@consiliency/agent-board-schema 1.3.0 → 1.5.0

package/migrations/20260723000100_agent_board_roomown_owner_seed.sql

@@ -0,0 +1,167 @@
+-- ROOMOWN Lane A: room creators actually OWN the room.
+--
+-- Before this migration create_board wrote ONLY the boards row and never seeded a
+-- board_memberships owner row, so the creator held no membership and could not act
+-- as owner (grant_board_role / set_board_authority_ceiling both resolve the grantor
+-- rank from a joined/subscribed membership). This migration:
+--
+--   1. create or replace create_board so that, on a GENUINE INSERT, it also seeds a
+--      joined `owner` board_memberships row bound to the board's ACTUAL
+--      created_by_agent_id. The pre-existing slug-collision UPDATE path is now
+--      OWNER-ONLY: a non-owner colliding on an existing slug raises 42501 and mutates
+--      nothing (closing a confidentiality bypass where any authenticated agent could
+--      overwrite another board's name/visibility/metadata). The effective actor is
+--      resolved through _resolved_actor_agent_id, so an authenticated caller can only
+--      create/own as itself while service_role retains create-on-behalf-of.
+--
+--   2. bootstrap_board_owner_memberships(): a service_role-only repair sweep that
+--      seeds the owner membership for pre-existing owner-less boards' created_by only.
+--
+-- Additive; no schema_version bump (net-new owner-seed + repair, no previously-live
+-- authenticated contract re-activated here).
+
+-- 1. create_board: seed owner on insert; owner-only slug-collision update ----------
+create or replace function agent_board.create_board(
+  p_created_by_agent_id uuid,
+  p_slug text,
+  p_name text,
+  p_description text default null,
+  p_metadata jsonb default '{}'::jsonb,
+  p_visibility text default 'private'
+)
+returns table(board_id uuid, slug text, name text, status text, visibility text, created_at timestamptz, updated_at timestamptz)
+language plpgsql
+security definer
+set search_path = agent_board, public
+as $$
+#variable_conflict use_column
+declare
+  v_actor uuid;
+  v_existing agent_board.boards%rowtype;
+  v_board agent_board.boards%rowtype;
+begin
+  if nullif(trim(p_slug), '') is null or nullif(trim(p_name), '') is null then
+    raise exception 'board slug and name are required' using errcode = '22023';
+  end if;
+  if coalesce(p_visibility, 'private') not in ('private', 'invite_only', 'open', 'directory_hidden') then
+    raise exception 'invalid board visibility' using errcode = '22023';
+  end if;
+
+  -- Effective actor: service_role -> supplied arg (create-on-behalf-of);
+  -- authenticated -> current_agent_id() and rejects arg <> current (42501).
+  v_actor := agent_board._resolved_actor_agent_id(p_created_by_agent_id, 'p_created_by_agent_id');
+
+  if not exists (select 1 from agent_board.agents where id = v_actor) then
+    raise exception 'agent not found' using errcode = 'P0002';
+  end if;
+
+  select * into v_existing
+    from agent_board.boards b
+   where b.slug = trim(p_slug);
+
+  if found then
+    -- Slug-collision path is OWNER-ONLY, keyed on CURRENT authority: the actor must
+    -- hold an ACTIVE owner-role membership on the existing board — NOT merely be its
+    -- original `created_by_agent_id`. A demoted or departed original creator no longer
+    -- owns the board and must NOT be able to re-open/rename/flip-visibility it.
+    if not exists (
+      select 1 from agent_board.board_memberships m
+       where m.board_id = v_existing.id
+         and m.agent_id = v_actor
+         and m.role = 'owner'
+         and m.membership_state in ('joined', 'subscribed')
+    ) then
+      raise exception 'board slug already in use' using errcode = '42501';
+    end if;
+
+    update agent_board.boards as b
+       set name = trim(p_name),
+           description = nullif(trim(p_description), ''),
+           status = 'active',
+           visibility = coalesce(p_visibility, 'private'),
+           metadata = coalesce(b.metadata, '{}'::jsonb) || coalesce(p_metadata, '{}'::jsonb),
+           updated_at = now()
+     where b.id = v_existing.id
+    returning * into v_board;
+    -- No owner re-seed: the owner was seeded at this board's original creation, and
+    -- re-promoting on every create_board would resurrect a deliberately demoted owner.
+  else
+    insert into agent_board.boards as b(slug, name, description, created_by_agent_id, visibility, metadata)
+    values (
+      trim(p_slug),
+      trim(p_name),
+      nullif(trim(p_description), ''),
+      v_actor,
+      coalesce(p_visibility, 'private'),
+      coalesce(p_metadata, '{}'::jsonb)
+    )
+    returning * into v_board;
+
+    -- Seed the creator's owner membership, bound to the board's ACTUAL
+    -- created_by_agent_id (never the raw param). Idempotent against the active
+    -- partial-unique index so at most one active owner row exists.
+    insert into agent_board.board_memberships as bm(board_id, agent_id, membership_state, role, created_by_agent_id)
+    values (v_board.id, v_board.created_by_agent_id, 'joined', 'owner', v_board.created_by_agent_id)
+    on conflict (board_id, agent_id) where (membership_state in ('joined', 'subscribed'))
+      do update set role = 'owner', updated_at = now();
+  end if;
+
+  return query
+  select v_board.id, v_board.slug, v_board.name, v_board.status, v_board.visibility, v_board.created_at, v_board.updated_at;
+end;
+$$;
+
+comment on function agent_board.create_board(uuid, text, text, text, jsonb, text) is
+  'Creates a board and, on genuine insert, seeds the creator''s joined owner membership (bound to the board''s created_by_agent_id). The slug-collision update path is owner-only (non-owner raises 42501, mutates nothing). Effective actor resolved via _resolved_actor_agent_id.';
+
+revoke all on function agent_board.create_board(uuid, text, text, text, jsonb, text) from public, anon;
+grant execute on function agent_board.create_board(uuid, text, text, text, jsonb, text) to authenticated, service_role;
+
+-- 2. bootstrap_board_owner_memberships(): service_role-only owner-seed repair -------
+create or replace function agent_board.bootstrap_board_owner_memberships()
+returns table(board_id uuid, owner_agent_id uuid, membership_id uuid)
+language plpgsql
+security definer
+set search_path = agent_board, public
+as $$
+#variable_conflict use_column
+declare
+  v_row record;
+  v_membership_id uuid;
+begin
+  -- service_role-only: current_agent_id() is null for service_role, non-null for any
+  -- authenticated principal (guarded here in addition to the EXECUTE revoke below).
+  if not agent_board._is_service_role() then
+    raise exception 'bootstrap_board_owner_memberships is service_role-only' using errcode = '42501';
+  end if;
+
+  for v_row in
+    select b.id as board_id, b.created_by_agent_id as owner_agent_id
+      from agent_board.boards b
+     where not exists (
+       select 1
+         from agent_board.board_memberships bm
+        where bm.board_id = b.id
+          and bm.agent_id = b.created_by_agent_id
+          and bm.membership_state in ('joined', 'subscribed')
+     )
+  loop
+    insert into agent_board.board_memberships as bm(board_id, agent_id, membership_state, role, created_by_agent_id)
+    values (v_row.board_id, v_row.owner_agent_id, 'joined', 'owner', v_row.owner_agent_id)
+    on conflict (board_id, agent_id) where (membership_state in ('joined', 'subscribed'))
+      do update set role = 'owner', updated_at = now()
+    returning bm.id into v_membership_id;
+
+    board_id := v_row.board_id;
+    owner_agent_id := v_row.owner_agent_id;
+    membership_id := v_membership_id;
+    return next;
+  end loop;
+end;
+$$;
+
+comment on function agent_board.bootstrap_board_owner_memberships() is
+  'service_role-only repair sweep: seeds a joined owner membership for pre-existing owner-less boards, bound to each board''s created_by_agent_id. Takes no caller/role param.';
+
+revoke all on function agent_board.bootstrap_board_owner_memberships() from public, anon, authenticated;
+grant execute on function agent_board.bootstrap_board_owner_memberships() to service_role;

package/migrations/20260723000200_agent_board_roomown_grant_role_live.sql

@@ -0,0 +1,72 @@
+-- ROOMOWN Lane B: activate the dormant grant_board_role chokepoint for authenticated
+-- board owners/admins, with a privilege-escalation-safe grantor binding.
+--
+-- 20260718000400 shipped grant_board_role dormant (revoked from authenticated,
+-- granted service_role) and TRUSTED p_grantor_agent_id. Now that create_board seeds
+-- the creator's owner membership (ROOMOWN Lane A), the owner can drive grants from
+-- their own authenticated session. Activating it safely requires binding the grantor
+-- to the RESOLVED actor, NOT coalesce(current_agent_id(), p_grantor_agent_id):
+-- current_agent_id() returns null for ANY authenticated caller whose agent is
+-- suspended/credential-rotating/unmapped (20260710000000:15 filters status='active'),
+-- and such a caller still carries a valid `authenticated` token. A coalesce would then
+-- honor an attacker-supplied p_grantor_agent_id (owner IDs are non-secret) and let them
+-- self-escalate. _resolved_actor_agent_id fails closed: service_role -> supplied arg;
+-- authenticated -> current_agent_id() and raises 42501 if null or if arg <> current.
+--
+-- Additive; no schema_version bump. grant_board_role was never authenticated, so no
+-- old client keys on it — this is a net-new capability, not a re-activation.
+
+create or replace function agent_board.grant_board_role(
+  p_board_id uuid,
+  p_agent_id uuid,
+  p_grantee_role text,
+  p_grantor_agent_id uuid default null
+)
+returns table(board_id uuid, agent_id uuid, role text, updated_at timestamptz)
+language plpgsql
+security definer
+set search_path = agent_board, public
+as $$
+declare
+  v_grantor uuid;
+  v_updated agent_board.board_memberships%rowtype;
+begin
+  if p_grantee_role not in ('owner', 'admin', 'member', 'observer') then
+    raise exception 'invalid grantee role' using errcode = '22023';
+  end if;
+
+  -- Grantor is the RESOLVED actor. service_role -> supplied arg; authenticated ->
+  -- current_agent_id() and raises 42501 if null (suspended/unmapped) or if the
+  -- supplied arg <> current_agent_id(). This closes the single-principal escalation.
+  v_grantor := agent_board._resolved_actor_agent_id(p_grantor_agent_id, 'p_grantor_agent_id');
+
+  if not exists (
+    select 1 from agent_board.board_memberships bm
+     where bm.board_id = p_board_id and bm.agent_id = p_agent_id
+  ) then
+    raise exception 'grantee has no membership on this board' using errcode = 'P0002';
+  end if;
+
+  -- Ceiling consumption: grantee-bounded against min(grantor role, board ceiling).
+  if not agent_board._grant_within_ceiling(v_grantor, p_board_id, p_grantee_role) then
+    raise exception 'grant exceeds grantor role or board authority ceiling' using errcode = '42501';
+  end if;
+
+  update agent_board.board_memberships bm
+     set role = p_grantee_role,
+         updated_at = now()
+   where bm.board_id = p_board_id
+     and bm.agent_id = p_agent_id
+   returning * into v_updated;
+
+  return query
+  select v_updated.board_id, v_updated.agent_id, v_updated.role, v_updated.updated_at;
+end;
+$$;
+
+comment on function agent_board.grant_board_role(uuid, uuid, text, uuid) is
+  'Live board-role grant chokepoint. Grantor is the resolved actor (_resolved_actor_agent_id: service_role uses the supplied arg, authenticated uses current_agent_id() and fails closed on null/mismatch). Requires grantee membership (P0002), then enforces _grant_within_ceiling(grantor, board, grantee_role) before setting board_memberships.role.';
+
+-- Live: authenticated owners/admins may grant (within ceiling); service_role retained.
+revoke all on function agent_board.grant_board_role(uuid, uuid, text, uuid) from public, anon;
+grant execute on function agent_board.grant_board_role(uuid, uuid, text, uuid) to authenticated, service_role;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@consiliency/agent-board-schema",
-  "version": "1.3.0",
+  "version": "1.5.0",
   "description": "Canonical, immutable, exact-pinnable agent_board schema bundle: ordered SQL migrations, digest + compatibility manifest, and deterministic materialize/plan/check tooling for adopters.",
   "repository": "https://github.com/Consiliency/message-board.git",
   "type": "module",
@@ -25,6 +25,12 @@
     "LICENSE",
     "NOTICE"
   ],
+  "scripts": {
+    "build:manifest": "node ../../scripts/build-schema-manifest.mjs",
+    "check:manifest": "node ../../scripts/build-schema-manifest.mjs --check",
+    "test": "vitest run",
+    "pack:smoke": "node ../../scripts/schema-packed-consumer-smoke.mjs"
+  },
   "publishConfig": {
     "access": "public",
     "registry": "https://registry.npmjs.org"
@@ -32,11 +38,5 @@
   "engines": {
     "node": ">=18"
   },
-  "license": "Apache-2.0",
-  "scripts": {
-    "build:manifest": "node ../../scripts/build-schema-manifest.mjs",
-    "check:manifest": "node ../../scripts/build-schema-manifest.mjs --check",
-    "test": "vitest run",
-    "pack:smoke": "node ../../scripts/schema-packed-consumer-smoke.mjs"
-  }
-}
+  "license": "Apache-2.0"
+}

package/schema-manifest.json

@@ -2,8 +2,8 @@
   "schema": "agent_board_schema_manifest.v1",
   "interface": "IF-0-MBPLANE-BUNDLE-1",
   "package": "@consiliency/agent-board-schema",
-  "packageVersion": "1.3.0",
-  "schemaVersion": 7,
+  "packageVersion": "1.5.0",
+  "schemaVersion": 8,
   "minClientVersion": "1.1.0",
   "source": {
     "portalBaseline": "94f9c269a358a943498454003e8f05f47e27a491",
@@ -46,8 +46,8 @@
       "usage": "upsert (retention/monitoring defaults; on conflict do nothing)"
     }
   ],
-  "migrationCount": 45,
-  "aggregateSha256": "5acd6311c09a4134f4fb005e6b6f78a2a34665dfccc99e8e67e3bcb7b7325abb",
+  "migrationCount": 73,
+  "aggregateSha256": "a43737edf382d8aee59069d6a9aec9e39fce17b31f092a3d7fcd96303b6f70e9",
   "migrations": [
     {
       "order": 0,
@@ -453,6 +453,258 @@
       "sourceRef": "message-board",
       "bytes": 2159,
       "sha256": "37a6f94d47b0948b1d5f384e52101eb48d9a15ba96a351669c87b907cc8a03e1"
+    },
+    {
+      "order": 45,
+      "id": "20260717000100_agent_board_board_role",
+      "filename": "20260717000100_agent_board_board_role.sql",
+      "origin": "message-board-forward",
+      "sourceRef": "message-board",
+      "bytes": 7246,
+      "sha256": "969980a7b52c6fee9329d2367006e5ce6d36b6471b53fee2247e493ac8ae512f"
+    },
+    {
+      "order": 46,
+      "id": "20260717000200_agent_board_thread_acl",
+      "filename": "20260717000200_agent_board_thread_acl.sql",
+      "origin": "message-board-forward",
+      "sourceRef": "message-board",
+      "bytes": 6326,
+      "sha256": "afb323d6f9189f1f37a7fee3ffceaaa17474059d46a1fdd84adb73c28bfb27ba"
+    },
+    {
+      "order": 47,
+      "id": "20260717000300_agent_board_agent_lineage",
+      "filename": "20260717000300_agent_board_agent_lineage.sql",
+      "origin": "message-board-forward",
+      "sourceRef": "message-board",
+      "bytes": 2094,
+      "sha256": "48aff20015f74e5f201a2985f71b33cd3e718aeb9dfb25fbd5720cb824fe85b3"
+    },
+    {
+      "order": 48,
+      "id": "20260717000400_agent_board_delegation_policies",
+      "filename": "20260717000400_agent_board_delegation_policies.sql",
+      "origin": "message-board-forward",
+      "sourceRef": "message-board",
+      "bytes": 7551,
+      "sha256": "ef7827af400e8a6206c17c8cc35623c280a92d25f4b678314847ff308d9d9dc7"
+    },
+    {
+      "order": 49,
+      "id": "20260718000100_agent_board_send_authz_config",
+      "filename": "20260718000100_agent_board_send_authz_config.sql",
+      "origin": "message-board-forward",
+      "sourceRef": "message-board",
+      "bytes": 7775,
+      "sha256": "d56909d4fbb7054e74818903d3eea84451d561c60908026dbbdb1956f500565d"
+    },
+    {
+      "order": 50,
+      "id": "20260718000200_agent_board_send_role_gate",
+      "filename": "20260718000200_agent_board_send_role_gate.sql",
+      "origin": "message-board-forward",
+      "sourceRef": "message-board",
+      "bytes": 26707,
+      "sha256": "805afdef2c11e52966bec1cd47a55dfd5e687af9181316d9ef71975b516de288"
+    },
+    {
+      "order": 51,
+      "id": "20260718000300_agent_board_fleet_policy_default_deny",
+      "filename": "20260718000300_agent_board_fleet_policy_default_deny.sql",
+      "origin": "message-board-forward",
+      "sourceRef": "message-board",
+      "bytes": 9060,
+      "sha256": "47ad42dd50fb31ede0cb6044a22cce04a31168af2dead73ed8e01dabf84fddea"
+    },
+    {
+      "order": 52,
+      "id": "20260718000400_agent_board_grant_ceiling_wiring",
+      "filename": "20260718000400_agent_board_grant_ceiling_wiring.sql",
+      "origin": "message-board-forward",
+      "sourceRef": "message-board",
+      "bytes": 2626,
+      "sha256": "0461f6d403fb1dd07e9423db898cd41a15a3ecfbf75402cd0085791d57a646b7"
+    },
+    {
+      "order": 53,
+      "id": "20260718000500_agent_board_fleet_agent_session_class",
+      "filename": "20260718000500_agent_board_fleet_agent_session_class.sql",
+      "origin": "message-board-forward",
+      "sourceRef": "message-board",
+      "bytes": 1341,
+      "sha256": "028f931aaba673fba29dd92ef3c17efcc08cb50b0dab01789986652a54fb003a"
+    },
+    {
+      "order": 54,
+      "id": "20260718000600_agent_board_mint_fleet_agent_session",
+      "filename": "20260718000600_agent_board_mint_fleet_agent_session.sql",
+      "origin": "message-board-forward",
+      "sourceRef": "message-board",
+      "bytes": 7945,
+      "sha256": "25972553fd1ec4f350e751495d79695a8b0ccc66c0b8b272fdf517115ba37307"
+    },
+    {
+      "order": 55,
+      "id": "20260718000700_agent_board_nonfleet_session_reaper",
+      "filename": "20260718000700_agent_board_nonfleet_session_reaper.sql",
+      "origin": "message-board-forward",
+      "sourceRef": "message-board",
+      "bytes": 1490,
+      "sha256": "9b6ff596ac386c49530c9405535b5255dcb09c271288957711a0d553446ef161"
+    },
+    {
+      "order": 56,
+      "id": "20260718000800_agent_board_regrant_scoped_send",
+      "filename": "20260718000800_agent_board_regrant_scoped_send.sql",
+      "origin": "message-board-forward",
+      "sourceRef": "message-board",
+      "bytes": 2072,
+      "sha256": "1332cf2ee23d875cf0b3d646890a0fffe0efc6d2312da4e315d5dc0abadaf74f"
+    },
+    {
+      "order": 57,
+      "id": "20260718000900_agent_board_agents_status_revoked",
+      "filename": "20260718000900_agent_board_agents_status_revoked.sql",
+      "origin": "message-board-forward",
+      "sourceRef": "message-board",
+      "bytes": 1424,
+      "sha256": "f0e9b95c286bb4b6873cdc882e30262788636886360c0100b745569d6553a51b"
+    },
+    {
+      "order": 58,
+      "id": "20260718001000_agent_board_delegation_enforcement",
+      "filename": "20260718001000_agent_board_delegation_enforcement.sql",
+      "origin": "message-board-forward",
+      "sourceRef": "message-board",
+      "bytes": 14005,
+      "sha256": "7e93bd1ff924b06922bb9312684f57ce81c3d3e921dbf52357ae5059a01dbc8b"
+    },
+    {
+      "order": 59,
+      "id": "20260718001100_agent_board_revoke_agent_subtree",
+      "filename": "20260718001100_agent_board_revoke_agent_subtree.sql",
+      "origin": "message-board-forward",
+      "sourceRef": "message-board",
+      "bytes": 9849,
+      "sha256": "bcf14370a3da288ebe43e337d050f5fb6fb736fad69c9f6b7a0b6e0992371b7e"
+    },
+    {
+      "order": 60,
+      "id": "20260718001200_agent_board_resigning_refresh",
+      "filename": "20260718001200_agent_board_resigning_refresh.sql",
+      "origin": "message-board-forward",
+      "sourceRef": "message-board",
+      "bytes": 4806,
+      "sha256": "47248250ab9bc11abdea8533d62611efba9812b913dc2dc5405612eb2fbafd12"
+    },
+    {
+      "order": 61,
+      "id": "20260718001300_agent_board_identity_providers",
+      "filename": "20260718001300_agent_board_identity_providers.sql",
+      "origin": "message-board-forward",
+      "sourceRef": "message-board",
+      "bytes": 4108,
+      "sha256": "ab8169709faf7f74b27a593a7c980022ee073f0371b39c0dda18f2202c0f4eae"
+    },
+    {
+      "order": 62,
+      "id": "20260718001400_agent_board_enrollment_federation_audit",
+      "filename": "20260718001400_agent_board_enrollment_federation_audit.sql",
+      "origin": "message-board-forward",
+      "sourceRef": "message-board",
+      "bytes": 2822,
+      "sha256": "c42e5122625639155d9ff1d2511ebdec3ac379ca0660e67c159e37efb8ea24f5"
+    },
+    {
+      "order": 63,
+      "id": "20260718001500_agent_board_enroll_federated_identity",
+      "filename": "20260718001500_agent_board_enroll_federated_identity.sql",
+      "origin": "message-board-forward",
+      "sourceRef": "message-board",
+      "bytes": 9490,
+      "sha256": "497d1f657d78c56744017409f5bd2ca361cd691ee1d0bab5b9a55ab3dd4b8ae7"
+    },
+    {
+      "order": 64,
+      "id": "20260719000100_agent_board_signing_challenge_pending_cap",
+      "filename": "20260719000100_agent_board_signing_challenge_pending_cap.sql",
+      "origin": "message-board-forward",
+      "sourceRef": "message-board",
+      "bytes": 4280,
+      "sha256": "1e48b413d31f11b9c120480c8453c8502fdde1c3a7997dcd9e22e957a2459b0b"
+    },
+    {
+      "order": 65,
+      "id": "20260719000200_agent_board_signing_challenge_reaper",
+      "filename": "20260719000200_agent_board_signing_challenge_reaper.sql",
+      "origin": "message-board-forward",
+      "sourceRef": "message-board",
+      "bytes": 1472,
+      "sha256": "488bbf16bf526b7df7c9b3fa5b068964703aa04ba657d6e6ceaff856a9523634"
+    },
+    {
+      "order": 66,
+      "id": "20260719000300_agent_board_enroll_rate_cap",
+      "filename": "20260719000300_agent_board_enroll_rate_cap.sql",
+      "origin": "message-board-forward",
+      "sourceRef": "message-board",
+      "bytes": 3195,
+      "sha256": "402c6d8bc5d4662b10d6fe0228a2bdd30026be96a5b5a237e26e1d44a639ae1d"
+    },
+    {
+      "order": 67,
+      "id": "20260719001000_agent_board_identity_providers_portal_contract",
+      "filename": "20260719001000_agent_board_identity_providers_portal_contract.sql",
+      "origin": "message-board-forward",
+      "sourceRef": "message-board",
+      "bytes": 2263,
+      "sha256": "e0406afebf9b36f3793e04ca757a252f038b4100697598e0a2e76050193674a0"
+    },
+    {
+      "order": 68,
+      "id": "20260719001100_agent_board_enroll_federated_identity_pop",
+      "filename": "20260719001100_agent_board_enroll_federated_identity_pop.sql",
+      "origin": "message-board-forward",
+      "sourceRef": "message-board",
+      "bytes": 12153,
+      "sha256": "3d4517243a7d228fb04ea41e9dc7236c870cb5830fb2f815bfa12426eee47bd7"
+    },
+    {
+      "order": 69,
+      "id": "20260719001200_agent_board_enroll_federated_identity_raw_fingerprint",
+      "filename": "20260719001200_agent_board_enroll_federated_identity_raw_fingerprint.sql",
+      "origin": "message-board-forward",
+      "sourceRef": "message-board",
+      "bytes": 13630,
+      "sha256": "70943047b522ec23ee3d451f704c961d130a053bc210dad8759cbc9a22444454"
+    },
+    {
+      "order": 70,
+      "id": "20260719001300_agent_board_enroll_rate_events_reaper_rls",
+      "filename": "20260719001300_agent_board_enroll_rate_events_reaper_rls.sql",
+      "origin": "message-board-forward",
+      "sourceRef": "message-board",
+      "bytes": 3112,
+      "sha256": "b2f58eadc13cb227991c4d978c5460878dc3cbada43c58285b55154b89a28459"
+    },
+    {
+      "order": 71,
+      "id": "20260723000100_agent_board_roomown_owner_seed",
+      "filename": "20260723000100_agent_board_roomown_owner_seed.sql",
+      "origin": "message-board-forward",
+      "sourceRef": "message-board",
+      "bytes": 7871,
+      "sha256": "ecfaf262832b3d499102ec3a2ee1d48e043b33282287d0e987555e868c07b804"
+    },
+    {
+      "order": 72,
+      "id": "20260723000200_agent_board_roomown_grant_role_live",
+      "filename": "20260723000200_agent_board_roomown_grant_role_live.sql",
+      "origin": "message-board-forward",
+      "sourceRef": "message-board",
+      "bytes": 3716,
+      "sha256": "40c9f585af16211fe9ab1d35efca6787e49b31afc7c85f208da22b9566a65575"
     }
   ],
   "excludedBridge": {

package/src/tooling.test.mjs

@@ -34,9 +34,54 @@ describe('manifest integrity', () => {
     expect(manifest.source.portalBaseline).toMatch(/^[0-9a-f]{40}$/);
     expect(manifest.source.laneHead).toMatch(/^[0-9a-f]{40}$/);
     expect(manifest.source.mergeBase).toMatch(/^[0-9a-f]{40}$/);
-    expect(manifest.schemaVersion).toBe(7);
+    expect(manifest.schemaVersion).toBe(8);
     expect(manifest.minClientVersion).toMatch(/^\d+\.\d+\.\d+$/);
   });
+  it('registers the four MBAUTHZ + four MBSENDAUTHZ + four MBSESSION + four MBDELEG + three MBFED + three MBHARDEN + two MBPORTALGATE + two MBPORTAL-PR32 + two ROOMOWN forward migrations (migrationCount = prior 71 + 2 = 73)', () => {
+    expect(manifest.migrationCount).toBe(manifest.migrations.length);
+    expect(manifest.migrationCount).toBe(73);
+    // MBSESSION switched enforcement on (scoped-send re-grant): the client-visible
+    // schema version bumped to 8. MBDELEG tightens delegation and MBFED adds only
+    // enrollment-only additive surface (identity_providers registry, enrollment audit,
+    // the enroll RPC, and the /enroll EF) with no client-visible write-path shape
+    // change, so the version stays 8. MBHARDEN adds three additive pre-live hardening
+    // migrations (challenge pending-cap, challenge reaper, /enroll rate cap) with no
+    // client-visible write-path shape change, so the version stays 8.
+    expect(manifest.schemaVersion).toBe(8);
+    const names = new Set(manifest.migrations.map((m) => m.filename));
+    for (const f of [
+      '20260717000100_agent_board_board_role.sql',
+      '20260717000200_agent_board_thread_acl.sql',
+      '20260717000300_agent_board_agent_lineage.sql',
+      '20260717000400_agent_board_delegation_policies.sql',
+      '20260718000100_agent_board_send_authz_config.sql',
+      '20260718000200_agent_board_send_role_gate.sql',
+      '20260718000300_agent_board_fleet_policy_default_deny.sql',
+      '20260718000400_agent_board_grant_ceiling_wiring.sql',
+      '20260718000500_agent_board_fleet_agent_session_class.sql',
+      '20260718000600_agent_board_mint_fleet_agent_session.sql',
+      '20260718000700_agent_board_nonfleet_session_reaper.sql',
+      '20260718000800_agent_board_regrant_scoped_send.sql',
+      '20260718000900_agent_board_agents_status_revoked.sql',
+      '20260718001000_agent_board_delegation_enforcement.sql',
+      '20260718001100_agent_board_revoke_agent_subtree.sql',
+      '20260718001200_agent_board_resigning_refresh.sql',
+      '20260718001300_agent_board_identity_providers.sql',
+      '20260718001400_agent_board_enrollment_federation_audit.sql',
+      '20260718001500_agent_board_enroll_federated_identity.sql',
+      '20260719000100_agent_board_signing_challenge_pending_cap.sql',
+      '20260719000200_agent_board_signing_challenge_reaper.sql',
+      '20260719000300_agent_board_enroll_rate_cap.sql',
+      '20260719001200_agent_board_enroll_federated_identity_raw_fingerprint.sql',
+      '20260719001300_agent_board_enroll_rate_events_reaper_rls.sql',
+      // ROOMOWN: room ownership + self-service authority (create_board owner-seed +
+      // bootstrap; grant_board_role activated for authenticated). schema stays 8.
+      '20260723000100_agent_board_roomown_owner_seed.sql',
+      '20260723000200_agent_board_roomown_grant_role_live.sql',
+    ]) {
+      expect(names.has(f)).toBe(true);
+    }
+  });
 });
 
 describe('materialize (sole adopter path)', () => {