메뉴
Context about runtime credential resolution in seer. Use when understanding how OAuth tokens, resources, and secrets are resolved for tool execution.
Codex 또는 Claude로 설치 이 Prompt를 복사해 Codex, Claude 또는 다른 어시스턴트에 붙여 넣으면 Skill 페이지를 검토하고 설치를 진행할 수 있습니다.
SOC 직업 분류 기준
use when creating or updating end-to-end tests for the Seer application. This skill provides guidance on how to structure and implement e2e tests effectively.
React Flow best practices for workflow canvas in seer-frontend. Use when modifying WorkflowCanvas, adding new block types, debugging node rendering issues, or optimizing React Flow performance.
Apply Seer design system patterns when creating or modifying UI components. Auto-triggers for badge, button, input, and form components in src/components/.
Use this when you are asked to debug production errors
Guide for adding new external integrations (OAuth or API key-based) to seer. Use when implementing new service integrations like Google, GitHub, Slack, etc.
Context about how integration metadata configures frontend display in seer. Use when understanding INTEGRATION_CONFIGS, icons, scopes, or how the dynamic UI system works.
| name | credential-resolution |
| description | Context about runtime credential resolution in seer. Use when understanding how OAuth tokens, resources, and secrets are resolved for tool execution. |
| allowed-tools | Read, Grep, Glob |
Bridge between OAuth connections and tool invocation. Lives in src/seer/tools/credential_resolver.py.
execute_tool(tool_name, user, connection_id, arguments) → CredentialResolver(user, tool, connection_id) → resolver.resolve(arguments) → three phases → ResolvedCredentials → tool.execute(access_token, arguments, credentials=credentials)
1. Connection — Skipped if tool has no required_scopes. Otherwise lookup by connection_id or infer provider from tool, call get_oauth_token() (auto-refreshes on expiry), validate scopes. Raises 403 on missing scope.
2. Resource — Extract resource_id from arguments (keys: integration_resource_id, resource_id, resource_binding_id). If found, lookup by ID. If tool has default_resource, find matching active resource. Otherwise None.
3. Secrets — Skipped if tool has no required_secrets. Lookup priority: resource-bound → connection-bound → standalone. Raises 404 on missing secret.
| Scenario | Status |
|---|---|
| No connection_id or provider | 400 |
| Connection not found | 404 |
| Missing required scope | 403 |
| Resource not found | 404 |
| Missing required secret | 404 |
| Token expired, no refresh token | 401 |
expires_at, refreshes automatically| File | Purpose |
|---|---|
src/seer/tools/credential_resolver.py | CredentialResolver, ResolvedCredentials |
src/seer/tools/oauth_manager.py | get_oauth_token, refresh_oauth_token |
src/seer/tools/scope_validator.py | validate_scopes, scope parsing |
src/seer/tools/executor.py | execute_tool (uses resolver) |
/oauth-integration · /tools-creation · /add-integration