role

package

v0.4.2 Latest Latest Go to latest Published: Jul 22, 2026 License: AGPL-3.0 Imports: 3 Imported by: 0

Details

This section is empty.

This section is empty.

This section is empty.

type DependentRolesError struct {
	RoleID     string
	Dependents []string
}

DependentRolesError indicates a role cannot be deleted because other roles extend it.

func (e *DependentRolesError) Error() string

type RoleInUseError struct {
	RoleID string
}

RoleInUseError indicates a role cannot be deleted because one or more workspaces currently have it assigned.

func (e *RoleInUseError) Error() string

type Service struct {
	// contains filtered or unexported fields
}

Service handles agent role CRUD, inheritance resolution, and validation.

func New(store roleStore) *Service

func (s *Service) CheckDelete(ctx context.Context, roleID string) error

CheckDelete validates that a role can be safely deleted. (Stress test 3.2: dependent-role check + workspace usage check)

func (s *Service) ResolveEffective(ctx context.Context, roleID string) (*types.EffectiveAgentRole, error)

ResolveEffective walks the extends chain from leaf to root and merges configs. Returns the fully resolved role with the merged config.

func (s *Service) ValidateExtends(ctx context.Context, scope, orgID string, extendsID string) error

ValidateExtends checks that the extends target is valid for the given scope/org. (Stress test 1.2: cross-org extends guard)