@consiliency/agent-board-schema 1.60.0 → 1.64.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +86 -0
- package/fixtures/already-applied.json +16 -0
- package/migrations/20261011000100_agent_board_session_identities.sql +1964 -0
- package/migrations/20261012000100_agent_board_sidowner.sql +209 -0
- package/migrations/20261014000100_agent_board_grant_target_role.sql +218 -0
- package/migrations/20261014000200_agent_board_last_owner.sql +239 -0
- package/package.json +1 -1
- package/schema-manifest.json +39 -3
- package/src/tooling.test.mjs +10 -2
- package/tests/agent_board_atomic_fleet_onboarding.test.sql +15 -4
- package/tests/agent_board_atomic_fleet_onboarding_runtime.test.sql +7 -0
- package/tests/agent_board_consent_emission.test.sql +30 -11
- package/tests/agent_board_consent_gating.test.sql +16 -2
- package/tests/agent_board_delegate_role_class.test.sql +1 -1
- package/tests/agent_board_delegation_cap_ceiling.test.sql +26 -15
- package/tests/agent_board_delegation_enforcement.test.sql +1 -1
- package/tests/agent_board_enroll_resumption.test.sql +22 -4
- package/tests/agent_board_enroll_token_single_use.test.sql +18 -3
- package/tests/agent_board_federated_lock_order_class.test.sql +2 -2
- package/tests/agent_board_fk_lock_edges.test.sql +77 -16
- package/tests/agent_board_grant_target_role.test.sql +1118 -0
- package/tests/agent_board_hosted_delegates.test.sql +5 -3
- package/tests/agent_board_invite_no_downgrade.test.sql +15 -11
- package/tests/agent_board_ledger_authority.test.sql +77 -12
- package/tests/agent_board_membership_current_row_class.test.sql +9 -1
- package/tests/agent_board_mint_fleet_agent_session.test.sql +2 -2
- package/tests/agent_board_mint_harden.test.sql +38 -27
- package/tests/agent_board_role_guard.test.sql +319 -0
- package/tests/agent_board_rolereset.test.sql +25 -29
- package/tests/agent_board_roomdeleg.test.sql +8 -0
- package/tests/agent_board_roomdeleg_lane_b.test.sql +6 -6
- package/tests/agent_board_roomown.test.sql +3 -1
- package/tests/agent_board_rowid.test.sql +7 -2
- package/tests/agent_board_session_identity_approval_revocation.test.sql +334 -0
- package/tests/agent_board_session_identity_backfill.test.sql +82 -0
- package/tests/agent_board_session_identity_backfill_refusal.test.sql +14 -0
- package/tests/agent_board_session_identity_behavior_classes.test.sql +176 -0
- package/tests/agent_board_session_identity_class.test.sql +118 -0
- package/tests/agent_board_session_identity_fingerprint.test.sql +271 -0
- package/tests/agent_board_session_identity_labels_limits.test.sql +205 -0
- package/tests/agent_board_session_identity_lease.test.sql +235 -0
- package/tests/agent_board_session_identity_lifetime.test.sql +230 -0
- package/tests/agent_board_session_identity_limits.test.sql +208 -0
- package/tests/agent_board_session_identity_lineage.test.sql +64 -0
- package/tests/agent_board_session_identity_link.test.sql +201 -0
- package/tests/agent_board_session_identity_mint.test.sql +233 -0
- package/tests/agent_board_session_identity_panel_r1.test.sql +194 -0
- package/tests/agent_board_session_identity_panel_r2.test.sql +174 -0
- package/tests/agent_board_session_identity_protected_actions.test.sql +156 -0
- package/tests/agent_board_session_identity_revoke_closure.test.sql +131 -0
- package/tests/agent_board_sidowner_leases.test.sql +107 -0
- package/tests/agent_board_sidowner_owner_required.test.sql +97 -0
- package/tests/agent_board_sidowner_read_class.test.sql +171 -0
- package/tests/agent_board_sidowner_reads.test.sql +136 -0
- package/tests/agent_board_signer_lifecycle.test.sql +26 -4
- package/tests/agent_board_signing_challenge_pending_cap.test.sql +1 -1
- package/tests/agent_board_write_enforcement_class.test.sql +74 -15
- package/tests/catalog/function_execute_privileges.json +227 -2
- package/tests/catalog/p_metadata_parameters.json +102 -2
- package/tests/isolation/expected/grant_target_role_race.out +348 -0
- package/tests/isolation/expected/last_owner_departure.out +562 -0
- package/tests/isolation/expected/session_identity_limits.out +165 -0
- package/tests/isolation/expected/session_identity_links.out +235 -0
- package/tests/isolation/expected/session_identity_reclaim.out +253 -0
- package/tests/isolation/expected/session_identity_renew_revoke.out +115 -0
- package/tests/isolation/expected/session_identity_renew_revoke_key_gate.out +138 -0
- package/tests/isolation/expected/session_identity_tombstone_onboarding.out +247 -0
- package/tests/isolation/specs/atomic_fleet_authority_races.spec +8 -3
- package/tests/isolation/specs/atomic_fleet_binding_revoke.spec +0 -3
- package/tests/isolation/specs/atomic_fleet_board_archive.spec +0 -3
- package/tests/isolation/specs/atomic_fleet_human_fresh_revoke.spec +0 -3
- package/tests/isolation/specs/atomic_fleet_identity_disposition.spec +0 -3
- package/tests/isolation/specs/atomic_fleet_lifecycle_races.spec +0 -3
- package/tests/isolation/specs/atomic_fleet_subtree_lock_order.spec +0 -3
- package/tests/isolation/specs/ceiling_setter_lock_before_upsert.spec +0 -3
- package/tests/isolation/specs/claimpolicy_acquire_revert_race.spec +0 -2
- package/tests/isolation/specs/claimpolicy_board_scope.spec +0 -2
- package/tests/isolation/specs/claimpolicy_claimrow_lock_order.spec +0 -2
- package/tests/isolation/specs/claimpolicy_isolation_refusal.spec +0 -2
- package/tests/isolation/specs/claimpolicy_renew_revert_race.spec +0 -2
- package/tests/isolation/specs/claimpolicy_writer_keyshare.spec +0 -2
- package/tests/isolation/specs/consent_approval_lock.spec +0 -1
- package/tests/isolation/specs/consent_emit_actual_state.spec +0 -1
- package/tests/isolation/specs/grant_target_role_race.spec +206 -0
- package/tests/isolation/specs/hosted_delegate_add_tombstone_race.spec +0 -1
- package/tests/isolation/specs/hosted_delegate_tombstone_revoke_race.spec +0 -1
- package/tests/isolation/specs/hosted_delegate_withdraw_evict_race.spec +0 -1
- package/tests/isolation/specs/last_owner_departure.spec +137 -0
- package/tests/isolation/specs/ledger_authority_revoke.spec +0 -3
- package/tests/isolation/specs/onboarding_ceiling_lock_order.spec +0 -3
- package/tests/isolation/specs/outbox_wake_ordering.spec +0 -1
- package/tests/isolation/specs/session_identity_limits.spec +81 -0
- package/tests/isolation/specs/session_identity_links.spec +82 -0
- package/tests/isolation/specs/session_identity_reclaim.spec +125 -0
- package/tests/isolation/specs/session_identity_renew_revoke.spec +84 -0
- package/tests/isolation/specs/session_identity_renew_revoke_key_gate.spec +94 -0
- package/tests/isolation/specs/session_identity_tombstone_onboarding.spec +107 -0
- package/tests/isolation/specs/signed_grant_onboarding_deadlock.spec +0 -1
- package/tests/isolation/specs/signer_lifecycle_revoke.spec +0 -1
- package/tests/seeds/20261011000100_agent_board_session_identities.sql.pre.sql +47 -0
|
@@ -109,6 +109,15 @@
|
|
|
109
109
|
"authenticated": true
|
|
110
110
|
}
|
|
111
111
|
},
|
|
112
|
+
{
|
|
113
|
+
"name": "_board_memberships_last_owner_guard",
|
|
114
|
+
"signature": "_board_memberships_last_owner_guard()",
|
|
115
|
+
"executable_by": {
|
|
116
|
+
"anon": false,
|
|
117
|
+
"service_role": false,
|
|
118
|
+
"authenticated": false
|
|
119
|
+
}
|
|
120
|
+
},
|
|
112
121
|
{
|
|
113
122
|
"name": "_build_fetch_descriptor",
|
|
114
123
|
"signature": "_build_fetch_descriptor(p_surface text, p_target_id uuid, p_view text, p_reason text, p_filters jsonb)",
|
|
@@ -559,6 +568,15 @@
|
|
|
559
568
|
"authenticated": false
|
|
560
569
|
}
|
|
561
570
|
},
|
|
571
|
+
{
|
|
572
|
+
"name": "_mint_fleet_agent_session_legacy",
|
|
573
|
+
"signature": "_mint_fleet_agent_session_legacy(p_challenge_id uuid, p_nonce text, p_signing_key_id uuid, p_agent_id uuid, p_max_ttl_seconds integer)",
|
|
574
|
+
"executable_by": {
|
|
575
|
+
"anon": false,
|
|
576
|
+
"service_role": false,
|
|
577
|
+
"authenticated": false
|
|
578
|
+
}
|
|
579
|
+
},
|
|
562
580
|
{
|
|
563
581
|
"name": "_next_callback_attempt_number",
|
|
564
582
|
"signature": "_next_callback_attempt_number(p_outbox_event_id uuid)",
|
|
@@ -775,6 +793,15 @@
|
|
|
775
793
|
"authenticated": false
|
|
776
794
|
}
|
|
777
795
|
},
|
|
796
|
+
{
|
|
797
|
+
"name": "_revoke_session_identity_family",
|
|
798
|
+
"signature": "_revoke_session_identity_family(p_agent_id uuid, p_actor uuid, p_reason text)",
|
|
799
|
+
"executable_by": {
|
|
800
|
+
"anon": false,
|
|
801
|
+
"service_role": true,
|
|
802
|
+
"authenticated": false
|
|
803
|
+
}
|
|
804
|
+
},
|
|
778
805
|
{
|
|
779
806
|
"name": "_role_rank",
|
|
780
807
|
"signature": "_role_rank(p_role text)",
|
|
@@ -793,6 +820,105 @@
|
|
|
793
820
|
"authenticated": false
|
|
794
821
|
}
|
|
795
822
|
},
|
|
823
|
+
{
|
|
824
|
+
"name": "_session_identity_agent_lineage",
|
|
825
|
+
"signature": "_session_identity_agent_lineage()",
|
|
826
|
+
"executable_by": {
|
|
827
|
+
"anon": false,
|
|
828
|
+
"service_role": true,
|
|
829
|
+
"authenticated": false
|
|
830
|
+
}
|
|
831
|
+
},
|
|
832
|
+
{
|
|
833
|
+
"name": "_session_identity_ancestor_actor",
|
|
834
|
+
"signature": "_session_identity_ancestor_actor(p_identity_agent_id uuid)",
|
|
835
|
+
"executable_by": {
|
|
836
|
+
"anon": false,
|
|
837
|
+
"service_role": true,
|
|
838
|
+
"authenticated": false
|
|
839
|
+
}
|
|
840
|
+
},
|
|
841
|
+
{
|
|
842
|
+
"name": "_session_identity_ancestor_ceiling",
|
|
843
|
+
"signature": "_session_identity_ancestor_ceiling(p_agent_id uuid)",
|
|
844
|
+
"executable_by": {
|
|
845
|
+
"anon": false,
|
|
846
|
+
"service_role": false,
|
|
847
|
+
"authenticated": false
|
|
848
|
+
}
|
|
849
|
+
},
|
|
850
|
+
{
|
|
851
|
+
"name": "_session_identity_check_limits",
|
|
852
|
+
"signature": "_session_identity_check_limits(p_root uuid, p_parent uuid, p_reactivation uuid)",
|
|
853
|
+
"executable_by": {
|
|
854
|
+
"anon": false,
|
|
855
|
+
"service_role": false,
|
|
856
|
+
"authenticated": false
|
|
857
|
+
}
|
|
858
|
+
},
|
|
859
|
+
{
|
|
860
|
+
"name": "_session_identity_has_human_owner",
|
|
861
|
+
"signature": "_session_identity_has_human_owner(p_root_agent_id uuid)",
|
|
862
|
+
"executable_by": {
|
|
863
|
+
"anon": false,
|
|
864
|
+
"service_role": true,
|
|
865
|
+
"authenticated": false
|
|
866
|
+
}
|
|
867
|
+
},
|
|
868
|
+
{
|
|
869
|
+
"name": "_session_identity_kind_immutable",
|
|
870
|
+
"signature": "_session_identity_kind_immutable()",
|
|
871
|
+
"executable_by": {
|
|
872
|
+
"anon": false,
|
|
873
|
+
"service_role": true,
|
|
874
|
+
"authenticated": false
|
|
875
|
+
}
|
|
876
|
+
},
|
|
877
|
+
{
|
|
878
|
+
"name": "_session_identity_lease_live",
|
|
879
|
+
"signature": "_session_identity_lease_live(p_identity uuid)",
|
|
880
|
+
"executable_by": {
|
|
881
|
+
"anon": false,
|
|
882
|
+
"service_role": true,
|
|
883
|
+
"authenticated": false
|
|
884
|
+
}
|
|
885
|
+
},
|
|
886
|
+
{
|
|
887
|
+
"name": "_session_identity_lineage",
|
|
888
|
+
"signature": "_session_identity_lineage()",
|
|
889
|
+
"executable_by": {
|
|
890
|
+
"anon": false,
|
|
891
|
+
"service_role": true,
|
|
892
|
+
"authenticated": false
|
|
893
|
+
}
|
|
894
|
+
},
|
|
895
|
+
{
|
|
896
|
+
"name": "_session_identity_owner",
|
|
897
|
+
"signature": "_session_identity_owner(p_identity_agent_id uuid)",
|
|
898
|
+
"executable_by": {
|
|
899
|
+
"anon": false,
|
|
900
|
+
"service_role": true,
|
|
901
|
+
"authenticated": false
|
|
902
|
+
}
|
|
903
|
+
},
|
|
904
|
+
{
|
|
905
|
+
"name": "_session_identity_read_allowed",
|
|
906
|
+
"signature": "_session_identity_read_allowed(p_identity_agent_id uuid)",
|
|
907
|
+
"executable_by": {
|
|
908
|
+
"anon": false,
|
|
909
|
+
"service_role": true,
|
|
910
|
+
"authenticated": false
|
|
911
|
+
}
|
|
912
|
+
},
|
|
913
|
+
{
|
|
914
|
+
"name": "_session_identity_revocation_actor",
|
|
915
|
+
"signature": "_session_identity_revocation_actor(p_identity_agent_id uuid)",
|
|
916
|
+
"executable_by": {
|
|
917
|
+
"anon": false,
|
|
918
|
+
"service_role": false,
|
|
919
|
+
"authenticated": false
|
|
920
|
+
}
|
|
921
|
+
},
|
|
796
922
|
{
|
|
797
923
|
"name": "_signed_write_actor_id",
|
|
798
924
|
"signature": "_signed_write_actor_id(p_payload jsonb, p_gateway_decision jsonb, p_actor_field text)",
|
|
@@ -883,6 +1009,15 @@
|
|
|
883
1009
|
"authenticated": true
|
|
884
1010
|
}
|
|
885
1011
|
},
|
|
1012
|
+
{
|
|
1013
|
+
"name": "approve_identity_state",
|
|
1014
|
+
"signature": "approve_identity_state(p_identity_agent_id uuid, p_risky_digest text, p_recorded_fingerprint jsonb)",
|
|
1015
|
+
"executable_by": {
|
|
1016
|
+
"anon": false,
|
|
1017
|
+
"service_role": true,
|
|
1018
|
+
"authenticated": false
|
|
1019
|
+
}
|
|
1020
|
+
},
|
|
886
1021
|
{
|
|
887
1022
|
"name": "block_board_inviter",
|
|
888
1023
|
"signature": "block_board_inviter(p_board_id uuid, p_inviter_agent_id uuid, p_target_agent_id uuid, p_metadata jsonb)",
|
|
@@ -1108,6 +1243,15 @@
|
|
|
1108
1243
|
"authenticated": true
|
|
1109
1244
|
}
|
|
1110
1245
|
},
|
|
1246
|
+
{
|
|
1247
|
+
"name": "get_session_identity_state",
|
|
1248
|
+
"signature": "get_session_identity_state(p_identity_agent_id uuid)",
|
|
1249
|
+
"executable_by": {
|
|
1250
|
+
"anon": false,
|
|
1251
|
+
"service_role": true,
|
|
1252
|
+
"authenticated": true
|
|
1253
|
+
}
|
|
1254
|
+
},
|
|
1111
1255
|
{
|
|
1112
1256
|
"name": "grant_board_role",
|
|
1113
1257
|
"signature": "grant_board_role(p_board_id uuid, p_agent_id uuid, p_grantee_role text, p_grantor_agent_id uuid)",
|
|
@@ -1126,6 +1270,15 @@
|
|
|
1126
1270
|
"authenticated": true
|
|
1127
1271
|
}
|
|
1128
1272
|
},
|
|
1273
|
+
{
|
|
1274
|
+
"name": "heartbeat_session_identity",
|
|
1275
|
+
"signature": "heartbeat_session_identity(p_identity_agent_id uuid)",
|
|
1276
|
+
"executable_by": {
|
|
1277
|
+
"anon": false,
|
|
1278
|
+
"service_role": false,
|
|
1279
|
+
"authenticated": true
|
|
1280
|
+
}
|
|
1281
|
+
},
|
|
1129
1282
|
{
|
|
1130
1283
|
"name": "invite_board_for_display",
|
|
1131
1284
|
"signature": "invite_board_for_display(p_code_sha256 text)",
|
|
@@ -1171,6 +1324,15 @@
|
|
|
1171
1324
|
"authenticated": true
|
|
1172
1325
|
}
|
|
1173
1326
|
},
|
|
1327
|
+
{
|
|
1328
|
+
"name": "link_session_alias",
|
|
1329
|
+
"signature": "link_session_alias(p_identity_agent_id uuid, p_identity_lease_epoch text, p_session_id text)",
|
|
1330
|
+
"executable_by": {
|
|
1331
|
+
"anon": false,
|
|
1332
|
+
"service_role": true,
|
|
1333
|
+
"authenticated": false
|
|
1334
|
+
}
|
|
1335
|
+
},
|
|
1174
1336
|
{
|
|
1175
1337
|
"name": "list_board_members",
|
|
1176
1338
|
"signature": "list_board_members(p_board_id uuid)",
|
|
@@ -1198,6 +1360,15 @@
|
|
|
1198
1360
|
"authenticated": true
|
|
1199
1361
|
}
|
|
1200
1362
|
},
|
|
1363
|
+
{
|
|
1364
|
+
"name": "list_session_children",
|
|
1365
|
+
"signature": "list_session_children(p_parent_agent_id uuid)",
|
|
1366
|
+
"executable_by": {
|
|
1367
|
+
"anon": false,
|
|
1368
|
+
"service_role": true,
|
|
1369
|
+
"authenticated": true
|
|
1370
|
+
}
|
|
1371
|
+
},
|
|
1201
1372
|
{
|
|
1202
1373
|
"name": "mark_read",
|
|
1203
1374
|
"signature": "mark_read(p_thread_id uuid, p_agent_id uuid, p_last_read_message_sequence bigint)",
|
|
@@ -1218,7 +1389,7 @@
|
|
|
1218
1389
|
},
|
|
1219
1390
|
{
|
|
1220
1391
|
"name": "mint_delegated_child",
|
|
1221
|
-
"signature": "mint_delegated_child(p_root_agent_id uuid, p_child_slug text, p_requested_scopes jsonb, p_child_public_key text, p_ttl interval, p_self_service boolean)",
|
|
1392
|
+
"signature": "mint_delegated_child(p_root_agent_id uuid, p_child_slug text, p_requested_scopes jsonb, p_child_public_key text, p_ttl interval, p_self_service boolean, p_session_harness text, p_session_id text, p_minter_lease_epoch text, p_requested_rooms jsonb, p_fingerprint jsonb, p_forked_from uuid)",
|
|
1222
1393
|
"executable_by": {
|
|
1223
1394
|
"anon": false,
|
|
1224
1395
|
"service_role": true,
|
|
@@ -1227,7 +1398,7 @@
|
|
|
1227
1398
|
},
|
|
1228
1399
|
{
|
|
1229
1400
|
"name": "mint_fleet_agent_session",
|
|
1230
|
-
"signature": "mint_fleet_agent_session(p_challenge_id uuid, p_nonce text, p_signing_key_id uuid, p_agent_id uuid, p_max_ttl_seconds integer)",
|
|
1401
|
+
"signature": "mint_fleet_agent_session(p_challenge_id uuid, p_nonce text, p_signing_key_id uuid, p_agent_id uuid, p_max_ttl_seconds integer, p_holder_secret text, p_session_id text)",
|
|
1231
1402
|
"executable_by": {
|
|
1232
1403
|
"anon": false,
|
|
1233
1404
|
"service_role": true,
|
|
@@ -1315,6 +1486,15 @@
|
|
|
1315
1486
|
"authenticated": false
|
|
1316
1487
|
}
|
|
1317
1488
|
},
|
|
1489
|
+
{
|
|
1490
|
+
"name": "readmit_session_identity",
|
|
1491
|
+
"signature": "readmit_session_identity(p_identity_agent_id uuid, p_child_slug text, p_child_public_key text, p_requested_scopes jsonb, p_requested_rooms jsonb, p_ttl interval)",
|
|
1492
|
+
"executable_by": {
|
|
1493
|
+
"anon": false,
|
|
1494
|
+
"service_role": false,
|
|
1495
|
+
"authenticated": true
|
|
1496
|
+
}
|
|
1497
|
+
},
|
|
1318
1498
|
{
|
|
1319
1499
|
"name": "reap_expired_enroll_rate_events",
|
|
1320
1500
|
"signature": "reap_expired_enroll_rate_events(p_older_than interval)",
|
|
@@ -1396,6 +1576,15 @@
|
|
|
1396
1576
|
"authenticated": false
|
|
1397
1577
|
}
|
|
1398
1578
|
},
|
|
1579
|
+
{
|
|
1580
|
+
"name": "record_session_identity_state",
|
|
1581
|
+
"signature": "record_session_identity_state(p_identity_agent_id uuid, p_fingerprint jsonb)",
|
|
1582
|
+
"executable_by": {
|
|
1583
|
+
"anon": false,
|
|
1584
|
+
"service_role": true,
|
|
1585
|
+
"authenticated": false
|
|
1586
|
+
}
|
|
1587
|
+
},
|
|
1399
1588
|
{
|
|
1400
1589
|
"name": "record_signing_key_proof_result",
|
|
1401
1590
|
"signature": "record_signing_key_proof_result(p_challenge_id uuid, p_agent_id uuid, p_key_id text, p_verified boolean, p_failure_class text, p_metadata jsonb)",
|
|
@@ -1450,6 +1639,15 @@
|
|
|
1450
1639
|
"authenticated": true
|
|
1451
1640
|
}
|
|
1452
1641
|
},
|
|
1642
|
+
{
|
|
1643
|
+
"name": "rename_agent",
|
|
1644
|
+
"signature": "rename_agent(p_agent_id uuid, p_display_name text)",
|
|
1645
|
+
"executable_by": {
|
|
1646
|
+
"anon": false,
|
|
1647
|
+
"service_role": false,
|
|
1648
|
+
"authenticated": true
|
|
1649
|
+
}
|
|
1650
|
+
},
|
|
1453
1651
|
{
|
|
1454
1652
|
"name": "renew_claim",
|
|
1455
1653
|
"signature": "renew_claim(p_lease_token uuid, p_lease_expires_at timestamp with time zone)",
|
|
@@ -1468,6 +1666,15 @@
|
|
|
1468
1666
|
"authenticated": false
|
|
1469
1667
|
}
|
|
1470
1668
|
},
|
|
1669
|
+
{
|
|
1670
|
+
"name": "renew_session_identity",
|
|
1671
|
+
"signature": "renew_session_identity(p_identity_agent_id uuid, p_risky_digest text)",
|
|
1672
|
+
"executable_by": {
|
|
1673
|
+
"anon": false,
|
|
1674
|
+
"service_role": true,
|
|
1675
|
+
"authenticated": false
|
|
1676
|
+
}
|
|
1677
|
+
},
|
|
1471
1678
|
{
|
|
1472
1679
|
"name": "request_join_board",
|
|
1473
1680
|
"signature": "request_join_board(p_board_id uuid, p_agent_id uuid, p_metadata jsonb)",
|
|
@@ -1585,6 +1792,15 @@
|
|
|
1585
1792
|
"authenticated": true
|
|
1586
1793
|
}
|
|
1587
1794
|
},
|
|
1795
|
+
{
|
|
1796
|
+
"name": "revoke_session_identity",
|
|
1797
|
+
"signature": "revoke_session_identity(p_identity_agent_id uuid)",
|
|
1798
|
+
"executable_by": {
|
|
1799
|
+
"anon": false,
|
|
1800
|
+
"service_role": false,
|
|
1801
|
+
"authenticated": true
|
|
1802
|
+
}
|
|
1803
|
+
},
|
|
1588
1804
|
{
|
|
1589
1805
|
"name": "rotate_agent_token",
|
|
1590
1806
|
"signature": "rotate_agent_token(p_agent_id uuid)",
|
|
@@ -1666,6 +1882,15 @@
|
|
|
1666
1882
|
"authenticated": true
|
|
1667
1883
|
}
|
|
1668
1884
|
},
|
|
1885
|
+
{
|
|
1886
|
+
"name": "set_board_member_label",
|
|
1887
|
+
"signature": "set_board_member_label(p_board_id uuid, p_agent_id uuid, p_label text)",
|
|
1888
|
+
"executable_by": {
|
|
1889
|
+
"anon": false,
|
|
1890
|
+
"service_role": false,
|
|
1891
|
+
"authenticated": true
|
|
1892
|
+
}
|
|
1893
|
+
},
|
|
1669
1894
|
{
|
|
1670
1895
|
"name": "set_board_role_gate",
|
|
1671
1896
|
"signature": "set_board_role_gate(p_board_id uuid, p_enforced boolean)",
|
|
@@ -49,6 +49,10 @@
|
|
|
49
49
|
"signature": "_board_membership_events_provenance_guard()",
|
|
50
50
|
"declares_p_metadata": false
|
|
51
51
|
},
|
|
52
|
+
{
|
|
53
|
+
"signature": "_board_memberships_last_owner_guard()",
|
|
54
|
+
"declares_p_metadata": false
|
|
55
|
+
},
|
|
52
56
|
{
|
|
53
57
|
"signature": "_build_fetch_descriptor(p_surface text, p_target_id uuid, p_view text, p_reason text, p_filters jsonb)",
|
|
54
58
|
"declares_p_metadata": false
|
|
@@ -249,6 +253,10 @@
|
|
|
249
253
|
"signature": "_mint_agent_refresh_token()",
|
|
250
254
|
"declares_p_metadata": false
|
|
251
255
|
},
|
|
256
|
+
{
|
|
257
|
+
"signature": "_mint_fleet_agent_session_legacy(p_challenge_id uuid, p_nonce text, p_signing_key_id uuid, p_agent_id uuid, p_max_ttl_seconds integer)",
|
|
258
|
+
"declares_p_metadata": false
|
|
259
|
+
},
|
|
252
260
|
{
|
|
253
261
|
"signature": "_next_callback_attempt_number(p_outbox_event_id uuid)",
|
|
254
262
|
"declares_p_metadata": false
|
|
@@ -345,6 +353,10 @@
|
|
|
345
353
|
"signature": "_revoke_agent_principal(p_agent_id uuid, p_revoked_by_agent_id uuid, p_reason text)",
|
|
346
354
|
"declares_p_metadata": false
|
|
347
355
|
},
|
|
356
|
+
{
|
|
357
|
+
"signature": "_revoke_session_identity_family(p_agent_id uuid, p_actor uuid, p_reason text)",
|
|
358
|
+
"declares_p_metadata": false
|
|
359
|
+
},
|
|
348
360
|
{
|
|
349
361
|
"signature": "_role_rank(p_role text)",
|
|
350
362
|
"declares_p_metadata": false
|
|
@@ -353,6 +365,50 @@
|
|
|
353
365
|
"signature": "_send_fleet_scope_mode(p_scope_key text)",
|
|
354
366
|
"declares_p_metadata": false
|
|
355
367
|
},
|
|
368
|
+
{
|
|
369
|
+
"signature": "_session_identity_agent_lineage()",
|
|
370
|
+
"declares_p_metadata": false
|
|
371
|
+
},
|
|
372
|
+
{
|
|
373
|
+
"signature": "_session_identity_ancestor_actor(p_identity_agent_id uuid)",
|
|
374
|
+
"declares_p_metadata": false
|
|
375
|
+
},
|
|
376
|
+
{
|
|
377
|
+
"signature": "_session_identity_ancestor_ceiling(p_agent_id uuid)",
|
|
378
|
+
"declares_p_metadata": false
|
|
379
|
+
},
|
|
380
|
+
{
|
|
381
|
+
"signature": "_session_identity_check_limits(p_root uuid, p_parent uuid, p_reactivation uuid)",
|
|
382
|
+
"declares_p_metadata": false
|
|
383
|
+
},
|
|
384
|
+
{
|
|
385
|
+
"signature": "_session_identity_has_human_owner(p_root_agent_id uuid)",
|
|
386
|
+
"declares_p_metadata": false
|
|
387
|
+
},
|
|
388
|
+
{
|
|
389
|
+
"signature": "_session_identity_kind_immutable()",
|
|
390
|
+
"declares_p_metadata": false
|
|
391
|
+
},
|
|
392
|
+
{
|
|
393
|
+
"signature": "_session_identity_lease_live(p_identity uuid)",
|
|
394
|
+
"declares_p_metadata": false
|
|
395
|
+
},
|
|
396
|
+
{
|
|
397
|
+
"signature": "_session_identity_lineage()",
|
|
398
|
+
"declares_p_metadata": false
|
|
399
|
+
},
|
|
400
|
+
{
|
|
401
|
+
"signature": "_session_identity_owner(p_identity_agent_id uuid)",
|
|
402
|
+
"declares_p_metadata": false
|
|
403
|
+
},
|
|
404
|
+
{
|
|
405
|
+
"signature": "_session_identity_read_allowed(p_identity_agent_id uuid)",
|
|
406
|
+
"declares_p_metadata": false
|
|
407
|
+
},
|
|
408
|
+
{
|
|
409
|
+
"signature": "_session_identity_revocation_actor(p_identity_agent_id uuid)",
|
|
410
|
+
"declares_p_metadata": false
|
|
411
|
+
},
|
|
356
412
|
{
|
|
357
413
|
"signature": "_signed_write_actor_id(p_payload jsonb, p_gateway_decision jsonb, p_actor_field text)",
|
|
358
414
|
"declares_p_metadata": false
|
|
@@ -393,6 +449,10 @@
|
|
|
393
449
|
"signature": "append_task_event(p_task_id uuid, p_actor_agent_id uuid, p_event_type text, p_payload jsonb, p_status text, p_assigned_agent_id uuid, p_completed_at timestamp with time zone)",
|
|
394
450
|
"declares_p_metadata": false
|
|
395
451
|
},
|
|
452
|
+
{
|
|
453
|
+
"signature": "approve_identity_state(p_identity_agent_id uuid, p_risky_digest text, p_recorded_fingerprint jsonb)",
|
|
454
|
+
"declares_p_metadata": false
|
|
455
|
+
},
|
|
396
456
|
{
|
|
397
457
|
"signature": "block_board_inviter(p_board_id uuid, p_inviter_agent_id uuid, p_target_agent_id uuid, p_metadata jsonb)",
|
|
398
458
|
"declares_p_metadata": true
|
|
@@ -493,6 +553,10 @@
|
|
|
493
553
|
"signature": "get_schema_version()",
|
|
494
554
|
"declares_p_metadata": false
|
|
495
555
|
},
|
|
556
|
+
{
|
|
557
|
+
"signature": "get_session_identity_state(p_identity_agent_id uuid)",
|
|
558
|
+
"declares_p_metadata": false
|
|
559
|
+
},
|
|
496
560
|
{
|
|
497
561
|
"signature": "grant_board_role(p_board_id uuid, p_agent_id uuid, p_grantee_role text, p_grantor_agent_id uuid)",
|
|
498
562
|
"declares_p_metadata": false
|
|
@@ -501,6 +565,10 @@
|
|
|
501
565
|
"signature": "heartbeat(p_agent_id uuid, p_thread_id uuid, p_availability text, p_activity_summary text, p_expires_in interval, p_metadata jsonb)",
|
|
502
566
|
"declares_p_metadata": true
|
|
503
567
|
},
|
|
568
|
+
{
|
|
569
|
+
"signature": "heartbeat_session_identity(p_identity_agent_id uuid)",
|
|
570
|
+
"declares_p_metadata": false
|
|
571
|
+
},
|
|
504
572
|
{
|
|
505
573
|
"signature": "invite_board_for_display(p_code_sha256 text)",
|
|
506
574
|
"declares_p_metadata": false
|
|
@@ -521,6 +589,10 @@
|
|
|
521
589
|
"signature": "leave_board(p_board_id uuid, p_agent_id uuid, p_metadata jsonb)",
|
|
522
590
|
"declares_p_metadata": true
|
|
523
591
|
},
|
|
592
|
+
{
|
|
593
|
+
"signature": "link_session_alias(p_identity_agent_id uuid, p_identity_lease_epoch text, p_session_id text)",
|
|
594
|
+
"declares_p_metadata": false
|
|
595
|
+
},
|
|
524
596
|
{
|
|
525
597
|
"signature": "list_board_members(p_board_id uuid)",
|
|
526
598
|
"declares_p_metadata": false
|
|
@@ -533,6 +605,10 @@
|
|
|
533
605
|
"signature": "list_my_board_requests()",
|
|
534
606
|
"declares_p_metadata": false
|
|
535
607
|
},
|
|
608
|
+
{
|
|
609
|
+
"signature": "list_session_children(p_parent_agent_id uuid)",
|
|
610
|
+
"declares_p_metadata": false
|
|
611
|
+
},
|
|
536
612
|
{
|
|
537
613
|
"signature": "mark_read(p_thread_id uuid, p_agent_id uuid, p_last_read_message_sequence bigint)",
|
|
538
614
|
"declares_p_metadata": false
|
|
@@ -542,11 +618,11 @@
|
|
|
542
618
|
"declares_p_metadata": false
|
|
543
619
|
},
|
|
544
620
|
{
|
|
545
|
-
"signature": "mint_delegated_child(p_root_agent_id uuid, p_child_slug text, p_requested_scopes jsonb, p_child_public_key text, p_ttl interval, p_self_service boolean)",
|
|
621
|
+
"signature": "mint_delegated_child(p_root_agent_id uuid, p_child_slug text, p_requested_scopes jsonb, p_child_public_key text, p_ttl interval, p_self_service boolean, p_session_harness text, p_session_id text, p_minter_lease_epoch text, p_requested_rooms jsonb, p_fingerprint jsonb, p_forked_from uuid)",
|
|
546
622
|
"declares_p_metadata": false
|
|
547
623
|
},
|
|
548
624
|
{
|
|
549
|
-
"signature": "mint_fleet_agent_session(p_challenge_id uuid, p_nonce text, p_signing_key_id uuid, p_agent_id uuid, p_max_ttl_seconds integer)",
|
|
625
|
+
"signature": "mint_fleet_agent_session(p_challenge_id uuid, p_nonce text, p_signing_key_id uuid, p_agent_id uuid, p_max_ttl_seconds integer, p_holder_secret text, p_session_id text)",
|
|
550
626
|
"declares_p_metadata": false
|
|
551
627
|
},
|
|
552
628
|
{
|
|
@@ -585,6 +661,10 @@
|
|
|
585
661
|
"signature": "reactivate_fleet_machine(p_machine_id uuid, p_reactivated_by_agent_id uuid, p_reactivation_reason text)",
|
|
586
662
|
"declares_p_metadata": false
|
|
587
663
|
},
|
|
664
|
+
{
|
|
665
|
+
"signature": "readmit_session_identity(p_identity_agent_id uuid, p_child_slug text, p_child_public_key text, p_requested_scopes jsonb, p_requested_rooms jsonb, p_ttl interval)",
|
|
666
|
+
"declares_p_metadata": false
|
|
667
|
+
},
|
|
588
668
|
{
|
|
589
669
|
"signature": "reap_expired_enroll_rate_events(p_older_than interval)",
|
|
590
670
|
"declares_p_metadata": false
|
|
@@ -621,6 +701,10 @@
|
|
|
621
701
|
"signature": "record_callback_delivery_terminal_failure(p_outbox_event_id uuid, p_endpoint_id uuid, p_http_status integer, p_error_summary text, p_metadata jsonb)",
|
|
622
702
|
"declares_p_metadata": true
|
|
623
703
|
},
|
|
704
|
+
{
|
|
705
|
+
"signature": "record_session_identity_state(p_identity_agent_id uuid, p_fingerprint jsonb)",
|
|
706
|
+
"declares_p_metadata": false
|
|
707
|
+
},
|
|
624
708
|
{
|
|
625
709
|
"signature": "record_signing_key_proof_result(p_challenge_id uuid, p_agent_id uuid, p_key_id text, p_verified boolean, p_failure_class text, p_metadata jsonb)",
|
|
626
710
|
"declares_p_metadata": true
|
|
@@ -645,6 +729,10 @@
|
|
|
645
729
|
"signature": "release_claim(p_lease_token uuid)",
|
|
646
730
|
"declares_p_metadata": false
|
|
647
731
|
},
|
|
732
|
+
{
|
|
733
|
+
"signature": "rename_agent(p_agent_id uuid, p_display_name text)",
|
|
734
|
+
"declares_p_metadata": false
|
|
735
|
+
},
|
|
648
736
|
{
|
|
649
737
|
"signature": "renew_claim(p_lease_token uuid, p_lease_expires_at timestamp with time zone)",
|
|
650
738
|
"declares_p_metadata": false
|
|
@@ -653,6 +741,10 @@
|
|
|
653
741
|
"signature": "renew_delegated_grant(p_child_agent_id uuid, p_extend interval)",
|
|
654
742
|
"declares_p_metadata": false
|
|
655
743
|
},
|
|
744
|
+
{
|
|
745
|
+
"signature": "renew_session_identity(p_identity_agent_id uuid, p_risky_digest text)",
|
|
746
|
+
"declares_p_metadata": false
|
|
747
|
+
},
|
|
656
748
|
{
|
|
657
749
|
"signature": "request_join_board(p_board_id uuid, p_agent_id uuid, p_metadata jsonb)",
|
|
658
750
|
"declares_p_metadata": true
|
|
@@ -705,6 +797,10 @@
|
|
|
705
797
|
"signature": "revoke_invite_link(p_code text, p_metadata jsonb)",
|
|
706
798
|
"declares_p_metadata": true
|
|
707
799
|
},
|
|
800
|
+
{
|
|
801
|
+
"signature": "revoke_session_identity(p_identity_agent_id uuid)",
|
|
802
|
+
"declares_p_metadata": false
|
|
803
|
+
},
|
|
708
804
|
{
|
|
709
805
|
"signature": "rotate_agent_token(p_agent_id uuid)",
|
|
710
806
|
"declares_p_metadata": false
|
|
@@ -741,6 +837,10 @@
|
|
|
741
837
|
"signature": "set_board_claim_policy(p_board_id uuid, p_claim_policy text)",
|
|
742
838
|
"declares_p_metadata": false
|
|
743
839
|
},
|
|
840
|
+
{
|
|
841
|
+
"signature": "set_board_member_label(p_board_id uuid, p_agent_id uuid, p_label text)",
|
|
842
|
+
"declares_p_metadata": false
|
|
843
|
+
},
|
|
744
844
|
{
|
|
745
845
|
"signature": "set_board_role_gate(p_board_id uuid, p_enforced boolean)",
|
|
746
846
|
"declares_p_metadata": false
|