agentic-documents 0.2.0 → 0.3.0

package/CHANGELOG.md

@@ -1,5 +1,27 @@
 # Changelog
 
+## 0.3.0
+
+### Breaking changes
+
+The API of this package does not change. The change is in the dependency.
+
+- **Dependencies.** `agentic-identity` moves from `^0.3.0` to `^0.4.0`. In 0.4 a grant is keyed on the
+  principal kind and the id, so a person and an agent with the same id hold separate roles. Grants
+  written by 0.3 are not honored until you run `migrateGrants`. A host that shares documents through
+  `createSharing` must pass `{ kind, id }` to `grant` and `revokeGrant`.
+
+### Added
+
+- Tests that a person and an agent with the same id get separate roles, and that `deleteResource`
+  removes the grants.
+- This package has no grant call and no command that deletes a whole document or erases a person. A
+  host that deletes a document must call `deleteResource` for it, and must delete the document and its
+  catalog entry itself. If `deleteResource` fails, run it again. If it throws `EraseRefusedError`,
+  remove the child resources or the extra owners first. Do not reuse the document id until it
+  succeeds. The `agentic-identity` person erase does not remove document content, and author names
+  stay in the edit log, the threads, and the suggestions.
+
 ## 0.2.0
 
 ### Breaking changes

package/README.md

@@ -7,7 +7,7 @@
 
 Write documents with people and agents in real time.
 
-> Status: early, version 0.2.0. The document model, the text operations, the CLI, the MCP server,
+> Status: early, version 0.3.0. The document model, the text operations, the CLI, the MCP server,
 > the Worker API, and live editing in a room work. The web UI is not built yet.
 
 ## Install
@@ -195,6 +195,13 @@ Limits of live editing:
 ## Limits
 
 - No web UI yet.
+- A document holds no roles of its own. The token table gives `editor` or `viewer`. To share a document
+  by person, use `createSharing` from `agentic-identity` 0.4. A grant names its subject by kind
+  (`human` or `agent`) and id, so a person and an agent with the same id hold separate roles. When you
+  delete a document, call `deleteResource` on its resource so its grants do not outlive it. If
+  `deleteResource` fails, treat the delete as failed and run it again. If it throws
+  `EraseRefusedError`, remove the child resources or the extra owners first. Do not reuse the id
+  until it succeeds. This package has no command that deletes a whole document.
 - The Worker keeps each document in R2 and a catalog (who made it, and when) in D1. Both come from the
   shared `agentic-identity` ports. A save is conditional on the version it read, so two writers cannot
   overwrite each other. The CLI and MCP server keep the same data in local files.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agentic-documents",
-  "version": "0.2.0",
+  "version": "0.3.0",
   "description": "Write documents with people and agents in real time.",
   "keywords": [
     "documents",
@@ -69,7 +69,7 @@
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.12.0",
-    "agentic-identity": "^0.3.0",
+    "agentic-identity": "^0.4.0",
     "agentic-realtime": "^0.1.0",
     "fflate": "^0.8.3",
     "hono": "^4.13.14",