chore: version packages (rc)

Author: github-actions[bot]

.changeset/pre.json

@@ -82,10 +82,17 @@
   },
   "changesets": [
     "action-alias-conflict-warning",
+    "action-body-execution-context",
+    "action-crash-vs-rejection",
     "action-execute-target-precedence",
+    "action-governance-engine-owned",
     "action-param-inline-lookup-reference",
     "action-param-strict-unknown-keys",
+    "action-required-permissions-server-scope-docs",
     "action-undoable-liveness-corrected",
+    "actions-empty-object-segment-route",
+    "actions-failures-speak-http",
+    "actions-global-key-and-failure-status",
     "adr-0044-revise-service-owned-note",
     "adr-0104-d1-media-strict-per-deployment",
     "adr-0104-d1-value-shape-contract",
@@ -107,8 +114,17 @@
     "adr-0105-group-tenancy-phase-0-1",
     "adr-0105-group-tenancy-posture",
     "adr-0106-metadata-fls-masking",
+    "adr-0110-action-declaration-admission",
+    "adr-0110-draft-only",
+    "adr-0111-draft-only",
+    "adr-0111-share-link-reshare",
+    "adr-0111-sharing-authorization-face",
+    "adr-0111-verb-boundary-delete",
+    "adr-0112-batch-1-screaming-codes",
+    "adr-0112-error-code-vocabulary",
     "agent-knowledge-alias-and-experimental-markers",
     "agents-pd12-alias-retirement-path",
+    "agents-pd12-shim-retired",
     "aggregate-temporal-output",
     "ai-agent-authoring-and-tools-removal",
     "ai-agents-pending-actions-sdk",
@@ -123,6 +139,7 @@
     "analytics-label-read-scope",
     "analytics-objectql-read-scope",
     "analytics-order-by-display-label",
+    "analytics-query-bare-shape-entry-validation",
     "analytics-read-scope-bridge-order",
     "analytics-widget-query-options",
     "api-exposure-failopen-observability",
@@ -159,6 +176,8 @@
     "batch-dropped-fields-observability",
     "better-auth-1-7-0-rc-2-and-prod-dep-batch",
     "better-auth-team-member-count",
+    "bulk-batch-size-cap",
+    "bulk-writes-bind-to-path-object",
     "chartconfig-trim-zoom-clickaction",
     "ci-cache-tier1-optimizations",
     "ci-node-22-pin",
@@ -167,9 +186,11 @@
     "ci-test-completeness-guard",
     "cli-json-pipe-truncation-sweep",
     "client-actions-surface",
+    "client-error-envelope-normalisation",
     "client-keys-sharelinks-security",
     "client-meta-automation-descriptors",
     "client-packages-lifecycle",
+    "client-retires-parking-spot-read",
     "client-url-conformance-capstone",
     "close-approvals-and-record-shares-gaps",
     "close-sharing-rules-explain-search-gaps",
@@ -180,30 +201,44 @@
     "console-1bb77aa24514",
     "console-2cb8d78e24ad",
     "console-4a4829d0ef39",
+    "console-a136322f8723",
+    "console-c6cfdf1288b6-backfill",
+    "console-e651c936870e",
     "control-plane-guard-crossref",
     "conversion-notice-channel",
     "data-path-object-existence-gate",
+    "data-query-path-object",
     "datasource-availability-observability",
     "datasource-bound-connect-failfast",
+    "datasource-teardown-ownership",
     "date-bucket-parity-gate",
+    "datetime-canonical-utc-storage",
     "decision-outputs-surface-3447",
+    "default-datasource-adopt-seam",
     "default-datasource-declared",
     "delegable-scope-read-surface",
+    "delete-many-id-predicate",
     "department-approver-env-wide-business-unit",
     "deprecate-kernel-assignment-notifications",
     "deprecated-alias-conflict-rules",
+    "dispatcher-error-code-is-semantic",
     "dispatcher-returned-error-leak",
+    "dispatcher-validation-error-fields",
     "docs-audience-first-ia",
     "docs-fieldschema-extend-rot",
     "dogfood-gate-cancelled-not-failure",
     "dogfood-shared-boot",
+    "domain-error-passthrough",
     "driver-connect-bound-and-reconnect-correction",
     "driver-sql-logicalop-retention-note",
     "driver-sql-or-branch-and-semantics",
     "drop-dead-env-template-flag",
     "drop-dead-list-templates",
+    "drop-undeclared-actions-valve",
     "dropped-fields-bulk-graphql-client",
     "empty-group-bucket-key-null",
+    "empty-state-gate-object-surface",
+    "empty-state-semantics-gate",
     "enforce-user-level-export-axis",
     "engines-node-22",
     "export-axis-opt-in",
@@ -217,11 +252,14 @@
     "filter-context-tokens-gate",
     "filter-logic-conformance-single-source",
     "filter-tokens-runtime-resolver",
+    "find-data-wire-context",
     "fix-stale-scaffolder-changeset-refs",
     "fix-unmounted-local-file-url",
+    "flow-action-record-id-seeding",
     "flow-error-object-serialization",
     "flow-filter-collapse-and-write-path-tokens",
     "flow-lookup-expand",
+    "flow-node-config-alias-graduation",
     "flow-template-filter-position-severity",
     "flow-template-lint-and-hydrate-guards",
     "flow-template-paths-into-reference-integrity-suite",
@@ -268,7 +306,12 @@
     "marketplace-objects-bridge-metadata-service",
     "marketplace-rehydrate-seed-heal",
     "membership-grade-not-capability-channel",
+    "meta-type-gate-plural",
     "metadata-unresolvable-posture-fail-closed",
+    "migrate-occupancy-and-deferred-ddl",
+    "migrate-occupancy-file-descriptor-signal",
+    "migrate-plan-lists-datetime-convergence",
+    "modal-actions-are-client-only",
     "mongodb-single-tenant-boot-guard",
     "naming-drift-recheck",
     "nav-access-lint",
@@ -280,11 +323,13 @@
     "objectql-driver-connect-failfast",
     "objectql-strategy-daterange",
     "osv-batch-2026-07-dep-bumps",
+    "packages-envelope-suite-comment",
     "page-field-and-chart-binding-lint",
     "page-header-i18n-3589",
     "platform-objects-app-i18n-phantom-debt",
     "plugin-page-i18n-drift-guard",
     "preserveaudit-test-and-docs",
+    "preview-omits-virtual-fields",
     "previous-null-on-create-leg",
     "prose-example-gate-covers-docs",
     "prune-aspirational-config-3494",
@@ -296,6 +341,7 @@
     "prune-report-aria-performance",
     "prune-report-column-grouping-schemas",
     "prune-skill-permissions",
+    "public-book-grant",
     "purge-webhook-delivery-i18n-and-bundle-ownership-guards",
     "rbac-objects-bulk-primitive",
     "readme-fde-audience",
@@ -313,15 +359,24 @@
     "remove-dead-sdk-surface",
     "remove-enable-trash-mru",
     "remove-graphql-surface",
+    "remove-unenforced-plugin-loading-config",
     "report-chart-dataset-describe",
+    "report-order-liveness-live",
+    "report-ordering-and-time-axis-default",
+    "required-decision-outputs",
+    "rest-actions-type-dispatch",
     "rest-env-resolution-kernel-resolver-seam",
     "rest-patch-data-dropped-fields",
     "rest-route-ledger-audit-guard",
     "resume-gate-map-chain-and-reserved-vars",
     "resume-signal-chokepoint",
     "retire-default-dispatcher-routes",
+    "retire-degraded-analytics-shim",
     "retire-three-deprecated-aliases",
+    "rls-enabled-enforced-security-audit",
+    "rls-priority-removed",
     "route-audit-tranche-3-service-mounts",
+    "route-envelope-four-more-modules",
     "route-ledger-audit-guard",
     "runtime-action-execution-module",
     "runtime-actions-mcp-extraction",
@@ -333,6 +388,7 @@
     "runtime-meta-data-extraction",
     "runtime-packages-extraction",
     "runtime-share-links-extraction",
+    "sandbox-structured-error-passthrough",
     "scim-provider-key-and-sso-scim-parity",
     "scoped-invitation-placement",
     "screen-field-visible-when-on-the-wire",
@@ -342,7 +398,9 @@
     "seed-datasets-multitenant-replay-union",
     "seed-insert-replay-lint",
     "seed-loader-composite-external-id",
+    "seed-loader-dropped-reference-counter",
     "seed-loader-engine-schema-fallback",
+    "seed-loader-multi-value-lookup",
     "seed-state-machine-lint",
     "seed-summary-banner",
     "seed-summary-marketplace",
@@ -351,17 +409,22 @@
     "service-error-envelope-conformance",
     "service-storage-success-envelope",
     "sharing-access-level-full-removed",
+    "sharing-rule-criteria-required",
     "sharing-rule-recipient-reconcile",
     "sharing-rule-unknown-sort-and-stale-help",
     "showcase-action-disabled-specimen",
+    "showcase-approver-and-picker-specimens",
+    "showcase-global-action-specimen",
     "showcase-nav-affordance-specimen",
+    "spec-changes-manifest-catchup",
     "sql-driver-dialect-connect-timeout",
     "sqlite-datetime-date-bucket",
     "startup-log-noise-cleanup",
     "step2-metadata-protocol-plugin",
     "step2-prc-single-source",
     "storage-download-filename",
     "sys-view-definition-default-open",
+    "temporal-hooks-on-contract",
     "tombstone-agent-tools",
     "tool-requires-confirmation-not-enforced",
     "tool-requires-confirmation-removed",
@@ -375,7 +438,9 @@
     "user-less-run-data-ops-refused",
     "user-level-export-axis",
     "v17-dissolve-protocol-alias",
+    "v17-page-console-gap-and-nav",
     "v17-rc-anchor",
+    "v17-release-page",
     "validate-runs-build-authoring-lints",
     "verify-multitenant-requests-isolated-posture",
     "webhook-authoring-surface-bridge",

examples/app-crm/CHANGELOG.md

@@ -1,5 +1,51 @@
 # @objectstack/example-crm
 
+## 4.0.92-rc.1
+
+### Patch Changes
+
+- Updated dependencies [bc35e00]
+- Updated dependencies [6e141bc]
+- Updated dependencies [48fcf70]
+- Updated dependencies [06772eb]
+- Updated dependencies [0c90ece]
+- Updated dependencies [195ad76]
+- Updated dependencies [c2bbd97]
+- Updated dependencies [ffb003c]
+- Updated dependencies [c1dcacd]
+- Updated dependencies [ad303ed]
+- Updated dependencies [32ccb23]
+- Updated dependencies [9b6fe7c]
+- Updated dependencies [789ad63]
+- Updated dependencies [a225ef5]
+- Updated dependencies [c9d254a]
+- Updated dependencies [c8124e5]
+- Updated dependencies [c3bcb42]
+- Updated dependencies [03d26f7]
+- Updated dependencies [98e7cc7]
+- Updated dependencies [4cf7c61]
+- Updated dependencies [347f460]
+- Updated dependencies [7cb922e]
+- Updated dependencies [1d22114]
+- Updated dependencies [385c4b0]
+- Updated dependencies [a47ac06]
+- Updated dependencies [33a5ff4]
+- Updated dependencies [62f8017]
+- Updated dependencies [a831df1]
+- Updated dependencies [f752ee3]
+- Updated dependencies [cd6b9f2]
+- Updated dependencies [3ba8d77]
+- Updated dependencies [94a0bbc]
+- Updated dependencies [d6bfb3d]
+- Updated dependencies [1d5dc46]
+- Updated dependencies [627b188]
+- Updated dependencies [8d4eae7]
+- Updated dependencies [ccd9397]
+- Updated dependencies [0a2f233]
+- Updated dependencies [35accbf]
+  - @objectstack/runtime@17.0.0-rc.1
+  - @objectstack/spec@17.0.0-rc.1
+
 ## 4.0.92-rc.0
 
 ### Patch Changes

examples/app-crm/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@objectstack/example-crm",
-  "version": "4.0.92-rc.0",
+  "version": "4.0.92-rc.1",
   "description": "Minimal CRM example — a smoke-test workspace that exercises the metadata loading pipeline (objects → views → app → dashboard → hook → flow → seed). For a full-featured enterprise CRM see https://github.com/objectstack-ai/hotcrm.",
   "license": "Apache-2.0",
   "private": true,

examples/app-showcase/CHANGELOG.md

@@ -1,5 +1,95 @@
 # @objectstack/example-showcase
 
+## 0.3.14-rc.1
+
+### Patch Changes
+
+- d6bfb3d: refactor(spec)!: remove the RLS-policy `priority` key — it promised conflict resolution that cannot exist (#3896 audit)
+
+  `RowLevelSecurityPolicySchema.priority` was documented as _"Policy priority for
+  conflict resolution"_. The 2026-07-30 security-subset liveness re-verification
+  found that **nothing ever read it** — and, stronger, that nothing ever could:
+  applicable policies **OR-combine** (any match allows access, most permissive
+  wins — the schema's own describe said so), so there is never a conflict to
+  order and evaluation order cannot change an outcome. A semantically-void knob
+  on a security policy is worse than dead: an author — very often an AI
+  (ADR-0033) — reads it as a precedence lever and reasons about policy
+  interactions that do not exist.
+
+  Removed per the `tool.requiresConfirmation` (#3715) / `DynamicLoadingConfig`
+  (#3950) precedent, inside the v17 breaking window:
+
+  - **Tombstoned, not silently stripped** (`retiredKey`, #3855 pattern): an
+    authored `priority` fails `tsc` (the input type is `never`) and rejects at
+    parse with the prescription itself — _"policies OR-combine (most permissive
+    wins), so there is no conflict to order. Delete the key — policy outcomes are
+    unchanged."_
+  - **ADR-0087 D2 conversion + D3 chain step** (`permission-rls-priority-removed`):
+    `os migrate meta` deletes the key from authored sources mechanically — a pure
+    lossless delete, no semantic residue. spec-changes.json and the protocol
+    upgrade guide carry the entry.
+  - The policy factory helpers (`ownerPolicy`, `tenantPolicy`, …), the showcase
+    example's permission sets, and `content/docs/permissions/rls.mdx` no longer
+    author it; the docs table's `enabled` row now states the (since-enforced)
+    contract instead.
+  - Liveness ledger entry updated to record the removal; the tombstone and entry
+    age out ~two majors from now.
+
+  Dropping the key changes **no policy outcome anywhere** — that impossibility of
+  effect is the entire reason for the removal.
+
+- Updated dependencies [bc35e00]
+- Updated dependencies [6e141bc]
+- Updated dependencies [48fcf70]
+- Updated dependencies [06772eb]
+- Updated dependencies [0c90ece]
+- Updated dependencies [195ad76]
+- Updated dependencies [c2bbd97]
+- Updated dependencies [ffb003c]
+- Updated dependencies [c1dcacd]
+- Updated dependencies [ad303ed]
+- Updated dependencies [32ccb23]
+- Updated dependencies [9b6fe7c]
+- Updated dependencies [789ad63]
+- Updated dependencies [a225ef5]
+- Updated dependencies [c9d254a]
+- Updated dependencies [c8124e5]
+- Updated dependencies [c3bcb42]
+- Updated dependencies [03d26f7]
+- Updated dependencies [98e7cc7]
+- Updated dependencies [4cf7c61]
+- Updated dependencies [347f460]
+- Updated dependencies [7cb922e]
+- Updated dependencies [1d22114]
+- Updated dependencies [385c4b0]
+- Updated dependencies [a47ac06]
+- Updated dependencies [33a5ff4]
+- Updated dependencies [9e01213]
+- Updated dependencies [3fe0ff1]
+- Updated dependencies [62f8017]
+- Updated dependencies [a831df1]
+- Updated dependencies [f752ee3]
+- Updated dependencies [cd6b9f2]
+- Updated dependencies [3ba8d77]
+- Updated dependencies [94a0bbc]
+- Updated dependencies [d6bfb3d]
+- Updated dependencies [0931185]
+- Updated dependencies [1d5dc46]
+- Updated dependencies [627b188]
+- Updated dependencies [8d4eae7]
+- Updated dependencies [ccd9397]
+- Updated dependencies [0a2f233]
+- Updated dependencies [35accbf]
+  - @objectstack/runtime@17.0.0-rc.1
+  - @objectstack/spec@17.0.0-rc.1
+  - @objectstack/service-datasource@17.0.0-rc.1
+  - @objectstack/driver-sql@17.0.0-rc.1
+  - @objectstack/cloud-connection@17.0.0-rc.1
+  - @objectstack/connector-mcp@17.0.0-rc.1
+  - @objectstack/connector-openapi@17.0.0-rc.1
+  - @objectstack/connector-rest@17.0.0-rc.1
+  - @objectstack/connector-slack@17.0.0-rc.1
+
 ## 0.3.14-rc.0
 
 ### Patch Changes

examples/app-showcase/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@objectstack/example-showcase",
-  "version": "0.3.14-rc.0",
+  "version": "0.3.14-rc.1",
   "description": "Kitchen-sink showcase workspace — exercises every metadata type, every view type, every chart type, and the major end-to-end capability chains (security, automation, analytics). Built for demonstration, debugging, and coverage-driven verification.",
   "license": "Apache-2.0",
   "private": true,