@creatornader/agent-bridge 0.3.1 → 0.5.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@creatornader/agent-bridge",
-  "version": "0.3.1",
+  "version": "0.5.0",
   "description": "Durable, pull-first mailbox and work-delivery control plane for AI agents across runtimes, sessions, and machines.",
   "type": "module",
   "license": "Apache-2.0",
@@ -87,13 +87,21 @@
     "pretest": "npm run build",
     "test": "vitest run",
     "test:built": "vitest run",
+    "test:postgres:contract": "vitest run test/postgres_integration.test.ts --maxWorkers=1 --hookTimeout=60000",
+    "test:postgres:preflight": "node scripts/postgres-preflight.mjs",
+    "test:postgres:preflight:full": "node scripts/postgres-preflight.mjs --full",
+    "preflight:postgres:production": "npm run build --silent && node dist/postgres-production-preflight.js",
+    "preflight:fly": "node scripts/fly-production-preflight.mjs",
+    "proof:gateway:production": "node scripts/gateway-production-proof.mjs",
+    "test:gateway:production-proof": "vitest run test/gateway-production-proof.test.ts",
+    "test:windows:contract": "vitest run test/private-path.test.ts test/windows-native-smoke.test.ts --maxWorkers=1 --testTimeout=180000 -t \"applies and verifies native Windows file and directory ACLs|recovers an (enrollment|client-operation) subsystem lock\" && vitest run test/client-maintenance.test.ts --maxWorkers=1 --testTimeout=180000",
     "typecheck": "tsc --noEmit",
     "contracts:generate": "npm run build --silent && npm run contracts:generate:built",
     "contracts:generate:built": "node dist/contracts/generate.js",
     "contracts:check": "npm run build --silent && npm run contracts:check:built",
     "contracts:check:built": "node dist/contracts/generate.js --check",
     "check": "npm run typecheck && npm run build && npm run contracts:check:built && npm run test:built",
-    "check:windows": "npm run typecheck && npm run build && npm run contracts:check:built && vitest run --maxWorkers=2 --testTimeout=90000"
+    "check:windows": "npm run typecheck && npm run build && npm run contracts:check:built && vitest run --maxWorkers=2 --testTimeout=90000 --exclude test/private-path.test.ts --exclude test/client-maintenance.test.ts --exclude test/cli.test.ts"
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.12.1",

package/schemas/agent-bridge-v2.capabilities.json

@@ -88,6 +88,12 @@
                 "legacy-supabase"
               ]
             },
+            "grantedScopes": {
+              "type": "array",
+              "items": {
+                "type": "string"
+              }
+            },
             "operations": {
               "type": "array",
               "items": {
@@ -134,6 +140,24 @@
         "status:read"
       ]
     },
+    {
+      "id": "issue_endpoint_migration_challenge",
+      "summary": "Issue a short-lived endpoint migration challenge commitment.",
+      "http": {
+        "method": "POST",
+        "path": "/v2/endpoint-migration-challenges"
+      },
+      "requiredScopes": []
+    },
+    {
+      "id": "consume_endpoint_migration_challenge",
+      "summary": "Consume a short-lived endpoint migration challenge commitment.",
+      "http": {
+        "method": "POST",
+        "path": "/v2/endpoint-migration-challenges/consume"
+      },
+      "requiredScopes": []
+    },
     {
       "id": "gateway_metrics",
       "summary": "Read Prometheus gateway counters.",
@@ -723,7 +747,7 @@
     },
     {
       "id": "claim_delivery",
-      "summary": "Atomically claim the next targeted delivery.",
+      "summary": "Atomically claim the next targeted delivery, or one eligible message when requested.",
       "mcp": {
         "name": "claim"
       },
@@ -735,6 +759,7 @@
         "command": "claim",
         "options": [
           "lease-ms",
+          "message-id",
           "max-attempts"
         ],
         "outputSchema": {

package/schemas/agent-bridge-v2.mcp.json

@@ -77,6 +77,12 @@
               "legacy-supabase"
             ]
           },
+          "grantedScopes": {
+            "type": "array",
+            "items": {
+              "type": "string"
+            }
+          },
           "operations": {
             "type": "array",
             "items": {
@@ -627,13 +633,17 @@
     },
     {
       "name": "claim",
-      "description": "Atomically claim the next targeted delivery.",
+      "description": "Atomically claim the next targeted delivery, or one eligible message when requested.",
       "inputSchema": {
         "type": "object",
         "properties": {
           "leaseMs": {
             "type": "number"
           },
+          "messageId": {
+            "type": "string",
+            "pattern": "^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}$"
+          },
           "maxAttempts": {
             "type": "number"
           }

package/schemas/agent-bridge-v2.schema.json

@@ -338,6 +338,12 @@
             "legacy-supabase"
           ]
         },
+        "grantedScopes": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          }
+        },
         "operations": {
           "type": "array",
           "items": {
@@ -432,6 +438,12 @@
             "legacy-supabase"
           ]
         },
+        "grantedScopes": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          }
+        },
         "operations": {
           "type": "array",
           "items": {
@@ -586,6 +598,12 @@
             }
           ]
         },
+        "gatewayAuthorityId": {
+          "type": "string"
+        },
+        "credentialId": {
+          "type": "string"
+        },
         "principal": {
           "type": "object",
           "required": [
@@ -605,6 +623,111 @@
       },
       "additionalProperties": true
     },
+    "issue_endpoint_migration_challengeRequest": {
+      "type": "object",
+      "required": [
+        "challenge",
+        "expectedGatewayAuthorityId",
+        "verifierCredentialId"
+      ],
+      "properties": {
+        "challenge": {
+          "type": "string",
+          "pattern": "^[0-9a-f]{64}$"
+        },
+        "expectedGatewayAuthorityId": {
+          "type": "string",
+          "pattern": "^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}$"
+        },
+        "verifierCredentialId": {
+          "type": "string",
+          "pattern": "^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}$"
+        }
+      },
+      "additionalProperties": false
+    },
+    "issue_endpoint_migration_challengeResponse": {
+      "type": "object",
+      "required": [
+        "gatewayAuthorityId",
+        "issuerCredentialId",
+        "verifierCredentialId",
+        "expiresAt"
+      ],
+      "properties": {
+        "gatewayAuthorityId": {
+          "type": "string"
+        },
+        "issuerCredentialId": {
+          "type": "string"
+        },
+        "verifierCredentialId": {
+          "type": "string"
+        },
+        "expiresAt": {
+          "type": "string"
+        }
+      },
+      "additionalProperties": false
+    },
+    "consume_endpoint_migration_challengeRequest": {
+      "type": "object",
+      "required": [
+        "challenge",
+        "expectedGatewayAuthorityId",
+        "issuerCredentialId"
+      ],
+      "properties": {
+        "challenge": {
+          "type": "string",
+          "pattern": "^[0-9a-f]{64}$"
+        },
+        "expectedGatewayAuthorityId": {
+          "type": "string",
+          "pattern": "^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}$"
+        },
+        "issuerCredentialId": {
+          "type": "string",
+          "pattern": "^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}$"
+        }
+      },
+      "additionalProperties": false
+    },
+    "consume_endpoint_migration_challengeResponse": {
+      "type": "object",
+      "required": [
+        "gatewayAuthorityId",
+        "issuerCredentialId",
+        "verifierCredentialId",
+        "expiresAt",
+        "consumed"
+      ],
+      "properties": {
+        "gatewayAuthorityId": {
+          "type": "string"
+        },
+        "issuerCredentialId": {
+          "type": "string"
+        },
+        "verifierCredentialId": {
+          "type": "string"
+        },
+        "expiresAt": {
+          "anyOf": [
+            {
+              "type": "string"
+            },
+            {
+              "type": "null"
+            }
+          ]
+        },
+        "consumed": {
+          "type": "boolean"
+        }
+      },
+      "additionalProperties": false
+    },
     "client_statusRequest": {
       "type": "object",
       "properties": {},
@@ -834,6 +957,12 @@
                 }
               ]
             },
+            "gatewayAuthorityId": {
+              "type": "string"
+            },
+            "credentialId": {
+              "type": "string"
+            },
             "principal": {
               "type": "object",
               "required": [
@@ -927,6 +1056,7 @@
                 "idle",
                 "running",
                 "backoff",
+                "paused",
                 "stopped",
                 "failed"
               ]
@@ -936,6 +1066,19 @@
             },
             "remoteError": {
               "type": "string"
+            },
+            "migrationState": {
+              "enum": [
+                "active",
+                "draining",
+                "retired"
+              ]
+            },
+            "migrationOperationId": {
+              "type": "string"
+            },
+            "migrationLeaseExpiresAt": {
+              "type": "string"
             }
           },
           "additionalProperties": true
@@ -1195,6 +1338,12 @@
                 }
               ]
             },
+            "gatewayAuthorityId": {
+              "type": "string"
+            },
+            "credentialId": {
+              "type": "string"
+            },
             "principal": {
               "type": "object",
               "required": [
@@ -1288,6 +1437,7 @@
                 "idle",
                 "running",
                 "backoff",
+                "paused",
                 "stopped",
                 "failed"
               ]
@@ -1297,6 +1447,19 @@
             },
             "remoteError": {
               "type": "string"
+            },
+            "migrationState": {
+              "enum": [
+                "active",
+                "draining",
+                "retired"
+              ]
+            },
+            "migrationOperationId": {
+              "type": "string"
+            },
+            "migrationLeaseExpiresAt": {
+              "type": "string"
             }
           },
           "additionalProperties": true
@@ -2283,6 +2446,10 @@
         "leaseMs": {
           "type": "number"
         },
+        "messageId": {
+          "type": "string",
+          "pattern": "^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}$"
+        },
         "maxAttempts": {
           "type": "number"
         }

package/sql/migrations/007_runtime_role.sql

@@ -12,10 +12,14 @@ begin
       role_name
     );
   end if;
-  execute format(
-    'alter role %I nologin nosuperuser nocreatedb nocreaterole noreplication nobypassrls',
-    role_name
-  );
+  if exists (
+    select 1 from pg_roles where rolname=role_name and (
+      rolcanlogin or not rolinherit or rolsuper or rolcreatedb or rolcreaterole
+      or rolreplication or rolbypassrls or rolconnlimit<>-1
+    )
+  ) then
+    raise exception 'Agent Bridge runtime role has unsafe attributes';
+  end if;
   execute format('revoke all on schema agent_bridge from %I', role_name);
   execute format('revoke all on all tables in schema agent_bridge from %I', role_name);
   execute format('revoke all on all sequences in schema agent_bridge from %I', role_name);

package/sql/migrations/013_row_isolation.sql

@@ -17,11 +17,73 @@ begin
         role_name
       );
     end if;
-    execute format(
-      'alter role %I nologin nosuperuser nocreatedb nocreaterole noreplication nobypassrls',
-      role_name
-    );
-    execute format('grant %I to %I with admin option',role_name,current_user);
+    if exists (
+      select 1 from pg_roles where rolname=role_name and (
+        rolcanlogin or not rolinherit or rolsuper or rolcreatedb or rolcreaterole
+        or rolreplication or rolbypassrls or rolconnlimit<>-1
+      )
+    ) then
+      raise exception 'Agent Bridge row-isolation role % has unsafe attributes',role_name;
+    end if;
+    if current_setting('server_version_num')::integer>=160000 then
+      if not exists (
+        select 1 from pg_catalog.pg_auth_members membership
+        join pg_catalog.pg_roles granted on granted.oid=membership.roleid
+        join pg_catalog.pg_roles member on member.oid=membership.member
+        where granted.rolname=role_name and member.rolname=current_user
+          and membership.admin_option
+      ) then
+        execute format(
+          'grant %I to %I with admin true,inherit true,set true',role_name,current_user
+        );
+      elsif not exists (
+        select 1 from pg_catalog.pg_auth_members membership
+        join pg_catalog.pg_roles granted on granted.oid=membership.roleid
+        join pg_catalog.pg_roles member on member.oid=membership.member
+        where granted.rolname=role_name and member.rolname=current_user
+          and coalesce((to_jsonb(membership)->>'inherit_option')::boolean,true)
+          and coalesce((to_jsonb(membership)->>'set_option')::boolean,true)
+      ) then
+        execute format('grant %I to %I with inherit true,set true',role_name,current_user);
+      end if;
+    elsif not exists (
+      select 1 from pg_catalog.pg_auth_members membership
+      join pg_catalog.pg_roles granted on granted.oid=membership.roleid
+      join pg_catalog.pg_roles member on member.oid=membership.member
+      where granted.rolname=role_name and member.rolname=current_user
+        and membership.admin_option
+    ) then
+      execute format('grant %I to %I with admin option',role_name,current_user);
+    end if;
+    if not exists (
+      select 1 from pg_catalog.pg_auth_members membership
+      join pg_catalog.pg_roles granted on granted.oid=membership.roleid
+      join pg_catalog.pg_roles member on member.oid=membership.member
+      where granted.rolname=role_name and member.rolname=current_user
+        and membership.admin_option
+    ) or not exists (
+      select 1 from pg_catalog.pg_auth_members membership
+      join pg_catalog.pg_roles granted on granted.oid=membership.roleid
+      join pg_catalog.pg_roles member on member.oid=membership.member
+      where granted.rolname=role_name and member.rolname=current_user
+        and coalesce((to_jsonb(membership)->>'inherit_option')::boolean,true)
+        and coalesce((to_jsonb(membership)->>'set_option')::boolean,true)
+    ) or exists (
+      select 1 from pg_catalog.pg_auth_members membership
+      join pg_catalog.pg_roles granted on granted.oid=membership.roleid
+      join pg_catalog.pg_roles member on member.oid=membership.member
+      where granted.rolname=role_name and member.rolname=current_user
+        and not (
+          (membership.grantor=10 and membership.admin_option
+            and not coalesce((to_jsonb(membership)->>'inherit_option')::boolean,true)
+            and not coalesce((to_jsonb(membership)->>'set_option')::boolean,true))
+          or (membership.grantor=member.oid
+            and coalesce((to_jsonb(membership)->>'inherit_option')::boolean,true)
+            and coalesce((to_jsonb(membership)->>'set_option')::boolean,true))
+        )
+    ) then
+      raise exception 'Agent Bridge row-isolation role % has unsafe owner authority',role_name;
+    end if;
   end loop;
 end
 $roles$;
@@ -292,7 +354,8 @@ declare
   event_writer text := 'agent_bridge_event_writer_' || suffix;
   table_name text;
 begin
-  execute format('grant usage on schema agent_bridge to %I',data_owner);
+  execute format('grant usage,create on schema agent_bridge to %I,%I,%I',
+    data_owner,context_reader,event_writer);
   foreach table_name in array array[
     'messages','receipts','deliveries','delivery_events','agent_instances'
   ] loop
@@ -301,9 +364,9 @@ begin
   execute format('alter function agent_bridge.current_request_workspace() owner to %I',context_reader);
   execute format('alter function agent_bridge.current_request_principal() owner to %I',context_reader);
   execute format('alter function agent_bridge.record_delivery_event() owner to %I',event_writer);
-  execute format('grant usage on schema agent_bridge to %I',context_reader);
+  execute format('revoke create on schema agent_bridge from %I,%I,%I',
+    data_owner,context_reader,event_writer);
   execute format('grant select on agent_bridge.request_authorities to %I',context_reader);
-  execute format('grant usage on schema agent_bridge to %I',event_writer);
   execute format('grant insert on agent_bridge.delivery_events to %I',event_writer);
   execute format('grant usage on sequence agent_bridge.delivery_events_sequence_seq to %I',event_writer);
 end