return list(self.request("GET", "connection-oauth", params={"project_id": project_id} if project_id else {})) + + def connection_oauth(self, name: str) -> dict[str, Any]: + return dict(self.request("GET", f"connection-oauth/{self._oauth_name(name)}")) + + def connection_oauth_effect(self, name: str, request_id: str) -> dict[str, Any]: + if not re.fullmatch(r"[a-f0-9]{32}", request_id): + raise ValueError("Select an exact effect request identifier") + return dict(self.request("GET", f"connection-oauth/{self._oauth_name(name)}/effects/{request_id}")) + + def supersede_connection_oauth(self, name: str, request: dict[str, Any]) -> dict[str, Any]: + from firefly_forge.connection_oauth_models import OAuthSupersedeInput + + model = OAuthSupersedeInput.model_validate(request) + payload = model.model_dump(exclude={"registration": {"client_secret"}}) + if model.registration.client_secret is not None: + payload["registration"]["client_secret"] = model.registration.client_secret.get_secret_value() + return dict(self.request("POST", f"connection-oauth/{self._oauth_name(name)}/supersede", json=payload)) + + def configure_connection_oauth(self, name: str, request: dict[str, Any]) -> dict[str, Any]: + from firefly_forge.connection_oauth_models import OAuthConnectionInput + + model = OAuthConnectionInput.model_validate(request) + payload = model.model_dump(exclude={"client_secret"}) + if model.client_secret is not None: + payload["client_secret"] = model.client_secret.get_secret_value() + return dict(self.request("PUT", f"connection-oauth/{self._oauth_name(name)}", json=payload)) + + def prepare_connection_oauth(self, name: str) -> dict[str, Any]: + return dict(self.request("POST", f"connection-oauth/{self._oauth_name(name)}/prepare")) + + def refresh_connection_oauth(self, name: str, request_id: str) -> dict[str, Any]: + from firefly_forge.connection_oauth_controllers import OAuthRefreshInput + + body = OAuthRefreshInput(request_id=request_id) + return dict(self.request("POST", f"connection-oauth/{self._oauth_name(name)}/refresh", json=body.model_dump())) + + def disconnect_connection_oauth(self, name: str) -> dict[str, Any]: + return dict(self.request("POST", f"connection-oauth/{self._oauth_name(name)}/disconnect")) + def configure_external_mcp(self, connector: str, request: dict[str, Any]) -> dict[str, Any]: from firefly_forge.mcp_registry import MCPConnectionInput, _connector @@ -587,6 +649,13 @@ def configure_external_mcp(self, connector: str, request: dict[str, Any]) -> dic model = MCPConnectionInput.model_validate(request) return dict(self.request("PUT", f"tools/mcp/{connector}", json=model.model_dump())) + def link_external_mcp_oauth(self, connector: str, request: dict[str, Any]) -> dict[str, Any]: + from firefly_forge.mcp_registry import MCPOAuthConnectionInput, _connector + + _connector(connector) + model = MCPOAuthConnectionInput.model_validate(request) + return dict(self.request("PUT", f"tools/mcp/{connector}/oauth", json=model.model_dump())) + def discover_external_mcp(self, connector: str) -> dict[str, Any]: from firefly_forge.mcp_registry import _connector diff --git a/src/firefly_forge/collaboration.py b/src/firefly_forge/collaboration.py index 123a49b8..c31ad32d 100644 --- a/src/firefly_forge/collaboration.py +++ b/src/firefly_forge/collaboration.py @@ -345,7 +345,7 @@ async def product(self, repository_id: str) -> Data | None: return copy.deepcopy(row.data) if row else None async def save_product(self, repository_id: str, request: ProductDefinition) -> Data: - self.store.reject_credentials(request.model_dump()) + await self.store.admit_credentials(request.model_dump()) if request.architecture is not None and not request.architecture.reviewed: raise ValueError("Review the architecture proposal before saving the product definition") await ProductDesign(self.store).validate_review(repository_id, request) @@ -446,7 +446,7 @@ async def receive( event["issue"]["url"] = self._ticket_url(repo, event["issue"]) if event["issue"]["number"] <= 0: raise ValueError("invalid_issue") - self.store.reject_credentials(event) + await self.store.admit_credentials(event) reason = self._allowed(repo, settings, event, provider) if not reason: command = RepositoryCommand.parse(event.pop("text")) diff --git a/src/firefly_forge/connection_oauth.py b/src/firefly_forge/connection_oauth.py new file mode 100644 index 00000000..6d7d7f33 --- /dev/null +++ b/src/firefly_forge/connection_oauth.py @@ -0,0 +1,1355 @@ +# Copyright 2026 Firefly Software Foundation. SPDX-License-Identifier: Apache-2.0 +"""PostgreSQL-authoritative connection OAuth, separate from operator login and SCM.""" + +from __future__ import annotations + +import asyncio +import hashlib +import hmac +import json +import re +import secrets +from collections.abc import AsyncIterator, Awaitable, Callable, Mapping +from contextlib import asynccontextmanager +from dataclasses import asdict +from datetime import datetime, timedelta +from typing import Any, cast +from urllib.parse import urlencode, urlsplit +from uuid import UUID, uuid4 + +from cryptography.fernet import Fernet, InvalidToken +from pyfly.container import service +from pyfly.kernel.lifecycle import CONSUMER_PHASE +from pyfly.oauth2 import OAuth2Client, OAuth2ClientError, OAuth2Endpoints, OAuth2Tokens, generate_pkce +from sqlalchemy import func, literal, select, text, union_all +from sqlalchemy.dialects.postgresql import JSONB +from sqlalchemy.ext.asyncio import AsyncSession + +from firefly_forge.connection_oauth_models import ( + OAuthChallenge, + OAuthConnectionInput, + OAuthConnectionSummary, + OAuthDisposition, + OAuthEffectReceipt, + OAuthEffectSummary, + OAuthPolicyBinding, + OAuthProvider, + OAuthSupersedeInput, +) +from firefly_forge.connection_oauth_persistence import ( + OAuthAttemptEntity, + OAuthConnectionEntity, + OAuthConnectionRepository, + OAuthCredentialEvidenceEntity, + OAuthEffectEntity, + OAuthEventEntity, + OAuthGrantEntity, + OAuthRegistrationEntity, +) +from firefly_forge.identity import Principal +from firefly_forge.journal import digest as packet_digest +from firefly_forge.oauth_authority import OAuthAccessDenied as OAuthAccessDenied +from firefly_forge.oauth_authority import require_oauth_administrator +from firefly_forge.oauth_credential_fingerprints import MAX_HISTORY, MAX_REPRESENTATIONS, OAuthCredentialMatcher +from firefly_forge.project_persistence import ForgeProjectEntity +from firefly_forge.secrets import contains_known_credential +from firefly_forge.store import Store + +Data = dict[str, Any] +GRANT_RESERVATION_REPRESENTATIONS = 32 + + +def digest(value: str) -> str: + return hashlib.sha256(value.encode()).hexdigest() + + +@service +class ConnectionOAuth: + phase = CONSUMER_PHASE - 1 + + def __init__( + self, + store: Store, + *, + encryption_key: str, + browser_origin: str, + catalog: Mapping[str, OAuthProvider] | None = None, + records: OAuthConnectionRepository | None = None, + allow_loopback_http: bool = False, + policy_lookup: Callable[[AsyncSession, str], Awaitable[OAuthPolicyBinding | None]] | None = None, + policy_directory: Callable[[Principal], Awaitable[Data]] | None = None, + ) -> None: + self.store, self.cipher = store, Fernet(encryption_key.encode()) + self._secrets = {"FORGE_CONNECTION_OAUTH_SECRET_ENCRYPTION_KEY": encryption_key} + self.matcher = OAuthCredentialMatcher(encryption_key, store.schema) + self.store.vault_credential_admission = self.admit_credentials + self.records = records or OAuthConnectionRepository() + self.browser_origin = browser_origin + self.catalog = dict(catalog or {}) + self.policy_lookup, self.policy_directory = policy_lookup, policy_directory + self.loopback = allow_loopback_http is True + if browser_origin: + self._endpoint(browser_origin, origin=True) + for name, policy in self.catalog.items(): + if name != policy.id or not re.fullmatch(r"[a-z][a-z0-9-]{0,63}", name): + raise ValueError("Invalid admitted OAuth provider") + for endpoint in (policy.issuer, policy.authorization_endpoint, policy.token_endpoint, policy.resource): + self._endpoint(endpoint) + if not policy.scopes or len(set(policy.scopes)) != len(policy.scopes) or len(policy.scopes) > 64: + raise ValueError("Admit bounded unique OAuth scopes") + if any(not re.fullmatch(r"[\x21\x23-\x5b\x5d-\x7e]{1,256}", scope) for scope in policy.scopes): + raise ValueError("Invalid admitted OAuth scope") + if len(" ".join(policy.scopes)) > 4096: + raise ValueError("Admitted OAuth scope packet exceeds its bound") + + def _remember(self, payload: Data) -> None: + for value in payload.values(): + if isinstance(value, str) and value: + self._secrets["FORGE_CONNECTION_OAUTH_SECRET_" + digest(value)] = value + + def redaction_settings(self) -> dict[str, str]: + return dict(self._secrets) + + async def start(self) -> None: + async with self.store._unit() as session: + await self._vault_lock(session) + registrations = list(await session.scalars(select(OAuthRegistrationEntity).limit(1025))) + grants = list(await session.scalars(select(OAuthGrantEntity).limit(1025))) + if len(registrations) > 1024 or len(grants) > 1024: + raise RuntimeError("OAuth credential history requires a reviewed retention checkpoint") + for registration in registrations: + payload = self._open( + registration.encrypted_secret, + self._client_context(registration.connection_id, registration.revision, registration.data), + ) + self._remember(payload) + await self._credential_evidence( + session, registration.connection_id, "registration", registration.id, registration.revision, payload + ) + for grant in grants: + row = await session.get(OAuthConnectionEntity, grant.connection_id) + if row is None: + raise ValueError("OAuth connection history is unavailable") + payload = self._open(grant.encrypted_data, self._grant_context(row, grant)) + self._remember(payload) + if payload: + await self._credential_evidence(session, row.id, "grant", grant.id, grant.revision, payload) + + async def _vault_lock(self, session: AsyncSession) -> None: + await session.execute( + text("SELECT pg_advisory_xact_lock(hashtextextended(:key, 0))"), + {"key": self.store.schema + ":connection-oauth:credential-admission"}, + ) + + async def _history(self, session: AsyncSession) -> list[OAuthCredentialEvidenceEntity]: + rows = list(await session.scalars(select(OAuthCredentialEvidenceEntity).limit(MAX_HISTORY + 1))) + if len(rows) > MAX_HISTORY: + raise ValueError("OAuth credential history exceeds its bound; review retention before admission") + for row in rows: + expected = { + "row_id": row.id.hex, + "connection_id": row.connection_id.hex, + "kind": row.kind, + "source_id": row.source_id.hex, + "revision": row.revision, + } + if not isinstance(row.data, dict) or any(row.data.get(key) != value for key, value in expected.items()): + raise ValueError("OAuth credential history source context is invalid") + self.matcher.contains("", [row.data for row in rows]) + return rows + + async def _credential_evidence( + self, + session: AsyncSession, + connection_id: UUID, + kind: str, + source_id: UUID, + revision: int, + payload: Data, + *, + reservation: OAuthEffectEntity | None = None, + ) -> None: + await self._vault_lock(session) + rows = await self._history(session) + if any(row.kind == kind and row.source_id == source_id and row.revision == revision for row in rows): + return + evidence_id = uuid4() + values = [value for value in payload.values() if isinstance(value, str) and value] + packet = self.matcher.packet(evidence_id.hex, kind, source_id.hex, revision, values, connection_id.hex) + self.matcher.contains("", [packet]) + await self._history_capacity( + session, rows, representations=len(packet["representations"]), reservation=reservation + ) + session.add( + OAuthCredentialEvidenceEntity( + id=evidence_id, + connection_id=connection_id, + kind=kind, + source_id=source_id, + revision=revision, + data=packet, + ) + ) + await session.flush() + + @staticmethod + def _reservation_packet(effect: OAuthEffectEntity) -> Data: + return { + "version": 1, + "effect_id": effect.id.hex, + "connection_id": effect.connection_id.hex, + "kind": effect.kind, + "registration_revision": effect.data["registration_revision"], + "rows": 1, + "representations": GRANT_RESERVATION_REPRESENTATIONS, + } + + def _verify_reservation(self, effect: OAuthEffectEntity, *, required: bool = True) -> None: + marker = effect.data.get("history_reservation") + if marker is None and not required: + return + if ( + not isinstance(marker, dict) + or effect.kind not in {"code", "refresh"} + or any( + type(marker.get(key)) is not int + for key in ("version", "registration_revision", "rows", "representations") + ) + or type(effect.data.get("registration_revision")) is not int + or not 1 <= effect.data["registration_revision"] <= 2_147_483_647 + or marker != self._reservation_packet(effect) + ): + raise OAuthDisposition("history_reservation_invalid") + + async def _history_capacity( + self, + session: AsyncSession, + rows: list[OAuthCredentialEvidenceEntity], + *, + representations: int, + reservation: OAuthEffectEntity | None = None, + ) -> None: + # The caller holds the vault lock after its connection/authority locks. + # Reading other effects without row locks avoids reversing that order. + effects = list( + await session.scalars( + select(OAuthEffectEntity).where(OAuthEffectEntity.state == "executing").limit(MAX_HISTORY + 1) + ) + ) + if len(effects) > MAX_HISTORY: + raise OAuthDisposition("history_capacity_exhausted") + for effect in effects: + self._verify_reservation(effect, required=False) + if reservation is not None: + self._verify_reservation(reservation) + if not any(effect.id == reservation.id for effect in effects): + raise OAuthDisposition("history_reservation_unavailable") + effects = [effect for effect in effects if effect.id != reservation.id] + if len(rows) + len(effects) + 1 > MAX_HISTORY: + raise OAuthDisposition("history_capacity_exhausted") + represented = sum(len(row.data["representations"]) for row in rows) + if represented + len(effects) * GRANT_RESERVATION_REPRESENTATIONS + representations > MAX_REPRESENTATIONS: + raise OAuthDisposition("history_representation_capacity_exhausted") + + async def _reserve_history(self, session: AsyncSession, effect: OAuthEffectEntity) -> None: + await self._vault_lock(session) + await self._history_capacity( + session, await self._history(session), representations=GRANT_RESERVATION_REPRESENTATIONS + ) + effect.data = {**effect.data, "history_reservation": self._reservation_packet(effect)} + self._verify_reservation(effect) + + async def admit_credentials(self, value: Any) -> None: + # One statement sees evidence and source coverage at the same committed + # snapshot, including inside an ambient unit. It acquires no advisory lock. + evidence = OAuthCredentialEvidenceEntity + registration, grant = OAuthRegistrationEntity, OAuthGrantEntity + snapshot = union_all( + select( + literal("evidence").label("record_kind"), + evidence.id.label("row_id"), + evidence.connection_id.label("connection_id"), + evidence.kind.label("source_kind"), + evidence.source_id.label("source_id"), + evidence.revision.label("revision"), + evidence.data.label("data"), + ).limit(MAX_HISTORY + 1), + select( + literal("registration"), + registration.id, + registration.connection_id, + literal("registration"), + registration.id, + registration.revision, + literal(None, type_=JSONB), + ).limit(MAX_HISTORY + 1), + select( + literal("grant"), + grant.id, + grant.connection_id, + literal("grant"), + grant.id, + grant.revision, + literal(None, type_=JSONB), + ).limit(MAX_HISTORY + 1), + ) + async with self.store._unit(autoflush=False) as session: + records = list((await session.execute(snapshot)).mappings()) + groups = { + kind: [row for row in records if row["record_kind"] == kind] + for kind in ("evidence", "registration", "grant") + } + if any(len(rows) > MAX_HISTORY for rows in groups.values()): + raise ValueError("OAuth credential history exceeds its bound") + packets = [] + for row in groups["evidence"]: + expected = { + "row_id": row["row_id"].hex, + "connection_id": row["connection_id"].hex, + "kind": row["source_kind"], + "source_id": row["source_id"].hex, + "revision": row["revision"], + } + if not isinstance(row["data"], dict) or any( + row["data"].get(key) != item for key, item in expected.items() + ): + raise ValueError("OAuth credential history source context is invalid") + packets.append(row["data"]) + origins = {(row["source_kind"], row["source_id"], row["revision"]) for row in groups["evidence"]} + if any(("registration", row["row_id"], row["revision"]) not in origins for row in groups["registration"]): + raise ValueError("OAuth credential history is unavailable; initialize admission before continuing") + for row in groups["grant"]: + history = { + revision for kind, source, revision in origins if kind == "grant" and source == row["row_id"] + } + if not 1 <= row["revision"] <= MAX_HISTORY or history != set(range(1, row["revision"] + 1)): + raise ValueError("Retired OAuth credential history is incomplete; reviewed recovery is required") + if self.matcher.contains(value, packets) or contains_known_credential(value, self._secrets): + raise ValueError("Do not place configured credentials in public instructions, messages or tool data") + + async def stop(self) -> None: + self._secrets.clear() + + def _endpoint(self, value: str, *, origin: bool = False) -> None: + parsed = urlsplit(value) + try: + _ = parsed.port + if ( + len(value.encode()) > 2048 + or not parsed.hostname + or parsed.username is not None + or parsed.password is not None + or parsed.query + or parsed.fragment + or any(c.isspace() or ord(c) < 32 or ord(c) == 127 for c in value) + or (origin and parsed.path) + or ( + parsed.scheme != "https" + and not (self.loopback and parsed.scheme == "http" and parsed.hostname in {"127.0.0.1", "::1"}) + ) + ): + raise ValueError + except ValueError: + raise ValueError("Connection endpoints require admitted HTTPS origins") from None + + def _context(self, purpose: str, connection_id: UUID, revision: int, extra: str = "") -> Data: + return { + "version": 1, + "schema": self.store.schema, + "purpose": purpose, + "connection_id": connection_id.hex, + "revision": revision, + "extra": extra, + } + + def _seal(self, context: Data, payload: Data) -> str: + raw = json.dumps({"context": context, "payload": payload}, separators=(",", ":"), sort_keys=True).encode() + if len(raw) > 262144: + raise ValueError("OAuth secret packet exceeds its bound") + return self.cipher.encrypt(raw).decode() + + def _grant_context(self, row: OAuthConnectionEntity, grant: OAuthGrantEntity) -> Data: + context = self._context("grant", row.id, grant.registration_revision, grant.family) + return { + **context, + "grant_revision": grant.revision, + "actor_id": grant.actor_id.hex, + "metadata_digest": digest(json.dumps(grant.data, sort_keys=True, separators=(",", ":"))), + "expires_at": grant.expires_at.isoformat(), + } + + def _client_context(self, connection_id: UUID, revision: int, data: Data) -> Data: + return self._context( + "client", connection_id, revision, digest(json.dumps(data, sort_keys=True, separators=(",", ":"))) + ) + + def providers(self) -> list[Data]: + requirements = { + "github": "Existing GitHub App connections work. This OAuth client contract still needs admission.", + "figma": "Figma must approve the client; its exact OAuth registration and scoped adapter are required.", + "sentry": "An admitted issuer, OAuth registration and project-scoped adapter are required.", + "grafana": "An approved managed HTTPS endpoint and scoped OAuth adapter are required.", + "playwright": "Use the native browser runner; no external OAuth connection is admitted.", + } + catalog = {} if self.policy_lookup is not None else self.catalog + return [ + { + "provider": name, + "status": "registration_available" + if name in catalog and not catalog[name].prerequisite and self.browser_origin + else "prerequisite_required", + "reason": requirements.get(name, "This provider uses an explicitly admitted control-plane policy."), + "agent_ready": False, + } + for name in dict.fromkeys((*requirements, *catalog)) + ] + + def _open(self, encoded: str, context: Data) -> Data: + try: + value = json.loads(self.cipher.decrypt(encoded.encode())) + if value["context"] != context or not isinstance(value["payload"], dict): + raise ValueError + return cast(Data, value["payload"]) + except (InvalidToken, ValueError, KeyError, TypeError): + raise ValueError("OAuth ciphertext context is invalid") from None + + @asynccontextmanager + async def _locked(self, name: str) -> AsyncIterator[AsyncSession]: + if name == "providers" or not re.fullmatch(r"[a-z][a-z0-9-]{0,63}", name): + raise ValueError("Invalid connection name") + async with self.store._unit() as session: + await session.execute( + text("SELECT pg_advisory_xact_lock(hashtextextended(:key, 0))"), + {"key": self.store.schema + ":connection-oauth:" + name}, + ) + yield session + + async def _time(self, session: AsyncSession) -> datetime: + return cast(datetime, await session.scalar(select(func.clock_timestamp()))) + + async def _authority(self, session: AsyncSession, actor: Principal) -> None: + await require_oauth_administrator(session, actor) + + async def _admitted_policy(self, session: AsyncSession, name: str) -> OAuthPolicyBinding | None: + if self.policy_lookup is not None: + return await self.policy_lookup(session, name) + policy = self.catalog.get(name) + return OAuthPolicyBinding(policy, 0, packet_digest(asdict(policy))) if policy else None + + async def provider_directory(self, actor: Principal) -> list[Data]: + result = self.providers() + if self.policy_directory is not None: + state = await self.policy_directory(actor) + rows = state["policies"] + if state["local_development_available"] or rows: + async with self.store._unit() as session: + await self._authority(session, actor) + active = await self._admitted_policy(session, "local-repository-tools") is not None + result.append( + { + "provider": "local-repository-tools", + "status": "registration_available" if active else "prerequisite_required", + "reason": ( + "Connect an explicitly configured local test service; " + "project tools require separate review." + ), + "agent_ready": False, + } + ) + await self.store.admit_credentials(result) + return result + + async def _stored_registration(self, session: AsyncSession, row: OAuthConnectionEntity) -> OAuthRegistrationEntity: + result = await session.scalar( + select(OAuthRegistrationEntity).where( + OAuthRegistrationEntity.connection_id == row.id, OAuthRegistrationEntity.revision == row.revision + ) + ) + if result is None: + raise ValueError("Connection registration is unavailable") + if ( + result.data.get("project_id") + and await session.get(ForgeProjectEntity, UUID(result.data["project_id"])) is None + ): + raise KeyError("Connection project is unavailable") + self._open(result.encrypted_secret, self._client_context(row.id, row.revision, result.data)) + return result + + def _policy_matches(self, registration: OAuthRegistrationEntity, binding: OAuthPolicyBinding | None) -> bool: + return ( + binding is not None + and asdict(binding.provider) + == {**registration.data["policy"], "scopes": tuple(registration.data["policy"]["scopes"])} + and ( + self.policy_lookup is None + or registration.data.get("policy_revision") == binding.revision + and registration.data.get("policy_digest") == binding.digest + ) + ) + + async def _registration(self, session: AsyncSession, row: OAuthConnectionEntity) -> OAuthRegistrationEntity: + result = await self._stored_registration(session, row) + if not self._policy_matches(result, await self._admitted_policy(session, result.data["provider"])): + raise ValueError("Admitted provider policy changed; configure a new revision") + return result + + async def _required(self, name: str) -> OAuthConnectionEntity: + row = await self.records.named(name) + if row is None: + raise KeyError("Connection not found") + return row + + async def _event( + self, session: AsyncSession, row: OAuthConnectionEntity, kind: str, actor: Principal, **data: Any + ) -> None: + session.add( + OAuthEventEntity( + connection_id=row.id, + data={ + "kind": kind, + "actor_id": actor.id.hex, + "revision": row.revision, + "at": (await self._time(session)).isoformat(), + **data, + }, + ) + ) + + async def _effect_packets( + self, session: AsyncSession, row: OAuthConnectionEntity, *, ignore: UUID | None = None + ) -> list[Data]: + effects = list( + await session.scalars( + select(OAuthEffectEntity) + .where( + OAuthEffectEntity.connection_id == row.id, + OAuthEffectEntity.state.in_(("executing", "unknown")), + ) + .order_by(OAuthEffectEntity.created_at, OAuthEffectEntity.id) + .limit(101) + .with_for_update() + ) + ) + if len(effects) > 100: + raise ValueError("Connection uncertainty exceeds its reviewed history bound") + at = await self._time(session) + return [ + OAuthEffectSummary.model_validate( + { + "id": effect.id.hex, + "kind": effect.kind, + "state": "unknown" if effect.state == "unknown" or effect.lease_expires_at <= at else "executing", + "registration_revision": effect.data["registration_revision"], + "lease_expired": effect.lease_expires_at <= at, + } + ).model_dump() + for effect in effects + if effect.id != ignore + ] + + @staticmethod + def _effect_block(row: OAuthConnectionEntity, packets: list[Data]) -> str | None: + if any(packet["state"] == "executing" for packet in packets): + return "effect_executing" + if any(packet["registration_revision"] == row.revision for packet in packets): + return "effect_unknown_explicit_supersession_required" + return None + + @staticmethod + def _summary_packet(row: OAuthConnectionEntity, data: Data, secret: str | None, effects: list[Data]) -> Data: + pending = [ + packet + for packet in effects + if packet["registration_revision"] == row.revision or packet["state"] == "executing" + ] + archived = [packet for packet in effects if packet not in pending] + blocked = ConnectionOAuth._effect_block(row, effects) + state = "executing" if blocked == "effect_executing" else "unknown" if blocked else "none" + result: Data = { + "name": row.name, + "revision": row.revision, + "provider": data["provider"], + "client_id": data["client_id"], + "project_id": data.get("project_id"), + "status": row.status, + "resource": data["policy"]["resource"], + "scopes": data["policy"]["scopes"], + "agent_ready": False, + "remote_revocation_supported": False, + "authentication": data["authentication"], + "public_client": not bool(secret), + "secret_configured": bool(secret), + "callback_uri": data["callback"], + "refresh_available": False, + "grant_expires_at": None, + "effect_state": state, + "unresolved_effects": pending, + "archived_unknown_effects": archived, + "reconciliation_required": bool(effects), + "allowed_actions": { + "configure": not blocked, + "authorize": not blocked and row.status != "disconnected", + "refresh": False, + "disconnect": row.status != "disconnected", + "supersede": state == "unknown", + }, + } + return result + + async def _summary( + self, session: AsyncSession, row: OAuthConnectionEntity, actor: Principal, *, completing: UUID | None = None + ) -> Data: + # Diagnostics and local revocation remain available after policy withdrawal. + # Effect-producing paths still require _registration and current admission. + registration = await self._stored_registration(session, row) + binding = await self._admitted_policy(session, registration.data["provider"]) + policy_current = self._policy_matches(registration, binding) + secret = self._open( + registration.encrypted_secret, self._client_context(row.id, row.revision, registration.data) + ).get("secret") + effects = await self._effect_packets(session, row, ignore=completing) + blocked = self._effect_block(row, effects) + result = self._summary_packet(row, registration.data, secret, effects) + grant = await self._grant(session, row) + if grant is not None: + result.update(family=grant.family, grant_revision=grant.revision, grant_status=grant.status) + payload = self._open(grant.encrypted_data, self._grant_context(row, grant)) + result["refresh_available"] = bool(payload.get("refresh_token")) + result["grant_expires_at"] = grant.expires_at.isoformat() + result["allowed_actions"]["refresh"] = ( + not blocked and bool(payload.get("refresh_token")) and grant.actor_id == actor.id + ) + result["policy_current"] = policy_current + if not policy_current: + result["allowed_actions"].update(authorize=False, refresh=False) + if binding is None: + result["allowed_actions"].update(configure=False, supersede=False) + return OAuthConnectionSummary.model_validate(result).model_dump() + + async def _grant(self, session: AsyncSession, row: OAuthConnectionEntity) -> OAuthGrantEntity | None: + return await session.scalar( + select(OAuthGrantEntity) + .where( + OAuthGrantEntity.connection_id == row.id, + OAuthGrantEntity.registration_revision == row.revision, + OAuthGrantEntity.status == "authorized_unverified", + ) + .order_by(OAuthGrantEntity.created_at.desc()) + .limit(1) + ) + + async def _effects_available(self, session: AsyncSession, row: OAuthConnectionEntity) -> str | None: + effects = list( + await session.scalars( + select(OAuthEffectEntity) + .where( + OAuthEffectEntity.connection_id == row.id, + OAuthEffectEntity.state.in_(("executing", "unknown")), + ) + .with_for_update() + ) + ) + now = await self._time(session) + for effect in effects: + if effect.state == "executing" and effect.lease_expires_at <= now: + effect.state = "unknown" + row.status = "reauthorization_required" + if any(effect.state == "executing" for effect in effects): + return "effect_executing" + # Reauthorization opens a new registration revision. An unresolved old + # revision remains archived and can never dispatch its rotating token again. + if any( + effect.state == "unknown" and effect.data["registration_revision"] == row.revision for effect in effects + ): + return "effect_unknown_reauthorization_required" + return None + + async def _admit_registration(self, packet: Data, secret: str | None) -> None: + await self.store.admit_credentials(packet) + if secret: + identifier = uuid4().hex + prospective = self.matcher.packet(identifier, "registration", identifier, 1, [secret]) + if self.matcher.contains(packet, [prospective]): + raise ValueError("Do not place configured credentials in public instructions, messages or tool data") + + async def configure(self, name: str, request: OAuthConnectionInput, actor: Principal) -> Data: + return await self._configure(name, request, actor, admission=self._admit_registration) + + async def supersede(self, name: str, request: OAuthSupersedeInput, actor: Principal) -> Data: + return await self._configure( + name, request.registration, actor, recovery=request, admission=self._admit_registration + ) + + async def _configure( + self, + name: str, + request: OAuthConnectionInput, + actor: Principal, + *, + recovery: OAuthSupersedeInput | None = None, + admission: Callable[[Data, str | None], Awaitable[None]] | None = None, + ) -> Data: + async with self._locked(name) as session: + await self._authority(session, actor) + row = await self.records.named(name) + if request.expected_revision is not None and request.expected_revision != (row.revision if row else 0): + raise ValueError("Connection changed; refresh its current configuration before saving") + binding = await self._admitted_policy(session, request.provider) + policy = binding.provider if binding else None + if policy is None or policy.prerequisite or not self.browser_origin: + raise ValueError("Provider registration prerequisites are not satisfied") + data: Data = { + "provider": request.provider, + "project_id": request.project_id, + "client_id": request.client_id, + "authentication": request.authentication, + "policy": asdict(policy), + "callback": self.browser_origin + "/api/v1/connection-oauth/" + name + "/callback", + } + if self.policy_lookup is not None: + assert binding is not None + data.update(policy_revision=binding.revision, policy_digest=binding.digest) + data = json.loads(json.dumps(data)) + if request.project_id and await session.get(ForgeProjectEntity, UUID(request.project_id)) is None: + raise KeyError("Connection project not found") + if recovery and row is None: + raise KeyError("Connection not found") + previous = None + effects: list[Data] = [] + unknown: set[str] = set() + if row: + effects = await self._effect_packets(session, row) + blocked = self._effect_block(row, effects) + if recovery: + if row.revision != recovery.expected_revision: + raise ValueError("Connection revision changed; review its current uncertainty") + unknown = { + packet["id"] + for packet in effects + if packet["state"] == "unknown" and packet["registration_revision"] == row.revision + } + if blocked == "effect_executing" or not unknown or set(recovery.unknown_effect_ids) != unknown: + raise ValueError( + "Select the exact current unknown effects; active effects cannot be superseded" + ) + if recovery.registration.client_secret is None and not recovery.registration.public_client: + raise ValueError("A new admission requires an explicit secret choice") + await self.store.admit_credentials(recovery.reason) + elif blocked: + raise OAuthDisposition(blocked) + previous = await session.scalar( + select(OAuthRegistrationEntity).where( + OAuthRegistrationEntity.connection_id == row.id, + OAuthRegistrationEntity.revision == row.revision, + ) + ) + explicit = request.client_secret is not None or request.public_client is True + if previous and previous.data != data and not explicit: + raise ValueError("A changed registration requires an explicit secret choice") + if previous and previous.data == data and not explicit: + result = await self._summary(session, cast(OAuthConnectionEntity, row), actor) + if admission: + await admission(result, None) + return result + if previous is None and not explicit: + raise ValueError("A new registration requires an explicit secret choice") + secret = request.client_secret.get_secret_value() if request.client_secret else None + if request.authentication == "client_secret_basic" and not secret: + raise ValueError("Basic authentication requires a confidential client secret") + if admission: + prospective = OAuthConnectionEntity( + id=row.id if row else uuid4(), + name=name, + revision=row.revision + 1 if row else 1, + status="authorization_required", + ) + packet = self._summary_packet(prospective, data, secret, effects) + await admission( + { + "summary": OAuthConnectionSummary.model_validate(packet).model_dump(), + "registration": data, + "recovery_reason": recovery.reason if recovery else None, + }, + secret, + ) + if recovery: + assert row is not None + for effect_id in unknown: + uncertain = await session.get(OAuthEffectEntity, UUID(effect_id)) + assert uncertain is not None + if uncertain.state == "executing": + uncertain.state = "unknown" + await self._event( + session, + row, + "uncertain_revision_superseded", + actor, + unknown_effect_ids=sorted(unknown), + previous_revision=row.revision, + reason=recovery.reason, + acknowledged_unknown=True, + ) + self._remember({"secret": secret}) + if row is None: + row = OAuthConnectionEntity(id=uuid4(), name=name, revision=1, status="authorization_required") + await self.records.save(row) + else: + row.revision += 1 + row.status = "authorization_required" + registration = OAuthRegistrationEntity( + id=uuid4(), + connection_id=row.id, + revision=row.revision, + data=data, + encrypted_secret=self._seal(self._client_context(row.id, row.revision, data), {"secret": secret}), + ) + session.add(registration) + await session.flush() + await self._credential_evidence( + session, row.id, "registration", registration.id, row.revision, {"secret": secret} + ) + await self._event(session, row, "registration_configured", actor) + return await self._summary(session, row, actor) + + async def directory(self, actor: Principal, *, project_id: str | None = None) -> list[Data]: + if project_id is not None and not re.fullmatch(r"[a-f0-9]{32}", project_id): + raise ValueError("Select an exact project identifier") + async with self.store._unit() as session: + await self._authority(session, actor) + if project_id and await session.get(ForgeProjectEntity, UUID(project_id)) is None: + raise KeyError("Connection project not found") + rows = list( + await session.scalars( + select(OAuthConnectionEntity).order_by(OAuthConnectionEntity.name).limit(101).with_for_update() + ) + ) + if len(rows) > 100: + raise ValueError("Connection directory exceeds its reviewed bound") + result = [] + for row in rows: + summary = await self._summary(session, row, actor) + if project_id is None or summary["project_id"] == project_id: + result.append(summary) + await self.store.admit_credentials(result) + return result + + async def summary(self, name: str, actor: Principal) -> Data: + async with self._locked(name) as session: + await self._authority(session, actor) + result = await self._summary(session, await self._required(name), actor) + await self.store.admit_credentials(result) + return result + + async def effect_receipt(self, name: str, request_id: str, actor: Principal) -> Data: + if not re.fullmatch(r"[a-f0-9]{32}", request_id): + raise ValueError("Select an exact effect request identifier") + async with self._locked(name) as session: + await self._authority(session, actor) + row = await self._required(name) + registration = await self._stored_registration(session, row) + binding = await self._admitted_policy(session, registration.data["provider"]) + effect = await session.scalar( + select(OAuthEffectEntity).where( + OAuthEffectEntity.connection_id == row.id, OAuthEffectEntity.request_id == request_id + ) + ) + if effect is None: + raise KeyError("Connection effect not found") + expired = effect.lease_expires_at <= await self._time(session) + result = OAuthEffectReceipt.model_validate( + { + "id": effect.id.hex, + "request_id": request_id, + "kind": effect.kind, + "state": "unknown" if effect.state == "executing" and expired else effect.state, + "registration_revision": effect.data["registration_revision"], + "lease_expired": expired, + "observed_at": effect.data.get("observed_at"), + "current_context": self._policy_matches(registration, binding) + and effect.data.get("actor_id") == actor.id.hex + and effect.data["registration_revision"] == row.revision + and row.status != "disconnected", + } + ).model_dump() + await self.store.admit_credentials(result) + return result + + async def prepare(self, name: str, actor: Principal) -> Data: + async with self._locked(name) as session: + await self._authority(session, actor) + row = await self._required(name) + await self._registration(session, row) + blocked = self._effect_block(row, await self._effect_packets(session, row)) + if blocked: + raise OAuthDisposition(blocked) + if row.status == "disconnected": + raise ValueError("Connection is disconnected; configure a new revision") + ticket, attempt_id = secrets.token_urlsafe(32), uuid4() + session.add( + OAuthAttemptEntity( + id=attempt_id, + connection_id=row.id, + revision=row.revision, + actor_id=actor.id, + kind="handoff", + digest=digest(ticket), + expires_at=await self._time(session) + timedelta(minutes=5), + encrypted_data=self._seal( + self._context("handoff", row.id, row.revision, attempt_id.hex), + { + "issuer": actor.issuer, + "subject": actor.subject, + }, + ), + ) + ) + await self._event(session, row, "browser_handoff_prepared", actor, attempt_id=attempt_id.hex) + result = { + "ticket": ticket, + "continuation_url": self.browser_origin + + "/api/v1/connection-oauth/" + + name + + "/continue?" + + urlencode({"ticket": ticket}), + } + await self.store.admit_credentials(result) + return result + + async def begin(self, name: str, ticket: str, actor: Principal, *, browser_authenticated: bool) -> OAuthChallenge: + if not ticket or len(ticket) > 128: + raise ValueError("Invalid browser handoff") + if not browser_authenticated or actor.kind == "service" or actor.authentication_method == "oidc_bearer": + raise ValueError("An authenticated human browser is required") + async with self._locked(name) as session: + await self._authority(session, actor) + row = await self._required(name) + registration = await self._registration(session, row) + blocked = self._effect_block(row, await self._effect_packets(session, row)) + if blocked: + raise OAuthDisposition(blocked) + handoff = await session.scalar( + select(OAuthAttemptEntity) + .where( + OAuthAttemptEntity.connection_id == row.id, + OAuthAttemptEntity.digest == digest(ticket), + OAuthAttemptEntity.kind == "handoff", + ) + .with_for_update() + ) + if handoff is None or handoff.consumed or handoff.expires_at <= await self._time(session): + raise ValueError("Browser handoff expired or consumed") + if handoff.actor_id != actor.id: + raise ValueError("Browser handoff actor does not match") + payload = self._open( + handoff.encrypted_data, self._context("handoff", row.id, handoff.revision, handoff.id.hex) + ) + if payload != {"issuer": actor.issuer, "subject": actor.subject}: + raise ValueError("Browser handoff actor does not match") + if row.revision != handoff.revision or row.status == "disconnected": + raise ValueError("Connection revision changed or disconnected") + handoff.consumed = True + state, nonce, pair, attempt_id = ( + secrets.token_urlsafe(32), + secrets.token_urlsafe(32), + generate_pkce(), + uuid4(), + ) + session.add( + OAuthAttemptEntity( + id=attempt_id, + connection_id=row.id, + revision=row.revision, + actor_id=actor.id, + kind="code", + digest=digest(state), + nonce_digest=digest(nonce), + expires_at=await self._time(session) + timedelta(minutes=5), + encrypted_data=self._seal( + self._context("code", row.id, row.revision, attempt_id.hex), + { + "verifier": pair.verifier, + "issuer": actor.issuer, + "subject": actor.subject, + }, + ), + ) + ) + await self._event(session, row, "authorization_started", actor, attempt_id=attempt_id.hex) + params = { + "response_type": "code", + "client_id": registration.data["client_id"], + "redirect_uri": registration.data["callback"], + "scope": " ".join(registration.data["policy"]["scopes"]), + "resource": registration.data["policy"]["resource"], + "state": state, + "code_challenge": pair.challenge, + "code_challenge_method": "S256", + } + result = OAuthChallenge( + registration.data["policy"]["authorization_endpoint"] + "?" + urlencode(params), nonce, attempt_id.hex + ) + await self.store.admit_credentials({"parameters": params, "challenge": asdict(result)}) + return result + + async def disconnect(self, name: str, actor: Principal) -> Data: + async with self._locked(name) as session: + await self._authority(session, actor) + row = await self._required(name) + row.status = "disconnected" + for grant in await session.scalars( + select(OAuthGrantEntity).where(OAuthGrantEntity.connection_id == row.id) + ): + grant.status = "revoked" + grant.encrypted_data = self._seal(self._grant_context(row, grant), {}) + await self._event(session, row, "locally_disconnected", actor) + result = await self._summary(session, row, actor) + await self.store.admit_credentials(result) + return result + + async def complete( + self, name: str, state: str, code: str, browser_nonce: str, actor: Principal, *, issuer: str + ) -> Data: + if not state or len(state) > 128 or not code or len(code.encode()) > 4096: + raise ValueError("Invalid authorization response") + if actor.kind == "service" or actor.authentication_method == "oidc_bearer": + raise ValueError("An authenticated human browser is required") + if self.store.session_provider is not None and self.store.session_provider.current() is not None: + raise OAuthDisposition("independent_effect_unit_required") + rejection: str | None = None + async with self._locked(name) as session: + await self._authority(session, actor) + row = await self._required(name) + registration = await self._registration(session, row) + attempt = await session.scalar( + select(OAuthAttemptEntity) + .where( + OAuthAttemptEntity.connection_id == row.id, + OAuthAttemptEntity.kind == "code", + OAuthAttemptEntity.digest == digest(state), + ) + .with_for_update() + ) + if attempt is None or attempt.consumed or attempt.expires_at <= await self._time(session): + raise ValueError("Authorization attempt expired or consumed") + if ( + attempt.actor_id != actor.id + or len(browser_nonce) > 128 + or not hmac.compare_digest(attempt.nonce_digest or "", digest(browser_nonce)) + or issuer != registration.data["policy"]["issuer"] + or attempt.revision != row.revision + or row.status == "disconnected" + ): + raise ValueError("Authorization actor, browser, issuer or revision does not match") + payload = self._open(attempt.encrypted_data, self._context("code", row.id, row.revision, attempt.id.hex)) + if payload["issuer"] != actor.issuer or payload["subject"] != actor.subject: + raise ValueError("Authorization actor does not match") + rejection = await self._effects_available(session, row) + if rejection is None: + attempt.consumed = True + effect = OAuthEffectEntity( + id=uuid4(), + connection_id=row.id, + request_id=attempt.id.hex, + kind="code", + state="executing", + lease_expires_at=await self._time(session) + timedelta(seconds=30), + data={ + "registration_revision": row.revision, + "actor_id": actor.id.hex, + "attempt_id": attempt.id.hex, + "request_digest": digest(state), + }, + ) + await self._reserve_history(session, effect) + session.add(effect) + await self._event( + session, row, "exchange_intent", actor, effect_id=effect.id.hex, attempt_id=attempt.id.hex + ) + frozen, effect_id = dict(registration.data), effect.id + secret = self._open( + registration.encrypted_secret, self._client_context(row.id, row.revision, registration.data) + )["secret"] + if rejection: + raise OAuthDisposition(rejection) + try: + await self._dispatch_fence(name, effect_id, actor) + async with self._client(frozen, secret) as client: + tokens = await client.exchange_code( + code, + redirect_uri=frozen["callback"], + code_verifier=payload["verifier"], + authentication=frozen["authentication"], + resource=frozen["policy"]["resource"], + ) + return await self._publish(name, effect_id, tokens, actor) + except BaseException as error: + await self._retain_failure(name, effect_id, actor, error) + raise + + def _client(self, frozen: Data, secret: str | None) -> OAuth2Client: + return OAuth2Client( + frozen["client_id"], + OAuth2Endpoints(frozen["policy"]["token_endpoint"]), + client_secret=secret, + timeout=10, + max_response_bytes=65536, + allow_loopback_http=self.loopback, + ) + + async def _dispatch_fence(self, name: str, effect_id: UUID, actor: Principal) -> None: + async with self._locked(name) as session: + await self._authority(session, actor) + row = await self._required(name) + await self._registration(session, row) + effect = await session.get(OAuthEffectEntity, effect_id) + if effect is None or effect.state != "executing" or effect.data["actor_id"] != actor.id.hex: + raise OAuthDisposition("effect_changed") + self._verify_reservation(effect) + if effect.data["registration_revision"] != row.revision or row.status == "disconnected": + raise OAuthDisposition("connection_changed") + if effect.lease_expires_at <= await self._time(session): + raise OAuthDisposition("effect_lease_expired") + if effect.kind == "refresh": + grant = await self._grant(session, row) + if ( + grant is None + or grant.family != effect.data["family"] + or grant.revision != effect.data["grant_revision"] + or grant.actor_id != actor.id + ): + raise OAuthDisposition("grant_changed") + + async def _retain_failure(self, name: str, effect_id: UUID, actor: Principal, error: BaseException) -> None: + # Cancellation must not erase a committed intent or enable a rotating-token + # replay. The small receipt transaction is shielded; no remote I/O occurs here. + async def retain() -> None: + async with self._locked(name) as session: + row = await self._required(name) + effect = await session.get(OAuthEffectEntity, effect_id) + if effect is None or effect.state != "executing": + return + known_rejections = { + "invalid_client", + "invalid_grant", + "invalid_scope", + "access_denied", + "unauthorized_client", + "unsupported_grant_type", + "invalid_request", + } + kind = error.code if isinstance(error, OAuth2ClientError) else "unknown" + effect.state = "rejected" if kind in known_rejections else "unknown" + effect.data = {**effect.data, "disposition": kind} + if row.revision == effect.data["registration_revision"] and row.status != "disconnected": + row.status = "reauthorization_required" + grant = await self._grant(session, row) + if grant: + grant.status = "reauthorization_required" + await self._event( + session, row, "effect_" + effect.state, actor, effect_id=effect.id.hex, disposition=kind + ) + + task = asyncio.create_task(retain()) + while not task.done(): + try: + await asyncio.shield(task) + except asyncio.CancelledError: + continue + task.result() + + async def _publish(self, name: str, effect_id: UUID, tokens: OAuth2Tokens, actor: Principal) -> Data: + self._remember({"access_token": tokens.access_token, "refresh_token": tokens.refresh_token}) + async with self._locked(name) as session: + await self._authority(session, actor) + row = await self._required(name) + registration = await self._registration(session, row) + effect = await session.get(OAuthEffectEntity, effect_id) + if ( + effect is None + or effect.state != "executing" + or effect.data["actor_id"] != actor.id.hex + or row.revision != effect.data["registration_revision"] + or row.status == "disconnected" + or effect.lease_expires_at <= await self._time(session) + ): + raise OAuthDisposition("connection_changed") + self._verify_reservation(effect) + policy = registration.data["policy"] + previous = await self._grant(session, row) + expected = set(policy["scopes"]) + if tokens.scope is None: + if effect.kind == "code" and policy["scope_omission"] == "requested": + scopes = expected + elif effect.kind == "refresh" and policy["refresh_scope_omission"] == "preserve" and previous: + scopes = set(previous.data["scopes"]) + else: + raise OAuthDisposition("scope_missing") + else: + scopes = set(tokens.scope.split()) + if scopes != expected: + raise OAuthDisposition("scope_mismatch") + if tokens.token_type.lower() != "bearer" or tokens.expires_in is None or tokens.expires_in > 86400: + raise OAuthDisposition("token_contract_invalid") + refresh = tokens.refresh_token + expires_at = await self._time(session) + timedelta(seconds=tokens.expires_in) + if effect.kind == "refresh": + if ( + previous is None + or previous.family != effect.data["family"] + or previous.revision != effect.data["grant_revision"] + or previous.actor_id != actor.id + ): + raise OAuthDisposition("grant_changed") + if refresh is None: + if policy["refresh_token_omission"] != "preserve": + raise OAuthDisposition("refresh_token_missing") + refresh = self._open(previous.encrypted_data, self._grant_context(row, previous))["refresh_token"] + grant = previous + grant.revision += 1 + else: + for old in await session.scalars( + select(OAuthGrantEntity).where( + OAuthGrantEntity.connection_id == row.id, + OAuthGrantEntity.status == "authorized_unverified", + ) + ): + old.status = "superseded" + grant = OAuthGrantEntity( + id=uuid4(), + connection_id=row.id, + registration_revision=row.revision, + family=uuid4().hex, + revision=1, + actor_id=actor.id, + status="authorized_unverified", + ) + session.add(grant) + grant.expires_at = expires_at + grant.data = { + "scopes": sorted(scopes), + "resource": policy["resource"], + "issuer": policy["issuer"], + "subject_verified": False, + } + grant.encrypted_data = self._seal( + self._grant_context(row, grant), + { + "access_token": tokens.access_token, + "refresh_token": refresh, + }, + ) + await self._credential_evidence( + session, + row.id, + "grant", + grant.id, + grant.revision, + {"access_token": tokens.access_token, "refresh_token": refresh}, + reservation=effect, + ) + row.status = "authorized_unverified" + await session.flush() + result = await self._summary(session, row, actor, completing=effect.id) + observed_at = (await self._time(session)).isoformat() + result["observed_at"] = observed_at + await self.store.admit_credentials(result) + effect.data = {**effect.data, "result": result, "observed_at": observed_at} + effect.state = "completed" + await self._event( + session, + row, + "effect_completed", + actor, + effect_id=effect.id.hex, + family=grant.family, + grant_revision=grant.revision, + ) + return result + + async def refresh(self, name: str, request_id: str, actor: Principal) -> Data: + if not re.fullmatch(r"[a-f0-9]{32}", request_id): + raise ValueError("Refresh requires a stable request ID") + independent = self.store.session_provider is None or self.store.session_provider.current() is None + rejection: str | None = None + async with self._locked(name) as session: + await self._authority(session, actor) + row = await self._required(name) + registration = await self._registration(session, row) + existing = await session.scalar( + select(OAuthEffectEntity).where( + OAuthEffectEntity.connection_id == row.id, + OAuthEffectEntity.request_id == request_id, + ) + ) + if existing: + if ( + existing.kind != "refresh" + or existing.data["actor_id"] != actor.id.hex + or existing.data["registration_revision"] != row.revision + or row.status == "disconnected" + ): + raise OAuthDisposition("request_context_changed") + if existing.state == "completed": + grant = await self._grant(session, row) + if grant is None or grant.family != existing.data["family"]: + raise OAuthDisposition("grant_changed") + result = cast(Data, existing.data["result"]) + await self.store.admit_credentials(result) + return result + if existing.state == "rejected": + raise OAuth2ClientError(existing.data.get("disposition", "invalid_response")) + raise OAuthDisposition("effect_" + existing.state) + if not independent: + raise OAuthDisposition("independent_effect_unit_required") + grant = await self._grant(session, row) + if grant is None or row.status != "authorized_unverified" or grant.actor_id != actor.id: + raise OAuthDisposition("reauthorization_required") + rejection = await self._effects_available(session, row) + if rejection is None: + payload = self._open(grant.encrypted_data, self._grant_context(row, grant)) + if not payload.get("refresh_token"): + raise OAuthDisposition("refresh_token_unavailable") + secret = self._open( + registration.encrypted_secret, self._client_context(row.id, row.revision, registration.data) + )["secret"] + effect = OAuthEffectEntity( + id=uuid4(), + connection_id=row.id, + request_id=request_id, + kind="refresh", + state="executing", + lease_expires_at=await self._time(session) + timedelta(seconds=30), + data={ + "registration_revision": row.revision, + "actor_id": actor.id.hex, + "family": grant.family, + "grant_revision": grant.revision, + }, + ) + await self._reserve_history(session, effect) + session.add(effect) + frozen, effect_id = dict(registration.data), effect.id + await self._event( + session, + row, + "refresh_intent", + actor, + effect_id=effect_id.hex, + family=grant.family, + grant_revision=grant.revision, + ) + if rejection: + raise OAuthDisposition(rejection) + try: + await self._dispatch_fence(name, effect_id, actor) + async with self._client(frozen, secret) as client: + tokens = await client.refresh_token( + payload["refresh_token"], + scopes=tuple(frozen["policy"]["scopes"]), + authentication=frozen["authentication"], + resource=frozen["policy"]["resource"], + ) + return await self._publish(name, effect_id, tokens, actor) + except BaseException as error: + await self._retain_failure(name, effect_id, actor, error) + raise diff --git a/src/firefly_forge/connection_oauth_controllers.py b/src/firefly_forge/connection_oauth_controllers.py new file mode 100644 index 00000000..40dfa4a4 --- /dev/null +++ b/src/firefly_forge/connection_oauth_controllers.py @@ -0,0 +1,200 @@ +# Copyright 2026 Firefly Software Foundation. SPDX-License-Identifier: Apache-2.0 +"""Authenticated connection administration; browser consent cannot run through tools.""" + +from typing import Any, cast +from urllib.parse import urlsplit + +from pydantic import BaseModel, ConfigDict, Field +from pyfly.container import rest_controller, service +from pyfly.container.ordering import HIGHEST_PRECEDENCE, order +from pyfly.oauth2 import OAuth2ClientError +from pyfly.web import Body, PathVar, QueryParam, get_mapping, post_mapping, put_mapping, request_mapping +from pyfly.web.filters import OncePerRequestFilter +from pyfly.web.ports.filter import CallNext +from starlette.requests import Request +from starlette.responses import JSONResponse, RedirectResponse, Response + +from firefly_forge.connection_oauth import ConnectionOAuth +from firefly_forge.connection_oauth_models import ( + OAuthConnectionInput, + OAuthConnectionSummary, + OAuthEffectReceipt, + OAuthSupersedeInput, +) +from firefly_forge.identity import SESSION_COOKIE, IdentityService, Principal +from firefly_forge.project_access import CURRENT_PRINCIPAL, AccessDenied + + +class OAuthRefreshInput(BaseModel): + model_config = ConfigDict(extra="forbid") + request_id: str = Field(pattern=r"^[a-f0-9]{32}$") + + +class BrowserConsentRequired(AccessDenied): + pass + + +@service +@order(HIGHEST_PRECEDENCE + 200) +class ConnectionOAuthPrivacy(OncePerRequestFilter): + async def do_filter(self, request: Request, call_next: CallNext) -> Response: + response = cast(Response, await call_next(request)) + if ( + request.url.path == "/api/v1/connection-oauth" + or request.url.path.startswith("/api/v1/connection-oauth/") + or request.url.path.startswith("/api/v1/oauth-provider-policies") + ): + # The native default header filter appends its general policy. Override + # outside that filter so a browser cannot select its less strict value. + response.headers["Referrer-Policy"] = "no-referrer" + response.headers["Cache-Control"] = "no-store" + return response + + +@rest_controller +@request_mapping("/api/v1/connection-oauth") +class ConnectionOAuthController: + def __init__(self, connections: ConnectionOAuth, identity: IdentityService) -> None: + self.connections, self.identity = connections, identity + + @staticmethod + def _actor() -> Principal: + actor = CURRENT_PRINCIPAL.get() + if actor is None: + raise AccessDenied("An authenticated factory administrator is required") + return actor + + async def _browser(self, request: Request) -> Principal: + actor = self._actor() + if ( + not request.cookies.get(SESSION_COOKIE) + or actor.authentication_method == "oidc_bearer" + or actor.kind == "service" + ): + raise BrowserConsentRequired("Open this connection in your authenticated factory browser") + scope = { + **request.scope, + "headers": [(key, value) for key, value in request.scope["headers"] if key.lower() != b"authorization"], + } + browser = await self.identity.authenticate(Request(scope)) + if ( + browser is None + or browser.id != actor.id + or browser.issuer != actor.issuer + or browser.subject != actor.subject + or browser.authentication_method == "oidc_bearer" + or browser.kind == "service" + ): + raise BrowserConsentRequired("Open this connection in your authenticated factory browser") + return actor + + @get_mapping("/providers") + async def providers(self) -> list[dict[str, Any]]: + return await self.connections.provider_directory(self._actor()) + + @get_mapping("") + async def directory(self, project_id: QueryParam[str | None] = None) -> list[OAuthConnectionSummary]: + return [ + OAuthConnectionSummary.model_validate(entry) + for entry in await self.connections.directory(self._actor(), project_id=project_id) + ] + + @get_mapping("/{name}") + async def summary(self, name: PathVar[str]) -> OAuthConnectionSummary: + return OAuthConnectionSummary.model_validate(await self.connections.summary(name, self._actor())) + + @get_mapping("/{name}/effects/{request_id}") + async def effect_receipt(self, name: PathVar[str], request_id: PathVar[str]) -> OAuthEffectReceipt: + return OAuthEffectReceipt.model_validate(await self.connections.effect_receipt(name, request_id, self._actor())) + + @put_mapping("/{name}") + async def configure(self, name: PathVar[str], body: Body[OAuthConnectionInput]) -> dict[str, Any]: + return await self.connections.configure(name, body, self._actor()) + + @post_mapping("/{name}/supersede") + async def supersede(self, name: PathVar[str], body: Body[OAuthSupersedeInput]) -> OAuthConnectionSummary: + return OAuthConnectionSummary.model_validate(await self.connections.supersede(name, body, self._actor())) + + @post_mapping("/{name}/prepare") + async def prepare(self, name: PathVar[str]) -> dict[str, Any]: + result = await self.connections.prepare(name, self._actor()) + return {"continuation_url": result["continuation_url"], "expires_in": 300} + + @get_mapping("/{name}/continue") + async def begin(self, name: PathVar[str], request: Request, ticket: QueryParam[str] = "") -> Response: + try: + actor = await self._browser(request) + except BrowserConsentRequired: + return JSONResponse( + { + "detail": "Open this connection in your authenticated factory browser.", + "oauth_error": "browser_required", + }, + status_code=403, + ) + if len(request.query_params.getlist("ticket")) != 1: + raise ValueError("A single browser handoff is required") + challenge = await self.connections.begin(name, ticket, actor, browser_authenticated=True) + response = RedirectResponse(challenge.authorization_url, status_code=303) + response.set_cookie( + "forge_connection_" + name, + challenge.browser_nonce, + max_age=300, + httponly=True, + secure=urlsplit(self.connections.browser_origin).scheme == "https", + samesite="lax", + path="/api/v1/connection-oauth/" + name + "/callback", + ) + response.headers["Cache-Control"] = "no-store" + response.headers["Referrer-Policy"] = "no-referrer" + return response + + @get_mapping("/{name}/callback") + async def callback( + self, + name: PathVar[str], + request: Request, + code: QueryParam[str] = "", + state: QueryParam[str] = "", + iss: QueryParam[str] = "", + ) -> Response: + try: + actor = await self._browser(request) + except BrowserConsentRequired: + return JSONResponse( + { + "detail": "Open this connection in your authenticated factory browser.", + "oauth_error": "browser_required", + }, + status_code=403, + ) + response: Response + try: + if any(len(request.query_params.getlist(key)) != 1 for key in ("code", "state", "iss")): + raise ValueError("Authorization response requires exact code, state and issuer") + await self.connections.complete( + name, state, code, request.cookies.get("forge_connection_" + name, ""), actor, issuer=iss + ) + response = RedirectResponse("/", status_code=303) + except (ValueError, OAuth2ClientError): + response = JSONResponse( + {"detail": "Authorization did not complete. Start a new connection attempt."}, status_code=409 + ) + response.delete_cookie("forge_connection_" + name, path="/api/v1/connection-oauth/" + name + "/callback") + response.headers["Cache-Control"] = "no-store" + response.headers["Referrer-Policy"] = "no-referrer" + return response + + @post_mapping("/{name}/refresh") + async def refresh(self, name: PathVar[str], body: Body[OAuthRefreshInput]) -> dict[str, Any] | JSONResponse: + try: + return await self.connections.refresh(name, body.request_id, self._actor()) + except OAuth2ClientError as error: + return JSONResponse( + {"detail": "Reauthorize this connection before trying again.", "oauth_error": error.code}, + status_code=409, + ) + + @post_mapping("/{name}/disconnect") + async def disconnect(self, name: PathVar[str]) -> dict[str, Any]: + return await self.connections.disconnect(name, self._actor()) diff --git a/src/firefly_forge/connection_oauth_models.py b/src/firefly_forge/connection_oauth_models.py new file mode 100644 index 00000000..47013a00 --- /dev/null +++ b/src/firefly_forge/connection_oauth_models.py @@ -0,0 +1,160 @@ +# Copyright 2026 Firefly Software Foundation. SPDX-License-Identifier: Apache-2.0 +"""Bounded connection input; provider endpoints and scopes come from admitted policy.""" + +from __future__ import annotations + +from dataclasses import dataclass, field +from typing import Literal + +from pydantic import BaseModel, ConfigDict, Field, SecretStr, field_validator, model_validator + + +class OAuthConnectionInput(BaseModel): + model_config = ConfigDict(extra="forbid", frozen=True) + provider: str = Field(pattern=r"^[a-z][a-z0-9-]{0,63}$") + project_id: str | None = Field(default=None, pattern=r"^[a-f0-9]{32}$") + expected_revision: int | None = Field(default=None, strict=True, ge=0, le=2_147_483_647) + client_id: str = Field(min_length=1, max_length=200) + client_secret: SecretStr | None = None + public_client: bool | None = None + authentication: Literal["client_secret_basic", "client_secret_post"] = "client_secret_post" + + @model_validator(mode="after") + def credentials(self) -> OAuthConnectionInput: + if any(ord(c) < 32 or ord(c) == 127 for c in self.client_id): + raise ValueError("Client ID contains control characters") + if self.client_secret is not None: + secret = self.client_secret.get_secret_value() + if not secret or len(secret.encode()) > 4096 or any(ord(c) < 32 or ord(c) == 127 for c in secret): + raise ValueError("Supply a bounded nonempty client secret") + if self.public_client: + raise ValueError("A public client cannot retain a secret") + if self.public_client and self.authentication == "client_secret_basic": + raise ValueError("Basic authentication requires a confidential client") + return self + + +class OAuthSupersedeInput(BaseModel): + model_config = ConfigDict(extra="forbid", frozen=True) + expected_revision: int = Field(strict=True, ge=1, le=2_147_483_647) + unknown_effect_ids: list[str] = Field(min_length=1, max_length=100) + reason: str = Field(min_length=1, max_length=2000) + acknowledge_unknown: Literal[True] + registration: OAuthConnectionInput + + @field_validator("acknowledge_unknown", mode="before") + @classmethod + def explicit_acknowledgment(cls, value: object) -> bool: + if value is not True: + raise ValueError("Explicitly acknowledge that the old provider outcome remains unknown") + return True + + @field_validator("unknown_effect_ids") + @classmethod + def exact_effect_ids(cls, values: list[str]) -> list[str]: + import re + + if len(set(values)) != len(values) or any(not re.fullmatch(r"[a-f0-9]{32}", value) for value in values): + raise ValueError("Select distinct exact unknown effect identifiers") + return values + + @field_validator("reason") + @classmethod + def meaningful_reason(cls, value: str) -> str: + if not value.strip(): + raise ValueError("Explain why this new admission is required") + return value + + +class OAuthAllowedActions(BaseModel): + model_config = ConfigDict(extra="forbid", frozen=True, strict=True) + configure: bool + authorize: bool + refresh: bool + disconnect: bool + supersede: bool + + +class OAuthEffectSummary(BaseModel): + model_config = ConfigDict(extra="forbid", frozen=True, strict=True) + id: str = Field(pattern=r"^[a-f0-9]{32}$") + kind: Literal["code", "refresh"] + state: Literal["executing", "unknown"] + registration_revision: int = Field(ge=1, le=2_147_483_647) + lease_expired: bool + + +class OAuthConnectionSummary(BaseModel): + model_config = ConfigDict(extra="forbid", frozen=True, strict=True) + name: str + revision: int + provider: str + client_id: str + project_id: str | None + status: str + resource: str + scopes: list[str] + agent_ready: Literal[False] + remote_revocation_supported: Literal[False] + authentication: Literal["client_secret_basic", "client_secret_post"] + public_client: bool + secret_configured: bool + callback_uri: str + refresh_available: bool + grant_expires_at: str | None + effect_state: Literal["none", "executing", "unknown"] + unresolved_effects: list[OAuthEffectSummary] + archived_unknown_effects: list[OAuthEffectSummary] + reconciliation_required: bool + allowed_actions: OAuthAllowedActions + family: str | None = None + grant_revision: int | None = None + grant_status: str | None = None + observed_at: str | None = None + policy_current: bool = True + + +class OAuthEffectReceipt(BaseModel): + model_config = ConfigDict(extra="forbid", frozen=True, strict=True) + id: str = Field(pattern=r"^[a-f0-9]{32}$") + request_id: str = Field(pattern=r"^[a-f0-9]{32}$") + kind: Literal["code", "refresh"] + state: Literal["executing", "unknown", "completed", "rejected"] + registration_revision: int = Field(ge=1, le=2_147_483_647) + lease_expired: bool + observed_at: str | None + current_context: bool + + +@dataclass(frozen=True) +class OAuthProvider: + id: str + issuer: str + authorization_endpoint: str + token_endpoint: str + resource: str + scopes: tuple[str, ...] + scope_omission: Literal["reject", "requested"] = "reject" + refresh_scope_omission: Literal["reject", "preserve"] = "reject" + refresh_token_omission: Literal["reject", "preserve"] = "reject" + prerequisite: str | None = None + + +@dataclass(frozen=True) +class OAuthPolicyBinding: + provider: OAuthProvider + revision: int + digest: str + + +@dataclass(frozen=True) +class OAuthChallenge: + authorization_url: str = field(repr=False) + browser_nonce: str = field(repr=False) + attempt_id: str + + +class OAuthDisposition(ValueError): + def __init__(self, kind: str) -> None: + self.kind = kind + super().__init__(kind) diff --git a/src/firefly_forge/connection_oauth_persistence.py b/src/firefly_forge/connection_oauth_persistence.py new file mode 100644 index 00000000..025713de --- /dev/null +++ b/src/firefly_forge/connection_oauth_persistence.py @@ -0,0 +1,89 @@ +# Copyright 2026 Firefly Software Foundation. SPDX-License-Identifier: Apache-2.0 +"""Connection revisions, encrypted grant families and single-dispatch OAuth receipts.""" + +from datetime import datetime +from typing import Any +from uuid import UUID + +from pyfly.container import repository +from pyfly.data.relational.sqlalchemy import BaseEntity, Repository +from sqlalchemy import DateTime, ForeignKey, String, Text, UniqueConstraint, select +from sqlalchemy.dialects.postgresql import JSONB +from sqlalchemy.orm import Mapped, mapped_column + + +class OAuthConnectionEntity(BaseEntity): + __tablename__ = "forge_oauth_connections" + name: Mapped[str] = mapped_column(String(64), unique=True) + revision: Mapped[int] = mapped_column(default=1) + status: Mapped[str] = mapped_column(String(32)) + + +class OAuthRegistrationEntity(BaseEntity): + __tablename__ = "forge_oauth_registrations" + __table_args__ = (UniqueConstraint("connection_id", "revision"),) + connection_id: Mapped[UUID] = mapped_column(ForeignKey("forge_oauth_connections.id"), index=True) + revision: Mapped[int] = mapped_column() + data: Mapped[dict[str, Any]] = mapped_column(JSONB) + encrypted_secret: Mapped[str] = mapped_column(Text) + + +class OAuthAttemptEntity(BaseEntity): + __tablename__ = "forge_oauth_attempts" + connection_id: Mapped[UUID] = mapped_column(ForeignKey("forge_oauth_connections.id"), index=True) + revision: Mapped[int] = mapped_column() + actor_id: Mapped[UUID] = mapped_column() + kind: Mapped[str] = mapped_column(String(16)) + digest: Mapped[str] = mapped_column(String(64), unique=True) + nonce_digest: Mapped[str | None] = mapped_column(String(64)) + expires_at: Mapped[datetime] = mapped_column(DateTime(timezone=True)) + consumed: Mapped[bool] = mapped_column(default=False) + encrypted_data: Mapped[str] = mapped_column(Text) + + +class OAuthGrantEntity(BaseEntity): + __tablename__ = "forge_oauth_grants" + connection_id: Mapped[UUID] = mapped_column(ForeignKey("forge_oauth_connections.id"), index=True) + registration_revision: Mapped[int] = mapped_column() + family: Mapped[str] = mapped_column(String(32), unique=True) + revision: Mapped[int] = mapped_column(default=1) + actor_id: Mapped[UUID] = mapped_column() + status: Mapped[str] = mapped_column(String(32)) + expires_at: Mapped[datetime] = mapped_column(DateTime(timezone=True)) + encrypted_data: Mapped[str] = mapped_column(Text) + data: Mapped[dict[str, Any]] = mapped_column(JSONB) + + +class OAuthEffectEntity(BaseEntity): + __tablename__ = "forge_oauth_effects" + __table_args__ = (UniqueConstraint("connection_id", "request_id"),) + connection_id: Mapped[UUID] = mapped_column(ForeignKey("forge_oauth_connections.id"), index=True) + request_id: Mapped[str] = mapped_column(String(32)) + kind: Mapped[str] = mapped_column(String(16)) + state: Mapped[str] = mapped_column(String(32)) + lease_expires_at: Mapped[datetime] = mapped_column(DateTime(timezone=True)) + data: Mapped[dict[str, Any]] = mapped_column(JSONB) + + +class OAuthEventEntity(BaseEntity): + __tablename__ = "forge_oauth_events" + connection_id: Mapped[UUID] = mapped_column(ForeignKey("forge_oauth_connections.id"), index=True) + data: Mapped[dict[str, Any]] = mapped_column(JSONB) + + +class OAuthCredentialEvidenceEntity(BaseEntity): + __tablename__ = "forge_oauth_credential_evidence" + __table_args__ = (UniqueConstraint("kind", "source_id", "revision"),) + connection_id: Mapped[UUID] = mapped_column(ForeignKey("forge_oauth_connections.id"), index=True) + kind: Mapped[str] = mapped_column(String(16)) + source_id: Mapped[UUID] = mapped_column() + revision: Mapped[int] = mapped_column() + data: Mapped[dict[str, Any]] = mapped_column(JSONB) + + +@repository +class OAuthConnectionRepository(Repository[OAuthConnectionEntity, UUID]): + async def named(self, name: str) -> OAuthConnectionEntity | None: + return await self._require_session().scalar( + select(OAuthConnectionEntity).where(OAuthConnectionEntity.name == name).with_for_update() + ) diff --git a/src/firefly_forge/engine.py b/src/firefly_forge/engine.py index d3042131..04f41f31 100644 --- a/src/firefly_forge/engine.py +++ b/src/firefly_forge/engine.py @@ -556,7 +556,13 @@ async def request() -> dict[str, Any]: return cast( dict[str, Any], await self.external_mcp.call( - run["mcp_snapshot"], connector, tool, arguments, roles=roles, stage="implement" + run["mcp_snapshot"], + connector, + tool, + arguments, + roles=roles, + stage="implement", + run_id=identifier, ), ) @@ -600,6 +606,7 @@ async def request() -> dict[str, Any]: if "browser_journey" in (grants or ()) and hasattr(provider, "image_input_capability") else {"status": "unverified"}, credential_registry=self.credential_registry, + credential_admission=self.store.admit_credentials, internet_search=internet_search if self.search and run.get("search_snapshot") and "internet_search" in (grants or ()) else None, @@ -743,6 +750,7 @@ async def request() -> dict[str, Any]: raise ValueError("The frozen implementation attempt budget is exhausted") implementation_failures = repair_failures if start_round > completed_rounds else [] for attempt in range(start_round, repairs + 2): + await self.store.admit_credentials(brief) (await self.store.update(identifier, status="developing", attempt=attempt)) implementation = await self._begin_task( identifier, "implement", workspace, settings, implementation_failures diff --git a/src/firefly_forge/execution_requests.py b/src/firefly_forge/execution_requests.py index 4b1e417d..e0cc7ac3 100644 --- a/src/firefly_forge/execution_requests.py +++ b/src/firefly_forge/execution_requests.py @@ -242,7 +242,7 @@ async def _claim(self, request_id: str) -> bool: async def _observation(self, request_id: str, kind: str, evidence: Data) -> None: await self.store.assert_ownership() - self.store.reject_credentials(evidence) + await self.store.admit_credentials(evidence) observed = await self.get(request_id) async with self.store._unit(): await self.store.run_records.find_by_id(identifier(observed["run_id"]), lock=LockMode.PESSIMISTIC_WRITE) @@ -442,7 +442,7 @@ async def execute(self, request_id: str) -> None: async def reconcile(self, run_id: str, request_id: str, body: ExecutionRequestReconciliation) -> Data: from firefly_forge.journal import Journal - self.store.reject_credentials(body.model_dump()) + await self.store.admit_credentials(body.model_dump()) observed = await self.get(request_id) if observed["run_id"] != identifier(run_id).hex: raise KeyError("Execution request not found in this run") diff --git a/src/firefly_forge/learning.py b/src/firefly_forge/learning.py index c2c6feba..64caa5fb 100644 --- a/src/firefly_forge/learning.py +++ b/src/firefly_forge/learning.py @@ -213,7 +213,7 @@ async def capture_outcome(self, run_id: str) -> Data: ], } ) - self.store.reject_credentials(envelope.model_dump()) + await self.store.admit_credentials(envelope.model_dump()) policy = LearningPolicy.model_validate(frozen_learning(run.get("learning_snapshot"))["settings"]) if not policy.enabled: raise ValueError("Learning requires an enabled policy captured by this run") @@ -331,7 +331,7 @@ async def capture_failure(self, run_id: str) -> Data | None: ], } ) - self.store.reject_credentials(envelope.model_dump()) + await self.store.admit_credentials(envelope.model_dump()) at = await self.records_repository.database_time() row = ForgeLearningRecordEntity( id=uuid.uuid4(), @@ -483,7 +483,7 @@ async def invalidate(self, record_id: str, *, reason: str, request_id: str) -> D identifier(request_id) if not reason.strip() or len(reason) > 2000: raise ValueError("Learning invalidation requires a bounded reason") - self.store.reject_credentials(reason) + await self.store.admit_credentials(reason) async with self.store._unit(): row = await self.records_repository.find_by_id(identifier(record_id), lock=LockMode.PESSIMISTIC_WRITE) if row is None: diff --git a/src/firefly_forge/mcp_controllers.py b/src/firefly_forge/mcp_controllers.py index df5eb4fb..aa8007d9 100644 --- a/src/firefly_forge/mcp_controllers.py +++ b/src/firefly_forge/mcp_controllers.py @@ -6,7 +6,14 @@ from pyfly.container import rest_controller from pyfly.web import Body, PathVar, get_mapping, post_mapping, put_mapping, request_mapping -from firefly_forge.mcp_registry import ExternalMCPRegistry, MCPConnectionInput, MCPGrantInput, MCPReviewInput +from firefly_forge.connection_oauth_controllers import ConnectionOAuthController +from firefly_forge.mcp_registry import ( + ExternalMCPRegistry, + MCPConnectionInput, + MCPGrantInput, + MCPOAuthConnectionInput, + MCPReviewInput, +) from firefly_forge.projects import Projects from firefly_forge.store import Store @@ -18,16 +25,22 @@ def __init__(self, registry: ExternalMCPRegistry, store: Store) -> None: self.registry, self.store = registry, store @get_mapping("") - def catalog(self) -> list[dict[str, Any]]: - return self.registry.catalog() + async def catalog(self) -> list[dict[str, Any]]: + result = self.registry.catalog() + await self.store.admit_credentials(result) + return result @put_mapping("/{connector}") def configure(self, connector: PathVar[str], body: Body[MCPConnectionInput]) -> dict[str, Any]: return self.registry.configure(connector, body) + @put_mapping("/{connector}/oauth") + async def link_oauth(self, connector: PathVar[str], body: Body[MCPOAuthConnectionInput]) -> dict[str, Any]: + return await self.registry.link_oauth(connector, body, ConnectionOAuthController._actor()) + @post_mapping("/{connector}/discover") async def discover(self, connector: PathVar[str]) -> dict[str, Any]: - return await self.registry.discover(connector) + return await self.registry.discover(connector, actor=ConnectionOAuthController._actor()) @post_mapping("/{connector}/review") def review(self, connector: PathVar[str], body: Body[MCPReviewInput]) -> dict[str, Any]: diff --git a/src/firefly_forge/mcp_registry.py b/src/firefly_forge/mcp_registry.py index f409860b..0f9aa8cc 100644 --- a/src/firefly_forge/mcp_registry.py +++ b/src/firefly_forge/mcp_registry.py @@ -6,6 +6,7 @@ import asyncio import copy import json +import os import re import uuid from collections.abc import AsyncIterator, Callable @@ -22,7 +23,9 @@ from pyfly.container import service from firefly_forge.configuration import ConfigurationStore +from firefly_forge.identity import Principal from firefly_forge.journal import digest +from firefly_forge.oauth_resources import OAuthResources from firefly_forge.secrets import contains_known_credential from firefly_forge.workspace_tools import _private_name @@ -70,6 +73,21 @@ }, } +CATALOG["local-repository-tools"] = { + "name": "Local repository tools", + "endpoint": None, + "tools": list(CATALOG["github"]["tools"]), + "prerequisite": None, + "source": "https://fireflyframework.org/forge/", +} + + +class MCPOAuthConnectionInput(BaseModel): + model_config = ConfigDict(extra="forbid", frozen=True, strict=True) + connection_name: str = Field(pattern=r"^[a-z][a-z0-9-]{0,63}$") + project_id: str = Field(pattern=r"^[a-f0-9]{32}$") + enabled: bool = True + class MCPAdmissionError(ValueError): pass @@ -269,7 +287,8 @@ def mcp_snapshot(directory: Path | ConfigurationStore, project_id: str | None, r @service class ExternalMCPRegistry: - def __init__(self, directory: Path | ConfigurationStore) -> None: + def __init__(self, directory: Path | ConfigurationStore, *, resources: OAuthResources | None = None) -> None: + self.resources = resources self.private = directory if isinstance(directory, ConfigurationStore) else ConfigurationStore(directory) self.path = self.private.directory / "external-mcp.json" self.revisions = self.private.directory / "mcp-revisions" @@ -298,9 +317,15 @@ def redaction_settings(self) -> dict[str, str]: def catalog(self) -> list[Data]: with self.private.lock: connections = self._state()["connections"] + return self._catalog(connections) + + @staticmethod + def _catalog(connections: Data) -> list[Data]: result = [] for connector, definition in CATALOG.items(): record = connections.get(connector, {}) + if connector == "local-repository-tools" and not record: + continue readiness = ( "prerequisite_required" if definition["prerequisite"] @@ -318,6 +343,8 @@ def catalog(self) -> list[Data]: { "id": connector, **copy.deepcopy(definition), + "endpoint": record.get("endpoint", definition["endpoint"]), + "authentication": record.get("authentication", "token"), "enabled": bool(record.get("enabled")), "credential_configured": bool(record.get("credential_revision")), "readiness": readiness, @@ -330,6 +357,8 @@ def catalog(self) -> list[Data]: def configure(self, connector: str, request: MCPConnectionInput) -> Data: definition = _connector(connector) + if connector == "local-repository-tools": + raise ValueError("Local repository tools require an admitted native OAuth policy binding") if definition["prerequisite"] and (request.enabled or request.api_key): raise ValueError("This connector has an unmet prerequisite: " + definition["prerequisite"]) if request.api_key and (any(ord(c) <= 32 for c in request.api_key) or request.clear_secret): @@ -354,19 +383,146 @@ def configure(self, connector: str, request: MCPConnectionInput) -> Data: self.private._write(self.path, state) return next(item for item in self.catalog() if item["id"] == connector) + def _oauth_endpoint(self, connector: str, binding: Data) -> str: + if self.resources is None or binding["provider"] != connector or binding["policy_revision"] < 1: + raise ValueError("MCP OAuth requires a current supported native provider policy") + endpoint = binding["resource"] + if not isinstance(endpoint, str): + raise ValueError("MCP OAuth resource must be an exact endpoint") + if connector == "github": + if endpoint != CATALOG["github"]["endpoint"]: + raise ValueError("MCP OAuth resource differs from its approved GitHub endpoint") + elif connector == "local-repository-tools": + origin, browser = urlsplit(binding["issuer"]), urlsplit(self.resources.connections.browser_origin) + if ( + os.environ.get("FORGE_OAUTH_LOCAL_DEVELOPMENT") != "1" + or not self.resources.connections.loopback + or browser.scheme not in {"http", "https"} + or browser.hostname not in {"127.0.0.1", "::1"} + or origin.scheme != "http" + or origin.hostname not in {"127.0.0.1", "::1"} + or origin.port is None + or not 1024 <= origin.port <= 65535 + or origin.path + or origin.query + or origin.fragment + or origin.username + or origin.password + or endpoint != binding["issuer"] + "/mcp/readonly" + or binding["scopes"] != ["repository:read"] + ): + raise ValueError("Local MCP OAuth requires its exact development resource policy") + else: + raise ValueError("This MCP OAuth provider requires its reviewed scoped adapter") + return endpoint + + async def link_oauth(self, connector: str, request: MCPOAuthConnectionInput, actor: Principal) -> Data: + _connector(connector) + if self.resources is None: + raise ValueError("Native OAuth resource custody is unavailable") + async with self.resources.store._unit() as session: + await self.resources.connections._authority(session, actor) + if not request.enabled: + with self.private.lock: + state = self._state() + previous_digest = digest(state) + record = state["connections"].get(connector, {}) + if ( + record.get("oauth_connection") != request.connection_name + or record.get("project_id") != request.project_id + ): + raise ValueError("Select the exact configured OAuth connection and project") + record["enabled"] = False + proposal = next(item for item in self._catalog(state["connections"]) if item["id"] == connector) + await self.resources.store.admit_credentials(proposal) + with self.private.lock: + if digest(self._state()) != previous_digest: + raise ValueError("MCP settings changed during admission; review and retry") + self.private._write(self.path, state) + return proposal + binding = await self.resources.bind( + request.connection_name, + actor, + project_id=request.project_id, + resource=(await self.resources.connections.summary(request.connection_name, actor))["resource"], + ) + endpoint = self._oauth_endpoint(connector, binding) + revision = uuid.uuid4().hex + record = { + "credential_revision": revision, + "enabled": True, + "authentication": "oauth", + "endpoint": endpoint, + "oauth_connection": request.connection_name, + "project_id": request.project_id, + } + with self.private.lock: + state = self._state() + previous_digest = digest(state) + state["connections"][connector] = record + proposal = next(item for item in self._catalog(state["connections"]) if item["id"] == connector) + await self.resources.store.admit_credentials({"record": record, "summary": proposal}) + with self.private.lock: + if digest(self._state()) != previous_digest: + raise ValueError("MCP settings changed during admission; review and retry") + self.private._write( + self.revisions / (revision + ".json"), {"connector": connector, "oauth_binding": binding} + ) + self.private._write(self.path, state) + return proposal + @asynccontextmanager async def _session( - self, connector: str, revision: str, expected: Data | None = None - ) -> AsyncIterator[tuple[ClientSession, Data]]: + self, + connector: str, + revision: str, + expected: Data | None = None, + *, + run_id: str | None = None, + actor: Principal | None = None, + authority: Callable[[], None] | None = None, + repository_id: str | None = None, + ) -> AsyncIterator[tuple[ClientSession, Data, list[Data]]]: definition = _connector(connector) _identifier(revision) with self.private.lock: credential = self.private._read(self.revisions / (revision + ".json")) - if credential.get("connector") != connector or not credential.get("api_key"): + if credential.get("connector") != connector: raise MCPAdmissionError("Frozen MCP credential revision is unavailable") - transport = _PinnedTransport( - self.transport or httpx2.AsyncHTTPTransport(retries=0), definition["endpoint"], expected - ) + endpoint = definition["endpoint"] + headers = {} + observations: list[Data] = [] + inner = self.transport or httpx2.AsyncHTTPTransport(retries=0) + if credential.get("oauth_binding"): + binding = credential["oauth_binding"] + endpoint = self._oauth_endpoint(connector, binding) + assert self.resources is not None + + def current_connection() -> None: + with self.private.lock: + current = self._state()["connections"].get(connector, {}) + if not current.get("enabled") or ( + expected is None and current.get("credential_revision") != revision + ): + raise MCPAdmissionError("MCP OAuth connection changed or was disabled") + if authority: + authority() + + resource_transport = self.resources.transport( + binding, + run_id=run_id, + actor=actor, + inner=inner, + authority=current_connection, + repository_id=repository_id, + ) + inner = resource_transport + observations = resource_transport.observations + elif credential.get("api_key"): + headers = {"Authorization": "Bearer " + credential["api_key"]} + else: + raise MCPAdmissionError("Frozen MCP credential revision is unavailable") + transport = _PinnedTransport(inner, endpoint, expected) try: async with ( asyncio.timeout(30), @@ -375,18 +531,22 @@ async def _session( timeout=15, trust_env=False, follow_redirects=False, - headers={"Authorization": "Bearer " + credential["api_key"]}, + headers=headers, ) as http, - streamable_http_client( - definition["endpoint"], http_client=http, max_sse_event_size=1_000_000 - ) as streams, + streamable_http_client(endpoint, http_client=http, max_sse_event_size=1_000_000) as streams, ClientSession(streams[0], streams[1], read_timeout_seconds=15) as session, ): initialized = await session.initialize() info = initialized.server_info.model_dump(by_alias=True, exclude_none=True) if len(json.dumps(info).encode()) > 1024: raise MCPAdmissionError("MCP server identity exceeds its bounds") - yield session, info + yield session, info, observations + if credential.get("oauth_binding"): + assert self.resources is not None + await self.resources._admission( + credential["oauth_binding"], run_id=run_id, actor=actor, repository_id=repository_id + ) + current_connection() except Exception as error: safe = _safe_error(error) raise safe or MCPAdmissionError( @@ -408,7 +568,7 @@ async def _tools(self, session: ClientSession, connector: str) -> Data: raise MCPAdmissionError("MCP server exposes no admitted repository-scoped tools") return tools - async def discover(self, connector: str) -> Data: + async def discover(self, connector: str, *, actor: Principal | None = None) -> Data: definition = _connector(connector) if definition["prerequisite"]: raise ValueError("This connector has an unmet prerequisite") @@ -417,15 +577,19 @@ async def discover(self, connector: str) -> Data: revision = connection.get("credential_revision") if not connection.get("enabled") or not revision: raise ValueError("Enable a configured connector before discovery") - async with self._session(connector, revision) as (session, info): + async with self._session(connector, revision, actor=actor) as (session, info, observations): tools = await self._tools(session, connector) payload = { "connector": connector, - "endpoint": definition["endpoint"], + "endpoint": connection.get("endpoint", definition["endpoint"]), "credential_revision": revision, "server": info, "tools": tools, } + if observations: + payload["oauth_source"] = observations + if self.resources is not None: + await self.resources.store.admit_credentials(payload) if contains_known_credential(payload, {**self.credentials(), **self.credential_registry()}): raise ValueError("MCP discovery reflected configured credentials") discovery = {**payload, "digest": digest(payload)} @@ -458,7 +622,7 @@ def grant(self, project_id: str, connector: str, request: MCPGrantInput, *, repo parsed = urlsplit(repository["url"]) parts = parsed.path.removesuffix(".git").strip("/").split("/") if ( - connector != "github" + connector not in {"github", "local-repository-tools"} or parsed.scheme != "https" or parsed.netloc != "github.com" or parsed.query @@ -488,7 +652,7 @@ def grant(self, project_id: str, connector: str, request: MCPGrantInput, *, repo "project_id": project_id, "repository_id": request.repository_id, "connector": connector, - "endpoint": CATALOG[connector]["endpoint"], + "endpoint": discovery["endpoint"], "credential_revision": discovery["credential_revision"], "review_digest": request.review_digest, "server": discovery["server"], @@ -578,13 +742,56 @@ def authorize( raise ValueError("MCP arguments cannot contain configured credentials") return copy.deepcopy(grant), args + async def authorize_result( + self, + snapshot: Data, + connector: str, + tool: str, + arguments: Data, + *, + roles: list[str], + stage: str, + run_id: str, + ) -> None: + grant, _ = self.authorize(snapshot, connector, tool, arguments, roles=roles, stage=stage) + with self.private.lock: + credential = self.private._read(self.revisions / (grant["credential_revision"] + ".json")) + if credential.get("connector") != connector: + raise MCPAdmissionError("Frozen MCP credential revision is unavailable") + if credential.get("oauth_binding"): + binding = credential["oauth_binding"] + self._oauth_endpoint(connector, binding) + assert self.resources is not None + await self.resources.authorize(binding, run_id=run_id, repository_id=grant["repository_id"]) + self.authorize(snapshot, connector, tool, arguments, roles=roles, stage=stage) + async def call( - self, snapshot: Data, connector: str, tool: str, arguments: Data, *, roles: list[str], stage: str + self, + snapshot: Data, + connector: str, + tool: str, + arguments: Data, + *, + roles: list[str], + stage: str, + run_id: str | None = None, ) -> Data: grant, args = self.authorize(snapshot, connector, tool, arguments, roles=roles, stage=stage) - async with self._session(connector, grant["credential_revision"], {"name": tool, "arguments": args}) as ( + + def current_grant() -> None: + self.authorize(snapshot, connector, tool, arguments, roles=roles, stage=stage) + + async with self._session( + connector, + grant["credential_revision"], + {"name": tool, "arguments": args}, + run_id=run_id, + authority=current_grant, + repository_id=grant["repository_id"], + ) as ( session, info, + observations, ): tools = await self._tools(session, connector) if info != grant["server"] or tools.get(tool) != grant["tools"][tool]: @@ -605,6 +812,10 @@ async def call( "untrusted": True, "text": [item["text"] for item in content], } + if observations: + result["oauth_source"] = observations + if self.resources is not None: + await self.resources.store.admit_credentials(result) if contains_known_credential(result, {**self.credentials(), **self.credential_registry()}): raise ValueError("MCP result reflected configured credentials") self.authorize(snapshot, connector, tool, arguments, roles=roles, stage=stage) diff --git a/src/firefly_forge/mcp_server.py b/src/firefly_forge/mcp_server.py index f876f249..dd410dfc 100644 --- a/src/firefly_forge/mcp_server.py +++ b/src/firefly_forge/mcp_server.py @@ -816,6 +816,167 @@ def get_external_mcp_catalog() -> list[dict[str, Any]]: with client() as connection: return connection.external_mcp_catalog() + @server.tool() + def get_oauth_provider_policies() -> dict[str, Any]: + """Read current native provider policy and local development availability.""" + from firefly_forge.cli import client + + with client() as connection: + return connection.oauth_provider_policies() + + @server.tool() + def configure_local_oauth_provider_policy( + enabled: bool, + local_origin: str, + expected_revision: int, + request_id: str, + ) -> dict[str, Any]: + """Admit the fixed local service; server development and administrator gates apply.""" + from firefly_forge.cli import client + + with client() as connection: + return connection.configure_local_oauth_provider_policy( + { + "enabled": enabled, + "local_origin": local_origin, + "expected_revision": expected_revision, + "request_id": request_id, + } + ) + + @server.tool() + def get_connection_oauth_providers() -> list[dict[str, Any]]: + """Read admitted OAuth registrations and unmet provider prerequisites.""" + from firefly_forge.cli import client + + with client() as connection: + return connection.connection_oauth_providers() + + @server.tool() + def get_connection_oauth(name: str) -> dict[str, Any]: + """Read connection metadata without access, refresh or client-secret values.""" + from firefly_forge.cli import client + + with client() as connection: + return connection.connection_oauth(name) + + @server.tool() + def list_connection_oauth(project_id: str | None = None) -> list[dict[str, Any]]: + """Read the current administrator's safe connection directory and server-owned actions.""" + from firefly_forge.cli import client + + with client() as connection: + return connection.connection_oauth_connections(project_id) + + @server.tool() + def get_connection_oauth_effect(name: str, request_id: str) -> dict[str, Any]: + """Observe an exact OAuth request receipt without replaying or exposing its token data.""" + from firefly_forge.cli import client + + with client() as connection: + return connection.connection_oauth_effect(name, request_id) + + @server.tool() + def supersede_connection_oauth( + name: str, + expected_revision: int, + unknown_effect_ids: list[str], + reason: str, + acknowledge_unknown: bool, + provider: str, + client_id: str, + client_secret_file: str | None = None, + public_client: bool | None = None, + project_id: str | None = None, + authentication: Literal["client_secret_post", "client_secret_basic"] = "client_secret_post", + ) -> dict[str, Any]: + """Explicitly acknowledge exact unknown effects and admit a new registration as admin. + + Old effects remain unknown. This does not replay them or complete browser consent. + """ + from pathlib import Path + + from firefly_forge.cli import client, private_secret_file + + registration: dict[str, Any] = { + "provider": provider, + "client_id": client_id, + "public_client": public_client, + "project_id": project_id, + "authentication": authentication, + } + if client_secret_file: + registration["client_secret"] = private_secret_file(Path(client_secret_file)) + with client() as connection: + return connection.supersede_connection_oauth( + name, + { + "expected_revision": expected_revision, + "unknown_effect_ids": unknown_effect_ids, + "reason": reason, + "acknowledge_unknown": acknowledge_unknown, + "registration": registration, + }, + ) + + @server.tool() + def configure_connection_oauth( + name: str, + provider: str, + client_id: str, + client_secret_file: str | None = None, + public_client: bool | None = None, + project_id: str | None = None, + authentication: Literal["client_secret_post", "client_secret_basic"] = "client_secret_post", + ) -> dict[str, Any]: + """Configure an admitted provider as admin; use an owner-private secret file. + + Configuration does not complete browser consent or approve agent tool access. + Endpoint, issuer, resource and scope URLs are not accepted as tool arguments. + """ + from pathlib import Path + + from firefly_forge.cli import client, private_secret_file + + request: dict[str, Any] = { + "provider": provider, + "client_id": client_id, + "public_client": public_client, + "project_id": project_id, + "authentication": authentication, + } + if client_secret_file: + request["client_secret"] = private_secret_file(Path(client_secret_file)) + with client() as connection: + return connection.configure_connection_oauth(name, request) + + @server.tool() + def prepare_connection_oauth(name: str) -> dict[str, Any]: + """Prepare a short-lived link for the actor's authenticated factory browser. + + Tools cannot exchange authorization codes or complete a user's consent. + """ + from firefly_forge.cli import client + + with client() as connection: + return connection.prepare_connection_oauth(name) + + @server.tool() + def refresh_connection_oauth(name: str, request_id: str) -> dict[str, Any]: + """Request one recorded refresh; reuse its request ID and never retry unknown rotation.""" + from firefly_forge.cli import client + + with client() as connection: + return connection.refresh_connection_oauth(name, request_id) + + @server.tool() + def disconnect_connection_oauth(name: str) -> dict[str, Any]: + """Revoke local connection access immediately; remote revocation is separate.""" + from firefly_forge.cli import client + + with client() as connection: + return connection.disconnect_connection_oauth(name) + @server.tool() def configure_external_mcp( connector: str, enabled: bool = False, api_key_file: str | None = None, clear_secret: bool = False @@ -834,6 +995,18 @@ def configure_external_mcp( connector, {"enabled": enabled, "api_key": key, "clear_secret": clear_secret} ) + @server.tool() + def link_external_mcp_oauth( + connector: str, connection_name: str, project_id: str, enabled: bool = True + ) -> dict[str, Any]: + """Link a currently authorized project connection; schema review and tool grants remain explicit.""" + from firefly_forge.cli import client + + with client() as connection: + return connection.link_external_mcp_oauth( + connector, {"connection_name": connection_name, "project_id": project_id, "enabled": enabled} + ) + @server.tool() def discover_external_mcp(connector: str) -> dict[str, Any]: """Make an explicit bounded remote schema discovery; do not claim tool execution from discovery.""" diff --git a/src/firefly_forge/migrations.py b/src/firefly_forge/migrations.py index f2848f60..17b87452 100644 --- a/src/firefly_forge/migrations.py +++ b/src/firefly_forge/migrations.py @@ -22,6 +22,15 @@ ForgeProductDefinitionEntity, ForgeWebhookInboxEntity, ) +from firefly_forge.connection_oauth_persistence import ( + OAuthAttemptEntity, + OAuthConnectionEntity, + OAuthCredentialEvidenceEntity, + OAuthEffectEntity, + OAuthEventEntity, + OAuthGrantEntity, + OAuthRegistrationEntity, +) from firefly_forge.execution_request_persistence import ForgeExecutionRequestEntity, ForgeExecutionRequestEventEntity from firefly_forge.identity_persistence import ( ForgeIdentityAttemptEntity, @@ -34,6 +43,11 @@ ForgeLearningProjectionEntity, ForgeLearningRecordEntity, ) +from firefly_forge.oauth_provider_policy_persistence import ( + OAuthProviderPolicyEntity, + OAuthProviderPolicyOperationEntity, + OAuthProviderPolicyRevisionEntity, +) from firefly_forge.persistence import ( ForgeDeploymentEntity, ForgeEventEntity, @@ -57,7 +71,7 @@ ForgeIdentityAdminOperationEntity, ) -SCHEMA_REVISION = 20 +SCHEMA_REVISION = 23 async def migrate(session: AsyncSession, schema: str) -> None: @@ -119,6 +133,16 @@ async def migrate(session: AsyncSession, schema: str) -> None: ForgeLearningRecordEntity, ForgeLearningEventEntity, ForgeLearningProjectionEntity, + OAuthConnectionEntity, + OAuthRegistrationEntity, + OAuthAttemptEntity, + OAuthGrantEntity, + OAuthEffectEntity, + OAuthEventEntity, + OAuthCredentialEvidenceEntity, + OAuthProviderPolicyEntity, + OAuthProviderPolicyRevisionEntity, + OAuthProviderPolicyOperationEntity, ) ] await connection.run_sync(lambda sync: ForgeRunEntity.metadata.create_all(sync, tables=tables)) @@ -318,3 +342,87 @@ async def migrate(session: AsyncSession, schema: str) -> None: "EXECUTE FUNCTION forge_refuse_immutable_change()" ) ) + + await _oauth_history_guards(session) + await _oauth_provider_policy_guards(session) + + +async def _oauth_history_guards(session: AsyncSession) -> None: + for table in ("forge_oauth_registrations", "forge_oauth_events", "forge_oauth_credential_evidence"): + await session.execute( + text( + f"CREATE OR REPLACE TRIGGER {table}_immutable " + f"BEFORE UPDATE OR DELETE ON {table} FOR EACH ROW " + "EXECUTE FUNCTION forge_refuse_immutable_change()" + ) + ) + await session.execute( + text(""" + CREATE OR REPLACE FUNCTION forge_guard_oauth_effect() RETURNS trigger AS $$ + BEGIN + IF OLD.id IS DISTINCT FROM NEW.id OR OLD.connection_id IS DISTINCT FROM NEW.connection_id + OR OLD.request_id IS DISTINCT FROM NEW.request_id OR OLD.kind IS DISTINCT FROM NEW.kind + OR OLD.created_at IS DISTINCT FROM NEW.created_at + OR OLD.lease_expires_at IS DISTINCT FROM NEW.lease_expires_at + OR (OLD.data - ARRAY['result','observed_at','disposition']) IS DISTINCT FROM + (NEW.data - ARRAY['result','observed_at','disposition']) + OR (OLD.state IN ('completed','rejected','unknown') AND + (OLD.state IS DISTINCT FROM NEW.state OR OLD.data IS DISTINCT FROM NEW.data)) THEN + RAISE EXCEPTION 'OAuth effect admission and closed outcome are immutable'; + END IF; + IF OLD.state IS DISTINCT FROM NEW.state AND NOT ( + OLD.state='executing' AND NEW.state IN ('completed','rejected','unknown') + ) THEN RAISE EXCEPTION 'OAuth effect transition cannot replay a request'; END IF; + RETURN NEW; + END; $$ LANGUAGE plpgsql + """) + ) + await session.execute( + text( + "CREATE OR REPLACE TRIGGER forge_oauth_effect_admission " + "BEFORE UPDATE ON forge_oauth_effects FOR EACH ROW EXECUTE FUNCTION forge_guard_oauth_effect()" + ) + ) + await session.execute( + text( + "CREATE OR REPLACE TRIGGER forge_oauth_effect_delete " + "BEFORE DELETE ON forge_oauth_effects FOR EACH ROW EXECUTE FUNCTION forge_refuse_immutable_change()" + ) + ) + + +async def _oauth_provider_policy_guards(session: AsyncSession) -> None: + for table in ("forge_oauth_provider_policy_revisions", "forge_oauth_provider_policy_operations"): + await session.execute( + text( + f"CREATE OR REPLACE TRIGGER {table}_immutable " + f"BEFORE UPDATE OR DELETE ON {table} FOR EACH ROW " + "EXECUTE FUNCTION forge_refuse_immutable_change()" + ) + ) + await session.execute( + text(""" + CREATE OR REPLACE FUNCTION forge_guard_oauth_provider_policy() RETURNS trigger AS $$ + BEGIN + IF OLD.id IS DISTINCT FROM NEW.id OR OLD.name IS DISTINCT FROM NEW.name + OR NEW.revision <> OLD.revision + 1 THEN + RAISE EXCEPTION 'Provider policy identity is immutable and revisions must advance'; + END IF; + RETURN NEW; + END; $$ LANGUAGE plpgsql + """) + ) + await session.execute( + text( + "CREATE OR REPLACE TRIGGER forge_oauth_provider_policy_revision " + "BEFORE UPDATE ON forge_oauth_provider_policies FOR EACH ROW " + "EXECUTE FUNCTION forge_guard_oauth_provider_policy()" + ) + ) + await session.execute( + text( + "CREATE OR REPLACE TRIGGER forge_oauth_provider_policy_delete " + "BEFORE DELETE ON forge_oauth_provider_policies FOR EACH ROW " + "EXECUTE FUNCTION forge_refuse_immutable_change()" + ) + ) diff --git a/src/firefly_forge/model_profile_controllers.py b/src/firefly_forge/model_profile_controllers.py index ef93bb24..8e777c8b 100644 --- a/src/firefly_forge/model_profile_controllers.py +++ b/src/firefly_forge/model_profile_controllers.py @@ -6,27 +6,44 @@ from pyfly.container import rest_controller from pyfly.web import Body, PathVar, get_mapping, post_mapping, put_mapping, request_mapping +from firefly_forge.configuration import SECRETS from firefly_forge.model_profiles import ModelProfileInput, ModelProfiles +from firefly_forge.store import Store from firefly_forge.task_routing import TaskRouting, TaskRoutingInput @rest_controller @request_mapping("/api/v1") class ModelProfileController: - def __init__(self, profiles: ModelProfiles, routing: TaskRouting) -> None: - self.profiles, self.routing = profiles, routing + def __init__(self, profiles: ModelProfiles, routing: TaskRouting, store: Store) -> None: + self.profiles, self.routing, self.store = profiles, routing, store @get_mapping("/model-profiles") - def profiles_catalog(self) -> list[dict[str, Any]]: - return self.profiles.catalog() + async def profiles_catalog(self) -> list[dict[str, Any]]: + result = self.profiles.catalog() + await self.store.admit_credentials(result) + return result @put_mapping("/model-profiles/{id}") - def save_profile(self, id: PathVar[str], body: Body[ModelProfileInput]) -> dict[str, Any]: - return self.profiles.save(id, body) + async def save_profile(self, id: PathVar[str], body: Body[ModelProfileInput]) -> dict[str, Any]: + await self.store.admit_credentials( + { + "name": body.name, + "description": body.description, + "values": {key: value for key, value in body.values.items() if key not in SECRETS}, + } + ) + public, digest = self.profiles.preview_save(id, body) + await self.store.admit_credentials(public) + return self.profiles.save(id, body, expected_digest=digest) @post_mapping("/model-profiles/{id}/test") async def test_profile(self, id: PathVar[str]) -> dict[str, Any]: - return await self.profiles.test(id) + public = [entry for entry in self.profiles.catalog() if entry["id"] == id] + await self.store.admit_credentials(public) + result = await self.profiles.test(id) + await self.store.admit_credentials(result) + return result @get_mapping("/task-routing") def task_routing(self) -> dict[str, Any]: diff --git a/src/firefly_forge/model_profiles.py b/src/firefly_forge/model_profiles.py index 8b392300..d5be1972 100644 --- a/src/firefly_forge/model_profiles.py +++ b/src/firefly_forge/model_profiles.py @@ -155,32 +155,47 @@ def _settings(self, request: ModelProfileInput, previous: Data | None) -> dict[s settings[endpoint] = validate_endpoint(settings[endpoint]) return settings - def save(self, name: str, request: ModelProfileInput) -> Data: + def _prepared_record(self, name: str, request: ModelProfileInput, document: Data) -> Data: + previous = document.get(name) + settings = self._settings(request, previous) + secret_values = { + fields[key]: settings.get(fields[key], "") + for fields in [FIELDS[request.provider]] + for key in SECRETS & fields.keys() + } + public = { + "name": request.name, + "description": request.description, + "settings": public_settings(request.provider, settings), + } + registry = {**secret_values, **self.redaction_settings(), **self.credential_registry()} + if contains_known_credential(public, registry): + raise ValueError("Remove configured credentials from public model profile fields") + return { + "name": request.name, + "description": request.description, + "provider": request.provider, + "revision": previous["revision"] + 1 if previous else 1, + "settings": settings, + } + + def preview_save(self, name: str, request: ModelProfileInput) -> tuple[Data, str]: name = profile_id(name) with self.private.lock: document = self.private._read(self.path) - previous = document.get(name) - settings = self._settings(request, previous) - secret_values = { - fields[key]: settings.get(fields[key], "") - for fields in [FIELDS[request.provider]] - for key in SECRETS & fields.keys() - } - public = { - "name": request.name, - "description": request.description, - "settings": public_settings(request.provider, settings), - } - registry = {**secret_values, **self.redaction_settings(), **self.credential_registry()} - if contains_known_credential(public, registry): - raise ValueError("Remove configured credentials from public model profile fields") - record = { - "name": request.name, - "description": request.description, - "provider": request.provider, - "revision": previous["revision"] + 1 if previous else 1, - "settings": settings, - } + record = self._prepared_record(name, request, document) + return self._public(name, record), content_digest({"document": document, "record": record}) + + def save(self, name: str, request: ModelProfileInput, *, expected_digest: str | None = None) -> Data: + name = profile_id(name) + with self.private.lock: + document = self.private._read(self.path) + record = self._prepared_record(name, request, document) + if ( + expected_digest is not None + and content_digest({"document": document, "record": record}) != expected_digest + ): + raise ValueError("Model profile settings changed during admission; review and retry") document[name] = record self.private._write(self.path, document) return self._public(name, record) diff --git a/src/firefly_forge/oauth_authority.py b/src/firefly_forge/oauth_authority.py new file mode 100644 index 00000000..75c61294 --- /dev/null +++ b/src/firefly_forge/oauth_authority.py @@ -0,0 +1,40 @@ +# Copyright 2026 Firefly Software Foundation. SPDX-License-Identifier: Apache-2.0 +"""Current native administrator authority for OAuth control-plane changes.""" + +from datetime import datetime +from typing import cast + +from sqlalchemy import func, select +from sqlalchemy.ext.asyncio import AsyncSession + +from firefly_forge.identity import Principal +from firefly_forge.identity_persistence import ForgeIdentityUserEntity +from firefly_forge.project_access import AccessDenied, ProjectAccess + + +class OAuthAccessDenied(PermissionError, AccessDenied): + pass + + +async def require_oauth_administrator(session: AsyncSession, actor: Principal) -> None: + row = await session.scalar( + select(ForgeIdentityUserEntity).where(ForgeIdentityUserEntity.id == actor.id).with_for_update() + ) + if actor.authentication_method == "local_bootstrap": + if row is None or row.enabled and row.issuer == actor.issuer and row.subject == actor.subject: + return + elif ( + row is not None + and row.enabled + and row.issuer == actor.issuer + and row.subject == actor.subject + and ProjectAccess.is_admin(actor) + and bool(actor.api_audience) + and actor.api_audience == row.api_roles_audience + and "forge-admin" in (row.api_roles or ()) + and row.api_roles_issued_at is not None + and row.api_roles_expires_at is not None + and row.api_roles_expires_at > cast(datetime, await session.scalar(select(func.clock_timestamp()))) + ): + return + raise OAuthAccessDenied("Current factory administrator authority is required") diff --git a/src/firefly_forge/oauth_credential_fingerprints.py b/src/firefly_forge/oauth_credential_fingerprints.py new file mode 100644 index 00000000..8fdc501b --- /dev/null +++ b/src/firefly_forge/oauth_credential_fingerprints.py @@ -0,0 +1,197 @@ +# Copyright 2026 Firefly Software Foundation. SPDX-License-Identifier: Apache-2.0 +"""Purpose-bound irreversible credential history; prefixes only accelerate full matches.""" + +from __future__ import annotations + +import base64 +import hashlib +import hmac +import json +import math +import re +from typing import Any, cast + +from firefly_forge.secrets import credential_representations + +Data = dict[str, Any] +MAX_HISTORY = 1024 +MAX_REPRESENTATIONS = 16384 +MAX_TEXT_BYTES = 1_048_576 +MAX_TOTAL_BYTES = 2_097_152 +MAX_WORK = 2_097_152 + + +class OAuthCredentialMatcher: + def __init__(self, encryption_key: str, schema: str) -> None: + raw = base64.urlsafe_b64decode(encryption_key) + if len(raw) != 32: + raise ValueError("Invalid shared vault key") + self.key = hmac.digest(raw, b"firefly-forge:oauth-redaction:v1:" + schema.encode(), "sha256") + self.key_id = hashlib.sha256(self.key).hexdigest() + + def _digest(self, purpose: bytes, value: str) -> str: + return hmac.digest(self.key, purpose + b"\0" + value.encode(), "sha256").hex() + + def _signature(self, packet: Data) -> str: + return self._digest(b"packet", json.dumps(packet, sort_keys=True, separators=(",", ":"))) + + def packet( + self, + row_id: str, + kind: str, + source_id: str, + revision: int, + secrets: list[str], + connection_id: str | None = None, + ) -> Data: + representations = sorted({item for secret in secrets if secret for item in credential_representations(secret)}) + if len(representations) > 32 or any(len(item.encode()) > 262144 for item in representations): + raise ValueError("OAuth credential history exceeds its bound") + packet: Data = { + "version": 1, + "key_id": self.key_id, + "row_id": row_id, + "kind": kind, + "source_id": source_id, + "connection_id": connection_id or source_id, + "revision": revision, + "representations": [ + { + "length": len(item), + "prefix_length": min(16, len(item)), + "prefix": self._digest(b"prefix", item[:16]), + "match": self._digest(b"match", item), + } + for item in representations + ], + } + return {**packet, "signature": self._signature(packet)} + + def _validated(self, packet: Data) -> list[Data]: + try: + if ( + not isinstance(packet, dict) + or set(packet) + != { + "version", + "key_id", + "row_id", + "kind", + "source_id", + "connection_id", + "revision", + "representations", + "signature", + } + or type(packet["version"]) is not int + or packet["version"] != 1 + or packet["key_id"] != self.key_id + or packet["kind"] not in {"registration", "grant"} + or type(packet["revision"]) is not int + or not 1 <= packet["revision"] <= 2_147_483_647 + or any( + not isinstance(packet[key], str) or not re.fullmatch(r"[a-f0-9]{32}", packet[key]) + for key in ("row_id", "source_id", "connection_id") + ) + or not isinstance(packet["signature"], str) + or not re.fullmatch(r"[a-f0-9]{64}", packet["signature"]) + or not isinstance(packet["representations"], list) + or len(packet["representations"]) > 32 + ): + raise ValueError + result = packet["representations"] + for item in result: + if ( + not isinstance(item, dict) + or set(item) != {"length", "prefix_length", "prefix", "match"} + or type(item["length"]) is not int + or not 1 <= item["length"] <= 262144 + or item["prefix_length"] != min(16, item["length"]) + or any( + not isinstance(item[key], str) or not re.fullmatch(r"[a-f0-9]{64}", item[key]) + for key in ("prefix", "match") + ) + ): + raise ValueError + signed = {key: value for key, value in packet.items() if key != "signature"} + if not hmac.compare_digest(packet["signature"], self._signature(signed)): + raise ValueError + return cast(list[Data], result) + except (KeyError, TypeError, ValueError, OverflowError): + raise ValueError("OAuth credential history cannot be authenticated") from None + + @staticmethod + def _strings(value: Any) -> list[str]: + strings: list[str] = [] + nodes = total = 0 + + def capture(item: str) -> None: + nonlocal total + try: + size = len(item.encode()) + except UnicodeError: + raise ValueError("Credential admission requires valid Unicode text") from None + total += size + if size > MAX_TEXT_BYTES or total > MAX_TOTAL_BYTES: + raise ValueError("Credential admission exceeds its text bound") + strings.append(item) + + def visit(item: Any, depth: int) -> None: + nonlocal nodes + nodes += 1 + if nodes > 10000 or depth > 24: + raise ValueError("Credential admission exceeds its structural bound") + if isinstance(item, str): + capture(item) + elif isinstance(item, dict): + for key, element in item.items(): + visit(key, depth + 1) + visit(element, depth + 1) + elif isinstance(item, (list, tuple)): + for element in item: + visit(element, depth + 1) + elif item is None or isinstance(item, bool): + capture(json.dumps(item)) + elif type(item) is int: + if item.bit_length() > 4096: + raise ValueError("Credential admission exceeds its numeric bound") + capture(str(item)) + elif type(item) is float: + if not math.isfinite(item): + raise ValueError("Credential admission requires finite JSON scalars") + capture(json.dumps(item, allow_nan=False)) + else: + raise ValueError("Credential admission requires bounded JSON data") + + visit(value, 0) + if isinstance(value, (dict, list, tuple)): + capture(json.dumps(value, ensure_ascii=False, allow_nan=False, separators=(",", ":"))) + return strings + + def contains(self, value: Any, packets: list[Data]) -> bool: + strings = self._strings(value) + if len(packets) > MAX_HISTORY: + raise ValueError("OAuth credential history exceeds its bound") + represented = [item for packet in packets for item in self._validated(packet)] + if len(represented) > MAX_REPRESENTATIONS: + raise ValueError("OAuth credential representations exceed their bound") + prefixes: dict[int, dict[str, list[Data]]] = {} + for item in represented: + prefixes.setdefault(item["prefix_length"], {}).setdefault(item["prefix"], []).append(item) + work = sum(max(0, len(value) - width + 1) for value in strings for width in prefixes) + if work > MAX_WORK: + raise ValueError("Credential admission exceeds its matching work bound") + hashed_bytes = 0 + for value in strings: + for width, candidates in prefixes.items(): + for start in range(max(0, len(value) - width + 1)): + prefix = self._digest(b"prefix", value[start : start + width]) + for item in candidates.get(prefix, []): + if start + item["length"] <= len(value): + candidate = value[start : start + item["length"]] + hashed_bytes += len(candidate.encode()) + if hashed_bytes > 16_777_216: + raise ValueError("Credential admission exceeds its full matching bound") + if hmac.compare_digest(self._digest(b"match", candidate), item["match"]): + return True + return False diff --git a/src/firefly_forge/oauth_provider_policies.py b/src/firefly_forge/oauth_provider_policies.py new file mode 100644 index 00000000..cb70e640 --- /dev/null +++ b/src/firefly_forge/oauth_provider_policies.py @@ -0,0 +1,198 @@ +# Copyright 2026 Firefly Software Foundation. SPDX-License-Identifier: Apache-2.0 +"""Native policy admission; consent never enables an unreviewed agent adapter.""" + +from dataclasses import asdict +from typing import Any +from urllib.parse import urlsplit +from uuid import uuid4 + +from pyfly.container import service +from sqlalchemy import func, select, text +from sqlalchemy.ext.asyncio import AsyncSession + +from firefly_forge.connection_oauth_models import OAuthPolicyBinding, OAuthProvider +from firefly_forge.identity import Principal +from firefly_forge.journal import digest +from firefly_forge.oauth_authority import require_oauth_administrator +from firefly_forge.oauth_provider_policy_models import LOCAL_PROVIDER, OAuthProviderPolicyInput, local_origin +from firefly_forge.oauth_provider_policy_persistence import ( + OAuthProviderPolicyEntity, + OAuthProviderPolicyOperationEntity, + OAuthProviderPolicyRepository, + OAuthProviderPolicyRevisionEntity, +) +from firefly_forge.store import Store + +Data = dict[str, Any] + + +@service +class OAuthProviderPolicies: + def __init__( + self, + store: Store, + records: OAuthProviderPolicyRepository, + *, + local_development_available: bool = False, + browser_origin: str = "", + ) -> None: + self.store, self.records = store, records + self.local_development_available = local_development_available is True + self.browser_host = urlsplit(browser_origin).hostname + + def _host_isolated(self, origin: str) -> bool: + # Host-only cookies ignore ports, so every browser handoff needs a different host. + return self.browser_host in {"127.0.0.1", "::1"} and urlsplit(origin).hostname != self.browser_host + + @staticmethod + def _document(origin: str, enabled: bool) -> Data: + origin = local_origin(origin) + policy = OAuthProvider( + id=LOCAL_PROVIDER, + issuer=origin, + authorization_endpoint=origin + "/oauth2/authorize", + token_endpoint=origin + "/oauth2/token", + resource=origin + "/mcp/readonly", + scopes=("repository:read",), + ) + return { + "mode": "local_development", + "enabled": enabled, + "local_origin": origin, + "provider": {**asdict(policy), "scopes": list(policy.scopes)}, + } + + async def _revision( + self, session: AsyncSession, row: OAuthProviderPolicyEntity + ) -> OAuthProviderPolicyRevisionEntity: + revision = await session.scalar( + select(OAuthProviderPolicyRevisionEntity).where( + OAuthProviderPolicyRevisionEntity.policy_id == row.id, + OAuthProviderPolicyRevisionEntity.revision == row.revision, + ) + ) + latest = await session.scalar( + select(func.max(OAuthProviderPolicyRevisionEntity.revision)).where( + OAuthProviderPolicyRevisionEntity.policy_id == row.id + ) + ) + if ( + revision is None + or latest != row.revision + or revision.digest != row.digest + or digest(revision.data) != row.digest + ): + raise ValueError("Current provider policy history is unavailable or changed") + data = revision.data + if ( + row.name != LOCAL_PROVIDER + or type(data.get("enabled")) is not bool + or not isinstance(data.get("local_origin"), str) + or data != self._document(data["local_origin"], data["enabled"]) + ): + raise ValueError("Provider policy does not match its admitted development contract") + return revision + + @staticmethod + def _view(row: OAuthProviderPolicyEntity, revision: OAuthProviderPolicyRevisionEntity) -> Data: + return { + "name": row.name, + "revision": row.revision, + "digest": row.digest, + **revision.data, + } + + async def lookup(self, session: AsyncSession, name: str) -> OAuthPolicyBinding | None: + if name != LOCAL_PROVIDER or not self.local_development_available: + return None + row = await session.scalar( + select(OAuthProviderPolicyEntity).where(OAuthProviderPolicyEntity.name == name).with_for_update(read=True) + ) + if row is None: + return None + revision = await self._revision(session, row) + if revision.data["enabled"] is not True or not self._host_isolated(revision.data["local_origin"]): + return None + data = revision.data["provider"] + return OAuthPolicyBinding(OAuthProvider(**{**data, "scopes": tuple(data["scopes"])}), row.revision, row.digest) + + async def directory(self, actor: Principal) -> Data: + async with self.store._unit() as session: + await require_oauth_administrator(session, actor) + row = await session.scalar( + select(OAuthProviderPolicyEntity) + .where(OAuthProviderPolicyEntity.name == LOCAL_PROVIDER) + .with_for_update(read=True) + ) + result = { + "local_development_available": self.local_development_available, + "policies": [self._view(row, await self._revision(session, row))] if row else [], + } + await self.store.admit_credentials(result) + return result + + async def configure(self, name: str, request: OAuthProviderPolicyInput, actor: Principal) -> Data: + if name != LOCAL_PROVIDER: + raise ValueError("Select an admitted provider policy") + async with self.store._unit() as session: + await require_oauth_administrator(session, actor) + await session.execute( + text("SELECT pg_advisory_xact_lock(hashtextextended(:key, 0))"), + {"key": self.store.schema + ":oauth-provider-policy:" + name}, + ) + row = await self.records.named(name) + if request.enabled and not self.local_development_available: + raise ValueError("Enable the explicit local development configuration before admitting this service") + if request.enabled and not self._host_isolated(request.local_origin): + raise ValueError("Use a different literal host from the factory to keep its browser cookies private") + if row is None and not self.local_development_available: + raise ValueError("Local development policy is unavailable") + if row: + await self._revision(session, row) + previous = await session.scalar( + select(OAuthProviderPolicyOperationEntity).where( + OAuthProviderPolicyOperationEntity.policy_id == row.id, + OAuthProviderPolicyOperationEntity.request_id == request.request_id, + ) + ) + if previous: + if ( + previous.data["request_digest"] != digest(request.model_dump()) + or previous.data["actor_id"] != actor.id.hex + ): + raise ValueError("Policy request identifier belongs to another admission") + result = previous.data["result"] + await self.store.admit_credentials(result) + return dict(result) + current = row.revision if row else 0 + if current != request.expected_revision: + raise ValueError("Provider policy changed; refresh its current configuration") + document = self._document(request.local_origin, request.enabled) + revision_number = current + 1 + packet = {"name": name, "revision": revision_number, "digest": digest(document), **document} + audit = { + "actor_id": actor.id.hex, + "request_digest": digest(request.model_dump()), + "result": packet, + "previous_revision": current, + } + await self.store.admit_credentials({"request": request.model_dump(), "result": packet, "audit": audit}) + if row is None: + row = OAuthProviderPolicyEntity( + id=uuid4(), name=name, revision=revision_number, digest=packet["digest"] + ) + await self.records.save(row) + else: + row.revision, row.digest = revision_number, packet["digest"] + session.add( + OAuthProviderPolicyRevisionEntity( + id=uuid4(), policy_id=row.id, revision=revision_number, digest=row.digest, data=document + ) + ) + session.add( + OAuthProviderPolicyOperationEntity( + id=uuid4(), policy_id=row.id, request_id=request.request_id, data=audit + ) + ) + await session.flush() + return packet diff --git a/src/firefly_forge/oauth_provider_policy_controllers.py b/src/firefly_forge/oauth_provider_policy_controllers.py new file mode 100644 index 00000000..49bb5c61 --- /dev/null +++ b/src/firefly_forge/oauth_provider_policy_controllers.py @@ -0,0 +1,32 @@ +# Copyright 2026 Firefly Software Foundation. SPDX-License-Identifier: Apache-2.0 +"""Supported administrator configuration, separate from provider credentials.""" + +from typing import Any + +from pyfly.container import rest_controller +from pyfly.web import Body, PathVar, get_mapping, put_mapping, request_mapping + +from firefly_forge.oauth_provider_policies import OAuthProviderPolicies +from firefly_forge.oauth_provider_policy_models import OAuthProviderPolicyInput +from firefly_forge.project_access import CURRENT_PRINCIPAL, AccessDenied + + +@rest_controller +@request_mapping("/api/v1/oauth-provider-policies") +class OAuthProviderPolicyController: + def __init__(self, policies: OAuthProviderPolicies) -> None: + self.policies = policies + + @get_mapping("") + async def directory(self) -> dict[str, Any]: + actor = CURRENT_PRINCIPAL.get() + if actor is None: + raise AccessDenied("Sign in as a factory administrator") + return await self.policies.directory(actor) + + @put_mapping("/{name}") + async def configure(self, name: PathVar[str], body: Body[OAuthProviderPolicyInput]) -> dict[str, Any]: + actor = CURRENT_PRINCIPAL.get() + if actor is None: + raise AccessDenied("Sign in as a factory administrator") + return await self.policies.configure(name, body, actor) diff --git a/src/firefly_forge/oauth_provider_policy_models.py b/src/firefly_forge/oauth_provider_policy_models.py new file mode 100644 index 00000000..c51cbce1 --- /dev/null +++ b/src/firefly_forge/oauth_provider_policy_models.py @@ -0,0 +1,46 @@ +# Copyright 2026 Firefly Software Foundation. SPDX-License-Identifier: Apache-2.0 +"""Administrator input never supplies provider paths, scopes or credentials.""" + +import re +from urllib.parse import urlsplit + +from pydantic import BaseModel, ConfigDict, Field, field_validator + +LOCAL_PROVIDER = "local-repository-tools" + + +def local_origin(value: str) -> str: + try: + parsed = urlsplit(value) + if ( + parsed.scheme != "http" + or parsed.hostname not in {"127.0.0.1", "::1"} + or parsed.username is not None + or parsed.password is not None + or parsed.path + or parsed.query + or parsed.fragment + or parsed.port is None + or not 1024 <= parsed.port <= 65535 + ): + raise ValueError + host = "[::1]" if parsed.hostname == "::1" else "127.0.0.1" + canonical = f"http://{host}:{parsed.port}" + if value != canonical or re.search(r"\s", value): + raise ValueError + return canonical + except ValueError: + raise ValueError("Use a canonical literal-loopback development address and an unprivileged port") from None + + +class OAuthProviderPolicyInput(BaseModel): + model_config = ConfigDict(extra="forbid", frozen=True, strict=True) + enabled: bool + local_origin: str = Field(min_length=1, max_length=100) + expected_revision: int = Field(ge=0, le=2_147_483_646) + request_id: str = Field(pattern=r"^[a-f0-9]{32}$") + + @field_validator("local_origin") + @classmethod + def canonical_origin(cls, value: str) -> str: + return local_origin(value) diff --git a/src/firefly_forge/oauth_provider_policy_persistence.py b/src/firefly_forge/oauth_provider_policy_persistence.py new file mode 100644 index 00000000..3e22cefb --- /dev/null +++ b/src/firefly_forge/oauth_provider_policy_persistence.py @@ -0,0 +1,43 @@ +# Copyright 2026 Firefly Software Foundation. SPDX-License-Identifier: Apache-2.0 +"""Shared policy pointers and immutable admission history.""" + +from typing import Any +from uuid import UUID + +from pyfly.container import repository +from pyfly.data.relational.sqlalchemy import BaseEntity, Repository +from sqlalchemy import ForeignKey, String, UniqueConstraint, select +from sqlalchemy.dialects.postgresql import JSONB +from sqlalchemy.orm import Mapped, mapped_column + + +class OAuthProviderPolicyEntity(BaseEntity): + __tablename__ = "forge_oauth_provider_policies" + name: Mapped[str] = mapped_column(String(64), unique=True) + revision: Mapped[int] = mapped_column() + digest: Mapped[str] = mapped_column(String(64)) + + +class OAuthProviderPolicyRevisionEntity(BaseEntity): + __tablename__ = "forge_oauth_provider_policy_revisions" + __table_args__ = (UniqueConstraint("policy_id", "revision"),) + policy_id: Mapped[UUID] = mapped_column(ForeignKey("forge_oauth_provider_policies.id"), index=True) + revision: Mapped[int] = mapped_column() + data: Mapped[dict[str, Any]] = mapped_column(JSONB) + digest: Mapped[str] = mapped_column(String(64)) + + +class OAuthProviderPolicyOperationEntity(BaseEntity): + __tablename__ = "forge_oauth_provider_policy_operations" + __table_args__ = (UniqueConstraint("policy_id", "request_id"),) + policy_id: Mapped[UUID] = mapped_column(ForeignKey("forge_oauth_provider_policies.id"), index=True) + request_id: Mapped[str] = mapped_column(String(32)) + data: Mapped[dict[str, Any]] = mapped_column(JSONB) + + +@repository +class OAuthProviderPolicyRepository(Repository[OAuthProviderPolicyEntity, UUID]): + async def named(self, name: str) -> OAuthProviderPolicyEntity | None: + return await self._require_session().scalar( + select(OAuthProviderPolicyEntity).where(OAuthProviderPolicyEntity.name == name).with_for_update() + ) diff --git a/src/firefly_forge/oauth_resources.py b/src/firefly_forge/oauth_resources.py new file mode 100644 index 00000000..b9df6537 --- /dev/null +++ b/src/firefly_forge/oauth_resources.py @@ -0,0 +1,270 @@ +# Copyright 2026 Firefly Software Foundation. SPDX-License-Identifier: Apache-2.0 +"""Native grant custody for exact, currently authorized resource requests.""" + +from __future__ import annotations + +import hmac +import json +import re +from collections.abc import Callable +from dataclasses import dataclass, field +from typing import Literal +from uuid import UUID + +import httpx2 +from pydantic import BaseModel, ConfigDict, Field +from pyfly.container import service + +from firefly_forge.connection_oauth import ConnectionOAuth, Data +from firefly_forge.identity import Principal +from firefly_forge.journal import digest +from firefly_forge.project_access import ProjectAccess +from firefly_forge.project_persistence import ForgeProjectEntity + + +class ResourceOwner(BaseModel): + model_config = ConfigDict(extra="forbid", frozen=True, strict=True) + user_id: str = Field(pattern=r"^[a-f0-9]{32}$") + authentication_method: Literal["oidc_session", "oidc_bearer", "local_bootstrap"] + global_admin: bool + api_audience: str | None = Field(max_length=200) + + +class ResourceBinding(BaseModel): + model_config = ConfigDict(extra="forbid", frozen=True, strict=True) + version: Literal[1] + provider: str = Field(pattern=r"^[a-z][a-z0-9-]{0,63}$") + connection_name: str = Field(pattern=r"^[a-z][a-z0-9-]{0,63}$") + connection_id: str = Field(pattern=r"^[a-f0-9]{32}$") + registration_id: str = Field(pattern=r"^[a-f0-9]{32}$") + registration_revision: int = Field(ge=1, le=2_147_483_647) + policy_revision: int = Field(ge=0, le=2_147_483_647) + policy_digest: str = Field(pattern=r"^[a-f0-9]{64}$") + project_id: str = Field(pattern=r"^[a-f0-9]{32}$") + issuer: str = Field(min_length=1, max_length=2048) + resource: str = Field(min_length=1, max_length=2048) + scopes: list[str] = Field(min_length=1, max_length=64) + grant_family: str = Field(pattern=r"^[a-f0-9]{32}$") + minimum_grant_revision: int = Field(ge=1, le=2_147_483_647) + owner_actor: ResourceOwner + signature: str = Field(pattern=r"^[a-f0-9]{64}$") + + +@dataclass(frozen=True) +class _ResourceCredential: + bearer: str = field(repr=False) + observation: Data + + +@service +class OAuthResources: + def __init__(self, connections: ConnectionOAuth, access: ProjectAccess) -> None: + self.connections = connections + self.store = connections.store + self.access = access + + def _signature(self, packet: Data) -> str: + raw = json.dumps(packet, sort_keys=True, separators=(",", ":"), ensure_ascii=False).encode() + if len(raw) > 16_000: + raise ValueError("OAuth resource binding exceeds its bound") + return hmac.digest(self.connections.matcher.key, b"resource-binding:v1\0" + raw, "sha256").hex() + + def _checked(self, packet: Data) -> Data: + result = ResourceBinding.model_validate(packet).model_dump() + expected = self._signature({key: value for key, value in result.items() if key != "signature"}) + if not hmac.compare_digest(result["signature"], expected): + raise ValueError("OAuth resource binding context is invalid") + return result + + async def bind(self, name: str, actor: Principal, *, project_id: str, resource: str) -> Data: + if not re.fullmatch(r"[a-f0-9]{32}", project_id): + raise ValueError("Select an exact resource project") + async with self.connections._locked(name) as session: + await self.connections._authority(session, actor) + row = await self.connections._required(name) + registration = await self.connections._registration(session, row) + policy = registration.data["policy"] + if registration.data.get("project_id") != project_id: + raise ValueError("OAuth resource requires its exact configured project") + if policy["resource"] != resource: + raise ValueError("OAuth resource differs from its admitted endpoint") + grant = await self.connections._grant(session, row) + if grant is None or grant.actor_id != actor.id: + raise ValueError("The current grant owner must admit this resource binding") + packet: Data = { + "version": 1, + "provider": registration.data["provider"], + "connection_name": name, + "connection_id": row.id.hex, + "registration_id": registration.id.hex, + "registration_revision": row.revision, + "policy_revision": registration.data.get("policy_revision", 0), + "policy_digest": registration.data.get("policy_digest", digest(policy)), + "project_id": project_id, + "issuer": policy["issuer"], + "resource": resource, + "scopes": policy["scopes"], + "grant_family": grant.family, + "minimum_grant_revision": grant.revision, + "owner_actor": ProjectAccess.actor_snapshot(actor), + } + binding = self._checked({**packet, "signature": self._signature(packet)}) + await self._admission(binding, actor=actor) + await self.store.admit_credentials(binding) + return binding + + async def _admission( + self, + binding: Data, + *, + run_id: str | None = None, + actor: Principal | None = None, + repository_id: str | None = None, + ) -> _ResourceCredential: + binding = self._checked(binding) + async with self.connections._locked(binding["connection_name"]) as session: + # Policy writers lock current administrator authority before the policy row. + if actor is not None: + await self.connections._authority(session, actor) + row = await self.connections._required(binding["connection_name"]) + registration = await self.connections._registration(session, row) + policy = registration.data["policy"] + if ( + registration.data["provider"] != binding["provider"] + or row.id.hex != binding["connection_id"] + or registration.id.hex != binding["registration_id"] + or row.revision != binding["registration_revision"] + or registration.data.get("project_id") != binding["project_id"] + or registration.data.get("policy_revision", 0) != binding["policy_revision"] + or registration.data.get("policy_digest", digest(policy)) != binding["policy_digest"] + or policy["resource"] != binding["resource"] + or policy["issuer"] != binding["issuer"] + or policy["scopes"] != binding["scopes"] + ): + raise ValueError("OAuth resource registration or policy context changed") + if row.status != "authorized_unverified" or self.connections._effect_block( + row, await self.connections._effect_packets(session, row) + ): + raise ValueError("OAuth resource requires an authorized grant without unresolved effects") + grant = await self.connections._grant(session, row) + if ( + grant is None + or grant.family != binding["grant_family"] + or grant.revision < binding["minimum_grant_revision"] + or grant.actor_id != UUID(binding["owner_actor"]["user_id"]) + or grant.expires_at <= await self.connections._time(session) + or grant.data["issuer"] != binding["issuer"] + or grant.data["resource"] != binding["resource"] + or set(grant.data["scopes"]) != set(binding["scopes"]) + ): + raise ValueError("OAuth resource grant is unavailable, expired or changed") + await self.access.authorize_actor(binding["owner_actor"], binding["project_id"], "execute") + if actor is not None: + if actor.id != grant.actor_id: + raise ValueError("The current grant owner must authorize resource discovery") + else: + if not run_id or not re.fullmatch(r"[a-f0-9]{32}", run_id): + raise ValueError("OAuth resource dispatch requires an exact recorded run") + run = await self.store.get_run(run_id) + if not run.get("execution_actor") or run.get("project_id") != binding["project_id"]: + raise ValueError("OAuth resource requires the run's captured actor and project") + project = await session.get(ForgeProjectEntity, UUID(binding["project_id"])) + if ( + project is None + or run["repository_id"] + not in {item["repository_id"] for item in project.data["definition"]["components"]} + or repository_id is not None + and run["repository_id"] != repository_id + ): + raise ValueError("OAuth resource requires the run's current project repository binding") + await self.access.authorize_execution(run) + await self.store.admit_credentials(binding) + payload = self.connections._open(grant.encrypted_data, self.connections._grant_context(row, grant)) + token = payload.get("access_token") + if not isinstance(token, str) or len(token) > 8192 or not re.fullmatch(r"[A-Za-z0-9._~+/-]+={0,2}", token): + raise ValueError("OAuth resource bearer contract is unavailable") + return _ResourceCredential( + token, + { + "connection_id": row.id.hex, + "registration_id": registration.id.hex, + "registration_revision": row.revision, + "policy_revision": binding["policy_revision"], + "policy_digest": binding["policy_digest"], + "project_id": binding["project_id"], + "grant_family": grant.family, + "grant_revision": grant.revision, + "observed_at": (await self.connections._time(session)).isoformat(), + }, + ) + + async def authorize(self, binding: Data, *, run_id: str, repository_id: str) -> None: + """Recheck current native resource authority without dispatch or a new observation.""" + await self._admission(binding, run_id=run_id, repository_id=repository_id) + + def transport( + self, + binding: Data, + *, + run_id: str | None = None, + actor: Principal | None = None, + inner: httpx2.AsyncBaseTransport | None = None, + authority: Callable[[], None] | None = None, + repository_id: str | None = None, + ) -> _ResourceTransport: + return _ResourceTransport( + self, + self._checked(binding), + run_id, + actor, + inner or httpx2.AsyncHTTPTransport(retries=0), + authority, + repository_id, + ) + + +class _ResourceTransport(httpx2.AsyncBaseTransport): + def __init__( + self, + resources: OAuthResources, + binding: Data, + run_id: str | None, + actor: Principal | None, + inner: httpx2.AsyncBaseTransport, + authority: Callable[[], None] | None, + repository_id: str | None, + ) -> None: + self.observations: list[Data] = [] + self.repository_id = repository_id + self.authority = authority + self.resources, self.binding, self.run_id, self.actor, self.inner = resources, binding, run_id, actor, inner + + async def handle_async_request(self, request: httpx2.Request) -> httpx2.Response: + provider = self.resources.store.session_provider + if provider is None or provider.current() is not None: + raise ValueError("OAuth resource HTTP cannot dispatch inside an ambient native transaction") + if str(request.url) != self.binding["resource"]: + raise ValueError("OAuth resource request is outside its exact admitted endpoint") + if len(self.observations) >= 12: + raise ValueError("OAuth resource request observations exceed their bound") + credential = await self.resources._admission( + self.binding, run_id=self.run_id, actor=self.actor, repository_id=self.repository_id + ) + if self.authority: + self.authority() + request.headers["Authorization"] = "Bearer " + credential.bearer + self.observations.append(credential.observation) + response = await self.inner.handle_async_request(request) + try: + await self.resources._admission( + self.binding, run_id=self.run_id, actor=self.actor, repository_id=self.repository_id + ) + if self.authority: + self.authority() + except BaseException: + await response.aclose() + raise + return response + + async def aclose(self) -> None: + await self.inner.aclose() diff --git a/src/firefly_forge/product_assistant.py b/src/firefly_forge/product_assistant.py index f603d96d..ca675354 100644 --- a/src/firefly_forge/product_assistant.py +++ b/src/firefly_forge/product_assistant.py @@ -14,6 +14,7 @@ from typing import Any, Literal from pydantic import BaseModel, ConfigDict, Field, field_validator, model_validator +from pyfly.container import service from pyfly.data.relational.sqlalchemy import LockMode from pyfly.kernel.lifecycle import CONSUMER_PHASE @@ -94,6 +95,7 @@ def valid_attachments(cls, value: list[str] | None) -> list[str] | None: return value +@service class ProductAssistant: phase = CONSUMER_PHASE @@ -104,6 +106,10 @@ def __init__( knowledge: Any = None, *, analysis_context: ReviewedAnalysisContext | None = None, + projects: Projects | None = None, + records: ForgeAssistantSessionRepository | None = None, + turns: ForgeAssistantTurnRepository | None = None, + events: ForgeAssistantEventRepository | None = None, designer: Designer = design_reply, credential_registry: Callable[[], dict[str, str]] = dict, attachments: Any = None, @@ -111,10 +117,11 @@ def __init__( ) -> None: self.store, self.directory, self.knowledge, self.designer = store, directory, knowledge, designer self.analysis_context = analysis_context + self.projects = projects or Projects(store) self.records, self.turns, self.events = ( - ForgeAssistantSessionRepository(), - ForgeAssistantTurnRepository(), - ForgeAssistantEventRepository(), + records or ForgeAssistantSessionRepository(), + turns or ForgeAssistantTurnRepository(), + events or ForgeAssistantEventRepository(), ) self.active: set[str] = set() if not 15 <= lease_seconds <= 300: @@ -293,7 +300,7 @@ async def create(self, repository_id: str, request: AssistantSessionInput) -> Da if selection else self.store.configuration.snapshot(selected_agent) ) - project = await Projects(self.store).project(request.project_id) if request.project_id else None + project = await self.projects.project(request.project_id) if request.project_id else None if project and project["definition"]["product_repository_id"] != repository_id: raise ValueError("Use the logical project's product definition and design repository") analysis_snapshot = None @@ -306,6 +313,7 @@ async def create(self, repository_id: str, request: AssistantSessionInput) -> Da request.analysis_id, AnalysisContextInput(digest=request.analysis_digest, component_ids=request.analysis_component_ids), ) + await self.store.admit_credentials([project, analysis_snapshot]) if self.contains_credential([project, analysis_snapshot], self.store.configuration.resolve(request.agent)): raise ValueError("Remove configured credentials from product context before starting a conversation") data: Data = { @@ -499,6 +507,7 @@ async def _turn(self, repository_id: str, session_id: str, request: AssistantTur if session.get("model_selection") else self.store.configuration.load_snapshot(session["config_revision"]) ) + await self.store.admit_credentials(request.message) if self.contains_credential(request.message, settings): raise ValueError("Do not place configured credentials in a product conversation") async with self.store._unit(): @@ -586,6 +595,7 @@ async def _turn(self, repository_id: str, session_id: str, request: AssistantTur "attachment_text": file_text, "image_input_receipt": image_receipt, } + await self.store.admit_credentials(context) if self.contains_credential(context, settings): raise ValueError("Remove configured credentials from the frozen product context before continuing") data: Data = { @@ -652,6 +662,7 @@ async def _turn(self, repository_id: str, session_id: str, request: AssistantTur "knowledge_snapshot": snapshot_knowledge(self.store.configuration), } ) + await self.store.admit_credentials(evidence) if self.contains_credential(evidence, settings): raise ValueError("Retrieved context contains a configured credential; response withheld") context["knowledge"] = evidence @@ -680,6 +691,7 @@ async def _turn(self, repository_id: str, session_id: str, request: AssistantTur await access.require_repository(actor, repository_id, "edit") if not await self._renew_claim(data["id"], 1): raise AssistantClaimLost("Dialogue ownership expired; explicitly recover its retained receipt") + await self.store.admit_credentials(prompt) if images: reply = await self.designer(prompt, settings, images=images, image_input_receipt=image_receipt) else: @@ -703,6 +715,7 @@ async def _turn(self, repository_id: str, session_id: str, request: AssistantTur encoded = json.dumps(reply.model_dump(mode="json"), ensure_ascii=False) if len(encoded.encode()) > 100000: raise ValueError("The product proposal exceeds 100 KB; request a narrower design scope") + await self.store.admit_credentials(reply.model_dump(mode="json")) if self.contains_credential(reply.model_dump(mode="json"), settings): raise ValueError("The model response contains a configured credential; proposal withheld") await self._authorize_session(session, "edit") diff --git a/src/firefly_forge/product_lifecycle.py b/src/firefly_forge/product_lifecycle.py index cd4c2537..d2f4a0db 100644 --- a/src/firefly_forge/product_lifecycle.py +++ b/src/firefly_forge/product_lifecycle.py @@ -270,7 +270,7 @@ def _prepare(self, previous: Data, request: FeatureChangeInput) -> Data: } async def preview(self, repository_id: str, request: FeatureChangeInput) -> Data: - self.store.reject_credentials(request.model_dump()) + await self.store.admit_credentials(request.model_dump()) previous = await self.collaboration.product(repository_id) if previous is None: raise ValueError("Save an initial product definition before requesting a feature change") @@ -280,7 +280,7 @@ async def apply(self, repository_id: str, request: FeatureChangeInput, *, actor_ from firefly_forge.collaboration import ProductDefinition from firefly_forge.collaboration_persistence import ForgeProductDefinitionEntity - self.store.reject_credentials(request.model_dump()) + await self.store.admit_credentials(request.model_dump()) request_digest = content_digest(request.model_dump()) async with self.store._unit(): await self.collaboration._repo_lock(repository_id) @@ -294,7 +294,7 @@ async def apply(self, repository_id: str, request: FeatureChangeInput, *, actor_ raise ValueError("Save an initial product definition before requesting a feature change") prepared = self._prepare(previous.data, request) definition = ProductDefinition.model_validate(prepared["definition"]) - self.store.reject_credentials(definition.model_dump()) + await self.store.admit_credentials(definition.model_dump()) origin = await validate_origin(self.store, repository_id, definition) data = { "repository_id": repository_id, diff --git a/src/firefly_forge/project_campaigns.py b/src/firefly_forge/project_campaigns.py index 16be28fc..f4566ff2 100644 --- a/src/firefly_forge/project_campaigns.py +++ b/src/firefly_forge/project_campaigns.py @@ -85,12 +85,16 @@ def __init__( events: ForgeCampaignEventRepository | None = None, *, source_resolver: SourceResolver | None = None, + projects: Projects | None = None, + project_records: ForgeProjectRepository | None = None, ) -> None: self.store, self.engine, self.journal = store, engine, journal self.records = records or ForgeCampaignRepository() self.children = children or ForgeCampaignChildRepository() self.events = events or ForgeCampaignEventRepository() self.source_resolver = source_resolver + self.projects = projects or Projects(store) + self.project_records = project_records or ForgeProjectRepository() self.poller: asyncio.Task[None] | None = None self.last_error: str | None = None @@ -220,7 +224,7 @@ def _verify(entries: list[Data]) -> bool: return True async def launch(self, project_id: str, request: CampaignLaunch) -> Data: - self.store.reject_credentials(request.model_dump()) + await self.store.admit_credentials(request.model_dump()) if not self.store.runtime_roles or self.store.runtime_roles.executes_jobs: await self.engine.assert_ownership() request_digest = digest(request.model_dump()) @@ -230,7 +234,7 @@ async def launch(self, project_id: str, request: CampaignLaunch) -> Data: if existing.data["request_digest"] != request_digest: raise ValueError("Campaign request identity already has another launch definition") return await self.campaign(project_id, existing.id.hex) - project = await Projects(self.store).project(project_id) + project = await self.projects.project(project_id) definition = ProjectDefinition.model_validate(project["definition"]) selected = self._scope(definition, request.component_ids) repositories = {item.repository_id for item in definition.components if item.id in selected} @@ -263,7 +267,7 @@ async def launch(self, project_id: str, request: CampaignLaunch) -> Data: if existing.data["request_digest"] != request_digest: raise ValueError("Campaign request identity already has another launch definition") return await self.campaign(project_id, existing.id.hex) - current = await ForgeProjectRepository().find_by_id(identifier(project_id), lock=LockMode.PESSIMISTIC_WRITE) + current = await self.project_records.find_by_id(identifier(project_id), lock=LockMode.PESSIMISTIC_WRITE) if current is None or current.data["digest"] != project["digest"]: raise ValueError("The project changed during campaign admission; launch again with a new request") for repo_id in sorted(repositories | {str(definition.product_repository_id)}): @@ -366,7 +370,7 @@ async def launch(self, project_id: str, request: CampaignLaunch) -> Data: return await self.campaign(project_id, row.id.hex) async def campaigns(self, project_id: str) -> list[Data]: - await Projects(self.store).project(project_id) + await self.projects.project(project_id) async with self.store._unit(): return [ await self.campaign(project_id, row.id.hex) for row in await self.records.latest(identifier(project_id)) diff --git a/src/firefly_forge/projects.py b/src/firefly_forge/projects.py index 7bb688ae..2812ab08 100644 --- a/src/firefly_forge/projects.py +++ b/src/firefly_forge/projects.py @@ -9,6 +9,7 @@ import uuid from typing import Any +from pyfly.container import service from pyfly.data.relational.sqlalchemy import LockMode from firefly_forge.models import RunInput @@ -24,13 +25,20 @@ Data = dict[str, Any] +@service class Projects: - def __init__(self, store: Store, records: ForgeProjectRepository | None = None) -> None: + def __init__( + self, + store: Store, + records: ForgeProjectRepository | None = None, + revisions: ForgeProjectRevisionRepository | None = None, + ) -> None: self.store, self.records = store, records or ForgeProjectRepository() + self.revisions = revisions or ForgeProjectRevisionRepository() async def configure(self, definition: ProjectDefinition, project_id: str | None = None) -> Data: self.store.roles.snapshot(definition.roles, self.store.policies.selection()) - self.store.reject_credentials(definition.model_dump()) + await self.store.admit_credentials(definition.model_dump()) for repository_id in {component.repository_id for component in definition.components}: await self.store.repository(repository_id) async with self.store._unit(): @@ -54,14 +62,14 @@ async def configure(self, definition: ProjectDefinition, project_id: str | None else: row = ForgeProjectEntity(id=identifier(data["id"]), data=data) await self.records.save(row) - await ForgeProjectRevisionRepository().save( + await self.revisions.save( ForgeProjectRevisionEntity(project_id=row.id, revision=data["revision"], data=copy.deepcopy(data)) ) return copy.deepcopy(data) async def revision(self, project_id: str, revision: int) -> Data: async with self.store._unit(): - row = await ForgeProjectRevisionRepository().revision(identifier(project_id), revision) + row = await self.revisions.revision(identifier(project_id), revision) if row is None: raise KeyError("Product project revision not found") return copy.deepcopy(row.data) diff --git a/src/firefly_forge/pyfly.yaml b/src/firefly_forge/pyfly.yaml index 2d09c32e..d9245f51 100644 --- a/src/firefly_forge/pyfly.yaml +++ b/src/firefly_forge/pyfly.yaml @@ -1,3 +1,4 @@ +# Copyright 2026 Firefly Software Foundation. SPDX-License-Identifier: Apache-2.0 pyfly: application: name: firefly-forge diff --git a/src/firefly_forge/reverse_engineering.py b/src/firefly_forge/reverse_engineering.py index 9366a620..4e1e691f 100644 --- a/src/firefly_forge/reverse_engineering.py +++ b/src/firefly_forge/reverse_engineering.py @@ -14,6 +14,7 @@ from typing import Any, Literal from pydantic import BaseModel, ConfigDict, Field +from pyfly.container import service from pyfly.data.relational.sqlalchemy import LockMode from firefly_forge.configuration import redact_secrets @@ -39,10 +40,19 @@ class AnalysisReview(BaseModel): reviewed: Literal[True] = True +@service class ReverseEngineering: - def __init__(self, store: Store, projects: Projects, directory: Path, connections: Any = None) -> None: + def __init__( + self, + store: Store, + projects: Projects, + directory: Path, + connections: Any = None, + *, + records: ForgeAnalysisRepository | None = None, + ) -> None: self.store, self.projects, self.directory, self.connections = store, projects, directory, connections - self.records = ForgeAnalysisRepository() + self.records = records or ForgeAnalysisRepository() self.active: set[str] = set() def safe(self, value: str) -> str: diff --git a/src/firefly_forge/runner_runtime/pyfly.yaml b/src/firefly_forge/runner_runtime/pyfly.yaml index a2242407..c387a2ec 100644 --- a/src/firefly_forge/runner_runtime/pyfly.yaml +++ b/src/firefly_forge/runner_runtime/pyfly.yaml @@ -1,3 +1,4 @@ +# Copyright 2026 Firefly Software Foundation. SPDX-License-Identifier: Apache-2.0 pyfly: application: name: firefly-forge-runner diff --git a/src/firefly_forge/search_tools.py b/src/firefly_forge/search_tools.py index bba6d7d3..8d525559 100644 --- a/src/firefly_forge/search_tools.py +++ b/src/firefly_forge/search_tools.py @@ -9,7 +9,7 @@ import json import re import uuid -from collections.abc import Callable +from collections.abc import Awaitable, Callable from pathlib import Path from typing import Any from urllib.parse import urlsplit @@ -107,6 +107,7 @@ def __init__(self, directory: Path, *, client: httpx.AsyncClient | None = None) self.lock = FileLock(str(directory / "search.lock")) self.client = client self.credential_registry: Callable[[], dict[str, str]] = dict + self.credential_admission: Callable[[Any], Awaitable[None]] | None = None @staticmethod def _public(record: dict[str, Any]) -> dict[str, Any]: @@ -214,6 +215,8 @@ async def search( raise ValueError("Search query must contain 1..600 characters and at most 75 words") if type(max_results) is not int or not 1 <= max_results <= 10: raise ValueError("Search result count must be 1..10") + if self.credential_admission is not None: + await self.credential_admission([query, *domains]) credentials = {**self.credential_registry(), **self.secrets()} if contains_known_credential([query, *domains], credentials): raise ValueError("Search queries cannot contain configured credentials") diff --git a/src/firefly_forge/store.py b/src/firefly_forge/store.py index c6bafba9..69f1b7fd 100644 --- a/src/firefly_forge/store.py +++ b/src/firefly_forge/store.py @@ -8,8 +8,8 @@ import os import re import uuid -from collections.abc import AsyncIterator, Callable -from contextlib import asynccontextmanager +from collections.abc import AsyncIterator, Awaitable, Callable +from contextlib import asynccontextmanager, nullcontext from datetime import UTC, datetime from pathlib import Path from typing import Any, cast @@ -38,6 +38,7 @@ ForgeRunRepository, ) from firefly_forge.policies import PolicyCatalog +from firefly_forge.project_campaign_persistence import ForgeCampaignChildRepository, ForgeCampaignRepository from firefly_forge.runner_factory_models import FactoryPoolSelection, capture_factory_pool from firefly_forge.sandbox_models import capture_sandbox from firefly_forge.secrets import contains_known_credential @@ -78,12 +79,15 @@ def __init__( event_records: ForgeEventRepository | None = None, deployment_records: ForgeDeploymentRepository | None = None, product_records: ForgeProductDefinitionRepository | None = None, + campaign_records: ForgeCampaignRepository | None = None, + campaign_children: ForgeCampaignChildRepository | None = None, ) -> None: self.path = path or Path(os.environ.get("FORGE_DATA_DIR", ".forge")) / "factory.db" self.configuration = ConfigurationStore(self.path.parent) self.policies = PolicyCatalog(self.path.parent) self.roles = RoleRegistry(self.path.parent) self.credential_registry: Callable[[], dict[str, str]] = dict + self.vault_credential_admission: Callable[[Any], Awaitable[None]] | None = None self.task_router: Any = None self.runtime_roles: Any = None self.execution_requests: Any = None @@ -107,6 +111,8 @@ def __init__( self.event_records = event_records or ForgeEventRepository() self.deployment_records = deployment_records or ForgeDeploymentRepository() self.product_records = product_records or ForgeProductDefinitionRepository() + self.campaign_records = campaign_records or ForgeCampaignRepository() + self.campaign_children = campaign_children or ForgeCampaignChildRepository() async def start(self) -> None: await self.initialize() @@ -219,13 +225,14 @@ async def _release_ownership(self) -> None: await connection.close() @asynccontextmanager - async def _unit(self) -> AsyncIterator[AsyncSession]: + async def _unit(self, *, autoflush: bool = True) -> AsyncIterator[AsyncSession]: if not self._initialized or self.session_provider is None: raise RuntimeError("Await Store.initialize() before accessing the ledger") async with self.session_provider.unit() as session: - await session.execute(text(f'SET LOCAL search_path TO "{self.schema}"')) - await session.execute(text("SET LOCAL synchronous_commit TO on")) - yield session + with nullcontext() if autoflush else session.no_autoflush: + await session.execute(text(f'SET LOCAL search_path TO "{self.schema}"')) + await session.execute(text("SET LOCAL synchronous_commit TO on")) + yield session async def add_repository(self, request: RepositoryInput) -> Data: data = {**request.model_dump(), "id": uuid.uuid4().hex, "created_at": now()} @@ -296,7 +303,7 @@ async def create_run( await ProjectAccess(self).require_project( actor, request.project_id, "release" if request.publish else "execute" ) - self.reject_credentials(request.model_dump()) + await self.admit_credentials(request.model_dump()) runner = ( prepared_runner if prepared_runner is not None @@ -410,7 +417,7 @@ async def create_run( "The product brand revision changed while freezing its reviewed design; retry admission" ) role_snapshot = self.roles.snapshot(role_selection, snapshot, tool_catalog=tools) - self.reject_credentials([definition, branding, snapshot, role_snapshot, component, runner, design]) + await self.admit_credentials([definition, branding, snapshot, role_snapshot, component, runner, design]) review_configuration = ( { "config_revision": review_selection["config_revision"], @@ -480,13 +487,31 @@ def reject_credentials(self, value: Any) -> None: "Do not place configured credentials in product briefs, definitions or worker instructions" ) + async def admit_credentials(self, value: Any) -> None: + if self.vault_credential_admission is not None: + await self.vault_credential_admission(value) + else: + from sqlalchemy import select + + from firefly_forge.connection_oauth_persistence import ( + OAuthCredentialEvidenceEntity, + OAuthGrantEntity, + OAuthRegistrationEntity, + ) + + async with self._unit(autoflush=False) as session: + for entity in (OAuthCredentialEvidenceEntity, OAuthGrantEntity, OAuthRegistrationEntity): + if await session.scalar(select(entity.id).limit(1)) is not None: + raise ValueError("OAuth credential admission service is unavailable") + self.reject_credentials(value) + async def repository_roles(self, value: str) -> Data: repo = await self.repository(value) return {"roles": repo.get("roles"), "inherited": "roles" not in repo} async def set_repository_roles(self, value: str, request: ProjectRoles) -> Data: self.roles.snapshot(request, self.policies.selection()) - self.reject_credentials(request.model_dump()) + await self.admit_credentials(request.model_dump()) async with self._unit(): row = await self.repository_records.find_by_id(identifier(value), lock=LockMode.PESSIMISTIC_WRITE) if row is None: @@ -556,18 +581,16 @@ async def claim(self, value: str) -> bool: return True async def assert_campaign_current(self, run: Data, *, action_id: str | None = None) -> None: - from firefly_forge.project_campaign_persistence import ForgeCampaignChildRepository, ForgeCampaignRepository - context = run.get("campaign_context") or {} if not context.get("campaign_id"): return - header = await ForgeCampaignRepository().find_by_id( + header = await self.campaign_records.find_by_id( identifier(context["campaign_id"]), lock=LockMode.PESSIMISTIC_WRITE, ) if header is None or header.data["current_attempts"].get(context["component_id"]) != context["attempt"]: raise ValueError("This component attempt is no longer current in its project campaign") - children = await ForgeCampaignChildRepository().children(header.id) + children = await self.campaign_children.children(header.id) if not any( child.run_id.hex == run["id"] and child.component_id == context["component_id"] diff --git a/src/firefly_forge/tool_broker.py b/src/firefly_forge/tool_broker.py index 55ce657f..cbd79bd9 100644 --- a/src/firefly_forge/tool_broker.py +++ b/src/firefly_forge/tool_broker.py @@ -125,6 +125,7 @@ async def invoke( raise ValueError("Tool invocation requires an actual source association") if len(json.dumps(arguments).encode()) > 64_000: raise ValueError("Tool arguments exceed 64 KB") + await self.store.admit_credentials([arguments, source, configuration, correlation_id]) if contains_known_credential([arguments, source, configuration, correlation_id], self.credential_registry()): raise ValueError("Tool invocations cannot contain configured credentials") from firefly_forge.runner_configuration import SearchQuery @@ -226,7 +227,7 @@ async def invoke( await ProjectAccess(self.store).authorize_execution(run.data) if completion_guard is not None: completion_guard() - self._authorize_result(previous, "succeeded") + await self._authorize_result(previous, "succeeded") return copy.deepcopy(previous.data["result"]) if previous.status == "rejected": error = previous.data["error"] @@ -295,6 +296,7 @@ def evidence(payload: Data) -> Data: result = {**result, "invocation_id": correlation_id} if len(json.dumps(result).encode()) > limits["max_result_bytes"]: raise ValueError("Tool result exceeds its frozen response bound") + await self.store.admit_credentials(result) if contains_known_credential(result, self.credential_registry()): raise ValueError("Tool result reflected configured credentials") await self._complete(run_id, correlation_id, "succeeded", evidence({"result": result})) @@ -342,7 +344,7 @@ async def _complete(self, run_id: str, correlation_id: str, status: str, evidenc row = next(item for item in await self.records.for_run(run.id) if item.correlation_id == correlation_id) if row.status != "pending": raise ValueError("Tool invocation already has a recorded outcome") - self._authorize_result(row, status) + await self._authorize_result(row, status) row.status = status row.data = {**row.data, **copy.deepcopy(evidence), "completed_at": now()} await self.records.save(row) @@ -353,22 +355,23 @@ async def _complete(self, run_id: str, correlation_id: str, status: str, evidenc "tool_receipt" if status != "unknown" else "tool_unknown", {"correlation_id": correlation_id, "tool": row.tool, "status": status, **evidence}, ) - self._authorize_result(row, status) + await self._authorize_result(row, status) - def _authorize_result(self, row: ForgeToolInvocationEntity, status: str) -> None: + async def _authorize_result(self, row: ForgeToolInvocationEntity, status: str) -> None: if status != "succeeded" or not row.tool.startswith("external_mcp:"): return if self.external_mcp is None: raise ValueError("External MCP result requires its registered authority") admission = row.data["admission"] arguments = admission["arguments"] - self.external_mcp.authorize( + await self.external_mcp.authorize_result( admission["configuration"], arguments["connector"], arguments["tool"], arguments["arguments"], roles=admission["roles"], stage=row.task_id, + run_id=row.run_id.hex, ) async def reconcile(self, run_id: str, correlation_id: str, reconciliation_id: str) -> Data: diff --git a/src/firefly_forge/user_administration.py b/src/firefly_forge/user_administration.py index 3eeb934d..a70e4216 100644 --- a/src/firefly_forge/user_administration.py +++ b/src/firefly_forge/user_administration.py @@ -188,8 +188,8 @@ async def _actor(self, actor: Principal) -> None: if not await ProjectAccess(self.store).current_administrator(actor): raise PermissionError("Identity administration requires a verified factory administrator") - def _guard(self, value: Any) -> None: - self.store.reject_credentials(value) + async def _guard(self, value: Any) -> None: + await self.store.admit_credentials(value) if contains_known_credential(value, {**self.identity.redaction_settings(), **self.redaction_settings()}): raise ValueError("Remove configured credentials from identity metadata") @@ -262,7 +262,7 @@ async def set_enabled(self, user_id: str, enabled: bool, actor: Principal) -> Da async def _claim( self, kind: str, request: Data, actor: Principal ) -> tuple[ForgeIdentityAdminOperationEntity, bool]: - self._guard(request) + await self._guard(request) request_digest = content_digest({"kind": kind, "request": request}) async with self.store._unit() as session: await session.execute( @@ -355,7 +355,7 @@ async def _token(self, config: Data) -> str: return token async def _local_user(self, subject: str, remote: Data) -> UUID: - self._guard({key: remote.get(key) for key in ("username", "email", "firstName", "lastName")}) + await self._guard({key: remote.get(key) for key in ("username", "email", "firstName", "lastName")}) full_name = " ".join( value for key in ("firstName", "lastName") if isinstance(value := remote.get(key), str) ).strip()[:200] @@ -557,7 +557,7 @@ async def invite(self, user_id: str, request: UserInviteInput, actor: Principal) async def recover_operation(self, operation_id: str, request: AdministrationRecovery, actor: Principal) -> Data: await self._actor(actor) - self._guard(request.model_dump()) + await self._guard(request.model_dump()) request_digest = content_digest(request.model_dump()) async with self.store._unit(): row = await self.operations.find_by_id(identifier(operation_id), lock=LockMode.PESSIMISTIC_WRITE) @@ -584,7 +584,7 @@ async def recover_operation(self, operation_id: str, request: AdministrationReco async def reconcile(self, operation_id: str, request: AdministrationReconciliation, actor: Principal) -> Data: await self._actor(actor) - self._guard(request.model_dump()) + await self._guard(request.model_dump()) async with self.store._unit(): row = await self.operations.find_by_id(identifier(operation_id)) if row is None: diff --git a/src/firefly_forge/workspace_tools.py b/src/firefly_forge/workspace_tools.py index 355c0d6e..0b76c9bf 100644 --- a/src/firefly_forge/workspace_tools.py +++ b/src/firefly_forge/workspace_tools.py @@ -30,6 +30,7 @@ class ToolRuntimeContext: knowledge_lookup: Callable[[str, bool, str | None], Awaitable[dict[str, Any]]] | None = None external_mcp: Callable[[str, str, dict[str, Any]], Awaitable[dict[str, Any]]] | None = None credential_registry: Callable[[], dict[str, str]] = dict + credential_admission: Callable[[Any], Awaitable[None]] | None = None browser_journey: Callable[[BrowserJourney], Awaitable[JourneyEvidence]] | None = None image_capability: dict[str, Any] = field(default_factory=dict) qa_references: tuple[dict[str, Any], ...] = () diff --git a/studio/package-lock.json b/studio/package-lock.json index df2d5fb5..4902750a 100644 --- a/studio/package-lock.json +++ b/studio/package-lock.json @@ -1,12 +1,12 @@ { "name": "firefly-forge-studio", - "version": "0.2.3", + "version": "0.2.4", "lockfileVersion": 3, "requires": true, "packages": { "": { "name": "firefly-forge-studio", - "version": "0.2.3", + "version": "0.2.4", "license": "Apache-2.0", "dependencies": { "lucide-react": "^0.577.0", diff --git a/studio/package.json b/studio/package.json index 67c922e5..282bd52c 100644 --- a/studio/package.json +++ b/studio/package.json @@ -1,6 +1,6 @@ { "name": "firefly-forge-studio", - "version": "0.2.3", + "version": "0.2.4", "private": true, "type": "module", "license": "Apache-2.0", diff --git a/studio/src/Administration.tsx b/studio/src/Administration.tsx index cd7e3556..78f096ff 100644 --- a/studio/src/Administration.tsx +++ b/studio/src/Administration.tsx @@ -19,6 +19,7 @@ export type AdministrationPage = | "workflow" | "collaboration" | "search" + | "browser-connections" | "external-tools"; export function Administration({ session, @@ -32,6 +33,14 @@ export function Administration({ session?.memberships.some((item) => item.permissions.includes("members")), ); const cards = [ + { + page: "browser-connections" as const, + icon: Globe, + title: "Connected accounts", + body: "Register a client, authorize an account in your browser, and manage its connection.", + allowed: administrator, + scope: "Factory administrator", + }, { page: "access" as const, icon: ShieldCheck, diff --git a/studio/src/App.tsx b/studio/src/App.tsx index 9d01e49a..6dd2c649 100644 --- a/studio/src/App.tsx +++ b/studio/src/App.tsx @@ -74,6 +74,8 @@ import { UserAdministration } from "./UserAdministration"; import { Administration } from "./Administration"; import { SearchConfiguration } from "./SearchConfiguration"; import { ExternalTools } from "./ExternalTools"; +import { BrowserConnections } from "./BrowserConnections"; +import { readResume, resumeKey } from "./ConnectionOAuthSettings"; import { Collaboration } from "./Collaboration"; import "./Integrations.css"; import "./UsabilityRefinements.css"; @@ -101,6 +103,7 @@ type Page = | "admin" | "users" | "search" + | "browser-connections" | "external-tools"; const working = (status: string) => [ @@ -291,8 +294,17 @@ export default function App() { setSetupGoal("product"); setPage("product"); } + if ( + identity.session?.global_admin && + readResume( + sessionStorage.getItem(resumeKey), + connection.base, + identity.session.user.id, + ) + ) + setPage("browser-connections"); } - }, [identity.session, identity.loading]); + }, [identity.session, identity.loading, connection.base]); const refresh = useCallback( async (signal?: AbortSignal) => { if (!connection.authenticated && !connection.token) return; @@ -468,6 +480,7 @@ export default function App() { users: "People", search: "Internet search", "external-tools": "External tools", + "browser-connections": "Connected accounts", }; const navigationPage = administrationLabels[page] ? "admin" @@ -999,6 +1012,13 @@ export default function App() { onAgents={() => setPage("workflow")} /> )} + {page === "browser-connections" && ( + navigate("external-tools")} + /> + )} {page === "access" && ( div { + padding-block: 10px; +} +@media (min-width: 1000px) { + .oauth-client-fields .oauth-secret-hint { + display: none; + } +} + +.oauth-policy-changed { + padding: 12px 16px; + border: 1px solid var(--accent-line); + background: var(--accent-soft); + border-radius: 5px; +} +.oauth-policy-changed h3 { + font-size: 16px; + margin-bottom: 8px; +} +.oauth-policy-changed p { + font-size: 14px; + line-height: 1.7; + color: var(--muted); +} + +.oauth-service-configuration { + display: grid; + gap: 20px; + min-width: 0; +} +.oauth-local-entry { + display: flex; + align-items: flex-start; + gap: 16px; + padding: 20px; + border: 1px solid var(--line); + border-radius: 5px; +} +.oauth-local-entry > svg { + flex: 0 0 auto; + color: var(--accent-ink); +} +.oauth-local-entry > div { + flex: 1; + min-width: 0; +} +.oauth-local-entry h3 { + font-size: 16px; + margin-bottom: 8px; +} +.oauth-local-entry p { + color: var(--muted); + font-size: 14px; + line-height: 1.7; + max-width: 64ch; +} +.oauth-local-entry button { + flex: 0 0 auto; +} +.oauth-service-enabled { + grid-column: 1 / -1; +} +@media (max-width: 600px) { + .oauth-local-entry { + flex-wrap: wrap; + padding: 16px; + } + .oauth-local-entry button { + margin-left: 38px; + } +} + +@media (min-width: 1320px) and (max-height: 900px) { + .workspace-main + > main:has(> .alert) + .browser-connections + .oauth-client-fields { + grid-template-columns: repeat(3, minmax(0, 1fr)); + } +} +@media (max-width: 600px) and (max-height: 900px) { + .workspace-main + > main:has(> .alert) + .oauth-wizard + .wizard-heading + > p:not(.external-wizard-notice) { + display: none; + } +} diff --git a/studio/src/BrowserConnections.tsx b/studio/src/BrowserConnections.tsx new file mode 100644 index 00000000..47c95edb --- /dev/null +++ b/studio/src/BrowserConnections.tsx @@ -0,0 +1,1387 @@ +/* Copyright 2026 Firefly Software Foundation. SPDX-License-Identifier: Apache-2.0 */ +import { + useCallback, + useEffect, + useLayoutEffect, + useRef, + useState, + type FormEvent, +} from "react"; +import { + ArrowLeft, + ArrowRight, + ExternalLink, + KeyRound, + RefreshCw, + ShieldCheck, + Unplug, + Globe, + FolderKey, + Server, +} from "lucide-react"; +import { ApiError, request, type Connection } from "./api"; +import type { IdentitySession } from "./Identity"; +import { Wizard } from "./Wizard"; +import { readProjects, type ToolProject } from "./ExternalToolsSettings"; +import { + connectionName, + continuation, + registrationPayload, + readOAuthProviders, + readOAuthSummary, + readOAuthDirectory, + readOAuthReceipt, + receiptResolves, + type OAuthPending, + readResume, + resumePacket, + connectionResume, + resumeKey, + type OAuthProviderChoice, + type OAuthSummary, +} from "./ConnectionOAuthSettings"; +import { OAuthServiceConfiguration } from "./OAuthServiceConfiguration"; +import { + localProvider, + readPolicyDirectory, + type OAuthPolicyDirectory, +} from "./OAuthServicePolicy"; +import "./ExternalTools.css"; +import "./BrowserConnections.css"; + +const providerNames: Record = { + github: "GitHub", + figma: "Figma", + sentry: "Sentry", + grafana: "Grafana", + playwright: "Playwright", + "local-repository-tools": "Local repository tools", +}; +const statusNames: Record = { + authorization_required: "Browser authorization required", + authorized_unverified: "Authorization retained; tools unavailable", + reauthorization_required: "New authorization required", + disconnected: "Locally disconnected", +}; +function failure(cause: unknown) { + if (cause instanceof ApiError) { + if (cause.status === 401 || cause.status === 403) + return "Current factory administrator access is required. Sign in again before continuing."; + if (cause.status === 404) + return "This connection or lifecycle endpoint is unavailable. Check the current factory and connection name."; + if (cause.status === 409 || cause.status === 422) + return "The server rejected this action. Refresh the account state and review its authorization requirements."; + } + return "The response could not be confirmed. Refresh the account state before continuing. An outstanding provider request must not be repeated."; +} +export function BrowserConnections({ + connection, + session, + onTools, +}: { + connection: Connection; + session: IdentitySession | null; + onTools: () => void; +}) { + return ( + <> +
+
+

Connected accounts

+
+ +
+ {session?.global_admin ? ( + + ) : ( +
+ +
+

Factory administrator access required

+

+ Browser authorization stores private credentials. A project role + does not grant permission to manage them. +

+
+
+ )} + + ); +} +function Connections({ + connection, + actor, + onTools, +}: { + connection: Connection; + actor: string; + onTools: () => void; +}) { + const [providers, setProviders] = useState([]), + [projects, setProjects] = useState([]), + [saved, setSaved] = useState(null), + [directory, setDirectory] = useState([]), + [policyDirectory, setPolicyDirectory] = + useState(null), + [policyEditing, setPolicyEditing] = useState(false); + const [step, setStep] = useState(0), + [editing, setEditing] = useState(false), + [busy, setBusy] = useState(false), + [error, setError] = useState(""), + [notice, setNotice] = useState(""), + [uncertain, setUncertain] = useState(false); + const [provider, setProvider] = useState(""), + [name, setName] = useState(""), + [project, setProject] = useState(""), + [clientId, setClientId] = useState(""), + [clientType, setClientType] = useState("public"), + [authentication, setAuthentication] = useState("client_secret_post"), + [secret, setSecret] = useState(""), + [disconnecting, setDisconnecting] = useState(false), + [recovering, setRecovering] = useState(false), + [recoveryReason, setRecoveryReason] = useState(""), + [acknowledged, setAcknowledged] = useState(false); + const active = useRef(null), + view = useRef(null), + alert = useRef(null), + loaded = useRef(false); + const current = providers.find((p) => p.provider === provider), + available = providers.filter((p) => p.status === "registration_available"); + const retain = useCallback( + (currentName: string, uncertain: boolean, pending?: OAuthPending) => { + try { + sessionStorage.setItem( + resumeKey, + JSON.stringify( + resumePacket( + readResume( + sessionStorage.getItem(resumeKey), + connection.base, + actor, + ), + currentName, + connection.base, + actor, + uncertain, + pending, + ), + ), + ); + return true; + } catch { + return false; + } + }, + [connection.base, actor], + ); + const read = useCallback( + async (controller: AbortController, currentName?: string) => { + setSaved(null); + setProviders([]); + setDirectory([]); + const [catalog, products, connections, servicePolicy] = await Promise.all( + [ + request(connection, "/connection-oauth/providers", { + signal: controller.signal, + }), + request(connection, "/projects", { + signal: controller.signal, + }), + request(connection, "/connection-oauth", { + signal: controller.signal, + }), + request(connection, "/oauth-provider-policies", { + signal: controller.signal, + }), + ], + ); + const entries = readOAuthProviders(catalog), + choices = readProjects(products), + listed = readOAuthDirectory(connections), + policyState = readPolicyDirectory(servicePolicy); + const resume = readResume( + sessionStorage.getItem(resumeKey), + connection.base, + actor, + ); + const selectedMarker = currentName + ? connectionResume(resume, currentName) + : null; + if (controller.signal.aborted) return; + setProviders(entries); + setProjects(choices); + setDirectory(listed); + setPolicyDirectory(policyState); + let closed = false; + if (currentName && selectedMarker?.pending) { + const receipt = readOAuthReceipt( + await request( + connection, + `/connection-oauth/${currentName}/effects/${selectedMarker.pending.requestId}`, + { signal: controller.signal }, + ), + ); + closed = receiptResolves(receipt, selectedMarker.pending); + } + const summary = currentName + ? readOAuthSummary( + await request( + connection, + `/connection-oauth/${currentName}`, + { signal: controller.signal }, + ), + currentName, + ) + : null; + if (controller.signal.aborted) return; + setProviders(entries); + setProjects(choices); + setDirectory( + summary + ? listed.map((entry) => + entry.name === summary.name ? summary : entry, + ) + : listed, + ); + if (summary) { + setSaved(summary); + if ( + closed && + selectedMarker?.pending?.revision === summary.revision && + retain(summary.name, false) + ) { + setUncertain(false); + setNotice( + "The matching request has a closed server receipt. Current actions were checked again; no provider request was repeated.", + ); + } + } + return closed; + }, + [connection, actor, retain], + ); + useEffect(() => { + const controller = new AbortController(); + active.current = controller; + setBusy(true); + const resume = readResume( + sessionStorage.getItem(resumeKey), + connection.base, + actor, + ); + if (resume) { + setName(resume.name); + setUncertain(resume.uncertain); + setEditing(true); + setStep(3); + } else sessionStorage.removeItem(resumeKey); + void read(controller, resume?.name) + .catch((cause) => { + if (!controller.signal.aborted) setError(failure(cause)); + }) + .finally(() => { + if (!controller.signal.aborted) { + setBusy(false); + loaded.current = true; + } + }); + return () => active.current?.abort(); + }, [read, actor, connection.base]); + useLayoutEffect(() => { + const main = view.current?.closest("main"); + if (main) main.scrollTop = 0; + }, [step, editing]); + useEffect(() => { + if (error) alert.current?.focus(); + }, [error]); + async function reload(event?: FormEvent) { + event?.preventDefault(); + active.current?.abort(); + const controller = new AbortController(); + active.current = controller; + setBusy(true); + setError(""); + setSecret(""); + try { + const selected = name ? connectionName(name) : undefined; + setSaved(null); + const resolved = await read(controller, selected); + if (!controller.signal.aborted) { + setNotice( + resolved + ? "The matching request has a closed server receipt. Current actions were checked again; no provider request was repeated." + : "Current account state refreshed. An unknown provider outcome still requires its server receipt or explicit recovery.", + ); + if (selected) { + setEditing(true); + setStep(3); + } + } + } catch (cause) { + if (!controller.signal.aborted) setError(failure(cause)); + } finally { + if (!controller.signal.aborted) setBusy(false); + } + } + function start() { + if (busy) return; + setUncertain(false); + setSaved(null); + setName(""); + setClientId(""); + setProject(""); + setSecret(""); + setProvider(available[0]?.provider || ""); + setStep(0); + setEditing(true); + setNotice(""); + setError(""); + setDisconnecting(false); + setRecovering(false); + setRecoveryReason(""); + setAcknowledged(false); + } + function recover() { + if ( + !saved || + busy || + !saved.allowed_actions.supersede || + current?.status === "prerequisite_required" + ) + return; + setProvider(saved.provider); + setName(saved.name); + setProject(saved.project_id || ""); + setClientId(saved.client_id); + setClientType(saved.public_client ? "public" : "confidential"); + setAuthentication(saved.authentication); + setSecret(""); + setRecoveryReason(""); + setAcknowledged(false); + setRecovering(true); + setStep(1); + setNotice(""); + setError(""); + } + async function save(event: FormEvent) { + event.preventDefault(); + if ( + busy || + (uncertain && !recovering) || + (saved && !recovering) || + (recovering && + (!saved?.allowed_actions.supersede || + !acknowledged || + !recoveryReason.trim())) || + current?.status !== "registration_available" + ) + return; + let payload; + try { + if ( + !recovering && + connectionResume( + readResume(sessionStorage.getItem(resumeKey), connection.base, actor), + name, + )?.uncertain + ) + throw new Error( + "This account still has an unconfirmed action. Open its retained record instead of starting another request.", + ); + if (!recovering && directory.some((entry) => entry.name === name)) + throw new Error( + "That connection already exists. Open it from Connected accounts instead of replacing its registration.", + ); + payload = registrationPayload({ + name, + provider, + project, + clientId, + clientType, + authentication, + secret, + }); + } catch (cause) { + setError( + cause instanceof Error + ? cause.message + : "Review the registration fields.", + ); + return; + } + const controller = new AbortController(); + active.current = controller; + setBusy(true); + setError(""); + setSecret(""); + setNotice(""); + if (!retain(name, true)) { + setError( + "This browser cannot remember another action reference. Resolve outstanding account requests or allow more session storage before continuing.", + ); + setBusy(false); + return; + } + try { + const result = readOAuthSummary( + await request( + connection, + `/connection-oauth/${name}${recovering ? "/supersede" : ""}`, + { + method: recovering ? "POST" : "PUT", + body: JSON.stringify( + recovering + ? { + expected_revision: saved!.revision, + unknown_effect_ids: saved!.unresolved_effects + .filter( + (e) => + e.state === "unknown" && + e.registration_revision === saved!.revision, + ) + .map((e) => e.id), + reason: recoveryReason, + acknowledge_unknown: true, + registration: payload, + } + : { ...payload, expected_revision: 0 }, + ), + signal: controller.signal, + }, + ), + name, + ); + if (controller.signal.aborted) return; + if ( + result.provider !== payload.provider || + result.client_id !== payload.client_id || + result.project_id !== payload.project_id || + result.authentication !== payload.authentication || + result.public_client !== (clientType === "public") || + result.secret_configured !== (clientType === "confidential") || + result.status !== "authorization_required" || + (!recovering && result.revision !== 1) || + (recovering && + (result.revision !== saved!.revision + 1 || + saved!.unresolved_effects.some( + (e) => + !result.archived_unknown_effects.some( + (old) => old.id === e.id && old.state === "unknown", + ), + ))) + ) + throw new Error( + "The registration response did not match the submitted scope.", + ); + setSaved(result); + retain(name, false); + setUncertain(false); + setRecovering(false); + setRecoveryReason(""); + setAcknowledged(false); + setStep(2); + setNotice( + recovering + ? "New registration saved. Earlier provider outcomes remain unknown; browser consent has not started." + : "Registration saved. Browser consent has not started.", + ); + } catch (cause) { + if (!controller.signal.aborted) { + setError(failure(cause)); + setUncertain(true); + } + } finally { + if (!controller.signal.aborted) setBusy(false); + } + } + async function consent() { + if ( + !saved || + busy || + uncertain || + !saved.allowed_actions.authorize || + !saved.policy_current + ) + return; + const controller = new AbortController(); + active.current = controller; + setBusy(true); + setError(""); + setSecret(""); + try { + const response = await request( + connection, + `/connection-oauth/${saved.name}/prepare`, + { method: "POST", signal: controller.signal }, + ); + const url = continuation( + response, + saved.name, + connection.base, + window.location.href, + ); + if (controller.signal.aborted) return; + if (!retain(saved.name, false)) + throw new Error("Resume storage unavailable"); + window.location.assign(url); + } catch (cause) { + if (!controller.signal.aborted) setError(failure(cause)); + } finally { + if (!controller.signal.aborted) setBusy(false); + } + } + async function mutate(kind: "refresh" | "disconnect") { + if ( + !saved || + busy || + !saved.allowed_actions[kind] || + (kind === "refresh" && (uncertain || !saved.policy_current)) + ) + return; + const previousMarker = connectionResume( + readResume(sessionStorage.getItem(resumeKey), connection.base, actor), + saved.name, + ); + const controller = new AbortController(); + active.current = controller; + setBusy(true); + setError(""); + setNotice(""); + const pending: OAuthPending | undefined = + kind === "refresh" + ? { + requestId: crypto.randomUUID().replaceAll("-", ""), + revision: saved.revision, + kind: "refresh", + } + : previousMarker?.pending; + if (!retain(saved.name, true, pending)) { + setError( + "This browser cannot remember another action reference. Resolve outstanding account requests or allow more session storage before continuing.", + ); + setBusy(false); + return; + } + try { + const result = readOAuthSummary( + await request( + connection, + `/connection-oauth/${saved.name}/${kind}`, + { + method: "POST", + ...(kind === "refresh" + ? { + body: JSON.stringify({ + request_id: pending!.requestId, + }), + } + : {}), + signal: controller.signal, + }, + ), + saved.name, + ); + if (controller.signal.aborted) return; + setSaved(result); + setDisconnecting(false); + const stillUnknown = + kind === "disconnect" && Boolean(previousMarker?.uncertain); + retain( + saved.name, + stillUnknown, + stillUnknown ? previousMarker?.pending : undefined, + ); + setUncertain(stillUnknown); + setNotice( + kind === "refresh" + ? "Refresh response retained. This does not verify the account or enable agent tools." + : "Credentials disconnected locally. Provider-side authorization was not revoked.", + ); + } catch (cause) { + if (!controller.signal.aborted) { + setError(failure(cause)); + setUncertain(true); + } + } finally { + if (!controller.signal.aborted) setBusy(false); + } + } + if (policyEditing && policyDirectory) + return ( + setPolicyEditing(false)} + onComplete={() => { + const controller = new AbortController(); + active.current?.abort(); + active.current = controller; + setBusy(true); + setError(""); + void read(controller) + .then(() => { + if (controller.signal.aborted) return; + setPolicyEditing(false); + setUncertain(false); + setSaved(null); + setName(""); + setClientId(""); + setProject(""); + setSecret(""); + setProvider(localProvider); + setStep(1); + setEditing(true); + setNotice(""); + setRecovering(false); + }) + .catch((cause) => { + if (!controller.signal.aborted) setError(failure(cause)); + }) + .finally(() => { + if (!controller.signal.aborted) setBusy(false); + }); + }} + /> + ); + const titles = [ + "Choose a service", + "Register the authorized client", + "Review browser authorization", + "Inspect the retained connection", + ]; + const descriptions = [ + "Choose a service available here.", + "Use the client registration approved for this factory. Credentials stay private.", + "Check the exact resource and scopes before opening the provider's consent page.", + "Retained authorization and executable tools are separate decisions.", + ]; + const details = saved ? ( + <> + {!saved.policy_current && ( +
+

Service configuration changed

+

+ Review this service’s configuration before another authorization. + These records retain the earlier permissions; they do not enable + provider access. +

+
+ )} +
+
+
Current state
+
{statusNames[saved.status]}
+
+
+
Service
+
{providerNames[saved.provider] || saved.provider}
+
+
+
Account scope
+
+ {saved.project_id + ? projects.find((p) => p.id === saved.project_id)?.definition + .name || "Project identity unavailable" + : "Factory-wide"} +
+
+
+
Resource
+
{saved.resource}
+
+
+
Requested scopes
+
{saved.scopes.join(", ")}
+
+ {saved.grant_expires_at && ( +
+
Authorization expires
+
{saved.grant_expires_at}
+
+ )} + {saved.effect_state !== "none" && ( +
+
Outstanding request
+
+ {saved.effect_state === "executing" + ? "A provider request is in progress. Wait for its server receipt." + : "The provider outcome is unknown. A new revision requires explicit recovery."} +
+
+ )} +
+
Agent tools
+
+ Unavailable until the account and executable adapter pass their + prerequisites. +
+
+
+ {!!saved.archived_unknown_effects.length && ( +
+

Previous provider outcomes remain unknown

+

+ {saved.archived_unknown_effects.length} earlier{" "} + {saved.archived_unknown_effects.length === 1 + ? "request has" + : "requests have"}{" "} + no confirmed provider outcome. Starting a new revision did not + reconcile them. +

+
+ )} +
+ Connection details and request history +
+
+
Registration
+
+ {saved.name} · revision {saved.revision} +
+
+
+
Client ID
+
{saved.client_id}
+
+
+
Client credential
+
+ {saved.secret_configured + ? "Private secret configured; write-only" + : "Public client; no secret"} +
+
+
+
Callback address
+
{saved.callback_uri}
+
+ {saved.grant_revision && ( +
+
Authorization revision
+
{saved.grant_revision}
+
+ )} +
+ {[...saved.unresolved_effects, ...saved.archived_unknown_effects].map( + (effect) => ( +
+ + {effect.kind === "code" + ? "Browser authorization" + : "Token refresh"}{" "} + · {effect.state} + +

+ Registration revision {effect.registration_revision} + {effect.lease_expired + ? " · lease expired" + : " · lease not expired"} +

+ {effect.id} +
+ ), + )} +
+ + ) : null; + return ( +
+ {error && ( +
+

{error}

+
+ )} + {uncertain && ( +
+ +
+ Outstanding action needs server reconciliation +

+ The last response was not confirmed. Refreshing shows current + account state; it cannot resolve an unknown provider request. + Check the matching receipt or use explicit recovery before another + authorization or refresh. +

+
+
+ )} + {!editing ? ( + <> +
+
+

Authorize a service in your browser

+

+ Register a client, review its scope, then authorize it with your + signed-in account. Saving a registration does not enable tools. +

+
+ +
+ {policyDirectory?.local_development_available && ( +
+ +
+

Owned local service

+

+ Configure the fixed local repository service before + registering an account. Vendor services keep their separate + prerequisites. +

+
+ +
+ )} +
+ {providers.map((p) => ( +
+ +

{providerNames[p.provider] || p.provider}

+ + {p.status === "registration_available" + ? "Registration available" + : "Prerequisites required"} + +

{p.reason}

+ +
+ ))} +
+
+
+

Saved accounts

+ +
+ {!directory.length && !busy && ( +

+ No accounts are registered in this factory. +

+ )} +
+ {directory.map((entry) => ( +
+ +

{entry.name}

+ {statusNames[entry.status]} +

+ {providerNames[entry.provider] || entry.provider} ·{" "} + {entry.project_id + ? projects.find((p) => p.id === entry.project_id) + ?.definition.name || "Project identity unavailable" + : "Factory-wide"} +

+ +
+ ))} +
+
+ + ) : ( + <> +
+ + +
+ { + if (saved && value < 2) return; + setStep(value); + setSecret(""); + }} + locked={busy} + title={ + recovering && step === 1 + ? "Start a new authorization revision" + : titles[step] + } + description={descriptions[step]} + headingAction={ + notice ? ( +

+ {notice} +

+ ) : undefined + } + guide={ + <> + +

+ {step === 1 + ? "Private credentials" + : step === 2 + ? "Consent stays in your browser" + : "Before agent tools can use this account"} +

+

+ {step === 1 + ? "Confidential clients need a secret; public clients do not. Both use PKCE. Secret in body sends the secret in the token request; Basic authentication uses HTTP Basic. The secret is write-only and cleared after submission. Keep credentials out of model messages. Account scope still requires a separate tool grant." + : step === 2 + ? "The factory checks your signed-in browser, one-time state and PKCE. The consent handoff expires after five minutes. No token or authorization code is shown here." + : "The factory must separately admit the account, adapter, resource and project tool grant. This flow cannot enable a blocked vendor template."} +

+ + + } + > +

{descriptions[step]}

+ {step === 0 ? ( +
event.preventDefault()}> +
+ + +
+
+ Service requirements +

+ {current?.reason || + "Services need a supported factory configuration before you can authorize an account."} +

+
+
+ +
+
+ ) : step === 1 ? ( +
+
+ + Authorized client registration + +
+ + setName(e.target.value)} + required + pattern="[a-z][a-z0-9-]{0,63}" + maxLength={64} + /> + Lowercase name; providers is reserved. +
+
+ + +
+
+ + setClientId(e.target.value)} + maxLength={200} + required + /> +
+
+ + +
+ {clientType === "confidential" && ( + <> +
+ + +
+
+ + setSecret(e.target.value)} + autoComplete="new-password" + required + spellCheck={false} + /> + + Write-only; cleared after saving. + +
+ + )} +
+ {recovering && ( +
+

Earlier provider outcomes remain unknown

+

+ This creates a new registration. It cannot prove whether + the earlier provider request completed, and the old tokens + cannot be reused. +

+
+ +