メニュー
Context about runtime credential resolution in seer. Use when understanding how OAuth tokens, resources, and secrets are resolved for tool execution.
Codex または Claude でインストール この Prompt をコピーして Codex、Claude、または他のアシスタントに貼り付けると、Skill ページを確認してインストールできます。
SOC 職業分類に基づく
use when creating or updating end-to-end tests for the Seer application. This skill provides guidance on how to structure and implement e2e tests effectively.
React Flow best practices for workflow canvas in seer-frontend. Use when modifying WorkflowCanvas, adding new block types, debugging node rendering issues, or optimizing React Flow performance.
Apply Seer design system patterns when creating or modifying UI components. Auto-triggers for badge, button, input, and form components in src/components/.
Use this when you are asked to debug production errors
Guide for adding new external integrations (OAuth or API key-based) to seer. Use when implementing new service integrations like Google, GitHub, Slack, etc.
Context about how integration metadata configures frontend display in seer. Use when understanding INTEGRATION_CONFIGS, icons, scopes, or how the dynamic UI system works.
| name | credential-resolution |
| description | Context about runtime credential resolution in seer. Use when understanding how OAuth tokens, resources, and secrets are resolved for tool execution. |
| allowed-tools | Read, Grep, Glob |
Bridge between OAuth connections and tool invocation. Lives in src/seer/tools/credential_resolver.py.
execute_tool(tool_name, user, connection_id, arguments) → CredentialResolver(user, tool, connection_id) → resolver.resolve(arguments) → three phases → ResolvedCredentials → tool.execute(access_token, arguments, credentials=credentials)
1. Connection — Skipped if tool has no required_scopes. Otherwise lookup by connection_id or infer provider from tool, call get_oauth_token() (auto-refreshes on expiry), validate scopes. Raises 403 on missing scope.
2. Resource — Extract resource_id from arguments (keys: integration_resource_id, resource_id, resource_binding_id). If found, lookup by ID. If tool has default_resource, find matching active resource. Otherwise None.
3. Secrets — Skipped if tool has no required_secrets. Lookup priority: resource-bound → connection-bound → standalone. Raises 404 on missing secret.
| Scenario | Status |
|---|---|
| No connection_id or provider | 400 |
| Connection not found | 404 |
| Missing required scope | 403 |
| Resource not found | 404 |
| Missing required secret | 404 |
| Token expired, no refresh token | 401 |
expires_at, refreshes automatically| File | Purpose |
|---|---|
src/seer/tools/credential_resolver.py | CredentialResolver, ResolvedCredentials |
src/seer/tools/oauth_manager.py | get_oauth_token, refresh_oauth_token |
src/seer/tools/scope_validator.py | validate_scopes, scope parsing |
src/seer/tools/executor.py | execute_tool (uses resolver) |
/oauth-integration · /tools-creation · /add-integration