@consiliency/agent-board-schema 1.2.0 → 1.4.0

package/schema-manifest.json

@@ -2,8 +2,8 @@
   "schema": "agent_board_schema_manifest.v1",
   "interface": "IF-0-MBPLANE-BUNDLE-1",
   "package": "@consiliency/agent-board-schema",
-  "packageVersion": "1.2.0",
-  "schemaVersion": 7,
+  "packageVersion": "1.4.0",
+  "schemaVersion": 8,
   "minClientVersion": "1.1.0",
   "source": {
     "portalBaseline": "94f9c269a358a943498454003e8f05f47e27a491",
@@ -46,8 +46,8 @@
       "usage": "upsert (retention/monitoring defaults; on conflict do nothing)"
     }
   ],
-  "migrationCount": 44,
-  "aggregateSha256": "256b9de4e36809ed16778541adb8a573325b59dbcb30d56a428dbfd8fa5d2435",
+  "migrationCount": 71,
+  "aggregateSha256": "794661727d22a39e2d42ddfc5d6456fb93165cef68af11fb361385c29dbdead9",
   "migrations": [
     {
       "order": 0,
@@ -444,6 +444,249 @@
       "sourceRef": "message-board",
       "bytes": 3464,
       "sha256": "ba2c55bd11600d3dc86d54f02acd48ef4de711aaedce425e6bbfc85284a46c74"
+    },
+    {
+      "order": 44,
+      "id": "20260714000200_agent_board_workload_providers_rls",
+      "filename": "20260714000200_agent_board_workload_providers_rls.sql",
+      "origin": "message-board-forward",
+      "sourceRef": "message-board",
+      "bytes": 2159,
+      "sha256": "37a6f94d47b0948b1d5f384e52101eb48d9a15ba96a351669c87b907cc8a03e1"
+    },
+    {
+      "order": 45,
+      "id": "20260717000100_agent_board_board_role",
+      "filename": "20260717000100_agent_board_board_role.sql",
+      "origin": "message-board-forward",
+      "sourceRef": "message-board",
+      "bytes": 7246,
+      "sha256": "969980a7b52c6fee9329d2367006e5ce6d36b6471b53fee2247e493ac8ae512f"
+    },
+    {
+      "order": 46,
+      "id": "20260717000200_agent_board_thread_acl",
+      "filename": "20260717000200_agent_board_thread_acl.sql",
+      "origin": "message-board-forward",
+      "sourceRef": "message-board",
+      "bytes": 6326,
+      "sha256": "afb323d6f9189f1f37a7fee3ffceaaa17474059d46a1fdd84adb73c28bfb27ba"
+    },
+    {
+      "order": 47,
+      "id": "20260717000300_agent_board_agent_lineage",
+      "filename": "20260717000300_agent_board_agent_lineage.sql",
+      "origin": "message-board-forward",
+      "sourceRef": "message-board",
+      "bytes": 2094,
+      "sha256": "48aff20015f74e5f201a2985f71b33cd3e718aeb9dfb25fbd5720cb824fe85b3"
+    },
+    {
+      "order": 48,
+      "id": "20260717000400_agent_board_delegation_policies",
+      "filename": "20260717000400_agent_board_delegation_policies.sql",
+      "origin": "message-board-forward",
+      "sourceRef": "message-board",
+      "bytes": 7551,
+      "sha256": "ef7827af400e8a6206c17c8cc35623c280a92d25f4b678314847ff308d9d9dc7"
+    },
+    {
+      "order": 49,
+      "id": "20260718000100_agent_board_send_authz_config",
+      "filename": "20260718000100_agent_board_send_authz_config.sql",
+      "origin": "message-board-forward",
+      "sourceRef": "message-board",
+      "bytes": 7775,
+      "sha256": "d56909d4fbb7054e74818903d3eea84451d561c60908026dbbdb1956f500565d"
+    },
+    {
+      "order": 50,
+      "id": "20260718000200_agent_board_send_role_gate",
+      "filename": "20260718000200_agent_board_send_role_gate.sql",
+      "origin": "message-board-forward",
+      "sourceRef": "message-board",
+      "bytes": 26707,
+      "sha256": "805afdef2c11e52966bec1cd47a55dfd5e687af9181316d9ef71975b516de288"
+    },
+    {
+      "order": 51,
+      "id": "20260718000300_agent_board_fleet_policy_default_deny",
+      "filename": "20260718000300_agent_board_fleet_policy_default_deny.sql",
+      "origin": "message-board-forward",
+      "sourceRef": "message-board",
+      "bytes": 9060,
+      "sha256": "47ad42dd50fb31ede0cb6044a22cce04a31168af2dead73ed8e01dabf84fddea"
+    },
+    {
+      "order": 52,
+      "id": "20260718000400_agent_board_grant_ceiling_wiring",
+      "filename": "20260718000400_agent_board_grant_ceiling_wiring.sql",
+      "origin": "message-board-forward",
+      "sourceRef": "message-board",
+      "bytes": 2626,
+      "sha256": "0461f6d403fb1dd07e9423db898cd41a15a3ecfbf75402cd0085791d57a646b7"
+    },
+    {
+      "order": 53,
+      "id": "20260718000500_agent_board_fleet_agent_session_class",
+      "filename": "20260718000500_agent_board_fleet_agent_session_class.sql",
+      "origin": "message-board-forward",
+      "sourceRef": "message-board",
+      "bytes": 1341,
+      "sha256": "028f931aaba673fba29dd92ef3c17efcc08cb50b0dab01789986652a54fb003a"
+    },
+    {
+      "order": 54,
+      "id": "20260718000600_agent_board_mint_fleet_agent_session",
+      "filename": "20260718000600_agent_board_mint_fleet_agent_session.sql",
+      "origin": "message-board-forward",
+      "sourceRef": "message-board",
+      "bytes": 7945,
+      "sha256": "25972553fd1ec4f350e751495d79695a8b0ccc66c0b8b272fdf517115ba37307"
+    },
+    {
+      "order": 55,
+      "id": "20260718000700_agent_board_nonfleet_session_reaper",
+      "filename": "20260718000700_agent_board_nonfleet_session_reaper.sql",
+      "origin": "message-board-forward",
+      "sourceRef": "message-board",
+      "bytes": 1490,
+      "sha256": "9b6ff596ac386c49530c9405535b5255dcb09c271288957711a0d553446ef161"
+    },
+    {
+      "order": 56,
+      "id": "20260718000800_agent_board_regrant_scoped_send",
+      "filename": "20260718000800_agent_board_regrant_scoped_send.sql",
+      "origin": "message-board-forward",
+      "sourceRef": "message-board",
+      "bytes": 2072,
+      "sha256": "1332cf2ee23d875cf0b3d646890a0fffe0efc6d2312da4e315d5dc0abadaf74f"
+    },
+    {
+      "order": 57,
+      "id": "20260718000900_agent_board_agents_status_revoked",
+      "filename": "20260718000900_agent_board_agents_status_revoked.sql",
+      "origin": "message-board-forward",
+      "sourceRef": "message-board",
+      "bytes": 1424,
+      "sha256": "f0e9b95c286bb4b6873cdc882e30262788636886360c0100b745569d6553a51b"
+    },
+    {
+      "order": 58,
+      "id": "20260718001000_agent_board_delegation_enforcement",
+      "filename": "20260718001000_agent_board_delegation_enforcement.sql",
+      "origin": "message-board-forward",
+      "sourceRef": "message-board",
+      "bytes": 14005,
+      "sha256": "7e93bd1ff924b06922bb9312684f57ce81c3d3e921dbf52357ae5059a01dbc8b"
+    },
+    {
+      "order": 59,
+      "id": "20260718001100_agent_board_revoke_agent_subtree",
+      "filename": "20260718001100_agent_board_revoke_agent_subtree.sql",
+      "origin": "message-board-forward",
+      "sourceRef": "message-board",
+      "bytes": 9849,
+      "sha256": "bcf14370a3da288ebe43e337d050f5fb6fb736fad69c9f6b7a0b6e0992371b7e"
+    },
+    {
+      "order": 60,
+      "id": "20260718001200_agent_board_resigning_refresh",
+      "filename": "20260718001200_agent_board_resigning_refresh.sql",
+      "origin": "message-board-forward",
+      "sourceRef": "message-board",
+      "bytes": 4806,
+      "sha256": "47248250ab9bc11abdea8533d62611efba9812b913dc2dc5405612eb2fbafd12"
+    },
+    {
+      "order": 61,
+      "id": "20260718001300_agent_board_identity_providers",
+      "filename": "20260718001300_agent_board_identity_providers.sql",
+      "origin": "message-board-forward",
+      "sourceRef": "message-board",
+      "bytes": 4108,
+      "sha256": "ab8169709faf7f74b27a593a7c980022ee073f0371b39c0dda18f2202c0f4eae"
+    },
+    {
+      "order": 62,
+      "id": "20260718001400_agent_board_enrollment_federation_audit",
+      "filename": "20260718001400_agent_board_enrollment_federation_audit.sql",
+      "origin": "message-board-forward",
+      "sourceRef": "message-board",
+      "bytes": 2822,
+      "sha256": "c42e5122625639155d9ff1d2511ebdec3ac379ca0660e67c159e37efb8ea24f5"
+    },
+    {
+      "order": 63,
+      "id": "20260718001500_agent_board_enroll_federated_identity",
+      "filename": "20260718001500_agent_board_enroll_federated_identity.sql",
+      "origin": "message-board-forward",
+      "sourceRef": "message-board",
+      "bytes": 9490,
+      "sha256": "497d1f657d78c56744017409f5bd2ca361cd691ee1d0bab5b9a55ab3dd4b8ae7"
+    },
+    {
+      "order": 64,
+      "id": "20260719000100_agent_board_signing_challenge_pending_cap",
+      "filename": "20260719000100_agent_board_signing_challenge_pending_cap.sql",
+      "origin": "message-board-forward",
+      "sourceRef": "message-board",
+      "bytes": 4280,
+      "sha256": "1e48b413d31f11b9c120480c8453c8502fdde1c3a7997dcd9e22e957a2459b0b"
+    },
+    {
+      "order": 65,
+      "id": "20260719000200_agent_board_signing_challenge_reaper",
+      "filename": "20260719000200_agent_board_signing_challenge_reaper.sql",
+      "origin": "message-board-forward",
+      "sourceRef": "message-board",
+      "bytes": 1472,
+      "sha256": "488bbf16bf526b7df7c9b3fa5b068964703aa04ba657d6e6ceaff856a9523634"
+    },
+    {
+      "order": 66,
+      "id": "20260719000300_agent_board_enroll_rate_cap",
+      "filename": "20260719000300_agent_board_enroll_rate_cap.sql",
+      "origin": "message-board-forward",
+      "sourceRef": "message-board",
+      "bytes": 3195,
+      "sha256": "402c6d8bc5d4662b10d6fe0228a2bdd30026be96a5b5a237e26e1d44a639ae1d"
+    },
+    {
+      "order": 67,
+      "id": "20260719001000_agent_board_identity_providers_portal_contract",
+      "filename": "20260719001000_agent_board_identity_providers_portal_contract.sql",
+      "origin": "message-board-forward",
+      "sourceRef": "message-board",
+      "bytes": 2263,
+      "sha256": "e0406afebf9b36f3793e04ca757a252f038b4100697598e0a2e76050193674a0"
+    },
+    {
+      "order": 68,
+      "id": "20260719001100_agent_board_enroll_federated_identity_pop",
+      "filename": "20260719001100_agent_board_enroll_federated_identity_pop.sql",
+      "origin": "message-board-forward",
+      "sourceRef": "message-board",
+      "bytes": 12153,
+      "sha256": "3d4517243a7d228fb04ea41e9dc7236c870cb5830fb2f815bfa12426eee47bd7"
+    },
+    {
+      "order": 69,
+      "id": "20260719001200_agent_board_enroll_federated_identity_raw_fingerprint",
+      "filename": "20260719001200_agent_board_enroll_federated_identity_raw_fingerprint.sql",
+      "origin": "message-board-forward",
+      "sourceRef": "message-board",
+      "bytes": 13630,
+      "sha256": "70943047b522ec23ee3d451f704c961d130a053bc210dad8759cbc9a22444454"
+    },
+    {
+      "order": 70,
+      "id": "20260719001300_agent_board_enroll_rate_events_reaper_rls",
+      "filename": "20260719001300_agent_board_enroll_rate_events_reaper_rls.sql",
+      "origin": "message-board-forward",
+      "sourceRef": "message-board",
+      "bytes": 3112,
+      "sha256": "b2f58eadc13cb227991c4d978c5460878dc3cbada43c58285b55154b89a28459"
     }
   ],
   "excludedBridge": {

package/src/tooling.test.mjs

@@ -34,9 +34,50 @@ describe('manifest integrity', () => {
     expect(manifest.source.portalBaseline).toMatch(/^[0-9a-f]{40}$/);
     expect(manifest.source.laneHead).toMatch(/^[0-9a-f]{40}$/);
     expect(manifest.source.mergeBase).toMatch(/^[0-9a-f]{40}$/);
-    expect(manifest.schemaVersion).toBe(7);
+    expect(manifest.schemaVersion).toBe(8);
     expect(manifest.minClientVersion).toMatch(/^\d+\.\d+\.\d+$/);
   });
+  it('registers the four MBAUTHZ + four MBSENDAUTHZ + four MBSESSION + four MBDELEG + three MBFED + three MBHARDEN + two MBPORTALGATE + two MBPORTAL-PR32 forward migrations (migrationCount = prior 67 + 4 = 71)', () => {
+    expect(manifest.migrationCount).toBe(manifest.migrations.length);
+    expect(manifest.migrationCount).toBe(71);
+    // MBSESSION switched enforcement on (scoped-send re-grant): the client-visible
+    // schema version bumped to 8. MBDELEG tightens delegation and MBFED adds only
+    // enrollment-only additive surface (identity_providers registry, enrollment audit,
+    // the enroll RPC, and the /enroll EF) with no client-visible write-path shape
+    // change, so the version stays 8. MBHARDEN adds three additive pre-live hardening
+    // migrations (challenge pending-cap, challenge reaper, /enroll rate cap) with no
+    // client-visible write-path shape change, so the version stays 8.
+    expect(manifest.schemaVersion).toBe(8);
+    const names = new Set(manifest.migrations.map((m) => m.filename));
+    for (const f of [
+      '20260717000100_agent_board_board_role.sql',
+      '20260717000200_agent_board_thread_acl.sql',
+      '20260717000300_agent_board_agent_lineage.sql',
+      '20260717000400_agent_board_delegation_policies.sql',
+      '20260718000100_agent_board_send_authz_config.sql',
+      '20260718000200_agent_board_send_role_gate.sql',
+      '20260718000300_agent_board_fleet_policy_default_deny.sql',
+      '20260718000400_agent_board_grant_ceiling_wiring.sql',
+      '20260718000500_agent_board_fleet_agent_session_class.sql',
+      '20260718000600_agent_board_mint_fleet_agent_session.sql',
+      '20260718000700_agent_board_nonfleet_session_reaper.sql',
+      '20260718000800_agent_board_regrant_scoped_send.sql',
+      '20260718000900_agent_board_agents_status_revoked.sql',
+      '20260718001000_agent_board_delegation_enforcement.sql',
+      '20260718001100_agent_board_revoke_agent_subtree.sql',
+      '20260718001200_agent_board_resigning_refresh.sql',
+      '20260718001300_agent_board_identity_providers.sql',
+      '20260718001400_agent_board_enrollment_federation_audit.sql',
+      '20260718001500_agent_board_enroll_federated_identity.sql',
+      '20260719000100_agent_board_signing_challenge_pending_cap.sql',
+      '20260719000200_agent_board_signing_challenge_reaper.sql',
+      '20260719000300_agent_board_enroll_rate_cap.sql',
+      '20260719001200_agent_board_enroll_federated_identity_raw_fingerprint.sql',
+      '20260719001300_agent_board_enroll_rate_events_reaper_rls.sql',
+    ]) {
+      expect(names.has(f)).toBe(true);
+    }
+  });
 });
 
 describe('materialize (sole adopter path)', () => {

package/tests/agent_board_agent_lineage.test.sql

@@ -0,0 +1,73 @@
+-- MBAUTHZ SL-3 (Lane C) pgTAP: agents.parent_agent_id / root_agent_id and the
+-- owner-consistency trigger.
+create extension if not exists pgtap with schema extensions;
+set search_path = extensions, public, agent_board;
+
+begin;
+
+select plan(8);
+
+create temp table _lineage_fixture (
+  root_agent uuid,
+  root_user uuid,
+  other_user uuid
+) on commit drop;
+
+do $$
+declare
+  v_suffix text := replace(substr(gen_random_uuid()::text, 1, 8), '-', '');
+  v_root_user uuid;
+  v_other_user uuid;
+  v_root uuid := gen_random_uuid();
+begin
+  v_root_user := public.ensure_github_user('lin-root-' || v_suffix, 'lin-root-' || v_suffix || '@example.test', 'lin-root-' || v_suffix, 'LIN Root');
+  v_other_user := public.ensure_github_user('lin-other-' || v_suffix, 'lin-other-' || v_suffix || '@example.test', 'lin-other-' || v_suffix, 'LIN Other');
+
+  insert into agent_board.agents(id, agent_type, handle, display_name, status, auth_user_id, owner_user_id)
+  values (v_root, 'agent', 'lin-root-' || v_suffix, 'LIN Root', 'active', v_root_user, v_root_user);
+
+  insert into _lineage_fixture values (v_root, v_root_user, v_other_user);
+end
+$$;
+
+-- Structure -----------------------------------------------------------------
+select has_column('agent_board', 'agents', 'parent_agent_id', 'agents has parent_agent_id');
+select has_column('agent_board', 'agents', 'root_agent_id', 'agents has root_agent_id');
+select col_type_is('agent_board', 'agents', 'parent_agent_id', 'uuid', 'parent_agent_id is uuid');
+select fk_ok('agent_board', 'agents', 'parent_agent_id', 'agent_board', 'agents', 'id',
+  'parent_agent_id references agents(id)');
+select fk_ok('agent_board', 'agents', 'root_agent_id', 'agent_board', 'agents', 'id',
+  'root_agent_id references agents(id)');
+
+-- Owner-consistency trigger -------------------------------------------------
+-- Child whose owner_user_id differs from its root's owner is rejected.
+select throws_ok(
+  (select format(
+     $q$insert into agent_board.agents(id, agent_type, handle, display_name, status, owner_user_id, parent_agent_id, root_agent_id)
+        values (gen_random_uuid(), 'agent', %L, 'LIN Bad Child', 'active', %L::uuid, %L::uuid, %L::uuid)$q$,
+     'lin-badchild-' || gen_random_uuid()::text, other_user, root_agent, root_agent)
+   from _lineage_fixture),
+  '23514', null,
+  'trigger rejects a parented agent whose owner differs from its root');
+
+-- Child whose owner matches its root's owner is allowed.
+select lives_ok(
+  (select format(
+     $q$insert into agent_board.agents(id, agent_type, handle, display_name, status, owner_user_id, parent_agent_id, root_agent_id)
+        values (gen_random_uuid(), 'agent', %L, 'LIN Good Child', 'active', %L::uuid, %L::uuid, %L::uuid)$q$,
+     'lin-goodchild-' || gen_random_uuid()::text, root_user, root_agent, root_agent)
+   from _lineage_fixture),
+  'trigger allows a parented agent whose owner matches its root');
+
+-- Unparented agent (NULL lineage) is unaffected regardless of owner.
+select lives_ok(
+  (select format(
+     $q$insert into agent_board.agents(id, agent_type, handle, display_name, status, owner_user_id)
+        values (gen_random_uuid(), 'agent', %L, 'LIN Orphan', 'active', %L::uuid)$q$,
+     'lin-orphan-' || gen_random_uuid()::text, other_user)
+   from _lineage_fixture),
+  'unparented agent with NULL lineage is unaffected by the trigger');
+
+select finish();
+
+rollback;

package/tests/agent_board_agents_status_revoked.test.sql

@@ -0,0 +1,60 @@
+-- MBDELEG SL-1 pgTAP (IF-0-MBDELEG-1): agents.status admits 'revoked'.
+--
+-- Proves the CHECK-extension at 20260718000900 accepts the 4th literal 'revoked'
+-- alongside the 3 legacy literals, rejects an unknown literal, and that a write of
+-- status='revoked' (as the cascade performs) no longer throws check_violation.
+--
+-- Runs as postgres (service_role-equivalent).
+create extension if not exists pgtap with schema extensions;
+set search_path = extensions, public, agent_board;
+
+begin;
+
+select plan(6);
+
+create temp table _srv_fx (a_upd uuid) on commit drop;
+
+do $$
+declare
+  s text := replace(substr(gen_random_uuid()::text, 1, 8), '-', '');
+  v_upd uuid := gen_random_uuid();
+begin
+  -- Seed one agent to update to 'revoked' below.
+  insert into agent_board.agents(id, agent_type, handle, display_name, status)
+  values (v_upd, 'agent', 'srv-upd-'||s, 'SRV-UPD', 'active');
+  insert into _srv_fx values (v_upd);
+end
+$$;
+
+-- Insert-side acceptance of each literal (distinct handles).
+select lives_ok(
+  $q$insert into agent_board.agents(agent_type, handle, display_name, status)
+     values ('agent', 'srv-active-'||replace(substr(gen_random_uuid()::text,1,8),'-',''), 'A', 'active')$q$,
+  'agents.status accepts legacy literal ''active''');
+select lives_ok(
+  $q$insert into agent_board.agents(agent_type, handle, display_name, status)
+     values ('agent', 'srv-inactive-'||replace(substr(gen_random_uuid()::text,1,8),'-',''), 'I', 'inactive')$q$,
+  'agents.status accepts legacy literal ''inactive''');
+select lives_ok(
+  $q$insert into agent_board.agents(agent_type, handle, display_name, status)
+     values ('agent', 'srv-suspended-'||replace(substr(gen_random_uuid()::text,1,8),'-',''), 'S', 'suspended')$q$,
+  'agents.status accepts legacy literal ''suspended''');
+select lives_ok(
+  $q$insert into agent_board.agents(agent_type, handle, display_name, status)
+     values ('agent', 'srv-revoked-'||replace(substr(gen_random_uuid()::text,1,8),'-',''), 'R', 'revoked')$q$,
+  'agents.status accepts the new literal ''revoked''');
+
+-- An unknown literal is rejected by agents_status_check.
+select throws_ok(
+  $q$insert into agent_board.agents(agent_type, handle, display_name, status)
+     values ('agent', 'srv-bogus-'||replace(substr(gen_random_uuid()::text,1,8),'-',''), 'B', 'bogus')$q$,
+  '23514', null, 'agents.status rejects an unknown literal (check_violation)');
+
+-- A subtree write of status='revoked' (what the cascade performs) succeeds.
+select lives_ok(
+  (select format($q$update agent_board.agents set status = 'revoked' where id = %L::uuid$q$, a_upd) from _srv_fx),
+  'updating an existing agent to status=''revoked'' no longer throws check_violation');
+
+select finish();
+
+rollback;

package/tests/agent_board_auth_rpcs.test.sql

@@ -155,13 +155,15 @@ begin
 
   v_previous_credential_id := v_agent_one.credential_id;
 
-  select *
-    into v_rotated
-    from agent_board.rotate_agent_token(v_agent_one.agent_id);
-
-  if v_rotated.replaces_credential_id is distinct from v_previous_credential_id then
-    raise exception 'rotate_agent_token did not record replaces_credential_id';
-  end if;
+  -- MBDELEG (20260718001200): the 30-day refresh-token exchange is retired.
+  -- rotate_agent_token now raises 0A000; session refresh is re-signing
+  -- (PoP -> mint_fleet_agent_session), not a refresh-token rotation.
+  begin
+    perform * from agent_board.rotate_agent_token(v_agent_one.agent_id);
+    raise exception 'rotate_agent_token unexpectedly succeeded (should be deprecated)';
+  exception
+    when sqlstate '0A000' then null;
+  end;
 
   select *
     into v_revoked
@@ -263,12 +265,11 @@ $$;
 
 select pass('AUTHRPC preserved the service_role callback-runtime path');
 
--- portal#203 (defense in depth): rotate_agent_token routes through the same
--- _issue_agent_credential choke point, so a pre-existing system principal must
--- also fail closed on rotation. Create one directly (provision_agent now rejects
--- system) and assert rotation raises and mints nothing. Run as the superuser so
--- the direct agents insert is permitted; rotate_agent_token still bypasses the
--- platform-admin gate for a service/superuser caller, so the guard is exercised.
+-- portal#203 + MBDELEG (20260718001200, defense in depth): rotate_agent_token is
+-- now deprecated and raises 0A000 for ALL callers (session refresh is re-signing),
+-- which subsumes the earlier system-principal fail-closed path. A pre-existing
+-- system principal must still get no credential from rotation. Create one directly
+-- (provision_agent rejects system) and assert rotation raises 0A000 and mints nothing.
 reset role;
 do $$
 declare
@@ -288,12 +289,12 @@ begin
     perform * from agent_board.rotate_agent_token(v_system_agent_id);
     raise exception 'rotate_agent_token unexpectedly succeeded for a system principal';
   exception
-    when sqlstate '22023' then
+    when sqlstate '0A000' then
       v_raised := true;
   end;
 
   if not v_raised then
-    raise exception 'rotate_agent_token did not fail closed with sqlstate 22023 for a system principal';
+    raise exception 'rotate_agent_token did not fail closed with sqlstate 0A000 (deprecated) for a system principal';
   end if;
 
   if exists (
@@ -304,7 +305,7 @@ begin
 end
 $$;
 
-select pass('AUTHRPC rotate_agent_token also fails closed for system principals');
+select pass('AUTHRPC rotate_agent_token is deprecated (0A000) and mints no credential');
 
 select finish();
 

package/tests/agent_board_board_role.test.sql

@@ -0,0 +1,129 @@
+-- MBAUTHZ SL-1 (Lane A) pgTAP: board_memberships.role, boards.role_gate_enforced,
+-- and the role gate on invite_board_member/resolve_board_request.
+create extension if not exists pgtap with schema extensions;
+set search_path = extensions, public, agent_board;
+
+begin;
+
+select plan(13);
+
+create temp table _board_role_fixture (
+  board uuid,
+  creator_agent uuid,
+  member_agent uuid,
+  admin_agent uuid,
+  target_agent uuid,
+  other_agent uuid,
+  creator_user uuid,
+  member_user uuid,
+  admin_user uuid
+) on commit drop;
+
+do $$
+declare
+  v_suffix text := replace(substr(gen_random_uuid()::text, 1, 8), '-', '');
+  v_creator_user uuid;
+  v_member_user uuid;
+  v_admin_user uuid;
+  v_creator uuid := gen_random_uuid();
+  v_member uuid := gen_random_uuid();
+  v_admin uuid := gen_random_uuid();
+  v_target uuid := gen_random_uuid();
+  v_other uuid := gen_random_uuid();
+  v_board uuid;
+begin
+  v_creator_user := public.ensure_github_user('br-creator-' || v_suffix, 'br-creator-' || v_suffix || '@example.test', 'br-creator-' || v_suffix, 'BR Creator');
+  v_member_user := public.ensure_github_user('br-member-' || v_suffix, 'br-member-' || v_suffix || '@example.test', 'br-member-' || v_suffix, 'BR Member');
+  v_admin_user := public.ensure_github_user('br-admin-' || v_suffix, 'br-admin-' || v_suffix || '@example.test', 'br-admin-' || v_suffix, 'BR Admin');
+
+  insert into agent_board.agents(id, agent_type, handle, display_name, status, auth_user_id, owner_user_id)
+  values
+    (v_creator, 'agent', 'br-creator-' || v_suffix, 'BR Creator', 'active', v_creator_user, v_creator_user),
+    (v_member, 'agent', 'br-member-' || v_suffix, 'BR Member', 'active', v_member_user, v_member_user),
+    (v_admin, 'agent', 'br-admin-' || v_suffix, 'BR Admin', 'active', v_admin_user, v_admin_user),
+    (v_target, 'agent', 'br-target-' || v_suffix, 'BR Target', 'active', null, null),
+    (v_other, 'agent', 'br-other-' || v_suffix, 'BR Other', 'active', null, null);
+
+  select board_id into v_board
+    from agent_board.create_board(v_creator, 'br-board-' || v_suffix, 'BR Board', 'board role test', '{}'::jsonb, 'private');
+
+  -- Creator + other memberships inserted with the column DEFAULT (member) to
+  -- exercise the one-time backfill; member/admin get explicit roles for gate tests.
+  insert into agent_board.board_memberships(board_id, agent_id, membership_state, created_by_agent_id)
+  values
+    (v_board, v_creator, 'joined', v_creator),
+    (v_board, v_other, 'joined', v_creator);
+  insert into agent_board.board_memberships(board_id, agent_id, membership_state, created_by_agent_id, role)
+  values
+    (v_board, v_member, 'joined', v_creator, 'member'),
+    (v_board, v_admin, 'joined', v_creator, 'admin');
+
+  insert into _board_role_fixture values
+    (v_board, v_creator, v_member, v_admin, v_target, v_other, v_creator_user, v_member_user, v_admin_user);
+end
+$$;
+
+-- Structure -----------------------------------------------------------------
+select has_column('agent_board', 'board_memberships', 'role', 'board_memberships has role column');
+select col_type_is('agent_board', 'board_memberships', 'role', 'text', 'role is text');
+select col_has_check('agent_board', 'board_memberships', 'role', 'role is check-constrained');
+select has_column('agent_board', 'boards', 'role_gate_enforced', 'boards has role_gate_enforced flag');
+select col_type_is('agent_board', 'boards', 'role_gate_enforced', 'boolean', 'role_gate_enforced is boolean');
+
+-- Default behavior (member membership above was inserted without role) -------
+select is(
+  (select role from agent_board.board_memberships bm join _board_role_fixture f on bm.agent_id = f.member_agent and bm.board_id = f.board),
+  'member', 'explicit member role persists');
+
+-- One-time backfill: creator membership -> owner; other membership -> member.
+update agent_board.board_memberships bm
+   set role = 'owner'
+  from agent_board.boards b
+ where bm.board_id = b.id
+   and bm.agent_id = b.created_by_agent_id
+   and bm.role <> 'owner';
+
+select is(
+  (select role from agent_board.board_memberships bm join _board_role_fixture f on bm.agent_id = f.creator_agent and bm.board_id = f.board),
+  'owner', 'backfill sets creator membership role to owner');
+select is(
+  (select role from agent_board.board_memberships bm join _board_role_fixture f on bm.agent_id = f.other_agent and bm.board_id = f.board),
+  'member', 'backfill leaves non-creator membership as member');
+
+-- Gate: flag=false (default) preserves any-active-member behavior ------------
+-- Non-creator member (role member) may invite when the flag is off.
+select set_config('request.jwt.claim.sub', (select member_user from _board_role_fixture)::text, true);
+select lives_ok(
+  (select format($q$select agent_board.invite_board_member(%L::uuid, %L::uuid, %L::uuid, '{}'::jsonb)$q$, board, target_agent, creator_agent) from _board_role_fixture),
+  'flag off: active member (role member) may invite');
+
+-- Service_role / null actor (no agent maps to this sub) bypasses.
+select set_config('request.jwt.claim.sub', gen_random_uuid()::text, true);
+select lives_ok(
+  (select format($q$select agent_board.invite_board_member(%L::uuid, %L::uuid, %L::uuid, '{}'::jsonb)$q$, board, target_agent, creator_agent) from _board_role_fixture),
+  'flag off: service_role/null actor may invite');
+
+-- Gate: flag=true requires owner/admin ---------------------------------------
+update agent_board.boards set role_gate_enforced = true
+ where id = (select board from _board_role_fixture);
+
+select set_config('request.jwt.claim.sub', (select member_user from _board_role_fixture)::text, true);
+select throws_ok(
+  (select format($q$select agent_board.invite_board_member(%L::uuid, %L::uuid, %L::uuid, '{}'::jsonb)$q$, board, target_agent, creator_agent) from _board_role_fixture),
+  '42501', null,
+  'flag on: role member actor is denied invite');
+
+select set_config('request.jwt.claim.sub', (select admin_user from _board_role_fixture)::text, true);
+select lives_ok(
+  (select format($q$select agent_board.invite_board_member(%L::uuid, %L::uuid, %L::uuid, '{}'::jsonb)$q$, board, target_agent, creator_agent) from _board_role_fixture),
+  'flag on: role admin actor may invite');
+
+-- Service_role / null actor still bypasses even with the flag on.
+select set_config('request.jwt.claim.sub', gen_random_uuid()::text, true);
+select lives_ok(
+  (select format($q$select agent_board.invite_board_member(%L::uuid, %L::uuid, %L::uuid, '{}'::jsonb)$q$, board, target_agent, creator_agent) from _board_role_fixture),
+  'flag on: service_role/null actor still bypasses');
+
+select finish();
+
+rollback;