v1.15.0

1.15.0 (2026-09-20)

Added

• cli: migrate diff|plan|verify from source, tenant install-rls-policies|verify-rls-policies, and the tags the runtime learned (MIG-11, RLS-06) (#414) (f089c1f)
• migrate: ALTER COLUMN covers type, nullable, default and primary key on every engine, and SQLite rebuilds the table (#408) (69fcd74)
• migrate: the plan carries indexes, foreign keys and checks, and the executor emits them (QK-27) (#407) (ac813f9)
• model: UUID-shaped values get the engine's uuid type, a mapped key keeps its key, and models declare CHECKs (QK-29) (#409) (5a48aee)
• query: escaped LIKE surfaces, with the escape character declared per engine (QK-25) (#406) (596a75a)
• query: PaginateAfter — keyset pagination that seeks to the last row read and returns a resumable token (OPS-15) (#413) (17d9d75)
• tenancy: a Native router fails closed on GetClient and verifies the engine enforces before it serves (RLS-02, RLS-04) (#412) (2e3f011)
• types: raw slices and maps, Range[T] and net.IP in each engine's type, with PostgreSQL's operators known to the builder (#411) (2aff3f2)

Fixed

• deps: raise the sibling module floors to quark v1.14.0 (#415) (cdac4d5)
• migrate: precision/scale refines float columns only, and the decimal family is one to the diff (QK-28, QK-30) (#410) (8df310f)
• tenancy: tenant confinement survives a transaction, through both doors (QK-26) (#404) (1e201d6)