@ai-matrx/records 0.58.16 → 0.58.17

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/CHANGELOG.md +14 -0
  2. package/package.json +1 -1
package/CHANGELOG.md CHANGED
@@ -1,11 +1,25 @@
1
1
  # Changelog — @ai-matrx/records
2
2
 
3
+ ## 0.58.17
4
+
5
+ Automatic changed-only republish (docs/metadata drift since the last tag — see
6
+ `git diff npm/records/v0.58.16..npm/records/v0.58.17 -- apps/shared/records`).
7
+ No source changes intended and no consumer action required.
8
+
3
9
  ## 0.58.16
4
10
 
5
11
  Automatic changed-only republish (docs/metadata drift since the last tag — see
6
12
  `git diff npm/records/v0.58.15..npm/records/v0.58.16 -- apps/shared/records`).
7
13
  No source changes intended and no consumer action required.
8
14
 
15
+ ## Unreleased — lane KERNEL-TAILS (2026-09-25)
16
+
17
+ * **No signed-out caller holds any grant in `custom`.** The anonymous EXECUTE on
18
+ `custom._older_table_copy_refusal(uuid)` was a dead door (`anon` has no USAGE on the schema and
19
+ the copy fence runs as the writer) and is revoked; its door row no longer declares anonymous
20
+ callers. `real-doors.test.ts` now asserts 0 anon-executable functions in `custom` and 0 anonymous
21
+ door rows for it, declared or not. No API change.
22
+
9
23
  ## Unreleased — lane SUITE-HEALTH-3 (2026-09-25)
10
24
 
11
25
  * **Retired: `custom.context_resolve(p_organization_id, p_bindings, p_scope_slug)`** — the
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@ai-matrx/records",
3
- "version": "0.58.16",
3
+ "version": "0.58.17",
4
4
  "description": "The headless client of the AI Matrx record store: the Table / Field / Rule / Record / Relation / Home types, the closed vocabularies and refusal codes read from the store itself, the typed calls over the store's doors and nothing else, the merge-field declaration, a validation mirror that predicts only what the store's own triggers refuse, and the never-throw result envelope. Zero React, zero DOM in the root and /core.",
5
5
  "type": "module",
6
6
  "main": "./dist/index.cjs",