@consiliency/agent-board-schema 1.22.0 → 1.23.0

package/tests/isolation/expected/atomic_fleet_binding_revoke.out

@@ -0,0 +1,103 @@
+Parsed test spec with 3 sessions
+
+starting permutation: retry_begin retry_onboard revoke_begin revoke_binding retry_commit revoke_commit check_binding
+count
+-----
+    1
+(1 row)
+
+step retry_begin: BEGIN; SET LOCAL "request.jwt.claim.role" = 'service_role';
+step retry_onboard: 
+  select binding_disposition from agent_board.onboard_federated_fleet_agent(
+    'https://atomic-binding.test', 'message-board', 'human-binding',
+    jsonb_build_object('iss','https://atomic-binding.test','aud','message-board','sub','human-binding','iat',200),
+    'atomic-binding-agent','yd_DIFGWGusVg3SbktDJQ1bE5UWvtR33xln4b05JIhk',
+    'raw_ed25519_base64url','sha256:NeVC2vx1MbTY56jUwJcLLr6YwB4IKCERsXWbUwhf5pA',
+    true,null,'agent',ARRAY['board:send'],ARRAY[]::text[],
+    (select code from agent_board.board_invite_tokens where created_by_agent_id='16230000-0000-0000-0000-000000000001'),
+    (select id from agent_board.boards where slug='atomic-binding-board'),
+    '16230000-0000-0000-0000-000000000003','codex','phase-loop',
+    'message-board','sha256:atomic-binding-repo','worker','phase_worker','atomic-binding-agent'
+  );
+
+binding_disposition
+-------------------
+reused             
+(1 row)
+
+step revoke_begin: BEGIN; SET LOCAL "request.jwt.claim.role" = 'service_role';
+step revoke_binding: 
+  select lifecycle_state from agent_board.revoke_fleet_machine_agent_binding(
+    (select id from agent_board.fleet_machine_agents where machine_id='16230000-0000-0000-0000-000000000003'),
+    '16230000-0000-0000-0000-000000000001','isolation proof',jsonb_build_object()
+  );
+ <waiting ...>
+step retry_commit: COMMIT;
+step revoke_binding: <... completed>
+lifecycle_state
+---------------
+revoked        
+(1 row)
+
+step revoke_commit: COMMIT;
+step check_binding: 
+  select count(*) filter (where lifecycle_state='active') as active,
+         count(*) filter (where lifecycle_state='revoked') as revoked,
+         count(*) as total
+    from agent_board.fleet_machine_agents
+   where machine_id='16230000-0000-0000-0000-000000000003';
+
+active|revoked|total
+------+-------+-----
+     0|      1|    1
+(1 row)
+
+
+starting permutation: revoke_begin revoke_binding retry_begin retry_onboard revoke_commit retry_commit check_binding
+count
+-----
+    1
+(1 row)
+
+step revoke_begin: BEGIN; SET LOCAL "request.jwt.claim.role" = 'service_role';
+step revoke_binding: 
+  select lifecycle_state from agent_board.revoke_fleet_machine_agent_binding(
+    (select id from agent_board.fleet_machine_agents where machine_id='16230000-0000-0000-0000-000000000003'),
+    '16230000-0000-0000-0000-000000000001','isolation proof',jsonb_build_object()
+  );
+
+lifecycle_state
+---------------
+revoked        
+(1 row)
+
+step retry_begin: BEGIN; SET LOCAL "request.jwt.claim.role" = 'service_role';
+step retry_onboard: 
+  select binding_disposition from agent_board.onboard_federated_fleet_agent(
+    'https://atomic-binding.test', 'message-board', 'human-binding',
+    jsonb_build_object('iss','https://atomic-binding.test','aud','message-board','sub','human-binding','iat',200),
+    'atomic-binding-agent','yd_DIFGWGusVg3SbktDJQ1bE5UWvtR33xln4b05JIhk',
+    'raw_ed25519_base64url','sha256:NeVC2vx1MbTY56jUwJcLLr6YwB4IKCERsXWbUwhf5pA',
+    true,null,'agent',ARRAY['board:send'],ARRAY[]::text[],
+    (select code from agent_board.board_invite_tokens where created_by_agent_id='16230000-0000-0000-0000-000000000001'),
+    (select id from agent_board.boards where slug='atomic-binding-board'),
+    '16230000-0000-0000-0000-000000000003','codex','phase-loop',
+    'message-board','sha256:atomic-binding-repo','worker','phase_worker','atomic-binding-agent'
+  );
+ <waiting ...>
+step revoke_commit: COMMIT;
+step retry_onboard: <... completed>
+ERROR:  fleet onboarding invite is not usable
+step retry_commit: COMMIT;
+step check_binding: 
+  select count(*) filter (where lifecycle_state='active') as active,
+         count(*) filter (where lifecycle_state='revoked') as revoked,
+         count(*) as total
+    from agent_board.fleet_machine_agents
+   where machine_id='16230000-0000-0000-0000-000000000003';
+
+active|revoked|total
+------+-------+-----
+     0|      1|    1
+(1 row)
+

package/tests/isolation/expected/atomic_fleet_board_archive.out

@@ -0,0 +1,117 @@
+Parsed test spec with 4 sessions
+
+starting permutation: archive_begin archive_board retry_begin retry_onboard archive_commit retry_commit check
+count
+-----
+    1
+(1 row)
+
+step archive_begin: BEGIN;
+step archive_board: 
+  update agent_board.boards set status='archived'
+   where slug='atomic-archive-board' returning status;
+
+status  
+--------
+archived
+(1 row)
+
+step retry_begin: BEGIN; SET LOCAL "request.jwt.claim.role" = 'service_role';
+step retry_onboard: 
+  select identity_disposition, binding_disposition
+  from agent_board.onboard_federated_fleet_agent(
+    'https://atomic-archive.test', 'message-board', 'human-archive',
+    jsonb_build_object('iss','https://atomic-archive.test','aud','message-board','sub','human-archive','iat',200),
+    'atomic-archive-agent',
+    'yd_DIFGWGusVg3SbktDJQ1bE5UWvtR33xln4b05JIhk',
+    'raw_ed25519_base64url',
+    'sha256:NeVC2vx1MbTY56jUwJcLLr6YwB4IKCERsXWbUwhf5pA',
+    true, null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
+    (select code from agent_board.board_invite_tokens where created_by_agent_id='16290000-0000-0000-0000-000000000001'),
+    (select id from agent_board.boards where slug='atomic-archive-board'),
+    '16290000-0000-0000-0000-000000000003', 'codex', 'phase-loop',
+    'message-board', 'sha256:atomic-archive-repo', 'worker', 'phase_worker',
+    'atomic-archive-agent'
+  );
+ <waiting ...>
+step archive_commit: COMMIT;
+step retry_onboard: <... completed>
+ERROR:  fleet onboarding board is not usable
+step retry_commit: COMMIT;
+step check: 
+  select
+    (select status from agent_board.boards where slug='atomic-archive-board') as board_status,
+    (select uses_count from agent_board.board_invite_tokens where created_by_agent_id='16290000-0000-0000-0000-000000000001') as uses_count,
+    (select count(*) from agent_board.fleet_machine_agents where machine_id='16290000-0000-0000-0000-000000000003') as bindings;
+
+board_status|uses_count|bindings
+------------+----------+--------
+archived    |         1|       1
+(1 row)
+
+
+starting permutation: blocker_begin block_machine retry_begin retry_onboard archive_begin archive_board blocker_commit retry_commit archive_commit check
+count
+-----
+    1
+(1 row)
+
+step blocker_begin: BEGIN;
+step block_machine: 
+  select id from agent_board.fleet_machines
+   where id='16290000-0000-0000-0000-000000000003' for update;
+
+                                  id
+------------------------------------
+16290000-0000-0000-0000-000000000003
+(1 row)
+
+step retry_begin: BEGIN; SET LOCAL "request.jwt.claim.role" = 'service_role';
+step retry_onboard: 
+  select identity_disposition, binding_disposition
+  from agent_board.onboard_federated_fleet_agent(
+    'https://atomic-archive.test', 'message-board', 'human-archive',
+    jsonb_build_object('iss','https://atomic-archive.test','aud','message-board','sub','human-archive','iat',200),
+    'atomic-archive-agent',
+    'yd_DIFGWGusVg3SbktDJQ1bE5UWvtR33xln4b05JIhk',
+    'raw_ed25519_base64url',
+    'sha256:NeVC2vx1MbTY56jUwJcLLr6YwB4IKCERsXWbUwhf5pA',
+    true, null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
+    (select code from agent_board.board_invite_tokens where created_by_agent_id='16290000-0000-0000-0000-000000000001'),
+    (select id from agent_board.boards where slug='atomic-archive-board'),
+    '16290000-0000-0000-0000-000000000003', 'codex', 'phase-loop',
+    'message-board', 'sha256:atomic-archive-repo', 'worker', 'phase_worker',
+    'atomic-archive-agent'
+  );
+ <waiting ...>
+step archive_begin: BEGIN;
+step archive_board: 
+  update agent_board.boards set status='archived'
+   where slug='atomic-archive-board' returning status;
+ <waiting ...>
+step blocker_commit: COMMIT;
+step retry_onboard: <... completed>
+identity_disposition|binding_disposition
+--------------------+-------------------
+reused              |reused             
+(1 row)
+
+step retry_commit: COMMIT;
+step archive_board: <... completed>
+status  
+--------
+archived
+(1 row)
+
+step archive_commit: COMMIT;
+step check: 
+  select
+    (select status from agent_board.boards where slug='atomic-archive-board') as board_status,
+    (select uses_count from agent_board.board_invite_tokens where created_by_agent_id='16290000-0000-0000-0000-000000000001') as uses_count,
+    (select count(*) from agent_board.fleet_machine_agents where machine_id='16290000-0000-0000-0000-000000000003') as bindings;
+
+board_status|uses_count|bindings
+------------+----------+--------
+archived    |         1|       1
+(1 row)
+

package/tests/isolation/expected/atomic_fleet_human_fresh_revoke.out

@@ -0,0 +1,136 @@
+Parsed test spec with 4 sessions
+
+starting permutation: blocker_begin block_creator onboard_begin onboard_fresh revoke_begin revoke_human blocker_commit onboard_commit revoke_commit check
+count
+-----
+    1
+(1 row)
+
+step blocker_begin: BEGIN;
+step block_creator: 
+  select id from agent_board.agents
+   where id='16280000-0000-0000-0000-000000000001' for update;
+
+                                  id
+------------------------------------
+16280000-0000-0000-0000-000000000001
+(1 row)
+
+step onboard_begin: BEGIN; SET LOCAL "request.jwt.claim.role" = 'service_role';
+step onboard_fresh: 
+  select identity_disposition, binding_disposition
+  from agent_board.onboard_federated_fleet_agent(
+    'https://atomic-human.test', 'message-board', 'human-fresh-race',
+    jsonb_build_object('iss','https://atomic-human.test','aud','message-board','sub','human-fresh-race','iat',200),
+    'atomic-human-fresh',
+    'TDyof3w0SMg4SDYuj-qenolHC_n05cZbrLSckKVGtMo',
+    'raw_ed25519_base64url',
+    'sha256:lSBZnHvmPvQONy8aoygp-fmTg26iZenrZC-L5LN9m7M',
+    true, null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
+    (select code from agent_board.board_invite_tokens where created_by_agent_id='16280000-0000-0000-0000-000000000001'),
+    (select id from agent_board.boards where slug='atomic-human-board'),
+    '16280000-0000-0000-0000-000000000003', 'codex', 'phase-loop',
+    'message-board', 'sha256:atomic-human-repo', 'worker', 'phase_worker',
+    'atomic-human-fresh'
+  );
+ <waiting ...>
+step revoke_begin: BEGIN; SET LOCAL "request.jwt.claim.role" = 'service_role';
+step revoke_human: 
+  select revoked_agent_count
+  from agent_board.revoke_human_subtree(
+    (select owner_user_id from agent_board.agents where handle='atomic-human-existing'),
+    '16280000-0000-0000-0000-000000000001', 'fresh race revoke'
+  );
+ <waiting ...>
+step blocker_commit: COMMIT;
+step onboard_fresh: <... completed>
+identity_disposition|binding_disposition
+--------------------+-------------------
+created             |created            
+(1 row)
+
+step onboard_commit: COMMIT;
+step revoke_human: <... completed>
+revoked_agent_count
+-------------------
+                  2
+(1 row)
+
+step revoke_commit: COMMIT;
+step check: 
+  select
+    (select count(*) from agent_board.fleet_human_revocations) as human_revocations,
+    (select count(*) from agent_board.agents where handle='atomic-human-fresh') as fresh_agents,
+    (select coalesce(max(status),'absent') from agent_board.agents where handle='atomic-human-fresh') as fresh_status,
+    (select count(*) from agent_board.agent_signing_keys where fingerprint='sha256:lSBZnHvmPvQONy8aoygp-fmTg26iZenrZC-L5LN9m7M') as fresh_keys;
+
+human_revocations|fresh_agents|fresh_status|fresh_keys
+-----------------+------------+------------+----------
+                1|           1|revoked     |         1
+(1 row)
+
+
+starting permutation: blocker_begin block_existing revoke_begin revoke_human onboard_begin onboard_fresh blocker_commit revoke_commit onboard_commit check
+count
+-----
+    1
+(1 row)
+
+step blocker_begin: BEGIN;
+step block_existing: 
+  select handle from agent_board.agents where handle='atomic-human-existing' for update;
+
+handle               
+---------------------
+atomic-human-existing
+(1 row)
+
+step revoke_begin: BEGIN; SET LOCAL "request.jwt.claim.role" = 'service_role';
+step revoke_human: 
+  select revoked_agent_count
+  from agent_board.revoke_human_subtree(
+    (select owner_user_id from agent_board.agents where handle='atomic-human-existing'),
+    '16280000-0000-0000-0000-000000000001', 'fresh race revoke'
+  );
+ <waiting ...>
+step onboard_begin: BEGIN; SET LOCAL "request.jwt.claim.role" = 'service_role';
+step onboard_fresh: 
+  select identity_disposition, binding_disposition
+  from agent_board.onboard_federated_fleet_agent(
+    'https://atomic-human.test', 'message-board', 'human-fresh-race',
+    jsonb_build_object('iss','https://atomic-human.test','aud','message-board','sub','human-fresh-race','iat',200),
+    'atomic-human-fresh',
+    'TDyof3w0SMg4SDYuj-qenolHC_n05cZbrLSckKVGtMo',
+    'raw_ed25519_base64url',
+    'sha256:lSBZnHvmPvQONy8aoygp-fmTg26iZenrZC-L5LN9m7M',
+    true, null, 'agent', ARRAY['board:send'], ARRAY[]::text[],
+    (select code from agent_board.board_invite_tokens where created_by_agent_id='16280000-0000-0000-0000-000000000001'),
+    (select id from agent_board.boards where slug='atomic-human-board'),
+    '16280000-0000-0000-0000-000000000003', 'codex', 'phase-loop',
+    'message-board', 'sha256:atomic-human-repo', 'worker', 'phase_worker',
+    'atomic-human-fresh'
+  );
+ <waiting ...>
+step blocker_commit: COMMIT;
+step revoke_human: <... completed>
+revoked_agent_count
+-------------------
+                  1
+(1 row)
+
+step revoke_commit: COMMIT;
+step onboard_fresh: <... completed>
+ERROR:  human owner has been revoked
+step onboard_commit: COMMIT;
+step check: 
+  select
+    (select count(*) from agent_board.fleet_human_revocations) as human_revocations,
+    (select count(*) from agent_board.agents where handle='atomic-human-fresh') as fresh_agents,
+    (select coalesce(max(status),'absent') from agent_board.agents where handle='atomic-human-fresh') as fresh_status,
+    (select count(*) from agent_board.agent_signing_keys where fingerprint='sha256:lSBZnHvmPvQONy8aoygp-fmTg26iZenrZC-L5LN9m7M') as fresh_keys;
+
+human_revocations|fresh_agents|fresh_status|fresh_keys
+-----------------+------------+------------+----------
+                1|           0|absent      |         0
+(1 row)
+

package/tests/isolation/expected/atomic_fleet_identity_disposition.out

@@ -0,0 +1,61 @@
+Parsed test spec with 3 sessions
+
+starting permutation: legacy_begin legacy_enroll fleet_begin fleet_onboard legacy_commit fleet_commit check
+count
+-----
+    1
+(1 row)
+
+step legacy_begin: BEGIN; SET LOCAL "request.jwt.claim.role" = 'service_role';
+step legacy_enroll: 
+  select agent_handle
+  from agent_board.enroll_federated_identity(
+    'https://atomic-disposition.test', 'message-board', 'human-disposition',
+    jsonb_build_object('iss','https://atomic-disposition.test','aud','message-board','sub','human-disposition','iat',100),
+    'atomic-disposition-agent',
+    '5TG73fnNhqeYkoSvPf9QwmWkvKWe0yA7B8YinAWQ8m4', 'raw_ed25519_base64url',
+    'sha256:qhjEQe9R_x26TBZyBsd-LrpR1fh7Mvnz86rbsCKtjz8', true, null, 'agent',
+    ARRAY['board:send'], ARRAY[]::text[], null
+  );
+
+agent_handle            
+------------------------
+atomic-disposition-agent
+(1 row)
+
+step fleet_begin: BEGIN; SET LOCAL "request.jwt.claim.role" = 'service_role';
+step fleet_onboard: 
+  select identity_disposition, membership_disposition, binding_disposition
+  from agent_board.onboard_federated_fleet_agent(
+    'https://atomic-disposition.test', 'message-board', 'human-disposition',
+    jsonb_build_object('iss','https://atomic-disposition.test','aud','message-board','sub','human-disposition','iat',101),
+    'atomic-disposition-agent',
+    '5TG73fnNhqeYkoSvPf9QwmWkvKWe0yA7B8YinAWQ8m4', 'raw_ed25519_base64url',
+    'sha256:qhjEQe9R_x26TBZyBsd-LrpR1fh7Mvnz86rbsCKtjz8', true, null, 'agent',
+    ARRAY['board:send'], ARRAY[]::text[],
+    (select code from agent_board.board_invite_tokens where created_by_agent_id='16260000-0000-0000-0000-000000000001'),
+    (select id from agent_board.boards where slug='atomic-disposition-board'),
+    '16260000-0000-0000-0000-000000000003', 'codex', 'phase-loop',
+    'message-board', 'sha256:atomic-disposition-repo', 'worker', 'phase_worker',
+    'atomic-disposition-agent'
+  );
+ <waiting ...>
+step legacy_commit: COMMIT;
+step fleet_onboard: <... completed>
+identity_disposition|membership_disposition|binding_disposition
+--------------------+----------------------+-------------------
+reused              |created               |recovered          
+(1 row)
+
+step fleet_commit: COMMIT;
+step check: 
+  select
+    (select count(*) from agent_board.agents where handle='atomic-disposition-agent') as agents,
+    (select count(*) from agent_board.agent_signing_keys where fingerprint='sha256:qhjEQe9R_x26TBZyBsd-LrpR1fh7Mvnz86rbsCKtjz8') as keys,
+    (select count(*) from agent_board.fleet_machine_agents where machine_id='16260000-0000-0000-0000-000000000003') as bindings;
+
+agents|keys|bindings
+------+----+--------
+     1|   1|       1
+(1 row)
+