@consiliency/agent-board-schema 1.12.0 → 1.23.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/fixtures/already-applied.json +160 -0
- package/migrations/20260731000100_agent_board_agentsdir_column_scope.sql +88 -0
- package/migrations/20260801000100_agent_board_leaveidem_terminal_noop.sql +317 -0
- package/migrations/20260802000100_agent_board_rolereset_reentry_clamp.sql +237 -0
- package/migrations/20260803000100_agent_board_rowid_total_order.sql +1201 -0
- package/migrations/20260804000100_agent_board_hygiene_actor_binding_rls.sql +229 -0
- package/migrations/20260806000100_agent_board_consent_substrate.sql +339 -0
- package/migrations/20260807000100_agent_board_consent_emission.sql +619 -0
- package/migrations/20260808000100_agent_board_rejectsem.sql +145 -0
- package/migrations/20260809000100_agent_board_consent_gating.sql +492 -0
- package/migrations/20260810000100_agent_board_consent_locking.sql +485 -0
- package/migrations/20260811000100_agent_board_retention_metadata_revoke.sql +23 -0
- package/migrations/20260812000100_agent_board_pubexec_class_revoke.sql +54 -0
- package/migrations/20260813000100_agent_board_invitepolicy_block.sql +420 -0
- package/migrations/20260814000100_agent_board_obsgate_thread_post_policy.sql +239 -0
- package/migrations/20260815000100_agent_board_obsgate2_authoring_gates.sql +287 -0
- package/migrations/20260816000100_agent_board_obsgate3_task_lifecycle.sql +118 -0
- package/migrations/20260817000100_agent_board_obsgate4_claims_lifecycle.sql +250 -0
- package/migrations/20260818000100_agent_board_fleet_machines_rls_correlation.sql +43 -0
- package/migrations/20260819000100_agent_board_resolve_noop_retire.sql +166 -0
- package/migrations/20260820000100_agent_board_roomdeleg_lane_b.sql +206 -0
- package/migrations/20260821000100_agent_board_claimgate_claimkey.sql +372 -0
- package/migrations/20260822000100_agent_board_mint_harden.sql +710 -0
- package/migrations/20260822000200_agent_board_mint_harden_fingerprint_backfill.sql +207 -0
- package/migrations/20260823000100_agent_board_fleet_machine_hijack.sql +106 -0
- package/migrations/20260824000100_agent_board_claimgate_shadow.sql +443 -0
- package/migrations/20260825000100_agent_board_claimgate_enforce.sql +660 -0
- package/migrations/20260826000100_agent_board_fleet_machine_reactivation.sql +514 -0
- package/migrations/20260828000100_agent_board_delegation_cap_ceiling.sql +474 -0
- package/migrations/20260829000100_agent_board_fleet_machine_reclaim.sql +432 -0
- package/migrations/20260830000100_agent_board_delegation_sole_writer.sql +41 -0
- package/migrations/20260831000100_agent_board_fleet_domain_reclaim.sql +389 -0
- package/migrations/20260901000100_agent_board_atomic_fleet_onboarding.sql +1496 -0
- package/migrations/20260901000110_agent_board_fleet_onboarding_ceiling_lock.sql +604 -0
- package/migrations/20260901000120_agent_board_human_revocation_evidence_completeness.sql +78 -0
- package/migrations/20260901000130_agent_board_fedsession_human_revocation_gate.sql +74 -0
- package/migrations/20260901000140_agent_board_fedsession_board_owner_lock_order.sql +102 -0
- package/migrations/20260902000100_agent_board_outbox_wake_ordering.sql +184 -0
- package/migrations/20260903000100_agent_board_enroll_identity_board_owner_lock_order.sql +604 -0
- package/migrations/20260903000200_agent_board_fedsession_provider_absence_gate.sql +177 -0
- package/migrations/20260904000100_agent_board_wake_recovery_surface.sql +155 -0
- package/package.json +1 -1
- package/schema-manifest.json +363 -3
- package/src/tooling.test.mjs +113 -2
- package/tests/agent_board_actorspoof.test.sql +349 -0
- package/tests/agent_board_agentsdir.test.sql +154 -0
- package/tests/agent_board_atomic_fleet_onboarding.test.sql +623 -0
- package/tests/agent_board_atomic_fleet_onboarding_backfill.test.sql +142 -0
- package/tests/agent_board_atomic_fleet_onboarding_runtime.test.sql +1250 -0
- package/tests/agent_board_authbound_boundary.test.sql +9 -1
- package/tests/agent_board_claimgate_enforce.test.sql +464 -0
- package/tests/agent_board_claimgate_predicate.test.sql +360 -0
- package/tests/agent_board_claimkey.test.sql +229 -0
- package/tests/agent_board_consent_backfill.test.sql +48 -0
- package/tests/agent_board_consent_emission.test.sql +601 -0
- package/tests/agent_board_consent_gating.test.sql +489 -0
- package/tests/agent_board_consent_substrate.test.sql +720 -0
- package/tests/agent_board_delegation_cap_ceiling.test.sql +303 -0
- package/tests/agent_board_delegation_enforcement.test.sql +55 -6
- package/tests/agent_board_delegation_policies.test.sql +107 -1
- package/tests/agent_board_enroll_federated_identity.test.sql +3 -3
- package/tests/agent_board_enroll_pop_binding.test.sql +13 -3
- package/tests/agent_board_enrollment_audit_content.test.sql +11 -7
- package/tests/agent_board_federated_lock_order_class.test.sql +390 -0
- package/tests/agent_board_fedsession.test.sql +51 -5
- package/tests/agent_board_fedsession_provider_absence_gate.test.sql +170 -0
- package/tests/agent_board_fleet_domain_reclaim.test.sql +419 -0
- package/tests/agent_board_fleet_machine_hijack.test.sql +190 -0
- package/tests/agent_board_fleet_machine_reactivation.test.sql +426 -0
- package/tests/agent_board_fleet_machine_reclaim.test.sql +509 -0
- package/tests/agent_board_fleet_machines_rls.test.sql +79 -0
- package/tests/agent_board_fleet_policy.test.sql +2 -2
- package/tests/agent_board_grants_hygiene.test.sql +408 -0
- package/tests/agent_board_identity_providers.test.sql +9 -0
- package/tests/agent_board_inbox_reads.test.sql +45 -31
- package/tests/agent_board_inbox_rpcs.test.sql +44 -34
- package/tests/agent_board_invitepolicy.test.sql +205 -0
- package/tests/agent_board_leaveidem.test.sql +194 -0
- package/tests/agent_board_mint_fleet_agent_session.test.sql +10 -10
- package/tests/agent_board_mint_harden.test.sql +303 -0
- package/tests/agent_board_mint_harden_backfill.test.sql +95 -0
- package/tests/agent_board_obsgate.test.sql +178 -0
- package/tests/agent_board_obsgate2.test.sql +153 -0
- package/tests/agent_board_obsgate3.test.sql +170 -0
- package/tests/agent_board_obsgate4.test.sql +196 -0
- package/tests/agent_board_outbox_wake_ordering.test.sql +452 -0
- package/tests/agent_board_portal_offline_invariant.test.sql +14 -3
- package/tests/agent_board_pubexec_class.test.sql +53 -0
- package/tests/agent_board_rejectsem.test.sql +271 -0
- package/tests/agent_board_resigning_refresh.test.sql +1 -1
- package/tests/agent_board_resolve_noop_retire.test.sql +71 -0
- package/tests/agent_board_retention_metadata_acl.test.sql +53 -0
- package/tests/agent_board_revoke_agent_subtree.test.sql +3 -3
- package/tests/agent_board_rolereset.test.sql +351 -0
- package/tests/agent_board_roomdeleg.test.sql +5 -3
- package/tests/agent_board_roomdeleg_lane_b.test.sql +144 -0
- package/tests/agent_board_roomlink.test.sql +27 -11
- package/tests/agent_board_rowid.test.sql +1274 -0
- package/tests/agent_board_signature_rls_reads.test.sql +3 -3
- package/tests/agent_board_signed_write_gateway.test.sql +3 -3
- package/tests/agent_board_signing_challenge_pending_cap.test.sql +2 -2
- package/tests/agent_board_signing_challenge_reaper.test.sql +2 -2
- package/tests/agent_board_signing_proof_rpcs.test.sql +4 -4
- package/tests/agent_board_signing_store.test.sql +6 -6
- package/tests/agent_board_wake_recovery.test.sql +756 -0
- package/tests/fixtures/isolation-substrate.sql +93 -0
- package/tests/fixtures/test-prereqs.sql +33 -0
- package/tests/isolation/expected/atomic_fedsession_fleet_lock_order.out +79 -0
- package/tests/isolation/expected/atomic_fedsession_human_revoke.out +87 -0
- package/tests/isolation/expected/atomic_fleet_authority_races.out +469 -0
- package/tests/isolation/expected/atomic_fleet_binding_revoke.out +103 -0
- package/tests/isolation/expected/atomic_fleet_board_archive.out +117 -0
- package/tests/isolation/expected/atomic_fleet_human_fresh_revoke.out +136 -0
- package/tests/isolation/expected/atomic_fleet_identity_disposition.out +61 -0
- package/tests/isolation/expected/atomic_fleet_lifecycle_races.out +1479 -0
- package/tests/isolation/expected/atomic_fleet_onboarding.out +75 -0
- package/tests/isolation/expected/atomic_fleet_subtree_lock_order.out +60 -0
- package/tests/isolation/expected/ceiling_setter_lock_before_upsert.out +95 -0
- package/tests/isolation/expected/claimgate_ownerless_quota.out +36 -0
- package/tests/isolation/expected/claimkey_renew_race.out +38 -0
- package/tests/isolation/expected/consent_approval_lock.out +43 -0
- package/tests/isolation/expected/consent_emit_actual_state.out +37 -0
- package/tests/isolation/expected/domain_reclaim_revoke_race.out +40 -0
- package/tests/isolation/expected/enroll_identity_board_owner_lock_order.out +55 -0
- package/tests/isolation/expected/fedsession_provider_absent_owner_lock.out +37 -0
- package/tests/isolation/expected/onboarding_ceiling_lock_order.out +123 -0
- package/tests/isolation/expected/outbox_wake_ordering.out +86 -0
- package/tests/isolation/expected/reactivate_revoke_race.out +80 -0
- package/tests/isolation/expected/reclaim_revoke_race.out +40 -0
- package/tests/isolation/expected/wake_recovery_late_commit.out +89 -0
- package/tests/isolation/specs/atomic_fedsession_fleet_lock_order.spec +117 -0
- package/tests/isolation/specs/atomic_fedsession_human_revoke.spec +66 -0
- package/tests/isolation/specs/atomic_fleet_authority_races.spec +235 -0
- package/tests/isolation/specs/atomic_fleet_binding_revoke.spec +127 -0
- package/tests/isolation/specs/atomic_fleet_board_archive.spec +134 -0
- package/tests/isolation/specs/atomic_fleet_human_fresh_revoke.spec +142 -0
- package/tests/isolation/specs/atomic_fleet_identity_disposition.spec +118 -0
- package/tests/isolation/specs/atomic_fleet_lifecycle_races.spec +244 -0
- package/tests/isolation/specs/atomic_fleet_onboarding.spec +106 -0
- package/tests/isolation/specs/atomic_fleet_subtree_lock_order.spec +147 -0
- package/tests/isolation/specs/ceiling_setter_lock_before_upsert.spec +117 -0
- package/tests/isolation/specs/claimgate_ownerless_quota.spec +77 -0
- package/tests/isolation/specs/claimkey_renew_race.spec +67 -0
- package/tests/isolation/specs/consent_approval_lock.spec +98 -0
- package/tests/isolation/specs/consent_emit_actual_state.spec +79 -0
- package/tests/isolation/specs/domain_reclaim_revoke_race.spec +88 -0
- package/tests/isolation/specs/enroll_identity_board_owner_lock_order.spec +117 -0
- package/tests/isolation/specs/fedsession_provider_absent_owner_lock.spec +63 -0
- package/tests/isolation/specs/onboarding_ceiling_lock_order.spec +183 -0
- package/tests/isolation/specs/outbox_wake_ordering.spec +202 -0
- package/tests/isolation/specs/reactivate_revoke_race.spec +115 -0
- package/tests/isolation/specs/reclaim_revoke_race.spec +94 -0
- package/tests/isolation/specs/wake_recovery_late_commit.spec +207 -0
- package/tests/seeds/20260806000100_agent_board_consent_substrate.sql.pre.sql +19 -0
- package/tests/seeds/20260822000200_agent_board_mint_harden_fingerprint_backfill.sql.pre.sql +39 -0
- package/tests/seeds/20260901000100_agent_board_atomic_fleet_onboarding.sql.pre.sql +110 -0
|
@@ -68,9 +68,9 @@ begin
|
|
|
68
68
|
v_author,
|
|
69
69
|
'primary',
|
|
70
70
|
1,
|
|
71
|
-
|
|
71
|
+
public.test_pubkey('sigrls-author-key'),
|
|
72
72
|
'raw_ed25519_base64url',
|
|
73
|
-
|
|
73
|
+
public.test_key_fingerprint('sigrls-author-key'),
|
|
74
74
|
'active',
|
|
75
75
|
'proven'
|
|
76
76
|
)
|
|
@@ -105,7 +105,7 @@ begin
|
|
|
105
105
|
from agent_board.v_thread_feed
|
|
106
106
|
where message_id = v_message
|
|
107
107
|
and verification_status = 'verified'
|
|
108
|
-
and key_fingerprint =
|
|
108
|
+
and key_fingerprint = public.test_key_fingerprint('sigrls-author-key')
|
|
109
109
|
and key_version = 1
|
|
110
110
|
and algorithm = 'Ed25519';
|
|
111
111
|
|
|
@@ -57,9 +57,9 @@ begin
|
|
|
57
57
|
v_agent,
|
|
58
58
|
'primary',
|
|
59
59
|
1,
|
|
60
|
-
|
|
60
|
+
public.test_pubkey('swg-primary'),
|
|
61
61
|
'raw_ed25519_base64url',
|
|
62
|
-
|
|
62
|
+
public.test_key_fingerprint('swg-primary'),
|
|
63
63
|
'active',
|
|
64
64
|
'proven'
|
|
65
65
|
)
|
|
@@ -84,7 +84,7 @@ begin
|
|
|
84
84
|
'key_id', 'primary',
|
|
85
85
|
'key_version', 1,
|
|
86
86
|
'algorithm', 'Ed25519',
|
|
87
|
-
'key_fingerprint',
|
|
87
|
+
'key_fingerprint', public.test_key_fingerprint('swg-primary'),
|
|
88
88
|
'verification_status', 'verified',
|
|
89
89
|
'payload_digest', 'sha256:' || repeat('d', 64),
|
|
90
90
|
'signature_digest', 'sha256:' || repeat('e', 64),
|
|
@@ -24,8 +24,8 @@ begin
|
|
|
24
24
|
insert into agent_board.agent_signing_keys(
|
|
25
25
|
agent_id, key_id, key_version, public_key, public_key_format, fingerprint)
|
|
26
26
|
values (
|
|
27
|
-
v_agent, 'primary', 1,
|
|
28
|
-
|
|
27
|
+
v_agent, 'primary', 1, public.test_pubkey('pcap-primary'), 'raw_ed25519_base64url',
|
|
28
|
+
public.test_key_fingerprint('pcap-primary'));
|
|
29
29
|
|
|
30
30
|
set local role service_role;
|
|
31
31
|
|
|
@@ -25,8 +25,8 @@ begin
|
|
|
25
25
|
insert into agent_board.agent_signing_keys(
|
|
26
26
|
agent_id, key_id, key_version, public_key, public_key_format, fingerprint)
|
|
27
27
|
values (
|
|
28
|
-
v_agent, 'primary', 1,
|
|
29
|
-
|
|
28
|
+
v_agent, 'primary', 1, public.test_pubkey('reap-chal-primary'), 'raw_ed25519_base64url',
|
|
29
|
+
public.test_key_fingerprint('reap-chal-primary'))
|
|
30
30
|
returning id into v_key;
|
|
31
31
|
|
|
32
32
|
insert into agent_board.agent_signing_key_challenges(
|
|
@@ -29,9 +29,9 @@ begin
|
|
|
29
29
|
v_agent,
|
|
30
30
|
'primary',
|
|
31
31
|
1,
|
|
32
|
-
|
|
32
|
+
public.test_pubkey('proof-rpcs-a'),
|
|
33
33
|
'raw_ed25519_base64url',
|
|
34
|
-
|
|
34
|
+
public.test_key_fingerprint('proof-rpcs-a')
|
|
35
35
|
);
|
|
36
36
|
|
|
37
37
|
set local role service_role;
|
|
@@ -100,9 +100,9 @@ begin
|
|
|
100
100
|
v_agent,
|
|
101
101
|
'primary',
|
|
102
102
|
1,
|
|
103
|
-
|
|
103
|
+
public.test_pubkey('proof-rpcs-b'),
|
|
104
104
|
'raw_ed25519_base64url',
|
|
105
|
-
|
|
105
|
+
public.test_key_fingerprint('proof-rpcs-b')
|
|
106
106
|
);
|
|
107
107
|
|
|
108
108
|
set local role service_role;
|
|
@@ -50,9 +50,9 @@ begin
|
|
|
50
50
|
v_agent,
|
|
51
51
|
'primary',
|
|
52
52
|
1,
|
|
53
|
-
|
|
53
|
+
public.test_pubkey('sigstore-primary'),
|
|
54
54
|
'raw_ed25519_base64url',
|
|
55
|
-
|
|
55
|
+
public.test_key_fingerprint('sigstore-primary'),
|
|
56
56
|
'active',
|
|
57
57
|
'proven'
|
|
58
58
|
)
|
|
@@ -71,9 +71,9 @@ begin
|
|
|
71
71
|
v_agent,
|
|
72
72
|
'secondary',
|
|
73
73
|
1,
|
|
74
|
-
|
|
74
|
+
public.test_pubkey('sigstore-secondary'),
|
|
75
75
|
'raw_ed25519_base64url',
|
|
76
|
-
|
|
76
|
+
public.test_key_fingerprint('sigstore-secondary')
|
|
77
77
|
);
|
|
78
78
|
raise exception 'duplicate key_version unexpectedly succeeded';
|
|
79
79
|
exception
|
|
@@ -95,9 +95,9 @@ begin
|
|
|
95
95
|
v_agent,
|
|
96
96
|
'unproven-active',
|
|
97
97
|
2,
|
|
98
|
-
|
|
98
|
+
public.test_pubkey('sigstore-unproven'),
|
|
99
99
|
'raw_ed25519_base64url',
|
|
100
|
-
|
|
100
|
+
public.test_key_fingerprint('sigstore-unproven'),
|
|
101
101
|
'active',
|
|
102
102
|
'unproven'
|
|
103
103
|
);
|