@consiliency/agent-board-schema 1.60.0 → 1.63.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (68) hide show
  1. package/README.md +80 -0
  2. package/fixtures/already-applied.json +12 -0
  3. package/migrations/20261011000100_agent_board_session_identities.sql +1964 -0
  4. package/migrations/20261012000100_agent_board_sidowner.sql +209 -0
  5. package/migrations/20261014000100_agent_board_grant_target_role.sql +218 -0
  6. package/package.json +1 -1
  7. package/schema-manifest.json +30 -3
  8. package/src/tooling.test.mjs +6 -2
  9. package/tests/agent_board_atomic_fleet_onboarding.test.sql +13 -4
  10. package/tests/agent_board_consent_emission.test.sql +30 -11
  11. package/tests/agent_board_consent_gating.test.sql +16 -2
  12. package/tests/agent_board_delegate_role_class.test.sql +1 -1
  13. package/tests/agent_board_delegation_cap_ceiling.test.sql +26 -15
  14. package/tests/agent_board_delegation_enforcement.test.sql +1 -1
  15. package/tests/agent_board_enroll_resumption.test.sql +22 -4
  16. package/tests/agent_board_enroll_token_single_use.test.sql +18 -3
  17. package/tests/agent_board_federated_lock_order_class.test.sql +2 -2
  18. package/tests/agent_board_fk_lock_edges.test.sql +74 -14
  19. package/tests/agent_board_grant_target_role.test.sql +1118 -0
  20. package/tests/agent_board_invite_no_downgrade.test.sql +10 -8
  21. package/tests/agent_board_ledger_authority.test.sql +70 -12
  22. package/tests/agent_board_membership_current_row_class.test.sql +9 -1
  23. package/tests/agent_board_mint_fleet_agent_session.test.sql +2 -2
  24. package/tests/agent_board_mint_harden.test.sql +38 -27
  25. package/tests/agent_board_rolereset.test.sql +8 -2
  26. package/tests/agent_board_roomdeleg_lane_b.test.sql +6 -6
  27. package/tests/agent_board_rowid.test.sql +3 -1
  28. package/tests/agent_board_session_identity_approval_revocation.test.sql +334 -0
  29. package/tests/agent_board_session_identity_backfill.test.sql +82 -0
  30. package/tests/agent_board_session_identity_backfill_refusal.test.sql +14 -0
  31. package/tests/agent_board_session_identity_behavior_classes.test.sql +176 -0
  32. package/tests/agent_board_session_identity_class.test.sql +118 -0
  33. package/tests/agent_board_session_identity_fingerprint.test.sql +271 -0
  34. package/tests/agent_board_session_identity_labels_limits.test.sql +205 -0
  35. package/tests/agent_board_session_identity_lease.test.sql +235 -0
  36. package/tests/agent_board_session_identity_lifetime.test.sql +230 -0
  37. package/tests/agent_board_session_identity_limits.test.sql +208 -0
  38. package/tests/agent_board_session_identity_lineage.test.sql +64 -0
  39. package/tests/agent_board_session_identity_link.test.sql +201 -0
  40. package/tests/agent_board_session_identity_mint.test.sql +233 -0
  41. package/tests/agent_board_session_identity_panel_r1.test.sql +194 -0
  42. package/tests/agent_board_session_identity_panel_r2.test.sql +174 -0
  43. package/tests/agent_board_session_identity_protected_actions.test.sql +156 -0
  44. package/tests/agent_board_session_identity_revoke_closure.test.sql +131 -0
  45. package/tests/agent_board_sidowner_leases.test.sql +107 -0
  46. package/tests/agent_board_sidowner_owner_required.test.sql +97 -0
  47. package/tests/agent_board_sidowner_read_class.test.sql +171 -0
  48. package/tests/agent_board_sidowner_reads.test.sql +136 -0
  49. package/tests/agent_board_signer_lifecycle.test.sql +26 -4
  50. package/tests/agent_board_signing_challenge_pending_cap.test.sql +1 -1
  51. package/tests/agent_board_write_enforcement_class.test.sql +74 -15
  52. package/tests/catalog/function_execute_privileges.json +218 -2
  53. package/tests/catalog/p_metadata_parameters.json +98 -2
  54. package/tests/isolation/expected/grant_target_role_race.out +348 -0
  55. package/tests/isolation/expected/session_identity_limits.out +165 -0
  56. package/tests/isolation/expected/session_identity_links.out +235 -0
  57. package/tests/isolation/expected/session_identity_reclaim.out +253 -0
  58. package/tests/isolation/expected/session_identity_renew_revoke.out +115 -0
  59. package/tests/isolation/expected/session_identity_renew_revoke_key_gate.out +138 -0
  60. package/tests/isolation/expected/session_identity_tombstone_onboarding.out +247 -0
  61. package/tests/isolation/specs/grant_target_role_race.spec +207 -0
  62. package/tests/isolation/specs/session_identity_limits.spec +81 -0
  63. package/tests/isolation/specs/session_identity_links.spec +80 -0
  64. package/tests/isolation/specs/session_identity_reclaim.spec +125 -0
  65. package/tests/isolation/specs/session_identity_renew_revoke.spec +84 -0
  66. package/tests/isolation/specs/session_identity_renew_revoke_key_gate.spec +94 -0
  67. package/tests/isolation/specs/session_identity_tombstone_onboarding.spec +108 -0
  68. package/tests/seeds/20261011000100_agent_board_session_identities.sql.pre.sql +47 -0
@@ -559,6 +559,15 @@
559
559
  "authenticated": false
560
560
  }
561
561
  },
562
+ {
563
+ "name": "_mint_fleet_agent_session_legacy",
564
+ "signature": "_mint_fleet_agent_session_legacy(p_challenge_id uuid, p_nonce text, p_signing_key_id uuid, p_agent_id uuid, p_max_ttl_seconds integer)",
565
+ "executable_by": {
566
+ "anon": false,
567
+ "service_role": false,
568
+ "authenticated": false
569
+ }
570
+ },
562
571
  {
563
572
  "name": "_next_callback_attempt_number",
564
573
  "signature": "_next_callback_attempt_number(p_outbox_event_id uuid)",
@@ -775,6 +784,15 @@
775
784
  "authenticated": false
776
785
  }
777
786
  },
787
+ {
788
+ "name": "_revoke_session_identity_family",
789
+ "signature": "_revoke_session_identity_family(p_agent_id uuid, p_actor uuid, p_reason text)",
790
+ "executable_by": {
791
+ "anon": false,
792
+ "service_role": true,
793
+ "authenticated": false
794
+ }
795
+ },
778
796
  {
779
797
  "name": "_role_rank",
780
798
  "signature": "_role_rank(p_role text)",
@@ -793,6 +811,105 @@
793
811
  "authenticated": false
794
812
  }
795
813
  },
814
+ {
815
+ "name": "_session_identity_agent_lineage",
816
+ "signature": "_session_identity_agent_lineage()",
817
+ "executable_by": {
818
+ "anon": false,
819
+ "service_role": true,
820
+ "authenticated": false
821
+ }
822
+ },
823
+ {
824
+ "name": "_session_identity_ancestor_actor",
825
+ "signature": "_session_identity_ancestor_actor(p_identity_agent_id uuid)",
826
+ "executable_by": {
827
+ "anon": false,
828
+ "service_role": true,
829
+ "authenticated": false
830
+ }
831
+ },
832
+ {
833
+ "name": "_session_identity_ancestor_ceiling",
834
+ "signature": "_session_identity_ancestor_ceiling(p_agent_id uuid)",
835
+ "executable_by": {
836
+ "anon": false,
837
+ "service_role": false,
838
+ "authenticated": false
839
+ }
840
+ },
841
+ {
842
+ "name": "_session_identity_check_limits",
843
+ "signature": "_session_identity_check_limits(p_root uuid, p_parent uuid, p_reactivation uuid)",
844
+ "executable_by": {
845
+ "anon": false,
846
+ "service_role": false,
847
+ "authenticated": false
848
+ }
849
+ },
850
+ {
851
+ "name": "_session_identity_has_human_owner",
852
+ "signature": "_session_identity_has_human_owner(p_root_agent_id uuid)",
853
+ "executable_by": {
854
+ "anon": false,
855
+ "service_role": true,
856
+ "authenticated": false
857
+ }
858
+ },
859
+ {
860
+ "name": "_session_identity_kind_immutable",
861
+ "signature": "_session_identity_kind_immutable()",
862
+ "executable_by": {
863
+ "anon": false,
864
+ "service_role": true,
865
+ "authenticated": false
866
+ }
867
+ },
868
+ {
869
+ "name": "_session_identity_lease_live",
870
+ "signature": "_session_identity_lease_live(p_identity uuid)",
871
+ "executable_by": {
872
+ "anon": false,
873
+ "service_role": true,
874
+ "authenticated": false
875
+ }
876
+ },
877
+ {
878
+ "name": "_session_identity_lineage",
879
+ "signature": "_session_identity_lineage()",
880
+ "executable_by": {
881
+ "anon": false,
882
+ "service_role": true,
883
+ "authenticated": false
884
+ }
885
+ },
886
+ {
887
+ "name": "_session_identity_owner",
888
+ "signature": "_session_identity_owner(p_identity_agent_id uuid)",
889
+ "executable_by": {
890
+ "anon": false,
891
+ "service_role": true,
892
+ "authenticated": false
893
+ }
894
+ },
895
+ {
896
+ "name": "_session_identity_read_allowed",
897
+ "signature": "_session_identity_read_allowed(p_identity_agent_id uuid)",
898
+ "executable_by": {
899
+ "anon": false,
900
+ "service_role": true,
901
+ "authenticated": false
902
+ }
903
+ },
904
+ {
905
+ "name": "_session_identity_revocation_actor",
906
+ "signature": "_session_identity_revocation_actor(p_identity_agent_id uuid)",
907
+ "executable_by": {
908
+ "anon": false,
909
+ "service_role": false,
910
+ "authenticated": false
911
+ }
912
+ },
796
913
  {
797
914
  "name": "_signed_write_actor_id",
798
915
  "signature": "_signed_write_actor_id(p_payload jsonb, p_gateway_decision jsonb, p_actor_field text)",
@@ -883,6 +1000,15 @@
883
1000
  "authenticated": true
884
1001
  }
885
1002
  },
1003
+ {
1004
+ "name": "approve_identity_state",
1005
+ "signature": "approve_identity_state(p_identity_agent_id uuid, p_risky_digest text, p_recorded_fingerprint jsonb)",
1006
+ "executable_by": {
1007
+ "anon": false,
1008
+ "service_role": true,
1009
+ "authenticated": false
1010
+ }
1011
+ },
886
1012
  {
887
1013
  "name": "block_board_inviter",
888
1014
  "signature": "block_board_inviter(p_board_id uuid, p_inviter_agent_id uuid, p_target_agent_id uuid, p_metadata jsonb)",
@@ -1108,6 +1234,15 @@
1108
1234
  "authenticated": true
1109
1235
  }
1110
1236
  },
1237
+ {
1238
+ "name": "get_session_identity_state",
1239
+ "signature": "get_session_identity_state(p_identity_agent_id uuid)",
1240
+ "executable_by": {
1241
+ "anon": false,
1242
+ "service_role": true,
1243
+ "authenticated": true
1244
+ }
1245
+ },
1111
1246
  {
1112
1247
  "name": "grant_board_role",
1113
1248
  "signature": "grant_board_role(p_board_id uuid, p_agent_id uuid, p_grantee_role text, p_grantor_agent_id uuid)",
@@ -1126,6 +1261,15 @@
1126
1261
  "authenticated": true
1127
1262
  }
1128
1263
  },
1264
+ {
1265
+ "name": "heartbeat_session_identity",
1266
+ "signature": "heartbeat_session_identity(p_identity_agent_id uuid)",
1267
+ "executable_by": {
1268
+ "anon": false,
1269
+ "service_role": false,
1270
+ "authenticated": true
1271
+ }
1272
+ },
1129
1273
  {
1130
1274
  "name": "invite_board_for_display",
1131
1275
  "signature": "invite_board_for_display(p_code_sha256 text)",
@@ -1171,6 +1315,15 @@
1171
1315
  "authenticated": true
1172
1316
  }
1173
1317
  },
1318
+ {
1319
+ "name": "link_session_alias",
1320
+ "signature": "link_session_alias(p_identity_agent_id uuid, p_identity_lease_epoch text, p_session_id text)",
1321
+ "executable_by": {
1322
+ "anon": false,
1323
+ "service_role": true,
1324
+ "authenticated": false
1325
+ }
1326
+ },
1174
1327
  {
1175
1328
  "name": "list_board_members",
1176
1329
  "signature": "list_board_members(p_board_id uuid)",
@@ -1198,6 +1351,15 @@
1198
1351
  "authenticated": true
1199
1352
  }
1200
1353
  },
1354
+ {
1355
+ "name": "list_session_children",
1356
+ "signature": "list_session_children(p_parent_agent_id uuid)",
1357
+ "executable_by": {
1358
+ "anon": false,
1359
+ "service_role": true,
1360
+ "authenticated": true
1361
+ }
1362
+ },
1201
1363
  {
1202
1364
  "name": "mark_read",
1203
1365
  "signature": "mark_read(p_thread_id uuid, p_agent_id uuid, p_last_read_message_sequence bigint)",
@@ -1218,7 +1380,7 @@
1218
1380
  },
1219
1381
  {
1220
1382
  "name": "mint_delegated_child",
1221
- "signature": "mint_delegated_child(p_root_agent_id uuid, p_child_slug text, p_requested_scopes jsonb, p_child_public_key text, p_ttl interval, p_self_service boolean)",
1383
+ "signature": "mint_delegated_child(p_root_agent_id uuid, p_child_slug text, p_requested_scopes jsonb, p_child_public_key text, p_ttl interval, p_self_service boolean, p_session_harness text, p_session_id text, p_minter_lease_epoch text, p_requested_rooms jsonb, p_fingerprint jsonb, p_forked_from uuid)",
1222
1384
  "executable_by": {
1223
1385
  "anon": false,
1224
1386
  "service_role": true,
@@ -1227,7 +1389,7 @@
1227
1389
  },
1228
1390
  {
1229
1391
  "name": "mint_fleet_agent_session",
1230
- "signature": "mint_fleet_agent_session(p_challenge_id uuid, p_nonce text, p_signing_key_id uuid, p_agent_id uuid, p_max_ttl_seconds integer)",
1392
+ "signature": "mint_fleet_agent_session(p_challenge_id uuid, p_nonce text, p_signing_key_id uuid, p_agent_id uuid, p_max_ttl_seconds integer, p_holder_secret text, p_session_id text)",
1231
1393
  "executable_by": {
1232
1394
  "anon": false,
1233
1395
  "service_role": true,
@@ -1315,6 +1477,15 @@
1315
1477
  "authenticated": false
1316
1478
  }
1317
1479
  },
1480
+ {
1481
+ "name": "readmit_session_identity",
1482
+ "signature": "readmit_session_identity(p_identity_agent_id uuid, p_child_slug text, p_child_public_key text, p_requested_scopes jsonb, p_requested_rooms jsonb, p_ttl interval)",
1483
+ "executable_by": {
1484
+ "anon": false,
1485
+ "service_role": false,
1486
+ "authenticated": true
1487
+ }
1488
+ },
1318
1489
  {
1319
1490
  "name": "reap_expired_enroll_rate_events",
1320
1491
  "signature": "reap_expired_enroll_rate_events(p_older_than interval)",
@@ -1396,6 +1567,15 @@
1396
1567
  "authenticated": false
1397
1568
  }
1398
1569
  },
1570
+ {
1571
+ "name": "record_session_identity_state",
1572
+ "signature": "record_session_identity_state(p_identity_agent_id uuid, p_fingerprint jsonb)",
1573
+ "executable_by": {
1574
+ "anon": false,
1575
+ "service_role": true,
1576
+ "authenticated": false
1577
+ }
1578
+ },
1399
1579
  {
1400
1580
  "name": "record_signing_key_proof_result",
1401
1581
  "signature": "record_signing_key_proof_result(p_challenge_id uuid, p_agent_id uuid, p_key_id text, p_verified boolean, p_failure_class text, p_metadata jsonb)",
@@ -1450,6 +1630,15 @@
1450
1630
  "authenticated": true
1451
1631
  }
1452
1632
  },
1633
+ {
1634
+ "name": "rename_agent",
1635
+ "signature": "rename_agent(p_agent_id uuid, p_display_name text)",
1636
+ "executable_by": {
1637
+ "anon": false,
1638
+ "service_role": false,
1639
+ "authenticated": true
1640
+ }
1641
+ },
1453
1642
  {
1454
1643
  "name": "renew_claim",
1455
1644
  "signature": "renew_claim(p_lease_token uuid, p_lease_expires_at timestamp with time zone)",
@@ -1468,6 +1657,15 @@
1468
1657
  "authenticated": false
1469
1658
  }
1470
1659
  },
1660
+ {
1661
+ "name": "renew_session_identity",
1662
+ "signature": "renew_session_identity(p_identity_agent_id uuid, p_risky_digest text)",
1663
+ "executable_by": {
1664
+ "anon": false,
1665
+ "service_role": true,
1666
+ "authenticated": false
1667
+ }
1668
+ },
1471
1669
  {
1472
1670
  "name": "request_join_board",
1473
1671
  "signature": "request_join_board(p_board_id uuid, p_agent_id uuid, p_metadata jsonb)",
@@ -1585,6 +1783,15 @@
1585
1783
  "authenticated": true
1586
1784
  }
1587
1785
  },
1786
+ {
1787
+ "name": "revoke_session_identity",
1788
+ "signature": "revoke_session_identity(p_identity_agent_id uuid)",
1789
+ "executable_by": {
1790
+ "anon": false,
1791
+ "service_role": false,
1792
+ "authenticated": true
1793
+ }
1794
+ },
1588
1795
  {
1589
1796
  "name": "rotate_agent_token",
1590
1797
  "signature": "rotate_agent_token(p_agent_id uuid)",
@@ -1666,6 +1873,15 @@
1666
1873
  "authenticated": true
1667
1874
  }
1668
1875
  },
1876
+ {
1877
+ "name": "set_board_member_label",
1878
+ "signature": "set_board_member_label(p_board_id uuid, p_agent_id uuid, p_label text)",
1879
+ "executable_by": {
1880
+ "anon": false,
1881
+ "service_role": false,
1882
+ "authenticated": true
1883
+ }
1884
+ },
1669
1885
  {
1670
1886
  "name": "set_board_role_gate",
1671
1887
  "signature": "set_board_role_gate(p_board_id uuid, p_enforced boolean)",
@@ -249,6 +249,10 @@
249
249
  "signature": "_mint_agent_refresh_token()",
250
250
  "declares_p_metadata": false
251
251
  },
252
+ {
253
+ "signature": "_mint_fleet_agent_session_legacy(p_challenge_id uuid, p_nonce text, p_signing_key_id uuid, p_agent_id uuid, p_max_ttl_seconds integer)",
254
+ "declares_p_metadata": false
255
+ },
252
256
  {
253
257
  "signature": "_next_callback_attempt_number(p_outbox_event_id uuid)",
254
258
  "declares_p_metadata": false
@@ -345,6 +349,10 @@
345
349
  "signature": "_revoke_agent_principal(p_agent_id uuid, p_revoked_by_agent_id uuid, p_reason text)",
346
350
  "declares_p_metadata": false
347
351
  },
352
+ {
353
+ "signature": "_revoke_session_identity_family(p_agent_id uuid, p_actor uuid, p_reason text)",
354
+ "declares_p_metadata": false
355
+ },
348
356
  {
349
357
  "signature": "_role_rank(p_role text)",
350
358
  "declares_p_metadata": false
@@ -353,6 +361,50 @@
353
361
  "signature": "_send_fleet_scope_mode(p_scope_key text)",
354
362
  "declares_p_metadata": false
355
363
  },
364
+ {
365
+ "signature": "_session_identity_agent_lineage()",
366
+ "declares_p_metadata": false
367
+ },
368
+ {
369
+ "signature": "_session_identity_ancestor_actor(p_identity_agent_id uuid)",
370
+ "declares_p_metadata": false
371
+ },
372
+ {
373
+ "signature": "_session_identity_ancestor_ceiling(p_agent_id uuid)",
374
+ "declares_p_metadata": false
375
+ },
376
+ {
377
+ "signature": "_session_identity_check_limits(p_root uuid, p_parent uuid, p_reactivation uuid)",
378
+ "declares_p_metadata": false
379
+ },
380
+ {
381
+ "signature": "_session_identity_has_human_owner(p_root_agent_id uuid)",
382
+ "declares_p_metadata": false
383
+ },
384
+ {
385
+ "signature": "_session_identity_kind_immutable()",
386
+ "declares_p_metadata": false
387
+ },
388
+ {
389
+ "signature": "_session_identity_lease_live(p_identity uuid)",
390
+ "declares_p_metadata": false
391
+ },
392
+ {
393
+ "signature": "_session_identity_lineage()",
394
+ "declares_p_metadata": false
395
+ },
396
+ {
397
+ "signature": "_session_identity_owner(p_identity_agent_id uuid)",
398
+ "declares_p_metadata": false
399
+ },
400
+ {
401
+ "signature": "_session_identity_read_allowed(p_identity_agent_id uuid)",
402
+ "declares_p_metadata": false
403
+ },
404
+ {
405
+ "signature": "_session_identity_revocation_actor(p_identity_agent_id uuid)",
406
+ "declares_p_metadata": false
407
+ },
356
408
  {
357
409
  "signature": "_signed_write_actor_id(p_payload jsonb, p_gateway_decision jsonb, p_actor_field text)",
358
410
  "declares_p_metadata": false
@@ -393,6 +445,10 @@
393
445
  "signature": "append_task_event(p_task_id uuid, p_actor_agent_id uuid, p_event_type text, p_payload jsonb, p_status text, p_assigned_agent_id uuid, p_completed_at timestamp with time zone)",
394
446
  "declares_p_metadata": false
395
447
  },
448
+ {
449
+ "signature": "approve_identity_state(p_identity_agent_id uuid, p_risky_digest text, p_recorded_fingerprint jsonb)",
450
+ "declares_p_metadata": false
451
+ },
396
452
  {
397
453
  "signature": "block_board_inviter(p_board_id uuid, p_inviter_agent_id uuid, p_target_agent_id uuid, p_metadata jsonb)",
398
454
  "declares_p_metadata": true
@@ -493,6 +549,10 @@
493
549
  "signature": "get_schema_version()",
494
550
  "declares_p_metadata": false
495
551
  },
552
+ {
553
+ "signature": "get_session_identity_state(p_identity_agent_id uuid)",
554
+ "declares_p_metadata": false
555
+ },
496
556
  {
497
557
  "signature": "grant_board_role(p_board_id uuid, p_agent_id uuid, p_grantee_role text, p_grantor_agent_id uuid)",
498
558
  "declares_p_metadata": false
@@ -501,6 +561,10 @@
501
561
  "signature": "heartbeat(p_agent_id uuid, p_thread_id uuid, p_availability text, p_activity_summary text, p_expires_in interval, p_metadata jsonb)",
502
562
  "declares_p_metadata": true
503
563
  },
564
+ {
565
+ "signature": "heartbeat_session_identity(p_identity_agent_id uuid)",
566
+ "declares_p_metadata": false
567
+ },
504
568
  {
505
569
  "signature": "invite_board_for_display(p_code_sha256 text)",
506
570
  "declares_p_metadata": false
@@ -521,6 +585,10 @@
521
585
  "signature": "leave_board(p_board_id uuid, p_agent_id uuid, p_metadata jsonb)",
522
586
  "declares_p_metadata": true
523
587
  },
588
+ {
589
+ "signature": "link_session_alias(p_identity_agent_id uuid, p_identity_lease_epoch text, p_session_id text)",
590
+ "declares_p_metadata": false
591
+ },
524
592
  {
525
593
  "signature": "list_board_members(p_board_id uuid)",
526
594
  "declares_p_metadata": false
@@ -533,6 +601,10 @@
533
601
  "signature": "list_my_board_requests()",
534
602
  "declares_p_metadata": false
535
603
  },
604
+ {
605
+ "signature": "list_session_children(p_parent_agent_id uuid)",
606
+ "declares_p_metadata": false
607
+ },
536
608
  {
537
609
  "signature": "mark_read(p_thread_id uuid, p_agent_id uuid, p_last_read_message_sequence bigint)",
538
610
  "declares_p_metadata": false
@@ -542,11 +614,11 @@
542
614
  "declares_p_metadata": false
543
615
  },
544
616
  {
545
- "signature": "mint_delegated_child(p_root_agent_id uuid, p_child_slug text, p_requested_scopes jsonb, p_child_public_key text, p_ttl interval, p_self_service boolean)",
617
+ "signature": "mint_delegated_child(p_root_agent_id uuid, p_child_slug text, p_requested_scopes jsonb, p_child_public_key text, p_ttl interval, p_self_service boolean, p_session_harness text, p_session_id text, p_minter_lease_epoch text, p_requested_rooms jsonb, p_fingerprint jsonb, p_forked_from uuid)",
546
618
  "declares_p_metadata": false
547
619
  },
548
620
  {
549
- "signature": "mint_fleet_agent_session(p_challenge_id uuid, p_nonce text, p_signing_key_id uuid, p_agent_id uuid, p_max_ttl_seconds integer)",
621
+ "signature": "mint_fleet_agent_session(p_challenge_id uuid, p_nonce text, p_signing_key_id uuid, p_agent_id uuid, p_max_ttl_seconds integer, p_holder_secret text, p_session_id text)",
550
622
  "declares_p_metadata": false
551
623
  },
552
624
  {
@@ -585,6 +657,10 @@
585
657
  "signature": "reactivate_fleet_machine(p_machine_id uuid, p_reactivated_by_agent_id uuid, p_reactivation_reason text)",
586
658
  "declares_p_metadata": false
587
659
  },
660
+ {
661
+ "signature": "readmit_session_identity(p_identity_agent_id uuid, p_child_slug text, p_child_public_key text, p_requested_scopes jsonb, p_requested_rooms jsonb, p_ttl interval)",
662
+ "declares_p_metadata": false
663
+ },
588
664
  {
589
665
  "signature": "reap_expired_enroll_rate_events(p_older_than interval)",
590
666
  "declares_p_metadata": false
@@ -621,6 +697,10 @@
621
697
  "signature": "record_callback_delivery_terminal_failure(p_outbox_event_id uuid, p_endpoint_id uuid, p_http_status integer, p_error_summary text, p_metadata jsonb)",
622
698
  "declares_p_metadata": true
623
699
  },
700
+ {
701
+ "signature": "record_session_identity_state(p_identity_agent_id uuid, p_fingerprint jsonb)",
702
+ "declares_p_metadata": false
703
+ },
624
704
  {
625
705
  "signature": "record_signing_key_proof_result(p_challenge_id uuid, p_agent_id uuid, p_key_id text, p_verified boolean, p_failure_class text, p_metadata jsonb)",
626
706
  "declares_p_metadata": true
@@ -645,6 +725,10 @@
645
725
  "signature": "release_claim(p_lease_token uuid)",
646
726
  "declares_p_metadata": false
647
727
  },
728
+ {
729
+ "signature": "rename_agent(p_agent_id uuid, p_display_name text)",
730
+ "declares_p_metadata": false
731
+ },
648
732
  {
649
733
  "signature": "renew_claim(p_lease_token uuid, p_lease_expires_at timestamp with time zone)",
650
734
  "declares_p_metadata": false
@@ -653,6 +737,10 @@
653
737
  "signature": "renew_delegated_grant(p_child_agent_id uuid, p_extend interval)",
654
738
  "declares_p_metadata": false
655
739
  },
740
+ {
741
+ "signature": "renew_session_identity(p_identity_agent_id uuid, p_risky_digest text)",
742
+ "declares_p_metadata": false
743
+ },
656
744
  {
657
745
  "signature": "request_join_board(p_board_id uuid, p_agent_id uuid, p_metadata jsonb)",
658
746
  "declares_p_metadata": true
@@ -705,6 +793,10 @@
705
793
  "signature": "revoke_invite_link(p_code text, p_metadata jsonb)",
706
794
  "declares_p_metadata": true
707
795
  },
796
+ {
797
+ "signature": "revoke_session_identity(p_identity_agent_id uuid)",
798
+ "declares_p_metadata": false
799
+ },
708
800
  {
709
801
  "signature": "rotate_agent_token(p_agent_id uuid)",
710
802
  "declares_p_metadata": false
@@ -741,6 +833,10 @@
741
833
  "signature": "set_board_claim_policy(p_board_id uuid, p_claim_policy text)",
742
834
  "declares_p_metadata": false
743
835
  },
836
+ {
837
+ "signature": "set_board_member_label(p_board_id uuid, p_agent_id uuid, p_label text)",
838
+ "declares_p_metadata": false
839
+ },
744
840
  {
745
841
  "signature": "set_board_role_gate(p_board_id uuid, p_enforced boolean)",
746
842
  "declares_p_metadata": false