@consiliency/agent-board-schema 1.60.0 → 1.63.0

package/tests/isolation/expected/grant_target_role_race.out

@@ -0,0 +1,348 @@
+Parsed test spec with 7 sessions
+
+starting permutation: m_begin m_redeem a_begin a_grant_m_observer m_commit a_rollback check
+count
+-----
+    1
+(1 row)
+
+step m_begin: 
+  BEGIN;
+  select set_config('g674.code', (select code from agent_board.board_invite_tokens
+    where board_id = '67430000-0000-4000-8000-000000000001' and preset_role = 'admin'), true) is not null as have_code;
+  SET LOCAL ROLE authenticated;
+  SET LOCAL "request.jwt.claim.role" = 'authenticated';
+  SET LOCAL "request.jwt.claim.sub" = '67410000-0000-4000-8000-000000000003';
+
+have_code
+---------
+t        
+(1 row)
+
+step m_redeem: select role, membership_state from agent_board.redeem_invite_link(current_setting('g674.code'));
+role |membership_state
+-----+----------------
+admin|joined          
+(1 row)
+
+step a_begin: 
+  BEGIN;
+  SET LOCAL ROLE authenticated;
+  SET LOCAL "request.jwt.claim.role" = 'authenticated';
+  SET LOCAL "request.jwt.claim.sub" = '67410000-0000-4000-8000-000000000002';
+
+step a_grant_m_observer: 
+  select role from agent_board.grant_board_role('67430000-0000-4000-8000-000000000001',
+    '67420000-0000-4000-8000-000000000003', 'observer');
+ <waiting ...>
+step m_commit: COMMIT;
+step a_grant_m_observer: <... completed>
+ERROR:  grant requires a higher board role than the target
+step a_rollback: ROLLBACK;
+step check: 
+  select a.handle, bm.role, bm.membership_state
+    from agent_board.board_memberships bm join agent_board.agents a on a.id = bm.agent_id
+   where bm.board_id = '67430000-0000-4000-8000-000000000001'
+   order by a.handle, bm.membership_state;
+
+handle     |role    |membership_state
+-----------+--------+----------------
+g674-iso-a1|admin   |joined          
+g674-iso-g |member  |joined          
+g674-iso-m |admin   |joined          
+g674-iso-o |owner   |joined          
+g674-iso-v |observer|joined          
+(5 rows)
+
+
+starting permutation: o_begin o_remove_m a_begin a_grant_m_observer o_commit a_rollback check
+count
+-----
+    1
+(1 row)
+
+step o_begin: 
+  BEGIN;
+  SET LOCAL ROLE authenticated;
+  SET LOCAL "request.jwt.claim.role" = 'authenticated';
+  SET LOCAL "request.jwt.claim.sub" = '67410000-0000-4000-8000-000000000001';
+
+step o_remove_m: 
+  select membership_state from agent_board.update_board_membership('67430000-0000-4000-8000-000000000001',
+    '67420000-0000-4000-8000-000000000003', 'removed');
+
+membership_state
+----------------
+removed         
+(1 row)
+
+step a_begin: 
+  BEGIN;
+  SET LOCAL ROLE authenticated;
+  SET LOCAL "request.jwt.claim.role" = 'authenticated';
+  SET LOCAL "request.jwt.claim.sub" = '67410000-0000-4000-8000-000000000002';
+
+step a_grant_m_observer: 
+  select role from agent_board.grant_board_role('67430000-0000-4000-8000-000000000001',
+    '67420000-0000-4000-8000-000000000003', 'observer');
+ <waiting ...>
+step o_commit: COMMIT;
+step a_grant_m_observer: <... completed>
+ERROR:  grantee has no membership on this board
+step a_rollback: ROLLBACK;
+step check: 
+  select a.handle, bm.role, bm.membership_state
+    from agent_board.board_memberships bm join agent_board.agents a on a.id = bm.agent_id
+   where bm.board_id = '67430000-0000-4000-8000-000000000001'
+   order by a.handle, bm.membership_state;
+
+handle     |role    |membership_state
+-----------+--------+----------------
+g674-iso-a1|admin   |joined          
+g674-iso-g |member  |joined          
+g674-iso-m |member  |removed         
+g674-iso-o |owner   |joined          
+g674-iso-v |observer|joined          
+(5 rows)
+
+
+starting permutation: o_begin o_demote_a a_begin a_grant_m_observer o_commit a_rollback check
+count
+-----
+    1
+(1 row)
+
+step o_begin: 
+  BEGIN;
+  SET LOCAL ROLE authenticated;
+  SET LOCAL "request.jwt.claim.role" = 'authenticated';
+  SET LOCAL "request.jwt.claim.sub" = '67410000-0000-4000-8000-000000000001';
+
+step o_demote_a: 
+  select role from agent_board.grant_board_role('67430000-0000-4000-8000-000000000001',
+    '67420000-0000-4000-8000-000000000002', 'member');
+
+role  
+------
+member
+(1 row)
+
+step a_begin: 
+  BEGIN;
+  SET LOCAL ROLE authenticated;
+  SET LOCAL "request.jwt.claim.role" = 'authenticated';
+  SET LOCAL "request.jwt.claim.sub" = '67410000-0000-4000-8000-000000000002';
+
+step a_grant_m_observer: 
+  select role from agent_board.grant_board_role('67430000-0000-4000-8000-000000000001',
+    '67420000-0000-4000-8000-000000000003', 'observer');
+ <waiting ...>
+step o_commit: COMMIT;
+step a_grant_m_observer: <... completed>
+ERROR:  grant on another member requires owner or admin role
+step a_rollback: ROLLBACK;
+step check: 
+  select a.handle, bm.role, bm.membership_state
+    from agent_board.board_memberships bm join agent_board.agents a on a.id = bm.agent_id
+   where bm.board_id = '67430000-0000-4000-8000-000000000001'
+   order by a.handle, bm.membership_state;
+
+handle     |role    |membership_state
+-----------+--------+----------------
+g674-iso-a1|member  |joined          
+g674-iso-g |member  |joined          
+g674-iso-m |member  |joined          
+g674-iso-o |owner   |joined          
+g674-iso-v |observer|joined          
+(5 rows)
+
+
+starting permutation: a_begin a_grant_m_observer o_begin o_demote_a a_commit o_commit check
+count
+-----
+    1
+(1 row)
+
+step a_begin: 
+  BEGIN;
+  SET LOCAL ROLE authenticated;
+  SET LOCAL "request.jwt.claim.role" = 'authenticated';
+  SET LOCAL "request.jwt.claim.sub" = '67410000-0000-4000-8000-000000000002';
+
+step a_grant_m_observer: 
+  select role from agent_board.grant_board_role('67430000-0000-4000-8000-000000000001',
+    '67420000-0000-4000-8000-000000000003', 'observer');
+
+role    
+--------
+observer
+(1 row)
+
+step o_begin: 
+  BEGIN;
+  SET LOCAL ROLE authenticated;
+  SET LOCAL "request.jwt.claim.role" = 'authenticated';
+  SET LOCAL "request.jwt.claim.sub" = '67410000-0000-4000-8000-000000000001';
+
+step o_demote_a: 
+  select role from agent_board.grant_board_role('67430000-0000-4000-8000-000000000001',
+    '67420000-0000-4000-8000-000000000002', 'member');
+ <waiting ...>
+step a_commit: COMMIT;
+step o_demote_a: <... completed>
+role  
+------
+member
+(1 row)
+
+step o_commit: COMMIT;
+step check: 
+  select a.handle, bm.role, bm.membership_state
+    from agent_board.board_memberships bm join agent_board.agents a on a.id = bm.agent_id
+   where bm.board_id = '67430000-0000-4000-8000-000000000001'
+   order by a.handle, bm.membership_state;
+
+handle     |role    |membership_state
+-----------+--------+----------------
+g674-iso-a1|member  |joined          
+g674-iso-g |member  |joined          
+g674-iso-m |observer|joined          
+g674-iso-o |owner   |joined          
+g674-iso-v |observer|joined          
+(5 rows)
+
+
+starting permutation: p_begin p_post p_holds_m_fk o_begin o_grant_m_observer p_commit o_commit check
+count
+-----
+    1
+(1 row)
+
+step p_begin: 
+  BEGIN;
+  SET LOCAL ROLE authenticated;
+  SET LOCAL "request.jwt.claim.role" = 'authenticated';
+  SET LOCAL "request.jwt.claim.sub" = '67410000-0000-4000-8000-000000000001';
+
+step p_post: 
+  select count(*) > 0 as posted from agent_board.post_board_message('67440000-0000-4000-8000-000000000001',
+    '67420000-0000-4000-8000-000000000001', '67430000-0000-4000-8000-000000000001', 'g674 iso', 'fan-out to M');
+
+posted
+------
+t     
+(1 row)
+
+step p_holds_m_fk: 
+  RESET ROLE;
+  select count(*) as m_delivery_rows from agent_board.delivery_recipients dr
+    join agent_board.board_memberships bm on bm.id = dr.board_membership_id
+   where bm.board_id = '67430000-0000-4000-8000-000000000001' and bm.agent_id = '67420000-0000-4000-8000-000000000003';
+
+m_delivery_rows
+---------------
+              1
+(1 row)
+
+step o_begin: 
+  BEGIN;
+  SET LOCAL ROLE authenticated;
+  SET LOCAL "request.jwt.claim.role" = 'authenticated';
+  SET LOCAL "request.jwt.claim.sub" = '67410000-0000-4000-8000-000000000001';
+
+step o_grant_m_observer: 
+  select role from agent_board.grant_board_role('67430000-0000-4000-8000-000000000001',
+    '67420000-0000-4000-8000-000000000003', 'observer');
+
+role    
+--------
+observer
+(1 row)
+
+step p_commit: COMMIT;
+step o_commit: COMMIT;
+step check: 
+  select a.handle, bm.role, bm.membership_state
+    from agent_board.board_memberships bm join agent_board.agents a on a.id = bm.agent_id
+   where bm.board_id = '67430000-0000-4000-8000-000000000001'
+   order by a.handle, bm.membership_state;
+
+handle     |role    |membership_state
+-----------+--------+----------------
+g674-iso-a1|admin   |joined          
+g674-iso-g |member  |joined          
+g674-iso-m |observer|joined          
+g674-iso-o |owner   |joined          
+g674-iso-v |observer|joined          
+(5 rows)
+
+
+starting permutation: g_begin g_redeem g2_begin g2_grant_v_member g2_rollback g_commit g2_retry_begin g2_retry_grant_v_member g2_commit check
+count
+-----
+    1
+(1 row)
+
+step g_begin: 
+  BEGIN;
+  select set_config('g674.code', (select code from agent_board.board_invite_tokens
+    where board_id = '67430000-0000-4000-8000-000000000001' and preset_role = 'admin'), true) is not null as have_code;
+  SET LOCAL ROLE authenticated;
+  SET LOCAL "request.jwt.claim.role" = 'authenticated';
+  SET LOCAL "request.jwt.claim.sub" = '67410000-0000-4000-8000-000000000005';
+
+have_code
+---------
+t        
+(1 row)
+
+step g_redeem: select role, membership_state from agent_board.redeem_invite_link(current_setting('g674.code'));
+role |membership_state
+-----+----------------
+admin|joined          
+(1 row)
+
+step g2_begin: 
+  BEGIN;
+  SET LOCAL ROLE authenticated;
+  SET LOCAL "request.jwt.claim.role" = 'authenticated';
+  SET LOCAL "request.jwt.claim.sub" = '67410000-0000-4000-8000-000000000005';
+
+step g2_grant_v_member: 
+  select role from agent_board.grant_board_role('67430000-0000-4000-8000-000000000001',
+    '67420000-0000-4000-8000-000000000004', 'member');
+
+ERROR:  grant on another member requires owner or admin role
+step g2_rollback: ROLLBACK;
+step g_commit: COMMIT;
+step g2_retry_begin: 
+  BEGIN;
+  SET LOCAL ROLE authenticated;
+  SET LOCAL "request.jwt.claim.role" = 'authenticated';
+  SET LOCAL "request.jwt.claim.sub" = '67410000-0000-4000-8000-000000000005';
+
+step g2_retry_grant_v_member: 
+  select role from agent_board.grant_board_role('67430000-0000-4000-8000-000000000001',
+    '67420000-0000-4000-8000-000000000004', 'member');
+
+role  
+------
+member
+(1 row)
+
+step g2_commit: COMMIT;
+step check: 
+  select a.handle, bm.role, bm.membership_state
+    from agent_board.board_memberships bm join agent_board.agents a on a.id = bm.agent_id
+   where bm.board_id = '67430000-0000-4000-8000-000000000001'
+   order by a.handle, bm.membership_state;
+
+handle     |role  |membership_state
+-----------+------+----------------
+g674-iso-a1|admin |joined          
+g674-iso-g |admin |joined          
+g674-iso-m |member|joined          
+g674-iso-o |owner |joined          
+g674-iso-v |member|joined          
+(5 rows)
+

package/tests/isolation/expected/session_identity_limits.out

@@ -0,0 +1,165 @@
+Parsed test spec with 3 sessions
+
+starting permutation: a_begin a_mint b_begin b_mint a_commit b_commit check
+step a_begin: BEGIN; SET LOCAL ROLE service_role; SET LOCAL "request.jwt.claim.role" = 'service_role';
+step a_mint: 
+  do $$ begin
+    perform * from agent_board.mint_delegated_child('78000000-0000-4000-8000-000000000001', 'sid-limit-a', '[]',
+      public.test_pubkey('sid-limit-a'), interval '1 hour', false, 'codex', 'limit-a');
+  end $$;
+
+step b_begin: BEGIN; SET LOCAL ROLE service_role; SET LOCAL "request.jwt.claim.role" = 'service_role';
+step b_mint: 
+  do $$ begin
+    perform * from agent_board.mint_delegated_child('78000000-0000-4000-8000-000000000001', 'sid-limit-b', '[]',
+      public.test_pubkey('sid-limit-b'), interval '1 hour', false, 'codex', 'limit-b');
+  end $$;
+ <waiting ...>
+step a_commit: COMMIT;
+step b_mint: <... completed>
+ERROR:  identity_limit_hourly_exceeded
+step b_commit: COMMIT;
+step check: 
+  select count(*) as mixed_hourly, count(*) filter (where revoked_at is not null) as tombstoned_hourly
+  from agent_board.delegation_grants where root_agent_id = '78000000-0000-4000-8000-000000000001';
+  select count(*) as new_principals from agent_board.agents where handle in ('sid-limit-a', 'sid-limit-b');
+  select count(*) as aliases from agent_board.session_id_aliases where root_agent_id = '78000000-0000-4000-8000-000000000001';
+
+mixed_hourly|tombstoned_hourly
+------------+-----------------
+          60|               29
+(1 row)
+
+new_principals
+--------------
+             1
+(1 row)
+
+aliases
+-------
+      1
+(1 row)
+
+
+starting permutation: b_begin b_mint a_begin a_mint b_commit a_commit check
+step b_begin: BEGIN; SET LOCAL ROLE service_role; SET LOCAL "request.jwt.claim.role" = 'service_role';
+step b_mint: 
+  do $$ begin
+    perform * from agent_board.mint_delegated_child('78000000-0000-4000-8000-000000000001', 'sid-limit-b', '[]',
+      public.test_pubkey('sid-limit-b'), interval '1 hour', false, 'codex', 'limit-b');
+  end $$;
+
+step a_begin: BEGIN; SET LOCAL ROLE service_role; SET LOCAL "request.jwt.claim.role" = 'service_role';
+step a_mint: 
+  do $$ begin
+    perform * from agent_board.mint_delegated_child('78000000-0000-4000-8000-000000000001', 'sid-limit-a', '[]',
+      public.test_pubkey('sid-limit-a'), interval '1 hour', false, 'codex', 'limit-a');
+  end $$;
+ <waiting ...>
+step b_commit: COMMIT;
+step a_mint: <... completed>
+ERROR:  identity_limit_hourly_exceeded
+step a_commit: COMMIT;
+step check: 
+  select count(*) as mixed_hourly, count(*) filter (where revoked_at is not null) as tombstoned_hourly
+  from agent_board.delegation_grants where root_agent_id = '78000000-0000-4000-8000-000000000001';
+  select count(*) as new_principals from agent_board.agents where handle in ('sid-limit-a', 'sid-limit-b');
+  select count(*) as aliases from agent_board.session_id_aliases where root_agent_id = '78000000-0000-4000-8000-000000000001';
+
+mixed_hourly|tombstoned_hourly
+------------+-----------------
+          60|               29
+(1 row)
+
+new_principals
+--------------
+             1
+(1 row)
+
+aliases
+-------
+      1
+(1 row)
+
+
+starting permutation: a_begin a_mint b_begin b_duplicate a_commit b_commit check
+step a_begin: BEGIN; SET LOCAL ROLE service_role; SET LOCAL "request.jwt.claim.role" = 'service_role';
+step a_mint: 
+  do $$ begin
+    perform * from agent_board.mint_delegated_child('78000000-0000-4000-8000-000000000001', 'sid-limit-a', '[]',
+      public.test_pubkey('sid-limit-a'), interval '1 hour', false, 'codex', 'limit-a');
+  end $$;
+
+step b_begin: BEGIN; SET LOCAL ROLE service_role; SET LOCAL "request.jwt.claim.role" = 'service_role';
+step b_duplicate: 
+  do $$ begin
+    perform * from agent_board.mint_delegated_child('78000000-0000-4000-8000-000000000001', 'sid-limit-b', '[]',
+      public.test_pubkey('sid-limit-b'), interval '1 hour', false, 'codex', 'limit-a');
+  end $$;
+ <waiting ...>
+step a_commit: COMMIT;
+step b_duplicate: <... completed>
+ERROR:  identity_lease_live
+step b_commit: COMMIT;
+step check: 
+  select count(*) as mixed_hourly, count(*) filter (where revoked_at is not null) as tombstoned_hourly
+  from agent_board.delegation_grants where root_agent_id = '78000000-0000-4000-8000-000000000001';
+  select count(*) as new_principals from agent_board.agents where handle in ('sid-limit-a', 'sid-limit-b');
+  select count(*) as aliases from agent_board.session_id_aliases where root_agent_id = '78000000-0000-4000-8000-000000000001';
+
+mixed_hourly|tombstoned_hourly
+------------+-----------------
+          60|               29
+(1 row)
+
+new_principals
+--------------
+             1
+(1 row)
+
+aliases
+-------
+      1
+(1 row)
+
+
+starting permutation: b_begin b_duplicate a_begin a_mint b_commit a_commit check
+step b_begin: BEGIN; SET LOCAL ROLE service_role; SET LOCAL "request.jwt.claim.role" = 'service_role';
+step b_duplicate: 
+  do $$ begin
+    perform * from agent_board.mint_delegated_child('78000000-0000-4000-8000-000000000001', 'sid-limit-b', '[]',
+      public.test_pubkey('sid-limit-b'), interval '1 hour', false, 'codex', 'limit-a');
+  end $$;
+
+step a_begin: BEGIN; SET LOCAL ROLE service_role; SET LOCAL "request.jwt.claim.role" = 'service_role';
+step a_mint: 
+  do $$ begin
+    perform * from agent_board.mint_delegated_child('78000000-0000-4000-8000-000000000001', 'sid-limit-a', '[]',
+      public.test_pubkey('sid-limit-a'), interval '1 hour', false, 'codex', 'limit-a');
+  end $$;
+ <waiting ...>
+step b_commit: COMMIT;
+step a_mint: <... completed>
+ERROR:  identity_lease_live
+step a_commit: COMMIT;
+step check: 
+  select count(*) as mixed_hourly, count(*) filter (where revoked_at is not null) as tombstoned_hourly
+  from agent_board.delegation_grants where root_agent_id = '78000000-0000-4000-8000-000000000001';
+  select count(*) as new_principals from agent_board.agents where handle in ('sid-limit-a', 'sid-limit-b');
+  select count(*) as aliases from agent_board.session_id_aliases where root_agent_id = '78000000-0000-4000-8000-000000000001';
+
+mixed_hourly|tombstoned_hourly
+------------+-----------------
+          60|               29
+(1 row)
+
+new_principals
+--------------
+             1
+(1 row)
+
+aliases
+-------
+      1
+(1 row)
+