@ai-matrx/associations 0.9.32 → 0.10.0

package/dist/core/index.d.cts

@@ -372,9 +372,19 @@ type EntityRowResult = {
 interface CreateEntityRowArgs {
     /** The new row's human name — written to the registry `titleColumn`. */
     title: string;
-    /** Org to stamp (skipped when the token has no org column). */
+    /**
+     * The organization the new row belongs to. REQUIRED by
+     * `public.entity_row_create`: every creatable token's table carries
+     * `organization_id`, and the door refuses a row with nobody owning it.
+     */
     orgId?: string | null;
-    /** Required NOT NULL columns the registry conventions can't know about. */
+    /**
+     * 🚨 NO LONGER WRITABLE THROUGH THIS SERVICE (DOORS-ONLY-4). The door writes the
+     * name, the owner and the organization and nothing else, so a non-empty value here
+     * is REFUSED with the columns named rather than dropped on the floor. A token whose
+     * table needs more than a name is created by its own feature's create service; this
+     * generic path then only renames it.
+     */
     extraColumns?: Record<string, unknown>;
 }
 interface EntityRowsServiceApi {

package/dist/core/index.d.ts

@@ -372,9 +372,19 @@ type EntityRowResult = {
 interface CreateEntityRowArgs {
     /** The new row's human name — written to the registry `titleColumn`. */
     title: string;
-    /** Org to stamp (skipped when the token has no org column). */
+    /**
+     * The organization the new row belongs to. REQUIRED by
+     * `public.entity_row_create`: every creatable token's table carries
+     * `organization_id`, and the door refuses a row with nobody owning it.
+     */
     orgId?: string | null;
-    /** Required NOT NULL columns the registry conventions can't know about. */
+    /**
+     * 🚨 NO LONGER WRITABLE THROUGH THIS SERVICE (DOORS-ONLY-4). The door writes the
+     * name, the owner and the organization and nothing else, so a non-empty value here
+     * is REFUSED with the columns named rather than dropped on the floor. A token whose
+     * table needs more than a name is created by its own feature's create service; this
+     * generic path then only renames it.
+     */
     extraColumns?: Record<string, unknown>;
 }
 interface EntityRowsServiceApi {

package/dist/core/index.js

@@ -570,6 +570,7 @@ var ENTITY_TYPE_METADATA = {
   "mandate": { token: "mandate", schema: "mandate", table: "definition", label: "Mandate Definition (new)", baseTier: 1, isComponent: false, isModule: false, isListed: true, scopeable: true, category: null, referencePickable: false, titleColumn: null, contentRole: null, referenceCategory: null },
   "mandate_advance_batch_row": { token: "mandate_advance_batch_row", schema: "mandate", table: "advance_batch_row", label: "Pin advance batch row", baseTier: 1, isComponent: false, isModule: false, isListed: false, scopeable: true, category: null, referencePickable: false, titleColumn: null, contentRole: null, referenceCategory: null },
   "mandate_binding": { token: "mandate_binding", schema: "mandate", table: "binding", label: "Mandate Binding (new)", baseTier: 1, isComponent: false, isModule: false, isListed: true, scopeable: true, category: null, referencePickable: false, titleColumn: null, contentRole: null, referenceCategory: null },
+  "mandate_goal_clauses": { token: "mandate_goal_clauses", schema: "mandate", table: "goal_clauses", label: "Mandate Goal Clauses", baseTier: 1, isComponent: false, isModule: false, isListed: false, scopeable: true, category: null, referencePickable: false, titleColumn: null, contentRole: null, referenceCategory: null },
   "mandate_observation": { token: "mandate_observation", schema: "mandate", table: "observation", label: "Mandate Observation", baseTier: 1, isComponent: true, isModule: false, isListed: false, scopeable: true, category: null, referencePickable: false, titleColumn: null, contentRole: null, referenceCategory: null },
   "mandate_reference": { token: "mandate_reference", schema: "mandate", table: "reference", label: "Mandate Reference", baseTier: 1, isComponent: false, isModule: false, isListed: false, scopeable: true, category: null, referencePickable: false, titleColumn: null, contentRole: null, referenceCategory: null },
   "mandate_scan": { token: "mandate_scan", schema: "mandate", table: "scan", label: "Mandate Scan", baseTier: 1, isComponent: false, isModule: false, isListed: false, scopeable: true, category: null, referencePickable: false, titleColumn: null, contentRole: null, referenceCategory: null },
@@ -616,6 +617,7 @@ var ENTITY_TYPE_METADATA = {
   "notification_event_override": { token: "notification_event_override", schema: "communication", table: "notification_event_override", label: "Notification Event Override", baseTier: 1, isComponent: false, isModule: false, isListed: false, scopeable: true, category: null, referencePickable: false, titleColumn: null, contentRole: null, referenceCategory: null },
   "notification_event_type": { token: "notification_event_type", schema: "communication", table: "notification_event_type", label: "Notification Event Type", baseTier: 1, isComponent: false, isModule: false, isListed: false, scopeable: true, category: null, referencePickable: false, titleColumn: null, contentRole: null, referenceCategory: null },
   "notification_preference": { token: "notification_preference", schema: "communication", table: "notification_preference", label: "Notification Preference", baseTier: 1, isComponent: false, isModule: false, isListed: false, scopeable: true, category: null, referencePickable: false, titleColumn: null, contentRole: null, referenceCategory: null },
+  "notification_submission": { token: "notification_submission", schema: "communication", table: "notification_submission", label: "Self notification submission", baseTier: 1, isComponent: false, isModule: false, isListed: false, scopeable: true, category: null, referencePickable: false, titleColumn: null, contentRole: null, referenceCategory: null },
   "notify_outsider_door_baseline": { token: "notify_outsider_door_baseline", schema: "hr", table: "notify_outsider_door_baseline", label: "Notify Outsider Door Baseline", baseTier: 1, isComponent: false, isModule: false, isListed: false, scopeable: true, category: null, referencePickable: false, titleColumn: null, contentRole: null, referenceCategory: null },
   "oauth_handoff_claim": { token: "oauth_handoff_claim", schema: "platform", table: "_oauth_handoff_claim", label: "Oauth Handoff Claim", baseTier: 1, isComponent: false, isModule: false, isListed: false, scopeable: true, category: null, referencePickable: false, titleColumn: null, contentRole: null, referenceCategory: null },
   "opinion_clusters": { token: "opinion_clusters", schema: "legal", table: "opinion_clusters", label: "Opinion Clusters", baseTier: 1, isComponent: false, isModule: false, isListed: false, scopeable: true, category: null, referencePickable: false, titleColumn: null, contentRole: null, referenceCategory: null },
@@ -664,6 +666,7 @@ var ENTITY_TYPE_METADATA = {
   "plan_node_artifact": { token: "plan_node_artifact", schema: "plan", table: "node_artifact", label: "Plan Node Artifact", baseTier: 1, isComponent: true, isModule: false, isListed: false, scopeable: true, category: null, referencePickable: false, titleColumn: null, contentRole: null, referenceCategory: null },
   "plan_node_step": { token: "plan_node_step", schema: "plan", table: "node_step", label: "Plan Node Step", baseTier: 1, isComponent: true, isModule: false, isListed: false, scopeable: true, category: null, referencePickable: false, titleColumn: null, contentRole: null, referenceCategory: null },
   "plan_profile": { token: "plan_profile", schema: "plan", table: "profile", label: "Plan Vertical Profile", baseTier: 1, isComponent: false, isModule: false, isListed: false, scopeable: true, category: null, referencePickable: false, titleColumn: "vertical", contentRole: null, referenceCategory: null },
+  "platform_action_request": { token: "platform_action_request", schema: "platform", table: "action_request", label: "Action Request", baseTier: 1, isComponent: false, isModule: false, isListed: false, scopeable: true, category: null, referencePickable: false, titleColumn: null, contentRole: null, referenceCategory: null },
   "platform_actor_session": { token: "platform_actor_session", schema: "platform", table: "actor_session", label: "Actor session", baseTier: 1, isComponent: false, isModule: false, isListed: false, scopeable: true, category: null, referencePickable: false, titleColumn: null, contentRole: null, referenceCategory: null },
   "platform_actor_token": { token: "platform_actor_token", schema: "platform", table: "actor_token", label: "Actor token", baseTier: 1, isComponent: false, isModule: false, isListed: false, scopeable: true, category: null, referencePickable: false, titleColumn: null, contentRole: null, referenceCategory: null },
   "platform_actor_token_event": { token: "platform_actor_token_event", schema: "platform", table: "actor_token_event", label: "Actor token event", baseTier: 1, isComponent: false, isModule: false, isListed: false, scopeable: true, category: null, referencePickable: false, titleColumn: null, contentRole: null, referenceCategory: null },
@@ -1560,6 +1563,7 @@ var ENTITY_TYPE_TOKENS = [
   "mandate",
   "mandate_advance_batch_row",
   "mandate_binding",
+  "mandate_goal_clauses",
   "mandate_observation",
   "mandate_reference",
   "mandate_scan",
@@ -1606,6 +1610,7 @@ var ENTITY_TYPE_TOKENS = [
   "notification_event_override",
   "notification_event_type",
   "notification_preference",
+  "notification_submission",
   "notify_outsider_door_baseline",
   "oauth_handoff_claim",
   "opinion_clusters",
@@ -1654,6 +1659,7 @@ var ENTITY_TYPE_TOKENS = [
   "plan_node_artifact",
   "plan_node_step",
   "plan_profile",
+  "platform_action_request",
   "platform_actor_session",
   "platform_actor_token",
   "platform_actor_token_event",
@@ -3137,31 +3143,7 @@ function createTitlesService(deps, candidates) {
 
 // src/core/entityRows.ts
 function createEntityRowsService(deps, titles) {
-  const { dataSource, identity, registry, errorSink } = deps;
-  function tableFor(token, schema, table) {
-    if (schema && schema !== "public") {
-      if (!dataSource.schema) {
-        const error = `dataSource has no schema() capability \u2014 entity-row writes for "${token}" (${schema}.${table}) need a table-capable dataSource (a real supabase-js client)`;
-        errorSink({
-          code: "datasource_missing_table_capability",
-          message: `[entityRows] ${error}`,
-          context: { token, schema, table }
-        });
-        return { ok: false, error };
-      }
-      return { ok: true, query: dataSource.schema(schema).from(table) };
-    }
-    if (!dataSource.from) {
-      const error = `dataSource has no from() capability \u2014 entity-row writes for "${token}" need a table-capable dataSource (a real supabase-js client)`;
-      errorSink({
-        code: "datasource_missing_table_capability",
-        message: `[entityRows] ${error}`,
-        context: { token, schema, table }
-      });
-      return { ok: false, error };
-    }
-    return { ok: true, query: dataSource.from(table) };
-  }
+  const { dataSource, registry, errorSink } = deps;
   function requireTitleColumn(token, op) {
     const info = registry.getEntityInfo(token);
     if (!info.titleColumn) {
@@ -3173,43 +3155,68 @@ function createEntityRowsService(deps, titles) {
       });
       return { ok: false, error };
     }
-    return { ok: true, titleColumn: info.titleColumn };
+    return { ok: true };
   }
   return {
     /**
-     * Insert one row of `token`'s backing table named `title`, owned by the
-     * current user (when the table has an owner column). Returns the new
-     * row's id + title. The caller wires associations afterwards — this
-     * layer never writes edges.
+     * Create one row of `token`'s backing table named `title`, through
+     * `public.entity_row_create`. The door stamps `created_by` from `auth.uid()`,
+     * checks the caller can act in the organization, and refuses machinery tokens and
+     * tables with no organization by name. Returns the new row's id + title. The
+     * caller wires associations afterwards — this layer never writes edges.
      */
     async createEntityRow(token, args) {
       const gate = requireTitleColumn(token, "creating rows");
       if (!gate.ok) return gate;
-      const info = registry.getEntityInfo(token);
       const title = args.title.trim();
       if (!title) return { ok: false, error: "Name is required" };
+      const extras = Object.keys(args.extraColumns ?? {});
+      if (extras.length > 0) {
+        const error = `A new ${registry.getEntityInfo(token).label} cannot be created here with ${extras.join(", ")}: the shared create door writes the name, the owner and the organization and nothing else. Create it with this feature's own create service, then attach it.`;
+        errorSink({
+          code: "entity_row_extra_columns_unsupported",
+          message: `[createEntityRow] extraColumns are not writable through entity_row_create for "${token}": ${extras.join(", ")}`,
+          context: { token, extras }
+        });
+        return { ok: false, error };
+      }
+      if (!args.orgId) {
+        const error = `Name the organization this ${registry.getEntityInfo(token).label} belongs to.`;
+        errorSink({
+          code: "entity_row_missing_organization",
+          message: `[createEntityRow] no organization supplied for "${token}"; entity_row_create requires one`,
+          context: { token }
+        });
+        return { ok: false, error };
+      }
       try {
-        const userId = identity.requireUserId();
-        const table = tableFor(token, info.schema, info.table);
-        if (!table.ok) return table;
-        const row = {
-          [gate.titleColumn]: title,
-          ...info.ownerColumn ? { [info.ownerColumn]: userId } : {},
-          ...info.orgColumn && args.orgId ? { [info.orgColumn]: args.orgId } : {},
-          ...args.extraColumns ?? {}
-        };
-        const { data, error } = await table.query.insert(row).select("id").single();
+        const { data, error } = await dataSource.rpc("entity_row_create", {
+          p_token: token,
+          p_title: title,
+          p_organization_id: args.orgId
+        });
         if (error) {
           errorSink({
             code: "entity_row_insert_failed",
-            message: `[createEntityRow] insert failed for "${token}": ${error.message}`,
+            message: `[createEntityRow] entity_row_create failed for "${token}": ${error.message}`,
             context: { token, detail: error }
           });
           return { ok: false, error: error.message };
         }
-        const id = String(data.id);
-        titles.prime(token, id, title);
-        return { ok: true, data: { id, title } };
+        const row = data;
+        if (!row || typeof row.id !== "string" || !row.id) {
+          const msg = "The create door returned no record.";
+          errorSink({
+            code: "entity_row_insert_failed",
+            message: `[createEntityRow] entity_row_create returned no id for "${token}"`,
+            context: { token, detail: data }
+          });
+          return { ok: false, error: msg };
+        }
+        const id = row.id;
+        const named = typeof row.title === "string" && row.title ? row.title : title;
+        titles.prime(token, id, named);
+        return { ok: true, data: { id, title: named } };
       } catch (e) {
         const msg = e instanceof Error ? e.message : "Failed to create";
         errorSink({
@@ -3220,21 +3227,27 @@ function createEntityRowsService(deps, titles) {
         return { ok: false, error: msg };
       }
     },
-    /** Update the registry `titleColumn` of one row of `token`'s table. */
+    /**
+     * Rename one row of `token`'s table through `public.entity_row_rename`. The door
+     * decides on the one ladder — the row's author, `editor` on the row, or a platform
+     * admin — and answers "there is no such thing here" rather than telling a caller
+     * that somebody else's row exists.
+     */
     async renameEntityRow(token, id, title) {
       const gate = requireTitleColumn(token, "renaming rows");
       if (!gate.ok) return gate;
-      const info = registry.getEntityInfo(token);
       const trimmed = title.trim();
       if (!trimmed) return { ok: false, error: "Name is required" };
       try {
-        const table = tableFor(token, info.schema, info.table);
-        if (!table.ok) return table;
-        const { error } = await table.query.update({ [gate.titleColumn]: trimmed }).eq("id", id);
+        const { error } = await dataSource.rpc("entity_row_rename", {
+          p_token: token,
+          p_id: id,
+          p_title: trimmed
+        });
         if (error) {
           errorSink({
             code: "entity_row_update_failed",
-            message: `[renameEntityRow] update failed for "${token}": ${error.message}`,
+            message: `[renameEntityRow] entity_row_rename failed for "${token}": ${error.message}`,
             context: { token, id, detail: error }
           });
           return { ok: false, error: error.message };