@ai-matrx/records 0.3.0 → 0.4.1

package/CHANGELOG.md

@@ -1,5 +1,43 @@
 # Changelog — @ai-matrx/records
 
+## 0.4.1
+
+Carries the live Supabase adapter proof through the shared npm publishing lane
+by supplying its existing main-database HTTP URL and publishable-key secrets to
+the verification step.
+
+### Consumer action
+
+None beyond taking `latest`; the 0.4.0 API is unchanged.
+
+## 0.4.0
+
+**The browser can reach the store again — `supabaseDataSource`.** Every screen
+of the record store was dead from a browser, for everybody, and the cause was a
+single silent drop. `RecordsDataSource.rpc(fn, args, { schema })` says the
+schema out loud, because every door is `custom.<name>` and every trust door is
+`iam.<name>`. supabase-js's own `rpc()` has NO schema option — its third
+argument is `{ head, get, count }` — so a host that bound its client as a bare
+structural cast handed the option to a function that dropped it, every door call
+went to PostgREST's default profile, and the store answered, correctly and
+uselessly, `PGRST202 — Could not find the function public.table_kernel_id in the
+schema cache`. Independent verdict, 2026-09-19.
+
+The fix is ONE adapter in the headless core, exported from `/core`, that every
+host inherits — never three hosts (web, desktop, extension) each remembering the
+same thing. It routes through `client.schema(name).rpc(...)`, which is the one
+way supabase-js offers, and it refuses two things by name rather than sending
+them: a call with no schema (which would reach `public`), and a client with no
+`.schema()` method (which would throw inside a render).
+
+**The test that would have caught it**, `src/__tests__/supabase-adapter.test.ts`:
+a real supabase-js client against the MAIN database, signed in as `test@test.com`,
+calling a real door. A raw `fetch` to `/rest/v1/rpc/...` would NOT have caught
+this — the bug is in supabase-js's option handling, so only a real client
+exercises it. The RED half reconstructs the bare cast that shipped and asserts
+the store's own PGRST202 naming `public`; the GREEN half is the same call
+through the adapter answering the kernel id.
+
 ## 0.3.0
 
 **The anonymous lane, wired to the doors that actually exist.** This package

package/dist/core/index.cjs

@@ -90,6 +90,7 @@ __export(core_exports, {
   predictValueRefusals: () => predictValueRefusals,
   predictWriteRefusals: () => predictWriteRefusals,
   staleWriteDetail: () => staleWriteDetail,
+  supabaseDataSource: () => supabaseDataSource,
   toAoa: () => toAoa
 });
 module.exports = __toCommonJS(core_exports);
@@ -247,6 +248,7 @@ var STORE_DOORS = [
   { name: "anon_token_verify", args: "p_secret text, p_origin text, p_required_mode text", returns: "TABLE(token_id uuid, organization_id uuid, form_id uuid, saved_view_id uuid, record_id uuid, mode text)", security: "definer" },
   { name: "anon_write", args: "p_secret text, p_origin text, p_payload jsonb, p_client_key text DEFAULT NULL::text, p_raw_payload jsonb DEFAULT '{}'::jsonb", returns: "uuid", security: "definer" },
   { name: "applicable_fields", args: "p_organization_id uuid, p_table_id uuid, p_record_type text DEFAULT NULL::text", returns: "SETOF custom.record", security: "definer" },
+  { name: "assert_client_may_change", args: "p_organization_id uuid, p_subject_id uuid, p_door text, p_required permission_level DEFAULT 'editor'::permission_level, p_subject_word text DEFAULT 'record'::text", returns: "void", security: "invoker" },
   { name: "assert_client_may_reach", args: "p_organization_id uuid, p_door text", returns: "void", security: "invoker" },
   { name: "assert_organization_wall", args: "p_kind text, p_organization_id uuid, p_row jsonb", returns: "void", security: "invoker" },
   { name: "assert_store_door", args: "p_organization_id uuid, p_door text", returns: "void", security: "invoker" },
@@ -278,6 +280,8 @@ var STORE_DOORS = [
   { name: "doc_token_pattern", args: "", returns: "text", security: "invoker" },
   { name: "doc_tokens", args: "p_body text", returns: "TABLE(ordinal integer, raw text, field_id uuid)", security: "invoker" },
   { name: "doc_unresolved_tokens", args: "p_organization_id uuid, p_table_id uuid, p_body text", returns: "TABLE(raw text, field_id uuid, why text)", security: "invoker" },
+  { name: "doors_not_deciding_the_caller", args: "", returns: "TABLE(function_name text, identity_args text)", security: "invoker" },
+  { name: "doors_not_deciding_the_record", args: "", returns: "TABLE(function_name text, identity_args text, why text)", security: "invoker" },
   { name: "export_records", args: "p_organization_id uuid, p_table_id uuid, p_limit integer DEFAULT 1000", returns: "TABLE(id uuid, document jsonb)", security: "invoker" },
   { name: "external_foreign_table_findings", args: "", returns: "SETOF text", security: "definer" },
   { name: "external_history_event", args: "p_organization_id uuid, p_link_id uuid, p_operation text", returns: "bigint", security: "definer" },
@@ -334,12 +338,14 @@ var STORE_DOORS = [
   { name: "migrate_reparent", args: "p_organization_id uuid, p_id uuid, p_parent_id uuid, p_note text DEFAULT NULL::text", returns: "jsonb", security: "invoker" },
   { name: "migrate_retype", args: "p_organization_id uuid, p_id uuid, p_to text, p_note text DEFAULT NULL::text", returns: "jsonb", security: "invoker" },
   { name: "migrate_split", args: "p_organization_id uuid, p_record_id uuid, p_moved_keys text[], p_note text DEFAULT NULL::text", returns: "jsonb", security: "invoker" },
+  { name: "organization_kernel_id", args: "", returns: "uuid", security: "invoker" },
   { name: "organization_references", args: "p_kind text, p_organization_id uuid, p_row jsonb", returns: "TABLE(site text, what text, ref_id uuid, openable boolean)", security: "invoker" },
   { name: "parity_field_types", args: "", returns: "TABLE(parity_type text, behavior text, made_of text)", security: "invoker" },
   { name: "parity_type", args: "p_field_data jsonb", returns: "text", security: "invoker" },
   { name: "parity_values", args: "p_organization_id uuid, p_record_id uuid", returns: "TABLE(field_key text, field_id uuid, parity_type text, behavior text, unit text, format text, value jsonb, value_version integer, actor text, written_at timestamp with time zone)", security: "invoker" },
   { name: "per_value_access_words", args: "", returns: "text[]", security: "invoker" },
   { name: "person_kernel_id", args: "", returns: "uuid", security: "invoker" },
+  { name: "presentation_kernel_id", args: "", returns: "uuid", security: "invoker" },
   { name: "promote_field", args: "p_organization_id uuid, p_table_id uuid, p_field_id uuid", returns: "jsonb", security: "invoker" },
   { name: "promote_table", args: "p_organization_id uuid, p_table_id uuid", returns: "jsonb", security: "definer" },
   { name: "promoted_field_cap", args: "", returns: "integer", security: "invoker" },
@@ -435,6 +441,7 @@ var STORE_DOORS = [
   { name: "visibility_parity", args: "", returns: "TABLE(side text, container_type text, container_id uuid, item_type text, item_id uuid, stored_level permission_level, derived_level permission_level, reason text)", security: "definer" },
   { name: "visibility_warm", args: "p_container_type text, p_container_id uuid", returns: "integer", security: "definer" },
   { name: "visible_record_ids", args: "p_user_id uuid, p_required permission_level DEFAULT 'viewer'::permission_level", returns: "TABLE(id uuid)", security: "definer" },
+  { name: "widget_kernel_id", args: "", returns: "uuid", security: "invoker" },
   { name: "work_assignment_fields", args: "p_options_table_id uuid DEFAULT NULL::uuid", returns: "TABLE(key text, label text, spec jsonb)", security: "invoker" },
   { name: "work_has_assignment", args: "p_organization_id uuid, p_table_id uuid", returns: "boolean", security: "invoker" },
   { name: "work_instantiation_shape", args: "p_organization_id uuid, p_instantiation_id uuid", returns: "jsonb", security: "invoker" },
@@ -456,8 +463,17 @@ var STORE_DOORS = [
 ];
 var STORE_KNOBS = [
   { key: "accessible_entity_ids_guard", value: "false", type: "boolean" },
+  { key: "agent_schema_changes", value: '"propose"', type: "string" },
   { key: "associations_guard", value: "false", type: "boolean" },
   { key: "code_paths_enabled", value: "false", type: "boolean" },
+  { key: "consumer_chat_seeding_enabled", value: "false", type: "boolean" },
+  { key: "consumer_checkout_enabled", value: "false", type: "boolean" },
+  { key: "consumer_education_enabled", value: "false", type: "boolean" },
+  { key: "consumer_extension_enabled", value: "false", type: "boolean" },
+  { key: "consumer_grid_enabled", value: "false", type: "boolean" },
+  { key: "consumer_retirement_enabled", value: "false", type: "boolean" },
+  { key: "consumer_saved_ai_outputs_enabled", value: "false", type: "boolean" },
+  { key: "consumer_scopes_enabled", value: "false", type: "boolean" },
   { key: "containment_depth_ceiling", value: "16", type: "integer" },
   { key: "document_max_bytes", value: "1048576", type: "integer" },
   { key: "emergency_door_guard", value: "false", type: "boolean" },
@@ -489,7 +505,7 @@ var STORE_REFUSAL_CODES = [
   { code: "23505", raised_by: "doc_sign,doc_signature_write,home_add,io_proposal_accept,work_slot_hold" },
   { code: "23514", raised_by: "_containment_guard,_dated_values_guard,_derived_fields,_field_shape_guard,_field_type_parity_guard,_merge_field_shape_guard,_merge_field_temporal_guard,_promoted_field_cap_guard,_record_rule_uses,_rule_shape_guard,_rule_topology_guard,_table_shape_guard,_value_envelope,_work_shape_guard,doc_sign,doc_signature_write,doc_template_save,home_add,validate_value_envelope,validate_values,work_slots_declare,work_take_assignment,work_template_instantiate" },
   { code: "40001", raised_by: "has_visibility_at" },
-  { code: "42501", raised_by: "_doc_render_immutable,_doc_signature_immutable,_field_definition_write,_field_write_door,_rule_definition_write,_store_door,anon_capture,anon_inbound_land,anon_publish,anon_token_issue,anon_token_verify,anon_write,assert_client_may_reach,assert_store_door,external_write_through,io_comment_resolve,io_comment_write,io_restore,migrate_purge,promote_table,read_record,read_records" },
+  { code: "42501", raised_by: "_doc_render_immutable,_doc_signature_immutable,_field_definition_write,_field_write_door,_rule_definition_write,_store_door,anon_capture,anon_inbound_land,anon_publish,anon_token_issue,anon_token_verify,anon_write,assert_client_may_change,assert_client_may_reach,assert_store_door,external_write_through,io_comment_resolve,io_comment_write,io_restore,migrate_purge,promote_table,read_record,read_records" },
   { code: "53400", raised_by: "anon_rate_take,promote_field" },
   { code: "PT409", raised_by: "record_update" }
 ];
@@ -2560,6 +2576,42 @@ function asWriteConflict(error, recordId) {
   };
 }
 
+// src/core/supabase.ts
+function refuse(code, message, hint) {
+  return { data: null, error: { code, message, hint, details: "" } };
+}
+function supabaseDataSource(client) {
+  const supabase = client;
+  const hasSchema = typeof supabase.schema === "function";
+  return {
+    rpc(fn, args, options) {
+      if (!hasSchema) {
+        return Promise.resolve(
+          refuse(
+            "data_source_unbound",
+            `The records client was given something that is not a supabase client: it has no schema() method, so the door ${fn} cannot be called in the schema it lives in.`,
+            "Pass a supabase-js v2 client (createClient(...)) to supabaseDataSource()."
+          )
+        );
+      }
+      const name = options?.schema;
+      if (!name) {
+        return Promise.resolve(
+          refuse(
+            "schema_unsaid",
+            `The door ${fn} was called without saying which schema it lives in. Every door of this store is custom.${fn} and every trust door is iam.${fn}; an unqualified call reaches PostgREST's default profile (public) and is refused there.`,
+            "This is a bug in the caller, not in your data: /core says the schema on every call."
+          )
+        );
+      }
+      return supabase.schema(name).rpc(fn, args);
+    },
+    schema(name) {
+      return supabase.schema(name);
+    }
+  };
+}
+
 // src/core/validation.ts
 var DEFAULT_VALUE_MAX_BYTES = 1e5;
 var DEFAULT_DOCUMENT_MAX_BYTES = 1048576;