@consiliency/agent-board-schema 1.2.0 → 1.3.0

package/fixtures/already-applied.json

@@ -176,6 +176,10 @@
     {
       "id": "20260713000000_agent_board_rls_reassert_board_scoping",
       "sha256": "ba2c55bd11600d3dc86d54f02acd48ef4de711aaedce425e6bbfc85284a46c74"
+    },
+    {
+      "id": "20260714000200_agent_board_workload_providers_rls",
+      "sha256": "37a6f94d47b0948b1d5f384e52101eb48d9a15ba96a351669c87b907cc8a03e1"
     }
   ]
 }

package/migrations/20260714000200_agent_board_workload_providers_rls.sql

@@ -0,0 +1,35 @@
+-- Forward corrective migration (rollback Class B) — close the client-isolation
+-- gap on agent_board.workload_providers.
+--
+-- WHY: 20260710000401 ships workload_providers with `grant select to
+-- authenticated` but WITHOUT `enable row level security`. On an RLS-disabled
+-- table a RESTRICTIVE policy never enforces, so the Portal b2 operator overlay
+-- (`agent_board_b2_deny_client_jwt_select`, RESTRICTIVE) is INERT here — a
+-- client-account JWT can read the entire provider registry. Its sibling tables
+-- (nonfleet_sessions, nonfleet_invitations) enable RLS + a permissive read, so
+-- the b2 deny works there; workload_providers was the odd one out.
+--
+-- Access model (confirmed with the canonical `grant select to authenticated`):
+-- workload_providers is a GLOBAL registry keyed by issuer/audience (NOT
+-- per-agent-owned), so it is fleet-readable (read predicate `true`); on adopters
+-- carrying the b2 overlay, the RESTRICTIVE b2 deny then narrows client JWTs out.
+-- This matches the Portal's chosen model (fleet-readable, client-denied) and its
+-- operator hotfix (20260714000100), which retires once this canonical corrective
+-- is adopted. Policy shape matches the Portal's deployed hotfix so retirement is
+-- a clean no-op reassert.
+--
+-- Idempotent (drop-if-exists + create); only TIGHTENS/gates access (enabling RLS
+-- with a permissive `true` read preserves authenticated read for adopters WITHOUT
+-- b2, while making the b2 client-deny effective for those WITH it); no
+-- schema-shape change; does NOT write schema_version. The canonical
+-- `grant select to authenticated` (from 20260710000401) is preserved.
+
+alter table agent_board.workload_providers enable row level security;
+
+drop policy if exists workload_providers_deny_anon on agent_board.workload_providers;
+create policy workload_providers_deny_anon on agent_board.workload_providers
+  as permissive for select to anon using (false);
+
+drop policy if exists workload_providers_authenticated_read on agent_board.workload_providers;
+create policy workload_providers_authenticated_read on agent_board.workload_providers
+  as permissive for select to authenticated using (true);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@consiliency/agent-board-schema",
-  "version": "1.2.0",
+  "version": "1.3.0",
   "description": "Canonical, immutable, exact-pinnable agent_board schema bundle: ordered SQL migrations, digest + compatibility manifest, and deterministic materialize/plan/check tooling for adopters.",
   "repository": "https://github.com/Consiliency/message-board.git",
   "type": "module",

package/schema-manifest.json

@@ -2,7 +2,7 @@
   "schema": "agent_board_schema_manifest.v1",
   "interface": "IF-0-MBPLANE-BUNDLE-1",
   "package": "@consiliency/agent-board-schema",
-  "packageVersion": "1.2.0",
+  "packageVersion": "1.3.0",
   "schemaVersion": 7,
   "minClientVersion": "1.1.0",
   "source": {
@@ -46,8 +46,8 @@
       "usage": "upsert (retention/monitoring defaults; on conflict do nothing)"
     }
   ],
-  "migrationCount": 44,
-  "aggregateSha256": "256b9de4e36809ed16778541adb8a573325b59dbcb30d56a428dbfd8fa5d2435",
+  "migrationCount": 45,
+  "aggregateSha256": "5acd6311c09a4134f4fb005e6b6f78a2a34665dfccc99e8e67e3bcb7b7325abb",
   "migrations": [
     {
       "order": 0,
@@ -444,6 +444,15 @@
       "sourceRef": "message-board",
       "bytes": 3464,
       "sha256": "ba2c55bd11600d3dc86d54f02acd48ef4de711aaedce425e6bbfc85284a46c74"
+    },
+    {
+      "order": 44,
+      "id": "20260714000200_agent_board_workload_providers_rls",
+      "filename": "20260714000200_agent_board_workload_providers_rls.sql",
+      "origin": "message-board-forward",
+      "sourceRef": "message-board",
+      "bytes": 2159,
+      "sha256": "37a6f94d47b0948b1d5f384e52101eb48d9a15ba96a351669c87b907cc8a03e1"
     }
   ],
   "excludedBridge": {

package/tests/agent_board_workload_providers_rls.test.sql

@@ -0,0 +1,40 @@
+begin;
+select plan(5);
+
+-- After the corrective, workload_providers must have RLS ENABLED so a
+-- RESTRICTIVE deny (the b2 client-JWT overlay on adopters that carry it) can
+-- actually enforce — it is inert on an RLS-disabled table.
+
+select ok(
+  (select relrowsecurity from pg_class c join pg_namespace n on n.oid=c.relnamespace
+    where n.nspname='agent_board' and c.relname='workload_providers'),
+  'workload_providers has RLS enabled');
+
+select is(
+  (select count(*)::int from pg_policy pol join pg_class c on c.oid=pol.polrelid
+     join pg_namespace n on n.oid=c.relnamespace
+    where n.nspname='agent_board' and c.relname='workload_providers'
+      and pol.polname='workload_providers_authenticated_read'),
+  1, 'workload_providers_authenticated_read policy exists');
+
+select is(
+  (select pg_get_expr(polqual, polrelid) from pg_policy pol join pg_class c on c.oid=pol.polrelid
+     join pg_namespace n on n.oid=c.relnamespace
+    where n.nspname='agent_board' and c.relname='workload_providers'
+      and pol.polname='workload_providers_authenticated_read'),
+  'true', 'authenticated read predicate is true (global registry, fleet-readable)');
+
+select is(
+  (select count(*)::int from pg_policy pol join pg_class c on c.oid=pol.polrelid
+     join pg_namespace n on n.oid=c.relnamespace
+    where n.nspname='agent_board' and c.relname='workload_providers'
+      and pol.polname='workload_providers_deny_anon'),
+  1, 'workload_providers_deny_anon policy exists');
+
+-- canonical fleet-read grant is preserved
+select ok(
+  has_table_privilege('authenticated', 'agent_board.workload_providers', 'SELECT'),
+  'authenticated retains SELECT grant on workload_providers');
+
+select * from finish();
+rollback;