From e844f3351f8ce43f28a4ce5c667ee0268ebbdd70 Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" <41898282+github-actions[bot]@users.noreply.github.com> Date: Tue, 14 Jul 2026 01:55:24 +0000 Subject: [PATCH] chore: version packages --- .changeset/console-2f3ab55adcbd.md | 9 -- .changeset/console-6a741605b1e0.md | 9 -- .changeset/console-a44e7b6b28c6.md | 18 ---- .changeset/objectui-refresh-95835581.md | 15 --- .changeset/sharing-rule-form-pickers.md | 26 ----- .changeset/tenancy-aware-endpoint-bind.md | 21 ---- .../tenancy-mode-and-membership-lifecycle.md | 40 -------- .changeset/webhook-form-pickers.md | 21 ---- examples/app-crm/CHANGELOG.md | 8 ++ examples/app-crm/package.json | 2 +- examples/app-showcase/CHANGELOG.md | 12 +++ examples/app-showcase/package.json | 2 +- examples/app-todo/CHANGELOG.md | 15 +++ examples/app-todo/package.json | 2 +- examples/embed-objectql/CHANGELOG.md | 9 ++ examples/embed-objectql/package.json | 2 +- packages/adapters/hono/CHANGELOG.md | 9 ++ packages/adapters/hono/package.json | 2 +- packages/apps/account/CHANGELOG.md | 8 ++ packages/apps/account/package.json | 2 +- packages/apps/setup/CHANGELOG.md | 8 ++ packages/apps/setup/package.json | 2 +- packages/apps/studio/CHANGELOG.md | 8 ++ packages/apps/studio/package.json | 2 +- packages/cli/CHANGELOG.md | 95 +++++++++++++++++++ packages/cli/package.json | 2 +- packages/client-react/CHANGELOG.md | 9 ++ packages/client-react/package.json | 2 +- packages/client/CHANGELOG.md | 8 ++ packages/client/package.json | 2 +- packages/cloud-connection/CHANGELOG.md | 11 +++ packages/cloud-connection/package.json | 2 +- .../connectors/connector-mcp/CHANGELOG.md | 8 ++ .../connectors/connector-mcp/package.json | 2 +- .../connectors/connector-openapi/CHANGELOG.md | 8 ++ .../connectors/connector-openapi/package.json | 2 +- .../connectors/connector-rest/CHANGELOG.md | 8 ++ .../connectors/connector-rest/package.json | 2 +- .../connectors/connector-slack/CHANGELOG.md | 8 ++ .../connectors/connector-slack/package.json | 2 +- packages/console/CHANGELOG.md | 45 +++++++++ packages/console/package.json | 2 +- packages/core/CHANGELOG.md | 7 ++ packages/core/package.json | 2 +- packages/create-objectstack/CHANGELOG.md | 2 + packages/create-objectstack/package.json | 2 +- packages/dogfood/CHANGELOG.md | 15 +++ packages/dogfood/package.json | 2 +- packages/downstream-contract/CHANGELOG.md | 7 ++ packages/downstream-contract/package.json | 2 +- packages/formula/CHANGELOG.md | 7 ++ packages/formula/package.json | 2 +- packages/lint/CHANGELOG.md | 9 ++ packages/lint/package.json | 2 +- packages/mcp/CHANGELOG.md | 10 ++ packages/mcp/package.json | 2 +- packages/metadata-core/CHANGELOG.md | 7 ++ packages/metadata-core/package.json | 2 +- packages/metadata-fs/CHANGELOG.md | 6 ++ packages/metadata-fs/package.json | 2 +- packages/metadata-protocol/CHANGELOG.md | 12 +++ packages/metadata-protocol/package.json | 2 +- packages/metadata/CHANGELOG.md | 13 +++ packages/metadata/package.json | 2 +- packages/objectql/CHANGELOG.md | 13 +++ packages/objectql/package.json | 2 +- packages/observability/CHANGELOG.md | 7 ++ packages/observability/package.json | 2 +- packages/platform-objects/CHANGELOG.md | 8 ++ packages/platform-objects/package.json | 2 +- packages/plugins/driver-memory/CHANGELOG.md | 8 ++ packages/plugins/driver-memory/package.json | 2 +- packages/plugins/driver-mongodb/CHANGELOG.md | 8 ++ packages/plugins/driver-mongodb/package.json | 2 +- packages/plugins/driver-sql/CHANGELOG.md | 10 ++ packages/plugins/driver-sql/package.json | 2 +- .../plugins/driver-sqlite-wasm/CHANGELOG.md | 9 ++ .../plugins/driver-sqlite-wasm/package.json | 2 +- packages/plugins/embedder-openai/CHANGELOG.md | 7 ++ packages/plugins/embedder-openai/package.json | 2 +- .../plugins/knowledge-memory/CHANGELOG.md | 9 ++ .../plugins/knowledge-memory/package.json | 2 +- .../plugins/knowledge-ragflow/CHANGELOG.md | 9 ++ .../plugins/knowledge-ragflow/package.json | 2 +- .../plugins/plugin-approvals/CHANGELOG.md | 11 +++ .../plugins/plugin-approvals/package.json | 2 +- packages/plugins/plugin-audit/CHANGELOG.md | 9 ++ packages/plugins/plugin-audit/package.json | 2 +- packages/plugins/plugin-auth/CHANGELOG.md | 66 +++++++++++++ packages/plugins/plugin-auth/package.json | 2 +- packages/plugins/plugin-dev/CHANGELOG.md | 21 ++++ packages/plugins/plugin-dev/package.json | 2 +- packages/plugins/plugin-email/CHANGELOG.md | 10 ++ packages/plugins/plugin-email/package.json | 2 +- .../plugins/plugin-hono-server/CHANGELOG.md | 11 +++ .../plugins/plugin-hono-server/package.json | 2 +- packages/plugins/plugin-reports/CHANGELOG.md | 9 ++ packages/plugins/plugin-reports/package.json | 2 +- packages/plugins/plugin-security/CHANGELOG.md | 44 +++++++++ packages/plugins/plugin-security/package.json | 2 +- packages/plugins/plugin-sharing/CHANGELOG.md | 35 +++++++ packages/plugins/plugin-sharing/package.json | 2 +- packages/plugins/plugin-webhooks/CHANGELOG.md | 29 ++++++ packages/plugins/plugin-webhooks/package.json | 2 +- packages/rest/CHANGELOG.md | 12 +++ packages/rest/package.json | 2 +- packages/runtime/CHANGELOG.md | 24 +++++ packages/runtime/package.json | 2 +- packages/sdui-parser/CHANGELOG.md | 2 + packages/sdui-parser/package.json | 2 +- .../services/service-analytics/CHANGELOG.md | 8 ++ .../services/service-analytics/package.json | 2 +- .../services/service-automation/CHANGELOG.md | 9 ++ .../services/service-automation/package.json | 2 +- packages/services/service-cache/CHANGELOG.md | 9 ++ packages/services/service-cache/package.json | 2 +- .../service-cluster-redis/CHANGELOG.md | 8 ++ .../service-cluster-redis/package.json | 2 +- .../services/service-cluster/CHANGELOG.md | 8 ++ .../services/service-cluster/package.json | 2 +- .../services/service-datasource/CHANGELOG.md | 8 ++ .../services/service-datasource/package.json | 2 +- packages/services/service-i18n/CHANGELOG.md | 8 ++ packages/services/service-i18n/package.json | 2 +- packages/services/service-job/CHANGELOG.md | 9 ++ packages/services/service-job/package.json | 2 +- .../services/service-knowledge/CHANGELOG.md | 8 ++ .../services/service-knowledge/package.json | 2 +- .../services/service-messaging/CHANGELOG.md | 8 ++ .../services/service-messaging/package.json | 2 +- .../services/service-package/CHANGELOG.md | 8 ++ .../services/service-package/package.json | 2 +- packages/services/service-queue/CHANGELOG.md | 9 ++ packages/services/service-queue/package.json | 2 +- .../services/service-realtime/CHANGELOG.md | 9 ++ .../services/service-realtime/package.json | 2 +- .../services/service-settings/CHANGELOG.md | 11 +++ .../services/service-settings/package.json | 2 +- packages/services/service-sms/CHANGELOG.md | 8 ++ packages/services/service-sms/package.json | 2 +- .../services/service-storage/CHANGELOG.md | 10 ++ .../services/service-storage/package.json | 2 +- packages/spec/CHANGELOG.md | 26 +++++ packages/spec/package.json | 2 +- packages/triggers/trigger-api/CHANGELOG.md | 8 ++ packages/triggers/trigger-api/package.json | 2 +- .../trigger-record-change/CHANGELOG.md | 8 ++ .../trigger-record-change/package.json | 2 +- .../triggers/trigger-schedule/CHANGELOG.md | 8 ++ .../triggers/trigger-schedule/package.json | 2 +- packages/types/CHANGELOG.md | 43 +++++++++ packages/types/package.json | 2 +- packages/verify/CHANGELOG.md | 22 +++++ packages/verify/package.json | 2 +- packages/vscode-objectstack/CHANGELOG.md | 2 + packages/vscode-objectstack/package.json | 2 +- 156 files changed, 1072 insertions(+), 233 deletions(-) delete mode 100644 .changeset/console-2f3ab55adcbd.md delete mode 100644 .changeset/console-6a741605b1e0.md delete mode 100644 .changeset/console-a44e7b6b28c6.md delete mode 100644 .changeset/objectui-refresh-95835581.md delete mode 100644 .changeset/sharing-rule-form-pickers.md delete mode 100644 .changeset/tenancy-aware-endpoint-bind.md delete mode 100644 .changeset/tenancy-mode-and-membership-lifecycle.md delete mode 100644 .changeset/webhook-form-pickers.md diff --git a/.changeset/console-2f3ab55adcbd.md b/.changeset/console-2f3ab55adcbd.md deleted file mode 100644 index 1d6b59bf9..000000000 --- a/.changeset/console-2f3ab55adcbd.md +++ /dev/null @@ -1,9 +0,0 @@ ---- -"@objectstack/console": patch ---- - -Console (objectui) refreshed to `2f3ab55adcbd`. Frontend changes in this range: - -- Create plenty-cities-worry.md - -objectui range: `a44e7b6b28c6...2f3ab55adcbd` diff --git a/.changeset/console-6a741605b1e0.md b/.changeset/console-6a741605b1e0.md deleted file mode 100644 index b3e2afde6..000000000 --- a/.changeset/console-6a741605b1e0.md +++ /dev/null @@ -1,9 +0,0 @@ ---- -"@objectstack/console": minor ---- - -Console (objectui) refreshed to `6a741605b1e0`. Frontend changes in this range: - -- feat(fields): pickers for the sharing rule form (object / criteria / recipient) (#2421) - -objectui range: `e7bebe929349...6a741605b1e0` diff --git a/.changeset/console-a44e7b6b28c6.md b/.changeset/console-a44e7b6b28c6.md deleted file mode 100644 index 2adddd1e4..000000000 --- a/.changeset/console-a44e7b6b28c6.md +++ /dev/null @@ -1,18 +0,0 @@ ---- -"@objectstack/console": minor ---- - -Console (objectui) refreshed to `a44e7b6b28c6`. Frontend changes in this range: - -- fix(form): honor field widget hint on the section-layout path -- feat(plugin-gantt): 写后回读服务端重算字段 + 工具栏手动刷新按钮 (#2436 第 6/7 项) (#2442) -- fix(plugin-detail,plugin-gantt): 记录抽屉尊重行级锁定——能力由 handler 是否传入决定 (#2436 第 5 项) (#2441) -- feat(console-ai): ask→build handoff carries conversation context + live verification (ADR-0057 P4) (#2444) -- feat(console-ai): explicit "Open in Builder →" ask→build handoff (ADR-0057 P4) (#2439) -- feat(plugin-gantt): 逐任务预警描边 borderColorField(超期红/临期橙) (#2440) -- fix(plugin-gantt): 快速筛选树感知——命中任务保留全部祖先链 (#2438) -- feat(plugin-gantt): 连线校验——锁定行/分组行落点拒绝、全量成环检测、onBeforeDependencyCreate 否决钩子 (#2437) -- feat(plugin-gantt): api 数据源支持读取 + 全部回写（改期/依赖/删除/内联编辑） (#2423) -- fix(console-ai): preserve ?package= across the /ai URL mirror (ADR-0057 P1 hardening) (#2422) - -objectui range: `6a741605b1e0...a44e7b6b28c6` diff --git a/.changeset/objectui-refresh-95835581.md b/.changeset/objectui-refresh-95835581.md deleted file mode 100644 index 10d3b2b38..000000000 --- a/.changeset/objectui-refresh-95835581.md +++ /dev/null @@ -1,15 +0,0 @@ ---- -"@objectstack/console": minor ---- - -chore(console): refresh vendored `@object-ui/console` SPA to objectui@95835581 - -Bumps the pinned `.objectui-sha` from `2f3ab55a` to `95835581` (11 commits) and rebuilds the prebuilt Console SPA shipped in `@objectstack/console`. - -Notable upstream changes pulled in: - -- feat(console-ai): ChatDock — right-docked AI rail, now DEFAULT ON with the flag as a kill-switch (ADR-0057 P3 go-live), FAB launcher, `/ai` maximized dock + Studio right-dock reflow, bind-on-create conversations -- feat(plugin-gantt): #2460 interactive batches — row single-click locate / double-click detail, day-snap drag, layout with tray + filters, mobile QR code, lock hints -- feat(plugin-gantt): summaryExtent 'self' + tooltip fallback formatting when no schema -- fix(plugin-gantt): delete-dialog i18n, dependency candidate search box, exclude group/locked from summary -- fix(auth): login silent-failure UX — SSO pending states, redirect-URL contract, OAuth callback error banner diff --git a/.changeset/sharing-rule-form-pickers.md b/.changeset/sharing-rule-form-pickers.md deleted file mode 100644 index fcac21469..000000000 --- a/.changeset/sharing-rule-form-pickers.md +++ /dev/null @@ -1,26 +0,0 @@ ---- -"@objectstack/spec": minor -"@objectstack/plugin-sharing": minor ---- - -Field metadata gains a `widget` override (`FieldSchema.widget`) — names a -registered form component (resolved as `field:`) to render a field with, -overriding the default widget derived from `type` and degrading back to it when -unregistered. The generic object form already honored this hint (objectui -`ObjectForm`/`form.tsx` resolve `widget || type`); this promotes it to a -first-class, liveness-classified authoring property so any config object can ask -for a picker instead of a raw input. - -`sys_sharing_rule` uses it so the Setup **New Sharing Rule** form is -pick-not-type instead of asking admins to hand-enter machine data: - -- `object_name` → `object-ref` (choose a registered object by name) -- `criteria_json` → `filter-condition` (visual criteria builder scoped to the - chosen object's fields; `dependsOn: object_name`) -- `recipient_id` → `recipient-picker` (record picker whose target follows - `recipient_type`; `dependsOn: recipient_type`) - -Also removes the `queue` recipient type: it is declared-but-unenforced (the -evaluator expands no users for it), so offering it authored a silently-inert rule -(ADR-0078). i18n bundles regenerated. Requires the matching objectui widgets; the -fields degrade to their `type` renderer where those aren't loaded. diff --git a/.changeset/tenancy-aware-endpoint-bind.md b/.changeset/tenancy-aware-endpoint-bind.md deleted file mode 100644 index da2dbec02..000000000 --- a/.changeset/tenancy-aware-endpoint-bind.md +++ /dev/null @@ -1,21 +0,0 @@ ---- -"@objectstack/plugin-auth": patch ---- - -fix(auth): create-user membership bind is tenancy-mode-aware; export the ADR-0093 host API - -Multi-org runtime verification (real `@objectstack/organizations` linked into a -live stack) caught a gap in the #2884 endpoint bind: it resolved its target org -via `resolveDefaultOrgId` (slug='default' first), so in a multi-org deployment — -where the bootstrap default org coexists with real tenant orgs — `/admin/create-user` -would have bound the new user into the default org, violating ADR-0093 D3 -("the framework never guesses in multi mode"). The bind now consults the -`tenancy` service (`getTenancy` on the endpoint deps): single mode → default org, -multi mode → no bind. Verified live: multi-org create-user and sign-up both leave -the new user member-less (invites / host hooks own membership there); single-org -behavior unchanged. - -Also exports `reconcile-membership` and `tenancy-service` from the package index -as the public host API, and adds dogfood integration tests driving the REAL -better-auth pipeline: sign-up membership via the reconciler hook alone, backfill -bind + idempotency, invite-only refusal, and the yield-to-host-membership rule. diff --git a/.changeset/tenancy-mode-and-membership-lifecycle.md b/.changeset/tenancy-mode-and-membership-lifecycle.md deleted file mode 100644 index 1e9212d60..000000000 --- a/.changeset/tenancy-mode-and-membership-lifecycle.md +++ /dev/null @@ -1,40 +0,0 @@ ---- -"@objectstack/types": minor -"@objectstack/plugin-auth": minor -"@objectstack/plugin-security": patch -"@objectstack/cli": minor ---- - -Tenancy mode as a first-class capability + a single owner for the user→membership -lifecycle (ADR-0093, Phases 1–3). - -**Tenancy service (`@objectstack/types`, `@objectstack/plugin-auth`).** plugin-auth -registers a `tenancy` service — the single source of truth for tenancy mode -(`mode`, `isolationActive`, `requested`, `degraded`, `defaultOrgId()`). It derives -`isolationActive` from the presence of the `org-scoping` service, so the -enterprise `@objectstack/organizations` package lights it up with no change. -SecurityPlugin's RLS-strip gate and `/auth/config` (`features.multiOrgEnabled`, -new `features.degradedTenancy`) now consume it instead of re-deriving the fact. - -**Fail-fast on degraded tenancy (`@objectstack/cli`, ADR-0093 D5).** -`OS_MULTI_ORG_ENABLED=true` without a working `@objectstack/organizations` now -**refuses to boot** — a deployment that requested tenant isolation must not serve -traffic without it (tenant RLS would be silently stripped). Escape hatch: -`OS_ALLOW_DEGRADED_TENANCY=1` boots in an explicitly branded degraded state -(`features.degradedTenancy`). **This may halt upgrades for deployments that were -silently degraded — intentionally; install the enterprise package or set the -escape hatch.** - -**Membership reconciler (`@objectstack/plugin-auth`, ADR-0093 D1–D3, D6).** A -single reconciler composed into better-auth's `user.create.after` hook owns the -"every new user gets a membership" invariant across all creation paths (signup, -admin create-user, import, SSO JIT). It yields to any existing membership (host -hooks win), honors a new `membershipPolicy: 'auto' | 'invite-only'` auth option -(default `auto`), and binds only to an unambiguous target org (single-org default; -multi-org binds nothing). A bounded, idempotent `kernel:ready` backfill covers -pre-existing member-less users in single-org/auto deployments -(`OS_SKIP_MEMBERSHIP_BACKFILL=1` to opt out). The endpoint-level create-user bind -from #2882 now delegates to this shared reconciler. - -New env vars: `OS_ALLOW_DEGRADED_TENANCY`, `OS_SKIP_MEMBERSHIP_BACKFILL`. New docs: -Deployment → Tenancy Modes & Membership. diff --git a/.changeset/webhook-form-pickers.md b/.changeset/webhook-form-pickers.md deleted file mode 100644 index 4c002caa0..000000000 --- a/.changeset/webhook-form-pickers.md +++ /dev/null @@ -1,21 +0,0 @@ ---- -"@objectstack/plugin-webhooks": minor ---- - -Webhook form: pick, don't type. The `sys_webhook` create/edit form made admins -hand-type machine data in three fields; they're now proper controls (extends the -`sys_sharing_rule` pass): - -- `method` — free text → **select** (`GET`/`POST`/`PUT`/`PATCH`/`DELETE`). Option - values are lowercased by `Field.select`; the auto-enqueuer now upper-cases the - resolved method before delivery, so legacy `'POST'` rows and the new lowercase - values both normalise to a canonical HTTP method. -- `triggers` — hand-typed comma-separated string → **multi-select** - (`create`/`update`/`delete`/`undelete`/`api`). Stored as an array; the - auto-enqueuer's `parseRow` now accepts array, JSON-encoded-array-string, and - the legacy comma-separated forms, so existing subscriptions keep firing. -- `object_name` — free text → the **`object-ref`** object picker (same widget as - `sys_sharing_rule`; degrades to a text input where the widget isn't loaded). - -Backward compatible: no data migration required. Added tests covering the array -and JSON-string trigger shapes. diff --git a/examples/app-crm/CHANGELOG.md b/examples/app-crm/CHANGELOG.md index 3a9eb2c15..dbe9234d5 100644 --- a/examples/app-crm/CHANGELOG.md +++ b/examples/app-crm/CHANGELOG.md @@ -1,5 +1,13 @@ # @objectstack/example-crm +## 4.0.85 + +### Patch Changes + +- Updated dependencies [d6a72eb] + - @objectstack/spec@14.7.0 + - @objectstack/runtime@14.7.0 + ## 4.0.84 ### Patch Changes diff --git a/examples/app-crm/package.json b/examples/app-crm/package.json index 3f86bc774..89b080e47 100644 --- a/examples/app-crm/package.json +++ b/examples/app-crm/package.json @@ -1,6 +1,6 @@ { "name": "@objectstack/example-crm", - "version": "4.0.84", + "version": "4.0.85", "description": "Minimal CRM example — a smoke-test workspace that exercises the metadata loading pipeline (objects → views → app → dashboard → hook → flow → seed). For a full-featured enterprise CRM see https://github.com/objectstack-ai/hotcrm.", "license": "Apache-2.0", "private": true, diff --git a/examples/app-showcase/CHANGELOG.md b/examples/app-showcase/CHANGELOG.md index fa6d0385e..d12842193 100644 --- a/examples/app-showcase/CHANGELOG.md +++ b/examples/app-showcase/CHANGELOG.md @@ -1,5 +1,17 @@ # @objectstack/example-showcase +## 0.3.7 + +### Patch Changes + +- Updated dependencies [d6a72eb] + - @objectstack/spec@14.7.0 + - @objectstack/cloud-connection@14.7.0 + - @objectstack/connector-rest@14.7.0 + - @objectstack/connector-slack@14.7.0 + - @objectstack/driver-sql@14.7.0 + - @objectstack/runtime@14.7.0 + ## 0.3.6 ### Patch Changes diff --git a/examples/app-showcase/package.json b/examples/app-showcase/package.json index 164626a03..2686ecdae 100644 --- a/examples/app-showcase/package.json +++ b/examples/app-showcase/package.json @@ -1,6 +1,6 @@ { "name": "@objectstack/example-showcase", - "version": "0.3.6", + "version": "0.3.7", "description": "Kitchen-sink showcase workspace — exercises every metadata type, every view type, every chart type, and the major end-to-end capability chains (security, automation, analytics). Built for demonstration, debugging, and coverage-driven verification.", "license": "Apache-2.0", "private": true, diff --git a/examples/app-todo/CHANGELOG.md b/examples/app-todo/CHANGELOG.md index 5695ad202..f2d12c976 100644 --- a/examples/app-todo/CHANGELOG.md +++ b/examples/app-todo/CHANGELOG.md @@ -1,5 +1,20 @@ # @objectstack/example-todo +## 4.0.85 + +### Patch Changes + +- Updated dependencies [d6a72eb] + - @objectstack/spec@14.7.0 + - @objectstack/client@14.7.0 + - @objectstack/mcp@14.7.0 + - @objectstack/metadata@14.7.0 + - @objectstack/objectql@14.7.0 + - @objectstack/driver-sqlite-wasm@14.7.0 + - @objectstack/knowledge-memory@14.7.0 + - @objectstack/runtime@14.7.0 + - @objectstack/service-knowledge@14.7.0 + ## 4.0.84 ### Patch Changes diff --git a/examples/app-todo/package.json b/examples/app-todo/package.json index c43bc2d82..10a5151d8 100644 --- a/examples/app-todo/package.json +++ b/examples/app-todo/package.json @@ -1,6 +1,6 @@ { "name": "@objectstack/example-todo", - "version": "4.0.84", + "version": "4.0.85", "description": "Example Todo App using ObjectStack Protocol", "license": "Apache-2.0", "private": true, diff --git a/examples/embed-objectql/CHANGELOG.md b/examples/embed-objectql/CHANGELOG.md index 8cbc86dfa..7063b3734 100644 --- a/examples/embed-objectql/CHANGELOG.md +++ b/examples/embed-objectql/CHANGELOG.md @@ -1,5 +1,14 @@ # @objectstack/example-embed-objectql +## 0.0.25 + +### Patch Changes + +- Updated dependencies [d6a72eb] + - @objectstack/spec@14.7.0 + - @objectstack/objectql@14.7.0 + - @objectstack/driver-memory@14.7.0 + ## 0.0.24 ### Patch Changes diff --git a/examples/embed-objectql/package.json b/examples/embed-objectql/package.json index d2c52ff24..45830b460 100644 --- a/examples/embed-objectql/package.json +++ b/examples/embed-objectql/package.json @@ -1,6 +1,6 @@ { "name": "@objectstack/example-embed-objectql", - "version": "0.0.24", + "version": "0.0.25", "private": true, "description": "Embed the ObjectQL engine as a plain library via @objectstack/objectql/core — no kernel, no plugins, no metadata protocol (ADR-0076).", "type": "module", diff --git a/packages/adapters/hono/CHANGELOG.md b/packages/adapters/hono/CHANGELOG.md index 92d9632ce..7c39cf2b0 100644 --- a/packages/adapters/hono/CHANGELOG.md +++ b/packages/adapters/hono/CHANGELOG.md @@ -1,5 +1,14 @@ # @objectstack/hono +## 14.7.0 + +### Patch Changes + +- Updated dependencies [824a395] + - @objectstack/types@14.7.0 + - @objectstack/plugin-hono-server@14.7.0 + - @objectstack/runtime@14.7.0 + ## 14.6.0 ### Patch Changes diff --git a/packages/adapters/hono/package.json b/packages/adapters/hono/package.json index 14865c468..1ce679419 100644 --- a/packages/adapters/hono/package.json +++ b/packages/adapters/hono/package.json @@ -1,6 +1,6 @@ { "name": "@objectstack/hono", - "version": "14.6.0", + "version": "14.7.0", "license": "Apache-2.0", "main": "dist/index.js", "types": "dist/index.d.ts", diff --git a/packages/apps/account/CHANGELOG.md b/packages/apps/account/CHANGELOG.md index 9db511b17..b89af7d27 100644 --- a/packages/apps/account/CHANGELOG.md +++ b/packages/apps/account/CHANGELOG.md @@ -1,5 +1,13 @@ # @objectstack/account +## 14.7.0 + +### Patch Changes + +- Updated dependencies [d6a72eb] + - @objectstack/spec@14.7.0 + - @objectstack/platform-objects@14.7.0 + ## 14.6.0 ### Patch Changes diff --git a/packages/apps/account/package.json b/packages/apps/account/package.json index 2169749f4..091af1bde 100644 --- a/packages/apps/account/package.json +++ b/packages/apps/account/package.json @@ -1,6 +1,6 @@ { "name": "@objectstack/account", - "version": "14.6.0", + "version": "14.7.0", "license": "Apache-2.0", "description": "ObjectStack Account — the end-user account/self-service console app, packaged as its own ObjectStack app package (ADR-0048: one app per package).", "main": "dist/index.js", diff --git a/packages/apps/setup/CHANGELOG.md b/packages/apps/setup/CHANGELOG.md index 1aea7ec2c..35e0fe70f 100644 --- a/packages/apps/setup/CHANGELOG.md +++ b/packages/apps/setup/CHANGELOG.md @@ -1,5 +1,13 @@ # @objectstack/setup +## 14.7.0 + +### Patch Changes + +- Updated dependencies [d6a72eb] + - @objectstack/spec@14.7.0 + - @objectstack/platform-objects@14.7.0 + ## 14.6.0 ### Patch Changes diff --git a/packages/apps/setup/package.json b/packages/apps/setup/package.json index 4aa9d3c7e..f45ea58e3 100644 --- a/packages/apps/setup/package.json +++ b/packages/apps/setup/package.json @@ -1,6 +1,6 @@ { "name": "@objectstack/setup", - "version": "14.6.0", + "version": "14.7.0", "license": "Apache-2.0", "description": "ObjectStack Setup — the platform administration app, packaged as its own ObjectStack app package (ADR-0048: one app per package).", "main": "dist/index.js", diff --git a/packages/apps/studio/CHANGELOG.md b/packages/apps/studio/CHANGELOG.md index eed6cc662..5cccae45e 100644 --- a/packages/apps/studio/CHANGELOG.md +++ b/packages/apps/studio/CHANGELOG.md @@ -1,5 +1,13 @@ # @objectstack/studio +## 14.7.0 + +### Patch Changes + +- Updated dependencies [d6a72eb] + - @objectstack/spec@14.7.0 + - @objectstack/platform-objects@14.7.0 + ## 14.6.0 ### Patch Changes diff --git a/packages/apps/studio/package.json b/packages/apps/studio/package.json index cb97b18f5..f76c16c27 100644 --- a/packages/apps/studio/package.json +++ b/packages/apps/studio/package.json @@ -1,6 +1,6 @@ { "name": "@objectstack/studio", - "version": "14.6.0", + "version": "14.7.0", "license": "Apache-2.0", "description": "ObjectStack Studio — the metadata builder app, packaged as its own ObjectStack app package (ADR-0048: one app per package).", "main": "dist/index.js", diff --git a/packages/cli/CHANGELOG.md b/packages/cli/CHANGELOG.md index 5038d1dc6..65cb7b79b 100644 --- a/packages/cli/CHANGELOG.md +++ b/packages/cli/CHANGELOG.md @@ -1,5 +1,100 @@ # @objectstack/cli +## 14.7.0 + +### Minor Changes + +- 824a395: Tenancy mode as a first-class capability + a single owner for the user→membership + lifecycle (ADR-0093, Phases 1–3). + + **Tenancy service (`@objectstack/types`, `@objectstack/plugin-auth`).** plugin-auth + registers a `tenancy` service — the single source of truth for tenancy mode + (`mode`, `isolationActive`, `requested`, `degraded`, `defaultOrgId()`). It derives + `isolationActive` from the presence of the `org-scoping` service, so the + enterprise `@objectstack/organizations` package lights it up with no change. + SecurityPlugin's RLS-strip gate and `/auth/config` (`features.multiOrgEnabled`, + new `features.degradedTenancy`) now consume it instead of re-deriving the fact. + + **Fail-fast on degraded tenancy (`@objectstack/cli`, ADR-0093 D5).** + `OS_MULTI_ORG_ENABLED=true` without a working `@objectstack/organizations` now + **refuses to boot** — a deployment that requested tenant isolation must not serve + traffic without it (tenant RLS would be silently stripped). Escape hatch: + `OS_ALLOW_DEGRADED_TENANCY=1` boots in an explicitly branded degraded state + (`features.degradedTenancy`). **This may halt upgrades for deployments that were + silently degraded — intentionally; install the enterprise package or set the + escape hatch.** + + **Membership reconciler (`@objectstack/plugin-auth`, ADR-0093 D1–D3, D6).** A + single reconciler composed into better-auth's `user.create.after` hook owns the + "every new user gets a membership" invariant across all creation paths (signup, + admin create-user, import, SSO JIT). It yields to any existing membership (host + hooks win), honors a new `membershipPolicy: 'auto' | 'invite-only'` auth option + (default `auto`), and binds only to an unambiguous target org (single-org default; + multi-org binds nothing). A bounded, idempotent `kernel:ready` backfill covers + pre-existing member-less users in single-org/auto deployments + (`OS_SKIP_MEMBERSHIP_BACKFILL=1` to opt out). The endpoint-level create-user bind + from #2882 now delegates to this shared reconciler. + + New env vars: `OS_ALLOW_DEGRADED_TENANCY`, `OS_SKIP_MEMBERSHIP_BACKFILL`. New docs: + Deployment → Tenancy Modes & Membership. + +### Patch Changes + +- Updated dependencies [9f03fdd] +- Updated dependencies [f71339c] +- Updated dependencies [35f6c61] +- Updated dependencies [956208e] +- Updated dependencies [d6a72eb] +- Updated dependencies [da5e686] +- Updated dependencies [824a395] +- Updated dependencies [f344ee1] + - @objectstack/console@14.7.0 + - @objectstack/spec@14.7.0 + - @objectstack/plugin-sharing@14.7.0 + - @objectstack/plugin-auth@14.7.0 + - @objectstack/types@14.7.0 + - @objectstack/plugin-security@14.7.0 + - @objectstack/plugin-webhooks@14.7.0 + - @objectstack/account@14.7.0 + - @objectstack/setup@14.7.0 + - @objectstack/client@14.7.0 + - @objectstack/cloud-connection@14.7.0 + - @objectstack/core@14.7.0 + - @objectstack/formula@14.7.0 + - @objectstack/lint@14.7.0 + - @objectstack/mcp@14.7.0 + - @objectstack/metadata@14.7.0 + - @objectstack/objectql@14.7.0 + - @objectstack/observability@14.7.0 + - @objectstack/platform-objects@14.7.0 + - @objectstack/driver-memory@14.7.0 + - @objectstack/driver-mongodb@14.7.0 + - @objectstack/driver-sql@14.7.0 + - @objectstack/driver-sqlite-wasm@14.7.0 + - @objectstack/plugin-approvals@14.7.0 + - @objectstack/plugin-audit@14.7.0 + - @objectstack/plugin-email@14.7.0 + - @objectstack/plugin-hono-server@14.7.0 + - @objectstack/plugin-reports@14.7.0 + - @objectstack/rest@14.7.0 + - @objectstack/runtime@14.7.0 + - @objectstack/service-analytics@14.7.0 + - @objectstack/service-automation@14.7.0 + - @objectstack/service-cache@14.7.0 + - @objectstack/service-datasource@14.7.0 + - @objectstack/service-job@14.7.0 + - @objectstack/service-messaging@14.7.0 + - @objectstack/service-package@14.7.0 + - @objectstack/service-queue@14.7.0 + - @objectstack/service-realtime@14.7.0 + - @objectstack/service-settings@14.7.0 + - @objectstack/service-sms@14.7.0 + - @objectstack/service-storage@14.7.0 + - @objectstack/trigger-api@14.7.0 + - @objectstack/trigger-record-change@14.7.0 + - @objectstack/trigger-schedule@14.7.0 + - @objectstack/verify@14.7.0 + ## 14.6.0 ### Patch Changes diff --git a/packages/cli/package.json b/packages/cli/package.json index 81630d328..ed66d667d 100644 --- a/packages/cli/package.json +++ b/packages/cli/package.json @@ -1,6 +1,6 @@ { "name": "@objectstack/cli", - "version": "14.6.0", + "version": "14.7.0", "description": "Command Line Interface for ObjectStack Protocol", "main": "dist/index.js", "types": "dist/index.d.ts", diff --git a/packages/client-react/CHANGELOG.md b/packages/client-react/CHANGELOG.md index dc2ae546e..28259aa99 100644 --- a/packages/client-react/CHANGELOG.md +++ b/packages/client-react/CHANGELOG.md @@ -1,5 +1,14 @@ # @objectstack/client-react +## 14.7.0 + +### Patch Changes + +- Updated dependencies [d6a72eb] + - @objectstack/spec@14.7.0 + - @objectstack/client@14.7.0 + - @objectstack/core@14.7.0 + ## 14.6.0 ### Patch Changes diff --git a/packages/client-react/package.json b/packages/client-react/package.json index 221c62efd..a35282bd1 100644 --- a/packages/client-react/package.json +++ b/packages/client-react/package.json @@ -1,6 +1,6 @@ { "name": "@objectstack/client-react", - "version": "14.6.0", + "version": "14.7.0", "license": "Apache-2.0", "description": "React hooks for ObjectStack Client SDK", "main": "dist/index.js", diff --git a/packages/client/CHANGELOG.md b/packages/client/CHANGELOG.md index 37861e904..cf1c1c3d9 100644 --- a/packages/client/CHANGELOG.md +++ b/packages/client/CHANGELOG.md @@ -1,5 +1,13 @@ # @objectstack/client +## 14.7.0 + +### Patch Changes + +- Updated dependencies [d6a72eb] + - @objectstack/spec@14.7.0 + - @objectstack/core@14.7.0 + ## 14.6.0 ### Patch Changes diff --git a/packages/client/package.json b/packages/client/package.json index 6b49fe44d..e9686ab60 100644 --- a/packages/client/package.json +++ b/packages/client/package.json @@ -1,6 +1,6 @@ { "name": "@objectstack/client", - "version": "14.6.0", + "version": "14.7.0", "license": "Apache-2.0", "description": "Official Client SDK for ObjectStack Protocol", "main": "dist/index.js", diff --git a/packages/cloud-connection/CHANGELOG.md b/packages/cloud-connection/CHANGELOG.md index 0153669e5..9bd641f30 100644 --- a/packages/cloud-connection/CHANGELOG.md +++ b/packages/cloud-connection/CHANGELOG.md @@ -1,5 +1,16 @@ # @objectstack/cloud-connection +## 14.7.0 + +### Patch Changes + +- Updated dependencies [d6a72eb] +- Updated dependencies [824a395] + - @objectstack/spec@14.7.0 + - @objectstack/types@14.7.0 + - @objectstack/core@14.7.0 + - @objectstack/runtime@14.7.0 + ## 14.6.0 ### Patch Changes diff --git a/packages/cloud-connection/package.json b/packages/cloud-connection/package.json index 47b82d02d..9f1d70929 100644 --- a/packages/cloud-connection/package.json +++ b/packages/cloud-connection/package.json @@ -1,6 +1,6 @@ { "name": "@objectstack/cloud-connection", - "version": "14.6.0", + "version": "14.7.0", "license": "Apache-2.0", "description": "Runtime-side client for an ObjectStack cloud control plane — marketplace browse proxy, install-local, device-code binding, org catalog and installed views, and the /api/v1/runtime/config discovery endpoint. Open mechanism (ADR-0008): the hub service, plan policy, and entitlements stay server-side.", "type": "module", diff --git a/packages/connectors/connector-mcp/CHANGELOG.md b/packages/connectors/connector-mcp/CHANGELOG.md index 8201ca094..c1d4df179 100644 --- a/packages/connectors/connector-mcp/CHANGELOG.md +++ b/packages/connectors/connector-mcp/CHANGELOG.md @@ -1,5 +1,13 @@ # @objectstack/connector-mcp +## 14.7.0 + +### Patch Changes + +- Updated dependencies [d6a72eb] + - @objectstack/spec@14.7.0 + - @objectstack/core@14.7.0 + ## 14.6.0 ### Patch Changes diff --git a/packages/connectors/connector-mcp/package.json b/packages/connectors/connector-mcp/package.json index a3bb12ffb..fe0a74c16 100644 --- a/packages/connectors/connector-mcp/package.json +++ b/packages/connectors/connector-mcp/package.json @@ -1,6 +1,6 @@ { "name": "@objectstack/connector-mcp", - "version": "14.6.0", + "version": "14.7.0", "license": "Apache-2.0", "description": "Model Context Protocol (MCP) connector for ObjectStack — a generic adapter that turns any MCP server's tools into a connector's actions on the automation engine's connector registry (ADR-0024).", "main": "dist/index.js", diff --git a/packages/connectors/connector-openapi/CHANGELOG.md b/packages/connectors/connector-openapi/CHANGELOG.md index fd845b9f3..e929e2198 100644 --- a/packages/connectors/connector-openapi/CHANGELOG.md +++ b/packages/connectors/connector-openapi/CHANGELOG.md @@ -1,5 +1,13 @@ # @objectstack/connector-openapi +## 14.7.0 + +### Patch Changes + +- Updated dependencies [d6a72eb] + - @objectstack/spec@14.7.0 + - @objectstack/core@14.7.0 + ## 14.6.0 ### Patch Changes diff --git a/packages/connectors/connector-openapi/package.json b/packages/connectors/connector-openapi/package.json index 24cec7906..b211f7b49 100644 --- a/packages/connectors/connector-openapi/package.json +++ b/packages/connectors/connector-openapi/package.json @@ -1,6 +1,6 @@ { "name": "@objectstack/connector-openapi", - "version": "14.6.0", + "version": "14.7.0", "license": "Apache-2.0", "description": "OpenAPI 3.x connector generator for ObjectStack — turns a declarative OpenAPI document into connector actions on the automation engine's registry, with a self-contained static-auth HTTP transport (ADR-0023).", "main": "dist/index.js", diff --git a/packages/connectors/connector-rest/CHANGELOG.md b/packages/connectors/connector-rest/CHANGELOG.md index 1a6f09cca..d38df55f5 100644 --- a/packages/connectors/connector-rest/CHANGELOG.md +++ b/packages/connectors/connector-rest/CHANGELOG.md @@ -1,5 +1,13 @@ # @objectstack/connector-rest +## 14.7.0 + +### Patch Changes + +- Updated dependencies [d6a72eb] + - @objectstack/spec@14.7.0 + - @objectstack/core@14.7.0 + ## 14.6.0 ### Patch Changes diff --git a/packages/connectors/connector-rest/package.json b/packages/connectors/connector-rest/package.json index 0a11fb77f..a44a6243b 100644 --- a/packages/connectors/connector-rest/package.json +++ b/packages/connectors/connector-rest/package.json @@ -1,6 +1,6 @@ { "name": "@objectstack/connector-rest", - "version": "14.6.0", + "version": "14.7.0", "license": "Apache-2.0", "description": "Generic REST connector for ObjectStack — the reference concrete connector that registers a `request` action on the automation engine's connector registry (ADR-0018 §Addendum).", "main": "dist/index.js", diff --git a/packages/connectors/connector-slack/CHANGELOG.md b/packages/connectors/connector-slack/CHANGELOG.md index 9d009dd09..f52c9c614 100644 --- a/packages/connectors/connector-slack/CHANGELOG.md +++ b/packages/connectors/connector-slack/CHANGELOG.md @@ -1,5 +1,13 @@ # @objectstack/connector-slack +## 14.7.0 + +### Patch Changes + +- Updated dependencies [d6a72eb] + - @objectstack/spec@14.7.0 + - @objectstack/core@14.7.0 + ## 14.6.0 ### Patch Changes diff --git a/packages/connectors/connector-slack/package.json b/packages/connectors/connector-slack/package.json index d27f5afcd..05f7a44ee 100644 --- a/packages/connectors/connector-slack/package.json +++ b/packages/connectors/connector-slack/package.json @@ -1,6 +1,6 @@ { "name": "@objectstack/connector-slack", - "version": "14.6.0", + "version": "14.7.0", "license": "Apache-2.0", "description": "Slack Web API connector for ObjectStack — registers `chat.postMessage` / `chat.update` / `call` actions on the automation engine's connector registry (ADR-0018 §Addendum, ADR-0022).", "main": "dist/index.js", diff --git a/packages/console/CHANGELOG.md b/packages/console/CHANGELOG.md index 6776e2b6f..56dc031fa 100644 --- a/packages/console/CHANGELOG.md +++ b/packages/console/CHANGELOG.md @@ -1,5 +1,50 @@ # @objectstack/console +## 14.7.0 + +### Minor Changes + +- f71339c: Console (objectui) refreshed to `6a741605b1e0`. Frontend changes in this range: + + - feat(fields): pickers for the sharing rule form (object / criteria / recipient) (#2421) + + objectui range: `e7bebe929349...6a741605b1e0` + +- 35f6c61: Console (objectui) refreshed to `a44e7b6b28c6`. Frontend changes in this range: + + - fix(form): honor field widget hint on the section-layout path + - feat(plugin-gantt): 写后回读服务端重算字段 + 工具栏手动刷新按钮 (#2436 第 6/7 项) (#2442) + - fix(plugin-detail,plugin-gantt): 记录抽屉尊重行级锁定——能力由 handler 是否传入决定 (#2436 第 5 项) (#2441) + - feat(console-ai): ask→build handoff carries conversation context + live verification (ADR-0057 P4) (#2444) + - feat(console-ai): explicit "Open in Builder →" ask→build handoff (ADR-0057 P4) (#2439) + - feat(plugin-gantt): 逐任务预警描边 borderColorField(超期红/临期橙) (#2440) + - fix(plugin-gantt): 快速筛选树感知——命中任务保留全部祖先链 (#2438) + - feat(plugin-gantt): 连线校验——锁定行/分组行落点拒绝、全量成环检测、onBeforeDependencyCreate 否决钩子 (#2437) + - feat(plugin-gantt): api 数据源支持读取 + 全部回写（改期/依赖/删除/内联编辑） (#2423) + - fix(console-ai): preserve ?package= across the /ai URL mirror (ADR-0057 P1 hardening) (#2422) + + objectui range: `6a741605b1e0...a44e7b6b28c6` + +- 956208e: chore(console): refresh vendored `@object-ui/console` SPA to objectui@95835581 + + Bumps the pinned `.objectui-sha` from `2f3ab55a` to `95835581` (11 commits) and rebuilds the prebuilt Console SPA shipped in `@objectstack/console`. + + Notable upstream changes pulled in: + + - feat(console-ai): ChatDock — right-docked AI rail, now DEFAULT ON with the flag as a kill-switch (ADR-0057 P3 go-live), FAB launcher, `/ai` maximized dock + Studio right-dock reflow, bind-on-create conversations + - feat(plugin-gantt): #2460 interactive batches — row single-click locate / double-click detail, day-snap drag, layout with tray + filters, mobile QR code, lock hints + - feat(plugin-gantt): summaryExtent 'self' + tooltip fallback formatting when no schema + - fix(plugin-gantt): delete-dialog i18n, dependency candidate search box, exclude group/locked from summary + - fix(auth): login silent-failure UX — SSO pending states, redirect-URL contract, OAuth callback error banner + +### Patch Changes + +- 9f03fdd: Console (objectui) refreshed to `2f3ab55adcbd`. Frontend changes in this range: + + - Create plenty-cities-worry.md + + objectui range: `a44e7b6b28c6...2f3ab55adcbd` + ## 14.6.0 ### Minor Changes diff --git a/packages/console/package.json b/packages/console/package.json index e9b0d6a59..c1b11782a 100644 --- a/packages/console/package.json +++ b/packages/console/package.json @@ -1,6 +1,6 @@ { "name": "@objectstack/console", - "version": "14.6.0", + "version": "14.7.0", "description": "Prebuilt Console SPA pinned to this @objectstack/framework release. Source of truth: @object-ui/console (https://github.com/objectstack-ai/objectui).", "license": "Apache-2.0", "homepage": "https://github.com/objectstack-ai/framework/tree/main/packages/console", diff --git a/packages/core/CHANGELOG.md b/packages/core/CHANGELOG.md index 1d9c59532..68e0157dd 100644 --- a/packages/core/CHANGELOG.md +++ b/packages/core/CHANGELOG.md @@ -1,5 +1,12 @@ # @objectstack/core +## 14.7.0 + +### Patch Changes + +- Updated dependencies [d6a72eb] + - @objectstack/spec@14.7.0 + ## 14.6.0 ### Patch Changes diff --git a/packages/core/package.json b/packages/core/package.json index 59fc372ac..48109d95c 100644 --- a/packages/core/package.json +++ b/packages/core/package.json @@ -1,6 +1,6 @@ { "name": "@objectstack/core", - "version": "14.6.0", + "version": "14.7.0", "license": "Apache-2.0", "description": "Microkernel Core for ObjectStack", "type": "module", diff --git a/packages/create-objectstack/CHANGELOG.md b/packages/create-objectstack/CHANGELOG.md index 73adc7190..5eec78a71 100644 --- a/packages/create-objectstack/CHANGELOG.md +++ b/packages/create-objectstack/CHANGELOG.md @@ -1,5 +1,7 @@ # create-objectstack +## 14.7.0 + ## 14.6.0 ## 14.5.0 diff --git a/packages/create-objectstack/package.json b/packages/create-objectstack/package.json index 1ee8febaa..1357c22f9 100644 --- a/packages/create-objectstack/package.json +++ b/packages/create-objectstack/package.json @@ -1,6 +1,6 @@ { "name": "create-objectstack", - "version": "14.6.0", + "version": "14.7.0", "description": "Create a new ObjectStack project — npx create-objectstack", "bin": { "create-objectstack": "./bin/create-objectstack.js" diff --git a/packages/dogfood/CHANGELOG.md b/packages/dogfood/CHANGELOG.md index fa74a8453..6e377ee94 100644 --- a/packages/dogfood/CHANGELOG.md +++ b/packages/dogfood/CHANGELOG.md @@ -1,5 +1,20 @@ # @objectstack/dogfood +## 0.0.33 + +### Patch Changes + +- Updated dependencies [d6a72eb] +- Updated dependencies [da5e686] +- Updated dependencies [824a395] + - @objectstack/spec@14.7.0 + - @objectstack/plugin-auth@14.7.0 + - @objectstack/plugin-security@14.7.0 + - @objectstack/example-crm@4.0.85 + - @objectstack/example-showcase@0.3.7 + - @objectstack/objectql@14.7.0 + - @objectstack/verify@14.7.0 + ## 0.0.32 ### Patch Changes diff --git a/packages/dogfood/package.json b/packages/dogfood/package.json index e97da66f0..b495be626 100644 --- a/packages/dogfood/package.json +++ b/packages/dogfood/package.json @@ -1,6 +1,6 @@ { "name": "@objectstack/dogfood", - "version": "0.0.32", + "version": "0.0.33", "private": true, "license": "Apache-2.0", "description": "Dogfood regression gate — hand-written golden tests that boot real example apps through @objectstack/verify's in-process HTTP stack, pinning historical runtime regressions (#2018 timezone bucketing, #1994 cross-owner RLS, #2004 field fidelity) that static checks miss.", diff --git a/packages/downstream-contract/CHANGELOG.md b/packages/downstream-contract/CHANGELOG.md index 406178495..225afc7eb 100644 --- a/packages/downstream-contract/CHANGELOG.md +++ b/packages/downstream-contract/CHANGELOG.md @@ -1,5 +1,12 @@ # @objectstack/downstream-contract +## 0.0.31 + +### Patch Changes + +- Updated dependencies [d6a72eb] + - @objectstack/spec@14.7.0 + ## 0.0.30 ### Patch Changes diff --git a/packages/downstream-contract/package.json b/packages/downstream-contract/package.json index b88e36f97..a34a83b5a 100644 --- a/packages/downstream-contract/package.json +++ b/packages/downstream-contract/package.json @@ -1,6 +1,6 @@ { "name": "@objectstack/downstream-contract", - "version": "0.0.30", + "version": "0.0.31", "description": "Frozen third-party consumer fixture — a backward-compatibility gate for @objectstack/spec. Authored the way an external project on a published release authors metadata; if a spec change breaks it, that change is breaking (#2035).", "license": "Apache-2.0", "private": true, diff --git a/packages/formula/CHANGELOG.md b/packages/formula/CHANGELOG.md index 190abf0d7..7b1ae25be 100644 --- a/packages/formula/CHANGELOG.md +++ b/packages/formula/CHANGELOG.md @@ -1,5 +1,12 @@ # @objectstack/formula +## 14.7.0 + +### Patch Changes + +- Updated dependencies [d6a72eb] + - @objectstack/spec@14.7.0 + ## 14.6.0 ### Patch Changes diff --git a/packages/formula/package.json b/packages/formula/package.json index 98ee664df..aac82b893 100644 --- a/packages/formula/package.json +++ b/packages/formula/package.json @@ -1,6 +1,6 @@ { "name": "@objectstack/formula", - "version": "14.6.0", + "version": "14.7.0", "license": "Apache-2.0", "description": "ObjectStack canonical expression engine — CEL (cel-js) + ObjectStack stdlib + dialect registry", "main": "dist/index.js", diff --git a/packages/lint/CHANGELOG.md b/packages/lint/CHANGELOG.md index 9a8c48e65..5c91f48d2 100644 --- a/packages/lint/CHANGELOG.md +++ b/packages/lint/CHANGELOG.md @@ -1,5 +1,14 @@ # @objectstack/lint +## 14.7.0 + +### Patch Changes + +- Updated dependencies [d6a72eb] + - @objectstack/spec@14.7.0 + - @objectstack/formula@14.7.0 + - @objectstack/sdui-parser@14.7.0 + ## 14.6.0 ### Patch Changes diff --git a/packages/lint/package.json b/packages/lint/package.json index 62423871b..5645b0ea5 100644 --- a/packages/lint/package.json +++ b/packages/lint/package.json @@ -1,6 +1,6 @@ { "name": "@objectstack/lint", - "version": "14.6.0", + "version": "14.7.0", "license": "Apache-2.0", "description": "Static, build-time validation for an ObjectStack metadata graph — dashboard widget bindings, CEL/predicate expressions, and more. Pure (stack) => Issue[] functions shared by the CLI's `os validate` and any other consumer (e.g. AI authoring). Depends on @objectstack/spec; never on a runtime.", "type": "module", diff --git a/packages/mcp/CHANGELOG.md b/packages/mcp/CHANGELOG.md index 527893b84..3b37afd5c 100644 --- a/packages/mcp/CHANGELOG.md +++ b/packages/mcp/CHANGELOG.md @@ -1,5 +1,15 @@ # @objectstack/plugin-mcp-server +## 14.7.0 + +### Patch Changes + +- Updated dependencies [d6a72eb] +- Updated dependencies [824a395] + - @objectstack/spec@14.7.0 + - @objectstack/types@14.7.0 + - @objectstack/core@14.7.0 + ## 14.6.0 ### Patch Changes diff --git a/packages/mcp/package.json b/packages/mcp/package.json index 3326f36d0..5715e49f7 100644 --- a/packages/mcp/package.json +++ b/packages/mcp/package.json @@ -1,6 +1,6 @@ { "name": "@objectstack/mcp", - "version": "14.6.0", + "version": "14.7.0", "license": "Apache-2.0", "description": "ObjectStack as an MCP server — exposes your app's objects (and AI tools) over the Model Context Protocol (stdio + Streamable HTTP)", "type": "module", diff --git a/packages/metadata-core/CHANGELOG.md b/packages/metadata-core/CHANGELOG.md index e69eff0d3..87b3c3c27 100644 --- a/packages/metadata-core/CHANGELOG.md +++ b/packages/metadata-core/CHANGELOG.md @@ -1,5 +1,12 @@ # @objectstack/metadata-core +## 14.7.0 + +### Patch Changes + +- Updated dependencies [d6a72eb] + - @objectstack/spec@14.7.0 + ## 14.6.0 ### Patch Changes diff --git a/packages/metadata-core/package.json b/packages/metadata-core/package.json index 93cc1d6c3..da1771b4b 100644 --- a/packages/metadata-core/package.json +++ b/packages/metadata-core/package.json @@ -1,6 +1,6 @@ { "name": "@objectstack/metadata-core", - "version": "14.6.0", + "version": "14.7.0", "license": "Apache-2.0", "description": "Metadata Repository contracts: types, canonicalization, errors, interface (ADR-0008).", "type": "module", diff --git a/packages/metadata-fs/CHANGELOG.md b/packages/metadata-fs/CHANGELOG.md index 9c91a75dc..4cd5a84e5 100644 --- a/packages/metadata-fs/CHANGELOG.md +++ b/packages/metadata-fs/CHANGELOG.md @@ -1,5 +1,11 @@ # @objectstack/metadata-fs +## 14.7.0 + +### Patch Changes + +- @objectstack/metadata-core@14.7.0 + ## 14.6.0 ### Patch Changes diff --git a/packages/metadata-fs/package.json b/packages/metadata-fs/package.json index 90f2996ee..e03a840fb 100644 --- a/packages/metadata-fs/package.json +++ b/packages/metadata-fs/package.json @@ -1,6 +1,6 @@ { "name": "@objectstack/metadata-fs", - "version": "14.6.0", + "version": "14.7.0", "license": "Apache-2.0", "description": "FileSystemRepository: Node-only Repository implementation backed by JSON files and a JSONL change log (ADR-0008).", "type": "module", diff --git a/packages/metadata-protocol/CHANGELOG.md b/packages/metadata-protocol/CHANGELOG.md index ba2304087..da612afd7 100644 --- a/packages/metadata-protocol/CHANGELOG.md +++ b/packages/metadata-protocol/CHANGELOG.md @@ -1,5 +1,17 @@ # @objectstack/metadata-protocol +## 14.7.0 + +### Patch Changes + +- Updated dependencies [d6a72eb] +- Updated dependencies [824a395] + - @objectstack/spec@14.7.0 + - @objectstack/types@14.7.0 + - @objectstack/core@14.7.0 + - @objectstack/formula@14.7.0 + - @objectstack/metadata-core@14.7.0 + ## 14.6.0 ### Patch Changes diff --git a/packages/metadata-protocol/package.json b/packages/metadata-protocol/package.json index 9b8f3d355..5d3e83054 100644 --- a/packages/metadata-protocol/package.json +++ b/packages/metadata-protocol/package.json @@ -1,6 +1,6 @@ { "name": "@objectstack/metadata-protocol", - "version": "14.6.0", + "version": "14.7.0", "license": "Apache-2.0", "description": "ObjectStack metadata management protocol: sys_metadata CRUD, draft/publish, locks, package ownership, diagnostics (ADR-0076).", "type": "module", diff --git a/packages/metadata/CHANGELOG.md b/packages/metadata/CHANGELOG.md index 76e602d48..d833e6312 100644 --- a/packages/metadata/CHANGELOG.md +++ b/packages/metadata/CHANGELOG.md @@ -1,5 +1,18 @@ # @objectstack/metadata +## 14.7.0 + +### Patch Changes + +- Updated dependencies [d6a72eb] +- Updated dependencies [824a395] + - @objectstack/spec@14.7.0 + - @objectstack/types@14.7.0 + - @objectstack/core@14.7.0 + - @objectstack/metadata-core@14.7.0 + - @objectstack/platform-objects@14.7.0 + - @objectstack/metadata-fs@14.7.0 + ## 14.6.0 ### Patch Changes diff --git a/packages/metadata/package.json b/packages/metadata/package.json index 399780a86..057651729 100644 --- a/packages/metadata/package.json +++ b/packages/metadata/package.json @@ -1,6 +1,6 @@ { "name": "@objectstack/metadata", - "version": "14.6.0", + "version": "14.7.0", "license": "Apache-2.0", "description": "Metadata loading, saving, and persistence for ObjectStack", "type": "module", diff --git a/packages/objectql/CHANGELOG.md b/packages/objectql/CHANGELOG.md index 3cda70b98..5797e8a2b 100644 --- a/packages/objectql/CHANGELOG.md +++ b/packages/objectql/CHANGELOG.md @@ -1,5 +1,18 @@ # @objectstack/objectql +## 14.7.0 + +### Patch Changes + +- Updated dependencies [d6a72eb] +- Updated dependencies [824a395] + - @objectstack/spec@14.7.0 + - @objectstack/types@14.7.0 + - @objectstack/core@14.7.0 + - @objectstack/formula@14.7.0 + - @objectstack/metadata-core@14.7.0 + - @objectstack/metadata-protocol@14.7.0 + ## 14.6.0 ### Patch Changes diff --git a/packages/objectql/package.json b/packages/objectql/package.json index 339436f39..fd9db203d 100644 --- a/packages/objectql/package.json +++ b/packages/objectql/package.json @@ -1,6 +1,6 @@ { "name": "@objectstack/objectql", - "version": "14.6.0", + "version": "14.7.0", "license": "Apache-2.0", "description": "Isomorphic ObjectQL Engine for ObjectStack", "main": "dist/index.js", diff --git a/packages/observability/CHANGELOG.md b/packages/observability/CHANGELOG.md index de06254e8..066978d46 100644 --- a/packages/observability/CHANGELOG.md +++ b/packages/observability/CHANGELOG.md @@ -1,5 +1,12 @@ # @objectstack/observability +## 14.7.0 + +### Patch Changes + +- Updated dependencies [d6a72eb] + - @objectstack/spec@14.7.0 + ## 14.6.0 ### Patch Changes diff --git a/packages/observability/package.json b/packages/observability/package.json index 2575e2acb..9903b07a7 100644 --- a/packages/observability/package.json +++ b/packages/observability/package.json @@ -1,6 +1,6 @@ { "name": "@objectstack/observability", - "version": "14.6.0", + "version": "14.7.0", "license": "Apache-2.0", "description": "Observability contracts and exporters for ObjectStack — MetricsRegistry, ErrorReporter, Logger plus noop/console/OTLP-HTTP exporters. Deployment-target neutral; runtime and services depend on this so the same instrumentation works on Cloudflare Workers, Node, and self-hosted Kubernetes.", "type": "module", diff --git a/packages/platform-objects/CHANGELOG.md b/packages/platform-objects/CHANGELOG.md index a07ac9be5..517b5472e 100644 --- a/packages/platform-objects/CHANGELOG.md +++ b/packages/platform-objects/CHANGELOG.md @@ -1,5 +1,13 @@ # @objectstack/platform-objects +## 14.7.0 + +### Patch Changes + +- Updated dependencies [d6a72eb] + - @objectstack/spec@14.7.0 + - @objectstack/metadata-core@14.7.0 + ## 14.6.0 ### Patch Changes diff --git a/packages/platform-objects/package.json b/packages/platform-objects/package.json index 6db695aac..12874434f 100644 --- a/packages/platform-objects/package.json +++ b/packages/platform-objects/package.json @@ -1,6 +1,6 @@ { "name": "@objectstack/platform-objects", - "version": "14.6.0", + "version": "14.7.0", "license": "Apache-2.0", "description": "Core platform object schemas for ObjectStack — identity, security, audit, tenant, and metadata objects", "main": "dist/index.js", diff --git a/packages/plugins/driver-memory/CHANGELOG.md b/packages/plugins/driver-memory/CHANGELOG.md index c8bc4a1bb..19c89704d 100644 --- a/packages/plugins/driver-memory/CHANGELOG.md +++ b/packages/plugins/driver-memory/CHANGELOG.md @@ -1,5 +1,13 @@ # @objectstack/driver-memory +## 14.7.0 + +### Patch Changes + +- Updated dependencies [d6a72eb] + - @objectstack/spec@14.7.0 + - @objectstack/core@14.7.0 + ## 14.6.0 ### Patch Changes diff --git a/packages/plugins/driver-memory/package.json b/packages/plugins/driver-memory/package.json index 43d163d8b..0db527e62 100644 --- a/packages/plugins/driver-memory/package.json +++ b/packages/plugins/driver-memory/package.json @@ -1,6 +1,6 @@ { "name": "@objectstack/driver-memory", - "version": "14.6.0", + "version": "14.7.0", "license": "Apache-2.0", "description": "In-Memory Driver for ObjectStack (Reference Implementation)", "main": "dist/index.js", diff --git a/packages/plugins/driver-mongodb/CHANGELOG.md b/packages/plugins/driver-mongodb/CHANGELOG.md index dfd3a977a..5f6b92683 100644 --- a/packages/plugins/driver-mongodb/CHANGELOG.md +++ b/packages/plugins/driver-mongodb/CHANGELOG.md @@ -1,5 +1,13 @@ # @objectstack/driver-mongodb +## 14.7.0 + +### Patch Changes + +- Updated dependencies [d6a72eb] + - @objectstack/spec@14.7.0 + - @objectstack/core@14.7.0 + ## 14.6.0 ### Patch Changes diff --git a/packages/plugins/driver-mongodb/package.json b/packages/plugins/driver-mongodb/package.json index 81023b045..c4d2d8706 100644 --- a/packages/plugins/driver-mongodb/package.json +++ b/packages/plugins/driver-mongodb/package.json @@ -1,6 +1,6 @@ { "name": "@objectstack/driver-mongodb", - "version": "14.6.0", + "version": "14.7.0", "license": "Apache-2.0", "description": "MongoDB Driver for ObjectStack - Native document database driver via official mongodb client", "main": "dist/index.js", diff --git a/packages/plugins/driver-sql/CHANGELOG.md b/packages/plugins/driver-sql/CHANGELOG.md index 0358dfe1d..c78616a30 100644 --- a/packages/plugins/driver-sql/CHANGELOG.md +++ b/packages/plugins/driver-sql/CHANGELOG.md @@ -1,5 +1,15 @@ # @objectstack/driver-sql +## 14.7.0 + +### Patch Changes + +- Updated dependencies [d6a72eb] +- Updated dependencies [824a395] + - @objectstack/spec@14.7.0 + - @objectstack/types@14.7.0 + - @objectstack/core@14.7.0 + ## 14.6.0 ### Patch Changes diff --git a/packages/plugins/driver-sql/package.json b/packages/plugins/driver-sql/package.json index 234b1cc38..0f2d6132b 100644 --- a/packages/plugins/driver-sql/package.json +++ b/packages/plugins/driver-sql/package.json @@ -1,6 +1,6 @@ { "name": "@objectstack/driver-sql", - "version": "14.6.0", + "version": "14.7.0", "license": "Apache-2.0", "description": "SQL Driver for ObjectStack - Supports PostgreSQL, MySQL, SQLite via Knex", "main": "dist/index.js", diff --git a/packages/plugins/driver-sqlite-wasm/CHANGELOG.md b/packages/plugins/driver-sqlite-wasm/CHANGELOG.md index 47c67172f..0008fd963 100644 --- a/packages/plugins/driver-sqlite-wasm/CHANGELOG.md +++ b/packages/plugins/driver-sqlite-wasm/CHANGELOG.md @@ -1,5 +1,14 @@ # @objectstack/driver-sqlite-wasm +## 14.7.0 + +### Patch Changes + +- Updated dependencies [d6a72eb] + - @objectstack/spec@14.7.0 + - @objectstack/core@14.7.0 + - @objectstack/driver-sql@14.7.0 + ## 14.6.0 ### Patch Changes diff --git a/packages/plugins/driver-sqlite-wasm/package.json b/packages/plugins/driver-sqlite-wasm/package.json index 732e75af1..8099523c8 100644 --- a/packages/plugins/driver-sqlite-wasm/package.json +++ b/packages/plugins/driver-sqlite-wasm/package.json @@ -1,6 +1,6 @@ { "name": "@objectstack/driver-sqlite-wasm", - "version": "14.6.0", + "version": "14.7.0", "license": "Apache-2.0", "description": "WASM SQLite Driver for ObjectStack — runs in browser/WebContainer (StackBlitz) without native bindings", "keywords": [ diff --git a/packages/plugins/embedder-openai/CHANGELOG.md b/packages/plugins/embedder-openai/CHANGELOG.md index 3bdd7527b..6bade0181 100644 --- a/packages/plugins/embedder-openai/CHANGELOG.md +++ b/packages/plugins/embedder-openai/CHANGELOG.md @@ -1,5 +1,12 @@ # @objectstack/embedder-openai +## 14.7.0 + +### Patch Changes + +- Updated dependencies [d6a72eb] + - @objectstack/spec@14.7.0 + ## 14.6.0 ### Patch Changes diff --git a/packages/plugins/embedder-openai/package.json b/packages/plugins/embedder-openai/package.json index 41351bd30..ce0505185 100644 --- a/packages/plugins/embedder-openai/package.json +++ b/packages/plugins/embedder-openai/package.json @@ -1,6 +1,6 @@ { "name": "@objectstack/embedder-openai", - "version": "14.6.0", + "version": "14.7.0", "license": "Apache-2.0", "description": "OpenAI-compatible embedder for ObjectStack — works against OpenAI, 阿里通义 DashScope, 智谱 BigModel, 硅基流动 SiliconFlow, 火山引擎 Doubao, MiniMax, Ollama, and any drop-in OpenAI-shape endpoint.", "main": "dist/index.js", diff --git a/packages/plugins/knowledge-memory/CHANGELOG.md b/packages/plugins/knowledge-memory/CHANGELOG.md index 83014f744..3fd064749 100644 --- a/packages/plugins/knowledge-memory/CHANGELOG.md +++ b/packages/plugins/knowledge-memory/CHANGELOG.md @@ -1,5 +1,14 @@ # @objectstack/knowledge-memory +## 14.7.0 + +### Patch Changes + +- Updated dependencies [d6a72eb] + - @objectstack/spec@14.7.0 + - @objectstack/core@14.7.0 + - @objectstack/service-knowledge@14.7.0 + ## 14.6.0 ### Patch Changes diff --git a/packages/plugins/knowledge-memory/package.json b/packages/plugins/knowledge-memory/package.json index d1d468d09..c6ab51a90 100644 --- a/packages/plugins/knowledge-memory/package.json +++ b/packages/plugins/knowledge-memory/package.json @@ -1,6 +1,6 @@ { "name": "@objectstack/knowledge-memory", - "version": "14.6.0", + "version": "14.7.0", "license": "Apache-2.0", "description": "In-memory knowledge adapter for ObjectStack (dev / test reference implementation).", "main": "dist/index.js", diff --git a/packages/plugins/knowledge-ragflow/CHANGELOG.md b/packages/plugins/knowledge-ragflow/CHANGELOG.md index 2afa7688c..bc850200c 100644 --- a/packages/plugins/knowledge-ragflow/CHANGELOG.md +++ b/packages/plugins/knowledge-ragflow/CHANGELOG.md @@ -1,5 +1,14 @@ # @objectstack/knowledge-ragflow +## 14.7.0 + +### Patch Changes + +- Updated dependencies [d6a72eb] + - @objectstack/spec@14.7.0 + - @objectstack/core@14.7.0 + - @objectstack/service-knowledge@14.7.0 + ## 14.6.0 ### Patch Changes diff --git a/packages/plugins/knowledge-ragflow/package.json b/packages/plugins/knowledge-ragflow/package.json index 6dd51f51d..86b164974 100644 --- a/packages/plugins/knowledge-ragflow/package.json +++ b/packages/plugins/knowledge-ragflow/package.json @@ -1,6 +1,6 @@ { "name": "@objectstack/knowledge-ragflow", - "version": "14.6.0", + "version": "14.7.0", "license": "Apache-2.0", "description": "RAGFlow knowledge adapter for ObjectStack — production-grade RAG via the Apache 2.0 RAGFlow REST API.", "main": "dist/index.js", diff --git a/packages/plugins/plugin-approvals/CHANGELOG.md b/packages/plugins/plugin-approvals/CHANGELOG.md index ef6a217f5..c3ef9b6da 100644 --- a/packages/plugins/plugin-approvals/CHANGELOG.md +++ b/packages/plugins/plugin-approvals/CHANGELOG.md @@ -1,5 +1,16 @@ # @objectstack/plugin-approvals +## 14.7.0 + +### Patch Changes + +- Updated dependencies [d6a72eb] + - @objectstack/spec@14.7.0 + - @objectstack/core@14.7.0 + - @objectstack/formula@14.7.0 + - @objectstack/metadata-core@14.7.0 + - @objectstack/platform-objects@14.7.0 + ## 14.6.0 ### Patch Changes diff --git a/packages/plugins/plugin-approvals/package.json b/packages/plugins/plugin-approvals/package.json index 09218b298..d79946ba9 100644 --- a/packages/plugins/plugin-approvals/package.json +++ b/packages/plugins/plugin-approvals/package.json @@ -1,6 +1,6 @@ { "name": "@objectstack/plugin-approvals", - "version": "14.6.0", + "version": "14.7.0", "license": "Apache-2.0", "description": "Multi-step approval engine for ObjectStack — sys_approval_process + sys_approval_request + sys_approval_action + IApprovalService.", "main": "dist/index.js", diff --git a/packages/plugins/plugin-audit/CHANGELOG.md b/packages/plugins/plugin-audit/CHANGELOG.md index f39643ed2..dad47d38e 100644 --- a/packages/plugins/plugin-audit/CHANGELOG.md +++ b/packages/plugins/plugin-audit/CHANGELOG.md @@ -1,5 +1,14 @@ # @objectstack/plugin-audit +## 14.7.0 + +### Patch Changes + +- Updated dependencies [d6a72eb] + - @objectstack/spec@14.7.0 + - @objectstack/core@14.7.0 + - @objectstack/platform-objects@14.7.0 + ## 14.6.0 ### Patch Changes diff --git a/packages/plugins/plugin-audit/package.json b/packages/plugins/plugin-audit/package.json index 39a20b428..0e7b393db 100644 --- a/packages/plugins/plugin-audit/package.json +++ b/packages/plugins/plugin-audit/package.json @@ -1,6 +1,6 @@ { "name": "@objectstack/plugin-audit", - "version": "14.6.0", + "version": "14.7.0", "license": "Apache-2.0", "description": "Audit Plugin for ObjectStack — System audit log object and audit trail", "main": "dist/index.js", diff --git a/packages/plugins/plugin-auth/CHANGELOG.md b/packages/plugins/plugin-auth/CHANGELOG.md index f5600d516..f26caf8a0 100644 --- a/packages/plugins/plugin-auth/CHANGELOG.md +++ b/packages/plugins/plugin-auth/CHANGELOG.md @@ -1,5 +1,71 @@ # Changelog +## 14.7.0 + +### Minor Changes + +- 824a395: Tenancy mode as a first-class capability + a single owner for the user→membership + lifecycle (ADR-0093, Phases 1–3). + + **Tenancy service (`@objectstack/types`, `@objectstack/plugin-auth`).** plugin-auth + registers a `tenancy` service — the single source of truth for tenancy mode + (`mode`, `isolationActive`, `requested`, `degraded`, `defaultOrgId()`). It derives + `isolationActive` from the presence of the `org-scoping` service, so the + enterprise `@objectstack/organizations` package lights it up with no change. + SecurityPlugin's RLS-strip gate and `/auth/config` (`features.multiOrgEnabled`, + new `features.degradedTenancy`) now consume it instead of re-deriving the fact. + + **Fail-fast on degraded tenancy (`@objectstack/cli`, ADR-0093 D5).** + `OS_MULTI_ORG_ENABLED=true` without a working `@objectstack/organizations` now + **refuses to boot** — a deployment that requested tenant isolation must not serve + traffic without it (tenant RLS would be silently stripped). Escape hatch: + `OS_ALLOW_DEGRADED_TENANCY=1` boots in an explicitly branded degraded state + (`features.degradedTenancy`). **This may halt upgrades for deployments that were + silently degraded — intentionally; install the enterprise package or set the + escape hatch.** + + **Membership reconciler (`@objectstack/plugin-auth`, ADR-0093 D1–D3, D6).** A + single reconciler composed into better-auth's `user.create.after` hook owns the + "every new user gets a membership" invariant across all creation paths (signup, + admin create-user, import, SSO JIT). It yields to any existing membership (host + hooks win), honors a new `membershipPolicy: 'auto' | 'invite-only'` auth option + (default `auto`), and binds only to an unambiguous target org (single-org default; + multi-org binds nothing). A bounded, idempotent `kernel:ready` backfill covers + pre-existing member-less users in single-org/auto deployments + (`OS_SKIP_MEMBERSHIP_BACKFILL=1` to opt out). The endpoint-level create-user bind + from #2882 now delegates to this shared reconciler. + + New env vars: `OS_ALLOW_DEGRADED_TENANCY`, `OS_SKIP_MEMBERSHIP_BACKFILL`. New docs: + Deployment → Tenancy Modes & Membership. + +### Patch Changes + +- da5e686: fix(auth): create-user membership bind is tenancy-mode-aware; export the ADR-0093 host API + + Multi-org runtime verification (real `@objectstack/organizations` linked into a + live stack) caught a gap in the #2884 endpoint bind: it resolved its target org + via `resolveDefaultOrgId` (slug='default' first), so in a multi-org deployment — + where the bootstrap default org coexists with real tenant orgs — `/admin/create-user` + would have bound the new user into the default org, violating ADR-0093 D3 + ("the framework never guesses in multi mode"). The bind now consults the + `tenancy` service (`getTenancy` on the endpoint deps): single mode → default org, + multi mode → no bind. Verified live: multi-org create-user and sign-up both leave + the new user member-less (invites / host hooks own membership there); single-org + behavior unchanged. + + Also exports `reconcile-membership` and `tenancy-service` from the package index + as the public host API, and adds dogfood integration tests driving the REAL + better-auth pipeline: sign-up membership via the reconciler hook alone, backfill + bind + idempotency, invite-only refusal, and the yield-to-host-membership rule. + +- Updated dependencies [d6a72eb] +- Updated dependencies [824a395] + - @objectstack/spec@14.7.0 + - @objectstack/types@14.7.0 + - @objectstack/core@14.7.0 + - @objectstack/platform-objects@14.7.0 + - @objectstack/rest@14.7.0 + ## 14.6.0 ### Patch Changes diff --git a/packages/plugins/plugin-auth/package.json b/packages/plugins/plugin-auth/package.json index 280bef4ec..a923cc1fe 100644 --- a/packages/plugins/plugin-auth/package.json +++ b/packages/plugins/plugin-auth/package.json @@ -1,6 +1,6 @@ { "name": "@objectstack/plugin-auth", - "version": "14.6.0", + "version": "14.7.0", "license": "Apache-2.0", "description": "Authentication & Identity Plugin for ObjectStack", "main": "dist/index.js", diff --git a/packages/plugins/plugin-dev/CHANGELOG.md b/packages/plugins/plugin-dev/CHANGELOG.md index 727cd613b..86d2a83fa 100644 --- a/packages/plugins/plugin-dev/CHANGELOG.md +++ b/packages/plugins/plugin-dev/CHANGELOG.md @@ -1,5 +1,26 @@ # @objectstack/plugin-dev +## 14.7.0 + +### Patch Changes + +- Updated dependencies [d6a72eb] +- Updated dependencies [da5e686] +- Updated dependencies [824a395] + - @objectstack/spec@14.7.0 + - @objectstack/plugin-auth@14.7.0 + - @objectstack/types@14.7.0 + - @objectstack/plugin-security@14.7.0 + - @objectstack/account@14.7.0 + - @objectstack/setup@14.7.0 + - @objectstack/core@14.7.0 + - @objectstack/objectql@14.7.0 + - @objectstack/driver-memory@14.7.0 + - @objectstack/plugin-hono-server@14.7.0 + - @objectstack/rest@14.7.0 + - @objectstack/runtime@14.7.0 + - @objectstack/service-i18n@14.7.0 + ## 14.6.0 ### Patch Changes diff --git a/packages/plugins/plugin-dev/package.json b/packages/plugins/plugin-dev/package.json index 80a124845..94a83453c 100644 --- a/packages/plugins/plugin-dev/package.json +++ b/packages/plugins/plugin-dev/package.json @@ -1,6 +1,6 @@ { "name": "@objectstack/plugin-dev", - "version": "14.6.0", + "version": "14.7.0", "license": "Apache-2.0", "description": "Development Mode Plugin for ObjectStack — auto-enables all services with in-memory implementations", "main": "dist/index.js", diff --git a/packages/plugins/plugin-email/CHANGELOG.md b/packages/plugins/plugin-email/CHANGELOG.md index 87c64662d..c67d11325 100644 --- a/packages/plugins/plugin-email/CHANGELOG.md +++ b/packages/plugins/plugin-email/CHANGELOG.md @@ -1,5 +1,15 @@ # @objectstack/plugin-email +## 14.7.0 + +### Patch Changes + +- Updated dependencies [d6a72eb] + - @objectstack/spec@14.7.0 + - @objectstack/core@14.7.0 + - @objectstack/formula@14.7.0 + - @objectstack/platform-objects@14.7.0 + ## 14.6.0 ### Patch Changes diff --git a/packages/plugins/plugin-email/package.json b/packages/plugins/plugin-email/package.json index 8933f7ac1..04f1aa879 100644 --- a/packages/plugins/plugin-email/package.json +++ b/packages/plugins/plugin-email/package.json @@ -1,6 +1,6 @@ { "name": "@objectstack/plugin-email", - "version": "14.6.0", + "version": "14.7.0", "license": "Apache-2.0", "description": "Email service plugin for ObjectStack — IEmailService + transport-pluggable outbound delivery with sys_email persistence.", "main": "dist/index.js", diff --git a/packages/plugins/plugin-hono-server/CHANGELOG.md b/packages/plugins/plugin-hono-server/CHANGELOG.md index 98c39badf..f47dd3188 100644 --- a/packages/plugins/plugin-hono-server/CHANGELOG.md +++ b/packages/plugins/plugin-hono-server/CHANGELOG.md @@ -1,5 +1,16 @@ # @objectstack/plugin-hono-server +## 14.7.0 + +### Patch Changes + +- Updated dependencies [d6a72eb] +- Updated dependencies [824a395] + - @objectstack/spec@14.7.0 + - @objectstack/types@14.7.0 + - @objectstack/core@14.7.0 + - @objectstack/observability@14.7.0 + ## 14.6.0 ### Patch Changes diff --git a/packages/plugins/plugin-hono-server/package.json b/packages/plugins/plugin-hono-server/package.json index 78a583485..b96201341 100644 --- a/packages/plugins/plugin-hono-server/package.json +++ b/packages/plugins/plugin-hono-server/package.json @@ -1,6 +1,6 @@ { "name": "@objectstack/plugin-hono-server", - "version": "14.6.0", + "version": "14.7.0", "license": "Apache-2.0", "description": "Standard Hono Server Adapter for ObjectStack Runtime", "main": "dist/index.js", diff --git a/packages/plugins/plugin-reports/CHANGELOG.md b/packages/plugins/plugin-reports/CHANGELOG.md index f32f04088..f3df623de 100644 --- a/packages/plugins/plugin-reports/CHANGELOG.md +++ b/packages/plugins/plugin-reports/CHANGELOG.md @@ -1,5 +1,14 @@ # @objectstack/plugin-reports +## 14.7.0 + +### Patch Changes + +- Updated dependencies [d6a72eb] + - @objectstack/spec@14.7.0 + - @objectstack/core@14.7.0 + - @objectstack/platform-objects@14.7.0 + ## 14.6.0 ### Patch Changes diff --git a/packages/plugins/plugin-reports/package.json b/packages/plugins/plugin-reports/package.json index a0e6846c0..cc7ae0472 100644 --- a/packages/plugins/plugin-reports/package.json +++ b/packages/plugins/plugin-reports/package.json @@ -1,6 +1,6 @@ { "name": "@objectstack/plugin-reports", - "version": "14.6.0", + "version": "14.7.0", "license": "Apache-2.0", "description": "Saved reports + scheduled email digests for ObjectStack — sys_saved_report + sys_report_schedule + IReportService.", "main": "dist/index.js", diff --git a/packages/plugins/plugin-security/CHANGELOG.md b/packages/plugins/plugin-security/CHANGELOG.md index ccfa2cb35..3dcc41567 100644 --- a/packages/plugins/plugin-security/CHANGELOG.md +++ b/packages/plugins/plugin-security/CHANGELOG.md @@ -1,5 +1,49 @@ # @objectstack/plugin-security +## 14.7.0 + +### Patch Changes + +- 824a395: Tenancy mode as a first-class capability + a single owner for the user→membership + lifecycle (ADR-0093, Phases 1–3). + + **Tenancy service (`@objectstack/types`, `@objectstack/plugin-auth`).** plugin-auth + registers a `tenancy` service — the single source of truth for tenancy mode + (`mode`, `isolationActive`, `requested`, `degraded`, `defaultOrgId()`). It derives + `isolationActive` from the presence of the `org-scoping` service, so the + enterprise `@objectstack/organizations` package lights it up with no change. + SecurityPlugin's RLS-strip gate and `/auth/config` (`features.multiOrgEnabled`, + new `features.degradedTenancy`) now consume it instead of re-deriving the fact. + + **Fail-fast on degraded tenancy (`@objectstack/cli`, ADR-0093 D5).** + `OS_MULTI_ORG_ENABLED=true` without a working `@objectstack/organizations` now + **refuses to boot** — a deployment that requested tenant isolation must not serve + traffic without it (tenant RLS would be silently stripped). Escape hatch: + `OS_ALLOW_DEGRADED_TENANCY=1` boots in an explicitly branded degraded state + (`features.degradedTenancy`). **This may halt upgrades for deployments that were + silently degraded — intentionally; install the enterprise package or set the + escape hatch.** + + **Membership reconciler (`@objectstack/plugin-auth`, ADR-0093 D1–D3, D6).** A + single reconciler composed into better-auth's `user.create.after` hook owns the + "every new user gets a membership" invariant across all creation paths (signup, + admin create-user, import, SSO JIT). It yields to any existing membership (host + hooks win), honors a new `membershipPolicy: 'auto' | 'invite-only'` auth option + (default `auto`), and binds only to an unambiguous target org (single-org default; + multi-org binds nothing). A bounded, idempotent `kernel:ready` backfill covers + pre-existing member-less users in single-org/auto deployments + (`OS_SKIP_MEMBERSHIP_BACKFILL=1` to opt out). The endpoint-level create-user bind + from #2882 now delegates to this shared reconciler. + + New env vars: `OS_ALLOW_DEGRADED_TENANCY`, `OS_SKIP_MEMBERSHIP_BACKFILL`. New docs: + Deployment → Tenancy Modes & Membership. + +- Updated dependencies [d6a72eb] + - @objectstack/spec@14.7.0 + - @objectstack/core@14.7.0 + - @objectstack/formula@14.7.0 + - @objectstack/platform-objects@14.7.0 + ## 14.6.0 ### Patch Changes diff --git a/packages/plugins/plugin-security/package.json b/packages/plugins/plugin-security/package.json index aaf877abb..eeca4b7bd 100644 --- a/packages/plugins/plugin-security/package.json +++ b/packages/plugins/plugin-security/package.json @@ -1,6 +1,6 @@ { "name": "@objectstack/plugin-security", - "version": "14.6.0", + "version": "14.7.0", "license": "Apache-2.0", "description": "Security Plugin for ObjectStack — RBAC, RLS, and Field-Level Security Runtime", "main": "dist/index.js", diff --git a/packages/plugins/plugin-sharing/CHANGELOG.md b/packages/plugins/plugin-sharing/CHANGELOG.md index bd9532e5b..ff7178ae0 100644 --- a/packages/plugins/plugin-sharing/CHANGELOG.md +++ b/packages/plugins/plugin-sharing/CHANGELOG.md @@ -1,5 +1,40 @@ # @objectstack/plugin-sharing +## 14.7.0 + +### Minor Changes + +- d6a72eb: Field metadata gains a `widget` override (`FieldSchema.widget`) — names a + registered form component (resolved as `field:`) to render a field with, + overriding the default widget derived from `type` and degrading back to it when + unregistered. The generic object form already honored this hint (objectui + `ObjectForm`/`form.tsx` resolve `widget || type`); this promotes it to a + first-class, liveness-classified authoring property so any config object can ask + for a picker instead of a raw input. + + `sys_sharing_rule` uses it so the Setup **New Sharing Rule** form is + pick-not-type instead of asking admins to hand-enter machine data: + + - `object_name` → `object-ref` (choose a registered object by name) + - `criteria_json` → `filter-condition` (visual criteria builder scoped to the + chosen object's fields; `dependsOn: object_name`) + - `recipient_id` → `recipient-picker` (record picker whose target follows + `recipient_type`; `dependsOn: recipient_type`) + + Also removes the `queue` recipient type: it is declared-but-unenforced (the + evaluator expands no users for it), so offering it authored a silently-inert rule + (ADR-0078). i18n bundles regenerated. Requires the matching objectui widgets; the + fields degrade to their `type` renderer where those aren't loaded. + +### Patch Changes + +- Updated dependencies [d6a72eb] + - @objectstack/spec@14.7.0 + - @objectstack/core@14.7.0 + - @objectstack/formula@14.7.0 + - @objectstack/objectql@14.7.0 + - @objectstack/platform-objects@14.7.0 + ## 14.6.0 ### Patch Changes diff --git a/packages/plugins/plugin-sharing/package.json b/packages/plugins/plugin-sharing/package.json index a947b8adb..8802b9bb4 100644 --- a/packages/plugins/plugin-sharing/package.json +++ b/packages/plugins/plugin-sharing/package.json @@ -1,6 +1,6 @@ { "name": "@objectstack/plugin-sharing", - "version": "14.6.0", + "version": "14.7.0", "license": "Apache-2.0", "description": "Record-level sharing for ObjectStack — sys_record_share + middleware that enforces sharingModel + ISharingService.", "main": "dist/index.js", diff --git a/packages/plugins/plugin-webhooks/CHANGELOG.md b/packages/plugins/plugin-webhooks/CHANGELOG.md index 9848b98ab..01dfd18fd 100644 --- a/packages/plugins/plugin-webhooks/CHANGELOG.md +++ b/packages/plugins/plugin-webhooks/CHANGELOG.md @@ -1,5 +1,34 @@ # @objectstack/plugin-webhooks +## 14.7.0 + +### Minor Changes + +- f344ee1: Webhook form: pick, don't type. The `sys_webhook` create/edit form made admins + hand-type machine data in three fields; they're now proper controls (extends the + `sys_sharing_rule` pass): + + - `method` — free text → **select** (`GET`/`POST`/`PUT`/`PATCH`/`DELETE`). Option + values are lowercased by `Field.select`; the auto-enqueuer now upper-cases the + resolved method before delivery, so legacy `'POST'` rows and the new lowercase + values both normalise to a canonical HTTP method. + - `triggers` — hand-typed comma-separated string → **multi-select** + (`create`/`update`/`delete`/`undelete`/`api`). Stored as an array; the + auto-enqueuer's `parseRow` now accepts array, JSON-encoded-array-string, and + the legacy comma-separated forms, so existing subscriptions keep firing. + - `object_name` — free text → the **`object-ref`** object picker (same widget as + `sys_sharing_rule`; degrades to a text input where the widget isn't loaded). + + Backward compatible: no data migration required. Added tests covering the array + and JSON-string trigger shapes. + +### Patch Changes + +- Updated dependencies [d6a72eb] + - @objectstack/spec@14.7.0 + - @objectstack/core@14.7.0 + - @objectstack/service-messaging@14.7.0 + ## 14.6.0 ### Patch Changes diff --git a/packages/plugins/plugin-webhooks/package.json b/packages/plugins/plugin-webhooks/package.json index 32d7f66a5..9948def5e 100644 --- a/packages/plugins/plugin-webhooks/package.json +++ b/packages/plugins/plugin-webhooks/package.json @@ -1,6 +1,6 @@ { "name": "@objectstack/plugin-webhooks", - "version": "14.6.0", + "version": "14.7.0", "license": "Apache-2.0", "description": "Persistent, cluster-aware webhook dispatcher. Durable outbox + per-partition cluster.lock for exactly-once-ish delivery across nodes. See content/docs/concepts/webhook-delivery.mdx.", "type": "module", diff --git a/packages/rest/CHANGELOG.md b/packages/rest/CHANGELOG.md index adc89ffcc..74767fb73 100644 --- a/packages/rest/CHANGELOG.md +++ b/packages/rest/CHANGELOG.md @@ -1,5 +1,17 @@ # @objectstack/rest +## 14.7.0 + +### Patch Changes + +- Updated dependencies [d6a72eb] +- Updated dependencies [824a395] + - @objectstack/spec@14.7.0 + - @objectstack/types@14.7.0 + - @objectstack/core@14.7.0 + - @objectstack/platform-objects@14.7.0 + - @objectstack/service-package@14.7.0 + ## 14.6.0 ### Patch Changes diff --git a/packages/rest/package.json b/packages/rest/package.json index 02246f97f..619659531 100644 --- a/packages/rest/package.json +++ b/packages/rest/package.json @@ -1,6 +1,6 @@ { "name": "@objectstack/rest", - "version": "14.6.0", + "version": "14.7.0", "license": "Apache-2.0", "description": "ObjectStack REST API Server - automatic REST endpoint generation from protocol", "type": "module", diff --git a/packages/runtime/CHANGELOG.md b/packages/runtime/CHANGELOG.md index 9518b9e11..eab1bfda6 100644 --- a/packages/runtime/CHANGELOG.md +++ b/packages/runtime/CHANGELOG.md @@ -1,5 +1,29 @@ # @objectstack/runtime +## 14.7.0 + +### Patch Changes + +- Updated dependencies [d6a72eb] +- Updated dependencies [da5e686] +- Updated dependencies [824a395] + - @objectstack/spec@14.7.0 + - @objectstack/plugin-auth@14.7.0 + - @objectstack/types@14.7.0 + - @objectstack/plugin-security@14.7.0 + - @objectstack/core@14.7.0 + - @objectstack/formula@14.7.0 + - @objectstack/metadata@14.7.0 + - @objectstack/objectql@14.7.0 + - @objectstack/observability@14.7.0 + - @objectstack/driver-memory@14.7.0 + - @objectstack/driver-sql@14.7.0 + - @objectstack/driver-sqlite-wasm@14.7.0 + - @objectstack/rest@14.7.0 + - @objectstack/service-cluster@14.7.0 + - @objectstack/service-datasource@14.7.0 + - @objectstack/service-i18n@14.7.0 + ## 14.6.0 ### Patch Changes diff --git a/packages/runtime/package.json b/packages/runtime/package.json index e2384040c..4393be398 100644 --- a/packages/runtime/package.json +++ b/packages/runtime/package.json @@ -1,6 +1,6 @@ { "name": "@objectstack/runtime", - "version": "14.6.0", + "version": "14.7.0", "license": "Apache-2.0", "description": "ObjectStack Core Runtime & Query Engine", "type": "module", diff --git a/packages/sdui-parser/CHANGELOG.md b/packages/sdui-parser/CHANGELOG.md index 38adb5bce..fb52cbd7c 100644 --- a/packages/sdui-parser/CHANGELOG.md +++ b/packages/sdui-parser/CHANGELOG.md @@ -1,5 +1,7 @@ # @objectstack/sdui-parser +## 14.7.0 + ## 14.6.0 ## 14.5.0 diff --git a/packages/sdui-parser/package.json b/packages/sdui-parser/package.json index 6b92b6586..76dafa8c7 100644 --- a/packages/sdui-parser/package.json +++ b/packages/sdui-parser/package.json @@ -1,6 +1,6 @@ { "name": "@objectstack/sdui-parser", - "version": "14.6.0", + "version": "14.7.0", "license": "Apache-2.0", "description": "ObjectStack constrained JSX-source → SDUI SchemaNode tree compiler (parse, never execute). Isomorphic, zero React. ADR-0080.", "main": "dist/index.js", diff --git a/packages/services/service-analytics/CHANGELOG.md b/packages/services/service-analytics/CHANGELOG.md index 60a73d082..726e8094d 100644 --- a/packages/services/service-analytics/CHANGELOG.md +++ b/packages/services/service-analytics/CHANGELOG.md @@ -1,5 +1,13 @@ # Changelog — @objectstack/service-analytics +## 14.7.0 + +### Patch Changes + +- Updated dependencies [d6a72eb] + - @objectstack/spec@14.7.0 + - @objectstack/core@14.7.0 + ## 14.6.0 ### Patch Changes diff --git a/packages/services/service-analytics/package.json b/packages/services/service-analytics/package.json index 4e3ff313a..9c007bfcc 100644 --- a/packages/services/service-analytics/package.json +++ b/packages/services/service-analytics/package.json @@ -1,6 +1,6 @@ { "name": "@objectstack/service-analytics", - "version": "14.6.0", + "version": "14.7.0", "license": "Apache-2.0", "description": "Analytics Service for ObjectStack — implements IAnalyticsService with multi-driver strategy pattern (NativeSQL, ObjectQL, InMemory)", "type": "module", diff --git a/packages/services/service-automation/CHANGELOG.md b/packages/services/service-automation/CHANGELOG.md index 4fc63a7e8..0651c56b5 100644 --- a/packages/services/service-automation/CHANGELOG.md +++ b/packages/services/service-automation/CHANGELOG.md @@ -1,5 +1,14 @@ # @objectstack/service-automation +## 14.7.0 + +### Patch Changes + +- Updated dependencies [d6a72eb] + - @objectstack/spec@14.7.0 + - @objectstack/core@14.7.0 + - @objectstack/formula@14.7.0 + ## 14.6.0 ### Patch Changes diff --git a/packages/services/service-automation/package.json b/packages/services/service-automation/package.json index 1c840bf65..5e832cca8 100644 --- a/packages/services/service-automation/package.json +++ b/packages/services/service-automation/package.json @@ -1,6 +1,6 @@ { "name": "@objectstack/service-automation", - "version": "14.6.0", + "version": "14.7.0", "license": "Apache-2.0", "description": "Automation Service for ObjectStack — implements IAutomationService with plugin-based DAG flow execution engine", "type": "module", diff --git a/packages/services/service-cache/CHANGELOG.md b/packages/services/service-cache/CHANGELOG.md index c86b9a2fc..bb8eed650 100644 --- a/packages/services/service-cache/CHANGELOG.md +++ b/packages/services/service-cache/CHANGELOG.md @@ -1,5 +1,14 @@ # @objectstack/service-cache +## 14.7.0 + +### Patch Changes + +- Updated dependencies [d6a72eb] + - @objectstack/spec@14.7.0 + - @objectstack/core@14.7.0 + - @objectstack/observability@14.7.0 + ## 14.6.0 ### Patch Changes diff --git a/packages/services/service-cache/package.json b/packages/services/service-cache/package.json index ed9d037d0..cc27bc83a 100644 --- a/packages/services/service-cache/package.json +++ b/packages/services/service-cache/package.json @@ -1,6 +1,6 @@ { "name": "@objectstack/service-cache", - "version": "14.6.0", + "version": "14.7.0", "license": "Apache-2.0", "description": "Cache Service for ObjectStack — implements ICacheService with in-memory and Redis adapters", "type": "module", diff --git a/packages/services/service-cluster-redis/CHANGELOG.md b/packages/services/service-cluster-redis/CHANGELOG.md index 64ab73bf8..1c6a91b26 100644 --- a/packages/services/service-cluster-redis/CHANGELOG.md +++ b/packages/services/service-cluster-redis/CHANGELOG.md @@ -1,5 +1,13 @@ # @objectstack/service-cluster-redis +## 14.7.0 + +### Patch Changes + +- Updated dependencies [d6a72eb] + - @objectstack/spec@14.7.0 + - @objectstack/service-cluster@14.7.0 + ## 14.6.0 ### Patch Changes diff --git a/packages/services/service-cluster-redis/package.json b/packages/services/service-cluster-redis/package.json index 743c4f601..3aa2807f9 100644 --- a/packages/services/service-cluster-redis/package.json +++ b/packages/services/service-cluster-redis/package.json @@ -1,6 +1,6 @@ { "name": "@objectstack/service-cluster-redis", - "version": "14.6.0", + "version": "14.7.0", "license": "Apache-2.0", "description": "Redis cluster driver for ObjectStack — implements IPubSub/ILock/IKV/ICounter against Redis using ioredis.", "type": "module", diff --git a/packages/services/service-cluster/CHANGELOG.md b/packages/services/service-cluster/CHANGELOG.md index bf839cd95..dd7c6974f 100644 --- a/packages/services/service-cluster/CHANGELOG.md +++ b/packages/services/service-cluster/CHANGELOG.md @@ -1,5 +1,13 @@ # @objectstack/service-cluster +## 14.7.0 + +### Patch Changes + +- Updated dependencies [d6a72eb] + - @objectstack/spec@14.7.0 + - @objectstack/core@14.7.0 + ## 14.6.0 ### Patch Changes diff --git a/packages/services/service-cluster/package.json b/packages/services/service-cluster/package.json index 9ac7e0706..d013fe07b 100644 --- a/packages/services/service-cluster/package.json +++ b/packages/services/service-cluster/package.json @@ -1,6 +1,6 @@ { "name": "@objectstack/service-cluster", - "version": "14.6.0", + "version": "14.7.0", "license": "Apache-2.0", "description": "Cluster Service for ObjectStack — pluggable PubSub/Lock/KV/Counter primitives. Memory driver included; postgres/redis drivers ship separately.", "type": "module", diff --git a/packages/services/service-datasource/CHANGELOG.md b/packages/services/service-datasource/CHANGELOG.md index ca47c5e6f..505dac4c4 100644 --- a/packages/services/service-datasource/CHANGELOG.md +++ b/packages/services/service-datasource/CHANGELOG.md @@ -1,5 +1,13 @@ # @objectstack/service-external-datasource +## 14.7.0 + +### Patch Changes + +- Updated dependencies [d6a72eb] + - @objectstack/spec@14.7.0 + - @objectstack/core@14.7.0 + ## 14.6.0 ### Patch Changes diff --git a/packages/services/service-datasource/package.json b/packages/services/service-datasource/package.json index e2158146b..6511fde37 100644 --- a/packages/services/service-datasource/package.json +++ b/packages/services/service-datasource/package.json @@ -1,6 +1,6 @@ { "name": "@objectstack/service-datasource", - "version": "14.6.0", + "version": "14.7.0", "license": "Apache-2.0", "description": "The datasource service (ADR-0015): external-table federation (introspect/draft/import/validate) + runtime UI datasource lifecycle (list/test/create/update/remove + REST routes). Open-source mechanism; the tier line falls on which ICryptoProvider / driver factory a host injects.", "type": "module", diff --git a/packages/services/service-i18n/CHANGELOG.md b/packages/services/service-i18n/CHANGELOG.md index 01768c1fe..bf06c40ce 100644 --- a/packages/services/service-i18n/CHANGELOG.md +++ b/packages/services/service-i18n/CHANGELOG.md @@ -1,5 +1,13 @@ # @objectstack/service-i18n +## 14.7.0 + +### Patch Changes + +- Updated dependencies [d6a72eb] + - @objectstack/spec@14.7.0 + - @objectstack/core@14.7.0 + ## 14.6.0 ### Patch Changes diff --git a/packages/services/service-i18n/package.json b/packages/services/service-i18n/package.json index b955df288..ea5623a6f 100644 --- a/packages/services/service-i18n/package.json +++ b/packages/services/service-i18n/package.json @@ -1,6 +1,6 @@ { "name": "@objectstack/service-i18n", - "version": "14.6.0", + "version": "14.7.0", "license": "Apache-2.0", "description": "I18n Service for ObjectStack — implements II18nService with file-based locale loading", "type": "module", diff --git a/packages/services/service-job/CHANGELOG.md b/packages/services/service-job/CHANGELOG.md index 0b7d523ad..0adad71d2 100644 --- a/packages/services/service-job/CHANGELOG.md +++ b/packages/services/service-job/CHANGELOG.md @@ -1,5 +1,14 @@ # @objectstack/service-job +## 14.7.0 + +### Patch Changes + +- Updated dependencies [d6a72eb] + - @objectstack/spec@14.7.0 + - @objectstack/core@14.7.0 + - @objectstack/platform-objects@14.7.0 + ## 14.6.0 ### Patch Changes diff --git a/packages/services/service-job/package.json b/packages/services/service-job/package.json index 75d83e826..fa9fce6af 100644 --- a/packages/services/service-job/package.json +++ b/packages/services/service-job/package.json @@ -1,6 +1,6 @@ { "name": "@objectstack/service-job", - "version": "14.6.0", + "version": "14.7.0", "license": "Apache-2.0", "description": "Job Service for ObjectStack — implements IJobService with setInterval and cron scheduling", "type": "module", diff --git a/packages/services/service-knowledge/CHANGELOG.md b/packages/services/service-knowledge/CHANGELOG.md index 059bbc4f8..414723d0d 100644 --- a/packages/services/service-knowledge/CHANGELOG.md +++ b/packages/services/service-knowledge/CHANGELOG.md @@ -1,5 +1,13 @@ # @objectstack/service-knowledge +## 14.7.0 + +### Patch Changes + +- Updated dependencies [d6a72eb] + - @objectstack/spec@14.7.0 + - @objectstack/core@14.7.0 + ## 14.6.0 ### Patch Changes diff --git a/packages/services/service-knowledge/package.json b/packages/services/service-knowledge/package.json index e5caecc61..3790facbe 100644 --- a/packages/services/service-knowledge/package.json +++ b/packages/services/service-knowledge/package.json @@ -1,6 +1,6 @@ { "name": "@objectstack/service-knowledge", - "version": "14.6.0", + "version": "14.7.0", "license": "Apache-2.0", "description": "Knowledge Service for ObjectStack — orchestrator implementing IKnowledgeService over pluggable IKnowledgeAdapter backends (RAGFlow, LlamaIndex, Dify, in-memory).", "type": "module", diff --git a/packages/services/service-messaging/CHANGELOG.md b/packages/services/service-messaging/CHANGELOG.md index b6815255e..398a8e6c3 100644 --- a/packages/services/service-messaging/CHANGELOG.md +++ b/packages/services/service-messaging/CHANGELOG.md @@ -1,5 +1,13 @@ # @objectstack/service-messaging +## 14.7.0 + +### Patch Changes + +- Updated dependencies [d6a72eb] + - @objectstack/spec@14.7.0 + - @objectstack/core@14.7.0 + ## 14.6.0 ### Patch Changes diff --git a/packages/services/service-messaging/package.json b/packages/services/service-messaging/package.json index c0dfb7966..5489379ef 100644 --- a/packages/services/service-messaging/package.json +++ b/packages/services/service-messaging/package.json @@ -1,6 +1,6 @@ { "name": "@objectstack/service-messaging", - "version": "14.6.0", + "version": "14.7.0", "license": "Apache-2.0", "description": "Messaging Service for ObjectStack — outbound notification dispatch (ADR-0012). Ships the MessagingChannel registry, emit() fan-out, and the always-on inbox channel; other channels (email/webhook/push/IM) plug in.", "type": "module", diff --git a/packages/services/service-package/CHANGELOG.md b/packages/services/service-package/CHANGELOG.md index 50d29f163..3656793bd 100644 --- a/packages/services/service-package/CHANGELOG.md +++ b/packages/services/service-package/CHANGELOG.md @@ -1,5 +1,13 @@ # @objectstack/service-package +## 14.7.0 + +### Patch Changes + +- Updated dependencies [d6a72eb] + - @objectstack/spec@14.7.0 + - @objectstack/core@14.7.0 + ## 14.6.0 ### Patch Changes diff --git a/packages/services/service-package/package.json b/packages/services/service-package/package.json index dbcc74e76..00f9a589c 100644 --- a/packages/services/service-package/package.json +++ b/packages/services/service-package/package.json @@ -1,6 +1,6 @@ { "name": "@objectstack/service-package", - "version": "14.6.0", + "version": "14.7.0", "license": "Apache-2.0", "description": "Package management service for ObjectStack — publish, install, and manage packages", "type": "module", diff --git a/packages/services/service-queue/CHANGELOG.md b/packages/services/service-queue/CHANGELOG.md index f31ed005c..8a178f116 100644 --- a/packages/services/service-queue/CHANGELOG.md +++ b/packages/services/service-queue/CHANGELOG.md @@ -1,5 +1,14 @@ # @objectstack/service-queue +## 14.7.0 + +### Patch Changes + +- Updated dependencies [d6a72eb] + - @objectstack/spec@14.7.0 + - @objectstack/core@14.7.0 + - @objectstack/platform-objects@14.7.0 + ## 14.6.0 ### Patch Changes diff --git a/packages/services/service-queue/package.json b/packages/services/service-queue/package.json index 262c9ef12..9fdea047e 100644 --- a/packages/services/service-queue/package.json +++ b/packages/services/service-queue/package.json @@ -1,6 +1,6 @@ { "name": "@objectstack/service-queue", - "version": "14.6.0", + "version": "14.7.0", "license": "Apache-2.0", "description": "Queue Service for ObjectStack — implements IQueueService with in-memory and durable DB-backed (sys_job_queue) adapters", "type": "module", diff --git a/packages/services/service-realtime/CHANGELOG.md b/packages/services/service-realtime/CHANGELOG.md index f328d920a..a2e018811 100644 --- a/packages/services/service-realtime/CHANGELOG.md +++ b/packages/services/service-realtime/CHANGELOG.md @@ -1,5 +1,14 @@ # @objectstack/service-realtime +## 14.7.0 + +### Patch Changes + +- Updated dependencies [d6a72eb] + - @objectstack/spec@14.7.0 + - @objectstack/core@14.7.0 + - @objectstack/platform-objects@14.7.0 + ## 14.6.0 ### Patch Changes diff --git a/packages/services/service-realtime/package.json b/packages/services/service-realtime/package.json index e6828f858..2519d49da 100644 --- a/packages/services/service-realtime/package.json +++ b/packages/services/service-realtime/package.json @@ -1,6 +1,6 @@ { "name": "@objectstack/service-realtime", - "version": "14.6.0", + "version": "14.7.0", "license": "Apache-2.0", "description": "Realtime Service for ObjectStack — implements IRealtimeService with WebSocket and in-memory pub/sub", "type": "module", diff --git a/packages/services/service-settings/CHANGELOG.md b/packages/services/service-settings/CHANGELOG.md index a26246cdd..8f6a2bc54 100644 --- a/packages/services/service-settings/CHANGELOG.md +++ b/packages/services/service-settings/CHANGELOG.md @@ -1,5 +1,16 @@ # @objectstack/service-settings +## 14.7.0 + +### Patch Changes + +- Updated dependencies [d6a72eb] +- Updated dependencies [824a395] + - @objectstack/spec@14.7.0 + - @objectstack/types@14.7.0 + - @objectstack/core@14.7.0 + - @objectstack/platform-objects@14.7.0 + ## 14.6.0 ### Patch Changes diff --git a/packages/services/service-settings/package.json b/packages/services/service-settings/package.json index 911f46901..8ccc3f28f 100644 --- a/packages/services/service-settings/package.json +++ b/packages/services/service-settings/package.json @@ -1,6 +1,6 @@ { "name": "@objectstack/service-settings", - "version": "14.6.0", + "version": "14.7.0", "license": "Apache-2.0", "description": "Settings service for ObjectStack — manifest registry + K/V resolver (OS_* env > Tenant > User > Default) + REST routes. See ADR-0007.", "type": "module", diff --git a/packages/services/service-sms/CHANGELOG.md b/packages/services/service-sms/CHANGELOG.md index a1c71a004..06dca2c17 100644 --- a/packages/services/service-sms/CHANGELOG.md +++ b/packages/services/service-sms/CHANGELOG.md @@ -1,5 +1,13 @@ # @objectstack/service-sms +## 14.7.0 + +### Patch Changes + +- Updated dependencies [d6a72eb] + - @objectstack/spec@14.7.0 + - @objectstack/core@14.7.0 + ## 14.6.0 ### Patch Changes diff --git a/packages/services/service-sms/package.json b/packages/services/service-sms/package.json index cdbe6d57c..42de65e0d 100644 --- a/packages/services/service-sms/package.json +++ b/packages/services/service-sms/package.json @@ -1,6 +1,6 @@ { "name": "@objectstack/service-sms", - "version": "14.6.0", + "version": "14.7.0", "license": "Apache-2.0", "description": "SMS service for ObjectStack — ISmsService + transport-pluggable outbound delivery (Aliyun / Twilio / log).", "main": "dist/index.js", diff --git a/packages/services/service-storage/CHANGELOG.md b/packages/services/service-storage/CHANGELOG.md index 1924c60e1..644cfe2c0 100644 --- a/packages/services/service-storage/CHANGELOG.md +++ b/packages/services/service-storage/CHANGELOG.md @@ -1,5 +1,15 @@ # @objectstack/service-storage +## 14.7.0 + +### Patch Changes + +- Updated dependencies [d6a72eb] + - @objectstack/spec@14.7.0 + - @objectstack/core@14.7.0 + - @objectstack/observability@14.7.0 + - @objectstack/platform-objects@14.7.0 + ## 14.6.0 ### Patch Changes diff --git a/packages/services/service-storage/package.json b/packages/services/service-storage/package.json index 60a944293..3de9f466e 100644 --- a/packages/services/service-storage/package.json +++ b/packages/services/service-storage/package.json @@ -1,6 +1,6 @@ { "name": "@objectstack/service-storage", - "version": "14.6.0", + "version": "14.7.0", "license": "Apache-2.0", "description": "Storage Service for ObjectStack — implements IStorageService with local filesystem and S3 adapter skeleton", "type": "module", diff --git a/packages/spec/CHANGELOG.md b/packages/spec/CHANGELOG.md index d7664fa1e..194629985 100644 --- a/packages/spec/CHANGELOG.md +++ b/packages/spec/CHANGELOG.md @@ -1,5 +1,31 @@ # @objectstack/spec +## 14.7.0 + +### Minor Changes + +- d6a72eb: Field metadata gains a `widget` override (`FieldSchema.widget`) — names a + registered form component (resolved as `field:`) to render a field with, + overriding the default widget derived from `type` and degrading back to it when + unregistered. The generic object form already honored this hint (objectui + `ObjectForm`/`form.tsx` resolve `widget || type`); this promotes it to a + first-class, liveness-classified authoring property so any config object can ask + for a picker instead of a raw input. + + `sys_sharing_rule` uses it so the Setup **New Sharing Rule** form is + pick-not-type instead of asking admins to hand-enter machine data: + + - `object_name` → `object-ref` (choose a registered object by name) + - `criteria_json` → `filter-condition` (visual criteria builder scoped to the + chosen object's fields; `dependsOn: object_name`) + - `recipient_id` → `recipient-picker` (record picker whose target follows + `recipient_type`; `dependsOn: recipient_type`) + + Also removes the `queue` recipient type: it is declared-but-unenforced (the + evaluator expands no users for it), so offering it authored a silently-inert rule + (ADR-0078). i18n bundles regenerated. Requires the matching objectui widgets; the + fields degrade to their `type` renderer where those aren't loaded. + ## 14.6.0 ### Patch Changes diff --git a/packages/spec/package.json b/packages/spec/package.json index d3f949749..ce98dbc2b 100644 --- a/packages/spec/package.json +++ b/packages/spec/package.json @@ -1,6 +1,6 @@ { "name": "@objectstack/spec", - "version": "14.6.0", + "version": "14.7.0", "description": "ObjectStack Protocol & Specification - TypeScript Interfaces, JSON Schemas, and Convention Configurations", "license": "Apache-2.0", "main": "dist/index.js", diff --git a/packages/triggers/trigger-api/CHANGELOG.md b/packages/triggers/trigger-api/CHANGELOG.md index 26aceaece..058bb739e 100644 --- a/packages/triggers/trigger-api/CHANGELOG.md +++ b/packages/triggers/trigger-api/CHANGELOG.md @@ -1,5 +1,13 @@ # @objectstack/trigger-api +## 14.7.0 + +### Patch Changes + +- Updated dependencies [d6a72eb] + - @objectstack/spec@14.7.0 + - @objectstack/core@14.7.0 + ## 14.6.0 ### Patch Changes diff --git a/packages/triggers/trigger-api/package.json b/packages/triggers/trigger-api/package.json index 6a92b08bf..bb2b9eef8 100644 --- a/packages/triggers/trigger-api/package.json +++ b/packages/triggers/trigger-api/package.json @@ -1,6 +1,6 @@ { "name": "@objectstack/trigger-api", - "version": "14.6.0", + "version": "14.7.0", "license": "Apache-2.0", "description": "Inbound HTTP/webhook flow trigger for ObjectStack — per-flow HMAC-verified endpoints with queue-backed ingestion (ADR-0041)", "main": "dist/index.js", diff --git a/packages/triggers/trigger-record-change/CHANGELOG.md b/packages/triggers/trigger-record-change/CHANGELOG.md index 5765162ac..c60b5e4ba 100644 --- a/packages/triggers/trigger-record-change/CHANGELOG.md +++ b/packages/triggers/trigger-record-change/CHANGELOG.md @@ -1,5 +1,13 @@ # @objectstack/plugin-trigger-record-change +## 14.7.0 + +### Patch Changes + +- Updated dependencies [d6a72eb] + - @objectstack/spec@14.7.0 + - @objectstack/core@14.7.0 + ## 14.6.0 ### Patch Changes diff --git a/packages/triggers/trigger-record-change/package.json b/packages/triggers/trigger-record-change/package.json index ebfa69014..11a50d85c 100644 --- a/packages/triggers/trigger-record-change/package.json +++ b/packages/triggers/trigger-record-change/package.json @@ -1,6 +1,6 @@ { "name": "@objectstack/trigger-record-change", - "version": "14.6.0", + "version": "14.7.0", "license": "Apache-2.0", "description": "Record-change flow trigger for ObjectStack — auto-launches flows on object insert/update/delete via ObjectQL lifecycle hooks (ADR-0018)", "main": "dist/index.js", diff --git a/packages/triggers/trigger-schedule/CHANGELOG.md b/packages/triggers/trigger-schedule/CHANGELOG.md index 81043c61e..5fe519892 100644 --- a/packages/triggers/trigger-schedule/CHANGELOG.md +++ b/packages/triggers/trigger-schedule/CHANGELOG.md @@ -1,5 +1,13 @@ # @objectstack/plugin-trigger-schedule +## 14.7.0 + +### Patch Changes + +- Updated dependencies [d6a72eb] + - @objectstack/spec@14.7.0 + - @objectstack/core@14.7.0 + ## 14.6.0 ### Patch Changes diff --git a/packages/triggers/trigger-schedule/package.json b/packages/triggers/trigger-schedule/package.json index 98fb2408c..75306b5f4 100644 --- a/packages/triggers/trigger-schedule/package.json +++ b/packages/triggers/trigger-schedule/package.json @@ -1,6 +1,6 @@ { "name": "@objectstack/trigger-schedule", - "version": "14.6.0", + "version": "14.7.0", "license": "Apache-2.0", "description": "Schedule flow trigger for ObjectStack — auto-launches flows on a cron/interval/once schedule via the IJobService (ADR-0018)", "main": "dist/index.js", diff --git a/packages/types/CHANGELOG.md b/packages/types/CHANGELOG.md index 3fbf99b65..a5e6443d2 100644 --- a/packages/types/CHANGELOG.md +++ b/packages/types/CHANGELOG.md @@ -1,5 +1,48 @@ # @objectstack/types +## 14.7.0 + +### Minor Changes + +- 824a395: Tenancy mode as a first-class capability + a single owner for the user→membership + lifecycle (ADR-0093, Phases 1–3). + + **Tenancy service (`@objectstack/types`, `@objectstack/plugin-auth`).** plugin-auth + registers a `tenancy` service — the single source of truth for tenancy mode + (`mode`, `isolationActive`, `requested`, `degraded`, `defaultOrgId()`). It derives + `isolationActive` from the presence of the `org-scoping` service, so the + enterprise `@objectstack/organizations` package lights it up with no change. + SecurityPlugin's RLS-strip gate and `/auth/config` (`features.multiOrgEnabled`, + new `features.degradedTenancy`) now consume it instead of re-deriving the fact. + + **Fail-fast on degraded tenancy (`@objectstack/cli`, ADR-0093 D5).** + `OS_MULTI_ORG_ENABLED=true` without a working `@objectstack/organizations` now + **refuses to boot** — a deployment that requested tenant isolation must not serve + traffic without it (tenant RLS would be silently stripped). Escape hatch: + `OS_ALLOW_DEGRADED_TENANCY=1` boots in an explicitly branded degraded state + (`features.degradedTenancy`). **This may halt upgrades for deployments that were + silently degraded — intentionally; install the enterprise package or set the + escape hatch.** + + **Membership reconciler (`@objectstack/plugin-auth`, ADR-0093 D1–D3, D6).** A + single reconciler composed into better-auth's `user.create.after` hook owns the + "every new user gets a membership" invariant across all creation paths (signup, + admin create-user, import, SSO JIT). It yields to any existing membership (host + hooks win), honors a new `membershipPolicy: 'auto' | 'invite-only'` auth option + (default `auto`), and binds only to an unambiguous target org (single-org default; + multi-org binds nothing). A bounded, idempotent `kernel:ready` backfill covers + pre-existing member-less users in single-org/auto deployments + (`OS_SKIP_MEMBERSHIP_BACKFILL=1` to opt out). The endpoint-level create-user bind + from #2882 now delegates to this shared reconciler. + + New env vars: `OS_ALLOW_DEGRADED_TENANCY`, `OS_SKIP_MEMBERSHIP_BACKFILL`. New docs: + Deployment → Tenancy Modes & Membership. + +### Patch Changes + +- Updated dependencies [d6a72eb] + - @objectstack/spec@14.7.0 + ## 14.6.0 ### Patch Changes diff --git a/packages/types/package.json b/packages/types/package.json index bfb8a910c..9d182931c 100644 --- a/packages/types/package.json +++ b/packages/types/package.json @@ -1,6 +1,6 @@ { "name": "@objectstack/types", - "version": "14.6.0", + "version": "14.7.0", "license": "Apache-2.0", "description": "Shared interfaces describing the ObjectStack Runtime environment", "main": "dist/index.js", diff --git a/packages/verify/CHANGELOG.md b/packages/verify/CHANGELOG.md index 0f8c468a0..7ae4323f6 100644 --- a/packages/verify/CHANGELOG.md +++ b/packages/verify/CHANGELOG.md @@ -1,5 +1,27 @@ # @objectstack/verify +## 14.7.0 + +### Patch Changes + +- Updated dependencies [d6a72eb] +- Updated dependencies [da5e686] +- Updated dependencies [824a395] + - @objectstack/spec@14.7.0 + - @objectstack/plugin-sharing@14.7.0 + - @objectstack/plugin-auth@14.7.0 + - @objectstack/plugin-security@14.7.0 + - @objectstack/core@14.7.0 + - @objectstack/objectql@14.7.0 + - @objectstack/driver-sqlite-wasm@14.7.0 + - @objectstack/plugin-hono-server@14.7.0 + - @objectstack/rest@14.7.0 + - @objectstack/runtime@14.7.0 + - @objectstack/service-analytics@14.7.0 + - @objectstack/service-automation@14.7.0 + - @objectstack/service-datasource@14.7.0 + - @objectstack/service-settings@14.7.0 + ## 14.6.0 ### Patch Changes diff --git a/packages/verify/package.json b/packages/verify/package.json index 4b67dd97d..79bf67ba1 100644 --- a/packages/verify/package.json +++ b/packages/verify/package.json @@ -1,6 +1,6 @@ { "name": "@objectstack/verify", - "version": "14.6.0", + "version": "14.7.0", "license": "Apache-2.0", "description": "Boot any ObjectStack app in-process and verify it through the real HTTP stack — auto-derived CRUD round-trip fidelity plus the cross-owner RLS invariant. Catches runtime regressions that static checks miss.", "type": "module", diff --git a/packages/vscode-objectstack/CHANGELOG.md b/packages/vscode-objectstack/CHANGELOG.md index cda9b73f8..ddb9d474d 100644 --- a/packages/vscode-objectstack/CHANGELOG.md +++ b/packages/vscode-objectstack/CHANGELOG.md @@ -1,5 +1,7 @@ # objectstack-vscode +## 14.7.0 + ## 14.6.0 ## 14.5.0 diff --git a/packages/vscode-objectstack/package.json b/packages/vscode-objectstack/package.json index 82227f27e..1daed1ed3 100644 --- a/packages/vscode-objectstack/package.json +++ b/packages/vscode-objectstack/package.json @@ -2,7 +2,7 @@ "name": "objectstack-vscode", "displayName": "ObjectStack", "description": "ObjectStack Protocol — Autocomplete, validation, and inline diagnostics for .object.ts, .view.ts, and objectstack.config.ts files", - "version": "14.6.0", + "version": "14.7.0", "publisher": "objectstack", "license": "Apache-2.0", "repository": {