create-substrat 0.10.0 → 0.10.2

package/index.js

@@ -36,11 +36,11 @@ const TEMPLATE = join(HERE, 'template');
 // The runtime packages release together off one version line (the changesets `fixed`
 // group), so one constant is right for all of them. Engines do NOT share a line —
 // each versions on its own, so one pin per engine, deliberately.
-const SUBSTRAT = '^0.124.0';
-const ENGINE_WORKORDER = '^0.12.8';
-const ENGINE_INVOICING = '^0.11.8';
-const BOUNDARY_LINT = '^0.5.0';
-const DEV_ISSUER = '^0.2.6';
+const SUBSTRAT = '^0.127.0';
+const ENGINE_WORKORDER = '^0.12.11';
+const ENGINE_INVOICING = '^0.11.11';
+const BOUNDARY_LINT = '^0.6.0';
+const DEV_ISSUER = '^0.2.9';
 
 const DOCS = 'https://substrat.net';
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-substrat",
-  "version": "0.10.0",
+  "version": "0.10.2",
   "description": "Scaffold a Substrat vertical — `npm create substrat <dir>`.",
   "license": "Apache-2.0",
   "repository": {

package/template/.substrat/playbook.md

@@ -76,9 +76,9 @@ Every vertical gets this whether or not it uses a single engine:
   an operation narrows a permission it already holds onto one entity, and withdraws it,
   with `ctx.grant(principal, perm, entityRef)` / `ctx.revoke(principal, perm, entityRef)`
   — entity-required, delegating (re-checks the caller's own decision), transactional with
-  the operation. Neither alternative is this: a `ctx.link` edge is permanent (not
-  revocable at all), and org membership is revocable but coarse-grained. Never mint an
-  org per domain row to get a revoke.
+  the operation. Neither alternative is this: a `ctx.link` edge can be moved
+  (`ctx.relink`) but never removed, so it is not a revoke, and org membership is
+  revocable but coarse-grained. Never mint an org per domain row to get a revoke.
 - **Events + audit** — every mutation emits a kernel-stamped event. Origin fields (tenant,
   scope, actor, time) are stamped by the kernel; your code cannot mislabel one.
 - **Migrations** — journaled per module, applied lazily per scope.

package/template/AGENTS.md

@@ -302,8 +302,9 @@ more than it holds), and transactional with the operation. Every later `ctx.chec
 the grant, so nothing else has to remember who may touch what.
 
 Neither alternative is this, so you can tell a real absence from this one: a `ctx.link`
-edge is **not revocable at all** — it is permanent — and org membership is revocable but
-coarse-grained — a whole org, not one record. Never mint an org per domain row, or a
+edge **can be moved but never removed** (`ctx.relink` replaces one parent with another), so
+it is not a revoke, and org membership is revocable but coarse-grained — a whole org, not
+one record. Never mint an org per domain row, or a
 membership table consulted by hand in every handler, to get a revoke. The two-line
 reference is the [todo demo](https://github.com/substrat-run/substrat/tree/main/demos/todo)
 (`src/module.ts`, `todo/share-list` and `todo/revoke-share`).