@consiliency/agent-board-schema 1.64.0 → 1.74.0

package/tests/isolation/specs/association_vs_artifact_claim_escalation.spec

@@ -0,0 +1,41 @@
+# #667: thread-only artifact, thread-only claim and taskless escalation each
+# serialize with first association. Each writer and the association win once.
+setup
+{
+  insert into agent_board.agents(id,agent_type,handle,display_name,status)
+  values ('66720000-0000-4000-8000-000000000001','agent','xb-art-claim-esc','XB art claim escalation','active');
+  insert into agent_board.boards(id,slug,name,created_by_agent_id,visibility,status)
+  values ('66720000-0000-4000-8000-000000000020','xb-art-claim-esc-board','XB art claim escalation board',
+    '66720000-0000-4000-8000-000000000001','private','active');
+  insert into agent_board.threads(id,thread_type,created_by_agent_id,subject)
+  values ('66720000-0000-4000-8000-000000000010','coordination',
+    '66720000-0000-4000-8000-000000000001','artifact claim escalation race');
+}
+teardown
+{
+  delete from agent_board.artifacts where thread_id='66720000-0000-4000-8000-000000000010';
+  delete from agent_board.claims where thread_id='66720000-0000-4000-8000-000000000010';
+  delete from agent_board.escalations where thread_id='66720000-0000-4000-8000-000000000010';
+  delete from agent_board.messages where thread_id='66720000-0000-4000-8000-000000000010';
+  delete from agent_board.threads where id='66720000-0000-4000-8000-000000000010';
+  delete from agent_board.boards where id='66720000-0000-4000-8000-000000000020';
+  delete from agent_board.agents where id='66720000-0000-4000-8000-000000000001';
+}
+session "w"
+step "w_begin" { begin; select set_config('request.jwt.claim.role','service_role',true); }
+step "w_artifact" { select count(*) from agent_board.add_artifact('66720000-0000-4000-8000-000000000001','https://example.test/xb',p_thread_id=>'66720000-0000-4000-8000-000000000010'); }
+step "w_claim" { select count(*) from agent_board.acquire_claim('66720000-0000-4000-8000-000000000001','custom','xb-race-key',now()+interval '1 hour',p_thread_id=>'66720000-0000-4000-8000-000000000010'); }
+step "w_escalation" { select count(*) from agent_board.raise_escalation('66720000-0000-4000-8000-000000000010','66720000-0000-4000-8000-000000000001','private escalation'); }
+step "w_commit" { commit; }
+session "a"
+step "a_begin" { begin; select set_config('request.jwt.claim.role','service_role',true); }
+step "a_post" { select count(*) from agent_board.post_board_message('66720000-0000-4000-8000-000000000010','66720000-0000-4000-8000-000000000001','66720000-0000-4000-8000-000000000020','s','b'); }
+step "a_end" { end; }
+session "check"
+step "check" { select (t.board_id is not null) as stamped, (select count(*) from agent_board.artifacts where thread_id=t.id) as artifacts, (select count(*) from agent_board.claims where thread_id=t.id) as claims, (select count(*) from agent_board.escalations where thread_id=t.id) as escalations, (select count(*) from agent_board.messages where thread_id=t.id) as messages from agent_board.threads t where t.id='66720000-0000-4000-8000-000000000010'; }
+permutation "w_begin" "w_artifact" "a_begin" "a_post" "w_commit" "a_end" "check"
+permutation "a_begin" "a_post" "w_begin" "w_artifact" "a_end" "w_commit" "check"
+permutation "w_begin" "w_claim" "a_begin" "a_post" "w_commit" "a_end" "check"
+permutation "a_begin" "a_post" "w_begin" "w_claim" "a_end" "w_commit" "check"
+permutation "w_begin" "w_escalation" "a_begin" "a_post" "w_commit" "a_end" "check"
+permutation "a_begin" "a_post" "w_begin" "w_escalation" "a_end" "w_commit" "check"

package/tests/isolation/specs/association_vs_heartbeat.spec

@@ -0,0 +1,47 @@
+# #667: a heartbeat retaining its old thread and a first board association
+# serialize on the thread. The second permutation covers an empty association
+# winning before a heartbeat explicitly supplies that thread.
+setup
+{
+  insert into agent_board.agents(id, agent_type, handle, display_name, status)
+  values ('66700000-0000-4000-8000-000000000001', 'agent', 'xb-heartbeat', 'XB heartbeat', 'active');
+  select set_config('request.jwt.claim.role','service_role',false);
+  insert into agent_board.boards(id,slug,name,created_by_agent_id,visibility,status)
+  values ('66700000-0000-4000-8000-000000000020','xb-heartbeat-board','XB heartbeat board',
+    '66700000-0000-4000-8000-000000000001','private','active');
+  insert into agent_board.threads(id,thread_type,created_by_agent_id,subject)
+  values ('66700000-0000-4000-8000-000000000010','coordination',
+    '66700000-0000-4000-8000-000000000001','heartbeat race');
+}
+
+teardown
+{
+  delete from agent_board.callback_outbox_events where source_message_id in (select id from agent_board.messages where thread_id='66700000-0000-4000-8000-000000000010');
+  delete from agent_board.inbox_items where source_message_id in (select id from agent_board.messages where thread_id='66700000-0000-4000-8000-000000000010');
+  delete from agent_board.delivery_recipients where source_message_id in (select id from agent_board.messages where thread_id='66700000-0000-4000-8000-000000000010');
+  delete from agent_board.messages where thread_id='66700000-0000-4000-8000-000000000010';
+  delete from agent_board.presence where agent_id='66700000-0000-4000-8000-000000000001';
+  delete from agent_board.threads where id='66700000-0000-4000-8000-000000000010';
+  delete from agent_board.board_membership_events where board_id in (select id from agent_board.boards where slug='xb-heartbeat-board');
+  delete from agent_board.board_memberships where board_id in (select id from agent_board.boards where slug='xb-heartbeat-board');
+  delete from agent_board.boards where slug='xb-heartbeat-board';
+  delete from agent_board.agents where id='66700000-0000-4000-8000-000000000001';
+}
+
+session "h"
+step "h_prime" { select set_config('request.jwt.claim.role','service_role',false); select count(*) from agent_board.heartbeat('66700000-0000-4000-8000-000000000001','66700000-0000-4000-8000-000000000010',p_activity_summary => 'initial'); }
+step "h_begin" { begin; select set_config('request.jwt.claim.role','service_role',true); }
+step "h_retain" { select count(*) from agent_board.heartbeat('66700000-0000-4000-8000-000000000001',null,p_activity_summary => 'retained',p_metadata => jsonb_build_object('note','private')); }
+step "h_attach" { select count(*) from agent_board.heartbeat('66700000-0000-4000-8000-000000000001','66700000-0000-4000-8000-000000000010',p_activity_summary => 'after association'); }
+step "h_commit" { commit; }
+
+session "a"
+step "a_begin" { begin; select set_config('request.jwt.claim.role','service_role',true); }
+step "a_post" { select count(*) from agent_board.post_board_message('66700000-0000-4000-8000-000000000010','66700000-0000-4000-8000-000000000001',(select id from agent_board.boards where slug='xb-heartbeat-board'),'s','b'); }
+step "a_end" { end; }
+
+session "check"
+step "check" { select (t.board_id is not null) as stamped, p.thread_id is not null as presence_has_thread, p.activity_summary from agent_board.threads t left join agent_board.presence p on p.agent_id='66700000-0000-4000-8000-000000000001' where t.id='66700000-0000-4000-8000-000000000010'; }
+
+permutation "h_prime" "h_begin" "h_retain" "a_begin" "a_post" "h_commit" "a_end" "check"
+permutation "a_begin" "a_post" "h_begin" "h_attach" "a_end" "h_commit" "check"

package/tests/isolation/specs/association_vs_multi_anchor_artifact.spec

@@ -0,0 +1,38 @@
+# #667: an artifact may name an empty explicit thread and a task on another
+# thread. The explicit thread must serialize with first association even when a
+# different canonical anchor is also present.
+setup
+{
+  insert into agent_board.agents(id,agent_type,handle,display_name,status)
+  values ('66730000-0000-4000-8000-000000000001','agent','xb-multi-anchor','XB multi anchor','active');
+  insert into agent_board.boards(id,slug,name,created_by_agent_id,visibility,status)
+  values ('66730000-0000-4000-8000-000000000020','xb-multi-anchor-board','XB multi anchor board',
+    '66730000-0000-4000-8000-000000000001','private','active');
+  insert into agent_board.threads(id,thread_type,created_by_agent_id,subject)
+  values ('66730000-0000-4000-8000-000000000010','coordination','66730000-0000-4000-8000-000000000001','explicit empty'),
+         ('66730000-0000-4000-8000-000000000011','coordination','66730000-0000-4000-8000-000000000001','task parent');
+  insert into agent_board.tasks(id,thread_id,created_by_agent_id,title)
+  values ('66730000-0000-4000-8000-000000000030','66730000-0000-4000-8000-000000000011','66730000-0000-4000-8000-000000000001','parent task');
+}
+teardown
+{
+  delete from agent_board.artifacts where thread_id='66730000-0000-4000-8000-000000000010';
+  delete from agent_board.task_events where task_id='66730000-0000-4000-8000-000000000030';
+  delete from agent_board.tasks where id='66730000-0000-4000-8000-000000000030';
+  delete from agent_board.messages where thread_id='66730000-0000-4000-8000-000000000010';
+  delete from agent_board.threads where id in ('66730000-0000-4000-8000-000000000010','66730000-0000-4000-8000-000000000011');
+  delete from agent_board.boards where id='66730000-0000-4000-8000-000000000020';
+  delete from agent_board.agents where id='66730000-0000-4000-8000-000000000001';
+}
+session "w"
+step "w_begin" { begin; select set_config('request.jwt.claim.role','service_role',true); }
+step "w_artifact" { select count(*) from agent_board.add_artifact('66730000-0000-4000-8000-000000000001','https://example.test/mixed',p_thread_id=>'66730000-0000-4000-8000-000000000010',p_task_id=>'66730000-0000-4000-8000-000000000030'); }
+step "w_commit" { commit; }
+session "a"
+step "a_begin" { begin; select set_config('request.jwt.claim.role','service_role',true); }
+step "a_post" { select count(*) from agent_board.post_board_message('66730000-0000-4000-8000-000000000010','66730000-0000-4000-8000-000000000001','66730000-0000-4000-8000-000000000020','s','b'); }
+step "a_end" { end; }
+session "check"
+step "check" { select (t.board_id is not null) as stamped, (select count(*) from agent_board.artifacts where thread_id=t.id and task_id='66730000-0000-4000-8000-000000000030') as mixed_artifacts, (select count(*) from agent_board.messages where thread_id=t.id) as messages from agent_board.threads t where t.id='66730000-0000-4000-8000-000000000010'; }
+permutation "w_begin" "w_artifact" "a_begin" "a_post" "w_commit" "a_end" "check"
+permutation "a_begin" "a_post" "w_begin" "w_artifact" "a_end" "w_commit" "check"

package/tests/isolation/specs/association_vs_private_message.spec

@@ -0,0 +1,33 @@
+# #667: a private append and first board association serialize on the thread.
+# The private writer wins with committed history and the association refuses;
+# if association wins, the later service writer uses the stamped thread.
+setup
+{
+  insert into agent_board.agents(id,agent_type,handle,display_name,status)
+  values ('66810000-0000-4000-8000-000000000001','agent','xb-private-race','XB private race','active');
+  insert into agent_board.boards(id,slug,name,created_by_agent_id,visibility,status)
+  values ('66810000-0000-4000-8000-000000000020','xb-private-race-board','XB private race board',
+    '66810000-0000-4000-8000-000000000001','private','active');
+  insert into agent_board.threads(id,thread_type,created_by_agent_id,subject)
+  values ('66810000-0000-4000-8000-000000000010','coordination',
+    '66810000-0000-4000-8000-000000000001','private race');
+}
+teardown
+{
+  delete from agent_board.messages where thread_id='66810000-0000-4000-8000-000000000010';
+  delete from agent_board.threads where id='66810000-0000-4000-8000-000000000010';
+  delete from agent_board.boards where id='66810000-0000-4000-8000-000000000020';
+  delete from agent_board.agents where id='66810000-0000-4000-8000-000000000001';
+}
+session "w"
+step "w_begin" { begin; select set_config('request.jwt.claim.role','service_role',true); }
+step "w_post" { select count(*) from agent_board.post_message('66810000-0000-4000-8000-000000000010','66810000-0000-4000-8000-000000000001','private race message'); }
+step "w_commit" { commit; }
+session "a"
+step "a_begin" { begin; select set_config('request.jwt.claim.role','service_role',true); }
+step "a_post" { select count(*) from agent_board.post_board_message('66810000-0000-4000-8000-000000000010','66810000-0000-4000-8000-000000000001','66810000-0000-4000-8000-000000000020','board','board race message'); }
+step "a_end" { end; }
+session "check"
+step "check" { select (t.board_id is not null) as stamped, (select count(*) from agent_board.messages m where m.thread_id=t.id and m.body='private race message') as private_messages, (select count(*) from agent_board.messages m where m.thread_id=t.id and m.body='board race message') as board_messages from agent_board.threads t where t.id='66810000-0000-4000-8000-000000000010'; }
+permutation "w_begin" "w_post" "a_begin" "a_post" "w_commit" "a_end" "check"
+permutation "a_begin" "a_post" "w_begin" "w_post" "a_end" "w_commit" "check"

package/tests/isolation/specs/association_vs_task_and_conflict.spec

@@ -0,0 +1,38 @@
+# #667: private task creation and taskless conflict serialize with first board
+# association. Each operation wins once; the checker observes the resulting rows.
+setup
+{
+  insert into agent_board.agents(id,agent_type,handle,display_name,status)
+  values ('66710000-0000-4000-8000-000000000001','agent','xb-task-conflict','XB task conflict','active');
+  insert into agent_board.boards(id,slug,name,created_by_agent_id,visibility,status)
+  values ('66710000-0000-4000-8000-000000000020','xb-task-conflict-board','XB task conflict board',
+    '66710000-0000-4000-8000-000000000001','private','active');
+  insert into agent_board.threads(id,thread_type,created_by_agent_id,subject)
+  values ('66710000-0000-4000-8000-000000000010','coordination',
+    '66710000-0000-4000-8000-000000000001','task conflict race');
+}
+teardown
+{
+  delete from agent_board.conflicts where thread_id='66710000-0000-4000-8000-000000000010';
+  delete from agent_board.task_events where thread_id='66710000-0000-4000-8000-000000000010';
+  delete from agent_board.tasks where thread_id='66710000-0000-4000-8000-000000000010';
+  delete from agent_board.messages where thread_id='66710000-0000-4000-8000-000000000010';
+  delete from agent_board.threads where id='66710000-0000-4000-8000-000000000010';
+  delete from agent_board.boards where id='66710000-0000-4000-8000-000000000020';
+  delete from agent_board.agents where id='66710000-0000-4000-8000-000000000001';
+}
+session "w"
+step "w_begin" { begin; select set_config('request.jwt.claim.role','service_role',true); }
+step "w_task" { select count(*) from agent_board.create_task('66710000-0000-4000-8000-000000000010','66710000-0000-4000-8000-000000000001','private task'); }
+step "w_conflict" { select count(*) from agent_board.raise_conflict('66710000-0000-4000-8000-000000000010','66710000-0000-4000-8000-000000000001','private conflict'); }
+step "w_commit" { commit; }
+session "a"
+step "a_begin" { begin; select set_config('request.jwt.claim.role','service_role',true); }
+step "a_post" { select count(*) from agent_board.post_board_message('66710000-0000-4000-8000-000000000010','66710000-0000-4000-8000-000000000001','66710000-0000-4000-8000-000000000020','s','b'); }
+step "a_end" { end; }
+session "check"
+step "check" { select (t.board_id is not null) as stamped, (select count(*) from agent_board.tasks where thread_id=t.id) as tasks, (select count(*) from agent_board.conflicts where thread_id=t.id) as conflicts, (select count(*) from agent_board.messages where thread_id=t.id) as messages from agent_board.threads t where t.id='66710000-0000-4000-8000-000000000010'; }
+permutation "w_begin" "w_task" "a_begin" "a_post" "w_commit" "a_end" "check"
+permutation "a_begin" "a_post" "w_begin" "w_task" "a_end" "w_commit" "check"
+permutation "w_begin" "w_conflict" "a_begin" "a_post" "w_commit" "a_end" "check"
+permutation "a_begin" "a_post" "w_begin" "w_conflict" "a_end" "w_commit" "check"

package/tests/isolation/specs/association_vs_taskful_cross_thread.spec

@@ -0,0 +1,42 @@
+# #667: a task argument does not prove that a conflict or escalation's own
+# thread equals its task thread. Both taskful writers serialize on their supplied
+# thread before appending an event to the separately anchored task.
+setup
+{
+  insert into agent_board.agents(id,agent_type,handle,display_name,status)
+  values ('66760000-0000-4000-8000-000000000001','agent','xb-cross-task','XB cross task','active');
+  insert into agent_board.boards(id,slug,name,created_by_agent_id,visibility,status)
+  values ('66760000-0000-4000-8000-000000000020','xb-cross-task-board','XB cross task board',
+    '66760000-0000-4000-8000-000000000001','private','active');
+  insert into agent_board.threads(id,thread_type,created_by_agent_id,subject)
+  values ('66760000-0000-4000-8000-000000000010','coordination','66760000-0000-4000-8000-000000000001','empty target'),
+         ('66760000-0000-4000-8000-000000000011','coordination','66760000-0000-4000-8000-000000000001','task parent');
+  insert into agent_board.tasks(id,thread_id,created_by_agent_id,title)
+  values ('66760000-0000-4000-8000-000000000030','66760000-0000-4000-8000-000000000011','66760000-0000-4000-8000-000000000001','parent task');
+}
+teardown
+{
+  delete from agent_board.conflicts where thread_id='66760000-0000-4000-8000-000000000010';
+  delete from agent_board.escalations where thread_id='66760000-0000-4000-8000-000000000010';
+  delete from agent_board.task_events where task_id='66760000-0000-4000-8000-000000000030';
+  delete from agent_board.tasks where id='66760000-0000-4000-8000-000000000030';
+  delete from agent_board.messages where thread_id='66760000-0000-4000-8000-000000000010';
+  delete from agent_board.threads where id in ('66760000-0000-4000-8000-000000000010','66760000-0000-4000-8000-000000000011');
+  delete from agent_board.boards where id='66760000-0000-4000-8000-000000000020';
+  delete from agent_board.agents where id='66760000-0000-4000-8000-000000000001';
+}
+session "w"
+step "w_begin" { begin; select set_config('request.jwt.claim.role','service_role',true); }
+step "w_conflict" { select count(*) from agent_board.raise_conflict('66760000-0000-4000-8000-000000000010','66760000-0000-4000-8000-000000000001','private conflict',p_task_id=>'66760000-0000-4000-8000-000000000030'); }
+step "w_escalation" { select count(*) from agent_board.raise_escalation('66760000-0000-4000-8000-000000000010','66760000-0000-4000-8000-000000000001','private escalation',p_task_id=>'66760000-0000-4000-8000-000000000030'); }
+step "w_commit" { commit; }
+session "a"
+step "a_begin" { begin; select set_config('request.jwt.claim.role','service_role',true); }
+step "a_post" { select count(*) from agent_board.post_board_message('66760000-0000-4000-8000-000000000010','66760000-0000-4000-8000-000000000001','66760000-0000-4000-8000-000000000020','s','b'); }
+step "a_end" { end; }
+session "check"
+step "check" { select (t.board_id is not null) as stamped, (select count(*) from agent_board.conflicts where thread_id=t.id and task_id='66760000-0000-4000-8000-000000000030') as conflicts, (select count(*) from agent_board.escalations where thread_id=t.id and task_id='66760000-0000-4000-8000-000000000030') as escalations, (select count(*) from agent_board.messages where thread_id=t.id) as messages from agent_board.threads t where t.id='66760000-0000-4000-8000-000000000010'; }
+permutation "w_begin" "w_conflict" "a_begin" "a_post" "w_commit" "a_end" "check"
+permutation "a_begin" "a_post" "w_begin" "w_conflict" "a_end" "w_commit" "check"
+permutation "w_begin" "w_escalation" "a_begin" "a_post" "w_commit" "a_end" "check"
+permutation "a_begin" "a_post" "w_begin" "w_escalation" "a_end" "w_commit" "check"

package/tests/isolation/specs/consent_approval_lock.spec

@@ -24,9 +24,9 @@
 # it does to A, isolating the lock as the single variable. The withdrawer withdraws
 # the ACTIVE row A; it blocks on the SET-lock, then applies after commit.
 #
-# Both sessions run as service_role — the SET-lock sits AFTER the actor check and is
-# actor-independent, so this needs no auth.users identity substrate; the lock trace
-# is identical to the authenticated path.
+# Consiliency/message-board#668: the approver has a resolved active owner identity,
+# matching the resolver's flat authority gate. The withdrawer remains service_role;
+# the whole-set lock must still serialize the same two physical rows.
 #
 # MUTATION SIGNAL (a TRACE diff): drop the `for update` block, OR narrow it with
 # `and bm.membership_state in ('requested','invited')` — either leaves A unlocked, so
@@ -35,15 +35,20 @@
 
 setup
 {
-  insert into agent_board.agents(id, agent_type, handle, display_name, status) values
-    ('115a0000-0000-4000-8000-000000000001', 'agent', 'iso115-owner',   'Iso115 Owner',   'active'),
-    ('115a0000-0000-4000-8000-000000000002', 'agent', 'iso115-subject', 'Iso115 Subject', 'active');
+  insert into auth.users(id, instance_id, aud, role, email) values
+    ('115d0000-0000-4000-8000-000000000001', '00000000-0000-0000-0000-000000000000',
+     'authenticated', 'authenticated', 'iso115-owner@example.test');
+  insert into agent_board.agents(id, agent_type, handle, display_name, status, auth_user_id, owner_user_id) values
+    ('115a0000-0000-4000-8000-000000000001', 'agent', 'iso115-owner',   'Iso115 Owner',   'active', '115d0000-0000-4000-8000-000000000001', '115d0000-0000-4000-8000-000000000001'),
+    ('115a0000-0000-4000-8000-000000000002', 'agent', 'iso115-subject', 'Iso115 Subject', 'active', null, null);
   insert into agent_board.boards(id, slug, name, created_by_agent_id, visibility, status)
     values ('115b0000-0000-4000-8000-000000000001', 'iso115-board', 'Iso115 Board',
             '115a0000-0000-4000-8000-000000000001', 'private', 'active');
   -- Legal (active, pending) duplicate for the subject: A is joined (active), P is a
   -- separate pending request. The active-unique index permits it (only A is active).
   insert into agent_board.board_memberships(id, board_id, agent_id, membership_state, role, created_by_agent_id) values
+    ('115c0000-0000-4000-8000-000000000001', '115b0000-0000-4000-8000-000000000001',
+     '115a0000-0000-4000-8000-000000000001', 'joined', 'owner', '115a0000-0000-4000-8000-000000000001'),
     ('115c0000-0000-4000-8000-0000000000aa', '115b0000-0000-4000-8000-000000000001',
      '115a0000-0000-4000-8000-000000000002', 'joined',    'member', '115a0000-0000-4000-8000-000000000002'),
     ('115c0000-0000-4000-8000-0000000000bb', '115b0000-0000-4000-8000-000000000001',
@@ -55,13 +60,14 @@ teardown
   delete from agent_board.board_membership_events where board_id = '115b0000-0000-4000-8000-000000000001';
   delete from agent_board.boards                where id       = '115b0000-0000-4000-8000-000000000001';
   delete from agent_board.agents                where id in ('115a0000-0000-4000-8000-000000000001','115a0000-0000-4000-8000-000000000002');
+  delete from auth.users                       where id = '115d0000-0000-4000-8000-000000000001';
 }
 
 # approver resolves the subject to 'joined'. With active row A present this is the
 # Option-1 path — it acquires the whole-set `for update` and returns A untouched
 # (retiring the dangling pending row P via the sink, but never writing A).
 session "approver"
-step "a_begin"   { BEGIN; SET LOCAL "request.jwt.claim.role" = 'service_role'; }
+step "a_begin"   { BEGIN; SET LOCAL "request.jwt.claim.role" = 'authenticated'; SET LOCAL "request.jwt.claim.sub" = '115d0000-0000-4000-8000-000000000001'; }
 step "a_resolve" {
   select membership_state
     from agent_board.resolve_board_request(

package/tests/isolation/specs/message_replay_scope.spec

@@ -0,0 +1,77 @@
+# #717 F2b: concurrent same-key send_direct_message / send_multicast_message calls serialize on the
+# unchanged (rpc, thread, resolved author, key) lock, and the second one is judged against what the
+# first COMMITTED. Two sends naming DIFFERENT recipients on one key: whichever commits first is the
+# message, and the other is refused (42501) rather than widening it. Two identical retries: one
+# message, one delivery per recipient, one inbox item each, one callback each.
+# A lock keyed by recipient (split domain) or removed lets the second send miss the uncommitted
+# first message and mint a second one; the check step then counts two messages.
+setup
+{
+  insert into auth.users(id) values ('717b4000-0000-4000-8000-0000000000a1'),('717b4000-0000-4000-8000-0000000000c1'),('717b4000-0000-4000-8000-0000000000c2'),('717b4000-0000-4000-8000-0000000000e1');
+  insert into agent_board.agents(id,agent_type,handle,display_name,status,auth_user_id)
+  values ('717b4000-0000-4000-8000-000000000001','agent','f2b717-iso-a','F2b iso A','active','717b4000-0000-4000-8000-0000000000a1'),
+         ('717b4000-0000-4000-8000-000000000003','agent','f2b717-iso-c','F2b iso C','active','717b4000-0000-4000-8000-0000000000c1'),
+         ('717b4000-0000-4000-8000-000000000004','agent','f2b717-iso-c2','F2b iso C2','active','717b4000-0000-4000-8000-0000000000c2'),
+         ('717b4000-0000-4000-8000-000000000005','agent','f2b717-iso-x','F2b iso X','active','717b4000-0000-4000-8000-0000000000e1');
+  insert into agent_board.threads(id,thread_type,created_by_agent_id,subject)
+  values ('717b4000-0000-4000-8000-000000000010','coordination','717b4000-0000-4000-8000-000000000001','f2b iso thread');
+  insert into agent_board.callback_endpoints(id,owner_agent_id,endpoint_url,endpoint_status)
+  values ('717b4000-0000-4000-8000-000000000030','717b4000-0000-4000-8000-000000000003','https://example.test/f2b717-iso-c','verified'),
+         ('717b4000-0000-4000-8000-000000000031','717b4000-0000-4000-8000-000000000004','https://example.test/f2b717-iso-c2','verified'),
+         ('717b4000-0000-4000-8000-000000000032','717b4000-0000-4000-8000-000000000005','https://example.test/f2b717-iso-x','verified');
+  insert into agent_board.callback_subscriptions(endpoint_id,agent_id,subscription_scope,event_category)
+  values ('717b4000-0000-4000-8000-000000000030','717b4000-0000-4000-8000-000000000003','own_inbox','inbox.item.delivered'),
+         ('717b4000-0000-4000-8000-000000000031','717b4000-0000-4000-8000-000000000004','own_inbox','inbox.item.delivered'),
+         ('717b4000-0000-4000-8000-000000000032','717b4000-0000-4000-8000-000000000005','own_inbox','inbox.item.delivered');
+}
+teardown
+{
+  delete from agent_board.callback_outbox_events where recipient_agent_id in ('717b4000-0000-4000-8000-000000000003','717b4000-0000-4000-8000-000000000004','717b4000-0000-4000-8000-000000000005');
+  delete from agent_board.callback_subscriptions where endpoint_id in ('717b4000-0000-4000-8000-000000000030','717b4000-0000-4000-8000-000000000031','717b4000-0000-4000-8000-000000000032');
+  delete from agent_board.callback_endpoints where id in ('717b4000-0000-4000-8000-000000000030','717b4000-0000-4000-8000-000000000031','717b4000-0000-4000-8000-000000000032');
+  delete from agent_board.inbox_items where recipient_agent_id in ('717b4000-0000-4000-8000-000000000003','717b4000-0000-4000-8000-000000000004','717b4000-0000-4000-8000-000000000005');
+  delete from agent_board.delivery_recipients where recipient_agent_id in ('717b4000-0000-4000-8000-000000000003','717b4000-0000-4000-8000-000000000004','717b4000-0000-4000-8000-000000000005');
+  delete from agent_board.messages where thread_id='717b4000-0000-4000-8000-000000000010';
+  delete from agent_board.threads where id='717b4000-0000-4000-8000-000000000010';
+  delete from agent_board.agents where id in ('717b4000-0000-4000-8000-000000000001','717b4000-0000-4000-8000-000000000003','717b4000-0000-4000-8000-000000000004','717b4000-0000-4000-8000-000000000005');
+  delete from auth.users where id in ('717b4000-0000-4000-8000-0000000000a1','717b4000-0000-4000-8000-0000000000c1','717b4000-0000-4000-8000-0000000000c2','717b4000-0000-4000-8000-0000000000e1');
+}
+# Each sending session is the author A: authenticated role AND matching JSON claims (built with
+# json_build_object: a literal brace would end the step), with the flattened claim GUCs cleared so
+# they cannot stand in for another identity.
+session "p"
+step "p_begin" { begin; set local role authenticated; select set_config('request.jwt.claim.role','',true), set_config('request.jwt.claim.sub','',true), set_config('request.jwt.claims',json_build_object('role','authenticated','sub','717b4000-0000-4000-8000-0000000000a1')::text,true); }
+step "p_dm_c" { select callback_outbox_count from agent_board.send_direct_message('717b4000-0000-4000-8000-000000000010','717b4000-0000-4000-8000-000000000001','717b4000-0000-4000-8000-000000000003','iso','iso dm','comment','medium','f2b717-kd',jsonb_build_object()); }
+step "p_mc_cc2" { select delivered_recipient_count, inbox_item_count, callback_outbox_count from agent_board.send_multicast_message('717b4000-0000-4000-8000-000000000010','717b4000-0000-4000-8000-000000000001',array['717b4000-0000-4000-8000-000000000003','717b4000-0000-4000-8000-000000000004']::uuid[],'iso','iso mc','comment','medium','f2b717-km',jsonb_build_object()); }
+step "p_end" { end; }
+session "w"
+step "w_begin" { begin; set local role authenticated; select set_config('request.jwt.claim.role','',true), set_config('request.jwt.claim.sub','',true), set_config('request.jwt.claims',json_build_object('role','authenticated','sub','717b4000-0000-4000-8000-0000000000a1')::text,true); }
+step "w_dm_x" { select callback_outbox_count from agent_board.send_direct_message('717b4000-0000-4000-8000-000000000010','717b4000-0000-4000-8000-000000000001','717b4000-0000-4000-8000-000000000005','iso','iso dm','comment','medium','f2b717-kd',jsonb_build_object()); }
+step "w_mc_cx" { select delivered_recipient_count, inbox_item_count, callback_outbox_count from agent_board.send_multicast_message('717b4000-0000-4000-8000-000000000010','717b4000-0000-4000-8000-000000000001',array['717b4000-0000-4000-8000-000000000003','717b4000-0000-4000-8000-000000000005']::uuid[],'iso','iso mc','comment','medium','f2b717-km',jsonb_build_object()); }
+step "w_end" { end; }
+session "r"
+step "r_begin" { begin; set local role authenticated; select set_config('request.jwt.claim.role','',true), set_config('request.jwt.claim.sub','',true), set_config('request.jwt.claims',json_build_object('role','authenticated','sub','717b4000-0000-4000-8000-0000000000a1')::text,true); }
+step "r_dm_c" { select callback_outbox_count from agent_board.send_direct_message('717b4000-0000-4000-8000-000000000010','717b4000-0000-4000-8000-000000000001','717b4000-0000-4000-8000-000000000003','iso','iso dm','comment','medium','f2b717-kd',jsonb_build_object()); }
+step "r_mc_c2c" { select delivered_recipient_count, inbox_item_count, callback_outbox_count from agent_board.send_multicast_message('717b4000-0000-4000-8000-000000000010','717b4000-0000-4000-8000-000000000001',array['717b4000-0000-4000-8000-000000000004','717b4000-0000-4000-8000-000000000003','717b4000-0000-4000-8000-000000000004']::uuid[],'iso','iso mc','comment','medium','f2b717-km',jsonb_build_object()); }
+step "r_end" { end; }
+session "check"
+step "check" {
+  select count(*) as messages,
+         (select string_agg(a.handle || ':' || dr.delivery_mode, ',' order by a.handle, dr.delivery_mode)
+            from agent_board.delivery_recipients dr join agent_board.messages m on m.id = dr.source_message_id
+            join agent_board.agents a on a.id = dr.recipient_agent_id
+           where m.thread_id = '717b4000-0000-4000-8000-000000000010') as deliveries,
+         (select count(*) from agent_board.inbox_items ii join agent_board.messages m on m.id = ii.source_message_id where m.thread_id = '717b4000-0000-4000-8000-000000000010') as inbox,
+         (select count(*) from agent_board.callback_outbox_events co join agent_board.messages m on m.id = co.source_message_id where m.thread_id = '717b4000-0000-4000-8000-000000000010') as callbacks
+    from agent_board.messages where thread_id = '717b4000-0000-4000-8000-000000000010';
+}
+# direct, C wins: the send to X waits on the key lock, then is refused against the committed message
+permutation "p_begin" "p_dm_c" "w_begin" "w_dm_x" "p_end" "w_end" "check"
+# direct, X wins: the send to C waits, then is refused (C holds no direct delivery of X's message)
+permutation "w_begin" "w_dm_x" "p_begin" "p_dm_c" "w_end" "p_end" "check"
+# direct, identical retries: the second waits and reuses -- one message, delivery, inbox item, callback
+permutation "p_begin" "p_dm_c" "r_begin" "r_dm_c" "p_end" "r_end" "check"
+# multicast, {C,C2} wins: {C,X} waits, then is refused (X is new)
+permutation "p_begin" "p_mc_cc2" "w_begin" "w_mc_cx" "p_end" "w_end" "check"
+# multicast, identical set reordered and duplicated: one message, two deliveries, two inbox items, two callbacks
+permutation "p_begin" "p_mc_cc2" "r_begin" "r_mc_c2c" "p_end" "r_end" "check"

package/tests/isolation/specs/tasking_replay_scope.spec

@@ -0,0 +1,72 @@
+# #717 F2: concurrent same-key create_tasking_delivery sends serialize on the unchanged
+# (thread, resolved creator, key) lock, and the second one is judged against what the first
+# COMMITTED. A private send and a board send racing on one key: whichever commits first is the
+# task, and the other is refused (42501) rather than widening it. Two identical retries racing:
+# one task, one created event, one delivery, one inbox item, one callback.
+# The thread is already stamped to the board, so first association never serializes them: only
+# the idempotency lock does.
+setup
+{
+  insert into auth.users(id) values ('71740000-0000-4000-8000-0000000000a1'),('71740000-0000-4000-8000-0000000000c1');
+  insert into agent_board.agents(id,agent_type,handle,display_name,status,auth_user_id)
+  values ('71740000-0000-4000-8000-000000000001','agent','f2717-iso-a','F2 iso A','active','71740000-0000-4000-8000-0000000000a1'),
+         ('71740000-0000-4000-8000-000000000003','agent','f2717-iso-c','F2 iso C','active','71740000-0000-4000-8000-0000000000c1');
+  insert into agent_board.boards(id,slug,name,created_by_agent_id,visibility,status)
+  values ('71740000-0000-4000-8000-000000000020','f2717-iso-b','F2 iso board','71740000-0000-4000-8000-000000000001','private','active');
+  select set_config('request.jwt.claim.role','service_role',false);
+  insert into agent_board.board_memberships(board_id,agent_id,membership_state,created_by_agent_id,role)
+  values ('71740000-0000-4000-8000-000000000020','71740000-0000-4000-8000-000000000001','joined','71740000-0000-4000-8000-000000000001','member');
+  insert into agent_board.threads(id,thread_type,created_by_agent_id,subject,board_id)
+  values ('71740000-0000-4000-8000-000000000010','coordination','71740000-0000-4000-8000-000000000001','f2 iso thread','71740000-0000-4000-8000-000000000020');
+  insert into agent_board.callback_endpoints(id,owner_agent_id,endpoint_url,endpoint_status)
+  values ('71740000-0000-4000-8000-000000000030','71740000-0000-4000-8000-000000000003','https://example.test/f2717-iso','verified');
+  insert into agent_board.callback_subscriptions(endpoint_id,agent_id,subscription_scope,event_category)
+  values ('71740000-0000-4000-8000-000000000030','71740000-0000-4000-8000-000000000003','own_inbox','inbox.item.delivered');
+}
+teardown
+{
+  delete from agent_board.callback_outbox_events where recipient_agent_id in ('71740000-0000-4000-8000-000000000001','71740000-0000-4000-8000-000000000003');
+  delete from agent_board.callback_subscriptions where endpoint_id='71740000-0000-4000-8000-000000000030';
+  delete from agent_board.callback_endpoints where id='71740000-0000-4000-8000-000000000030';
+  delete from agent_board.inbox_items where recipient_agent_id in ('71740000-0000-4000-8000-000000000001','71740000-0000-4000-8000-000000000003');
+  delete from agent_board.delivery_recipients where recipient_agent_id in ('71740000-0000-4000-8000-000000000001','71740000-0000-4000-8000-000000000003');
+  delete from agent_board.task_events where thread_id='71740000-0000-4000-8000-000000000010';
+  delete from agent_board.tasks where thread_id='71740000-0000-4000-8000-000000000010';
+  delete from agent_board.threads where id='71740000-0000-4000-8000-000000000010';
+  delete from agent_board.board_membership_events where board_id='71740000-0000-4000-8000-000000000020';
+  delete from agent_board.boards where id='71740000-0000-4000-8000-000000000020';
+  delete from agent_board.agents where id in ('71740000-0000-4000-8000-000000000001','71740000-0000-4000-8000-000000000003');
+  delete from auth.users where id in ('71740000-0000-4000-8000-0000000000a1','71740000-0000-4000-8000-0000000000c1');
+}
+# Each sending session is the creator A: authenticated role AND matching JSON claims (built with
+# json_build_object: a literal brace would end the step), with the
+# flattened claim GUCs cleared so they cannot stand in for another identity.
+session "p"
+step "p_begin" { begin; set local role authenticated; select set_config('request.jwt.claim.role','',true), set_config('request.jwt.claim.sub','',true), set_config('request.jwt.claims',json_build_object('role','authenticated','sub','71740000-0000-4000-8000-0000000000a1')::text,true); }
+step "p_private" { select delivered_recipient_count, inbox_item_count, callback_outbox_count from agent_board.create_tasking_delivery('71740000-0000-4000-8000-000000000010','71740000-0000-4000-8000-000000000001','iso private',null,array['71740000-0000-4000-8000-000000000003']::uuid[],null,'medium','distributed','f2717-kc',jsonb_build_object()); }
+step "p_end" { end; }
+session "b"
+step "b_begin" { begin; set local role authenticated; select set_config('request.jwt.claim.role','',true), set_config('request.jwt.claim.sub','',true), set_config('request.jwt.claims',json_build_object('role','authenticated','sub','71740000-0000-4000-8000-0000000000a1')::text,true); }
+step "b_board" { select delivered_recipient_count, inbox_item_count, callback_outbox_count from agent_board.create_tasking_delivery('71740000-0000-4000-8000-000000000010','71740000-0000-4000-8000-000000000001','iso board',null,null,'71740000-0000-4000-8000-000000000020','medium','distributed','f2717-kc',jsonb_build_object()); }
+step "b_end" { end; }
+session "r"
+step "r_begin" { begin; set local role authenticated; select set_config('request.jwt.claim.role','',true), set_config('request.jwt.claim.sub','',true), set_config('request.jwt.claims',json_build_object('role','authenticated','sub','71740000-0000-4000-8000-0000000000a1')::text,true); }
+step "r_private" { select delivered_recipient_count, inbox_item_count, callback_outbox_count from agent_board.create_tasking_delivery('71740000-0000-4000-8000-000000000010','71740000-0000-4000-8000-000000000001','iso private',null,array['71740000-0000-4000-8000-000000000003']::uuid[],null,'medium','distributed','f2717-kc',jsonb_build_object()); }
+step "r_end" { end; }
+session "check"
+step "check" {
+  select count(*) as tasks,
+         (select count(*) from agent_board.task_events te join agent_board.tasks t on t.id = te.task_id where t.thread_id = '71740000-0000-4000-8000-000000000010') as events,
+         (select count(*) from agent_board.delivery_recipients dr join agent_board.tasks t on t.id = dr.source_task_id where t.thread_id = '71740000-0000-4000-8000-000000000010' and dr.board_id is null) as private_deliveries,
+         (select count(*) from agent_board.delivery_recipients dr join agent_board.tasks t on t.id = dr.source_task_id where t.thread_id = '71740000-0000-4000-8000-000000000010' and dr.board_id is not null) as board_deliveries,
+         (select count(*) from agent_board.inbox_items ii join agent_board.tasks t on t.id = ii.source_task_id where t.thread_id = '71740000-0000-4000-8000-000000000010') as inbox,
+         (select count(*) from agent_board.callback_outbox_events co join agent_board.tasks t on t.id = co.source_task_id where t.thread_id = '71740000-0000-4000-8000-000000000010') as callbacks,
+         string_agg(title, ',' order by title) as titles
+    from agent_board.tasks where thread_id = '71740000-0000-4000-8000-000000000010';
+}
+# private wins: the board send waits on the key lock, then is refused against the committed private task
+permutation "p_begin" "p_private" "b_begin" "b_board" "p_end" "b_end" "check"
+# board wins: the private send waits, then is refused (C holds no private delivery of the board task)
+permutation "b_begin" "b_board" "p_begin" "p_private" "b_end" "p_end" "check"
+# identical retries: the second waits and reuses -- one task, event, delivery, inbox item, callback
+permutation "p_begin" "p_private" "r_begin" "r_private" "p_end" "r_end" "check"

package/tests/mutations/717-f1/M0_prefix_main_acl_and_comments.sql

@@ -0,0 +1,11 @@
+-- Reverse of 20261104180000: the exact origin/main 21b7b158 ACL (service_role EXECUTE) and comments.
+grant execute on function agent_board._upsert_delivery_recipient(text,uuid,text,uuid,uuid,uuid,uuid,uuid,jsonb) to service_role;
+grant execute on function agent_board._upsert_inbox_item(uuid,uuid,uuid,text,text,uuid,uuid,uuid,text,text,text,boolean,boolean,jsonb,jsonb) to service_role;
+grant execute on function agent_board._queue_inbox_callbacks(uuid,text) to service_role;
+grant execute on function agent_board._queue_board_post_callbacks(uuid,uuid,text,text,text,jsonb) to service_role;
+grant execute on function agent_board._next_thread_message_sequence(uuid) to service_role;
+comment on function agent_board._upsert_delivery_recipient(text,uuid,text,uuid,uuid,uuid,uuid,uuid,jsonb) is 'Enforces thread/board identity and the locked empty-history boundary for message, task and delegation delivery sources. Supplying a source ID does not exempt its private history. The sending RPC validates caller authority before its own writes.';
+comment on function agent_board._upsert_inbox_item(uuid,uuid,uuid,text,text,uuid,uuid,uuid,text,text,text,boolean,boolean,jsonb,jsonb) is null;
+comment on function agent_board._queue_inbox_callbacks(uuid,text) is null;
+comment on function agent_board._queue_board_post_callbacks(uuid,uuid,text,text,text,jsonb) is null;
+comment on function agent_board._next_thread_message_sequence(uuid) is null;

package/tests/mutations/717-f1/M10_wrapper_stops_delegating.sql

@@ -0,0 +1,7 @@
+do $m$ declare d text := pg_get_functiondef('agent_board.post_board_message(uuid,uuid,text,text,text,text,text,text,text,jsonb)'::regprocedure);
+  hdr text; body text;
+begin
+  hdr := split_part(d, '$function$', 1); body := split_part(d, '$function$', 2);
+  if body !~ 'agent_board\.post_board_message\(' then raise exception 'mutation anchor missing'; end if;
+  execute hdr || '$function$' || regexp_replace(body, 'agent_board\.post_board_message\(', 'agent_board.post_board_message_gone(', 'g') || '$function$';
+end $m$;

package/tests/mutations/717-f1/M11_transitive_recipient_content.sql

@@ -0,0 +1,8 @@
+create function agent_board.review_f1_widen(p_inbox uuid) returns void language sql security definer set search_path=agent_board,public as $f$
+update agent_board.inbox_items set preview='forged preview through state update' where id=p_inbox;
+$f$;
+revoke all on function agent_board.review_f1_widen(uuid) from public,anon,authenticated,service_role,agent_board_delegate;
+do $m$ declare d text := pg_get_functiondef('agent_board.update_inbox_item_state(uuid,uuid,text,jsonb)'::regprocedure); begin
+if position('v_callback_count := agent_board._queue_inbox_callbacks' in d)=0 then raise exception 'missing anchor'; end if;
+execute replace(d, 'v_callback_count := agent_board._queue_inbox_callbacks', 'perform agent_board.review_f1_widen(v_inbox.id); v_callback_count := agent_board._queue_inbox_callbacks');
+end $m$;

package/tests/mutations/717-f1/M12_transitive_recipient_visibility.sql

@@ -0,0 +1,8 @@
+create function agent_board.review_f1_widen(p_inbox uuid) returns void language sql security definer set search_path=agent_board,public as $f$
+update agent_board.inbox_items set visible_in_board_feed=true where id=p_inbox;
+$f$;
+revoke all on function agent_board.review_f1_widen(uuid) from public,anon,authenticated,service_role,agent_board_delegate;
+do $m$ declare d text := pg_get_functiondef('agent_board.update_inbox_item_state(uuid,uuid,text,jsonb)'::regprocedure); begin
+if position('v_callback_count := agent_board._queue_inbox_callbacks' in d)=0 then raise exception 'missing anchor'; end if;
+execute replace(d, 'v_callback_count := agent_board._queue_inbox_callbacks', 'perform agent_board.review_f1_widen(v_inbox.id); v_callback_count := agent_board._queue_inbox_callbacks');
+end $m$;

package/tests/mutations/717-f1/M13_transitive_worker_content.sql

@@ -0,0 +1,15 @@
+-- Two private hops must not hide a worker's content write from DWX-4c.
+create function agent_board.dwx_worker_sink() returns void language sql security definer
+set search_path=agent_board,public as $f$
+update agent_board.inbox_items set preview='forged worker preview' where false;
+$f$;
+create function agent_board.dwx_worker_bridge() returns void language sql security definer
+set search_path=agent_board,public as $f$ select agent_board.dwx_worker_sink(); $f$;
+revoke all on function agent_board.dwx_worker_sink(), agent_board.dwx_worker_bridge()
+from public,anon,authenticated,service_role,agent_board_delegate;
+do $m$
+declare d text := pg_get_functiondef('agent_board.claim_callback_outbox_events(integer)'::regprocedure);
+begin
+  if position(E'begin\n' in d)=0 then raise exception 'missing worker begin anchor'; end if;
+  execute replace(d, E'begin\n', E'begin\n  perform agent_board.dwx_worker_bridge();\n');
+end $m$;

package/tests/mutations/717-f1/M1a_regrant_upsert_delivery_recipient.sql

@@ -0,0 +1 @@
+grant execute on function agent_board._upsert_delivery_recipient(text,uuid,text,uuid,uuid,uuid,uuid,uuid,jsonb) to service_role;

package/tests/mutations/717-f1/M1b_regrant_upsert_inbox_item.sql

@@ -0,0 +1 @@
+grant execute on function agent_board._upsert_inbox_item(uuid,uuid,uuid,text,text,uuid,uuid,uuid,text,text,text,boolean,boolean,jsonb,jsonb) to service_role;

package/tests/mutations/717-f1/M1c_regrant_queue_inbox_callbacks.sql

@@ -0,0 +1 @@
+grant execute on function agent_board._queue_inbox_callbacks(uuid,text) to service_role;

package/tests/mutations/717-f1/M1d_regrant_queue_board_post_callbacks.sql

@@ -0,0 +1 @@
+grant execute on function agent_board._queue_board_post_callbacks(uuid,uuid,text,text,text,jsonb) to service_role;

package/tests/mutations/717-f1/M1e_regrant_next_thread_message_sequence.sql

@@ -0,0 +1 @@
+grant execute on function agent_board._next_thread_message_sequence(uuid) to service_role;

package/tests/mutations/717-f1/M2_blanket_schema_grant.sql

@@ -0,0 +1 @@
+grant execute on all functions in schema agent_board to service_role;

package/tests/mutations/717-f1/M3_new_overload_of_sink.sql

@@ -0,0 +1,10 @@
+create function agent_board._upsert_delivery_recipient(p_delivery_mode text, p_recipient_agent_id uuid, p_source_kind text, p_source_message_id uuid, p_extra text)
+returns uuid language plpgsql security definer set search_path = agent_board, public as $f$
+declare v uuid;
+begin
+  insert into agent_board.delivery_recipients(delivery_mode, recipient_agent_id, source_kind, source_message_id)
+  values (p_delivery_mode, p_recipient_agent_id, p_source_kind, p_source_message_id) returning id into v;
+  return v;
+end $f$;
+revoke all on function agent_board._upsert_delivery_recipient(text,uuid,text,uuid,text) from public;
+grant execute on function agent_board._upsert_delivery_recipient(text,uuid,text,uuid,text) to service_role;

package/tests/mutations/717-f1/M4_new_route_calling_sink.sql

@@ -0,0 +1,7 @@
+create function agent_board.relay_inbox_item(p_dr uuid, p_recipient uuid)
+returns uuid language plpgsql security definer set search_path = agent_board, public as $f$
+begin
+  return agent_board._upsert_inbox_item(p_dr, p_recipient, null, 'direct', 'message', null, null, null, 's', 'p', 'medium', true, false, '{}'::jsonb, '{}'::jsonb);
+end $f$;
+revoke all on function agent_board.relay_inbox_item(uuid,uuid) from public;
+grant execute on function agent_board.relay_inbox_item(uuid,uuid) to authenticated;

package/tests/mutations/717-f1/M5_actor_trusts_supplied_id.sql

@@ -0,0 +1,5 @@
+do $m$ begin
+  execute replace(pg_get_functiondef('agent_board._resolved_actor_agent_id(uuid,text)'::regprocedure),
+    'if p_supplied_agent_id is not null and p_supplied_agent_id <> v_current_agent_id then',
+    'if p_supplied_agent_id is not null then return p_supplied_agent_id; end if; if false then');
+end $m$;

package/tests/mutations/717-f1/M6_signed_route_granted_to_authenticated.sql

@@ -0,0 +1 @@
+grant execute on function agent_board.signed_post_board_message(jsonb,jsonb) to authenticated;

package/tests/mutations/717-f1/M7_worker_granted_to_authenticated.sql

@@ -0,0 +1 @@
+grant execute on function agent_board.claim_callback_outbox_events(integer) to authenticated;

package/tests/mutations/717-f1/M8_recipient_state_rewrites_visibility.sql

@@ -0,0 +1,5 @@
+do $m$ begin
+  execute replace(pg_get_functiondef('agent_board.update_inbox_item_state(uuid,uuid,text,jsonb)'::regprocedure),
+    'set action_state = p_action_state,',
+    'set action_state = p_action_state, visible_in_board_feed = true,');
+end $m$;

package/tests/mutations/717-f1/M9_public_route_revoked_from_service_role.sql

@@ -0,0 +1 @@
+revoke execute on function agent_board.send_direct_message(uuid,uuid,uuid,text,text,text,text,text,jsonb) from service_role;