@ai-matrx/agents 0.28.0 → 0.29.0

package/CHANGELOG.md

@@ -1,5 +1,21 @@
 # Changelog
 
+## 0.29.0
+
+- **Context is fetched on demand — the receipt carries size and hash only** (owner law 2026-10-01, RULES.md §5b: *"99 out of 100 times the user will never want to see the value"*). `ContextReceiptRow.delivered` / `on_request` and the new `ContextReceiptBlock.delivered` are `ContextDeliveredRef {chars, sha256}` — `ContextDeliveredText` is gone. New viewer types `ContextViewTarget`, `ContextViewedText`, `ContextViewLoader`; `ContextDeliveredValue` / `DeliveredSection` fetch the exact text through the host's `load` when the detail opens (Skeleton while loading, an honest one-line error with Retry), and never before.
+- **Every block of server text the model read is on the receipt** (`ContextReceipt.blocks`): `ContextRulesPanelBody` takes `blocks` and lists them read-only under **Also sent** (label + chars, aligned to Chars), each opening to its text; `ContextReceiptBlocks` / `ContextReceiptBlockDetail` are exported for other views.
+- **The Organization is everything the model read for it**: `CONTEXT_ROW_BLOCKS` attaches the `organization_catalog` block to the `organization` row (`deliveredBlocks`, `blocksForRow`, `unclaimedBlocks`) — shown in its detail, counted in its chars, not listed again under Also sent. A server-authoritative row's chars are the server's (its statement + attached blocks), never the page's copy.
+- Consumer action: pass `loadView` (sent turn: `GET /ai/context/delivered`; next turn: `POST /ai/context/preview` with `view`) and `blocks` to `ContextRulesPanelBody`; `receiptRowToResolved(row, receipt.blocks)`; drop every read of `delivered.text` / `truncated`.
+
+- **The composer's value-group chip is compact and never says "Context"** (Arman, 2026-10-01: *"never use the word context to describe what's inside"*). `ContextRulesChipProps.label` is optional: empty or omitted renders NO text — the face is icon + count, its accessible name and tooltip are "N included", and the popover header shows the count only. The face is `h-6`, `rounded-md`, the height of the composer's other row pills (was a `h-7` full pill); on mobile an invisible ring keeps a 44px hit area. The popover aligns `end` (the chip sits at the far right of the composer row). The master switch's accessible name is "Include this page"; the blind tooltip is "This model can't read these values".
+- Consumer action: pass the group's real name (a page or surface display name) or nothing — never a generic "Context" fallback; re-anchor tests on `"<name> · N included"` / `"N included"` and the switch `"Include this page"`.
+
+## 0.28.1
+
+Automatic changed-only republish (docs/metadata drift since the last tag — see
+`git diff npm/matrx-agents/v0.28.0..npm/matrx-agents/v0.28.1 -- apps/shared/matrx-agents`).
+No source changes intended and no consumer action required.
+
 ## 0.28.0
 
 - **Identity is the server's truth, never the page's claim** (RULES.md §5a, owner ruling 2026-10-01). New `SERVER_AUTHORITATIVE_KEYS` (`user`, `client` → a server-built value; `organization`, `active_scopes` → the server's `<active_context>`) and `isServerAuthoritativeKey`, equal to the parity corpus's `server_authoritative_keys`. The server drops the client's copy of these keys and states its own every turn; the receipt row is `origin: "server"` and its `delivered` IS the server's text. `ContextDeliveredValue` says "Filled in by the server" for one with no receipt yet — never the page's guess.
@@ -2254,3 +2270,4 @@ byte-identical to v0.6.0). No source changes and no consumer action required.
 - Added strict tests, ESM declarations, packed-artifact validation, and an
   isolated consumer import canary.
 
+