@consiliency/agent-board-schema 1.2.0

package/tests/agent_board_boardopt.test.sql

@@ -0,0 +1,170 @@
+create extension if not exists pgtap with schema extensions;
+set search_path = extensions, public, agent_board;
+
+begin;
+
+select plan(9);
+
+create temp table _boardopt_fixture (
+  user_reader uuid,
+  agent_owner uuid,
+  agent_reader uuid,
+  board_open uuid,
+  board_invite uuid,
+  board_private uuid,
+  board_hidden uuid,
+  thread_id uuid
+) on commit drop;
+grant all on table _boardopt_fixture to authenticated, service_role;
+
+do $$
+declare
+  v_suffix text := replace(substr(gen_random_uuid()::text, 1, 8), '-', '');
+  v_user_owner uuid;
+  v_user_reader uuid;
+  v_agent_owner uuid := gen_random_uuid();
+  v_agent_reader uuid := gen_random_uuid();
+  v_thread uuid := gen_random_uuid();
+  v_open uuid;
+  v_invite uuid;
+  v_private uuid;
+  v_hidden uuid;
+begin
+  v_user_owner := public.ensure_github_user(
+    'boardopt-owner-' || v_suffix,
+    'boardopt-owner-' || v_suffix || '@example.test',
+    'boardopt-owner-' || v_suffix,
+    'BOARDOPT Owner ' || v_suffix
+  );
+  v_user_reader := public.ensure_github_user(
+    'boardopt-reader-' || v_suffix,
+    'boardopt-reader-' || v_suffix || '@example.test',
+    'boardopt-reader-' || v_suffix,
+    'BOARDOPT Reader ' || v_suffix
+  );
+
+  insert into agent_board.agents(id, agent_type, kind, handle, display_name, status, auth_user_id, owner_user_id)
+  values
+    (v_agent_owner, 'agent', 'agent', 'boardopt-owner-' || v_suffix, 'BOARDOPT Owner', 'active', v_user_owner, v_user_owner),
+    (v_agent_reader, 'agent', 'agent', 'boardopt-reader-' || v_suffix, 'BOARDOPT Reader', 'active', v_user_reader, v_user_reader);
+
+  insert into agent_board.threads(id, thread_type, created_by_agent_id, subject)
+  values (v_thread, 'coordination', v_agent_owner, 'BOARDOPT thread');
+
+  select board_id into v_open
+    from agent_board.create_board(v_agent_owner, 'boardopt-open-' || v_suffix, 'BOARDOPT Open', 'open directory board', '{}'::jsonb, 'open');
+  select board_id into v_invite
+    from agent_board.create_board(v_agent_owner, 'boardopt-invite-' || v_suffix, 'BOARDOPT Invite', 'invite board', '{}'::jsonb, 'invite_only');
+  select board_id into v_private
+    from agent_board.create_board(v_agent_owner, 'boardopt-private-' || v_suffix, 'BOARDOPT Private', 'private board', '{}'::jsonb, 'private');
+  select board_id into v_hidden
+    from agent_board.create_board(v_agent_owner, 'boardopt-hidden-' || v_suffix, 'BOARDOPT Hidden', 'hidden board', '{}'::jsonb, 'directory_hidden');
+
+  perform agent_board.join_board(v_open, v_agent_owner, 'joined', v_agent_owner, '{}'::jsonb);
+  perform agent_board.invite_board_member(v_invite, v_agent_reader, v_agent_owner, '{}'::jsonb);
+
+  perform agent_board.post_board_message(
+    v_thread,
+    v_agent_owner,
+    v_open,
+    'BOARDOPT pre-join post',
+    'visible only after active membership',
+    'comment',
+    'medium',
+    'boardopt-prejoin-' || v_suffix,
+    '{}'::jsonb
+  );
+
+  insert into _boardopt_fixture(user_reader, agent_owner, agent_reader, board_open, board_invite, board_private, board_hidden, thread_id)
+  values (v_user_reader, v_agent_owner, v_agent_reader, v_open, v_invite, v_private, v_hidden, v_thread);
+end
+$$;
+
+select has_column('agent_board', 'boards', 'visibility', 'boards expose BOARDOPT visibility');
+select col_has_check('agent_board', 'boards', 'visibility', 'boards visibility is check-constrained');
+select col_has_check('agent_board', 'board_memberships', 'membership_state', 'board membership state includes BOARDOPT workflow values');
+
+set local role authenticated;
+select set_config('request.jwt.claim.role', 'authenticated', true);
+
+do $$
+declare
+  v_fixture record;
+  v_directory_count bigint;
+  v_feed_before bigint;
+  v_open_state text;
+  v_invite_state text;
+  v_feed_after bigint;
+begin
+  select * into v_fixture from _boardopt_fixture;
+  perform set_config('request.jwt.claim.sub', v_fixture.user_reader::text, true);
+
+  select count(*) into v_directory_count
+    from agent_board.v_board_directory
+   where board_id in (
+     v_fixture.board_open,
+     v_fixture.board_invite,
+     v_fixture.board_private,
+     v_fixture.board_hidden
+   );
+  if v_directory_count <> 2 then
+    raise exception 'reader should discover open plus invited board only, saw %', v_directory_count;
+  end if;
+
+  select count(*) into v_feed_before
+    from agent_board.v_board_feed
+   where board_id = v_fixture.board_open;
+  if v_feed_before <> 0 then
+    raise exception 'open-board discovery exposed feed before active membership';
+  end if;
+
+  perform agent_board.request_join_board(v_fixture.board_open, v_fixture.agent_reader, '{}'::jsonb);
+  select membership_state into v_open_state
+    from agent_board.v_board_memberships
+   where board_id = v_fixture.board_open
+     and agent_id = v_fixture.agent_reader
+   limit 1;
+  if v_open_state <> 'requested' then
+    raise exception 'request-to-join should create requested state, got %', v_open_state;
+  end if;
+
+  perform agent_board.join_board(v_fixture.board_open, v_fixture.agent_reader, 'subscribed', v_fixture.agent_reader, '{}'::jsonb);
+  select membership_state into v_open_state
+    from agent_board.v_board_memberships
+   where board_id = v_fixture.board_open
+     and agent_id = v_fixture.agent_reader
+   limit 1;
+  if v_open_state <> 'subscribed' then
+    raise exception 'open-board join should activate subscribed state, got %', v_open_state;
+  end if;
+
+  perform agent_board.join_board(v_fixture.board_invite, v_fixture.agent_reader, 'joined', v_fixture.agent_reader, '{}'::jsonb);
+  select membership_state into v_invite_state
+    from agent_board.v_board_memberships
+   where board_id = v_fixture.board_invite
+     and agent_id = v_fixture.agent_reader
+   limit 1;
+  if v_invite_state <> 'joined' then
+    raise exception 'invite-only join should activate invited reader, got %', v_invite_state;
+  end if;
+
+  select count(*) into v_feed_after
+    from agent_board.v_board_feed
+   where board_id = v_fixture.board_open
+     and subject = 'BOARDOPT pre-join post';
+  if v_feed_after <> 1 then
+    raise exception 'active membership should expose board feed history, saw %', v_feed_after;
+  end if;
+end
+$$;
+
+select pass('Directory discovery is limited to open and invited boards for user-scoped agents');
+select pass('Discoverability does not expose board feed before active membership');
+select pass('Request-to-join creates a pending requested row only');
+select pass('Open-board self-join activates membership');
+select pass('Invite-only join activates only after an invited row exists');
+select pass('Active membership exposes board feed history');
+
+select finish();
+
+rollback;

package/tests/agent_board_bundle_endpoint_compat.test.sql

@@ -0,0 +1,49 @@
+begin;
+select plan(12);
+
+-- objects exist
+select has_table('agent_board', 'bundle_installation', 'bundle_installation table exists');
+select has_function('agent_board', 'get_bundle_compatibility', 'get_bundle_compatibility exists');
+select has_function('agent_board', 'record_bundle_installation',
+  ARRAY['text','text','integer','text','text'], 'record_bundle_installation exists');
+
+-- grants: compat health is authenticated + service_role; not anon
+select ok(has_function_privilege('authenticated', 'agent_board.get_bundle_compatibility()', 'EXECUTE'),
+  'authenticated can execute get_bundle_compatibility');
+select ok(not has_function_privilege('anon', 'agent_board.get_bundle_compatibility()', 'EXECUTE'),
+  'anon cannot execute get_bundle_compatibility');
+select ok(not has_function_privilege('authenticated',
+  'agent_board.record_bundle_installation(text,text,integer,text,text)', 'EXECUTE'),
+  'authenticated cannot record installs (service_role only)');
+select ok(has_function_privilege('service_role',
+  'agent_board.record_bundle_installation(text,text,integer,text,text)', 'EXECUTE'),
+  'service_role can record installs');
+
+-- before any install: not ready, schema version still reported
+select is((agent_board.get_bundle_compatibility() ->> 'ready'), 'false',
+  'not ready before materializer records an install');
+select is((agent_board.get_bundle_compatibility() ->> 'schema_version'), '7',
+  'compatibility reports schema version 7');
+
+-- signed-write enforcement posture is active (canary revoked direct writes)
+select is((agent_board.get_bundle_compatibility() ->> 'signed_write_enforced'), 'true',
+  'signed-write enforcement is reported active');
+
+-- probe covers ALL four gated RPCs: re-granting EXECUTE on one of the OTHER
+-- three (not send_direct_message) must flip enforcement to false.
+grant execute on function agent_board.send_multicast_message(uuid, uuid, uuid[], text, text, text, text, text, jsonb) to authenticated;
+select is((agent_board.get_bundle_compatibility() ->> 'signed_write_enforced'), 'false',
+  'enforcement flips to false when any gated write RPC is re-granted to authenticated');
+
+-- after the materializer records an install: ready + bundle identity present,
+-- and no credential/row content leaks (only whitelisted keys)
+select agent_board.record_bundle_installation('1.1.0', 'deadbeef', 7, 'abc123', 'receipt-1');
+select is(
+  (agent_board.get_bundle_compatibility() ->> 'ready') || ':' ||
+  (agent_board.get_bundle_compatibility() ->> 'installed_bundle_version') || ':' ||
+  (agent_board.get_bundle_compatibility() ->> 'installed_bundle_digest'),
+  'true:1.1.0:deadbeef',
+  'ready + bundle identity reported after install record');
+
+select * from finish();
+rollback;

package/tests/agent_board_callback_runtime.test.sql

@@ -0,0 +1,425 @@
+begin;
+
+select plan(24);
+
+select has_function(
+  'agent_board',
+  'claim_callback_outbox_events',
+  array['integer'],
+  'claim_callback_outbox_events helper exists'
+);
+select has_function(
+  'agent_board',
+  'record_callback_delivery_success',
+  array['uuid', 'uuid', 'integer', 'jsonb'],
+  'record_callback_delivery_success helper exists'
+);
+select has_function(
+  'agent_board',
+  'record_callback_delivery_retry',
+  array['uuid', 'uuid', 'integer', 'text', 'timestamp with time zone', 'jsonb'],
+  'record_callback_delivery_retry helper exists'
+);
+select has_function(
+  'agent_board',
+  'record_callback_delivery_terminal_failure',
+  array['uuid', 'uuid', 'integer', 'text', 'jsonb'],
+  'record_callback_delivery_terminal_failure helper exists'
+);
+select has_function(
+  'agent_board',
+  'disable_callback_delivery_endpoint',
+  array['uuid', 'uuid', 'text', 'text', 'jsonb'],
+  'disable_callback_delivery_endpoint helper exists'
+);
+
+select ok(
+  (
+    select count(distinct routine_name) = 5
+      from information_schema.routine_privileges
+     where specific_schema = 'agent_board'
+       and routine_name in (
+         'claim_callback_outbox_events',
+         'record_callback_delivery_success',
+         'record_callback_delivery_retry',
+         'record_callback_delivery_terminal_failure',
+         'disable_callback_delivery_endpoint'
+       )
+       and grantee = 'service_role'
+       and privilege_type = 'EXECUTE'
+  ),
+  'service_role can execute the callback runtime helper surface'
+);
+
+create temporary table callback_runtime_claim_results (
+  outbox_event_id uuid not null,
+  attempt_number integer not null
+) on commit drop;
+
+-- claim_callback_outbox_events polls the global ready queue. Neutralize
+-- preexisting ready rows so this fixture controls the first claim on reused
+-- local databases; the surrounding transaction rolls the isolation update back.
+update agent_board.callback_outbox_events
+   set outbox_status = 'delivered',
+       delivered_at = coalesce(delivered_at, now()),
+       updated_at = now()
+ where outbox_status in ('pending', 'retryable')
+   and available_at <= now();
+
+do $$
+declare
+  v_sender uuid := gen_random_uuid();
+  v_recipient uuid := gen_random_uuid();
+  v_thread uuid := gen_random_uuid();
+  v_message uuid := gen_random_uuid();
+  v_delivery_recipient uuid;
+  v_inbox_item uuid;
+  v_endpoint uuid;
+  v_subscription uuid;
+  v_terminal_endpoint uuid;
+  v_terminal_subscription uuid;
+  v_disable_endpoint uuid;
+  v_disable_subscription uuid;
+  v_pending_outbox uuid;
+  v_success_outbox uuid;
+  v_retry_outbox uuid;
+  v_terminal_outbox uuid;
+  v_disable_outbox uuid;
+  v_claim record;
+  v_now timestamptz := now();
+begin
+  insert into agent_board.agents(id, agent_type, handle, display_name)
+  values
+    (v_sender, 'agent', 'test_callback_runtime_sender', 'Callback Runtime Sender'),
+    (v_recipient, 'agent', 'test_callback_runtime_recipient', 'Callback Runtime Recipient');
+
+  insert into agent_board.threads(id, thread_type, created_by_agent_id, subject)
+  values (v_thread, 'coordination', v_sender, 'Callback runtime test thread');
+
+  insert into agent_board.messages(id, thread_id, author_agent_id, message_sequence, message_type, body)
+  values (v_message, v_thread, v_sender, 1, 'comment', 'callback runtime body');
+
+  insert into agent_board.delivery_recipients(delivery_mode, recipient_agent_id, source_kind, source_message_id)
+  values ('direct', v_recipient, 'message', v_message)
+  returning id into v_delivery_recipient;
+
+  insert into agent_board.inbox_items(
+    id,
+    delivery_recipient_id,
+    recipient_agent_id,
+    delivery_mode,
+    source_kind,
+    source_message_id,
+    subject,
+    preview,
+    priority,
+    action_state,
+    visible_in_inbox,
+    visible_in_board_feed,
+    fetch_descriptor
+  )
+  values (
+    gen_random_uuid(),
+    v_delivery_recipient,
+    v_recipient,
+    'direct',
+    'message',
+    v_message,
+    'Callback runtime subject',
+    'Callback runtime preview',
+    'high',
+    'new',
+    true,
+    false,
+    jsonb_build_object('surface', 'thread', 'targetId', v_thread::text, 'view', 'agent_board.v_thread_feed', 'filters', jsonb_build_object(), 'reason', 'callback runtime')
+  )
+  returning id into v_inbox_item;
+
+  insert into agent_board.callback_endpoints(
+    id,
+    owner_agent_id,
+    endpoint_url,
+    endpoint_status,
+    verification_requested_at,
+    verified_at
+  )
+  values (
+    gen_random_uuid(),
+    v_recipient,
+    'https://example.test/callback-runtime',
+    'verified',
+    v_now,
+    v_now
+  )
+  returning id into v_endpoint;
+
+  insert into agent_board.callback_subscriptions(
+    id,
+    endpoint_id,
+    agent_id,
+    subscription_scope,
+    event_category,
+    subscription_status
+  )
+  values (
+    gen_random_uuid(),
+    v_endpoint,
+    v_recipient,
+    'own_inbox',
+    'inbox.item.delivered',
+    'active'
+  )
+  returning id into v_subscription;
+
+  insert into agent_board.callback_endpoints(
+    id,
+    owner_agent_id,
+    endpoint_url,
+    endpoint_status,
+    verification_requested_at,
+    verified_at
+  )
+  values (
+    gen_random_uuid(),
+    v_recipient,
+    'https://example.test/callback-runtime-disabled',
+    'verified',
+    v_now,
+    v_now
+  )
+  returning id into v_disable_endpoint;
+
+  insert into agent_board.callback_endpoints(
+    id,
+    owner_agent_id,
+    endpoint_url,
+    endpoint_status,
+    verification_requested_at,
+    verified_at
+  )
+  values (
+    gen_random_uuid(),
+    v_recipient,
+    'https://example.test/callback-runtime-terminal',
+    'verified',
+    v_now,
+    v_now
+  )
+  returning id into v_terminal_endpoint;
+
+  insert into agent_board.callback_subscriptions(
+    id,
+    endpoint_id,
+    agent_id,
+    subscription_scope,
+    event_category,
+    subscription_status
+  )
+  values (
+    gen_random_uuid(),
+    v_disable_endpoint,
+    v_recipient,
+    'own_inbox',
+    'inbox.item.delivered',
+    'active'
+  )
+  returning id into v_disable_subscription;
+
+  insert into agent_board.callback_subscriptions(
+    id,
+    endpoint_id,
+    agent_id,
+    subscription_scope,
+    event_category,
+    subscription_status
+  )
+  values (
+    gen_random_uuid(),
+    v_terminal_endpoint,
+    v_recipient,
+    'own_inbox',
+    'inbox.item.delivered',
+    'active'
+  )
+  returning id into v_terminal_subscription;
+
+  insert into agent_board.callback_outbox_events(
+    id,
+    endpoint_id,
+    subscription_id,
+    recipient_agent_id,
+    inbox_item_id,
+    event_category,
+    delivery_mode,
+    source_kind,
+    source_message_id,
+    idempotency_key,
+    subject,
+    preview,
+    priority,
+    fetch_descriptor,
+    outbox_status,
+    available_at
+  )
+  values
+    (gen_random_uuid(), v_endpoint, v_subscription, v_recipient, v_inbox_item, 'inbox.item.delivered', 'direct', 'message', v_message, 'callback-runtime-pending', 'Callback runtime subject', 'Callback runtime preview', 'high', jsonb_build_object('surface', 'thread', 'targetId', v_thread::text, 'view', 'agent_board.v_thread_feed', 'filters', jsonb_build_object(), 'reason', 'callback runtime'), 'pending', v_now - interval '5 minutes'),
+    (gen_random_uuid(), v_endpoint, v_subscription, v_recipient, v_inbox_item, 'inbox.item.delivered', 'direct', 'message', v_message, 'callback-runtime-success', 'Callback runtime subject', 'Callback runtime preview', 'high', jsonb_build_object('surface', 'thread', 'targetId', v_thread::text, 'view', 'agent_board.v_thread_feed', 'filters', jsonb_build_object(), 'reason', 'callback runtime'), 'pending', v_now - interval '1 minute'),
+    (gen_random_uuid(), v_endpoint, v_subscription, v_recipient, v_inbox_item, 'inbox.item.delivered', 'direct', 'message', v_message, 'callback-runtime-retry', 'Callback runtime subject', 'Callback runtime preview', 'high', jsonb_build_object('surface', 'thread', 'targetId', v_thread::text, 'view', 'agent_board.v_thread_feed', 'filters', jsonb_build_object(), 'reason', 'callback runtime'), 'pending', v_now - interval '1 minute'),
+    (gen_random_uuid(), v_terminal_endpoint, v_terminal_subscription, v_recipient, v_inbox_item, 'inbox.item.delivered', 'direct', 'message', v_message, 'callback-runtime-terminal', 'Callback runtime subject', 'Callback runtime preview', 'high', jsonb_build_object('surface', 'thread', 'targetId', v_thread::text, 'view', 'agent_board.v_thread_feed', 'filters', jsonb_build_object(), 'reason', 'callback runtime'), 'pending', v_now - interval '1 minute'),
+    (gen_random_uuid(), v_disable_endpoint, v_disable_subscription, v_recipient, v_inbox_item, 'inbox.item.delivered', 'direct', 'message', v_message, 'callback-runtime-disable', 'Callback runtime subject', 'Callback runtime preview', 'high', jsonb_build_object('surface', 'thread', 'targetId', v_thread::text, 'view', 'agent_board.v_thread_feed', 'filters', jsonb_build_object(), 'reason', 'callback runtime'), 'pending', v_now - interval '1 minute');
+
+  select id into v_pending_outbox from agent_board.callback_outbox_events where idempotency_key = 'callback-runtime-pending';
+  select id into v_success_outbox from agent_board.callback_outbox_events where idempotency_key = 'callback-runtime-success';
+  select id into v_retry_outbox from agent_board.callback_outbox_events where idempotency_key = 'callback-runtime-retry';
+  select id into v_terminal_outbox from agent_board.callback_outbox_events where idempotency_key = 'callback-runtime-terminal';
+  select id into v_disable_outbox from agent_board.callback_outbox_events where idempotency_key = 'callback-runtime-disable';
+
+  select * into v_claim
+    from agent_board.claim_callback_outbox_events(1);
+
+  insert into callback_runtime_claim_results(outbox_event_id, attempt_number)
+  values (v_claim.outbox_event_id, v_claim.attempt_number);
+
+  perform agent_board.record_callback_delivery_success(v_success_outbox, v_endpoint, 202, jsonb_build_object('result', 'delivered'));
+  perform agent_board.record_callback_delivery_retry(
+    v_retry_outbox,
+    v_endpoint,
+    503,
+    'temporary upstream failure',
+    v_now + interval '5 minutes',
+    jsonb_build_object('retry', true)
+  );
+  perform agent_board.record_callback_delivery_terminal_failure(
+    v_terminal_outbox,
+    v_terminal_endpoint,
+    404,
+    'receiver rejected payload',
+    jsonb_build_object('terminal', true)
+  );
+  perform agent_board.disable_callback_delivery_endpoint(
+    v_disable_endpoint,
+    v_disable_outbox,
+    'disablement threshold reached',
+    'callback endpoint disabled after repeated terminal failures',
+    jsonb_build_object('disabledBy', 'runtime')
+  );
+end;
+$$;
+
+select is(
+  (select outbox_event_id::text from callback_runtime_claim_results limit 1),
+  (select id::text from agent_board.callback_outbox_events where idempotency_key = 'callback-runtime-pending'),
+  'claim_callback_outbox_events claims the oldest ready outbox row'
+);
+
+select is(
+  (select attempt_number from callback_runtime_claim_results limit 1),
+  1,
+  'claim_callback_outbox_events starts attempt numbering at one'
+);
+
+select is(
+  (select idempotency_key from agent_board.callback_outbox_events where id = (select outbox_event_id from callback_runtime_claim_results limit 1)),
+  'callback-runtime-pending',
+  'claim_callback_outbox_events preserves the stable idempotency key'
+);
+
+select is(
+  (select outbox_status from agent_board.callback_outbox_events where idempotency_key = 'callback-runtime-pending'),
+  'delivering',
+  'claim_callback_outbox_events moves claimed rows to delivering'
+);
+
+select is(
+  (select outbox_status from agent_board.callback_outbox_events where idempotency_key = 'callback-runtime-success'),
+  'delivered',
+  'record_callback_delivery_success marks the outbox delivered'
+);
+
+select is(
+  (select attempt_outcome from agent_board.callback_delivery_attempts cda join agent_board.callback_outbox_events coe on coe.id = cda.outbox_event_id where coe.idempotency_key = 'callback-runtime-success' order by cda.attempt_number desc limit 1),
+  'delivered',
+  'record_callback_delivery_success appends a delivered attempt'
+);
+
+select is(
+  (select attempt_number from agent_board.callback_delivery_attempts cda join agent_board.callback_outbox_events coe on coe.id = cda.outbox_event_id where coe.idempotency_key = 'callback-runtime-success' order by cda.attempt_number desc limit 1),
+  1,
+  'record_callback_delivery_success records the first delivery attempt as attempt one'
+);
+
+select is(
+  (select outbox_status from agent_board.callback_outbox_events where idempotency_key = 'callback-runtime-retry'),
+  'retryable',
+  'record_callback_delivery_retry marks retryable outbox state'
+);
+
+select ok(
+  (
+    select next_retry_at is not null
+      from agent_board.callback_delivery_attempts cda
+      join agent_board.callback_outbox_events coe on coe.id = cda.outbox_event_id
+     where coe.idempotency_key = 'callback-runtime-retry'
+     order by cda.attempt_number desc
+     limit 1
+  ),
+  'record_callback_delivery_retry stores retry scheduling metadata'
+);
+
+select is(
+  (select http_status from agent_board.callback_delivery_attempts cda join agent_board.callback_outbox_events coe on coe.id = cda.outbox_event_id where coe.idempotency_key = 'callback-runtime-retry' order by cda.attempt_number desc limit 1),
+  503,
+  'record_callback_delivery_retry preserves retryable HTTP status metadata'
+);
+
+select is(
+  (select outbox_status from agent_board.callback_outbox_events where idempotency_key = 'callback-runtime-terminal'),
+  'failed',
+  'record_callback_delivery_terminal_failure marks failed outbox state'
+);
+
+select is(
+  (select latest_attempt_outcome from agent_board.v_callback_delivery_health where subscription_id = (select id from agent_board.callback_subscriptions where endpoint_id = (select id from agent_board.callback_endpoints where endpoint_url = 'https://example.test/callback-runtime-terminal'))),
+  'terminal_failure',
+  'v_callback_delivery_health reflects the latest terminal attempt'
+);
+
+select is(
+  (select latest_http_status from agent_board.v_callback_delivery_health where subscription_id = (select id from agent_board.callback_subscriptions where endpoint_id = (select id from agent_board.callback_endpoints where endpoint_url = 'https://example.test/callback-runtime-terminal'))),
+  404,
+  'v_callback_delivery_health preserves terminal HTTP status metadata'
+);
+
+select is(
+  (select endpoint_status from agent_board.callback_endpoints where endpoint_url = 'https://example.test/callback-runtime-disabled'),
+  'disabled',
+  'disable_callback_delivery_endpoint disables the endpoint'
+);
+
+select is(
+  (select outbox_status from agent_board.callback_outbox_events where idempotency_key = 'callback-runtime-disable'),
+  'disabled',
+  'disable_callback_delivery_endpoint marks the current outbox disabled'
+);
+
+select is(
+  (select attempt_outcome from agent_board.callback_delivery_attempts cda join agent_board.callback_outbox_events coe on coe.id = cda.outbox_event_id where coe.idempotency_key = 'callback-runtime-disable' order by cda.attempt_number desc limit 1),
+  'endpoint_disabled',
+  'disable_callback_delivery_endpoint appends an endpoint_disabled attempt'
+);
+
+select is(
+  (select count(*)::integer from agent_board.inbox_items where id = (select inbox_item_id from agent_board.callback_outbox_events where idempotency_key = 'callback-runtime-success')),
+  1,
+  'callback runtime helper calls do not create duplicate canonical inbox rows'
+);
+
+select is(
+  (select count(*)::integer from agent_board.delivery_recipients where source_message_id = (select id from agent_board.messages where body = 'callback runtime body')),
+  1,
+  'callback runtime helper calls do not create duplicate canonical delivery recipient rows'
+);
+
+select * from finish();
+
+rollback;