@consiliency/agent-board-schema 1.2.0

package/migrations/20260512000003_agent_board_auth_rls.sql

@@ -0,0 +1,484 @@
+grant usage on schema agent_board to authenticated;
+
+grant select on agent_board.schema_version to authenticated;
+
+grant select on agent_board.agents,
+  agent_board.threads,
+  agent_board.messages,
+  agent_board.tasks,
+  agent_board.task_events,
+  agent_board.claims,
+  agent_board.delegations,
+  agent_board.artifacts,
+  agent_board.conflicts,
+  agent_board.escalations,
+  agent_board.read_receipts,
+  agent_board.presence,
+  agent_board.boards,
+  agent_board.board_memberships,
+  agent_board.delivery_recipients,
+  agent_board.inbox_items,
+  agent_board.callback_endpoints,
+  agent_board.callback_subscriptions,
+  agent_board.callback_outbox_events,
+  agent_board.callback_delivery_attempts
+to authenticated;
+
+alter table agent_board.agents enable row level security;
+alter table agent_board.threads enable row level security;
+alter table agent_board.messages enable row level security;
+alter table agent_board.tasks enable row level security;
+alter table agent_board.task_events enable row level security;
+alter table agent_board.claims enable row level security;
+alter table agent_board.delegations enable row level security;
+alter table agent_board.artifacts enable row level security;
+alter table agent_board.conflicts enable row level security;
+alter table agent_board.escalations enable row level security;
+alter table agent_board.read_receipts enable row level security;
+alter table agent_board.presence enable row level security;
+alter table agent_board.boards enable row level security;
+alter table agent_board.board_memberships enable row level security;
+alter table agent_board.delivery_recipients enable row level security;
+alter table agent_board.inbox_items enable row level security;
+alter table agent_board.callback_endpoints enable row level security;
+alter table agent_board.callback_subscriptions enable row level security;
+alter table agent_board.callback_outbox_events enable row level security;
+alter table agent_board.callback_delivery_attempts enable row level security;
+
+drop policy if exists agent_board_authenticated_select_agents on agent_board.agents;
+create policy agent_board_authenticated_select_agents
+on agent_board.agents
+as permissive
+for select
+to authenticated
+using (agent_board.current_agent_id() is not null);
+
+drop policy if exists agent_board_authenticated_select_threads on agent_board.threads;
+create policy agent_board_authenticated_select_threads
+on agent_board.threads
+as permissive
+for select
+to authenticated
+using (
+  created_by_agent_id = agent_board.current_agent_id()
+  or exists (
+    select 1
+      from agent_board.messages m
+     where m.thread_id = id
+       and (
+         m.author_agent_id = agent_board.current_agent_id()
+         or exists (
+           select 1
+             from agent_board.delivery_recipients dr
+            where dr.source_message_id = m.id
+              and (
+                dr.recipient_agent_id = agent_board.current_agent_id()
+                or (
+                  dr.board_id is not null
+                  and exists (
+                    select 1
+                      from agent_board.board_memberships bm
+                     where bm.board_id = dr.board_id
+                       and bm.agent_id = agent_board.current_agent_id()
+                       and bm.membership_state in ('joined', 'subscribed')
+                  )
+                )
+              )
+         )
+       )
+  )
+  or exists (
+    select 1
+      from agent_board.tasks t
+     where t.thread_id = id
+       and (
+         t.created_by_agent_id = agent_board.current_agent_id()
+         or t.assigned_agent_id = agent_board.current_agent_id()
+         or exists (
+           select 1
+             from agent_board.delivery_recipients dr
+            where dr.source_task_id = t.id
+              and (
+                dr.recipient_agent_id = agent_board.current_agent_id()
+                or (
+                  dr.board_id is not null
+                  and exists (
+                    select 1
+                      from agent_board.board_memberships bm
+                     where bm.board_id = dr.board_id
+                       and bm.agent_id = agent_board.current_agent_id()
+                       and bm.membership_state in ('joined', 'subscribed')
+                  )
+                )
+              )
+         )
+       )
+  )
+  or exists (
+    select 1
+      from agent_board.read_receipts rr
+     where rr.thread_id = id
+       and rr.agent_id = agent_board.current_agent_id()
+  )
+);
+
+drop policy if exists agent_board_authenticated_select_messages on agent_board.messages;
+create policy agent_board_authenticated_select_messages
+on agent_board.messages
+as permissive
+for select
+to authenticated
+using (
+  author_agent_id = agent_board.current_agent_id()
+  or exists (
+    select 1
+      from agent_board.delivery_recipients dr
+     where dr.source_message_id = id
+       and (
+         dr.recipient_agent_id = agent_board.current_agent_id()
+         or (
+           dr.board_id is not null
+           and exists (
+             select 1
+               from agent_board.board_memberships bm
+              where bm.board_id = dr.board_id
+                and bm.agent_id = agent_board.current_agent_id()
+                and bm.membership_state in ('joined', 'subscribed')
+           )
+         )
+       )
+  )
+);
+
+drop policy if exists agent_board_authenticated_select_tasks on agent_board.tasks;
+create policy agent_board_authenticated_select_tasks
+on agent_board.tasks
+as permissive
+for select
+to authenticated
+using (
+  created_by_agent_id = agent_board.current_agent_id()
+  or assigned_agent_id = agent_board.current_agent_id()
+  or exists (
+    select 1
+      from agent_board.delivery_recipients dr
+     where dr.source_task_id = id
+       and (
+         dr.recipient_agent_id = agent_board.current_agent_id()
+         or (
+           dr.board_id is not null
+           and exists (
+             select 1
+               from agent_board.board_memberships bm
+              where bm.board_id = dr.board_id
+                and bm.agent_id = agent_board.current_agent_id()
+                and bm.membership_state in ('joined', 'subscribed')
+           )
+         )
+       )
+  )
+);
+
+drop policy if exists agent_board_authenticated_select_task_events on agent_board.task_events;
+create policy agent_board_authenticated_select_task_events
+on agent_board.task_events
+as permissive
+for select
+to authenticated
+using (
+  actor_agent_id = agent_board.current_agent_id()
+  or exists (
+    select 1
+      from agent_board.tasks t
+     where t.id = task_id
+       and (
+         t.created_by_agent_id = agent_board.current_agent_id()
+         or t.assigned_agent_id = agent_board.current_agent_id()
+       )
+  )
+);
+
+drop policy if exists agent_board_authenticated_select_claims on agent_board.claims;
+create policy agent_board_authenticated_select_claims
+on agent_board.claims
+as permissive
+for select
+to authenticated
+using (
+  agent_id = agent_board.current_agent_id()
+  or exists (
+    select 1
+      from agent_board.tasks t
+     where t.id = task_id
+       and (
+         t.created_by_agent_id = agent_board.current_agent_id()
+         or t.assigned_agent_id = agent_board.current_agent_id()
+       )
+  )
+);
+
+drop policy if exists agent_board_authenticated_select_delegations on agent_board.delegations;
+create policy agent_board_authenticated_select_delegations
+on agent_board.delegations
+as permissive
+for select
+to authenticated
+using (
+  delegated_by_agent_id = agent_board.current_agent_id()
+  or delegated_to_agent_id = agent_board.current_agent_id()
+  or exists (
+    select 1
+      from agent_board.tasks t
+     where t.id in (parent_task_id, child_task_id)
+       and (
+         t.created_by_agent_id = agent_board.current_agent_id()
+         or t.assigned_agent_id = agent_board.current_agent_id()
+       )
+  )
+);
+
+drop policy if exists agent_board_authenticated_select_artifacts on agent_board.artifacts;
+create policy agent_board_authenticated_select_artifacts
+on agent_board.artifacts
+as permissive
+for select
+to authenticated
+using (
+  created_by_agent_id = agent_board.current_agent_id()
+  or exists (
+    select 1
+      from agent_board.tasks t
+     where t.id = task_id
+       and (
+         t.created_by_agent_id = agent_board.current_agent_id()
+         or t.assigned_agent_id = agent_board.current_agent_id()
+       )
+  )
+  or exists (
+    select 1
+      from agent_board.messages m
+     where m.id = message_id
+       and m.author_agent_id = agent_board.current_agent_id()
+  )
+  or exists (
+    select 1
+      from agent_board.messages m
+     where m.id = message_id
+       and exists (
+         select 1
+           from agent_board.delivery_recipients dr
+          where dr.source_message_id = m.id
+            and dr.recipient_agent_id = agent_board.current_agent_id()
+       )
+  )
+  or exists (
+    select 1
+      from agent_board.task_events te
+     where te.id = task_event_id
+       and te.actor_agent_id = agent_board.current_agent_id()
+  )
+);
+
+drop policy if exists agent_board_authenticated_select_conflicts on agent_board.conflicts;
+create policy agent_board_authenticated_select_conflicts
+on agent_board.conflicts
+as permissive
+for select
+to authenticated
+using (
+  raised_by_agent_id = agent_board.current_agent_id()
+  or resolved_by_agent_id = agent_board.current_agent_id()
+  or exists (
+    select 1
+      from agent_board.tasks t
+     where t.id = task_id
+       and (
+         t.created_by_agent_id = agent_board.current_agent_id()
+         or t.assigned_agent_id = agent_board.current_agent_id()
+       )
+  )
+);
+
+drop policy if exists agent_board_authenticated_select_escalations on agent_board.escalations;
+create policy agent_board_authenticated_select_escalations
+on agent_board.escalations
+as permissive
+for select
+to authenticated
+using (
+  raised_by_agent_id = agent_board.current_agent_id()
+  or resolved_by_agent_id = agent_board.current_agent_id()
+  or assigned_agent_id = agent_board.current_agent_id()
+  or exists (
+    select 1
+      from agent_board.tasks t
+     where t.id = task_id
+       and (
+         t.created_by_agent_id = agent_board.current_agent_id()
+         or t.assigned_agent_id = agent_board.current_agent_id()
+       )
+  )
+);
+
+drop policy if exists agent_board_authenticated_select_read_receipts on agent_board.read_receipts;
+create policy agent_board_authenticated_select_read_receipts
+on agent_board.read_receipts
+as permissive
+for select
+to authenticated
+using (
+  agent_id = agent_board.current_agent_id()
+);
+
+drop policy if exists agent_board_authenticated_select_presence on agent_board.presence;
+create policy agent_board_authenticated_select_presence
+on agent_board.presence
+as permissive
+for select
+to authenticated
+using (
+  agent_id = agent_board.current_agent_id()
+);
+
+drop policy if exists agent_board_authenticated_select_boards on agent_board.boards;
+create policy agent_board_authenticated_select_boards
+on agent_board.boards
+as permissive
+for select
+to authenticated
+using (
+  created_by_agent_id = agent_board.current_agent_id()
+  or exists (
+    select 1
+      from agent_board.board_memberships bm
+     where bm.board_id = id
+       and bm.agent_id = agent_board.current_agent_id()
+       and bm.membership_state in ('joined', 'subscribed')
+  )
+);
+
+drop policy if exists agent_board_authenticated_select_board_memberships on agent_board.board_memberships;
+create policy agent_board_authenticated_select_board_memberships
+on agent_board.board_memberships
+as permissive
+for select
+to authenticated
+using (
+  agent_id = agent_board.current_agent_id()
+);
+
+drop policy if exists agent_board_authenticated_select_delivery_recipients on agent_board.delivery_recipients;
+create policy agent_board_authenticated_select_delivery_recipients
+on agent_board.delivery_recipients
+as permissive
+for select
+to authenticated
+using (
+  recipient_agent_id = agent_board.current_agent_id()
+  or (
+    board_id is not null
+    and exists (
+      select 1
+        from agent_board.board_memberships bm
+       where bm.board_id = board_id
+         and bm.agent_id = agent_board.current_agent_id()
+         and bm.membership_state in ('joined', 'subscribed')
+    )
+  )
+);
+
+drop policy if exists agent_board_authenticated_select_inbox_items on agent_board.inbox_items;
+create policy agent_board_authenticated_select_inbox_items
+on agent_board.inbox_items
+as permissive
+for select
+to authenticated
+using (
+  recipient_agent_id = agent_board.current_agent_id()
+  or (
+    board_id is not null
+    and visible_in_board_feed = true
+    and exists (
+      select 1
+        from agent_board.board_memberships bm
+       where bm.board_id = board_id
+         and bm.agent_id = agent_board.current_agent_id()
+         and bm.membership_state in ('joined', 'subscribed')
+    )
+  )
+);
+
+drop policy if exists agent_board_authenticated_select_callback_endpoints on agent_board.callback_endpoints;
+create policy agent_board_authenticated_select_callback_endpoints
+on agent_board.callback_endpoints
+as permissive
+for select
+to authenticated
+using (owner_agent_id = agent_board.current_agent_id());
+
+drop policy if exists agent_board_authenticated_select_callback_subscriptions on agent_board.callback_subscriptions;
+create policy agent_board_authenticated_select_callback_subscriptions
+on agent_board.callback_subscriptions
+as permissive
+for select
+to authenticated
+using (
+  agent_id = agent_board.current_agent_id()
+  or exists (
+    select 1
+      from agent_board.callback_endpoints ce
+     where ce.id = endpoint_id
+       and ce.owner_agent_id = agent_board.current_agent_id()
+  )
+);
+
+drop policy if exists agent_board_authenticated_select_callback_outbox_events on agent_board.callback_outbox_events;
+create policy agent_board_authenticated_select_callback_outbox_events
+on agent_board.callback_outbox_events
+as permissive
+for select
+to authenticated
+using (
+  recipient_agent_id = agent_board.current_agent_id()
+  or exists (
+    select 1
+      from agent_board.callback_subscriptions cs
+      join agent_board.callback_endpoints ce on ce.id = cs.endpoint_id
+     where cs.id = subscription_id
+       and (
+         cs.agent_id = agent_board.current_agent_id()
+         or ce.owner_agent_id = agent_board.current_agent_id()
+       )
+  )
+);
+
+drop policy if exists agent_board_authenticated_select_callback_delivery_attempts on agent_board.callback_delivery_attempts;
+create policy agent_board_authenticated_select_callback_delivery_attempts
+on agent_board.callback_delivery_attempts
+as permissive
+for select
+to authenticated
+using (
+  exists (
+    select 1
+      from agent_board.callback_outbox_events coe
+     where coe.id = outbox_event_id
+       and (
+         coe.recipient_agent_id = agent_board.current_agent_id()
+         or exists (
+           select 1
+             from agent_board.callback_subscriptions cs
+             join agent_board.callback_endpoints ce on ce.id = cs.endpoint_id
+            where cs.id = coe.subscription_id
+              and (
+                cs.agent_id = agent_board.current_agent_id()
+                or ce.owner_agent_id = agent_board.current_agent_id()
+              )
+         )
+       )
+  )
+);
+
+insert into agent_board.schema_version (version)
+values (3)
+on conflict ((true)) do update set version = excluded.version;

package/migrations/20260513000000_agent_board_backup_ops.sql

@@ -0,0 +1,34 @@
+create table if not exists agent_board.ops_backup_runs (
+  id uuid primary key default gen_random_uuid(),
+  backup_scope text not null default 'schema' check (backup_scope in ('schema')),
+  schema_name text not null default 'agent_board',
+  backup_status text not null check (backup_status in ('started', 'completed', 'failed')),
+  started_at timestamptz not null default now(),
+  completed_at timestamptz,
+  duration_seconds integer,
+  artifact_storage_uri text,
+  artifact_checksum_sha256 text,
+  artifact_size_bytes bigint,
+  triggered_by text not null default 'scheduler',
+  project_ref text,
+  restore_target_project_ref text,
+  restore_status text not null default 'not_run' check (restore_status in ('not_run', 'script_ready', 'completed', 'failed')),
+  restore_checked_at timestamptz,
+  metadata jsonb not null default '{}'::jsonb
+);
+
+comment on table agent_board.ops_backup_runs is 'Schema-scoped agent_board backup evidence for scheduled backups and restore drills.';
+
+create index if not exists idx_agent_board_ops_backup_runs_started_at
+  on agent_board.ops_backup_runs(started_at desc);
+
+grant select on agent_board.ops_backup_runs to service_role;
+
+alter table agent_board.ops_backup_runs enable row level security;
+
+drop policy if exists "agent_board_service_all_ops_backup_runs" on agent_board.ops_backup_runs;
+create policy "agent_board_service_all_ops_backup_runs"
+  on agent_board.ops_backup_runs
+  to service_role
+  using (true)
+  with check (true);

package/migrations/20260513000001_agent_board_retention.sql

@@ -0,0 +1,160 @@
+create table if not exists agent_board.ops_retention_runs (
+  id uuid primary key default gen_random_uuid(),
+  retention_status text not null check (retention_status in ('started', 'completed', 'failed')),
+  triggered_by text not null default 'scheduler',
+  started_at timestamptz not null default now(),
+  completed_at timestamptz,
+  summary jsonb not null default '{}'::jsonb
+);
+
+comment on table agent_board.ops_retention_runs is 'Soft-delete retention evidence for agent_board scheduled retention passes.';
+
+create index if not exists idx_agent_board_ops_retention_runs_started_at
+  on agent_board.ops_retention_runs(started_at desc);
+
+grant select on agent_board.ops_retention_runs to service_role;
+
+alter table agent_board.ops_retention_runs enable row level security;
+
+drop policy if exists "agent_board_service_all_ops_retention_runs" on agent_board.ops_retention_runs;
+create policy "agent_board_service_all_ops_retention_runs"
+  on agent_board.ops_retention_runs
+  to service_role
+  using (true)
+  with check (true);
+
+insert into public.app_settings(key, value)
+values
+  ('agent_board_retention_messages_days', to_jsonb(365)),
+  ('agent_board_retention_task_events_days', to_jsonb(365)),
+  ('agent_board_retention_presence_days', to_jsonb(30)),
+  ('agent_board_retention_callback_outbox_days', to_jsonb(90)),
+  ('agent_board_retention_callback_attempts_days', to_jsonb(180)),
+  ('agent_board_retention_inbox_items_days', to_jsonb(180)),
+  ('agent_board_retention_delivery_recipients_days', to_jsonb(180)),
+  ('agent_board_retention_board_memberships_days', to_jsonb(180))
+on conflict (key) do nothing;
+
+create or replace function agent_board.mark_retention_metadata(
+  p_table_name text,
+  p_cutoff timestamptz,
+  p_run_id uuid,
+  p_reason text default 'scheduled_soft_delete'
+)
+returns bigint
+language plpgsql
+security definer
+set search_path = agent_board, public
+as $$
+declare
+  v_sql text;
+  v_count bigint;
+begin
+  if p_table_name not in (
+    'messages',
+    'task_events',
+    'presence',
+    'callback_outbox_events',
+    'callback_delivery_attempts',
+    'inbox_items',
+    'delivery_recipients',
+    'board_memberships'
+  ) then
+    raise exception 'unsupported retention table %', p_table_name using errcode = '22023';
+  end if;
+
+  if p_table_name = 'presence' then
+    v_sql := format(
+      $retention$
+      with target_rows as (
+        update agent_board.%1$I
+           set metadata = coalesce(metadata, '{}'::jsonb) || jsonb_build_object(
+             'ops_retained_at', now(),
+             'ops_retention_run_id', %2$L,
+             'ops_retention_reason', %3$L
+           ),
+               updated_at = now()
+         where expires_at < %4$L::timestamptz
+           and coalesce(metadata->>'ops_retained_at', '') = ''
+         returning 1
+      )
+      select count(*)::bigint from target_rows
+      $retention$,
+      p_table_name,
+      p_run_id::text,
+      p_reason,
+      p_cutoff::text
+    );
+  elsif p_table_name = 'task_events' then
+    v_sql := format(
+      $retention$
+      with target_rows as (
+        update agent_board.%1$I
+           set payload = coalesce(payload, '{}'::jsonb) || jsonb_build_object(
+             'ops_retained_at', now(),
+             'ops_retention_run_id', %2$L,
+             'ops_retention_reason', %3$L
+           )
+         where created_at < %4$L::timestamptz
+           and coalesce(payload->>'ops_retained_at', '') = ''
+         returning 1
+      )
+      select count(*)::bigint from target_rows
+      $retention$,
+      p_table_name,
+      p_run_id::text,
+      p_reason,
+      p_cutoff::text
+    );
+  elsif p_table_name = 'board_memberships' then
+    v_sql := format(
+      $retention$
+      with target_rows as (
+        update agent_board.%1$I
+           set metadata = coalesce(metadata, '{}'::jsonb) || jsonb_build_object(
+             'ops_retained_at', now(),
+             'ops_retention_run_id', %2$L,
+             'ops_retention_reason', %3$L
+           ),
+               updated_at = now()
+         where membership_state in ('left', 'removed')
+           and left_at < %4$L::timestamptz
+           and coalesce(metadata->>'ops_retained_at', '') = ''
+         returning 1
+      )
+      select count(*)::bigint from target_rows
+      $retention$,
+      p_table_name,
+      p_run_id::text,
+      p_reason,
+      p_cutoff::text
+    );
+  else
+    v_sql := format(
+      $retention$
+      with target_rows as (
+        update agent_board.%1$I
+           set metadata = coalesce(metadata, '{}'::jsonb) || jsonb_build_object(
+             'ops_retained_at', now(),
+             'ops_retention_run_id', %2$L,
+             'ops_retention_reason', %3$L
+           )
+         where created_at < %4$L::timestamptz
+           and coalesce(metadata->>'ops_retained_at', '') = ''
+         returning 1
+      )
+      select count(*)::bigint from target_rows
+      $retention$,
+      p_table_name,
+      p_run_id::text,
+      p_reason,
+      p_cutoff::text
+    );
+  end if;
+
+  execute v_sql into v_count;
+  return coalesce(v_count, 0);
+end;
+$$;
+
+grant execute on function agent_board.mark_retention_metadata(text, timestamptz, uuid, text) to service_role;