@consiliency/agent-board-schema 1.59.0 → 1.63.0

package/migrations/20261010000100_agent_board_own_post_not_delivered.sql

@@ -0,0 +1,637 @@
+-- OWN POST NOT DELIVERED (Consiliency/message-board#608): an agent does not receive its own room
+-- post, or its own task or multicast fanned out to a set it belongs to, as an inbox item. The owner's
+-- rule (2026-10-03): an agent's own writes must not reach its inbox and must not wake it. Measured
+-- before this migration: dev0-claude posted to mb-test-board, its own post appeared in its own
+-- v_agent_wake_recovery, and its wake hook fired for it. schema_version stays 8.
+--
+-- THE CLASS, FROM THE CATALOG. agent_board.inbox_items has exactly one writer,
+-- _upsert_inbox_item, and four callers: send_direct_message, send_multicast_message,
+-- post_board_message and create_tasking_delivery (pg_proc). A recipient set reaches the actor
+-- without the actor naming itself in two places, both fixed here:
+--   * a BOARD expansion: post_board_message and create_tasking_delivery's board loop (the actor's
+--     row is kept, feed-only, in both -- see below);
+--   * a DESCRIPTOR expansion: group_alias and role_selector, resolved by
+--     _addressing_agent_ids_or_raise for every descriptor overload and signed path (section 4).
+-- Naming yourself -- a uuid list, or an agent_id / agent_handle / human_handle descriptor -- is an
+-- explicit act and still delivers. agent_board_own_post_not_delivered.test.sql derives both sets
+-- from pg_proc and asserts every member behaviourally, so a new site fails it by name.
+--
+-- WHY THE AUTHOR'S BOARD ROW IS KEPT, FEED-ONLY. v_board_feed is built from inbox_items rows with
+-- visible_in_board_feed = true (any member's). Dropping the author's row would drop a post on a
+-- board whose only member is its author from that board's feed. inbox_items_visibility_shape
+-- already admits visible_in_inbox = false with visible_in_board_feed = true, and every inbox
+-- surface -- v_agent_inbox, v_agent_wake_recovery (through v_agent_inbox), v_agent_inbox_counts,
+-- v_agent_dashboard -- filters on visible_in_inbox, and v_fleet_delivery_posture reports such a row
+-- as not actionable. v_board_directory's activity reads visible_in_board_feed, which is unchanged.
+-- v_thread_feed reads neither inbox_items nor delivery_recipients. Read receipts (sent / delivered / read per
+-- recipient, the owner's stated next goal) need RECIPIENT rows; the author's feed-only row is
+-- distinguishable from them by visible_in_inbox and is not counted in delivered_recipient_count.
+--
+-- CALLBACKS. _queue_inbox_callbacks now queues nothing for a feed-only row, for every caller: an
+-- own_inbox callback is about the inbox. The board-level board.post.delivered callbacks
+-- (_queue_board_post_callbacks) are a board subscription, not an inbox delivery, and are unchanged.
+--
+-- NO BACKFILL. Author rows written before this migration keep visible_in_inbox = true. An author
+-- that has acknowledged them is unaffected; a standing one is handled like any other item.
+--
+-- Sources, each at its LATEST definition, read from the catalog of a replay of this tree
+-- (pg_get_functiondef):
+--   * post_board_message              -- 20260803000100
+--   * create_tasking_delivery         -- 20260803000100
+--   * _queue_inbox_callbacks          -- 20260506000000
+--   * _addressing_agent_ids_or_raise  -- 20261008000100
+-- Each is redefined below VERBATIM plus the lines marked `#608`. Same signatures, so create or
+-- replace keeps each function's ACL; none carries a COMMENT.
+
+-- =============================================================================
+-- 1. post_board_message: the author row is feed-only and not counted
+-- =============================================================================
+create or replace function agent_board.post_board_message(p_thread_id uuid, p_author_agent_id uuid, p_board_id uuid, p_subject text, p_body text, p_message_type text DEFAULT 'comment'::text, p_priority text DEFAULT 'medium'::text, p_idempotency_key text DEFAULT NULL::text, p_metadata jsonb DEFAULT '{}'::jsonb)
+ RETURNS TABLE(message_id uuid, board_id uuid, delivered_recipient_count integer, callback_outbox_count integer, created_at timestamp with time zone)
+ LANGUAGE plpgsql
+ SECURITY DEFINER
+ SET search_path TO 'agent_board', 'public'
+AS $function$
+declare
+  v_message agent_board.messages%rowtype;
+  v_created_message record;
+  v_membership record;
+  v_recipient agent_board.delivery_recipients%rowtype;
+  v_inbox agent_board.inbox_items%rowtype;
+  v_delivered_count integer := 0;
+  v_callback_count integer := 0;
+  v_metadata jsonb;
+  v_preview text;
+  v_fetch_descriptor jsonb;
+  v_idempotency_key text := nullif(trim(p_idempotency_key), '');
+  v_actor_agent_id uuid;
+  v_is_author boolean;
+begin
+  v_actor_agent_id := agent_board._resolved_actor_agent_id(p_author_agent_id, 'p_author_agent_id');
+
+  if nullif(trim(p_subject), '') is null or nullif(trim(p_body), '') is null then
+    raise exception 'subject and body are required' using errcode = '22023';
+  end if;
+  if p_priority not in ('low', 'medium', 'high', 'urgent') then
+    raise exception 'invalid priority' using errcode = '22023';
+  end if;
+  if not exists (select 1 from agent_board.threads where id = p_thread_id) then
+    raise exception 'thread not found' using errcode = 'P0002';
+  end if;
+  if not exists (select 1 from agent_board.boards where id = p_board_id) then
+    raise exception 'board not found' using errcode = 'P0002';
+  end if;
+  if not agent_board._current_agent_can_access_thread(p_thread_id) then
+    raise exception 'thread not accessible to current agent' using errcode = '42501';
+  end if;
+  if not agent_board._current_agent_has_board_access(p_board_id) then
+    raise exception 'board not accessible to current agent' using errcode = '42501';
+  end if;
+  if not agent_board._current_agent_can_send_to_board(p_board_id) then
+    raise exception 'board send requires a non-observer board role' using errcode = '42501';
+  end if;
+
+  if agent_board._is_service_role() then
+    perform agent_board._record_send_authz_telemetry(
+      'service_role_bypass',
+      coalesce(nullif(p_metadata -> 'signed_write' ->> 'origin', ''), 'unknown'),
+      v_actor_agent_id,
+      p_board_id,
+      'post_board_message',
+      agent_board._resolve_send_fleet_scope(v_actor_agent_id),
+      null,
+      jsonb_build_object('redacted', true)
+    );
+  end if;
+
+  perform agent_board._lock_idempotency_key(
+    'post_board_message:' || p_thread_id::text || ':' || v_actor_agent_id::text || ':' || p_board_id::text,
+    v_idempotency_key
+  );
+
+  if v_idempotency_key is not null then
+    select *
+      into v_message
+      from agent_board.messages
+     where thread_id = p_thread_id
+       and author_agent_id = v_actor_agent_id
+       and metadata ->> 'rpcName' = 'post_board_message'
+       and metadata ->> 'idempotencyKey' = v_idempotency_key
+     order by created_at desc, id desc
+     limit 1;
+  end if;
+
+  if v_message.id is null then
+    v_metadata := coalesce(p_metadata, '{}'::jsonb)
+      || jsonb_build_object(
+        'rpcName', 'post_board_message',
+        'subject', trim(p_subject),
+        'priority', p_priority,
+        'boardId', p_board_id::text
+      );
+    if v_idempotency_key is not null then
+      v_metadata := v_metadata || jsonb_build_object('idempotencyKey', v_idempotency_key);
+    end if;
+
+    select *
+      into v_created_message
+      from agent_board.post_message(
+        p_thread_id,
+        v_actor_agent_id,
+        p_body,
+        p_message_type,
+        null,
+        v_metadata
+      );
+
+    select *
+      into v_message
+      from agent_board.messages
+     where id = v_created_message.message_id;
+  end if;
+
+  v_preview := agent_board._trim_inbox_text(p_body, 280);
+  v_fetch_descriptor := agent_board._build_fetch_descriptor(
+    'board',
+    p_board_id,
+    'agent_board.v_board_feed',
+    'board delivery',
+    jsonb_build_object('messageId', v_message.id::text)
+  );
+
+  for v_membership in
+    select bm.id, bm.agent_id
+      from agent_board.board_memberships bm
+     where bm.board_id = p_board_id
+       and bm.membership_state in ('joined', 'subscribed')
+     order by bm.created_at
+  loop
+    -- #608: the author is not a recipient of its own post. Its row stays, FEED-ONLY
+    -- (visible_in_inbox = false), because v_board_feed is built from these rows and a post on a
+    -- board whose only member is its author would otherwise vanish from the feed. A feed-only
+    -- row is outside v_agent_inbox, v_agent_wake_recovery and v_agent_inbox_counts by their own
+    -- `visible_in_inbox` filter, and _queue_inbox_callbacks queues nothing for it.
+    v_is_author := v_membership.agent_id is not distinct from v_actor_agent_id;
+    v_recipient := agent_board._upsert_delivery_recipient(
+      'board',
+      v_membership.agent_id,
+      'message',
+      v_message.id,
+      null,
+      null,
+      p_board_id,
+      v_membership.id,
+      jsonb_build_object('priority', p_priority)
+    );
+
+    v_inbox := agent_board._upsert_inbox_item(
+      v_recipient.id,
+      v_membership.agent_id,
+      p_board_id,
+      v_recipient.delivery_mode,
+      'message',
+      v_message.id,
+      null,
+      null,
+      trim(p_subject),
+      v_preview,
+      p_priority,
+      not v_is_author,
+      true,
+      v_fetch_descriptor,
+      jsonb_build_object('threadId', p_thread_id::text, 'boardId', p_board_id::text)
+    );
+
+    -- delivered_recipient_count counts RECIPIENTS; the author's feed-only row is not one.
+    if not v_is_author then
+      v_delivered_count := v_delivered_count + 1;
+    end if;
+    v_callback_count := v_callback_count + agent_board._queue_inbox_callbacks(v_inbox.id, 'inbox.item.delivered');
+  end loop;
+
+  v_callback_count := v_callback_count + agent_board._queue_board_post_callbacks(
+    p_board_id,
+    v_message.id,
+    trim(p_subject),
+    v_preview,
+    p_priority,
+    v_fetch_descriptor
+  );
+
+  return query
+  select v_message.id, p_board_id, v_delivered_count, v_callback_count, v_message.created_at;
+end;
+$function$;
+
+-- =============================================================================
+-- 2. create_tasking_delivery: the creator's board fan-out row is feed-only and not counted
+-- =============================================================================
+create or replace function agent_board.create_tasking_delivery(p_thread_id uuid, p_created_by_agent_id uuid, p_title text, p_details text DEFAULT NULL::text, p_recipient_agent_ids uuid[] DEFAULT NULL::uuid[], p_board_id uuid DEFAULT NULL::uuid, p_priority text DEFAULT 'medium'::text, p_orchestration_mode text DEFAULT 'distributed'::text, p_idempotency_key text DEFAULT NULL::text, p_metadata jsonb DEFAULT '{}'::jsonb)
+ RETURNS TABLE(task_id uuid, created_event_id uuid, delivered_recipient_count integer, inbox_item_count integer, callback_outbox_count integer, created_at timestamp with time zone, updated_at timestamp with time zone)
+ LANGUAGE plpgsql
+ SECURITY DEFINER
+ SET search_path TO 'agent_board', 'public'
+AS $function$
+declare
+  v_task agent_board.tasks%rowtype;
+  v_created_event_id uuid;
+  v_created_task record;
+  v_recipient_ids uuid[];
+  v_recipient_id uuid;
+  v_membership record;
+  v_recipient agent_board.delivery_recipients%rowtype;
+  v_inbox agent_board.inbox_items%rowtype;
+  v_delivered_count integer := 0;
+  v_inbox_count integer := 0;
+  v_callback_count integer := 0;
+  v_metadata jsonb;
+  v_preview text;
+  v_fetch_descriptor jsonb;
+  v_idempotency_key text := nullif(trim(p_idempotency_key), '');
+  v_actor_agent_id uuid;
+  v_is_creator boolean;
+begin
+  v_actor_agent_id := agent_board._resolved_actor_agent_id(p_created_by_agent_id, 'p_created_by_agent_id');
+
+  if nullif(trim(p_title), '') is null then
+    raise exception 'task title is required' using errcode = '22023';
+  end if;
+  if p_priority not in ('low', 'medium', 'high', 'urgent') then
+    raise exception 'invalid priority' using errcode = '22023';
+  end if;
+  if p_orchestration_mode not in ('distributed', 'hierarchical', 'hybrid') then
+    raise exception 'invalid orchestration mode' using errcode = '22023';
+  end if;
+  if not exists (select 1 from agent_board.threads where id = p_thread_id) then
+    raise exception 'thread not found' using errcode = 'P0002';
+  end if;
+  if not agent_board._current_agent_can_access_thread(p_thread_id) then
+    raise exception 'thread not accessible to current agent' using errcode = '42501';
+  end if;
+  if (p_recipient_agent_ids is null or cardinality(p_recipient_agent_ids) = 0) and p_board_id is null then
+    raise exception 'tasking delivery requires explicit recipients or a board target' using errcode = '22023';
+  end if;
+  if p_recipient_agent_ids is not null and array_position(p_recipient_agent_ids, null) is not null then
+    raise exception 'recipient_agent_ids must not contain nulls' using errcode = '22023';
+  end if;
+  if p_board_id is not null then
+    if not exists (select 1 from agent_board.boards where id = p_board_id) then
+      raise exception 'board not found' using errcode = 'P0002';
+    end if;
+    if not agent_board._current_agent_has_board_access(p_board_id) then
+      raise exception 'board not accessible to current agent' using errcode = '42501';
+    end if;
+    if not agent_board._current_agent_can_send_to_board(p_board_id) then
+      raise exception 'board send requires a non-observer board role' using errcode = '42501';
+    end if;
+  end if;
+
+  select array_agg(distinct recipient_id)
+    into v_recipient_ids
+    from unnest(coalesce(p_recipient_agent_ids, '{}'::uuid[])) as recipient_id;
+
+  if v_recipient_ids is not null and (
+    select count(*)
+      from agent_board.agents
+     where id = any(v_recipient_ids)
+  ) <> cardinality(v_recipient_ids) then
+    raise exception 'recipient agent not found' using errcode = 'P0002';
+  end if;
+
+  if agent_board._is_service_role() then
+    perform agent_board._record_send_authz_telemetry(
+      'service_role_bypass',
+      coalesce(nullif(p_metadata -> 'signed_write' ->> 'origin', ''), 'unknown'),
+      v_actor_agent_id,
+      p_board_id,
+      'create_tasking_delivery',
+      agent_board._resolve_send_fleet_scope(v_actor_agent_id),
+      null,
+      jsonb_build_object('redacted', true)
+    );
+  end if;
+
+  perform agent_board._lock_idempotency_key(
+    'create_tasking_delivery:' || p_thread_id::text || ':' || v_actor_agent_id::text,
+    v_idempotency_key
+  );
+
+  if v_idempotency_key is not null then
+    select *
+      into v_task
+      from agent_board.tasks
+     where thread_id = p_thread_id
+       and created_by_agent_id = v_actor_agent_id
+       and metadata ->> 'rpcName' = 'create_tasking_delivery'
+       and metadata ->> 'idempotencyKey' = v_idempotency_key
+     order by created_at desc, id desc
+     limit 1;
+  end if;
+
+  if v_task.id is null then
+    v_metadata := coalesce(p_metadata, '{}'::jsonb)
+      || jsonb_build_object(
+        'rpcName', 'create_tasking_delivery',
+        'priority', p_priority
+      );
+    if p_board_id is not null then
+      v_metadata := v_metadata || jsonb_build_object('boardId', p_board_id::text);
+    end if;
+    if v_idempotency_key is not null then
+      v_metadata := v_metadata || jsonb_build_object('idempotencyKey', v_idempotency_key);
+    end if;
+
+    select *
+      into v_created_task
+      from agent_board.create_task(
+        p_thread_id,
+        v_actor_agent_id,
+        trim(p_title),
+        p_details,
+        null,
+        null,
+        p_priority,
+        p_orchestration_mode,
+        v_metadata
+      );
+
+    v_created_event_id := v_created_task.created_event_id;
+
+    select *
+      into v_task
+      from agent_board.tasks
+     where id = v_created_task.task_id;
+  else
+    select te.id
+      into v_created_event_id
+      from agent_board.task_events te
+     where te.task_id = v_task.id
+       and te.event_sequence = 1;
+  end if;
+
+  v_preview := agent_board._trim_inbox_text(coalesce(p_details, p_title), 280);
+  v_fetch_descriptor := agent_board._build_fetch_descriptor(
+    'task',
+    v_task.id,
+    'agent_board.v_task_tree',
+    'tasking delivery',
+    jsonb_build_object('threadId', p_thread_id::text)
+  );
+
+  if v_recipient_ids is not null then
+    foreach v_recipient_id in array v_recipient_ids loop
+      v_recipient := agent_board._upsert_delivery_recipient(
+        'tasking',
+        v_recipient_id,
+        'task',
+        null,
+        v_task.id,
+        null,
+        null,
+        null,
+        jsonb_build_object('priority', p_priority)
+      );
+
+      v_inbox := agent_board._upsert_inbox_item(
+        v_recipient.id,
+        v_recipient_id,
+        null,
+        v_recipient.delivery_mode,
+        'task',
+        null,
+        v_task.id,
+        null,
+        trim(p_title),
+        v_preview,
+        p_priority,
+        true,
+        false,
+        v_fetch_descriptor,
+        jsonb_build_object('threadId', p_thread_id::text)
+      );
+
+      v_delivered_count := v_delivered_count + 1;
+      v_inbox_count := v_inbox_count + 1;
+      v_callback_count := v_callback_count + agent_board._queue_inbox_callbacks(v_inbox.id, 'inbox.item.delivered');
+    end loop;
+  end if;
+
+  if p_board_id is not null then
+    for v_membership in
+      select bm.id, bm.agent_id
+        from agent_board.board_memberships bm
+       where bm.board_id = p_board_id
+         and bm.membership_state in ('joined', 'subscribed')
+       order by bm.created_at
+    loop
+      -- #608: the board fan-out does not deliver a task to the agent that created it. The
+      -- creator's row is KEPT, feed-only, exactly as a board post's author row is: its
+      -- _upsert_delivery_recipient is what stamps threads.board_id (OBSGATE #78), so skipping it
+      -- left a creator-only board's thread unlinked and post_message on the access-only branch of
+      -- the observer gate (codex and grok seats, PR #615 round 1). It also keeps the board
+      -- directory's activity and delegate visibility as they were. An explicit recipient list
+      -- naming the creator still delivers to it: that is the caller addressing itself, and the
+      -- board loop must not then demote the row the explicit loop wrote. It shares that row (the
+      -- delivery upsert keeps the explicit row's null board_id), so demoting it wrote both
+      -- visibility flags false and violated inbox_items_visibility_shape, aborting the whole task
+      -- (every seat on PR #615 round 2).
+      v_is_creator := v_membership.agent_id is not distinct from v_actor_agent_id
+        and not (v_membership.agent_id = any(coalesce(v_recipient_ids, '{}'::uuid[])));
+      v_recipient := agent_board._upsert_delivery_recipient(
+        'tasking',
+        v_membership.agent_id,
+        'task',
+        null,
+        v_task.id,
+        null,
+        p_board_id,
+        v_membership.id,
+        jsonb_build_object('priority', p_priority)
+      );
+
+      v_inbox := agent_board._upsert_inbox_item(
+        v_recipient.id,
+        v_membership.agent_id,
+        v_recipient.board_id,
+        v_recipient.delivery_mode,
+        'task',
+        null,
+        v_task.id,
+        null,
+        trim(p_title),
+        v_preview,
+        p_priority,
+        not v_is_creator,
+        v_recipient.board_id is not null,
+        v_fetch_descriptor,
+        jsonb_build_object('threadId', p_thread_id::text, 'boardId', p_board_id::text)
+      );
+
+      -- The counts are of RECIPIENTS; the creator's feed-only row is not one.
+      if not v_is_creator then
+        v_delivered_count := v_delivered_count + 1;
+        v_inbox_count := v_inbox_count + 1;
+      end if;
+      v_callback_count := v_callback_count + agent_board._queue_inbox_callbacks(v_inbox.id, 'inbox.item.delivered');
+    end loop;
+  end if;
+
+  return query
+  select v_task.id, v_created_event_id, v_delivered_count, v_inbox_count, v_callback_count, v_task.created_at, v_task.updated_at;
+end;
+$function$;
+
+-- =============================================================================
+-- 3. _queue_inbox_callbacks: nothing for a feed-only row
+-- =============================================================================
+create or replace function agent_board._queue_inbox_callbacks(p_inbox_item_id uuid, p_event_category text)
+ RETURNS integer
+ LANGUAGE plpgsql
+ SECURITY DEFINER
+ SET search_path TO 'agent_board', 'public'
+AS $function$
+declare
+  v_inserted_count integer := 0;
+begin
+  if p_event_category not in ('inbox.item.delivered', 'inbox.item.updated') then
+    raise exception 'unsupported inbox callback event category' using errcode = '22023';
+  end if;
+
+  with inserted as (
+    insert into agent_board.callback_outbox_events(
+      endpoint_id,
+      subscription_id,
+      recipient_agent_id,
+      inbox_item_id,
+      board_id,
+      event_category,
+      delivery_mode,
+      source_kind,
+      source_message_id,
+      source_task_id,
+      source_delegation_id,
+      idempotency_key,
+      subject,
+      preview,
+      priority,
+      fetch_descriptor,
+      metadata
+    )
+    select
+      cs.endpoint_id,
+      cs.id,
+      ii.recipient_agent_id,
+      ii.id,
+      null,
+      p_event_category,
+      ii.delivery_mode,
+      ii.source_kind,
+      ii.source_message_id,
+      ii.source_task_id,
+      ii.source_delegation_id,
+      case
+        when p_event_category = 'inbox.item.delivered' then
+          p_event_category || ':' || ii.id::text || ':' || cs.id::text
+        else
+          p_event_category || ':' || ii.id::text || ':' || cs.id::text || ':' || replace(ii.updated_at::text, ' ', 'T') || ':' || ii.action_state
+      end,
+      ii.subject,
+      ii.preview,
+      ii.priority,
+      ii.fetch_descriptor,
+      jsonb_build_object(
+        'subscriptionScope', cs.subscription_scope,
+        'subscriptionStatus', cs.subscription_status,
+        'actionState', ii.action_state
+      )
+    from agent_board.inbox_items ii
+    join agent_board.callback_subscriptions cs
+      on cs.agent_id = ii.recipient_agent_id
+     and cs.subscription_scope = 'own_inbox'
+     and cs.subscription_status = 'active'
+     and cs.event_category = p_event_category
+    join agent_board.callback_endpoints ce
+      on ce.id = cs.endpoint_id
+     and ce.owner_agent_id = cs.agent_id
+     and ce.endpoint_status = 'verified'
+    where ii.id = p_inbox_item_id
+      -- #608: an own_inbox callback is about the inbox. A feed-only row (the author's own board
+      -- post) is not in it, so it queues nothing -- for every caller, not just post_board_message.
+      and ii.visible_in_inbox
+    on conflict (idempotency_key) do nothing
+    returning 1
+  )
+  select count(*) into v_inserted_count from inserted;
+
+  return v_inserted_count;
+end;
+$function$;
+
+-- =============================================================================
+-- 4. _addressing_agent_ids_or_raise: a set-naming descriptor does not reach the actor
+-- =============================================================================
+-- Found by the correctness seat on PR #615 round 1: group_alias and role_selector expand to every
+-- matching active agent, the actor included, and the descriptor overloads of send_multicast_message
+-- and create_tasking_delivery (and the signed paths) pass that set on as an explicit list. So the
+-- board fan-out was not the only expansion: this is the other one, two calls before
+-- _upsert_inbox_item, which is why a writer-caller scan did not see it.
+create or replace function agent_board._addressing_agent_ids_or_raise(p_actor_agent_id uuid, p_recipient_descriptors jsonb)
+ RETURNS uuid[]
+ LANGUAGE plpgsql
+ SECURITY DEFINER
+ SET search_path TO 'agent_board', 'public'
+AS $function$
+declare
+  v_result record;
+  v_ids uuid[];
+  v_actor uuid;
+begin
+  select * into v_result
+    from agent_board.resolve_recipients(p_actor_agent_id, p_recipient_descriptors);
+
+  -- HOSTED (D16, NEW-4): naming a hosted delegate refuses the whole send as an authorization
+  -- failure, before any delivery is written.
+  if exists (
+    select 1
+      from jsonb_array_elements(v_result."deniedRecipients") d
+     where d ->> 'reason' = 'recipient_is_hosted_delegate'
+  ) then
+    raise exception 'a hosted delegate is reached only through a board it is on' using errcode = '42501', detail = v_result."deniedRecipients"::text;
+  end if;
+
+  if jsonb_array_length(v_result."deniedRecipients") > 0 then
+    raise exception 'recipient descriptor resolution failed' using errcode = '22023', detail = v_result."deniedRecipients"::text;
+  end if;
+
+  select array_agg((value ->> 'agentId')::uuid)
+    into v_ids
+    from jsonb_array_elements(v_result."resolvedRecipients") as value;
+
+  if v_ids is null or cardinality(v_ids) = 0 then
+    raise exception 'recipient descriptors resolved no recipients' using errcode = '22023';
+  end if;
+
+  -- #608: a descriptor that names a SET (group_alias, role_selector, and any kind added later)
+  -- does not deliver to the actor; only a descriptor that names the actor itself does (agent_id,
+  -- agent_handle, human_handle, directly or inside an explicit_set). The decision reads every
+  -- resolved row, not resolve_recipients' collapsed set, whose `distinct on` keeps the FIRST
+  -- descriptor for an agent: a group listed before an explicit self-mention would otherwise hide
+  -- the explicit one. The allowlist is of EXPLICIT kinds on purpose: a new set kind defaults to
+  -- not delivering an agent's own message to it. The actor is bound as resolve_recipients binds it.
+  v_actor := agent_board._resolved_actor_agent_id(p_actor_agent_id, 'p_actor_agent_id');
+  if v_actor = any(v_ids)
+     and not exists (
+       select 1
+         from agent_board._resolve_addressing_recipient_rows(v_actor, p_recipient_descriptors) r
+        where r.recipient_agent_id = v_actor
+          and r.descriptor ->> 'kind' in ('agent_id', 'agent_handle', 'human_handle')
+     ) then
+    v_ids := array_remove(v_ids, v_actor);
+    if cardinality(v_ids) = 0 then
+      raise exception 'recipient descriptors resolved only the sender' using errcode = '22023';
+    end if;
+  end if;
+
+  return v_ids;
+end;
+$function$;