@consiliency/agent-board-schema 1.57.0 → 1.58.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@consiliency/agent-board-schema",
-  "version": "1.57.0",
+  "version": "1.58.0",
   "description": "Canonical, immutable, exact-pinnable agent_board schema bundle: ordered SQL migrations, digest + compatibility manifest, and deterministic materialize/plan/check tooling for adopters.",
   "repository": "https://github.com/Consiliency/message-board.git",
   "type": "module",

package/schema-manifest.json

@@ -2,7 +2,7 @@
   "schema": "agent_board_schema_manifest.v1",
   "interface": "IF-0-MBPLANE-BUNDLE-1",
   "package": "@consiliency/agent-board-schema",
-  "packageVersion": "1.57.0",
+  "packageVersion": "1.58.0",
   "schemaVersion": 8,
   "minClientVersion": "1.1.0",
   "source": {
@@ -46,8 +46,8 @@
       "usage": "upsert (retention/monitoring defaults; on conflict do nothing)"
     }
   ],
-  "migrationCount": 155,
-  "aggregateSha256": "347357b36b5ee37fbde189e005993c40df1e63a2d9d247b53823761304ae127e",
+  "migrationCount": 156,
+  "aggregateSha256": "2ad57215f17554d6ceb6ec1b7987f0e705cbc1c24e0411214be93dc2a2018315",
   "migrations": [
     {
       "order": 0,
@@ -1443,6 +1443,15 @@
       "sourceRef": "message-board",
       "bytes": 7655,
       "sha256": "fbdbecfb1c78e2d1b16b37845a74082dcdf1241c61c0356b992e1e01baddc41c"
+    },
+    {
+      "order": 155,
+      "id": "20261008000100_agent_board_hosted_delegates",
+      "filename": "20261008000100_agent_board_hosted_delegates.sql",
+      "origin": "message-board-forward",
+      "sourceRef": "message-board",
+      "bytes": 166072,
+      "sha256": "ef57647e29b8afc788dc8c481a0165b10a3c448aae12b8901901b653216bc3a8"
     }
   ],
   "excludedBridge": {

package/src/tooling.test.mjs

@@ -38,9 +38,9 @@ describe('manifest integrity', () => {
     expect(manifest.schemaVersion).toBe(8);
     expect(manifest.minClientVersion).toMatch(/^\d+\.\d+\.\d+$/);
   });
-  it('registers the four MBAUTHZ + four MBSENDAUTHZ + four MBSESSION + four MBDELEG + three MBFED + three MBHARDEN + two MBPORTALGATE + two MBPORTAL-PR32 + two ROOMOWN + two ROOMLINK + one ROOMDELEG + one LOCALAUTH + one ROOMUIAPI + one FEDSESSION + one FEDSESSION-AUTOJOIN + one GATENULL + one MEMBSTATE + one AGENTSDIR + one LEAVEIDEM + one ROLERESET + one MBROWID + one MBHYGIENE + one MBCONSENT-A + one MBCONSENT-B(a) + one MBCONSENT-B(i) + one MBCONSENT-B(ii) + one MBCONSENT-B(iii) + one MBHARDEN-#97 + one MBHARDEN-#118 + one INVITEPOLICY + one OBSGATE + one OBSGATE-2 + one OBSGATE-3 + one OBSGATE-4 + one FLEETMACHINERLS + one RESOLVENOOP + one ROOMDELEG-LANEB + one CLAIMKEY + two MINTHARDEN + one FLEETMACHINEHIJACK + one CLAIMGATE-SHADOW + one CLAIMGATE-ENFORCE + one FLEETMACHINEREACTIVATION + one DELEGCAPCEILING + one FLEETMACHINERECLAIM + one DELEGSOLEWRITER + one FLEETDOMAINRECLAIM + five ATOMICFLEETONBOARDING (onboarding + ceiling-lock + revocation-evidence + fedsession-gate + fedsession-lock-order) + one OUTBOXWAKE + one ENROLLLOCKORDER + one FEDPROVIDERABSENCE + one WAKERECOVERY + one CONSENTRECONCILE + one ENROLLRESUMPTION + one SIGNEDAUTHORITY + one SIGNERLIFECYCLE + one LEDGERAUTHORITY + one CEILINGLOCKCOMMENT + one LEDGERBOARDCREATE + one RECEIPTSUBJECTGATE + one TASKTHREADLOCKORDER + one CLAIMSUBJECTGATE + one FEDSESSIONIDENTITYGATE + one FEDIDENTITYSLUG + one INVITENODOWNGRADE + one SIGNEDWRITEFLAG + one SIGNEDWRITEMODEL + one RTCREDCLAIM + one ORIGINPOSTURE + one BOARDCLAIMPOLICY + one HEARTBEATPRESERVE + one LIVENESSDENOM + one OWNERLESSRENEWTTL + one OWNERLESSQUOTACENSUS + one FLEETDOMAINNODOWNGRADE + one OWNERLESSQUOTACONVERGE + one ADVISORYREVERTRESET + one CLAIMPOLICYRACE + one CLAIMPOLICYLOCKGRANT + one SESSIONCHALLENGESUPERSEDE + one ROOMCONTRACT + one CALLBACKCONSUMER + one ENROLLTOKENSINGLEUSE + one ROOMCONTRACT-ACTIVEFIRST + one ONBOARD forward migrations (migrationCount = prior 113 + 5 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 = 155)', () => {
+  it('registers the four MBAUTHZ + four MBSENDAUTHZ + four MBSESSION + four MBDELEG + three MBFED + three MBHARDEN + two MBPORTALGATE + two MBPORTAL-PR32 + two ROOMOWN + two ROOMLINK + one ROOMDELEG + one LOCALAUTH + one ROOMUIAPI + one FEDSESSION + one FEDSESSION-AUTOJOIN + one GATENULL + one MEMBSTATE + one AGENTSDIR + one LEAVEIDEM + one ROLERESET + one MBROWID + one MBHYGIENE + one MBCONSENT-A + one MBCONSENT-B(a) + one MBCONSENT-B(i) + one MBCONSENT-B(ii) + one MBCONSENT-B(iii) + one MBHARDEN-#97 + one MBHARDEN-#118 + one INVITEPOLICY + one OBSGATE + one OBSGATE-2 + one OBSGATE-3 + one OBSGATE-4 + one FLEETMACHINERLS + one RESOLVENOOP + one ROOMDELEG-LANEB + one CLAIMKEY + two MINTHARDEN + one FLEETMACHINEHIJACK + one CLAIMGATE-SHADOW + one CLAIMGATE-ENFORCE + one FLEETMACHINEREACTIVATION + one DELEGCAPCEILING + one FLEETMACHINERECLAIM + one DELEGSOLEWRITER + one FLEETDOMAINRECLAIM + five ATOMICFLEETONBOARDING (onboarding + ceiling-lock + revocation-evidence + fedsession-gate + fedsession-lock-order) + one OUTBOXWAKE + one ENROLLLOCKORDER + one FEDPROVIDERABSENCE + one WAKERECOVERY + one CONSENTRECONCILE + one ENROLLRESUMPTION + one SIGNEDAUTHORITY + one SIGNERLIFECYCLE + one LEDGERAUTHORITY + one CEILINGLOCKCOMMENT + one LEDGERBOARDCREATE + one RECEIPTSUBJECTGATE + one TASKTHREADLOCKORDER + one CLAIMSUBJECTGATE + one FEDSESSIONIDENTITYGATE + one FEDIDENTITYSLUG + one INVITENODOWNGRADE + one SIGNEDWRITEFLAG + one SIGNEDWRITEMODEL + one RTCREDCLAIM + one ORIGINPOSTURE + one BOARDCLAIMPOLICY + one HEARTBEATPRESERVE + one LIVENESSDENOM + one OWNERLESSRENEWTTL + one OWNERLESSQUOTACENSUS + one FLEETDOMAINNODOWNGRADE + one OWNERLESSQUOTACONVERGE + one ADVISORYREVERTRESET + one CLAIMPOLICYRACE + one CLAIMPOLICYLOCKGRANT + one SESSIONCHALLENGESUPERSEDE + one ROOMCONTRACT + one CALLBACKCONSUMER + one ENROLLTOKENSINGLEUSE + one ROOMCONTRACT-ACTIVEFIRST + one ONBOARD + one HOSTED forward migrations (migrationCount = prior 113 + 5 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 = 156)', () => {
     expect(manifest.migrationCount).toBe(manifest.migrations.length);
-    expect(manifest.migrationCount).toBe(155);
+    expect(manifest.migrationCount).toBe(156);
     // MBSESSION switched enforcement on (scoped-send re-grant): the client-visible
     // schema version bumped to 8. MBDELEG tightens delegation and MBFED adds only
     // enrollment-only additive surface (identity_providers registry, enrollment audit,
@@ -346,6 +346,9 @@ describe('manifest integrity', () => {
       // ONBOARD (v11): list_my_board_requests (IF-0-ONBOARD-4) and the service-only
       // invite_board_for_display digest lookup (IF-0-ONBOARD-11).
       '20261007000100_agent_board_onboard_requests.sql',
+      // HOSTED (v11): the agent_board_delegate role, delegate instances, the exchange and
+      // tombstone RPCs, add_delegate_to_board, the D14 read predicates and the D16 refusals.
+      '20261008000100_agent_board_hosted_delegates.sql',
     ]) {
       expect(names.has(f)).toBe(true);
     }

package/tests/agent_board_atomic_fleet_onboarding.test.sql

@@ -546,6 +546,11 @@ select is( -- pgtap-allow-raise-checked: catalog read only; the RPC names below
      from _ceiling_class where is_reader),
   array[
     'agent_board._redeem_unbounded_invite_for_agent(text,uuid) => UNSERIALIZED',
+    -- HOSTED (20261008000100): the owner's member-invite gate. It row-locks both agents (the
+    -- fleet-ledger gate) and board_memberships, so it takes this lock as grant_board_role does
+    -- (agent_board_signer_lifecycle section 9), after its delegate_instances row and before any
+    -- agents or board_memberships row lock.
+    'agent_board.add_delegate_to_board(uuid,uuid) => serialized',
     'agent_board.create_invite_link(uuid,text,text,integer,timestamp with time zone,uuid,jsonb) => UNSERIALIZED',
     -- Retired from UNSERIALIZED by #276 (20260909000100). Adding the fleet-ledger gate made
     -- grant_board_role row-lock both agents and board_memberships, which section 9 of
@@ -696,10 +701,18 @@ select is( -- pgtap-allow-raise-checked: catalog read only; the RPC names below
     'agent_board._redeem_fleet_invite_for_agent(text,uuid) [definer] => service_role',
     'agent_board._redeem_invite_for_agent(text,uuid) [definer] => service_role',
     'agent_board._revoke_agent_principal(uuid,uuid,text) [definer] => service_role',
+    -- HOSTED (20261008000100): joined because it takes _lock_board_authority_ceiling (the owner's
+    -- member-invite gate, serialised as grant_board_role is). authenticated only: the owner calls
+    -- it; service_role has no resolved actor and could not pass its owner check anyway.
+    'agent_board.add_delegate_to_board(uuid,uuid) [definer] => authenticated',
     'agent_board.create_fleet_onboarding_invite(uuid,uuid,text,text,text,text,text,text,text,integer,timestamp with time zone,uuid,jsonb) [definer] => authenticated,service_role',
     'agent_board.enroll_federated_human(text,text,text,jsonb,text) [definer] => service_role',
     'agent_board.enroll_federated_identity(text,text,text,jsonb,text,text,text,text,boolean,text,timestamp with time zone,text,text,text[],text[],text) [definer] => service_role',
     'agent_board.evaluate_fleet_sender_policy(uuid,uuid,uuid,uuid,text,uuid,boolean) [definer] => authenticated,service_role',
+    -- HOSTED fix lane (PR #590, N2): joined because it reads fleet_human_revocations, refusing a
+    -- durably revoked owner (owner_inactive) as enroll_federated_human does. service_role only:
+    -- the delegate-exchange Edge Function calls it.
+    'agent_board.exchange_delegate_credential(jsonb) [definer] => service_role',
     -- Joined this class in #276: the live grant chokepoint now takes _lock_board_authority_ceiling
     -- (forced by the section-9 agents/board_memberships class in agent_board_signer_lifecycle.test.sql
     -- once the ledger gate made it lock both). Still authenticated,service_role — #276 removes

package/tests/agent_board_consent_emission.test.sql

@@ -580,8 +580,10 @@ select is(
       and p.prolang <> (select oid from pg_language where lanname = 'internal')
       and has_function_privilege('authenticated', p.oid, 'EXECUTE')
       and agent_board_test.stripped_body(p.oid) ~ agent_board_test.call_re('_membership_consent_present')),
-  'resolve_board_request, update_board_membership',
-  'scope: exactly TWO authenticated routes read the predicate');
+  -- HOSTED (20261008000100) added add_delegate_to_board: it places a hosted delegate as
+  -- `joined` on its principal's act and requires the predicate to agree afterwards (D2).
+  'add_delegate_to_board, resolve_board_request, update_board_membership',
+  'scope: exactly THREE authenticated routes read the predicate');
 
 -- ...and the ledger it fills is the one MBCONSENT-A froze.
 -- The refused write must leave NO trace. Asserted against the SUBJECT of the refused attempt