@consiliency/agent-board-schema 1.64.0 → 1.74.0

package/tests/isolation/expected/consent_approval_lock.out

@@ -1,7 +1,7 @@
 Parsed test spec with 3 sessions
 
 starting permutation: a_begin a_resolve w_begin w_leave a_commit w_commit chk
-step a_begin: BEGIN; SET LOCAL "request.jwt.claim.role" = 'service_role';
+step a_begin: BEGIN; SET LOCAL "request.jwt.claim.role" = 'authenticated'; SET LOCAL "request.jwt.claim.sub" = '115d0000-0000-4000-8000-000000000001';
 step a_resolve: 
   select membership_state
     from agent_board.resolve_board_request(

package/tests/isolation/expected/message_replay_scope.out

@@ -0,0 +1,209 @@
+Parsed test spec with 4 sessions
+
+starting permutation: p_begin p_dm_c w_begin w_dm_x p_end w_end check
+step p_begin: begin; set local role authenticated; select set_config('request.jwt.claim.role','',true), set_config('request.jwt.claim.sub','',true), set_config('request.jwt.claims',json_build_object('role','authenticated','sub','717b4000-0000-4000-8000-0000000000a1')::text,true);
+set_config|set_config|set_config                                                                
+----------+----------+--------------------------------------------------------------------------
+          |          |{"role" : "authenticated", "sub" : "717b4000-0000-4000-8000-0000000000a1"}
+(1 row)
+
+step p_dm_c: select callback_outbox_count from agent_board.send_direct_message('717b4000-0000-4000-8000-000000000010','717b4000-0000-4000-8000-000000000001','717b4000-0000-4000-8000-000000000003','iso','iso dm','comment','medium','f2b717-kd',jsonb_build_object());
+callback_outbox_count
+---------------------
+                    1
+(1 row)
+
+step w_begin: begin; set local role authenticated; select set_config('request.jwt.claim.role','',true), set_config('request.jwt.claim.sub','',true), set_config('request.jwt.claims',json_build_object('role','authenticated','sub','717b4000-0000-4000-8000-0000000000a1')::text,true);
+set_config|set_config|set_config                                                                
+----------+----------+--------------------------------------------------------------------------
+          |          |{"role" : "authenticated", "sub" : "717b4000-0000-4000-8000-0000000000a1"}
+(1 row)
+
+step w_dm_x: select callback_outbox_count from agent_board.send_direct_message('717b4000-0000-4000-8000-000000000010','717b4000-0000-4000-8000-000000000001','717b4000-0000-4000-8000-000000000005','iso','iso dm','comment','medium','f2b717-kd',jsonb_build_object()); <waiting ...>
+step p_end: end;
+step w_dm_x: <... completed>
+ERROR:  message replay cannot widen delivery scope
+step w_end: end;
+step check: 
+  select count(*) as messages,
+         (select string_agg(a.handle || ':' || dr.delivery_mode, ',' order by a.handle, dr.delivery_mode)
+            from agent_board.delivery_recipients dr join agent_board.messages m on m.id = dr.source_message_id
+            join agent_board.agents a on a.id = dr.recipient_agent_id
+           where m.thread_id = '717b4000-0000-4000-8000-000000000010') as deliveries,
+         (select count(*) from agent_board.inbox_items ii join agent_board.messages m on m.id = ii.source_message_id where m.thread_id = '717b4000-0000-4000-8000-000000000010') as inbox,
+         (select count(*) from agent_board.callback_outbox_events co join agent_board.messages m on m.id = co.source_message_id where m.thread_id = '717b4000-0000-4000-8000-000000000010') as callbacks
+    from agent_board.messages where thread_id = '717b4000-0000-4000-8000-000000000010';
+
+messages|deliveries         |inbox|callbacks
+--------+-------------------+-----+---------
+       1|f2b717-iso-c:direct|    1|        1
+(1 row)
+
+
+starting permutation: w_begin w_dm_x p_begin p_dm_c w_end p_end check
+step w_begin: begin; set local role authenticated; select set_config('request.jwt.claim.role','',true), set_config('request.jwt.claim.sub','',true), set_config('request.jwt.claims',json_build_object('role','authenticated','sub','717b4000-0000-4000-8000-0000000000a1')::text,true);
+set_config|set_config|set_config                                                                
+----------+----------+--------------------------------------------------------------------------
+          |          |{"role" : "authenticated", "sub" : "717b4000-0000-4000-8000-0000000000a1"}
+(1 row)
+
+step w_dm_x: select callback_outbox_count from agent_board.send_direct_message('717b4000-0000-4000-8000-000000000010','717b4000-0000-4000-8000-000000000001','717b4000-0000-4000-8000-000000000005','iso','iso dm','comment','medium','f2b717-kd',jsonb_build_object());
+callback_outbox_count
+---------------------
+                    1
+(1 row)
+
+step p_begin: begin; set local role authenticated; select set_config('request.jwt.claim.role','',true), set_config('request.jwt.claim.sub','',true), set_config('request.jwt.claims',json_build_object('role','authenticated','sub','717b4000-0000-4000-8000-0000000000a1')::text,true);
+set_config|set_config|set_config                                                                
+----------+----------+--------------------------------------------------------------------------
+          |          |{"role" : "authenticated", "sub" : "717b4000-0000-4000-8000-0000000000a1"}
+(1 row)
+
+step p_dm_c: select callback_outbox_count from agent_board.send_direct_message('717b4000-0000-4000-8000-000000000010','717b4000-0000-4000-8000-000000000001','717b4000-0000-4000-8000-000000000003','iso','iso dm','comment','medium','f2b717-kd',jsonb_build_object()); <waiting ...>
+step w_end: end;
+step p_dm_c: <... completed>
+ERROR:  message replay cannot widen delivery scope
+step p_end: end;
+step check: 
+  select count(*) as messages,
+         (select string_agg(a.handle || ':' || dr.delivery_mode, ',' order by a.handle, dr.delivery_mode)
+            from agent_board.delivery_recipients dr join agent_board.messages m on m.id = dr.source_message_id
+            join agent_board.agents a on a.id = dr.recipient_agent_id
+           where m.thread_id = '717b4000-0000-4000-8000-000000000010') as deliveries,
+         (select count(*) from agent_board.inbox_items ii join agent_board.messages m on m.id = ii.source_message_id where m.thread_id = '717b4000-0000-4000-8000-000000000010') as inbox,
+         (select count(*) from agent_board.callback_outbox_events co join agent_board.messages m on m.id = co.source_message_id where m.thread_id = '717b4000-0000-4000-8000-000000000010') as callbacks
+    from agent_board.messages where thread_id = '717b4000-0000-4000-8000-000000000010';
+
+messages|deliveries         |inbox|callbacks
+--------+-------------------+-----+---------
+       1|f2b717-iso-x:direct|    1|        1
+(1 row)
+
+
+starting permutation: p_begin p_dm_c r_begin r_dm_c p_end r_end check
+step p_begin: begin; set local role authenticated; select set_config('request.jwt.claim.role','',true), set_config('request.jwt.claim.sub','',true), set_config('request.jwt.claims',json_build_object('role','authenticated','sub','717b4000-0000-4000-8000-0000000000a1')::text,true);
+set_config|set_config|set_config                                                                
+----------+----------+--------------------------------------------------------------------------
+          |          |{"role" : "authenticated", "sub" : "717b4000-0000-4000-8000-0000000000a1"}
+(1 row)
+
+step p_dm_c: select callback_outbox_count from agent_board.send_direct_message('717b4000-0000-4000-8000-000000000010','717b4000-0000-4000-8000-000000000001','717b4000-0000-4000-8000-000000000003','iso','iso dm','comment','medium','f2b717-kd',jsonb_build_object());
+callback_outbox_count
+---------------------
+                    1
+(1 row)
+
+step r_begin: begin; set local role authenticated; select set_config('request.jwt.claim.role','',true), set_config('request.jwt.claim.sub','',true), set_config('request.jwt.claims',json_build_object('role','authenticated','sub','717b4000-0000-4000-8000-0000000000a1')::text,true);
+set_config|set_config|set_config                                                                
+----------+----------+--------------------------------------------------------------------------
+          |          |{"role" : "authenticated", "sub" : "717b4000-0000-4000-8000-0000000000a1"}
+(1 row)
+
+step r_dm_c: select callback_outbox_count from agent_board.send_direct_message('717b4000-0000-4000-8000-000000000010','717b4000-0000-4000-8000-000000000001','717b4000-0000-4000-8000-000000000003','iso','iso dm','comment','medium','f2b717-kd',jsonb_build_object()); <waiting ...>
+step p_end: end;
+step r_dm_c: <... completed>
+callback_outbox_count
+---------------------
+                    0
+(1 row)
+
+step r_end: end;
+step check: 
+  select count(*) as messages,
+         (select string_agg(a.handle || ':' || dr.delivery_mode, ',' order by a.handle, dr.delivery_mode)
+            from agent_board.delivery_recipients dr join agent_board.messages m on m.id = dr.source_message_id
+            join agent_board.agents a on a.id = dr.recipient_agent_id
+           where m.thread_id = '717b4000-0000-4000-8000-000000000010') as deliveries,
+         (select count(*) from agent_board.inbox_items ii join agent_board.messages m on m.id = ii.source_message_id where m.thread_id = '717b4000-0000-4000-8000-000000000010') as inbox,
+         (select count(*) from agent_board.callback_outbox_events co join agent_board.messages m on m.id = co.source_message_id where m.thread_id = '717b4000-0000-4000-8000-000000000010') as callbacks
+    from agent_board.messages where thread_id = '717b4000-0000-4000-8000-000000000010';
+
+messages|deliveries         |inbox|callbacks
+--------+-------------------+-----+---------
+       1|f2b717-iso-c:direct|    1|        1
+(1 row)
+
+
+starting permutation: p_begin p_mc_cc2 w_begin w_mc_cx p_end w_end check
+step p_begin: begin; set local role authenticated; select set_config('request.jwt.claim.role','',true), set_config('request.jwt.claim.sub','',true), set_config('request.jwt.claims',json_build_object('role','authenticated','sub','717b4000-0000-4000-8000-0000000000a1')::text,true);
+set_config|set_config|set_config                                                                
+----------+----------+--------------------------------------------------------------------------
+          |          |{"role" : "authenticated", "sub" : "717b4000-0000-4000-8000-0000000000a1"}
+(1 row)
+
+step p_mc_cc2: select delivered_recipient_count, inbox_item_count, callback_outbox_count from agent_board.send_multicast_message('717b4000-0000-4000-8000-000000000010','717b4000-0000-4000-8000-000000000001',array['717b4000-0000-4000-8000-000000000003','717b4000-0000-4000-8000-000000000004']::uuid[],'iso','iso mc','comment','medium','f2b717-km',jsonb_build_object());
+delivered_recipient_count|inbox_item_count|callback_outbox_count
+-------------------------+----------------+---------------------
+                        2|               2|                    2
+(1 row)
+
+step w_begin: begin; set local role authenticated; select set_config('request.jwt.claim.role','',true), set_config('request.jwt.claim.sub','',true), set_config('request.jwt.claims',json_build_object('role','authenticated','sub','717b4000-0000-4000-8000-0000000000a1')::text,true);
+set_config|set_config|set_config                                                                
+----------+----------+--------------------------------------------------------------------------
+          |          |{"role" : "authenticated", "sub" : "717b4000-0000-4000-8000-0000000000a1"}
+(1 row)
+
+step w_mc_cx: select delivered_recipient_count, inbox_item_count, callback_outbox_count from agent_board.send_multicast_message('717b4000-0000-4000-8000-000000000010','717b4000-0000-4000-8000-000000000001',array['717b4000-0000-4000-8000-000000000003','717b4000-0000-4000-8000-000000000005']::uuid[],'iso','iso mc','comment','medium','f2b717-km',jsonb_build_object()); <waiting ...>
+step p_end: end;
+step w_mc_cx: <... completed>
+ERROR:  message replay cannot widen delivery scope
+step w_end: end;
+step check: 
+  select count(*) as messages,
+         (select string_agg(a.handle || ':' || dr.delivery_mode, ',' order by a.handle, dr.delivery_mode)
+            from agent_board.delivery_recipients dr join agent_board.messages m on m.id = dr.source_message_id
+            join agent_board.agents a on a.id = dr.recipient_agent_id
+           where m.thread_id = '717b4000-0000-4000-8000-000000000010') as deliveries,
+         (select count(*) from agent_board.inbox_items ii join agent_board.messages m on m.id = ii.source_message_id where m.thread_id = '717b4000-0000-4000-8000-000000000010') as inbox,
+         (select count(*) from agent_board.callback_outbox_events co join agent_board.messages m on m.id = co.source_message_id where m.thread_id = '717b4000-0000-4000-8000-000000000010') as callbacks
+    from agent_board.messages where thread_id = '717b4000-0000-4000-8000-000000000010';
+
+messages|deliveries                                    |inbox|callbacks
+--------+----------------------------------------------+-----+---------
+       1|f2b717-iso-c:multicast,f2b717-iso-c2:multicast|    2|        2
+(1 row)
+
+
+starting permutation: p_begin p_mc_cc2 r_begin r_mc_c2c p_end r_end check
+step p_begin: begin; set local role authenticated; select set_config('request.jwt.claim.role','',true), set_config('request.jwt.claim.sub','',true), set_config('request.jwt.claims',json_build_object('role','authenticated','sub','717b4000-0000-4000-8000-0000000000a1')::text,true);
+set_config|set_config|set_config                                                                
+----------+----------+--------------------------------------------------------------------------
+          |          |{"role" : "authenticated", "sub" : "717b4000-0000-4000-8000-0000000000a1"}
+(1 row)
+
+step p_mc_cc2: select delivered_recipient_count, inbox_item_count, callback_outbox_count from agent_board.send_multicast_message('717b4000-0000-4000-8000-000000000010','717b4000-0000-4000-8000-000000000001',array['717b4000-0000-4000-8000-000000000003','717b4000-0000-4000-8000-000000000004']::uuid[],'iso','iso mc','comment','medium','f2b717-km',jsonb_build_object());
+delivered_recipient_count|inbox_item_count|callback_outbox_count
+-------------------------+----------------+---------------------
+                        2|               2|                    2
+(1 row)
+
+step r_begin: begin; set local role authenticated; select set_config('request.jwt.claim.role','',true), set_config('request.jwt.claim.sub','',true), set_config('request.jwt.claims',json_build_object('role','authenticated','sub','717b4000-0000-4000-8000-0000000000a1')::text,true);
+set_config|set_config|set_config                                                                
+----------+----------+--------------------------------------------------------------------------
+          |          |{"role" : "authenticated", "sub" : "717b4000-0000-4000-8000-0000000000a1"}
+(1 row)
+
+step r_mc_c2c: select delivered_recipient_count, inbox_item_count, callback_outbox_count from agent_board.send_multicast_message('717b4000-0000-4000-8000-000000000010','717b4000-0000-4000-8000-000000000001',array['717b4000-0000-4000-8000-000000000004','717b4000-0000-4000-8000-000000000003','717b4000-0000-4000-8000-000000000004']::uuid[],'iso','iso mc','comment','medium','f2b717-km',jsonb_build_object()); <waiting ...>
+step p_end: end;
+step r_mc_c2c: <... completed>
+delivered_recipient_count|inbox_item_count|callback_outbox_count
+-------------------------+----------------+---------------------
+                        2|               2|                    0
+(1 row)
+
+step r_end: end;
+step check: 
+  select count(*) as messages,
+         (select string_agg(a.handle || ':' || dr.delivery_mode, ',' order by a.handle, dr.delivery_mode)
+            from agent_board.delivery_recipients dr join agent_board.messages m on m.id = dr.source_message_id
+            join agent_board.agents a on a.id = dr.recipient_agent_id
+           where m.thread_id = '717b4000-0000-4000-8000-000000000010') as deliveries,
+         (select count(*) from agent_board.inbox_items ii join agent_board.messages m on m.id = ii.source_message_id where m.thread_id = '717b4000-0000-4000-8000-000000000010') as inbox,
+         (select count(*) from agent_board.callback_outbox_events co join agent_board.messages m on m.id = co.source_message_id where m.thread_id = '717b4000-0000-4000-8000-000000000010') as callbacks
+    from agent_board.messages where thread_id = '717b4000-0000-4000-8000-000000000010';
+
+messages|deliveries                                    |inbox|callbacks
+--------+----------------------------------------------+-----+---------
+       1|f2b717-iso-c:multicast,f2b717-iso-c2:multicast|    2|        2
+(1 row)
+

package/tests/isolation/expected/tasking_replay_scope.out

@@ -0,0 +1,125 @@
+Parsed test spec with 4 sessions
+
+starting permutation: p_begin p_private b_begin b_board p_end b_end check
+step p_begin: begin; set local role authenticated; select set_config('request.jwt.claim.role','',true), set_config('request.jwt.claim.sub','',true), set_config('request.jwt.claims',json_build_object('role','authenticated','sub','71740000-0000-4000-8000-0000000000a1')::text,true);
+set_config|set_config|set_config                                                                
+----------+----------+--------------------------------------------------------------------------
+          |          |{"role" : "authenticated", "sub" : "71740000-0000-4000-8000-0000000000a1"}
+(1 row)
+
+step p_private: select delivered_recipient_count, inbox_item_count, callback_outbox_count from agent_board.create_tasking_delivery('71740000-0000-4000-8000-000000000010','71740000-0000-4000-8000-000000000001','iso private',null,array['71740000-0000-4000-8000-000000000003']::uuid[],null,'medium','distributed','f2717-kc',jsonb_build_object());
+delivered_recipient_count|inbox_item_count|callback_outbox_count
+-------------------------+----------------+---------------------
+                        1|               1|                    1
+(1 row)
+
+step b_begin: begin; set local role authenticated; select set_config('request.jwt.claim.role','',true), set_config('request.jwt.claim.sub','',true), set_config('request.jwt.claims',json_build_object('role','authenticated','sub','71740000-0000-4000-8000-0000000000a1')::text,true);
+set_config|set_config|set_config                                                                
+----------+----------+--------------------------------------------------------------------------
+          |          |{"role" : "authenticated", "sub" : "71740000-0000-4000-8000-0000000000a1"}
+(1 row)
+
+step b_board: select delivered_recipient_count, inbox_item_count, callback_outbox_count from agent_board.create_tasking_delivery('71740000-0000-4000-8000-000000000010','71740000-0000-4000-8000-000000000001','iso board',null,null,'71740000-0000-4000-8000-000000000020','medium','distributed','f2717-kc',jsonb_build_object()); <waiting ...>
+step p_end: end;
+step b_board: <... completed>
+ERROR:  tasking replay cannot widen delivery scope
+step b_end: end;
+step check: 
+  select count(*) as tasks,
+         (select count(*) from agent_board.task_events te join agent_board.tasks t on t.id = te.task_id where t.thread_id = '71740000-0000-4000-8000-000000000010') as events,
+         (select count(*) from agent_board.delivery_recipients dr join agent_board.tasks t on t.id = dr.source_task_id where t.thread_id = '71740000-0000-4000-8000-000000000010' and dr.board_id is null) as private_deliveries,
+         (select count(*) from agent_board.delivery_recipients dr join agent_board.tasks t on t.id = dr.source_task_id where t.thread_id = '71740000-0000-4000-8000-000000000010' and dr.board_id is not null) as board_deliveries,
+         (select count(*) from agent_board.inbox_items ii join agent_board.tasks t on t.id = ii.source_task_id where t.thread_id = '71740000-0000-4000-8000-000000000010') as inbox,
+         (select count(*) from agent_board.callback_outbox_events co join agent_board.tasks t on t.id = co.source_task_id where t.thread_id = '71740000-0000-4000-8000-000000000010') as callbacks,
+         string_agg(title, ',' order by title) as titles
+    from agent_board.tasks where thread_id = '71740000-0000-4000-8000-000000000010';
+
+tasks|events|private_deliveries|board_deliveries|inbox|callbacks|titles     
+-----+------+------------------+----------------+-----+---------+-----------
+    1|     1|                 1|               0|    1|        1|iso private
+(1 row)
+
+
+starting permutation: b_begin b_board p_begin p_private b_end p_end check
+step b_begin: begin; set local role authenticated; select set_config('request.jwt.claim.role','',true), set_config('request.jwt.claim.sub','',true), set_config('request.jwt.claims',json_build_object('role','authenticated','sub','71740000-0000-4000-8000-0000000000a1')::text,true);
+set_config|set_config|set_config                                                                
+----------+----------+--------------------------------------------------------------------------
+          |          |{"role" : "authenticated", "sub" : "71740000-0000-4000-8000-0000000000a1"}
+(1 row)
+
+step b_board: select delivered_recipient_count, inbox_item_count, callback_outbox_count from agent_board.create_tasking_delivery('71740000-0000-4000-8000-000000000010','71740000-0000-4000-8000-000000000001','iso board',null,null,'71740000-0000-4000-8000-000000000020','medium','distributed','f2717-kc',jsonb_build_object());
+delivered_recipient_count|inbox_item_count|callback_outbox_count
+-------------------------+----------------+---------------------
+                        0|               0|                    0
+(1 row)
+
+step p_begin: begin; set local role authenticated; select set_config('request.jwt.claim.role','',true), set_config('request.jwt.claim.sub','',true), set_config('request.jwt.claims',json_build_object('role','authenticated','sub','71740000-0000-4000-8000-0000000000a1')::text,true);
+set_config|set_config|set_config                                                                
+----------+----------+--------------------------------------------------------------------------
+          |          |{"role" : "authenticated", "sub" : "71740000-0000-4000-8000-0000000000a1"}
+(1 row)
+
+step p_private: select delivered_recipient_count, inbox_item_count, callback_outbox_count from agent_board.create_tasking_delivery('71740000-0000-4000-8000-000000000010','71740000-0000-4000-8000-000000000001','iso private',null,array['71740000-0000-4000-8000-000000000003']::uuid[],null,'medium','distributed','f2717-kc',jsonb_build_object()); <waiting ...>
+step b_end: end;
+step p_private: <... completed>
+ERROR:  tasking replay cannot widen delivery scope
+step p_end: end;
+step check: 
+  select count(*) as tasks,
+         (select count(*) from agent_board.task_events te join agent_board.tasks t on t.id = te.task_id where t.thread_id = '71740000-0000-4000-8000-000000000010') as events,
+         (select count(*) from agent_board.delivery_recipients dr join agent_board.tasks t on t.id = dr.source_task_id where t.thread_id = '71740000-0000-4000-8000-000000000010' and dr.board_id is null) as private_deliveries,
+         (select count(*) from agent_board.delivery_recipients dr join agent_board.tasks t on t.id = dr.source_task_id where t.thread_id = '71740000-0000-4000-8000-000000000010' and dr.board_id is not null) as board_deliveries,
+         (select count(*) from agent_board.inbox_items ii join agent_board.tasks t on t.id = ii.source_task_id where t.thread_id = '71740000-0000-4000-8000-000000000010') as inbox,
+         (select count(*) from agent_board.callback_outbox_events co join agent_board.tasks t on t.id = co.source_task_id where t.thread_id = '71740000-0000-4000-8000-000000000010') as callbacks,
+         string_agg(title, ',' order by title) as titles
+    from agent_board.tasks where thread_id = '71740000-0000-4000-8000-000000000010';
+
+tasks|events|private_deliveries|board_deliveries|inbox|callbacks|titles   
+-----+------+------------------+----------------+-----+---------+---------
+    1|     1|                 0|               1|    1|        0|iso board
+(1 row)
+
+
+starting permutation: p_begin p_private r_begin r_private p_end r_end check
+step p_begin: begin; set local role authenticated; select set_config('request.jwt.claim.role','',true), set_config('request.jwt.claim.sub','',true), set_config('request.jwt.claims',json_build_object('role','authenticated','sub','71740000-0000-4000-8000-0000000000a1')::text,true);
+set_config|set_config|set_config                                                                
+----------+----------+--------------------------------------------------------------------------
+          |          |{"role" : "authenticated", "sub" : "71740000-0000-4000-8000-0000000000a1"}
+(1 row)
+
+step p_private: select delivered_recipient_count, inbox_item_count, callback_outbox_count from agent_board.create_tasking_delivery('71740000-0000-4000-8000-000000000010','71740000-0000-4000-8000-000000000001','iso private',null,array['71740000-0000-4000-8000-000000000003']::uuid[],null,'medium','distributed','f2717-kc',jsonb_build_object());
+delivered_recipient_count|inbox_item_count|callback_outbox_count
+-------------------------+----------------+---------------------
+                        1|               1|                    1
+(1 row)
+
+step r_begin: begin; set local role authenticated; select set_config('request.jwt.claim.role','',true), set_config('request.jwt.claim.sub','',true), set_config('request.jwt.claims',json_build_object('role','authenticated','sub','71740000-0000-4000-8000-0000000000a1')::text,true);
+set_config|set_config|set_config                                                                
+----------+----------+--------------------------------------------------------------------------
+          |          |{"role" : "authenticated", "sub" : "71740000-0000-4000-8000-0000000000a1"}
+(1 row)
+
+step r_private: select delivered_recipient_count, inbox_item_count, callback_outbox_count from agent_board.create_tasking_delivery('71740000-0000-4000-8000-000000000010','71740000-0000-4000-8000-000000000001','iso private',null,array['71740000-0000-4000-8000-000000000003']::uuid[],null,'medium','distributed','f2717-kc',jsonb_build_object()); <waiting ...>
+step p_end: end;
+step r_private: <... completed>
+delivered_recipient_count|inbox_item_count|callback_outbox_count
+-------------------------+----------------+---------------------
+                        1|               1|                    0
+(1 row)
+
+step r_end: end;
+step check: 
+  select count(*) as tasks,
+         (select count(*) from agent_board.task_events te join agent_board.tasks t on t.id = te.task_id where t.thread_id = '71740000-0000-4000-8000-000000000010') as events,
+         (select count(*) from agent_board.delivery_recipients dr join agent_board.tasks t on t.id = dr.source_task_id where t.thread_id = '71740000-0000-4000-8000-000000000010' and dr.board_id is null) as private_deliveries,
+         (select count(*) from agent_board.delivery_recipients dr join agent_board.tasks t on t.id = dr.source_task_id where t.thread_id = '71740000-0000-4000-8000-000000000010' and dr.board_id is not null) as board_deliveries,
+         (select count(*) from agent_board.inbox_items ii join agent_board.tasks t on t.id = ii.source_task_id where t.thread_id = '71740000-0000-4000-8000-000000000010') as inbox,
+         (select count(*) from agent_board.callback_outbox_events co join agent_board.tasks t on t.id = co.source_task_id where t.thread_id = '71740000-0000-4000-8000-000000000010') as callbacks,
+         string_agg(title, ',' order by title) as titles
+    from agent_board.tasks where thread_id = '71740000-0000-4000-8000-000000000010';
+
+tasks|events|private_deliveries|board_deliveries|inbox|callbacks|titles     
+-----+------+------------------+----------------+-----+---------+-----------
+    1|     1|                 1|               0|    1|        1|iso private
+(1 row)
+

package/tests/isolation/specs/association_artifact_anchor_order.spec

@@ -0,0 +1,46 @@
+# #667: an artifact may name an empty explicit thread and a task on another
+# thread. The explicit thread must serialize with first association even when a
+# different canonical anchor is also present.
+setup
+{
+  insert into agent_board.agents(id,agent_type,handle,display_name,status)
+  values ('66780000-0000-4000-8000-000000000001','agent','xb-anchor-order','XB multi anchor','active');
+  insert into agent_board.boards(id,slug,name,created_by_agent_id,visibility,status)
+  values ('66780000-0000-4000-8000-000000000020','xb-anchor-order-board','XB multi anchor board',
+    '66780000-0000-4000-8000-000000000001','private','active');
+  insert into agent_board.threads(id,thread_type,created_by_agent_id,subject)
+  values ('66780000-0000-4000-8000-000000000010','coordination','66780000-0000-4000-8000-000000000001','explicit empty'),
+         ('66780000-0000-4000-8000-000000000011','coordination','66780000-0000-4000-8000-000000000001','task parent');
+  insert into agent_board.tasks(id,thread_id,created_by_agent_id,title)
+  values ('66780000-0000-4000-8000-000000000030','66780000-0000-4000-8000-000000000011','66780000-0000-4000-8000-000000000001','parent one'),
+         ('66780000-0000-4000-8000-000000000031','66780000-0000-4000-8000-000000000010','66780000-0000-4000-8000-000000000001','parent two');
+}
+teardown
+{
+  delete from agent_board.artifacts where thread_id in ('66780000-0000-4000-8000-000000000010','66780000-0000-4000-8000-000000000011');
+  delete from agent_board.task_events where task_id in ('66780000-0000-4000-8000-000000000030','66780000-0000-4000-8000-000000000031');
+  delete from agent_board.tasks where id in ('66780000-0000-4000-8000-000000000030','66780000-0000-4000-8000-000000000031');
+  delete from agent_board.messages where thread_id='66780000-0000-4000-8000-000000000010';
+  delete from agent_board.threads where id in ('66780000-0000-4000-8000-000000000010','66780000-0000-4000-8000-000000000011');
+  delete from agent_board.boards where id='66780000-0000-4000-8000-000000000020';
+  delete from agent_board.agents where id='66780000-0000-4000-8000-000000000001';
+}
+session "a"
+step "a_begin" { begin; set local statement_timeout='2s'; select set_config('request.jwt.claim.role','service_role',true); }
+step "a_artifact" { select count(*) from agent_board.add_artifact('66780000-0000-4000-8000-000000000001','https://example.test/first',p_thread_id=>'66780000-0000-4000-8000-000000000010',p_task_id=>'66780000-0000-4000-8000-000000000030'); }
+step "a_commit" { commit; }
+session "b"
+step "b_begin" { begin; select set_config('request.jwt.claim.role','service_role',true); }
+step "b_artifact" { select count(*) from agent_board.add_artifact('66780000-0000-4000-8000-000000000001','https://example.test/second',p_thread_id=>'66780000-0000-4000-8000-000000000011',p_task_id=>'66780000-0000-4000-8000-000000000031'); }
+step "b_commit" { commit; }
+session "hold"
+step "hold_high" { begin; select id from agent_board.threads where id='66780000-0000-4000-8000-000000000011' for no key update; }
+step "release_high" { commit; }
+session "probe"
+step "probe_low" { begin; select id from agent_board.threads where id='66780000-0000-4000-8000-000000000010' for no key update; }
+step "probe_commit" { commit; }
+session "check"
+step "check" { select count(*) as artifacts, count(distinct thread_id) as explicit_threads, count(distinct task_id) as task_anchors from agent_board.artifacts where thread_id in ('66780000-0000-4000-8000-000000000010','66780000-0000-4000-8000-000000000011'); }
+permutation "a_begin" "a_artifact" "b_begin" "b_artifact" "a_commit" "b_commit" "check"
+permutation "b_begin" "b_artifact" "a_begin" "a_artifact" "b_commit" "a_commit" "check"
+permutation "hold_high" "a_begin" "a_artifact" "probe_low" "release_high" "a_commit" "probe_commit" "check"

package/tests/isolation/specs/association_board_vs_board.spec

@@ -0,0 +1,37 @@
+# Two first-association senders choose different boards. The loser must re-read
+# the winning stamp after its wait and leave neither its message nor delivery.
+setup
+{
+  insert into agent_board.agents(id,agent_type,handle,display_name,status)
+  values ('66790000-0000-4000-8000-000000000001','agent','xb-board-race','XB board race','active');
+  insert into agent_board.boards(id,slug,name,created_by_agent_id,visibility,status)
+  values ('66790000-0000-4000-8000-000000000020','xb-race-one','XB race one','66790000-0000-4000-8000-000000000001','private','active'),
+         ('66790000-0000-4000-8000-000000000021','xb-race-two','XB race two','66790000-0000-4000-8000-000000000001','private','active');
+  insert into agent_board.threads(id,thread_type,created_by_agent_id,subject)
+  values ('66790000-0000-4000-8000-000000000010','coordination','66790000-0000-4000-8000-000000000001','board race');
+  create function agent_board_test.xb_667_board_race(p_board uuid,p_text text) returns text language plpgsql as $$
+  begin
+    perform agent_board.post_board_message('66790000-0000-4000-8000-000000000010','66790000-0000-4000-8000-000000000001',p_board,'subject',p_text);
+    return 'allowed';
+  exception when others then return sqlstate || ':' || sqlerrm; end $$;
+}
+teardown
+{
+  drop function agent_board_test.xb_667_board_race(uuid,text);
+  delete from agent_board.messages where thread_id='66790000-0000-4000-8000-000000000010';
+  delete from agent_board.threads where id='66790000-0000-4000-8000-000000000010';
+  delete from agent_board.boards where id in ('66790000-0000-4000-8000-000000000020','66790000-0000-4000-8000-000000000021');
+  delete from agent_board.agents where id='66790000-0000-4000-8000-000000000001';
+}
+session "a"
+step "a_begin" { begin; select set_config('request.jwt.claim.role','service_role',true); }
+step "a_post" { select agent_board_test.xb_667_board_race('66790000-0000-4000-8000-000000000020','first') as outcome; }
+step "a_commit" { commit; }
+session "b"
+step "b_begin" { begin; select set_config('request.jwt.claim.role','service_role',true); }
+step "b_post" { select agent_board_test.xb_667_board_race('66790000-0000-4000-8000-000000000021','second') as outcome; }
+step "b_commit" { commit; }
+session "check"
+step "check" { select t.board_id, (select count(*) from agent_board.messages m where m.thread_id=t.id) as messages, (select count(*) from agent_board.messages m where m.thread_id=t.id and m.body='first') as first_messages, (select count(*) from agent_board.messages m where m.thread_id=t.id and m.body='second') as second_messages, (select count(*) from agent_board.delivery_recipients d join agent_board.messages m on m.id=d.source_message_id where m.thread_id=t.id) as deliveries from agent_board.threads t where t.id='66790000-0000-4000-8000-000000000010'; }
+permutation "a_begin" "a_post" "b_begin" "b_post" "a_commit" "b_commit" "check"
+permutation "b_begin" "b_post" "a_begin" "a_post" "b_commit" "a_commit" "check"

package/tests/isolation/specs/association_post_wait_authority.spec

@@ -0,0 +1,48 @@
+# #667: sequence UPDATE waits for association. The posting gate must be read
+# after that wait. A nonmember thread creator is denied; a board member succeeds.
+setup
+{
+  insert into auth.users(id) values ('66750000-0000-4000-8000-0000000000b1'),('66750000-0000-4000-8000-0000000000c1');
+  insert into agent_board.agents(id,agent_type,handle,display_name,status,auth_user_id,owner_user_id)
+  values ('66750000-0000-4000-8000-000000000001','agent','xb-post-owner','XB owner','active',null,null),
+         ('66750000-0000-4000-8000-000000000002','agent','xb-post-denied','XB denied','active','66750000-0000-4000-8000-0000000000b1','66750000-0000-4000-8000-0000000000b1'),
+         ('66750000-0000-4000-8000-000000000003','agent','xb-post-member','XB member','active','66750000-0000-4000-8000-0000000000c1','66750000-0000-4000-8000-0000000000c1');
+  insert into agent_board.boards(id,slug,name,created_by_agent_id,visibility,status)
+  values ('66750000-0000-4000-8000-000000000020','xb-post-board','XB post board','66750000-0000-4000-8000-000000000001','private','active');
+  select set_config('request.jwt.claim.role','service_role',false);
+  insert into agent_board.board_memberships(board_id,agent_id,membership_state,created_by_agent_id,role)
+  values ('66750000-0000-4000-8000-000000000020','66750000-0000-4000-8000-000000000003','joined','66750000-0000-4000-8000-000000000001','member');
+  insert into agent_board.threads(id,thread_type,created_by_agent_id,subject)
+  values ('66750000-0000-4000-8000-000000000010','coordination','66750000-0000-4000-8000-000000000002','denied thread'),
+         ('66750000-0000-4000-8000-000000000011','coordination','66750000-0000-4000-8000-000000000003','member thread');
+}
+teardown
+{
+  delete from agent_board.inbox_items where board_id='66750000-0000-4000-8000-000000000020';
+  delete from agent_board.delivery_recipients where board_id='66750000-0000-4000-8000-000000000020';
+  delete from agent_board.messages where thread_id in ('66750000-0000-4000-8000-000000000010','66750000-0000-4000-8000-000000000011');
+  delete from agent_board.threads where id in ('66750000-0000-4000-8000-000000000010','66750000-0000-4000-8000-000000000011');
+  delete from agent_board.board_membership_events where board_id='66750000-0000-4000-8000-000000000020';
+  delete from agent_board.board_memberships where board_id='66750000-0000-4000-8000-000000000020';
+  delete from agent_board.boards where id='66750000-0000-4000-8000-000000000020';
+  delete from agent_board.agents where id in ('66750000-0000-4000-8000-000000000001','66750000-0000-4000-8000-000000000002','66750000-0000-4000-8000-000000000003');
+  delete from auth.users where id in ('66750000-0000-4000-8000-0000000000b1','66750000-0000-4000-8000-0000000000c1');
+}
+session "a"
+step "a_begin" { begin; select set_config('request.jwt.claim.role','service_role',true); }
+step "a_post_denied" { select count(*) from agent_board.post_board_message('66750000-0000-4000-8000-000000000010','66750000-0000-4000-8000-000000000001','66750000-0000-4000-8000-000000000020','s','b'); }
+step "a_post_member" { select count(*) from agent_board.post_board_message('66750000-0000-4000-8000-000000000011','66750000-0000-4000-8000-000000000001','66750000-0000-4000-8000-000000000020','s','b'); }
+step "a_commit" { commit; }
+session "b"
+step "b_begin" { begin; set local role authenticated; select set_config('request.jwt.claim.role','authenticated',true); select set_config('request.jwt.claim.sub','66750000-0000-4000-8000-0000000000b1',true); }
+step "b_post" { select count(*) from agent_board.post_message('66750000-0000-4000-8000-000000000010','66750000-0000-4000-8000-000000000002','private after wait'); }
+step "b_end" { end; }
+session "c"
+step "c_begin" { begin; set local role authenticated; select set_config('request.jwt.claim.role','authenticated',true); select set_config('request.jwt.claim.sub','66750000-0000-4000-8000-0000000000c1',true); }
+step "c_post" { select count(*) from agent_board.post_message('66750000-0000-4000-8000-000000000011','66750000-0000-4000-8000-000000000003','member after wait'); }
+step "c_end" { end; }
+session "check"
+step "check_denied" { select count(*) as messages, max(message_sequence) as max_sequence from agent_board.messages where thread_id='66750000-0000-4000-8000-000000000010'; }
+step "check_member" { select count(*) as messages, max(message_sequence) as max_sequence from agent_board.messages where thread_id='66750000-0000-4000-8000-000000000011'; }
+permutation "a_begin" "a_post_denied" "b_begin" "b_post" "a_commit" "b_end" "check_denied"
+permutation "a_begin" "a_post_member" "c_begin" "c_post" "a_commit" "c_end" "check_member"

package/tests/isolation/specs/association_strong_history_writers.spec

@@ -0,0 +1,61 @@
+# #667: fixed-snapshot first association refuses before stamping, even after a
+# writer commits; already-associated board tasks remain allowed at stronger isolation.
+setup
+{
+  insert into agent_board.agents(id,agent_type,handle,display_name,status)
+  values ('66770000-0000-4000-8000-000000000001','agent','xb-strong-history','XB strong isolation','active');
+  insert into agent_board.boards(id,slug,name,created_by_agent_id,visibility,status)
+  values ('66770000-0000-4000-8000-000000000020','xb-strong-history-board','XB strong board',
+    '66770000-0000-4000-8000-000000000001','private','active');
+  insert into agent_board.threads(id,thread_type,created_by_agent_id,subject)
+  values ('66770000-0000-4000-8000-000000000010','coordination',
+    '66770000-0000-4000-8000-000000000001','strong isolation');
+  create function agent_board_test.xb_667_try_stale_artifact() returns text language plpgsql as $$
+  begin
+    perform agent_board.add_artifact('66770000-0000-4000-8000-000000000001','https://example.test/stale',p_thread_id=>'66770000-0000-4000-8000-000000000010');
+    return 'allowed';
+  exception when others then return sqlstate || ':' || sqlerrm; end $$;
+  create function agent_board_test.xb_667_try_history_association() returns text language plpgsql as $$
+  begin
+    perform agent_board.post_board_message('66770000-0000-4000-8000-000000000010','66770000-0000-4000-8000-000000000001','66770000-0000-4000-8000-000000000020','s','b');
+    return 'allowed';
+  exception when others then return sqlstate || ':' || sqlerrm; end $$;
+}
+teardown
+{
+  drop function agent_board_test.xb_667_try_history_association();
+  drop function agent_board_test.xb_667_try_stale_artifact();
+  delete from agent_board.artifacts where thread_id='66770000-0000-4000-8000-000000000010';
+  delete from agent_board.conflicts where thread_id='66770000-0000-4000-8000-000000000010';
+  delete from agent_board.task_events where thread_id='66770000-0000-4000-8000-000000000010';
+  delete from agent_board.tasks where thread_id='66770000-0000-4000-8000-000000000010';
+  delete from agent_board.messages where thread_id='66770000-0000-4000-8000-000000000010';
+  delete from agent_board.threads where id='66770000-0000-4000-8000-000000000010';
+  delete from agent_board.boards where id='66770000-0000-4000-8000-000000000020';
+  delete from agent_board.agents where id='66770000-0000-4000-8000-000000000001';
+}
+session "w"
+step "w_begin" { begin; select set_config('request.jwt.claim.role','service_role',true); }
+step "w_artifact" { select count(*) from agent_board.add_artifact('66770000-0000-4000-8000-000000000001','https://example.test/strong',p_thread_id=>'66770000-0000-4000-8000-000000000010'); }
+step "w_stale_artifact" { select agent_board_test.xb_667_try_stale_artifact() as outcome; }
+step "w_conflict" { select count(*) from agent_board.raise_conflict('66770000-0000-4000-8000-000000000010','66770000-0000-4000-8000-000000000001','private conflict'); }
+step "w_rr" { begin isolation level repeatable read; select set_config('request.jwt.claim.role','service_role',true); select count(*) from agent_board.threads where id='66770000-0000-4000-8000-000000000010'; }
+step "w_commit" { commit; }
+session "a"
+step "a_ru" { begin isolation level read uncommitted; select set_config('request.jwt.claim.role','service_role',true); select count(*) from agent_board.threads where id='66770000-0000-4000-8000-000000000010'; }
+step "a_rr" { begin isolation level repeatable read; select set_config('request.jwt.claim.role','service_role',true); select count(*) from agent_board.threads where id='66770000-0000-4000-8000-000000000010'; }
+step "a_ser" { begin isolation level serializable; select set_config('request.jwt.claim.role','service_role',true); select count(*) from agent_board.threads where id='66770000-0000-4000-8000-000000000010'; }
+step "a_post" { select agent_board_test.xb_667_try_history_association() as outcome; }
+step "a_task" { select count(*) from agent_board.create_task('66770000-0000-4000-8000-000000000010','66770000-0000-4000-8000-000000000001','board task'); }
+step "a_end" { end; }
+session "p"
+step "p_begin" { begin; select set_config('request.jwt.claim.role','service_role',true); }
+step "p_post" { select count(*) from agent_board.post_board_message('66770000-0000-4000-8000-000000000010','66770000-0000-4000-8000-000000000001','66770000-0000-4000-8000-000000000020','s','b'); }
+step "p_commit" { commit; }
+session "check"
+step "check" { select (t.board_id is not null) as stamped, (select count(*) from agent_board.artifacts where thread_id=t.id) as artifacts, (select count(*) from agent_board.conflicts where thread_id=t.id) as conflicts, (select count(*) from agent_board.messages where thread_id=t.id) as messages from agent_board.threads t where t.id='66770000-0000-4000-8000-000000000010'; }
+permutation "a_rr" "w_begin" "w_artifact" "a_post" "w_commit" "a_end" "check"
+permutation "a_ser" "w_begin" "w_artifact" "a_post" "w_commit" "a_end" "check"
+permutation "a_rr" "w_begin" "w_conflict" "a_post" "w_commit" "a_end" "check"
+permutation "a_ser" "w_begin" "w_conflict" "a_post" "w_commit" "a_end" "check"
+permutation "w_rr" "p_begin" "p_post" "w_stale_artifact" "p_commit" "w_commit" "check"

package/tests/isolation/specs/association_strong_isolation.spec

@@ -0,0 +1,50 @@
+# #667: fixed-snapshot first association refuses before stamping, even after a
+# writer commits; already-associated board tasks remain allowed at stronger isolation.
+setup
+{
+  insert into agent_board.agents(id,agent_type,handle,display_name,status)
+  values ('66740000-0000-4000-8000-000000000001','agent','xb-strong','XB strong isolation','active');
+  insert into agent_board.boards(id,slug,name,created_by_agent_id,visibility,status)
+  values ('66740000-0000-4000-8000-000000000020','xb-strong-board','XB strong board',
+    '66740000-0000-4000-8000-000000000001','private','active');
+  insert into agent_board.threads(id,thread_type,created_by_agent_id,subject)
+  values ('66740000-0000-4000-8000-000000000010','coordination',
+    '66740000-0000-4000-8000-000000000001','strong isolation');
+  create function agent_board_test.xb_667_try_association() returns text language plpgsql as $$
+  begin
+    perform agent_board.post_board_message('66740000-0000-4000-8000-000000000010','66740000-0000-4000-8000-000000000001','66740000-0000-4000-8000-000000000020','s','b');
+    return 'allowed';
+  exception when others then return sqlstate || ':' || sqlerrm; end $$;
+}
+teardown
+{
+  drop function agent_board_test.xb_667_try_association();
+  delete from agent_board.task_events where thread_id='66740000-0000-4000-8000-000000000010';
+  delete from agent_board.tasks where thread_id='66740000-0000-4000-8000-000000000010';
+  delete from agent_board.messages where thread_id='66740000-0000-4000-8000-000000000010';
+  delete from agent_board.threads where id='66740000-0000-4000-8000-000000000010';
+  delete from agent_board.boards where id='66740000-0000-4000-8000-000000000020';
+  delete from agent_board.agents where id='66740000-0000-4000-8000-000000000001';
+}
+session "w"
+step "w_begin" { begin; select set_config('request.jwt.claim.role','service_role',true); }
+step "w_task" { select count(*) from agent_board.create_task('66740000-0000-4000-8000-000000000010','66740000-0000-4000-8000-000000000001','private task'); }
+step "w_commit" { commit; }
+session "a"
+step "a_ru" { begin isolation level read uncommitted; select set_config('request.jwt.claim.role','service_role',true); select count(*) from agent_board.threads where id='66740000-0000-4000-8000-000000000010'; }
+step "a_rr" { begin isolation level repeatable read; select set_config('request.jwt.claim.role','service_role',true); select count(*) from agent_board.threads where id='66740000-0000-4000-8000-000000000010'; }
+step "a_ser" { begin isolation level serializable; select set_config('request.jwt.claim.role','service_role',true); select count(*) from agent_board.threads where id='66740000-0000-4000-8000-000000000010'; }
+step "a_post" { select agent_board_test.xb_667_try_association() as outcome; }
+step "a_task" { select count(*) from agent_board.create_task('66740000-0000-4000-8000-000000000010','66740000-0000-4000-8000-000000000001','board task'); }
+step "a_end" { end; }
+session "p"
+step "p_begin" { begin; select set_config('request.jwt.claim.role','service_role',true); }
+step "p_post" { select count(*) from agent_board.post_board_message('66740000-0000-4000-8000-000000000010','66740000-0000-4000-8000-000000000001','66740000-0000-4000-8000-000000000020','s','b'); }
+step "p_commit" { commit; }
+session "check"
+step "check" { select (t.board_id is not null) as stamped, (select count(*) from agent_board.tasks where thread_id=t.id) as tasks, (select count(*) from agent_board.messages where thread_id=t.id) as messages from agent_board.threads t where t.id='66740000-0000-4000-8000-000000000010'; }
+permutation "a_ru" "a_post" "a_end" "check"
+permutation "a_rr" "w_begin" "w_task" "a_post" "w_commit" "a_end" "check"
+permutation "a_ser" "w_begin" "w_task" "a_post" "w_commit" "a_end" "check"
+permutation "p_begin" "p_post" "p_commit" "a_rr" "a_task" "a_end" "check"
+permutation "p_begin" "p_post" "p_commit" "a_ser" "a_task" "a_end" "check"