@consiliency/agent-board-schema 1.63.0 → 1.68.0

package/tests/isolation/specs/claimpolicy_claimrow_lock_order.spec

@@ -133,8 +133,6 @@ teardown
   delete from agent_board.threads where id = '40500000-0000-4000-8000-000000000090';
   delete from agent_board.board_membership_events where board_id in (
     select id from agent_board.boards where slug = 'cpr-inv-board');
-  delete from agent_board.board_memberships where board_id in (
-    select id from agent_board.boards where slug = 'cpr-inv-board');
   delete from agent_board.boards where slug = 'cpr-inv-board';
   delete from agent_board.fleet_revocation_events where subject_id = '40500000-0000-4000-8000-0000000000c0';
   delete from agent_board.fleet_machine_agents where machine_id = '40500000-0000-4000-8000-0000000000c0';

package/tests/isolation/specs/claimpolicy_isolation_refusal.spec

@@ -59,8 +59,6 @@ teardown
   delete from agent_board.threads where id = '40500000-0000-4000-8000-000000000050';
   delete from agent_board.board_membership_events where board_id in (
     select id from agent_board.boards where slug = 'cpr-iso-board');
-  delete from agent_board.board_memberships where board_id in (
-    select id from agent_board.boards where slug = 'cpr-iso-board');
   delete from agent_board.boards where slug = 'cpr-iso-board';
   delete from agent_board.agents where id = '40500000-0000-4000-8000-000000000004';
   delete from auth.users where id = '40500000-0000-4000-8000-0000000000d1';

package/tests/isolation/specs/claimpolicy_renew_revert_race.spec

@@ -99,8 +99,6 @@ teardown
   delete from agent_board.threads where id = '40500000-0000-4000-8000-000000000020';
   delete from agent_board.board_membership_events where board_id in (
     select id from agent_board.boards where slug = 'cpr-ren-board');
-  delete from agent_board.board_memberships where board_id in (
-    select id from agent_board.boards where slug = 'cpr-ren-board');
   delete from agent_board.boards where slug = 'cpr-ren-board';
   delete from agent_board.agents where id = '40500000-0000-4000-8000-000000000002';
   delete from auth.users where id = '40500000-0000-4000-8000-0000000000b1';

package/tests/isolation/specs/claimpolicy_writer_keyshare.spec

@@ -56,8 +56,6 @@ teardown
   delete from agent_board.threads where id = '40500000-0000-4000-8000-000000000060';
   delete from agent_board.board_membership_events where board_id in (
     select id from agent_board.boards where slug = 'cpr-ks-board');
-  delete from agent_board.board_memberships where board_id in (
-    select id from agent_board.boards where slug = 'cpr-ks-board');
   delete from agent_board.boards where slug = 'cpr-ks-board';
   delete from agent_board.agents where id = '40500000-0000-4000-8000-000000000005';
   delete from auth.users where id = '40500000-0000-4000-8000-0000000000e1';

package/tests/isolation/specs/consent_approval_lock.spec

@@ -24,9 +24,9 @@
 # it does to A, isolating the lock as the single variable. The withdrawer withdraws
 # the ACTIVE row A; it blocks on the SET-lock, then applies after commit.
 #
-# Both sessions run as service_role — the SET-lock sits AFTER the actor check and is
-# actor-independent, so this needs no auth.users identity substrate; the lock trace
-# is identical to the authenticated path.
+# Consiliency/message-board#668: the approver has a resolved active owner identity,
+# matching the resolver's flat authority gate. The withdrawer remains service_role;
+# the whole-set lock must still serialize the same two physical rows.
 #
 # MUTATION SIGNAL (a TRACE diff): drop the `for update` block, OR narrow it with
 # `and bm.membership_state in ('requested','invited')` — either leaves A unlocked, so
@@ -35,15 +35,20 @@
 
 setup
 {
-  insert into agent_board.agents(id, agent_type, handle, display_name, status) values
-    ('115a0000-0000-4000-8000-000000000001', 'agent', 'iso115-owner',   'Iso115 Owner',   'active'),
-    ('115a0000-0000-4000-8000-000000000002', 'agent', 'iso115-subject', 'Iso115 Subject', 'active');
+  insert into auth.users(id, instance_id, aud, role, email) values
+    ('115d0000-0000-4000-8000-000000000001', '00000000-0000-0000-0000-000000000000',
+     'authenticated', 'authenticated', 'iso115-owner@example.test');
+  insert into agent_board.agents(id, agent_type, handle, display_name, status, auth_user_id, owner_user_id) values
+    ('115a0000-0000-4000-8000-000000000001', 'agent', 'iso115-owner',   'Iso115 Owner',   'active', '115d0000-0000-4000-8000-000000000001', '115d0000-0000-4000-8000-000000000001'),
+    ('115a0000-0000-4000-8000-000000000002', 'agent', 'iso115-subject', 'Iso115 Subject', 'active', null, null);
   insert into agent_board.boards(id, slug, name, created_by_agent_id, visibility, status)
     values ('115b0000-0000-4000-8000-000000000001', 'iso115-board', 'Iso115 Board',
             '115a0000-0000-4000-8000-000000000001', 'private', 'active');
   -- Legal (active, pending) duplicate for the subject: A is joined (active), P is a
   -- separate pending request. The active-unique index permits it (only A is active).
   insert into agent_board.board_memberships(id, board_id, agent_id, membership_state, role, created_by_agent_id) values
+    ('115c0000-0000-4000-8000-000000000001', '115b0000-0000-4000-8000-000000000001',
+     '115a0000-0000-4000-8000-000000000001', 'joined', 'owner', '115a0000-0000-4000-8000-000000000001'),
     ('115c0000-0000-4000-8000-0000000000aa', '115b0000-0000-4000-8000-000000000001',
      '115a0000-0000-4000-8000-000000000002', 'joined',    'member', '115a0000-0000-4000-8000-000000000002'),
     ('115c0000-0000-4000-8000-0000000000bb', '115b0000-0000-4000-8000-000000000001',
@@ -53,16 +58,16 @@ setup
 teardown
 {
   delete from agent_board.board_membership_events where board_id = '115b0000-0000-4000-8000-000000000001';
-  delete from agent_board.board_memberships     where board_id = '115b0000-0000-4000-8000-000000000001';
   delete from agent_board.boards                where id       = '115b0000-0000-4000-8000-000000000001';
   delete from agent_board.agents                where id in ('115a0000-0000-4000-8000-000000000001','115a0000-0000-4000-8000-000000000002');
+  delete from auth.users                       where id = '115d0000-0000-4000-8000-000000000001';
 }
 
 # approver resolves the subject to 'joined'. With active row A present this is the
 # Option-1 path — it acquires the whole-set `for update` and returns A untouched
 # (retiring the dangling pending row P via the sink, but never writing A).
 session "approver"
-step "a_begin"   { BEGIN; SET LOCAL "request.jwt.claim.role" = 'service_role'; }
+step "a_begin"   { BEGIN; SET LOCAL "request.jwt.claim.role" = 'authenticated'; SET LOCAL "request.jwt.claim.sub" = '115d0000-0000-4000-8000-000000000001'; }
 step "a_resolve" {
   select membership_state
     from agent_board.resolve_board_request(

package/tests/isolation/specs/consent_emit_actual_state.spec

@@ -37,7 +37,6 @@ setup
 teardown
 {
   delete from agent_board.board_membership_events where board_id = '105b0000-0000-4000-8000-000000000001';
-  delete from agent_board.board_memberships     where board_id = '105b0000-0000-4000-8000-000000000001';
   delete from agent_board.boards                where id       = '105b0000-0000-4000-8000-000000000001';
   delete from agent_board.agents                where id       = '105a0000-0000-4000-8000-000000000001';
 }

package/tests/isolation/specs/grant_target_role_race.spec

@@ -65,7 +65,6 @@ teardown
   delete from agent_board.messages where thread_id = '67440000-0000-4000-8000-000000000001';
   delete from agent_board.threads where id = '67440000-0000-4000-8000-000000000001';
   delete from agent_board.board_membership_events where board_id = '67430000-0000-4000-8000-000000000001';
-  delete from agent_board.board_memberships where board_id = '67430000-0000-4000-8000-000000000001';
   delete from agent_board.boards where id = '67430000-0000-4000-8000-000000000001';
   delete from agent_board.agents where id::text like '67420000-0000-4000-8000-00000000000_';
   delete from auth.users where id::text like '67410000-0000-4000-8000-00000000000_';

package/tests/isolation/specs/hosted_delegate_add_tombstone_race.spec

@@ -48,7 +48,6 @@ setup
 teardown
 {
   delete from agent_board.board_membership_events where board_id = '16591300-0000-4000-8000-000000000001';
-  delete from agent_board.board_memberships where board_id = '16591300-0000-4000-8000-000000000001';
   delete from agent_board.boards where id = '16591300-0000-4000-8000-000000000001';
   delete from agent_board.agent_credentials
    where agent_id in (select agent_id from agent_board.delegate_instances where instance_id like 'iso\_at\_%');

package/tests/isolation/specs/hosted_delegate_tombstone_revoke_race.spec

@@ -74,7 +74,6 @@ teardown
   delete from agent_board.fleet_revocation_events where revoked_by_agent_id = '16591000-0000-4000-8000-000000000001';
   delete from agent_board.fleet_human_revocations where issuer = 'https://iso-tr.test';
   delete from agent_board.board_membership_events where board_id = '16591200-0000-4000-8000-000000000001';
-  delete from agent_board.board_memberships where board_id = '16591200-0000-4000-8000-000000000001';
   delete from agent_board.boards where id = '16591200-0000-4000-8000-000000000001';
   delete from agent_board.agent_credentials
    where agent_id in (select agent_id from agent_board.delegate_instances where instance_id like 'iso\_tr\_%');

package/tests/isolation/specs/hosted_delegate_withdraw_evict_race.spec

@@ -60,7 +60,6 @@ setup
 teardown
 {
   delete from agent_board.board_membership_events where board_id = '16322000-0000-4000-8000-000000000001';
-  delete from agent_board.board_memberships where board_id = '16322000-0000-4000-8000-000000000001';
   delete from agent_board.boards where id = '16322000-0000-4000-8000-000000000001';
   delete from agent_board.agent_credentials
    where agent_id in (select agent_id from agent_board.delegate_instances where instance_id like 'iso\_wd\_%');

package/tests/isolation/specs/last_owner_departure.spec

@@ -0,0 +1,137 @@
+# Consiliency/message-board#675: two active owners independently leave/demote.
+# The second RPC waits on the FIRST lock (board authority advisory), then reads
+# the committed owner's exit and refuses. No timing sleeps; each permutation
+# finishes with exactly one owner. The same spec on schema 1.63.0 ends at zero.
+setup
+{
+  create function public.roleguard_isolation_refusal(p_statement text)
+  returns text language plpgsql as $probe$
+  begin
+    execute p_statement;
+    return 'UNEXPECTED_SUCCESS';
+  exception when others then
+    return sqlstate;
+  end;
+  $probe$;
+  insert into auth.users(id,instance_id,aud,role,email)
+  select ('67500000-0000-0000-0000-'||lpad(n::text,12,'0'))::uuid,
+    '00000000-0000-0000-0000-000000000000','authenticated','authenticated',
+    'last-owner-'||n||'@test.invalid' from generate_series(1,2) n;
+  insert into agent_board.agents(id,agent_type,kind,handle,display_name,status,auth_user_id)
+  select ('67510000-0000-4000-8000-'||lpad(n::text,12,'0'))::uuid,
+    'agent','agent','last-owner-'||n,'Last Owner '||n,'active',
+    ('67500000-0000-0000-0000-'||lpad(n::text,12,'0'))::uuid from generate_series(1,2) n;
+  insert into agent_board.boards(id,slug,name,created_by_agent_id)
+  values ('67520000-0000-4000-8000-000000000099','last-owner-race','Last Owner Race',
+    '67510000-0000-4000-8000-000000000001');
+  insert into agent_board.board_memberships(board_id,agent_id,role,membership_state,created_by_agent_id)
+  select '67520000-0000-4000-8000-000000000099',id,'owner','joined',
+    '67510000-0000-4000-8000-000000000001' from agent_board.agents where handle like 'last-owner-%';
+}
+
+teardown
+{
+  drop function public.roleguard_isolation_refusal(text);
+  delete from agent_board.board_membership_events
+   where board_id='67520000-0000-4000-8000-000000000099';
+  delete from agent_board.boards where id='67520000-0000-4000-8000-000000000099';
+  delete from agent_board.agents where handle like 'last-owner-%';
+  delete from auth.users where email like 'last-owner-%@test.invalid';
+}
+
+session "a"
+step "a_begin" {
+  begin;
+  set local role authenticated;
+  select set_config('request.jwt.claims', json_build_object('role','authenticated','sub','67500000-0000-0000-0000-000000000001')::text,true) is not null as authenticated;
+}
+step "a_leave" {
+  select membership_state from agent_board.leave_board(
+    '67520000-0000-4000-8000-000000000099','67510000-0000-4000-8000-000000000001');
+}
+step "a_demote" {
+  select role from agent_board.grant_board_role(
+    '67520000-0000-4000-8000-000000000099','67510000-0000-4000-8000-000000000001','member');
+}
+step "a_commit" { commit; }
+step "a_repeatable" {
+  begin isolation level repeatable read;
+  set local role authenticated;
+  select set_config('request.jwt.claims', json_build_object('role','authenticated','sub','67500000-0000-0000-0000-000000000001')::text,true) is not null as authenticated;
+}
+step "a_snapshot" {
+  select count(*) as snapshot_owners from agent_board.board_memberships where board_id='67520000-0000-4000-8000-000000000099' and role='owner' and membership_state in ('joined','subscribed');
+}
+step "a_leave_code" {
+  select public.roleguard_isolation_refusal($probe$
+    select agent_board.leave_board(
+      '67520000-0000-4000-8000-000000000099','67510000-0000-4000-8000-000000000001')
+  $probe$) as error_code;
+}
+step "a_raw" {
+  reset role;
+  select agent_board._lock_board_authority_ceiling('67520000-0000-4000-8000-000000000099');
+  update agent_board.board_memberships set membership_state='left',left_at=now()
+   where board_id='67520000-0000-4000-8000-000000000099'
+     and agent_id='67510000-0000-4000-8000-000000000001';
+}
+step "a_session_begin" {
+  begin;
+  select pg_advisory_lock(hashtextextended(
+    'agent_board.board_authority_ceilings:67520000-0000-4000-8000-000000000099',0));
+}
+step "a_session_leave" {
+  update agent_board.board_memberships set membership_state='left',left_at=now()
+   where board_id='67520000-0000-4000-8000-000000000099'
+     and agent_id='67510000-0000-4000-8000-000000000001';
+}
+step "a_session_unlock" {
+  select pg_advisory_unlock(hashtextextended(
+    'agent_board.board_authority_ceilings:67520000-0000-4000-8000-000000000099',0));
+}
+
+session "b"
+step "b_begin" {
+  begin;
+  set local role authenticated;
+  select set_config('request.jwt.claims', json_build_object('role','authenticated','sub','67500000-0000-0000-0000-000000000002')::text,true) is not null as authenticated;
+}
+step "b_leave" {
+  select membership_state from agent_board.leave_board(
+    '67520000-0000-4000-8000-000000000099','67510000-0000-4000-8000-000000000002');
+}
+step "b_demote" {
+  select role from agent_board.grant_board_role(
+    '67520000-0000-4000-8000-000000000099','67510000-0000-4000-8000-000000000002','member');
+}
+step "b_commit" { commit; }
+step "b_raw" {
+  reset role;
+  delete from agent_board.board_memberships
+   where board_id='67520000-0000-4000-8000-000000000099'
+     and agent_id='67510000-0000-4000-8000-000000000002';
+}
+step "b_lock" {
+  reset role;
+  select agent_board._lock_board_authority_ceiling('67520000-0000-4000-8000-000000000099');
+}
+
+session "check"
+step "owners" {
+  select count(*) as active_owners from agent_board.board_memberships
+   where board_id='67520000-0000-4000-8000-000000000099'
+     and role='owner' and membership_state in ('joined','subscribed');
+}
+
+permutation "a_begin" "a_leave" "b_begin" "b_leave" "a_commit" "b_commit" "owners"
+permutation "b_begin" "b_leave" "a_begin" "a_leave" "b_commit" "a_commit" "owners"
+permutation "a_begin" "a_demote" "b_begin" "b_demote" "a_commit" "b_commit" "owners"
+permutation "b_begin" "b_demote" "a_begin" "a_demote" "b_commit" "a_commit" "owners"
+permutation "a_begin" "a_leave" "b_begin" "b_demote" "a_commit" "b_commit" "owners"
+permutation "b_begin" "b_demote" "a_begin" "a_leave" "b_commit" "a_commit" "owners"
+permutation "a_begin" "a_raw" "b_begin" "b_raw" "a_commit" "b_commit" "owners"
+permutation "b_begin" "b_lock" "b_raw" "a_begin" "a_raw" "b_commit" "a_commit" "owners"
+permutation "a_repeatable" "a_leave_code" "a_commit" "owners"
+permutation "a_session_begin" "a_session_leave" "a_session_unlock" "b_begin" "b_leave" "a_commit" "b_commit" "owners"
+
+permutation "a_repeatable" "a_snapshot" "b_begin" "b_leave" "a_leave_code" "b_commit" "a_commit" "owners"

package/tests/isolation/specs/ledger_authority_revoke.spec

@@ -112,8 +112,6 @@ teardown
    where board_id = '27720000-0000-4000-8000-000000000001';
   delete from agent_board.board_membership_events
    where board_id in (select id from agent_board.boards where slug like 'k280-iso-%');
-  delete from agent_board.board_memberships
-   where board_id in (select id from agent_board.boards where slug like 'k280-iso-%');
   delete from agent_board.boards where slug like 'k280-iso-%';
   delete from agent_board.board_membership_events
    where board_id = '27720000-0000-4000-8000-000000000001';
@@ -127,7 +125,6 @@ teardown
   delete from agent_board.agent_signing_keys
    where agent_id in (select id from agent_board.agents where handle like 'k276iso-%');
   delete from agent_board.board_authority_ceilings where board_id='27720000-0000-4000-8000-000000000001';
-  delete from agent_board.board_memberships where board_id='27720000-0000-4000-8000-000000000001';
   delete from agent_board.boards where id='27720000-0000-4000-8000-000000000001';
   delete from agent_board.agents where handle like 'k276iso-%';
   delete from auth.users where id in (

package/tests/isolation/specs/onboarding_ceiling_lock_order.spec

@@ -103,9 +103,6 @@ teardown
   delete from agent_board.board_authority_ceilings where board_id in (
     select id from agent_board.boards where slug='onboard-ceiling-board'
   );
-  delete from agent_board.board_memberships where board_id in (
-    select id from agent_board.boards where slug='onboard-ceiling-board'
-  );
   delete from agent_board.enrollment_federation_audit where agent_id in (
     select id from agent_board.agents where handle='onboard-ceiling-agent'
   );

package/tests/isolation/specs/outbox_wake_ordering.spec

@@ -114,7 +114,6 @@ teardown
   delete from agent_board.callback_outbox_events where board_id in ('18701000-0000-4000-8000-00000000000a', '18701000-0000-4000-8000-00000000000b');
   delete from agent_board.callback_subscriptions  where board_id in ('18701000-0000-4000-8000-00000000000a', '18701000-0000-4000-8000-00000000000b');
   delete from agent_board.callback_endpoints      where endpoint_url like 'https://example.test/iso187/%';
-  delete from agent_board.board_memberships       where board_id in ('18701000-0000-4000-8000-00000000000a', '18701000-0000-4000-8000-00000000000b');
   delete from agent_board.messages                where thread_id in ('18702000-0000-4000-8000-00000000000a', '18702000-0000-4000-8000-00000000000b');
   delete from agent_board.threads                 where id in ('18702000-0000-4000-8000-00000000000a', '18702000-0000-4000-8000-00000000000b');
   delete from agent_board.boards                  where id in ('18701000-0000-4000-8000-00000000000a', '18701000-0000-4000-8000-00000000000b');

package/tests/isolation/specs/session_identity_links.spec

@@ -6,6 +6,7 @@ setup
   insert into agent_board.agents(id, agent_type, handle, display_name, status, auth_user_id, parent_agent_id, root_agent_id)
   values
     ('72000000-0000-4000-8000-000000000001', 'agent', 'sid-links-root', 'SID links root', 'active', null, null, null),
+    ('72000000-0000-4000-8000-000000000003', 'agent', 'sid-links-coowner', 'SID links coowner', 'active', null, null, null),
     ('72000000-0000-4000-8000-000000000002', 'agent', 'sid-links-child', 'SID links child', 'active', '71000000-0000-4000-8000-000000000001',
       '72000000-0000-4000-8000-000000000001', '72000000-0000-4000-8000-000000000001');
   insert into agent_board.session_identities(agent_id, parent_agent_id, root_agent_id, depth, identity_kind, harness,
@@ -27,13 +28,13 @@ setup
   values ('74000000-0000-4000-8000-000000000002', 'sid-links-room', 'SID links room', '72000000-0000-4000-8000-000000000001');
   insert into agent_board.board_memberships(board_id, agent_id, membership_state, role) values
     ('74000000-0000-4000-8000-000000000002', '72000000-0000-4000-8000-000000000001', 'joined', 'owner'),
+    ('74000000-0000-4000-8000-000000000002', '72000000-0000-4000-8000-000000000003', 'joined', 'owner'),
     ('74000000-0000-4000-8000-000000000002', '72000000-0000-4000-8000-000000000002', 'joined', 'admin');
 }
 
 teardown
 {
   delete from agent_board.board_membership_events where board_id = '74000000-0000-4000-8000-000000000002';
-  delete from agent_board.board_memberships where board_id = '74000000-0000-4000-8000-000000000002';
   delete from agent_board.boards where id = '74000000-0000-4000-8000-000000000002';
   delete from agent_board.delegation_grants where root_agent_id = '72000000-0000-4000-8000-000000000001';
   delete from agent_board.delegation_policies where root_agent_id = '72000000-0000-4000-8000-000000000001';
@@ -42,6 +43,7 @@ teardown
   delete from agent_board.session_identities where root_agent_id = '72000000-0000-4000-8000-000000000001';
   delete from agent_board.agents where id = '72000000-0000-4000-8000-000000000002';
   delete from agent_board.agents where id = '72000000-0000-4000-8000-000000000001';
+  delete from agent_board.agents where id = '72000000-0000-4000-8000-000000000003';
   delete from auth.users where id = '71000000-0000-4000-8000-000000000001';
 }
 

package/tests/isolation/specs/session_identity_tombstone_onboarding.spec

@@ -52,7 +52,6 @@ teardown
       where id='85000000-0000-4000-8000-000000000001'));
     delete from agent_board.fleet_revocation_events where revoked_by_agent_id='85000000-0000-4000-8000-000000000001';
     delete from agent_board.board_membership_events where board_id='85000000-0000-4000-8000-000000000002';
-    delete from agent_board.board_memberships where board_id='85000000-0000-4000-8000-000000000002';
     delete from agent_board.boards where id='85000000-0000-4000-8000-000000000002';
     delete from agent_board.delegate_instances where instance_id='sid_ti_instance_00001';
     delete from agent_board.session_id_aliases where root_agent_id='85000000-0000-4000-8000-000000000001';

package/tests/isolation/specs/signed_grant_onboarding_deadlock.spec

@@ -74,7 +74,6 @@ teardown
   delete from agent_board.signature_evidence
    where agent_id in (select id from agent_board.agents where handle like 'f4iso-%');
   delete from agent_board.board_authority_ceilings where board_id='f4950000-0000-4000-8000-000000000001';
-  delete from agent_board.board_memberships where board_id='f4950000-0000-4000-8000-000000000001';
   delete from agent_board.boards where id='f4950000-0000-4000-8000-000000000001';
   delete from agent_board.agent_signing_keys
    where agent_id in (select id from agent_board.agents where handle like 'f4iso-%');

package/tests/isolation/specs/signer_lifecycle_revoke.spec

@@ -84,7 +84,6 @@ teardown
    where agent_id in (select id from agent_board.agents where handle like 'k269iso-%')
       or revoked_by_agent_id in (select id from agent_board.agents where handle like 'k269iso-%');
   delete from agent_board.board_authority_ceilings where board_id='26950000-0000-4000-8000-000000000001';
-  delete from agent_board.board_memberships where board_id='26950000-0000-4000-8000-000000000001';
   delete from agent_board.boards where id='26950000-0000-4000-8000-000000000001';
   delete from agent_board.agent_signing_keys
    where agent_id in (select id from agent_board.agents where handle like 'k269iso-%');