@consiliency/agent-board-schema 1.2.0

package/tests/agent_board_inbox_rpcs.test.sql

@@ -0,0 +1,452 @@
+begin;
+
+select plan(19);
+
+select has_function(
+  'agent_board',
+  'send_direct_message',
+  array['uuid', 'uuid', 'uuid', 'text', 'text', 'text', 'text', 'text', 'jsonb'],
+  'send_direct_message rpc exists'
+);
+select has_function(
+  'agent_board',
+  'send_multicast_message',
+  array['uuid', 'uuid', 'uuid[]', 'text', 'text', 'text', 'text', 'text', 'jsonb'],
+  'send_multicast_message rpc exists'
+);
+select has_function(
+  'agent_board',
+  'post_board_message',
+  array['uuid', 'uuid', 'uuid', 'text', 'text', 'text', 'text', 'text', 'jsonb'],
+  'post_board_message rpc exists'
+);
+select has_function(
+  'agent_board',
+  'create_tasking_delivery',
+  array['uuid', 'uuid', 'text', 'text', 'uuid[]', 'uuid', 'text', 'text', 'text', 'jsonb'],
+  'create_tasking_delivery rpc exists'
+);
+select has_function(
+  'agent_board',
+  'create_board',
+  array['uuid', 'text', 'text', 'text', 'jsonb', 'text'],
+  'create_board rpc exists'
+);
+select has_function(
+  'agent_board',
+  'join_board',
+  array['uuid', 'uuid', 'text', 'uuid', 'jsonb'],
+  'join_board rpc exists'
+);
+select has_function(
+  'agent_board',
+  'leave_board',
+  array['uuid', 'uuid', 'jsonb'],
+  'leave_board rpc exists'
+);
+select has_function(
+  'agent_board',
+  'update_board_membership',
+  array['uuid', 'uuid', 'text', 'jsonb'],
+  'update_board_membership rpc exists'
+);
+select has_function(
+  'agent_board',
+  'update_inbox_item_state',
+  array['uuid', 'uuid', 'text', 'jsonb'],
+  'update_inbox_item_state rpc exists'
+);
+select has_function(
+  'agent_board',
+  'register_callback_endpoint',
+  array['uuid', 'text', 'jsonb'],
+  'register_callback_endpoint rpc exists'
+);
+select has_function(
+  'agent_board',
+  'verify_callback_endpoint',
+  array['uuid', 'uuid', 'jsonb'],
+  'verify_callback_endpoint rpc exists'
+);
+select has_function(
+  'agent_board',
+  'disable_callback_endpoint',
+  array['uuid', 'uuid', 'text', 'jsonb'],
+  'disable_callback_endpoint rpc exists'
+);
+select has_function(
+  'agent_board',
+  'rotate_callback_signing_key',
+  array['uuid', 'uuid', 'jsonb'],
+  'rotate_callback_signing_key rpc exists'
+);
+select has_function(
+  'agent_board',
+  'delete_callback_endpoint',
+  array['uuid', 'uuid'],
+  'delete_callback_endpoint rpc exists'
+);
+select has_function(
+  'agent_board',
+  'subscribe_callback_endpoint',
+  array['uuid', 'uuid', 'text', 'text', 'uuid', 'jsonb'],
+  'subscribe_callback_endpoint rpc exists'
+);
+select has_function(
+  'agent_board',
+  'unsubscribe_callback_endpoint',
+  array['uuid', 'uuid', 'text', 'text', 'uuid', 'jsonb'],
+  'unsubscribe_callback_endpoint rpc exists'
+);
+
+select ok(
+  (
+    select count(distinct routine_name) = 16
+      from information_schema.routine_privileges
+     where specific_schema = 'agent_board'
+       and routine_name in (
+         'send_direct_message',
+         'send_multicast_message',
+         'post_board_message',
+         'create_tasking_delivery',
+         'create_board',
+         'join_board',
+         'leave_board',
+         'update_board_membership',
+         'update_inbox_item_state',
+         'register_callback_endpoint',
+         'verify_callback_endpoint',
+         'disable_callback_endpoint',
+         'rotate_callback_signing_key',
+         'delete_callback_endpoint',
+         'subscribe_callback_endpoint',
+         'unsubscribe_callback_endpoint'
+       )
+       and grantee = 'service_role'
+       and privilege_type = 'EXECUTE'
+  ),
+  'service_role can execute the public inbox rpc surface'
+);
+
+select ok(
+  (
+    select count(distinct routine_name) = 12
+      from information_schema.routine_privileges
+     where specific_schema = 'agent_board'
+       and routine_name in (
+         'send_direct_message',
+         'send_multicast_message',
+         'post_board_message',
+         'create_tasking_delivery',
+         'create_board',
+         'join_board',
+         'leave_board',
+         'update_board_membership',
+         'update_inbox_item_state',
+         'register_callback_endpoint',
+         'verify_callback_endpoint',
+         'disable_callback_endpoint',
+         'rotate_callback_signing_key',
+         'delete_callback_endpoint',
+         'subscribe_callback_endpoint',
+         'unsubscribe_callback_endpoint'
+       )
+       and grantee = 'authenticated'
+       and privilege_type = 'EXECUTE'
+  )
+  and not has_function_privilege('authenticated', 'agent_board.send_direct_message(uuid,uuid,uuid,text,text,text,text,text,jsonb)', 'EXECUTE')
+  and not has_function_privilege('authenticated', 'agent_board.send_multicast_message(uuid,uuid,uuid[],text,text,text,text,text,jsonb)', 'EXECUTE')
+  and not has_function_privilege('authenticated', 'agent_board.post_board_message(uuid,uuid,uuid,text,text,text,text,text,jsonb)', 'EXECUTE')
+  and not has_function_privilege('authenticated', 'agent_board.create_tasking_delivery(uuid,uuid,text,text,uuid[],uuid,text,text,text,jsonb)', 'EXECUTE'),
+  'authenticated keeps non-delivery inbox RPCs while signed delivery RPC overloads stay gateway-only'
+);
+
+select ok(
+  (
+    select count(*) = 0
+      from information_schema.routine_privileges
+     where specific_schema = 'agent_board'
+       and routine_name in (
+         'send_direct_message',
+         'send_multicast_message',
+         'post_board_message',
+         'create_tasking_delivery',
+         'create_board',
+         'join_board',
+         'leave_board',
+         'update_board_membership',
+         'update_inbox_item_state',
+         'register_callback_endpoint',
+         'verify_callback_endpoint',
+         'disable_callback_endpoint',
+         'rotate_callback_signing_key',
+         'delete_callback_endpoint',
+         'subscribe_callback_endpoint',
+         'unsubscribe_callback_endpoint'
+       )
+       and grantee in ('PUBLIC', 'anon')
+       and privilege_type = 'EXECUTE'
+  ),
+  'public and anon have no execute grant on the inbox rpc surface'
+);
+
+do $$
+declare
+  v_sender uuid := gen_random_uuid();
+  v_direct_recipient uuid := gen_random_uuid();
+  v_multicast_recipient uuid := gen_random_uuid();
+  v_board_member uuid := gen_random_uuid();
+  v_left_member uuid := gen_random_uuid();
+  v_outsider uuid := gen_random_uuid();
+  v_thread uuid := gen_random_uuid();
+  v_board uuid;
+  v_direct_endpoint uuid;
+  v_board_endpoint uuid;
+  v_outsider_endpoint uuid;
+  v_direct_inbox uuid;
+  v_direct_message uuid;
+  v_board_message uuid;
+  v_task uuid;
+  v_result record;
+begin
+  insert into agent_board.agents(id, agent_type, handle, display_name)
+  values
+    (v_sender, 'agent', 'test_inboxrpc_sender', 'Inbox RPC Sender'),
+    (v_direct_recipient, 'agent', 'test_inboxrpc_direct', 'Inbox RPC Direct'),
+    (v_multicast_recipient, 'agent', 'test_inboxrpc_multi', 'Inbox RPC Multi'),
+    (v_board_member, 'agent', 'test_inboxrpc_board', 'Inbox RPC Board'),
+    (v_left_member, 'agent', 'test_inboxrpc_left', 'Inbox RPC Left'),
+    (v_outsider, 'agent', 'test_inboxrpc_outsider', 'Inbox RPC Outsider');
+
+  insert into agent_board.threads(id, thread_type, created_by_agent_id, subject)
+  values (v_thread, 'coordination', v_sender, 'Inbox RPC Test Thread');
+
+  select * into v_result
+    from agent_board.create_board(
+      v_sender,
+      'test-inboxrpc-board',
+      'Inbox RPC Board',
+      'board for inbox rpc tests',
+      '{}'::jsonb,
+      'private'
+    );
+  v_board := v_result.board_id;
+  perform ok(v_board is not null, 'create_board returns a board id');
+
+  select * into v_result
+    from agent_board.join_board(v_board, v_board_member, 'subscribed', v_sender, '{}'::jsonb);
+  perform is(v_result.membership_state, 'subscribed', 'join_board supports subscribed state');
+
+  select * into v_result
+    from agent_board.join_board(v_board, v_direct_recipient, 'joined', v_sender, '{}'::jsonb);
+  perform is(v_result.membership_state, 'joined', 'join_board supports joined state');
+
+  select * into v_result
+    from agent_board.join_board(v_board, v_left_member, 'joined', v_sender, '{}'::jsonb);
+  select * into v_result
+    from agent_board.leave_board(v_board, v_left_member, '{}'::jsonb);
+  perform is(v_result.membership_state, 'left', 'leave_board marks memberships as left');
+
+  select * into v_result
+    from agent_board.register_callback_endpoint(v_direct_recipient, 'https://example.test/direct', '{}'::jsonb);
+  v_direct_endpoint := v_result.endpoint_id;
+  perform is(v_result.endpoint_status, 'pending_verification', 'register_callback_endpoint starts pending verification');
+
+  select * into v_result
+    from agent_board.verify_callback_endpoint(v_direct_endpoint, v_direct_recipient, '{"controlProofRef":"inbox-rpcs/direct"}'::jsonb);
+  perform is(v_result.endpoint_status, 'verified', 'verify_callback_endpoint marks endpoint verified');
+
+  select * into v_result
+    from agent_board.subscribe_callback_endpoint(v_direct_endpoint, v_direct_recipient, 'own_inbox', 'inbox.item.delivered', null, '{}'::jsonb);
+  perform is(v_result.subscription_status, 'active', 'own-inbox callback subscription activates');
+
+  select * into v_result
+    from agent_board.subscribe_callback_endpoint(v_direct_endpoint, v_direct_recipient, 'own_inbox', 'inbox.item.updated', null, '{}'::jsonb);
+  perform is(v_result.subscription_status, 'active', 'own-inbox update subscription activates');
+
+  select * into v_result
+    from agent_board.register_callback_endpoint(v_board_member, 'https://example.test/board', '{}'::jsonb);
+  v_board_endpoint := v_result.endpoint_id;
+  select * into v_result
+    from agent_board.verify_callback_endpoint(v_board_endpoint, v_board_member, '{"controlProofRef":"inbox-rpcs/board"}'::jsonb);
+  select * into v_result
+    from agent_board.subscribe_callback_endpoint(v_board_endpoint, v_board_member, 'board', 'board.post.delivered', v_board, '{}'::jsonb);
+  perform is(v_result.subscription_status, 'active', 'board callback subscription activates for active member');
+
+  select * into v_result
+    from agent_board.register_callback_endpoint(v_outsider, 'https://example.test/outsider', '{}'::jsonb);
+  v_outsider_endpoint := v_result.endpoint_id;
+
+  begin
+    perform agent_board.subscribe_callback_endpoint(v_outsider_endpoint, v_outsider, 'board', 'board.post.delivered', v_board, '{}'::jsonb);
+    perform ok(false, 'board subscription without membership should fail');
+  exception
+    when sqlstate 'P0002' then
+      perform ok(true, 'board subscription requires active board membership');
+  end;
+
+  select * into v_result
+    from agent_board.send_direct_message(
+      v_thread,
+      v_sender,
+      v_direct_recipient,
+      'Direct subject',
+      'Direct body for idempotent delivery',
+      'comment',
+      'high',
+      'direct-key',
+      '{}'::jsonb
+    );
+  v_direct_message := v_result.message_id;
+  v_direct_inbox := v_result.inbox_item_id;
+  perform is(v_result.callback_outbox_count, 1, 'direct delivery enqueues one own-inbox callback');
+  perform is(
+    (select count(*)::integer from agent_board.delivery_recipients where source_message_id = v_direct_message),
+    1,
+    'direct delivery writes one recipient row'
+  );
+  perform is(
+    (select count(*)::integer from agent_board.inbox_items where source_message_id = v_direct_message),
+    1,
+    'direct delivery writes one inbox row'
+  );
+
+  select * into v_result
+    from agent_board.send_direct_message(
+      v_thread,
+      v_sender,
+      v_direct_recipient,
+      'Direct subject',
+      'Direct body for idempotent delivery',
+      'comment',
+      'high',
+      'direct-key',
+      '{}'::jsonb
+    );
+  perform is(v_result.message_id, v_direct_message, 'direct idempotency reuses canonical message');
+  perform is(
+    (select count(*)::integer from agent_board.callback_outbox_events where source_message_id = v_direct_message and event_category = 'inbox.item.delivered'),
+    1,
+    'direct idempotency does not duplicate delivered callback events'
+  );
+
+  select * into v_result
+    from agent_board.update_inbox_item_state(v_direct_inbox, v_direct_recipient, 'read', '{}'::jsonb);
+  perform is(v_result.action_state, 'read', 'update_inbox_item_state changes action state');
+  perform is(
+    (select count(*)::integer from agent_board.callback_outbox_events where inbox_item_id = v_direct_inbox and event_category = 'inbox.item.updated'),
+    1,
+    'updating inbox state enqueues one inbox.item.updated callback'
+  );
+
+  select * into v_result
+    from agent_board.send_multicast_message(
+      v_thread,
+      v_sender,
+      array[v_direct_recipient, v_multicast_recipient, v_direct_recipient]::uuid[],
+      'Multicast subject',
+      'Multicast body for duplicate suppression',
+      'comment',
+      'medium',
+      'multicast-key',
+      '{}'::jsonb
+    );
+  perform is(v_result.delivered_recipient_count, 2, 'multicast collapses duplicate recipients');
+  perform is(
+    (select count(*)::integer from agent_board.delivery_recipients where source_message_id = v_result.message_id),
+    2,
+    'multicast writes one recipient row per unique recipient'
+  );
+
+  select * into v_result
+    from agent_board.post_board_message(
+      v_thread,
+      v_sender,
+      v_board,
+      'Board subject',
+      'Board body for subscribed members',
+      'comment',
+      'urgent',
+      'board-key',
+      '{}'::jsonb
+    );
+  v_board_message := v_result.message_id;
+  perform is(v_result.delivered_recipient_count, 2, 'board delivery reaches joined and subscribed members only');
+  perform is(
+    (select count(*)::integer from agent_board.delivery_recipients where source_message_id = v_board_message and recipient_agent_id = v_left_member),
+    0,
+    'left board members do not receive board delivery'
+  );
+  perform ok(
+    exists(
+      select 1
+        from agent_board.callback_outbox_events
+       where source_message_id = v_board_message
+         and event_category = 'board.post.delivered'
+         and recipient_agent_id = v_board_member
+    ),
+    'board.post.delivered callback events are queued for board subscribers'
+  );
+
+  select * into v_result
+    from agent_board.create_tasking_delivery(
+      v_thread,
+      v_sender,
+      'Tasking title',
+      'Tasking details for duplicate suppression',
+      array[v_direct_recipient]::uuid[],
+      v_board,
+      'high',
+      'distributed',
+      'task-key',
+      '{}'::jsonb
+    );
+  v_task := v_result.task_id;
+  perform is(v_result.delivered_recipient_count, 3, 'tasking counts explicit and board fan-out attempts');
+  perform is(
+    (select count(*)::integer from agent_board.delivery_recipients where source_task_id = v_task),
+    2,
+    'tasking suppresses duplicate recipient rows across explicit and board fan-out'
+  );
+  perform is(
+    (select count(*)::integer from agent_board.inbox_items where source_task_id = v_task),
+    2,
+    'tasking writes one inbox row per unique recipient'
+  );
+
+  select * into v_result
+    from agent_board.rotate_callback_signing_key(v_direct_endpoint, v_direct_recipient, '{}'::jsonb);
+  perform is(v_result.signing_key_version, 2, 'rotate_callback_signing_key bumps signing key version');
+  perform is(v_result.endpoint_status, 'pending_verification', 'signing key rotation returns endpoint to pending verification');
+
+  select * into v_result
+    from agent_board.disable_callback_endpoint(v_board_endpoint, v_board_member, 'test disable', '{}'::jsonb);
+  perform is(v_result.endpoint_status, 'disabled', 'disable_callback_endpoint marks endpoint disabled');
+  perform ok(
+    exists(
+      select 1
+        from agent_board.callback_subscriptions
+       where endpoint_id = v_board_endpoint
+         and subscription_status = 'disabled'
+    ),
+    'disabling an endpoint disables attached subscriptions'
+  );
+
+  select * into v_result
+    from agent_board.unsubscribe_callback_endpoint(v_direct_endpoint, v_direct_recipient, 'own_inbox', 'inbox.item.updated', null, '{}'::jsonb);
+  perform is(v_result.subscription_status, 'disabled', 'unsubscribe_callback_endpoint disables an active subscription');
+
+  select * into v_result
+    from agent_board.delete_callback_endpoint(v_outsider_endpoint, v_outsider);
+  perform ok(v_result.deleted, 'delete_callback_endpoint removes owned endpoints');
+
+  perform is(
+    (select count(*)::integer from agent_board.callback_delivery_attempts),
+    0,
+    'callback management remains metadata-only before runtime delivery exists'
+  );
+end;
+$$;
+
+select * from finish();
+rollback;