@consiliency/agent-board-schema 1.59.0 → 1.60.0

package/fixtures/already-applied.json

@@ -628,6 +628,10 @@
   {
    "id": "20261009000100_agent_board_hosted_followups",
    "sha256": "4c2c4041bb41126b3e1bce940bc8a52ac78b69389a0c866556ba0c0e4adc3564"
+  },
+  {
+   "id": "20261010000100_agent_board_own_post_not_delivered",
+   "sha256": "6cbbe0bb9ccf7ab65402a58de145ee21bc2158ddc7502671ea13a98415ca6421"
   }
  ]
 }

package/migrations/20261010000100_agent_board_own_post_not_delivered.sql

@@ -0,0 +1,637 @@
+-- OWN POST NOT DELIVERED (Consiliency/message-board#608): an agent does not receive its own room
+-- post, or its own task or multicast fanned out to a set it belongs to, as an inbox item. The owner's
+-- rule (2026-10-03): an agent's own writes must not reach its inbox and must not wake it. Measured
+-- before this migration: dev0-claude posted to mb-test-board, its own post appeared in its own
+-- v_agent_wake_recovery, and its wake hook fired for it. schema_version stays 8.
+--
+-- THE CLASS, FROM THE CATALOG. agent_board.inbox_items has exactly one writer,
+-- _upsert_inbox_item, and four callers: send_direct_message, send_multicast_message,
+-- post_board_message and create_tasking_delivery (pg_proc). A recipient set reaches the actor
+-- without the actor naming itself in two places, both fixed here:
+--   * a BOARD expansion: post_board_message and create_tasking_delivery's board loop (the actor's
+--     row is kept, feed-only, in both -- see below);
+--   * a DESCRIPTOR expansion: group_alias and role_selector, resolved by
+--     _addressing_agent_ids_or_raise for every descriptor overload and signed path (section 4).
+-- Naming yourself -- a uuid list, or an agent_id / agent_handle / human_handle descriptor -- is an
+-- explicit act and still delivers. agent_board_own_post_not_delivered.test.sql derives both sets
+-- from pg_proc and asserts every member behaviourally, so a new site fails it by name.
+--
+-- WHY THE AUTHOR'S BOARD ROW IS KEPT, FEED-ONLY. v_board_feed is built from inbox_items rows with
+-- visible_in_board_feed = true (any member's). Dropping the author's row would drop a post on a
+-- board whose only member is its author from that board's feed. inbox_items_visibility_shape
+-- already admits visible_in_inbox = false with visible_in_board_feed = true, and every inbox
+-- surface -- v_agent_inbox, v_agent_wake_recovery (through v_agent_inbox), v_agent_inbox_counts,
+-- v_agent_dashboard -- filters on visible_in_inbox, and v_fleet_delivery_posture reports such a row
+-- as not actionable. v_board_directory's activity reads visible_in_board_feed, which is unchanged.
+-- v_thread_feed reads neither inbox_items nor delivery_recipients. Read receipts (sent / delivered / read per
+-- recipient, the owner's stated next goal) need RECIPIENT rows; the author's feed-only row is
+-- distinguishable from them by visible_in_inbox and is not counted in delivered_recipient_count.
+--
+-- CALLBACKS. _queue_inbox_callbacks now queues nothing for a feed-only row, for every caller: an
+-- own_inbox callback is about the inbox. The board-level board.post.delivered callbacks
+-- (_queue_board_post_callbacks) are a board subscription, not an inbox delivery, and are unchanged.
+--
+-- NO BACKFILL. Author rows written before this migration keep visible_in_inbox = true. An author
+-- that has acknowledged them is unaffected; a standing one is handled like any other item.
+--
+-- Sources, each at its LATEST definition, read from the catalog of a replay of this tree
+-- (pg_get_functiondef):
+--   * post_board_message              -- 20260803000100
+--   * create_tasking_delivery         -- 20260803000100
+--   * _queue_inbox_callbacks          -- 20260506000000
+--   * _addressing_agent_ids_or_raise  -- 20261008000100
+-- Each is redefined below VERBATIM plus the lines marked `#608`. Same signatures, so create or
+-- replace keeps each function's ACL; none carries a COMMENT.
+
+-- =============================================================================
+-- 1. post_board_message: the author row is feed-only and not counted
+-- =============================================================================
+create or replace function agent_board.post_board_message(p_thread_id uuid, p_author_agent_id uuid, p_board_id uuid, p_subject text, p_body text, p_message_type text DEFAULT 'comment'::text, p_priority text DEFAULT 'medium'::text, p_idempotency_key text DEFAULT NULL::text, p_metadata jsonb DEFAULT '{}'::jsonb)
+ RETURNS TABLE(message_id uuid, board_id uuid, delivered_recipient_count integer, callback_outbox_count integer, created_at timestamp with time zone)
+ LANGUAGE plpgsql
+ SECURITY DEFINER
+ SET search_path TO 'agent_board', 'public'
+AS $function$
+declare
+  v_message agent_board.messages%rowtype;
+  v_created_message record;
+  v_membership record;
+  v_recipient agent_board.delivery_recipients%rowtype;
+  v_inbox agent_board.inbox_items%rowtype;
+  v_delivered_count integer := 0;
+  v_callback_count integer := 0;
+  v_metadata jsonb;
+  v_preview text;
+  v_fetch_descriptor jsonb;
+  v_idempotency_key text := nullif(trim(p_idempotency_key), '');
+  v_actor_agent_id uuid;
+  v_is_author boolean;
+begin
+  v_actor_agent_id := agent_board._resolved_actor_agent_id(p_author_agent_id, 'p_author_agent_id');
+
+  if nullif(trim(p_subject), '') is null or nullif(trim(p_body), '') is null then
+    raise exception 'subject and body are required' using errcode = '22023';
+  end if;
+  if p_priority not in ('low', 'medium', 'high', 'urgent') then
+    raise exception 'invalid priority' using errcode = '22023';
+  end if;
+  if not exists (select 1 from agent_board.threads where id = p_thread_id) then
+    raise exception 'thread not found' using errcode = 'P0002';
+  end if;
+  if not exists (select 1 from agent_board.boards where id = p_board_id) then
+    raise exception 'board not found' using errcode = 'P0002';
+  end if;
+  if not agent_board._current_agent_can_access_thread(p_thread_id) then
+    raise exception 'thread not accessible to current agent' using errcode = '42501';
+  end if;
+  if not agent_board._current_agent_has_board_access(p_board_id) then
+    raise exception 'board not accessible to current agent' using errcode = '42501';
+  end if;
+  if not agent_board._current_agent_can_send_to_board(p_board_id) then
+    raise exception 'board send requires a non-observer board role' using errcode = '42501';
+  end if;
+
+  if agent_board._is_service_role() then
+    perform agent_board._record_send_authz_telemetry(
+      'service_role_bypass',
+      coalesce(nullif(p_metadata -> 'signed_write' ->> 'origin', ''), 'unknown'),
+      v_actor_agent_id,
+      p_board_id,
+      'post_board_message',
+      agent_board._resolve_send_fleet_scope(v_actor_agent_id),
+      null,
+      jsonb_build_object('redacted', true)
+    );
+  end if;
+
+  perform agent_board._lock_idempotency_key(
+    'post_board_message:' || p_thread_id::text || ':' || v_actor_agent_id::text || ':' || p_board_id::text,
+    v_idempotency_key
+  );
+
+  if v_idempotency_key is not null then
+    select *
+      into v_message
+      from agent_board.messages
+     where thread_id = p_thread_id
+       and author_agent_id = v_actor_agent_id
+       and metadata ->> 'rpcName' = 'post_board_message'
+       and metadata ->> 'idempotencyKey' = v_idempotency_key
+     order by created_at desc, id desc
+     limit 1;
+  end if;
+
+  if v_message.id is null then
+    v_metadata := coalesce(p_metadata, '{}'::jsonb)
+      || jsonb_build_object(
+        'rpcName', 'post_board_message',
+        'subject', trim(p_subject),
+        'priority', p_priority,
+        'boardId', p_board_id::text
+      );
+    if v_idempotency_key is not null then
+      v_metadata := v_metadata || jsonb_build_object('idempotencyKey', v_idempotency_key);
+    end if;
+
+    select *
+      into v_created_message
+      from agent_board.post_message(
+        p_thread_id,
+        v_actor_agent_id,
+        p_body,
+        p_message_type,
+        null,
+        v_metadata
+      );
+
+    select *
+      into v_message
+      from agent_board.messages
+     where id = v_created_message.message_id;
+  end if;
+
+  v_preview := agent_board._trim_inbox_text(p_body, 280);
+  v_fetch_descriptor := agent_board._build_fetch_descriptor(
+    'board',
+    p_board_id,
+    'agent_board.v_board_feed',
+    'board delivery',
+    jsonb_build_object('messageId', v_message.id::text)
+  );
+
+  for v_membership in
+    select bm.id, bm.agent_id
+      from agent_board.board_memberships bm
+     where bm.board_id = p_board_id
+       and bm.membership_state in ('joined', 'subscribed')
+     order by bm.created_at
+  loop
+    -- #608: the author is not a recipient of its own post. Its row stays, FEED-ONLY
+    -- (visible_in_inbox = false), because v_board_feed is built from these rows and a post on a
+    -- board whose only member is its author would otherwise vanish from the feed. A feed-only
+    -- row is outside v_agent_inbox, v_agent_wake_recovery and v_agent_inbox_counts by their own
+    -- `visible_in_inbox` filter, and _queue_inbox_callbacks queues nothing for it.
+    v_is_author := v_membership.agent_id is not distinct from v_actor_agent_id;
+    v_recipient := agent_board._upsert_delivery_recipient(
+      'board',
+      v_membership.agent_id,
+      'message',
+      v_message.id,
+      null,
+      null,
+      p_board_id,
+      v_membership.id,
+      jsonb_build_object('priority', p_priority)
+    );
+
+    v_inbox := agent_board._upsert_inbox_item(
+      v_recipient.id,
+      v_membership.agent_id,
+      p_board_id,
+      v_recipient.delivery_mode,
+      'message',
+      v_message.id,
+      null,
+      null,
+      trim(p_subject),
+      v_preview,
+      p_priority,
+      not v_is_author,
+      true,
+      v_fetch_descriptor,
+      jsonb_build_object('threadId', p_thread_id::text, 'boardId', p_board_id::text)
+    );
+
+    -- delivered_recipient_count counts RECIPIENTS; the author's feed-only row is not one.
+    if not v_is_author then
+      v_delivered_count := v_delivered_count + 1;
+    end if;
+    v_callback_count := v_callback_count + agent_board._queue_inbox_callbacks(v_inbox.id, 'inbox.item.delivered');
+  end loop;
+
+  v_callback_count := v_callback_count + agent_board._queue_board_post_callbacks(
+    p_board_id,
+    v_message.id,
+    trim(p_subject),
+    v_preview,
+    p_priority,
+    v_fetch_descriptor
+  );
+
+  return query
+  select v_message.id, p_board_id, v_delivered_count, v_callback_count, v_message.created_at;
+end;
+$function$;
+
+-- =============================================================================
+-- 2. create_tasking_delivery: the creator's board fan-out row is feed-only and not counted
+-- =============================================================================
+create or replace function agent_board.create_tasking_delivery(p_thread_id uuid, p_created_by_agent_id uuid, p_title text, p_details text DEFAULT NULL::text, p_recipient_agent_ids uuid[] DEFAULT NULL::uuid[], p_board_id uuid DEFAULT NULL::uuid, p_priority text DEFAULT 'medium'::text, p_orchestration_mode text DEFAULT 'distributed'::text, p_idempotency_key text DEFAULT NULL::text, p_metadata jsonb DEFAULT '{}'::jsonb)
+ RETURNS TABLE(task_id uuid, created_event_id uuid, delivered_recipient_count integer, inbox_item_count integer, callback_outbox_count integer, created_at timestamp with time zone, updated_at timestamp with time zone)
+ LANGUAGE plpgsql
+ SECURITY DEFINER
+ SET search_path TO 'agent_board', 'public'
+AS $function$
+declare
+  v_task agent_board.tasks%rowtype;
+  v_created_event_id uuid;
+  v_created_task record;
+  v_recipient_ids uuid[];
+  v_recipient_id uuid;
+  v_membership record;
+  v_recipient agent_board.delivery_recipients%rowtype;
+  v_inbox agent_board.inbox_items%rowtype;
+  v_delivered_count integer := 0;
+  v_inbox_count integer := 0;
+  v_callback_count integer := 0;
+  v_metadata jsonb;
+  v_preview text;
+  v_fetch_descriptor jsonb;
+  v_idempotency_key text := nullif(trim(p_idempotency_key), '');
+  v_actor_agent_id uuid;
+  v_is_creator boolean;
+begin
+  v_actor_agent_id := agent_board._resolved_actor_agent_id(p_created_by_agent_id, 'p_created_by_agent_id');
+
+  if nullif(trim(p_title), '') is null then
+    raise exception 'task title is required' using errcode = '22023';
+  end if;
+  if p_priority not in ('low', 'medium', 'high', 'urgent') then
+    raise exception 'invalid priority' using errcode = '22023';
+  end if;
+  if p_orchestration_mode not in ('distributed', 'hierarchical', 'hybrid') then
+    raise exception 'invalid orchestration mode' using errcode = '22023';
+  end if;
+  if not exists (select 1 from agent_board.threads where id = p_thread_id) then
+    raise exception 'thread not found' using errcode = 'P0002';
+  end if;
+  if not agent_board._current_agent_can_access_thread(p_thread_id) then
+    raise exception 'thread not accessible to current agent' using errcode = '42501';
+  end if;
+  if (p_recipient_agent_ids is null or cardinality(p_recipient_agent_ids) = 0) and p_board_id is null then
+    raise exception 'tasking delivery requires explicit recipients or a board target' using errcode = '22023';
+  end if;
+  if p_recipient_agent_ids is not null and array_position(p_recipient_agent_ids, null) is not null then
+    raise exception 'recipient_agent_ids must not contain nulls' using errcode = '22023';
+  end if;
+  if p_board_id is not null then
+    if not exists (select 1 from agent_board.boards where id = p_board_id) then
+      raise exception 'board not found' using errcode = 'P0002';
+    end if;
+    if not agent_board._current_agent_has_board_access(p_board_id) then
+      raise exception 'board not accessible to current agent' using errcode = '42501';
+    end if;
+    if not agent_board._current_agent_can_send_to_board(p_board_id) then
+      raise exception 'board send requires a non-observer board role' using errcode = '42501';
+    end if;
+  end if;
+
+  select array_agg(distinct recipient_id)
+    into v_recipient_ids
+    from unnest(coalesce(p_recipient_agent_ids, '{}'::uuid[])) as recipient_id;
+
+  if v_recipient_ids is not null and (
+    select count(*)
+      from agent_board.agents
+     where id = any(v_recipient_ids)
+  ) <> cardinality(v_recipient_ids) then
+    raise exception 'recipient agent not found' using errcode = 'P0002';
+  end if;
+
+  if agent_board._is_service_role() then
+    perform agent_board._record_send_authz_telemetry(
+      'service_role_bypass',
+      coalesce(nullif(p_metadata -> 'signed_write' ->> 'origin', ''), 'unknown'),
+      v_actor_agent_id,
+      p_board_id,
+      'create_tasking_delivery',
+      agent_board._resolve_send_fleet_scope(v_actor_agent_id),
+      null,
+      jsonb_build_object('redacted', true)
+    );
+  end if;
+
+  perform agent_board._lock_idempotency_key(
+    'create_tasking_delivery:' || p_thread_id::text || ':' || v_actor_agent_id::text,
+    v_idempotency_key
+  );
+
+  if v_idempotency_key is not null then
+    select *
+      into v_task
+      from agent_board.tasks
+     where thread_id = p_thread_id
+       and created_by_agent_id = v_actor_agent_id
+       and metadata ->> 'rpcName' = 'create_tasking_delivery'
+       and metadata ->> 'idempotencyKey' = v_idempotency_key
+     order by created_at desc, id desc
+     limit 1;
+  end if;
+
+  if v_task.id is null then
+    v_metadata := coalesce(p_metadata, '{}'::jsonb)
+      || jsonb_build_object(
+        'rpcName', 'create_tasking_delivery',
+        'priority', p_priority
+      );
+    if p_board_id is not null then
+      v_metadata := v_metadata || jsonb_build_object('boardId', p_board_id::text);
+    end if;
+    if v_idempotency_key is not null then
+      v_metadata := v_metadata || jsonb_build_object('idempotencyKey', v_idempotency_key);
+    end if;
+
+    select *
+      into v_created_task
+      from agent_board.create_task(
+        p_thread_id,
+        v_actor_agent_id,
+        trim(p_title),
+        p_details,
+        null,
+        null,
+        p_priority,
+        p_orchestration_mode,
+        v_metadata
+      );
+
+    v_created_event_id := v_created_task.created_event_id;
+
+    select *
+      into v_task
+      from agent_board.tasks
+     where id = v_created_task.task_id;
+  else
+    select te.id
+      into v_created_event_id
+      from agent_board.task_events te
+     where te.task_id = v_task.id
+       and te.event_sequence = 1;
+  end if;
+
+  v_preview := agent_board._trim_inbox_text(coalesce(p_details, p_title), 280);
+  v_fetch_descriptor := agent_board._build_fetch_descriptor(
+    'task',
+    v_task.id,
+    'agent_board.v_task_tree',
+    'tasking delivery',
+    jsonb_build_object('threadId', p_thread_id::text)
+  );
+
+  if v_recipient_ids is not null then
+    foreach v_recipient_id in array v_recipient_ids loop
+      v_recipient := agent_board._upsert_delivery_recipient(
+        'tasking',
+        v_recipient_id,
+        'task',
+        null,
+        v_task.id,
+        null,
+        null,
+        null,
+        jsonb_build_object('priority', p_priority)
+      );
+
+      v_inbox := agent_board._upsert_inbox_item(
+        v_recipient.id,
+        v_recipient_id,
+        null,
+        v_recipient.delivery_mode,
+        'task',
+        null,
+        v_task.id,
+        null,
+        trim(p_title),
+        v_preview,
+        p_priority,
+        true,
+        false,
+        v_fetch_descriptor,
+        jsonb_build_object('threadId', p_thread_id::text)
+      );
+
+      v_delivered_count := v_delivered_count + 1;
+      v_inbox_count := v_inbox_count + 1;
+      v_callback_count := v_callback_count + agent_board._queue_inbox_callbacks(v_inbox.id, 'inbox.item.delivered');
+    end loop;
+  end if;
+
+  if p_board_id is not null then
+    for v_membership in
+      select bm.id, bm.agent_id
+        from agent_board.board_memberships bm
+       where bm.board_id = p_board_id
+         and bm.membership_state in ('joined', 'subscribed')
+       order by bm.created_at
+    loop
+      -- #608: the board fan-out does not deliver a task to the agent that created it. The
+      -- creator's row is KEPT, feed-only, exactly as a board post's author row is: its
+      -- _upsert_delivery_recipient is what stamps threads.board_id (OBSGATE #78), so skipping it
+      -- left a creator-only board's thread unlinked and post_message on the access-only branch of
+      -- the observer gate (codex and grok seats, PR #615 round 1). It also keeps the board
+      -- directory's activity and delegate visibility as they were. An explicit recipient list
+      -- naming the creator still delivers to it: that is the caller addressing itself, and the
+      -- board loop must not then demote the row the explicit loop wrote. It shares that row (the
+      -- delivery upsert keeps the explicit row's null board_id), so demoting it wrote both
+      -- visibility flags false and violated inbox_items_visibility_shape, aborting the whole task
+      -- (every seat on PR #615 round 2).
+      v_is_creator := v_membership.agent_id is not distinct from v_actor_agent_id
+        and not (v_membership.agent_id = any(coalesce(v_recipient_ids, '{}'::uuid[])));
+      v_recipient := agent_board._upsert_delivery_recipient(
+        'tasking',
+        v_membership.agent_id,
+        'task',
+        null,
+        v_task.id,
+        null,
+        p_board_id,
+        v_membership.id,
+        jsonb_build_object('priority', p_priority)
+      );
+
+      v_inbox := agent_board._upsert_inbox_item(
+        v_recipient.id,
+        v_membership.agent_id,
+        v_recipient.board_id,
+        v_recipient.delivery_mode,
+        'task',
+        null,
+        v_task.id,
+        null,
+        trim(p_title),
+        v_preview,
+        p_priority,
+        not v_is_creator,
+        v_recipient.board_id is not null,
+        v_fetch_descriptor,
+        jsonb_build_object('threadId', p_thread_id::text, 'boardId', p_board_id::text)
+      );
+
+      -- The counts are of RECIPIENTS; the creator's feed-only row is not one.
+      if not v_is_creator then
+        v_delivered_count := v_delivered_count + 1;
+        v_inbox_count := v_inbox_count + 1;
+      end if;
+      v_callback_count := v_callback_count + agent_board._queue_inbox_callbacks(v_inbox.id, 'inbox.item.delivered');
+    end loop;
+  end if;
+
+  return query
+  select v_task.id, v_created_event_id, v_delivered_count, v_inbox_count, v_callback_count, v_task.created_at, v_task.updated_at;
+end;
+$function$;
+
+-- =============================================================================
+-- 3. _queue_inbox_callbacks: nothing for a feed-only row
+-- =============================================================================
+create or replace function agent_board._queue_inbox_callbacks(p_inbox_item_id uuid, p_event_category text)
+ RETURNS integer
+ LANGUAGE plpgsql
+ SECURITY DEFINER
+ SET search_path TO 'agent_board', 'public'
+AS $function$
+declare
+  v_inserted_count integer := 0;
+begin
+  if p_event_category not in ('inbox.item.delivered', 'inbox.item.updated') then
+    raise exception 'unsupported inbox callback event category' using errcode = '22023';
+  end if;
+
+  with inserted as (
+    insert into agent_board.callback_outbox_events(
+      endpoint_id,
+      subscription_id,
+      recipient_agent_id,
+      inbox_item_id,
+      board_id,
+      event_category,
+      delivery_mode,
+      source_kind,
+      source_message_id,
+      source_task_id,
+      source_delegation_id,
+      idempotency_key,
+      subject,
+      preview,
+      priority,
+      fetch_descriptor,
+      metadata
+    )
+    select
+      cs.endpoint_id,
+      cs.id,
+      ii.recipient_agent_id,
+      ii.id,
+      null,
+      p_event_category,
+      ii.delivery_mode,
+      ii.source_kind,
+      ii.source_message_id,
+      ii.source_task_id,
+      ii.source_delegation_id,
+      case
+        when p_event_category = 'inbox.item.delivered' then
+          p_event_category || ':' || ii.id::text || ':' || cs.id::text
+        else
+          p_event_category || ':' || ii.id::text || ':' || cs.id::text || ':' || replace(ii.updated_at::text, ' ', 'T') || ':' || ii.action_state
+      end,
+      ii.subject,
+      ii.preview,
+      ii.priority,
+      ii.fetch_descriptor,
+      jsonb_build_object(
+        'subscriptionScope', cs.subscription_scope,
+        'subscriptionStatus', cs.subscription_status,
+        'actionState', ii.action_state
+      )
+    from agent_board.inbox_items ii
+    join agent_board.callback_subscriptions cs
+      on cs.agent_id = ii.recipient_agent_id
+     and cs.subscription_scope = 'own_inbox'
+     and cs.subscription_status = 'active'
+     and cs.event_category = p_event_category
+    join agent_board.callback_endpoints ce
+      on ce.id = cs.endpoint_id
+     and ce.owner_agent_id = cs.agent_id
+     and ce.endpoint_status = 'verified'
+    where ii.id = p_inbox_item_id
+      -- #608: an own_inbox callback is about the inbox. A feed-only row (the author's own board
+      -- post) is not in it, so it queues nothing -- for every caller, not just post_board_message.
+      and ii.visible_in_inbox
+    on conflict (idempotency_key) do nothing
+    returning 1
+  )
+  select count(*) into v_inserted_count from inserted;
+
+  return v_inserted_count;
+end;
+$function$;
+
+-- =============================================================================
+-- 4. _addressing_agent_ids_or_raise: a set-naming descriptor does not reach the actor
+-- =============================================================================
+-- Found by the correctness seat on PR #615 round 1: group_alias and role_selector expand to every
+-- matching active agent, the actor included, and the descriptor overloads of send_multicast_message
+-- and create_tasking_delivery (and the signed paths) pass that set on as an explicit list. So the
+-- board fan-out was not the only expansion: this is the other one, two calls before
+-- _upsert_inbox_item, which is why a writer-caller scan did not see it.
+create or replace function agent_board._addressing_agent_ids_or_raise(p_actor_agent_id uuid, p_recipient_descriptors jsonb)
+ RETURNS uuid[]
+ LANGUAGE plpgsql
+ SECURITY DEFINER
+ SET search_path TO 'agent_board', 'public'
+AS $function$
+declare
+  v_result record;
+  v_ids uuid[];
+  v_actor uuid;
+begin
+  select * into v_result
+    from agent_board.resolve_recipients(p_actor_agent_id, p_recipient_descriptors);
+
+  -- HOSTED (D16, NEW-4): naming a hosted delegate refuses the whole send as an authorization
+  -- failure, before any delivery is written.
+  if exists (
+    select 1
+      from jsonb_array_elements(v_result."deniedRecipients") d
+     where d ->> 'reason' = 'recipient_is_hosted_delegate'
+  ) then
+    raise exception 'a hosted delegate is reached only through a board it is on' using errcode = '42501', detail = v_result."deniedRecipients"::text;
+  end if;
+
+  if jsonb_array_length(v_result."deniedRecipients") > 0 then
+    raise exception 'recipient descriptor resolution failed' using errcode = '22023', detail = v_result."deniedRecipients"::text;
+  end if;
+
+  select array_agg((value ->> 'agentId')::uuid)
+    into v_ids
+    from jsonb_array_elements(v_result."resolvedRecipients") as value;
+
+  if v_ids is null or cardinality(v_ids) = 0 then
+    raise exception 'recipient descriptors resolved no recipients' using errcode = '22023';
+  end if;
+
+  -- #608: a descriptor that names a SET (group_alias, role_selector, and any kind added later)
+  -- does not deliver to the actor; only a descriptor that names the actor itself does (agent_id,
+  -- agent_handle, human_handle, directly or inside an explicit_set). The decision reads every
+  -- resolved row, not resolve_recipients' collapsed set, whose `distinct on` keeps the FIRST
+  -- descriptor for an agent: a group listed before an explicit self-mention would otherwise hide
+  -- the explicit one. The allowlist is of EXPLICIT kinds on purpose: a new set kind defaults to
+  -- not delivering an agent's own message to it. The actor is bound as resolve_recipients binds it.
+  v_actor := agent_board._resolved_actor_agent_id(p_actor_agent_id, 'p_actor_agent_id');
+  if v_actor = any(v_ids)
+     and not exists (
+       select 1
+         from agent_board._resolve_addressing_recipient_rows(v_actor, p_recipient_descriptors) r
+        where r.recipient_agent_id = v_actor
+          and r.descriptor ->> 'kind' in ('agent_id', 'agent_handle', 'human_handle')
+     ) then
+    v_ids := array_remove(v_ids, v_actor);
+    if cardinality(v_ids) = 0 then
+      raise exception 'recipient descriptors resolved only the sender' using errcode = '22023';
+    end if;
+  end if;
+
+  return v_ids;
+end;
+$function$;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@consiliency/agent-board-schema",
-  "version": "1.59.0",
+  "version": "1.60.0",
   "description": "Canonical, immutable, exact-pinnable agent_board schema bundle: ordered SQL migrations, digest + compatibility manifest, and deterministic materialize/plan/check tooling for adopters.",
   "repository": "https://github.com/Consiliency/message-board.git",
   "type": "module",

package/schema-manifest.json

@@ -2,7 +2,7 @@
   "schema": "agent_board_schema_manifest.v1",
   "interface": "IF-0-MBPLANE-BUNDLE-1",
   "package": "@consiliency/agent-board-schema",
-  "packageVersion": "1.59.0",
+  "packageVersion": "1.60.0",
   "schemaVersion": 8,
   "minClientVersion": "1.1.0",
   "source": {
@@ -46,8 +46,8 @@
       "usage": "upsert (retention/monitoring defaults; on conflict do nothing)"
     }
   ],
-  "migrationCount": 157,
-  "aggregateSha256": "481b368359a456111c6a2f901ceba486f32085ee8d48c36aefcfb592c0f1070f",
+  "migrationCount": 158,
+  "aggregateSha256": "e887208c42b9617a6a7cc2baae96c87d2d2a011320a8cd4799605d689159cf63",
   "migrations": [
     {
       "order": 0,
@@ -1461,6 +1461,15 @@
       "sourceRef": "message-board",
       "bytes": 37430,
       "sha256": "4c2c4041bb41126b3e1bce940bc8a52ac78b69389a0c866556ba0c0e4adc3564"
+    },
+    {
+      "order": 157,
+      "id": "20261010000100_agent_board_own_post_not_delivered",
+      "filename": "20261010000100_agent_board_own_post_not_delivered.sql",
+      "origin": "message-board-forward",
+      "sourceRef": "message-board",
+      "bytes": 25831,
+      "sha256": "6cbbe0bb9ccf7ab65402a58de145ee21bc2158ddc7502671ea13a98415ca6421"
     }
   ],
   "excludedBridge": {

package/src/tooling.test.mjs

@@ -38,9 +38,9 @@ describe('manifest integrity', () => {
     expect(manifest.schemaVersion).toBe(8);
     expect(manifest.minClientVersion).toMatch(/^\d+\.\d+\.\d+$/);
   });
-  it('registers the four MBAUTHZ + four MBSENDAUTHZ + four MBSESSION + four MBDELEG + three MBFED + three MBHARDEN + two MBPORTALGATE + two MBPORTAL-PR32 + two ROOMOWN + two ROOMLINK + one ROOMDELEG + one LOCALAUTH + one ROOMUIAPI + one FEDSESSION + one FEDSESSION-AUTOJOIN + one GATENULL + one MEMBSTATE + one AGENTSDIR + one LEAVEIDEM + one ROLERESET + one MBROWID + one MBHYGIENE + one MBCONSENT-A + one MBCONSENT-B(a) + one MBCONSENT-B(i) + one MBCONSENT-B(ii) + one MBCONSENT-B(iii) + one MBHARDEN-#97 + one MBHARDEN-#118 + one INVITEPOLICY + one OBSGATE + one OBSGATE-2 + one OBSGATE-3 + one OBSGATE-4 + one FLEETMACHINERLS + one RESOLVENOOP + one ROOMDELEG-LANEB + one CLAIMKEY + two MINTHARDEN + one FLEETMACHINEHIJACK + one CLAIMGATE-SHADOW + one CLAIMGATE-ENFORCE + one FLEETMACHINEREACTIVATION + one DELEGCAPCEILING + one FLEETMACHINERECLAIM + one DELEGSOLEWRITER + one FLEETDOMAINRECLAIM + five ATOMICFLEETONBOARDING (onboarding + ceiling-lock + revocation-evidence + fedsession-gate + fedsession-lock-order) + one OUTBOXWAKE + one ENROLLLOCKORDER + one FEDPROVIDERABSENCE + one WAKERECOVERY + one CONSENTRECONCILE + one ENROLLRESUMPTION + one SIGNEDAUTHORITY + one SIGNERLIFECYCLE + one LEDGERAUTHORITY + one CEILINGLOCKCOMMENT + one LEDGERBOARDCREATE + one RECEIPTSUBJECTGATE + one TASKTHREADLOCKORDER + one CLAIMSUBJECTGATE + one FEDSESSIONIDENTITYGATE + one FEDIDENTITYSLUG + one INVITENODOWNGRADE + one SIGNEDWRITEFLAG + one SIGNEDWRITEMODEL + one RTCREDCLAIM + one ORIGINPOSTURE + one BOARDCLAIMPOLICY + one HEARTBEATPRESERVE + one LIVENESSDENOM + one OWNERLESSRENEWTTL + one OWNERLESSQUOTACENSUS + one FLEETDOMAINNODOWNGRADE + one OWNERLESSQUOTACONVERGE + one ADVISORYREVERTRESET + one CLAIMPOLICYRACE + one CLAIMPOLICYLOCKGRANT + one SESSIONCHALLENGESUPERSEDE + one ROOMCONTRACT + one CALLBACKCONSUMER + one ENROLLTOKENSINGLEUSE + one ROOMCONTRACT-ACTIVEFIRST + one ONBOARD + one HOSTED + one HOSTED-FOLLOWUPS forward migrations (migrationCount = prior 113 + 5 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 = 157)', () => {
+  it('registers the four MBAUTHZ + four MBSENDAUTHZ + four MBSESSION + four MBDELEG + three MBFED + three MBHARDEN + two MBPORTALGATE + two MBPORTAL-PR32 + two ROOMOWN + two ROOMLINK + one ROOMDELEG + one LOCALAUTH + one ROOMUIAPI + one FEDSESSION + one FEDSESSION-AUTOJOIN + one GATENULL + one MEMBSTATE + one AGENTSDIR + one LEAVEIDEM + one ROLERESET + one MBROWID + one MBHYGIENE + one MBCONSENT-A + one MBCONSENT-B(a) + one MBCONSENT-B(i) + one MBCONSENT-B(ii) + one MBCONSENT-B(iii) + one MBHARDEN-#97 + one MBHARDEN-#118 + one INVITEPOLICY + one OBSGATE + one OBSGATE-2 + one OBSGATE-3 + one OBSGATE-4 + one FLEETMACHINERLS + one RESOLVENOOP + one ROOMDELEG-LANEB + one CLAIMKEY + two MINTHARDEN + one FLEETMACHINEHIJACK + one CLAIMGATE-SHADOW + one CLAIMGATE-ENFORCE + one FLEETMACHINEREACTIVATION + one DELEGCAPCEILING + one FLEETMACHINERECLAIM + one DELEGSOLEWRITER + one FLEETDOMAINRECLAIM + five ATOMICFLEETONBOARDING (onboarding + ceiling-lock + revocation-evidence + fedsession-gate + fedsession-lock-order) + one OUTBOXWAKE + one ENROLLLOCKORDER + one FEDPROVIDERABSENCE + one WAKERECOVERY + one CONSENTRECONCILE + one ENROLLRESUMPTION + one SIGNEDAUTHORITY + one SIGNERLIFECYCLE + one LEDGERAUTHORITY + one CEILINGLOCKCOMMENT + one LEDGERBOARDCREATE + one RECEIPTSUBJECTGATE + one TASKTHREADLOCKORDER + one CLAIMSUBJECTGATE + one FEDSESSIONIDENTITYGATE + one FEDIDENTITYSLUG + one INVITENODOWNGRADE + one SIGNEDWRITEFLAG + one SIGNEDWRITEMODEL + one RTCREDCLAIM + one ORIGINPOSTURE + one BOARDCLAIMPOLICY + one HEARTBEATPRESERVE + one LIVENESSDENOM + one OWNERLESSRENEWTTL + one OWNERLESSQUOTACENSUS + one FLEETDOMAINNODOWNGRADE + one OWNERLESSQUOTACONVERGE + one ADVISORYREVERTRESET + one CLAIMPOLICYRACE + one CLAIMPOLICYLOCKGRANT + one SESSIONCHALLENGESUPERSEDE + one ROOMCONTRACT + one CALLBACKCONSUMER + one ENROLLTOKENSINGLEUSE + one ROOMCONTRACT-ACTIVEFIRST + one ONBOARD + one HOSTED + one HOSTED-FOLLOWUPS + one OWNPOST forward migrations (migrationCount = prior 113 + 5 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 = 158)', () => {
     expect(manifest.migrationCount).toBe(manifest.migrations.length);
-    expect(manifest.migrationCount).toBe(157);
+    expect(manifest.migrationCount).toBe(158);
     // MBSESSION switched enforcement on (scoped-send re-grant): the client-visible
     // schema version bumped to 8. MBDELEG tightens delegation and MBFED adds only
     // enrollment-only additive surface (identity_providers registry, enrollment audit,
@@ -353,6 +353,9 @@ describe('manifest integrity', () => {
       // revocation marker revoke_human_subtree derives from it; the tombstone's and the exchange's
       // lock order against the subtree revokers (AB15).
       '20261009000100_agent_board_hosted_followups.sql',
+      // OWNPOST (#608): an agent's own board post is a feed-only row for it, not an inbox item;
+      // a board-wide task fan-out skips its creator; own_inbox callbacks skip feed-only rows.
+      '20261010000100_agent_board_own_post_not_delivered.sql',
     ]) {
       expect(names.has(f)).toBe(true);
     }

package/tests/agent_board_addressing.test.sql

@@ -29,7 +29,9 @@ begin
   values
     (v_actor, 'agent', 'agent', 'addressing-actor-' || v_suffix, 'ADDRESSING Actor', 'active', '{"role":"phase_worker","groupAliases":["ops"]}'::jsonb),
     (v_worker, 'agent', 'agent', 'addressing-worker-' || v_suffix, 'ADDRESSING Worker', 'active', '{"role":"phase_worker","groupAliases":["ops"]}'::jsonb),
-    (v_reviewer, 'agent', 'agent', 'addressing-reviewer-' || v_suffix, 'ADDRESSING Reviewer', 'active', '{"roles":["reviewer"],"groupAliases":["review"]}'::jsonb),
+    -- `role: phase_worker` on the reviewer too: since #608 a set descriptor never reaches its own
+    -- sender, so the direct-send ambiguity case below needs TWO matching agents besides the actor.
+    (v_reviewer, 'agent', 'agent', 'addressing-reviewer-' || v_suffix, 'ADDRESSING Reviewer', 'active', '{"role":"phase_worker","roles":["reviewer"],"groupAliases":["review"]}'::jsonb),
     (v_human, 'human', 'human', 'addressing-human-' || v_suffix, 'ADDRESSING Human', 'active', '{}'::jsonb);
 
   insert into agent_board.threads(id, thread_type, created_by_agent_id, subject)

package/tests/agent_board_inbox_rpcs.test.sql

@@ -378,7 +378,9 @@ begin
       '{}'::jsonb
     );
   v_board_message := v_result.message_id;
-  insert into _tap(line) select is(v_result.delivered_recipient_count, 3, 'board delivery reaches joined and subscribed members only (incl. the seeded owner-creator)');
+  -- #608: the sender is the board's seeded owner-creator, and the author of a post is not one of
+  -- its recipients (its row is feed-only), so two of the three active members are counted.
+  insert into _tap(line) select is(v_result.delivered_recipient_count, 2, 'board delivery reaches joined and subscribed members only, not the author (#608)');
   insert into _tap(line) select is(
     (select count(*)::integer from agent_board.delivery_recipients where source_message_id = v_board_message and recipient_agent_id = v_left_member),
     0,
@@ -409,7 +411,8 @@ begin
       '{}'::jsonb
     );
   v_task := v_result.task_id;
-  insert into _tap(line) select is(v_result.delivered_recipient_count, 4, 'tasking counts explicit and board fan-out attempts (incl. the seeded owner-creator)');
+  -- #608: the creator (the seeded owner-creator) keeps a feed-only row that is not counted: 1 explicit + 2 board.
+  insert into _tap(line) select is(v_result.delivered_recipient_count, 3, 'tasking counts explicit and board fan-out attempts, not the creator (#608)');
   insert into _tap(line) select is(
     (select count(*)::integer from agent_board.delivery_recipients where source_task_id = v_task),
     3,

package/tests/agent_board_own_post_not_delivered.test.sql

@@ -0,0 +1,490 @@
+-- OWN POST NOT DELIVERED pgTAP (Consiliency/message-board#608, migration 20261010000100).
+--
+-- The owner's rule (2026-10-03): an agent does not receive its own room post as an inbox item,
+-- and its own writes do not wake it. The wake side reads v_agent_wake_recovery, so "no inbox item
+-- for the author" is asserted on that view, as the author, through a real authenticated session.
+--
+-- THE CLASS COMES FROM THE CATALOG (AGENTS.md rule 1). A recipient set can reach its own sender in
+-- two ways, and each is derived from pg_proc so a new site fails here BY NAME:
+--   * a BOARD expansion -- OPN-01 finds every inbox_items inserter; OPN-02 every caller of it that
+--     reads board_memberships; OPN-03 the callers that do not (asserted positively, OPN-18..22, 29, 33);
+--   * a DESCRIPTOR expansion -- OPN-34 finds every caller of the descriptor resolver; the only one that
+--     delivers is _addressing_agent_ids_or_raise, asserted through both its overload callers (OPN-25..32).
+-- Each member is asserted behaviourally, as an authenticated session; each exemption POSITIVELY.
+--
+-- Mutation controls (measured 2026-10-03, each run counting all 40 assertions):
+--   * post_board_message writes the author's row visible_in_inbox = true    -> OPN-06, 07, 09, 10, 14
+--   * post_board_message skips the author's row entirely                    -> OPN-09, 13
+--   * post_board_message counts the author in delivered_recipient_count     -> OPN-05
+--   * _queue_inbox_callbacks loses its visible_in_inbox filter              -> OPN-10
+--   * create_tasking_delivery writes the creator's row visible_in_inbox     -> OPN-16
+--   * create_tasking_delivery skips the creator (the round-1 shape)         -> OPN-16, 24
+--   * the board loop demotes an explicit self-listing (the round-2 shape)   -> OPN-35, 39 (abort), 37, 40
+--   * the board loop skips an explicitly listed creator (round-3 T1 shape)  -> OPN-40
+--   * _addressing_agent_ids_or_raise keeps the sender for a set descriptor  -> OPN-28, 30, 32
+--   * ... and drops it even when named explicitly                           -> OPN-31, 38
+--   * a new function that calls _upsert_inbox_item over board_memberships   -> OPN-02
+--   * a new caller of _resolve_addressing_recipient_rows                    -> OPN-34
+--   (create_tasking_delivery counting its creator is pinned by inbox_rpcs and v2_invariants.)
+-- TAP numbers follow EMISSION order, not labels (OPN-34 is emitted last): cite by label.
+--
+-- HAND-COUNTED plan: OPN-01..OPN-40 = 40 assertions. The runner checks the emitted count.
+create extension if not exists pgtap with schema extensions;
+set search_path = extensions, public, agent_board;
+
+begin;
+
+select plan(40);
+
+-- ---------------------------------------------------------------------------
+-- The class, derived from pg_proc.
+-- ---------------------------------------------------------------------------
+select is(
+  (select array_agg(p.proname::text order by p.proname)
+     from pg_proc p join pg_namespace n on n.oid = p.pronamespace
+    where n.nspname = 'agent_board'
+      and agent_board_test.stripped_body(p.oid) ~ agent_board_test.stmt_re('insert into|merge into', 'inbox_items')),
+  array['_upsert_inbox_item'],
+  'OPN-01: _upsert_inbox_item is the only function that inserts into inbox_items');
+
+select is(
+  (select array_agg(p.proname::text order by p.proname)
+     from pg_proc p join pg_namespace n on n.oid = p.pronamespace
+    where n.nspname = 'agent_board'
+      and agent_board_test.stripped_body(p.oid) ~ agent_board_test.call_re('_upsert_inbox_item')
+      and agent_board_test.stripped_body(p.oid) ~ agent_board_test.qname_re('board_memberships')
+      and p.proname <> '_upsert_inbox_item'),
+  array['create_tasking_delivery', 'post_board_message'],
+  'OPN-02: the board-expanding delivery writers are exactly the two this file asserts behaviourally');
+
+select is(
+  (select array_agg(p.proname::text order by p.proname)
+     from pg_proc p join pg_namespace n on n.oid = p.pronamespace
+    where n.nspname = 'agent_board'
+      and agent_board_test.stripped_body(p.oid) ~ agent_board_test.call_re('_upsert_inbox_item')
+      and agent_board_test.stripped_body(p.oid) !~ agent_board_test.qname_re('board_memberships')
+      and p.proname <> '_upsert_inbox_item'),
+  array['send_direct_message', 'send_multicast_message'],
+  'OPN-03: the non-expanding delivery writers are exactly the two exemptions asserted below');
+
+-- ---------------------------------------------------------------------------
+-- Fixture: author A, member B; board AB (A owner, B joined) and board S (A alone).
+-- ---------------------------------------------------------------------------
+create temp table _opn (
+  a_user uuid, b_user uuid,
+  a_agent uuid, b_agent uuid,
+  board_ab uuid, board_s uuid, thread uuid, thread_unlinked uuid, thread_unlinked2 uuid
+) on commit drop;
+create temp table _opn_post (message_id uuid, board_id uuid, delivered_recipient_count integer,
+  callback_outbox_count integer, created_at timestamptz) on commit drop;
+create temp table _opn_sole (like _opn_post) on commit drop;
+create temp table _opn_task (task_id uuid, task_event_id uuid, delivered_recipient_count integer,
+  inbox_item_count integer, callback_outbox_count integer, created_at timestamptz,
+  updated_at timestamptz) on commit drop;
+create temp table _opn_self_task (like _opn_task) on commit drop;
+create temp table _opn_sole_task (like _opn_task) on commit drop;
+create temp table _opn_desc_task (like _opn_task) on commit drop;
+create temp table _opn_both_task (like _opn_task) on commit drop;
+create temp table _opn_both_sole (like _opn_task) on commit drop;
+create temp table _opn_multi (message_id uuid, delivered_recipient_count integer, inbox_item_count integer,
+  callback_outbox_count integer, created_at timestamptz) on commit drop;
+create temp table _opn_group (like _opn_multi) on commit drop;
+create temp table _opn_group_self (like _opn_multi) on commit drop;
+create temp table _opn_nested (like _opn_multi) on commit drop;
+create temp table _opn_direct (message_id uuid, delivery_recipient_id uuid, inbox_item_id uuid,
+  callback_outbox_count integer, created_at timestamptz) on commit drop;
+grant all on table _opn, _opn_post, _opn_sole, _opn_task, _opn_self_task, _opn_multi,
+  _opn_sole_task, _opn_desc_task, _opn_group, _opn_group_self, _opn_direct, _opn_both_task, _opn_nested, _opn_both_sole
+  to authenticated, service_role;
+
+do $$
+declare
+  v_a_user uuid := public.ensure_github_user('opn-author', 'opn-author@example.test', 'opn-author', 'OPN Author');
+  v_b_user uuid := public.ensure_github_user('opn-member', 'opn-member@example.test', 'opn-member', 'OPN Member');
+  v_a uuid := '76080000-0000-4000-8000-000000000001';
+  v_b uuid := '76080000-0000-4000-8000-000000000002';
+  v_thread uuid := '76080000-0000-4000-8000-000000000010';
+  v_thread_unlinked uuid := '76080000-0000-4000-8000-000000000011';
+  v_thread_unlinked2 uuid := '76080000-0000-4000-8000-000000000012';
+  v_board_ab uuid;
+  v_board_s uuid;
+  v_endpoint uuid;
+begin
+  -- Both agents are in the group alias `opn-team` and carry the role `opn-role`, so a set-naming
+  -- descriptor resolves to BOTH of them -- the author included -- before the #608 rule applies.
+  insert into agent_board.agents(id, agent_type, handle, display_name, status, auth_user_id, owner_user_id, metadata)
+  values
+    (v_a, 'agent', 'opn-author', 'OPN Author', 'active', v_a_user, v_a_user, '{"groupAliases":["opn-team","opn-solo"],"roles":["opn-role"]}'::jsonb),
+    (v_b, 'agent', 'opn-member', 'OPN Member', 'active', v_b_user, v_b_user, '{"groupAliases":["opn-team"],"roles":["opn-role"]}'::jsonb);
+
+  insert into agent_board.threads(id, thread_type, created_by_agent_id, subject)
+  values (v_thread, 'coordination', v_a, 'OPN thread'),
+         (v_thread_unlinked, 'coordination', v_a, 'OPN unlinked thread'),
+         (v_thread_unlinked2, 'coordination', v_a, 'OPN second unlinked thread');
+
+  select board_id into v_board_ab
+    from agent_board.create_board(v_a, 'opn-board-ab', 'OPN AB', 'two members', '{}'::jsonb, 'private');
+  perform agent_board.join_board(v_board_ab, v_b, 'joined', v_a, '{}'::jsonb);
+  select board_id into v_board_s
+    from agent_board.create_board(v_a, 'opn-board-s', 'OPN S', 'author alone', '{}'::jsonb, 'private');
+
+  -- Both agents subscribe their own inbox to delivered callbacks: B's is the positive control
+  -- for OPN-10, so a zero for A cannot come from a fixture that queues nothing for anyone.
+  select endpoint_id into v_endpoint from agent_board.register_callback_endpoint(v_a, 'https://example.test/opn-a', '{}'::jsonb);
+  perform agent_board.verify_callback_endpoint(v_endpoint, v_a, '{"controlProofRef":"opn/a"}'::jsonb);
+  perform agent_board.subscribe_callback_endpoint(v_endpoint, v_a, 'own_inbox', 'inbox.item.delivered', null, '{}'::jsonb);
+  select endpoint_id into v_endpoint from agent_board.register_callback_endpoint(v_b, 'https://example.test/opn-b', '{}'::jsonb);
+  perform agent_board.verify_callback_endpoint(v_endpoint, v_b, '{"controlProofRef":"opn/b"}'::jsonb);
+  perform agent_board.subscribe_callback_endpoint(v_endpoint, v_b, 'own_inbox', 'inbox.item.delivered', null, '{}'::jsonb);
+
+  insert into _opn values (v_a_user, v_b_user, v_a, v_b, v_board_ab, v_board_s, v_thread, v_thread_unlinked, v_thread_unlinked2);
+end;
+$$;
+
+-- ---------------------------------------------------------------------------
+-- A posts to AB, through its own authenticated session.
+-- ---------------------------------------------------------------------------
+select set_config('request.jwt.claim.role', 'authenticated', true);
+select set_config('request.jwt.claim.sub', (select a_user::text from _opn), true);
+set local role authenticated;
+
+select lives_ok(
+  $$ insert into _opn_post
+       select * from agent_board.post_board_message(
+         (select thread from _opn), null, (select board_ab from _opn),
+         'opn post', 'the author posts to a two-member board', 'comment', 'medium', null, '{}'::jsonb) $$,
+  'OPN-04: the author can post to a board it owns');
+
+select is((select delivered_recipient_count from _opn_post), 1,
+  'OPN-05: delivered_recipient_count counts the other member only, not the author');
+
+select is(
+  (select count(*)::int from agent_board.v_agent_wake_recovery
+    where source_message_id = (select message_id from _opn_post)),
+  0,
+  'OPN-06: the author''s own post is not in the author''s v_agent_wake_recovery');
+
+select is(
+  (select count(*)::int from agent_board.v_agent_inbox
+    where source_message_id = (select message_id from _opn_post)
+      and recipient_agent_id = (select a_agent from _opn)),
+  0,
+  'OPN-07: the author''s own post is not in the author''s v_agent_inbox');
+
+reset role;
+select set_config('request.jwt.claim.sub', (select b_user::text from _opn), true);
+set local role authenticated;
+
+select is(
+  (select count(*)::int from agent_board.v_agent_wake_recovery
+    where source_message_id = (select message_id from _opn_post)),
+  1,
+  'OPN-08: the other member does receive the post as an unhandled item');
+
+reset role;
+select set_config('request.jwt.claim.role', '', true);
+select set_config('request.jwt.claim.sub', '', true);
+
+select is(
+  (select array_agg(array[ii.visible_in_inbox, ii.visible_in_board_feed])
+     from agent_board.inbox_items ii
+    where ii.source_message_id = (select message_id from _opn_post)
+      and ii.recipient_agent_id = (select a_agent from _opn)),
+  array[array[false, true]],
+  'OPN-09: the author keeps exactly one row for its post, and it is feed-only');
+
+select is(
+  (select count(*)::int from agent_board.callback_outbox_events
+    where source_message_id = (select message_id from _opn_post)
+      and event_category = 'inbox.item.delivered'
+      and recipient_agent_id = (select a_agent from _opn)),
+  0,
+  'OPN-10: no own_inbox delivered callback is queued to the author for its own post');
+
+select is(
+  (select count(*)::int from agent_board.callback_outbox_events
+    where source_message_id = (select message_id from _opn_post)
+      and event_category = 'inbox.item.delivered'
+      and recipient_agent_id = (select b_agent from _opn)),
+  1,
+  'OPN-11: the other member''s own_inbox delivered callback is queued (control for OPN-10)');
+
+-- ---------------------------------------------------------------------------
+-- A posts to S, where it is the only member: the post must stay in the feed.
+-- ---------------------------------------------------------------------------
+select set_config('request.jwt.claim.role', 'authenticated', true);
+select set_config('request.jwt.claim.sub', (select a_user::text from _opn), true);
+set local role authenticated;
+
+select lives_ok(
+  $$ insert into _opn_sole
+       select * from agent_board.post_board_message(
+         (select thread from _opn), null, (select board_s from _opn),
+         'opn sole post', 'the author posts to a board it is alone on', 'comment', 'medium', null, '{}'::jsonb) $$,
+  'OPN-12: the author can post to a board it is the only member of');
+
+select is(
+  (select count(*)::int from agent_board.v_board_feed
+    where message_id = (select message_id from _opn_sole)),
+  1,
+  'OPN-13: a post on a board whose only member is its author is still in that board''s feed');
+
+select is(
+  (select count(*)::int from agent_board.v_agent_wake_recovery
+    where source_message_id = (select message_id from _opn_sole)),
+  0,
+  'OPN-14: the sole-member post is not in the author''s v_agent_wake_recovery either');
+
+-- ---------------------------------------------------------------------------
+-- A creates a board-wide task on AB.
+-- ---------------------------------------------------------------------------
+select lives_ok(
+  $$ insert into _opn_task
+       select * from agent_board.create_tasking_delivery(
+         (select thread from _opn), null, 'opn task', 'a board-wide task', null,
+         (select board_ab from _opn), 'medium', 'distributed', null, '{}'::jsonb) $$,
+  'OPN-15: the creator can deliver a task to its board');
+
+reset role;
+select set_config('request.jwt.claim.role', '', true);
+select set_config('request.jwt.claim.sub', '', true);
+
+select is(
+  (select array_agg(array[ii.visible_in_inbox, ii.visible_in_board_feed])
+     from agent_board.inbox_items ii
+    where ii.source_task_id = (select task_id from _opn_task)
+      and ii.recipient_agent_id = (select a_agent from _opn)),
+  array[array[false, true]],
+  'OPN-16: the board fan-out of a task gives its creator one feed-only row, not an inbox item');
+
+select is(
+  (select count(*)::int from agent_board.inbox_items
+    where source_task_id = (select task_id from _opn_task)
+      and recipient_agent_id = (select b_agent from _opn)
+      and visible_in_inbox),
+  1,
+  'OPN-17: the board fan-out of a task delivers it to the other member');
+
+-- ---------------------------------------------------------------------------
+-- Exemptions, asserted positively: the explicit-recipient paths deliver what the caller lists.
+-- ---------------------------------------------------------------------------
+select set_config('request.jwt.claim.role', 'authenticated', true);
+select set_config('request.jwt.claim.sub', (select a_user::text from _opn), true);
+set local role authenticated;
+
+select lives_ok(
+  $$ insert into _opn_multi
+       select * from agent_board.send_multicast_message(
+         (select thread from _opn), null, array[(select b_agent from _opn)],
+         'opn multicast', 'listed recipients only', 'comment', 'medium', null, '{}'::jsonb) $$,
+  'OPN-18: the author can multicast to a listed recipient');
+
+select lives_ok(
+  $$ insert into _opn_self_task
+       select * from agent_board.create_tasking_delivery(
+         (select thread from _opn), null, 'opn self task', 'the creator lists itself',
+         array[(select a_agent from _opn)], null, 'medium', 'distributed', null, '{}'::jsonb) $$,
+  'OPN-19: the creator can list itself as an explicit task recipient');
+
+reset role;
+select set_config('request.jwt.claim.role', '', true);
+select set_config('request.jwt.claim.sub', '', true);
+
+select is(
+  (select array_agg(recipient_agent_id order by recipient_agent_id)
+     from agent_board.inbox_items
+    where source_message_id = (select message_id from _opn_multi)),
+  array[(select b_agent from _opn)],
+  'OPN-20: a multicast delivers to exactly the listed recipients, so not to an unlisted author');
+
+select is(
+  (select count(*)::int from agent_board.inbox_items
+    where source_task_id = (select task_id from _opn_self_task)
+      and recipient_agent_id = (select a_agent from _opn)
+      and visible_in_inbox),
+  1,
+  'OPN-21: an explicit recipient list naming the creator still delivers to it');
+
+select is(
+  (select delivered_recipient_count from _opn_self_task),
+  1,
+  'OPN-22: the explicit self-addressed task counts its one listed recipient');
+
+-- ---------------------------------------------------------------------------
+-- Round 1 of the PR #615 board: the creator-only task, the descriptor expansions, a direct send.
+-- ---------------------------------------------------------------------------
+select set_config('request.jwt.claim.role', 'authenticated', true);
+select set_config('request.jwt.claim.sub', (select a_user::text from _opn), true);
+set local role authenticated;
+
+-- A board-wide task on a board whose only member is its creator. Skipping the creator's delivery
+-- would skip the only write that stamps threads.board_id (OBSGATE #78), leaving the thread on the
+-- access-only branch of post_message's observer gate. Mutation: exclude the creator from the loop.
+select lives_ok(
+  $$ insert into _opn_sole_task
+       select * from agent_board.create_tasking_delivery(
+         (select thread_unlinked from _opn), null, 'opn sole task', 'creator alone', null,
+         (select board_s from _opn), 'medium', 'distributed', null, '{}'::jsonb) $$,
+  'OPN-23: the creator can deliver a task to a board it is alone on');
+
+reset role;
+select set_config('request.jwt.claim.role', '', true);
+select set_config('request.jwt.claim.sub', '', true);
+
+select is(
+  (select board_id from agent_board.threads where id = (select thread_unlinked from _opn)),
+  (select board_s from _opn),
+  'OPN-24: a creator-only board task still links its thread to the board');
+
+select set_config('request.jwt.claim.role', 'authenticated', true);
+select set_config('request.jwt.claim.sub', (select a_user::text from _opn), true);
+set local role authenticated;
+
+-- A multicast to a group alias the author belongs to.
+select lives_ok(
+  $$ insert into _opn_group
+       select * from agent_board.send_multicast_message(
+         (select thread from _opn), null, '[{"kind":"group_alias","groupAlias":"opn-team"}]'::jsonb,
+         'addressing_v1', 'opn group', 'to a group the author is in', 'comment', 'medium', null, '{}'::jsonb) $$,
+  'OPN-25: the author can multicast to a group alias it belongs to');
+
+-- The same group, plus an explicit agent_id naming the author AFTER it: the explicit mention wins.
+select lives_ok(
+  $$ insert into _opn_group_self
+       select * from agent_board.send_multicast_message(
+         (select thread from _opn), null,
+         jsonb_build_array(
+           jsonb_build_object('kind', 'group_alias', 'groupAlias', 'opn-team'),
+           jsonb_build_object('kind', 'agent_id', 'agentId', (select a_agent from _opn)::text)),
+         'addressing_v1', 'opn group self', 'the group, and the author by id', 'comment', 'medium', null, '{}'::jsonb) $$,
+  'OPN-26: the author can multicast to a group and name itself explicitly');
+
+-- A task to a role selector the creator carries.
+select lives_ok(
+  $$ insert into _opn_desc_task
+       select * from agent_board.create_tasking_delivery(
+         (select thread from _opn), null, 'opn role task', 'to a role the creator has',
+         '[{"kind":"role_selector","role":"opn-role"}]'::jsonb, null, 'addressing_v1',
+         'medium', 'distributed', null, '{}'::jsonb) $$,
+  'OPN-27: the creator can deliver a task to a role selector it matches');
+
+-- A group whose only member is the sender resolves to nobody else: refused, not self-delivered.
+select throws_ok(
+  $$ select * from agent_board.send_multicast_message(
+       (select thread from _opn), null, '[{"kind":"group_alias","groupAlias":"opn-solo"}]'::jsonb,
+       'addressing_v1', 'opn solo', 'a group of one', 'comment', 'medium', null, '{}'::jsonb) $$,
+  '22023',
+  'recipient descriptors resolved only the sender',
+  'OPN-28: a set descriptor that resolves only to the sender is refused');
+
+select lives_ok(
+  $$ insert into _opn_direct
+       select * from agent_board.send_direct_message(
+         (select thread from _opn), null, (select b_agent from _opn),
+         'opn direct', 'to the member', 'comment', 'medium', null, '{}'::jsonb) $$,
+  'OPN-29: the author can send a direct message');
+
+reset role;
+select set_config('request.jwt.claim.role', '', true);
+select set_config('request.jwt.claim.sub', '', true);
+
+select is(
+  (select array_agg(recipient_agent_id order by recipient_agent_id)
+     from agent_board.inbox_items
+    where source_message_id = (select message_id from _opn_group)),
+  array[(select b_agent from _opn)],
+  'OPN-30: a group alias the author belongs to delivers to the other member only');
+
+select is(
+  (select array_agg(recipient_agent_id order by recipient_agent_id)
+     from agent_board.inbox_items
+    where source_message_id = (select message_id from _opn_group_self)
+      and visible_in_inbox),
+  array[(select a_agent from _opn), (select b_agent from _opn)],
+  'OPN-31: an explicit agent_id naming the author delivers to it even beside a group that contains it');
+
+select is(
+  (select array_agg(recipient_agent_id order by recipient_agent_id)
+     from agent_board.inbox_items
+    where source_task_id = (select task_id from _opn_desc_task)),
+  array[(select b_agent from _opn)],
+  'OPN-32: a role selector the creator matches delivers the task to the other member only');
+
+select is(
+  (select array_agg(recipient_agent_id order by recipient_agent_id)
+     from agent_board.inbox_items
+    where source_message_id = (select message_id from _opn_direct)),
+  array[(select b_agent from _opn)],
+  'OPN-33: a direct message delivers to exactly its recipient');
+
+-- Round 2 of the PR #615 board: the creator lists itself AND targets a board it is on. Both loops
+-- reach the same delivery row; the board loop must not demote the explicit one (which aborted the
+-- whole task on inbox_items_visibility_shape). And an explicit self-mention nested in an
+-- explicit_set, by handle, beside a group that contains the author.
+select set_config('request.jwt.claim.role', 'authenticated', true);
+select set_config('request.jwt.claim.sub', (select a_user::text from _opn), true);
+set local role authenticated;
+
+select lives_ok(
+  $$ insert into _opn_both_task
+       select * from agent_board.create_tasking_delivery(
+         (select thread from _opn), null, 'opn both task', 'the creator lists itself and its board',
+         array[(select a_agent from _opn)], (select board_ab from _opn), 'medium', 'distributed', null, '{}'::jsonb) $$,
+  'OPN-35: the creator can list itself and target a board it is on, in one task');
+
+select lives_ok(
+  $$ insert into _opn_nested
+       select * from agent_board.send_multicast_message(
+         (select thread from _opn), null,
+         '[{"kind":"group_alias","groupAlias":"opn-team"},{"kind":"explicit_set","recipients":[{"kind":"agent_handle","handle":"opn-author"}]}]'::jsonb,
+         'addressing_v1', 'opn nested', 'a group, and the author by handle inside an explicit set', 'comment', 'medium', null, '{}'::jsonb) $$,
+  'OPN-36: the author can multicast to a group and name itself by handle inside an explicit_set');
+
+-- Round 3 (correctness T1): the creator lists itself AND targets a board it is ALONE on, from an
+-- unlinked thread. A fix that skipped the creator in the board loop would pass every assertion above
+-- and leave this thread unlinked.
+select lives_ok(
+  $$ insert into _opn_both_sole
+       select * from agent_board.create_tasking_delivery(
+         (select thread_unlinked2 from _opn), null, 'opn both sole', 'the creator lists itself; board of one',
+         array[(select a_agent from _opn)], (select board_s from _opn), 'medium', 'distributed', null, '{}'::jsonb) $$,
+  'OPN-39: the creator can list itself and target a board it is alone on');
+
+reset role;
+select set_config('request.jwt.claim.role', '', true);
+select set_config('request.jwt.claim.sub', '', true);
+
+select is(
+  (select board_id from agent_board.threads where id = (select thread_unlinked2 from _opn)),
+  (select board_s from _opn),
+  'OPN-40: that task still links its thread to the board');
+
+select is(
+  (select array_agg(array[ii.visible_in_inbox::text, (ii.recipient_agent_id = (select a_agent from _opn))::text] order by ii.recipient_agent_id)
+     from agent_board.inbox_items ii
+    where ii.source_task_id = (select task_id from _opn_both_task)),
+  array[array['true', 'true'], array['true', 'false']],
+  'OPN-37: an explicit self-listing survives a board fan-out the creator is in, and the other member is reached');
+
+select is(
+  (select array_agg(recipient_agent_id order by recipient_agent_id)
+     from agent_board.inbox_items
+    where source_message_id = (select message_id from _opn_nested)
+      and visible_in_inbox),
+  array[(select a_agent from _opn), (select b_agent from _opn)],
+  'OPN-38: an agent_handle naming the author inside an explicit_set is an explicit self-mention');
+
+-- The descriptor class, from the catalog: every function that resolves recipient descriptors does so
+-- through _resolve_addressing_recipient_rows, and the only callers of it are the resolver itself
+-- (explicit_set recursion), the read-only resolve_recipients, and _addressing_agent_ids_or_raise --
+-- the one delivery path, where the #608 rule lives. A new caller that delivers fails this by name.
+select is(
+  (select array_agg(p.proname::text order by p.proname)
+     from pg_proc p join pg_namespace n on n.oid = p.pronamespace
+    where n.nspname = 'agent_board'
+      and agent_board_test.stripped_body(p.oid) ~ agent_board_test.call_re('_resolve_addressing_recipient_rows')),
+  array['_addressing_agent_ids_or_raise', '_resolve_addressing_recipient_rows', 'resolve_recipients'],
+  'OPN-34: descriptor expansion reaches a delivery only through _addressing_agent_ids_or_raise');
+
+select * from finish();
+rollback;

package/tests/agent_board_v2_invariants.test.sql

@@ -323,8 +323,8 @@ select *
 
 select is(
   (select delivered_recipient_count from v2_board_delivery),
-  3,
-  'post_board_message only reaches active joined or subscribed board members (incl. the seeded owner-creator)'
+  2,
+  'post_board_message only reaches active joined or subscribed board members, not the author (#608: the author is the seeded owner-creator)'
 );
 
 select is(
@@ -369,8 +369,8 @@ select *
 
 select is(
   (select delivered_recipient_count from v2_tasking_delivery),
-  4,
-  'tasking counts explicit and board fan-out attempts before duplicate collapse (incl. the seeded owner-creator)'
+  3,
+  'tasking counts explicit and board fan-out attempts before duplicate collapse, not the creator (#608: the creator is the seeded owner-creator)'
 );
 
 select is(