Task LAV-1783: GRANT/REVOKE privilege vocabulary — CREATE ALERT/TASK/VIEW/SHARE/AGENT/MCP SERVER, ON FUTURE TASKS IN, COMPUTE POOL (apache#2266)

Teach the grant grammar the schema-scoped CREATE privileges (ALERT, TASK,
VIEW, AGENT, MCP SERVER), CREATE SHARE ON ACCOUNT, and the FUTURE TASKS
object plural, and echo each verbatim through SHOW GRANTS. Account-scoped
edges now report the account locator as `name` in SHOW GRANTS TO ROLE.
GRANT/REVOKE ON COMPUTE POOL reproduces Snowflake's verbatim
002003/02000 rejection rather than recording a phantom grant.

Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>

Author: sabir-akhadov-localstack

src/ast/mod.rs

@@ -10095,12 +10095,18 @@ impl fmt::Display for Action {
 pub enum ActionCreateObjectType {
     /// An account-level object.
     Account,
+    /// An agent object.
+    Agent,
+    /// An alert object.
+    Alert,
     /// An application object.
     Application,
     /// An application package object.
     ApplicationPackage,
     /// A compute pool object.
     ComputePool,
+    /// An MCP server object.
+    McpServer,
     /// A data exchange listing.
     DataExchangeListing,
     /// A class object identified by a qualified name, e.g.
@@ -10134,6 +10140,10 @@ pub enum ActionCreateObjectType {
     Share,
     /// A table object.
     Table,
+    /// A task object.
+    Task,
+    /// A view object.
+    View,
     /// A user object.
     User,
     /// A warehouse object.
@@ -10144,9 +10154,12 @@ impl fmt::Display for ActionCreateObjectType {
     fn fmt(&self, f: &mut fmt::Formatter) -> fmt::Result {
         match self {
             ActionCreateObjectType::Account => write!(f, "ACCOUNT"),
+            ActionCreateObjectType::Agent => write!(f, "AGENT"),
+            ActionCreateObjectType::Alert => write!(f, "ALERT"),
             ActionCreateObjectType::Application => write!(f, "APPLICATION"),
             ActionCreateObjectType::ApplicationPackage => write!(f, "APPLICATION PACKAGE"),
             ActionCreateObjectType::ComputePool => write!(f, "COMPUTE POOL"),
+            ActionCreateObjectType::McpServer => write!(f, "MCP SERVER"),
             ActionCreateObjectType::DataExchangeListing => write!(f, "DATA EXCHANGE LISTING"),
             ActionCreateObjectType::Class(name) => write!(f, "{name}"),
             ActionCreateObjectType::Database => write!(f, "DATABASE"),
@@ -10163,6 +10176,8 @@ impl fmt::Display for ActionCreateObjectType {
             ActionCreateObjectType::Schema => write!(f, "SCHEMA"),
             ActionCreateObjectType::Share => write!(f, "SHARE"),
             ActionCreateObjectType::Table => write!(f, "TABLE"),
+            ActionCreateObjectType::Task => write!(f, "TASK"),
+            ActionCreateObjectType::View => write!(f, "VIEW"),
             ActionCreateObjectType::User => write!(f, "USER"),
             ActionCreateObjectType::Warehouse => write!(f, "WAREHOUSE"),
         }

src/keywords.rs

@@ -107,6 +107,7 @@ define_keywords!(
     ADMIN_PASSWORD,
     AFTER,
     AGAINST,
+    AGENT,
     AGGREGATE,
     AGGREGATION,
     ALERT,
@@ -672,6 +673,7 @@ define_keywords!(
     MAX_DATA_EXTENSION_TIME_IN_DAYS,
     MAX_ROWS,
     MB,
+    MCP,
     MEASURES,
     MEDIUMBLOB,
     MEDIUMINT,

src/parser/mod.rs

@@ -19148,6 +19148,7 @@ impl<'a> Parser<'a> {
         ("AGENTS", &["AGENTS"], "CORTEX_AGENT"),
         ("MCP SERVERS", &["MCP", "SERVERS"], "CORTEX_AGENT_SERVER"),
         ("SEMANTIC VIEWS", &["SEMANTIC", "VIEWS"], "SEMANTIC_VIEW"),
+        ("TASKS", &["TASKS"], "TASK"),
     ];
 
     /// `ON {ALL|FUTURE} <plural-kind> IN {SCHEMA|DATABASE} <name>[, …]` for the
@@ -19378,6 +19379,8 @@ impl<'a> Parser<'a> {
             Some(ActionCreateObjectType::ApplicationPackage)
         } else if self.parse_keywords(&[Keyword::COMPUTE, Keyword::POOL]) {
             Some(ActionCreateObjectType::ComputePool)
+        } else if self.parse_keywords(&[Keyword::MCP, Keyword::SERVER]) {
+            Some(ActionCreateObjectType::McpServer)
         } else if self.parse_keywords(&[Keyword::DATA, Keyword::EXCHANGE, Keyword::LISTING]) {
             Some(ActionCreateObjectType::DataExchangeListing)
         } else if self.parse_keywords(&[Keyword::EXTERNAL, Keyword::VOLUME]) {
@@ -19396,6 +19399,10 @@ impl<'a> Parser<'a> {
         // Single-word object types
         else if self.parse_keyword(Keyword::ACCOUNT) {
             Some(ActionCreateObjectType::Account)
+        } else if self.parse_keyword(Keyword::AGENT) {
+            Some(ActionCreateObjectType::Agent)
+        } else if self.parse_keyword(Keyword::ALERT) {
+            Some(ActionCreateObjectType::Alert)
         } else if self.parse_keyword(Keyword::APPLICATION) {
             Some(ActionCreateObjectType::Application)
         } else if self.parse_keyword(Keyword::DATABASE) {
@@ -19414,6 +19421,10 @@ impl<'a> Parser<'a> {
             Some(ActionCreateObjectType::Share)
         } else if self.parse_keyword(Keyword::TABLE) {
             Some(ActionCreateObjectType::Table)
+        } else if self.parse_keyword(Keyword::TASK) {
+            Some(ActionCreateObjectType::Task)
+        } else if self.parse_keyword(Keyword::VIEW) {
+            Some(ActionCreateObjectType::View)
         } else if self.parse_keyword(Keyword::USER) {
             Some(ActionCreateObjectType::User)
         } else if self.parse_keyword(Keyword::WAREHOUSE) {