@consiliency/agent-board-schema 1.68.0 → 1.74.0

package/migrations/20261104190000_agent_board_message_replay_scope.sql

@@ -0,0 +1,373 @@
+-- #717 F2b: a same-key send_direct_message / send_multicast_message replay cannot widen the
+-- source message's audience.
+--
+-- Idempotency identity is unchanged: (rpc, thread, resolved author, trimmed key), the same
+-- advisory lock domain and the same lookup. Before this migration a replay reused the author's
+-- ORIGINAL message and delivered it to whatever recipient the retry named, so a newly named agent
+-- could read the original body and every row anchored to it (an artifact another agent attached).
+-- Now, on the replay branch and before any delivery, inbox or callback effect, every requested
+-- recipient must already hold a persisted private delivery of that source message in the
+-- function's own mode. Otherwise: 42501 'message replay cannot widen delivery scope'.
+--
+-- Only the two UUID cores change. The addressing overloads and the signed wrappers route through
+-- them and inherit the refusal and its atomic rollback. Definitions are this tree's current ones
+-- (20261104065658_agent_board_reply_delivery.sql) with the ceiling inserted; nothing else moves.
+--
+-- Compatibility limit, by design: a source message whose delivery rows are missing (deleted
+-- recipient, historical corruption) cannot be replayed at all. Nothing reconstructs intent from
+-- metadata. Use a new key.
+--
+-- Trust dependency: persisted deliveries are authoritative only once no API role can write them
+-- directly (#717 F1, which revokes service_role EXECUTE on _upsert_delivery_recipient).
+
+CREATE OR REPLACE FUNCTION agent_board.send_direct_message(p_thread_id uuid, p_author_agent_id uuid, p_recipient_agent_id uuid, p_subject text, p_body text, p_message_type text DEFAULT 'comment'::text, p_priority text DEFAULT 'medium'::text, p_idempotency_key text DEFAULT NULL::text, p_metadata jsonb DEFAULT '{}'::jsonb)
+ RETURNS TABLE(message_id uuid, delivery_recipient_id uuid, inbox_item_id uuid, callback_outbox_count integer, created_at timestamp with time zone)
+ LANGUAGE plpgsql
+ SECURITY DEFINER
+ SET search_path TO 'agent_board', 'public'
+AS $function$
+declare
+  v_message agent_board.messages%rowtype;
+  v_created_message record;
+  v_recipient agent_board.delivery_recipients%rowtype;
+  v_inbox agent_board.inbox_items%rowtype;
+  v_callback_count integer := 0;
+  v_metadata jsonb;
+  v_preview text;
+  v_fetch_descriptor jsonb;
+  v_idempotency_key text := nullif(trim(p_idempotency_key), '');
+  v_actor_agent_id uuid;
+begin
+  v_actor_agent_id := agent_board._resolved_actor_agent_id(p_author_agent_id, 'p_author_agent_id');
+
+  if nullif(trim(p_subject), '') is null or nullif(trim(p_body), '') is null then
+    raise exception 'subject and body are required' using errcode = '22023';
+  end if;
+  if p_priority not in ('low', 'medium', 'high', 'urgent') then
+    raise exception 'invalid priority' using errcode = '22023';
+  end if;
+  if not exists (select 1 from agent_board.threads where id = p_thread_id) then
+    raise exception 'thread not found' using errcode = 'P0002';
+  end if;
+  if not agent_board._current_agent_can_access_thread(p_thread_id) then
+    raise exception 'thread not accessible to current agent' using errcode = '42501';
+  end if;
+  if not exists (select 1 from agent_board.agents where id = p_recipient_agent_id) then
+    raise exception 'recipient agent not found' using errcode = 'P0002';
+  end if;
+
+  if agent_board._is_service_role() then
+    perform agent_board._record_send_authz_telemetry(
+      'service_role_bypass',
+      coalesce(nullif(p_metadata -> 'signed_write' ->> 'origin', ''), 'unknown'),
+      v_actor_agent_id,
+      null,
+      'send_direct_message',
+      agent_board._resolve_send_fleet_scope(v_actor_agent_id),
+      null,
+      jsonb_build_object('redacted', true)
+    );
+  end if;
+
+  perform agent_board._lock_idempotency_key(
+    'send_direct_message:' || p_thread_id::text || ':' || v_actor_agent_id::text,
+    v_idempotency_key
+  );
+
+  if v_idempotency_key is not null then
+    select *
+      into v_message
+      from agent_board.messages
+     where thread_id = p_thread_id
+       and author_agent_id = v_actor_agent_id
+       and metadata ->> 'rpcName' = 'send_direct_message'
+       and metadata ->> 'idempotencyKey' = v_idempotency_key
+     order by created_at desc
+     limit 1;
+  end if;
+
+  -- #717 F2b: a same-key replay may only re-deliver the source message to the recipient it was
+  -- already PRIVATELY delivered to. The proof is the persisted delivery row of THIS source
+  -- message in THIS function's mode, for THIS recipient, with no board scope. Metadata, the
+  -- thread's board stamp and any board-mode delivery are not evidence. Refused before any
+  -- replay effect, so the whole call (telemetry, signed evidence) rolls back. A new recipient
+  -- needs a new key, which creates a new message without the source's artifacts.
+  if v_message.id is not null and not exists (
+    select 1
+      from agent_board.delivery_recipients dr
+     where dr.source_kind = 'message'
+       and dr.source_message_id = v_message.id
+       and dr.delivery_mode = 'direct'
+       and dr.recipient_agent_id = p_recipient_agent_id
+       and dr.board_id is null
+  ) then
+    raise exception 'message replay cannot widen delivery scope' using errcode = '42501';
+  end if;
+
+  if v_message.id is null then
+    v_metadata := coalesce(p_metadata, '{}'::jsonb)
+      || jsonb_build_object(
+        'rpcName', 'send_direct_message',
+        'subject', trim(p_subject),
+        'priority', p_priority
+      );
+    if v_idempotency_key is not null then
+      v_metadata := v_metadata || jsonb_build_object('idempotencyKey', v_idempotency_key);
+    end if;
+
+    select *
+      into v_created_message
+      from agent_board._insert_thread_message(
+        p_thread_id,
+        v_actor_agent_id,
+        p_body,
+        p_message_type,
+        null,
+        v_metadata
+      );
+
+    select *
+      into v_message
+      from agent_board.messages
+     where id = v_created_message.message_id;
+  end if;
+
+  v_preview := agent_board._trim_inbox_text(p_body, 280);
+  v_fetch_descriptor := agent_board._build_fetch_descriptor(
+    'thread',
+    p_thread_id,
+    'agent_board.v_thread_feed',
+    'direct delivery',
+    jsonb_build_object('messageId', v_message.id::text, 'recipientAgentId', p_recipient_agent_id::text)
+  );
+
+  v_recipient := agent_board._upsert_delivery_recipient(
+    'direct',
+    p_recipient_agent_id,
+    'message',
+    v_message.id,
+    null,
+    null,
+    null,
+    null,
+    jsonb_build_object('priority', p_priority)
+  );
+
+  v_inbox := agent_board._upsert_inbox_item(
+    v_recipient.id,
+    p_recipient_agent_id,
+    null,
+    v_recipient.delivery_mode,
+    'message',
+    v_message.id,
+    null,
+    null,
+    trim(p_subject),
+    v_preview,
+    p_priority,
+    true,
+    false,
+    v_fetch_descriptor,
+    jsonb_build_object('threadId', p_thread_id::text)
+  );
+
+  v_callback_count := agent_board._queue_inbox_callbacks(v_inbox.id, 'inbox.item.delivered');
+
+  return query
+  select v_message.id, v_recipient.id, v_inbox.id, v_callback_count, v_message.created_at;
+end;
+$function$;
+
+CREATE OR REPLACE FUNCTION agent_board.send_multicast_message(p_thread_id uuid, p_author_agent_id uuid, p_recipient_agent_ids uuid[], p_subject text, p_body text, p_message_type text DEFAULT 'comment'::text, p_priority text DEFAULT 'medium'::text, p_idempotency_key text DEFAULT NULL::text, p_metadata jsonb DEFAULT '{}'::jsonb)
+ RETURNS TABLE(message_id uuid, delivered_recipient_count integer, inbox_item_count integer, callback_outbox_count integer, created_at timestamp with time zone)
+ LANGUAGE plpgsql
+ SECURITY DEFINER
+ SET search_path TO 'agent_board', 'public'
+AS $function$
+declare
+  v_message agent_board.messages%rowtype;
+  v_created_message record;
+  v_recipient_ids uuid[];
+  v_recipient_id uuid;
+  v_recipient agent_board.delivery_recipients%rowtype;
+  v_inbox agent_board.inbox_items%rowtype;
+  v_delivered_count integer := 0;
+  v_inbox_count integer := 0;
+  v_callback_count integer := 0;
+  v_metadata jsonb;
+  v_preview text;
+  v_fetch_descriptor jsonb;
+  v_idempotency_key text := nullif(trim(p_idempotency_key), '');
+  v_actor_agent_id uuid;
+begin
+  v_actor_agent_id := agent_board._resolved_actor_agent_id(p_author_agent_id, 'p_author_agent_id');
+
+  if nullif(trim(p_subject), '') is null or nullif(trim(p_body), '') is null then
+    raise exception 'subject and body are required' using errcode = '22023';
+  end if;
+  if p_priority not in ('low', 'medium', 'high', 'urgent') then
+    raise exception 'invalid priority' using errcode = '22023';
+  end if;
+  if p_recipient_agent_ids is null or cardinality(p_recipient_agent_ids) = 0 then
+    raise exception 'recipient_agent_ids must not be empty' using errcode = '22023';
+  end if;
+  if array_position(p_recipient_agent_ids, null) is not null then
+    raise exception 'recipient_agent_ids must not contain nulls' using errcode = '22023';
+  end if;
+  if not exists (select 1 from agent_board.threads where id = p_thread_id) then
+    raise exception 'thread not found' using errcode = 'P0002';
+  end if;
+  if not agent_board._current_agent_can_access_thread(p_thread_id) then
+    raise exception 'thread not accessible to current agent' using errcode = '42501';
+  end if;
+
+  select array_agg(distinct recipient_id)
+    into v_recipient_ids
+    from unnest(p_recipient_agent_ids) as recipient_id;
+
+  if (
+    select count(*)
+      from agent_board.agents
+     where id = any(v_recipient_ids)
+  ) <> cardinality(v_recipient_ids) then
+    raise exception 'recipient agent not found' using errcode = 'P0002';
+  end if;
+
+  if agent_board._is_service_role() then
+    perform agent_board._record_send_authz_telemetry(
+      'service_role_bypass',
+      coalesce(nullif(p_metadata -> 'signed_write' ->> 'origin', ''), 'unknown'),
+      v_actor_agent_id,
+      null,
+      'send_multicast_message',
+      agent_board._resolve_send_fleet_scope(v_actor_agent_id),
+      null,
+      jsonb_build_object('redacted', true)
+    );
+  end if;
+
+  perform agent_board._lock_idempotency_key(
+    'send_multicast_message:' || p_thread_id::text || ':' || v_actor_agent_id::text,
+    v_idempotency_key
+  );
+
+  if v_idempotency_key is not null then
+    select *
+      into v_message
+      from agent_board.messages
+     where thread_id = p_thread_id
+       and author_agent_id = v_actor_agent_id
+       and metadata ->> 'rpcName' = 'send_multicast_message'
+       and metadata ->> 'idempotencyKey' = v_idempotency_key
+     order by created_at desc
+     limit 1;
+  end if;
+
+  -- #717 F2b: a same-key replay may name the same normalized recipient set or a nonempty subset
+  -- of it, never a new recipient. Each requested recipient must already hold a persisted
+  -- multicast delivery of THIS source message with no board scope; an omitted recipient's
+  -- delivery is kept, not revoked. Metadata, the thread's board stamp and board-mode deliveries
+  -- are not evidence. Refused before any replay effect, so the whole call rolls back. A new
+  -- recipient needs a new key, which creates a new message without the source's artifacts.
+  if v_message.id is not null and exists (
+    select 1
+      from unnest(v_recipient_ids) as requested(recipient_id)
+     where not exists (
+       select 1
+         from agent_board.delivery_recipients dr
+        where dr.source_kind = 'message'
+          and dr.source_message_id = v_message.id
+          and dr.delivery_mode = 'multicast'
+          and dr.recipient_agent_id = requested.recipient_id
+          and dr.board_id is null
+     )
+  ) then
+    raise exception 'message replay cannot widen delivery scope' using errcode = '42501';
+  end if;
+
+  if v_message.id is null then
+    v_metadata := coalesce(p_metadata, '{}'::jsonb)
+      || jsonb_build_object(
+        'rpcName', 'send_multicast_message',
+        'subject', trim(p_subject),
+        'priority', p_priority
+      );
+    if v_idempotency_key is not null then
+      v_metadata := v_metadata || jsonb_build_object('idempotencyKey', v_idempotency_key);
+    end if;
+
+    select *
+      into v_created_message
+      from agent_board._insert_thread_message(
+        p_thread_id,
+        v_actor_agent_id,
+        p_body,
+        p_message_type,
+        null,
+        v_metadata
+      );
+
+    select *
+      into v_message
+      from agent_board.messages
+     where id = v_created_message.message_id;
+  end if;
+
+  v_preview := agent_board._trim_inbox_text(p_body, 280);
+
+  foreach v_recipient_id in array v_recipient_ids loop
+    v_fetch_descriptor := agent_board._build_fetch_descriptor(
+      'thread',
+      p_thread_id,
+      'agent_board.v_thread_feed',
+      'multicast delivery',
+      jsonb_build_object('messageId', v_message.id::text, 'recipientAgentId', v_recipient_id::text)
+    );
+
+    v_recipient := agent_board._upsert_delivery_recipient(
+      'multicast',
+      v_recipient_id,
+      'message',
+      v_message.id,
+      null,
+      null,
+      null,
+      null,
+      jsonb_build_object('priority', p_priority)
+    );
+
+    v_inbox := agent_board._upsert_inbox_item(
+      v_recipient.id,
+      v_recipient_id,
+      null,
+      v_recipient.delivery_mode,
+      'message',
+      v_message.id,
+      null,
+      null,
+      trim(p_subject),
+      v_preview,
+      p_priority,
+      true,
+      false,
+      v_fetch_descriptor,
+      jsonb_build_object('threadId', p_thread_id::text)
+    );
+
+    v_delivered_count := v_delivered_count + 1;
+    v_inbox_count := v_inbox_count + 1;
+    v_callback_count := v_callback_count + agent_board._queue_inbox_callbacks(v_inbox.id, 'inbox.item.delivered');
+  end loop;
+
+  return query
+  select v_message.id, v_delivered_count, v_inbox_count, v_callback_count, v_message.created_at;
+end;
+$function$;
+
+revoke all on function agent_board.send_direct_message(uuid,uuid,uuid,text,text,text,text,text,jsonb) from public,anon,authenticated,service_role,agent_board_delegate;
+grant execute on function agent_board.send_direct_message(uuid,uuid,uuid,text,text,text,text,text,jsonb) to authenticated,service_role;
+comment on function agent_board.send_direct_message(uuid,uuid,uuid,text,text,text,text,text,jsonb) is 'Sends privately to the explicit recipient, including on board threads; uses the common authorized insertion primitive. A same-key replay cannot widen the message''s audience: it is refused (42501) unless the recipient already holds a private direct delivery of the source message.';
+
+revoke all on function agent_board.send_multicast_message(uuid,uuid,uuid[],text,text,text,text,text,jsonb) from public,anon,authenticated,service_role,agent_board_delegate;
+grant execute on function agent_board.send_multicast_message(uuid,uuid,uuid[],text,text,text,text,text,jsonb) to authenticated,service_role;
+comment on function agent_board.send_multicast_message(uuid,uuid,uuid[],text,text,text,text,text,jsonb) is 'Sends privately to explicit recipients, including on board threads; uses the common authorized insertion primitive. A same-key replay cannot widen the message''s audience: it is refused (42501) unless every requested recipient already holds a private multicast delivery of the source message.';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@consiliency/agent-board-schema",
-  "version": "1.68.0",
+  "version": "1.74.0",
   "description": "Canonical, immutable, exact-pinnable agent_board schema bundle: ordered SQL migrations, digest + compatibility manifest, and deterministic materialize/plan/check tooling for adopters.",
   "repository": "https://github.com/Consiliency/message-board.git",
   "type": "module",

package/schema-manifest.json

@@ -2,7 +2,7 @@
   "schema": "agent_board_schema_manifest.v1",
   "interface": "IF-0-MBPLANE-BUNDLE-1",
   "package": "@consiliency/agent-board-schema",
-  "packageVersion": "1.68.0",
+  "packageVersion": "1.74.0",
   "schemaVersion": 8,
   "minClientVersion": "1.1.0",
   "source": {
@@ -46,8 +46,8 @@
       "usage": "upsert (retention/monitoring defaults; on conflict do nothing)"
     }
   ],
-  "migrationCount": 166,
-  "aggregateSha256": "c59fcf6ae0ce9cf567f68a27abee5c8a3a11d0d98ebc4d5cb07a496e7832964c",
+  "migrationCount": 172,
+  "aggregateSha256": "1787dd0d972779bbdc1645b67460fc2f2c7b910f128414cf39b6dfb2b00b3b42",
   "migrations": [
     {
       "order": 0,
@@ -1542,6 +1542,60 @@
       "sourceRef": "message-board",
       "bytes": 7396,
       "sha256": "bfeb7bda1eb41bc431416502db69c33156ff72acfd79cefdfd556d933f79d809"
+    },
+    {
+      "order": 166,
+      "id": "20261026000100_agent_board_thread_association",
+      "filename": "20261026000100_agent_board_thread_association.sql",
+      "origin": "message-board-forward",
+      "sourceRef": "message-board",
+      "bytes": 70992,
+      "sha256": "93c3ffc694f5dbd3a5d34d5ef392462707f959119e8c0ff52677c74720dd2c6d"
+    },
+    {
+      "order": 167,
+      "id": "20261101000100_agent_board_session_measured_mint",
+      "filename": "20261101000100_agent_board_session_measured_mint.sql",
+      "origin": "message-board-forward",
+      "sourceRef": "message-board",
+      "bytes": 12087,
+      "sha256": "b18323397aaacfb7be138f5befedb8cb9b6a0247b868bc22a2ed3481b5f17c06"
+    },
+    {
+      "order": 168,
+      "id": "20261104065658_agent_board_reply_delivery",
+      "filename": "20261104065658_agent_board_reply_delivery.sql",
+      "origin": "message-board-forward",
+      "sourceRef": "message-board",
+      "bytes": 27537,
+      "sha256": "0f785d8c2b6dd389fec88851d88370095c2de5d07764b7c8ced277388a471660"
+    },
+    {
+      "order": 169,
+      "id": "20261104170000_agent_board_tasking_replay_scope",
+      "filename": "20261104170000_agent_board_tasking_replay_scope.sql",
+      "origin": "message-board-forward",
+      "sourceRef": "message-board",
+      "bytes": 13932,
+      "sha256": "dc77bd6b017e067ab20aa5ecea7d31377420d8593d33e2731059c0cbba52e4c0"
+    },
+    {
+      "order": 170,
+      "id": "20261104180000_agent_board_delivery_writer_execute",
+      "filename": "20261104180000_agent_board_delivery_writer_execute.sql",
+      "origin": "message-board-forward",
+      "sourceRef": "message-board",
+      "bytes": 4567,
+      "sha256": "732cd0b61706f1f901eeb88f3e3a30e91a34723b8df4cc972218ebca0859e07a"
+    },
+    {
+      "order": 171,
+      "id": "20261104190000_agent_board_message_replay_scope",
+      "filename": "20261104190000_agent_board_message_replay_scope.sql",
+      "origin": "message-board-forward",
+      "sourceRef": "message-board",
+      "bytes": 15050,
+      "sha256": "dbfd60300e8ce8ed78df8ae851f3990f58bcb43a7f9d53c2e25499a22e775a67"
     }
   ],
   "excludedBridge": {

package/src/tooling.test.mjs

@@ -41,9 +41,9 @@ describe('manifest integrity', () => {
     expect(manifest.schemaVersion).toBe(8);
     expect(manifest.minClientVersion).toMatch(/^\d+\.\d+\.\d+$/);
   });
-  it('registers the four MBAUTHZ + four MBSENDAUTHZ + four MBSESSION + four MBDELEG + three MBFED + three MBHARDEN + two MBPORTALGATE + two MBPORTAL-PR32 + two ROOMOWN + two ROOMLINK + one ROOMDELEG + one LOCALAUTH + one ROOMUIAPI + one FEDSESSION + one FEDSESSION-AUTOJOIN + one GATENULL + one MEMBSTATE + one AGENTSDIR + one LEAVEIDEM + one ROLERESET + one MBROWID + one MBHYGIENE + one MBCONSENT-A + one MBCONSENT-B(a) + one MBCONSENT-B(i) + one MBCONSENT-B(ii) + one MBCONSENT-B(iii) + one MBHARDEN-#97 + one MBHARDEN-#118 + one INVITEPOLICY + one OBSGATE + one OBSGATE-2 + one OBSGATE-3 + one OBSGATE-4 + one FLEETMACHINERLS + one RESOLVENOOP + one ROOMDELEG-LANEB + one CLAIMKEY + two MINTHARDEN + one FLEETMACHINEHIJACK + one CLAIMGATE-SHADOW + one CLAIMGATE-ENFORCE + one FLEETMACHINEREACTIVATION + one DELEGCAPCEILING + one FLEETMACHINERECLAIM + one DELEGSOLEWRITER + one FLEETDOMAINRECLAIM + five ATOMICFLEETONBOARDING (onboarding + ceiling-lock + revocation-evidence + fedsession-gate + fedsession-lock-order) + one OUTBOXWAKE + one ENROLLLOCKORDER + one FEDPROVIDERABSENCE + one WAKERECOVERY + one CONSENTRECONCILE + one ENROLLRESUMPTION + one SIGNEDAUTHORITY + one SIGNERLIFECYCLE + one LEDGERAUTHORITY + one CEILINGLOCKCOMMENT + one LEDGERBOARDCREATE + one RECEIPTSUBJECTGATE + one TASKTHREADLOCKORDER + one CLAIMSUBJECTGATE + one FEDSESSIONIDENTITYGATE + one FEDIDENTITYSLUG + one INVITENODOWNGRADE + one SIGNEDWRITEFLAG + one SIGNEDWRITEMODEL + one RTCREDCLAIM + one ORIGINPOSTURE + one BOARDCLAIMPOLICY + one HEARTBEATPRESERVE + one LIVENESSDENOM + one OWNERLESSRENEWTTL + one OWNERLESSQUOTACENSUS + one FLEETDOMAINNODOWNGRADE + one OWNERLESSQUOTACONVERGE + one ADVISORYREVERTRESET + one CLAIMPOLICYRACE + one CLAIMPOLICYLOCKGRANT + one SESSIONCHALLENGESUPERSEDE + one ROOMCONTRACT + one CALLBACKCONSUMER + one ENROLLTOKENSINGLEUSE + one ROOMCONTRACT-ACTIVEFIRST + one ONBOARD + one HOSTED + one HOSTED-FOLLOWUPS + one OWNPOST + one SIDSCHEMA + one SIDOWNER + one GRANTTARGETROLE (#674) + one LASTOWNER (Consiliency/message-board#675) + one SESSIONPROVENANCE (Consiliency/message-board#665) + one REQUESTREMOVED (Consiliency/message-board#680) + one RLSCORRELATION (Consiliency/message-board#589) + one RESOLUTIONAUTHORITY (Consiliency/message-board#668) forward migrations (migrationCount = prior 113 + 5 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 = 166)', () => {
+  it('registers the four MBAUTHZ + four MBSENDAUTHZ + four MBSESSION + four MBDELEG + three MBFED + three MBHARDEN + two MBPORTALGATE + two MBPORTAL-PR32 + two ROOMOWN + two ROOMLINK + one ROOMDELEG + one LOCALAUTH + one ROOMUIAPI + one FEDSESSION + one FEDSESSION-AUTOJOIN + one GATENULL + one MEMBSTATE + one AGENTSDIR + one LEAVEIDEM + one ROLERESET + one MBROWID + one MBHYGIENE + one MBCONSENT-A + one MBCONSENT-B(a) + one MBCONSENT-B(i) + one MBCONSENT-B(ii) + one MBCONSENT-B(iii) + one MBHARDEN-#97 + one MBHARDEN-#118 + one INVITEPOLICY + one OBSGATE + one OBSGATE-2 + one OBSGATE-3 + one OBSGATE-4 + one FLEETMACHINERLS + one RESOLVENOOP + one ROOMDELEG-LANEB + one CLAIMKEY + two MINTHARDEN + one FLEETMACHINEHIJACK + one CLAIMGATE-SHADOW + one CLAIMGATE-ENFORCE + one FLEETMACHINEREACTIVATION + one DELEGCAPCEILING + one FLEETMACHINERECLAIM + one DELEGSOLEWRITER + one FLEETDOMAINRECLAIM + five ATOMICFLEETONBOARDING (onboarding + ceiling-lock + revocation-evidence + fedsession-gate + fedsession-lock-order) + one OUTBOXWAKE + one ENROLLLOCKORDER + one FEDPROVIDERABSENCE + one WAKERECOVERY + one CONSENTRECONCILE + one ENROLLRESUMPTION + one SIGNEDAUTHORITY + one SIGNERLIFECYCLE + one LEDGERAUTHORITY + one CEILINGLOCKCOMMENT + one LEDGERBOARDCREATE + one RECEIPTSUBJECTGATE + one TASKTHREADLOCKORDER + one CLAIMSUBJECTGATE + one FEDSESSIONIDENTITYGATE + one FEDIDENTITYSLUG + one INVITENODOWNGRADE + one SIGNEDWRITEFLAG + one SIGNEDWRITEMODEL + one RTCREDCLAIM + one ORIGINPOSTURE + one BOARDCLAIMPOLICY + one HEARTBEATPRESERVE + one LIVENESSDENOM + one OWNERLESSRENEWTTL + one OWNERLESSQUOTACENSUS + one FLEETDOMAINNODOWNGRADE + one OWNERLESSQUOTACONVERGE + one ADVISORYREVERTRESET + one CLAIMPOLICYRACE + one CLAIMPOLICYLOCKGRANT + one SESSIONCHALLENGESUPERSEDE + one ROOMCONTRACT + one CALLBACKCONSUMER + one ENROLLTOKENSINGLEUSE + one ROOMCONTRACT-ACTIVEFIRST + one ONBOARD + one HOSTED + one HOSTED-FOLLOWUPS + one OWNPOST + one SIDSCHEMA + one SIDOWNER + one GRANTTARGETROLE (#674) + one LASTOWNER (Consiliency/message-board#675) + one SESSIONPROVENANCE (Consiliency/message-board#665) + one REQUESTREMOVED (Consiliency/message-board#680) + one RLSCORRELATION (Consiliency/message-board#589) + one RESOLUTIONAUTHORITY (Consiliency/message-board#668) + one THREADASSOCIATION checkpoint (#667) + one SIDSERVER-MEASUREDMINT (Consiliency/message-board#653) + one REPLYDELIVERY (#661) + one DELIVERYWRITEREXEC (#717 F1) + one REPLAYSCOPE (#717 F2) + one MESSAGEREPLAYSCOPE (#717 F2b) forward migrations (migrationCount = prior 113 + 5 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 + 1 = 172)', () => {
     expect(manifest.migrationCount).toBe(manifest.migrations.length);
-    expect(manifest.migrationCount).toBe(166);
+    expect(manifest.migrationCount).toBe(172);
     // MBSESSION switched enforcement on (scoped-send re-grant): the client-visible
     // schema version bumped to 8. MBDELEG tightens delegation and MBFED adds only
     // enrollment-only additive surface (identity_providers registry, enrollment audit,
@@ -368,6 +368,12 @@ describe('manifest integrity', () => {
       '20261015000200_agent_board_request_preserve_removed.sql',
       '20261015000300_agent_board_rls_correlation.sql',
       '20261015000400_agent_board_resolution_authority.sql',
+      '20261026000100_agent_board_thread_association.sql',
+      '20261101000100_agent_board_session_measured_mint.sql',
+      '20261104065658_agent_board_reply_delivery.sql',
+      '20261104170000_agent_board_tasking_replay_scope.sql',
+      '20261104180000_agent_board_delivery_writer_execute.sql',
+      '20261104190000_agent_board_message_replay_scope.sql',
     ]) {
       expect(names.has(f)).toBe(true);
     }