chore: align compact agql auth context

CHANGELOG.md

@@ -14,6 +14,20 @@ This file is the authoritative user-facing release chronology. The former
 [release-notes ledger](docs/archive/2026/graphql-orm-release-notes.md) is retained
 for historical context.
 
+## 0.25.1 - 2026-08-22
+
+Companion macros crate: `graphql-orm-macros` **0.25.1**. Generated ORM and
+database behavior are unchanged.
+
+- Aligned the optional `auth-agql` bridge to `agql-auth` 0.17.1 at merged full
+  revision `b792241b7d9bb46bad81dde4534ae5b39857f614`, retaining one public auth
+  type universe for direct consumers.
+- The upstream patch omits only default-valued session-context fields during
+  serialization. Bridge projection, authorization, schema, database policy,
+  and generated resolver behavior are unchanged.
+- The companion macro version remains aligned as required by the workspace
+  release contract; its emitted code and public behavior are unchanged.
+
 ## 0.25.0 - 2026-08-22
 
 Companion macros crate: `graphql-orm-macros` **0.25.0**. Generated ORM and

Cargo.toml

@@ -27,7 +27,7 @@ license = "MIT"
 repository = "https://github.com/Dastari/graphql-orm"
 
 [workspace.dependencies]
-agql-auth = { git = "https://github.com/Dastari/agql-auth.git", rev = "82650a447f3b6875160254fa1293b3a0e305c224", version = "0.17.0" }
+agql-auth = { git = "https://github.com/Dastari/agql-auth.git", rev = "b792241b7d9bb46bad81dde4534ae5b39857f614", version = "0.17.1" }
 arc-swap = "1.7"
 async-graphql = { version = "7", features = ["dataloader", "uuid"] }
 async-graphql-parser = "7"
@@ -37,7 +37,7 @@ cynic-parser = { version = "=0.11.2", features = ["pretty"] }
 futures = "0.3"
 getrandom = "0.3"
 graphql-composition = "=0.12.2"
-graphql-orm = { path = "crates/graphql-orm", version = "0.25.0", default-features = false }
+graphql-orm = { path = "crates/graphql-orm", version = "0.25.1", default-features = false }
 graphql-orm-ai-tool-profiles = { path = "crates/graphql-orm-ai-tool-profiles", version = "0.9.0" }
 graphql-orm-backup = { path = "crates/graphql-orm-backup", version = "0.7.1", default-features = false }
 graphql-orm-operation-catalog = { path = "crates/graphql-orm-operation-catalog", version = "0.3.0" }

MIGRATION.md

@@ -13,6 +13,15 @@ supersedes: []
 `graphql-orm` is distributed from GitHub only. Use a reviewed full 40-character commit in `rev`;
 neither the runtime nor macros crate is published to crates.io.
 
+## 0.25.0 to 0.25.1: agql-auth 0.17.1 alignment
+
+Git consumers using `auth-agql` must align direct `agql-auth` dependencies to
+0.17.1 at merged revision `b792241b7d9bb46bad81dde4534ae5b39857f614`.
+Adopt aligned `graphql-orm` and `graphql-orm-macros` 0.25.1 from the same
+reviewed monorepo revision. The upstream patch makes default session-context
+serialization compact; no API, schema, migration, generated-code,
+database-policy, or stored-data change is required in this workspace.
+
 ## 0.24.0 to 0.25.0: agql-auth 0.17 alignment
 
 Git consumers using `auth-agql` must align direct `agql-auth` dependencies to

README.md

@@ -42,12 +42,12 @@ schema changes explicitly.
 
 Packages are distributed from this repository, not crates.io. Pin the reviewed
 release revision, not a moving branch or tag. The current coordinated
-`graphql-orm` version is 0.25.0. Replace the placeholder below with the final
+`graphql-orm` version is 0.25.1. Replace the placeholder below with the final
 reviewed full SHA for the release:
 
 ```toml
 [dependencies]
-graphql-orm = { git = "https://github.com/Dastari/graphql-orm.git", rev = "<reviewed-full-40-character-commit-sha>", version = "0.25.0", default-features = false, features = ["sqlite"] }
+graphql-orm = { git = "https://github.com/Dastari/graphql-orm.git", rev = "<reviewed-full-40-character-commit-sha>", version = "0.25.1", default-features = false, features = ["sqlite"] }
 ```
 
 Choose exactly the backend support needed by each service. Cargo can unify

crates/graphql-orm-ai/CHANGELOG.md

@@ -18,6 +18,19 @@ checkpoint facts. For the current workspace baseline and active gates, use the
 [implementation status](docs/implementation-status.md) and the central
 [AI production-readiness plan](../../docs/plans/active/ai-production-readiness/README.md).
 
+## [0.90.1] - 2026-08-22
+
+Persistent schema module: **0.63.0** (unchanged from 0.90.0).
+
+### Changed
+
+- Aligned the public `agql-auth` type universe to 0.17.1 at merged revision
+  `b792241b7d9bb46bad81dde4534ae5b39857f614`. Consumers using the AI prelude's
+  re-exported principal types must resolve the same full revision.
+- The upstream patch makes default session-context serialization compact. AI
+  authorization, principal rehydration, providers, persistence, GraphQL SDL,
+  backup, restore, and schema-module behavior are unchanged.
+
 ## [0.90.0] - 2026-08-22
 
 Persistent schema module: **0.63.0** (unchanged from 0.89.0).

crates/graphql-orm-ai/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "graphql-orm-ai"
-version = "0.90.0"
+version = "0.90.1"
 edition = "2024"
 authors = ["Toby Martin <toby@dastari.net>"]
 description = "Project-agnostic AI agent runtime for graphql-orm applications"

crates/graphql-orm-ai/MIGRATION.md

@@ -19,6 +19,15 @@ they describe. For the current workspace baseline and active delivery gates,
 use [implementation status](docs/implementation-status.md) and the central
 [AI production-readiness plan](../../docs/plans/active/ai-production-readiness/README.md).
 
+## 0.90.0 to 0.90.1: agql-auth 0.17.1 type-universe alignment
+
+Adopt `graphql-orm-ai` 0.90.1 from one reviewed full monorepo revision and
+align every direct `agql-auth` dependency to version 0.17.1 at merged revision
+`b792241b7d9bb46bad81dde4534ae5b39857f614`. The change is dependency-only for
+the AI crate. The schema module remains **0.63.0**; no database, data, provider,
+GraphQL SDL, protected-payload, backup, restore, or runtime migration is
+required.
+
 ## 0.89.0 to 0.90.0: agql-auth 0.17 type-universe alignment
 
 Adopt `graphql-orm-ai` 0.90.0 from one reviewed full monorepo revision and

crates/graphql-orm-ai/README.md

@@ -28,7 +28,7 @@ for AI, ORM, storage, backup, and tool-profile packages:
 
 ```toml
 [dependencies]
-graphql-orm-ai = { git = "https://github.com/Dastari/graphql-orm.git", rev = "<reviewed-full-40-character-commit-sha>", version = "0.90.0", default-features = false, features = ["sqlite"] }
+graphql-orm-ai = { git = "https://github.com/Dastari/graphql-orm.git", rev = "<reviewed-full-40-character-commit-sha>", version = "0.90.1", default-features = false, features = ["sqlite"] }
 ```
 
 Exactly one persistence backend is required: `sqlite` (default), `postgres`,

crates/graphql-orm-ai/docs/implementation-status.md

@@ -10,10 +10,10 @@ supersedes: []
 
 # Implementation Status
 
-`graphql-orm-ai` is at crate version `0.90.0` with AI schema module
-`0.63.0`. It uses workspace `graphql-orm` `0.25.0`, backend-neutral
+`graphql-orm-ai` is at crate version `0.90.1` with AI schema module
+`0.63.0`. It uses workspace `graphql-orm` `0.25.1`, backend-neutral
 `graphql-orm-ai-tool-profiles` `0.9.0`, and external `agql-auth`
-`0.17.0` at `82650a447f3b6875160254fa1293b3a0e305c224`.
+`0.17.1` at `b792241b7d9bb46bad81dde4534ae5b39857f614`.
 
 Completed stateless local-provider turns can carry a proof-bearing contained
 native-item refusal after authoritative usage settlement. Those runs close as

crates/graphql-orm-macros/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "graphql-orm-macros"
-version = "0.25.0"
+version = "0.25.1"
 edition = "2024"
 authors = ["Toby Martin"]
 description = "Procedural macros for async-graphql and ORM-backed entities, relations, and CRUD operations."

crates/graphql-orm-macros/README.md

@@ -16,13 +16,13 @@ macro/runtime versions aligned:
 
 ```toml
 [dependencies]
-graphql-orm = { git = "https://github.com/Dastari/graphql-orm.git", rev = "<reviewed-full-40-character-commit-sha>", version = "0.25.0", default-features = false, features = ["sqlite"] }
+graphql-orm = { git = "https://github.com/Dastari/graphql-orm.git", rev = "<reviewed-full-40-character-commit-sha>", version = "0.25.1", default-features = false, features = ["sqlite"] }
 ```
 
 Direct use is supported for tooling that needs the macro package:
 
 ```toml
-graphql-orm-macros = { git = "https://github.com/Dastari/graphql-orm.git", rev = "<reviewed-full-40-character-commit-sha>", version = "0.25.0", default-features = false, features = ["sqlite"] }
+graphql-orm-macros = { git = "https://github.com/Dastari/graphql-orm.git", rev = "<reviewed-full-40-character-commit-sha>", version = "0.25.1", default-features = false, features = ["sqlite"] }
 ```
 
 The direct dependency still requires a compatible `graphql-orm` runtime in the

crates/graphql-orm-router/CHANGELOG.md

@@ -10,6 +10,17 @@ supersedes: []
 
 # Changelog
 
+## 0.3.1 - 2026-08-22
+
+- Aligned the optional resource-server adapter to `agql-auth` 0.17.1 at merged
+  revision `b792241b7d9bb46bad81dde4534ae5b39857f614`.
+- The upstream patch omits default-valued session-context fields only when
+  issuing tokens. Router validation, signed role-catalogue expansion, scope
+  matching, configuration, and authorization preflight are unchanged.
+
+No router configuration, descriptor, GraphQL schema, token acceptance,
+membership, or stored-data migration is required.
+
 ## 0.3.0 - 2026-08-22
 
 - Added optional strict `authentication.roleScopeCatalogue` configuration for

crates/graphql-orm-router/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "graphql-orm-router"
-version = "0.3.0"
+version = "0.3.1"
 edition = "2024"
 rust-version = "1.90"
 description = "Federated GraphQL router for graphql-orm and project-neutral subgraphs"

crates/graphql-orm-router/MIGRATION.md

@@ -10,6 +10,14 @@ supersedes: []
 
 # graphql-orm-router migration guide
 
+## 0.3.0 to 0.3.1
+
+Align direct `agql-auth` consumers to 0.17.1 at reviewed full revision
+`b792241b7d9bb46bad81dde4534ae5b39857f614` and rebuild the router from the
+same reviewed monorepo revision. Existing configuration, catalogue expansion,
+scope matching, and accepted token semantics are unchanged. No descriptor,
+GraphQL schema, stored-data, or router configuration migration is required.
+
 ## 0.2.0 to 0.3.0
 
 Align direct `agql-auth` consumers to 0.17.0 at the reviewed full revision.

crates/graphql-orm-router/README.md

@@ -26,7 +26,7 @@ This unpublished package is Git-only:
 
 ```toml
 [dependencies]
-graphql-orm-router = { git = "https://github.com/Dastari/graphql-orm.git", rev = "<reviewed-full-40-character-commit-sha>", version = "0.3.0" }
+graphql-orm-router = { git = "https://github.com/Dastari/graphql-orm.git", rev = "<reviewed-full-40-character-commit-sha>", version = "0.3.1" }
 ```
 
 Enable `auth-agql` only when adapting a separately configured

crates/graphql-orm/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "graphql-orm"
-version = "0.25.0"
+version = "0.25.1"
 edition = "2024"
 description = "Runtime support crate for graphql-orm-macros"
 license = "MIT"
@@ -65,7 +65,7 @@ futures = "0.3"
 geo = { version = "0.33", optional = true, default-features = false }
 geo-types = { version = "0.7", optional = true }
 geojson = { version = "1", optional = true, default-features = true }
-graphql-orm-macros = { path = "../graphql-orm-macros", version = "0.25.0", default-features = false }
+graphql-orm-macros = { path = "../graphql-orm-macros", version = "0.25.1", default-features = false }
 graphql-orm-operation-catalog = { workspace = true }
 rust_decimal = { workspace = true }
 serde = { version = "1", features = ["derive"] }

crates/graphql-orm/README.md

@@ -29,7 +29,7 @@ backend:
 
 ```toml
 [dependencies]
-graphql-orm = { git = "https://github.com/Dastari/graphql-orm.git", rev = "<reviewed-full-40-character-commit-sha>", version = "0.25.0", default-features = false, features = ["sqlite"] }
+graphql-orm = { git = "https://github.com/Dastari/graphql-orm.git", rev = "<reviewed-full-40-character-commit-sha>", version = "0.25.1", default-features = false, features = ["sqlite"] }
 ```
 
 This unpublished package has no docs.rs release. Use this Git README and the

crates/graphql-orm/tests/backend_coexistence_fixture.rs

@@ -66,13 +66,13 @@ fn assert_direct_host_dependency_resolves_one_exact_agql_auth_universe() {
         .filter(|package| package["name"] == "agql-auth")
         .collect::<Vec<_>>();
     assert_eq!(agql_auth.len(), 1, "resolved metadata:\n{metadata}");
-    assert_eq!(agql_auth[0]["version"], "0.17.0");
+    assert_eq!(agql_auth[0]["version"], "0.17.1");
     let source = agql_auth[0]["source"]
         .as_str()
         .expect("agql-auth source must be present");
     assert!(
-        source.contains("rev=82650a447f3b6875160254fa1293b3a0e305c224")
-            && source.ends_with("#82650a447f3b6875160254fa1293b3a0e305c224"),
+        source.contains("rev=b792241b7d9bb46bad81dde4534ae5b39857f614")
+            && source.ends_with("#b792241b7d9bb46bad81dde4534ae5b39857f614"),
         "unexpected agql-auth source: {source}",
     );
 }

crates/graphql-orm/tests/fixtures/backend-coexistence/auth-service/Cargo.toml

@@ -4,7 +4,7 @@ version = "0.1.0"
 edition = "2024"
 
 [dependencies]
-agql-auth = { git = "https://github.com/Dastari/agql-auth.git", rev = "82650a447f3b6875160254fa1293b3a0e305c224", version = "0.17.0" }
+agql-auth = { git = "https://github.com/Dastari/agql-auth.git", rev = "b792241b7d9bb46bad81dde4534ae5b39857f614", version = "0.17.1" }
 async-graphql = { version = "7", features = ["dataloader", "uuid"] }
 graphql-orm = { path = "../../../../", default-features = false, features = [
   "sqlite",

docs/reference/graphql-orm/agql-auth-bridge.md

@@ -16,7 +16,7 @@ supersedes: []
 ## Dependency
 
 ```toml
-graphql-orm = { git = "https://github.com/Dastari/graphql-orm.git", rev = "<reviewed-full-40-character-commit-sha>", version = "0.25.0", features = ["sqlite", "auth-agql"] }
+graphql-orm = { git = "https://github.com/Dastari/graphql-orm.git", rev = "<reviewed-full-40-character-commit-sha>", version = "0.25.1", features = ["sqlite", "auth-agql"] }
 # Host applications may depend on agql-auth directly as well. The optional
 # graphql-orm auth-agql feature pins the exact upstream release:
 # git = "https://github.com/Dastari/agql-auth.git"

docs/reference/graphql-orm/backends.md

@@ -17,7 +17,7 @@ database schema. Schema ownership and migration behavior are controlled by runti
 ## Features
 
 ```toml
-graphql-orm = { git = "https://github.com/Dastari/graphql-orm.git", rev = "<reviewed-full-40-character-commit-sha>", version = "0.25.0", default-features = false, features = ["sqlite"] }
+graphql-orm = { git = "https://github.com/Dastari/graphql-orm.git", rev = "<reviewed-full-40-character-commit-sha>", version = "0.25.1", default-features = false, features = ["sqlite"] }
 ```
 
 Available backend features:

docs/reference/graphql-orm/mssql.md

@@ -23,7 +23,7 @@ not provide an MSSQL driver.
 For a service that only uses SQL Server, select the `mssql` backend feature:
 
 ```toml
-graphql-orm = { git = "https://github.com/Dastari/graphql-orm.git", rev = "<reviewed-full-40-character-commit-sha>", version = "0.25.0", default-features = false, features = ["mssql"] }
+graphql-orm = { git = "https://github.com/Dastari/graphql-orm.git", rev = "<reviewed-full-40-character-commit-sha>", version = "0.25.1", default-features = false, features = ["mssql"] }
 ```
 
 When exactly one of `sqlite`, `postgres`, or `mssql` is enabled, the legacy implicit backend remains

docs/reference/workspace-packages.md

@@ -18,19 +18,19 @@ changes.
 
 | Package | Version | Path | Default features | Direct internal dependencies |
 | --- | --- | --- | --- | --- |
-| `graphql-orm` | `0.25.0` | `crates/graphql-orm` | `sqlite` | `graphql-orm-macros`, `graphql-orm-operation-catalog`, `graphql-orm-router-protocol` (dev-only) |
-| `graphql-orm-ai` | `0.90.0` | `crates/graphql-orm-ai` | `sqlite` | `graphql-orm`, `graphql-orm-ai-tool-profiles`, `graphql-orm-storage` |
+| `graphql-orm` | `0.25.1` | `crates/graphql-orm` | `sqlite` | `graphql-orm-macros`, `graphql-orm-operation-catalog`, `graphql-orm-router-protocol` (dev-only) |
+| `graphql-orm-ai` | `0.90.1` | `crates/graphql-orm-ai` | `sqlite` | `graphql-orm`, `graphql-orm-ai-tool-profiles`, `graphql-orm-storage` |
 | `graphql-orm-ai-tool-profiles` | `0.9.0` | `crates/graphql-orm-ai-tool-profiles` | none | `graphql-orm-operation-catalog`, `graphql-orm-router-protocol` (dev-only) |
 | `graphql-orm-backup` | `0.7.1` | `crates/graphql-orm-backup` | `local` | `graphql-orm` (optional), `graphql-orm-storage` |
-| `graphql-orm-macros` | `0.25.0` | `crates/graphql-orm-macros` | `sqlite` | none |
+| `graphql-orm-macros` | `0.25.1` | `crates/graphql-orm-macros` | `sqlite` | none |
 | `graphql-orm-operation-catalog` | `0.3.0` | `crates/graphql-orm-operation-catalog` | none | `graphql-orm-router-protocol` (optional) |
-| `graphql-orm-router` | `0.3.0` | `crates/graphql-orm-router` | none | `graphql-orm-router-protocol` |
+| `graphql-orm-router` | `0.3.1` | `crates/graphql-orm-router` | none | `graphql-orm-router-protocol` |
 | `graphql-orm-router-protocol` | `0.2.1` | `crates/graphql-orm-router-protocol` | none | none |
 | `graphql-orm-storage` | `0.6.1` | `crates/graphql-orm-storage` | `local` | none |
 
 External exact-revision dependency:
 
-- `agql-auth` requirement `^0.17.0`, source `git+https://github.com/Dastari/agql-auth.git?rev=82650a447f3b6875160254fa1293b3a0e305c224`, consumed by `graphql-orm`, `graphql-orm-ai`, `graphql-orm-router`.
+- `agql-auth` requirement `^0.17.1`, source `git+https://github.com/Dastari/agql-auth.git?rev=b792241b7d9bb46bad81dde4534ae5b39857f614`, consumed by `graphql-orm`, `graphql-orm-ai`, `graphql-orm-router`.
 
 <!-- END GENERATED WORKSPACE PACKAGES -->