@consiliency/agent-board-schema 1.56.0 → 1.58.0

package/fixtures/already-applied.json

@@ -616,6 +616,14 @@
   {
    "id": "20261006000100_agent_board_room_roster_active_first",
    "sha256": "637480feeca07dbb2fe7a4624dc6d063d0c1f23e6ea3c3ee9a946ad43de4e34e"
+  },
+  {
+   "id": "20261007000100_agent_board_onboard_requests",
+   "sha256": "fbdbecfb1c78e2d1b16b37845a74082dcdf1241c61c0356b992e1e01baddc41c"
+  },
+  {
+   "id": "20261008000100_agent_board_hosted_delegates",
+   "sha256": "ef57647e29b8afc788dc8c481a0165b10a3c448aae12b8901901b653216bc3a8"
   }
  ]
 }

package/migrations/20261007000100_agent_board_onboard_requests.sql

@@ -0,0 +1,139 @@
+-- ONBOARD (v11) SL-2: the caller's own join requests (IF-0-ONBOARD-4) and a service-side
+-- invite label lookup for the consent page (IF-0-ONBOARD-11). Additive: two new read-only
+-- functions and one index. schema_version stays 8.
+--
+-- Sources read, each at its latest definition:
+--   * agent_board.current_agent_id()              -- 20260920000100 (the resolver
+--     request_join_board, 20260810000100, calls);
+--   * agent_board.board_membership_events         -- 20260806000100 (the append-only
+--     consent ledger; seq is the total order, created_at is wall-clock age);
+--   * agent_board.boards.join_request_ttl_days    -- 20260806000100;
+--   * the emitter _emit_membership_event          -- 20260807000100: a request made by the
+--     subject through request_join_board is `target-authored` / `requested`;
+--   * agent_board.board_invite_tokens             -- 20260724000100. invite_board_for_display
+--     checks only the frozen IF-0-ONBOARD-11 subset: not revoked, expires_at > now(), uses
+--     remaining. The redeem core (latest 20260909000100) refuses MORE -- a suspended or
+--     fleet-revoked creator, a lapsed ceiling, a removed agent, fleet-bounded invites -- so a
+--     code that displays a board can still fail to redeem.
+
+-- =============================================================================
+-- 1. list_my_board_requests() -- IF-0-ONBOARD-4
+-- =============================================================================
+-- WHICH REQUESTS. The ledger, never the membership row. A request is a (board, caller) with
+-- at least one event where agent_id is the caller, provenance = 'target-authored' and
+-- result_state = 'requested'. board_memberships.created_by_agent_id is NOT a source: the
+-- sink overwrites it on every later write (an approval names the approver), so it cannot say
+-- who asked.
+--
+-- IDENTITY. From the session only, by the resolver request_join_board uses. There is no
+-- parameter, and a null identity (service_role, anon, a revoked credential) returns nothing.
+--
+-- CURRENT STATE. The caller's membership row on that board, chosen active-first (MBROWID 3a,
+-- the key every current-standing reader uses), or 'none' when no row exists. A rejected request
+-- reads 'left' (REJECTSEM, #89: a refusal lands on the recoverable state).
+--
+-- EXPIRY. expires_at = the latest request event's created_at + the board's
+-- join_request_ttl_days. expired mirrors the consent predicates exactly
+-- (created_at < now() - ttl): an expired request no longer counts as consent. It is a property
+-- of the REQUEST and is reported whatever the membership's current state.
+create or replace function agent_board.list_my_board_requests()
+returns table(
+  board_id uuid,
+  board_name text,
+  board_slug text,
+  requested_at timestamptz,
+  membership_state text,
+  expires_at timestamptz,
+  expired boolean
+)
+language plpgsql
+stable
+security definer
+set search_path = agent_board, public
+as $$
+declare
+  v_actor uuid := agent_board.current_agent_id();
+begin
+  if v_actor is null then
+    return;
+  end if;
+
+  return query
+  select
+    b.id,
+    b.name,
+    b.slug,
+    req.created_at,
+    coalesce(cur.membership_state, 'none'),
+    req.created_at + make_interval(days => b.join_request_ttl_days),
+    req.created_at < now() - make_interval(days => b.join_request_ttl_days)
+  from (
+    -- The latest request event per board, by seq (the ledger's total order).
+    select distinct on (e.board_id) e.board_id, e.created_at
+      from agent_board.board_membership_events e
+     where e.agent_id = v_actor
+       and e.provenance = 'target-authored'
+       and e.result_state = 'requested'
+     order by e.board_id, e.seq desc
+  ) req
+  join agent_board.boards b on b.id = req.board_id
+  left join lateral (
+    select bm.membership_state
+      from agent_board.board_memberships bm
+     where bm.board_id = req.board_id
+       and bm.agent_id = v_actor
+     order by case when bm.membership_state in ('joined', 'subscribed') then 0 else 1 end,
+              bm.created_at desc, bm.id desc
+     limit 1
+  ) cur on true
+  order by req.created_at desc, b.id desc;
+end;
+$$;
+
+comment on function agent_board.list_my_board_requests() is
+  'IF-0-ONBOARD-4: the caller''s own join requests as they stand now. Source is the consent ledger (board_membership_events: agent_id = caller, provenance target-authored, result_state requested), never board_memberships.created_by_agent_id, which later writers overwrite. Identity is current_agent_id() only; there is no parameter and a null identity returns nothing, so service_role (no caller identity) is refused EXECUTE. Per board: id, name, slug, the latest request event''s time, the current membership state chosen active-first (MBROWID 3a) or none, expires_at = requested_at + join_request_ttl_days, and expired (the request no longer counts as consent). Requests made before the ledger existed carry only a board-authored backfill_neutral event and are not returned. No per-row history.';
+
+revoke all on function agent_board.list_my_board_requests() from public, anon, service_role;
+grant execute on function agent_board.list_my_board_requests() to authenticated;
+
+-- =============================================================================
+-- 2. invite_board_for_display(p_code_sha256) -- IF-0-ONBOARD-11
+-- =============================================================================
+-- The Portal's consent page shows which board an in-chat enrollment will join, and it holds
+-- only the digest (the code itself never leaves the agent). The digest is the lowercase hex
+-- sha256 of the code text; the argument is compared case-insensitively.
+--
+-- Only a code passing the IF-0-ONBOARD-11 subset resolves: not revoked, not expired, and uses
+-- remaining. This is narrower than the redeem core (see the header), so display is not a promise
+-- that redeem will succeed. Anything else -- including an unknown digest -- returns no row, one uniform
+-- answer. Codes are 256-bit, so the digest is not a practical oracle; EXECUTE is service_role
+-- only regardless, because the Portal calls it server-side.
+create index if not exists idx_agent_board_board_invite_tokens_code_sha256
+  on agent_board.board_invite_tokens (encode(extensions.digest(code, 'sha256'), 'hex'));
+
+create or replace function agent_board.invite_board_for_display(p_code_sha256 text)
+returns table(
+  board_id uuid,
+  board_name text,
+  board_slug text,
+  preset_role text
+)
+language sql
+stable
+security definer
+set search_path = agent_board, public
+as $$
+  select b.id, b.name, b.slug, t.preset_role
+    from agent_board.board_invite_tokens t
+    join agent_board.boards b on b.id = t.board_id
+   where encode(extensions.digest(t.code, 'sha256'), 'hex') = lower(p_code_sha256)
+     and t.revoked_at is null
+     and t.expires_at > now()
+     and (t.max_uses is null or t.uses_count < t.max_uses);
+$$;
+
+comment on function agent_board.invite_board_for_display(text) is
+  'IF-0-ONBOARD-11: resolves an invite code''s digest (lowercase hex sha256 of the code, compared case-insensitively) to (board_id, board_name, board_slug, preset_role) for display on the Portal consent page. Only a usable code resolves -- not revoked, expires_at > now(), and max_uses null or uses_count < max_uses (a subset of the redeem core''s checks, so a displayed board can still fail to redeem); revoked, expired, exhausted and unknown codes return no row. Read-only. EXECUTE is service_role only: the Portal calls it server-side.';
+
+revoke all on function agent_board.invite_board_for_display(text) from public, anon, authenticated;
+grant execute on function agent_board.invite_board_for_display(text) to service_role;