菜单
Context about runtime credential resolution in seer. Use when understanding how OAuth tokens, resources, and secrets are resolved for tool execution.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
use when creating or updating end-to-end tests for the Seer application. This skill provides guidance on how to structure and implement e2e tests effectively.
React Flow best practices for workflow canvas in seer-frontend. Use when modifying WorkflowCanvas, adding new block types, debugging node rendering issues, or optimizing React Flow performance.
Apply Seer design system patterns when creating or modifying UI components. Auto-triggers for badge, button, input, and form components in src/components/.
Use this when you are asked to debug production errors
Guide for adding new external integrations (OAuth or API key-based) to seer. Use when implementing new service integrations like Google, GitHub, Slack, etc.
Context about how integration metadata configures frontend display in seer. Use when understanding INTEGRATION_CONFIGS, icons, scopes, or how the dynamic UI system works.
| name | credential-resolution |
| description | Context about runtime credential resolution in seer. Use when understanding how OAuth tokens, resources, and secrets are resolved for tool execution. |
| allowed-tools | Read, Grep, Glob |
Bridge between OAuth connections and tool invocation. Lives in src/seer/tools/credential_resolver.py.
execute_tool(tool_name, user, connection_id, arguments) → CredentialResolver(user, tool, connection_id) → resolver.resolve(arguments) → three phases → ResolvedCredentials → tool.execute(access_token, arguments, credentials=credentials)
1. Connection — Skipped if tool has no required_scopes. Otherwise lookup by connection_id or infer provider from tool, call get_oauth_token() (auto-refreshes on expiry), validate scopes. Raises 403 on missing scope.
2. Resource — Extract resource_id from arguments (keys: integration_resource_id, resource_id, resource_binding_id). If found, lookup by ID. If tool has default_resource, find matching active resource. Otherwise None.
3. Secrets — Skipped if tool has no required_secrets. Lookup priority: resource-bound → connection-bound → standalone. Raises 404 on missing secret.
| Scenario | Status |
|---|---|
| No connection_id or provider | 400 |
| Connection not found | 404 |
| Missing required scope | 403 |
| Resource not found | 404 |
| Missing required secret | 404 |
| Token expired, no refresh token | 401 |
expires_at, refreshes automatically| File | Purpose |
|---|---|
src/seer/tools/credential_resolver.py | CredentialResolver, ResolvedCredentials |
src/seer/tools/oauth_manager.py | get_oauth_token, refresh_oauth_token |
src/seer/tools/scope_validator.py | validate_scopes, scope parsing |
src/seer/tools/executor.py | execute_tool (uses resolver) |
/oauth-integration · /tools-creation · /add-integration