@ai-matrx/records 0.76.12 → 0.76.14

package/CHANGELOG.md

@@ -1,5 +1,17 @@
 # Changelog — @ai-matrx/records
 
+## 0.76.14
+
+Automatic changed-only republish (docs/metadata drift since the last tag — see
+`git diff npm/records/v0.76.13..npm/records/v0.76.14 -- apps/shared/records`).
+No source changes intended and no consumer action required.
+
+## 0.76.13
+
+- `exportCsv` writes through THE one writer, `@ai-matrx/kit/delimited` (AP-2): formula-looking text gets a leading `'` (OWASP CSV injection); it had no formula guard before. Same header row, quoting and order.
+
+**Consumer action:** none.
+
 ## 0.76.11
 
 Automatic changed-only republish (docs/metadata drift since the last tag — see

package/dist/core/index.cjs

@@ -4688,7 +4688,7 @@ function scopeChip(scope) {
 
 // src/table-kind-mapping.json
 var table_kind_mapping_default = {
-  about: "THE ONE MAPPING from a store Field to a kind's three schemas (KINDS-GLUE wave 3 \xA72). Hand-written here; aidream copies it verbatim to packages/matrx-graph/matrx_graph/table_kind_mapping.json (scripts/generate_table_kind_mapping.py --check). Both languages derive from this file only: @ai-matrx/records src/table-kind.ts and matrx_graph.table_kinds. Keys of `kinds` are the store's field kinds (custom.field_kinds() plus the formula `system` kinds custom.field_kind_of answers). Stored mode only: `column_source_default` is custom.table_column_source's answer when the facts carry none (silence means the doctrine: Field rows are the columns); `platform_keys` mirrors custom.record_platform_keys() with each key's shape (parent_id: custom.containment_parent's uuid cast); `stored_patterns` mirror custom.validate_values' relation id regex and, for dates, refuse a string the timestamptz cast can never read (no digits, not a special word) while never refusing one it can.",
+  about: "THE ONE MAPPING from a store Field to a kind's three schemas (KINDS-GLUE wave 3 \xA72). Hand-written here; aidream copies it verbatim to packages/matrx-graph/matrx_graph/table_kind_mapping.json (scripts/generate_table_kind_mapping.py --check). Both languages derive from this file only: @ai-matrx/records src/table-kind.ts and matrx_graph.table_kinds. Keys of `kinds` are the store's field kinds (custom.field_kinds() plus the formula `system` kinds custom.field_kind_of answers). Stored mode only: `column_source_default` is custom.table_column_source's answer when the facts carry none (silence means the doctrine: Field rows are the columns); `platform_keys` mirrors custom.record_platform_keys() with each key's shape (parent_id: custom.containment_parent's uuid cast; icon: the record's own @ai-matrx/icons name, a string or null); `stored_patterns` mirror custom.validate_values' relation id regex and, for dates, refuse a string the timestamptz cast can never read (no digits, not a special word) while never refusing one it can.",
   version: 2,
   kernels: {
     file: "11111111-0000-4000-8000-000000000006",
@@ -4709,7 +4709,8 @@ var table_kind_mapping_default = {
   address_part_max: 200,
   column_source_default: "fields",
   platform_keys: {
-    parent_id: { type: ["string", "null"], pattern: "^(?:\\{[0-9a-fA-F]{4}(?:-?[0-9a-fA-F]{4}){7}\\}|[0-9a-fA-F]{4}(?:-?[0-9a-fA-F]{4}){7})$" }
+    parent_id: { type: ["string", "null"], pattern: "^(?:\\{[0-9a-fA-F]{4}(?:-?[0-9a-fA-F]{4}){7}\\}|[0-9a-fA-F]{4}(?:-?[0-9a-fA-F]{4}){7})$" },
+    icon: { type: ["string", "null"] }
   },
   stored_patterns: {
     record_id: "^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$",
@@ -9820,6 +9821,9 @@ function predictWriteRefusals(args) {
   return found;
 }
 
+// src/core/io.ts
+var import_delimited = require("@ai-matrx/kit/delimited");
+
 // src/core/wholeValue.ts
 var import_format = require("@ai-matrx/kit/format");
 var WHOLE_VALUE_SOURCE_KIND = "whole_value_in_file";
@@ -9872,7 +9876,6 @@ async function withWholeValues(rows2, read) {
 }
 
 // src/core/io.ts
-var escape = (value) => /[",\n\r]/.test(value) ? `"${value.replace(/"/g, '""')}"` : value;
 function cellText(value) {
   if (!value) return "";
   if (value.absent_reason) return `(${value.absent_reason})`;
@@ -9894,11 +9897,7 @@ function headerFor(field) {
   return field.label && field.label.length > 0 ? field.label : field.key;
 }
 function exportCsv(fields, rows2) {
-  const lines = [fields.map((f) => escape(headerFor(f))).join(",")];
-  for (const row of rows2) {
-    lines.push(fields.map((f) => escape(exportCellText2(f, row[f.key]))).join(","));
-  }
-  return lines.join("\n");
+  return (0, import_delimited.toDelimited)(toAoa(fields, rows2));
 }
 function toAoa(fields, rows2) {
   return [fields.map(headerFor), ...rows2.map((row) => fields.map((f) => exportCellText2(f, row[f.key])))];