@consiliency/agent-board-schema 1.64.0 → 1.68.0

package/tests/catalog/function_execute_privileges.json

@@ -295,7 +295,7 @@
       "executable_by": {
         "anon": false,
         "service_role": true,
-        "authenticated": false
+        "authenticated": true
       }
     },
     {
@@ -331,7 +331,7 @@
       "executable_by": {
         "anon": false,
         "service_role": true,
-        "authenticated": false
+        "authenticated": true
       }
     },
     {

package/tests/isolation/expected/consent_approval_lock.out

@@ -1,7 +1,7 @@
 Parsed test spec with 3 sessions
 
 starting permutation: a_begin a_resolve w_begin w_leave a_commit w_commit chk
-step a_begin: BEGIN; SET LOCAL "request.jwt.claim.role" = 'service_role';
+step a_begin: BEGIN; SET LOCAL "request.jwt.claim.role" = 'authenticated'; SET LOCAL "request.jwt.claim.sub" = '115d0000-0000-4000-8000-000000000001';
 step a_resolve: 
   select membership_state
     from agent_board.resolve_board_request(

package/tests/isolation/specs/consent_approval_lock.spec

@@ -24,9 +24,9 @@
 # it does to A, isolating the lock as the single variable. The withdrawer withdraws
 # the ACTIVE row A; it blocks on the SET-lock, then applies after commit.
 #
-# Both sessions run as service_role — the SET-lock sits AFTER the actor check and is
-# actor-independent, so this needs no auth.users identity substrate; the lock trace
-# is identical to the authenticated path.
+# Consiliency/message-board#668: the approver has a resolved active owner identity,
+# matching the resolver's flat authority gate. The withdrawer remains service_role;
+# the whole-set lock must still serialize the same two physical rows.
 #
 # MUTATION SIGNAL (a TRACE diff): drop the `for update` block, OR narrow it with
 # `and bm.membership_state in ('requested','invited')` — either leaves A unlocked, so
@@ -35,15 +35,20 @@
 
 setup
 {
-  insert into agent_board.agents(id, agent_type, handle, display_name, status) values
-    ('115a0000-0000-4000-8000-000000000001', 'agent', 'iso115-owner',   'Iso115 Owner',   'active'),
-    ('115a0000-0000-4000-8000-000000000002', 'agent', 'iso115-subject', 'Iso115 Subject', 'active');
+  insert into auth.users(id, instance_id, aud, role, email) values
+    ('115d0000-0000-4000-8000-000000000001', '00000000-0000-0000-0000-000000000000',
+     'authenticated', 'authenticated', 'iso115-owner@example.test');
+  insert into agent_board.agents(id, agent_type, handle, display_name, status, auth_user_id, owner_user_id) values
+    ('115a0000-0000-4000-8000-000000000001', 'agent', 'iso115-owner',   'Iso115 Owner',   'active', '115d0000-0000-4000-8000-000000000001', '115d0000-0000-4000-8000-000000000001'),
+    ('115a0000-0000-4000-8000-000000000002', 'agent', 'iso115-subject', 'Iso115 Subject', 'active', null, null);
   insert into agent_board.boards(id, slug, name, created_by_agent_id, visibility, status)
     values ('115b0000-0000-4000-8000-000000000001', 'iso115-board', 'Iso115 Board',
             '115a0000-0000-4000-8000-000000000001', 'private', 'active');
   -- Legal (active, pending) duplicate for the subject: A is joined (active), P is a
   -- separate pending request. The active-unique index permits it (only A is active).
   insert into agent_board.board_memberships(id, board_id, agent_id, membership_state, role, created_by_agent_id) values
+    ('115c0000-0000-4000-8000-000000000001', '115b0000-0000-4000-8000-000000000001',
+     '115a0000-0000-4000-8000-000000000001', 'joined', 'owner', '115a0000-0000-4000-8000-000000000001'),
     ('115c0000-0000-4000-8000-0000000000aa', '115b0000-0000-4000-8000-000000000001',
      '115a0000-0000-4000-8000-000000000002', 'joined',    'member', '115a0000-0000-4000-8000-000000000002'),
     ('115c0000-0000-4000-8000-0000000000bb', '115b0000-0000-4000-8000-000000000001',
@@ -55,13 +60,14 @@ teardown
   delete from agent_board.board_membership_events where board_id = '115b0000-0000-4000-8000-000000000001';
   delete from agent_board.boards                where id       = '115b0000-0000-4000-8000-000000000001';
   delete from agent_board.agents                where id in ('115a0000-0000-4000-8000-000000000001','115a0000-0000-4000-8000-000000000002');
+  delete from auth.users                       where id = '115d0000-0000-4000-8000-000000000001';
 }
 
 # approver resolves the subject to 'joined'. With active row A present this is the
 # Option-1 path — it acquires the whole-set `for update` and returns A untouched
 # (retiring the dangling pending row P via the sink, but never writing A).
 session "approver"
-step "a_begin"   { BEGIN; SET LOCAL "request.jwt.claim.role" = 'service_role'; }
+step "a_begin"   { BEGIN; SET LOCAL "request.jwt.claim.role" = 'authenticated'; SET LOCAL "request.jwt.claim.sub" = '115d0000-0000-4000-8000-000000000001'; }
 step "a_resolve" {
   select membership_state
     from agent_board.resolve_board_request(