@consiliency/agent-board-schema 1.51.0 → 1.53.0

package/fixtures/already-applied.json

@@ -600,6 +600,10 @@
     {
       "id": "20261002000100_agent_board_session_challenge_supersede",
       "sha256": "f10d8f539538fcf63d5b3538650160e7a4f9e345ccb7476b21756675f2b6ab80"
+    },
+    {
+      "id": "20261003000100_agent_board_room_roster",
+      "sha256": "7bcb993b9943cd7e6bd3777c90c32e9cb32e53415262f8c58a8d75678a449853"
     }
   ]
 }

package/migrations/20261003000100_agent_board_room_roster.sql

@@ -0,0 +1,115 @@
+-- ROOMCONTRACT: owner/admin active roster plus self-membership role visibility.
+--
+-- The roster is a purpose-built SECURITY DEFINER read. The base table and the
+-- security-invoker view remain self-scoped; authority is checked before any
+-- roster query, and current standing is chosen before active-state filtering.
+
+create or replace view agent_board.v_board_memberships
+with (security_invoker = true)
+as
+select
+  bm.id as board_membership_id,
+  bm.board_id,
+  b.slug as board_slug,
+  b.name as board_name,
+  bm.agent_id,
+  a.handle as agent_handle,
+  a.display_name as agent_display_name,
+  bm.membership_state,
+  bm.created_by_agent_id,
+  creator.handle as created_by_handle,
+  bm.left_at,
+  bm.created_at,
+  bm.updated_at,
+  bm.role
+from agent_board.board_memberships bm
+join agent_board.boards b on b.id = bm.board_id
+join agent_board.agents a on a.id = bm.agent_id
+left join agent_board.agents creator on creator.id = bm.created_by_agent_id;
+
+comment on view agent_board.v_board_memberships is
+  'Self-scoped board membership read model. security_invoker preserves base-table RLS; role is appended after every pre-existing column.';
+
+grant select on agent_board.v_board_memberships to authenticated, service_role;
+
+create or replace function agent_board.list_board_members(p_board_id uuid)
+returns table(
+  membership_id uuid,
+  board_id uuid,
+  agent_id uuid,
+  handle text,
+  display_name text,
+  agent_type text,
+  membership_state text,
+  role text,
+  created_by_agent_id uuid,
+  membership_created_at timestamptz,
+  membership_updated_at timestamptz
+)
+language plpgsql
+stable
+security definer
+set search_path = agent_board, public
+as $$
+declare
+  v_actor uuid := agent_board.current_agent_id();
+begin
+  -- Authorization precedes disclosure. Creator identity is deliberately absent:
+  -- only the caller's latest membership row can establish current authority.
+  if v_actor is null
+     or not exists (
+       select 1
+         from (
+           select bm.membership_state, bm.role
+             from agent_board.board_memberships bm
+            where bm.board_id = p_board_id
+              and bm.agent_id = v_actor
+            order by bm.created_at desc, bm.id desc
+            limit 1
+         ) actor_standing
+        where actor_standing.membership_state in ('joined', 'subscribed')
+          and actor_standing.role in ('owner', 'admin')
+     ) then
+    raise exception 'only a board owner or admin may list board members'
+      using errcode = '42501';
+  end if;
+
+  -- Choose exactly one current row per agent before filtering to active states.
+  return query
+  select
+    latest.id,
+    latest.board_id,
+    latest.agent_id,
+    a.handle,
+    a.display_name,
+    a.agent_type,
+    latest.membership_state,
+    latest.role,
+    latest.created_by_agent_id,
+    latest.created_at,
+    latest.updated_at
+  from (
+    select distinct on (bm.agent_id) bm.*
+      from agent_board.board_memberships bm
+     where bm.board_id = p_board_id
+     order by bm.agent_id, bm.created_at desc, bm.id desc
+  ) latest
+  join agent_board.agents a on a.id = latest.agent_id
+  where latest.membership_state in ('joined', 'subscribed')
+  order by
+    case latest.role
+      when 'owner' then 0
+      when 'admin' then 1
+      when 'member' then 2
+      when 'observer' then 3
+    end,
+    lower(a.handle),
+    latest.agent_id;
+end;
+$$;
+
+comment on function agent_board.list_board_members(uuid) is
+  'Owner/admin-gated active board roster. Fails 42501 for a null actor (including service_role through this user-facing path), creator without current standing, or any caller whose latest board membership is not active owner/admin. Returns each agent''s latest row by created_at desc, id desc only when joined/subscribed, ordered owner/admin/member/observer then lower(handle), agent_id. Board-scoped and metadata-free.';
+
+revoke all on function agent_board.list_board_members(uuid) from public, anon;
+grant execute on function agent_board.list_board_members(uuid) to authenticated, service_role;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@consiliency/agent-board-schema",
-  "version": "1.51.0",
+  "version": "1.53.0",
   "description": "Canonical, immutable, exact-pinnable agent_board schema bundle: ordered SQL migrations, digest + compatibility manifest, and deterministic materialize/plan/check tooling for adopters.",
   "repository": "https://github.com/Consiliency/message-board.git",
   "type": "module",

package/schema-manifest.json

@@ -2,7 +2,7 @@
   "schema": "agent_board_schema_manifest.v1",
   "interface": "IF-0-MBPLANE-BUNDLE-1",
   "package": "@consiliency/agent-board-schema",
-  "packageVersion": "1.51.0",
+  "packageVersion": "1.53.0",
   "schemaVersion": 8,
   "minClientVersion": "1.1.0",
   "source": {
@@ -46,8 +46,8 @@
       "usage": "upsert (retention/monitoring defaults; on conflict do nothing)"
     }
   ],
-  "migrationCount": 150,
-  "aggregateSha256": "94b8945ab506a02a31ffd0ed6daad37d5655f209214558ca868dbb22693fb57d",
+  "migrationCount": 151,
+  "aggregateSha256": "332c33f67f08d8bcdbf71ef2568ea03f6cd16ccdeaac4d1944259ab28012900c",
   "migrations": [
     {
       "order": 0,
@@ -1398,6 +1398,15 @@
       "sourceRef": "message-board",
       "bytes": 19273,
       "sha256": "f10d8f539538fcf63d5b3538650160e7a4f9e345ccb7476b21756675f2b6ab80"
+    },
+    {
+      "order": 150,
+      "id": "20261003000100_agent_board_room_roster",
+      "filename": "20261003000100_agent_board_room_roster.sql",
+      "origin": "message-board-forward",
+      "sourceRef": "message-board",
+      "bytes": 3993,
+      "sha256": "7bcb993b9943cd7e6bd3777c90c32e9cb32e53415262f8c58a8d75678a449853"
     }
   ],
   "excludedBridge": {

package/src/tooling.test.mjs

@@ -38,9 +38,9 @@ describe('manifest integrity', () => {
     expect(manifest.schemaVersion).toBe(8);
     expect(manifest.minClientVersion).toMatch(/^\d+\.\d+\.\d+$/);
   });
-  it('registers the four MBAUTHZ + four MBSENDAUTHZ + four MBSESSION + four MBDELEG + three MBFED + three MBHARDEN + two MBPORTALGATE + two MBPORTAL-PR32 + two ROOMOWN + two ROOMLINK + one ROOMDELEG + one LOCALAUTH + one ROOMUIAPI + one FEDSESSION + one FEDSESSION-AUTOJOIN + one GATENULL + one MEMBSTATE + one AGENTSDIR + one LEAVEIDEM + one ROLERESET + one MBROWID + one MBHYGIENE + one MBCONSENT-A + one MBCONSENT-B(a) + one MBCONSENT-B(i) + one MBCONSENT-B(ii) + one MBCONSENT-B(iii) + one MBHARDEN-#97 + one MBHARDEN-#118 + one INVITEPOLICY + one OBSGATE + one OBSGATE-2 + one OBSGATE-3 + one OBSGATE-4 + one FLEETMACHINERLS + one RESOLVENOOP + one ROOMDELEG-LANEB + one CLAIMKEY + two MINTHARDEN + one FLEETMACHINEHIJACK + one CLAIMGATE-SHADOW + one CLAIMGATE-ENFORCE + one FLEETMACHINEREACTIVATION + one DELEGCAPCEILING + one FLEETMACHINERECLAIM + one DELEGSOLEWRITER + one FLEETDOMAINRECLAIM + five ATOMICFLEETONBOARDING (onboarding + ceiling-lock + revocation-evidence + fedsession-gate + fedsession-lock-order) + one OUTBOXWAKE + one ENROLLLOCKORDER + one FEDPROVIDERABSENCE + one WAKERECOVERY + one CONSENTRECONCILE + one ENROLLRESUMPTION + one SIGNEDAUTHORITY + one SIGNERLIFECYCLE + one LEDGERAUTHORITY + one CEILINGLOCKCOMMENT + one LEDGERBOARDCREATE + one RECEIPTSUBJECTGATE + one TASKTHREADLOCKORDER + one CLAIMSUBJECTGATE + one FEDSESSIONIDENTITYGATE + one FEDIDENTITYSLUG + one INVITENODOWNGRADE + one SIGNEDWRITEFLAG + one SIGNEDWRITEMODEL + one RTCREDCLAIM + one ORIGINPOSTURE + one BOARDCLAIMPOLICY + one HEARTBEATPRESERVE + one LIVENESSDENOM + one OWNERLESSRENEWTTL + one OWNERLESSQUOTACENSUS + one FLEETDOMAINNODOWNGRADE + one OWNERLESSQUOTACONVERGE + one ADVISORYREVERTRESET + one CLAIMPOLICYRACE + one CLAIMPOLICYLOCKGRANT + one SESSIONCHALLENGESUPERSEDE forward migrations (migrationCount = prior 113 + 5 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 = 150)', () => {
+  it('registers the four MBAUTHZ + four MBSENDAUTHZ + four MBSESSION + four MBDELEG + three MBFED + three MBHARDEN + two MBPORTALGATE + two MBPORTAL-PR32 + two ROOMOWN + two ROOMLINK + one ROOMDELEG + one LOCALAUTH + one ROOMUIAPI + one FEDSESSION + one FEDSESSION-AUTOJOIN + one GATENULL + one MEMBSTATE + one AGENTSDIR + one LEAVEIDEM + one ROLERESET + one MBROWID + one MBHYGIENE + one MBCONSENT-A + one MBCONSENT-B(a) + one MBCONSENT-B(i) + one MBCONSENT-B(ii) + one MBCONSENT-B(iii) + one MBHARDEN-#97 + one MBHARDEN-#118 + one INVITEPOLICY + one OBSGATE + one OBSGATE-2 + one OBSGATE-3 + one OBSGATE-4 + one FLEETMACHINERLS + one RESOLVENOOP + one ROOMDELEG-LANEB + one CLAIMKEY + two MINTHARDEN + one FLEETMACHINEHIJACK + one CLAIMGATE-SHADOW + one CLAIMGATE-ENFORCE + one FLEETMACHINEREACTIVATION + one DELEGCAPCEILING + one FLEETMACHINERECLAIM + one DELEGSOLEWRITER + one FLEETDOMAINRECLAIM + five ATOMICFLEETONBOARDING (onboarding + ceiling-lock + revocation-evidence + fedsession-gate + fedsession-lock-order) + one OUTBOXWAKE + one ENROLLLOCKORDER + one FEDPROVIDERABSENCE + one WAKERECOVERY + one CONSENTRECONCILE + one ENROLLRESUMPTION + one SIGNEDAUTHORITY + one SIGNERLIFECYCLE + one LEDGERAUTHORITY + one CEILINGLOCKCOMMENT + one LEDGERBOARDCREATE + one RECEIPTSUBJECTGATE + one TASKTHREADLOCKORDER + one CLAIMSUBJECTGATE + one FEDSESSIONIDENTITYGATE + one FEDIDENTITYSLUG + one INVITENODOWNGRADE + one SIGNEDWRITEFLAG + one SIGNEDWRITEMODEL + one RTCREDCLAIM + one ORIGINPOSTURE + one BOARDCLAIMPOLICY + one HEARTBEATPRESERVE + one LIVENESSDENOM + one OWNERLESSRENEWTTL + one OWNERLESSQUOTACENSUS + one FLEETDOMAINNODOWNGRADE + one OWNERLESSQUOTACONVERGE + one ADVISORYREVERTRESET + one CLAIMPOLICYRACE + one CLAIMPOLICYLOCKGRANT + one SESSIONCHALLENGESUPERSEDE + one ROOMCONTRACT forward migrations (migrationCount = prior 113 + 5 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 = 151)', () => {
     expect(manifest.migrationCount).toBe(manifest.migrations.length);
-    expect(manifest.migrationCount).toBe(150);
+    expect(manifest.migrationCount).toBe(151);
     // MBSESSION switched enforcement on (scoped-send re-grant): the client-visible
     // schema version bumped to 8. MBDELEG tightens delegation and MBFED adds only
     // enrollment-only additive surface (identity_providers registry, enrollment audit,
@@ -335,6 +335,8 @@ describe('manifest integrity', () => {
       // is unchanged; mint_fleet_agent_session now names an eviction challenge_superseded
       // so it is retryable without making nonce_replay retryable with it.
       '20261002000100_agent_board_session_challenge_supersede.sql',
+      // ROOMCONTRACT: owner/admin active roster RPC plus self-membership role.
+      '20261003000100_agent_board_room_roster.sql',
     ]) {
       expect(names.has(f)).toBe(true);
     }

package/tests/agent_board_agent_liveness.test.sql

@@ -263,7 +263,9 @@ select is(
   (select string_agg(c.relname, ', ' order by c.relname)
      from pg_class c join pg_namespace n on n.oid = c.relnamespace
     where n.nspname = 'agent_board' and c.relkind = 'v'
-      and pg_get_viewdef(c.oid) ~ 'presence'),
+      -- literals KEPT on purpose: v_ops_table_growth names presence as a row-count subject
+      -- inside a string literal, and it is in the expected set below
+      and agent_board_test.stripped_viewdef(c.oid, true) ~ agent_board_test.qname_re('presence')),
   'v_agent_dashboard, v_agent_liveness, v_ops_presence_heartbeats, v_ops_table_growth',
   'AL-11 CLASS: exactly these four agent_board views read presence — a new one fails here and names itself, so its join direction gets stated instead of assumed');
 

package/tests/agent_board_atomic_fleet_onboarding.test.sql

@@ -99,17 +99,14 @@
 -- assertion description. Where it has none, that is stated too. An honest narrow
 -- claim beats a broad false one.
 --
--- WHAT IS *STILL* RAW IN THIS FILE. Only the NINE positional claims were converted.
--- Everything else here still reads raw text and is knowingly left alone, so this
--- file must not be read as "the masking class is closed in
--- agent_board_atomic_fleet_onboarding.test.sql". The remainder, enumerated so the
--- next reader does not have to trust a summary:
---   * the 23 `pg_get_functiondef(...) like '%...%'` PRESENCE assertions (26 calls;
---     two assertions read more than one function). A comment mentioning the
---     pattern satisfies them exactly as it did the positional ones; one was
---     demonstrated silenced that way (#198). They are presence claims, so a
---     comment can only make a MISSING construct look present -- the same
---     fail-open direction, on weaker claims;
+-- WHAT IS *STILL* RAW IN THIS FILE. Only the NINE positional claims were converted
+-- by #196; the `pg_get_functiondef(...) like '%...%'` PRESENCE assertions stayed raw
+-- until Consiliency/message-board#417 PR 3, which moved them onto
+-- `stripped_body(<fn>, true)` -- comments removed, LITERALS KEPT, because several of
+-- them look for a string literal (`fleet_onboarding.v1`, a raise message). A
+-- comment mentioning the pattern used to satisfy them exactly as it did the
+-- positional ones; one was demonstrated silenced that way (#198). What remains raw,
+-- so this file is not read as "the masking class is closed":
 --   * the ONE remaining deliberate raw read, added by message-board#277: the
 --     KNOWN-STALE record for set_board_authority_ceiling's inline every-reader
 --     claim. Its evidence IS a comment, so a stripped body cannot see it by
@@ -181,77 +178,77 @@ select function_privs_are(
   'fleet redemption helper is service-role-only'
 );
 select ok(
-  pg_get_functiondef('agent_board.onboard_federated_fleet_agent(text,text,text,jsonb,text,text,text,text,boolean,text,text,text[],text[],text,uuid,uuid,text,text,text,text,text,text,text)'::regprocedure)
+  agent_board_test.stripped_body('agent_board.onboard_federated_fleet_agent(text,text,text,jsonb,text,text,text,text,boolean,text,text,text[],text[],text,uuid,uuid,text,text,text,text,text,text,text)'::regprocedure, true)
     like '%fleet_onboarding.v1%',
   'atomic onboarding returns the frozen contract version'
 );
 select ok(
-  pg_get_functiondef('agent_board.onboard_federated_fleet_agent(text,text,text,jsonb,text,text,text,text,boolean,text,text,text[],text[],text,uuid,uuid,text,text,text,text,text,text,text)'::regprocedure)
+  agent_board_test.stripped_body('agent_board.onboard_federated_fleet_agent(text,text,text,jsonb,text,text,text,text,boolean,text,text,text[],text[],text,uuid,uuid,text,text,text,text,text,text,text)'::regprocedure, true)
     like '%for update%',
   'atomic onboarding catalog-pins row locking'
 );
 select ok(
-  pg_get_functiondef('agent_board.enroll_federated_identity(text,text,text,jsonb,text,text,text,text,boolean,text,text,text[],text[],text)'::regprocedure)
+  agent_board_test.stripped_body('agent_board.enroll_federated_identity(text,text,text,jsonb,text,text,text,text,boolean,text,text,text[],text[],text)'::regprocedure, true)
     like '%pg_advisory_xact_lock%',
   'exact-key create-or-reuse is serialized by fingerprint'
 );
 select ok(
-  pg_get_functiondef('agent_board.onboard_federated_fleet_agent(text,text,text,jsonb,text,text,text,text,boolean,text,text,text[],text[],text,uuid,uuid,text,text,text,text,text,text,text)'::regprocedure)
+  agent_board_test.stripped_body('agent_board.onboard_federated_fleet_agent(text,text,text,jsonb,text,text,text,text,boolean,text,text,text[],text[],text,uuid,uuid,text,text,text,text,text,text,text)'::regprocedure, true)
     like '%pg_advisory_xact_lock(hashtextextended(p_agent_public_key_fingerprint, 0))%',
   'composed onboarding serializes identity disposition by fingerprint'
 );
 select ok(
-  pg_get_functiondef('agent_board.enroll_federated_identity(text,text,text,jsonb,text,text,text,text,boolean,text,text,text[],text[],text)'::regprocedure)
+  agent_board_test.stripped_body('agent_board.enroll_federated_identity(text,text,text,jsonb,text,text,text,text,boolean,text,text,text[],text[],text)'::regprocedure, true)
     like '%fleet invite requires atomic fleet onboarding%',
   'legacy enrollment rejects bounded invites before writes'
 );
 select ok(
-  pg_get_functiondef('agent_board._redeem_invite_for_agent(text,uuid)'::regprocedure)
+  agent_board_test.stripped_body('agent_board._redeem_invite_for_agent(text,uuid)'::regprocedure, true)
     like '%reserved for atomic fleet onboarding%',
   'generic ROOMLINK redemption rejects bounded invites'
 );
 select ok(
-  pg_get_functiondef('agent_board.onboard_federated_fleet_agent(text,text,text,jsonb,text,text,text,text,boolean,text,text,text[],text[],text,uuid,uuid,text,text,text,text,text,text,text)'::regprocedure)
+  agent_board_test.stripped_body('agent_board.onboard_federated_fleet_agent(text,text,text,jsonb,text,text,text,text,boolean,text,text,text[],text[],text,uuid,uuid,text,text,text,text,text,text,text)'::regprocedure, true)
     like '%phase_worker%worker%reviewer%reviewer%',
   'only bounded worker and reviewer role pairs are admitted'
 );
 select ok(
-  pg_get_functiondef('agent_board.onboard_federated_fleet_agent(text,text,text,jsonb,text,text,text,text,boolean,text,text,text[],text[],text,uuid,uuid,text,text,text,text,text,text,text)'::regprocedure)
+  agent_board_test.stripped_body('agent_board.onboard_federated_fleet_agent(text,text,text,jsonb,text,text,text,text,boolean,text,text,text[],text[],text,uuid,uuid,text,text,text,text,text,text,text)'::regprocedure, true)
     like '%signing_key_id is distinct from v_enroll.signing_key_id%',
   'binding replay pins the exact proven signing key'
 );
 select ok(
-  pg_get_functiondef('agent_board.onboard_federated_fleet_agent(text,text,text,jsonb,text,text,text,text,boolean,text,text,text[],text[],text,uuid,uuid,text,text,text,text,text,text,text)'::regprocedure)
+  agent_board_test.stripped_body('agent_board.onboard_federated_fleet_agent(text,text,text,jsonb,text,text,text,text,boolean,text,text,text[],text[],text,uuid,uuid,text,text,text,text,text,text,text)'::regprocedure, true)
     like '%v_inv.board_id is distinct from p_board_id%',
   'requested board is checked against the locked invite before writes'
 );
 select ok(
-  pg_get_functiondef('agent_board.onboard_federated_fleet_agent(text,text,text,jsonb,text,text,text,text,boolean,text,text,text[],text[],text,uuid,uuid,text,text,text,text,text,text,text)'::regprocedure)
+  agent_board_test.stripped_body('agent_board.onboard_federated_fleet_agent(text,text,text,jsonb,text,text,text,text,boolean,text,text,text[],text[],text,uuid,uuid,text,text,text,text,text,text,text)'::regprocedure, true)
     like '%not v_completed_replay%v_inv.expires_at <= now()%v_inv.uses_count >= v_inv.max_uses%',
   'only a complete active replay may bypass expiry and exhaustion'
 );
 select ok(
-  pg_get_functiondef('agent_board.onboard_federated_fleet_agent(text,text,text,jsonb,text,text,text,text,boolean,text,text,text[],text[],text,uuid,uuid,text,text,text,text,text,text,text)'::regprocedure)
+  agent_board_test.stripped_body('agent_board.onboard_federated_fleet_agent(text,text,text,jsonb,text,text,text,text,boolean,text,text,text[],text[],text,uuid,uuid,text,text,text,text,text,text,text)'::regprocedure, true)
     like '%v_inv.revoked_at is not null%a.status = ''active''%_grant_within_ceiling%',
   'revocation and current creator authority gate every fleet replay'
 );
 select ok(
-  pg_get_functiondef('agent_board.onboard_federated_fleet_agent(text,text,text,jsonb,text,text,text,text,boolean,text,text,text[],text[],text,uuid,uuid,text,text,text,text,text,text,text)'::regprocedure)
+  agent_board_test.stripped_body('agent_board.onboard_federated_fleet_agent(text,text,text,jsonb,text,text,text,text,boolean,text,text,text[],text[],text,uuid,uuid,text,text,text,text,text,text,text)'::regprocedure, true)
     like '%a.id = any(array[v_inv.created_by_agent_id, v_existing_agent_id])%order by a.id for update%bm.agent_id = v_inv.created_by_agent_id%order by bm.id for update%_grant_within_ceiling%',
   'creator and enrolled principals lock in UUID order before creator authority'
 );
 select ok(
-  pg_get_functiondef('agent_board.onboard_federated_fleet_agent(text,text,text,jsonb,text,text,text,text,boolean,text,text,text[],text[],text,uuid,uuid,text,text,text,text,text,text,text)'::regprocedure)
+  agent_board_test.stripped_body('agent_board.onboard_federated_fleet_agent(text,text,text,jsonb,text,text,text,text,boolean,text,text,text[],text[],text,uuid,uuid,text,text,text,text,text,text,text)'::regprocedure, true)
     like '%board_invite_redemptions red%order by red.id for update%bm.agent_id = v_enroll.agent_id%order by bm.id for update%select exists%',
   'complete-replay proof locks redemption and membership first'
 );
 select ok(
-  pg_get_functiondef('agent_board.onboard_federated_fleet_agent(text,text,text,jsonb,text,text,text,text,boolean,text,text,text[],text[],text,uuid,uuid,text,text,text,text,text,text,text)'::regprocedure)
+  agent_board_test.stripped_body('agent_board.onboard_federated_fleet_agent(text,text,text,jsonb,text,text,text,text,boolean,text,text,text[],text[],text,uuid,uuid,text,text,text,text,text,text,text)'::regprocedure, true)
     like '%perform 1 from agent_board.fleet_harness_registrations%perform 1 from agent_board.fleet_repo_scopes%perform 1 from agent_board.fleet_machine_agents%',
   'every matching harness, repo, and binding history row is locked before reuse'
 );
 select ok(
-  pg_get_functiondef('agent_board.revoke_fleet_machine_agent_binding(uuid,uuid,text,jsonb)'::regprocedure)
+  agent_board_test.stripped_body('agent_board.revoke_fleet_machine_agent_binding(uuid,uuid,text,jsonb)'::regprocedure, true)
     like '%lifecycle_state = ''revoked''%',
   'binding revocation is a permanent tombstone'
 );
@@ -320,17 +317,17 @@ select ok(
   'subtree primitive locks the agent before signing keys [SOLE PIN: no isolation spec discriminates this ordering -- measured against all 20]'
 );
 select ok(
-  pg_get_functiondef('agent_board._revoke_agent_principal(uuid,uuid,text)'::regprocedure)
+  agent_board_test.stripped_body('agent_board._revoke_agent_principal(uuid,uuid,text)'::regprocedure, true)
     like '%from agent_board.agent_signing_keys%order by id%for update%',
   'subtree primitive locks signing keys in UUID order'
 );
 select ok(
-  pg_get_functiondef('agent_board.revoke_agent_subtree(uuid,uuid,text)'::regprocedure)
+  agent_board_test.stripped_body('agent_board.revoke_agent_subtree(uuid,uuid,text)'::regprocedure, true)
     like '%select agent_id from subtree order by agent_id%',
   'agent subtree enumerates principals in UUID order'
 );
 select ok(
-  pg_get_functiondef('agent_board.revoke_human_subtree(uuid,uuid,text)'::regprocedure)
+  agent_board_test.stripped_body('agent_board.revoke_human_subtree(uuid,uuid,text)'::regprocedure, true)
     like '%where owner_user_id = p_owner_user_id%order by id%',
   'human subtree enumerates principals in UUID order'
 );
@@ -366,17 +363,17 @@ select has_pk('agent_board', 'fleet_human_revocations',
 select has_trigger('agent_board', 'agents', 'agents_protect_federation_contract',
   'agents protect their reserved federation contract at every write path');
 select ok(
-  pg_get_functiondef('agent_board.create_fleet_onboarding_invite(uuid,uuid,text,text,text,text,text,text,text,integer,timestamp with time zone,uuid,jsonb)'::regprocedure)
+  agent_board_test.stripped_body('agent_board.create_fleet_onboarding_invite(uuid,uuid,text,text,text,text,text,text,text,integer,timestamp with time zone,uuid,jsonb)'::regprocedure, true)
     like '%from agent_board.boards b%where b.id = p_board_id%for update%v_board.status <> ''active''%',
   'bounded invite mint locks and requires an active board'
 );
 select ok(
-  pg_get_functiondef('agent_board.onboard_federated_fleet_agent(text,text,text,jsonb,text,text,text,text,boolean,text,text,text[],text[],text,uuid,uuid,text,text,text,text,text,text,text)'::regprocedure)
+  agent_board_test.stripped_body('agent_board.onboard_federated_fleet_agent(text,text,text,jsonb,text,text,text,text,boolean,text,text,text[],text[],text,uuid,uuid,text,text,text,text,text,text,text)'::regprocedure, true)
     like '%from agent_board.boards b%where b.id = v_inv.board_id%for update%v_board.status <> ''active''%',
   'atomic onboarding locks and requires the invite board to remain active'
 );
 select ok(
-  pg_get_functiondef('agent_board.enroll_federated_identity(text,text,text,jsonb,text,text,text,text,boolean,text,text,text[],text[],text)'::regprocedure)
+  agent_board_test.stripped_body('agent_board.enroll_federated_identity(text,text,text,jsonb,text,text,text,text,boolean,text,text,text[],text[],text)'::regprocedure, true)
     like '%from auth.users u where u.id = v_owner_user_id for update%fleet_human_revocations%r.issuer = p_issuer and r.subject = p_subject%',
   'identity enrollment locks the human owner and rejects durable total revocation'
 );
@@ -434,7 +431,7 @@ select has_function(
   'board-keyed ceiling advisory lock helper exists'
 );
 select ok(
-  pg_get_functiondef('agent_board._lock_board_authority_ceiling(uuid)'::regprocedure)
+  agent_board_test.stripped_body('agent_board._lock_board_authority_ceiling(uuid)'::regprocedure, true)
     like '%pg_advisory_xact_lock(%hashtextextended(''agent_board.board_authority_ceilings:'' || p_board_id::text, 0)%',
   'the ceiling lock key is derived once, from the board id, in a transaction advisory lock'
 );
@@ -530,9 +527,8 @@ create temp table _ceiling_class as
 select 'agent_board.' || regexp_replace(p.oid::regprocedure::text, '^([^(]*\.)?', '') as ident,
        p.proname::text as name,   -- text, not `name`: array_agg(name) has no is(name[], text[]) overload
        (strpos(lower(agent_board_test.stripped_body(p.oid)), '_grant_within_ceiling') > 0) as is_reader,
-       (agent_board_test.stripped_body(p.oid) ~*
-          '(insert\s+into|update|delete\s+from|merge\s+into)\s+(only\s+)?(agent_board\.)?board_authority_ceilings\M') as is_writer,
-       (agent_board_test.stripped_body(p.oid) ~* '\magent_board\._lock_board_authority_ceiling\s*\(') as serialized
+       (agent_board_test.stripped_body(p.oid) ~ agent_board_test.write_re('board_authority_ceilings')) as is_writer,
+       (agent_board_test.stripped_body(p.oid) ~ agent_board_test.call_re('_lock_board_authority_ceiling')) as serialized
   from pg_proc p
   join pg_namespace n on n.oid = p.pronamespace
  where n.nspname = 'agent_board';
@@ -640,6 +636,7 @@ select is(
 -- assertion fails and names itself -- delete it, and re-derive the COMMENT's blocks
 -- from the catalog while you are there. Raw prosrc on purpose: the evidence IS a
 -- comment, so the stripped body cannot see it (presence claim, not positional).
+-- source-scan: raw-subject the evidence IS a comment; a stripped body cannot see it by construction
 select ok(
   (select p.prosrc from pg_proc p join pg_namespace n on n.oid = p.pronamespace
     where n.nspname = 'agent_board' and p.proname = 'set_board_authority_ceiling')

package/tests/agent_board_authbound_boundary.test.sql

@@ -133,8 +133,9 @@ select ok(
       join pg_namespace n on n.oid = p.pronamespace
      where n.nspname = 'agent_board'
        and p.proname = '_record_signed_write_evidence'
-       and pg_get_functiondef(p.oid) like '%authbound%'
-       and pg_get_functiondef(p.oid) like '%metadata-safe%'
+       -- literals kept: the posture is recorded as jsonb string values, not as code
+       and agent_board_test.stripped_body(p.oid, true) like '%authbound%'
+       and agent_board_test.stripped_body(p.oid, true) like '%metadata-safe%'
   ),
   'signed-write evidence records AUTHBOUND metadata-safe posture'
 );
@@ -146,7 +147,7 @@ select ok(
       join pg_namespace n on n.oid = p.pronamespace
      where n.nspname = 'agent_board'
        and p.proname = 'current_agent_id'
-       and pg_get_functiondef(p.oid) like '%agent_credential_id%'
+       and agent_board_test.stripped_body(p.oid, true) like '%agent_credential_id%'
   ),
   'current_agent_id records AUTHBOUND credential-claim boundary'
 );

package/tests/agent_board_board_claim_policy.test.sql

@@ -431,16 +431,27 @@ end $$;
 -- itself here rather than silently inheriting a policy change that resets nothing.
 --
 -- Two independent bounds, because neither is sufficient alone. BCP-19 is a source scan and a source
--- scan has a floor — it sees `set claim_policy` and not, say, a dynamic EXECUTE. BCP-20 is the
--- privilege bound underneath it: NO role holds UPDATE on agent_board.boards, so the column cannot
--- be written from a session at all, only from a SECURITY DEFINER function (which BCP-19 enumerates)
--- or by the table owner. `boards` also carries no user triggers, so there is no third path.
+-- scan has a floor — it sees a statement assigning the column and not, say, one assembled from
+-- fragments inside a dynamic EXECUTE. BCP-20 is the privilege bound underneath it: NO role holds
+-- UPDATE on agent_board.boards, so the column cannot be written from a session at all, only from a
+-- SECURITY DEFINER function (which BCP-19 enumerates) or by the table owner. `boards` also carries
+-- no user triggers, so there is no third path.
+--
+-- BCP-19's population is `col_write_re('boards','claim_policy')` over EVERY non-system schema —
+-- the same object and the same scope as CPR-6 in agent_board_claimpolicy_race.test.sql, so the
+-- two cannot disagree about who writes the column. It used to be the literal `set\s+claim_policy`
+-- over agent_board only (#416): that spelling missed `SET CLAIM_POLICY`, the multi-column
+-- `set (slug, claim_policy) = (…)`, a MERGE's `then update set`, an INSERT naming the column, and
+-- every no-column-list form that writes all columns — and a SECURITY DEFINER writer living in
+-- another schema was outside its scope entirely. Those forms are pinned by CPR-0's rows.
 -- ---------------------------------------------------------------------------
 select is(
   (select coalesce(string_agg(p.proname, ', ' order by p.proname), '')
      from pg_proc p join pg_namespace n on n.oid = p.pronamespace
-    where n.nspname = 'agent_board'
-      and agent_board_test.stripped_body(p.oid, true) ~ 'set\s+claim_policy'),
+    where n.nspname not in ('pg_catalog', 'information_schema', 'agent_board_test')
+      and n.nspname !~ '^pg_'
+      and p.prolang <> (select oid from pg_language where lanname = 'internal')
+      and agent_board_test.stripped_body(p.oid, true) ~ agent_board_test.col_write_re('boards', 'claim_policy')),
   'set_board_claim_policy',
   'BCP-19 CLASS: set_board_claim_policy is the ONLY function that writes boards.claim_policy — a second writer would need the same advisory-revert reset and fails here instead of being remembered');
 

package/tests/agent_board_claim_subject_gate.test.sql

@@ -863,8 +863,7 @@ select is(
   (select coalesce(string_agg(p.proname, ',' order by p.proname), '(none)')
      from pg_proc p
     where p.pronamespace = 'agent_board'::regnamespace
-      and lower(agent_board_test.stripped_body(p.oid, true))
-          ~ '(insert\s+into|merge\s+into|update|delete\s+from|truncate)(\s+table)?(\s+only)?\s+(("?agent_board"?\s*\.\s*)?claims\M|("?agent_board"?\s*\.\s*)?"claims")'),
+      and agent_board_test.stripped_body(p.oid, true) ~ agent_board_test.write_re('claims')),
   'acquire_claim,reclaim_fleet_machine,release_claim,renew_claim,set_board_claim_policy',
   'catalog: these five are the ONLY agent_board functions that write claims (insert/merge/update/delete/TRUNCATE) -- a new writer names itself here');
 
@@ -872,10 +871,10 @@ select is(
   (select coalesce(string_agg(p.proname, ',' order by p.proname), '(none)')
      from pg_proc p
     where p.pronamespace = 'agent_board'::regnamespace
-      and lower(agent_board_test.stripped_body(p.oid, true))
-          ~ '(insert\s+into|merge\s+into)(\s+only)?\s+(("?agent_board"?\s*\.\s*)?claims\M|("?agent_board"?\s*\.\s*)?"claims")'
-      and lower(agent_board_test.stripped_body(p.oid))
-          !~ 'not\s+agent_board\._agent_can_access_thread\s*\('),
+      and agent_board_test.stripped_body(p.oid, true) ~ agent_board_test.stmt_re('insert into|merge into', 'claims')
+      and agent_board_test.stripped_body(p.oid)
+          !~ agent_board_test.re('\m' || agent_board_test.ci_re('not') || '\s+'
+                                 || agent_board_test.call_frag('_agent_can_access_thread', false))),
   '(none)',
   'catalog: every function that CREATES a claims row contains a REFUSING reference to _agent_can_access_thread (source shape only -- assertion 2 is what proves it refuses)');
 
@@ -893,8 +892,8 @@ select is(
   (select coalesce(string_agg(p.proname, ',' order by p.proname), '(none)')
      from pg_proc p
     where p.pronamespace = 'agent_board'::regnamespace
-      and lower(agent_board_test.stripped_body(p.oid, true))
-          ~ '(delete\s+from|merge\s+into|truncate)(\s+table)?(\s+only)?\s+(("?agent_board"?\s*\.\s*)?claims\M|("?agent_board"?\s*\.\s*)?"claims")'),
+      and agent_board_test.stripped_body(p.oid, true)
+          ~ agent_board_test.stmt_re('delete from|merge into|truncate|truncate table', 'claims')),
   '(none)',
   'catalog: NOTHING REAPS -- no agent_board function deletes or truncates a claims row, which is what makes the ratified permanence true by construction');
 

package/tests/agent_board_claimkey.test.sql

@@ -206,7 +206,7 @@ select set_eq(
        join pg_namespace n on n.oid = p.pronamespace
       where n.nspname = 'agent_board'
         and p.prokind = 'f'
-        and pg_get_functiondef(p.oid) ~* '(insert\s+into|update)\s+(agent_board\.)?claims\M' $$,
+        and agent_board_test.stripped_body(p.oid, true) ~ agent_board_test.write_re('claims') $$,
   -- reclaim_fleet_machine (#150) is a fourth writer: on operator reclaim it RELEASES the squatter's
   -- active machine claim(s) on the reclaimed fingerprint so the new owner can acquire. It routes the
   -- key through _canonical_claim_key (assertion 25 stays 0); its positive state claim (status set to
@@ -225,7 +225,7 @@ select is(
      join pg_namespace n on n.oid = p.pronamespace
     where n.nspname = 'agent_board'
       and p.prokind = 'f'
-      and agent_board_test.stripped_body(p.oid) ~* '(insert\s+into|update)\s+(agent_board\.)?claims\M'
+      and agent_board_test.stripped_body(p.oid) ~ agent_board_test.write_re('claims')
       -- #400: SCOPED TO WRITERS THAT HAVE A KEY TO NORMALIZE. A claims writer whose body never
       -- mentions resource_key cannot set one -- an UPDATE must name the column in its SET list and
       -- an INSERT must name it in its column list (resource_key is NOT NULL) -- so requiring it to
@@ -234,19 +234,22 @@ select is(
       -- is still in the population and still fails closed. STATED HOLE: `insert into claims select *
       -- from ...` names no column and would slip past, which is the same shape assertion 24's regex
       -- already cannot see.
-      and agent_board_test.stripped_body(p.oid) ~* '\mresource_key\M'
+      -- The column token QUALIFIED OR BARE (col_ref_frag): `col_frag` alone is the SET-list form
+      -- and rejects a preceding dot, so `c.resource_key` would drop a writer out of this set
+      -- (measured: _claimgate_promotion_blockers and reclaim_fleet_machine).
+      and agent_board_test.stripped_body(p.oid) ~ agent_board_test.re(agent_board_test.col_ref_frag('resource_key'))
       -- message-board#196 Bucket B: read RAW, one comment naming _canonical_claim_key
       -- dropped a bypass writer out of this set and the count went to 0 green.
       -- anchored to the CALL shape: a bare-substring `!~` is satisfied by any
       -- identifier containing the name, e.g. an argument `p_canonical_claim_key`.
-      -- SCHEMA-QUALIFIED, because a bare-name anchor proves call SYNTAX, not callee
-      -- IDENTITY: `\m_canonical_claim_key\s*\(` also matches
+      -- SCHEMA-QUALIFIED (`bare_ok => false`), because a bare-name anchor proves call
+      -- SYNTAX, not callee IDENTITY: the old `\m_canonical_claim_key\s*\(` also matched
       -- `zz_other._canonical_claim_key(...)` (measured true). Every live call
       -- site in agent_board is `agent_board.`-qualified, so requiring the
       -- qualification costs nothing today and is fail-CLOSED if someone later writes
       -- an unqualified call (it reads as NOT calling). Overload count is pinned
       -- separately, so schema + name is the identity.
-      and agent_board_test.stripped_body(p.oid) !~* '\magent_board\._canonical_claim_key\s*\('),
+      and agent_board_test.stripped_body(p.oid) !~ agent_board_test.call_re('_canonical_claim_key', false)),
   0,
   'every catalog-enumerated claims writer routes its resource_key through _canonical_claim_key');