Every read is pinned to orgId: platform-wide keys require it and org-scoped keys tolerate it.
Only the tables an adapter reads are exposed. The SDK's by-id record lookups take no org, so a
platform-wide key could resolve another org's records; only a record's attachment list and an
attachment download are exposed, and callers pass ids they read from this org's own rows.
The SDK is ESM-only and this package is consumed by CommonJS-loaded callers (the tsx scripts), so
it is loaded with a native import() on first use rather than a static import.
Every read is pinned to
orgId: platform-wide keys require it and org-scoped keys tolerate it. Only the tables an adapter reads are exposed. The SDK's by-id record lookups take no org, so a platform-wide key could resolve another org's records; only a record's attachment list and an attachment download are exposed, and callers pass ids they read from this org's own rows.The SDK is ESM-only and this package is consumed by CommonJS-loaded callers (the tsx scripts), so it is loaded with a native
import()on first use rather than a static import.