@ai-matrx/agents 0.27.0 → 0.28.1

package/CHANGELOG.md

@@ -1,5 +1,18 @@
 # Changelog
 
+## 0.28.1
+
+Automatic changed-only republish (docs/metadata drift since the last tag — see
+`git diff npm/matrx-agents/v0.28.0..npm/matrx-agents/v0.28.1 -- apps/shared/matrx-agents`).
+No source changes intended and no consumer action required.
+
+## 0.28.0
+
+- **Identity is the server's truth, never the page's claim** (RULES.md §5a, owner ruling 2026-10-01). New `SERVER_AUTHORITATIVE_KEYS` (`user`, `client` → a server-built value; `organization`, `active_scopes` → the server's `<active_context>`) and `isServerAuthoritativeKey`, equal to the parity corpus's `server_authoritative_keys`. The server drops the client's copy of these keys and states its own every turn; the receipt row is `origin: "server"` and its `delivered` IS the server's text. `ContextDeliveredValue` says "Filled in by the server" for one with no receipt yet — never the page's guess.
+- **Identity is never ambient context** (ruling 2026-10-01): `ContextRuleInput.identity` — a server-authoritative value is closed only by the person's own rule, never by the page's `auto_context` off or the agent's / mandate's `kill_switch` (`decided_by.include` stays `"default"`). `resolveContextRow` sets it for every `SERVER_AUTHORITATIVE_KEYS` key; corpus `rules_cases` carry it.
+- **Removed `server_rendered` / `serverRendered`** (added in unpublished 0.27.0): the server's statement is now the row's `delivered` — one place, not a second copy.
+- Consumer action: in a host `renderDetail`, do not show the page's value as "will send" for a server-authoritative key; drop any `serverRendered` reads.
+
 ## 0.27.0
 
 - **The screen shows what the model READ, never the page's copy** (RULES.md §5, Arman 2026-10-01: the context full view showed the page's Organization while the model was told another). Receipt rows carry `delivered` (the value's own element, verbatim from the rendered context block), `on_request` (what the `context` tool returns for an on-request value) and `server_rendered` (the server's own statement of the value outside the manifest — `organization`'s `<organization>` element), each `{ text, chars, truncated, sha256 }` (`ContextDeliveredText`). `applyReceiptToRows` and `receiptRowToResolved` carry them as `delivered` / `onRequest` / `serverRendered` (new `deliveredFields`). `ContextRulesPanelBody`'s detail renders them (new `ContextDeliveredValue`) above the host's `renderDetail`.
@@ -2247,3 +2260,4 @@ byte-identical to v0.6.0). No source changes and no consumer action required.
 - Added strict tests, ESM declarations, packed-artifact validation, and an
   isolated consumer import canary.
 
+