@consiliency/agent-board-schema 1.12.0 → 1.23.0

package/tests/isolation/expected/outbox_wake_ordering.out

@@ -0,0 +1,86 @@
+Parsed test spec with 3 sessions
+
+starting permutation: l_begin l_insert l_mark f_begin f_fanout f_mark f_report f_commit c_first l_commit c_second
+step l_begin: BEGIN;
+step l_insert: 
+  select agent_board._queue_board_post_callbacks(
+    '18701000-0000-4000-8000-00000000000b'::uuid,
+    '18703000-0000-4000-8000-00000000000b'::uuid,
+    'Iso187 late', 'Iso187 late preview', 'high', jsonb_build_object()) as late_rows_written;
+
+late_rows_written
+-----------------
+                1
+(1 row)
+
+step l_mark: 
+  insert into public.iso187_marks(kind, val)
+  select 'late_seq', min(seq) from agent_board.callback_outbox_events
+   where board_id = '18701000-0000-4000-8000-00000000000b';
+
+step f_begin: BEGIN;
+step f_fanout: 
+  select agent_board._queue_board_post_callbacks(
+    '18701000-0000-4000-8000-00000000000a'::uuid,
+    '18703000-0000-4000-8000-00000000000a'::uuid,
+    'Iso187 fanout', 'Iso187 fanout preview', 'high', jsonb_build_object()) as fanout_rows_written;
+
+fanout_rows_written
+-------------------
+                  8
+(1 row)
+
+step f_mark: 
+  insert into public.iso187_marks(kind, val)
+  select 'fan_base', min(seq) from agent_board.callback_outbox_events
+   where board_id = '18701000-0000-4000-8000-00000000000a';
+
+step f_report: 
+  select count(*)                        as rows_written,
+         count(distinct created_at)      as distinct_created_at,
+         count(distinct seq)             as distinct_seq,
+         (max(seq) - min(seq) + 1)       as seq_span
+    from agent_board.callback_outbox_events
+   where board_id = '18701000-0000-4000-8000-00000000000a';
+
+rows_written|distinct_created_at|distinct_seq|seq_span
+------------+-------------------+------------+--------
+           8|                  1|           8|       8
+(1 row)
+
+step f_commit: COMMIT;
+step c_first: 
+  select (select array_agg(outbox_seq) from agent_board.claim_callback_outbox_events(4))
+         = (select array_agg(g order by g)
+              from generate_series((select val from public.iso187_marks where kind = 'fan_base'),
+                                   (select val from public.iso187_marks where kind = 'fan_base') + 3) g)
+         as claimed_lowest_four_in_seq_order;
+
+claimed_lowest_four_in_seq_order
+--------------------------------
+t                               
+(1 row)
+
+step l_commit: COMMIT;
+step c_second: 
+  with claimed as (
+    select array_agg(outbox_seq) as got from agent_board.claim_callback_outbox_events(4)
+  ),
+  marks as (
+    select (select val from public.iso187_marks where kind = 'late_seq') as late_seq,
+           (select val from public.iso187_marks where kind = 'fan_base') as fan_base
+  )
+  select (select got from claimed)
+           = array[(select late_seq from marks)]
+             || (select array_agg(g order by g)
+                   from generate_series((select fan_base from marks) + 4,
+                                        (select fan_base from marks) + 6) g)
+             as late_row_claimed_first_then_next_fan_rows,
+         (select late_seq from marks) < (select fan_base from marks)
+             as late_committer_holds_a_lower_seq_than_the_persisted_cursor;
+
+late_row_claimed_first_then_next_fan_rows|late_committer_holds_a_lower_seq_than_the_persisted_cursor
+-----------------------------------------+----------------------------------------------------------
+t                                        |t                                                         
+(1 row)
+

package/tests/isolation/expected/reactivate_revoke_race.out

@@ -0,0 +1,80 @@
+Parsed test spec with 3 sessions
+
+starting permutation: ra_begin ra_react rb_begin rb_revoke ra_commit rb_commit chk
+step ra_begin: BEGIN; SET LOCAL "request.jwt.claim.role" = 'service_role';
+step ra_react: 
+  select lifecycle_state
+    from agent_board.reactivate_fleet_machine(
+      '60000000-0000-4000-8000-000000000001', 'a0000000-0000-4000-8000-000000000001', 'iso reactivate');
+
+lifecycle_state
+---------------
+active         
+(1 row)
+
+step rb_begin: BEGIN; SET LOCAL "request.jwt.claim.role" = 'service_role';
+step rb_revoke: 
+  select revocation_event_id
+    from agent_board.revoke_fleet_subject(
+      'machine', '60000000-0000-4000-8000-000000000001', 'a0000000-0000-4000-8000-000000000001',
+      'iso re-revoke', jsonb_build_object('redacted', true));
+ <waiting ...>
+step ra_commit: COMMIT;
+step rb_revoke: <... completed>
+revocation_event_id                 
+------------------------------------
+e0000000-0000-4000-8000-000000000001
+(1 row)
+
+step rb_commit: COMMIT;
+step chk: 
+  select fm.lifecycle_state,
+         (select denial_class
+            from agent_board.evaluate_fleet_sender_policy(
+              'a0000000-0000-4000-8000-000000000002', 'a0000000-0000-4000-8000-000000000003',
+              fm.id, null, 'send_direct_message', null, false)) as denial_class
+    from agent_board.fleet_machines fm
+   where fm.id = '60000000-0000-4000-8000-000000000001';
+
+lifecycle_state|denial_class   
+---------------+---------------
+revoked        |machine_revoked
+(1 row)
+
+
+starting permutation: ra_begin ra_react rb_begin rb_react ra_commit rb_commit chk
+step ra_begin: BEGIN; SET LOCAL "request.jwt.claim.role" = 'service_role';
+step ra_react: 
+  select lifecycle_state
+    from agent_board.reactivate_fleet_machine(
+      '60000000-0000-4000-8000-000000000001', 'a0000000-0000-4000-8000-000000000001', 'iso reactivate');
+
+lifecycle_state
+---------------
+active         
+(1 row)
+
+step rb_begin: BEGIN; SET LOCAL "request.jwt.claim.role" = 'service_role';
+step rb_react: 
+  select lifecycle_state
+    from agent_board.reactivate_fleet_machine(
+      '60000000-0000-4000-8000-000000000001', 'a0000000-0000-4000-8000-000000000001', 'iso second reactivate');
+ <waiting ...>
+step ra_commit: COMMIT;
+step rb_react: <... completed>
+ERROR:  fleet machine is not revoked; nothing to reactivate
+step rb_commit: COMMIT;
+step chk: 
+  select fm.lifecycle_state,
+         (select denial_class
+            from agent_board.evaluate_fleet_sender_policy(
+              'a0000000-0000-4000-8000-000000000002', 'a0000000-0000-4000-8000-000000000003',
+              fm.id, null, 'send_direct_message', null, false)) as denial_class
+    from agent_board.fleet_machines fm
+   where fm.id = '60000000-0000-4000-8000-000000000001';
+
+lifecycle_state|denial_class
+---------------+------------
+active         |            
+(1 row)
+

package/tests/isolation/expected/reclaim_revoke_race.out

@@ -0,0 +1,40 @@
+Parsed test spec with 3 sessions
+
+starting permutation: ra_begin ra_reclaim rb_begin rb_revoke ra_commit rb_commit chk
+step ra_begin: BEGIN; SET LOCAL "request.jwt.claim.role" = 'service_role';
+step ra_reclaim: 
+  select owner_agent_id
+    from agent_board.reclaim_fleet_machine(
+      '61000000-0000-4000-8000-000000000001', 'a1000000-0000-4000-8000-000000000003',
+      'a1000000-0000-4000-8000-000000000001', 'iso operator reclaim');
+
+owner_agent_id                      
+------------------------------------
+a1000000-0000-4000-8000-000000000003
+(1 row)
+
+step rb_begin: 
+  BEGIN;
+  SET LOCAL "request.jwt.claim.role" = 'authenticated';
+  SET LOCAL "request.jwt.claim.sub" = 'b1000000-0000-4000-8000-000000000002';
+
+step rb_revoke: 
+  select revocation_event_id
+    from agent_board.revoke_fleet_subject(
+      'machine', '61000000-0000-4000-8000-000000000001', 'a1000000-0000-4000-8000-000000000002',
+      'iso squatter revoke', jsonb_build_object('redacted', true));
+ <waiting ...>
+step ra_commit: COMMIT;
+step rb_revoke: <... completed>
+ERROR:  machine is not owned by current_agent_id()
+step rb_commit: COMMIT;
+step chk: 
+  select owner_agent_id, lifecycle_state
+    from agent_board.fleet_machines
+   where id = '61000000-0000-4000-8000-000000000001';
+
+owner_agent_id                      |lifecycle_state
+------------------------------------+---------------
+a1000000-0000-4000-8000-000000000003|active         
+(1 row)
+

package/tests/isolation/expected/wake_recovery_late_commit.out

@@ -0,0 +1,89 @@
+Parsed test spec with 3 sessions
+
+starting permutation: c_auth l_begin l_insert l_mark m_begin m_insert m_commit c_first c_persist l_commit c_second
+step c_auth: 
+  select set_config('request.jwt.claim.sub', '19116000-0000-4000-8000-000000000002', false)
+         = '19116000-0000-4000-8000-000000000002' as consumer_session_bound_to_recipient;
+
+consumer_session_bound_to_recipient
+-----------------------------------
+t                                  
+(1 row)
+
+step l_begin: BEGIN;
+step l_insert: 
+  with dr as (
+    insert into agent_board.delivery_recipients(id, delivery_mode, recipient_agent_id, source_kind, source_message_id)
+    values ('19114000-0000-4000-8000-00000000000e', 'direct',
+            '19110000-0000-4000-8000-000000000002', 'message',
+            '19113000-0000-4000-8000-00000000000e')
+    returning id
+  )
+  insert into agent_board.inbox_items(
+    id, delivery_recipient_id, recipient_agent_id, delivery_mode, source_kind, source_message_id,
+    subject, preview, priority, action_state, visible_in_inbox, visible_in_board_feed, fetch_descriptor)
+  select '19115000-0000-4000-8000-00000000000e', dr.id,
+         '19110000-0000-4000-8000-000000000002', 'direct', 'message',
+         '19113000-0000-4000-8000-00000000000e',
+         'Iso191 late', 'iso191 late preview', 'high', 'new', true, false, jsonb_build_object()
+    from dr;
+
+step l_mark: 
+  insert into public.iso191_marks(kind, val)
+  select 'late_created_at', created_at from agent_board.inbox_items
+   where id = '19115000-0000-4000-8000-00000000000e';
+
+step m_begin: BEGIN;
+step m_insert: 
+  with dr as (
+    insert into agent_board.delivery_recipients(id, delivery_mode, recipient_agent_id, source_kind, source_message_id)
+    values ('19114000-0000-4000-8000-00000000000d', 'direct',
+            '19110000-0000-4000-8000-000000000002', 'message',
+            '19113000-0000-4000-8000-00000000000d')
+    returning id
+  )
+  insert into agent_board.inbox_items(
+    id, delivery_recipient_id, recipient_agent_id, delivery_mode, source_kind, source_message_id,
+    subject, preview, priority, action_state, visible_in_inbox, visible_in_board_feed, fetch_descriptor)
+  select '19115000-0000-4000-8000-00000000000d', dr.id,
+         '19110000-0000-4000-8000-000000000002', 'direct', 'message',
+         '19113000-0000-4000-8000-00000000000d',
+         'Iso191 mid', 'iso191 mid preview', 'high', 'new', true, false, jsonb_build_object()
+    from dr;
+
+step m_commit: COMMIT;
+step c_first: 
+  select count(*) = 1                                                            as first_read_sees_one_unhandled_item,
+         bool_and(w.inbox_item_id = '19115000-0000-4000-8000-00000000000d')       as the_visible_item_is_the_committed_one
+    from agent_board.v_agent_wake_recovery w
+   where w.recipient_agent_id = '19110000-0000-4000-8000-000000000002';
+
+first_read_sees_one_unhandled_item|the_visible_item_is_the_committed_one
+----------------------------------+-------------------------------------
+t                                 |t                                    
+(1 row)
+
+step c_persist: 
+  insert into public.iso191_marks(kind, val)
+  select 'naive_cursor', max(created_at) from agent_board.v_agent_wake_recovery
+   where recipient_agent_id = '19110000-0000-4000-8000-000000000002';
+
+step l_commit: COMMIT;
+step c_second: 
+  select exists (select 1 from agent_board.v_agent_wake_recovery w
+                  where w.recipient_agent_id = '19110000-0000-4000-8000-000000000002'
+                    and w.inbox_item_id = '19115000-0000-4000-8000-00000000000e')
+           as late_committer_recovered_by_status,
+         (select l.val from public.iso191_marks l where l.kind = 'late_created_at')
+           <= (select c.val from public.iso191_marks c where c.kind = 'naive_cursor')
+           as late_committer_skipped_by_timestamp_cursor,
+         not exists (select 1 from agent_board.v_agent_wake_recovery w
+                      where w.recipient_agent_id = '19110000-0000-4000-8000-000000000002'
+                        and w.created_at > (select c.val from public.iso191_marks c where c.kind = 'naive_cursor'))
+           as a_created_at_cursor_read_returns_nothing_new;
+
+late_committer_recovered_by_status|late_committer_skipped_by_timestamp_cursor|a_created_at_cursor_read_returns_nothing_new
+----------------------------------+------------------------------------------+--------------------------------------------
+t                                 |t                                         |t                                           
+(1 row)
+

package/tests/isolation/specs/atomic_fedsession_fleet_lock_order.spec

@@ -0,0 +1,117 @@
+# Consiliency/message-board#162 — fleet onboarding and /portal-session may
+# share both a human owner and the provider's default board. Prove the routes
+# agree on board -> owner and cannot form the old board/owner ABBA cycle.
+
+setup
+{
+  insert into agent_board.agents(id, agent_type, kind, handle, display_name, status)
+  values ('162a0000-0000-0000-0000-000000000001', 'agent', 'agent',
+          'atomic-cross-owner', 'Atomic Cross Owner', 'active');
+
+  select count(*) from agent_board.create_board(
+    '162a0000-0000-0000-0000-000000000001',
+    'atomic-cross-board', 'Atomic Cross Board',
+    'Consiliency/message-board#162 cross-route lock proof', jsonb_build_object(), 'private'
+  );
+
+  insert into agent_board.fleet_trust_domains(
+    id, slug, display_name, domain_kind, owner_agent_id, lifecycle_state, approved_at
+  ) values (
+    '162a0000-0000-0000-0000-000000000002', 'atomic-cross-domain',
+    'Atomic Cross Domain', 'tailnet', '162a0000-0000-0000-0000-000000000001',
+    'active', now()
+  );
+  insert into agent_board.fleet_machines(
+    id, trust_domain_id, owner_agent_id, machine_label, machine_fingerprint,
+    lifecycle_state, enrollment_source, enrolled_at
+  ) values (
+    '162a0000-0000-0000-0000-000000000003',
+    '162a0000-0000-0000-0000-000000000002',
+    '162a0000-0000-0000-0000-000000000001',
+    'claw', 'sha256:atomic-cross-machine', 'active', 'portal', now()
+  );
+  insert into agent_board.identity_providers(
+    issuer, audience, supported, policy_approved,
+    allowed_scopes, allowed_board_scopes, allowed_agent_kinds
+  ) values (
+    'https://atomic-cross.test', 'message-board', true, true,
+    ARRAY['board:send'], ARRAY[]::text[], ARRAY['agent','human']
+  );
+
+  -- Materialize the shared human owner while auto-join is still disabled.
+  select count(*) from agent_board.enroll_federated_human(
+    'https://atomic-cross.test', 'message-board', 'cross-human',
+    jsonb_build_object('sub','cross-human'), 'Cross Human'
+  );
+  update agent_board.identity_providers
+     set default_board_id=(select id from agent_board.boards where slug='atomic-cross-board')
+   where issuer='https://atomic-cross.test';
+
+  select count(*) from agent_board.create_fleet_onboarding_invite(
+    (select id from agent_board.boards where slug='atomic-cross-board'),
+    '162a0000-0000-0000-0000-000000000003',
+    'codex', 'phase-loop', 'message-board', 'sha256:atomic-cross-repo',
+    'worker', 'phase_worker', 'atomic-cross-agent', 1,
+    now() + interval '1 hour', '162a0000-0000-0000-0000-000000000001',
+    jsonb_build_object()
+  );
+}
+
+session "guard"
+step "guard_begin" { BEGIN; }
+step "guard_board_key_share" {
+  select slug from agent_board.boards
+   where slug='atomic-cross-board' for key share;
+}
+step "guard_commit" { COMMIT; }
+
+session "fleet"
+step "fleet_begin" { BEGIN; SET LOCAL "request.jwt.claim.role" = 'service_role'; }
+step "fleet_onboard" {
+  select identity_disposition, membership_disposition, binding_disposition
+    from agent_board.onboard_federated_fleet_agent(
+      'https://atomic-cross.test', 'message-board', 'cross-human',
+      jsonb_build_object('iss','https://atomic-cross.test','aud','message-board','sub','cross-human','iat',100),
+      'atomic-cross-agent',
+      'eRHZmllEy_TZHAG2zB-Qe_a5BFLkaavMTazWWfaE3f0',
+      'raw_ed25519_base64url',
+      'sha256:z8d5LQPfBMYnfZfvu8wVz684_jkp578-SPDU2OMObS8',
+      true, null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
+      (select code from agent_board.board_invite_tokens where created_by_agent_id='162a0000-0000-0000-0000-000000000001'),
+      (select id from agent_board.boards where slug='atomic-cross-board'),
+      '162a0000-0000-0000-0000-000000000003',
+      'codex', 'phase-loop', 'message-board', 'sha256:atomic-cross-repo',
+      'worker', 'phase_worker', 'atomic-cross-agent'
+    );
+}
+step "fleet_commit" { COMMIT; }
+
+session "portal"
+step "portal_begin" { BEGIN; SET LOCAL "request.jwt.claim.role" = 'service_role'; }
+step "portal_enroll" {
+  select status from agent_board.enroll_federated_human(
+    'https://atomic-cross.test', 'message-board', 'cross-human',
+    jsonb_build_object('sub','cross-human','iat',200), 'Cross Human'
+  );
+}
+step "portal_commit" { COMMIT; }
+
+session "check"
+step "check" {
+  select
+    (select count(*) from agent_board.agents
+      where owner_user_id=(select auth_user_id from agent_board.agents
+                            where metadata #>> ARRAY['federation','subject']='cross-human'
+                            order by kind='human' desc limit 1)) as owned_agents,
+    (select count(*) from agent_board.board_memberships m
+      join agent_board.agents a on a.id=m.agent_id
+     where m.board_id=(select id from agent_board.boards where slug='atomic-cross-board')
+       and a.owner_user_id=(select auth_user_id from agent_board.agents
+                            where metadata #>> ARRAY['federation','subject']='cross-human'
+                            order by kind='human' desc limit 1)) as memberships,
+    (select count(*) from agent_board.fleet_machine_agents b
+      join agent_board.agents a on a.id=b.agent_id
+     where a.handle='atomic-cross-agent') as bindings;
+}
+
+permutation "guard_begin" "guard_board_key_share" "fleet_begin" "fleet_onboard" "portal_begin" "portal_enroll" "guard_commit" "fleet_commit" "portal_commit" "check"

package/tests/isolation/specs/atomic_fedsession_human_revoke.spec

@@ -0,0 +1,66 @@
+# Consiliency/message-board#162 — /portal-session's enroll_federated_human RPC
+# shares the deterministic auth.users owner lock with total-human revocation.
+# Prove both orders: session first completes before revocation; revocation first
+# commits the marker and the waiting session fails closed.
+
+setup
+{
+  insert into agent_board.agents(id, agent_type, kind, handle, display_name, status)
+  values ('16290000-0000-0000-0000-000000000001', 'agent', 'agent',
+          'atomic-fedsession-revoker', 'Atomic Fedsession Revoker', 'active');
+  insert into agent_board.identity_providers(
+    issuer, audience, supported, policy_approved, allowed_scopes, allowed_board_scopes, allowed_agent_kinds
+  ) values (
+    'https://atomic-fedsession.test', 'message-board', true, true,
+    ARRAY[]::text[], ARRAY[]::text[], ARRAY['human']
+  );
+  select count(*) from agent_board.enroll_federated_human(
+    'https://atomic-fedsession.test', 'message-board', 'portal-human-race',
+    jsonb_build_object('sub','portal-human-race'), 'Portal Human Race'
+  );
+}
+
+teardown
+{
+  delete from agent_board.enrollment_federation_audit where issuer='https://atomic-fedsession.test';
+  delete from agent_board.fleet_human_revocations where issuer='https://atomic-fedsession.test';
+  delete from agent_board.fleet_revocation_events
+  where revoked_by_agent_id='16290000-0000-0000-0000-000000000001'
+     or agent_id in (
+       select id from agent_board.agents
+       where metadata #>> ARRAY['federation','subject'] = 'portal-human-race'
+     );
+  delete from agent_board.agents where handle like 'fed-human-%' or id='16290000-0000-0000-0000-000000000001';
+  delete from agent_board.identity_providers where issuer='https://atomic-fedsession.test';
+}
+
+session "portal"
+step "portal_begin" { BEGIN; SET LOCAL "request.jwt.claim.role" = 'service_role'; }
+step "portal_enroll" {
+  select status from agent_board.enroll_federated_human(
+    'https://atomic-fedsession.test', 'message-board', 'portal-human-race',
+    jsonb_build_object('sub','portal-human-race','iat',200), 'Portal Human Race'
+  );
+}
+step "portal_commit" { COMMIT; }
+
+session "revoke"
+step "revoke_begin" { BEGIN; SET LOCAL "request.jwt.claim.role" = 'service_role'; }
+step "revoke_human" {
+  select revoked_agent_count from agent_board.revoke_human_subtree(
+    (select auth_user_id from agent_board.agents where metadata #>> ARRAY['federation','subject'] = 'portal-human-race'),
+    '16290000-0000-0000-0000-000000000001', 'portal race revoke'
+  );
+}
+step "revoke_commit" { COMMIT; }
+
+session "check"
+step "check" {
+  select
+    (select count(*) from agent_board.fleet_human_revocations where issuer='https://atomic-fedsession.test') as markers,
+    (select count(*) from agent_board.agents where metadata #>> ARRAY['federation','subject'] = 'portal-human-race' and status='active') as active_humans,
+    (select count(*) from agent_board.enrollment_federation_audit where issuer='https://atomic-fedsession.test') as audits;
+}
+
+permutation "portal_begin" "portal_enroll" "revoke_begin" "revoke_human" "portal_commit" "revoke_commit" "check"
+permutation "revoke_begin" "revoke_human" "portal_begin" "portal_enroll" "revoke_commit" "portal_commit" "check"