@consiliency/agent-board-schema 1.68.0 → 1.74.0

package/tests/isolation/specs/association_vs_artifact_claim_escalation.spec

@@ -0,0 +1,41 @@
+# #667: thread-only artifact, thread-only claim and taskless escalation each
+# serialize with first association. Each writer and the association win once.
+setup
+{
+  insert into agent_board.agents(id,agent_type,handle,display_name,status)
+  values ('66720000-0000-4000-8000-000000000001','agent','xb-art-claim-esc','XB art claim escalation','active');
+  insert into agent_board.boards(id,slug,name,created_by_agent_id,visibility,status)
+  values ('66720000-0000-4000-8000-000000000020','xb-art-claim-esc-board','XB art claim escalation board',
+    '66720000-0000-4000-8000-000000000001','private','active');
+  insert into agent_board.threads(id,thread_type,created_by_agent_id,subject)
+  values ('66720000-0000-4000-8000-000000000010','coordination',
+    '66720000-0000-4000-8000-000000000001','artifact claim escalation race');
+}
+teardown
+{
+  delete from agent_board.artifacts where thread_id='66720000-0000-4000-8000-000000000010';
+  delete from agent_board.claims where thread_id='66720000-0000-4000-8000-000000000010';
+  delete from agent_board.escalations where thread_id='66720000-0000-4000-8000-000000000010';
+  delete from agent_board.messages where thread_id='66720000-0000-4000-8000-000000000010';
+  delete from agent_board.threads where id='66720000-0000-4000-8000-000000000010';
+  delete from agent_board.boards where id='66720000-0000-4000-8000-000000000020';
+  delete from agent_board.agents where id='66720000-0000-4000-8000-000000000001';
+}
+session "w"
+step "w_begin" { begin; select set_config('request.jwt.claim.role','service_role',true); }
+step "w_artifact" { select count(*) from agent_board.add_artifact('66720000-0000-4000-8000-000000000001','https://example.test/xb',p_thread_id=>'66720000-0000-4000-8000-000000000010'); }
+step "w_claim" { select count(*) from agent_board.acquire_claim('66720000-0000-4000-8000-000000000001','custom','xb-race-key',now()+interval '1 hour',p_thread_id=>'66720000-0000-4000-8000-000000000010'); }
+step "w_escalation" { select count(*) from agent_board.raise_escalation('66720000-0000-4000-8000-000000000010','66720000-0000-4000-8000-000000000001','private escalation'); }
+step "w_commit" { commit; }
+session "a"
+step "a_begin" { begin; select set_config('request.jwt.claim.role','service_role',true); }
+step "a_post" { select count(*) from agent_board.post_board_message('66720000-0000-4000-8000-000000000010','66720000-0000-4000-8000-000000000001','66720000-0000-4000-8000-000000000020','s','b'); }
+step "a_end" { end; }
+session "check"
+step "check" { select (t.board_id is not null) as stamped, (select count(*) from agent_board.artifacts where thread_id=t.id) as artifacts, (select count(*) from agent_board.claims where thread_id=t.id) as claims, (select count(*) from agent_board.escalations where thread_id=t.id) as escalations, (select count(*) from agent_board.messages where thread_id=t.id) as messages from agent_board.threads t where t.id='66720000-0000-4000-8000-000000000010'; }
+permutation "w_begin" "w_artifact" "a_begin" "a_post" "w_commit" "a_end" "check"
+permutation "a_begin" "a_post" "w_begin" "w_artifact" "a_end" "w_commit" "check"
+permutation "w_begin" "w_claim" "a_begin" "a_post" "w_commit" "a_end" "check"
+permutation "a_begin" "a_post" "w_begin" "w_claim" "a_end" "w_commit" "check"
+permutation "w_begin" "w_escalation" "a_begin" "a_post" "w_commit" "a_end" "check"
+permutation "a_begin" "a_post" "w_begin" "w_escalation" "a_end" "w_commit" "check"

package/tests/isolation/specs/association_vs_heartbeat.spec

@@ -0,0 +1,47 @@
+# #667: a heartbeat retaining its old thread and a first board association
+# serialize on the thread. The second permutation covers an empty association
+# winning before a heartbeat explicitly supplies that thread.
+setup
+{
+  insert into agent_board.agents(id, agent_type, handle, display_name, status)
+  values ('66700000-0000-4000-8000-000000000001', 'agent', 'xb-heartbeat', 'XB heartbeat', 'active');
+  select set_config('request.jwt.claim.role','service_role',false);
+  insert into agent_board.boards(id,slug,name,created_by_agent_id,visibility,status)
+  values ('66700000-0000-4000-8000-000000000020','xb-heartbeat-board','XB heartbeat board',
+    '66700000-0000-4000-8000-000000000001','private','active');
+  insert into agent_board.threads(id,thread_type,created_by_agent_id,subject)
+  values ('66700000-0000-4000-8000-000000000010','coordination',
+    '66700000-0000-4000-8000-000000000001','heartbeat race');
+}
+
+teardown
+{
+  delete from agent_board.callback_outbox_events where source_message_id in (select id from agent_board.messages where thread_id='66700000-0000-4000-8000-000000000010');
+  delete from agent_board.inbox_items where source_message_id in (select id from agent_board.messages where thread_id='66700000-0000-4000-8000-000000000010');
+  delete from agent_board.delivery_recipients where source_message_id in (select id from agent_board.messages where thread_id='66700000-0000-4000-8000-000000000010');
+  delete from agent_board.messages where thread_id='66700000-0000-4000-8000-000000000010';
+  delete from agent_board.presence where agent_id='66700000-0000-4000-8000-000000000001';
+  delete from agent_board.threads where id='66700000-0000-4000-8000-000000000010';
+  delete from agent_board.board_membership_events where board_id in (select id from agent_board.boards where slug='xb-heartbeat-board');
+  delete from agent_board.board_memberships where board_id in (select id from agent_board.boards where slug='xb-heartbeat-board');
+  delete from agent_board.boards where slug='xb-heartbeat-board';
+  delete from agent_board.agents where id='66700000-0000-4000-8000-000000000001';
+}
+
+session "h"
+step "h_prime" { select set_config('request.jwt.claim.role','service_role',false); select count(*) from agent_board.heartbeat('66700000-0000-4000-8000-000000000001','66700000-0000-4000-8000-000000000010',p_activity_summary => 'initial'); }
+step "h_begin" { begin; select set_config('request.jwt.claim.role','service_role',true); }
+step "h_retain" { select count(*) from agent_board.heartbeat('66700000-0000-4000-8000-000000000001',null,p_activity_summary => 'retained',p_metadata => jsonb_build_object('note','private')); }
+step "h_attach" { select count(*) from agent_board.heartbeat('66700000-0000-4000-8000-000000000001','66700000-0000-4000-8000-000000000010',p_activity_summary => 'after association'); }
+step "h_commit" { commit; }
+
+session "a"
+step "a_begin" { begin; select set_config('request.jwt.claim.role','service_role',true); }
+step "a_post" { select count(*) from agent_board.post_board_message('66700000-0000-4000-8000-000000000010','66700000-0000-4000-8000-000000000001',(select id from agent_board.boards where slug='xb-heartbeat-board'),'s','b'); }
+step "a_end" { end; }
+
+session "check"
+step "check" { select (t.board_id is not null) as stamped, p.thread_id is not null as presence_has_thread, p.activity_summary from agent_board.threads t left join agent_board.presence p on p.agent_id='66700000-0000-4000-8000-000000000001' where t.id='66700000-0000-4000-8000-000000000010'; }
+
+permutation "h_prime" "h_begin" "h_retain" "a_begin" "a_post" "h_commit" "a_end" "check"
+permutation "a_begin" "a_post" "h_begin" "h_attach" "a_end" "h_commit" "check"

package/tests/isolation/specs/association_vs_multi_anchor_artifact.spec

@@ -0,0 +1,38 @@
+# #667: an artifact may name an empty explicit thread and a task on another
+# thread. The explicit thread must serialize with first association even when a
+# different canonical anchor is also present.
+setup
+{
+  insert into agent_board.agents(id,agent_type,handle,display_name,status)
+  values ('66730000-0000-4000-8000-000000000001','agent','xb-multi-anchor','XB multi anchor','active');
+  insert into agent_board.boards(id,slug,name,created_by_agent_id,visibility,status)
+  values ('66730000-0000-4000-8000-000000000020','xb-multi-anchor-board','XB multi anchor board',
+    '66730000-0000-4000-8000-000000000001','private','active');
+  insert into agent_board.threads(id,thread_type,created_by_agent_id,subject)
+  values ('66730000-0000-4000-8000-000000000010','coordination','66730000-0000-4000-8000-000000000001','explicit empty'),
+         ('66730000-0000-4000-8000-000000000011','coordination','66730000-0000-4000-8000-000000000001','task parent');
+  insert into agent_board.tasks(id,thread_id,created_by_agent_id,title)
+  values ('66730000-0000-4000-8000-000000000030','66730000-0000-4000-8000-000000000011','66730000-0000-4000-8000-000000000001','parent task');
+}
+teardown
+{
+  delete from agent_board.artifacts where thread_id='66730000-0000-4000-8000-000000000010';
+  delete from agent_board.task_events where task_id='66730000-0000-4000-8000-000000000030';
+  delete from agent_board.tasks where id='66730000-0000-4000-8000-000000000030';
+  delete from agent_board.messages where thread_id='66730000-0000-4000-8000-000000000010';
+  delete from agent_board.threads where id in ('66730000-0000-4000-8000-000000000010','66730000-0000-4000-8000-000000000011');
+  delete from agent_board.boards where id='66730000-0000-4000-8000-000000000020';
+  delete from agent_board.agents where id='66730000-0000-4000-8000-000000000001';
+}
+session "w"
+step "w_begin" { begin; select set_config('request.jwt.claim.role','service_role',true); }
+step "w_artifact" { select count(*) from agent_board.add_artifact('66730000-0000-4000-8000-000000000001','https://example.test/mixed',p_thread_id=>'66730000-0000-4000-8000-000000000010',p_task_id=>'66730000-0000-4000-8000-000000000030'); }
+step "w_commit" { commit; }
+session "a"
+step "a_begin" { begin; select set_config('request.jwt.claim.role','service_role',true); }
+step "a_post" { select count(*) from agent_board.post_board_message('66730000-0000-4000-8000-000000000010','66730000-0000-4000-8000-000000000001','66730000-0000-4000-8000-000000000020','s','b'); }
+step "a_end" { end; }
+session "check"
+step "check" { select (t.board_id is not null) as stamped, (select count(*) from agent_board.artifacts where thread_id=t.id and task_id='66730000-0000-4000-8000-000000000030') as mixed_artifacts, (select count(*) from agent_board.messages where thread_id=t.id) as messages from agent_board.threads t where t.id='66730000-0000-4000-8000-000000000010'; }
+permutation "w_begin" "w_artifact" "a_begin" "a_post" "w_commit" "a_end" "check"
+permutation "a_begin" "a_post" "w_begin" "w_artifact" "a_end" "w_commit" "check"

package/tests/isolation/specs/association_vs_private_message.spec

@@ -0,0 +1,33 @@
+# #667: a private append and first board association serialize on the thread.
+# The private writer wins with committed history and the association refuses;
+# if association wins, the later service writer uses the stamped thread.
+setup
+{
+  insert into agent_board.agents(id,agent_type,handle,display_name,status)
+  values ('66810000-0000-4000-8000-000000000001','agent','xb-private-race','XB private race','active');
+  insert into agent_board.boards(id,slug,name,created_by_agent_id,visibility,status)
+  values ('66810000-0000-4000-8000-000000000020','xb-private-race-board','XB private race board',
+    '66810000-0000-4000-8000-000000000001','private','active');
+  insert into agent_board.threads(id,thread_type,created_by_agent_id,subject)
+  values ('66810000-0000-4000-8000-000000000010','coordination',
+    '66810000-0000-4000-8000-000000000001','private race');
+}
+teardown
+{
+  delete from agent_board.messages where thread_id='66810000-0000-4000-8000-000000000010';
+  delete from agent_board.threads where id='66810000-0000-4000-8000-000000000010';
+  delete from agent_board.boards where id='66810000-0000-4000-8000-000000000020';
+  delete from agent_board.agents where id='66810000-0000-4000-8000-000000000001';
+}
+session "w"
+step "w_begin" { begin; select set_config('request.jwt.claim.role','service_role',true); }
+step "w_post" { select count(*) from agent_board.post_message('66810000-0000-4000-8000-000000000010','66810000-0000-4000-8000-000000000001','private race message'); }
+step "w_commit" { commit; }
+session "a"
+step "a_begin" { begin; select set_config('request.jwt.claim.role','service_role',true); }
+step "a_post" { select count(*) from agent_board.post_board_message('66810000-0000-4000-8000-000000000010','66810000-0000-4000-8000-000000000001','66810000-0000-4000-8000-000000000020','board','board race message'); }
+step "a_end" { end; }
+session "check"
+step "check" { select (t.board_id is not null) as stamped, (select count(*) from agent_board.messages m where m.thread_id=t.id and m.body='private race message') as private_messages, (select count(*) from agent_board.messages m where m.thread_id=t.id and m.body='board race message') as board_messages from agent_board.threads t where t.id='66810000-0000-4000-8000-000000000010'; }
+permutation "w_begin" "w_post" "a_begin" "a_post" "w_commit" "a_end" "check"
+permutation "a_begin" "a_post" "w_begin" "w_post" "a_end" "w_commit" "check"

package/tests/isolation/specs/association_vs_task_and_conflict.spec

@@ -0,0 +1,38 @@
+# #667: private task creation and taskless conflict serialize with first board
+# association. Each operation wins once; the checker observes the resulting rows.
+setup
+{
+  insert into agent_board.agents(id,agent_type,handle,display_name,status)
+  values ('66710000-0000-4000-8000-000000000001','agent','xb-task-conflict','XB task conflict','active');
+  insert into agent_board.boards(id,slug,name,created_by_agent_id,visibility,status)
+  values ('66710000-0000-4000-8000-000000000020','xb-task-conflict-board','XB task conflict board',
+    '66710000-0000-4000-8000-000000000001','private','active');
+  insert into agent_board.threads(id,thread_type,created_by_agent_id,subject)
+  values ('66710000-0000-4000-8000-000000000010','coordination',
+    '66710000-0000-4000-8000-000000000001','task conflict race');
+}
+teardown
+{
+  delete from agent_board.conflicts where thread_id='66710000-0000-4000-8000-000000000010';
+  delete from agent_board.task_events where thread_id='66710000-0000-4000-8000-000000000010';
+  delete from agent_board.tasks where thread_id='66710000-0000-4000-8000-000000000010';
+  delete from agent_board.messages where thread_id='66710000-0000-4000-8000-000000000010';
+  delete from agent_board.threads where id='66710000-0000-4000-8000-000000000010';
+  delete from agent_board.boards where id='66710000-0000-4000-8000-000000000020';
+  delete from agent_board.agents where id='66710000-0000-4000-8000-000000000001';
+}
+session "w"
+step "w_begin" { begin; select set_config('request.jwt.claim.role','service_role',true); }
+step "w_task" { select count(*) from agent_board.create_task('66710000-0000-4000-8000-000000000010','66710000-0000-4000-8000-000000000001','private task'); }
+step "w_conflict" { select count(*) from agent_board.raise_conflict('66710000-0000-4000-8000-000000000010','66710000-0000-4000-8000-000000000001','private conflict'); }
+step "w_commit" { commit; }
+session "a"
+step "a_begin" { begin; select set_config('request.jwt.claim.role','service_role',true); }
+step "a_post" { select count(*) from agent_board.post_board_message('66710000-0000-4000-8000-000000000010','66710000-0000-4000-8000-000000000001','66710000-0000-4000-8000-000000000020','s','b'); }
+step "a_end" { end; }
+session "check"
+step "check" { select (t.board_id is not null) as stamped, (select count(*) from agent_board.tasks where thread_id=t.id) as tasks, (select count(*) from agent_board.conflicts where thread_id=t.id) as conflicts, (select count(*) from agent_board.messages where thread_id=t.id) as messages from agent_board.threads t where t.id='66710000-0000-4000-8000-000000000010'; }
+permutation "w_begin" "w_task" "a_begin" "a_post" "w_commit" "a_end" "check"
+permutation "a_begin" "a_post" "w_begin" "w_task" "a_end" "w_commit" "check"
+permutation "w_begin" "w_conflict" "a_begin" "a_post" "w_commit" "a_end" "check"
+permutation "a_begin" "a_post" "w_begin" "w_conflict" "a_end" "w_commit" "check"

package/tests/isolation/specs/association_vs_taskful_cross_thread.spec

@@ -0,0 +1,42 @@
+# #667: a task argument does not prove that a conflict or escalation's own
+# thread equals its task thread. Both taskful writers serialize on their supplied
+# thread before appending an event to the separately anchored task.
+setup
+{
+  insert into agent_board.agents(id,agent_type,handle,display_name,status)
+  values ('66760000-0000-4000-8000-000000000001','agent','xb-cross-task','XB cross task','active');
+  insert into agent_board.boards(id,slug,name,created_by_agent_id,visibility,status)
+  values ('66760000-0000-4000-8000-000000000020','xb-cross-task-board','XB cross task board',
+    '66760000-0000-4000-8000-000000000001','private','active');
+  insert into agent_board.threads(id,thread_type,created_by_agent_id,subject)
+  values ('66760000-0000-4000-8000-000000000010','coordination','66760000-0000-4000-8000-000000000001','empty target'),
+         ('66760000-0000-4000-8000-000000000011','coordination','66760000-0000-4000-8000-000000000001','task parent');
+  insert into agent_board.tasks(id,thread_id,created_by_agent_id,title)
+  values ('66760000-0000-4000-8000-000000000030','66760000-0000-4000-8000-000000000011','66760000-0000-4000-8000-000000000001','parent task');
+}
+teardown
+{
+  delete from agent_board.conflicts where thread_id='66760000-0000-4000-8000-000000000010';
+  delete from agent_board.escalations where thread_id='66760000-0000-4000-8000-000000000010';
+  delete from agent_board.task_events where task_id='66760000-0000-4000-8000-000000000030';
+  delete from agent_board.tasks where id='66760000-0000-4000-8000-000000000030';
+  delete from agent_board.messages where thread_id='66760000-0000-4000-8000-000000000010';
+  delete from agent_board.threads where id in ('66760000-0000-4000-8000-000000000010','66760000-0000-4000-8000-000000000011');
+  delete from agent_board.boards where id='66760000-0000-4000-8000-000000000020';
+  delete from agent_board.agents where id='66760000-0000-4000-8000-000000000001';
+}
+session "w"
+step "w_begin" { begin; select set_config('request.jwt.claim.role','service_role',true); }
+step "w_conflict" { select count(*) from agent_board.raise_conflict('66760000-0000-4000-8000-000000000010','66760000-0000-4000-8000-000000000001','private conflict',p_task_id=>'66760000-0000-4000-8000-000000000030'); }
+step "w_escalation" { select count(*) from agent_board.raise_escalation('66760000-0000-4000-8000-000000000010','66760000-0000-4000-8000-000000000001','private escalation',p_task_id=>'66760000-0000-4000-8000-000000000030'); }
+step "w_commit" { commit; }
+session "a"
+step "a_begin" { begin; select set_config('request.jwt.claim.role','service_role',true); }
+step "a_post" { select count(*) from agent_board.post_board_message('66760000-0000-4000-8000-000000000010','66760000-0000-4000-8000-000000000001','66760000-0000-4000-8000-000000000020','s','b'); }
+step "a_end" { end; }
+session "check"
+step "check" { select (t.board_id is not null) as stamped, (select count(*) from agent_board.conflicts where thread_id=t.id and task_id='66760000-0000-4000-8000-000000000030') as conflicts, (select count(*) from agent_board.escalations where thread_id=t.id and task_id='66760000-0000-4000-8000-000000000030') as escalations, (select count(*) from agent_board.messages where thread_id=t.id) as messages from agent_board.threads t where t.id='66760000-0000-4000-8000-000000000010'; }
+permutation "w_begin" "w_conflict" "a_begin" "a_post" "w_commit" "a_end" "check"
+permutation "a_begin" "a_post" "w_begin" "w_conflict" "a_end" "w_commit" "check"
+permutation "w_begin" "w_escalation" "a_begin" "a_post" "w_commit" "a_end" "check"
+permutation "a_begin" "a_post" "w_begin" "w_escalation" "a_end" "w_commit" "check"

package/tests/isolation/specs/message_replay_scope.spec

@@ -0,0 +1,77 @@
+# #717 F2b: concurrent same-key send_direct_message / send_multicast_message calls serialize on the
+# unchanged (rpc, thread, resolved author, key) lock, and the second one is judged against what the
+# first COMMITTED. Two sends naming DIFFERENT recipients on one key: whichever commits first is the
+# message, and the other is refused (42501) rather than widening it. Two identical retries: one
+# message, one delivery per recipient, one inbox item each, one callback each.
+# A lock keyed by recipient (split domain) or removed lets the second send miss the uncommitted
+# first message and mint a second one; the check step then counts two messages.
+setup
+{
+  insert into auth.users(id) values ('717b4000-0000-4000-8000-0000000000a1'),('717b4000-0000-4000-8000-0000000000c1'),('717b4000-0000-4000-8000-0000000000c2'),('717b4000-0000-4000-8000-0000000000e1');
+  insert into agent_board.agents(id,agent_type,handle,display_name,status,auth_user_id)
+  values ('717b4000-0000-4000-8000-000000000001','agent','f2b717-iso-a','F2b iso A','active','717b4000-0000-4000-8000-0000000000a1'),
+         ('717b4000-0000-4000-8000-000000000003','agent','f2b717-iso-c','F2b iso C','active','717b4000-0000-4000-8000-0000000000c1'),
+         ('717b4000-0000-4000-8000-000000000004','agent','f2b717-iso-c2','F2b iso C2','active','717b4000-0000-4000-8000-0000000000c2'),
+         ('717b4000-0000-4000-8000-000000000005','agent','f2b717-iso-x','F2b iso X','active','717b4000-0000-4000-8000-0000000000e1');
+  insert into agent_board.threads(id,thread_type,created_by_agent_id,subject)
+  values ('717b4000-0000-4000-8000-000000000010','coordination','717b4000-0000-4000-8000-000000000001','f2b iso thread');
+  insert into agent_board.callback_endpoints(id,owner_agent_id,endpoint_url,endpoint_status)
+  values ('717b4000-0000-4000-8000-000000000030','717b4000-0000-4000-8000-000000000003','https://example.test/f2b717-iso-c','verified'),
+         ('717b4000-0000-4000-8000-000000000031','717b4000-0000-4000-8000-000000000004','https://example.test/f2b717-iso-c2','verified'),
+         ('717b4000-0000-4000-8000-000000000032','717b4000-0000-4000-8000-000000000005','https://example.test/f2b717-iso-x','verified');
+  insert into agent_board.callback_subscriptions(endpoint_id,agent_id,subscription_scope,event_category)
+  values ('717b4000-0000-4000-8000-000000000030','717b4000-0000-4000-8000-000000000003','own_inbox','inbox.item.delivered'),
+         ('717b4000-0000-4000-8000-000000000031','717b4000-0000-4000-8000-000000000004','own_inbox','inbox.item.delivered'),
+         ('717b4000-0000-4000-8000-000000000032','717b4000-0000-4000-8000-000000000005','own_inbox','inbox.item.delivered');
+}
+teardown
+{
+  delete from agent_board.callback_outbox_events where recipient_agent_id in ('717b4000-0000-4000-8000-000000000003','717b4000-0000-4000-8000-000000000004','717b4000-0000-4000-8000-000000000005');
+  delete from agent_board.callback_subscriptions where endpoint_id in ('717b4000-0000-4000-8000-000000000030','717b4000-0000-4000-8000-000000000031','717b4000-0000-4000-8000-000000000032');
+  delete from agent_board.callback_endpoints where id in ('717b4000-0000-4000-8000-000000000030','717b4000-0000-4000-8000-000000000031','717b4000-0000-4000-8000-000000000032');
+  delete from agent_board.inbox_items where recipient_agent_id in ('717b4000-0000-4000-8000-000000000003','717b4000-0000-4000-8000-000000000004','717b4000-0000-4000-8000-000000000005');
+  delete from agent_board.delivery_recipients where recipient_agent_id in ('717b4000-0000-4000-8000-000000000003','717b4000-0000-4000-8000-000000000004','717b4000-0000-4000-8000-000000000005');
+  delete from agent_board.messages where thread_id='717b4000-0000-4000-8000-000000000010';
+  delete from agent_board.threads where id='717b4000-0000-4000-8000-000000000010';
+  delete from agent_board.agents where id in ('717b4000-0000-4000-8000-000000000001','717b4000-0000-4000-8000-000000000003','717b4000-0000-4000-8000-000000000004','717b4000-0000-4000-8000-000000000005');
+  delete from auth.users where id in ('717b4000-0000-4000-8000-0000000000a1','717b4000-0000-4000-8000-0000000000c1','717b4000-0000-4000-8000-0000000000c2','717b4000-0000-4000-8000-0000000000e1');
+}
+# Each sending session is the author A: authenticated role AND matching JSON claims (built with
+# json_build_object: a literal brace would end the step), with the flattened claim GUCs cleared so
+# they cannot stand in for another identity.
+session "p"
+step "p_begin" { begin; set local role authenticated; select set_config('request.jwt.claim.role','',true), set_config('request.jwt.claim.sub','',true), set_config('request.jwt.claims',json_build_object('role','authenticated','sub','717b4000-0000-4000-8000-0000000000a1')::text,true); }
+step "p_dm_c" { select callback_outbox_count from agent_board.send_direct_message('717b4000-0000-4000-8000-000000000010','717b4000-0000-4000-8000-000000000001','717b4000-0000-4000-8000-000000000003','iso','iso dm','comment','medium','f2b717-kd',jsonb_build_object()); }
+step "p_mc_cc2" { select delivered_recipient_count, inbox_item_count, callback_outbox_count from agent_board.send_multicast_message('717b4000-0000-4000-8000-000000000010','717b4000-0000-4000-8000-000000000001',array['717b4000-0000-4000-8000-000000000003','717b4000-0000-4000-8000-000000000004']::uuid[],'iso','iso mc','comment','medium','f2b717-km',jsonb_build_object()); }
+step "p_end" { end; }
+session "w"
+step "w_begin" { begin; set local role authenticated; select set_config('request.jwt.claim.role','',true), set_config('request.jwt.claim.sub','',true), set_config('request.jwt.claims',json_build_object('role','authenticated','sub','717b4000-0000-4000-8000-0000000000a1')::text,true); }
+step "w_dm_x" { select callback_outbox_count from agent_board.send_direct_message('717b4000-0000-4000-8000-000000000010','717b4000-0000-4000-8000-000000000001','717b4000-0000-4000-8000-000000000005','iso','iso dm','comment','medium','f2b717-kd',jsonb_build_object()); }
+step "w_mc_cx" { select delivered_recipient_count, inbox_item_count, callback_outbox_count from agent_board.send_multicast_message('717b4000-0000-4000-8000-000000000010','717b4000-0000-4000-8000-000000000001',array['717b4000-0000-4000-8000-000000000003','717b4000-0000-4000-8000-000000000005']::uuid[],'iso','iso mc','comment','medium','f2b717-km',jsonb_build_object()); }
+step "w_end" { end; }
+session "r"
+step "r_begin" { begin; set local role authenticated; select set_config('request.jwt.claim.role','',true), set_config('request.jwt.claim.sub','',true), set_config('request.jwt.claims',json_build_object('role','authenticated','sub','717b4000-0000-4000-8000-0000000000a1')::text,true); }
+step "r_dm_c" { select callback_outbox_count from agent_board.send_direct_message('717b4000-0000-4000-8000-000000000010','717b4000-0000-4000-8000-000000000001','717b4000-0000-4000-8000-000000000003','iso','iso dm','comment','medium','f2b717-kd',jsonb_build_object()); }
+step "r_mc_c2c" { select delivered_recipient_count, inbox_item_count, callback_outbox_count from agent_board.send_multicast_message('717b4000-0000-4000-8000-000000000010','717b4000-0000-4000-8000-000000000001',array['717b4000-0000-4000-8000-000000000004','717b4000-0000-4000-8000-000000000003','717b4000-0000-4000-8000-000000000004']::uuid[],'iso','iso mc','comment','medium','f2b717-km',jsonb_build_object()); }
+step "r_end" { end; }
+session "check"
+step "check" {
+  select count(*) as messages,
+         (select string_agg(a.handle || ':' || dr.delivery_mode, ',' order by a.handle, dr.delivery_mode)
+            from agent_board.delivery_recipients dr join agent_board.messages m on m.id = dr.source_message_id
+            join agent_board.agents a on a.id = dr.recipient_agent_id
+           where m.thread_id = '717b4000-0000-4000-8000-000000000010') as deliveries,
+         (select count(*) from agent_board.inbox_items ii join agent_board.messages m on m.id = ii.source_message_id where m.thread_id = '717b4000-0000-4000-8000-000000000010') as inbox,
+         (select count(*) from agent_board.callback_outbox_events co join agent_board.messages m on m.id = co.source_message_id where m.thread_id = '717b4000-0000-4000-8000-000000000010') as callbacks
+    from agent_board.messages where thread_id = '717b4000-0000-4000-8000-000000000010';
+}
+# direct, C wins: the send to X waits on the key lock, then is refused against the committed message
+permutation "p_begin" "p_dm_c" "w_begin" "w_dm_x" "p_end" "w_end" "check"
+# direct, X wins: the send to C waits, then is refused (C holds no direct delivery of X's message)
+permutation "w_begin" "w_dm_x" "p_begin" "p_dm_c" "w_end" "p_end" "check"
+# direct, identical retries: the second waits and reuses -- one message, delivery, inbox item, callback
+permutation "p_begin" "p_dm_c" "r_begin" "r_dm_c" "p_end" "r_end" "check"
+# multicast, {C,C2} wins: {C,X} waits, then is refused (X is new)
+permutation "p_begin" "p_mc_cc2" "w_begin" "w_mc_cx" "p_end" "w_end" "check"
+# multicast, identical set reordered and duplicated: one message, two deliveries, two inbox items, two callbacks
+permutation "p_begin" "p_mc_cc2" "r_begin" "r_mc_c2c" "p_end" "r_end" "check"

package/tests/isolation/specs/tasking_replay_scope.spec

@@ -0,0 +1,72 @@
+# #717 F2: concurrent same-key create_tasking_delivery sends serialize on the unchanged
+# (thread, resolved creator, key) lock, and the second one is judged against what the first
+# COMMITTED. A private send and a board send racing on one key: whichever commits first is the
+# task, and the other is refused (42501) rather than widening it. Two identical retries racing:
+# one task, one created event, one delivery, one inbox item, one callback.
+# The thread is already stamped to the board, so first association never serializes them: only
+# the idempotency lock does.
+setup
+{
+  insert into auth.users(id) values ('71740000-0000-4000-8000-0000000000a1'),('71740000-0000-4000-8000-0000000000c1');
+  insert into agent_board.agents(id,agent_type,handle,display_name,status,auth_user_id)
+  values ('71740000-0000-4000-8000-000000000001','agent','f2717-iso-a','F2 iso A','active','71740000-0000-4000-8000-0000000000a1'),
+         ('71740000-0000-4000-8000-000000000003','agent','f2717-iso-c','F2 iso C','active','71740000-0000-4000-8000-0000000000c1');
+  insert into agent_board.boards(id,slug,name,created_by_agent_id,visibility,status)
+  values ('71740000-0000-4000-8000-000000000020','f2717-iso-b','F2 iso board','71740000-0000-4000-8000-000000000001','private','active');
+  select set_config('request.jwt.claim.role','service_role',false);
+  insert into agent_board.board_memberships(board_id,agent_id,membership_state,created_by_agent_id,role)
+  values ('71740000-0000-4000-8000-000000000020','71740000-0000-4000-8000-000000000001','joined','71740000-0000-4000-8000-000000000001','member');
+  insert into agent_board.threads(id,thread_type,created_by_agent_id,subject,board_id)
+  values ('71740000-0000-4000-8000-000000000010','coordination','71740000-0000-4000-8000-000000000001','f2 iso thread','71740000-0000-4000-8000-000000000020');
+  insert into agent_board.callback_endpoints(id,owner_agent_id,endpoint_url,endpoint_status)
+  values ('71740000-0000-4000-8000-000000000030','71740000-0000-4000-8000-000000000003','https://example.test/f2717-iso','verified');
+  insert into agent_board.callback_subscriptions(endpoint_id,agent_id,subscription_scope,event_category)
+  values ('71740000-0000-4000-8000-000000000030','71740000-0000-4000-8000-000000000003','own_inbox','inbox.item.delivered');
+}
+teardown
+{
+  delete from agent_board.callback_outbox_events where recipient_agent_id in ('71740000-0000-4000-8000-000000000001','71740000-0000-4000-8000-000000000003');
+  delete from agent_board.callback_subscriptions where endpoint_id='71740000-0000-4000-8000-000000000030';
+  delete from agent_board.callback_endpoints where id='71740000-0000-4000-8000-000000000030';
+  delete from agent_board.inbox_items where recipient_agent_id in ('71740000-0000-4000-8000-000000000001','71740000-0000-4000-8000-000000000003');
+  delete from agent_board.delivery_recipients where recipient_agent_id in ('71740000-0000-4000-8000-000000000001','71740000-0000-4000-8000-000000000003');
+  delete from agent_board.task_events where thread_id='71740000-0000-4000-8000-000000000010';
+  delete from agent_board.tasks where thread_id='71740000-0000-4000-8000-000000000010';
+  delete from agent_board.threads where id='71740000-0000-4000-8000-000000000010';
+  delete from agent_board.board_membership_events where board_id='71740000-0000-4000-8000-000000000020';
+  delete from agent_board.boards where id='71740000-0000-4000-8000-000000000020';
+  delete from agent_board.agents where id in ('71740000-0000-4000-8000-000000000001','71740000-0000-4000-8000-000000000003');
+  delete from auth.users where id in ('71740000-0000-4000-8000-0000000000a1','71740000-0000-4000-8000-0000000000c1');
+}
+# Each sending session is the creator A: authenticated role AND matching JSON claims (built with
+# json_build_object: a literal brace would end the step), with the
+# flattened claim GUCs cleared so they cannot stand in for another identity.
+session "p"
+step "p_begin" { begin; set local role authenticated; select set_config('request.jwt.claim.role','',true), set_config('request.jwt.claim.sub','',true), set_config('request.jwt.claims',json_build_object('role','authenticated','sub','71740000-0000-4000-8000-0000000000a1')::text,true); }
+step "p_private" { select delivered_recipient_count, inbox_item_count, callback_outbox_count from agent_board.create_tasking_delivery('71740000-0000-4000-8000-000000000010','71740000-0000-4000-8000-000000000001','iso private',null,array['71740000-0000-4000-8000-000000000003']::uuid[],null,'medium','distributed','f2717-kc',jsonb_build_object()); }
+step "p_end" { end; }
+session "b"
+step "b_begin" { begin; set local role authenticated; select set_config('request.jwt.claim.role','',true), set_config('request.jwt.claim.sub','',true), set_config('request.jwt.claims',json_build_object('role','authenticated','sub','71740000-0000-4000-8000-0000000000a1')::text,true); }
+step "b_board" { select delivered_recipient_count, inbox_item_count, callback_outbox_count from agent_board.create_tasking_delivery('71740000-0000-4000-8000-000000000010','71740000-0000-4000-8000-000000000001','iso board',null,null,'71740000-0000-4000-8000-000000000020','medium','distributed','f2717-kc',jsonb_build_object()); }
+step "b_end" { end; }
+session "r"
+step "r_begin" { begin; set local role authenticated; select set_config('request.jwt.claim.role','',true), set_config('request.jwt.claim.sub','',true), set_config('request.jwt.claims',json_build_object('role','authenticated','sub','71740000-0000-4000-8000-0000000000a1')::text,true); }
+step "r_private" { select delivered_recipient_count, inbox_item_count, callback_outbox_count from agent_board.create_tasking_delivery('71740000-0000-4000-8000-000000000010','71740000-0000-4000-8000-000000000001','iso private',null,array['71740000-0000-4000-8000-000000000003']::uuid[],null,'medium','distributed','f2717-kc',jsonb_build_object()); }
+step "r_end" { end; }
+session "check"
+step "check" {
+  select count(*) as tasks,
+         (select count(*) from agent_board.task_events te join agent_board.tasks t on t.id = te.task_id where t.thread_id = '71740000-0000-4000-8000-000000000010') as events,
+         (select count(*) from agent_board.delivery_recipients dr join agent_board.tasks t on t.id = dr.source_task_id where t.thread_id = '71740000-0000-4000-8000-000000000010' and dr.board_id is null) as private_deliveries,
+         (select count(*) from agent_board.delivery_recipients dr join agent_board.tasks t on t.id = dr.source_task_id where t.thread_id = '71740000-0000-4000-8000-000000000010' and dr.board_id is not null) as board_deliveries,
+         (select count(*) from agent_board.inbox_items ii join agent_board.tasks t on t.id = ii.source_task_id where t.thread_id = '71740000-0000-4000-8000-000000000010') as inbox,
+         (select count(*) from agent_board.callback_outbox_events co join agent_board.tasks t on t.id = co.source_task_id where t.thread_id = '71740000-0000-4000-8000-000000000010') as callbacks,
+         string_agg(title, ',' order by title) as titles
+    from agent_board.tasks where thread_id = '71740000-0000-4000-8000-000000000010';
+}
+# private wins: the board send waits on the key lock, then is refused against the committed private task
+permutation "p_begin" "p_private" "b_begin" "b_board" "p_end" "b_end" "check"
+# board wins: the private send waits, then is refused (C holds no private delivery of the board task)
+permutation "b_begin" "b_board" "p_begin" "p_private" "b_end" "p_end" "check"
+# identical retries: the second waits and reuses -- one task, event, delivery, inbox item, callback
+permutation "p_begin" "p_private" "r_begin" "r_private" "p_end" "r_end" "check"

package/tests/mutations/717-f1/M0_prefix_main_acl_and_comments.sql

@@ -0,0 +1,11 @@
+-- Reverse of 20261104180000: the exact origin/main 21b7b158 ACL (service_role EXECUTE) and comments.
+grant execute on function agent_board._upsert_delivery_recipient(text,uuid,text,uuid,uuid,uuid,uuid,uuid,jsonb) to service_role;
+grant execute on function agent_board._upsert_inbox_item(uuid,uuid,uuid,text,text,uuid,uuid,uuid,text,text,text,boolean,boolean,jsonb,jsonb) to service_role;
+grant execute on function agent_board._queue_inbox_callbacks(uuid,text) to service_role;
+grant execute on function agent_board._queue_board_post_callbacks(uuid,uuid,text,text,text,jsonb) to service_role;
+grant execute on function agent_board._next_thread_message_sequence(uuid) to service_role;
+comment on function agent_board._upsert_delivery_recipient(text,uuid,text,uuid,uuid,uuid,uuid,uuid,jsonb) is 'Enforces thread/board identity and the locked empty-history boundary for message, task and delegation delivery sources. Supplying a source ID does not exempt its private history. The sending RPC validates caller authority before its own writes.';
+comment on function agent_board._upsert_inbox_item(uuid,uuid,uuid,text,text,uuid,uuid,uuid,text,text,text,boolean,boolean,jsonb,jsonb) is null;
+comment on function agent_board._queue_inbox_callbacks(uuid,text) is null;
+comment on function agent_board._queue_board_post_callbacks(uuid,uuid,text,text,text,jsonb) is null;
+comment on function agent_board._next_thread_message_sequence(uuid) is null;

package/tests/mutations/717-f1/M10_wrapper_stops_delegating.sql

@@ -0,0 +1,7 @@
+do $m$ declare d text := pg_get_functiondef('agent_board.post_board_message(uuid,uuid,text,text,text,text,text,text,text,jsonb)'::regprocedure);
+  hdr text; body text;
+begin
+  hdr := split_part(d, '$function$', 1); body := split_part(d, '$function$', 2);
+  if body !~ 'agent_board\.post_board_message\(' then raise exception 'mutation anchor missing'; end if;
+  execute hdr || '$function$' || regexp_replace(body, 'agent_board\.post_board_message\(', 'agent_board.post_board_message_gone(', 'g') || '$function$';
+end $m$;

package/tests/mutations/717-f1/M11_transitive_recipient_content.sql

@@ -0,0 +1,8 @@
+create function agent_board.review_f1_widen(p_inbox uuid) returns void language sql security definer set search_path=agent_board,public as $f$
+update agent_board.inbox_items set preview='forged preview through state update' where id=p_inbox;
+$f$;
+revoke all on function agent_board.review_f1_widen(uuid) from public,anon,authenticated,service_role,agent_board_delegate;
+do $m$ declare d text := pg_get_functiondef('agent_board.update_inbox_item_state(uuid,uuid,text,jsonb)'::regprocedure); begin
+if position('v_callback_count := agent_board._queue_inbox_callbacks' in d)=0 then raise exception 'missing anchor'; end if;
+execute replace(d, 'v_callback_count := agent_board._queue_inbox_callbacks', 'perform agent_board.review_f1_widen(v_inbox.id); v_callback_count := agent_board._queue_inbox_callbacks');
+end $m$;

package/tests/mutations/717-f1/M12_transitive_recipient_visibility.sql

@@ -0,0 +1,8 @@
+create function agent_board.review_f1_widen(p_inbox uuid) returns void language sql security definer set search_path=agent_board,public as $f$
+update agent_board.inbox_items set visible_in_board_feed=true where id=p_inbox;
+$f$;
+revoke all on function agent_board.review_f1_widen(uuid) from public,anon,authenticated,service_role,agent_board_delegate;
+do $m$ declare d text := pg_get_functiondef('agent_board.update_inbox_item_state(uuid,uuid,text,jsonb)'::regprocedure); begin
+if position('v_callback_count := agent_board._queue_inbox_callbacks' in d)=0 then raise exception 'missing anchor'; end if;
+execute replace(d, 'v_callback_count := agent_board._queue_inbox_callbacks', 'perform agent_board.review_f1_widen(v_inbox.id); v_callback_count := agent_board._queue_inbox_callbacks');
+end $m$;

package/tests/mutations/717-f1/M13_transitive_worker_content.sql

@@ -0,0 +1,15 @@
+-- Two private hops must not hide a worker's content write from DWX-4c.
+create function agent_board.dwx_worker_sink() returns void language sql security definer
+set search_path=agent_board,public as $f$
+update agent_board.inbox_items set preview='forged worker preview' where false;
+$f$;
+create function agent_board.dwx_worker_bridge() returns void language sql security definer
+set search_path=agent_board,public as $f$ select agent_board.dwx_worker_sink(); $f$;
+revoke all on function agent_board.dwx_worker_sink(), agent_board.dwx_worker_bridge()
+from public,anon,authenticated,service_role,agent_board_delegate;
+do $m$
+declare d text := pg_get_functiondef('agent_board.claim_callback_outbox_events(integer)'::regprocedure);
+begin
+  if position(E'begin\n' in d)=0 then raise exception 'missing worker begin anchor'; end if;
+  execute replace(d, E'begin\n', E'begin\n  perform agent_board.dwx_worker_bridge();\n');
+end $m$;

package/tests/mutations/717-f1/M1a_regrant_upsert_delivery_recipient.sql

@@ -0,0 +1 @@
+grant execute on function agent_board._upsert_delivery_recipient(text,uuid,text,uuid,uuid,uuid,uuid,uuid,jsonb) to service_role;

package/tests/mutations/717-f1/M1b_regrant_upsert_inbox_item.sql

@@ -0,0 +1 @@
+grant execute on function agent_board._upsert_inbox_item(uuid,uuid,uuid,text,text,uuid,uuid,uuid,text,text,text,boolean,boolean,jsonb,jsonb) to service_role;

package/tests/mutations/717-f1/M1c_regrant_queue_inbox_callbacks.sql

@@ -0,0 +1 @@
+grant execute on function agent_board._queue_inbox_callbacks(uuid,text) to service_role;

package/tests/mutations/717-f1/M1d_regrant_queue_board_post_callbacks.sql

@@ -0,0 +1 @@
+grant execute on function agent_board._queue_board_post_callbacks(uuid,uuid,text,text,text,jsonb) to service_role;

package/tests/mutations/717-f1/M1e_regrant_next_thread_message_sequence.sql

@@ -0,0 +1 @@
+grant execute on function agent_board._next_thread_message_sequence(uuid) to service_role;

package/tests/mutations/717-f1/M2_blanket_schema_grant.sql

@@ -0,0 +1 @@
+grant execute on all functions in schema agent_board to service_role;

package/tests/mutations/717-f1/M3_new_overload_of_sink.sql

@@ -0,0 +1,10 @@
+create function agent_board._upsert_delivery_recipient(p_delivery_mode text, p_recipient_agent_id uuid, p_source_kind text, p_source_message_id uuid, p_extra text)
+returns uuid language plpgsql security definer set search_path = agent_board, public as $f$
+declare v uuid;
+begin
+  insert into agent_board.delivery_recipients(delivery_mode, recipient_agent_id, source_kind, source_message_id)
+  values (p_delivery_mode, p_recipient_agent_id, p_source_kind, p_source_message_id) returning id into v;
+  return v;
+end $f$;
+revoke all on function agent_board._upsert_delivery_recipient(text,uuid,text,uuid,text) from public;
+grant execute on function agent_board._upsert_delivery_recipient(text,uuid,text,uuid,text) to service_role;

package/tests/mutations/717-f1/M4_new_route_calling_sink.sql

@@ -0,0 +1,7 @@
+create function agent_board.relay_inbox_item(p_dr uuid, p_recipient uuid)
+returns uuid language plpgsql security definer set search_path = agent_board, public as $f$
+begin
+  return agent_board._upsert_inbox_item(p_dr, p_recipient, null, 'direct', 'message', null, null, null, 's', 'p', 'medium', true, false, '{}'::jsonb, '{}'::jsonb);
+end $f$;
+revoke all on function agent_board.relay_inbox_item(uuid,uuid) from public;
+grant execute on function agent_board.relay_inbox_item(uuid,uuid) to authenticated;

package/tests/mutations/717-f1/M5_actor_trusts_supplied_id.sql

@@ -0,0 +1,5 @@
+do $m$ begin
+  execute replace(pg_get_functiondef('agent_board._resolved_actor_agent_id(uuid,text)'::regprocedure),
+    'if p_supplied_agent_id is not null and p_supplied_agent_id <> v_current_agent_id then',
+    'if p_supplied_agent_id is not null then return p_supplied_agent_id; end if; if false then');
+end $m$;

package/tests/mutations/717-f1/M6_signed_route_granted_to_authenticated.sql

@@ -0,0 +1 @@
+grant execute on function agent_board.signed_post_board_message(jsonb,jsonb) to authenticated;

package/tests/mutations/717-f1/M7_worker_granted_to_authenticated.sql

@@ -0,0 +1 @@
+grant execute on function agent_board.claim_callback_outbox_events(integer) to authenticated;

package/tests/mutations/717-f1/M8_recipient_state_rewrites_visibility.sql

@@ -0,0 +1,5 @@
+do $m$ begin
+  execute replace(pg_get_functiondef('agent_board.update_inbox_item_state(uuid,uuid,text,jsonb)'::regprocedure),
+    'set action_state = p_action_state,',
+    'set action_state = p_action_state, visible_in_board_feed = true,');
+end $m$;

package/tests/mutations/717-f1/M9_public_route_revoked_from_service_role.sql

@@ -0,0 +1 @@
+revoke execute on function agent_board.send_direct_message(uuid,uuid,uuid,text,text,text,text,text,jsonb) from service_role;

package/tests/mutations/717-f1/outbox_wake_ordering/W1_regrant_queue_inbox_callbacks.sql

@@ -0,0 +1 @@
+grant execute on function agent_board._queue_inbox_callbacks(uuid,text) to service_role;

package/tests/mutations/717-f1/outbox_wake_ordering/W2_revoke_worker_from_service_role.sql

@@ -0,0 +1 @@
+revoke execute on function agent_board.claim_callback_outbox_events(integer) from service_role;

package/tests/mutations/717-f1/outbox_wake_ordering/W3_invoker_caller_of_sink.sql

@@ -0,0 +1 @@
+create function agent_board.wo_invoker_probe(p uuid) returns integer language sql security invoker as $f$ select agent_board._queue_inbox_callbacks(p, 'inbox.item.delivered') $f$;

package/tests/mutations/717-f1/outbox_wake_ordering/W4_public_regrant_board_post_sink.sql

@@ -0,0 +1 @@
+grant execute on function agent_board._queue_board_post_callbacks(uuid,uuid,text,text,text,jsonb) to public;

package/tests/mutations/717-f1/run.sh

@@ -0,0 +1,17 @@
+#!/usr/bin/env bash
+# Usage: PG* env set; run.sh <test.sql> <mutation.sql>...  Each mutation runs in ONE transaction with
+# the test file and is rolled back; the agent_board catalog fingerprint must match before and after.
+set -uo pipefail
+TEST="$1"; shift
+fp() { psql -qtAX -c "select md5(string_agg(p.oid::regprocedure::text||coalesce(p.proacl::text,'')||p.prosrc||coalesce(obj_description(p.oid,'pg_proc'),''), '|' order by p.oid::regprocedure::text)) from pg_proc p where p.pronamespace='agent_board'::regnamespace"; }
+for m in "$@"; do
+  before="$(fp)"
+  out="$(printf 'begin;\n\\i %s\n\\i %s\nrollback;\n' "$m" "$TEST" | psql -qtA 2>&1)"
+  after="$(fp)"
+  plan="$(sed -nE 's/^1\.\.([0-9]+)$/\1/p' <<<"$out" | head -1)"
+  nok="$(grep -cE '^ok [0-9]+' <<<"$out")"; nnot="$(grep -cE '^not ok [0-9]+' <<<"$out")"
+  errs="$(grep -E '(ERROR|FATAL):' <<<"$out" | head -3 | tr '\n' ' ')"
+  labels="$(grep -E '^not ok [0-9]+' <<<"$out" | sed -E 's/^not ok ([0-9]+) - ([A-Z]+-[A-Za-z0-9-]+( CLASS)?).*/#\1:\2/' | tr '\n' ' ')"
+  [ "$before" = "$after" ] && fpok=restored || fpok="FINGERPRINT-CHANGED"
+  echo "$(basename "$m" .sql) | plan=${plan:-none} ok=$nok not_ok=$nnot emitted=$((nok+nnot)) | $fpok | red: ${labels:-<none>} ${errs:+| errors: $errs}"
+done

package/tests/mutations/717-f2b/C1_new_delivery_route.sql

@@ -0,0 +1,4 @@
+-- a new API route that calls the delivery writer
+create function agent_board.zz_f2b_new_route(p uuid) returns void language plpgsql security definer set search_path = agent_board, public as $f$
+begin perform agent_board._upsert_delivery_recipient('direct', p, 'message', p); end $f$;
+grant execute on function agent_board.zz_f2b_new_route(uuid) to authenticated;

package/tests/mutations/717-f2b/C2_new_replay_lookup.sql

@@ -0,0 +1,3 @@
+-- a new routine that reads a message back by its idempotencyKey
+create function agent_board.zz_f2b_new_lookup(p text) returns uuid language sql as $f$
+  select id from agent_board.messages where metadata ->> 'idempotencyKey' = p limit 1 $f$;

package/tests/mutations/717-f2b/C3_internal_regranted.sql

@@ -0,0 +1,2 @@
+-- an internal delivery helper re-granted to authenticated
+grant execute on function agent_board._deliver_board_message(uuid,text,text,text) to authenticated;