v0.14.0

Breaking changes

• scopeByColumn(table, table.column) now infers insert/update validation keys from the table property by default. Rules that previously scoped reads only will now reject cross-scope insert/update payloads unless validation is disabled explicitly with insertKey: false or updateKey: false.

Changed

• Common single-column rules no longer need insertKey; Drizzle table metadata maps workspaceId: text("workspace_id") to the workspaceId insert/update payload key automatically.