@ai-matrx/agents 0.25.4 → 0.28.0

package/CHANGELOG.md

@@ -1,18 +1,28 @@
 # Changelog
 
-<!-- matrx-auto-git-docs-resolution-needed-delete-this-when-resolved — two versions follow: LOCAL first, then GITHUB. (LOCAL latest 2026-10-01 21:03; GITHUB latest 2026-10-01 21:01; LOCAL lacks 2 of GITHUB's 6 new lines; GITHUB lacks 2 of LOCAL's 2 new lines; recover: git show 2c8f705170:'apps/shared/matrx-agents/CHANGELOG.md' / 6efb5b4221:'apps/shared/matrx-agents/CHANGELOG.md') Delete these three marker lines when resolved. -->
+## 0.28.0
 
-## 0.25.4
+- **Identity is the server's truth, never the page's claim** (RULES.md §5a, owner ruling 2026-10-01). New `SERVER_AUTHORITATIVE_KEYS` (`user`, `client` → a server-built value; `organization`, `active_scopes` → the server's `<active_context>`) and `isServerAuthoritativeKey`, equal to the parity corpus's `server_authoritative_keys`. The server drops the client's copy of these keys and states its own every turn; the receipt row is `origin: "server"` and its `delivered` IS the server's text. `ContextDeliveredValue` says "Filled in by the server" for one with no receipt yet — never the page's guess.
+- **Identity is never ambient context** (ruling 2026-10-01): `ContextRuleInput.identity` — a server-authoritative value is closed only by the person's own rule, never by the page's `auto_context` off or the agent's / mandate's `kill_switch` (`decided_by.include` stays `"default"`). `resolveContextRow` sets it for every `SERVER_AUTHORITATIVE_KEYS` key; corpus `rules_cases` carry it.
+- **Removed `server_rendered` / `serverRendered`** (added in unpublished 0.27.0): the server's statement is now the row's `delivered` — one place, not a second copy.
+- Consumer action: in a host `renderDetail`, do not show the page's value as "will send" for a server-authoritative key; drop any `serverRendered` reads.
 
-Automatic changed-only republish (docs/metadata drift since the last tag — see
-`git diff npm/matrx-agents/v0.25.3..npm/matrx-agents/v0.25.4 -- apps/shared/matrx-agents`).
-No source changes intended and no consumer action required.
+## 0.27.0
+
+- **The screen shows what the model READ, never the page's copy** (RULES.md §5, Arman 2026-10-01: the context full view showed the page's Organization while the model was told another). Receipt rows carry `delivered` (the value's own element, verbatim from the rendered context block), `on_request` (what the `context` tool returns for an on-request value) and `server_rendered` (the server's own statement of the value outside the manifest — `organization`'s `<organization>` element), each `{ text, chars, truncated, sha256 }` (`ContextDeliveredText`). `applyReceiptToRows` and `receiptRowToResolved` carry them as `delivered` / `onRequest` / `serverRendered` (new `deliveredFields`). `ContextRulesPanelBody`'s detail renders them (new `ContextDeliveredValue`) above the host's `renderDetail`.
+- Consumer action: in `renderDetail`, do not render the client's value when the row carries `delivered`, `onRequest` or `serverRendered`; label a value shown before any receipt as the one the page will send. Includes 0.26.0 (its version bump was lost to a merge).
 
 ## 0.26.0
 
 - **One conversation-organization reader and one prefix-code reader for every client** (`./matrx`). New `readConversationOrganizationId(conversationId, read, onUnreadable?)` — the run's own organization for a resume/rejoin; the host injects `read` (supabase select, REST call) so the package stays transport-agnostic; null + `onUnreadable(reason)` when unreadable. New `readMatrxErrorCodeFromMessage(message)` — the `"resume_conflict: …"` message-prefix form (resume_conflict, not_resumable, outstanding_delegated_calls, user_request_not_found, run_in_flight). Replaces the copies in matrx-extend, matrx-local and matrx-frontend.
 - Consumer action: delete local copies; call the package functions.
-<!-- matrx-auto-git-docs-resolution-needed-delete-this-when-resolved — GITHUB version below -->
+
+## 0.25.4
+
+Automatic changed-only republish (docs/metadata drift since the last tag — see
+`git diff npm/matrx-agents/v0.25.3..npm/matrx-agents/v0.25.4 -- apps/shared/matrx-agents`).
+No source changes intended and no consumer action required.
+
 ## 0.25.3
 
 Automatic changed-only republish (docs/metadata drift since the last tag — see
@@ -24,7 +34,6 @@ No source changes intended and no consumer action required.
 Automatic changed-only republish (docs/metadata drift since the last tag — see
 `git diff npm/matrx-agents/v0.25.1..npm/matrx-agents/v0.25.2 -- apps/shared/matrx-agents`).
 No source changes intended and no consumer action required.
-<!-- matrx-auto-git-docs-resolution-needed-delete-this-when-resolved — end of both versions -->
 
 ## 0.25.1
 
@@ -1859,7 +1868,6 @@ renders a conductor beside an ordinary agent and asserts the marker, its count,
 its hover text and its ABSENCE on the ordinary row. Both proven RED on a
 deliberate perturbation and GREEN restored.
 
-
 ## 0.7.1 — 2026-09-08
 
 **0.7.0's two catalog entries did not typecheck together.** `./catalog` and
@@ -1899,7 +1907,6 @@ in a host — if you worked around this with a cast, DELETE the cast.
   after the fix. It runs inside `pnpm check:package`, which the publish
   workflow gates on.
 
-
 ## 0.7.0 — 2026-09-08
 
 **THE ONE AGENT PICKER moves into the package.** Two new entries — `./catalog`
@@ -2247,4 +2254,3 @@ byte-identical to v0.6.0). No source changes and no consumer action required.
 - Added strict tests, ESM declarations, packed-artifact validation, and an
   isolated consumer import canary.
 
-